@aws-sdk/client-detective 3.45.0 → 3.47.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (70) hide show
  1. package/CHANGELOG.md +45 -0
  2. package/README.md +41 -13
  3. package/dist-cjs/Detective.js +75 -0
  4. package/dist-cjs/commands/DescribeOrganizationConfigurationCommand.js +36 -0
  5. package/dist-cjs/commands/DisableOrganizationAdminAccountCommand.js +35 -0
  6. package/dist-cjs/commands/EnableOrganizationAdminAccountCommand.js +36 -0
  7. package/dist-cjs/commands/ListOrganizationAdminAccountsCommand.js +36 -0
  8. package/dist-cjs/commands/UpdateOrganizationConfigurationCommand.js +36 -0
  9. package/dist-cjs/commands/index.js +5 -0
  10. package/dist-cjs/endpoints.js +0 -24
  11. package/dist-cjs/models/models_0.js +48 -31
  12. package/dist-cjs/pagination/ListOrganizationAdminAccountsPaginator.js +35 -0
  13. package/dist-cjs/pagination/index.js +1 -0
  14. package/dist-cjs/protocols/Aws_restJson1.js +451 -1
  15. package/dist-cjs/runtimeConfig.browser.js +7 -2
  16. package/dist-cjs/runtimeConfig.js +9 -3
  17. package/dist-es/Detective.js +75 -0
  18. package/dist-es/commands/DescribeOrganizationConfigurationCommand.js +39 -0
  19. package/dist-es/commands/DisableOrganizationAdminAccountCommand.js +38 -0
  20. package/dist-es/commands/EnableOrganizationAdminAccountCommand.js +39 -0
  21. package/dist-es/commands/ListOrganizationAdminAccountsCommand.js +39 -0
  22. package/dist-es/commands/UpdateOrganizationConfigurationCommand.js +39 -0
  23. package/dist-es/commands/index.js +5 -0
  24. package/dist-es/endpoints.js +0 -24
  25. package/dist-es/models/models_0.js +33 -20
  26. package/dist-es/pagination/ListOrganizationAdminAccountsPaginator.js +74 -0
  27. package/dist-es/pagination/index.js +1 -0
  28. package/dist-es/protocols/Aws_restJson1.js +533 -1
  29. package/dist-es/runtimeConfig.browser.js +12 -3
  30. package/dist-es/runtimeConfig.js +13 -6
  31. package/dist-types/Detective.d.ts +154 -42
  32. package/dist-types/DetectiveClient.d.ts +54 -17
  33. package/dist-types/commands/CreateGraphCommand.d.ts +9 -9
  34. package/dist-types/commands/CreateMembersCommand.d.ts +17 -7
  35. package/dist-types/commands/DeleteGraphCommand.d.ts +1 -1
  36. package/dist-types/commands/DeleteMembersCommand.d.ts +13 -5
  37. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +38 -0
  38. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +38 -0
  39. package/dist-types/commands/DisassociateMembershipCommand.d.ts +6 -1
  40. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +42 -0
  41. package/dist-types/commands/ListInvitationsCommand.d.ts +1 -1
  42. package/dist-types/commands/ListMembersCommand.d.ts +6 -2
  43. package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +36 -0
  44. package/dist-types/commands/RejectInvitationCommand.d.ts +6 -1
  45. package/dist-types/commands/StartMonitoringMemberCommand.d.ts +1 -1
  46. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +37 -0
  47. package/dist-types/commands/index.d.ts +5 -0
  48. package/dist-types/models/models_0.d.ts +228 -101
  49. package/dist-types/pagination/ListOrganizationAdminAccountsPaginator.d.ts +4 -0
  50. package/dist-types/pagination/index.d.ts +1 -0
  51. package/dist-types/protocols/Aws_restJson1.d.ts +15 -0
  52. package/dist-types/runtimeConfig.browser.d.ts +3 -2
  53. package/dist-types/runtimeConfig.d.ts +4 -3
  54. package/dist-types/runtimeConfig.native.d.ts +1 -0
  55. package/dist-types/ts3.4/Detective.d.ts +25 -0
  56. package/dist-types/ts3.4/DetectiveClient.d.ts +10 -3
  57. package/dist-types/ts3.4/commands/DescribeOrganizationConfigurationCommand.d.ts +17 -0
  58. package/dist-types/ts3.4/commands/DisableOrganizationAdminAccountCommand.d.ts +16 -0
  59. package/dist-types/ts3.4/commands/EnableOrganizationAdminAccountCommand.d.ts +17 -0
  60. package/dist-types/ts3.4/commands/ListOrganizationAdminAccountsCommand.d.ts +17 -0
  61. package/dist-types/ts3.4/commands/UpdateOrganizationConfigurationCommand.d.ts +17 -0
  62. package/dist-types/ts3.4/commands/index.d.ts +5 -0
  63. package/dist-types/ts3.4/models/models_0.d.ts +79 -20
  64. package/dist-types/ts3.4/pagination/ListOrganizationAdminAccountsPaginator.d.ts +4 -0
  65. package/dist-types/ts3.4/pagination/index.d.ts +1 -0
  66. package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +15 -0
  67. package/dist-types/ts3.4/runtimeConfig.browser.d.ts +3 -2
  68. package/dist-types/ts3.4/runtimeConfig.d.ts +4 -3
  69. package/dist-types/ts3.4/runtimeConfig.native.d.ts +1 -0
  70. package/package.json +39 -46
@@ -21,12 +21,6 @@ export interface ConflictException extends __SmithyException, $MetadataBearer {
21
21
  $fault: "client";
22
22
  Message?: string;
23
23
  }
24
- export declare namespace ConflictException {
25
- /**
26
- * @internal
27
- */
28
- const filterSensitiveLog: (obj: ConflictException) => any;
29
- }
30
24
  /**
31
25
  * <p>The request was valid but failed because of a problem with the service.</p>
32
26
  */
@@ -35,12 +29,6 @@ export interface InternalServerException extends __SmithyException, $MetadataBea
35
29
  $fault: "server";
36
30
  Message?: string;
37
31
  }
38
- export declare namespace InternalServerException {
39
- /**
40
- * @internal
41
- */
42
- const filterSensitiveLog: (obj: InternalServerException) => any;
43
- }
44
32
  /**
45
33
  * <p>The request refers to a nonexistent resource.</p>
46
34
  */
@@ -49,12 +37,6 @@ export interface ResourceNotFoundException extends __SmithyException, $MetadataB
49
37
  $fault: "client";
50
38
  Message?: string;
51
39
  }
52
- export declare namespace ResourceNotFoundException {
53
- /**
54
- * @internal
55
- */
56
- const filterSensitiveLog: (obj: ResourceNotFoundException) => any;
57
- }
58
40
  /**
59
41
  * <p>The request parameters are invalid.</p>
60
42
  */
@@ -63,23 +45,18 @@ export interface ValidationException extends __SmithyException, $MetadataBearer
63
45
  $fault: "client";
64
46
  Message?: string;
65
47
  }
66
- export declare namespace ValidationException {
67
- /**
68
- * @internal
69
- */
70
- const filterSensitiveLog: (obj: ValidationException) => any;
71
- }
72
48
  /**
73
- * <p>An AWS account that is the administrator account of or a member of a behavior
74
- * graph.</p>
49
+ * <p>An Amazon Web Services account that is the administrator account of or a member of a
50
+ * behavior graph.</p>
75
51
  */
76
52
  export interface Account {
77
53
  /**
78
- * <p>The account identifier of the AWS account.</p>
54
+ * <p>The account identifier of the Amazon Web Services account.</p>
79
55
  */
80
56
  AccountId: string | undefined;
81
57
  /**
82
- * <p>The AWS account root user email address for the AWS account.</p>
58
+ * <p>The Amazon Web Services account root user email address for the Amazon Web Services
59
+ * account.</p>
83
60
  */
84
61
  EmailAddress: string | undefined;
85
62
  }
@@ -89,6 +66,33 @@ export declare namespace Account {
89
66
  */
90
67
  const filterSensitiveLog: (obj: Account) => any;
91
68
  }
69
+ /**
70
+ * <p>Information about the Detective administrator account for an
71
+ * organization.</p>
72
+ */
73
+ export interface Administrator {
74
+ /**
75
+ * <p>The Amazon Web Services account identifier of the Detective administrator
76
+ * account for the organization.</p>
77
+ */
78
+ AccountId?: string;
79
+ /**
80
+ * <p>The ARN of the organization behavior graph.</p>
81
+ */
82
+ GraphArn?: string;
83
+ /**
84
+ * <p>The date and time when the Detective administrator account was enabled. The
85
+ * value is an ISO8601 formatted string. For example,
86
+ * <code>2021-08-18T16:35:56.284Z</code>.</p>
87
+ */
88
+ DelegationTime?: Date;
89
+ }
90
+ export declare namespace Administrator {
91
+ /**
92
+ * @internal
93
+ */
94
+ const filterSensitiveLog: (obj: Administrator) => any;
95
+ }
92
96
  export interface CreateGraphRequest {
93
97
  /**
94
98
  * <p>The tags to assign to the new behavior graph. You can add up to 50 tags. For each tag,
@@ -122,7 +126,7 @@ export declare namespace CreateGraphResponse {
122
126
  * <ul>
123
127
  * <li>
124
128
  * <p>The request would cause the number of member accounts in the behavior graph to
125
- * exceed the maximum allowed. A behavior graph cannot have more than 1000 member
129
+ * exceed the maximum allowed. A behavior graph cannot have more than 1200 member
126
130
  * accounts.</p>
127
131
  * </li>
128
132
  * <li>
@@ -130,8 +134,8 @@ export declare namespace CreateGraphResponse {
130
134
  * allowed.</p>
131
135
  * </li>
132
136
  * <li>
133
- * <p>Detective is unable to verify the data rate for the member account. This is usually
134
- * because the member account is not enrolled in Amazon GuardDuty. </p>
137
+ * <p>Detective is unable to verify the data rate for the member account. This
138
+ * is usually because the member account is not enrolled in Amazon GuardDuty.</p>
135
139
  * </li>
136
140
  * </ul>
137
141
  */
@@ -140,16 +144,9 @@ export interface ServiceQuotaExceededException extends __SmithyException, $Metad
140
144
  $fault: "client";
141
145
  Message?: string;
142
146
  }
143
- export declare namespace ServiceQuotaExceededException {
144
- /**
145
- * @internal
146
- */
147
- const filterSensitiveLog: (obj: ServiceQuotaExceededException) => any;
148
- }
149
147
  export interface CreateMembersRequest {
150
148
  /**
151
- * <p>The ARN of the behavior graph to invite the member accounts to contribute their data
152
- * to.</p>
149
+ * <p>The ARN of the behavior graph.</p>
153
150
  */
154
151
  GraphArn: string | undefined;
155
152
  /**
@@ -158,15 +155,19 @@ export interface CreateMembersRequest {
158
155
  */
159
156
  Message?: string;
160
157
  /**
161
- * <p>if set to <code>true</code>, then the member accounts do not receive email
162
- * notifications. By default, this is set to <code>false</code>, and the member accounts
158
+ * <p>if set to <code>true</code>, then the invited accounts do not receive email
159
+ * notifications. By default, this is set to <code>false</code>, and the invited accounts
163
160
  * receive email notifications.</p>
161
+ * <p>Organization accounts in the organization behavior graph do not receive email
162
+ * notifications.</p>
164
163
  */
165
164
  DisableEmailNotification?: boolean;
166
165
  /**
167
- * <p>The list of AWS accounts to invite to become member accounts in the behavior graph.
168
- * You can invite up to 50 accounts at a time. For each invited account, the account list
169
- * contains the account identifier and the AWS account root user email address.</p>
166
+ * <p>The list of Amazon Web Services accounts to invite or to enable. You can invite or enable
167
+ * up to 50 accounts at a time. For each invited account, the account list contains the
168
+ * account identifier and the Amazon Web Services account root user email address. For
169
+ * organization accounts in the organization behavior graph, the email address is not
170
+ * required.</p>
170
171
  */
171
172
  Accounts: Account[] | undefined;
172
173
  }
@@ -180,6 +181,10 @@ export declare enum MemberDisabledReason {
180
181
  VOLUME_TOO_HIGH = "VOLUME_TOO_HIGH",
181
182
  VOLUME_UNKNOWN = "VOLUME_UNKNOWN"
182
183
  }
184
+ export declare enum InvitationType {
185
+ INVITATION = "INVITATION",
186
+ ORGANIZATION = "ORGANIZATION"
187
+ }
183
188
  export declare enum MemberStatus {
184
189
  ACCEPTED_BUT_DISABLED = "ACCEPTED_BUT_DISABLED",
185
190
  ENABLED = "ENABLED",
@@ -188,30 +193,31 @@ export declare enum MemberStatus {
188
193
  VERIFICATION_IN_PROGRESS = "VERIFICATION_IN_PROGRESS"
189
194
  }
190
195
  /**
191
- * <p>Details about a member account that was invited to contribute to a behavior
192
- * graph.</p>
196
+ * <p>Details about a member account in a behavior graph.</p>
193
197
  */
194
198
  export interface MemberDetail {
195
199
  /**
196
- * <p>The AWS account identifier for the member account.</p>
200
+ * <p>The Amazon Web Services account identifier for the member account.</p>
197
201
  */
198
202
  AccountId?: string;
199
203
  /**
200
- * <p>The AWS account root user email address for the member account.</p>
204
+ * <p>The Amazon Web Services account root user email address for the member account.</p>
201
205
  */
202
206
  EmailAddress?: string;
203
207
  /**
204
- * <p>The ARN of the behavior graph that the member account was invited to.</p>
208
+ * <p>The ARN of the behavior graph.</p>
205
209
  */
206
210
  GraphArn?: string;
207
211
  /**
208
212
  * @deprecated
209
213
  *
210
- * <p>The AWS account identifier of the administrator account for the behavior graph.</p>
214
+ * <p>The Amazon Web Services account identifier of the administrator account for the behavior
215
+ * graph.</p>
211
216
  */
212
217
  MasterId?: string;
213
218
  /**
214
- * <p>The AWS account identifier of the administrator account for the behavior graph.</p>
219
+ * <p>The Amazon Web Services account identifier of the administrator account for the behavior
220
+ * graph.</p>
215
221
  */
216
222
  AdministratorId?: string;
217
223
  /**
@@ -220,37 +226,43 @@ export interface MemberDetail {
220
226
  * <ul>
221
227
  * <li>
222
228
  * <p>
223
- * <code>INVITED</code> - Indicates that the member was sent an invitation but has
224
- * not yet responded.</p>
229
+ * <code>INVITED</code> - For invited accounts only. Indicates that the member was
230
+ * sent an invitation but has not yet responded.</p>
225
231
  * </li>
226
232
  * <li>
227
233
  * <p>
228
- * <code>VERIFICATION_IN_PROGRESS</code> - Indicates that Detective is verifying that the
229
- * account identifier and email address provided for the member account match. If they
230
- * do match, then Detective sends the invitation. If the email address and account
231
- * identifier don't match, then the member cannot be added to the behavior graph.</p>
234
+ * <code>VERIFICATION_IN_PROGRESS</code> - For invited accounts only, indicates that
235
+ * Detective is verifying that the account identifier and email address
236
+ * provided for the member account match. If they do match, then Detective
237
+ * sends the invitation. If the email address and account identifier don't match, then
238
+ * the member cannot be added to the behavior graph.</p>
239
+ * <p>For organization accounts in the organization behavior graph, indicates that
240
+ * Detective is verifying that the account belongs to the
241
+ * organization.</p>
232
242
  * </li>
233
243
  * <li>
234
244
  * <p>
235
- * <code>VERIFICATION_FAILED</code> - Indicates that the account and email address
236
- * provided for the member account do not match, and Detective did not send an invitation to
237
- * the account.</p>
245
+ * <code>VERIFICATION_FAILED</code> - For invited accounts only. Indicates that the
246
+ * account and email address provided for the member account do not match, and Detective did not send an invitation to the account.</p>
238
247
  * </li>
239
248
  * <li>
240
249
  * <p>
241
- * <code>ENABLED</code> - Indicates that the member account accepted the invitation
242
- * to contribute to the behavior graph.</p>
250
+ * <code>ENABLED</code> - Indicates that the member account currently contributes
251
+ * data to the behavior graph. For invited accounts, the member account accepted the
252
+ * invitation. For organization accounts in the organization behavior graph, the Detective administrator account enabled the organization account as a member
253
+ * account.</p>
243
254
  * </li>
244
255
  * <li>
245
256
  * <p>
246
- * <code>ACCEPTED_BUT_DISABLED</code> - Indicates that the member account accepted
247
- * the invitation but is prevented from contributing data to the behavior graph.
248
- * <code>DisabledReason</code> provides the reason why the member account is not
249
- * enabled.</p>
257
+ * <code>ACCEPTED_BUT_DISABLED</code> - The account accepted the invitation, or was
258
+ * enabled by the Detective administrator account, but is prevented from
259
+ * contributing data to the behavior graph. <code>DisabledReason</code> provides the
260
+ * reason why the member account is not enabled.</p>
250
261
  * </li>
251
262
  * </ul>
252
- * <p>Member accounts that declined an invitation or that were removed from the behavior graph
253
- * are not included.</p>
263
+ * <p>Invited accounts that declined an invitation or that were removed from the behavior
264
+ * graph are not included. In the organization behavior graph, organization accounts that the
265
+ * Detective administrator account did not enable are not included.</p>
254
266
  */
255
267
  Status?: MemberStatus | string;
256
268
  /**
@@ -265,21 +277,22 @@ export interface MemberDetail {
265
277
  * </li>
266
278
  * <li>
267
279
  * <p>
268
- * <code>VOLUME_UNKNOWN</code> - Indicates that Detective is unable to verify the data
269
- * volume for the member account. This is usually because the member account is not
270
- * enrolled in Amazon GuardDuty. </p>
280
+ * <code>VOLUME_UNKNOWN</code> - Indicates that Detective is unable to
281
+ * verify the data volume for the member account. This is usually because the member
282
+ * account is not enrolled in Amazon GuardDuty. </p>
271
283
  * </li>
272
284
  * </ul>
273
285
  */
274
286
  DisabledReason?: MemberDisabledReason | string;
275
287
  /**
276
- * <p>The date and time that Detective sent the invitation to the member account. The value is in
277
- * milliseconds since the epoch.</p>
288
+ * <p>For invited accounts, the date and time that Detective sent the invitation to
289
+ * the account. The value is an ISO8601 formatted string. For example,
290
+ * <code>2021-08-18T16:35:56.284Z</code>.</p>
278
291
  */
279
292
  InvitedTime?: Date;
280
293
  /**
281
- * <p>The date and time that the member account was last updated. The value is in milliseconds
282
- * since the epoch.</p>
294
+ * <p>The date and time that the member account was last updated. The value is an ISO8601
295
+ * formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
283
296
  */
284
297
  UpdatedTime?: Date;
285
298
  /**
@@ -287,7 +300,8 @@ export interface MemberDetail {
287
300
  */
288
301
  VolumeUsageInBytes?: number;
289
302
  /**
290
- * <p>The data and time when the member account data volume was last updated.</p>
303
+ * <p>The data and time when the member account data volume was last updated. The value is an
304
+ * ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
291
305
  */
292
306
  VolumeUsageUpdatedTime?: Date;
293
307
  /**
@@ -305,9 +319,18 @@ export interface MemberDetail {
305
319
  /**
306
320
  * @deprecated
307
321
  *
308
- * <p>The date and time when the graph utilization percentage was last updated.</p>
322
+ * <p>The date and time when the graph utilization percentage was last updated. The value is
323
+ * an ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
309
324
  */
310
325
  PercentOfGraphUtilizationUpdatedTime?: Date;
326
+ /**
327
+ * <p>The type of behavior graph membership.</p>
328
+ * <p>For an organization account in the organization behavior graph, the type is
329
+ * <code>ORGANIZATION</code>.</p>
330
+ * <p>For an account that was invited to a behavior graph, the type is
331
+ * <code>INVITATION</code>. </p>
332
+ */
333
+ InvitationType?: InvitationType | string;
311
334
  }
312
335
  export declare namespace MemberDetail {
313
336
  /**
@@ -321,7 +344,8 @@ export declare namespace MemberDetail {
321
344
  */
322
345
  export interface UnprocessedAccount {
323
346
  /**
324
- * <p>The AWS account identifier of the member account that was not processed.</p>
347
+ * <p>The Amazon Web Services account identifier of the member account that was not
348
+ * processed.</p>
325
349
  */
326
350
  AccountId?: string;
327
351
  /**
@@ -337,15 +361,16 @@ export declare namespace UnprocessedAccount {
337
361
  }
338
362
  export interface CreateMembersResponse {
339
363
  /**
340
- * <p>The set of member account invitation requests that Detective was able to process. This
341
- * includes accounts that are being verified, that failed verification, and that passed
342
- * verification and are being sent an invitation.</p>
364
+ * <p>The set of member account invitation or enablement requests that Detective was
365
+ * able to process. This includes accounts that are being verified, that failed verification,
366
+ * and that passed verification and are being sent an invitation or are being enabled.</p>
343
367
  */
344
368
  Members?: MemberDetail[];
345
369
  /**
346
- * <p>The list of accounts for which Detective was unable to process the invitation request. For
347
- * each account, the list provides the reason why the request could not be processed. The list
348
- * includes accounts that are already member accounts in the behavior graph.</p>
370
+ * <p>The list of accounts for which Detective was unable to process the invitation
371
+ * or enablement request. For each account, the list provides the reason why the request could
372
+ * not be processed. The list includes accounts that are already member accounts in the
373
+ * behavior graph.</p>
349
374
  */
350
375
  UnprocessedAccounts?: UnprocessedAccount[];
351
376
  }
@@ -369,12 +394,12 @@ export declare namespace DeleteGraphRequest {
369
394
  }
370
395
  export interface DeleteMembersRequest {
371
396
  /**
372
- * <p>The ARN of the behavior graph to delete members from.</p>
397
+ * <p>The ARN of the behavior graph to remove members from.</p>
373
398
  */
374
399
  GraphArn: string | undefined;
375
400
  /**
376
- * <p>The list of AWS account identifiers for the member accounts to delete from the
377
- * behavior graph. You can delete up to 50 member accounts at a time.</p>
401
+ * <p>The list of Amazon Web Services account identifiers for the member accounts to remove
402
+ * from the behavior graph. You can remove up to 50 member accounts at a time.</p>
378
403
  */
379
404
  AccountIds: string[] | undefined;
380
405
  }
@@ -386,13 +411,12 @@ export declare namespace DeleteMembersRequest {
386
411
  }
387
412
  export interface DeleteMembersResponse {
388
413
  /**
389
- * <p>The list of AWS account identifiers for the member accounts that Detective successfully
390
- * deleted from the behavior graph.</p>
414
+ * <p>The list of Amazon Web Services account identifiers for the member accounts that Detective successfully removed from the behavior graph.</p>
391
415
  */
392
416
  AccountIds?: string[];
393
417
  /**
394
- * <p>The list of member accounts that Detective was not able to delete from the behavior graph.
395
- * For each member account, provides the reason that the deletion could not be
418
+ * <p>The list of member accounts that Detective was not able to remove from the
419
+ * behavior graph. For each member account, provides the reason that the deletion could not be
396
420
  * processed.</p>
397
421
  */
398
422
  UnprocessedAccounts?: UnprocessedAccount[];
@@ -403,6 +427,40 @@ export declare namespace DeleteMembersResponse {
403
427
  */
404
428
  const filterSensitiveLog: (obj: DeleteMembersResponse) => any;
405
429
  }
430
+ export interface DescribeOrganizationConfigurationRequest {
431
+ /**
432
+ * <p>The ARN of the organization behavior graph.</p>
433
+ */
434
+ GraphArn: string | undefined;
435
+ }
436
+ export declare namespace DescribeOrganizationConfigurationRequest {
437
+ /**
438
+ * @internal
439
+ */
440
+ const filterSensitiveLog: (obj: DescribeOrganizationConfigurationRequest) => any;
441
+ }
442
+ export interface DescribeOrganizationConfigurationResponse {
443
+ /**
444
+ * <p>Indicates whether to automatically enable new organization accounts as member accounts
445
+ * in the organization behavior graph.</p>
446
+ */
447
+ AutoEnable?: boolean;
448
+ }
449
+ export declare namespace DescribeOrganizationConfigurationResponse {
450
+ /**
451
+ * @internal
452
+ */
453
+ const filterSensitiveLog: (obj: DescribeOrganizationConfigurationResponse) => any;
454
+ }
455
+ /**
456
+ * <p>The request cannot be completed because too many other requests are occurring at the
457
+ * same time.</p>
458
+ */
459
+ export interface TooManyRequestsException extends __SmithyException, $MetadataBearer {
460
+ name: "TooManyRequestsException";
461
+ $fault: "client";
462
+ Message?: string;
463
+ }
406
464
  export interface DisassociateMembershipRequest {
407
465
  /**
408
466
  * <p>The ARN of the behavior graph to remove the member account from.</p>
@@ -417,14 +475,27 @@ export declare namespace DisassociateMembershipRequest {
417
475
  */
418
476
  const filterSensitiveLog: (obj: DisassociateMembershipRequest) => any;
419
477
  }
478
+ export interface EnableOrganizationAdminAccountRequest {
479
+ /**
480
+ * <p>The Amazon Web Services account identifier of the account to designate as the Detective administrator account for the organization.</p>
481
+ */
482
+ AccountId: string | undefined;
483
+ }
484
+ export declare namespace EnableOrganizationAdminAccountRequest {
485
+ /**
486
+ * @internal
487
+ */
488
+ const filterSensitiveLog: (obj: EnableOrganizationAdminAccountRequest) => any;
489
+ }
420
490
  export interface GetMembersRequest {
421
491
  /**
422
492
  * <p>The ARN of the behavior graph for which to request the member details.</p>
423
493
  */
424
494
  GraphArn: string | undefined;
425
495
  /**
426
- * <p>The list of AWS account identifiers for the member account for which to return member
427
- * details. You can request details for up to 50 member accounts at a time.</p>
496
+ * <p>The list of Amazon Web Services account identifiers for the member account for which to
497
+ * return member details. You can request details for up to 50 member accounts at a
498
+ * time.</p>
428
499
  * <p>You cannot use <code>GetMembers</code> to retrieve information about member accounts
429
500
  * that were removed from the behavior graph.</p>
430
501
  */
@@ -438,7 +509,8 @@ export declare namespace GetMembersRequest {
438
509
  }
439
510
  export interface GetMembersResponse {
440
511
  /**
441
- * <p>The member account details that Detective is returning in response to the request.</p>
512
+ * <p>The member account details that Detective is returning in response to the
513
+ * request.</p>
442
514
  */
443
515
  MemberDetails?: MemberDetail[];
444
516
  /**
@@ -482,8 +554,8 @@ export interface Graph {
482
554
  */
483
555
  Arn?: string;
484
556
  /**
485
- * <p>The date and time that the behavior graph was created. The value is in milliseconds
486
- * since the epoch.</p>
557
+ * <p>The date and time that the behavior graph was created. The value is an ISO8601 formatted
558
+ * string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
487
559
  */
488
560
  CreatedTime?: Date;
489
561
  }
@@ -574,14 +646,17 @@ export declare namespace ListMembersRequest {
574
646
  export interface ListMembersResponse {
575
647
  /**
576
648
  * <p>The list of member accounts in the behavior graph.</p>
577
- * <p>The results include member accounts that did not pass verification and member accounts
578
- * that have not yet accepted the invitation to the behavior graph. The results do not include
579
- * member accounts that were removed from the behavior graph.</p>
649
+ * <p>For invited accounts, the results include member accounts that did not pass verification
650
+ * and member accounts that have not yet accepted the invitation to the behavior graph. The
651
+ * results do not include member accounts that were removed from the behavior graph.</p>
652
+ * <p>For the organization behavior graph, the results do not include organization accounts
653
+ * that the Detective administrator account has not enabled as member
654
+ * accounts.</p>
580
655
  */
581
656
  MemberDetails?: MemberDetail[];
582
657
  /**
583
- * <p>If there are more member accounts remaining in the results, then this is the pagination
584
- * token to use to request the next page of member accounts.</p>
658
+ * <p>If there are more member accounts remaining in the results, then use this pagination
659
+ * token to request the next page of member accounts.</p>
585
660
  */
586
661
  NextToken?: string;
587
662
  }
@@ -591,6 +666,41 @@ export declare namespace ListMembersResponse {
591
666
  */
592
667
  const filterSensitiveLog: (obj: ListMembersResponse) => any;
593
668
  }
669
+ export interface ListOrganizationAdminAccountsRequest {
670
+ /**
671
+ * <p>For requests to get the next page of results, the pagination token that was returned
672
+ * with the previous set of results. The initial request does not include a pagination
673
+ * token.</p>
674
+ */
675
+ NextToken?: string;
676
+ /**
677
+ * <p>The maximum number of results to return.</p>
678
+ */
679
+ MaxResults?: number;
680
+ }
681
+ export declare namespace ListOrganizationAdminAccountsRequest {
682
+ /**
683
+ * @internal
684
+ */
685
+ const filterSensitiveLog: (obj: ListOrganizationAdminAccountsRequest) => any;
686
+ }
687
+ export interface ListOrganizationAdminAccountsResponse {
688
+ /**
689
+ * <p>The list of delegated administrator accounts.</p>
690
+ */
691
+ Administrators?: Administrator[];
692
+ /**
693
+ * <p>If there are more accounts remaining in the results, then this is the pagination token
694
+ * to use to request the next page of accounts.</p>
695
+ */
696
+ NextToken?: string;
697
+ }
698
+ export declare namespace ListOrganizationAdminAccountsResponse {
699
+ /**
700
+ * @internal
701
+ */
702
+ const filterSensitiveLog: (obj: ListOrganizationAdminAccountsResponse) => any;
703
+ }
594
704
  export interface ListTagsForResourceRequest {
595
705
  /**
596
706
  * <p>The ARN of the behavior graph for which to retrieve the tag values.</p>
@@ -703,3 +813,20 @@ export declare namespace UntagResourceResponse {
703
813
  */
704
814
  const filterSensitiveLog: (obj: UntagResourceResponse) => any;
705
815
  }
816
+ export interface UpdateOrganizationConfigurationRequest {
817
+ /**
818
+ * <p>The ARN of the organization behavior graph.</p>
819
+ */
820
+ GraphArn: string | undefined;
821
+ /**
822
+ * <p>Indicates whether to automatically enable new organization accounts as member accounts
823
+ * in the organization behavior graph.</p>
824
+ */
825
+ AutoEnable?: boolean;
826
+ }
827
+ export declare namespace UpdateOrganizationConfigurationRequest {
828
+ /**
829
+ * @internal
830
+ */
831
+ const filterSensitiveLog: (obj: UpdateOrganizationConfigurationRequest) => any;
832
+ }
@@ -0,0 +1,4 @@
1
+ import { Paginator } from "@aws-sdk/types";
2
+ import { ListOrganizationAdminAccountsCommandInput, ListOrganizationAdminAccountsCommandOutput } from "../commands/ListOrganizationAdminAccountsCommand";
3
+ import { DetectivePaginationConfiguration } from "./Interfaces";
4
+ export declare function paginateListOrganizationAdminAccounts(config: DetectivePaginationConfiguration, input: ListOrganizationAdminAccountsCommandInput, ...additionalArguments: any): Paginator<ListOrganizationAdminAccountsCommandOutput>;
@@ -2,3 +2,4 @@ export * from "./Interfaces";
2
2
  export * from "./ListGraphsPaginator";
3
3
  export * from "./ListInvitationsPaginator";
4
4
  export * from "./ListMembersPaginator";
5
+ export * from "./ListOrganizationAdminAccountsPaginator";
@@ -5,43 +5,58 @@ import { CreateGraphCommandInput, CreateGraphCommandOutput } from "../commands/C
5
5
  import { CreateMembersCommandInput, CreateMembersCommandOutput } from "../commands/CreateMembersCommand";
6
6
  import { DeleteGraphCommandInput, DeleteGraphCommandOutput } from "../commands/DeleteGraphCommand";
7
7
  import { DeleteMembersCommandInput, DeleteMembersCommandOutput } from "../commands/DeleteMembersCommand";
8
+ import { DescribeOrganizationConfigurationCommandInput, DescribeOrganizationConfigurationCommandOutput } from "../commands/DescribeOrganizationConfigurationCommand";
9
+ import { DisableOrganizationAdminAccountCommandInput, DisableOrganizationAdminAccountCommandOutput } from "../commands/DisableOrganizationAdminAccountCommand";
8
10
  import { DisassociateMembershipCommandInput, DisassociateMembershipCommandOutput } from "../commands/DisassociateMembershipCommand";
11
+ import { EnableOrganizationAdminAccountCommandInput, EnableOrganizationAdminAccountCommandOutput } from "../commands/EnableOrganizationAdminAccountCommand";
9
12
  import { GetMembersCommandInput, GetMembersCommandOutput } from "../commands/GetMembersCommand";
10
13
  import { ListGraphsCommandInput, ListGraphsCommandOutput } from "../commands/ListGraphsCommand";
11
14
  import { ListInvitationsCommandInput, ListInvitationsCommandOutput } from "../commands/ListInvitationsCommand";
12
15
  import { ListMembersCommandInput, ListMembersCommandOutput } from "../commands/ListMembersCommand";
16
+ import { ListOrganizationAdminAccountsCommandInput, ListOrganizationAdminAccountsCommandOutput } from "../commands/ListOrganizationAdminAccountsCommand";
13
17
  import { ListTagsForResourceCommandInput, ListTagsForResourceCommandOutput } from "../commands/ListTagsForResourceCommand";
14
18
  import { RejectInvitationCommandInput, RejectInvitationCommandOutput } from "../commands/RejectInvitationCommand";
15
19
  import { StartMonitoringMemberCommandInput, StartMonitoringMemberCommandOutput } from "../commands/StartMonitoringMemberCommand";
16
20
  import { TagResourceCommandInput, TagResourceCommandOutput } from "../commands/TagResourceCommand";
17
21
  import { UntagResourceCommandInput, UntagResourceCommandOutput } from "../commands/UntagResourceCommand";
22
+ import { UpdateOrganizationConfigurationCommandInput, UpdateOrganizationConfigurationCommandOutput } from "../commands/UpdateOrganizationConfigurationCommand";
18
23
  export declare const serializeAws_restJson1AcceptInvitationCommand: (input: AcceptInvitationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
19
24
  export declare const serializeAws_restJson1CreateGraphCommand: (input: CreateGraphCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
20
25
  export declare const serializeAws_restJson1CreateMembersCommand: (input: CreateMembersCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
21
26
  export declare const serializeAws_restJson1DeleteGraphCommand: (input: DeleteGraphCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
22
27
  export declare const serializeAws_restJson1DeleteMembersCommand: (input: DeleteMembersCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
28
+ export declare const serializeAws_restJson1DescribeOrganizationConfigurationCommand: (input: DescribeOrganizationConfigurationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
29
+ export declare const serializeAws_restJson1DisableOrganizationAdminAccountCommand: (input: DisableOrganizationAdminAccountCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
23
30
  export declare const serializeAws_restJson1DisassociateMembershipCommand: (input: DisassociateMembershipCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
31
+ export declare const serializeAws_restJson1EnableOrganizationAdminAccountCommand: (input: EnableOrganizationAdminAccountCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
24
32
  export declare const serializeAws_restJson1GetMembersCommand: (input: GetMembersCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
25
33
  export declare const serializeAws_restJson1ListGraphsCommand: (input: ListGraphsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
26
34
  export declare const serializeAws_restJson1ListInvitationsCommand: (input: ListInvitationsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
27
35
  export declare const serializeAws_restJson1ListMembersCommand: (input: ListMembersCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
36
+ export declare const serializeAws_restJson1ListOrganizationAdminAccountsCommand: (input: ListOrganizationAdminAccountsCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
28
37
  export declare const serializeAws_restJson1ListTagsForResourceCommand: (input: ListTagsForResourceCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
29
38
  export declare const serializeAws_restJson1RejectInvitationCommand: (input: RejectInvitationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
30
39
  export declare const serializeAws_restJson1StartMonitoringMemberCommand: (input: StartMonitoringMemberCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
31
40
  export declare const serializeAws_restJson1TagResourceCommand: (input: TagResourceCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
32
41
  export declare const serializeAws_restJson1UntagResourceCommand: (input: UntagResourceCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
42
+ export declare const serializeAws_restJson1UpdateOrganizationConfigurationCommand: (input: UpdateOrganizationConfigurationCommandInput, context: __SerdeContext) => Promise<__HttpRequest>;
33
43
  export declare const deserializeAws_restJson1AcceptInvitationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<AcceptInvitationCommandOutput>;
34
44
  export declare const deserializeAws_restJson1CreateGraphCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<CreateGraphCommandOutput>;
35
45
  export declare const deserializeAws_restJson1CreateMembersCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<CreateMembersCommandOutput>;
36
46
  export declare const deserializeAws_restJson1DeleteGraphCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteGraphCommandOutput>;
37
47
  export declare const deserializeAws_restJson1DeleteMembersCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DeleteMembersCommandOutput>;
48
+ export declare const deserializeAws_restJson1DescribeOrganizationConfigurationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DescribeOrganizationConfigurationCommandOutput>;
49
+ export declare const deserializeAws_restJson1DisableOrganizationAdminAccountCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DisableOrganizationAdminAccountCommandOutput>;
38
50
  export declare const deserializeAws_restJson1DisassociateMembershipCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<DisassociateMembershipCommandOutput>;
51
+ export declare const deserializeAws_restJson1EnableOrganizationAdminAccountCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<EnableOrganizationAdminAccountCommandOutput>;
39
52
  export declare const deserializeAws_restJson1GetMembersCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<GetMembersCommandOutput>;
40
53
  export declare const deserializeAws_restJson1ListGraphsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListGraphsCommandOutput>;
41
54
  export declare const deserializeAws_restJson1ListInvitationsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListInvitationsCommandOutput>;
42
55
  export declare const deserializeAws_restJson1ListMembersCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListMembersCommandOutput>;
56
+ export declare const deserializeAws_restJson1ListOrganizationAdminAccountsCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListOrganizationAdminAccountsCommandOutput>;
43
57
  export declare const deserializeAws_restJson1ListTagsForResourceCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<ListTagsForResourceCommandOutput>;
44
58
  export declare const deserializeAws_restJson1RejectInvitationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<RejectInvitationCommandOutput>;
45
59
  export declare const deserializeAws_restJson1StartMonitoringMemberCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<StartMonitoringMemberCommandOutput>;
46
60
  export declare const deserializeAws_restJson1TagResourceCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<TagResourceCommandOutput>;
47
61
  export declare const deserializeAws_restJson1UntagResourceCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<UntagResourceCommandOutput>;
62
+ export declare const deserializeAws_restJson1UpdateOrganizationConfigurationCommand: (output: __HttpResponse, context: __SerdeContext) => Promise<UpdateOrganizationConfigurationCommandOutput>;