@aws-sdk/client-guardduty 3.1024.0 → 3.1025.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -20
- package/dist-cjs/schemas/schemas_0.js +97 -100
- package/dist-es/schemas/schemas_0.js +97 -100
- package/dist-types/GuardDuty.d.ts +1 -20
- package/dist-types/GuardDutyClient.d.ts +1 -20
- package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +1 -2
- package/dist-types/commands/ArchiveFindingsCommand.d.ts +1 -5
- package/dist-types/commands/CreateDetectorCommand.d.ts +2 -24
- package/dist-types/commands/CreateFilterCommand.d.ts +1 -2
- package/dist-types/commands/CreateIPSetCommand.d.ts +1 -4
- package/dist-types/commands/CreateMalwareProtectionPlanCommand.d.ts +1 -3
- package/dist-types/commands/CreateMembersCommand.d.ts +1 -20
- package/dist-types/commands/CreatePublishingDestinationCommand.d.ts +1 -2
- package/dist-types/commands/CreateSampleFindingsCommand.d.ts +1 -3
- package/dist-types/commands/CreateThreatEntitySetCommand.d.ts +1 -5
- package/dist-types/commands/CreateThreatIntelSetCommand.d.ts +1 -3
- package/dist-types/commands/CreateTrustedEntitySetCommand.d.ts +1 -6
- package/dist-types/commands/DeclineInvitationsCommand.d.ts +1 -2
- package/dist-types/commands/DeleteIPSetCommand.d.ts +1 -2
- package/dist-types/commands/DeleteInvitationsCommand.d.ts +1 -2
- package/dist-types/commands/DeleteMalwareProtectionPlanCommand.d.ts +1 -3
- package/dist-types/commands/DeleteMembersCommand.d.ts +1 -5
- package/dist-types/commands/DeleteThreatEntitySetCommand.d.ts +1 -2
- package/dist-types/commands/DeleteTrustedEntitySetCommand.d.ts +1 -2
- package/dist-types/commands/DescribeMalwareScansCommand.d.ts +1 -5
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +2 -6
- package/dist-types/commands/DescribePublishingDestinationCommand.d.ts +1 -2
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +1 -3
- package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +1 -10
- package/dist-types/commands/DisassociateFromMasterAccountCommand.d.ts +1 -7
- package/dist-types/commands/DisassociateMembersCommand.d.ts +1 -19
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +1 -3
- package/dist-types/commands/GetAdministratorAccountCommand.d.ts +1 -16
- package/dist-types/commands/GetCoverageStatisticsCommand.d.ts +2 -5
- package/dist-types/commands/GetDetectorCommand.d.ts +2 -5
- package/dist-types/commands/GetFindingsCommand.d.ts +43 -43
- package/dist-types/commands/GetFindingsStatisticsCommand.d.ts +1 -6
- package/dist-types/commands/GetInvitationsCountCommand.d.ts +1 -2
- package/dist-types/commands/GetMalwareProtectionPlanCommand.d.ts +1 -2
- package/dist-types/commands/GetMalwareScanCommand.d.ts +1 -5
- package/dist-types/commands/GetMalwareScanSettingsCommand.d.ts +1 -4
- package/dist-types/commands/GetMasterAccountCommand.d.ts +1 -2
- package/dist-types/commands/GetMemberDetectorsCommand.d.ts +2 -5
- package/dist-types/commands/GetMembersCommand.d.ts +1 -2
- package/dist-types/commands/GetOrganizationStatisticsCommand.d.ts +2 -5
- package/dist-types/commands/GetRemainingFreeTrialDaysCommand.d.ts +2 -3
- package/dist-types/commands/GetUsageStatisticsCommand.d.ts +4 -7
- package/dist-types/commands/InviteMembersCommand.d.ts +1 -26
- package/dist-types/commands/ListCoverageCommand.d.ts +4 -7
- package/dist-types/commands/ListFindingsCommand.d.ts +1 -3
- package/dist-types/commands/ListIPSetsCommand.d.ts +1 -3
- package/dist-types/commands/ListInvitationsCommand.d.ts +1 -2
- package/dist-types/commands/ListMalwareProtectionPlansCommand.d.ts +1 -2
- package/dist-types/commands/ListMalwareScansCommand.d.ts +1 -2
- package/dist-types/commands/ListMembersCommand.d.ts +1 -2
- package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +1 -3
- package/dist-types/commands/ListPublishingDestinationsCommand.d.ts +1 -2
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +1 -4
- package/dist-types/commands/ListThreatEntitySetsCommand.d.ts +1 -3
- package/dist-types/commands/ListThreatIntelSetsCommand.d.ts +1 -3
- package/dist-types/commands/ListTrustedEntitySetsCommand.d.ts +1 -3
- package/dist-types/commands/SendObjectMalwareScanCommand.d.ts +1 -3
- package/dist-types/commands/StartMalwareScanCommand.d.ts +1 -6
- package/dist-types/commands/StartMonitoringMembersCommand.d.ts +1 -2
- package/dist-types/commands/StopMonitoringMembersCommand.d.ts +1 -6
- package/dist-types/commands/UpdateDetectorCommand.d.ts +2 -10
- package/dist-types/commands/UpdateMalwareScanSettingsCommand.d.ts +1 -4
- package/dist-types/commands/UpdateMemberDetectorsCommand.d.ts +2 -10
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +2 -11
- package/dist-types/commands/UpdatePublishingDestinationCommand.d.ts +1 -2
- package/dist-types/index.d.ts +1 -20
- package/dist-types/models/models_0.d.ts +351 -1308
- package/dist-types/models/models_1.d.ts +151 -637
- package/dist-types/ts3.4/models/models_0.d.ts +8 -8
- package/dist-types/ts3.4/models/models_1.d.ts +1 -1
- package/package.json +1 -1
|
@@ -732,26 +732,7 @@ export interface GuardDuty {
|
|
|
732
732
|
paginateListTrustedEntitySets(args: ListTrustedEntitySetsCommandInput, paginationConfig?: Omit<PaginationConfiguration, "client">): Paginator<ListTrustedEntitySetsCommandOutput>;
|
|
733
733
|
}
|
|
734
734
|
/**
|
|
735
|
-
* <p>Amazon GuardDuty is a continuous security monitoring service that analyzes and processes
|
|
736
|
-
* the following foundational data sources - VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event
|
|
737
|
-
* logs, EKS audit logs, DNS logs, Amazon EBS volume data, runtime activity belonging to container workloads, such
|
|
738
|
-
* as Amazon EKS, Amazon ECS (including Amazon Web Services Fargate), and Amazon EC2 instances.
|
|
739
|
-
* It uses threat intelligence
|
|
740
|
-
* feeds, such as lists of malicious IPs and domains, and machine learning to identify
|
|
741
|
-
* unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment.
|
|
742
|
-
* This can include issues like escalations of privileges, uses of exposed credentials, or
|
|
743
|
-
* communication with malicious IPs, domains, or presence of malware on your Amazon EC2 instances
|
|
744
|
-
* and container workloads. For example, GuardDuty can detect compromised EC2 instances and
|
|
745
|
-
* container workloads serving malware, or mining bitcoin. </p>
|
|
746
|
-
* <p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such as
|
|
747
|
-
* unauthorized infrastructure deployments like EC2 instances deployed in a Region that has never
|
|
748
|
-
* been used, or unusual API calls like a password policy change to reduce password strength. </p>
|
|
749
|
-
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
|
|
750
|
-
* findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
|
|
751
|
-
* information, see the <i>
|
|
752
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
753
|
-
* GuardDuty User Guide</a>
|
|
754
|
-
* </i>. </p>
|
|
735
|
+
* <p>Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following foundational data sources - VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event logs, EKS audit logs, DNS logs, Amazon EBS volume data, runtime activity belonging to container workloads, such as Amazon EKS, Amazon ECS (including Amazon Web Services Fargate), and Amazon EC2 instances. It uses threat intelligence feeds, such as lists of malicious IPs and domains, and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, domains, or presence of malware on your Amazon EC2 instances and container workloads. For example, GuardDuty can detect compromised EC2 instances and container workloads serving malware, or mining bitcoin. </p> <p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such as unauthorized infrastructure deployments like EC2 instances deployed in a Region that has never been used, or unusual API calls like a password policy change to reduce password strength. </p> <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security findings that you can view in the GuardDuty console or through Amazon EventBridge. For more information, see the <i> <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User Guide</a> </i>. </p>
|
|
755
736
|
* @public
|
|
756
737
|
*/
|
|
757
738
|
export declare class GuardDuty extends GuardDutyClient implements GuardDuty {
|
|
@@ -256,26 +256,7 @@ export type GuardDutyClientResolvedConfigType = __SmithyResolvedConfiguration<__
|
|
|
256
256
|
export interface GuardDutyClientResolvedConfig extends GuardDutyClientResolvedConfigType {
|
|
257
257
|
}
|
|
258
258
|
/**
|
|
259
|
-
* <p>Amazon GuardDuty is a continuous security monitoring service that analyzes and processes
|
|
260
|
-
* the following foundational data sources - VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event
|
|
261
|
-
* logs, EKS audit logs, DNS logs, Amazon EBS volume data, runtime activity belonging to container workloads, such
|
|
262
|
-
* as Amazon EKS, Amazon ECS (including Amazon Web Services Fargate), and Amazon EC2 instances.
|
|
263
|
-
* It uses threat intelligence
|
|
264
|
-
* feeds, such as lists of malicious IPs and domains, and machine learning to identify
|
|
265
|
-
* unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment.
|
|
266
|
-
* This can include issues like escalations of privileges, uses of exposed credentials, or
|
|
267
|
-
* communication with malicious IPs, domains, or presence of malware on your Amazon EC2 instances
|
|
268
|
-
* and container workloads. For example, GuardDuty can detect compromised EC2 instances and
|
|
269
|
-
* container workloads serving malware, or mining bitcoin. </p>
|
|
270
|
-
* <p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such as
|
|
271
|
-
* unauthorized infrastructure deployments like EC2 instances deployed in a Region that has never
|
|
272
|
-
* been used, or unusual API calls like a password policy change to reduce password strength. </p>
|
|
273
|
-
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
|
|
274
|
-
* findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
|
|
275
|
-
* information, see the <i>
|
|
276
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
277
|
-
* GuardDuty User Guide</a>
|
|
278
|
-
* </i>. </p>
|
|
259
|
+
* <p>Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following foundational data sources - VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event logs, EKS audit logs, DNS logs, Amazon EBS volume data, runtime activity belonging to container workloads, such as Amazon EKS, Amazon ECS (including Amazon Web Services Fargate), and Amazon EC2 instances. It uses threat intelligence feeds, such as lists of malicious IPs and domains, and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, domains, or presence of malware on your Amazon EC2 instances and container workloads. For example, GuardDuty can detect compromised EC2 instances and container workloads serving malware, or mining bitcoin. </p> <p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such as unauthorized infrastructure deployments like EC2 instances deployed in a Region that has never been used, or unusual API calls like a password policy change to reduce password strength. </p> <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security findings that you can view in the GuardDuty console or through Amazon EventBridge. For more information, see the <i> <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User Guide</a> </i>. </p>
|
|
279
260
|
* @public
|
|
280
261
|
*/
|
|
281
262
|
export declare class GuardDutyClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, GuardDutyClientResolvedConfig> {
|
|
@@ -27,8 +27,7 @@ declare const AcceptAdministratorInvitationCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Accepts the invitation to be a member account and get monitored by a GuardDuty
|
|
31
|
-
* administrator account that sent the invitation.</p>
|
|
30
|
+
* <p>Accepts the invitation to be a member account and get monitored by a GuardDuty administrator account that sent the invitation.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,11 +27,7 @@ declare const ArchiveFindingsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Archives GuardDuty findings that are specified by the list of finding IDs.</p>
|
|
31
|
-
* <note>
|
|
32
|
-
* <p>Only the administrator account can archive findings. Member accounts don't have
|
|
33
|
-
* permission to archive findings from their accounts.</p>
|
|
34
|
-
* </note>
|
|
30
|
+
* <p>Archives GuardDuty findings that are specified by the list of finding IDs.</p> <note> <p>Only the administrator account can archive findings. Member accounts don't have permission to archive findings from their accounts.</p> </note>
|
|
35
31
|
* @example
|
|
36
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
37
33
|
* ```javascript
|
|
@@ -27,29 +27,7 @@ declare const CreateDetectorCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a single GuardDuty detector. A detector is a resource that represents the
|
|
31
|
-
* GuardDuty service. To start using GuardDuty, you must create a detector in each Region where
|
|
32
|
-
* you enable the service. You can have only one detector per account per Region. All data
|
|
33
|
-
* sources are enabled in a new detector by default.</p>
|
|
34
|
-
* <ul>
|
|
35
|
-
* <li>
|
|
36
|
-
* <p>When you don't specify any <code>features</code>, with an
|
|
37
|
-
* exception to <code>RUNTIME_MONITORING</code>, all the optional features are
|
|
38
|
-
* enabled by default.</p>
|
|
39
|
-
* </li>
|
|
40
|
-
* <li>
|
|
41
|
-
* <p>When you specify some of the <code>features</code>, any feature that is not specified in the
|
|
42
|
-
* API call gets enabled by default, with an exception to <code>RUNTIME_MONITORING</code>. </p>
|
|
43
|
-
* </li>
|
|
44
|
-
* </ul>
|
|
45
|
-
* <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
|
|
46
|
-
* and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
|
|
47
|
-
* You can add only one of these two features because Runtime Monitoring already includes the
|
|
48
|
-
* threat detection for Amazon EKS resources. For more information, see
|
|
49
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
|
|
50
|
-
* <p>There might be regional differences because some data sources might not be
|
|
51
|
-
* available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
|
|
52
|
-
* information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
30
|
+
* <p>Creates a single GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each Region where you enable the service. You can have only one detector per account per Region. All data sources are enabled in a new detector by default.</p> <ul> <li> <p>When you don't specify any <code>features</code>, with an exception to <code>RUNTIME_MONITORING</code>, all the optional features are enabled by default.</p> </li> <li> <p>When you specify some of the <code>features</code>, any feature that is not specified in the API call gets enabled by default, with an exception to <code>RUNTIME_MONITORING</code>. </p> </li> </ul> <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>) and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error. You can add only one of these two features because Runtime Monitoring already includes the threat detection for Amazon EKS resources. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p> <p>There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
53
31
|
* @example
|
|
54
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
55
33
|
* ```javascript
|
|
@@ -82,7 +60,7 @@ declare const CreateDetectorCommand_base: {
|
|
|
82
60
|
* },
|
|
83
61
|
* Features: [ // DetectorFeatureConfigurations
|
|
84
62
|
* { // DetectorFeatureConfiguration
|
|
85
|
-
* Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "
|
|
63
|
+
* Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "RUNTIME_MONITORING",
|
|
86
64
|
* Status: "ENABLED" || "DISABLED",
|
|
87
65
|
* AdditionalConfiguration: [ // DetectorAdditionalConfigurations
|
|
88
66
|
* { // DetectorAdditionalConfiguration
|
|
@@ -27,8 +27,7 @@ declare const CreateFilterCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a filter using the specified finding criteria. The maximum number of saved filters
|
|
31
|
-
* per Amazon Web Services account per Region is 100. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_limits.html">Quotas for GuardDuty</a>.</p>
|
|
30
|
+
* <p>Creates a filter using the specified finding criteria. The maximum number of saved filters per Amazon Web Services account per Region is 100. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_limits.html">Quotas for GuardDuty</a>.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,10 +27,7 @@ declare const CreateIPSetCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a new IPSet, which is called a trusted IP list in the console user interface. An
|
|
31
|
-
* IPSet is a list of IP addresses that are trusted for secure communication with Amazon Web Services
|
|
32
|
-
* infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are
|
|
33
|
-
* included in IPSets. Only users from the administrator account can use this operation.</p>
|
|
30
|
+
* <p>Creates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of IP addresses that are trusted for secure communication with Amazon Web Services infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are included in IPSets. Only users from the administrator account can use this operation.</p>
|
|
34
31
|
* @example
|
|
35
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
36
33
|
* ```javascript
|
|
@@ -27,9 +27,7 @@ declare const CreateMalwareProtectionPlanCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a new Malware Protection plan for the protected resource.</p>
|
|
31
|
-
* <p>When you create a Malware Protection plan, the Amazon Web Services service terms for GuardDuty Malware
|
|
32
|
-
* Protection apply. For more information, see <a href="http://aws.amazon.com/service-terms/#87._Amazon_GuardDuty">Amazon Web Services service terms for GuardDuty Malware Protection</a>.</p>
|
|
30
|
+
* <p>Creates a new Malware Protection plan for the protected resource.</p> <p>When you create a Malware Protection plan, the Amazon Web Services service terms for GuardDuty Malware Protection apply. For more information, see <a href="http://aws.amazon.com/service-terms/#87._Amazon_GuardDuty">Amazon Web Services service terms for GuardDuty Malware Protection</a>.</p>
|
|
33
31
|
* @example
|
|
34
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
33
|
* ```javascript
|
|
@@ -27,26 +27,7 @@ declare const CreateMembersCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates member accounts of the current Amazon Web Services account by specifying a list of Amazon Web Services account
|
|
31
|
-
* IDs. This step is a prerequisite for managing the associated member accounts either by
|
|
32
|
-
* invitation or through an organization.</p>
|
|
33
|
-
* <p>As a delegated administrator, using <code>CreateMembers</code> will enable GuardDuty in
|
|
34
|
-
* the added member accounts, with the exception of the
|
|
35
|
-
* organization delegated administrator account. A delegated administrator must enable GuardDuty
|
|
36
|
-
* prior to being added as a member.</p>
|
|
37
|
-
* <p>When you use CreateMembers as an Organizations delegated
|
|
38
|
-
* administrator, GuardDuty applies your organization's auto-enable settings to the member
|
|
39
|
-
* accounts in this request, irrespective of the accounts being new or existing members. For
|
|
40
|
-
* more information about the existing auto-enable settings for your organization, see
|
|
41
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribeOrganizationConfiguration.html">DescribeOrganizationConfiguration</a>.</p>
|
|
42
|
-
* <p>If you disassociate a member account that was added by invitation, the member account details
|
|
43
|
-
* obtained from this API, including the associated email addresses, will be retained.
|
|
44
|
-
* This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
|
|
45
|
-
* remove the details associated with a member account, the delegated administrator must invoke the
|
|
46
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
|
|
47
|
-
* <p>When the member accounts added through Organizations are later disassociated, you (administrator)
|
|
48
|
-
* can't invite them by calling the InviteMembers API. You can create an association with these
|
|
49
|
-
* member accounts again only by calling the CreateMembers API.</p>
|
|
30
|
+
* <p>Creates member accounts of the current Amazon Web Services account by specifying a list of Amazon Web Services account IDs. This step is a prerequisite for managing the associated member accounts either by invitation or through an organization.</p> <p>As a delegated administrator, using <code>CreateMembers</code> will enable GuardDuty in the added member accounts, with the exception of the organization delegated administrator account. A delegated administrator must enable GuardDuty prior to being added as a member.</p> <p>When you use CreateMembers as an Organizations delegated administrator, GuardDuty applies your organization's auto-enable settings to the member accounts in this request, irrespective of the accounts being new or existing members. For more information about the existing auto-enable settings for your organization, see <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribeOrganizationConfiguration.html">DescribeOrganizationConfiguration</a>.</p> <p>If you disassociate a member account that was added by invitation, the member account details obtained from this API, including the associated email addresses, will be retained. This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p> <p>When the member accounts added through Organizations are later disassociated, you (administrator) can't invite them by calling the InviteMembers API. You can create an association with these member accounts again only by calling the CreateMembers API.</p>
|
|
50
31
|
* @example
|
|
51
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
52
33
|
* ```javascript
|
|
@@ -27,8 +27,7 @@ declare const CreatePublishingDestinationCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a publishing destination where you can export your GuardDuty findings. Before you start exporting the
|
|
31
|
-
* findings, the destination resource must exist.</p>
|
|
30
|
+
* <p>Creates a publishing destination where you can export your GuardDuty findings. Before you start exporting the findings, the destination resource must exist.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,9 +27,7 @@ declare const CreateSampleFindingsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Generates sample findings of types specified by the list of finding types. If 'NULL' is
|
|
31
|
-
* specified for <code>findingTypes</code>, the API generates sample findings of all supported
|
|
32
|
-
* finding types.</p>
|
|
30
|
+
* <p>Generates sample findings of types specified by the list of finding types. If 'NULL' is specified for <code>findingTypes</code>, the API generates sample findings of all supported finding types.</p>
|
|
33
31
|
* @example
|
|
34
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
33
|
* ```javascript
|
|
@@ -27,11 +27,7 @@ declare const CreateThreatEntitySetCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a new threat entity set. In a threat entity set, you can provide known malicious
|
|
31
|
-
* IP addresses and domains for your Amazon Web Services environment.
|
|
32
|
-
* GuardDuty generates findings based on the entries in the threat entity sets.
|
|
33
|
-
* Only users of the administrator account can manage entity sets, which automatically apply
|
|
34
|
-
* to member accounts.</p>
|
|
30
|
+
* <p>Creates a new threat entity set. In a threat entity set, you can provide known malicious IP addresses and domains for your Amazon Web Services environment. GuardDuty generates findings based on the entries in the threat entity sets. Only users of the administrator account can manage entity sets, which automatically apply to member accounts.</p>
|
|
35
31
|
* @example
|
|
36
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
37
33
|
* ```javascript
|
|
@@ -27,9 +27,7 @@ declare const CreateThreatIntelSetCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses.
|
|
31
|
-
* GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator
|
|
32
|
-
* account can use this operation.</p>
|
|
30
|
+
* <p>Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can use this operation.</p>
|
|
33
31
|
* @example
|
|
34
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
33
|
* ```javascript
|
|
@@ -27,12 +27,7 @@ declare const CreateTrustedEntitySetCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Creates a new trusted entity set. In the trusted entity set, you can provide IP addresses
|
|
31
|
-
* and domains that you believe are secure for communication in your Amazon Web Services environment. GuardDuty
|
|
32
|
-
* will not generate findings for the entries that are specified in a trusted entity set. At any
|
|
33
|
-
* given time, you can have only one trusted entity set. </p>
|
|
34
|
-
* <p>Only users of the administrator account can manage the entity sets, which automatically
|
|
35
|
-
* apply to member accounts.</p>
|
|
30
|
+
* <p>Creates a new trusted entity set. In the trusted entity set, you can provide IP addresses and domains that you believe are secure for communication in your Amazon Web Services environment. GuardDuty will not generate findings for the entries that are specified in a trusted entity set. At any given time, you can have only one trusted entity set. </p> <p>Only users of the administrator account can manage the entity sets, which automatically apply to member accounts.</p>
|
|
36
31
|
* @example
|
|
37
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
38
33
|
* ```javascript
|
|
@@ -27,8 +27,7 @@ declare const DeclineInvitationsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Declines invitations sent to the current member account by Amazon Web Services accounts specified by
|
|
31
|
-
* their account IDs.</p>
|
|
30
|
+
* <p>Declines invitations sent to the current member account by Amazon Web Services accounts specified by their account IDs.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,8 +27,7 @@ declare const DeleteIPSetCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Deletes the IPSet specified by the <code>ipSetId</code>. IPSets are called trusted IP
|
|
31
|
-
* lists in the console user interface.</p>
|
|
30
|
+
* <p>Deletes the IPSet specified by the <code>ipSetId</code>. IPSets are called trusted IP lists in the console user interface.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,8 +27,7 @@ declare const DeleteInvitationsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Deletes invitations sent to the current member account by Amazon Web Services accounts specified by
|
|
31
|
-
* their account IDs.</p>
|
|
30
|
+
* <p>Deletes invitations sent to the current member account by Amazon Web Services accounts specified by their account IDs.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,9 +27,7 @@ declare const DeleteMalwareProtectionPlanCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Deletes the Malware Protection plan ID associated with the Malware Protection plan resource.
|
|
31
|
-
* Use this API only when you no longer want to protect the resource associated with this
|
|
32
|
-
* Malware Protection plan ID.</p>
|
|
30
|
+
* <p>Deletes the Malware Protection plan ID associated with the Malware Protection plan resource. Use this API only when you no longer want to protect the resource associated with this Malware Protection plan ID.</p>
|
|
33
31
|
* @example
|
|
34
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
33
|
* ```javascript
|
|
@@ -27,11 +27,7 @@ declare const DeleteMembersCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Deletes GuardDuty member accounts (to the current GuardDuty administrator account)
|
|
31
|
-
* specified by the account IDs.</p>
|
|
32
|
-
* <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to
|
|
33
|
-
* <code>ALL</code>, you'll receive an error if you attempt to disable GuardDuty for a member
|
|
34
|
-
* account in your organization.</p>
|
|
30
|
+
* <p>Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.</p> <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to <code>ALL</code>, you'll receive an error if you attempt to disable GuardDuty for a member account in your organization.</p>
|
|
35
31
|
* @example
|
|
36
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
37
33
|
* ```javascript
|
|
@@ -27,8 +27,7 @@ declare const DeleteThreatEntitySetCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Deletes the threat entity set that is associated with the specified
|
|
31
|
-
* <code>threatEntitySetId</code>.</p>
|
|
30
|
+
* <p>Deletes the threat entity set that is associated with the specified <code>threatEntitySetId</code>.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,8 +27,7 @@ declare const DeleteTrustedEntitySetCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Deletes the trusted entity set that is associated with the specified
|
|
31
|
-
* <code>trustedEntitySetId</code>.</p>
|
|
30
|
+
* <p>Deletes the trusted entity set that is associated with the specified <code>trustedEntitySetId</code>.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,11 +27,7 @@ declare const DescribeMalwareScansCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Returns a list of malware scans. Each member account can view the malware scans for their
|
|
31
|
-
* own accounts. An administrator can view the malware scans for all the member accounts.</p>
|
|
32
|
-
* <p>There might be regional differences because some data sources might not be
|
|
33
|
-
* available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
|
|
34
|
-
* information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
30
|
+
* <p>Returns a list of malware scans. Each member account can view the malware scans for their own accounts. An administrator can view the malware scans for all the member accounts.</p> <p>There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
35
31
|
* @example
|
|
36
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
37
33
|
* ```javascript
|
|
@@ -27,11 +27,7 @@ declare const DescribeOrganizationConfigurationCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Returns information about the account selected as the delegated administrator for
|
|
31
|
-
* GuardDuty.</p>
|
|
32
|
-
* <p>There might be regional differences because some data sources might not be
|
|
33
|
-
* available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
|
|
34
|
-
* information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
30
|
+
* <p>Returns information about the account selected as the delegated administrator for GuardDuty.</p> <p>There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
35
31
|
* @example
|
|
36
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
37
33
|
* ```javascript
|
|
@@ -69,7 +65,7 @@ declare const DescribeOrganizationConfigurationCommand_base: {
|
|
|
69
65
|
* // },
|
|
70
66
|
* // Features: [ // OrganizationFeaturesConfigurationsResults
|
|
71
67
|
* // { // OrganizationFeatureConfigurationResult
|
|
72
|
-
* // Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "
|
|
68
|
+
* // Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "RUNTIME_MONITORING",
|
|
73
69
|
* // AutoEnable: "NEW" || "NONE" || "ALL",
|
|
74
70
|
* // AdditionalConfiguration: [ // OrganizationAdditionalConfigurationResults
|
|
75
71
|
* // { // OrganizationAdditionalConfigurationResult
|
|
@@ -27,8 +27,7 @@ declare const DescribePublishingDestinationCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Returns information about the publishing destination specified by the provided
|
|
31
|
-
* <code>destinationId</code>.</p>
|
|
30
|
+
* <p>Returns information about the publishing destination specified by the provided <code>destinationId</code>.</p>
|
|
32
31
|
* @example
|
|
33
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
33
|
* ```javascript
|
|
@@ -27,9 +27,7 @@ declare const DisableOrganizationAdminAccountCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Removes the existing GuardDuty delegated
|
|
31
|
-
* administrator of the organization. Only the organization's management account can run this
|
|
32
|
-
* API operation.</p>
|
|
30
|
+
* <p>Removes the existing GuardDuty delegated administrator of the organization. Only the organization's management account can run this API operation.</p>
|
|
33
31
|
* @example
|
|
34
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
33
|
* ```javascript
|
|
@@ -27,16 +27,7 @@ declare const DisassociateFromAdministratorAccountCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Disassociates the current GuardDuty member account from its administrator account.</p>
|
|
31
|
-
* <p>When you
|
|
32
|
-
* disassociate an invited member from a GuardDuty delegated administrator, the member account details
|
|
33
|
-
* obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is
|
|
34
|
-
* done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
|
|
35
|
-
* remove the details associated with a member account, the delegated administrator must invoke the
|
|
36
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
|
|
37
|
-
* <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to
|
|
38
|
-
* <code>ALL</code>, you'll receive an error if you attempt to disable GuardDuty in a member
|
|
39
|
-
* account.</p>
|
|
30
|
+
* <p>Disassociates the current GuardDuty member account from its administrator account.</p> <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p> <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to <code>ALL</code>, you'll receive an error if you attempt to disable GuardDuty in a member account.</p>
|
|
40
31
|
* @example
|
|
41
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
42
33
|
* ```javascript
|
|
@@ -27,13 +27,7 @@ declare const DisassociateFromMasterAccountCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Disassociates the current GuardDuty member account from its administrator account.</p>
|
|
31
|
-
* <p>When you
|
|
32
|
-
* disassociate an invited member from a GuardDuty delegated administrator, the member account details
|
|
33
|
-
* obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is
|
|
34
|
-
* done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
|
|
35
|
-
* remove the details associated with a member account, the delegated administrator must invoke the
|
|
36
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API.</p>
|
|
30
|
+
* <p>Disassociates the current GuardDuty member account from its administrator account.</p> <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API.</p>
|
|
37
31
|
*
|
|
38
32
|
* @deprecated This operation is deprecated, use DisassociateFromAdministratorAccount instead.
|
|
39
33
|
* @example
|
|
@@ -27,25 +27,7 @@ declare const DisassociateMembersCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Disassociates GuardDuty member accounts (from the current administrator account) specified
|
|
31
|
-
* by the account IDs.</p>
|
|
32
|
-
* <p>When you
|
|
33
|
-
* disassociate an invited member from a GuardDuty delegated administrator, the member account details
|
|
34
|
-
* obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is
|
|
35
|
-
* done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
|
|
36
|
-
* remove the details associated with a member account, the delegated administrator must invoke the
|
|
37
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
|
|
38
|
-
* <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to
|
|
39
|
-
* <code>ALL</code>, you'll receive an error if you attempt to disassociate a member account
|
|
40
|
-
* before removing them from your organization.</p>
|
|
41
|
-
* <p>If you disassociate a member account that was added by invitation, the member account details
|
|
42
|
-
* obtained from this API, including the associated email addresses, will be retained.
|
|
43
|
-
* This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
|
|
44
|
-
* remove the details associated with a member account, the delegated administrator must invoke the
|
|
45
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
|
|
46
|
-
* <p>When the member accounts added through Organizations are later disassociated, you (administrator)
|
|
47
|
-
* can't invite them by calling the InviteMembers API. You can create an association with these
|
|
48
|
-
* member accounts again only by calling the CreateMembers API.</p>
|
|
30
|
+
* <p>Disassociates GuardDuty member accounts (from the current administrator account) specified by the account IDs.</p> <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p> <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to <code>ALL</code>, you'll receive an error if you attempt to disassociate a member account before removing them from your organization.</p> <p>If you disassociate a member account that was added by invitation, the member account details obtained from this API, including the associated email addresses, will be retained. This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p> <p>When the member accounts added through Organizations are later disassociated, you (administrator) can't invite them by calling the InviteMembers API. You can create an association with these member accounts again only by calling the CreateMembers API.</p>
|
|
49
31
|
* @example
|
|
50
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
51
33
|
* ```javascript
|
|
@@ -27,9 +27,7 @@ declare const EnableOrganizationAdminAccountCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Designates an Amazon Web Services account within the organization as your GuardDuty delegated
|
|
31
|
-
* administrator. Only the organization's management account can run this
|
|
32
|
-
* API operation.</p>
|
|
30
|
+
* <p>Designates an Amazon Web Services account within the organization as your GuardDuty delegated administrator. Only the organization's management account can run this API operation.</p>
|
|
33
31
|
* @example
|
|
34
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
33
|
* ```javascript
|
|
@@ -27,22 +27,7 @@ declare const GetAdministratorAccountCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Provides the details of the GuardDuty administrator account associated with the current
|
|
31
|
-
* GuardDuty member account.</p>
|
|
32
|
-
* <p>Based on the type of account that runs this API, the following list shows how the API behavior varies:</p>
|
|
33
|
-
* <ul>
|
|
34
|
-
* <li>
|
|
35
|
-
* <p>When the GuardDuty administrator account runs this API, it will return success (<code>HTTP 200</code>) but no content.</p>
|
|
36
|
-
* </li>
|
|
37
|
-
* <li>
|
|
38
|
-
* <p>When a member account runs this API, it will return the details of the GuardDuty administrator account that is associated
|
|
39
|
-
* with this calling member account.</p>
|
|
40
|
-
* </li>
|
|
41
|
-
* <li>
|
|
42
|
-
* <p>When an individual account (not associated with an organization) runs this API, it will return success (<code>HTTP 200</code>)
|
|
43
|
-
* but no content.</p>
|
|
44
|
-
* </li>
|
|
45
|
-
* </ul>
|
|
30
|
+
* <p>Provides the details of the GuardDuty administrator account associated with the current GuardDuty member account.</p> <p>Based on the type of account that runs this API, the following list shows how the API behavior varies:</p> <ul> <li> <p>When the GuardDuty administrator account runs this API, it will return success (<code>HTTP 200</code>) but no content.</p> </li> <li> <p>When a member account runs this API, it will return the details of the GuardDuty administrator account that is associated with this calling member account.</p> </li> <li> <p>When an individual account (not associated with an organization) runs this API, it will return success (<code>HTTP 200</code>) but no content.</p> </li> </ul>
|
|
46
31
|
* @example
|
|
47
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
48
33
|
* ```javascript
|
|
@@ -27,10 +27,7 @@ declare const GetCoverageStatisticsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Retrieves aggregated statistics for your account. If you are a GuardDuty administrator, you
|
|
31
|
-
* can retrieve the statistics for all the resources associated with the active member accounts
|
|
32
|
-
* in your organization who have enabled Runtime Monitoring and have the GuardDuty security agent running
|
|
33
|
-
* on their resources.</p>
|
|
30
|
+
* <p>Retrieves aggregated statistics for your account. If you are a GuardDuty administrator, you can retrieve the statistics for all the resources associated with the active member accounts in your organization who have enabled Runtime Monitoring and have the GuardDuty security agent running on their resources.</p>
|
|
34
31
|
* @example
|
|
35
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
36
33
|
* ```javascript
|
|
@@ -44,7 +41,7 @@ declare const GetCoverageStatisticsCommand_base: {
|
|
|
44
41
|
* FilterCriteria: { // CoverageFilterCriteria
|
|
45
42
|
* FilterCriterion: [ // CoverageFilterCriterionList
|
|
46
43
|
* { // CoverageFilterCriterion
|
|
47
|
-
* CriterionKey: "ACCOUNT_ID" || "
|
|
44
|
+
* CriterionKey: "ACCOUNT_ID" || "RESOURCE_TYPE" || "COVERAGE_STATUS" || "ADDON_VERSION" || "CLUSTER_NAME" || "ECS_CLUSTER_NAME" || "MANAGEMENT_TYPE" || "EKS_CLUSTER_NAME" || "AGENT_VERSION" || "INSTANCE_ID" || "CLUSTER_ARN",
|
|
48
45
|
* FilterCondition: { // CoverageFilterCondition
|
|
49
46
|
* Equals: [ // Equals
|
|
50
47
|
* "STRING_VALUE",
|
|
@@ -27,10 +27,7 @@ declare const GetDetectorCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>Retrieves a GuardDuty detector specified by the detectorId.</p>
|
|
31
|
-
* <p>There might be regional differences because some data sources might not be
|
|
32
|
-
* available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
|
|
33
|
-
* information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
30
|
+
* <p>Retrieves a GuardDuty detector specified by the detectorId.</p> <p>There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
34
31
|
* @example
|
|
35
32
|
* Use a bare-bones client and the command you need to make an API call.
|
|
36
33
|
* ```javascript
|
|
@@ -83,7 +80,7 @@ declare const GetDetectorCommand_base: {
|
|
|
83
80
|
* // },
|
|
84
81
|
* // Features: [ // DetectorFeatureConfigurationsResults
|
|
85
82
|
* // { // DetectorFeatureConfigurationResult
|
|
86
|
-
* // Name: "FLOW_LOGS" || "CLOUD_TRAIL" || "DNS_LOGS" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "
|
|
83
|
+
* // Name: "FLOW_LOGS" || "CLOUD_TRAIL" || "DNS_LOGS" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "RUNTIME_MONITORING",
|
|
87
84
|
* // Status: "ENABLED" || "DISABLED",
|
|
88
85
|
* // UpdatedAt: new Date("TIMESTAMP"),
|
|
89
86
|
* // AdditionalConfiguration: [ // DetectorAdditionalConfigurationResults
|