@aws-sdk/client-fms 3.301.0 → 3.303.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -2,14 +2,19 @@ import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-cl
2
2
  import { FMSServiceException as __BaseException } from "./FMSServiceException";
3
3
  /**
4
4
  * @public
5
+ * @enum
5
6
  */
6
- export declare enum AccountRoleStatus {
7
- Creating = "CREATING",
8
- Deleted = "DELETED",
9
- Deleting = "DELETING",
10
- PendingDeletion = "PENDING_DELETION",
11
- Ready = "READY"
12
- }
7
+ export declare const AccountRoleStatus: {
8
+ readonly Creating: "CREATING";
9
+ readonly Deleted: "DELETED";
10
+ readonly Deleting: "DELETING";
11
+ readonly PendingDeletion: "PENDING_DELETION";
12
+ readonly Ready: "READY";
13
+ };
14
+ /**
15
+ * @public
16
+ */
17
+ export type AccountRoleStatus = (typeof AccountRoleStatus)[keyof typeof AccountRoleStatus];
13
18
  /**
14
19
  * @public
15
20
  * <p>Describes a remediation action target.</p>
@@ -187,11 +192,16 @@ export declare class ResourceNotFoundException extends __BaseException {
187
192
  }
188
193
  /**
189
194
  * @public
195
+ * @enum
190
196
  */
191
- export declare enum ThirdPartyFirewall {
192
- FORTIGATE_CLOUD_NATIVE_FIREWALL = "FORTIGATE_CLOUD_NATIVE_FIREWALL",
193
- PALO_ALTO_NETWORKS_CLOUD_NGFW = "PALO_ALTO_NETWORKS_CLOUD_NGFW"
194
- }
197
+ export declare const ThirdPartyFirewall: {
198
+ readonly FORTIGATE_CLOUD_NATIVE_FIREWALL: "FORTIGATE_CLOUD_NATIVE_FIREWALL";
199
+ readonly PALO_ALTO_NETWORKS_CLOUD_NGFW: "PALO_ALTO_NETWORKS_CLOUD_NGFW";
200
+ };
201
+ /**
202
+ * @public
203
+ */
204
+ export type ThirdPartyFirewall = (typeof ThirdPartyFirewall)[keyof typeof ThirdPartyFirewall];
195
205
  /**
196
206
  * @public
197
207
  */
@@ -203,14 +213,19 @@ export interface AssociateThirdPartyFirewallRequest {
203
213
  }
204
214
  /**
205
215
  * @public
216
+ * @enum
206
217
  */
207
- export declare enum ThirdPartyFirewallAssociationStatus {
208
- NOT_EXIST = "NOT_EXIST",
209
- OFFBOARDING = "OFFBOARDING",
210
- OFFBOARD_COMPLETE = "OFFBOARD_COMPLETE",
211
- ONBOARDING = "ONBOARDING",
212
- ONBOARD_COMPLETE = "ONBOARD_COMPLETE"
213
- }
218
+ export declare const ThirdPartyFirewallAssociationStatus: {
219
+ readonly NOT_EXIST: "NOT_EXIST";
220
+ readonly OFFBOARDING: "OFFBOARDING";
221
+ readonly OFFBOARD_COMPLETE: "OFFBOARD_COMPLETE";
222
+ readonly ONBOARDING: "ONBOARDING";
223
+ readonly ONBOARD_COMPLETE: "ONBOARD_COMPLETE";
224
+ };
225
+ /**
226
+ * @public
227
+ */
228
+ export type ThirdPartyFirewallAssociationStatus = (typeof ThirdPartyFirewallAssociationStatus)[keyof typeof ThirdPartyFirewallAssociationStatus];
214
229
  /**
215
230
  * @public
216
231
  */
@@ -285,15 +300,20 @@ export interface BatchAssociateResourceRequest {
285
300
  }
286
301
  /**
287
302
  * @public
303
+ * @enum
288
304
  */
289
- export declare enum FailedItemReason {
290
- NotValidAccountId = "NOT_VALID_ACCOUNT_ID",
291
- NotValidArn = "NOT_VALID_ARN",
292
- NotValidPartition = "NOT_VALID_PARTITION",
293
- NotValidRegion = "NOT_VALID_REGION",
294
- NotValidResourceType = "NOT_VALID_RESOURCE_TYPE",
295
- NotValidService = "NOT_VALID_SERVICE"
296
- }
305
+ export declare const FailedItemReason: {
306
+ readonly NotValidAccountId: "NOT_VALID_ACCOUNT_ID";
307
+ readonly NotValidArn: "NOT_VALID_ARN";
308
+ readonly NotValidPartition: "NOT_VALID_PARTITION";
309
+ readonly NotValidRegion: "NOT_VALID_REGION";
310
+ readonly NotValidResourceType: "NOT_VALID_RESOURCE_TYPE";
311
+ readonly NotValidService: "NOT_VALID_SERVICE";
312
+ };
313
+ /**
314
+ * @public
315
+ */
316
+ export type FailedItemReason = (typeof FailedItemReason)[keyof typeof FailedItemReason];
297
317
  /**
298
318
  * @public
299
319
  * <p>Details of a resource that failed when trying to update it's association to a resource set.</p>
@@ -508,46 +528,56 @@ export interface GetComplianceDetailRequest {
508
528
  }
509
529
  /**
510
530
  * @public
531
+ * @enum
511
532
  */
512
- export declare enum DependentServiceName {
513
- AWSConfig = "AWSCONFIG",
514
- AWSShieldAdvanced = "AWSSHIELD_ADVANCED",
515
- AWSVirtualPrivateCloud = "AWSVPC",
516
- AWSWAF = "AWSWAF"
517
- }
533
+ export declare const DependentServiceName: {
534
+ readonly AWSConfig: "AWSCONFIG";
535
+ readonly AWSShieldAdvanced: "AWSSHIELD_ADVANCED";
536
+ readonly AWSVirtualPrivateCloud: "AWSVPC";
537
+ readonly AWSWAF: "AWSWAF";
538
+ };
518
539
  /**
519
540
  * @public
520
541
  */
521
- export declare enum ViolationReason {
522
- BlackHoleRouteDetected = "BLACK_HOLE_ROUTE_DETECTED",
523
- BlackHoleRouteDetectedInFirewallSubnet = "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET",
524
- FMSCreatedSecurityGroupEdited = "FMS_CREATED_SECURITY_GROUP_EDITED",
525
- FirewallSubnetIsOutOfScope = "FIREWALL_SUBNET_IS_OUT_OF_SCOPE",
526
- FirewallSubnetMissingExpectedRoute = "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE",
527
- FirewallSubnetMissingVPCEndpoint = "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT",
528
- InternetGatewayMissingExpectedRoute = "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE",
529
- InternetTrafficNotInspected = "INTERNET_TRAFFIC_NOT_INSPECTED",
530
- InvalidRouteConfiguration = "INVALID_ROUTE_CONFIGURATION",
531
- MissingExpectedRouteTable = "MISSING_EXPECTED_ROUTE_TABLE",
532
- MissingFirewall = "MISSING_FIREWALL",
533
- MissingFirewallSubnetInAZ = "MISSING_FIREWALL_SUBNET_IN_AZ",
534
- MissingTargetGateway = "MISSING_TARGET_GATEWAY",
535
- NetworkFirewallPolicyModified = "NETWORK_FIREWALL_POLICY_MODIFIED",
536
- ResourceIncorrectWebAcl = "RESOURCE_INCORRECT_WEB_ACL",
537
- ResourceMissingDnsFirewall = "RESOURCE_MISSING_DNS_FIREWALL",
538
- ResourceMissingSecurityGroup = "RESOURCE_MISSING_SECURITY_GROUP",
539
- ResourceMissingShieldProtection = "RESOURCE_MISSING_SHIELD_PROTECTION",
540
- ResourceMissingWebAcl = "RESOURCE_MISSING_WEB_ACL",
541
- ResourceMissingWebaclOrShieldProtection = "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION",
542
- ResourceViolatesAuditSecurityGroup = "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP",
543
- RouteHasOutOfScopeEndpoint = "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT",
544
- SecurityGroupRedundant = "SECURITY_GROUP_REDUNDANT",
545
- SecurityGroupUnused = "SECURITY_GROUP_UNUSED",
546
- TrafficInspectionCrossesAZBoundary = "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY",
547
- UnexpectedFirewallRoutes = "UNEXPECTED_FIREWALL_ROUTES",
548
- UnexpectedTargetGatewayRoutes = "UNEXPECTED_TARGET_GATEWAY_ROUTES",
549
- WebAclMissingRuleGroup = "WEB_ACL_MISSING_RULE_GROUP"
550
- }
542
+ export type DependentServiceName = (typeof DependentServiceName)[keyof typeof DependentServiceName];
543
+ /**
544
+ * @public
545
+ * @enum
546
+ */
547
+ export declare const ViolationReason: {
548
+ readonly BlackHoleRouteDetected: "BLACK_HOLE_ROUTE_DETECTED";
549
+ readonly BlackHoleRouteDetectedInFirewallSubnet: "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET";
550
+ readonly FMSCreatedSecurityGroupEdited: "FMS_CREATED_SECURITY_GROUP_EDITED";
551
+ readonly FirewallSubnetIsOutOfScope: "FIREWALL_SUBNET_IS_OUT_OF_SCOPE";
552
+ readonly FirewallSubnetMissingExpectedRoute: "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE";
553
+ readonly FirewallSubnetMissingVPCEndpoint: "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT";
554
+ readonly InternetGatewayMissingExpectedRoute: "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE";
555
+ readonly InternetTrafficNotInspected: "INTERNET_TRAFFIC_NOT_INSPECTED";
556
+ readonly InvalidRouteConfiguration: "INVALID_ROUTE_CONFIGURATION";
557
+ readonly MissingExpectedRouteTable: "MISSING_EXPECTED_ROUTE_TABLE";
558
+ readonly MissingFirewall: "MISSING_FIREWALL";
559
+ readonly MissingFirewallSubnetInAZ: "MISSING_FIREWALL_SUBNET_IN_AZ";
560
+ readonly MissingTargetGateway: "MISSING_TARGET_GATEWAY";
561
+ readonly NetworkFirewallPolicyModified: "NETWORK_FIREWALL_POLICY_MODIFIED";
562
+ readonly ResourceIncorrectWebAcl: "RESOURCE_INCORRECT_WEB_ACL";
563
+ readonly ResourceMissingDnsFirewall: "RESOURCE_MISSING_DNS_FIREWALL";
564
+ readonly ResourceMissingSecurityGroup: "RESOURCE_MISSING_SECURITY_GROUP";
565
+ readonly ResourceMissingShieldProtection: "RESOURCE_MISSING_SHIELD_PROTECTION";
566
+ readonly ResourceMissingWebAcl: "RESOURCE_MISSING_WEB_ACL";
567
+ readonly ResourceMissingWebaclOrShieldProtection: "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION";
568
+ readonly ResourceViolatesAuditSecurityGroup: "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP";
569
+ readonly RouteHasOutOfScopeEndpoint: "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT";
570
+ readonly SecurityGroupRedundant: "SECURITY_GROUP_REDUNDANT";
571
+ readonly SecurityGroupUnused: "SECURITY_GROUP_UNUSED";
572
+ readonly TrafficInspectionCrossesAZBoundary: "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY";
573
+ readonly UnexpectedFirewallRoutes: "UNEXPECTED_FIREWALL_ROUTES";
574
+ readonly UnexpectedTargetGatewayRoutes: "UNEXPECTED_TARGET_GATEWAY_ROUTES";
575
+ readonly WebAclMissingRuleGroup: "WEB_ACL_MISSING_RULE_GROUP";
576
+ };
577
+ /**
578
+ * @public
579
+ */
580
+ export type ViolationReason = (typeof ViolationReason)[keyof typeof ViolationReason];
551
581
  /**
552
582
  * @public
553
583
  * <p>Details of the resource that is not protected by the policy.</p>
@@ -652,11 +682,16 @@ export interface GetPolicyRequest {
652
682
  }
653
683
  /**
654
684
  * @public
685
+ * @enum
655
686
  */
656
- export declare enum CustomerPolicyScopeIdType {
657
- ACCOUNT = "ACCOUNT",
658
- ORG_UNIT = "ORG_UNIT"
659
- }
687
+ export declare const CustomerPolicyScopeIdType: {
688
+ readonly ACCOUNT: "ACCOUNT";
689
+ readonly ORG_UNIT: "ORG_UNIT";
690
+ };
691
+ /**
692
+ * @public
693
+ */
694
+ export type CustomerPolicyScopeIdType = (typeof CustomerPolicyScopeIdType)[keyof typeof CustomerPolicyScopeIdType];
660
695
  /**
661
696
  * @public
662
697
  * <p>The resource tags that Firewall Manager uses to determine if a particular resource
@@ -679,11 +714,16 @@ export interface ResourceTag {
679
714
  }
680
715
  /**
681
716
  * @public
717
+ * @enum
682
718
  */
683
- export declare enum FirewallDeploymentModel {
684
- CENTRALIZED = "CENTRALIZED",
685
- DISTRIBUTED = "DISTRIBUTED"
686
- }
719
+ export declare const FirewallDeploymentModel: {
720
+ readonly CENTRALIZED: "CENTRALIZED";
721
+ readonly DISTRIBUTED: "DISTRIBUTED";
722
+ };
723
+ /**
724
+ * @public
725
+ */
726
+ export type FirewallDeploymentModel = (typeof FirewallDeploymentModel)[keyof typeof FirewallDeploymentModel];
687
727
  /**
688
728
  * @public
689
729
  * <p>Configures the firewall policy deployment model of Network Firewall. For information about
@@ -724,19 +764,24 @@ export interface PolicyOption {
724
764
  }
725
765
  /**
726
766
  * @public
767
+ * @enum
727
768
  */
728
- export declare enum SecurityServiceType {
729
- DNS_FIREWALL = "DNS_FIREWALL",
730
- IMPORT_NETWORK_FIREWALL = "IMPORT_NETWORK_FIREWALL",
731
- NETWORK_FIREWALL = "NETWORK_FIREWALL",
732
- SECURITY_GROUPS_COMMON = "SECURITY_GROUPS_COMMON",
733
- SECURITY_GROUPS_CONTENT_AUDIT = "SECURITY_GROUPS_CONTENT_AUDIT",
734
- SECURITY_GROUPS_USAGE_AUDIT = "SECURITY_GROUPS_USAGE_AUDIT",
735
- SHIELD_ADVANCED = "SHIELD_ADVANCED",
736
- THIRD_PARTY_FIREWALL = "THIRD_PARTY_FIREWALL",
737
- WAF = "WAF",
738
- WAFV2 = "WAFV2"
739
- }
769
+ export declare const SecurityServiceType: {
770
+ readonly DNS_FIREWALL: "DNS_FIREWALL";
771
+ readonly IMPORT_NETWORK_FIREWALL: "IMPORT_NETWORK_FIREWALL";
772
+ readonly NETWORK_FIREWALL: "NETWORK_FIREWALL";
773
+ readonly SECURITY_GROUPS_COMMON: "SECURITY_GROUPS_COMMON";
774
+ readonly SECURITY_GROUPS_CONTENT_AUDIT: "SECURITY_GROUPS_CONTENT_AUDIT";
775
+ readonly SECURITY_GROUPS_USAGE_AUDIT: "SECURITY_GROUPS_USAGE_AUDIT";
776
+ readonly SHIELD_ADVANCED: "SHIELD_ADVANCED";
777
+ readonly THIRD_PARTY_FIREWALL: "THIRD_PARTY_FIREWALL";
778
+ readonly WAF: "WAF";
779
+ readonly WAFV2: "WAFV2";
780
+ };
781
+ /**
782
+ * @public
783
+ */
784
+ export type SecurityServiceType = (typeof SecurityServiceType)[keyof typeof SecurityServiceType];
740
785
  /**
741
786
  * @public
742
787
  * <p>Details about the security service that is being used to protect the resources.</p>
@@ -1326,12 +1371,17 @@ export interface GetThirdPartyFirewallAssociationStatusRequest {
1326
1371
  }
1327
1372
  /**
1328
1373
  * @public
1374
+ * @enum
1329
1375
  */
1330
- export declare enum MarketplaceSubscriptionOnboardingStatus {
1331
- COMPLETE = "COMPLETE",
1332
- NOT_COMPLETE = "NOT_COMPLETE",
1333
- NO_SUBSCRIPTION = "NO_SUBSCRIPTION"
1334
- }
1376
+ export declare const MarketplaceSubscriptionOnboardingStatus: {
1377
+ readonly COMPLETE: "COMPLETE";
1378
+ readonly NOT_COMPLETE: "NOT_COMPLETE";
1379
+ readonly NO_SUBSCRIPTION: "NO_SUBSCRIPTION";
1380
+ };
1381
+ /**
1382
+ * @public
1383
+ */
1384
+ export type MarketplaceSubscriptionOnboardingStatus = (typeof MarketplaceSubscriptionOnboardingStatus)[keyof typeof MarketplaceSubscriptionOnboardingStatus];
1335
1385
  /**
1336
1386
  * @public
1337
1387
  */
@@ -1439,11 +1489,16 @@ export interface PartialMatch {
1439
1489
  }
1440
1490
  /**
1441
1491
  * @public
1492
+ * @enum
1442
1493
  */
1443
- export declare enum RemediationActionType {
1444
- Modify = "MODIFY",
1445
- Remove = "REMOVE"
1446
- }
1494
+ export declare const RemediationActionType: {
1495
+ readonly Modify: "MODIFY";
1496
+ readonly Remove: "REMOVE";
1497
+ };
1498
+ /**
1499
+ * @public
1500
+ */
1501
+ export type RemediationActionType = (typeof RemediationActionType)[keyof typeof RemediationActionType];
1447
1502
  /**
1448
1503
  * @public
1449
1504
  * <p>Describes a set of permissions for a security group rule.</p>
@@ -1630,27 +1685,37 @@ export interface FirewallSubnetMissingVPCEndpointViolation {
1630
1685
  }
1631
1686
  /**
1632
1687
  * @public
1688
+ * @enum
1633
1689
  */
1634
- export declare enum DestinationType {
1635
- IPV4 = "IPV4",
1636
- IPV6 = "IPV6",
1637
- PrefixList = "PREFIX_LIST"
1638
- }
1690
+ export declare const DestinationType: {
1691
+ readonly IPV4: "IPV4";
1692
+ readonly IPV6: "IPV6";
1693
+ readonly PrefixList: "PREFIX_LIST";
1694
+ };
1639
1695
  /**
1640
1696
  * @public
1641
1697
  */
1642
- export declare enum TargetType {
1643
- CarrierGateway = "CARRIER_GATEWAY",
1644
- EgressOnlyInternetGateway = "EGRESS_ONLY_INTERNET_GATEWAY",
1645
- Gateway = "GATEWAY",
1646
- Instance = "INSTANCE",
1647
- LocalGateway = "LOCAL_GATEWAY",
1648
- NatGateway = "NAT_GATEWAY",
1649
- NetworkInterface = "NETWORK_INTERFACE",
1650
- TransitGateway = "TRANSIT_GATEWAY",
1651
- VPCEndpoint = "VPC_ENDPOINT",
1652
- VPCPeeringConnection = "VPC_PEERING_CONNECTION"
1653
- }
1698
+ export type DestinationType = (typeof DestinationType)[keyof typeof DestinationType];
1699
+ /**
1700
+ * @public
1701
+ * @enum
1702
+ */
1703
+ export declare const TargetType: {
1704
+ readonly CarrierGateway: "CARRIER_GATEWAY";
1705
+ readonly EgressOnlyInternetGateway: "EGRESS_ONLY_INTERNET_GATEWAY";
1706
+ readonly Gateway: "GATEWAY";
1707
+ readonly Instance: "INSTANCE";
1708
+ readonly LocalGateway: "LOCAL_GATEWAY";
1709
+ readonly NatGateway: "NAT_GATEWAY";
1710
+ readonly NetworkInterface: "NETWORK_INTERFACE";
1711
+ readonly TransitGateway: "TRANSIT_GATEWAY";
1712
+ readonly VPCEndpoint: "VPC_ENDPOINT";
1713
+ readonly VPCPeeringConnection: "VPC_PEERING_CONNECTION";
1714
+ };
1715
+ /**
1716
+ * @public
1717
+ */
1718
+ export type TargetType = (typeof TargetType)[keyof typeof TargetType];
1654
1719
  /**
1655
1720
  * @public
1656
1721
  * <p>Describes a route in a route table.</p>
@@ -1955,11 +2020,16 @@ export interface NetworkFirewallMissingSubnetViolation {
1955
2020
  }
1956
2021
  /**
1957
2022
  * @public
2023
+ * @enum
1958
2024
  */
1959
- export declare enum RuleOrder {
1960
- DEFAULT_ACTION_ORDER = "DEFAULT_ACTION_ORDER",
1961
- STRICT_ORDER = "STRICT_ORDER"
1962
- }
2025
+ export declare const RuleOrder: {
2026
+ readonly DEFAULT_ACTION_ORDER: "DEFAULT_ACTION_ORDER";
2027
+ readonly STRICT_ORDER: "STRICT_ORDER";
2028
+ };
2029
+ /**
2030
+ * @public
2031
+ */
2032
+ export type RuleOrder = (typeof RuleOrder)[keyof typeof RuleOrder];
1963
2033
  /**
1964
2034
  * @public
1965
2035
  * <p>Configuration settings for the handling of the stateful rule groups in a Network Firewall firewall policy.</p>
@@ -1975,10 +2045,15 @@ export interface StatefulEngineOptions {
1975
2045
  }
1976
2046
  /**
1977
2047
  * @public
2048
+ * @enum
1978
2049
  */
1979
- export declare enum NetworkFirewallOverrideAction {
1980
- DROP_TO_ALERT = "DROP_TO_ALERT"
1981
- }
2050
+ export declare const NetworkFirewallOverrideAction: {
2051
+ readonly DROP_TO_ALERT: "DROP_TO_ALERT";
2052
+ };
2053
+ /**
2054
+ * @public
2055
+ */
2056
+ export type NetworkFirewallOverrideAction = (typeof NetworkFirewallOverrideAction)[keyof typeof NetworkFirewallOverrideAction];
1982
2057
  /**
1983
2058
  * @public
1984
2059
  * <p>The setting that allows the policy owner to change the behavior of the rule group within a policy.</p>
@@ -2766,11 +2841,16 @@ export interface ListComplianceStatusRequest {
2766
2841
  }
2767
2842
  /**
2768
2843
  * @public
2844
+ * @enum
2769
2845
  */
2770
- export declare enum PolicyComplianceStatusType {
2771
- Compliant = "COMPLIANT",
2772
- NonCompliant = "NON_COMPLIANT"
2773
- }
2846
+ export declare const PolicyComplianceStatusType: {
2847
+ readonly Compliant: "COMPLIANT";
2848
+ readonly NonCompliant: "NON_COMPLIANT";
2849
+ };
2850
+ /**
2851
+ * @public
2852
+ */
2853
+ export type PolicyComplianceStatusType = (typeof PolicyComplianceStatusType)[keyof typeof PolicyComplianceStatusType];
2774
2854
  /**
2775
2855
  * @public
2776
2856
  * <p>Describes the compliance status for the account. An account is considered noncompliant if