@aws-sdk/client-detective 3.533.0 → 3.540.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (69) hide show
  1. package/dist-cjs/endpoint/endpointResolver.js +4 -2
  2. package/dist-cjs/index.js +0 -3
  3. package/dist-es/endpoint/endpointResolver.js +3 -1
  4. package/dist-es/index.js +0 -1
  5. package/dist-types/Detective.d.ts +6 -1
  6. package/dist-types/DetectiveClient.d.ts +1 -1
  7. package/dist-types/commands/AcceptInvitationCommand.d.ts +2 -1
  8. package/dist-types/commands/BatchGetGraphMemberDatasourcesCommand.d.ts +2 -1
  9. package/dist-types/commands/BatchGetMembershipDatasourcesCommand.d.ts +2 -1
  10. package/dist-types/commands/CreateGraphCommand.d.ts +2 -1
  11. package/dist-types/commands/CreateMembersCommand.d.ts +2 -1
  12. package/dist-types/commands/DeleteGraphCommand.d.ts +2 -1
  13. package/dist-types/commands/DeleteMembersCommand.d.ts +2 -1
  14. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +2 -1
  15. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +2 -1
  16. package/dist-types/commands/DisassociateMembershipCommand.d.ts +2 -1
  17. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +2 -1
  18. package/dist-types/commands/GetInvestigationCommand.d.ts +2 -1
  19. package/dist-types/commands/GetMembersCommand.d.ts +2 -1
  20. package/dist-types/commands/ListDatasourcePackagesCommand.d.ts +2 -1
  21. package/dist-types/commands/ListGraphsCommand.d.ts +2 -1
  22. package/dist-types/commands/ListIndicatorsCommand.d.ts +2 -1
  23. package/dist-types/commands/ListInvestigationsCommand.d.ts +2 -1
  24. package/dist-types/commands/ListInvitationsCommand.d.ts +2 -1
  25. package/dist-types/commands/ListMembersCommand.d.ts +2 -1
  26. package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +2 -1
  27. package/dist-types/commands/ListTagsForResourceCommand.d.ts +2 -1
  28. package/dist-types/commands/RejectInvitationCommand.d.ts +2 -1
  29. package/dist-types/commands/StartInvestigationCommand.d.ts +2 -1
  30. package/dist-types/commands/StartMonitoringMemberCommand.d.ts +2 -1
  31. package/dist-types/commands/TagResourceCommand.d.ts +2 -1
  32. package/dist-types/commands/UntagResourceCommand.d.ts +2 -1
  33. package/dist-types/commands/UpdateDatasourcePackagesCommand.d.ts +2 -1
  34. package/dist-types/commands/UpdateInvestigationStateCommand.d.ts +2 -1
  35. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +2 -1
  36. package/dist-types/index.d.ts +0 -1
  37. package/dist-types/models/models_0.d.ts +226 -226
  38. package/dist-types/ts3.4/Detective.d.ts +5 -0
  39. package/dist-types/ts3.4/commands/AcceptInvitationCommand.d.ts +9 -0
  40. package/dist-types/ts3.4/commands/BatchGetGraphMemberDatasourcesCommand.d.ts +9 -0
  41. package/dist-types/ts3.4/commands/BatchGetMembershipDatasourcesCommand.d.ts +9 -0
  42. package/dist-types/ts3.4/commands/CreateGraphCommand.d.ts +9 -0
  43. package/dist-types/ts3.4/commands/CreateMembersCommand.d.ts +9 -0
  44. package/dist-types/ts3.4/commands/DeleteGraphCommand.d.ts +9 -0
  45. package/dist-types/ts3.4/commands/DeleteMembersCommand.d.ts +9 -0
  46. package/dist-types/ts3.4/commands/DescribeOrganizationConfigurationCommand.d.ts +9 -0
  47. package/dist-types/ts3.4/commands/DisableOrganizationAdminAccountCommand.d.ts +9 -0
  48. package/dist-types/ts3.4/commands/DisassociateMembershipCommand.d.ts +9 -0
  49. package/dist-types/ts3.4/commands/EnableOrganizationAdminAccountCommand.d.ts +9 -0
  50. package/dist-types/ts3.4/commands/GetInvestigationCommand.d.ts +9 -0
  51. package/dist-types/ts3.4/commands/GetMembersCommand.d.ts +9 -0
  52. package/dist-types/ts3.4/commands/ListDatasourcePackagesCommand.d.ts +9 -0
  53. package/dist-types/ts3.4/commands/ListGraphsCommand.d.ts +9 -0
  54. package/dist-types/ts3.4/commands/ListIndicatorsCommand.d.ts +9 -0
  55. package/dist-types/ts3.4/commands/ListInvestigationsCommand.d.ts +9 -0
  56. package/dist-types/ts3.4/commands/ListInvitationsCommand.d.ts +9 -0
  57. package/dist-types/ts3.4/commands/ListMembersCommand.d.ts +9 -0
  58. package/dist-types/ts3.4/commands/ListOrganizationAdminAccountsCommand.d.ts +9 -0
  59. package/dist-types/ts3.4/commands/ListTagsForResourceCommand.d.ts +9 -0
  60. package/dist-types/ts3.4/commands/RejectInvitationCommand.d.ts +9 -0
  61. package/dist-types/ts3.4/commands/StartInvestigationCommand.d.ts +9 -0
  62. package/dist-types/ts3.4/commands/StartMonitoringMemberCommand.d.ts +9 -0
  63. package/dist-types/ts3.4/commands/TagResourceCommand.d.ts +9 -0
  64. package/dist-types/ts3.4/commands/UntagResourceCommand.d.ts +9 -0
  65. package/dist-types/ts3.4/commands/UpdateDatasourcePackagesCommand.d.ts +9 -0
  66. package/dist-types/ts3.4/commands/UpdateInvestigationStateCommand.d.ts +9 -0
  67. package/dist-types/ts3.4/commands/UpdateOrganizationConfigurationCommand.d.ts +9 -0
  68. package/dist-types/ts3.4/index.d.ts +0 -1
  69. package/package.json +40 -40
@@ -5,10 +5,10 @@ import { DetectiveServiceException as __BaseException } from "./DetectiveService
5
5
  */
6
6
  export interface AcceptInvitationRequest {
7
7
  /**
8
- * @public
9
8
  * <p>The ARN of the behavior graph that the member account is accepting the invitation
10
9
  * for.</p>
11
10
  * <p>The member account status in the behavior graph must be <code>INVITED</code>.</p>
11
+ * @public
12
12
  */
13
13
  GraphArn: string | undefined;
14
14
  }
@@ -26,32 +26,32 @@ export declare const ErrorCode: {
26
26
  */
27
27
  export type ErrorCode = (typeof ErrorCode)[keyof typeof ErrorCode];
28
28
  /**
29
- * @public
30
29
  * <p>The request issuer does not have permission to access this resource or perform this
31
30
  * operation.</p>
31
+ * @public
32
32
  */
33
33
  export declare class AccessDeniedException extends __BaseException {
34
34
  readonly name: "AccessDeniedException";
35
35
  readonly $fault: "client";
36
36
  Message?: string;
37
37
  /**
38
- * @public
39
38
  * <p>The SDK default error code associated with the access denied exception.</p>
39
+ * @public
40
40
  */
41
41
  ErrorCode?: ErrorCode;
42
42
  /**
43
- * @public
44
43
  * <p>The SDK default explanation of why access was denied.</p>
44
+ * @public
45
45
  */
46
46
  ErrorCodeReason?: string;
47
47
  /**
48
- * @public
49
48
  * <p>The error code associated with the access denied exception.</p>
49
+ * @public
50
50
  */
51
51
  SubErrorCode?: ErrorCode;
52
52
  /**
53
- * @public
54
53
  * <p> An explanation of why access was denied.</p>
54
+ * @public
55
55
  */
56
56
  SubErrorCodeReason?: string;
57
57
  /**
@@ -60,8 +60,8 @@ export declare class AccessDeniedException extends __BaseException {
60
60
  constructor(opts: __ExceptionOptionType<AccessDeniedException, __BaseException>);
61
61
  }
62
62
  /**
63
- * @public
64
63
  * <p>The request attempted an invalid action.</p>
64
+ * @public
65
65
  */
66
66
  export declare class ConflictException extends __BaseException {
67
67
  readonly name: "ConflictException";
@@ -73,8 +73,8 @@ export declare class ConflictException extends __BaseException {
73
73
  constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
74
74
  }
75
75
  /**
76
- * @public
77
76
  * <p>The request was valid but failed because of a problem with the service.</p>
77
+ * @public
78
78
  */
79
79
  export declare class InternalServerException extends __BaseException {
80
80
  readonly name: "InternalServerException";
@@ -86,8 +86,8 @@ export declare class InternalServerException extends __BaseException {
86
86
  constructor(opts: __ExceptionOptionType<InternalServerException, __BaseException>);
87
87
  }
88
88
  /**
89
- * @public
90
89
  * <p>The request refers to a nonexistent resource.</p>
90
+ * @public
91
91
  */
92
92
  export declare class ResourceNotFoundException extends __BaseException {
93
93
  readonly name: "ResourceNotFoundException";
@@ -99,21 +99,21 @@ export declare class ResourceNotFoundException extends __BaseException {
99
99
  constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
100
100
  }
101
101
  /**
102
- * @public
103
102
  * <p>The request parameters are invalid.</p>
103
+ * @public
104
104
  */
105
105
  export declare class ValidationException extends __BaseException {
106
106
  readonly name: "ValidationException";
107
107
  readonly $fault: "client";
108
108
  Message?: string;
109
109
  /**
110
- * @public
111
110
  * <p>The error code associated with the validation failure.</p>
111
+ * @public
112
112
  */
113
113
  ErrorCode?: ErrorCode;
114
114
  /**
115
- * @public
116
115
  * <p> An explanation of why validation failed.</p>
116
+ * @public
117
117
  */
118
118
  ErrorCodeReason?: string;
119
119
  /**
@@ -122,45 +122,45 @@ export declare class ValidationException extends __BaseException {
122
122
  constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
123
123
  }
124
124
  /**
125
- * @public
126
125
  * <p>An Amazon Web Services account that is the administrator account of or a member of a
127
126
  * behavior graph.</p>
127
+ * @public
128
128
  */
129
129
  export interface Account {
130
130
  /**
131
- * @public
132
131
  * <p>The account identifier of the Amazon Web Services account.</p>
132
+ * @public
133
133
  */
134
134
  AccountId: string | undefined;
135
135
  /**
136
- * @public
137
136
  * <p>The Amazon Web Services account root user email address for the Amazon Web Services
138
137
  * account.</p>
138
+ * @public
139
139
  */
140
140
  EmailAddress: string | undefined;
141
141
  }
142
142
  /**
143
- * @public
144
143
  * <p>Information about the Detective administrator account for an
145
144
  * organization.</p>
145
+ * @public
146
146
  */
147
147
  export interface Administrator {
148
148
  /**
149
- * @public
150
149
  * <p>The Amazon Web Services account identifier of the Detective administrator
151
150
  * account for the organization.</p>
151
+ * @public
152
152
  */
153
153
  AccountId?: string;
154
154
  /**
155
- * @public
156
155
  * <p>The ARN of the organization behavior graph.</p>
156
+ * @public
157
157
  */
158
158
  GraphArn?: string;
159
159
  /**
160
- * @public
161
160
  * <p>The date and time when the Detective administrator account was enabled. The
162
161
  * value is an ISO8601 formatted string. For example,
163
162
  * <code>2021-08-18T16:35:56.284Z</code>.</p>
163
+ * @public
164
164
  */
165
165
  DelegationTime?: Date;
166
166
  }
@@ -169,14 +169,14 @@ export interface Administrator {
169
169
  */
170
170
  export interface BatchGetGraphMemberDatasourcesRequest {
171
171
  /**
172
- * @public
173
172
  * <p>The ARN of the behavior graph.</p>
173
+ * @public
174
174
  */
175
175
  GraphArn: string | undefined;
176
176
  /**
177
- * @public
178
177
  * <p>The list of Amazon Web Services accounts to get data source package information
179
178
  * on.</p>
179
+ * @public
180
180
  */
181
181
  AccountIds: string[] | undefined;
182
182
  }
@@ -207,53 +207,53 @@ export declare const DatasourcePackageIngestState: {
207
207
  */
208
208
  export type DatasourcePackageIngestState = (typeof DatasourcePackageIngestState)[keyof typeof DatasourcePackageIngestState];
209
209
  /**
210
- * @public
211
210
  * <p>Details on when data collection began for a source package.</p>
211
+ * @public
212
212
  */
213
213
  export interface TimestampForCollection {
214
214
  /**
215
- * @public
216
215
  * <p>The data and time when data collection began for a source package. The value is an
217
216
  * ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
217
+ * @public
218
218
  */
219
219
  Timestamp?: Date;
220
220
  }
221
221
  /**
222
- * @public
223
222
  * <p>Details on data source packages for members of the behavior graph.</p>
223
+ * @public
224
224
  */
225
225
  export interface MembershipDatasources {
226
226
  /**
227
- * @public
228
227
  * <p>The account identifier of the Amazon Web Services account.</p>
228
+ * @public
229
229
  */
230
230
  AccountId?: string;
231
231
  /**
232
- * @public
233
232
  * <p>The ARN of the organization behavior graph.</p>
233
+ * @public
234
234
  */
235
235
  GraphArn?: string;
236
236
  /**
237
- * @public
238
237
  * <p>Details on when a data source package was added to a behavior graph.</p>
238
+ * @public
239
239
  */
240
240
  DatasourcePackageIngestHistory?: Partial<Record<DatasourcePackage, Partial<Record<DatasourcePackageIngestState, TimestampForCollection>>>>;
241
241
  }
242
242
  /**
243
- * @public
244
243
  * <p>A member account that was included in a request but for which the request could not be
245
244
  * processed.</p>
245
+ * @public
246
246
  */
247
247
  export interface UnprocessedAccount {
248
248
  /**
249
- * @public
250
249
  * <p>The Amazon Web Services account identifier of the member account that was not
251
250
  * processed.</p>
251
+ * @public
252
252
  */
253
253
  AccountId?: string;
254
254
  /**
255
- * @public
256
255
  * <p>The reason that the member account request could not be processed.</p>
256
+ * @public
257
257
  */
258
258
  Reason?: string;
259
259
  }
@@ -262,13 +262,13 @@ export interface UnprocessedAccount {
262
262
  */
263
263
  export interface BatchGetGraphMemberDatasourcesResponse {
264
264
  /**
265
- * @public
266
265
  * <p>Details on the status of data source packages for members of the behavior graph.</p>
266
+ * @public
267
267
  */
268
268
  MemberDatasources?: MembershipDatasources[];
269
269
  /**
270
- * @public
271
270
  * <p>Accounts that data source package information could not be retrieved for.</p>
271
+ * @public
272
272
  */
273
273
  UnprocessedAccounts?: UnprocessedAccount[];
274
274
  }
@@ -277,25 +277,25 @@ export interface BatchGetGraphMemberDatasourcesResponse {
277
277
  */
278
278
  export interface BatchGetMembershipDatasourcesRequest {
279
279
  /**
280
- * @public
281
280
  * <p>The ARN of the behavior graph.</p>
281
+ * @public
282
282
  */
283
283
  GraphArns: string[] | undefined;
284
284
  }
285
285
  /**
286
- * @public
287
286
  * <p>Behavior graphs that could not be processed in the request.</p>
287
+ * @public
288
288
  */
289
289
  export interface UnprocessedGraph {
290
290
  /**
291
- * @public
292
291
  * <p>The ARN of the organization behavior graph.</p>
292
+ * @public
293
293
  */
294
294
  GraphArn?: string;
295
295
  /**
296
- * @public
297
296
  * <p>The reason data source package information could not be processed for a behavior
298
297
  * graph.</p>
298
+ * @public
299
299
  */
300
300
  Reason?: string;
301
301
  }
@@ -304,13 +304,13 @@ export interface UnprocessedGraph {
304
304
  */
305
305
  export interface BatchGetMembershipDatasourcesResponse {
306
306
  /**
307
- * @public
308
307
  * <p>Details on the data source package history for an member of the behavior graph.</p>
308
+ * @public
309
309
  */
310
310
  MembershipDatasources?: MembershipDatasources[];
311
311
  /**
312
- * @public
313
312
  * <p>Graphs that data source package information could not be retrieved for.</p>
313
+ * @public
314
314
  */
315
315
  UnprocessedGraphs?: UnprocessedGraph[];
316
316
  }
@@ -319,10 +319,10 @@ export interface BatchGetMembershipDatasourcesResponse {
319
319
  */
320
320
  export interface CreateGraphRequest {
321
321
  /**
322
- * @public
323
322
  * <p>The tags to assign to the new behavior graph. You can add up to 50 tags. For each tag,
324
323
  * you provide the tag key and the tag value. Each tag key can contain up to 128 characters.
325
324
  * Each tag value can contain up to 256 characters.</p>
325
+ * @public
326
326
  */
327
327
  Tags?: Record<string, string>;
328
328
  }
@@ -331,13 +331,12 @@ export interface CreateGraphRequest {
331
331
  */
332
332
  export interface CreateGraphResponse {
333
333
  /**
334
- * @public
335
334
  * <p>The ARN of the new behavior graph.</p>
335
+ * @public
336
336
  */
337
337
  GraphArn?: string;
338
338
  }
339
339
  /**
340
- * @public
341
340
  * <p>This request cannot be completed for one of the following reasons.</p>
342
341
  * <ul>
343
342
  * <li>
@@ -349,14 +348,15 @@ export interface CreateGraphResponse {
349
348
  * <p>This request cannot be completed if the current volume ingested is above the limit of 10 TB per day. Detective will not allow you to add additional member accounts.</p>
350
349
  * </li>
351
350
  * </ul>
351
+ * @public
352
352
  */
353
353
  export declare class ServiceQuotaExceededException extends __BaseException {
354
354
  readonly name: "ServiceQuotaExceededException";
355
355
  readonly $fault: "client";
356
356
  Message?: string;
357
357
  /**
358
- * @public
359
358
  * <p>The type of resource that has exceeded the service quota.</p>
359
+ * @public
360
360
  */
361
361
  Resources?: string[];
362
362
  /**
@@ -369,32 +369,32 @@ export declare class ServiceQuotaExceededException extends __BaseException {
369
369
  */
370
370
  export interface CreateMembersRequest {
371
371
  /**
372
- * @public
373
372
  * <p>The ARN of the behavior graph.</p>
373
+ * @public
374
374
  */
375
375
  GraphArn: string | undefined;
376
376
  /**
377
- * @public
378
377
  * <p>Customized message text to include in the invitation email message to the invited member
379
378
  * accounts.</p>
379
+ * @public
380
380
  */
381
381
  Message?: string;
382
382
  /**
383
- * @public
384
383
  * <p>if set to <code>true</code>, then the invited accounts do not receive email
385
384
  * notifications. By default, this is set to <code>false</code>, and the invited accounts
386
385
  * receive email notifications.</p>
387
386
  * <p>Organization accounts in the organization behavior graph do not receive email
388
387
  * notifications.</p>
388
+ * @public
389
389
  */
390
390
  DisableEmailNotification?: boolean;
391
391
  /**
392
- * @public
393
392
  * <p>The list of Amazon Web Services accounts to invite or to enable. You can invite or enable
394
393
  * up to 50 accounts at a time. For each invited account, the account list contains the
395
394
  * account identifier and the Amazon Web Services account root user email address. For
396
395
  * organization accounts in the organization behavior graph, the email address is not
397
396
  * required.</p>
397
+ * @public
398
398
  */
399
399
  Accounts: Account[] | undefined;
400
400
  }
@@ -438,58 +438,57 @@ export declare const MemberStatus: {
438
438
  */
439
439
  export type MemberStatus = (typeof MemberStatus)[keyof typeof MemberStatus];
440
440
  /**
441
- * @public
442
441
  * <p>Information on the usage of a data source package in the behavior graph.</p>
442
+ * @public
443
443
  */
444
444
  export interface DatasourcePackageUsageInfo {
445
445
  /**
446
- * @public
447
446
  * <p>Total volume of data in bytes per day ingested for a given data source package.</p>
447
+ * @public
448
448
  */
449
449
  VolumeUsageInBytes?: number;
450
450
  /**
451
- * @public
452
451
  * <p>The data and time when the member account data volume was last updated. The value is an
453
452
  * ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
453
+ * @public
454
454
  */
455
455
  VolumeUsageUpdateTime?: Date;
456
456
  }
457
457
  /**
458
- * @public
459
458
  * <p>Details about a member account in a behavior graph.</p>
459
+ * @public
460
460
  */
461
461
  export interface MemberDetail {
462
462
  /**
463
- * @public
464
463
  * <p>The Amazon Web Services account identifier for the member account.</p>
464
+ * @public
465
465
  */
466
466
  AccountId?: string;
467
467
  /**
468
- * @public
469
468
  * <p>The Amazon Web Services account root user email address for the member account.</p>
469
+ * @public
470
470
  */
471
471
  EmailAddress?: string;
472
472
  /**
473
- * @public
474
473
  * <p>The ARN of the behavior graph.</p>
474
+ * @public
475
475
  */
476
476
  GraphArn?: string;
477
477
  /**
478
- * @public
479
478
  * @deprecated
480
479
  *
481
480
  * <p>The Amazon Web Services account identifier of the administrator account for the behavior
482
481
  * graph.</p>
482
+ * @public
483
483
  */
484
484
  MasterId?: string;
485
485
  /**
486
- * @public
487
486
  * <p>The Amazon Web Services account identifier of the administrator account for the behavior
488
487
  * graph.</p>
488
+ * @public
489
489
  */
490
490
  AdministratorId?: string;
491
491
  /**
492
- * @public
493
492
  * <p>The current membership status of the member account. The status can have one of the
494
493
  * following values:</p>
495
494
  * <ul>
@@ -532,10 +531,10 @@ export interface MemberDetail {
532
531
  * <p>Invited accounts that declined an invitation or that were removed from the behavior
533
532
  * graph are not included. In the organization behavior graph, organization accounts that the
534
533
  * Detective administrator account did not enable are not included.</p>
534
+ * @public
535
535
  */
536
536
  Status?: MemberStatus;
537
537
  /**
538
- * @public
539
538
  * <p>For member accounts with a status of <code>ACCEPTED_BUT_DISABLED</code>, the reason that
540
539
  * the member account is not enabled.</p>
541
540
  * <p>The reason can have one of the following values:</p>
@@ -552,38 +551,38 @@ export interface MemberDetail {
552
551
  * account is not enrolled in Amazon GuardDuty. </p>
553
552
  * </li>
554
553
  * </ul>
554
+ * @public
555
555
  */
556
556
  DisabledReason?: MemberDisabledReason;
557
557
  /**
558
- * @public
559
558
  * <p>For invited accounts, the date and time that Detective sent the invitation to
560
559
  * the account. The value is an ISO8601 formatted string. For example,
561
560
  * <code>2021-08-18T16:35:56.284Z</code>.</p>
561
+ * @public
562
562
  */
563
563
  InvitedTime?: Date;
564
564
  /**
565
- * @public
566
565
  * <p>The date and time that the member account was last updated. The value is an ISO8601
567
566
  * formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
567
+ * @public
568
568
  */
569
569
  UpdatedTime?: Date;
570
570
  /**
571
- * @public
572
571
  * @deprecated
573
572
  *
574
573
  * <p>The data volume in bytes per day for the member account.</p>
574
+ * @public
575
575
  */
576
576
  VolumeUsageInBytes?: number;
577
577
  /**
578
- * @public
579
578
  * @deprecated
580
579
  *
581
580
  * <p>The data and time when the member account data volume was last updated. The value is an
582
581
  * ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
582
+ * @public
583
583
  */
584
584
  VolumeUsageUpdatedTime?: Date;
585
585
  /**
586
- * @public
587
586
  * @deprecated
588
587
  *
589
588
  * <p>The member account data volume as a percentage of the maximum allowed data volume. 0
@@ -593,33 +592,34 @@ export interface MemberDetail {
593
592
  * volume is 160 GB per day. If the data volume for the member account is 40 GB per day, then
594
593
  * <code>PercentOfGraphUtilization</code> is 25. It represents 25% of the maximum allowed
595
594
  * data volume. </p>
595
+ * @public
596
596
  */
597
597
  PercentOfGraphUtilization?: number;
598
598
  /**
599
- * @public
600
599
  * @deprecated
601
600
  *
602
601
  * <p>The date and time when the graph utilization percentage was last updated. The value is
603
602
  * an ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
603
+ * @public
604
604
  */
605
605
  PercentOfGraphUtilizationUpdatedTime?: Date;
606
606
  /**
607
- * @public
608
607
  * <p>The type of behavior graph membership.</p>
609
608
  * <p>For an organization account in the organization behavior graph, the type is
610
609
  * <code>ORGANIZATION</code>.</p>
611
610
  * <p>For an account that was invited to a behavior graph, the type is
612
611
  * <code>INVITATION</code>. </p>
612
+ * @public
613
613
  */
614
614
  InvitationType?: InvitationType;
615
615
  /**
616
- * @public
617
616
  * <p>Details on the volume of usage for each data source package in a behavior graph.</p>
617
+ * @public
618
618
  */
619
619
  VolumeUsageByDatasourcePackage?: Partial<Record<DatasourcePackage, DatasourcePackageUsageInfo>>;
620
620
  /**
621
- * @public
622
621
  * <p>The state of a data source package for the behavior graph.</p>
622
+ * @public
623
623
  */
624
624
  DatasourcePackageIngestStates?: Partial<Record<DatasourcePackage, DatasourcePackageIngestState>>;
625
625
  }
@@ -628,18 +628,18 @@ export interface MemberDetail {
628
628
  */
629
629
  export interface CreateMembersResponse {
630
630
  /**
631
- * @public
632
631
  * <p>The set of member account invitation or enablement requests that Detective was
633
632
  * able to process. This includes accounts that are being verified, that failed verification,
634
633
  * and that passed verification and are being sent an invitation or are being enabled.</p>
634
+ * @public
635
635
  */
636
636
  Members?: MemberDetail[];
637
637
  /**
638
- * @public
639
638
  * <p>The list of accounts for which Detective was unable to process the invitation
640
639
  * or enablement request. For each account, the list provides the reason why the request could
641
640
  * not be processed. The list includes accounts that are already member accounts in the
642
641
  * behavior graph.</p>
642
+ * @public
643
643
  */
644
644
  UnprocessedAccounts?: UnprocessedAccount[];
645
645
  }
@@ -648,8 +648,8 @@ export interface CreateMembersResponse {
648
648
  */
649
649
  export interface DeleteGraphRequest {
650
650
  /**
651
- * @public
652
651
  * <p>The ARN of the behavior graph to disable.</p>
652
+ * @public
653
653
  */
654
654
  GraphArn: string | undefined;
655
655
  }
@@ -658,14 +658,14 @@ export interface DeleteGraphRequest {
658
658
  */
659
659
  export interface DeleteMembersRequest {
660
660
  /**
661
- * @public
662
661
  * <p>The ARN of the behavior graph to remove members from.</p>
662
+ * @public
663
663
  */
664
664
  GraphArn: string | undefined;
665
665
  /**
666
- * @public
667
666
  * <p>The list of Amazon Web Services account identifiers for the member accounts to remove
668
667
  * from the behavior graph. You can remove up to 50 member accounts at a time.</p>
668
+ * @public
669
669
  */
670
670
  AccountIds: string[] | undefined;
671
671
  }
@@ -674,15 +674,15 @@ export interface DeleteMembersRequest {
674
674
  */
675
675
  export interface DeleteMembersResponse {
676
676
  /**
677
- * @public
678
677
  * <p>The list of Amazon Web Services account identifiers for the member accounts that Detective successfully removed from the behavior graph.</p>
678
+ * @public
679
679
  */
680
680
  AccountIds?: string[];
681
681
  /**
682
- * @public
683
682
  * <p>The list of member accounts that Detective was not able to remove from the
684
683
  * behavior graph. For each member account, provides the reason that the deletion could not be
685
684
  * processed.</p>
685
+ * @public
686
686
  */
687
687
  UnprocessedAccounts?: UnprocessedAccount[];
688
688
  }
@@ -691,8 +691,8 @@ export interface DeleteMembersResponse {
691
691
  */
692
692
  export interface DescribeOrganizationConfigurationRequest {
693
693
  /**
694
- * @public
695
694
  * <p>The ARN of the organization behavior graph.</p>
695
+ * @public
696
696
  */
697
697
  GraphArn: string | undefined;
698
698
  }
@@ -701,16 +701,16 @@ export interface DescribeOrganizationConfigurationRequest {
701
701
  */
702
702
  export interface DescribeOrganizationConfigurationResponse {
703
703
  /**
704
- * @public
705
704
  * <p>Indicates whether to automatically enable new organization accounts as member accounts
706
705
  * in the organization behavior graph.</p>
706
+ * @public
707
707
  */
708
708
  AutoEnable?: boolean;
709
709
  }
710
710
  /**
711
- * @public
712
711
  * <p>The request cannot be completed because too many other requests are occurring at the
713
712
  * same time.</p>
713
+ * @public
714
714
  */
715
715
  export declare class TooManyRequestsException extends __BaseException {
716
716
  readonly name: "TooManyRequestsException";
@@ -726,10 +726,10 @@ export declare class TooManyRequestsException extends __BaseException {
726
726
  */
727
727
  export interface DisassociateMembershipRequest {
728
728
  /**
729
- * @public
730
729
  * <p>The ARN of the behavior graph to remove the member account from.</p>
731
730
  * <p>The member account's member status in the behavior graph must be
732
731
  * <code>ENABLED</code>.</p>
732
+ * @public
733
733
  */
734
734
  GraphArn: string | undefined;
735
735
  }
@@ -738,8 +738,8 @@ export interface DisassociateMembershipRequest {
738
738
  */
739
739
  export interface EnableOrganizationAdminAccountRequest {
740
740
  /**
741
- * @public
742
741
  * <p>The Amazon Web Services account identifier of the account to designate as the Detective administrator account for the organization.</p>
742
+ * @public
743
743
  */
744
744
  AccountId: string | undefined;
745
745
  }
@@ -748,13 +748,13 @@ export interface EnableOrganizationAdminAccountRequest {
748
748
  */
749
749
  export interface GetInvestigationRequest {
750
750
  /**
751
- * @public
752
751
  * <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
752
+ * @public
753
753
  */
754
754
  GraphArn: string | undefined;
755
755
  /**
756
- * @public
757
756
  * <p>The investigation ID of the investigation report.</p>
757
+ * @public
758
758
  */
759
759
  InvestigationId: string | undefined;
760
760
  }
@@ -815,57 +815,57 @@ export type Status = (typeof Status)[keyof typeof Status];
815
815
  */
816
816
  export interface GetInvestigationResponse {
817
817
  /**
818
- * @public
819
818
  * <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
819
+ * @public
820
820
  */
821
821
  GraphArn?: string;
822
822
  /**
823
- * @public
824
823
  * <p>The investigation ID of the investigation report.</p>
824
+ * @public
825
825
  */
826
826
  InvestigationId?: string;
827
827
  /**
828
- * @public
829
828
  * <p>The unique Amazon Resource Name (ARN). Detective supports IAM user ARNs and IAM role ARNs.</p>
829
+ * @public
830
830
  */
831
831
  EntityArn?: string;
832
832
  /**
833
- * @public
834
833
  * <p>Type of entity. For example, Amazon Web Services accounts, such as an IAM user and/or IAM role.</p>
834
+ * @public
835
835
  */
836
836
  EntityType?: EntityType;
837
837
  /**
838
- * @public
839
838
  * <p>The creation time of the investigation report in UTC time stamp format.</p>
839
+ * @public
840
840
  */
841
841
  CreatedTime?: Date;
842
842
  /**
843
- * @public
844
843
  * <p>The start date and time used to set the scope time within which you want to generate the investigation report. The value is an UTC ISO8601 formatted
845
844
  * string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
845
+ * @public
846
846
  */
847
847
  ScopeStartTime?: Date;
848
848
  /**
849
- * @public
850
849
  * <p>The data and time when the investigation began. The value is an UTC ISO8601 formatted
851
850
  * string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
851
+ * @public
852
852
  */
853
853
  ScopeEndTime?: Date;
854
854
  /**
855
- * @public
856
855
  * <p>The status based on the completion status of the investigation.</p>
856
+ * @public
857
857
  */
858
858
  Status?: Status;
859
859
  /**
860
- * @public
861
860
  * <p>The severity assigned is based on the likelihood and impact of the indicators of
862
861
  * compromise discovered in the investigation.</p>
862
+ * @public
863
863
  */
864
864
  Severity?: Severity;
865
865
  /**
866
- * @public
867
866
  * <p>The current state of the investigation. An archived investigation indicates that you
868
867
  * have completed reviewing the investigation.</p>
868
+ * @public
869
869
  */
870
870
  State?: State;
871
871
  }
@@ -874,17 +874,17 @@ export interface GetInvestigationResponse {
874
874
  */
875
875
  export interface GetMembersRequest {
876
876
  /**
877
- * @public
878
877
  * <p>The ARN of the behavior graph for which to request the member details.</p>
878
+ * @public
879
879
  */
880
880
  GraphArn: string | undefined;
881
881
  /**
882
- * @public
883
882
  * <p>The list of Amazon Web Services account identifiers for the member account for which to
884
883
  * return member details. You can request details for up to 50 member accounts at a
885
884
  * time.</p>
886
885
  * <p>You cannot use <code>GetMembers</code> to retrieve information about member accounts
887
886
  * that were removed from the behavior graph.</p>
887
+ * @public
888
888
  */
889
889
  AccountIds: string[] | undefined;
890
890
  }
@@ -893,16 +893,16 @@ export interface GetMembersRequest {
893
893
  */
894
894
  export interface GetMembersResponse {
895
895
  /**
896
- * @public
897
896
  * <p>The member account details that Detective is returning in response to the
898
897
  * request.</p>
898
+ * @public
899
899
  */
900
900
  MemberDetails?: MemberDetail[];
901
901
  /**
902
- * @public
903
902
  * <p>The requested member accounts for which Detective was unable to return member
904
903
  * details.</p>
905
904
  * <p>For each account, provides the reason why the request could not be processed.</p>
905
+ * @public
906
906
  */
907
907
  UnprocessedAccounts?: UnprocessedAccount[];
908
908
  }
@@ -911,36 +911,36 @@ export interface GetMembersResponse {
911
911
  */
912
912
  export interface ListDatasourcePackagesRequest {
913
913
  /**
914
- * @public
915
914
  * <p>The ARN of the behavior graph.</p>
915
+ * @public
916
916
  */
917
917
  GraphArn: string | undefined;
918
918
  /**
919
- * @public
920
919
  * <p>For requests to get the next page of results, the pagination token that was returned
921
920
  * with the previous set of results. The initial request does not include a pagination
922
921
  * token.</p>
922
+ * @public
923
923
  */
924
924
  NextToken?: string;
925
925
  /**
926
- * @public
927
926
  * <p>The maximum number of results to return.</p>
927
+ * @public
928
928
  */
929
929
  MaxResults?: number;
930
930
  }
931
931
  /**
932
- * @public
933
932
  * <p>Details about the data source packages ingested by your behavior graph.</p>
933
+ * @public
934
934
  */
935
935
  export interface DatasourcePackageIngestDetail {
936
936
  /**
937
- * @public
938
937
  * <p>Details on which data source packages are ingested for a member account.</p>
938
+ * @public
939
939
  */
940
940
  DatasourcePackageIngestState?: DatasourcePackageIngestState;
941
941
  /**
942
- * @public
943
942
  * <p>The date a data source package was enabled for this account</p>
943
+ * @public
944
944
  */
945
945
  LastIngestStateChange?: Partial<Record<DatasourcePackageIngestState, TimestampForCollection>>;
946
946
  }
@@ -949,15 +949,15 @@ export interface DatasourcePackageIngestDetail {
949
949
  */
950
950
  export interface ListDatasourcePackagesResponse {
951
951
  /**
952
- * @public
953
952
  * <p>Details on the data source packages active in the behavior graph.</p>
953
+ * @public
954
954
  */
955
955
  DatasourcePackages?: Partial<Record<DatasourcePackage, DatasourcePackageIngestDetail>>;
956
956
  /**
957
- * @public
958
957
  * <p>For requests to get the next page of results, the pagination token that was returned
959
958
  * with the previous set of results. The initial request does not include a pagination
960
959
  * token.</p>
960
+ * @public
961
961
  */
962
962
  NextToken?: string;
963
963
  }
@@ -966,33 +966,33 @@ export interface ListDatasourcePackagesResponse {
966
966
  */
967
967
  export interface ListGraphsRequest {
968
968
  /**
969
- * @public
970
969
  * <p>For requests to get the next page of results, the pagination token that was returned
971
970
  * with the previous set of results. The initial request does not include a pagination
972
971
  * token.</p>
972
+ * @public
973
973
  */
974
974
  NextToken?: string;
975
975
  /**
976
- * @public
977
976
  * <p>The maximum number of graphs to return at a time. The total must be less than the
978
977
  * overall limit on the number of results to return, which is currently 200.</p>
978
+ * @public
979
979
  */
980
980
  MaxResults?: number;
981
981
  }
982
982
  /**
983
- * @public
984
983
  * <p>A behavior graph in Detective.</p>
984
+ * @public
985
985
  */
986
986
  export interface Graph {
987
987
  /**
988
- * @public
989
988
  * <p>The ARN of the behavior graph.</p>
989
+ * @public
990
990
  */
991
991
  Arn?: string;
992
992
  /**
993
- * @public
994
993
  * <p>The date and time that the behavior graph was created. The value is an ISO8601 formatted
995
994
  * string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
995
+ * @public
996
996
  */
997
997
  CreatedTime?: Date;
998
998
  }
@@ -1001,14 +1001,14 @@ export interface Graph {
1001
1001
  */
1002
1002
  export interface ListGraphsResponse {
1003
1003
  /**
1004
- * @public
1005
1004
  * <p>A list of behavior graphs that the account is an administrator account for.</p>
1005
+ * @public
1006
1006
  */
1007
1007
  GraphList?: Graph[];
1008
1008
  /**
1009
- * @public
1010
1009
  * <p>If there are more behavior graphs remaining in the results, then this is the pagination
1011
1010
  * token to use to request the next page of behavior graphs.</p>
1011
+ * @public
1012
1012
  */
1013
1013
  NextToken?: string;
1014
1014
  }
@@ -1035,29 +1035,29 @@ export type IndicatorType = (typeof IndicatorType)[keyof typeof IndicatorType];
1035
1035
  */
1036
1036
  export interface ListIndicatorsRequest {
1037
1037
  /**
1038
- * @public
1039
1038
  * <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
1039
+ * @public
1040
1040
  */
1041
1041
  GraphArn: string | undefined;
1042
1042
  /**
1043
- * @public
1044
1043
  * <p>The investigation ID of the investigation report.</p>
1044
+ * @public
1045
1045
  */
1046
1046
  InvestigationId: string | undefined;
1047
1047
  /**
1048
- * @public
1049
1048
  * <p>For the list of indicators of compromise that are generated by Detective investigations, see <a href="https://docs.aws.amazon.com/detective/latest/userguide/detective-investigations.html">Detective investigations</a>.</p>
1049
+ * @public
1050
1050
  */
1051
1051
  IndicatorType?: IndicatorType;
1052
1052
  /**
1053
- * @public
1054
1053
  * <p>Lists if there are more results available. The value of nextToken is a unique pagination token for each page. Repeat the call using the returned token to retrieve the next page. Keep all other arguments unchanged.</p>
1055
1054
  * <p>Each pagination token expires after 24 hours. Using an expired pagination token will return a Validation Exception error.</p>
1055
+ * @public
1056
1056
  */
1057
1057
  NextToken?: string;
1058
1058
  /**
1059
- * @public
1060
1059
  * <p>Lists the maximum number of indicators in a page.</p>
1060
+ * @public
1061
1061
  */
1062
1062
  MaxResults?: number;
1063
1063
  }
@@ -1073,242 +1073,242 @@ export declare const Reason: {
1073
1073
  */
1074
1074
  export type Reason = (typeof Reason)[keyof typeof Reason];
1075
1075
  /**
1076
- * @public
1077
1076
  * <p>Contains information on suspicious IP addresses identified as indicators of compromise. This indicator is derived from Amazon Web Services threat intelligence.</p>
1077
+ * @public
1078
1078
  */
1079
1079
  export interface FlaggedIpAddressDetail {
1080
1080
  /**
1081
- * @public
1082
1081
  * <p>IP address of the suspicious entity.</p>
1082
+ * @public
1083
1083
  */
1084
1084
  IpAddress?: string;
1085
1085
  /**
1086
- * @public
1087
1086
  * <p>Details the reason the IP address was flagged as suspicious.</p>
1087
+ * @public
1088
1088
  */
1089
1089
  Reason?: Reason;
1090
1090
  }
1091
1091
  /**
1092
- * @public
1093
1092
  * <p>Contains information on unusual and impossible travel in an account.</p>
1093
+ * @public
1094
1094
  */
1095
1095
  export interface ImpossibleTravelDetail {
1096
1096
  /**
1097
- * @public
1098
1097
  * <p>IP address where the resource was first used in the impossible travel.</p>
1098
+ * @public
1099
1099
  */
1100
1100
  StartingIpAddress?: string;
1101
1101
  /**
1102
- * @public
1103
1102
  * <p>IP address where the resource was last used in the impossible travel.</p>
1103
+ * @public
1104
1104
  */
1105
1105
  EndingIpAddress?: string;
1106
1106
  /**
1107
- * @public
1108
1107
  * <p>Location where the resource was first used in the impossible travel.</p>
1108
+ * @public
1109
1109
  */
1110
1110
  StartingLocation?: string;
1111
1111
  /**
1112
- * @public
1113
1112
  * <p>Location where the resource was last used in the impossible travel.</p>
1113
+ * @public
1114
1114
  */
1115
1115
  EndingLocation?: string;
1116
1116
  /**
1117
- * @public
1118
1117
  * <p>Returns the time difference between the first and last timestamp the resource was used.</p>
1118
+ * @public
1119
1119
  */
1120
1120
  HourlyTimeDelta?: number;
1121
1121
  }
1122
1122
  /**
1123
- * @public
1124
1123
  * <p>Details new Autonomous System Organizations (ASOs) used either at the resource or account level. </p>
1124
+ * @public
1125
1125
  */
1126
1126
  export interface NewAsoDetail {
1127
1127
  /**
1128
- * @public
1129
1128
  * <p>Details about the new Autonomous System Organization (ASO).</p>
1129
+ * @public
1130
1130
  */
1131
1131
  Aso?: string;
1132
1132
  /**
1133
- * @public
1134
1133
  * <p>Checks if the Autonomous System Organization (ASO) is new for the entire account.</p>
1134
+ * @public
1135
1135
  */
1136
1136
  IsNewForEntireAccount?: boolean;
1137
1137
  }
1138
1138
  /**
1139
- * @public
1140
1139
  * <p>Details new geolocations used either at the resource or account level. For example, lists an observed geolocation that is an infrequent or unused location based on previous user activity.</p>
1140
+ * @public
1141
1141
  */
1142
1142
  export interface NewGeolocationDetail {
1143
1143
  /**
1144
- * @public
1145
1144
  * <p>Location where the resource was accessed.</p>
1145
+ * @public
1146
1146
  */
1147
1147
  Location?: string;
1148
1148
  /**
1149
- * @public
1150
1149
  * <p>IP address using which the resource was accessed.</p>
1150
+ * @public
1151
1151
  */
1152
1152
  IpAddress?: string;
1153
1153
  /**
1154
- * @public
1155
1154
  * <p>Checks if the geolocation is new for the entire account.</p>
1155
+ * @public
1156
1156
  */
1157
1157
  IsNewForEntireAccount?: boolean;
1158
1158
  }
1159
1159
  /**
1160
- * @public
1161
1160
  * <p>Details new user agents used either at the resource or account level.</p>
1161
+ * @public
1162
1162
  */
1163
1163
  export interface NewUserAgentDetail {
1164
1164
  /**
1165
- * @public
1166
1165
  * <p>New user agent which accessed the resource.</p>
1166
+ * @public
1167
1167
  */
1168
1168
  UserAgent?: string;
1169
1169
  /**
1170
- * @public
1171
1170
  * <p>Checks if the user agent is new for the entire account.</p>
1171
+ * @public
1172
1172
  */
1173
1173
  IsNewForEntireAccount?: boolean;
1174
1174
  }
1175
1175
  /**
1176
- * @public
1177
1176
  * <p>Details related activities associated with a potential security event. Lists all distinct categories of evidence that are connected to the resource or the finding group.</p>
1177
+ * @public
1178
1178
  */
1179
1179
  export interface RelatedFindingDetail {
1180
1180
  /**
1181
- * @public
1182
1181
  * <p>The Amazon Resource Name (ARN) of the related finding.</p>
1182
+ * @public
1183
1183
  */
1184
1184
  Arn?: string;
1185
1185
  /**
1186
- * @public
1187
1186
  * <p>The type of finding.</p>
1187
+ * @public
1188
1188
  */
1189
1189
  Type?: string;
1190
1190
  /**
1191
- * @public
1192
1191
  * <p>The IP address of the finding.</p>
1192
+ * @public
1193
1193
  */
1194
1194
  IpAddress?: string;
1195
1195
  }
1196
1196
  /**
1197
- * @public
1198
1197
  * <p>Details multiple activities as they related to a potential security event. Detective uses graph analysis technique that infers relationships between findings and entities, and groups them together as a finding group.</p>
1198
+ * @public
1199
1199
  */
1200
1200
  export interface RelatedFindingGroupDetail {
1201
1201
  /**
1202
- * @public
1203
1202
  * <p>The unique identifier for the finding group.</p>
1203
+ * @public
1204
1204
  */
1205
1205
  Id?: string;
1206
1206
  }
1207
1207
  /**
1208
- * @public
1209
1208
  * <p>Details tactics, techniques, and procedures (TTPs) used in a potential security event. Tactics are based on <a href="https://attack.mitre.org/matrices/enterprise/">MITRE ATT&CK Matrix for
1210
1209
  * Enterprise</a>. </p>
1210
+ * @public
1211
1211
  */
1212
1212
  export interface TTPsObservedDetail {
1213
1213
  /**
1214
- * @public
1215
1214
  * <p>The tactic used, identified by the investigation.</p>
1215
+ * @public
1216
1216
  */
1217
1217
  Tactic?: string;
1218
1218
  /**
1219
- * @public
1220
1219
  * <p>The technique used, identified by the investigation. </p>
1220
+ * @public
1221
1221
  */
1222
1222
  Technique?: string;
1223
1223
  /**
1224
- * @public
1225
1224
  * <p>The procedure used, identified by the investigation.</p>
1225
+ * @public
1226
1226
  */
1227
1227
  Procedure?: string;
1228
1228
  /**
1229
- * @public
1230
1229
  * <p>The IP address where the tactics, techniques, and procedure (TTP) was observed.</p>
1230
+ * @public
1231
1231
  */
1232
1232
  IpAddress?: string;
1233
1233
  /**
1234
- * @public
1235
1234
  * <p>The name of the API where the tactics, techniques, and procedure (TTP) was observed.</p>
1235
+ * @public
1236
1236
  */
1237
1237
  APIName?: string;
1238
1238
  /**
1239
- * @public
1240
1239
  * <p>The total number of successful API requests.</p>
1240
+ * @public
1241
1241
  */
1242
1242
  APISuccessCount?: number;
1243
1243
  /**
1244
- * @public
1245
1244
  * <p>The total number of failed API requests.</p>
1245
+ * @public
1246
1246
  */
1247
1247
  APIFailureCount?: number;
1248
1248
  }
1249
1249
  /**
1250
- * @public
1251
1250
  * <p>Details about the indicators of compromise which are used to determine if a resource is involved in a security incident. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident. For the list of indicators of compromise that are generated by Detective investigations, see <a href="https://docs.aws.amazon.com/detective/latest/userguide/detective-investigations.html">Detective investigations</a>.</p>
1251
+ * @public
1252
1252
  */
1253
1253
  export interface IndicatorDetail {
1254
1254
  /**
1255
- * @public
1256
1255
  * <p>Details about the indicator of compromise.</p>
1256
+ * @public
1257
1257
  */
1258
1258
  TTPsObservedDetail?: TTPsObservedDetail;
1259
1259
  /**
1260
- * @public
1261
1260
  * <p>Identifies unusual and impossible user activity for an account. </p>
1261
+ * @public
1262
1262
  */
1263
1263
  ImpossibleTravelDetail?: ImpossibleTravelDetail;
1264
1264
  /**
1265
- * @public
1266
1265
  * <p>Suspicious IP addresses that are flagged, which indicates critical or severe threats based on threat intelligence by Detective. This indicator is derived from Amazon Web Services threat intelligence.</p>
1266
+ * @public
1267
1267
  */
1268
1268
  FlaggedIpAddressDetail?: FlaggedIpAddressDetail;
1269
1269
  /**
1270
- * @public
1271
1270
  * <p>Contains details about the new geographic location.</p>
1271
+ * @public
1272
1272
  */
1273
1273
  NewGeolocationDetail?: NewGeolocationDetail;
1274
1274
  /**
1275
- * @public
1276
1275
  * <p>Contains details about the new Autonomous System Organization (ASO).</p>
1276
+ * @public
1277
1277
  */
1278
1278
  NewAsoDetail?: NewAsoDetail;
1279
1279
  /**
1280
- * @public
1281
1280
  * <p>Contains details about the new user agent.</p>
1281
+ * @public
1282
1282
  */
1283
1283
  NewUserAgentDetail?: NewUserAgentDetail;
1284
1284
  /**
1285
- * @public
1286
1285
  * <p>Contains details about related findings.</p>
1286
+ * @public
1287
1287
  */
1288
1288
  RelatedFindingDetail?: RelatedFindingDetail;
1289
1289
  /**
1290
- * @public
1291
1290
  * <p>Contains details about related finding groups.</p>
1291
+ * @public
1292
1292
  */
1293
1293
  RelatedFindingGroupDetail?: RelatedFindingGroupDetail;
1294
1294
  }
1295
1295
  /**
1296
- * @public
1297
1296
  * <p>Detective investigations triages indicators of compromises such as a finding
1298
1297
  * and surfaces only the most critical and suspicious issues, so you can focus on high-level
1299
1298
  * investigations. An <code>Indicator</code> lets you determine if an Amazon Web Services
1300
1299
  * resource is involved in unusual activity that could indicate malicious behavior and its
1301
1300
  * impact.</p>
1301
+ * @public
1302
1302
  */
1303
1303
  export interface Indicator {
1304
1304
  /**
1305
- * @public
1306
1305
  * <p>The type of indicator. </p>
1306
+ * @public
1307
1307
  */
1308
1308
  IndicatorType?: IndicatorType;
1309
1309
  /**
1310
- * @public
1311
1310
  * <p>Details about the indicators of compromise that are used to determine if a resource is involved in a security incident. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident.</p>
1311
+ * @public
1312
1312
  */
1313
1313
  IndicatorDetail?: IndicatorDetail;
1314
1314
  }
@@ -1317,82 +1317,82 @@ export interface Indicator {
1317
1317
  */
1318
1318
  export interface ListIndicatorsResponse {
1319
1319
  /**
1320
- * @public
1321
1320
  * <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
1321
+ * @public
1322
1322
  */
1323
1323
  GraphArn?: string;
1324
1324
  /**
1325
- * @public
1326
1325
  * <p>The investigation ID of the investigation report.</p>
1326
+ * @public
1327
1327
  */
1328
1328
  InvestigationId?: string;
1329
1329
  /**
1330
- * @public
1331
1330
  * <p>Lists if there are more results available. The value of nextToken is a unique pagination token for each page. Repeat the call using the returned token to retrieve the next page. Keep all other arguments unchanged.</p>
1332
1331
  * <p>Each pagination token expires after 24 hours. Using an expired pagination token will return a Validation Exception error.</p>
1332
+ * @public
1333
1333
  */
1334
1334
  NextToken?: string;
1335
1335
  /**
1336
- * @public
1337
1336
  * <p>Lists the indicators of compromise.</p>
1337
+ * @public
1338
1338
  */
1339
1339
  Indicators?: Indicator[];
1340
1340
  }
1341
1341
  /**
1342
- * @public
1343
1342
  * <p>Contains details on the time range used to filter data.</p>
1343
+ * @public
1344
1344
  */
1345
1345
  export interface DateFilter {
1346
1346
  /**
1347
- * @public
1348
1347
  * <p>A timestamp representing the start of the time period from when data is filtered, including the start date.</p>
1348
+ * @public
1349
1349
  */
1350
1350
  StartInclusive: Date | undefined;
1351
1351
  /**
1352
- * @public
1353
1352
  * <p>A timestamp representing the end date of the time period until when data is filtered, including the end date.</p>
1353
+ * @public
1354
1354
  */
1355
1355
  EndInclusive: Date | undefined;
1356
1356
  }
1357
1357
  /**
1358
- * @public
1359
1358
  * <p>A string for filtering Detective investigations.</p>
1359
+ * @public
1360
1360
  */
1361
1361
  export interface StringFilter {
1362
1362
  /**
1363
- * @public
1364
1363
  * <p>The string filter value.</p>
1364
+ * @public
1365
1365
  */
1366
1366
  Value: string | undefined;
1367
1367
  }
1368
1368
  /**
1369
- * @public
1370
1369
  * <p>Details on the criteria used to define the filter for investigation results.</p>
1370
+ * @public
1371
1371
  */
1372
1372
  export interface FilterCriteria {
1373
1373
  /**
1374
- * @public
1375
1374
  * <p>Filter the investigation results based on the severity.</p>
1375
+ * @public
1376
1376
  */
1377
1377
  Severity?: StringFilter;
1378
1378
  /**
1379
- * @public
1380
1379
  * <p>Filter the investigation results based on the status.</p>
1380
+ * @public
1381
1381
  */
1382
1382
  Status?: StringFilter;
1383
1383
  /**
1384
- * @public
1385
1384
  * <p>Filter the investigation results based on the state.</p>
1385
+ * @public
1386
1386
  */
1387
1387
  State?: StringFilter;
1388
1388
  /**
1389
- * @public
1390
1389
  * <p>Filter the investigation results based on the Amazon Resource Name (ARN) of the entity.</p>
1390
+ * @public
1391
1391
  */
1392
1392
  EntityArn?: StringFilter;
1393
1393
  /**
1394
- * @public
1395
1394
  * <p>Filter the investigation results based on when the investigation was created.</p>
1395
+ * @public
1396
1396
  */
1397
1397
  CreatedTime?: DateFilter;
1398
1398
  }
@@ -1422,18 +1422,18 @@ export declare const SortOrder: {
1422
1422
  */
1423
1423
  export type SortOrder = (typeof SortOrder)[keyof typeof SortOrder];
1424
1424
  /**
1425
- * @public
1426
1425
  * <p>Details about the criteria used for sorting investigations.</p>
1426
+ * @public
1427
1427
  */
1428
1428
  export interface SortCriteria {
1429
1429
  /**
1430
- * @public
1431
1430
  * <p>Represents the <code>Field</code> attribute to sort investigations.</p>
1431
+ * @public
1432
1432
  */
1433
1433
  Field?: Field;
1434
1434
  /**
1435
- * @public
1436
1435
  * <p>The order by which the sorted findings are displayed.</p>
1436
+ * @public
1437
1437
  */
1438
1438
  SortOrder?: SortOrder;
1439
1439
  }
@@ -1442,71 +1442,71 @@ export interface SortCriteria {
1442
1442
  */
1443
1443
  export interface ListInvestigationsRequest {
1444
1444
  /**
1445
- * @public
1446
1445
  * <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
1446
+ * @public
1447
1447
  */
1448
1448
  GraphArn: string | undefined;
1449
1449
  /**
1450
- * @public
1451
1450
  * <p>Lists if there are more results available. The value of nextToken is a unique pagination token for each page. Repeat the call using the returned token to retrieve the next page. Keep all other arguments unchanged.</p>
1452
1451
  * <p>Each pagination token expires after 24 hours. Using an expired pagination token will return a Validation Exception error.</p>
1452
+ * @public
1453
1453
  */
1454
1454
  NextToken?: string;
1455
1455
  /**
1456
- * @public
1457
1456
  * <p>Lists the maximum number of investigations in a page.</p>
1457
+ * @public
1458
1458
  */
1459
1459
  MaxResults?: number;
1460
1460
  /**
1461
- * @public
1462
1461
  * <p>Filters the investigation results based on a criteria.</p>
1462
+ * @public
1463
1463
  */
1464
1464
  FilterCriteria?: FilterCriteria;
1465
1465
  /**
1466
- * @public
1467
1466
  * <p>Sorts the investigation results based on a criteria.</p>
1467
+ * @public
1468
1468
  */
1469
1469
  SortCriteria?: SortCriteria;
1470
1470
  }
1471
1471
  /**
1472
- * @public
1473
1472
  * <p>Details about the investigation related to a potential security event identified by Detective.</p>
1473
+ * @public
1474
1474
  */
1475
1475
  export interface InvestigationDetail {
1476
1476
  /**
1477
- * @public
1478
1477
  * <p>The investigation ID of the investigation report.</p>
1478
+ * @public
1479
1479
  */
1480
1480
  InvestigationId?: string;
1481
1481
  /**
1482
- * @public
1483
1482
  * <p>Severity based on the likelihood and impact of the indicators of compromise discovered in the investigation.</p>
1483
+ * @public
1484
1484
  */
1485
1485
  Severity?: Severity;
1486
1486
  /**
1487
- * @public
1488
1487
  * <p>Status based on the completion status of the investigation.</p>
1488
+ * @public
1489
1489
  */
1490
1490
  Status?: Status;
1491
1491
  /**
1492
- * @public
1493
1492
  * <p>The current state of the investigation. An archived investigation indicates you have completed reviewing the investigation.</p>
1493
+ * @public
1494
1494
  */
1495
1495
  State?: State;
1496
1496
  /**
1497
- * @public
1498
1497
  * <p>The time stamp of the creation time of the investigation report. The value is an UTC ISO8601 formatted
1499
1498
  * string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
1499
+ * @public
1500
1500
  */
1501
1501
  CreatedTime?: Date;
1502
1502
  /**
1503
- * @public
1504
1503
  * <p>The unique Amazon Resource Name (ARN) of the IAM user and IAM role.</p>
1504
+ * @public
1505
1505
  */
1506
1506
  EntityArn?: string;
1507
1507
  /**
1508
- * @public
1509
1508
  * <p>Type of entity. For example, Amazon Web Services accounts, such as IAM user and role.</p>
1509
+ * @public
1510
1510
  */
1511
1511
  EntityType?: EntityType;
1512
1512
  }
@@ -1515,14 +1515,14 @@ export interface InvestigationDetail {
1515
1515
  */
1516
1516
  export interface ListInvestigationsResponse {
1517
1517
  /**
1518
- * @public
1519
1518
  * <p>Lists the summary of uncommon behavior or malicious activity which indicates a compromise.</p>
1519
+ * @public
1520
1520
  */
1521
1521
  InvestigationDetails?: InvestigationDetail[];
1522
1522
  /**
1523
- * @public
1524
1523
  * <p>Lists if there are more results available. The value of nextToken is a unique pagination token for each page. Repeat the call using the returned token to retrieve the next page. Keep all other arguments unchanged.</p>
1525
1524
  * <p>Each pagination token expires after 24 hours. </p>
1525
+ * @public
1526
1526
  */
1527
1527
  NextToken?: string;
1528
1528
  }
@@ -1531,17 +1531,17 @@ export interface ListInvestigationsResponse {
1531
1531
  */
1532
1532
  export interface ListInvitationsRequest {
1533
1533
  /**
1534
- * @public
1535
1534
  * <p>For requests to retrieve the next page of results, the pagination token that was
1536
1535
  * returned with the previous page of results. The initial request does not include a
1537
1536
  * pagination token.</p>
1537
+ * @public
1538
1538
  */
1539
1539
  NextToken?: string;
1540
1540
  /**
1541
- * @public
1542
1541
  * <p>The maximum number of behavior graph invitations to return in the response. The total
1543
1542
  * must be less than the overall limit on the number of results to return, which is currently
1544
1543
  * 200.</p>
1544
+ * @public
1545
1545
  */
1546
1546
  MaxResults?: number;
1547
1547
  }
@@ -1550,15 +1550,15 @@ export interface ListInvitationsRequest {
1550
1550
  */
1551
1551
  export interface ListInvitationsResponse {
1552
1552
  /**
1553
- * @public
1554
1553
  * <p>The list of behavior graphs for which the member account has open or accepted
1555
1554
  * invitations.</p>
1555
+ * @public
1556
1556
  */
1557
1557
  Invitations?: MemberDetail[];
1558
1558
  /**
1559
- * @public
1560
1559
  * <p>If there are more behavior graphs remaining in the results, then this is the pagination
1561
1560
  * token to use to request the next page of behavior graphs.</p>
1561
+ * @public
1562
1562
  */
1563
1563
  NextToken?: string;
1564
1564
  }
@@ -1567,21 +1567,21 @@ export interface ListInvitationsResponse {
1567
1567
  */
1568
1568
  export interface ListMembersRequest {
1569
1569
  /**
1570
- * @public
1571
1570
  * <p>The ARN of the behavior graph for which to retrieve the list of member accounts.</p>
1571
+ * @public
1572
1572
  */
1573
1573
  GraphArn: string | undefined;
1574
1574
  /**
1575
- * @public
1576
1575
  * <p>For requests to retrieve the next page of member account results, the pagination token
1577
1576
  * that was returned with the previous page of results. The initial request does not include a
1578
1577
  * pagination token.</p>
1578
+ * @public
1579
1579
  */
1580
1580
  NextToken?: string;
1581
1581
  /**
1582
- * @public
1583
1582
  * <p>The maximum number of member accounts to include in the response. The total must be less
1584
1583
  * than the overall limit on the number of results to return, which is currently 200.</p>
1584
+ * @public
1585
1585
  */
1586
1586
  MaxResults?: number;
1587
1587
  }
@@ -1590,7 +1590,6 @@ export interface ListMembersRequest {
1590
1590
  */
1591
1591
  export interface ListMembersResponse {
1592
1592
  /**
1593
- * @public
1594
1593
  * <p>The list of member accounts in the behavior graph.</p>
1595
1594
  * <p>For invited accounts, the results include member accounts that did not pass verification
1596
1595
  * and member accounts that have not yet accepted the invitation to the behavior graph. The
@@ -1598,12 +1597,13 @@ export interface ListMembersResponse {
1598
1597
  * <p>For the organization behavior graph, the results do not include organization accounts
1599
1598
  * that the Detective administrator account has not enabled as member
1600
1599
  * accounts.</p>
1600
+ * @public
1601
1601
  */
1602
1602
  MemberDetails?: MemberDetail[];
1603
1603
  /**
1604
- * @public
1605
1604
  * <p>If there are more member accounts remaining in the results, then use this pagination
1606
1605
  * token to request the next page of member accounts.</p>
1606
+ * @public
1607
1607
  */
1608
1608
  NextToken?: string;
1609
1609
  }
@@ -1612,15 +1612,15 @@ export interface ListMembersResponse {
1612
1612
  */
1613
1613
  export interface ListOrganizationAdminAccountsRequest {
1614
1614
  /**
1615
- * @public
1616
1615
  * <p>For requests to get the next page of results, the pagination token that was returned
1617
1616
  * with the previous set of results. The initial request does not include a pagination
1618
1617
  * token.</p>
1618
+ * @public
1619
1619
  */
1620
1620
  NextToken?: string;
1621
1621
  /**
1622
- * @public
1623
1622
  * <p>The maximum number of results to return.</p>
1623
+ * @public
1624
1624
  */
1625
1625
  MaxResults?: number;
1626
1626
  }
@@ -1629,14 +1629,14 @@ export interface ListOrganizationAdminAccountsRequest {
1629
1629
  */
1630
1630
  export interface ListOrganizationAdminAccountsResponse {
1631
1631
  /**
1632
- * @public
1633
1632
  * <p>The list of Detective administrator accounts.</p>
1633
+ * @public
1634
1634
  */
1635
1635
  Administrators?: Administrator[];
1636
1636
  /**
1637
- * @public
1638
1637
  * <p>If there are more accounts remaining in the results, then this is the pagination token
1639
1638
  * to use to request the next page of accounts.</p>
1639
+ * @public
1640
1640
  */
1641
1641
  NextToken?: string;
1642
1642
  }
@@ -1645,8 +1645,8 @@ export interface ListOrganizationAdminAccountsResponse {
1645
1645
  */
1646
1646
  export interface ListTagsForResourceRequest {
1647
1647
  /**
1648
- * @public
1649
1648
  * <p>The ARN of the behavior graph for which to retrieve the tag values.</p>
1649
+ * @public
1650
1650
  */
1651
1651
  ResourceArn: string | undefined;
1652
1652
  }
@@ -1655,9 +1655,9 @@ export interface ListTagsForResourceRequest {
1655
1655
  */
1656
1656
  export interface ListTagsForResourceResponse {
1657
1657
  /**
1658
- * @public
1659
1658
  * <p>The tag values that are assigned to the behavior graph. The request returns up to 50 tag
1660
1659
  * values.</p>
1660
+ * @public
1661
1661
  */
1662
1662
  Tags?: Record<string, string>;
1663
1663
  }
@@ -1666,10 +1666,10 @@ export interface ListTagsForResourceResponse {
1666
1666
  */
1667
1667
  export interface RejectInvitationRequest {
1668
1668
  /**
1669
- * @public
1670
1669
  * <p>The ARN of the behavior graph to reject the invitation to.</p>
1671
1670
  * <p>The member account's current member status in the behavior graph must be
1672
1671
  * <code>INVITED</code>.</p>
1672
+ * @public
1673
1673
  */
1674
1674
  GraphArn: string | undefined;
1675
1675
  }
@@ -1678,24 +1678,24 @@ export interface RejectInvitationRequest {
1678
1678
  */
1679
1679
  export interface StartInvestigationRequest {
1680
1680
  /**
1681
- * @public
1682
1681
  * <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
1682
+ * @public
1683
1683
  */
1684
1684
  GraphArn: string | undefined;
1685
1685
  /**
1686
- * @public
1687
1686
  * <p>The unique Amazon Resource Name (ARN) of the IAM user and IAM role.</p>
1687
+ * @public
1688
1688
  */
1689
1689
  EntityArn: string | undefined;
1690
1690
  /**
1691
- * @public
1692
1691
  * <p>The data and time when the investigation began. The value is an UTC ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
1692
+ * @public
1693
1693
  */
1694
1694
  ScopeStartTime: Date | undefined;
1695
1695
  /**
1696
- * @public
1697
1696
  * <p>The data and time when the investigation ended. The value is an UTC ISO8601 formatted
1698
1697
  * string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>
1698
+ * @public
1699
1699
  */
1700
1700
  ScopeEndTime: Date | undefined;
1701
1701
  }
@@ -1704,8 +1704,8 @@ export interface StartInvestigationRequest {
1704
1704
  */
1705
1705
  export interface StartInvestigationResponse {
1706
1706
  /**
1707
- * @public
1708
1707
  * <p>The investigation ID of the investigation report.</p>
1708
+ * @public
1709
1709
  */
1710
1710
  InvestigationId?: string;
1711
1711
  }
@@ -1714,15 +1714,15 @@ export interface StartInvestigationResponse {
1714
1714
  */
1715
1715
  export interface StartMonitoringMemberRequest {
1716
1716
  /**
1717
- * @public
1718
1717
  * <p>The ARN of the behavior graph.</p>
1718
+ * @public
1719
1719
  */
1720
1720
  GraphArn: string | undefined;
1721
1721
  /**
1722
- * @public
1723
1722
  * <p>The account ID of the member account to try to enable.</p>
1724
1723
  * <p>The account must be an invited member account with a status of
1725
1724
  * <code>ACCEPTED_BUT_DISABLED</code>. </p>
1725
+ * @public
1726
1726
  */
1727
1727
  AccountId: string | undefined;
1728
1728
  }
@@ -1731,15 +1731,15 @@ export interface StartMonitoringMemberRequest {
1731
1731
  */
1732
1732
  export interface TagResourceRequest {
1733
1733
  /**
1734
- * @public
1735
1734
  * <p>The ARN of the behavior graph to assign the tags to.</p>
1735
+ * @public
1736
1736
  */
1737
1737
  ResourceArn: string | undefined;
1738
1738
  /**
1739
- * @public
1740
1739
  * <p>The tags to assign to the behavior graph. You can add up to 50 tags. For each tag, you
1741
1740
  * provide the tag key and the tag value. Each tag key can contain up to 128 characters. Each
1742
1741
  * tag value can contain up to 256 characters.</p>
1742
+ * @public
1743
1743
  */
1744
1744
  Tags: Record<string, string> | undefined;
1745
1745
  }
@@ -1753,14 +1753,14 @@ export interface TagResourceResponse {
1753
1753
  */
1754
1754
  export interface UntagResourceRequest {
1755
1755
  /**
1756
- * @public
1757
1756
  * <p>The ARN of the behavior graph to remove the tags from.</p>
1757
+ * @public
1758
1758
  */
1759
1759
  ResourceArn: string | undefined;
1760
1760
  /**
1761
- * @public
1762
1761
  * <p>The tag keys of the tags to remove from the behavior graph. You can remove up to 50 tags
1763
1762
  * at a time.</p>
1763
+ * @public
1764
1764
  */
1765
1765
  TagKeys: string[] | undefined;
1766
1766
  }
@@ -1774,13 +1774,13 @@ export interface UntagResourceResponse {
1774
1774
  */
1775
1775
  export interface UpdateDatasourcePackagesRequest {
1776
1776
  /**
1777
- * @public
1778
1777
  * <p>The ARN of the behavior graph.</p>
1778
+ * @public
1779
1779
  */
1780
1780
  GraphArn: string | undefined;
1781
1781
  /**
1782
- * @public
1783
1782
  * <p>The data source package start for the behavior graph.</p>
1783
+ * @public
1784
1784
  */
1785
1785
  DatasourcePackages: DatasourcePackage[] | undefined;
1786
1786
  }
@@ -1789,18 +1789,18 @@ export interface UpdateDatasourcePackagesRequest {
1789
1789
  */
1790
1790
  export interface UpdateInvestigationStateRequest {
1791
1791
  /**
1792
- * @public
1793
1792
  * <p>The Amazon Resource Name (ARN) of the behavior graph.</p>
1793
+ * @public
1794
1794
  */
1795
1795
  GraphArn: string | undefined;
1796
1796
  /**
1797
- * @public
1798
1797
  * <p>The investigation ID of the investigation report.</p>
1798
+ * @public
1799
1799
  */
1800
1800
  InvestigationId: string | undefined;
1801
1801
  /**
1802
- * @public
1803
1802
  * <p>The current state of the investigation. An archived investigation indicates you have completed reviewing the investigation.</p>
1803
+ * @public
1804
1804
  */
1805
1805
  State: State | undefined;
1806
1806
  }
@@ -1809,14 +1809,14 @@ export interface UpdateInvestigationStateRequest {
1809
1809
  */
1810
1810
  export interface UpdateOrganizationConfigurationRequest {
1811
1811
  /**
1812
- * @public
1813
1812
  * <p>The ARN of the organization behavior graph.</p>
1813
+ * @public
1814
1814
  */
1815
1815
  GraphArn: string | undefined;
1816
1816
  /**
1817
- * @public
1818
1817
  * <p>Indicates whether to automatically enable new organization accounts as member accounts
1819
1818
  * in the organization behavior graph.</p>
1819
+ * @public
1820
1820
  */
1821
1821
  AutoEnable?: boolean;
1822
1822
  }