@aws-sdk/client-detective 3.533.0 → 3.540.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/endpoint/endpointResolver.js +4 -2
- package/dist-cjs/index.js +0 -3
- package/dist-es/endpoint/endpointResolver.js +3 -1
- package/dist-es/index.js +0 -1
- package/dist-types/Detective.d.ts +6 -1
- package/dist-types/DetectiveClient.d.ts +1 -1
- package/dist-types/commands/AcceptInvitationCommand.d.ts +2 -1
- package/dist-types/commands/BatchGetGraphMemberDatasourcesCommand.d.ts +2 -1
- package/dist-types/commands/BatchGetMembershipDatasourcesCommand.d.ts +2 -1
- package/dist-types/commands/CreateGraphCommand.d.ts +2 -1
- package/dist-types/commands/CreateMembersCommand.d.ts +2 -1
- package/dist-types/commands/DeleteGraphCommand.d.ts +2 -1
- package/dist-types/commands/DeleteMembersCommand.d.ts +2 -1
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +2 -1
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +2 -1
- package/dist-types/commands/DisassociateMembershipCommand.d.ts +2 -1
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +2 -1
- package/dist-types/commands/GetInvestigationCommand.d.ts +2 -1
- package/dist-types/commands/GetMembersCommand.d.ts +2 -1
- package/dist-types/commands/ListDatasourcePackagesCommand.d.ts +2 -1
- package/dist-types/commands/ListGraphsCommand.d.ts +2 -1
- package/dist-types/commands/ListIndicatorsCommand.d.ts +2 -1
- package/dist-types/commands/ListInvestigationsCommand.d.ts +2 -1
- package/dist-types/commands/ListInvitationsCommand.d.ts +2 -1
- package/dist-types/commands/ListMembersCommand.d.ts +2 -1
- package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +2 -1
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +2 -1
- package/dist-types/commands/RejectInvitationCommand.d.ts +2 -1
- package/dist-types/commands/StartInvestigationCommand.d.ts +2 -1
- package/dist-types/commands/StartMonitoringMemberCommand.d.ts +2 -1
- package/dist-types/commands/TagResourceCommand.d.ts +2 -1
- package/dist-types/commands/UntagResourceCommand.d.ts +2 -1
- package/dist-types/commands/UpdateDatasourcePackagesCommand.d.ts +2 -1
- package/dist-types/commands/UpdateInvestigationStateCommand.d.ts +2 -1
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +2 -1
- package/dist-types/index.d.ts +0 -1
- package/dist-types/models/models_0.d.ts +226 -226
- package/dist-types/ts3.4/Detective.d.ts +5 -0
- package/dist-types/ts3.4/commands/AcceptInvitationCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/BatchGetGraphMemberDatasourcesCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/BatchGetMembershipDatasourcesCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/CreateGraphCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/CreateMembersCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/DeleteGraphCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/DeleteMembersCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/DescribeOrganizationConfigurationCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/DisableOrganizationAdminAccountCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/DisassociateMembershipCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/EnableOrganizationAdminAccountCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/GetInvestigationCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/GetMembersCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/ListDatasourcePackagesCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/ListGraphsCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/ListIndicatorsCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/ListInvestigationsCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/ListInvitationsCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/ListMembersCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/ListOrganizationAdminAccountsCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/ListTagsForResourceCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/RejectInvitationCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/StartInvestigationCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/StartMonitoringMemberCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/TagResourceCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/UntagResourceCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/UpdateDatasourcePackagesCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/UpdateInvestigationStateCommand.d.ts +9 -0
- package/dist-types/ts3.4/commands/UpdateOrganizationConfigurationCommand.d.ts +9 -0
- package/dist-types/ts3.4/index.d.ts +0 -1
- package/package.json +40 -40
|
@@ -5,10 +5,10 @@ import { DetectiveServiceException as __BaseException } from "./DetectiveService
|
|
|
5
5
|
*/
|
|
6
6
|
export interface AcceptInvitationRequest {
|
|
7
7
|
/**
|
|
8
|
-
* @public
|
|
9
8
|
* <p>The ARN of the behavior graph that the member account is accepting the invitation
|
|
10
9
|
* for.</p>
|
|
11
10
|
* <p>The member account status in the behavior graph must be <code>INVITED</code>.</p>
|
|
11
|
+
* @public
|
|
12
12
|
*/
|
|
13
13
|
GraphArn: string | undefined;
|
|
14
14
|
}
|
|
@@ -26,32 +26,32 @@ export declare const ErrorCode: {
|
|
|
26
26
|
*/
|
|
27
27
|
export type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];
|
|
28
28
|
/**
|
|
29
|
-
* @public
|
|
30
29
|
* <p>The request issuer does not have permission to access this resource or perform this
|
|
31
30
|
* operation.</p>
|
|
31
|
+
* @public
|
|
32
32
|
*/
|
|
33
33
|
export declare class AccessDeniedException extends __BaseException {
|
|
34
34
|
readonly name: "AccessDeniedException";
|
|
35
35
|
readonly $fault: "client";
|
|
36
36
|
Message?: string;
|
|
37
37
|
/**
|
|
38
|
-
* @public
|
|
39
38
|
* <p>The SDK default error code associated with the access denied exception.</p>
|
|
39
|
+
* @public
|
|
40
40
|
*/
|
|
41
41
|
ErrorCode?: ErrorCode;
|
|
42
42
|
/**
|
|
43
|
-
* @public
|
|
44
43
|
* <p>The SDK default explanation of why access was denied.</p>
|
|
44
|
+
* @public
|
|
45
45
|
*/
|
|
46
46
|
ErrorCodeReason?: string;
|
|
47
47
|
/**
|
|
48
|
-
* @public
|
|
49
48
|
* <p>The error code associated with the access denied exception.</p>
|
|
49
|
+
* @public
|
|
50
50
|
*/
|
|
51
51
|
SubErrorCode?: ErrorCode;
|
|
52
52
|
/**
|
|
53
|
-
* @public
|
|
54
53
|
* <p> An explanation of why access was denied.</p>
|
|
54
|
+
* @public
|
|
55
55
|
*/
|
|
56
56
|
SubErrorCodeReason?: string;
|
|
57
57
|
/**
|
|
@@ -60,8 +60,8 @@ export declare class AccessDeniedException extends __BaseException {
|
|
|
60
60
|
constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
|
|
61
61
|
}
|
|
62
62
|
/**
|
|
63
|
-
* @public
|
|
64
63
|
* <p>The request attempted an invalid action.</p>
|
|
64
|
+
* @public
|
|
65
65
|
*/
|
|
66
66
|
export declare class ConflictException extends __BaseException {
|
|
67
67
|
readonly name: "ConflictException";
|
|
@@ -73,8 +73,8 @@ export declare class ConflictException extends __BaseException {
|
|
|
73
73
|
constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
|
|
74
74
|
}
|
|
75
75
|
/**
|
|
76
|
-
* @public
|
|
77
76
|
* <p>The request was valid but failed because of a problem with the service.</p>
|
|
77
|
+
* @public
|
|
78
78
|
*/
|
|
79
79
|
export declare class InternalServerException extends __BaseException {
|
|
80
80
|
readonly name: "InternalServerException";
|
|
@@ -86,8 +86,8 @@ export declare class InternalServerException extends __BaseException {
|
|
|
86
86
|
constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>);
|
|
87
87
|
}
|
|
88
88
|
/**
|
|
89
|
-
* @public
|
|
90
89
|
* <p>The request refers to a nonexistent resource.</p>
|
|
90
|
+
* @public
|
|
91
91
|
*/
|
|
92
92
|
export declare class ResourceNotFoundException extends __BaseException {
|
|
93
93
|
readonly name: "ResourceNotFoundException";
|
|
@@ -99,21 +99,21 @@ export declare class ResourceNotFoundException extends __BaseException {
|
|
|
99
99
|
constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
|
|
100
100
|
}
|
|
101
101
|
/**
|
|
102
|
-
* @public
|
|
103
102
|
* <p>The request parameters are invalid.</p>
|
|
103
|
+
* @public
|
|
104
104
|
*/
|
|
105
105
|
export declare class ValidationException extends __BaseException {
|
|
106
106
|
readonly name: "ValidationException";
|
|
107
107
|
readonly $fault: "client";
|
|
108
108
|
Message?: string;
|
|
109
109
|
/**
|
|
110
|
-
* @public
|
|
111
110
|
* <p>The error code associated with the validation failure.</p>
|
|
111
|
+
* @public
|
|
112
112
|
*/
|
|
113
113
|
ErrorCode?: ErrorCode;
|
|
114
114
|
/**
|
|
115
|
-
* @public
|
|
116
115
|
* <p> An explanation of why validation failed.</p>
|
|
116
|
+
* @public
|
|
117
117
|
*/
|
|
118
118
|
ErrorCodeReason?: string;
|
|
119
119
|
/**
|
|
@@ -122,45 +122,45 @@ export declare class ValidationException extends __BaseException {
|
|
|
122
122
|
constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
|
|
123
123
|
}
|
|
124
124
|
/**
|
|
125
|
-
* @public
|
|
126
125
|
* <p>An Amazon Web Services account that is the administrator account of or a member of a
|
|
127
126
|
* behavior graph.</p>
|
|
127
|
+
* @public
|
|
128
128
|
*/
|
|
129
129
|
export interface Account {
|
|
130
130
|
/**
|
|
131
|
-
* @public
|
|
132
131
|
* <p>The account identifier of the Amazon Web Services account.</p>
|
|
132
|
+
* @public
|
|
133
133
|
*/
|
|
134
134
|
AccountId: string | undefined;
|
|
135
135
|
/**
|
|
136
|
-
* @public
|
|
137
136
|
* <p>The Amazon Web Services account root user email address for the Amazon Web Services
|
|
138
137
|
* account.</p>
|
|
138
|
+
* @public
|
|
139
139
|
*/
|
|
140
140
|
EmailAddress: string | undefined;
|
|
141
141
|
}
|
|
142
142
|
/**
|
|
143
|
-
* @public
|
|
144
143
|
* <p>Information about the Detective administrator account for an
|
|
145
144
|
* organization.</p>
|
|
145
|
+
* @public
|
|
146
146
|
*/
|
|
147
147
|
export interface Administrator {
|
|
148
148
|
/**
|
|
149
|
-
* @public
|
|
150
149
|
* <p>The Amazon Web Services account identifier of the Detective administrator
|
|
151
150
|
* account for the organization.</p>
|
|
151
|
+
* @public
|
|
152
152
|
*/
|
|
153
153
|
AccountId?: string;
|
|
154
154
|
/**
|
|
155
|
-
* @public
|
|
156
155
|
* <p>The ARN of the organization behavior graph.</p>
|
|
156
|
+
* @public
|
|
157
157
|
*/
|
|
158
158
|
GraphArn?: string;
|
|
159
159
|
/**
|
|
160
|
-
* @public
|
|
161
160
|
* <p>The date and time when the Detective administrator account was enabled. The
|
|
162
161
|
* value is an ISO8601 formatted string. For example,
|
|
163
162
|
* <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
163
|
+
* @public
|
|
164
164
|
*/
|
|
165
165
|
DelegationTime?: Date;
|
|
166
166
|
}
|
|
@@ -169,14 +169,14 @@ export interface Administrator {
|
|
|
169
169
|
*/
|
|
170
170
|
export interface BatchGetGraphMemberDatasourcesRequest {
|
|
171
171
|
/**
|
|
172
|
-
* @public
|
|
173
172
|
* <p>The ARN of the behavior graph.</p>
|
|
173
|
+
* @public
|
|
174
174
|
*/
|
|
175
175
|
GraphArn: string | undefined;
|
|
176
176
|
/**
|
|
177
|
-
* @public
|
|
178
177
|
* <p>The list of Amazon Web Services accounts to get data source package information
|
|
179
178
|
* on.</p>
|
|
179
|
+
* @public
|
|
180
180
|
*/
|
|
181
181
|
AccountIds: string[] | undefined;
|
|
182
182
|
}
|
|
@@ -207,53 +207,53 @@ export declare const DatasourcePackageIngestState: {
|
|
|
207
207
|
*/
|
|
208
208
|
export type DatasourcePackageIngestState = (typeof DatasourcePackageIngestState)[keyof typeof DatasourcePackageIngestState];
|
|
209
209
|
/**
|
|
210
|
-
* @public
|
|
211
210
|
* <p>Details on when data collection began for a source package.</p>
|
|
211
|
+
* @public
|
|
212
212
|
*/
|
|
213
213
|
export interface TimestampForCollection {
|
|
214
214
|
/**
|
|
215
|
-
* @public
|
|
216
215
|
* <p>The data and time when data collection began for a source package. The value is an
|
|
217
216
|
* ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
217
|
+
* @public
|
|
218
218
|
*/
|
|
219
219
|
Timestamp?: Date;
|
|
220
220
|
}
|
|
221
221
|
/**
|
|
222
|
-
* @public
|
|
223
222
|
* <p>Details on data source packages for members of the behavior graph.</p>
|
|
223
|
+
* @public
|
|
224
224
|
*/
|
|
225
225
|
export interface MembershipDatasources {
|
|
226
226
|
/**
|
|
227
|
-
* @public
|
|
228
227
|
* <p>The account identifier of the Amazon Web Services account.</p>
|
|
228
|
+
* @public
|
|
229
229
|
*/
|
|
230
230
|
AccountId?: string;
|
|
231
231
|
/**
|
|
232
|
-
* @public
|
|
233
232
|
* <p>The ARN of the organization behavior graph.</p>
|
|
233
|
+
* @public
|
|
234
234
|
*/
|
|
235
235
|
GraphArn?: string;
|
|
236
236
|
/**
|
|
237
|
-
* @public
|
|
238
237
|
* <p>Details on when a data source package was added to a behavior graph.</p>
|
|
238
|
+
* @public
|
|
239
239
|
*/
|
|
240
240
|
DatasourcePackageIngestHistory?: Partial<Record<DatasourcePackage, Partial<Record<DatasourcePackageIngestState, TimestampForCollection>>>>;
|
|
241
241
|
}
|
|
242
242
|
/**
|
|
243
|
-
* @public
|
|
244
243
|
* <p>A member account that was included in a request but for which the request could not be
|
|
245
244
|
* processed.</p>
|
|
245
|
+
* @public
|
|
246
246
|
*/
|
|
247
247
|
export interface UnprocessedAccount {
|
|
248
248
|
/**
|
|
249
|
-
* @public
|
|
250
249
|
* <p>The Amazon Web Services account identifier of the member account that was not
|
|
251
250
|
* processed.</p>
|
|
251
|
+
* @public
|
|
252
252
|
*/
|
|
253
253
|
AccountId?: string;
|
|
254
254
|
/**
|
|
255
|
-
* @public
|
|
256
255
|
* <p>The reason that the member account request could not be processed.</p>
|
|
256
|
+
* @public
|
|
257
257
|
*/
|
|
258
258
|
Reason?: string;
|
|
259
259
|
}
|
|
@@ -262,13 +262,13 @@ export interface UnprocessedAccount {
|
|
|
262
262
|
*/
|
|
263
263
|
export interface BatchGetGraphMemberDatasourcesResponse {
|
|
264
264
|
/**
|
|
265
|
-
* @public
|
|
266
265
|
* <p>Details on the status of data source packages for members of the behavior graph.</p>
|
|
266
|
+
* @public
|
|
267
267
|
*/
|
|
268
268
|
MemberDatasources?: MembershipDatasources[];
|
|
269
269
|
/**
|
|
270
|
-
* @public
|
|
271
270
|
* <p>Accounts that data source package information could not be retrieved for.</p>
|
|
271
|
+
* @public
|
|
272
272
|
*/
|
|
273
273
|
UnprocessedAccounts?: UnprocessedAccount[];
|
|
274
274
|
}
|
|
@@ -277,25 +277,25 @@ export interface BatchGetGraphMemberDatasourcesResponse {
|
|
|
277
277
|
*/
|
|
278
278
|
export interface BatchGetMembershipDatasourcesRequest {
|
|
279
279
|
/**
|
|
280
|
-
* @public
|
|
281
280
|
* <p>The ARN of the behavior graph.</p>
|
|
281
|
+
* @public
|
|
282
282
|
*/
|
|
283
283
|
GraphArns: string[] | undefined;
|
|
284
284
|
}
|
|
285
285
|
/**
|
|
286
|
-
* @public
|
|
287
286
|
* <p>Behavior graphs that could not be processed in the request.</p>
|
|
287
|
+
* @public
|
|
288
288
|
*/
|
|
289
289
|
export interface UnprocessedGraph {
|
|
290
290
|
/**
|
|
291
|
-
* @public
|
|
292
291
|
* <p>The ARN of the organization behavior graph.</p>
|
|
292
|
+
* @public
|
|
293
293
|
*/
|
|
294
294
|
GraphArn?: string;
|
|
295
295
|
/**
|
|
296
|
-
* @public
|
|
297
296
|
* <p>The reason data source package information could not be processed for a behavior
|
|
298
297
|
* graph.</p>
|
|
298
|
+
* @public
|
|
299
299
|
*/
|
|
300
300
|
Reason?: string;
|
|
301
301
|
}
|
|
@@ -304,13 +304,13 @@ export interface UnprocessedGraph {
|
|
|
304
304
|
*/
|
|
305
305
|
export interface BatchGetMembershipDatasourcesResponse {
|
|
306
306
|
/**
|
|
307
|
-
* @public
|
|
308
307
|
* <p>Details on the data source package history for an member of the behavior graph.</p>
|
|
308
|
+
* @public
|
|
309
309
|
*/
|
|
310
310
|
MembershipDatasources?: MembershipDatasources[];
|
|
311
311
|
/**
|
|
312
|
-
* @public
|
|
313
312
|
* <p>Graphs that data source package information could not be retrieved for.</p>
|
|
313
|
+
* @public
|
|
314
314
|
*/
|
|
315
315
|
UnprocessedGraphs?: UnprocessedGraph[];
|
|
316
316
|
}
|
|
@@ -319,10 +319,10 @@ export interface BatchGetMembershipDatasourcesResponse {
|
|
|
319
319
|
*/
|
|
320
320
|
export interface CreateGraphRequest {
|
|
321
321
|
/**
|
|
322
|
-
* @public
|
|
323
322
|
* <p>The tags to assign to the new behavior graph. You can add up to 50 tags. For each tag,
|
|
324
323
|
* you provide the tag key and the tag value. Each tag key can contain up to 128 characters.
|
|
325
324
|
* Each tag value can contain up to 256 characters.</p>
|
|
325
|
+
* @public
|
|
326
326
|
*/
|
|
327
327
|
Tags?: Record<string, string>;
|
|
328
328
|
}
|
|
@@ -331,13 +331,12 @@ export interface CreateGraphRequest {
|
|
|
331
331
|
*/
|
|
332
332
|
export interface CreateGraphResponse {
|
|
333
333
|
/**
|
|
334
|
-
* @public
|
|
335
334
|
* <p>The ARN of the new behavior graph.</p>
|
|
335
|
+
* @public
|
|
336
336
|
*/
|
|
337
337
|
GraphArn?: string;
|
|
338
338
|
}
|
|
339
339
|
/**
|
|
340
|
-
* @public
|
|
341
340
|
* <p>This request cannot be completed for one of the following reasons.</p>
|
|
342
341
|
* <ul>
|
|
343
342
|
* <li>
|
|
@@ -349,14 +348,15 @@ export interface CreateGraphResponse {
|
|
|
349
348
|
* <p>This request cannot be completed if the current volume ingested is above the limit of 10 TB per day. Detective will not allow you to add additional member accounts.</p>
|
|
350
349
|
* </li>
|
|
351
350
|
* </ul>
|
|
351
|
+
* @public
|
|
352
352
|
*/
|
|
353
353
|
export declare class ServiceQuotaExceededException extends __BaseException {
|
|
354
354
|
readonly name: "ServiceQuotaExceededException";
|
|
355
355
|
readonly $fault: "client";
|
|
356
356
|
Message?: string;
|
|
357
357
|
/**
|
|
358
|
-
* @public
|
|
359
358
|
* <p>The type of resource that has exceeded the service quota.</p>
|
|
359
|
+
* @public
|
|
360
360
|
*/
|
|
361
361
|
Resources?: string[];
|
|
362
362
|
/**
|
|
@@ -369,32 +369,32 @@ export declare class ServiceQuotaExceededException extends __BaseException {
|
|
|
369
369
|
*/
|
|
370
370
|
export interface CreateMembersRequest {
|
|
371
371
|
/**
|
|
372
|
-
* @public
|
|
373
372
|
* <p>The ARN of the behavior graph.</p>
|
|
373
|
+
* @public
|
|
374
374
|
*/
|
|
375
375
|
GraphArn: string | undefined;
|
|
376
376
|
/**
|
|
377
|
-
* @public
|
|
378
377
|
* <p>Customized message text to include in the invitation email message to the invited member
|
|
379
378
|
* accounts.</p>
|
|
379
|
+
* @public
|
|
380
380
|
*/
|
|
381
381
|
Message?: string;
|
|
382
382
|
/**
|
|
383
|
-
* @public
|
|
384
383
|
* <p>if set to <code>true</code>, then the invited accounts do not receive email
|
|
385
384
|
* notifications. By default, this is set to <code>false</code>, and the invited accounts
|
|
386
385
|
* receive email notifications.</p>
|
|
387
386
|
* <p>Organization accounts in the organization behavior graph do not receive email
|
|
388
387
|
* notifications.</p>
|
|
388
|
+
* @public
|
|
389
389
|
*/
|
|
390
390
|
DisableEmailNotification?: boolean;
|
|
391
391
|
/**
|
|
392
|
-
* @public
|
|
393
392
|
* <p>The list of Amazon Web Services accounts to invite or to enable. You can invite or enable
|
|
394
393
|
* up to 50 accounts at a time. For each invited account, the account list contains the
|
|
395
394
|
* account identifier and the Amazon Web Services account root user email address. For
|
|
396
395
|
* organization accounts in the organization behavior graph, the email address is not
|
|
397
396
|
* required.</p>
|
|
397
|
+
* @public
|
|
398
398
|
*/
|
|
399
399
|
Accounts: Account[] | undefined;
|
|
400
400
|
}
|
|
@@ -438,58 +438,57 @@ export declare const MemberStatus: {
|
|
|
438
438
|
*/
|
|
439
439
|
export type MemberStatus = (typeof MemberStatus)[keyof typeof MemberStatus];
|
|
440
440
|
/**
|
|
441
|
-
* @public
|
|
442
441
|
* <p>Information on the usage of a data source package in the behavior graph.</p>
|
|
442
|
+
* @public
|
|
443
443
|
*/
|
|
444
444
|
export interface DatasourcePackageUsageInfo {
|
|
445
445
|
/**
|
|
446
|
-
* @public
|
|
447
446
|
* <p>Total volume of data in bytes per day ingested for a given data source package.</p>
|
|
447
|
+
* @public
|
|
448
448
|
*/
|
|
449
449
|
VolumeUsageInBytes?: number;
|
|
450
450
|
/**
|
|
451
|
-
* @public
|
|
452
451
|
* <p>The data and time when the member account data volume was last updated. The value is an
|
|
453
452
|
* ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
453
|
+
* @public
|
|
454
454
|
*/
|
|
455
455
|
VolumeUsageUpdateTime?: Date;
|
|
456
456
|
}
|
|
457
457
|
/**
|
|
458
|
-
* @public
|
|
459
458
|
* <p>Details about a member account in a behavior graph.</p>
|
|
459
|
+
* @public
|
|
460
460
|
*/
|
|
461
461
|
export interface MemberDetail {
|
|
462
462
|
/**
|
|
463
|
-
* @public
|
|
464
463
|
* <p>The Amazon Web Services account identifier for the member account.</p>
|
|
464
|
+
* @public
|
|
465
465
|
*/
|
|
466
466
|
AccountId?: string;
|
|
467
467
|
/**
|
|
468
|
-
* @public
|
|
469
468
|
* <p>The Amazon Web Services account root user email address for the member account.</p>
|
|
469
|
+
* @public
|
|
470
470
|
*/
|
|
471
471
|
EmailAddress?: string;
|
|
472
472
|
/**
|
|
473
|
-
* @public
|
|
474
473
|
* <p>The ARN of the behavior graph.</p>
|
|
474
|
+
* @public
|
|
475
475
|
*/
|
|
476
476
|
GraphArn?: string;
|
|
477
477
|
/**
|
|
478
|
-
* @public
|
|
479
478
|
* @deprecated
|
|
480
479
|
*
|
|
481
480
|
* <p>The Amazon Web Services account identifier of the administrator account for the behavior
|
|
482
481
|
* graph.</p>
|
|
482
|
+
* @public
|
|
483
483
|
*/
|
|
484
484
|
MasterId?: string;
|
|
485
485
|
/**
|
|
486
|
-
* @public
|
|
487
486
|
* <p>The Amazon Web Services account identifier of the administrator account for the behavior
|
|
488
487
|
* graph.</p>
|
|
488
|
+
* @public
|
|
489
489
|
*/
|
|
490
490
|
AdministratorId?: string;
|
|
491
491
|
/**
|
|
492
|
-
* @public
|
|
493
492
|
* <p>The current membership status of the member account. The status can have one of the
|
|
494
493
|
* following values:</p>
|
|
495
494
|
* <ul>
|
|
@@ -532,10 +531,10 @@ export interface MemberDetail {
|
|
|
532
531
|
* <p>Invited accounts that declined an invitation or that were removed from the behavior
|
|
533
532
|
* graph are not included. In the organization behavior graph, organization accounts that the
|
|
534
533
|
* Detective administrator account did not enable are not included.</p>
|
|
534
|
+
* @public
|
|
535
535
|
*/
|
|
536
536
|
Status?: MemberStatus;
|
|
537
537
|
/**
|
|
538
|
-
* @public
|
|
539
538
|
* <p>For member accounts with a status of <code>ACCEPTED_BUT_DISABLED</code>, the reason that
|
|
540
539
|
* the member account is not enabled.</p>
|
|
541
540
|
* <p>The reason can have one of the following values:</p>
|
|
@@ -552,38 +551,38 @@ export interface MemberDetail {
|
|
|
552
551
|
* account is not enrolled in Amazon GuardDuty. </p>
|
|
553
552
|
* </li>
|
|
554
553
|
* </ul>
|
|
554
|
+
* @public
|
|
555
555
|
*/
|
|
556
556
|
DisabledReason?: MemberDisabledReason;
|
|
557
557
|
/**
|
|
558
|
-
* @public
|
|
559
558
|
* <p>For invited accounts, the date and time that Detective sent the invitation to
|
|
560
559
|
* the account. The value is an ISO8601 formatted string. For example,
|
|
561
560
|
* <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
561
|
+
* @public
|
|
562
562
|
*/
|
|
563
563
|
InvitedTime?: Date;
|
|
564
564
|
/**
|
|
565
|
-
* @public
|
|
566
565
|
* <p>The date and time that the member account was last updated. The value is an ISO8601
|
|
567
566
|
* formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
567
|
+
* @public
|
|
568
568
|
*/
|
|
569
569
|
UpdatedTime?: Date;
|
|
570
570
|
/**
|
|
571
|
-
* @public
|
|
572
571
|
* @deprecated
|
|
573
572
|
*
|
|
574
573
|
* <p>The data volume in bytes per day for the member account.</p>
|
|
574
|
+
* @public
|
|
575
575
|
*/
|
|
576
576
|
VolumeUsageInBytes?: number;
|
|
577
577
|
/**
|
|
578
|
-
* @public
|
|
579
578
|
* @deprecated
|
|
580
579
|
*
|
|
581
580
|
* <p>The data and time when the member account data volume was last updated. The value is an
|
|
582
581
|
* ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
582
|
+
* @public
|
|
583
583
|
*/
|
|
584
584
|
VolumeUsageUpdatedTime?: Date;
|
|
585
585
|
/**
|
|
586
|
-
* @public
|
|
587
586
|
* @deprecated
|
|
588
587
|
*
|
|
589
588
|
* <p>The member account data volume as a percentage of the maximum allowed data volume. 0
|
|
@@ -593,33 +592,34 @@ export interface MemberDetail {
|
|
|
593
592
|
* volume is 160 GB per day. If the data volume for the member account is 40 GB per day, then
|
|
594
593
|
* <code>PercentOfGraphUtilization</code> is 25. It represents 25% of the maximum allowed
|
|
595
594
|
* data volume. </p>
|
|
595
|
+
* @public
|
|
596
596
|
*/
|
|
597
597
|
PercentOfGraphUtilization?: number;
|
|
598
598
|
/**
|
|
599
|
-
* @public
|
|
600
599
|
* @deprecated
|
|
601
600
|
*
|
|
602
601
|
* <p>The date and time when the graph utilization percentage was last updated. The value is
|
|
603
602
|
* an ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
603
|
+
* @public
|
|
604
604
|
*/
|
|
605
605
|
PercentOfGraphUtilizationUpdatedTime?: Date;
|
|
606
606
|
/**
|
|
607
|
-
* @public
|
|
608
607
|
* <p>The type of behavior graph membership.</p>
|
|
609
608
|
* <p>For an organization account in the organization behavior graph, the type is
|
|
610
609
|
* <code>ORGANIZATION</code>.</p>
|
|
611
610
|
* <p>For an account that was invited to a behavior graph, the type is
|
|
612
611
|
* <code>INVITATION</code>. </p>
|
|
612
|
+
* @public
|
|
613
613
|
*/
|
|
614
614
|
InvitationType?: InvitationType;
|
|
615
615
|
/**
|
|
616
|
-
* @public
|
|
617
616
|
* <p>Details on the volume of usage for each data source package in a behavior graph.</p>
|
|
617
|
+
* @public
|
|
618
618
|
*/
|
|
619
619
|
VolumeUsageByDatasourcePackage?: Partial<Record<DatasourcePackage, DatasourcePackageUsageInfo>>;
|
|
620
620
|
/**
|
|
621
|
-
* @public
|
|
622
621
|
* <p>The state of a data source package for the behavior graph.</p>
|
|
622
|
+
* @public
|
|
623
623
|
*/
|
|
624
624
|
DatasourcePackageIngestStates?: Partial<Record<DatasourcePackage, DatasourcePackageIngestState>>;
|
|
625
625
|
}
|
|
@@ -628,18 +628,18 @@ export interface MemberDetail {
|
|
|
628
628
|
*/
|
|
629
629
|
export interface CreateMembersResponse {
|
|
630
630
|
/**
|
|
631
|
-
* @public
|
|
632
631
|
* <p>The set of member account invitation or enablement requests that Detective was
|
|
633
632
|
* able to process. This includes accounts that are being verified, that failed verification,
|
|
634
633
|
* and that passed verification and are being sent an invitation or are being enabled.</p>
|
|
634
|
+
* @public
|
|
635
635
|
*/
|
|
636
636
|
Members?: MemberDetail[];
|
|
637
637
|
/**
|
|
638
|
-
* @public
|
|
639
638
|
* <p>The list of accounts for which Detective was unable to process the invitation
|
|
640
639
|
* or enablement request. For each account, the list provides the reason why the request could
|
|
641
640
|
* not be processed. The list includes accounts that are already member accounts in the
|
|
642
641
|
* behavior graph.</p>
|
|
642
|
+
* @public
|
|
643
643
|
*/
|
|
644
644
|
UnprocessedAccounts?: UnprocessedAccount[];
|
|
645
645
|
}
|
|
@@ -648,8 +648,8 @@ export interface CreateMembersResponse {
|
|
|
648
648
|
*/
|
|
649
649
|
export interface DeleteGraphRequest {
|
|
650
650
|
/**
|
|
651
|
-
* @public
|
|
652
651
|
* <p>The ARN of the behavior graph to disable.</p>
|
|
652
|
+
* @public
|
|
653
653
|
*/
|
|
654
654
|
GraphArn: string | undefined;
|
|
655
655
|
}
|
|
@@ -658,14 +658,14 @@ export interface DeleteGraphRequest {
|
|
|
658
658
|
*/
|
|
659
659
|
export interface DeleteMembersRequest {
|
|
660
660
|
/**
|
|
661
|
-
* @public
|
|
662
661
|
* <p>The ARN of the behavior graph to remove members from.</p>
|
|
662
|
+
* @public
|
|
663
663
|
*/
|
|
664
664
|
GraphArn: string | undefined;
|
|
665
665
|
/**
|
|
666
|
-
* @public
|
|
667
666
|
* <p>The list of Amazon Web Services account identifiers for the member accounts to remove
|
|
668
667
|
* from the behavior graph. You can remove up to 50 member accounts at a time.</p>
|
|
668
|
+
* @public
|
|
669
669
|
*/
|
|
670
670
|
AccountIds: string[] | undefined;
|
|
671
671
|
}
|
|
@@ -674,15 +674,15 @@ export interface DeleteMembersRequest {
|
|
|
674
674
|
*/
|
|
675
675
|
export interface DeleteMembersResponse {
|
|
676
676
|
/**
|
|
677
|
-
* @public
|
|
678
677
|
* <p>The list of Amazon Web Services account identifiers for the member accounts that Detective successfully removed from the behavior graph.</p>
|
|
678
|
+
* @public
|
|
679
679
|
*/
|
|
680
680
|
AccountIds?: string[];
|
|
681
681
|
/**
|
|
682
|
-
* @public
|
|
683
682
|
* <p>The list of member accounts that Detective was not able to remove from the
|
|
684
683
|
* behavior graph. For each member account, provides the reason that the deletion could not be
|
|
685
684
|
* processed.</p>
|
|
685
|
+
* @public
|
|
686
686
|
*/
|
|
687
687
|
UnprocessedAccounts?: UnprocessedAccount[];
|
|
688
688
|
}
|
|
@@ -691,8 +691,8 @@ export interface DeleteMembersResponse {
|
|
|
691
691
|
*/
|
|
692
692
|
export interface DescribeOrganizationConfigurationRequest {
|
|
693
693
|
/**
|
|
694
|
-
* @public
|
|
695
694
|
* <p>The ARN of the organization behavior graph.</p>
|
|
695
|
+
* @public
|
|
696
696
|
*/
|
|
697
697
|
GraphArn: string | undefined;
|
|
698
698
|
}
|
|
@@ -701,16 +701,16 @@ export interface DescribeOrganizationConfigurationRequest {
|
|
|
701
701
|
*/
|
|
702
702
|
export interface DescribeOrganizationConfigurationResponse {
|
|
703
703
|
/**
|
|
704
|
-
* @public
|
|
705
704
|
* <p>Indicates whether to automatically enable new organization accounts as member accounts
|
|
706
705
|
* in the organization behavior graph.</p>
|
|
706
|
+
* @public
|
|
707
707
|
*/
|
|
708
708
|
AutoEnable?: boolean;
|
|
709
709
|
}
|
|
710
710
|
/**
|
|
711
|
-
* @public
|
|
712
711
|
* <p>The request cannot be completed because too many other requests are occurring at the
|
|
713
712
|
* same time.</p>
|
|
713
|
+
* @public
|
|
714
714
|
*/
|
|
715
715
|
export declare class TooManyRequestsException extends __BaseException {
|
|
716
716
|
readonly name: "TooManyRequestsException";
|
|
@@ -726,10 +726,10 @@ export declare class TooManyRequestsException extends __BaseException {
|
|
|
726
726
|
*/
|
|
727
727
|
export interface DisassociateMembershipRequest {
|
|
728
728
|
/**
|
|
729
|
-
* @public
|
|
730
729
|
* <p>The ARN of the behavior graph to remove the member account from.</p>
|
|
731
730
|
* <p>The member account's member status in the behavior graph must be
|
|
732
731
|
* <code>ENABLED</code>.</p>
|
|
732
|
+
* @public
|
|
733
733
|
*/
|
|
734
734
|
GraphArn: string | undefined;
|
|
735
735
|
}
|
|
@@ -738,8 +738,8 @@ export interface DisassociateMembershipRequest {
|
|
|
738
738
|
*/
|
|
739
739
|
export interface EnableOrganizationAdminAccountRequest {
|
|
740
740
|
/**
|
|
741
|
-
* @public
|
|
742
741
|
* <p>The Amazon Web Services account identifier of the account to designate as the Detective administrator account for the organization.</p>
|
|
742
|
+
* @public
|
|
743
743
|
*/
|
|
744
744
|
AccountId: string | undefined;
|
|
745
745
|
}
|
|
@@ -748,13 +748,13 @@ export interface EnableOrganizationAdminAccountRequest {
|
|
|
748
748
|
*/
|
|
749
749
|
export interface GetInvestigationRequest {
|
|
750
750
|
/**
|
|
751
|
-
* @public
|
|
752
751
|
* <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
|
|
752
|
+
* @public
|
|
753
753
|
*/
|
|
754
754
|
GraphArn: string | undefined;
|
|
755
755
|
/**
|
|
756
|
-
* @public
|
|
757
756
|
* <p>The investigation ID of the investigation report.</p>
|
|
757
|
+
* @public
|
|
758
758
|
*/
|
|
759
759
|
InvestigationId: string | undefined;
|
|
760
760
|
}
|
|
@@ -815,57 +815,57 @@ export type Status = (typeof Status)[keyof typeof Status];
|
|
|
815
815
|
*/
|
|
816
816
|
export interface GetInvestigationResponse {
|
|
817
817
|
/**
|
|
818
|
-
* @public
|
|
819
818
|
* <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
|
|
819
|
+
* @public
|
|
820
820
|
*/
|
|
821
821
|
GraphArn?: string;
|
|
822
822
|
/**
|
|
823
|
-
* @public
|
|
824
823
|
* <p>The investigation ID of the investigation report.</p>
|
|
824
|
+
* @public
|
|
825
825
|
*/
|
|
826
826
|
InvestigationId?: string;
|
|
827
827
|
/**
|
|
828
|
-
* @public
|
|
829
828
|
* <p>The unique Amazon Resource Name (ARN). Detective supports IAM user ARNs and IAM role ARNs.</p>
|
|
829
|
+
* @public
|
|
830
830
|
*/
|
|
831
831
|
EntityArn?: string;
|
|
832
832
|
/**
|
|
833
|
-
* @public
|
|
834
833
|
* <p>Type of entity. For example, Amazon Web Services accounts, such as an IAM user and/or IAM role.</p>
|
|
834
|
+
* @public
|
|
835
835
|
*/
|
|
836
836
|
EntityType?: EntityType;
|
|
837
837
|
/**
|
|
838
|
-
* @public
|
|
839
838
|
* <p>The creation time of the investigation report in UTC time stamp format.</p>
|
|
839
|
+
* @public
|
|
840
840
|
*/
|
|
841
841
|
CreatedTime?: Date;
|
|
842
842
|
/**
|
|
843
|
-
* @public
|
|
844
843
|
* <p>The start date and time used to set the scope time within which you want to generate the investigation report. The value is an UTC ISO8601 formatted
|
|
845
844
|
* string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
845
|
+
* @public
|
|
846
846
|
*/
|
|
847
847
|
ScopeStartTime?: Date;
|
|
848
848
|
/**
|
|
849
|
-
* @public
|
|
850
849
|
* <p>The data and time when the investigation began. The value is an UTC ISO8601 formatted
|
|
851
850
|
* string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
851
|
+
* @public
|
|
852
852
|
*/
|
|
853
853
|
ScopeEndTime?: Date;
|
|
854
854
|
/**
|
|
855
|
-
* @public
|
|
856
855
|
* <p>The status based on the completion status of the investigation.</p>
|
|
856
|
+
* @public
|
|
857
857
|
*/
|
|
858
858
|
Status?: Status;
|
|
859
859
|
/**
|
|
860
|
-
* @public
|
|
861
860
|
* <p>The severity assigned is based on the likelihood and impact of the indicators of
|
|
862
861
|
* compromise discovered in the investigation.</p>
|
|
862
|
+
* @public
|
|
863
863
|
*/
|
|
864
864
|
Severity?: Severity;
|
|
865
865
|
/**
|
|
866
|
-
* @public
|
|
867
866
|
* <p>The current state of the investigation. An archived investigation indicates that you
|
|
868
867
|
* have completed reviewing the investigation.</p>
|
|
868
|
+
* @public
|
|
869
869
|
*/
|
|
870
870
|
State?: State;
|
|
871
871
|
}
|
|
@@ -874,17 +874,17 @@ export interface GetInvestigationResponse {
|
|
|
874
874
|
*/
|
|
875
875
|
export interface GetMembersRequest {
|
|
876
876
|
/**
|
|
877
|
-
* @public
|
|
878
877
|
* <p>The ARN of the behavior graph for which to request the member details.</p>
|
|
878
|
+
* @public
|
|
879
879
|
*/
|
|
880
880
|
GraphArn: string | undefined;
|
|
881
881
|
/**
|
|
882
|
-
* @public
|
|
883
882
|
* <p>The list of Amazon Web Services account identifiers for the member account for which to
|
|
884
883
|
* return member details. You can request details for up to 50 member accounts at a
|
|
885
884
|
* time.</p>
|
|
886
885
|
* <p>You cannot use <code>GetMembers</code> to retrieve information about member accounts
|
|
887
886
|
* that were removed from the behavior graph.</p>
|
|
887
|
+
* @public
|
|
888
888
|
*/
|
|
889
889
|
AccountIds: string[] | undefined;
|
|
890
890
|
}
|
|
@@ -893,16 +893,16 @@ export interface GetMembersRequest {
|
|
|
893
893
|
*/
|
|
894
894
|
export interface GetMembersResponse {
|
|
895
895
|
/**
|
|
896
|
-
* @public
|
|
897
896
|
* <p>The member account details that Detective is returning in response to the
|
|
898
897
|
* request.</p>
|
|
898
|
+
* @public
|
|
899
899
|
*/
|
|
900
900
|
MemberDetails?: MemberDetail[];
|
|
901
901
|
/**
|
|
902
|
-
* @public
|
|
903
902
|
* <p>The requested member accounts for which Detective was unable to return member
|
|
904
903
|
* details.</p>
|
|
905
904
|
* <p>For each account, provides the reason why the request could not be processed.</p>
|
|
905
|
+
* @public
|
|
906
906
|
*/
|
|
907
907
|
UnprocessedAccounts?: UnprocessedAccount[];
|
|
908
908
|
}
|
|
@@ -911,36 +911,36 @@ export interface GetMembersResponse {
|
|
|
911
911
|
*/
|
|
912
912
|
export interface ListDatasourcePackagesRequest {
|
|
913
913
|
/**
|
|
914
|
-
* @public
|
|
915
914
|
* <p>The ARN of the behavior graph.</p>
|
|
915
|
+
* @public
|
|
916
916
|
*/
|
|
917
917
|
GraphArn: string | undefined;
|
|
918
918
|
/**
|
|
919
|
-
* @public
|
|
920
919
|
* <p>For requests to get the next page of results, the pagination token that was returned
|
|
921
920
|
* with the previous set of results. The initial request does not include a pagination
|
|
922
921
|
* token.</p>
|
|
922
|
+
* @public
|
|
923
923
|
*/
|
|
924
924
|
NextToken?: string;
|
|
925
925
|
/**
|
|
926
|
-
* @public
|
|
927
926
|
* <p>The maximum number of results to return.</p>
|
|
927
|
+
* @public
|
|
928
928
|
*/
|
|
929
929
|
MaxResults?: number;
|
|
930
930
|
}
|
|
931
931
|
/**
|
|
932
|
-
* @public
|
|
933
932
|
* <p>Details about the data source packages ingested by your behavior graph.</p>
|
|
933
|
+
* @public
|
|
934
934
|
*/
|
|
935
935
|
export interface DatasourcePackageIngestDetail {
|
|
936
936
|
/**
|
|
937
|
-
* @public
|
|
938
937
|
* <p>Details on which data source packages are ingested for a member account.</p>
|
|
938
|
+
* @public
|
|
939
939
|
*/
|
|
940
940
|
DatasourcePackageIngestState?: DatasourcePackageIngestState;
|
|
941
941
|
/**
|
|
942
|
-
* @public
|
|
943
942
|
* <p>The date a data source package was enabled for this account</p>
|
|
943
|
+
* @public
|
|
944
944
|
*/
|
|
945
945
|
LastIngestStateChange?: Partial<Record<DatasourcePackageIngestState, TimestampForCollection>>;
|
|
946
946
|
}
|
|
@@ -949,15 +949,15 @@ export interface DatasourcePackageIngestDetail {
|
|
|
949
949
|
*/
|
|
950
950
|
export interface ListDatasourcePackagesResponse {
|
|
951
951
|
/**
|
|
952
|
-
* @public
|
|
953
952
|
* <p>Details on the data source packages active in the behavior graph.</p>
|
|
953
|
+
* @public
|
|
954
954
|
*/
|
|
955
955
|
DatasourcePackages?: Partial<Record<DatasourcePackage, DatasourcePackageIngestDetail>>;
|
|
956
956
|
/**
|
|
957
|
-
* @public
|
|
958
957
|
* <p>For requests to get the next page of results, the pagination token that was returned
|
|
959
958
|
* with the previous set of results. The initial request does not include a pagination
|
|
960
959
|
* token.</p>
|
|
960
|
+
* @public
|
|
961
961
|
*/
|
|
962
962
|
NextToken?: string;
|
|
963
963
|
}
|
|
@@ -966,33 +966,33 @@ export interface ListDatasourcePackagesResponse {
|
|
|
966
966
|
*/
|
|
967
967
|
export interface ListGraphsRequest {
|
|
968
968
|
/**
|
|
969
|
-
* @public
|
|
970
969
|
* <p>For requests to get the next page of results, the pagination token that was returned
|
|
971
970
|
* with the previous set of results. The initial request does not include a pagination
|
|
972
971
|
* token.</p>
|
|
972
|
+
* @public
|
|
973
973
|
*/
|
|
974
974
|
NextToken?: string;
|
|
975
975
|
/**
|
|
976
|
-
* @public
|
|
977
976
|
* <p>The maximum number of graphs to return at a time. The total must be less than the
|
|
978
977
|
* overall limit on the number of results to return, which is currently 200.</p>
|
|
978
|
+
* @public
|
|
979
979
|
*/
|
|
980
980
|
MaxResults?: number;
|
|
981
981
|
}
|
|
982
982
|
/**
|
|
983
|
-
* @public
|
|
984
983
|
* <p>A behavior graph in Detective.</p>
|
|
984
|
+
* @public
|
|
985
985
|
*/
|
|
986
986
|
export interface Graph {
|
|
987
987
|
/**
|
|
988
|
-
* @public
|
|
989
988
|
* <p>The ARN of the behavior graph.</p>
|
|
989
|
+
* @public
|
|
990
990
|
*/
|
|
991
991
|
Arn?: string;
|
|
992
992
|
/**
|
|
993
|
-
* @public
|
|
994
993
|
* <p>The date and time that the behavior graph was created. The value is an ISO8601 formatted
|
|
995
994
|
* string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
995
|
+
* @public
|
|
996
996
|
*/
|
|
997
997
|
CreatedTime?: Date;
|
|
998
998
|
}
|
|
@@ -1001,14 +1001,14 @@ export interface Graph {
|
|
|
1001
1001
|
*/
|
|
1002
1002
|
export interface ListGraphsResponse {
|
|
1003
1003
|
/**
|
|
1004
|
-
* @public
|
|
1005
1004
|
* <p>A list of behavior graphs that the account is an administrator account for.</p>
|
|
1005
|
+
* @public
|
|
1006
1006
|
*/
|
|
1007
1007
|
GraphList?: Graph[];
|
|
1008
1008
|
/**
|
|
1009
|
-
* @public
|
|
1010
1009
|
* <p>If there are more behavior graphs remaining in the results, then this is the pagination
|
|
1011
1010
|
* token to use to request the next page of behavior graphs.</p>
|
|
1011
|
+
* @public
|
|
1012
1012
|
*/
|
|
1013
1013
|
NextToken?: string;
|
|
1014
1014
|
}
|
|
@@ -1035,29 +1035,29 @@ export type IndicatorType = (typeof IndicatorType)[keyof typeof IndicatorType];
|
|
|
1035
1035
|
*/
|
|
1036
1036
|
export interface ListIndicatorsRequest {
|
|
1037
1037
|
/**
|
|
1038
|
-
* @public
|
|
1039
1038
|
* <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
|
|
1039
|
+
* @public
|
|
1040
1040
|
*/
|
|
1041
1041
|
GraphArn: string | undefined;
|
|
1042
1042
|
/**
|
|
1043
|
-
* @public
|
|
1044
1043
|
* <p>The investigation ID of the investigation report.</p>
|
|
1044
|
+
* @public
|
|
1045
1045
|
*/
|
|
1046
1046
|
InvestigationId: string | undefined;
|
|
1047
1047
|
/**
|
|
1048
|
-
* @public
|
|
1049
1048
|
* <p>For the list of indicators of compromise that are generated by Detective investigations, see <a href="https://docs.aws.amazon.com/detective/latest/userguide/detective-investigations.html">Detective investigations</a>.</p>
|
|
1049
|
+
* @public
|
|
1050
1050
|
*/
|
|
1051
1051
|
IndicatorType?: IndicatorType;
|
|
1052
1052
|
/**
|
|
1053
|
-
* @public
|
|
1054
1053
|
* <p>Lists if there are more results available. The value of nextToken is a unique pagination token for each page. Repeat the call using the returned token to retrieve the next page. Keep all other arguments unchanged.</p>
|
|
1055
1054
|
* <p>Each pagination token expires after 24 hours. Using an expired pagination token will return a Validation Exception error.</p>
|
|
1055
|
+
* @public
|
|
1056
1056
|
*/
|
|
1057
1057
|
NextToken?: string;
|
|
1058
1058
|
/**
|
|
1059
|
-
* @public
|
|
1060
1059
|
* <p>Lists the maximum number of indicators in a page.</p>
|
|
1060
|
+
* @public
|
|
1061
1061
|
*/
|
|
1062
1062
|
MaxResults?: number;
|
|
1063
1063
|
}
|
|
@@ -1073,242 +1073,242 @@ export declare const Reason: {
|
|
|
1073
1073
|
*/
|
|
1074
1074
|
export type Reason = (typeof Reason)[keyof typeof Reason];
|
|
1075
1075
|
/**
|
|
1076
|
-
* @public
|
|
1077
1076
|
* <p>Contains information on suspicious IP addresses identified as indicators of compromise. This indicator is derived from Amazon Web Services threat intelligence.</p>
|
|
1077
|
+
* @public
|
|
1078
1078
|
*/
|
|
1079
1079
|
export interface FlaggedIpAddressDetail {
|
|
1080
1080
|
/**
|
|
1081
|
-
* @public
|
|
1082
1081
|
* <p>IP address of the suspicious entity.</p>
|
|
1082
|
+
* @public
|
|
1083
1083
|
*/
|
|
1084
1084
|
IpAddress?: string;
|
|
1085
1085
|
/**
|
|
1086
|
-
* @public
|
|
1087
1086
|
* <p>Details the reason the IP address was flagged as suspicious.</p>
|
|
1087
|
+
* @public
|
|
1088
1088
|
*/
|
|
1089
1089
|
Reason?: Reason;
|
|
1090
1090
|
}
|
|
1091
1091
|
/**
|
|
1092
|
-
* @public
|
|
1093
1092
|
* <p>Contains information on unusual and impossible travel in an account.</p>
|
|
1093
|
+
* @public
|
|
1094
1094
|
*/
|
|
1095
1095
|
export interface ImpossibleTravelDetail {
|
|
1096
1096
|
/**
|
|
1097
|
-
* @public
|
|
1098
1097
|
* <p>IP address where the resource was first used in the impossible travel.</p>
|
|
1098
|
+
* @public
|
|
1099
1099
|
*/
|
|
1100
1100
|
StartingIpAddress?: string;
|
|
1101
1101
|
/**
|
|
1102
|
-
* @public
|
|
1103
1102
|
* <p>IP address where the resource was last used in the impossible travel.</p>
|
|
1103
|
+
* @public
|
|
1104
1104
|
*/
|
|
1105
1105
|
EndingIpAddress?: string;
|
|
1106
1106
|
/**
|
|
1107
|
-
* @public
|
|
1108
1107
|
* <p>Location where the resource was first used in the impossible travel.</p>
|
|
1108
|
+
* @public
|
|
1109
1109
|
*/
|
|
1110
1110
|
StartingLocation?: string;
|
|
1111
1111
|
/**
|
|
1112
|
-
* @public
|
|
1113
1112
|
* <p>Location where the resource was last used in the impossible travel.</p>
|
|
1113
|
+
* @public
|
|
1114
1114
|
*/
|
|
1115
1115
|
EndingLocation?: string;
|
|
1116
1116
|
/**
|
|
1117
|
-
* @public
|
|
1118
1117
|
* <p>Returns the time difference between the first and last timestamp the resource was used.</p>
|
|
1118
|
+
* @public
|
|
1119
1119
|
*/
|
|
1120
1120
|
HourlyTimeDelta?: number;
|
|
1121
1121
|
}
|
|
1122
1122
|
/**
|
|
1123
|
-
* @public
|
|
1124
1123
|
* <p>Details new Autonomous System Organizations (ASOs) used either at the resource or account level. </p>
|
|
1124
|
+
* @public
|
|
1125
1125
|
*/
|
|
1126
1126
|
export interface NewAsoDetail {
|
|
1127
1127
|
/**
|
|
1128
|
-
* @public
|
|
1129
1128
|
* <p>Details about the new Autonomous System Organization (ASO).</p>
|
|
1129
|
+
* @public
|
|
1130
1130
|
*/
|
|
1131
1131
|
Aso?: string;
|
|
1132
1132
|
/**
|
|
1133
|
-
* @public
|
|
1134
1133
|
* <p>Checks if the Autonomous System Organization (ASO) is new for the entire account.</p>
|
|
1134
|
+
* @public
|
|
1135
1135
|
*/
|
|
1136
1136
|
IsNewForEntireAccount?: boolean;
|
|
1137
1137
|
}
|
|
1138
1138
|
/**
|
|
1139
|
-
* @public
|
|
1140
1139
|
* <p>Details new geolocations used either at the resource or account level. For example, lists an observed geolocation that is an infrequent or unused location based on previous user activity.</p>
|
|
1140
|
+
* @public
|
|
1141
1141
|
*/
|
|
1142
1142
|
export interface NewGeolocationDetail {
|
|
1143
1143
|
/**
|
|
1144
|
-
* @public
|
|
1145
1144
|
* <p>Location where the resource was accessed.</p>
|
|
1145
|
+
* @public
|
|
1146
1146
|
*/
|
|
1147
1147
|
Location?: string;
|
|
1148
1148
|
/**
|
|
1149
|
-
* @public
|
|
1150
1149
|
* <p>IP address using which the resource was accessed.</p>
|
|
1150
|
+
* @public
|
|
1151
1151
|
*/
|
|
1152
1152
|
IpAddress?: string;
|
|
1153
1153
|
/**
|
|
1154
|
-
* @public
|
|
1155
1154
|
* <p>Checks if the geolocation is new for the entire account.</p>
|
|
1155
|
+
* @public
|
|
1156
1156
|
*/
|
|
1157
1157
|
IsNewForEntireAccount?: boolean;
|
|
1158
1158
|
}
|
|
1159
1159
|
/**
|
|
1160
|
-
* @public
|
|
1161
1160
|
* <p>Details new user agents used either at the resource or account level.</p>
|
|
1161
|
+
* @public
|
|
1162
1162
|
*/
|
|
1163
1163
|
export interface NewUserAgentDetail {
|
|
1164
1164
|
/**
|
|
1165
|
-
* @public
|
|
1166
1165
|
* <p>New user agent which accessed the resource.</p>
|
|
1166
|
+
* @public
|
|
1167
1167
|
*/
|
|
1168
1168
|
UserAgent?: string;
|
|
1169
1169
|
/**
|
|
1170
|
-
* @public
|
|
1171
1170
|
* <p>Checks if the user agent is new for the entire account.</p>
|
|
1171
|
+
* @public
|
|
1172
1172
|
*/
|
|
1173
1173
|
IsNewForEntireAccount?: boolean;
|
|
1174
1174
|
}
|
|
1175
1175
|
/**
|
|
1176
|
-
* @public
|
|
1177
1176
|
* <p>Details related activities associated with a potential security event. Lists all distinct categories of evidence that are connected to the resource or the finding group.</p>
|
|
1177
|
+
* @public
|
|
1178
1178
|
*/
|
|
1179
1179
|
export interface RelatedFindingDetail {
|
|
1180
1180
|
/**
|
|
1181
|
-
* @public
|
|
1182
1181
|
* <p>The Amazon Resource Name (ARN) of the related finding.</p>
|
|
1182
|
+
* @public
|
|
1183
1183
|
*/
|
|
1184
1184
|
Arn?: string;
|
|
1185
1185
|
/**
|
|
1186
|
-
* @public
|
|
1187
1186
|
* <p>The type of finding.</p>
|
|
1187
|
+
* @public
|
|
1188
1188
|
*/
|
|
1189
1189
|
Type?: string;
|
|
1190
1190
|
/**
|
|
1191
|
-
* @public
|
|
1192
1191
|
* <p>The IP address of the finding.</p>
|
|
1192
|
+
* @public
|
|
1193
1193
|
*/
|
|
1194
1194
|
IpAddress?: string;
|
|
1195
1195
|
}
|
|
1196
1196
|
/**
|
|
1197
|
-
* @public
|
|
1198
1197
|
* <p>Details multiple activities as they related to a potential security event. Detective uses graph analysis technique that infers relationships between findings and entities, and groups them together as a finding group.</p>
|
|
1198
|
+
* @public
|
|
1199
1199
|
*/
|
|
1200
1200
|
export interface RelatedFindingGroupDetail {
|
|
1201
1201
|
/**
|
|
1202
|
-
* @public
|
|
1203
1202
|
* <p>The unique identifier for the finding group.</p>
|
|
1203
|
+
* @public
|
|
1204
1204
|
*/
|
|
1205
1205
|
Id?: string;
|
|
1206
1206
|
}
|
|
1207
1207
|
/**
|
|
1208
|
-
* @public
|
|
1209
1208
|
* <p>Details tactics, techniques, and procedures (TTPs) used in a potential security event. Tactics are based on <a href="https://attack.mitre.org/matrices/enterprise/">MITRE ATT&CK Matrix for
|
|
1210
1209
|
* Enterprise</a>. </p>
|
|
1210
|
+
* @public
|
|
1211
1211
|
*/
|
|
1212
1212
|
export interface TTPsObservedDetail {
|
|
1213
1213
|
/**
|
|
1214
|
-
* @public
|
|
1215
1214
|
* <p>The tactic used, identified by the investigation.</p>
|
|
1215
|
+
* @public
|
|
1216
1216
|
*/
|
|
1217
1217
|
Tactic?: string;
|
|
1218
1218
|
/**
|
|
1219
|
-
* @public
|
|
1220
1219
|
* <p>The technique used, identified by the investigation. </p>
|
|
1220
|
+
* @public
|
|
1221
1221
|
*/
|
|
1222
1222
|
Technique?: string;
|
|
1223
1223
|
/**
|
|
1224
|
-
* @public
|
|
1225
1224
|
* <p>The procedure used, identified by the investigation.</p>
|
|
1225
|
+
* @public
|
|
1226
1226
|
*/
|
|
1227
1227
|
Procedure?: string;
|
|
1228
1228
|
/**
|
|
1229
|
-
* @public
|
|
1230
1229
|
* <p>The IP address where the tactics, techniques, and procedure (TTP) was observed.</p>
|
|
1230
|
+
* @public
|
|
1231
1231
|
*/
|
|
1232
1232
|
IpAddress?: string;
|
|
1233
1233
|
/**
|
|
1234
|
-
* @public
|
|
1235
1234
|
* <p>The name of the API where the tactics, techniques, and procedure (TTP) was observed.</p>
|
|
1235
|
+
* @public
|
|
1236
1236
|
*/
|
|
1237
1237
|
APIName?: string;
|
|
1238
1238
|
/**
|
|
1239
|
-
* @public
|
|
1240
1239
|
* <p>The total number of successful API requests.</p>
|
|
1240
|
+
* @public
|
|
1241
1241
|
*/
|
|
1242
1242
|
APISuccessCount?: number;
|
|
1243
1243
|
/**
|
|
1244
|
-
* @public
|
|
1245
1244
|
* <p>The total number of failed API requests.</p>
|
|
1245
|
+
* @public
|
|
1246
1246
|
*/
|
|
1247
1247
|
APIFailureCount?: number;
|
|
1248
1248
|
}
|
|
1249
1249
|
/**
|
|
1250
|
-
* @public
|
|
1251
1250
|
* <p>Details about the indicators of compromise which are used to determine if a resource is involved in a security incident. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident. For the list of indicators of compromise that are generated by Detective investigations, see <a href="https://docs.aws.amazon.com/detective/latest/userguide/detective-investigations.html">Detective investigations</a>.</p>
|
|
1251
|
+
* @public
|
|
1252
1252
|
*/
|
|
1253
1253
|
export interface IndicatorDetail {
|
|
1254
1254
|
/**
|
|
1255
|
-
* @public
|
|
1256
1255
|
* <p>Details about the indicator of compromise.</p>
|
|
1256
|
+
* @public
|
|
1257
1257
|
*/
|
|
1258
1258
|
TTPsObservedDetail?: TTPsObservedDetail;
|
|
1259
1259
|
/**
|
|
1260
|
-
* @public
|
|
1261
1260
|
* <p>Identifies unusual and impossible user activity for an account. </p>
|
|
1261
|
+
* @public
|
|
1262
1262
|
*/
|
|
1263
1263
|
ImpossibleTravelDetail?: ImpossibleTravelDetail;
|
|
1264
1264
|
/**
|
|
1265
|
-
* @public
|
|
1266
1265
|
* <p>Suspicious IP addresses that are flagged, which indicates critical or severe threats based on threat intelligence by Detective. This indicator is derived from Amazon Web Services threat intelligence.</p>
|
|
1266
|
+
* @public
|
|
1267
1267
|
*/
|
|
1268
1268
|
FlaggedIpAddressDetail?: FlaggedIpAddressDetail;
|
|
1269
1269
|
/**
|
|
1270
|
-
* @public
|
|
1271
1270
|
* <p>Contains details about the new geographic location.</p>
|
|
1271
|
+
* @public
|
|
1272
1272
|
*/
|
|
1273
1273
|
NewGeolocationDetail?: NewGeolocationDetail;
|
|
1274
1274
|
/**
|
|
1275
|
-
* @public
|
|
1276
1275
|
* <p>Contains details about the new Autonomous System Organization (ASO).</p>
|
|
1276
|
+
* @public
|
|
1277
1277
|
*/
|
|
1278
1278
|
NewAsoDetail?: NewAsoDetail;
|
|
1279
1279
|
/**
|
|
1280
|
-
* @public
|
|
1281
1280
|
* <p>Contains details about the new user agent.</p>
|
|
1281
|
+
* @public
|
|
1282
1282
|
*/
|
|
1283
1283
|
NewUserAgentDetail?: NewUserAgentDetail;
|
|
1284
1284
|
/**
|
|
1285
|
-
* @public
|
|
1286
1285
|
* <p>Contains details about related findings.</p>
|
|
1286
|
+
* @public
|
|
1287
1287
|
*/
|
|
1288
1288
|
RelatedFindingDetail?: RelatedFindingDetail;
|
|
1289
1289
|
/**
|
|
1290
|
-
* @public
|
|
1291
1290
|
* <p>Contains details about related finding groups.</p>
|
|
1291
|
+
* @public
|
|
1292
1292
|
*/
|
|
1293
1293
|
RelatedFindingGroupDetail?: RelatedFindingGroupDetail;
|
|
1294
1294
|
}
|
|
1295
1295
|
/**
|
|
1296
|
-
* @public
|
|
1297
1296
|
* <p>Detective investigations triages indicators of compromises such as a finding
|
|
1298
1297
|
* and surfaces only the most critical and suspicious issues, so you can focus on high-level
|
|
1299
1298
|
* investigations. An <code>Indicator</code> lets you determine if an Amazon Web Services
|
|
1300
1299
|
* resource is involved in unusual activity that could indicate malicious behavior and its
|
|
1301
1300
|
* impact.</p>
|
|
1301
|
+
* @public
|
|
1302
1302
|
*/
|
|
1303
1303
|
export interface Indicator {
|
|
1304
1304
|
/**
|
|
1305
|
-
* @public
|
|
1306
1305
|
* <p>The type of indicator. </p>
|
|
1306
|
+
* @public
|
|
1307
1307
|
*/
|
|
1308
1308
|
IndicatorType?: IndicatorType;
|
|
1309
1309
|
/**
|
|
1310
|
-
* @public
|
|
1311
1310
|
* <p>Details about the indicators of compromise that are used to determine if a resource is involved in a security incident. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident.</p>
|
|
1311
|
+
* @public
|
|
1312
1312
|
*/
|
|
1313
1313
|
IndicatorDetail?: IndicatorDetail;
|
|
1314
1314
|
}
|
|
@@ -1317,82 +1317,82 @@ export interface Indicator {
|
|
|
1317
1317
|
*/
|
|
1318
1318
|
export interface ListIndicatorsResponse {
|
|
1319
1319
|
/**
|
|
1320
|
-
* @public
|
|
1321
1320
|
* <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
|
|
1321
|
+
* @public
|
|
1322
1322
|
*/
|
|
1323
1323
|
GraphArn?: string;
|
|
1324
1324
|
/**
|
|
1325
|
-
* @public
|
|
1326
1325
|
* <p>The investigation ID of the investigation report.</p>
|
|
1326
|
+
* @public
|
|
1327
1327
|
*/
|
|
1328
1328
|
InvestigationId?: string;
|
|
1329
1329
|
/**
|
|
1330
|
-
* @public
|
|
1331
1330
|
* <p>Lists if there are more results available. The value of nextToken is a unique pagination token for each page. Repeat the call using the returned token to retrieve the next page. Keep all other arguments unchanged.</p>
|
|
1332
1331
|
* <p>Each pagination token expires after 24 hours. Using an expired pagination token will return a Validation Exception error.</p>
|
|
1332
|
+
* @public
|
|
1333
1333
|
*/
|
|
1334
1334
|
NextToken?: string;
|
|
1335
1335
|
/**
|
|
1336
|
-
* @public
|
|
1337
1336
|
* <p>Lists the indicators of compromise.</p>
|
|
1337
|
+
* @public
|
|
1338
1338
|
*/
|
|
1339
1339
|
Indicators?: Indicator[];
|
|
1340
1340
|
}
|
|
1341
1341
|
/**
|
|
1342
|
-
* @public
|
|
1343
1342
|
* <p>Contains details on the time range used to filter data.</p>
|
|
1343
|
+
* @public
|
|
1344
1344
|
*/
|
|
1345
1345
|
export interface DateFilter {
|
|
1346
1346
|
/**
|
|
1347
|
-
* @public
|
|
1348
1347
|
* <p>A timestamp representing the start of the time period from when data is filtered, including the start date.</p>
|
|
1348
|
+
* @public
|
|
1349
1349
|
*/
|
|
1350
1350
|
StartInclusive: Date | undefined;
|
|
1351
1351
|
/**
|
|
1352
|
-
* @public
|
|
1353
1352
|
* <p>A timestamp representing the end date of the time period until when data is filtered, including the end date.</p>
|
|
1353
|
+
* @public
|
|
1354
1354
|
*/
|
|
1355
1355
|
EndInclusive: Date | undefined;
|
|
1356
1356
|
}
|
|
1357
1357
|
/**
|
|
1358
|
-
* @public
|
|
1359
1358
|
* <p>A string for filtering Detective investigations.</p>
|
|
1359
|
+
* @public
|
|
1360
1360
|
*/
|
|
1361
1361
|
export interface StringFilter {
|
|
1362
1362
|
/**
|
|
1363
|
-
* @public
|
|
1364
1363
|
* <p>The string filter value.</p>
|
|
1364
|
+
* @public
|
|
1365
1365
|
*/
|
|
1366
1366
|
Value: string | undefined;
|
|
1367
1367
|
}
|
|
1368
1368
|
/**
|
|
1369
|
-
* @public
|
|
1370
1369
|
* <p>Details on the criteria used to define the filter for investigation results.</p>
|
|
1370
|
+
* @public
|
|
1371
1371
|
*/
|
|
1372
1372
|
export interface FilterCriteria {
|
|
1373
1373
|
/**
|
|
1374
|
-
* @public
|
|
1375
1374
|
* <p>Filter the investigation results based on the severity.</p>
|
|
1375
|
+
* @public
|
|
1376
1376
|
*/
|
|
1377
1377
|
Severity?: StringFilter;
|
|
1378
1378
|
/**
|
|
1379
|
-
* @public
|
|
1380
1379
|
* <p>Filter the investigation results based on the status.</p>
|
|
1380
|
+
* @public
|
|
1381
1381
|
*/
|
|
1382
1382
|
Status?: StringFilter;
|
|
1383
1383
|
/**
|
|
1384
|
-
* @public
|
|
1385
1384
|
* <p>Filter the investigation results based on the state.</p>
|
|
1385
|
+
* @public
|
|
1386
1386
|
*/
|
|
1387
1387
|
State?: StringFilter;
|
|
1388
1388
|
/**
|
|
1389
|
-
* @public
|
|
1390
1389
|
* <p>Filter the investigation results based on the Amazon Resource Name (ARN) of the entity.</p>
|
|
1390
|
+
* @public
|
|
1391
1391
|
*/
|
|
1392
1392
|
EntityArn?: StringFilter;
|
|
1393
1393
|
/**
|
|
1394
|
-
* @public
|
|
1395
1394
|
* <p>Filter the investigation results based on when the investigation was created.</p>
|
|
1395
|
+
* @public
|
|
1396
1396
|
*/
|
|
1397
1397
|
CreatedTime?: DateFilter;
|
|
1398
1398
|
}
|
|
@@ -1422,18 +1422,18 @@ export declare const SortOrder: {
|
|
|
1422
1422
|
*/
|
|
1423
1423
|
export type SortOrder = (typeof SortOrder)[keyof typeof SortOrder];
|
|
1424
1424
|
/**
|
|
1425
|
-
* @public
|
|
1426
1425
|
* <p>Details about the criteria used for sorting investigations.</p>
|
|
1426
|
+
* @public
|
|
1427
1427
|
*/
|
|
1428
1428
|
export interface SortCriteria {
|
|
1429
1429
|
/**
|
|
1430
|
-
* @public
|
|
1431
1430
|
* <p>Represents the <code>Field</code> attribute to sort investigations.</p>
|
|
1431
|
+
* @public
|
|
1432
1432
|
*/
|
|
1433
1433
|
Field?: Field;
|
|
1434
1434
|
/**
|
|
1435
|
-
* @public
|
|
1436
1435
|
* <p>The order by which the sorted findings are displayed.</p>
|
|
1436
|
+
* @public
|
|
1437
1437
|
*/
|
|
1438
1438
|
SortOrder?: SortOrder;
|
|
1439
1439
|
}
|
|
@@ -1442,71 +1442,71 @@ export interface SortCriteria {
|
|
|
1442
1442
|
*/
|
|
1443
1443
|
export interface ListInvestigationsRequest {
|
|
1444
1444
|
/**
|
|
1445
|
-
* @public
|
|
1446
1445
|
* <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
|
|
1446
|
+
* @public
|
|
1447
1447
|
*/
|
|
1448
1448
|
GraphArn: string | undefined;
|
|
1449
1449
|
/**
|
|
1450
|
-
* @public
|
|
1451
1450
|
* <p>Lists if there are more results available. The value of nextToken is a unique pagination token for each page. Repeat the call using the returned token to retrieve the next page. Keep all other arguments unchanged.</p>
|
|
1452
1451
|
* <p>Each pagination token expires after 24 hours. Using an expired pagination token will return a Validation Exception error.</p>
|
|
1452
|
+
* @public
|
|
1453
1453
|
*/
|
|
1454
1454
|
NextToken?: string;
|
|
1455
1455
|
/**
|
|
1456
|
-
* @public
|
|
1457
1456
|
* <p>Lists the maximum number of investigations in a page.</p>
|
|
1457
|
+
* @public
|
|
1458
1458
|
*/
|
|
1459
1459
|
MaxResults?: number;
|
|
1460
1460
|
/**
|
|
1461
|
-
* @public
|
|
1462
1461
|
* <p>Filters the investigation results based on a criteria.</p>
|
|
1462
|
+
* @public
|
|
1463
1463
|
*/
|
|
1464
1464
|
FilterCriteria?: FilterCriteria;
|
|
1465
1465
|
/**
|
|
1466
|
-
* @public
|
|
1467
1466
|
* <p>Sorts the investigation results based on a criteria.</p>
|
|
1467
|
+
* @public
|
|
1468
1468
|
*/
|
|
1469
1469
|
SortCriteria?: SortCriteria;
|
|
1470
1470
|
}
|
|
1471
1471
|
/**
|
|
1472
|
-
* @public
|
|
1473
1472
|
* <p>Details about the investigation related to a potential security event identified by Detective.</p>
|
|
1473
|
+
* @public
|
|
1474
1474
|
*/
|
|
1475
1475
|
export interface InvestigationDetail {
|
|
1476
1476
|
/**
|
|
1477
|
-
* @public
|
|
1478
1477
|
* <p>The investigation ID of the investigation report.</p>
|
|
1478
|
+
* @public
|
|
1479
1479
|
*/
|
|
1480
1480
|
InvestigationId?: string;
|
|
1481
1481
|
/**
|
|
1482
|
-
* @public
|
|
1483
1482
|
* <p>Severity based on the likelihood and impact of the indicators of compromise discovered in the investigation.</p>
|
|
1483
|
+
* @public
|
|
1484
1484
|
*/
|
|
1485
1485
|
Severity?: Severity;
|
|
1486
1486
|
/**
|
|
1487
|
-
* @public
|
|
1488
1487
|
* <p>Status based on the completion status of the investigation.</p>
|
|
1488
|
+
* @public
|
|
1489
1489
|
*/
|
|
1490
1490
|
Status?: Status;
|
|
1491
1491
|
/**
|
|
1492
|
-
* @public
|
|
1493
1492
|
* <p>The current state of the investigation. An archived investigation indicates you have completed reviewing the investigation.</p>
|
|
1493
|
+
* @public
|
|
1494
1494
|
*/
|
|
1495
1495
|
State?: State;
|
|
1496
1496
|
/**
|
|
1497
|
-
* @public
|
|
1498
1497
|
* <p>The time stamp of the creation time of the investigation report. The value is an UTC ISO8601 formatted
|
|
1499
1498
|
* string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
1499
|
+
* @public
|
|
1500
1500
|
*/
|
|
1501
1501
|
CreatedTime?: Date;
|
|
1502
1502
|
/**
|
|
1503
|
-
* @public
|
|
1504
1503
|
* <p>The unique Amazon Resource Name (ARN) of the IAM user and IAM role.</p>
|
|
1504
|
+
* @public
|
|
1505
1505
|
*/
|
|
1506
1506
|
EntityArn?: string;
|
|
1507
1507
|
/**
|
|
1508
|
-
* @public
|
|
1509
1508
|
* <p>Type of entity. For example, Amazon Web Services accounts, such as IAM user and role.</p>
|
|
1509
|
+
* @public
|
|
1510
1510
|
*/
|
|
1511
1511
|
EntityType?: EntityType;
|
|
1512
1512
|
}
|
|
@@ -1515,14 +1515,14 @@ export interface InvestigationDetail {
|
|
|
1515
1515
|
*/
|
|
1516
1516
|
export interface ListInvestigationsResponse {
|
|
1517
1517
|
/**
|
|
1518
|
-
* @public
|
|
1519
1518
|
* <p>Lists the summary of uncommon behavior or malicious activity which indicates a compromise.</p>
|
|
1519
|
+
* @public
|
|
1520
1520
|
*/
|
|
1521
1521
|
InvestigationDetails?: InvestigationDetail[];
|
|
1522
1522
|
/**
|
|
1523
|
-
* @public
|
|
1524
1523
|
* <p>Lists if there are more results available. The value of nextToken is a unique pagination token for each page. Repeat the call using the returned token to retrieve the next page. Keep all other arguments unchanged.</p>
|
|
1525
1524
|
* <p>Each pagination token expires after 24 hours. </p>
|
|
1525
|
+
* @public
|
|
1526
1526
|
*/
|
|
1527
1527
|
NextToken?: string;
|
|
1528
1528
|
}
|
|
@@ -1531,17 +1531,17 @@ export interface ListInvestigationsResponse {
|
|
|
1531
1531
|
*/
|
|
1532
1532
|
export interface ListInvitationsRequest {
|
|
1533
1533
|
/**
|
|
1534
|
-
* @public
|
|
1535
1534
|
* <p>For requests to retrieve the next page of results, the pagination token that was
|
|
1536
1535
|
* returned with the previous page of results. The initial request does not include a
|
|
1537
1536
|
* pagination token.</p>
|
|
1537
|
+
* @public
|
|
1538
1538
|
*/
|
|
1539
1539
|
NextToken?: string;
|
|
1540
1540
|
/**
|
|
1541
|
-
* @public
|
|
1542
1541
|
* <p>The maximum number of behavior graph invitations to return in the response. The total
|
|
1543
1542
|
* must be less than the overall limit on the number of results to return, which is currently
|
|
1544
1543
|
* 200.</p>
|
|
1544
|
+
* @public
|
|
1545
1545
|
*/
|
|
1546
1546
|
MaxResults?: number;
|
|
1547
1547
|
}
|
|
@@ -1550,15 +1550,15 @@ export interface ListInvitationsRequest {
|
|
|
1550
1550
|
*/
|
|
1551
1551
|
export interface ListInvitationsResponse {
|
|
1552
1552
|
/**
|
|
1553
|
-
* @public
|
|
1554
1553
|
* <p>The list of behavior graphs for which the member account has open or accepted
|
|
1555
1554
|
* invitations.</p>
|
|
1555
|
+
* @public
|
|
1556
1556
|
*/
|
|
1557
1557
|
Invitations?: MemberDetail[];
|
|
1558
1558
|
/**
|
|
1559
|
-
* @public
|
|
1560
1559
|
* <p>If there are more behavior graphs remaining in the results, then this is the pagination
|
|
1561
1560
|
* token to use to request the next page of behavior graphs.</p>
|
|
1561
|
+
* @public
|
|
1562
1562
|
*/
|
|
1563
1563
|
NextToken?: string;
|
|
1564
1564
|
}
|
|
@@ -1567,21 +1567,21 @@ export interface ListInvitationsResponse {
|
|
|
1567
1567
|
*/
|
|
1568
1568
|
export interface ListMembersRequest {
|
|
1569
1569
|
/**
|
|
1570
|
-
* @public
|
|
1571
1570
|
* <p>The ARN of the behavior graph for which to retrieve the list of member accounts.</p>
|
|
1571
|
+
* @public
|
|
1572
1572
|
*/
|
|
1573
1573
|
GraphArn: string | undefined;
|
|
1574
1574
|
/**
|
|
1575
|
-
* @public
|
|
1576
1575
|
* <p>For requests to retrieve the next page of member account results, the pagination token
|
|
1577
1576
|
* that was returned with the previous page of results. The initial request does not include a
|
|
1578
1577
|
* pagination token.</p>
|
|
1578
|
+
* @public
|
|
1579
1579
|
*/
|
|
1580
1580
|
NextToken?: string;
|
|
1581
1581
|
/**
|
|
1582
|
-
* @public
|
|
1583
1582
|
* <p>The maximum number of member accounts to include in the response. The total must be less
|
|
1584
1583
|
* than the overall limit on the number of results to return, which is currently 200.</p>
|
|
1584
|
+
* @public
|
|
1585
1585
|
*/
|
|
1586
1586
|
MaxResults?: number;
|
|
1587
1587
|
}
|
|
@@ -1590,7 +1590,6 @@ export interface ListMembersRequest {
|
|
|
1590
1590
|
*/
|
|
1591
1591
|
export interface ListMembersResponse {
|
|
1592
1592
|
/**
|
|
1593
|
-
* @public
|
|
1594
1593
|
* <p>The list of member accounts in the behavior graph.</p>
|
|
1595
1594
|
* <p>For invited accounts, the results include member accounts that did not pass verification
|
|
1596
1595
|
* and member accounts that have not yet accepted the invitation to the behavior graph. The
|
|
@@ -1598,12 +1597,13 @@ export interface ListMembersResponse {
|
|
|
1598
1597
|
* <p>For the organization behavior graph, the results do not include organization accounts
|
|
1599
1598
|
* that the Detective administrator account has not enabled as member
|
|
1600
1599
|
* accounts.</p>
|
|
1600
|
+
* @public
|
|
1601
1601
|
*/
|
|
1602
1602
|
MemberDetails?: MemberDetail[];
|
|
1603
1603
|
/**
|
|
1604
|
-
* @public
|
|
1605
1604
|
* <p>If there are more member accounts remaining in the results, then use this pagination
|
|
1606
1605
|
* token to request the next page of member accounts.</p>
|
|
1606
|
+
* @public
|
|
1607
1607
|
*/
|
|
1608
1608
|
NextToken?: string;
|
|
1609
1609
|
}
|
|
@@ -1612,15 +1612,15 @@ export interface ListMembersResponse {
|
|
|
1612
1612
|
*/
|
|
1613
1613
|
export interface ListOrganizationAdminAccountsRequest {
|
|
1614
1614
|
/**
|
|
1615
|
-
* @public
|
|
1616
1615
|
* <p>For requests to get the next page of results, the pagination token that was returned
|
|
1617
1616
|
* with the previous set of results. The initial request does not include a pagination
|
|
1618
1617
|
* token.</p>
|
|
1618
|
+
* @public
|
|
1619
1619
|
*/
|
|
1620
1620
|
NextToken?: string;
|
|
1621
1621
|
/**
|
|
1622
|
-
* @public
|
|
1623
1622
|
* <p>The maximum number of results to return.</p>
|
|
1623
|
+
* @public
|
|
1624
1624
|
*/
|
|
1625
1625
|
MaxResults?: number;
|
|
1626
1626
|
}
|
|
@@ -1629,14 +1629,14 @@ export interface ListOrganizationAdminAccountsRequest {
|
|
|
1629
1629
|
*/
|
|
1630
1630
|
export interface ListOrganizationAdminAccountsResponse {
|
|
1631
1631
|
/**
|
|
1632
|
-
* @public
|
|
1633
1632
|
* <p>The list of Detective administrator accounts.</p>
|
|
1633
|
+
* @public
|
|
1634
1634
|
*/
|
|
1635
1635
|
Administrators?: Administrator[];
|
|
1636
1636
|
/**
|
|
1637
|
-
* @public
|
|
1638
1637
|
* <p>If there are more accounts remaining in the results, then this is the pagination token
|
|
1639
1638
|
* to use to request the next page of accounts.</p>
|
|
1639
|
+
* @public
|
|
1640
1640
|
*/
|
|
1641
1641
|
NextToken?: string;
|
|
1642
1642
|
}
|
|
@@ -1645,8 +1645,8 @@ export interface ListOrganizationAdminAccountsResponse {
|
|
|
1645
1645
|
*/
|
|
1646
1646
|
export interface ListTagsForResourceRequest {
|
|
1647
1647
|
/**
|
|
1648
|
-
* @public
|
|
1649
1648
|
* <p>The ARN of the behavior graph for which to retrieve the tag values.</p>
|
|
1649
|
+
* @public
|
|
1650
1650
|
*/
|
|
1651
1651
|
ResourceArn: string | undefined;
|
|
1652
1652
|
}
|
|
@@ -1655,9 +1655,9 @@ export interface ListTagsForResourceRequest {
|
|
|
1655
1655
|
*/
|
|
1656
1656
|
export interface ListTagsForResourceResponse {
|
|
1657
1657
|
/**
|
|
1658
|
-
* @public
|
|
1659
1658
|
* <p>The tag values that are assigned to the behavior graph. The request returns up to 50 tag
|
|
1660
1659
|
* values.</p>
|
|
1660
|
+
* @public
|
|
1661
1661
|
*/
|
|
1662
1662
|
Tags?: Record<string, string>;
|
|
1663
1663
|
}
|
|
@@ -1666,10 +1666,10 @@ export interface ListTagsForResourceResponse {
|
|
|
1666
1666
|
*/
|
|
1667
1667
|
export interface RejectInvitationRequest {
|
|
1668
1668
|
/**
|
|
1669
|
-
* @public
|
|
1670
1669
|
* <p>The ARN of the behavior graph to reject the invitation to.</p>
|
|
1671
1670
|
* <p>The member account's current member status in the behavior graph must be
|
|
1672
1671
|
* <code>INVITED</code>.</p>
|
|
1672
|
+
* @public
|
|
1673
1673
|
*/
|
|
1674
1674
|
GraphArn: string | undefined;
|
|
1675
1675
|
}
|
|
@@ -1678,24 +1678,24 @@ export interface RejectInvitationRequest {
|
|
|
1678
1678
|
*/
|
|
1679
1679
|
export interface StartInvestigationRequest {
|
|
1680
1680
|
/**
|
|
1681
|
-
* @public
|
|
1682
1681
|
* <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
|
|
1682
|
+
* @public
|
|
1683
1683
|
*/
|
|
1684
1684
|
GraphArn: string | undefined;
|
|
1685
1685
|
/**
|
|
1686
|
-
* @public
|
|
1687
1686
|
* <p>The unique Amazon Resource Name (ARN) of the IAM user and IAM role.</p>
|
|
1687
|
+
* @public
|
|
1688
1688
|
*/
|
|
1689
1689
|
EntityArn: string | undefined;
|
|
1690
1690
|
/**
|
|
1691
|
-
* @public
|
|
1692
1691
|
* <p>The data and time when the investigation began. The value is an UTC ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
1692
|
+
* @public
|
|
1693
1693
|
*/
|
|
1694
1694
|
ScopeStartTime: Date | undefined;
|
|
1695
1695
|
/**
|
|
1696
|
-
* @public
|
|
1697
1696
|
* <p>The data and time when the investigation ended. The value is an UTC ISO8601 formatted
|
|
1698
1697
|
* string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
|
|
1698
|
+
* @public
|
|
1699
1699
|
*/
|
|
1700
1700
|
ScopeEndTime: Date | undefined;
|
|
1701
1701
|
}
|
|
@@ -1704,8 +1704,8 @@ export interface StartInvestigationRequest {
|
|
|
1704
1704
|
*/
|
|
1705
1705
|
export interface StartInvestigationResponse {
|
|
1706
1706
|
/**
|
|
1707
|
-
* @public
|
|
1708
1707
|
* <p>The investigation ID of the investigation report.</p>
|
|
1708
|
+
* @public
|
|
1709
1709
|
*/
|
|
1710
1710
|
InvestigationId?: string;
|
|
1711
1711
|
}
|
|
@@ -1714,15 +1714,15 @@ export interface StartInvestigationResponse {
|
|
|
1714
1714
|
*/
|
|
1715
1715
|
export interface StartMonitoringMemberRequest {
|
|
1716
1716
|
/**
|
|
1717
|
-
* @public
|
|
1718
1717
|
* <p>The ARN of the behavior graph.</p>
|
|
1718
|
+
* @public
|
|
1719
1719
|
*/
|
|
1720
1720
|
GraphArn: string | undefined;
|
|
1721
1721
|
/**
|
|
1722
|
-
* @public
|
|
1723
1722
|
* <p>The account ID of the member account to try to enable.</p>
|
|
1724
1723
|
* <p>The account must be an invited member account with a status of
|
|
1725
1724
|
* <code>ACCEPTED_BUT_DISABLED</code>. </p>
|
|
1725
|
+
* @public
|
|
1726
1726
|
*/
|
|
1727
1727
|
AccountId: string | undefined;
|
|
1728
1728
|
}
|
|
@@ -1731,15 +1731,15 @@ export interface StartMonitoringMemberRequest {
|
|
|
1731
1731
|
*/
|
|
1732
1732
|
export interface TagResourceRequest {
|
|
1733
1733
|
/**
|
|
1734
|
-
* @public
|
|
1735
1734
|
* <p>The ARN of the behavior graph to assign the tags to.</p>
|
|
1735
|
+
* @public
|
|
1736
1736
|
*/
|
|
1737
1737
|
ResourceArn: string | undefined;
|
|
1738
1738
|
/**
|
|
1739
|
-
* @public
|
|
1740
1739
|
* <p>The tags to assign to the behavior graph. You can add up to 50 tags. For each tag, you
|
|
1741
1740
|
* provide the tag key and the tag value. Each tag key can contain up to 128 characters. Each
|
|
1742
1741
|
* tag value can contain up to 256 characters.</p>
|
|
1742
|
+
* @public
|
|
1743
1743
|
*/
|
|
1744
1744
|
Tags: Record<string, string> | undefined;
|
|
1745
1745
|
}
|
|
@@ -1753,14 +1753,14 @@ export interface TagResourceResponse {
|
|
|
1753
1753
|
*/
|
|
1754
1754
|
export interface UntagResourceRequest {
|
|
1755
1755
|
/**
|
|
1756
|
-
* @public
|
|
1757
1756
|
* <p>The ARN of the behavior graph to remove the tags from.</p>
|
|
1757
|
+
* @public
|
|
1758
1758
|
*/
|
|
1759
1759
|
ResourceArn: string | undefined;
|
|
1760
1760
|
/**
|
|
1761
|
-
* @public
|
|
1762
1761
|
* <p>The tag keys of the tags to remove from the behavior graph. You can remove up to 50 tags
|
|
1763
1762
|
* at a time.</p>
|
|
1763
|
+
* @public
|
|
1764
1764
|
*/
|
|
1765
1765
|
TagKeys: string[] | undefined;
|
|
1766
1766
|
}
|
|
@@ -1774,13 +1774,13 @@ export interface UntagResourceResponse {
|
|
|
1774
1774
|
*/
|
|
1775
1775
|
export interface UpdateDatasourcePackagesRequest {
|
|
1776
1776
|
/**
|
|
1777
|
-
* @public
|
|
1778
1777
|
* <p>The ARN of the behavior graph.</p>
|
|
1778
|
+
* @public
|
|
1779
1779
|
*/
|
|
1780
1780
|
GraphArn: string | undefined;
|
|
1781
1781
|
/**
|
|
1782
|
-
* @public
|
|
1783
1782
|
* <p>The data source package start for the behavior graph.</p>
|
|
1783
|
+
* @public
|
|
1784
1784
|
*/
|
|
1785
1785
|
DatasourcePackages: DatasourcePackage[] | undefined;
|
|
1786
1786
|
}
|
|
@@ -1789,18 +1789,18 @@ export interface UpdateDatasourcePackagesRequest {
|
|
|
1789
1789
|
*/
|
|
1790
1790
|
export interface UpdateInvestigationStateRequest {
|
|
1791
1791
|
/**
|
|
1792
|
-
* @public
|
|
1793
1792
|
* <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
|
|
1793
|
+
* @public
|
|
1794
1794
|
*/
|
|
1795
1795
|
GraphArn: string | undefined;
|
|
1796
1796
|
/**
|
|
1797
|
-
* @public
|
|
1798
1797
|
* <p>The investigation ID of the investigation report.</p>
|
|
1798
|
+
* @public
|
|
1799
1799
|
*/
|
|
1800
1800
|
InvestigationId: string | undefined;
|
|
1801
1801
|
/**
|
|
1802
|
-
* @public
|
|
1803
1802
|
* <p>The current state of the investigation. An archived investigation indicates you have completed reviewing the investigation.</p>
|
|
1803
|
+
* @public
|
|
1804
1804
|
*/
|
|
1805
1805
|
State: State | undefined;
|
|
1806
1806
|
}
|
|
@@ -1809,14 +1809,14 @@ export interface UpdateInvestigationStateRequest {
|
|
|
1809
1809
|
*/
|
|
1810
1810
|
export interface UpdateOrganizationConfigurationRequest {
|
|
1811
1811
|
/**
|
|
1812
|
-
* @public
|
|
1813
1812
|
* <p>The ARN of the organization behavior graph.</p>
|
|
1813
|
+
* @public
|
|
1814
1814
|
*/
|
|
1815
1815
|
GraphArn: string | undefined;
|
|
1816
1816
|
/**
|
|
1817
|
-
* @public
|
|
1818
1817
|
* <p>Indicates whether to automatically enable new organization accounts as member accounts
|
|
1819
1818
|
* in the organization behavior graph.</p>
|
|
1819
|
+
* @public
|
|
1820
1820
|
*/
|
|
1821
1821
|
AutoEnable?: boolean;
|
|
1822
1822
|
}
|