@aws-sdk/client-detective 3.45.0 → 3.46.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/CHANGELOG.md +18 -0
  2. package/README.md +41 -13
  3. package/dist-cjs/Detective.js +75 -0
  4. package/dist-cjs/commands/DescribeOrganizationConfigurationCommand.js +36 -0
  5. package/dist-cjs/commands/DisableOrganizationAdminAccountCommand.js +35 -0
  6. package/dist-cjs/commands/EnableOrganizationAdminAccountCommand.js +36 -0
  7. package/dist-cjs/commands/ListOrganizationAdminAccountsCommand.js +36 -0
  8. package/dist-cjs/commands/UpdateOrganizationConfigurationCommand.js +36 -0
  9. package/dist-cjs/commands/index.js +5 -0
  10. package/dist-cjs/models/models_0.js +54 -1
  11. package/dist-cjs/pagination/ListOrganizationAdminAccountsPaginator.js +35 -0
  12. package/dist-cjs/pagination/index.js +1 -0
  13. package/dist-cjs/protocols/Aws_restJson1.js +451 -1
  14. package/dist-cjs/runtimeConfig.js +0 -2
  15. package/dist-es/Detective.js +75 -0
  16. package/dist-es/commands/DescribeOrganizationConfigurationCommand.js +39 -0
  17. package/dist-es/commands/DisableOrganizationAdminAccountCommand.js +38 -0
  18. package/dist-es/commands/EnableOrganizationAdminAccountCommand.js +39 -0
  19. package/dist-es/commands/ListOrganizationAdminAccountsCommand.js +39 -0
  20. package/dist-es/commands/UpdateOrganizationConfigurationCommand.js +39 -0
  21. package/dist-es/commands/index.js +5 -0
  22. package/dist-es/models/models_0.js +37 -0
  23. package/dist-es/pagination/ListOrganizationAdminAccountsPaginator.js +74 -0
  24. package/dist-es/pagination/index.js +1 -0
  25. package/dist-es/protocols/Aws_restJson1.js +533 -1
  26. package/dist-es/runtimeConfig.js +0 -2
  27. package/dist-types/Detective.d.ts +154 -42
  28. package/dist-types/DetectiveClient.d.ts +49 -16
  29. package/dist-types/commands/CreateGraphCommand.d.ts +9 -9
  30. package/dist-types/commands/CreateMembersCommand.d.ts +17 -7
  31. package/dist-types/commands/DeleteGraphCommand.d.ts +1 -1
  32. package/dist-types/commands/DeleteMembersCommand.d.ts +13 -5
  33. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +38 -0
  34. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +38 -0
  35. package/dist-types/commands/DisassociateMembershipCommand.d.ts +6 -1
  36. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +42 -0
  37. package/dist-types/commands/ListInvitationsCommand.d.ts +1 -1
  38. package/dist-types/commands/ListMembersCommand.d.ts +6 -2
  39. package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +36 -0
  40. package/dist-types/commands/RejectInvitationCommand.d.ts +6 -1
  41. package/dist-types/commands/StartMonitoringMemberCommand.d.ts +1 -1
  42. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +37 -0
  43. package/dist-types/commands/index.d.ts +5 -0
  44. package/dist-types/models/models_0.d.ts +234 -71
  45. package/dist-types/pagination/ListOrganizationAdminAccountsPaginator.d.ts +4 -0
  46. package/dist-types/pagination/index.d.ts +1 -0
  47. package/dist-types/protocols/Aws_restJson1.d.ts +15 -0
  48. package/dist-types/ts3.4/Detective.d.ts +25 -0
  49. package/dist-types/ts3.4/DetectiveClient.d.ts +7 -2
  50. package/dist-types/ts3.4/commands/DescribeOrganizationConfigurationCommand.d.ts +17 -0
  51. package/dist-types/ts3.4/commands/DisableOrganizationAdminAccountCommand.d.ts +16 -0
  52. package/dist-types/ts3.4/commands/EnableOrganizationAdminAccountCommand.d.ts +17 -0
  53. package/dist-types/ts3.4/commands/ListOrganizationAdminAccountsCommand.d.ts +17 -0
  54. package/dist-types/ts3.4/commands/UpdateOrganizationConfigurationCommand.d.ts +17 -0
  55. package/dist-types/ts3.4/commands/index.d.ts +5 -0
  56. package/dist-types/ts3.4/models/models_0.d.ts +83 -0
  57. package/dist-types/ts3.4/pagination/ListOrganizationAdminAccountsPaginator.d.ts +4 -0
  58. package/dist-types/ts3.4/pagination/index.d.ts +1 -0
  59. package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +15 -0
  60. package/package.json +36 -43
@@ -70,16 +70,17 @@ export declare namespace ValidationException {
70
70
  const filterSensitiveLog: (obj: ValidationException) => any;
71
71
  }
72
72
  /**
73
- * <p>An AWS account that is the administrator account of or a member of a behavior
74
- * graph.</p>
73
+ * <p>An Amazon Web Services account that is the administrator account of or a member of a
74
+ * behavior graph.</p>
75
75
  */
76
76
  export interface Account {
77
77
  /**
78
- * <p>The account identifier of the AWS account.</p>
78
+ * <p>The account identifier of the Amazon Web Services account.</p>
79
79
  */
80
80
  AccountId: string | undefined;
81
81
  /**
82
- * <p>The AWS account root user email address for the AWS account.</p>
82
+ * <p>The Amazon Web Services account root user email address for the Amazon Web Services
83
+ * account.</p>
83
84
  */
84
85
  EmailAddress: string | undefined;
85
86
  }
@@ -89,6 +90,33 @@ export declare namespace Account {
89
90
  */
90
91
  const filterSensitiveLog: (obj: Account) => any;
91
92
  }
93
+ /**
94
+ * <p>Information about the Detective administrator account for an
95
+ * organization.</p>
96
+ */
97
+ export interface Administrator {
98
+ /**
99
+ * <p>The Amazon Web Services account identifier of the Detective administrator
100
+ * account for the organization.</p>
101
+ */
102
+ AccountId?: string;
103
+ /**
104
+ * <p>The ARN of the organization behavior graph.</p>
105
+ */
106
+ GraphArn?: string;
107
+ /**
108
+ * <p>The date and time when the Detective administrator account was enabled. The
109
+ * value is an ISO8601 formatted string. For example,
110
+ * <code>2021-08-18T16:35:56.284Z</code>.</p>
111
+ */
112
+ DelegationTime?: Date;
113
+ }
114
+ export declare namespace Administrator {
115
+ /**
116
+ * @internal
117
+ */
118
+ const filterSensitiveLog: (obj: Administrator) => any;
119
+ }
92
120
  export interface CreateGraphRequest {
93
121
  /**
94
122
  * <p>The tags to assign to the new behavior graph. You can add up to 50 tags. For each tag,
@@ -122,7 +150,7 @@ export declare namespace CreateGraphResponse {
122
150
  * <ul>
123
151
  * <li>
124
152
  * <p>The request would cause the number of member accounts in the behavior graph to
125
- * exceed the maximum allowed. A behavior graph cannot have more than 1000 member
153
+ * exceed the maximum allowed. A behavior graph cannot have more than 1200 member
126
154
  * accounts.</p>
127
155
  * </li>
128
156
  * <li>
@@ -130,8 +158,8 @@ export declare namespace CreateGraphResponse {
130
158
  * allowed.</p>
131
159
  * </li>
132
160
  * <li>
133
- * <p>Detective is unable to verify the data rate for the member account. This is usually
134
- * because the member account is not enrolled in Amazon GuardDuty. </p>
161
+ * <p>Detective is unable to verify the data rate for the member account. This
162
+ * is usually because the member account is not enrolled in Amazon GuardDuty.</p>
135
163
  * </li>
136
164
  * </ul>
137
165
  */
@@ -148,8 +176,7 @@ export declare namespace ServiceQuotaExceededException {
148
176
  }
149
177
  export interface CreateMembersRequest {
150
178
  /**
151
- * <p>The ARN of the behavior graph to invite the member accounts to contribute their data
152
- * to.</p>
179
+ * <p>The ARN of the behavior graph.</p>
153
180
  */
154
181
  GraphArn: string | undefined;
155
182
  /**
@@ -158,15 +185,19 @@ export interface CreateMembersRequest {
158
185
  */
159
186
  Message?: string;
160
187
  /**
161
- * <p>if set to <code>true</code>, then the member accounts do not receive email
162
- * notifications. By default, this is set to <code>false</code>, and the member accounts
188
+ * <p>if set to <code>true</code>, then the invited accounts do not receive email
189
+ * notifications. By default, this is set to <code>false</code>, and the invited accounts
163
190
  * receive email notifications.</p>
191
+ * <p>Organization accounts in the organization behavior graph do not receive email
192
+ * notifications.</p>
164
193
  */
165
194
  DisableEmailNotification?: boolean;
166
195
  /**
167
- * <p>The list of AWS accounts to invite to become member accounts in the behavior graph.
168
- * You can invite up to 50 accounts at a time. For each invited account, the account list
169
- * contains the account identifier and the AWS account root user email address.</p>
196
+ * <p>The list of Amazon Web Services accounts to invite or to enable. You can invite or enable
197
+ * up to 50 accounts at a time. For each invited account, the account list contains the
198
+ * account identifier and the Amazon Web Services account root user email address. For
199
+ * organization accounts in the organization behavior graph, the email address is not
200
+ * required.</p>
170
201
  */
171
202
  Accounts: Account[] | undefined;
172
203
  }
@@ -180,6 +211,10 @@ export declare enum MemberDisabledReason {
180
211
  VOLUME_TOO_HIGH = "VOLUME_TOO_HIGH",
181
212
  VOLUME_UNKNOWN = "VOLUME_UNKNOWN"
182
213
  }
214
+ export declare enum InvitationType {
215
+ INVITATION = "INVITATION",
216
+ ORGANIZATION = "ORGANIZATION"
217
+ }
183
218
  export declare enum MemberStatus {
184
219
  ACCEPTED_BUT_DISABLED = "ACCEPTED_BUT_DISABLED",
185
220
  ENABLED = "ENABLED",
@@ -188,30 +223,31 @@ export declare enum MemberStatus {
188
223
  VERIFICATION_IN_PROGRESS = "VERIFICATION_IN_PROGRESS"
189
224
  }
190
225
  /**
191
- * <p>Details about a member account that was invited to contribute to a behavior
192
- * graph.</p>
226
+ * <p>Details about a member account in a behavior graph.</p>
193
227
  */
194
228
  export interface MemberDetail {
195
229
  /**
196
- * <p>The AWS account identifier for the member account.</p>
230
+ * <p>The Amazon Web Services account identifier for the member account.</p>
197
231
  */
198
232
  AccountId?: string;
199
233
  /**
200
- * <p>The AWS account root user email address for the member account.</p>
234
+ * <p>The Amazon Web Services account root user email address for the member account.</p>
201
235
  */
202
236
  EmailAddress?: string;
203
237
  /**
204
- * <p>The ARN of the behavior graph that the member account was invited to.</p>
238
+ * <p>The ARN of the behavior graph.</p>
205
239
  */
206
240
  GraphArn?: string;
207
241
  /**
208
242
  * @deprecated
209
243
  *
210
- * <p>The AWS account identifier of the administrator account for the behavior graph.</p>
244
+ * <p>The Amazon Web Services account identifier of the administrator account for the behavior
245
+ * graph.</p>
211
246
  */
212
247
  MasterId?: string;
213
248
  /**
214
- * <p>The AWS account identifier of the administrator account for the behavior graph.</p>
249
+ * <p>The Amazon Web Services account identifier of the administrator account for the behavior
250
+ * graph.</p>
215
251
  */
216
252
  AdministratorId?: string;
217
253
  /**
@@ -220,37 +256,43 @@ export interface MemberDetail {
220
256
  * <ul>
221
257
  * <li>
222
258
  * <p>
223
- * <code>INVITED</code> - Indicates that the member was sent an invitation but has
224
- * not yet responded.</p>
259
+ * <code>INVITED</code> - For invited accounts only. Indicates that the member was
260
+ * sent an invitation but has not yet responded.</p>
225
261
  * </li>
226
262
  * <li>
227
263
  * <p>
228
- * <code>VERIFICATION_IN_PROGRESS</code> - Indicates that Detective is verifying that the
229
- * account identifier and email address provided for the member account match. If they
230
- * do match, then Detective sends the invitation. If the email address and account
231
- * identifier don't match, then the member cannot be added to the behavior graph.</p>
264
+ * <code>VERIFICATION_IN_PROGRESS</code> - For invited accounts only, indicates that
265
+ * Detective is verifying that the account identifier and email address
266
+ * provided for the member account match. If they do match, then Detective
267
+ * sends the invitation. If the email address and account identifier don't match, then
268
+ * the member cannot be added to the behavior graph.</p>
269
+ * <p>For organization accounts in the organization behavior graph, indicates that
270
+ * Detective is verifying that the account belongs to the
271
+ * organization.</p>
232
272
  * </li>
233
273
  * <li>
234
274
  * <p>
235
- * <code>VERIFICATION_FAILED</code> - Indicates that the account and email address
236
- * provided for the member account do not match, and Detective did not send an invitation to
237
- * the account.</p>
275
+ * <code>VERIFICATION_FAILED</code> - For invited accounts only. Indicates that the
276
+ * account and email address provided for the member account do not match, and Detective did not send an invitation to the account.</p>
238
277
  * </li>
239
278
  * <li>
240
279
  * <p>
241
- * <code>ENABLED</code> - Indicates that the member account accepted the invitation
242
- * to contribute to the behavior graph.</p>
280
+ * <code>ENABLED</code> - Indicates that the member account currently contributes
281
+ * data to the behavior graph. For invited accounts, the member account accepted the
282
+ * invitation. For organization accounts in the organization behavior graph, the Detective administrator account enabled the organization account as a member
283
+ * account.</p>
243
284
  * </li>
244
285
  * <li>
245
286
  * <p>
246
- * <code>ACCEPTED_BUT_DISABLED</code> - Indicates that the member account accepted
247
- * the invitation but is prevented from contributing data to the behavior graph.
248
- * <code>DisabledReason</code> provides the reason why the member account is not
249
- * enabled.</p>
287
+ * <code>ACCEPTED_BUT_DISABLED</code> - The account accepted the invitation, or was
288
+ * enabled by the Detective administrator account, but is prevented from
289
+ * contributing data to the behavior graph. <code>DisabledReason</code> provides the
290
+ * reason why the member account is not enabled.</p>
250
291
  * </li>
251
292
  * </ul>
252
- * <p>Member accounts that declined an invitation or that were removed from the behavior graph
253
- * are not included.</p>
293
+ * <p>Invited accounts that declined an invitation or that were removed from the behavior
294
+ * graph are not included. In the organization behavior graph, organization accounts that the
295
+ * Detective administrator account did not enable are not included.</p>
254
296
  */
255
297
  Status?: MemberStatus | string;
256
298
  /**
@@ -265,21 +307,22 @@ export interface MemberDetail {
265
307
  * </li>
266
308
  * <li>
267
309
  * <p>
268
- * <code>VOLUME_UNKNOWN</code> - Indicates that Detective is unable to verify the data
269
- * volume for the member account. This is usually because the member account is not
270
- * enrolled in Amazon GuardDuty. </p>
310
+ * <code>VOLUME_UNKNOWN</code> - Indicates that Detective is unable to
311
+ * verify the data volume for the member account. This is usually because the member
312
+ * account is not enrolled in Amazon GuardDuty. </p>
271
313
  * </li>
272
314
  * </ul>
273
315
  */
274
316
  DisabledReason?: MemberDisabledReason | string;
275
317
  /**
276
- * <p>The date and time that Detective sent the invitation to the member account. The value is in
277
- * milliseconds since the epoch.</p>
318
+ * <p>For invited accounts, the date and time that Detective sent the invitation to
319
+ * the account. The value is an ISO8601 formatted string. For example,
320
+ * <code>2021-08-18T16:35:56.284Z</code>.</p>
278
321
  */
279
322
  InvitedTime?: Date;
280
323
  /**
281
- * <p>The date and time that the member account was last updated. The value is in milliseconds
282
- * since the epoch.</p>
324
+ * <p>The date and time that the member account was last updated. The value is an ISO8601
325
+ * formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
283
326
  */
284
327
  UpdatedTime?: Date;
285
328
  /**
@@ -287,7 +330,8 @@ export interface MemberDetail {
287
330
  */
288
331
  VolumeUsageInBytes?: number;
289
332
  /**
290
- * <p>The data and time when the member account data volume was last updated.</p>
333
+ * <p>The data and time when the member account data volume was last updated. The value is an
334
+ * ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
291
335
  */
292
336
  VolumeUsageUpdatedTime?: Date;
293
337
  /**
@@ -305,9 +349,18 @@ export interface MemberDetail {
305
349
  /**
306
350
  * @deprecated
307
351
  *
308
- * <p>The date and time when the graph utilization percentage was last updated.</p>
352
+ * <p>The date and time when the graph utilization percentage was last updated. The value is
353
+ * an ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
309
354
  */
310
355
  PercentOfGraphUtilizationUpdatedTime?: Date;
356
+ /**
357
+ * <p>The type of behavior graph membership.</p>
358
+ * <p>For an organization account in the organization behavior graph, the type is
359
+ * <code>ORGANIZATION</code>.</p>
360
+ * <p>For an account that was invited to a behavior graph, the type is
361
+ * <code>INVITATION</code>. </p>
362
+ */
363
+ InvitationType?: InvitationType | string;
311
364
  }
312
365
  export declare namespace MemberDetail {
313
366
  /**
@@ -321,7 +374,8 @@ export declare namespace MemberDetail {
321
374
  */
322
375
  export interface UnprocessedAccount {
323
376
  /**
324
- * <p>The AWS account identifier of the member account that was not processed.</p>
377
+ * <p>The Amazon Web Services account identifier of the member account that was not
378
+ * processed.</p>
325
379
  */
326
380
  AccountId?: string;
327
381
  /**
@@ -337,15 +391,16 @@ export declare namespace UnprocessedAccount {
337
391
  }
338
392
  export interface CreateMembersResponse {
339
393
  /**
340
- * <p>The set of member account invitation requests that Detective was able to process. This
341
- * includes accounts that are being verified, that failed verification, and that passed
342
- * verification and are being sent an invitation.</p>
394
+ * <p>The set of member account invitation or enablement requests that Detective was
395
+ * able to process. This includes accounts that are being verified, that failed verification,
396
+ * and that passed verification and are being sent an invitation or are being enabled.</p>
343
397
  */
344
398
  Members?: MemberDetail[];
345
399
  /**
346
- * <p>The list of accounts for which Detective was unable to process the invitation request. For
347
- * each account, the list provides the reason why the request could not be processed. The list
348
- * includes accounts that are already member accounts in the behavior graph.</p>
400
+ * <p>The list of accounts for which Detective was unable to process the invitation
401
+ * or enablement request. For each account, the list provides the reason why the request could
402
+ * not be processed. The list includes accounts that are already member accounts in the
403
+ * behavior graph.</p>
349
404
  */
350
405
  UnprocessedAccounts?: UnprocessedAccount[];
351
406
  }
@@ -369,12 +424,12 @@ export declare namespace DeleteGraphRequest {
369
424
  }
370
425
  export interface DeleteMembersRequest {
371
426
  /**
372
- * <p>The ARN of the behavior graph to delete members from.</p>
427
+ * <p>The ARN of the behavior graph to remove members from.</p>
373
428
  */
374
429
  GraphArn: string | undefined;
375
430
  /**
376
- * <p>The list of AWS account identifiers for the member accounts to delete from the
377
- * behavior graph. You can delete up to 50 member accounts at a time.</p>
431
+ * <p>The list of Amazon Web Services account identifiers for the member accounts to remove
432
+ * from the behavior graph. You can remove up to 50 member accounts at a time.</p>
378
433
  */
379
434
  AccountIds: string[] | undefined;
380
435
  }
@@ -386,13 +441,12 @@ export declare namespace DeleteMembersRequest {
386
441
  }
387
442
  export interface DeleteMembersResponse {
388
443
  /**
389
- * <p>The list of AWS account identifiers for the member accounts that Detective successfully
390
- * deleted from the behavior graph.</p>
444
+ * <p>The list of Amazon Web Services account identifiers for the member accounts that Detective successfully removed from the behavior graph.</p>
391
445
  */
392
446
  AccountIds?: string[];
393
447
  /**
394
- * <p>The list of member accounts that Detective was not able to delete from the behavior graph.
395
- * For each member account, provides the reason that the deletion could not be
448
+ * <p>The list of member accounts that Detective was not able to remove from the
449
+ * behavior graph. For each member account, provides the reason that the deletion could not be
396
450
  * processed.</p>
397
451
  */
398
452
  UnprocessedAccounts?: UnprocessedAccount[];
@@ -403,6 +457,46 @@ export declare namespace DeleteMembersResponse {
403
457
  */
404
458
  const filterSensitiveLog: (obj: DeleteMembersResponse) => any;
405
459
  }
460
+ export interface DescribeOrganizationConfigurationRequest {
461
+ /**
462
+ * <p>The ARN of the organization behavior graph.</p>
463
+ */
464
+ GraphArn: string | undefined;
465
+ }
466
+ export declare namespace DescribeOrganizationConfigurationRequest {
467
+ /**
468
+ * @internal
469
+ */
470
+ const filterSensitiveLog: (obj: DescribeOrganizationConfigurationRequest) => any;
471
+ }
472
+ export interface DescribeOrganizationConfigurationResponse {
473
+ /**
474
+ * <p>Indicates whether to automatically enable new organization accounts as member accounts
475
+ * in the organization behavior graph.</p>
476
+ */
477
+ AutoEnable?: boolean;
478
+ }
479
+ export declare namespace DescribeOrganizationConfigurationResponse {
480
+ /**
481
+ * @internal
482
+ */
483
+ const filterSensitiveLog: (obj: DescribeOrganizationConfigurationResponse) => any;
484
+ }
485
+ /**
486
+ * <p>The request cannot be completed because too many other requests are occurring at the
487
+ * same time.</p>
488
+ */
489
+ export interface TooManyRequestsException extends __SmithyException, $MetadataBearer {
490
+ name: "TooManyRequestsException";
491
+ $fault: "client";
492
+ Message?: string;
493
+ }
494
+ export declare namespace TooManyRequestsException {
495
+ /**
496
+ * @internal
497
+ */
498
+ const filterSensitiveLog: (obj: TooManyRequestsException) => any;
499
+ }
406
500
  export interface DisassociateMembershipRequest {
407
501
  /**
408
502
  * <p>The ARN of the behavior graph to remove the member account from.</p>
@@ -417,14 +511,27 @@ export declare namespace DisassociateMembershipRequest {
417
511
  */
418
512
  const filterSensitiveLog: (obj: DisassociateMembershipRequest) => any;
419
513
  }
514
+ export interface EnableOrganizationAdminAccountRequest {
515
+ /**
516
+ * <p>The Amazon Web Services account identifier of the account to designate as the Detective administrator account for the organization.</p>
517
+ */
518
+ AccountId: string | undefined;
519
+ }
520
+ export declare namespace EnableOrganizationAdminAccountRequest {
521
+ /**
522
+ * @internal
523
+ */
524
+ const filterSensitiveLog: (obj: EnableOrganizationAdminAccountRequest) => any;
525
+ }
420
526
  export interface GetMembersRequest {
421
527
  /**
422
528
  * <p>The ARN of the behavior graph for which to request the member details.</p>
423
529
  */
424
530
  GraphArn: string | undefined;
425
531
  /**
426
- * <p>The list of AWS account identifiers for the member account for which to return member
427
- * details. You can request details for up to 50 member accounts at a time.</p>
532
+ * <p>The list of Amazon Web Services account identifiers for the member account for which to
533
+ * return member details. You can request details for up to 50 member accounts at a
534
+ * time.</p>
428
535
  * <p>You cannot use <code>GetMembers</code> to retrieve information about member accounts
429
536
  * that were removed from the behavior graph.</p>
430
537
  */
@@ -438,7 +545,8 @@ export declare namespace GetMembersRequest {
438
545
  }
439
546
  export interface GetMembersResponse {
440
547
  /**
441
- * <p>The member account details that Detective is returning in response to the request.</p>
548
+ * <p>The member account details that Detective is returning in response to the
549
+ * request.</p>
442
550
  */
443
551
  MemberDetails?: MemberDetail[];
444
552
  /**
@@ -482,8 +590,8 @@ export interface Graph {
482
590
  */
483
591
  Arn?: string;
484
592
  /**
485
- * <p>The date and time that the behavior graph was created. The value is in milliseconds
486
- * since the epoch.</p>
593
+ * <p>The date and time that the behavior graph was created. The value is an ISO8601 formatted
594
+ * string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
487
595
  */
488
596
  CreatedTime?: Date;
489
597
  }
@@ -574,14 +682,17 @@ export declare namespace ListMembersRequest {
574
682
  export interface ListMembersResponse {
575
683
  /**
576
684
  * <p>The list of member accounts in the behavior graph.</p>
577
- * <p>The results include member accounts that did not pass verification and member accounts
578
- * that have not yet accepted the invitation to the behavior graph. The results do not include
579
- * member accounts that were removed from the behavior graph.</p>
685
+ * <p>For invited accounts, the results include member accounts that did not pass verification
686
+ * and member accounts that have not yet accepted the invitation to the behavior graph. The
687
+ * results do not include member accounts that were removed from the behavior graph.</p>
688
+ * <p>For the organization behavior graph, the results do not include organization accounts
689
+ * that the Detective administrator account has not enabled as member
690
+ * accounts.</p>
580
691
  */
581
692
  MemberDetails?: MemberDetail[];
582
693
  /**
583
- * <p>If there are more member accounts remaining in the results, then this is the pagination
584
- * token to use to request the next page of member accounts.</p>
694
+ * <p>If there are more member accounts remaining in the results, then use this pagination
695
+ * token to request the next page of member accounts.</p>
585
696
  */
586
697
  NextToken?: string;
587
698
  }
@@ -591,6 +702,41 @@ export declare namespace ListMembersResponse {
591
702
  */
592
703
  const filterSensitiveLog: (obj: ListMembersResponse) => any;
593
704
  }
705
+ export interface ListOrganizationAdminAccountsRequest {
706
+ /**
707
+ * <p>For requests to get the next page of results, the pagination token that was returned
708
+ * with the previous set of results. The initial request does not include a pagination
709
+ * token.</p>
710
+ */
711
+ NextToken?: string;
712
+ /**
713
+ * <p>The maximum number of results to return.</p>
714
+ */
715
+ MaxResults?: number;
716
+ }
717
+ export declare namespace ListOrganizationAdminAccountsRequest {
718
+ /**
719
+ * @internal
720
+ */
721
+ const filterSensitiveLog: (obj: ListOrganizationAdminAccountsRequest) => any;
722
+ }
723
+ export interface ListOrganizationAdminAccountsResponse {
724
+ /**
725
+ * <p>The list of delegated administrator accounts.</p>
726
+ */
727
+ Administrators?: Administrator[];
728
+ /**
729
+ * <p>If there are more accounts remaining in the results, then this is the pagination token
730
+ * to use to request the next page of accounts.</p>
731
+ */
732
+ NextToken?: string;
733
+ }
734
+ export declare namespace ListOrganizationAdminAccountsResponse {
735
+ /**
736
+ * @internal
737
+ */
738
+ const filterSensitiveLog: (obj: ListOrganizationAdminAccountsResponse) => any;
739
+ }
594
740
  export interface ListTagsForResourceRequest {
595
741
  /**
596
742
  * <p>The ARN of the behavior graph for which to retrieve the tag values.</p>
@@ -703,3 +849,20 @@ export declare namespace UntagResourceResponse {
703
849
  */
704
850
  const filterSensitiveLog: (obj: UntagResourceResponse) => any;
705
851
  }
852
+ export interface UpdateOrganizationConfigurationRequest {
853
+ /**
854
+ * <p>The ARN of the organization behavior graph.</p>
855
+ */
856
+ GraphArn: string | undefined;
857
+ /**
858
+ * <p>Indicates whether to automatically enable new organization accounts as member accounts
859
+ * in the organization behavior graph.</p>
860
+ */
861
+ AutoEnable?: boolean;
862
+ }
863
+ export declare namespace UpdateOrganizationConfigurationRequest {
864
+ /**
865
+ * @internal
866
+ */
867
+ const filterSensitiveLog: (obj: UpdateOrganizationConfigurationRequest) => any;
868
+ }
@@ -0,0 +1,4 @@
1
+ import { Paginator } from "@aws-sdk/types";
2
+ import { ListOrganizationAdminAccountsCommandInput, ListOrganizationAdminAccountsCommandOutput } from "../commands/ListOrganizationAdminAccountsCommand";
3
+ import { DetectivePaginationConfiguration } from "./Interfaces";
4
+ export declare function paginateListOrganizationAdminAccounts(config: DetectivePaginationConfiguration, input: ListOrganizationAdminAccountsCommandInput, ...additionalArguments: any): Paginator<ListOrganizationAdminAccountsCommandOutput>;
@@ -2,3 +2,4 @@ export * from "./Interfaces";
2
2
  export * from "./ListGraphsPaginator";
3
3
  export * from "./ListInvitationsPaginator";
4
4
  export * from "./ListMembersPaginator";
5
+ export * from "./ListOrganizationAdminAccountsPaginator";
@@ -5,43 +5,58 @@ import { CreateGraphCommandInput, CreateGraphCommandOutput } from "../commands/C
5
5
  import { CreateMembersCommandInput, CreateMembersCommandOutput } from "../commands/CreateMembersCommand";
6
6
  import { DeleteGraphCommandInput, DeleteGraphCommandOutput } from "../commands/DeleteGraphCommand";
7
7
  import { DeleteMembersCommandInput, DeleteMembersCommandOutput } from "../commands/DeleteMembersCommand";
8
+ import { DescribeOrganizationConfigurationCommandInput, DescribeOrganizationConfigurationCommandOutput } from "../commands/DescribeOrganizationConfigurationCommand";
9
+ import { DisableOrganizationAdminAccountCommandInput, DisableOrganizationAdminAccountCommandOutput } from "../commands/DisableOrganizationAdminAccountCommand";
8
10
  import { DisassociateMembershipCommandInput, DisassociateMembershipCommandOutput } from "../commands/DisassociateMembershipCommand";
11
+ import { EnableOrganizationAdminAccountCommandInput, EnableOrganizationAdminAccountCommandOutput } from "../commands/EnableOrganizationAdminAccountCommand";
9
12
  import { GetMembersCommandInput, GetMembersCommandOutput } from "../commands/GetMembersCommand";
10
13
  import { ListGraphsCommandInput, ListGraphsCommandOutput } from "../commands/ListGraphsCommand";
11
14
  import { ListInvitationsCommandInput, ListInvitationsCommandOutput } from "../commands/ListInvitationsCommand";
12
15
  import { ListMembersCommandInput, ListMembersCommandOutput } from "../commands/ListMembersCommand";
16
+ import { ListOrganizationAdminAccountsCommandInput, ListOrganizationAdminAccountsCommandOutput } from "../commands/ListOrganizationAdminAccountsCommand";
13
17
  import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "../commands/ListTagsForResourceCommand";
14
18
  import { RejectInvitationCommandInput, RejectInvitationCommandOutput } from "../commands/RejectInvitationCommand";
15
19
  import { StartMonitoringMemberCommandInput, StartMonitoringMemberCommandOutput } from "../commands/StartMonitoringMemberCommand";
16
20
  import { TagResourceCommandInput, TagResourceCommandOutput } from "../commands/TagResourceCommand";
17
21
  import { UntagResourceCommandInput, UntagResourceCommandOutput } from "../commands/UntagResourceCommand";
22
+ import { UpdateOrganizationConfigurationCommandInput, UpdateOrganizationConfigurationCommandOutput } from "../commands/UpdateOrganizationConfigurationCommand";
18
23
  export declare const serializeAws_restJson1AcceptInvitationCommand: (input: AcceptInvitationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
19
24
  export declare const serializeAws_restJson1CreateGraphCommand: (input: CreateGraphCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
20
25
  export declare const serializeAws_restJson1CreateMembersCommand: (input: CreateMembersCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
21
26
  export declare const serializeAws_restJson1DeleteGraphCommand: (input: DeleteGraphCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
22
27
  export declare const serializeAws_restJson1DeleteMembersCommand: (input: DeleteMembersCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
28
+ export declare const serializeAws_restJson1DescribeOrganizationConfigurationCommand: (input: DescribeOrganizationConfigurationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
29
+ export declare const serializeAws_restJson1DisableOrganizationAdminAccountCommand: (input: DisableOrganizationAdminAccountCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
23
30
  export declare const serializeAws_restJson1DisassociateMembershipCommand: (input: DisassociateMembershipCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
31
+ export declare const serializeAws_restJson1EnableOrganizationAdminAccountCommand: (input: EnableOrganizationAdminAccountCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
24
32
  export declare const serializeAws_restJson1GetMembersCommand: (input: GetMembersCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
25
33
  export declare const serializeAws_restJson1ListGraphsCommand: (input: ListGraphsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
26
34
  export declare const serializeAws_restJson1ListInvitationsCommand: (input: ListInvitationsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
27
35
  export declare const serializeAws_restJson1ListMembersCommand: (input: ListMembersCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
36
+ export declare const serializeAws_restJson1ListOrganizationAdminAccountsCommand: (input: ListOrganizationAdminAccountsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
28
37
  export declare const serializeAws_restJson1ListTagsForResourceCommand: (input: ListTagsForResourceCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
29
38
  export declare const serializeAws_restJson1RejectInvitationCommand: (input: RejectInvitationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
30
39
  export declare const serializeAws_restJson1StartMonitoringMemberCommand: (input: StartMonitoringMemberCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
31
40
  export declare const serializeAws_restJson1TagResourceCommand: (input: TagResourceCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
32
41
  export declare const serializeAws_restJson1UntagResourceCommand: (input: UntagResourceCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
42
+ export declare const serializeAws_restJson1UpdateOrganizationConfigurationCommand: (input: UpdateOrganizationConfigurationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
33
43
  export declare const deserializeAws_restJson1AcceptInvitationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<AcceptInvitationCommandOutput>;
34
44
  export declare const deserializeAws_restJson1CreateGraphCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<CreateGraphCommandOutput>;
35
45
  export declare const deserializeAws_restJson1CreateMembersCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<CreateMembersCommandOutput>;
36
46
  export declare const deserializeAws_restJson1DeleteGraphCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteGraphCommandOutput>;
37
47
  export declare const deserializeAws_restJson1DeleteMembersCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteMembersCommandOutput>;
48
+ export declare const deserializeAws_restJson1DescribeOrganizationConfigurationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeOrganizationConfigurationCommandOutput>;
49
+ export declare const deserializeAws_restJson1DisableOrganizationAdminAccountCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DisableOrganizationAdminAccountCommandOutput>;
38
50
  export declare const deserializeAws_restJson1DisassociateMembershipCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DisassociateMembershipCommandOutput>;
51
+ export declare const deserializeAws_restJson1EnableOrganizationAdminAccountCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<EnableOrganizationAdminAccountCommandOutput>;
39
52
  export declare const deserializeAws_restJson1GetMembersCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetMembersCommandOutput>;
40
53
  export declare const deserializeAws_restJson1ListGraphsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListGraphsCommandOutput>;
41
54
  export declare const deserializeAws_restJson1ListInvitationsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListInvitationsCommandOutput>;
42
55
  export declare const deserializeAws_restJson1ListMembersCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListMembersCommandOutput>;
56
+ export declare const deserializeAws_restJson1ListOrganizationAdminAccountsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListOrganizationAdminAccountsCommandOutput>;
43
57
  export declare const deserializeAws_restJson1ListTagsForResourceCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListTagsForResourceCommandOutput>;
44
58
  export declare const deserializeAws_restJson1RejectInvitationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RejectInvitationCommandOutput>;
45
59
  export declare const deserializeAws_restJson1StartMonitoringMemberCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<StartMonitoringMemberCommandOutput>;
46
60
  export declare const deserializeAws_restJson1TagResourceCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<TagResourceCommandOutput>;
47
61
  export declare const deserializeAws_restJson1UntagResourceCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<UntagResourceCommandOutput>;
62
+ export declare const deserializeAws_restJson1UpdateOrganizationConfigurationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<UpdateOrganizationConfigurationCommandOutput>;