@aws-sdk/client-auditmanager 3.350.0 → 3.353.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +8 -0
- package/dist-cjs/AuditManager.js +2 -0
- package/dist-cjs/commands/GetEvidenceFileUploadUrlCommand.js +46 -0
- package/dist-cjs/commands/index.js +1 -0
- package/dist-cjs/models/models_0.js +20 -14
- package/dist-cjs/protocols/Aws_restJson1.js +71 -3
- package/dist-es/AuditManager.js +2 -0
- package/dist-es/commands/GetEvidenceFileUploadUrlCommand.js +42 -0
- package/dist-es/commands/index.js +1 -0
- package/dist-es/models/models_0.js +18 -12
- package/dist-es/protocols/Aws_restJson1.js +66 -0
- package/dist-types/AuditManager.d.ts +7 -0
- package/dist-types/AuditManagerClient.d.ts +3 -2
- package/dist-types/commands/BatchImportEvidenceToAssessmentControlCommand.d.ts +18 -7
- package/dist-types/commands/CreateAssessmentFrameworkCommand.d.ts +1 -1
- package/dist-types/commands/CreateControlCommand.d.ts +2 -2
- package/dist-types/commands/DeleteControlCommand.d.ts +6 -0
- package/dist-types/commands/GetAccountStatusCommand.d.ts +1 -1
- package/dist-types/commands/GetAssessmentCommand.d.ts +1 -1
- package/dist-types/commands/GetAssessmentFrameworkCommand.d.ts +2 -2
- package/dist-types/commands/GetAssessmentReportUrlCommand.d.ts +1 -1
- package/dist-types/commands/GetChangeLogsCommand.d.ts +1 -1
- package/dist-types/commands/GetControlCommand.d.ts +2 -2
- package/dist-types/commands/GetDelegationsCommand.d.ts +1 -1
- package/dist-types/commands/GetEvidenceByEvidenceFolderCommand.d.ts +1 -1
- package/dist-types/commands/GetEvidenceCommand.d.ts +1 -1
- package/dist-types/commands/GetEvidenceFileUploadUrlCommand.d.ts +105 -0
- package/dist-types/commands/GetEvidenceFolderCommand.d.ts +1 -2
- package/dist-types/commands/GetEvidenceFoldersByAssessmentCommand.d.ts +1 -2
- package/dist-types/commands/GetEvidenceFoldersByAssessmentControlCommand.d.ts +1 -1
- package/dist-types/commands/GetOrganizationAdminAccountCommand.d.ts +1 -1
- package/dist-types/commands/GetServicesInScopeCommand.d.ts +2 -2
- package/dist-types/commands/GetSettingsCommand.d.ts +6 -2
- package/dist-types/commands/UpdateAssessmentFrameworkCommand.d.ts +1 -1
- package/dist-types/commands/UpdateControlCommand.d.ts +2 -2
- package/dist-types/commands/UpdateSettingsCommand.d.ts +8 -0
- package/dist-types/commands/index.d.ts +1 -0
- package/dist-types/models/models_0.d.ts +206 -45
- package/dist-types/protocols/Aws_restJson1.d.ts +9 -0
- package/dist-types/ts3.4/AuditManager.d.ts +17 -0
- package/dist-types/ts3.4/AuditManagerClient.d.ts +6 -0
- package/dist-types/ts3.4/commands/GetEvidenceFileUploadUrlCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/index.d.ts +1 -0
- package/dist-types/ts3.4/models/models_0.d.ts +30 -7
- package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +12 -0
- package/package.json +13 -13
|
@@ -379,7 +379,7 @@ export interface AssessmentReportsDestination {
|
|
|
379
379
|
*/
|
|
380
380
|
destinationType?: AssessmentReportDestinationType | string;
|
|
381
381
|
/**
|
|
382
|
-
* <p> The destination
|
|
382
|
+
* <p> The destination bucket where Audit Manager stores assessment reports. </p>
|
|
383
383
|
*/
|
|
384
384
|
destination?: string;
|
|
385
385
|
}
|
|
@@ -1190,13 +1190,26 @@ export interface BatchDisassociateAssessmentReportEvidenceResponse {
|
|
|
1190
1190
|
}
|
|
1191
1191
|
/**
|
|
1192
1192
|
* @public
|
|
1193
|
-
* <p> Evidence that's
|
|
1193
|
+
* <p> Evidence that's manually added to a control in Audit Manager.
|
|
1194
|
+
* <code>manualEvidence</code> can be one of the following: <code>evidenceFileName</code>,
|
|
1195
|
+
* <code>s3ResourcePath</code>, or <code>textResponse</code>.</p>
|
|
1194
1196
|
*/
|
|
1195
1197
|
export interface ManualEvidence {
|
|
1196
1198
|
/**
|
|
1197
|
-
* <p>
|
|
1199
|
+
* <p>The S3 URL of the object that's imported as manual evidence. </p>
|
|
1198
1200
|
*/
|
|
1199
1201
|
s3ResourcePath?: string;
|
|
1202
|
+
/**
|
|
1203
|
+
* <p>The plain text response that's entered and saved as manual evidence.</p>
|
|
1204
|
+
*/
|
|
1205
|
+
textResponse?: string;
|
|
1206
|
+
/**
|
|
1207
|
+
* <p>The name of the file that's uploaded as manual evidence. This name is populated using
|
|
1208
|
+
* the <code>evidenceFileName</code> value from the <a href="https://docs.aws.amazon.com/audit-manager/latest/APIReference/API_GetEvidenceFileUploadUrl.html">
|
|
1209
|
+
* <code>GetEvidenceFileUploadUrl</code>
|
|
1210
|
+
* </a> API response.</p>
|
|
1211
|
+
*/
|
|
1212
|
+
evidenceFileName?: string;
|
|
1200
1213
|
}
|
|
1201
1214
|
/**
|
|
1202
1215
|
* @public
|
|
@@ -1250,6 +1263,18 @@ export interface BatchImportEvidenceToAssessmentControlResponse {
|
|
|
1250
1263
|
*/
|
|
1251
1264
|
errors?: BatchImportEvidenceToAssessmentControlError[];
|
|
1252
1265
|
}
|
|
1266
|
+
/**
|
|
1267
|
+
* @public
|
|
1268
|
+
* <p>The request was denied due to request throttling.</p>
|
|
1269
|
+
*/
|
|
1270
|
+
export declare class ThrottlingException extends __BaseException {
|
|
1271
|
+
readonly name: "ThrottlingException";
|
|
1272
|
+
readonly $fault: "client";
|
|
1273
|
+
/**
|
|
1274
|
+
* @internal
|
|
1275
|
+
*/
|
|
1276
|
+
constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
|
|
1277
|
+
}
|
|
1253
1278
|
/**
|
|
1254
1279
|
* @public
|
|
1255
1280
|
*/
|
|
@@ -1380,7 +1405,9 @@ export type SourceFrequency = (typeof SourceFrequency)[keyof typeof SourceFreque
|
|
|
1380
1405
|
* @enum
|
|
1381
1406
|
*/
|
|
1382
1407
|
export declare const KeywordInputType: {
|
|
1408
|
+
readonly INPUT_TEXT: "INPUT_TEXT";
|
|
1383
1409
|
readonly SELECT_FROM_LIST: "SELECT_FROM_LIST";
|
|
1410
|
+
readonly UPLOAD_FILE: "UPLOAD_FILE";
|
|
1384
1411
|
};
|
|
1385
1412
|
/**
|
|
1386
1413
|
* @public
|
|
@@ -1388,20 +1415,23 @@ export declare const KeywordInputType: {
|
|
|
1388
1415
|
export type KeywordInputType = (typeof KeywordInputType)[keyof typeof KeywordInputType];
|
|
1389
1416
|
/**
|
|
1390
1417
|
* @public
|
|
1391
|
-
* <p>
|
|
1392
|
-
*
|
|
1418
|
+
* <p>A keyword that relates to the control data source.</p>
|
|
1419
|
+
* <p>For manual evidence, this keyword indicates if the manual evidence is a file or
|
|
1420
|
+
* text.</p>
|
|
1421
|
+
* <p>For automated evidence, this keyword identifies a specific CloudTrail event,
|
|
1422
|
+
* Config rule, Security Hub control, or Amazon Web Services API name. </p>
|
|
1393
1423
|
* <p> To learn more about the supported keywords that you can use when mapping a control data
|
|
1394
1424
|
* source, see the following pages in the <i>Audit Manager User
|
|
1395
1425
|
* Guide</i>:</p>
|
|
1396
1426
|
* <ul>
|
|
1397
1427
|
* <li>
|
|
1398
1428
|
* <p>
|
|
1399
|
-
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-
|
|
1429
|
+
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-config.html">Config rules supported by Audit Manager</a>
|
|
1400
1430
|
* </p>
|
|
1401
1431
|
* </li>
|
|
1402
1432
|
* <li>
|
|
1403
1433
|
* <p>
|
|
1404
|
-
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-
|
|
1434
|
+
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-ash.html">Security Hub controls supported by Audit Manager</a>
|
|
1405
1435
|
* </p>
|
|
1406
1436
|
* </li>
|
|
1407
1437
|
* <li>
|
|
@@ -1420,6 +1450,35 @@ export type KeywordInputType = (typeof KeywordInputType)[keyof typeof KeywordInp
|
|
|
1420
1450
|
export interface SourceKeyword {
|
|
1421
1451
|
/**
|
|
1422
1452
|
* <p> The input method for the keyword. </p>
|
|
1453
|
+
* <ul>
|
|
1454
|
+
* <li>
|
|
1455
|
+
* <p>
|
|
1456
|
+
* <code>SELECT_FROM_LIST</code> is used when mapping a data source for automated
|
|
1457
|
+
* evidence.</p>
|
|
1458
|
+
* <ul>
|
|
1459
|
+
* <li>
|
|
1460
|
+
* <p>When <code>keywordInputType</code> is <code>SELECT_FROM_LIST</code>, a
|
|
1461
|
+
* keyword must be selected to collect automated evidence. For example, this
|
|
1462
|
+
* keyword can be a CloudTrail event name, a rule name for Config, a Security Hub control, or the name of an Amazon Web Services API call.</p>
|
|
1463
|
+
* </li>
|
|
1464
|
+
* </ul>
|
|
1465
|
+
* </li>
|
|
1466
|
+
* <li>
|
|
1467
|
+
* <p>
|
|
1468
|
+
* <code>UPLOAD_FILE</code> and <code>INPUT_TEXT</code> are only used when mapping a
|
|
1469
|
+
* data source for manual evidence.</p>
|
|
1470
|
+
* <ul>
|
|
1471
|
+
* <li>
|
|
1472
|
+
* <p>When <code>keywordInputType</code> is <code>UPLOAD_FILE</code>, a file must
|
|
1473
|
+
* be uploaded as manual evidence.</p>
|
|
1474
|
+
* </li>
|
|
1475
|
+
* <li>
|
|
1476
|
+
* <p>When <code>keywordInputType</code> is <code>INPUT_TEXT</code>, text must be
|
|
1477
|
+
* entered as manual evidence.</p>
|
|
1478
|
+
* </li>
|
|
1479
|
+
* </ul>
|
|
1480
|
+
* </li>
|
|
1481
|
+
* </ul>
|
|
1423
1482
|
*/
|
|
1424
1483
|
keywordInputType?: KeywordInputType | string;
|
|
1425
1484
|
/**
|
|
@@ -1431,7 +1490,12 @@ export interface SourceKeyword {
|
|
|
1431
1490
|
* <ul>
|
|
1432
1491
|
* <li>
|
|
1433
1492
|
* <p>For <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_use-managed-rules.html">managed rules</a>, you can use the rule identifier as the
|
|
1434
|
-
* <code>keywordValue</code>. You can find the rule identifier from the <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">list of Config managed rules</a
|
|
1493
|
+
* <code>keywordValue</code>. You can find the rule identifier from the <a href="https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html">list of Config managed rules</a>. For some
|
|
1494
|
+
* rules, the rule identifier is different from the rule name. For example, the rule
|
|
1495
|
+
* name <code>restricted-ssh</code> has the following rule identifier:
|
|
1496
|
+
* <code>INCOMING_SSH_DISABLED</code>. Make sure to use the rule identifier, not the
|
|
1497
|
+
* rule name. </p>
|
|
1498
|
+
* <p>Keyword example for managed rules:</p>
|
|
1435
1499
|
* <ul>
|
|
1436
1500
|
* <li>
|
|
1437
1501
|
* <p>Managed rule name: <a href="https://docs.aws.amazon.com/config/latest/developerguide/s3-bucket-acl-prohibited.html">s3-bucket-acl-prohibited</a>
|
|
@@ -1445,7 +1509,8 @@ export interface SourceKeyword {
|
|
|
1445
1509
|
* <li>
|
|
1446
1510
|
* <p>For <a href="https://docs.aws.amazon.com/config/latest/developerguide/evaluate-config_develop-rules.html">custom rules</a>, you form the <code>keywordValue</code>
|
|
1447
1511
|
* by adding the <code>Custom_</code> prefix to the rule name. This prefix distinguishes
|
|
1448
|
-
* the rule from a managed rule
|
|
1512
|
+
* the custom rule from a managed rule. </p>
|
|
1513
|
+
* <p>Keyword example for custom rules:</p>
|
|
1449
1514
|
* <ul>
|
|
1450
1515
|
* <li>
|
|
1451
1516
|
* <p>Custom rule name: my-custom-config-rule</p>
|
|
@@ -1458,8 +1523,8 @@ export interface SourceKeyword {
|
|
|
1458
1523
|
* <li>
|
|
1459
1524
|
* <p>For <a href="https://docs.aws.amazon.com/config/latest/developerguide/service-linked-awsconfig-rules.html">service-linked rules</a>, you form the
|
|
1460
1525
|
* <code>keywordValue</code> by adding the <code>Custom_</code> prefix to the rule
|
|
1461
|
-
* name. In addition, you remove the suffix ID that appears at the end of the rule
|
|
1462
|
-
*
|
|
1526
|
+
* name. In addition, you remove the suffix ID that appears at the end of the rule name. </p>
|
|
1527
|
+
* <p>Keyword examples for service-linked rules:</p>
|
|
1463
1528
|
* <ul>
|
|
1464
1529
|
* <li>
|
|
1465
1530
|
* <p>Service-linked rule name:
|
|
@@ -1480,6 +1545,49 @@ export interface SourceKeyword {
|
|
|
1480
1545
|
* </ul>
|
|
1481
1546
|
* </li>
|
|
1482
1547
|
* </ul>
|
|
1548
|
+
* <important>
|
|
1549
|
+
* <p>The <code>keywordValue</code> is case sensitive. If you enter a value incorrectly, Audit Manager might not recognize the data source mapping. As a result, you might not
|
|
1550
|
+
* successfully collect evidence from that data source as intended. </p>
|
|
1551
|
+
* <p>Keep in mind the following requirements, depending on the data source type that
|
|
1552
|
+
* you're using. </p>
|
|
1553
|
+
* <ol>
|
|
1554
|
+
* <li>
|
|
1555
|
+
* <p>For Config: </p>
|
|
1556
|
+
* <ul>
|
|
1557
|
+
* <li>
|
|
1558
|
+
* <p>For managed rules, make sure that the <code>keywordValue</code> is the rule identifier in
|
|
1559
|
+
* <code>ALL_CAPS_WITH_UNDERSCORES</code>. For example,
|
|
1560
|
+
* <code>CLOUDWATCH_LOG_GROUP_ENCRYPTED</code>. For accuracy, we recommend
|
|
1561
|
+
* that you reference the list of <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-config.html">supported Config managed rules</a>.</p>
|
|
1562
|
+
* </li>
|
|
1563
|
+
* <li>
|
|
1564
|
+
* <p>For custom rules, make sure that the <code>keywordValue</code> has the <code>Custom_</code>
|
|
1565
|
+
* prefix followed by the custom rule name. The format of the custom rule name
|
|
1566
|
+
* itself may vary. For accuracy, we recommend that you visit the <a href="https://console.aws.amazon.com/config/">Config console</a> to
|
|
1567
|
+
* verify your custom rule name.</p>
|
|
1568
|
+
* </li>
|
|
1569
|
+
* </ul>
|
|
1570
|
+
* </li>
|
|
1571
|
+
* <li>
|
|
1572
|
+
* <p>For Security Hub: The format varies for Security Hub control names.
|
|
1573
|
+
* For accuracy, we recommend that you reference the list of <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-ash.html">supported
|
|
1574
|
+
* Security Hub controls</a>.</p>
|
|
1575
|
+
* </li>
|
|
1576
|
+
* <li>
|
|
1577
|
+
* <p>For Amazon Web Services API calls: Make sure that the <code>keywordValue</code>
|
|
1578
|
+
* is written as <code>serviceprefix_ActionName</code>. For example,
|
|
1579
|
+
* <code>iam_ListGroups</code>. For accuracy, we recommend that you reference the
|
|
1580
|
+
* list of <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-api.html">supported
|
|
1581
|
+
* API calls</a>.</p>
|
|
1582
|
+
* </li>
|
|
1583
|
+
* <li>
|
|
1584
|
+
* <p>For CloudTrail: Make sure that the <code>keywordValue</code> is written
|
|
1585
|
+
* as <code>serviceprefix_ActionName</code>. For example,
|
|
1586
|
+
* <code>cloudtrail_StartLogging</code>. For accuracy, we recommend that you
|
|
1587
|
+
* review the Amazon Web Service prefix and action names in the <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html">Service Authorization Reference</a>.</p>
|
|
1588
|
+
* </li>
|
|
1589
|
+
* </ol>
|
|
1590
|
+
* </important>
|
|
1483
1591
|
*/
|
|
1484
1592
|
keywordValue?: string;
|
|
1485
1593
|
}
|
|
@@ -1538,20 +1646,23 @@ export interface ControlMappingSource {
|
|
|
1538
1646
|
*/
|
|
1539
1647
|
sourceType?: SourceType | string;
|
|
1540
1648
|
/**
|
|
1541
|
-
* <p>
|
|
1542
|
-
*
|
|
1649
|
+
* <p>A keyword that relates to the control data source.</p>
|
|
1650
|
+
* <p>For manual evidence, this keyword indicates if the manual evidence is a file or
|
|
1651
|
+
* text.</p>
|
|
1652
|
+
* <p>For automated evidence, this keyword identifies a specific CloudTrail event,
|
|
1653
|
+
* Config rule, Security Hub control, or Amazon Web Services API name. </p>
|
|
1543
1654
|
* <p> To learn more about the supported keywords that you can use when mapping a control data
|
|
1544
1655
|
* source, see the following pages in the <i>Audit Manager User
|
|
1545
1656
|
* Guide</i>:</p>
|
|
1546
1657
|
* <ul>
|
|
1547
1658
|
* <li>
|
|
1548
1659
|
* <p>
|
|
1549
|
-
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-
|
|
1660
|
+
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-config.html">Config rules supported by Audit Manager</a>
|
|
1550
1661
|
* </p>
|
|
1551
1662
|
* </li>
|
|
1552
1663
|
* <li>
|
|
1553
1664
|
* <p>
|
|
1554
|
-
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-
|
|
1665
|
+
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-ash.html">Security Hub controls supported by Audit Manager</a>
|
|
1555
1666
|
* </p>
|
|
1556
1667
|
* </li>
|
|
1557
1668
|
* <li>
|
|
@@ -1569,7 +1680,7 @@ export interface ControlMappingSource {
|
|
|
1569
1680
|
*/
|
|
1570
1681
|
sourceKeyword?: SourceKeyword;
|
|
1571
1682
|
/**
|
|
1572
|
-
* <p>
|
|
1683
|
+
* <p>Specifies how often evidence is collected from the control mapping source. </p>
|
|
1573
1684
|
*/
|
|
1574
1685
|
sourceFrequency?: SourceFrequency | string;
|
|
1575
1686
|
/**
|
|
@@ -1603,7 +1714,7 @@ export interface Control {
|
|
|
1603
1714
|
*/
|
|
1604
1715
|
id?: string;
|
|
1605
1716
|
/**
|
|
1606
|
-
* <p>
|
|
1717
|
+
* <p> Specifies whether the control is a standard control or a custom control.</p>
|
|
1607
1718
|
*/
|
|
1608
1719
|
type?: ControlType | string;
|
|
1609
1720
|
/**
|
|
@@ -1695,12 +1806,11 @@ export interface Framework {
|
|
|
1695
1806
|
*/
|
|
1696
1807
|
name?: string;
|
|
1697
1808
|
/**
|
|
1698
|
-
* <p>
|
|
1809
|
+
* <p> Specifies whether the framework is a standard framework or a custom framework.</p>
|
|
1699
1810
|
*/
|
|
1700
1811
|
type?: FrameworkType | string;
|
|
1701
1812
|
/**
|
|
1702
|
-
* <p> The compliance type that the
|
|
1703
|
-
* </p>
|
|
1813
|
+
* <p> The compliance type that the framework supports, such as CIS or HIPAA. </p>
|
|
1704
1814
|
*/
|
|
1705
1815
|
complianceType?: string;
|
|
1706
1816
|
/**
|
|
@@ -1712,7 +1822,7 @@ export interface Framework {
|
|
|
1712
1822
|
*/
|
|
1713
1823
|
logo?: string;
|
|
1714
1824
|
/**
|
|
1715
|
-
* <p> The sources
|
|
1825
|
+
* <p> The control data sources where Audit Manager collects evidence from.</p>
|
|
1716
1826
|
*/
|
|
1717
1827
|
controlSources?: string;
|
|
1718
1828
|
/**
|
|
@@ -1815,20 +1925,23 @@ export interface CreateControlMappingSource {
|
|
|
1815
1925
|
*/
|
|
1816
1926
|
sourceType?: SourceType | string;
|
|
1817
1927
|
/**
|
|
1818
|
-
* <p>
|
|
1819
|
-
*
|
|
1928
|
+
* <p>A keyword that relates to the control data source.</p>
|
|
1929
|
+
* <p>For manual evidence, this keyword indicates if the manual evidence is a file or
|
|
1930
|
+
* text.</p>
|
|
1931
|
+
* <p>For automated evidence, this keyword identifies a specific CloudTrail event,
|
|
1932
|
+
* Config rule, Security Hub control, or Amazon Web Services API name. </p>
|
|
1820
1933
|
* <p> To learn more about the supported keywords that you can use when mapping a control data
|
|
1821
1934
|
* source, see the following pages in the <i>Audit Manager User
|
|
1822
1935
|
* Guide</i>:</p>
|
|
1823
1936
|
* <ul>
|
|
1824
1937
|
* <li>
|
|
1825
1938
|
* <p>
|
|
1826
|
-
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-
|
|
1939
|
+
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-config.html">Config rules supported by Audit Manager</a>
|
|
1827
1940
|
* </p>
|
|
1828
1941
|
* </li>
|
|
1829
1942
|
* <li>
|
|
1830
1943
|
* <p>
|
|
1831
|
-
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-
|
|
1944
|
+
* <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/control-data-sources-ash.html">Security Hub controls supported by Audit Manager</a>
|
|
1832
1945
|
* </p>
|
|
1833
1946
|
* </li>
|
|
1834
1947
|
* <li>
|
|
@@ -1846,7 +1959,7 @@ export interface CreateControlMappingSource {
|
|
|
1846
1959
|
*/
|
|
1847
1960
|
sourceKeyword?: SourceKeyword;
|
|
1848
1961
|
/**
|
|
1849
|
-
* <p>
|
|
1962
|
+
* <p>Specifies how often evidence is collected from the control mapping source. </p>
|
|
1850
1963
|
*/
|
|
1851
1964
|
sourceFrequency?: SourceFrequency | string;
|
|
1852
1965
|
/**
|
|
@@ -2221,7 +2334,7 @@ export interface GetControlRequest {
|
|
|
2221
2334
|
*/
|
|
2222
2335
|
export interface GetControlResponse {
|
|
2223
2336
|
/**
|
|
2224
|
-
* <p> The
|
|
2337
|
+
* <p> The details of the control that the <code>GetControl</code> API returned. </p>
|
|
2225
2338
|
*/
|
|
2226
2339
|
control?: Control;
|
|
2227
2340
|
}
|
|
@@ -2485,6 +2598,30 @@ export interface GetEvidenceByEvidenceFolderResponse {
|
|
|
2485
2598
|
*/
|
|
2486
2599
|
nextToken?: string;
|
|
2487
2600
|
}
|
|
2601
|
+
/**
|
|
2602
|
+
* @public
|
|
2603
|
+
*/
|
|
2604
|
+
export interface GetEvidenceFileUploadUrlRequest {
|
|
2605
|
+
/**
|
|
2606
|
+
* <p>The file that you want to upload. For a list of supported file formats, see <a href="https://docs.aws.amazon.com/audit-manager/latest/userguide/upload-evidence.html#supported-manual-evidence-files">Supported file types for manual evidence</a> in the <i>Audit Manager
|
|
2607
|
+
* User Guide</i>.</p>
|
|
2608
|
+
*/
|
|
2609
|
+
fileName: string | undefined;
|
|
2610
|
+
}
|
|
2611
|
+
/**
|
|
2612
|
+
* @public
|
|
2613
|
+
*/
|
|
2614
|
+
export interface GetEvidenceFileUploadUrlResponse {
|
|
2615
|
+
/**
|
|
2616
|
+
* <p>The name of the uploaded manual evidence file that the presigned URL was generated
|
|
2617
|
+
* for.</p>
|
|
2618
|
+
*/
|
|
2619
|
+
evidenceFileName?: string;
|
|
2620
|
+
/**
|
|
2621
|
+
* <p>The presigned URL that was generated.</p>
|
|
2622
|
+
*/
|
|
2623
|
+
uploadUrl?: string;
|
|
2624
|
+
}
|
|
2488
2625
|
/**
|
|
2489
2626
|
* @public
|
|
2490
2627
|
*/
|
|
@@ -2826,6 +2963,7 @@ export interface GetServicesInScopeResponse {
|
|
|
2826
2963
|
export declare const SettingAttribute: {
|
|
2827
2964
|
readonly ALL: "ALL";
|
|
2828
2965
|
readonly DEFAULT_ASSESSMENT_REPORTS_DESTINATION: "DEFAULT_ASSESSMENT_REPORTS_DESTINATION";
|
|
2966
|
+
readonly DEFAULT_EXPORT_DESTINATION: "DEFAULT_EXPORT_DESTINATION";
|
|
2829
2967
|
readonly DEFAULT_PROCESS_OWNERS: "DEFAULT_PROCESS_OWNERS";
|
|
2830
2968
|
readonly DEREGISTRATION_POLICY: "DEREGISTRATION_POLICY";
|
|
2831
2969
|
readonly EVIDENCE_FINDER_ENABLEMENT: "EVIDENCE_FINDER_ENABLEMENT";
|
|
@@ -2845,6 +2983,31 @@ export interface GetSettingsRequest {
|
|
|
2845
2983
|
*/
|
|
2846
2984
|
attribute: SettingAttribute | string | undefined;
|
|
2847
2985
|
}
|
|
2986
|
+
/**
|
|
2987
|
+
* @public
|
|
2988
|
+
* @enum
|
|
2989
|
+
*/
|
|
2990
|
+
export declare const ExportDestinationType: {
|
|
2991
|
+
readonly S3: "S3";
|
|
2992
|
+
};
|
|
2993
|
+
/**
|
|
2994
|
+
* @public
|
|
2995
|
+
*/
|
|
2996
|
+
export type ExportDestinationType = (typeof ExportDestinationType)[keyof typeof ExportDestinationType];
|
|
2997
|
+
/**
|
|
2998
|
+
* @public
|
|
2999
|
+
* <p>The default s3 bucket where Audit Manager saves the files that you export from evidence finder.</p>
|
|
3000
|
+
*/
|
|
3001
|
+
export interface DefaultExportDestination {
|
|
3002
|
+
/**
|
|
3003
|
+
* <p>The destination type, such as Amazon S3.</p>
|
|
3004
|
+
*/
|
|
3005
|
+
destinationType?: ExportDestinationType | string;
|
|
3006
|
+
/**
|
|
3007
|
+
* <p>The destination bucket where Audit Manager stores exported files.</p>
|
|
3008
|
+
*/
|
|
3009
|
+
destination?: string;
|
|
3010
|
+
}
|
|
2848
3011
|
/**
|
|
2849
3012
|
* @public
|
|
2850
3013
|
* @enum
|
|
@@ -3006,7 +3169,7 @@ export interface Settings {
|
|
|
3006
3169
|
*/
|
|
3007
3170
|
snsTopic?: string;
|
|
3008
3171
|
/**
|
|
3009
|
-
* <p>
|
|
3172
|
+
* <p>The default S3 destination bucket for storing assessment reports.</p>
|
|
3010
3173
|
*/
|
|
3011
3174
|
defaultAssessmentReportsDestination?: AssessmentReportsDestination;
|
|
3012
3175
|
/**
|
|
@@ -3026,6 +3189,10 @@ export interface Settings {
|
|
|
3026
3189
|
* use this attribute to determine how your data is handled when you deregister Audit Manager.</p>
|
|
3027
3190
|
*/
|
|
3028
3191
|
deregistrationPolicy?: DeregistrationPolicy;
|
|
3192
|
+
/**
|
|
3193
|
+
* <p>The default S3 destination bucket for storing evidence finder exports.</p>
|
|
3194
|
+
*/
|
|
3195
|
+
defaultExportDestination?: DefaultExportDestination;
|
|
3029
3196
|
}
|
|
3030
3197
|
/**
|
|
3031
3198
|
* @public
|
|
@@ -3155,7 +3322,8 @@ export interface ListAssessmentFrameworksRequest {
|
|
|
3155
3322
|
*/
|
|
3156
3323
|
export interface ListAssessmentFrameworksResponse {
|
|
3157
3324
|
/**
|
|
3158
|
-
* <p>
|
|
3325
|
+
* <p> A list of metadata that the <code>ListAssessmentFrameworks</code> API returns for each
|
|
3326
|
+
* framework.</p>
|
|
3159
3327
|
*/
|
|
3160
3328
|
frameworkMetadataList?: AssessmentFrameworkMetadata[];
|
|
3161
3329
|
/**
|
|
@@ -3243,7 +3411,8 @@ export interface ListAssessmentsRequest {
|
|
|
3243
3411
|
*/
|
|
3244
3412
|
export interface ListAssessmentsResponse {
|
|
3245
3413
|
/**
|
|
3246
|
-
* <p>
|
|
3414
|
+
* <p>The metadata that the <code>ListAssessments</code> API returns for each
|
|
3415
|
+
* assessment.</p>
|
|
3247
3416
|
*/
|
|
3248
3417
|
assessmentMetadata?: AssessmentMetadataItem[];
|
|
3249
3418
|
/**
|
|
@@ -3453,8 +3622,8 @@ export interface ControlMetadata {
|
|
|
3453
3622
|
*/
|
|
3454
3623
|
export interface ListControlsResponse {
|
|
3455
3624
|
/**
|
|
3456
|
-
* <p>
|
|
3457
|
-
*
|
|
3625
|
+
* <p> A list of metadata that the <code>ListControls</code> API returns for each
|
|
3626
|
+
* control.</p>
|
|
3458
3627
|
*/
|
|
3459
3628
|
controlMetadataList?: ControlMetadata[];
|
|
3460
3629
|
/**
|
|
@@ -3598,18 +3767,6 @@ export interface RegisterAccountResponse {
|
|
|
3598
3767
|
*/
|
|
3599
3768
|
status?: AccountStatus | string;
|
|
3600
3769
|
}
|
|
3601
|
-
/**
|
|
3602
|
-
* @public
|
|
3603
|
-
* <p>The request was denied due to request throttling.</p>
|
|
3604
|
-
*/
|
|
3605
|
-
export declare class ThrottlingException extends __BaseException {
|
|
3606
|
-
readonly name: "ThrottlingException";
|
|
3607
|
-
readonly $fault: "client";
|
|
3608
|
-
/**
|
|
3609
|
-
* @internal
|
|
3610
|
-
*/
|
|
3611
|
-
constructor(opts: __ExceptionOptionType<ThrottlingException, __BaseException>);
|
|
3612
|
-
}
|
|
3613
3770
|
/**
|
|
3614
3771
|
* @public
|
|
3615
3772
|
*/
|
|
@@ -3974,7 +4131,7 @@ export interface UpdateSettingsRequest {
|
|
|
3974
4131
|
*/
|
|
3975
4132
|
snsTopic?: string;
|
|
3976
4133
|
/**
|
|
3977
|
-
* <p> The default
|
|
4134
|
+
* <p> The default S3 destination bucket for storing assessment reports. </p>
|
|
3978
4135
|
*/
|
|
3979
4136
|
defaultAssessmentReportsDestination?: AssessmentReportsDestination;
|
|
3980
4137
|
/**
|
|
@@ -4001,6 +4158,10 @@ export interface UpdateSettingsRequest {
|
|
|
4001
4158
|
* use this attribute to determine how your data is handled when you deregister Audit Manager.</p>
|
|
4002
4159
|
*/
|
|
4003
4160
|
deregistrationPolicy?: DeregistrationPolicy;
|
|
4161
|
+
/**
|
|
4162
|
+
* <p> The default S3 destination bucket for storing evidence finder exports. </p>
|
|
4163
|
+
*/
|
|
4164
|
+
defaultExportDestination?: DefaultExportDestination;
|
|
4004
4165
|
}
|
|
4005
4166
|
/**
|
|
4006
4167
|
* @public
|
|
@@ -27,6 +27,7 @@ import { GetControlCommandInput, GetControlCommandOutput } from "../commands/Get
|
|
|
27
27
|
import { GetDelegationsCommandInput, GetDelegationsCommandOutput } from "../commands/GetDelegationsCommand";
|
|
28
28
|
import { GetEvidenceByEvidenceFolderCommandInput, GetEvidenceByEvidenceFolderCommandOutput } from "../commands/GetEvidenceByEvidenceFolderCommand";
|
|
29
29
|
import { GetEvidenceCommandInput, GetEvidenceCommandOutput } from "../commands/GetEvidenceCommand";
|
|
30
|
+
import { GetEvidenceFileUploadUrlCommandInput, GetEvidenceFileUploadUrlCommandOutput } from "../commands/GetEvidenceFileUploadUrlCommand";
|
|
30
31
|
import { GetEvidenceFolderCommandInput, GetEvidenceFolderCommandOutput } from "../commands/GetEvidenceFolderCommand";
|
|
31
32
|
import { GetEvidenceFoldersByAssessmentCommandInput, GetEvidenceFoldersByAssessmentCommandOutput } from "../commands/GetEvidenceFoldersByAssessmentCommand";
|
|
32
33
|
import { GetEvidenceFoldersByAssessmentControlCommandInput, GetEvidenceFoldersByAssessmentControlCommandOutput } from "../commands/GetEvidenceFoldersByAssessmentControlCommand";
|
|
@@ -169,6 +170,10 @@ export declare const se_GetEvidenceCommand: (input: GetEvidenceCommandInput, con
|
|
|
169
170
|
* serializeAws_restJson1GetEvidenceByEvidenceFolderCommand
|
|
170
171
|
*/
|
|
171
172
|
export declare const se_GetEvidenceByEvidenceFolderCommand: (input: GetEvidenceByEvidenceFolderCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
173
|
+
/**
|
|
174
|
+
* serializeAws_restJson1GetEvidenceFileUploadUrlCommand
|
|
175
|
+
*/
|
|
176
|
+
export declare const se_GetEvidenceFileUploadUrlCommand: (input: GetEvidenceFileUploadUrlCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
|
|
172
177
|
/**
|
|
173
178
|
* serializeAws_restJson1GetEvidenceFolderCommand
|
|
174
179
|
*/
|
|
@@ -413,6 +418,10 @@ export declare const de_GetEvidenceCommand: (output: __HttpResponse, context: __
|
|
|
413
418
|
* deserializeAws_restJson1GetEvidenceByEvidenceFolderCommand
|
|
414
419
|
*/
|
|
415
420
|
export declare const de_GetEvidenceByEvidenceFolderCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetEvidenceByEvidenceFolderCommandOutput>;
|
|
421
|
+
/**
|
|
422
|
+
* deserializeAws_restJson1GetEvidenceFileUploadUrlCommand
|
|
423
|
+
*/
|
|
424
|
+
export declare const de_GetEvidenceFileUploadUrlCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetEvidenceFileUploadUrlCommandOutput>;
|
|
416
425
|
/**
|
|
417
426
|
* deserializeAws_restJson1GetEvidenceFolderCommand
|
|
418
427
|
*/
|
|
@@ -108,6 +108,10 @@ import {
|
|
|
108
108
|
GetEvidenceCommandInput,
|
|
109
109
|
GetEvidenceCommandOutput,
|
|
110
110
|
} from "./commands/GetEvidenceCommand";
|
|
111
|
+
import {
|
|
112
|
+
GetEvidenceFileUploadUrlCommandInput,
|
|
113
|
+
GetEvidenceFileUploadUrlCommandOutput,
|
|
114
|
+
} from "./commands/GetEvidenceFileUploadUrlCommand";
|
|
111
115
|
import {
|
|
112
116
|
GetEvidenceFolderCommandInput,
|
|
113
117
|
GetEvidenceFolderCommandOutput,
|
|
@@ -644,6 +648,19 @@ export interface AuditManager {
|
|
|
644
648
|
options: __HttpHandlerOptions,
|
|
645
649
|
cb: (err: any, data?: GetEvidenceByEvidenceFolderCommandOutput) => void
|
|
646
650
|
): void;
|
|
651
|
+
getEvidenceFileUploadUrl(
|
|
652
|
+
args: GetEvidenceFileUploadUrlCommandInput,
|
|
653
|
+
options?: __HttpHandlerOptions
|
|
654
|
+
): Promise<GetEvidenceFileUploadUrlCommandOutput>;
|
|
655
|
+
getEvidenceFileUploadUrl(
|
|
656
|
+
args: GetEvidenceFileUploadUrlCommandInput,
|
|
657
|
+
cb: (err: any, data?: GetEvidenceFileUploadUrlCommandOutput) => void
|
|
658
|
+
): void;
|
|
659
|
+
getEvidenceFileUploadUrl(
|
|
660
|
+
args: GetEvidenceFileUploadUrlCommandInput,
|
|
661
|
+
options: __HttpHandlerOptions,
|
|
662
|
+
cb: (err: any, data?: GetEvidenceFileUploadUrlCommandOutput) => void
|
|
663
|
+
): void;
|
|
647
664
|
getEvidenceFolder(
|
|
648
665
|
args: GetEvidenceFolderCommandInput,
|
|
649
666
|
options?: __HttpHandlerOptions
|
|
@@ -154,6 +154,10 @@ import {
|
|
|
154
154
|
GetEvidenceCommandInput,
|
|
155
155
|
GetEvidenceCommandOutput,
|
|
156
156
|
} from "./commands/GetEvidenceCommand";
|
|
157
|
+
import {
|
|
158
|
+
GetEvidenceFileUploadUrlCommandInput,
|
|
159
|
+
GetEvidenceFileUploadUrlCommandOutput,
|
|
160
|
+
} from "./commands/GetEvidenceFileUploadUrlCommand";
|
|
157
161
|
import {
|
|
158
162
|
GetEvidenceFolderCommandInput,
|
|
159
163
|
GetEvidenceFolderCommandOutput,
|
|
@@ -324,6 +328,7 @@ export type ServiceInputTypes =
|
|
|
324
328
|
| GetDelegationsCommandInput
|
|
325
329
|
| GetEvidenceByEvidenceFolderCommandInput
|
|
326
330
|
| GetEvidenceCommandInput
|
|
331
|
+
| GetEvidenceFileUploadUrlCommandInput
|
|
327
332
|
| GetEvidenceFolderCommandInput
|
|
328
333
|
| GetEvidenceFoldersByAssessmentCommandInput
|
|
329
334
|
| GetEvidenceFoldersByAssessmentControlCommandInput
|
|
@@ -386,6 +391,7 @@ export type ServiceOutputTypes =
|
|
|
386
391
|
| GetDelegationsCommandOutput
|
|
387
392
|
| GetEvidenceByEvidenceFolderCommandOutput
|
|
388
393
|
| GetEvidenceCommandOutput
|
|
394
|
+
| GetEvidenceFileUploadUrlCommandOutput
|
|
389
395
|
| GetEvidenceFolderCommandOutput
|
|
390
396
|
| GetEvidenceFoldersByAssessmentCommandOutput
|
|
391
397
|
| GetEvidenceFoldersByAssessmentControlCommandOutput
|
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
|
|
2
|
+
import { Command as $Command } from "@aws-sdk/smithy-client";
|
|
3
|
+
import {
|
|
4
|
+
Handler,
|
|
5
|
+
HttpHandlerOptions as __HttpHandlerOptions,
|
|
6
|
+
MetadataBearer as __MetadataBearer,
|
|
7
|
+
MiddlewareStack,
|
|
8
|
+
} from "@aws-sdk/types";
|
|
9
|
+
import {
|
|
10
|
+
AuditManagerClientResolvedConfig,
|
|
11
|
+
ServiceInputTypes,
|
|
12
|
+
ServiceOutputTypes,
|
|
13
|
+
} from "../AuditManagerClient";
|
|
14
|
+
import {
|
|
15
|
+
GetEvidenceFileUploadUrlRequest,
|
|
16
|
+
GetEvidenceFileUploadUrlResponse,
|
|
17
|
+
} from "../models/models_0";
|
|
18
|
+
export { __MetadataBearer, $Command };
|
|
19
|
+
export interface GetEvidenceFileUploadUrlCommandInput
|
|
20
|
+
extends GetEvidenceFileUploadUrlRequest {}
|
|
21
|
+
export interface GetEvidenceFileUploadUrlCommandOutput
|
|
22
|
+
extends GetEvidenceFileUploadUrlResponse,
|
|
23
|
+
__MetadataBearer {}
|
|
24
|
+
export declare class GetEvidenceFileUploadUrlCommand extends $Command<
|
|
25
|
+
GetEvidenceFileUploadUrlCommandInput,
|
|
26
|
+
GetEvidenceFileUploadUrlCommandOutput,
|
|
27
|
+
AuditManagerClientResolvedConfig
|
|
28
|
+
> {
|
|
29
|
+
readonly input: GetEvidenceFileUploadUrlCommandInput;
|
|
30
|
+
static getEndpointParameterInstructions(): EndpointParameterInstructions;
|
|
31
|
+
constructor(input: GetEvidenceFileUploadUrlCommandInput);
|
|
32
|
+
resolveMiddleware(
|
|
33
|
+
clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
|
|
34
|
+
configuration: AuditManagerClientResolvedConfig,
|
|
35
|
+
options?: __HttpHandlerOptions
|
|
36
|
+
): Handler<
|
|
37
|
+
GetEvidenceFileUploadUrlCommandInput,
|
|
38
|
+
GetEvidenceFileUploadUrlCommandOutput
|
|
39
|
+
>;
|
|
40
|
+
private serialize;
|
|
41
|
+
private deserialize;
|
|
42
|
+
}
|
|
@@ -25,6 +25,7 @@ export * from "./GetControlCommand";
|
|
|
25
25
|
export * from "./GetDelegationsCommand";
|
|
26
26
|
export * from "./GetEvidenceByEvidenceFolderCommand";
|
|
27
27
|
export * from "./GetEvidenceCommand";
|
|
28
|
+
export * from "./GetEvidenceFileUploadUrlCommand";
|
|
28
29
|
export * from "./GetEvidenceFolderCommand";
|
|
29
30
|
export * from "./GetEvidenceFoldersByAssessmentCommand";
|
|
30
31
|
export * from "./GetEvidenceFoldersByAssessmentControlCommand";
|