@aws-sdk/client-guardduty 3.1024.0 → 3.1025.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (76) hide show
  1. package/README.md +1 -20
  2. package/dist-cjs/schemas/schemas_0.js +97 -100
  3. package/dist-es/schemas/schemas_0.js +97 -100
  4. package/dist-types/GuardDuty.d.ts +1 -20
  5. package/dist-types/GuardDutyClient.d.ts +1 -20
  6. package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +1 -2
  7. package/dist-types/commands/ArchiveFindingsCommand.d.ts +1 -5
  8. package/dist-types/commands/CreateDetectorCommand.d.ts +2 -24
  9. package/dist-types/commands/CreateFilterCommand.d.ts +1 -2
  10. package/dist-types/commands/CreateIPSetCommand.d.ts +1 -4
  11. package/dist-types/commands/CreateMalwareProtectionPlanCommand.d.ts +1 -3
  12. package/dist-types/commands/CreateMembersCommand.d.ts +1 -20
  13. package/dist-types/commands/CreatePublishingDestinationCommand.d.ts +1 -2
  14. package/dist-types/commands/CreateSampleFindingsCommand.d.ts +1 -3
  15. package/dist-types/commands/CreateThreatEntitySetCommand.d.ts +1 -5
  16. package/dist-types/commands/CreateThreatIntelSetCommand.d.ts +1 -3
  17. package/dist-types/commands/CreateTrustedEntitySetCommand.d.ts +1 -6
  18. package/dist-types/commands/DeclineInvitationsCommand.d.ts +1 -2
  19. package/dist-types/commands/DeleteIPSetCommand.d.ts +1 -2
  20. package/dist-types/commands/DeleteInvitationsCommand.d.ts +1 -2
  21. package/dist-types/commands/DeleteMalwareProtectionPlanCommand.d.ts +1 -3
  22. package/dist-types/commands/DeleteMembersCommand.d.ts +1 -5
  23. package/dist-types/commands/DeleteThreatEntitySetCommand.d.ts +1 -2
  24. package/dist-types/commands/DeleteTrustedEntitySetCommand.d.ts +1 -2
  25. package/dist-types/commands/DescribeMalwareScansCommand.d.ts +1 -5
  26. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +2 -6
  27. package/dist-types/commands/DescribePublishingDestinationCommand.d.ts +1 -2
  28. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +1 -3
  29. package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +1 -10
  30. package/dist-types/commands/DisassociateFromMasterAccountCommand.d.ts +1 -7
  31. package/dist-types/commands/DisassociateMembersCommand.d.ts +1 -19
  32. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +1 -3
  33. package/dist-types/commands/GetAdministratorAccountCommand.d.ts +1 -16
  34. package/dist-types/commands/GetCoverageStatisticsCommand.d.ts +2 -5
  35. package/dist-types/commands/GetDetectorCommand.d.ts +2 -5
  36. package/dist-types/commands/GetFindingsCommand.d.ts +43 -43
  37. package/dist-types/commands/GetFindingsStatisticsCommand.d.ts +1 -6
  38. package/dist-types/commands/GetInvitationsCountCommand.d.ts +1 -2
  39. package/dist-types/commands/GetMalwareProtectionPlanCommand.d.ts +1 -2
  40. package/dist-types/commands/GetMalwareScanCommand.d.ts +1 -5
  41. package/dist-types/commands/GetMalwareScanSettingsCommand.d.ts +1 -4
  42. package/dist-types/commands/GetMasterAccountCommand.d.ts +1 -2
  43. package/dist-types/commands/GetMemberDetectorsCommand.d.ts +2 -5
  44. package/dist-types/commands/GetMembersCommand.d.ts +1 -2
  45. package/dist-types/commands/GetOrganizationStatisticsCommand.d.ts +2 -5
  46. package/dist-types/commands/GetRemainingFreeTrialDaysCommand.d.ts +2 -3
  47. package/dist-types/commands/GetUsageStatisticsCommand.d.ts +4 -7
  48. package/dist-types/commands/InviteMembersCommand.d.ts +1 -26
  49. package/dist-types/commands/ListCoverageCommand.d.ts +4 -7
  50. package/dist-types/commands/ListFindingsCommand.d.ts +1 -3
  51. package/dist-types/commands/ListIPSetsCommand.d.ts +1 -3
  52. package/dist-types/commands/ListInvitationsCommand.d.ts +1 -2
  53. package/dist-types/commands/ListMalwareProtectionPlansCommand.d.ts +1 -2
  54. package/dist-types/commands/ListMalwareScansCommand.d.ts +1 -2
  55. package/dist-types/commands/ListMembersCommand.d.ts +1 -2
  56. package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +1 -3
  57. package/dist-types/commands/ListPublishingDestinationsCommand.d.ts +1 -2
  58. package/dist-types/commands/ListTagsForResourceCommand.d.ts +1 -4
  59. package/dist-types/commands/ListThreatEntitySetsCommand.d.ts +1 -3
  60. package/dist-types/commands/ListThreatIntelSetsCommand.d.ts +1 -3
  61. package/dist-types/commands/ListTrustedEntitySetsCommand.d.ts +1 -3
  62. package/dist-types/commands/SendObjectMalwareScanCommand.d.ts +1 -3
  63. package/dist-types/commands/StartMalwareScanCommand.d.ts +1 -6
  64. package/dist-types/commands/StartMonitoringMembersCommand.d.ts +1 -2
  65. package/dist-types/commands/StopMonitoringMembersCommand.d.ts +1 -6
  66. package/dist-types/commands/UpdateDetectorCommand.d.ts +2 -10
  67. package/dist-types/commands/UpdateMalwareScanSettingsCommand.d.ts +1 -4
  68. package/dist-types/commands/UpdateMemberDetectorsCommand.d.ts +2 -10
  69. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +2 -11
  70. package/dist-types/commands/UpdatePublishingDestinationCommand.d.ts +1 -2
  71. package/dist-types/index.d.ts +1 -20
  72. package/dist-types/models/models_0.d.ts +351 -1308
  73. package/dist-types/models/models_1.d.ts +151 -637
  74. package/dist-types/ts3.4/models/models_0.d.ts +8 -8
  75. package/dist-types/ts3.4/models/models_1.d.ts +1 -1
  76. package/package.json +1 -1
@@ -9,14 +9,12 @@ export interface AcceptAdministratorInvitationRequest {
9
9
  */
10
10
  DetectorId: string | undefined;
11
11
  /**
12
- * <p>The account ID of the GuardDuty administrator account whose invitation you're
13
- * accepting.</p>
12
+ * <p>The account ID of the GuardDuty administrator account whose invitation you're accepting.</p>
14
13
  * @public
15
14
  */
16
15
  AdministratorId: string | undefined;
17
16
  /**
18
- * <p>The value that is used to validate the administrator account to the member
19
- * account.</p>
17
+ * <p>The value that is used to validate the administrator account to the member account.</p>
20
18
  * @public
21
19
  */
22
20
  InvitationId: string | undefined;
@@ -32,21 +30,17 @@ export interface AcceptAdministratorInvitationResponse {
32
30
  */
33
31
  export interface AcceptInvitationRequest {
34
32
  /**
35
- * <p>The unique ID of the detector of the GuardDuty member account.</p>
36
- * <p>To find the <code>detectorId</code> in the current Region, see the
37
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
33
+ * <p>The unique ID of the detector of the GuardDuty member account.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
38
34
  * @public
39
35
  */
40
36
  DetectorId: string | undefined;
41
37
  /**
42
- * <p>The account ID of the GuardDuty administrator account whose invitation you're
43
- * accepting.</p>
38
+ * <p>The account ID of the GuardDuty administrator account whose invitation you're accepting.</p>
44
39
  * @public
45
40
  */
46
41
  MasterId: string | undefined;
47
42
  /**
48
- * <p>The value that is used to validate the administrator account to the member
49
- * account.</p>
43
+ * <p>The value that is used to validate the administrator account to the member account.</p>
50
44
  * @public
51
45
  */
52
46
  InvitationId: string | undefined;
@@ -63,14 +57,12 @@ export interface AcceptInvitationResponse {
63
57
  */
64
58
  export interface AccessControlList {
65
59
  /**
66
- * <p>A value that indicates whether public read access for the bucket is enabled through an
67
- * Access Control List (ACL).</p>
60
+ * <p>A value that indicates whether public read access for the bucket is enabled through an Access Control List (ACL).</p>
68
61
  * @public
69
62
  */
70
63
  AllowsPublicReadAccess?: boolean | undefined;
71
64
  /**
72
- * <p>A value that indicates whether public write access for the bucket is enabled through an
73
- * Access Control List (ACL).</p>
65
+ * <p>A value that indicates whether public write access for the bucket is enabled through an Access Control List (ACL).</p>
74
66
  * @public
75
67
  */
76
68
  AllowsPublicWriteAccess?: boolean | undefined;
@@ -149,42 +141,13 @@ export interface AccountDetail {
149
141
  */
150
142
  AccountId: string | undefined;
151
143
  /**
152
- * <p>The email address of the member account. The following list includes the
153
- * rules for a valid email address:</p>
154
- * <ul>
155
- * <li>
156
- * <p>The email address must be a minimum of 6 and a maximum of 64 characters long.</p>
157
- * </li>
158
- * <li>
159
- * <p>All characters must be 7-bit ASCII characters.</p>
160
- * </li>
161
- * <li>
162
- * <p>There must be one and only one @ symbol, which separates the local name from the domain name.</p>
163
- * </li>
164
- * <li>
165
- * <p>The local name can't contain any of the following characters:</p>
166
- * <p>whitespace, " ' ( ) < > [ ] : ' , \ | % &</p>
167
- * </li>
168
- * <li>
169
- * <p>The local name can't begin with a dot (.).</p>
170
- * </li>
171
- * <li>
172
- * <p>The domain name can consist of only the characters [a-z], [A-Z], [0-9], hyphen (-), or dot (.).</p>
173
- * </li>
174
- * <li>
175
- * <p>The domain name can't begin or end with a dot (.) or hyphen (-).</p>
176
- * </li>
177
- * <li>
178
- * <p>The domain name must contain at least one dot. </p>
179
- * </li>
180
- * </ul>
144
+ * <p>The email address of the member account. The following list includes the rules for a valid email address:</p> <ul> <li> <p>The email address must be a minimum of 6 and a maximum of 64 characters long.</p> </li> <li> <p>All characters must be 7-bit ASCII characters.</p> </li> <li> <p>There must be one and only one @ symbol, which separates the local name from the domain name.</p> </li> <li> <p>The local name can't contain any of the following characters:</p> <p>whitespace, " ' ( ) &lt; &gt; [ ] : ' , \ | % &amp;</p> </li> <li> <p>The local name can't begin with a dot (.).</p> </li> <li> <p>The domain name can consist of only the characters [a-z], [A-Z], [0-9], hyphen (-), or dot (.).</p> </li> <li> <p>The domain name can't begin or end with a dot (.) or hyphen (-).</p> </li> <li> <p>The domain name must contain at least one dot. </p> </li> </ul>
181
145
  * @public
182
146
  */
183
147
  Email: string | undefined;
184
148
  }
185
149
  /**
186
- * <p>Contains information about which data sources are enabled for the GuardDuty member
187
- * account.</p>
150
+ * <p>Contains information about which data sources are enabled for the GuardDuty member account.</p>
188
151
  * @public
189
152
  */
190
153
  export interface DataSourceFreeTrial {
@@ -195,8 +158,7 @@ export interface DataSourceFreeTrial {
195
158
  FreeTrialDaysRemaining?: number | undefined;
196
159
  }
197
160
  /**
198
- * <p>Provides details about the Kubernetes resources when it is enabled as a data
199
- * source.</p>
161
+ * <p>Provides details about the Kubernetes resources when it is enabled as a data source.</p>
200
162
  * @public
201
163
  */
202
164
  export interface KubernetesDataSourceFreeTrial {
@@ -212,15 +174,13 @@ export interface KubernetesDataSourceFreeTrial {
212
174
  */
213
175
  export interface MalwareProtectionDataSourceFreeTrial {
214
176
  /**
215
- * <p>Describes whether Malware Protection for EC2 instances with findings is enabled as a data
216
- * source.</p>
177
+ * <p>Describes whether Malware Protection for EC2 instances with findings is enabled as a data source.</p>
217
178
  * @public
218
179
  */
219
180
  ScanEc2InstanceWithFindings?: DataSourceFreeTrial | undefined;
220
181
  }
221
182
  /**
222
- * <p>Contains information about which data sources are enabled for the GuardDuty member
223
- * account.</p>
183
+ * <p>Contains information about which data sources are enabled for the GuardDuty member account.</p>
224
184
  * @public
225
185
  */
226
186
  export interface DataSourcesFreeTrial {
@@ -295,9 +255,7 @@ export interface AccountFreeTrialInfo {
295
255
  Features?: FreeTrialFeatureConfigurationResult[] | undefined;
296
256
  }
297
257
  /**
298
- * <p>Contains information on how the bucker owner's S3 Block Public Access settings are being
299
- * applied to the S3 bucket. See <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html">S3 Block Public
300
- * Access</a> for more information. </p>
258
+ * <p>Contains information on how the bucker owner's S3 Block Public Access settings are being applied to the S3 bucket. See <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html">S3 Block Public Access</a> for more information. </p>
301
259
  * @public
302
260
  */
303
261
  export interface BlockPublicAccess {
@@ -376,10 +334,7 @@ export interface RemoteAccountDetails {
376
334
  */
377
335
  AccountId?: string | undefined;
378
336
  /**
379
- * <p>Details on whether the Amazon Web Services account of the remote API caller is related to your GuardDuty
380
- * environment. If this value is <code>True</code> the API caller is affiliated to your account
381
- * in some way. If it is <code>False</code> the API caller is from outside your
382
- * environment.</p>
337
+ * <p>Details on whether the Amazon Web Services account of the remote API caller is related to your GuardDuty environment. If this value is <code>True</code> the API caller is affiliated to your account in some way. If it is <code>False</code> the API caller is from outside your environment.</p>
383
338
  * @public
384
339
  */
385
340
  Affiliated?: boolean | undefined;
@@ -412,8 +367,7 @@ export interface Country {
412
367
  CountryName?: string | undefined;
413
368
  }
414
369
  /**
415
- * <p>Contains information about the location of the remote IP address. By default, GuardDuty
416
- * returns <code>Geolocation</code> with <code>Lat</code> and <code>Lon</code> as <code>0.0</code>.</p>
370
+ * <p>Contains information about the location of the remote IP address. By default, GuardDuty returns <code>Geolocation</code> with <code>Lat</code> and <code>Lon</code> as <code>0.0</code>.</p>
417
371
  * @public
418
372
  */
419
373
  export interface GeoLocation {
@@ -434,8 +388,7 @@ export interface GeoLocation {
434
388
  */
435
389
  export interface Organization {
436
390
  /**
437
- * <p>The Autonomous System Number (ASN) of the internet provider of the remote IP
438
- * address.</p>
391
+ * <p>The Autonomous System Number (ASN) of the internet provider of the remote IP address.</p>
439
392
  * @public
440
393
  */
441
394
  Asn?: string | undefined;
@@ -532,14 +485,12 @@ export interface AwsApiCallAction {
532
485
  */
533
486
  ServiceName?: string | undefined;
534
487
  /**
535
- * <p>The details of the Amazon Web Services account that made the API call. This field appears if the call
536
- * was made from outside your account.</p>
488
+ * <p>The details of the Amazon Web Services account that made the API call. This field appears if the call was made from outside your account.</p>
537
489
  * @public
538
490
  */
539
491
  RemoteAccountDetails?: RemoteAccountDetails | undefined;
540
492
  /**
541
- * <p>The details of the Amazon Web Services account that made the API call. This field identifies the
542
- * resources that were affected by this API call.</p>
493
+ * <p>The details of the Amazon Web Services account that made the API call. This field identifies the resources that were affected by this API call.</p>
543
494
  * @public
544
495
  */
545
496
  AffectedResources?: Record<string, string> | undefined;
@@ -555,8 +506,7 @@ export interface DnsRequestAction {
555
506
  */
556
507
  Domain?: string | undefined;
557
508
  /**
558
- * <p>The network connection protocol observed in the activity that prompted GuardDuty to
559
- * generate the finding.</p>
509
+ * <p>The network connection protocol observed in the activity that prompted GuardDuty to generate the finding.</p>
560
510
  * @public
561
511
  */
562
512
  Protocol?: string | undefined;
@@ -566,9 +516,7 @@ export interface DnsRequestAction {
566
516
  */
567
517
  Blocked?: boolean | undefined;
568
518
  /**
569
- * <p>The second and top level domain involved in the
570
- * activity that potentially prompted GuardDuty to generate this finding.
571
- * For a list of top-level and second-level domains, see <a href="https://publicsuffix.org/">public suffix list</a>.</p>
519
+ * <p>The second and top level domain involved in the activity that potentially prompted GuardDuty to generate this finding. For a list of top-level and second-level domains, see <a href="https://publicsuffix.org/">public suffix list</a>.</p>
572
520
  * @public
573
521
  */
574
522
  DomainWithSuffix?: string | undefined;
@@ -594,51 +542,50 @@ export interface KubernetesApiCallAction {
594
542
  */
595
543
  Verb?: string | undefined;
596
544
  /**
597
- * <p>The IP of the Kubernetes API caller and the IPs of any proxies or load balancers between
598
- * the caller and the API endpoint.</p>
545
+ * <p>The resource component in the Kubernetes API call action.</p>
599
546
  * @public
600
547
  */
601
- SourceIps?: string[] | undefined;
548
+ Resource?: string | undefined;
602
549
  /**
603
- * <p>The user agent of the caller of the Kubernetes API.</p>
550
+ * <p>The name of the sub-resource in the Kubernetes API call action.</p>
604
551
  * @public
605
552
  */
606
- UserAgent?: string | undefined;
553
+ Subresource?: string | undefined;
607
554
  /**
608
- * <p>Contains information about the remote IP address of the connection.</p>
555
+ * <p>The name of the namespace where the Kubernetes API call action takes place.</p>
609
556
  * @public
610
557
  */
611
- RemoteIpDetails?: RemoteIpDetails | undefined;
558
+ Namespace?: string | undefined;
612
559
  /**
613
- * <p>The resulting HTTP response code of the Kubernetes API call action.</p>
560
+ * <p>The name of the resource in the Kubernetes API call action.</p>
614
561
  * @public
615
562
  */
616
- StatusCode?: number | undefined;
563
+ ResourceName?: string | undefined;
617
564
  /**
618
- * <p>Parameters related to the Kubernetes API call action.</p>
565
+ * <p>The IP of the Kubernetes API caller and the IPs of any proxies or load balancers between the caller and the API endpoint.</p>
619
566
  * @public
620
567
  */
621
- Parameters?: string | undefined;
568
+ SourceIps?: string[] | undefined;
622
569
  /**
623
- * <p>The resource component in the Kubernetes API call action.</p>
570
+ * <p>The user agent of the caller of the Kubernetes API.</p>
624
571
  * @public
625
572
  */
626
- Resource?: string | undefined;
573
+ UserAgent?: string | undefined;
627
574
  /**
628
- * <p>The name of the sub-resource in the Kubernetes API call action.</p>
575
+ * <p>Contains information about the remote IP address of the connection.</p>
629
576
  * @public
630
577
  */
631
- Subresource?: string | undefined;
578
+ RemoteIpDetails?: RemoteIpDetails | undefined;
632
579
  /**
633
- * <p>The name of the namespace where the Kubernetes API call action takes place.</p>
580
+ * <p>The resulting HTTP response code of the Kubernetes API call action.</p>
634
581
  * @public
635
582
  */
636
- Namespace?: string | undefined;
583
+ StatusCode?: number | undefined;
637
584
  /**
638
- * <p>The name of the resource in the Kubernetes API call action.</p>
585
+ * <p>Parameters related to the Kubernetes API call action.</p>
639
586
  * @public
640
587
  */
641
- ResourceName?: string | undefined;
588
+ Parameters?: string | undefined;
642
589
  }
643
590
  /**
644
591
  * <p>Information about the Kubernetes API for which you check if you have permission to call.</p>
@@ -646,8 +593,7 @@ export interface KubernetesApiCallAction {
646
593
  */
647
594
  export interface KubernetesPermissionCheckedDetails {
648
595
  /**
649
- * <p>The verb component of the Kubernetes API call. For example, when you check whether or not you have the permission
650
- * to call the <code>CreatePod</code> API, the verb component will be <code>Create</code>.</p>
596
+ * <p>The verb component of the Kubernetes API call. For example, when you check whether or not you have the permission to call the <code>CreatePod</code> API, the verb component will be <code>Create</code>.</p>
651
597
  * @public
652
598
  */
653
599
  Verb?: string | undefined;
@@ -688,14 +634,12 @@ export interface KubernetesRoleBindingDetails {
688
634
  */
689
635
  Uid?: string | undefined;
690
636
  /**
691
- * <p>The name of the role being referenced. This must match the name of the <code>Role</code>
692
- * or <code>ClusterRole</code> that you want to bind to.</p>
637
+ * <p>The name of the role being referenced. This must match the name of the <code>Role</code> or <code>ClusterRole</code> that you want to bind to.</p>
693
638
  * @public
694
639
  */
695
640
  RoleRefName?: string | undefined;
696
641
  /**
697
- * <p>The type of the role being referenced. This could be either <code>Role</code> or
698
- * <code>ClusterRole</code>.</p>
642
+ * <p>The type of the role being referenced. This could be either <code>Role</code> or <code>ClusterRole</code>.</p>
699
643
  * @public
700
644
  */
701
645
  RoleRefKind?: string | undefined;
@@ -868,21 +812,18 @@ export interface LoginAttribute {
868
812
  */
869
813
  Application?: string | undefined;
870
814
  /**
871
- * <p>Represents the sum of failed (unsuccessful) login attempts made to establish a connection
872
- * to the database instance.</p>
815
+ * <p>Represents the sum of failed (unsuccessful) login attempts made to establish a connection to the database instance.</p>
873
816
  * @public
874
817
  */
875
818
  FailedLoginAttempts?: number | undefined;
876
819
  /**
877
- * <p>Represents the sum of successful connections (a correct combination of login attributes)
878
- * made to the database instance by the actor.</p>
820
+ * <p>Represents the sum of successful connections (a correct combination of login attributes) made to the database instance by the actor.</p>
879
821
  * @public
880
822
  */
881
823
  SuccessfulLoginAttempts?: number | undefined;
882
824
  }
883
825
  /**
884
- * <p>Indicates that a login attempt was made to the potentially compromised database from a
885
- * remote IP address.</p>
826
+ * <p>Indicates that a login attempt was made to the potentially compromised database from a remote IP address.</p>
886
827
  * @public
887
828
  */
888
829
  export interface RdsLoginAttemptAction {
@@ -932,11 +873,6 @@ export interface Action {
932
873
  * @public
933
874
  */
934
875
  KubernetesApiCallAction?: KubernetesApiCallAction | undefined;
935
- /**
936
- * <p>Information about <code>RDS_LOGIN_ATTEMPT</code> action described in this finding.</p>
937
- * @public
938
- */
939
- RdsLoginAttemptAction?: RdsLoginAttemptAction | undefined;
940
876
  /**
941
877
  * <p>Information whether the user has the permission to use a specific Kubernetes API.</p>
942
878
  * @public
@@ -952,10 +888,14 @@ export interface Action {
952
888
  * @public
953
889
  */
954
890
  KubernetesRoleDetails?: KubernetesRoleDetails | undefined;
891
+ /**
892
+ * <p>Information about <code>RDS_LOGIN_ATTEMPT</code> action described in this finding.</p>
893
+ * @public
894
+ */
895
+ RdsLoginAttemptAction?: RdsLoginAttemptAction | undefined;
955
896
  }
956
897
  /**
957
- * <p>Contains information about a process involved in a GuardDuty finding, including process identification,
958
- * execution details, and file information.</p>
898
+ * <p>Contains information about a process involved in a GuardDuty finding, including process identification, execution details, and file information.</p>
959
899
  * @public
960
900
  */
961
901
  export interface ActorProcess {
@@ -970,8 +910,7 @@ export interface ActorProcess {
970
910
  */
971
911
  Path: string | undefined;
972
912
  /**
973
- * <p>The SHA256 hash of the process executable file, which can be used for identification
974
- * and verification purposes.</p>
913
+ * <p>The SHA256 hash of the process executable file, which can be used for identification and verification purposes.</p>
975
914
  * @public
976
915
  */
977
916
  Sha256?: string | undefined;
@@ -987,20 +926,17 @@ export interface Session {
987
926
  */
988
927
  Uid?: string | undefined;
989
928
  /**
990
- * <p>Indicates whether or not multi-factor authencation (MFA) was used during authentication.</p>
991
- * <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.attributes.mfaAuthenticated</code>.</p>
929
+ * <p>Indicates whether or not multi-factor authencation (MFA) was used during authentication.</p> <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.attributes.mfaAuthenticated</code>.</p>
992
930
  * @public
993
931
  */
994
932
  MfaStatus?: MfaStatus | undefined;
995
933
  /**
996
- * <p>The timestamp for when the session was created.</p>
997
- * <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.attributes.creationDate</code>.</p>
934
+ * <p>The timestamp for when the session was created.</p> <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.attributes.creationDate</code>.</p>
998
935
  * @public
999
936
  */
1000
937
  CreatedTime?: Date | undefined;
1001
938
  /**
1002
- * <p>Identifier of the session issuer.</p>
1003
- * <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.sessionIssuer.arn</code>.</p>
939
+ * <p>Identifier of the session issuer.</p> <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.sessionIssuer.arn</code>.</p>
1004
940
  * @public
1005
941
  */
1006
942
  Issuer?: string | undefined;
@@ -1057,9 +993,7 @@ export interface Actor {
1057
993
  */
1058
994
  Session?: Session | undefined;
1059
995
  /**
1060
- * <p>Contains information about the process associated with the threat actor.
1061
- * This includes details such as process name, path, execution time, and
1062
- * unique identifiers that help track the actor's activities within the system.</p>
996
+ * <p>Contains information about the process associated with the threat actor. This includes details such as process name, path, execution time, and unique identifiers that help track the actor's activities within the system.</p>
1063
997
  * @public
1064
998
  */
1065
999
  Process?: ActorProcess | undefined;
@@ -1097,8 +1031,7 @@ export interface AddonDetails {
1097
1031
  AddonStatus?: string | undefined;
1098
1032
  }
1099
1033
  /**
1100
- * <p>The account within the organization specified as the GuardDuty delegated
1101
- * administrator.</p>
1034
+ * <p>The account within the organization specified as the GuardDuty delegated administrator.</p>
1102
1035
  * @public
1103
1036
  */
1104
1037
  export interface AdminAccount {
@@ -1124,8 +1057,7 @@ export interface Administrator {
1124
1057
  */
1125
1058
  AccountId?: string | undefined;
1126
1059
  /**
1127
- * <p>The value that is used to validate the administrator account to the member
1128
- * account.</p>
1060
+ * <p>The value that is used to validate the administrator account to the member account.</p>
1129
1061
  * @public
1130
1062
  */
1131
1063
  InvitationId?: string | undefined;
@@ -1189,8 +1121,7 @@ export interface AnomalyObject {
1189
1121
  */
1190
1122
  export interface AnomalyUnusual {
1191
1123
  /**
1192
- * <p>The behavior of the anomalous activity that caused GuardDuty to
1193
- * generate the finding.</p>
1124
+ * <p>The behavior of the anomalous activity that caused GuardDuty to generate the finding.</p>
1194
1125
  * @public
1195
1126
  */
1196
1127
  Behavior?: Record<string, Record<string, AnomalyObject>> | undefined;
@@ -1216,10 +1147,7 @@ export interface Anomaly {
1216
1147
  */
1217
1148
  export interface ArchiveFindingsRequest {
1218
1149
  /**
1219
- * <p>The ID of the detector that specifies the GuardDuty service whose findings you want to
1220
- * archive.</p>
1221
- * <p>To find the <code>detectorId</code> in the current Region, see the
1222
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
1150
+ * <p>The ID of the detector that specifies the GuardDuty service whose findings you want to archive.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
1223
1151
  * @public
1224
1152
  */
1225
1153
  DetectorId: string | undefined;
@@ -1235,8 +1163,7 @@ export interface ArchiveFindingsRequest {
1235
1163
  export interface ArchiveFindingsResponse {
1236
1164
  }
1237
1165
  /**
1238
- * <p>Contains information about the Autonomous System (AS) associated with the network
1239
- * endpoints involved in an attack sequence.</p>
1166
+ * <p>Contains information about the Autonomous System (AS) associated with the network endpoints involved in an attack sequence.</p>
1240
1167
  * @public
1241
1168
  */
1242
1169
  export interface AutonomousSystem {
@@ -1252,14 +1179,12 @@ export interface AutonomousSystem {
1252
1179
  Number: number | undefined;
1253
1180
  }
1254
1181
  /**
1255
- * <p>Contains information about the Auto Scaling Group involved in a GuardDuty finding,
1256
- * including unique identifiers of the Amazon EC2 instances.</p>
1182
+ * <p>Contains information about the Auto Scaling Group involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
1257
1183
  * @public
1258
1184
  */
1259
1185
  export interface AutoscalingAutoScalingGroup {
1260
1186
  /**
1261
- * <p>A list of unique identifiers for the compromised Amazon EC2 instances that are part of the
1262
- * same Auto Scaling Group.</p>
1187
+ * <p>A list of unique identifiers for the compromised Amazon EC2 instances that are part of the same Auto Scaling Group.</p>
1263
1188
  * @public
1264
1189
  */
1265
1190
  Ec2InstanceUids?: string[] | undefined;
@@ -1270,14 +1195,12 @@ export interface AutoscalingAutoScalingGroup {
1270
1195
  */
1271
1196
  export interface BucketPolicy {
1272
1197
  /**
1273
- * <p>A value that indicates whether public read access for the bucket is enabled through a
1274
- * bucket policy.</p>
1198
+ * <p>A value that indicates whether public read access for the bucket is enabled through a bucket policy.</p>
1275
1199
  * @public
1276
1200
  */
1277
1201
  AllowsPublicReadAccess?: boolean | undefined;
1278
1202
  /**
1279
- * <p>A value that indicates whether public write access for the bucket is enabled through a
1280
- * bucket policy.</p>
1203
+ * <p>A value that indicates whether public write access for the bucket is enabled through a bucket policy.</p>
1281
1204
  * @public
1282
1205
  */
1283
1206
  AllowsPublicWriteAccess?: boolean | undefined;
@@ -1298,21 +1221,18 @@ export interface BucketLevelPermissions {
1298
1221
  */
1299
1222
  BucketPolicy?: BucketPolicy | undefined;
1300
1223
  /**
1301
- * <p>Contains information on which account level S3 Block Public Access settings are applied to
1302
- * the S3 bucket.</p>
1224
+ * <p>Contains information on which account level S3 Block Public Access settings are applied to the S3 bucket.</p>
1303
1225
  * @public
1304
1226
  */
1305
1227
  BlockPublicAccess?: BlockPublicAccess | undefined;
1306
1228
  }
1307
1229
  /**
1308
- * <p>Contains information about the CloudFormation stack involved in a GuardDuty finding,
1309
- * including unique identifiers of the Amazon EC2 instances.</p>
1230
+ * <p>Contains information about the CloudFormation stack involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
1310
1231
  * @public
1311
1232
  */
1312
1233
  export interface CloudformationStack {
1313
1234
  /**
1314
- * <p>A list of unique identifiers for the compromised Amazon EC2 instances that were created as part of the
1315
- * same CloudFormation stack.</p>
1235
+ * <p>A list of unique identifiers for the compromised Amazon EC2 instances that were created as part of the same CloudFormation stack.</p>
1316
1236
  * @public
1317
1237
  */
1318
1238
  Ec2InstanceUids?: string[] | undefined;
@@ -1334,110 +1254,84 @@ export interface CloudTrailConfigurationResult {
1334
1254
  */
1335
1255
  export interface Condition {
1336
1256
  /**
1337
- * <p>Represents the <i>equal</i> condition to be applied to a single field when
1338
- * querying for findings.</p>
1257
+ * <p>Represents the <i>equal</i> condition to be applied to a single field when querying for findings.</p>
1339
1258
  *
1340
1259
  * @deprecated deprecated.
1341
1260
  * @public
1342
1261
  */
1343
1262
  Eq?: string[] | undefined;
1344
1263
  /**
1345
- * <p>Represents the <i>not equal</i> condition to be applied to a single field
1346
- * when querying for findings.</p>
1264
+ * <p>Represents the <i>not equal</i> condition to be applied to a single field when querying for findings.</p>
1347
1265
  *
1348
1266
  * @deprecated deprecated.
1349
1267
  * @public
1350
1268
  */
1351
1269
  Neq?: string[] | undefined;
1352
1270
  /**
1353
- * <p>Represents a <i>greater than</i> condition to be applied to a single field
1354
- * when querying for findings.</p>
1271
+ * <p>Represents a <i>greater than</i> condition to be applied to a single field when querying for findings.</p>
1355
1272
  *
1356
1273
  * @deprecated deprecated.
1357
1274
  * @public
1358
1275
  */
1359
1276
  Gt?: number | undefined;
1360
1277
  /**
1361
- * <p>Represents a <i>greater than or equal</i> condition to be applied to a
1362
- * single field when querying for findings.</p>
1278
+ * <p>Represents a <i>greater than or equal</i> condition to be applied to a single field when querying for findings.</p>
1363
1279
  *
1364
1280
  * @deprecated deprecated.
1365
1281
  * @public
1366
1282
  */
1367
1283
  Gte?: number | undefined;
1368
1284
  /**
1369
- * <p>Represents a <i>less than</i> condition to be applied to a single field when
1370
- * querying for findings.</p>
1285
+ * <p>Represents a <i>less than</i> condition to be applied to a single field when querying for findings.</p>
1371
1286
  *
1372
1287
  * @deprecated deprecated.
1373
1288
  * @public
1374
1289
  */
1375
1290
  Lt?: number | undefined;
1376
1291
  /**
1377
- * <p>Represents a <i>less than or equal</i> condition to be applied to a single
1378
- * field when querying for findings.</p>
1292
+ * <p>Represents a <i>less than or equal</i> condition to be applied to a single field when querying for findings.</p>
1379
1293
  *
1380
1294
  * @deprecated deprecated.
1381
1295
  * @public
1382
1296
  */
1383
1297
  Lte?: number | undefined;
1384
1298
  /**
1385
- * <p>Represents an <i>equal</i>
1386
- * <b></b> condition to be applied to
1387
- * a single field when querying for findings.</p>
1299
+ * <p>Represents an <i>equal</i> <b/> condition to be applied to a single field when querying for findings.</p>
1388
1300
  * @public
1389
1301
  */
1390
1302
  Equals?: string[] | undefined;
1391
1303
  /**
1392
- * <p>Represents a <i>not equal</i>
1393
- * <b></b> condition to be applied
1394
- * to a single field when querying for findings.</p>
1304
+ * <p>Represents a <i>not equal</i> <b/> condition to be applied to a single field when querying for findings.</p>
1395
1305
  * @public
1396
1306
  */
1397
1307
  NotEquals?: string[] | undefined;
1398
1308
  /**
1399
- * <p>Represents a <i>greater than</i> condition to be applied to a single field
1400
- * when querying for findings.</p>
1309
+ * <p>Represents a <i>greater than</i> condition to be applied to a single field when querying for findings.</p>
1401
1310
  * @public
1402
1311
  */
1403
1312
  GreaterThan?: number | undefined;
1404
1313
  /**
1405
- * <p>Represents a <i>greater than or equal</i> condition to be applied to a
1406
- * single field when querying for findings.</p>
1314
+ * <p>Represents a <i>greater than or equal</i> condition to be applied to a single field when querying for findings.</p>
1407
1315
  * @public
1408
1316
  */
1409
1317
  GreaterThanOrEqual?: number | undefined;
1410
1318
  /**
1411
- * <p>Represents a <i>less than</i> condition to be applied to a single field when
1412
- * querying for findings.</p>
1319
+ * <p>Represents a <i>less than</i> condition to be applied to a single field when querying for findings.</p>
1413
1320
  * @public
1414
1321
  */
1415
1322
  LessThan?: number | undefined;
1416
1323
  /**
1417
- * <p>Represents a <i>less than or equal</i> condition to be applied to a single
1418
- * field when querying for findings.</p>
1324
+ * <p>Represents a <i>less than or equal</i> condition to be applied to a single field when querying for findings.</p>
1419
1325
  * @public
1420
1326
  */
1421
1327
  LessThanOrEqual?: number | undefined;
1422
1328
  /**
1423
- * <p>Represents the <i>match</i> condition to be applied to a single field when querying for findings.
1424
- * </p>
1425
- * <note>
1426
- * <p>
1427
- * The <i>matches</i> condition is available only for create-filter and update-filter APIs.
1428
- * </p>
1429
- * </note>
1329
+ * <p>Represents the <i>match</i> condition to be applied to a single field when querying for findings. </p> <note> <p> The <i>matches</i> condition is available only for create-filter and update-filter APIs. </p> </note>
1430
1330
  * @public
1431
1331
  */
1432
1332
  Matches?: string[] | undefined;
1433
1333
  /**
1434
- * <p>Represents the <i>not match</i> condition to be applied to a single field when querying for findings.
1435
- * </p>
1436
- * <note>
1437
- * <p>
1438
- * The <i>not-matches</i> condition is available only for create-filter and update-filter APIs.
1439
- * </p>
1440
- * </note>
1334
+ * <p>Represents the <i>not match</i> condition to be applied to a single field when querying for findings. </p> <note> <p> The <i>not-matches</i> condition is available only for create-filter and update-filter APIs. </p> </note>
1441
1335
  * @public
1442
1336
  */
1443
1337
  NotMatches?: string[] | undefined;
@@ -1500,9 +1394,7 @@ export interface Container {
1500
1394
  */
1501
1395
  Image?: string | undefined;
1502
1396
  /**
1503
- * <p>Part of the image name before the last slash. For example, imagePrefix for
1504
- * public.ecr.aws/amazonlinux/amazonlinux:latest would be public.ecr.aws/amazonlinux. If the
1505
- * image name is relative and does not have a slash, this field is empty.</p>
1397
+ * <p>Part of the image name before the last slash. For example, imagePrefix for public.ecr.aws/amazonlinux/amazonlinux:latest would be public.ecr.aws/amazonlinux. If the image name is relative and does not have a slash, this field is empty.</p>
1506
1398
  * @public
1507
1399
  */
1508
1400
  ImagePrefix?: string | undefined;
@@ -1518,15 +1410,12 @@ export interface Container {
1518
1410
  SecurityContext?: SecurityContext | undefined;
1519
1411
  }
1520
1412
  /**
1521
- * <p>Contains information about container resources involved in a GuardDuty finding.
1522
- * This structure provides details about containers that were identified as part of
1523
- * suspicious or malicious activity.</p>
1413
+ * <p>Contains information about container resources involved in a GuardDuty finding. This structure provides details about containers that were identified as part of suspicious or malicious activity.</p>
1524
1414
  * @public
1525
1415
  */
1526
1416
  export interface ContainerFindingResource {
1527
1417
  /**
1528
- * <p>The container image information, including the image name and tag used to run the container
1529
- * that was involved in the finding.</p>
1418
+ * <p>The container image information, including the image name and tag used to run the container that was involved in the finding.</p>
1530
1419
  * @public
1531
1420
  */
1532
1421
  Image: string | undefined;
@@ -1537,14 +1426,12 @@ export interface ContainerFindingResource {
1537
1426
  ImageUid?: string | undefined;
1538
1427
  }
1539
1428
  /**
1540
- * <p>Contains information about the Amazon EC2 instance that is running
1541
- * the Amazon ECS container.</p>
1429
+ * <p>Contains information about the Amazon EC2 instance that is running the Amazon ECS container.</p>
1542
1430
  * @public
1543
1431
  */
1544
1432
  export interface ContainerInstanceDetails {
1545
1433
  /**
1546
- * <p>Represents the nodes in the Amazon ECS cluster that has a <code>HEALTHY</code>
1547
- * coverage status.</p>
1434
+ * <p>Represents the nodes in the Amazon ECS cluster that has a <code>HEALTHY</code> coverage status.</p>
1548
1435
  * @public
1549
1436
  */
1550
1437
  CoveredContainerInstances?: number | undefined;
@@ -1555,8 +1442,7 @@ export interface ContainerInstanceDetails {
1555
1442
  CompatibleContainerInstances?: number | undefined;
1556
1443
  }
1557
1444
  /**
1558
- * <p>Contains information about the Amazon EC2 instance runtime
1559
- * coverage details.</p>
1445
+ * <p>Contains information about the Amazon EC2 instance runtime coverage details.</p>
1560
1446
  * @public
1561
1447
  */
1562
1448
  export interface CoverageEc2InstanceDetails {
@@ -1571,8 +1457,7 @@ export interface CoverageEc2InstanceDetails {
1571
1457
  */
1572
1458
  InstanceType?: string | undefined;
1573
1459
  /**
1574
- * <p>The cluster ARN of the Amazon ECS cluster running on
1575
- * the Amazon EC2 instance.</p>
1460
+ * <p>The cluster ARN of the Amazon ECS cluster running on the Amazon EC2 instance.</p>
1576
1461
  * @public
1577
1462
  */
1578
1463
  ClusterArn?: string | undefined;
@@ -1582,29 +1467,13 @@ export interface CoverageEc2InstanceDetails {
1582
1467
  */
1583
1468
  AgentDetails?: AgentDetails | undefined;
1584
1469
  /**
1585
- * <p>Indicates how the GuardDuty security agent is managed for this resource.</p>
1586
- * <ul>
1587
- * <li>
1588
- * <p>
1589
- * <code>AUTO_MANAGED</code> indicates that GuardDuty deploys and manages updates for this resource.</p>
1590
- * </li>
1591
- * <li>
1592
- * <p>
1593
- * <code>MANUAL</code> indicates that you are responsible to deploy, update, and manage the GuardDuty
1594
- * security agent updates for this resource.</p>
1595
- * </li>
1596
- * </ul>
1597
- * <note>
1598
- * <p>The <code>DISABLED</code> status doesn't apply to Amazon
1599
- * EC2 instances and Amazon EKS clusters.</p>
1600
- * </note>
1470
+ * <p>Indicates how the GuardDuty security agent is managed for this resource.</p> <ul> <li> <p> <code>AUTO_MANAGED</code> indicates that GuardDuty deploys and manages updates for this resource.</p> </li> <li> <p> <code>MANUAL</code> indicates that you are responsible to deploy, update, and manage the GuardDuty security agent updates for this resource.</p> </li> </ul> <note> <p>The <code>DISABLED</code> status doesn't apply to Amazon EC2 instances and Amazon EKS clusters.</p> </note>
1601
1471
  * @public
1602
1472
  */
1603
1473
  ManagementType?: ManagementType | undefined;
1604
1474
  }
1605
1475
  /**
1606
- * <p>Contains information about Amazon Web Services Fargate details associated with
1607
- * an Amazon ECS cluster.</p>
1476
+ * <p>Contains information about Amazon Web Services Fargate details associated with an Amazon ECS cluster.</p>
1608
1477
  * @public
1609
1478
  */
1610
1479
  export interface FargateDetails {
@@ -1614,20 +1483,7 @@ export interface FargateDetails {
1614
1483
  */
1615
1484
  Issues?: string[] | undefined;
1616
1485
  /**
1617
- * <p>Indicates how the GuardDuty security agent is managed for this resource.</p>
1618
- * <ul>
1619
- * <li>
1620
- * <p>
1621
- * <code>AUTO_MANAGED</code> indicates that GuardDuty deploys and manages updates for this resource.</p>
1622
- * </li>
1623
- * <li>
1624
- * <p>
1625
- * <code>DISABLED</code> indicates that the deployment of the GuardDuty security agent is disabled for this resource.</p>
1626
- * </li>
1627
- * </ul>
1628
- * <note>
1629
- * <p>The <code>MANUAL</code> status doesn't apply to the Amazon Web Services Fargate (Amazon ECS only) woprkloads.</p>
1630
- * </note>
1486
+ * <p>Indicates how the GuardDuty security agent is managed for this resource.</p> <ul> <li> <p> <code>AUTO_MANAGED</code> indicates that GuardDuty deploys and manages updates for this resource.</p> </li> <li> <p> <code>DISABLED</code> indicates that the deployment of the GuardDuty security agent is disabled for this resource.</p> </li> </ul> <note> <p>The <code>MANUAL</code> status doesn't apply to the Amazon Web Services Fargate (Amazon ECS only) woprkloads.</p> </note>
1631
1487
  * @public
1632
1488
  */
1633
1489
  ManagementType?: ManagementType | undefined;
@@ -1643,14 +1499,12 @@ export interface CoverageEcsClusterDetails {
1643
1499
  */
1644
1500
  ClusterName?: string | undefined;
1645
1501
  /**
1646
- * <p>Information about the Fargate details associated with the Amazon
1647
- * ECS cluster.</p>
1502
+ * <p>Information about the Fargate details associated with the Amazon ECS cluster.</p>
1648
1503
  * @public
1649
1504
  */
1650
1505
  FargateDetails?: FargateDetails | undefined;
1651
1506
  /**
1652
- * <p>Information about the Amazon ECS container running on Amazon EC2
1653
- * instance.</p>
1507
+ * <p>Information about the Amazon ECS container running on Amazon EC2 instance.</p>
1654
1508
  * @public
1655
1509
  */
1656
1510
  ContainerInstanceDetails?: ContainerInstanceDetails | undefined;
@@ -1666,8 +1520,7 @@ export interface CoverageEksClusterDetails {
1666
1520
  */
1667
1521
  ClusterName?: string | undefined;
1668
1522
  /**
1669
- * <p>Represents the nodes within the EKS cluster that have a <code>HEALTHY</code> coverage
1670
- * status.</p>
1523
+ * <p>Represents the nodes within the EKS cluster that have a <code>HEALTHY</code> coverage status.</p>
1671
1524
  * @public
1672
1525
  */
1673
1526
  CoveredNodes?: number | undefined;
@@ -1682,47 +1535,34 @@ export interface CoverageEksClusterDetails {
1682
1535
  */
1683
1536
  AddonDetails?: AddonDetails | undefined;
1684
1537
  /**
1685
- * <p>Indicates how the Amazon EKS add-on GuardDuty agent is managed for this EKS cluster.</p>
1686
- * <p>
1687
- * <code>AUTO_MANAGED</code> indicates GuardDuty deploys and manages updates for this resource.</p>
1688
- * <p>
1689
- * <code>MANUAL</code> indicates that you are responsible to deploy, update, and manage
1690
- * the Amazon EKS add-on GuardDuty agent for this resource.</p>
1538
+ * <p>Indicates how the Amazon EKS add-on GuardDuty agent is managed for this EKS cluster.</p> <p> <code>AUTO_MANAGED</code> indicates GuardDuty deploys and manages updates for this resource.</p> <p> <code>MANUAL</code> indicates that you are responsible to deploy, update, and manage the Amazon EKS add-on GuardDuty agent for this resource.</p>
1691
1539
  * @public
1692
1540
  */
1693
1541
  ManagementType?: ManagementType | undefined;
1694
1542
  }
1695
1543
  /**
1696
- * <p>Represents a condition that when matched will be added to the response of the
1697
- * operation.</p>
1544
+ * <p>Represents a condition that when matched will be added to the response of the operation.</p>
1698
1545
  * @public
1699
1546
  */
1700
1547
  export interface CoverageFilterCondition {
1701
1548
  /**
1702
- * <p>Represents an equal condition that is applied to a single field while retrieving the
1703
- * coverage details.</p>
1549
+ * <p>Represents an equal condition that is applied to a single field while retrieving the coverage details.</p>
1704
1550
  * @public
1705
1551
  */
1706
1552
  Equals?: string[] | undefined;
1707
1553
  /**
1708
- * <p>Represents a not equal condition that is applied to a single field while retrieving the
1709
- * coverage details.</p>
1554
+ * <p>Represents a not equal condition that is applied to a single field while retrieving the coverage details.</p>
1710
1555
  * @public
1711
1556
  */
1712
1557
  NotEquals?: string[] | undefined;
1713
1558
  }
1714
1559
  /**
1715
- * <p>Represents a condition that when matched will be added to the response of the
1716
- * operation.</p>
1560
+ * <p>Represents a condition that when matched will be added to the response of the operation.</p>
1717
1561
  * @public
1718
1562
  */
1719
1563
  export interface CoverageFilterCriterion {
1720
1564
  /**
1721
- * <p>An enum value representing possible filter fields.</p>
1722
- * <note>
1723
- * <p>Replace the enum value <code>CLUSTER_NAME</code> with <code>EKS_CLUSTER_NAME</code>.
1724
- * <code>CLUSTER_NAME</code> has been deprecated.</p>
1725
- * </note>
1565
+ * <p>An enum value representing possible filter fields.</p> <note> <p>Replace the enum value <code>CLUSTER_NAME</code> with <code>EKS_CLUSTER_NAME</code>. <code>CLUSTER_NAME</code> has been deprecated.</p> </note>
1726
1566
  * @public
1727
1567
  */
1728
1568
  CriterionKey?: CoverageFilterCriterionKey | undefined;
@@ -1738,8 +1578,7 @@ export interface CoverageFilterCriterion {
1738
1578
  */
1739
1579
  export interface CoverageFilterCriteria {
1740
1580
  /**
1741
- * <p>Represents a condition that when matched will be added to the response of the
1742
- * operation.</p>
1581
+ * <p>Represents a condition that when matched will be added to the response of the operation.</p>
1743
1582
  * @public
1744
1583
  */
1745
1584
  FilterCriterion?: CoverageFilterCriterion[] | undefined;
@@ -1755,22 +1594,20 @@ export interface CoverageResourceDetails {
1755
1594
  */
1756
1595
  EksClusterDetails?: CoverageEksClusterDetails | undefined;
1757
1596
  /**
1758
- * <p>The type of Amazon Web Services resource.</p>
1597
+ * <p>Information about the Amazon ECS cluster that is assessed for runtime coverage.</p>
1759
1598
  * @public
1760
1599
  */
1761
- ResourceType?: ResourceType | undefined;
1600
+ EcsClusterDetails?: CoverageEcsClusterDetails | undefined;
1762
1601
  /**
1763
- * <p>Information about the Amazon ECS cluster that is assessed for
1764
- * runtime coverage.</p>
1602
+ * <p>Information about the Amazon EC2 instance assessed for runtime coverage.</p>
1765
1603
  * @public
1766
1604
  */
1767
- EcsClusterDetails?: CoverageEcsClusterDetails | undefined;
1605
+ Ec2InstanceDetails?: CoverageEc2InstanceDetails | undefined;
1768
1606
  /**
1769
- * <p>Information about the Amazon EC2 instance assessed
1770
- * for runtime coverage.</p>
1607
+ * <p>The type of Amazon Web Services resource.</p>
1771
1608
  * @public
1772
1609
  */
1773
- Ec2InstanceDetails?: CoverageEc2InstanceDetails | undefined;
1610
+ ResourceType?: ResourceType | undefined;
1774
1611
  }
1775
1612
  /**
1776
1613
  * <p>Information about the resource of the GuardDuty account.</p>
@@ -1803,14 +1640,12 @@ export interface CoverageResource {
1803
1640
  */
1804
1641
  CoverageStatus?: CoverageStatus | undefined;
1805
1642
  /**
1806
- * <p>Represents the reason why a coverage status was <code>UNHEALTHY</code> for the EKS
1807
- * cluster.</p>
1643
+ * <p>Represents the reason why a coverage status was <code>UNHEALTHY</code> for the EKS cluster.</p>
1808
1644
  * @public
1809
1645
  */
1810
1646
  Issue?: string | undefined;
1811
1647
  /**
1812
- * <p>The timestamp at which the coverage details for the resource were last updated. This is in
1813
- * UTC format.</p>
1648
+ * <p>The timestamp at which the coverage details for the resource were last updated. This is in UTC format.</p>
1814
1649
  * @public
1815
1650
  */
1816
1651
  UpdatedAt?: Date | undefined;
@@ -1821,11 +1656,7 @@ export interface CoverageResource {
1821
1656
  */
1822
1657
  export interface CoverageSortCriteria {
1823
1658
  /**
1824
- * <p>Represents the field name used to sort the coverage details.</p>
1825
- * <note>
1826
- * <p>Replace the enum value <code>CLUSTER_NAME</code> with <code>EKS_CLUSTER_NAME</code>.
1827
- * <code>CLUSTER_NAME</code> has been deprecated.</p>
1828
- * </note>
1659
+ * <p>Represents the field name used to sort the coverage details.</p> <note> <p>Replace the enum value <code>CLUSTER_NAME</code> with <code>EKS_CLUSTER_NAME</code>. <code>CLUSTER_NAME</code> has been deprecated.</p> </note>
1829
1660
  * @public
1830
1661
  */
1831
1662
  AttributeName?: CoverageSortKey | undefined;
@@ -1874,8 +1705,7 @@ export interface KubernetesConfiguration {
1874
1705
  AuditLogs: KubernetesAuditLogsConfiguration | undefined;
1875
1706
  }
1876
1707
  /**
1877
- * <p>Describes whether Malware Protection for EC2 instances with findings will be enabled as a
1878
- * data source.</p>
1708
+ * <p>Describes whether Malware Protection for EC2 instances with findings will be enabled as a data source.</p>
1879
1709
  * @public
1880
1710
  */
1881
1711
  export interface ScanEc2InstanceWithFindings {
@@ -1945,12 +1775,7 @@ export interface DetectorAdditionalConfiguration {
1945
1775
  Status?: FeatureStatus | undefined;
1946
1776
  }
1947
1777
  /**
1948
- * <p>Contains information about a GuardDuty feature.</p>
1949
- * <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
1950
- * and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
1951
- * You can add only one of these two features because Runtime Monitoring already includes the
1952
- * threat detection for Amazon EKS resources. For more information, see
1953
- * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
1778
+ * <p>Contains information about a GuardDuty feature.</p> <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>) and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error. You can add only one of these two features because Runtime Monitoring already includes the threat detection for Amazon EKS resources. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
1954
1779
  * @public
1955
1780
  */
1956
1781
  export interface DetectorFeatureConfiguration {
@@ -1990,10 +1815,7 @@ export interface CreateDetectorRequest {
1990
1815
  */
1991
1816
  FindingPublishingFrequency?: FindingPublishingFrequency | undefined;
1992
1817
  /**
1993
- * <p>Describes which data sources will be enabled for the detector.</p>
1994
- * <p>There might be regional differences because some data sources might not be
1995
- * available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
1996
- * information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
1818
+ * <p>Describes which data sources will be enabled for the detector.</p> <p>There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
1997
1819
  *
1998
1820
  * @deprecated This parameter is deprecated, use Features instead.
1999
1821
  * @public
@@ -2021,15 +1843,13 @@ export interface EbsVolumesResult {
2021
1843
  */
2022
1844
  Status?: DataSourceStatus | undefined;
2023
1845
  /**
2024
- * <p>Specifies the reason why scanning EBS volumes (Malware Protection) was not enabled as a
2025
- * data source.</p>
1846
+ * <p>Specifies the reason why scanning EBS volumes (Malware Protection) was not enabled as a data source.</p>
2026
1847
  * @public
2027
1848
  */
2028
1849
  Reason?: string | undefined;
2029
1850
  }
2030
1851
  /**
2031
- * <p>An object that contains information on the status of whether Malware Protection for EC2
2032
- * instances with findings will be enabled as a data source.</p>
1852
+ * <p>An object that contains information on the status of whether Malware Protection for EC2 instances with findings will be enabled as a data source.</p>
2033
1853
  * @public
2034
1854
  */
2035
1855
  export interface ScanEc2InstanceWithFindingsResult {
@@ -2040,8 +1860,7 @@ export interface ScanEc2InstanceWithFindingsResult {
2040
1860
  EbsVolumes?: EbsVolumesResult | undefined;
2041
1861
  }
2042
1862
  /**
2043
- * <p>An object that contains information on the status of all Malware Protection data
2044
- * sources.</p>
1863
+ * <p>An object that contains information on the status of all Malware Protection data sources.</p>
2045
1864
  * @public
2046
1865
  */
2047
1866
  export interface MalwareProtectionConfigurationResult {
@@ -2062,8 +1881,7 @@ export interface MalwareProtectionConfigurationResult {
2062
1881
  */
2063
1882
  export interface UnprocessedDataSourcesResult {
2064
1883
  /**
2065
- * <p>An object that contains information on the status of all Malware Protection data
2066
- * sources.</p>
1884
+ * <p>An object that contains information on the status of all Malware Protection data sources.</p>
2067
1885
  * @public
2068
1886
  */
2069
1887
  MalwareProtection?: MalwareProtectionConfigurationResult | undefined;
@@ -2078,8 +1896,7 @@ export interface CreateDetectorResponse {
2078
1896
  */
2079
1897
  DetectorId?: string | undefined;
2080
1898
  /**
2081
- * <p>Specifies the data sources that couldn't be enabled when GuardDuty was enabled for the
2082
- * first time.</p>
1899
+ * <p>Specifies the data sources that couldn't be enabled when GuardDuty was enabled for the first time.</p>
2083
1900
  * @public
2084
1901
  */
2085
1902
  UnprocessedDataSources?: UnprocessedDataSourcesResult | undefined;
@@ -2090,8 +1907,7 @@ export interface CreateDetectorResponse {
2090
1907
  */
2091
1908
  export interface FindingCriteria {
2092
1909
  /**
2093
- * <p>Represents a map of finding properties that match specified conditions and values when
2094
- * querying findings.</p>
1910
+ * <p>Represents a map of finding properties that match specified conditions and values when querying findings.</p>
2095
1911
  * @public
2096
1912
  */
2097
1913
  Criterion?: Record<string, Condition> | undefined;
@@ -2101,23 +1917,17 @@ export interface FindingCriteria {
2101
1917
  */
2102
1918
  export interface CreateFilterRequest {
2103
1919
  /**
2104
- * <p>The detector ID associated with the GuardDuty account for which you want to create a filter.</p>
2105
- * <p>To find the <code>detectorId</code> in the current Region, see the
2106
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
1920
+ * <p>The detector ID associated with the GuardDuty account for which you want to create a filter.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2107
1921
  * @public
2108
1922
  */
2109
1923
  DetectorId: string | undefined;
2110
1924
  /**
2111
- * <p>The name of the filter. Valid characters include period (.), underscore (_), dash (-), and
2112
- * alphanumeric characters. A whitespace is considered to be an invalid character.</p>
1925
+ * <p>The name of the filter. Valid characters include period (.), underscore (_), dash (-), and alphanumeric characters. A whitespace is considered to be an invalid character.</p>
2113
1926
  * @public
2114
1927
  */
2115
1928
  Name: string | undefined;
2116
1929
  /**
2117
- * <p>The description of the filter. Valid characters include alphanumeric characters, and
2118
- * special characters such as hyphen, period, colon, underscore, parentheses (<code>\{ \}</code>,
2119
- * <code>[ ]</code>, and <code>( )</code>), forward slash, horizontal tab, vertical tab,
2120
- * newline, form feed, return, and whitespace.</p>
1930
+ * <p>The description of the filter. Valid characters include alphanumeric characters, and special characters such as hyphen, period, colon, underscore, parentheses (<code>\{ \}</code>, <code>[ ]</code>, and <code>( )</code>), forward slash, horizontal tab, vertical tab, newline, form feed, return, and whitespace.</p>
2121
1931
  * @public
2122
1932
  */
2123
1933
  Description?: string | undefined;
@@ -2127,333 +1937,12 @@ export interface CreateFilterRequest {
2127
1937
  */
2128
1938
  Action?: FilterAction | undefined;
2129
1939
  /**
2130
- * <p>Specifies the position of the filter in the list of current filters. Also specifies the
2131
- * order in which this filter is applied to the findings.</p>
1940
+ * <p>Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.</p>
2132
1941
  * @public
2133
1942
  */
2134
1943
  Rank?: number | undefined;
2135
1944
  /**
2136
- * <p>Represents the criteria to be used in the filter for querying findings.</p>
2137
- * <p>You can only use the following attributes to query findings:</p>
2138
- * <ul>
2139
- * <li>
2140
- * <p>accountId</p>
2141
- * </li>
2142
- * <li>
2143
- * <p>id</p>
2144
- * </li>
2145
- * <li>
2146
- * <p>region</p>
2147
- * </li>
2148
- * <li>
2149
- * <p>severity</p>
2150
- * <p>To filter on the basis of severity, the API and CLI use the following input list for
2151
- * the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_FindingCriteria.html">FindingCriteria</a>
2152
- * condition:</p>
2153
- * <ul>
2154
- * <li>
2155
- * <p>
2156
- * <b>Low</b>: <code>["1", "2", "3"]</code>
2157
- * </p>
2158
- * </li>
2159
- * <li>
2160
- * <p>
2161
- * <b>Medium</b>: <code>["4", "5", "6"]</code>
2162
- * </p>
2163
- * </li>
2164
- * <li>
2165
- * <p>
2166
- * <b>High</b>: <code>["7", "8"]</code>
2167
- * </p>
2168
- * </li>
2169
- * <li>
2170
- * <p>
2171
- * <b>Critical</b>: <code>["9", "10"]</code>
2172
- * </p>
2173
- * </li>
2174
- * </ul>
2175
- * <p>For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a>
2176
- * in the <i>Amazon GuardDuty User Guide</i>.</p>
2177
- * </li>
2178
- * <li>
2179
- * <p>type</p>
2180
- * </li>
2181
- * <li>
2182
- * <p>updatedAt</p>
2183
- * <p>Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ
2184
- * depending on whether the value contains milliseconds.</p>
2185
- * </li>
2186
- * <li>
2187
- * <p>resource.accessKeyDetails.accessKeyId</p>
2188
- * </li>
2189
- * <li>
2190
- * <p>resource.accessKeyDetails.principalId</p>
2191
- * </li>
2192
- * <li>
2193
- * <p>resource.accessKeyDetails.userName</p>
2194
- * </li>
2195
- * <li>
2196
- * <p>resource.accessKeyDetails.userType</p>
2197
- * </li>
2198
- * <li>
2199
- * <p>resource.instanceDetails.iamInstanceProfile.id</p>
2200
- * </li>
2201
- * <li>
2202
- * <p>resource.instanceDetails.imageId</p>
2203
- * </li>
2204
- * <li>
2205
- * <p>resource.instanceDetails.instanceId</p>
2206
- * </li>
2207
- * <li>
2208
- * <p>resource.instanceDetails.tags.key</p>
2209
- * </li>
2210
- * <li>
2211
- * <p>resource.instanceDetails.tags.value</p>
2212
- * </li>
2213
- * <li>
2214
- * <p>resource.instanceDetails.networkInterfaces.ipv6Addresses</p>
2215
- * </li>
2216
- * <li>
2217
- * <p>resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress</p>
2218
- * </li>
2219
- * <li>
2220
- * <p>resource.instanceDetails.networkInterfaces.publicDnsName</p>
2221
- * </li>
2222
- * <li>
2223
- * <p>resource.instanceDetails.networkInterfaces.publicIp</p>
2224
- * </li>
2225
- * <li>
2226
- * <p>resource.instanceDetails.networkInterfaces.securityGroups.groupId</p>
2227
- * </li>
2228
- * <li>
2229
- * <p>resource.instanceDetails.networkInterfaces.securityGroups.groupName</p>
2230
- * </li>
2231
- * <li>
2232
- * <p>resource.instanceDetails.networkInterfaces.subnetId</p>
2233
- * </li>
2234
- * <li>
2235
- * <p>resource.instanceDetails.networkInterfaces.vpcId</p>
2236
- * </li>
2237
- * <li>
2238
- * <p>resource.instanceDetails.outpostArn</p>
2239
- * </li>
2240
- * <li>
2241
- * <p>resource.resourceType</p>
2242
- * </li>
2243
- * <li>
2244
- * <p>resource.s3BucketDetails.publicAccess.effectivePermissions</p>
2245
- * </li>
2246
- * <li>
2247
- * <p>resource.s3BucketDetails.name</p>
2248
- * </li>
2249
- * <li>
2250
- * <p>resource.s3BucketDetails.tags.key</p>
2251
- * </li>
2252
- * <li>
2253
- * <p>resource.s3BucketDetails.tags.value</p>
2254
- * </li>
2255
- * <li>
2256
- * <p>resource.s3BucketDetails.type</p>
2257
- * </li>
2258
- * <li>
2259
- * <p>service.action.actionType</p>
2260
- * </li>
2261
- * <li>
2262
- * <p>service.action.awsApiCallAction.api</p>
2263
- * </li>
2264
- * <li>
2265
- * <p>service.action.awsApiCallAction.callerType</p>
2266
- * </li>
2267
- * <li>
2268
- * <p>service.action.awsApiCallAction.errorCode</p>
2269
- * </li>
2270
- * <li>
2271
- * <p>service.action.awsApiCallAction.remoteIpDetails.city.cityName</p>
2272
- * </li>
2273
- * <li>
2274
- * <p>service.action.awsApiCallAction.remoteIpDetails.country.countryName</p>
2275
- * </li>
2276
- * <li>
2277
- * <p>service.action.awsApiCallAction.remoteIpDetails.ipAddressV4</p>
2278
- * </li>
2279
- * <li>
2280
- * <p>service.action.awsApiCallAction.remoteIpDetails.ipAddressV6</p>
2281
- * </li>
2282
- * <li>
2283
- * <p>service.action.awsApiCallAction.remoteIpDetails.organization.asn</p>
2284
- * </li>
2285
- * <li>
2286
- * <p>service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg</p>
2287
- * </li>
2288
- * <li>
2289
- * <p>service.action.awsApiCallAction.serviceName</p>
2290
- * </li>
2291
- * <li>
2292
- * <p>service.action.dnsRequestAction.domain</p>
2293
- * </li>
2294
- * <li>
2295
- * <p>service.action.dnsRequestAction.domainWithSuffix</p>
2296
- * </li>
2297
- * <li>
2298
- * <p>service.action.dnsRequestAction.vpcOwnerAccountId</p>
2299
- * </li>
2300
- * <li>
2301
- * <p>service.action.networkConnectionAction.blocked</p>
2302
- * </li>
2303
- * <li>
2304
- * <p>service.action.networkConnectionAction.connectionDirection</p>
2305
- * </li>
2306
- * <li>
2307
- * <p>service.action.networkConnectionAction.localPortDetails.port</p>
2308
- * </li>
2309
- * <li>
2310
- * <p>service.action.networkConnectionAction.protocol</p>
2311
- * </li>
2312
- * <li>
2313
- * <p>service.action.networkConnectionAction.remoteIpDetails.city.cityName</p>
2314
- * </li>
2315
- * <li>
2316
- * <p>service.action.networkConnectionAction.remoteIpDetails.country.countryName</p>
2317
- * </li>
2318
- * <li>
2319
- * <p>service.action.networkConnectionAction.remoteIpDetails.ipAddressV4</p>
2320
- * </li>
2321
- * <li>
2322
- * <p>service.action.networkConnectionAction.remoteIpDetails.ipAddressV6</p>
2323
- * </li>
2324
- * <li>
2325
- * <p>service.action.networkConnectionAction.remoteIpDetails.organization.asn</p>
2326
- * </li>
2327
- * <li>
2328
- * <p>service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg</p>
2329
- * </li>
2330
- * <li>
2331
- * <p>service.action.networkConnectionAction.remotePortDetails.port</p>
2332
- * </li>
2333
- * <li>
2334
- * <p>service.action.awsApiCallAction.remoteAccountDetails.affiliated</p>
2335
- * </li>
2336
- * <li>
2337
- * <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4</p>
2338
- * </li>
2339
- * <li>
2340
- * <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV6</p>
2341
- * </li>
2342
- * <li>
2343
- * <p>service.action.kubernetesApiCallAction.namespace</p>
2344
- * </li>
2345
- * <li>
2346
- * <p>service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn</p>
2347
- * </li>
2348
- * <li>
2349
- * <p>service.action.kubernetesApiCallAction.requestUri</p>
2350
- * </li>
2351
- * <li>
2352
- * <p>service.action.kubernetesApiCallAction.statusCode</p>
2353
- * </li>
2354
- * <li>
2355
- * <p>service.action.networkConnectionAction.localIpDetails.ipAddressV4</p>
2356
- * </li>
2357
- * <li>
2358
- * <p>service.action.networkConnectionAction.localIpDetails.ipAddressV6</p>
2359
- * </li>
2360
- * <li>
2361
- * <p>service.action.networkConnectionAction.protocol</p>
2362
- * </li>
2363
- * <li>
2364
- * <p>service.action.awsApiCallAction.serviceName</p>
2365
- * </li>
2366
- * <li>
2367
- * <p>service.action.awsApiCallAction.remoteAccountDetails.accountId</p>
2368
- * </li>
2369
- * <li>
2370
- * <p>service.additionalInfo.threatListName</p>
2371
- * </li>
2372
- * <li>
2373
- * <p>service.resourceRole</p>
2374
- * </li>
2375
- * <li>
2376
- * <p>resource.eksClusterDetails.name</p>
2377
- * </li>
2378
- * <li>
2379
- * <p>resource.kubernetesDetails.kubernetesWorkloadDetails.name</p>
2380
- * </li>
2381
- * <li>
2382
- * <p>resource.kubernetesDetails.kubernetesWorkloadDetails.namespace</p>
2383
- * </li>
2384
- * <li>
2385
- * <p>resource.kubernetesDetails.kubernetesUserDetails.username</p>
2386
- * </li>
2387
- * <li>
2388
- * <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.image</p>
2389
- * </li>
2390
- * <li>
2391
- * <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.imagePrefix</p>
2392
- * </li>
2393
- * <li>
2394
- * <p>service.ebsVolumeScanDetails.scanId</p>
2395
- * </li>
2396
- * <li>
2397
- * <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name</p>
2398
- * </li>
2399
- * <li>
2400
- * <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity</p>
2401
- * </li>
2402
- * <li>
2403
- * <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash</p>
2404
- * </li>
2405
- * <li>
2406
- * <p>resource.ecsClusterDetails.name</p>
2407
- * </li>
2408
- * <li>
2409
- * <p>resource.ecsClusterDetails.taskDetails.containers.image</p>
2410
- * </li>
2411
- * <li>
2412
- * <p>resource.ecsClusterDetails.taskDetails.definitionArn</p>
2413
- * </li>
2414
- * <li>
2415
- * <p>resource.containerDetails.image</p>
2416
- * </li>
2417
- * <li>
2418
- * <p>resource.rdsDbInstanceDetails.dbInstanceIdentifier</p>
2419
- * </li>
2420
- * <li>
2421
- * <p>resource.rdsDbInstanceDetails.dbClusterIdentifier</p>
2422
- * </li>
2423
- * <li>
2424
- * <p>resource.rdsDbInstanceDetails.engine</p>
2425
- * </li>
2426
- * <li>
2427
- * <p>resource.rdsDbUserDetails.user</p>
2428
- * </li>
2429
- * <li>
2430
- * <p>resource.rdsDbInstanceDetails.tags.key</p>
2431
- * </li>
2432
- * <li>
2433
- * <p>resource.rdsDbInstanceDetails.tags.value</p>
2434
- * </li>
2435
- * <li>
2436
- * <p>service.runtimeDetails.process.executableSha256</p>
2437
- * </li>
2438
- * <li>
2439
- * <p>service.runtimeDetails.process.name</p>
2440
- * </li>
2441
- * <li>
2442
- * <p>service.runtimeDetails.process.executablePath</p>
2443
- * </li>
2444
- * <li>
2445
- * <p>resource.lambdaDetails.functionName</p>
2446
- * </li>
2447
- * <li>
2448
- * <p>resource.lambdaDetails.functionArn</p>
2449
- * </li>
2450
- * <li>
2451
- * <p>resource.lambdaDetails.tags.key</p>
2452
- * </li>
2453
- * <li>
2454
- * <p>resource.lambdaDetails.tags.value</p>
2455
- * </li>
2456
- * </ul>
1945
+ * <p>Represents the criteria to be used in the filter for querying findings.</p> <p>You can only use the following attributes to query findings:</p> <ul> <li> <p>accountId</p> </li> <li> <p>id</p> </li> <li> <p>region</p> </li> <li> <p>severity</p> <p>To filter on the basis of severity, the API and CLI use the following input list for the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_FindingCriteria.html">FindingCriteria</a> condition:</p> <ul> <li> <p> <b>Low</b>: <code>["1", "2", "3"]</code> </p> </li> <li> <p> <b>Medium</b>: <code>["4", "5", "6"]</code> </p> </li> <li> <p> <b>High</b>: <code>["7", "8"]</code> </p> </li> <li> <p> <b>Critical</b>: <code>["9", "10"]</code> </p> </li> </ul> <p>For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a> in the <i>Amazon GuardDuty User Guide</i>.</p> </li> <li> <p>type</p> </li> <li> <p>updatedAt</p> <p>Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds.</p> </li> <li> <p>resource.accessKeyDetails.accessKeyId</p> </li> <li> <p>resource.accessKeyDetails.principalId</p> </li> <li> <p>resource.accessKeyDetails.userName</p> </li> <li> <p>resource.accessKeyDetails.userType</p> </li> <li> <p>resource.instanceDetails.iamInstanceProfile.id</p> </li> <li> <p>resource.instanceDetails.imageId</p> </li> <li> <p>resource.instanceDetails.instanceId</p> </li> <li> <p>resource.instanceDetails.tags.key</p> </li> <li> <p>resource.instanceDetails.tags.value</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.ipv6Addresses</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.publicDnsName</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.publicIp</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.securityGroups.groupId</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.securityGroups.groupName</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.subnetId</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.vpcId</p> </li> <li> <p>resource.instanceDetails.outpostArn</p> </li> <li> <p>resource.resourceType</p> </li> <li> <p>resource.s3BucketDetails.publicAccess.effectivePermissions</p> </li> <li> <p>resource.s3BucketDetails.name</p> </li> <li> <p>resource.s3BucketDetails.tags.key</p> </li> <li> <p>resource.s3BucketDetails.tags.value</p> </li> <li> <p>resource.s3BucketDetails.type</p> </li> <li> <p>service.action.actionType</p> </li> <li> <p>service.action.awsApiCallAction.api</p> </li> <li> <p>service.action.awsApiCallAction.callerType</p> </li> <li> <p>service.action.awsApiCallAction.errorCode</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.city.cityName</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.country.countryName</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.ipAddressV4</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.ipAddressV6</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.organization.asn</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg</p> </li> <li> <p>service.action.awsApiCallAction.serviceName</p> </li> <li> <p>service.action.dnsRequestAction.domain</p> </li> <li> <p>service.action.dnsRequestAction.domainWithSuffix</p> </li> <li> <p>service.action.dnsRequestAction.vpcOwnerAccountId</p> </li> <li> <p>service.action.networkConnectionAction.blocked</p> </li> <li> <p>service.action.networkConnectionAction.connectionDirection</p> </li> <li> <p>service.action.networkConnectionAction.localPortDetails.port</p> </li> <li> <p>service.action.networkConnectionAction.protocol</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.city.cityName</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.country.countryName</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.ipAddressV4</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.ipAddressV6</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.organization.asn</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg</p> </li> <li> <p>service.action.networkConnectionAction.remotePortDetails.port</p> </li> <li> <p>service.action.awsApiCallAction.remoteAccountDetails.affiliated</p> </li> <li> <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4</p> </li> <li> <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV6</p> </li> <li> <p>service.action.kubernetesApiCallAction.namespace</p> </li> <li> <p>service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn</p> </li> <li> <p>service.action.kubernetesApiCallAction.requestUri</p> </li> <li> <p>service.action.kubernetesApiCallAction.statusCode</p> </li> <li> <p>service.action.networkConnectionAction.localIpDetails.ipAddressV4</p> </li> <li> <p>service.action.networkConnectionAction.localIpDetails.ipAddressV6</p> </li> <li> <p>service.action.networkConnectionAction.protocol</p> </li> <li> <p>service.action.awsApiCallAction.serviceName</p> </li> <li> <p>service.action.awsApiCallAction.remoteAccountDetails.accountId</p> </li> <li> <p>service.additionalInfo.threatListName</p> </li> <li> <p>service.resourceRole</p> </li> <li> <p>resource.eksClusterDetails.name</p> </li> <li> <p>resource.kubernetesDetails.kubernetesWorkloadDetails.name</p> </li> <li> <p>resource.kubernetesDetails.kubernetesWorkloadDetails.namespace</p> </li> <li> <p>resource.kubernetesDetails.kubernetesUserDetails.username</p> </li> <li> <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.image</p> </li> <li> <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.imagePrefix</p> </li> <li> <p>service.ebsVolumeScanDetails.scanId</p> </li> <li> <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name</p> </li> <li> <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity</p> </li> <li> <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash</p> </li> <li> <p>resource.ecsClusterDetails.name</p> </li> <li> <p>resource.ecsClusterDetails.taskDetails.containers.image</p> </li> <li> <p>resource.ecsClusterDetails.taskDetails.definitionArn</p> </li> <li> <p>resource.containerDetails.image</p> </li> <li> <p>resource.rdsDbInstanceDetails.dbInstanceIdentifier</p> </li> <li> <p>resource.rdsDbInstanceDetails.dbClusterIdentifier</p> </li> <li> <p>resource.rdsDbInstanceDetails.engine</p> </li> <li> <p>resource.rdsDbUserDetails.user</p> </li> <li> <p>resource.rdsDbInstanceDetails.tags.key</p> </li> <li> <p>resource.rdsDbInstanceDetails.tags.value</p> </li> <li> <p>service.runtimeDetails.process.executableSha256</p> </li> <li> <p>service.runtimeDetails.process.name</p> </li> <li> <p>service.runtimeDetails.process.executablePath</p> </li> <li> <p>resource.lambdaDetails.functionName</p> </li> <li> <p>resource.lambdaDetails.functionArn</p> </li> <li> <p>resource.lambdaDetails.tags.key</p> </li> <li> <p>resource.lambdaDetails.tags.value</p> </li> </ul>
2457
1946
  * @public
2458
1947
  */
2459
1948
  FindingCriteria: FindingCriteria | undefined;
@@ -2483,15 +1972,12 @@ export interface CreateFilterResponse {
2483
1972
  */
2484
1973
  export interface CreateIPSetRequest {
2485
1974
  /**
2486
- * <p>The unique ID of the detector of the GuardDuty account for which you want to create an IPSet.</p>
2487
- * <p>To find the <code>detectorId</code> in the current Region, see the
2488
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
1975
+ * <p>The unique ID of the detector of the GuardDuty account for which you want to create an IPSet.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2489
1976
  * @public
2490
1977
  */
2491
1978
  DetectorId: string | undefined;
2492
1979
  /**
2493
- * <p>The user-friendly name to identify the IPSet.</p>
2494
- * <p> Allowed characters are alphanumeric, whitespace, dash (-), and underscores (_).</p>
1980
+ * <p>The user-friendly name to identify the IPSet.</p> <p> Allowed characters are alphanumeric, whitespace, dash (-), and underscores (_).</p>
2495
1981
  * @public
2496
1982
  */
2497
1983
  Name: string | undefined;
@@ -2506,8 +1992,7 @@ export interface CreateIPSetRequest {
2506
1992
  */
2507
1993
  Location: string | undefined;
2508
1994
  /**
2509
- * <p>A Boolean value that indicates whether GuardDuty is to start using the uploaded
2510
- * IPSet.</p>
1995
+ * <p>A Boolean value that indicates whether GuardDuty is to start using the uploaded IPSet.</p>
2511
1996
  * @public
2512
1997
  */
2513
1998
  Activate: boolean | undefined;
@@ -2570,17 +2055,13 @@ export interface CreateS3BucketResource {
2570
2055
  */
2571
2056
  BucketName?: string | undefined;
2572
2057
  /**
2573
- * <p>Information about the specified object prefixes. The S3 object will be scanned only
2574
- * if it belongs to any of the specified object prefixes.</p>
2058
+ * <p>Information about the specified object prefixes. The S3 object will be scanned only if it belongs to any of the specified object prefixes.</p>
2575
2059
  * @public
2576
2060
  */
2577
2061
  ObjectPrefixes?: string[] | undefined;
2578
2062
  }
2579
2063
  /**
2580
- * <p>Information about the protected resource that
2581
- * is associated with the created Malware Protection plan.
2582
- * Presently, <code>S3Bucket</code> is the only supported
2583
- * protected resource.</p>
2064
+ * <p>Information about the protected resource that is associated with the created Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported protected resource.</p>
2584
2065
  * @public
2585
2066
  */
2586
2067
  export interface CreateProtectedResource {
@@ -2600,15 +2081,12 @@ export interface CreateMalwareProtectionPlanRequest {
2600
2081
  */
2601
2082
  ClientToken?: string | undefined;
2602
2083
  /**
2603
- * <p>Amazon Resource Name (ARN) of the IAM role that has the permissions to scan and add tags to the associated
2604
- * protected resource.</p>
2084
+ * <p>Amazon Resource Name (ARN) of the IAM role that has the permissions to scan and add tags to the associated protected resource.</p>
2605
2085
  * @public
2606
2086
  */
2607
2087
  Role: string | undefined;
2608
2088
  /**
2609
- * <p>Information about the protected resource that is associated with the created
2610
- * Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported
2611
- * protected resource.</p>
2089
+ * <p>Information about the protected resource that is associated with the created Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported protected resource.</p>
2612
2090
  * @public
2613
2091
  */
2614
2092
  ProtectedResource: CreateProtectedResource | undefined;
@@ -2638,16 +2116,12 @@ export interface CreateMalwareProtectionPlanResponse {
2638
2116
  */
2639
2117
  export interface CreateMembersRequest {
2640
2118
  /**
2641
- * <p>The unique ID of the detector of the GuardDuty account for which you want to associate member
2642
- * accounts.</p>
2643
- * <p>To find the <code>detectorId</code> in the current Region, see the
2644
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2119
+ * <p>The unique ID of the detector of the GuardDuty account for which you want to associate member accounts.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2645
2120
  * @public
2646
2121
  */
2647
2122
  DetectorId: string | undefined;
2648
2123
  /**
2649
- * <p>A list of account ID and email address pairs of the accounts that you want to associate
2650
- * with the GuardDuty administrator account.</p>
2124
+ * <p>A list of account ID and email address pairs of the accounts that you want to associate with the GuardDuty administrator account.</p>
2651
2125
  * @public
2652
2126
  */
2653
2127
  AccountDetails: AccountDetail[] | undefined;
@@ -2673,23 +2147,18 @@ export interface UnprocessedAccount {
2673
2147
  */
2674
2148
  export interface CreateMembersResponse {
2675
2149
  /**
2676
- * <p>A list of objects that include the <code>accountIds</code> of the unprocessed accounts and
2677
- * a result string that explains why each was unprocessed.</p>
2150
+ * <p>A list of objects that include the <code>accountIds</code> of the unprocessed accounts and a result string that explains why each was unprocessed.</p>
2678
2151
  * @public
2679
2152
  */
2680
2153
  UnprocessedAccounts: UnprocessedAccount[] | undefined;
2681
2154
  }
2682
2155
  /**
2683
- * <p>Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3
2684
- * bucket, and the ARN of the KMS key to use to encrypt published findings.</p>
2156
+ * <p>Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.</p>
2685
2157
  * @public
2686
2158
  */
2687
2159
  export interface DestinationProperties {
2688
2160
  /**
2689
- * <p>The ARN of the resource to publish to.</p>
2690
- * <p>To specify an S3 bucket folder use the following format:
2691
- * <code>arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/</code>
2692
- * </p>
2161
+ * <p>The ARN of the resource to publish to.</p> <p>To specify an S3 bucket folder use the following format: <code>arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/</code> </p>
2693
2162
  * @public
2694
2163
  */
2695
2164
  DestinationArn?: string | undefined;
@@ -2704,21 +2173,17 @@ export interface DestinationProperties {
2704
2173
  */
2705
2174
  export interface CreatePublishingDestinationRequest {
2706
2175
  /**
2707
- * <p>The ID of the GuardDuty detector associated with the publishing destination.</p>
2708
- * <p>To find the <code>detectorId</code> in the current Region, see the
2709
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2176
+ * <p>The ID of the GuardDuty detector associated with the publishing destination.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2710
2177
  * @public
2711
2178
  */
2712
2179
  DetectorId: string | undefined;
2713
2180
  /**
2714
- * <p>The type of resource for the publishing destination. Currently only Amazon S3 buckets are
2715
- * supported.</p>
2181
+ * <p>The type of resource for the publishing destination. Currently only Amazon S3 buckets are supported.</p>
2716
2182
  * @public
2717
2183
  */
2718
2184
  DestinationType: DestinationType | undefined;
2719
2185
  /**
2720
- * <p>The properties of the publishing destination, including the ARNs for the destination and
2721
- * the KMS key used for encryption.</p>
2186
+ * <p>The properties of the publishing destination, including the ARNs for the destination and the KMS key used for encryption.</p>
2722
2187
  * @public
2723
2188
  */
2724
2189
  DestinationProperties: DestinationProperties | undefined;
@@ -2748,9 +2213,7 @@ export interface CreatePublishingDestinationResponse {
2748
2213
  */
2749
2214
  export interface CreateSampleFindingsRequest {
2750
2215
  /**
2751
- * <p>The ID of the detector for which you need to create sample findings.</p>
2752
- * <p>To find the <code>detectorId</code> in the current Region, see the
2753
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2216
+ * <p>The ID of the detector for which you need to create sample findings.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2754
2217
  * @public
2755
2218
  */
2756
2219
  DetectorId: string | undefined;
@@ -2770,16 +2233,12 @@ export interface CreateSampleFindingsResponse {
2770
2233
  */
2771
2234
  export interface CreateThreatEntitySetRequest {
2772
2235
  /**
2773
- * <p>The unique ID of the detector of the GuardDuty account for which you want to create a threat entity set.</p>
2774
- * <p>To find the <code>detectorId</code> in the current Region, see the
2775
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2236
+ * <p>The unique ID of the detector of the GuardDuty account for which you want to create a threat entity set.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2776
2237
  * @public
2777
2238
  */
2778
2239
  DetectorId: string | undefined;
2779
2240
  /**
2780
- * <p>A user-friendly name to identify the threat entity set.</p>
2781
- * <p>The name of your list can include
2782
- * lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).</p>
2241
+ * <p>A user-friendly name to identify the threat entity set.</p> <p>The name of your list can include lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).</p>
2783
2242
  * @public
2784
2243
  */
2785
2244
  Name: string | undefined;
@@ -2789,10 +2248,7 @@ export interface CreateThreatEntitySetRequest {
2789
2248
  */
2790
2249
  Format: ThreatEntitySetFormat | undefined;
2791
2250
  /**
2792
- * <p>The URI of the file that contains the threat entity set. The format of the <code>Location</code> URL must be a valid
2793
- * Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about
2794
- * format of the location URLs, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-lists-create-activate.html">Format of location URL under Step 2: Adding trusted or threat intelligence data</a>
2795
- * in the <i>Amazon GuardDuty User Guide</i>.</p>
2251
+ * <p>The URI of the file that contains the threat entity set. The format of the <code>Location</code> URL must be a valid Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about format of the location URLs, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-lists-create-activate.html">Format of location URL under Step 2: Adding trusted or threat intelligence data</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
2796
2252
  * @public
2797
2253
  */
2798
2254
  Location: string | undefined;
@@ -2802,8 +2258,7 @@ export interface CreateThreatEntitySetRequest {
2802
2258
  */
2803
2259
  ExpectedBucketOwner?: string | undefined;
2804
2260
  /**
2805
- * <p>A boolean value that indicates whether GuardDuty should start using the uploaded threat entity set to
2806
- * generate findings.</p>
2261
+ * <p>A boolean value that indicates whether GuardDuty should start using the uploaded threat entity set to generate findings.</p>
2807
2262
  * @public
2808
2263
  */
2809
2264
  Activate: boolean | undefined;
@@ -2833,16 +2288,12 @@ export interface CreateThreatEntitySetResponse {
2833
2288
  */
2834
2289
  export interface CreateThreatIntelSetRequest {
2835
2290
  /**
2836
- * <p>The unique ID of the detector of the GuardDuty account for which you want to create a
2837
- * <code>threatIntelSet</code>.</p>
2838
- * <p>To find the <code>detectorId</code> in the current Region, see the
2839
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2291
+ * <p>The unique ID of the detector of the GuardDuty account for which you want to create a <code>threatIntelSet</code>.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2840
2292
  * @public
2841
2293
  */
2842
2294
  DetectorId: string | undefined;
2843
2295
  /**
2844
- * <p>A user-friendly ThreatIntelSet name displayed in all findings that are generated by
2845
- * activity that involves IP addresses included in this ThreatIntelSet.</p>
2296
+ * <p>A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.</p>
2846
2297
  * @public
2847
2298
  */
2848
2299
  Name: string | undefined;
@@ -2857,8 +2308,7 @@ export interface CreateThreatIntelSetRequest {
2857
2308
  */
2858
2309
  Location: string | undefined;
2859
2310
  /**
2860
- * <p>A Boolean value that indicates whether GuardDuty is to start using the uploaded
2861
- * ThreatIntelSet.</p>
2311
+ * <p>A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.</p>
2862
2312
  * @public
2863
2313
  */
2864
2314
  Activate: boolean | undefined;
@@ -2893,17 +2343,12 @@ export interface CreateThreatIntelSetResponse {
2893
2343
  */
2894
2344
  export interface CreateTrustedEntitySetRequest {
2895
2345
  /**
2896
- * <p>The unique ID of the detector of the GuardDuty account for which you want to create a trusted
2897
- * entity set.</p>
2898
- * <p>To find the <code>detectorId</code> in the current Region, see the
2899
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2346
+ * <p>The unique ID of the detector of the GuardDuty account for which you want to create a trusted entity set.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2900
2347
  * @public
2901
2348
  */
2902
2349
  DetectorId: string | undefined;
2903
2350
  /**
2904
- * <p>A user-friendly name to identify the trusted entity set.</p>
2905
- * <p>The name of your list can include
2906
- * lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).</p>
2351
+ * <p>A user-friendly name to identify the trusted entity set.</p> <p>The name of your list can include lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).</p>
2907
2352
  * @public
2908
2353
  */
2909
2354
  Name: string | undefined;
@@ -2913,16 +2358,12 @@ export interface CreateTrustedEntitySetRequest {
2913
2358
  */
2914
2359
  Format: TrustedEntitySetFormat | undefined;
2915
2360
  /**
2916
- * <p>The URI of the file that contains the threat entity set. The format of the <code>Location</code> URL must be a valid
2917
- * Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about
2918
- * format of the location URLs, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-lists-create-activate.html">Format of location URL under Step 2: Adding trusted or threat intelligence data</a>
2919
- * in the <i>Amazon GuardDuty User Guide</i>.</p>
2361
+ * <p>The URI of the file that contains the threat entity set. The format of the <code>Location</code> URL must be a valid Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about format of the location URLs, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-lists-create-activate.html">Format of location URL under Step 2: Adding trusted or threat intelligence data</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
2920
2362
  * @public
2921
2363
  */
2922
2364
  Location: string | undefined;
2923
2365
  /**
2924
- * <p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b>
2925
- * parameter.</p>
2366
+ * <p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b> parameter.</p>
2926
2367
  * @public
2927
2368
  */
2928
2369
  ExpectedBucketOwner?: string | undefined;
@@ -3002,8 +2443,7 @@ export interface KubernetesConfigurationResult {
3002
2443
  */
3003
2444
  export interface S3LogsConfigurationResult {
3004
2445
  /**
3005
- * <p>A value that describes whether S3 data event logs are automatically enabled for new
3006
- * members of the organization.</p>
2446
+ * <p>A value that describes whether S3 data event logs are automatically enabled for new members of the organization.</p>
3007
2447
  * @public
3008
2448
  */
3009
2449
  Status: DataSourceStatus | undefined;
@@ -3024,14 +2464,12 @@ export interface DataSourceConfigurationsResult {
3024
2464
  */
3025
2465
  DNSLogs: DNSLogsConfigurationResult | undefined;
3026
2466
  /**
3027
- * <p>An object that contains information on the status of VPC flow logs as a data
3028
- * source.</p>
2467
+ * <p>An object that contains information on the status of VPC flow logs as a data source.</p>
3029
2468
  * @public
3030
2469
  */
3031
2470
  FlowLogs: FlowLogsConfigurationResult | undefined;
3032
2471
  /**
3033
- * <p>An object that contains information on the status of S3 Data event logs as a data
3034
- * source.</p>
2472
+ * <p>An object that contains information on the status of S3 Data event logs as a data source.</p>
3035
2473
  * @public
3036
2474
  */
3037
2475
  S3Logs: S3LogsConfigurationResult | undefined;
@@ -3052,9 +2490,7 @@ export interface DataSourceConfigurationsResult {
3052
2490
  */
3053
2491
  export interface DateStatistics {
3054
2492
  /**
3055
- * <p>The timestamp when the total findings count is observed.</p>
3056
- * <p>For example, <code>Date</code> would look like <code>"2024-09-05T17:00:00-07:00"</code>
3057
- * whereas <code>LastGeneratedAt</code> would look like 2024-09-05T17:12:29-07:00".</p>
2493
+ * <p>The timestamp when the total findings count is observed.</p> <p>For example, <code>Date</code> would look like <code>"2024-09-05T17:00:00-07:00"</code> whereas <code>LastGeneratedAt</code> would look like 2024-09-05T17:12:29-07:00".</p>
3058
2494
  * @public
3059
2495
  */
3060
2496
  Date?: Date | undefined;
@@ -3079,8 +2515,7 @@ export interface DateStatistics {
3079
2515
  */
3080
2516
  export interface DeclineInvitationsRequest {
3081
2517
  /**
3082
- * <p>A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member
3083
- * account that you want to decline invitations from.</p>
2518
+ * <p>A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member account that you want to decline invitations from.</p>
3084
2519
  * @public
3085
2520
  */
3086
2521
  AccountIds: string[] | undefined;
@@ -3090,16 +2525,13 @@ export interface DeclineInvitationsRequest {
3090
2525
  */
3091
2526
  export interface DeclineInvitationsResponse {
3092
2527
  /**
3093
- * <p>A list of objects that contain the unprocessed account and a result string that explains
3094
- * why it was unprocessed.</p>
2528
+ * <p>A list of objects that contain the unprocessed account and a result string that explains why it was unprocessed.</p>
3095
2529
  * @public
3096
2530
  */
3097
2531
  UnprocessedAccounts: UnprocessedAccount[] | undefined;
3098
2532
  }
3099
2533
  /**
3100
- * <p>Contains information on the server side encryption method used in the S3 bucket. See
3101
- * <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html">S3
3102
- * Server-Side Encryption</a> for more information.</p>
2534
+ * <p>Contains information on the server side encryption method used in the S3 bucket. See <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html">S3 Server-Side Encryption</a> for more information.</p>
3103
2535
  * @public
3104
2536
  */
3105
2537
  export interface DefaultServerSideEncryption {
@@ -3109,8 +2541,7 @@ export interface DefaultServerSideEncryption {
3109
2541
  */
3110
2542
  EncryptionType?: string | undefined;
3111
2543
  /**
3112
- * <p>The Amazon Resource Name (ARN) of the KMS encryption key. Only available if the bucket
3113
- * <code>EncryptionType</code> is <code>aws:kms</code>.</p>
2544
+ * <p>The Amazon Resource Name (ARN) of the KMS encryption key. Only available if the bucket <code>EncryptionType</code> is <code>aws:kms</code>.</p>
3114
2545
  * @public
3115
2546
  */
3116
2547
  KmsMasterKeyArn?: string | undefined;
@@ -3120,9 +2551,7 @@ export interface DefaultServerSideEncryption {
3120
2551
  */
3121
2552
  export interface DeleteDetectorRequest {
3122
2553
  /**
3123
- * <p>The unique ID of the detector that you want to delete.</p>
3124
- * <p>To find the <code>detectorId</code> in the current Region, see the
3125
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2554
+ * <p>The unique ID of the detector that you want to delete.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3126
2555
  * @public
3127
2556
  */
3128
2557
  DetectorId: string | undefined;
@@ -3137,9 +2566,7 @@ export interface DeleteDetectorResponse {
3137
2566
  */
3138
2567
  export interface DeleteFilterRequest {
3139
2568
  /**
3140
- * <p>The unique ID of the detector that is associated with the filter.</p>
3141
- * <p>To find the <code>detectorId</code> in the current Region, see the
3142
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2569
+ * <p>The unique ID of the detector that is associated with the filter.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3143
2570
  * @public
3144
2571
  */
3145
2572
  DetectorId: string | undefined;
@@ -3159,8 +2586,7 @@ export interface DeleteFilterResponse {
3159
2586
  */
3160
2587
  export interface DeleteInvitationsRequest {
3161
2588
  /**
3162
- * <p>A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member
3163
- * account that you want to delete invitations from.</p>
2589
+ * <p>A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member account that you want to delete invitations from.</p>
3164
2590
  * @public
3165
2591
  */
3166
2592
  AccountIds: string[] | undefined;
@@ -3170,8 +2596,7 @@ export interface DeleteInvitationsRequest {
3170
2596
  */
3171
2597
  export interface DeleteInvitationsResponse {
3172
2598
  /**
3173
- * <p>A list of objects that contain the unprocessed account and a result string that explains
3174
- * why it was unprocessed.</p>
2599
+ * <p>A list of objects that contain the unprocessed account and a result string that explains why it was unprocessed.</p>
3175
2600
  * @public
3176
2601
  */
3177
2602
  UnprocessedAccounts: UnprocessedAccount[] | undefined;
@@ -3181,9 +2606,7 @@ export interface DeleteInvitationsResponse {
3181
2606
  */
3182
2607
  export interface DeleteIPSetRequest {
3183
2608
  /**
3184
- * <p>The unique ID of the detector associated with the IPSet.</p>
3185
- * <p>To find the <code>detectorId</code> in the current Region, see the
3186
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2609
+ * <p>The unique ID of the detector associated with the IPSet.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3187
2610
  * @public
3188
2611
  */
3189
2612
  DetectorId: string | undefined;
@@ -3213,10 +2636,7 @@ export interface DeleteMalwareProtectionPlanRequest {
3213
2636
  */
3214
2637
  export interface DeleteMembersRequest {
3215
2638
  /**
3216
- * <p>The unique ID of the detector of the GuardDuty account whose members you want to
3217
- * delete.</p>
3218
- * <p>To find the <code>detectorId</code> in the current Region, see the
3219
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2639
+ * <p>The unique ID of the detector of the GuardDuty account whose members you want to delete.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3220
2640
  * @public
3221
2641
  */
3222
2642
  DetectorId: string | undefined;
@@ -3241,9 +2661,7 @@ export interface DeleteMembersResponse {
3241
2661
  */
3242
2662
  export interface DeletePublishingDestinationRequest {
3243
2663
  /**
3244
- * <p>The unique ID of the detector associated with the publishing destination to delete.</p>
3245
- * <p>To find the <code>detectorId</code> in the current Region, see the
3246
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2664
+ * <p>The unique ID of the detector associated with the publishing destination to delete.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3247
2665
  * @public
3248
2666
  */
3249
2667
  DetectorId: string | undefined;
@@ -3263,9 +2681,7 @@ export interface DeletePublishingDestinationResponse {
3263
2681
  */
3264
2682
  export interface DeleteThreatEntitySetRequest {
3265
2683
  /**
3266
- * <p>The unique ID of the detector associated with the threat entity set resource.</p>
3267
- * <p>To find the <code>detectorId</code> in the current Region, see the
3268
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2684
+ * <p>The unique ID of the detector associated with the threat entity set resource.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3269
2685
  * @public
3270
2686
  */
3271
2687
  DetectorId: string | undefined;
@@ -3285,9 +2701,7 @@ export interface DeleteThreatEntitySetResponse {
3285
2701
  */
3286
2702
  export interface DeleteThreatIntelSetRequest {
3287
2703
  /**
3288
- * <p>The unique ID of the detector that is associated with the threatIntelSet.</p>
3289
- * <p>To find the <code>detectorId</code> in the current Region, see the
3290
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2704
+ * <p>The unique ID of the detector that is associated with the threatIntelSet.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3291
2705
  * @public
3292
2706
  */
3293
2707
  DetectorId: string | undefined;
@@ -3307,9 +2721,7 @@ export interface DeleteThreatIntelSetResponse {
3307
2721
  */
3308
2722
  export interface DeleteTrustedEntitySetRequest {
3309
2723
  /**
3310
- * <p>The unique ID of the detector associated with the trusted entity set resource.</p>
3311
- * <p>To find the <code>detectorId</code> in the current Region, see the
3312
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2724
+ * <p>The unique ID of the detector associated with the trusted entity set resource.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3313
2725
  * @public
3314
2726
  */
3315
2727
  DetectorId: string | undefined;
@@ -3330,36 +2742,28 @@ export interface DeleteTrustedEntitySetResponse {
3330
2742
  */
3331
2743
  export interface FilterCondition {
3332
2744
  /**
3333
- * <p>Represents an <i>equal</i>
3334
- * <b></b> condition to be applied to
3335
- * a single field when querying for scan entries.</p>
2745
+ * <p>Represents an <i>equal</i> <b/> condition to be applied to a single field when querying for scan entries.</p>
3336
2746
  * @public
3337
2747
  */
3338
2748
  EqualsValue?: string | undefined;
3339
2749
  /**
3340
- * <p>Represents a <i>greater than</i> condition to be applied to a single field
3341
- * when querying for scan entries.</p>
2750
+ * <p>Represents a <i>greater than</i> condition to be applied to a single field when querying for scan entries.</p>
3342
2751
  * @public
3343
2752
  */
3344
2753
  GreaterThan?: number | undefined;
3345
2754
  /**
3346
- * <p>Represents a <i>less than</i> condition to be applied to a single field when
3347
- * querying for scan entries.</p>
2755
+ * <p>Represents a <i>less than</i> condition to be applied to a single field when querying for scan entries.</p>
3348
2756
  * @public
3349
2757
  */
3350
2758
  LessThan?: number | undefined;
3351
2759
  }
3352
2760
  /**
3353
- * <p>Represents a condition that when matched will be added to the response of the operation.
3354
- * Irrespective of using any filter criteria, an administrator account can view the scan entries
3355
- * for all of its member accounts. However, each member account can view the scan entries only
3356
- * for their own account.</p>
2761
+ * <p>Represents a condition that when matched will be added to the response of the operation. Irrespective of using any filter criteria, an administrator account can view the scan entries for all of its member accounts. However, each member account can view the scan entries only for their own account.</p>
3357
2762
  * @public
3358
2763
  */
3359
2764
  export interface FilterCriterion {
3360
2765
  /**
3361
- * <p>An enum value representing possible scan properties to match with given scan
3362
- * entries.</p>
2766
+ * <p>An enum value representing possible scan properties to match with given scan entries.</p>
3363
2767
  * @public
3364
2768
  */
3365
2769
  CriterionKey?: CriterionKey | undefined;
@@ -3375,8 +2779,7 @@ export interface FilterCriterion {
3375
2779
  */
3376
2780
  export interface FilterCriteria {
3377
2781
  /**
3378
- * <p>Represents a condition that when matched will be added to the response of the
3379
- * operation.</p>
2782
+ * <p>Represents a condition that when matched will be added to the response of the operation.</p>
3380
2783
  * @public
3381
2784
  */
3382
2785
  FilterCriterion?: FilterCriterion[] | undefined;
@@ -3387,8 +2790,7 @@ export interface FilterCriteria {
3387
2790
  */
3388
2791
  export interface SortCriteria {
3389
2792
  /**
3390
- * <p>Represents the finding attribute, such as <code>accountId</code>, that sorts the
3391
- * findings.</p>
2793
+ * <p>Represents the finding attribute, such as <code>accountId</code>, that sorts the findings.</p>
3392
2794
  * @public
3393
2795
  */
3394
2796
  AttributeName?: string | undefined;
@@ -3403,23 +2805,17 @@ export interface SortCriteria {
3403
2805
  */
3404
2806
  export interface DescribeMalwareScansRequest {
3405
2807
  /**
3406
- * <p>The unique ID of the detector that the request is associated with.</p>
3407
- * <p>To find the <code>detectorId</code> in the current Region, see the
3408
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2808
+ * <p>The unique ID of the detector that the request is associated with.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3409
2809
  * @public
3410
2810
  */
3411
2811
  DetectorId: string | undefined;
3412
2812
  /**
3413
- * <p>You can use this parameter when paginating results. Set the value of this parameter to
3414
- * null on your first call to the list action. For subsequent calls to the action, fill nextToken
3415
- * in the request with the value of NextToken from the previous response to continue listing
3416
- * data.</p>
2813
+ * <p>You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action, fill nextToken in the request with the value of NextToken from the previous response to continue listing data.</p>
3417
2814
  * @public
3418
2815
  */
3419
2816
  NextToken?: string | undefined;
3420
2817
  /**
3421
- * <p>You can use this parameter to indicate the maximum number of items that you want in the
3422
- * response. The default value is 50. The maximum value is 50.</p>
2818
+ * <p>You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 50. The maximum value is 50.</p>
3423
2819
  * @public
3424
2820
  */
3425
2821
  MaxResults?: number | undefined;
@@ -3429,10 +2825,7 @@ export interface DescribeMalwareScansRequest {
3429
2825
  */
3430
2826
  FilterCriteria?: FilterCriteria | undefined;
3431
2827
  /**
3432
- * <p>Represents the criteria used for sorting scan entries. The <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SortCriteria.html#guardduty-Type-SortCriteria-attributeName">
3433
- * <code>attributeName</code>
3434
- * </a> is required and it must be
3435
- * <code>scanStartTime</code>.</p>
2828
+ * <p>Represents the criteria used for sorting scan entries. The <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SortCriteria.html#guardduty-Type-SortCriteria-attributeName"> <code>attributeName</code> </a> is required and it must be <code>scanStartTime</code>.</p>
3436
2829
  * @public
3437
2830
  */
3438
2831
  SortCriteria?: SortCriteria | undefined;
@@ -3527,18 +2920,12 @@ export interface TriggerDetails {
3527
2920
  */
3528
2921
  export interface Scan {
3529
2922
  /**
3530
- * <p>The unique ID of the detector that is associated with the request.</p>
3531
- * <p>To find the <code>detectorId</code> in the current Region, see the
3532
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2923
+ * <p>The unique ID of the detector that is associated with the request.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3533
2924
  * @public
3534
2925
  */
3535
2926
  DetectorId?: string | undefined;
3536
2927
  /**
3537
- * <p>The unique detector ID of the administrator account that the request is associated with.
3538
- * If the account is an administrator, the <code>AdminDetectorId</code> will be the same as the one used for
3539
- * <code>DetectorId</code>.</p>
3540
- * <p>To find the <code>detectorId</code> in the current Region, see the
3541
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
2928
+ * <p>The unique detector ID of the administrator account that the request is associated with. If the account is an administrator, the <code>AdminDetectorId</code> will be the same as the one used for <code>DetectorId</code>.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3542
2929
  * @public
3543
2930
  */
3544
2931
  AdminDetectorId?: string | undefined;
@@ -3618,8 +3005,7 @@ export interface DescribeMalwareScansResponse {
3618
3005
  */
3619
3006
  Scans: Scan[] | undefined;
3620
3007
  /**
3621
- * <p>The pagination parameter to be used on the next list operation to retrieve more
3622
- * items.</p>
3008
+ * <p>The pagination parameter to be used on the next list operation to retrieve more items.</p>
3623
3009
  * @public
3624
3010
  */
3625
3011
  NextToken?: string | undefined;
@@ -3629,36 +3015,28 @@ export interface DescribeMalwareScansResponse {
3629
3015
  */
3630
3016
  export interface DescribeOrganizationConfigurationRequest {
3631
3017
  /**
3632
- * <p>The detector ID of the delegated administrator for which you need to retrieve the information.</p>
3633
- * <p>To find the <code>detectorId</code> in the current Region, see the
3634
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3018
+ * <p>The detector ID of the delegated administrator for which you need to retrieve the information.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3635
3019
  * @public
3636
3020
  */
3637
3021
  DetectorId: string | undefined;
3638
3022
  /**
3639
- * <p>You can use this parameter to indicate the maximum number of items that you want in the
3640
- * response.</p>
3023
+ * <p>You can use this parameter to indicate the maximum number of items that you want in the response.</p>
3641
3024
  * @public
3642
3025
  */
3643
3026
  MaxResults?: number | undefined;
3644
3027
  /**
3645
- * <p>You can use this parameter when paginating results. Set the value of this parameter to
3646
- * null on your first call to the list action. For subsequent calls to the action, fill
3647
- * <code>nextToken</code> in the request with the value of <code>NextToken</code> from the
3648
- * previous response to continue listing data.</p>
3028
+ * <p>You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action, fill <code>nextToken</code> in the request with the value of <code>NextToken</code> from the previous response to continue listing data.</p>
3649
3029
  * @public
3650
3030
  */
3651
3031
  NextToken?: string | undefined;
3652
3032
  }
3653
3033
  /**
3654
- * <p>The current configuration of Kubernetes audit logs as a data source for the
3655
- * organization.</p>
3034
+ * <p>The current configuration of Kubernetes audit logs as a data source for the organization.</p>
3656
3035
  * @public
3657
3036
  */
3658
3037
  export interface OrganizationKubernetesAuditLogsConfigurationResult {
3659
3038
  /**
3660
- * <p>Whether Kubernetes audit logs data source should be auto-enabled for new members joining
3661
- * the organization.</p>
3039
+ * <p>Whether Kubernetes audit logs data source should be auto-enabled for new members joining the organization.</p>
3662
3040
  * @public
3663
3041
  */
3664
3042
  AutoEnable: boolean | undefined;
@@ -3669,28 +3047,24 @@ export interface OrganizationKubernetesAuditLogsConfigurationResult {
3669
3047
  */
3670
3048
  export interface OrganizationKubernetesConfigurationResult {
3671
3049
  /**
3672
- * <p>The current configuration of Kubernetes audit logs as a data source for the
3673
- * organization.</p>
3050
+ * <p>The current configuration of Kubernetes audit logs as a data source for the organization.</p>
3674
3051
  * @public
3675
3052
  */
3676
3053
  AuditLogs: OrganizationKubernetesAuditLogsConfigurationResult | undefined;
3677
3054
  }
3678
3055
  /**
3679
- * <p>An object that contains information on the status of whether EBS volumes scanning will be
3680
- * enabled as a data source for an organization.</p>
3056
+ * <p>An object that contains information on the status of whether EBS volumes scanning will be enabled as a data source for an organization.</p>
3681
3057
  * @public
3682
3058
  */
3683
3059
  export interface OrganizationEbsVolumesResult {
3684
3060
  /**
3685
- * <p>An object that contains the status of whether scanning EBS volumes should be auto-enabled
3686
- * for new members joining the organization.</p>
3061
+ * <p>An object that contains the status of whether scanning EBS volumes should be auto-enabled for new members joining the organization.</p>
3687
3062
  * @public
3688
3063
  */
3689
3064
  AutoEnable?: boolean | undefined;
3690
3065
  }
3691
3066
  /**
3692
- * <p>An object that contains information on the status of scanning EC2 instances with findings
3693
- * for an organization.</p>
3067
+ * <p>An object that contains information on the status of scanning EC2 instances with findings for an organization.</p>
3694
3068
  * @public
3695
3069
  */
3696
3070
  export interface OrganizationScanEc2InstanceWithFindingsResult {
@@ -3701,34 +3075,29 @@ export interface OrganizationScanEc2InstanceWithFindingsResult {
3701
3075
  EbsVolumes?: OrganizationEbsVolumesResult | undefined;
3702
3076
  }
3703
3077
  /**
3704
- * <p>An object that contains information on the status of all Malware Protection data source
3705
- * for an organization.</p>
3078
+ * <p>An object that contains information on the status of all Malware Protection data source for an organization.</p>
3706
3079
  * @public
3707
3080
  */
3708
3081
  export interface OrganizationMalwareProtectionConfigurationResult {
3709
3082
  /**
3710
- * <p>Describes the configuration for scanning EC2 instances with findings for an
3711
- * organization.</p>
3083
+ * <p>Describes the configuration for scanning EC2 instances with findings for an organization.</p>
3712
3084
  * @public
3713
3085
  */
3714
3086
  ScanEc2InstanceWithFindings?: OrganizationScanEc2InstanceWithFindingsResult | undefined;
3715
3087
  }
3716
3088
  /**
3717
- * <p>The current configuration of S3 data event logs as a data source for the
3718
- * organization.</p>
3089
+ * <p>The current configuration of S3 data event logs as a data source for the organization.</p>
3719
3090
  * @public
3720
3091
  */
3721
3092
  export interface OrganizationS3LogsConfigurationResult {
3722
3093
  /**
3723
- * <p>A value that describes whether S3 data event logs are automatically enabled for new
3724
- * members of the organization.</p>
3094
+ * <p>A value that describes whether S3 data event logs are automatically enabled for new members of the organization.</p>
3725
3095
  * @public
3726
3096
  */
3727
3097
  AutoEnable: boolean | undefined;
3728
3098
  }
3729
3099
  /**
3730
- * <p>An object that contains information on which data sources are automatically enabled for
3731
- * new members within the organization.</p>
3100
+ * <p>An object that contains information on which data sources are automatically enabled for new members within the organization.</p>
3732
3101
  * @public
3733
3102
  */
3734
3103
  export interface OrganizationDataSourceConfigurationsResult {
@@ -3754,38 +3123,12 @@ export interface OrganizationDataSourceConfigurationsResult {
3754
3123
  */
3755
3124
  export interface OrganizationAdditionalConfigurationResult {
3756
3125
  /**
3757
- * <p>The name of the additional configuration that is configured for the member accounts within
3758
- * the organization. These values are applicable to only Runtime Monitoring protection plan.</p>
3126
+ * <p>The name of the additional configuration that is configured for the member accounts within the organization. These values are applicable to only Runtime Monitoring protection plan.</p>
3759
3127
  * @public
3760
3128
  */
3761
3129
  Name?: OrgFeatureAdditionalConfiguration | undefined;
3762
3130
  /**
3763
- * <p>Describes the status of the additional configuration that is configured for the
3764
- * member accounts within the organization. One of the following
3765
- * values is the status for the entire organization:</p>
3766
- * <ul>
3767
- * <li>
3768
- * <p>
3769
- * <code>NEW</code>: Indicates that when a new account joins the organization, they will
3770
- * have the additional configuration enabled automatically. </p>
3771
- * </li>
3772
- * <li>
3773
- * <p>
3774
- * <code>ALL</code>: Indicates that all accounts in the organization have
3775
- * the additional configuration
3776
- * enabled automatically. This includes <code>NEW</code> accounts that join the organization
3777
- * and accounts that may have been suspended or removed from the organization in
3778
- * GuardDuty.</p>
3779
- * <p>It may take up to 24 hours to update the configuration for all the member accounts.</p>
3780
- * </li>
3781
- * <li>
3782
- * <p>
3783
- * <code>NONE</code>: Indicates that the additional configuration will not be
3784
- * automatically enabled for any
3785
- * account in the organization. The administrator must manage the additional configuration
3786
- * for each account individually.</p>
3787
- * </li>
3788
- * </ul>
3131
+ * <p>Describes the status of the additional configuration that is configured for the member accounts within the organization. One of the following values is the status for the entire organization:</p> <ul> <li> <p> <code>NEW</code>: Indicates that when a new account joins the organization, they will have the additional configuration enabled automatically. </p> </li> <li> <p> <code>ALL</code>: Indicates that all accounts in the organization have the additional configuration enabled automatically. This includes <code>NEW</code> accounts that join the organization and accounts that may have been suspended or removed from the organization in GuardDuty.</p> <p>It may take up to 24 hours to update the configuration for all the member accounts.</p> </li> <li> <p> <code>NONE</code>: Indicates that the additional configuration will not be automatically enabled for any account in the organization. The administrator must manage the additional configuration for each account individually.</p> </li> </ul>
3789
3132
  * @public
3790
3133
  */
3791
3134
  AutoEnable?: OrgFeatureStatus | undefined;
@@ -3796,41 +3139,17 @@ export interface OrganizationAdditionalConfigurationResult {
3796
3139
  */
3797
3140
  export interface OrganizationFeatureConfigurationResult {
3798
3141
  /**
3799
- * <p>The name of the feature that is configured for the member accounts within the
3800
- * organization.</p>
3142
+ * <p>The name of the feature that is configured for the member accounts within the organization.</p>
3801
3143
  * @public
3802
3144
  */
3803
3145
  Name?: OrgFeature | undefined;
3804
3146
  /**
3805
- * <p>Describes the status of the feature that is configured for the member accounts within
3806
- * the organization.</p>
3807
- * <ul>
3808
- * <li>
3809
- * <p>
3810
- * <code>NEW</code>: Indicates that when a new account joins the organization, they will
3811
- * have the feature enabled automatically. </p>
3812
- * </li>
3813
- * <li>
3814
- * <p>
3815
- * <code>ALL</code>: Indicates that all accounts in the organization have the feature
3816
- * enabled automatically. This includes <code>NEW</code> accounts that join the organization
3817
- * and accounts that may have been suspended or removed from the organization in
3818
- * GuardDuty.</p>
3819
- * </li>
3820
- * <li>
3821
- * <p>
3822
- * <code>NONE</code>: Indicates that the feature will not be automatically enabled for any
3823
- * account in the organization. In this case, each account will be managed individually
3824
- * by the
3825
- * administrator.</p>
3826
- * </li>
3827
- * </ul>
3147
+ * <p>Describes the status of the feature that is configured for the member accounts within the organization.</p> <ul> <li> <p> <code>NEW</code>: Indicates that when a new account joins the organization, they will have the feature enabled automatically. </p> </li> <li> <p> <code>ALL</code>: Indicates that all accounts in the organization have the feature enabled automatically. This includes <code>NEW</code> accounts that join the organization and accounts that may have been suspended or removed from the organization in GuardDuty.</p> </li> <li> <p> <code>NONE</code>: Indicates that the feature will not be automatically enabled for any account in the organization. In this case, each account will be managed individually by the administrator.</p> </li> </ul>
3828
3148
  * @public
3829
3149
  */
3830
3150
  AutoEnable?: OrgFeatureStatus | undefined;
3831
3151
  /**
3832
- * <p>The additional configuration that is configured for the member accounts within the
3833
- * organization.</p>
3152
+ * <p>The additional configuration that is configured for the member accounts within the organization.</p>
3834
3153
  * @public
3835
3154
  */
3836
3155
  AdditionalConfiguration?: OrganizationAdditionalConfigurationResult[] | undefined;
@@ -3840,18 +3159,14 @@ export interface OrganizationFeatureConfigurationResult {
3840
3159
  */
3841
3160
  export interface DescribeOrganizationConfigurationResponse {
3842
3161
  /**
3843
- * <p>Indicates whether GuardDuty is automatically enabled for accounts added to the
3844
- * organization.</p>
3845
- * <p>Even though this is still supported, we recommend using
3846
- * <code>AutoEnableOrganizationMembers</code> to achieve the similar results.</p>
3162
+ * <p>Indicates whether GuardDuty is automatically enabled for accounts added to the organization.</p> <p>Even though this is still supported, we recommend using <code>AutoEnableOrganizationMembers</code> to achieve the similar results.</p>
3847
3163
  *
3848
3164
  * @deprecated This field is deprecated, use AutoEnableOrganizationMembers instead.
3849
3165
  * @public
3850
3166
  */
3851
3167
  AutoEnable?: boolean | undefined;
3852
3168
  /**
3853
- * <p>Indicates whether the maximum number of allowed member accounts are already associated
3854
- * with the delegated administrator account for your organization.</p>
3169
+ * <p>Indicates whether the maximum number of allowed member accounts are already associated with the delegated administrator account for your organization.</p>
3855
3170
  * @public
3856
3171
  */
3857
3172
  MemberAccountLimitReached: boolean | undefined;
@@ -3868,39 +3183,12 @@ export interface DescribeOrganizationConfigurationResponse {
3868
3183
  */
3869
3184
  Features?: OrganizationFeatureConfigurationResult[] | undefined;
3870
3185
  /**
3871
- * <p>The pagination parameter to be used on the next list operation to retrieve more
3872
- * items.</p>
3186
+ * <p>The pagination parameter to be used on the next list operation to retrieve more items.</p>
3873
3187
  * @public
3874
3188
  */
3875
3189
  NextToken?: string | undefined;
3876
3190
  /**
3877
- * <p>Indicates the auto-enablement configuration of GuardDuty or any of the corresponding protection plans for the member accounts in the
3878
- * organization.</p>
3879
- * <ul>
3880
- * <li>
3881
- * <p>
3882
- * <code>NEW</code>: Indicates that when a new account joins the organization, they will
3883
- * have GuardDuty or any of the corresponding protection plans enabled automatically. </p>
3884
- * </li>
3885
- * <li>
3886
- * <p>
3887
- * <code>ALL</code>: Indicates that all accounts in the organization have GuardDuty and any of the corresponding
3888
- * protection plans enabled automatically. This includes <code>NEW</code> accounts that join the organization
3889
- * and accounts that may have been suspended or removed from the organization in
3890
- * GuardDuty.</p>
3891
- * </li>
3892
- * <li>
3893
- * <p>
3894
- * <code>NONE</code>: Indicates that GuardDuty or any of the corresponding protection plans
3895
- * will not be automatically enabled for any
3896
- * account in the organization. The administrator must manage GuardDuty for each account in
3897
- * the organization individually.</p>
3898
- * <p>When you update the auto-enable setting from <code>ALL</code> or <code>NEW</code> to
3899
- * <code>NONE</code>, this action doesn't disable the corresponding option for your existing accounts. This
3900
- * configuration will apply to the new accounts that join the organization. After you update the auto-enable settings,
3901
- * no new account will have the corresponding option as enabled.</p>
3902
- * </li>
3903
- * </ul>
3191
+ * <p>Indicates the auto-enablement configuration of GuardDuty or any of the corresponding protection plans for the member accounts in the organization.</p> <ul> <li> <p> <code>NEW</code>: Indicates that when a new account joins the organization, they will have GuardDuty or any of the corresponding protection plans enabled automatically. </p> </li> <li> <p> <code>ALL</code>: Indicates that all accounts in the organization have GuardDuty and any of the corresponding protection plans enabled automatically. This includes <code>NEW</code> accounts that join the organization and accounts that may have been suspended or removed from the organization in GuardDuty.</p> </li> <li> <p> <code>NONE</code>: Indicates that GuardDuty or any of the corresponding protection plans will not be automatically enabled for any account in the organization. The administrator must manage GuardDuty for each account in the organization individually.</p> <p>When you update the auto-enable setting from <code>ALL</code> or <code>NEW</code> to <code>NONE</code>, this action doesn't disable the corresponding option for your existing accounts. This configuration will apply to the new accounts that join the organization. After you update the auto-enable settings, no new account will have the corresponding option as enabled.</p> </li> </ul>
3904
3192
  * @public
3905
3193
  */
3906
3194
  AutoEnableOrganizationMembers?: AutoEnableMembers | undefined;
@@ -3910,10 +3198,7 @@ export interface DescribeOrganizationConfigurationResponse {
3910
3198
  */
3911
3199
  export interface DescribePublishingDestinationRequest {
3912
3200
  /**
3913
- * <p>The unique ID of the detector associated with the publishing destination to
3914
- * retrieve.</p>
3915
- * <p>To find the <code>detectorId</code> in the current Region, see the
3916
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3201
+ * <p>The unique ID of the detector associated with the publishing destination to retrieve.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
3917
3202
  * @public
3918
3203
  */
3919
3204
  DetectorId: string | undefined;
@@ -3933,8 +3218,7 @@ export interface DescribePublishingDestinationResponse {
3933
3218
  */
3934
3219
  DestinationId: string | undefined;
3935
3220
  /**
3936
- * <p>The type of publishing destination. Currently, only Amazon S3 buckets are
3937
- * supported.</p>
3221
+ * <p>The type of publishing destination. Currently, only Amazon S3 buckets are supported.</p>
3938
3222
  * @public
3939
3223
  */
3940
3224
  DestinationType: DestinationType | undefined;
@@ -3944,14 +3228,12 @@ export interface DescribePublishingDestinationResponse {
3944
3228
  */
3945
3229
  Status: PublishingStatus | undefined;
3946
3230
  /**
3947
- * <p>The time, in epoch millisecond format, at which GuardDuty was first unable to publish
3948
- * findings to the destination.</p>
3231
+ * <p>The time, in epoch millisecond format, at which GuardDuty was first unable to publish findings to the destination.</p>
3949
3232
  * @public
3950
3233
  */
3951
3234
  PublishingFailureStartTimestamp: number | undefined;
3952
3235
  /**
3953
- * <p>A <code>DestinationProperties</code> object that includes the <code>DestinationArn</code>
3954
- * and <code>KmsKeyArn</code> of the publishing destination.</p>
3236
+ * <p>A <code>DestinationProperties</code> object that includes the <code>DestinationArn</code> and <code>KmsKeyArn</code> of the publishing destination.</p>
3955
3237
  * @public
3956
3238
  */
3957
3239
  DestinationProperties: DestinationProperties | undefined;
@@ -3962,8 +3244,7 @@ export interface DescribePublishingDestinationResponse {
3962
3244
  Tags?: Record<string, string> | undefined;
3963
3245
  }
3964
3246
  /**
3965
- * <p>Contains information about the publishing destination, including the ID, type, and
3966
- * status.</p>
3247
+ * <p>Contains information about the publishing destination, including the ID, type, and status.</p>
3967
3248
  * @public
3968
3249
  */
3969
3250
  export interface Destination {
@@ -3973,8 +3254,7 @@ export interface Destination {
3973
3254
  */
3974
3255
  DestinationId: string | undefined;
3975
3256
  /**
3976
- * <p>The type of resource used for the publishing destination. Currently, only Amazon S3
3977
- * buckets are supported.</p>
3257
+ * <p>The type of resource used for the publishing destination. Currently, only Amazon S3 buckets are supported.</p>
3978
3258
  * @public
3979
3259
  */
3980
3260
  DestinationType: DestinationType | undefined;
@@ -4063,14 +3343,12 @@ export interface NetworkEndpoint {
4063
3343
  Connection?: NetworkConnection | undefined;
4064
3344
  }
4065
3345
  /**
4066
- * <p>Contains information about the Amazon EC2 Image involved in a GuardDuty finding,
4067
- * including unique identifiers of the Amazon EC2 instances.</p>
3346
+ * <p>Contains information about the Amazon EC2 Image involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
4068
3347
  * @public
4069
3348
  */
4070
3349
  export interface Ec2Image {
4071
3350
  /**
4072
- * <p>A list of unique identifiers for the compromised Amazon EC2 instances that were launched with the
4073
- * same Amazon Machine Image (AMI).</p>
3351
+ * <p>A list of unique identifiers for the compromised Amazon EC2 instances that were launched with the same Amazon Machine Image (AMI).</p>
4074
3352
  * @public
4075
3353
  */
4076
3354
  Ec2InstanceUids?: string[] | undefined;
@@ -4113,9 +3391,7 @@ export interface ProductCode {
4113
3391
  */
4114
3392
  export interface Ec2Instance {
4115
3393
  /**
4116
- * <p>The availability zone of the Amazon EC2 instance. For more information, see
4117
- * <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-availability-zones">Availability zones</a>
4118
- * in the <i>Amazon EC2 User Guide</i>.</p>
3394
+ * <p>The availability zone of the Amazon EC2 instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-availability-zones">Availability zones</a> in the <i>Amazon EC2 User Guide</i>.</p>
4119
3395
  * @public
4120
3396
  */
4121
3397
  AvailabilityZone?: string | undefined;
@@ -4125,9 +3401,7 @@ export interface Ec2Instance {
4125
3401
  */
4126
3402
  ImageDescription?: string | undefined;
4127
3403
  /**
4128
- * <p>The state of the Amazon EC2 instance. For more information, see
4129
- * <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html">Amazon EC2 instance state changes</a>
4130
- * in the <i>Amazon EC2 User Guide</i>.</p>
3404
+ * <p>The state of the Amazon EC2 instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html">Amazon EC2 instance state changes</a> in the <i>Amazon EC2 User Guide</i>.</p>
4131
3405
  * @public
4132
3406
  */
4133
3407
  InstanceState?: string | undefined;
@@ -4163,14 +3437,12 @@ export interface Ec2Instance {
4163
3437
  Ec2NetworkInterfaceUids?: string[] | undefined;
4164
3438
  }
4165
3439
  /**
4166
- * <p>Contains information about the Amazon EC2 launch template involved in a GuardDuty finding,
4167
- * including unique identifiers of the Amazon EC2 instances.</p>
3440
+ * <p>Contains information about the Amazon EC2 launch template involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
4168
3441
  * @public
4169
3442
  */
4170
3443
  export interface Ec2LaunchTemplate {
4171
3444
  /**
4172
- * <p>A list of unique identifiers for the compromised Amazon EC2 instances that share the
4173
- * same Amazon EC2 launch template.</p>
3445
+ * <p>A list of unique identifiers for the compromised Amazon EC2 instances that share the same Amazon EC2 launch template.</p>
4174
3446
  * @public
4175
3447
  */
4176
3448
  Ec2InstanceUids?: string[] | undefined;
@@ -4249,21 +3521,18 @@ export interface Ec2NetworkInterface {
4249
3521
  VpcId?: string | undefined;
4250
3522
  }
4251
3523
  /**
4252
- * <p>Contains information about the Amazon EC2 VPC involved in a GuardDuty finding,
4253
- * including unique identifiers of the Amazon EC2 instances.</p>
3524
+ * <p>Contains information about the Amazon EC2 VPC involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
4254
3525
  * @public
4255
3526
  */
4256
3527
  export interface Ec2Vpc {
4257
3528
  /**
4258
- * <p>A list of unique identifiers for the compromised Amazon EC2 instances that were launched within the
4259
- * same Virtual Private Cloud (VPC).</p>
3529
+ * <p>A list of unique identifiers for the compromised Amazon EC2 instances that were launched within the same Virtual Private Cloud (VPC).</p>
4260
3530
  * @public
4261
3531
  */
4262
3532
  Ec2InstanceUids?: string[] | undefined;
4263
3533
  }
4264
3534
  /**
4265
- * <p>Contains information about the Amazon ECS cluster involved in a GuardDuty finding,
4266
- * including cluster identification and status.</p>
3535
+ * <p>Contains information about the Amazon ECS cluster involved in a GuardDuty finding, including cluster identification and status.</p>
4267
3536
  * @public
4268
3537
  */
4269
3538
  export interface EcsCluster {
@@ -4273,15 +3542,13 @@ export interface EcsCluster {
4273
3542
  */
4274
3543
  Status?: EcsClusterStatus | undefined;
4275
3544
  /**
4276
- * <p>A list of unique identifiers for the Amazon EC2 instances that serve as container instances in
4277
- * the Amazon ECS cluster.</p>
3545
+ * <p>A list of unique identifiers for the Amazon EC2 instances that serve as container instances in the Amazon ECS cluster.</p>
4278
3546
  * @public
4279
3547
  */
4280
3548
  Ec2InstanceUids?: string[] | undefined;
4281
3549
  }
4282
3550
  /**
4283
- * <p>Contains information about Amazon ECS task involved in a GuardDuty finding,
4284
- * including task definition and container identifiers.</p>
3551
+ * <p>Contains information about Amazon ECS task involved in a GuardDuty finding, including task definition and container identifiers.</p>
4285
3552
  * @public
4286
3553
  */
4287
3554
  export interface EcsTask {
@@ -4307,8 +3574,7 @@ export interface EcsTask {
4307
3574
  ContainerUids?: string[] | undefined;
4308
3575
  }
4309
3576
  /**
4310
- * <p>Contains information about the Amazon EKS cluster involved in a GuardDuty finding,
4311
- * including cluster identification, status, and network configuration.</p>
3577
+ * <p>Contains information about the Amazon EKS cluster involved in a GuardDuty finding, including cluster identification, status, and network configuration.</p>
4312
3578
  * @public
4313
3579
  */
4314
3580
  export interface EksCluster {
@@ -4339,21 +3605,18 @@ export interface EksCluster {
4339
3605
  Ec2InstanceUids?: string[] | undefined;
4340
3606
  }
4341
3607
  /**
4342
- * <p>Contains information about the IAM instance profile involved in a GuardDuty finding,
4343
- * including unique identifiers of the Amazon EC2 instances.</p>
3608
+ * <p>Contains information about the IAM instance profile involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
4344
3609
  * @public
4345
3610
  */
4346
3611
  export interface IamInstanceProfileV2 {
4347
3612
  /**
4348
- * <p>A list of unique identifiers for the compromised Amazon EC2 instances that share the
4349
- * same IAM instance profile.</p>
3613
+ * <p>A list of unique identifiers for the compromised Amazon EC2 instances that share the same IAM instance profile.</p>
4350
3614
  * @public
4351
3615
  */
4352
3616
  Ec2InstanceUids?: string[] | undefined;
4353
3617
  }
4354
3618
  /**
4355
- * <p>Contains information about Kubernetes workloads involved in a GuardDuty finding,
4356
- * including pods, deployments, and other Kubernetes resources.</p>
3619
+ * <p>Contains information about Kubernetes workloads involved in a GuardDuty finding, including pods, deployments, and other Kubernetes resources.</p>
4357
3620
  * @public
4358
3621
  */
4359
3622
  export interface KubernetesWorkload {
@@ -4374,15 +3637,12 @@ export interface KubernetesWorkload {
4374
3637
  KubernetesResourcesTypes?: KubernetesResourcesTypes | undefined;
4375
3638
  }
4376
3639
  /**
4377
- * <p>Describes public access policies that apply to the Amazon S3 bucket.</p>
4378
- * <p>For information about each of the following settings, see
4379
- * <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html">Blocking public access to your Amazon S3 storage</a> in the <i>Amazon S3 User Guide</i>.</p>
3640
+ * <p>Describes public access policies that apply to the Amazon S3 bucket.</p> <p>For information about each of the following settings, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html">Blocking public access to your Amazon S3 storage</a> in the <i>Amazon S3 User Guide</i>.</p>
4380
3641
  * @public
4381
3642
  */
4382
3643
  export interface PublicAccessConfiguration {
4383
3644
  /**
4384
- * <p>Indicates whether or not there is a setting that allows public access to the Amazon S3 buckets through access
4385
- * control lists (ACLs).</p>
3645
+ * <p>Indicates whether or not there is a setting that allows public access to the Amazon S3 buckets through access control lists (ACLs).</p>
4386
3646
  * @public
4387
3647
  */
4388
3648
  PublicAclAccess?: PublicAccessStatus | undefined;
@@ -4392,8 +3652,7 @@ export interface PublicAccessConfiguration {
4392
3652
  */
4393
3653
  PublicPolicyAccess?: PublicAccessStatus | undefined;
4394
3654
  /**
4395
- * <p>Indicates whether or not there is a setting that ignores all public access control lists (ACLs)
4396
- * on the Amazon S3 bucket and the objects that it contains.</p>
3655
+ * <p>Indicates whether or not there is a setting that ignores all public access control lists (ACLs) on the Amazon S3 bucket and the objects that it contains.</p>
4397
3656
  * @public
4398
3657
  */
4399
3658
  PublicAclIgnoreBehavior?: PublicAclIgnoreBehavior | undefined;
@@ -4419,9 +3678,7 @@ export interface S3Bucket {
4419
3678
  */
4420
3679
  CreatedAt?: Date | undefined;
4421
3680
  /**
4422
- * <p>The type of encryption used for the Amazon S3 buckets and its objects. For more information,
4423
- * see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/serv-side-encryption.html">Protecting data with server-side encryption</a>
4424
- * in the <i>Amazon S3 User Guide</i>.</p>
3681
+ * <p>The type of encryption used for the Amazon S3 buckets and its objects. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/serv-side-encryption.html">Protecting data with server-side encryption</a> in the <i>Amazon S3 User Guide</i>.</p>
4425
3682
  * @public
4426
3683
  */
4427
3684
  EncryptionType?: string | undefined;
@@ -4467,8 +3724,7 @@ export interface S3Bucket {
4467
3724
  */
4468
3725
  export interface S3Object {
4469
3726
  /**
4470
- * <p>The entity tag is a hash of the Amazon S3 object. The ETag reflects changes only to the
4471
- * contents of an object, and not its metadata.</p>
3727
+ * <p>The entity tag is a hash of the Amazon S3 object. The ETag reflects changes only to the contents of an object, and not its metadata.</p>
4472
3728
  * @public
4473
3729
  */
4474
3730
  ETag?: string | undefined;
@@ -4484,8 +3740,7 @@ export interface S3Object {
4484
3740
  VersionId?: string | undefined;
4485
3741
  }
4486
3742
  /**
4487
- * <p>Contains information about the Amazon Web Services resource that is associated with the activity that prompted
4488
- * GuardDuty to generate a finding.</p>
3743
+ * <p>Contains information about the Amazon Web Services resource that is associated with the activity that prompted GuardDuty to generate a finding.</p>
4489
3744
  * @public
4490
3745
  */
4491
3746
  export interface ResourceData {
@@ -4515,68 +3770,57 @@ export interface ResourceData {
4515
3770
  */
4516
3771
  S3Object?: S3Object | undefined;
4517
3772
  /**
4518
- * <p>Contains detailed information about the Amazon EKS cluster associated with the activity that
4519
- * prompted GuardDuty to generate a finding.</p>
3773
+ * <p>Contains detailed information about the Amazon EKS cluster associated with the activity that prompted GuardDuty to generate a finding.</p>
4520
3774
  * @public
4521
3775
  */
4522
3776
  EksCluster?: EksCluster | undefined;
4523
3777
  /**
4524
- * <p>Contains detailed information about the Kubernetes workload associated with the activity that
4525
- * prompted GuardDuty to generate a finding.</p>
3778
+ * <p>Contains detailed information about the Kubernetes workload associated with the activity that prompted GuardDuty to generate a finding.</p>
4526
3779
  * @public
4527
3780
  */
4528
3781
  KubernetesWorkload?: KubernetesWorkload | undefined;
4529
3782
  /**
4530
- * <p>Contains detailed information about the container associated with the activity that
4531
- * prompted GuardDuty to generate a finding.</p>
3783
+ * <p>Contains detailed information about the container associated with the activity that prompted GuardDuty to generate a finding.</p>
4532
3784
  * @public
4533
3785
  */
4534
3786
  Container?: ContainerFindingResource | undefined;
4535
3787
  /**
4536
- * <p>Contains detailed information about the Amazon ECS cluster associated with the activity that
4537
- * prompted GuardDuty to generate a finding.</p>
3788
+ * <p>Contains detailed information about the Amazon ECS cluster associated with the activity that prompted GuardDuty to generate a finding.</p>
4538
3789
  * @public
4539
3790
  */
4540
3791
  EcsCluster?: EcsCluster | undefined;
4541
3792
  /**
4542
- * <p>Contains detailed information about the Amazon ECS task associated with the activity that
4543
- * prompted GuardDuty to generate a finding.</p>
3793
+ * <p>Contains detailed information about the Amazon ECS task associated with the activity that prompted GuardDuty to generate a finding.</p>
4544
3794
  * @public
4545
3795
  */
4546
3796
  EcsTask?: EcsTask | undefined;
4547
3797
  /**
4548
- * <p>Contains detailed information about the IAM instance profile associated with the activity that
4549
- * prompted GuardDuty to generate a finding.</p>
3798
+ * <p>Contains detailed information about the IAM instance profile associated with the activity that prompted GuardDuty to generate a finding.</p>
4550
3799
  * @public
4551
3800
  */
4552
3801
  IamInstanceProfile?: IamInstanceProfileV2 | undefined;
4553
3802
  /**
4554
- * <p>Contains detailed information about the Auto Scaling Group associated with the activity that
4555
- * prompted GuardDuty to generate a finding.</p>
3803
+ * <p>Contains detailed information about the Auto Scaling Group associated with the activity that prompted GuardDuty to generate a finding.</p>
4556
3804
  * @public
4557
3805
  */
4558
3806
  AutoscalingAutoScalingGroup?: AutoscalingAutoScalingGroup | undefined;
4559
3807
  /**
4560
- * <p>Contains detailed information about the EC2 launch template associated with the activity that
4561
- * prompted GuardDuty to generate a finding.</p>
3808
+ * <p>Contains detailed information about the EC2 launch template associated with the activity that prompted GuardDuty to generate a finding.</p>
4562
3809
  * @public
4563
3810
  */
4564
3811
  Ec2LaunchTemplate?: Ec2LaunchTemplate | undefined;
4565
3812
  /**
4566
- * <p>Contains detailed information about the EC2 VPC associated with the activity that
4567
- * prompted GuardDuty to generate a finding.</p>
3813
+ * <p>Contains detailed information about the EC2 VPC associated with the activity that prompted GuardDuty to generate a finding.</p>
4568
3814
  * @public
4569
3815
  */
4570
3816
  Ec2Vpc?: Ec2Vpc | undefined;
4571
3817
  /**
4572
- * <p>Contains detailed information about the EC2 Image associated with the activity that
4573
- * prompted GuardDuty to generate a finding.</p>
3818
+ * <p>Contains detailed information about the EC2 Image associated with the activity that prompted GuardDuty to generate a finding.</p>
4574
3819
  * @public
4575
3820
  */
4576
3821
  Ec2Image?: Ec2Image | undefined;
4577
3822
  /**
4578
- * <p>Contains detailed information about the CloudFormation stack associated with the activity that
4579
- * prompted GuardDuty to generate a finding.</p>
3823
+ * <p>Contains detailed information about the CloudFormation stack associated with the activity that prompted GuardDuty to generate a finding.</p>
4580
3824
  * @public
4581
3825
  */
4582
3826
  CloudformationStack?: CloudformationStack | undefined;
@@ -4643,28 +3887,23 @@ export interface ResourceV2 {
4643
3887
  */
4644
3888
  Tags?: Tag[] | undefined;
4645
3889
  /**
4646
- * <p>Contains information about the Amazon Web Services resource associated with the activity that prompted
4647
- * GuardDuty to generate a finding.</p>
3890
+ * <p>Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.</p>
4648
3891
  * @public
4649
3892
  */
4650
3893
  Data?: ResourceData | undefined;
4651
3894
  }
4652
3895
  /**
4653
- * <p>Contains information about the indicators that include a set of
4654
- * signals observed in an attack sequence.</p>
3896
+ * <p>Contains information about the indicators that include a set of signals observed in an attack sequence.</p>
4655
3897
  * @public
4656
3898
  */
4657
3899
  export interface Indicator {
4658
3900
  /**
4659
- * <p>Specific indicator keys observed in the attack sequence. For description of the valid values for key,
4660
- * see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-summary.html#guardduty-extended-threat-detection-attack-sequence-finding-details">Attack sequence finding details</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
3901
+ * <p>Specific indicator keys observed in the attack sequence. For description of the valid values for key, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-summary.html#guardduty-extended-threat-detection-attack-sequence-finding-details">Attack sequence finding details</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
4661
3902
  * @public
4662
3903
  */
4663
3904
  Key: IndicatorType | undefined;
4664
3905
  /**
4665
- * <p>Values associated with each indicator key. For example, if the indicator key is
4666
- * <code>SUSPICIOUS_NETWORK</code>, then the value will be the name of the network. If
4667
- * the indicator key is <code>ATTACK_TACTIC</code>, then the value will be one of the MITRE tactics. </p>
3906
+ * <p>Values associated with each indicator key. For example, if the indicator key is <code>SUSPICIOUS_NETWORK</code>, then the value will be the name of the network. If the indicator key is <code>ATTACK_TACTIC</code>, then the value will be one of the MITRE tactics. </p>
4668
3907
  * @public
4669
3908
  */
4670
3909
  Values?: string[] | undefined;
@@ -4685,30 +3924,7 @@ export interface Signal {
4685
3924
  */
4686
3925
  Uid: string | undefined;
4687
3926
  /**
4688
- * <p>The type of the signal used to identify an attack sequence.</p>
4689
- * <p>Signals can be GuardDuty findings or activities observed in data sources that GuardDuty monitors. For
4690
- * more information, see
4691
- * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html">Foundational data sources</a> in the
4692
- * <i>Amazon GuardDuty User Guide</i>.</p>
4693
- * <p>A signal type can be one of the valid values listed in this API. Here are the related descriptions:</p>
4694
- * <ul>
4695
- * <li>
4696
- * <p>
4697
- * <code>FINDING</code> - Individually generated GuardDuty finding.</p>
4698
- * </li>
4699
- * <li>
4700
- * <p>
4701
- * <code>CLOUD_TRAIL</code> - Activity observed from CloudTrail logs</p>
4702
- * </li>
4703
- * <li>
4704
- * <p>
4705
- * <code>S3_DATA_EVENTS</code> - Activity observed from CloudTrail data events for S3. Activities associated
4706
- * with this type will show up only when
4707
- * you have enabled GuardDuty S3 Protection feature in your account. For more information about S3 Protection and
4708
- * steps to enable it, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html">S3 Protection</a> in the
4709
- * <i>Amazon GuardDuty User Guide</i>.</p>
4710
- * </li>
4711
- * </ul>
3927
+ * <p>The type of the signal used to identify an attack sequence.</p> <p>Signals can be GuardDuty findings or activities observed in data sources that GuardDuty monitors. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html">Foundational data sources</a> in the <i>Amazon GuardDuty User Guide</i>.</p> <p>A signal type can be one of the valid values listed in this API. Here are the related descriptions:</p> <ul> <li> <p> <code>FINDING</code> - Individually generated GuardDuty finding.</p> </li> <li> <p> <code>CLOUD_TRAIL</code> - Activity observed from CloudTrail logs</p> </li> <li> <p> <code>S3_DATA_EVENTS</code> - Activity observed from CloudTrail data events for S3. Activities associated with this type will show up only when you have enabled GuardDuty S3 Protection feature in your account. For more information about S3 Protection and steps to enable it, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html">S3 Protection</a> in the <i>Amazon GuardDuty User Guide</i>.</p> </li> </ul>
4712
3928
  * @public
4713
3929
  */
4714
3930
  Type: SignalType | undefined;
@@ -4718,8 +3934,7 @@ export interface Signal {
4718
3934
  */
4719
3935
  Description?: string | undefined;
4720
3936
  /**
4721
- * <p>The name of the signal. For example, when signal type is <code>FINDING</code>,
4722
- * the signal name is the name of the finding.</p>
3937
+ * <p>The name of the signal. For example, when signal type is <code>FINDING</code>, the signal name is the name of the finding.</p>
4723
3938
  * @public
4724
3939
  */
4725
3940
  Name: string | undefined;
@@ -4744,9 +3959,7 @@ export interface Signal {
4744
3959
  */
4745
3960
  LastSeenAt: Date | undefined;
4746
3961
  /**
4747
- * <p>The severity associated with the signal. For more information about severity, see
4748
- * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a>
4749
- * in the <i>Amazon GuardDuty User Guide</i>.</p>
3962
+ * <p>The severity associated with the signal. For more information about severity, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
4750
3963
  * @public
4751
3964
  */
4752
3965
  Severity?: number | undefined;
@@ -4817,8 +4030,7 @@ export interface Sequence {
4817
4030
  */
4818
4031
  SequenceIndicators?: Indicator[] | undefined;
4819
4032
  /**
4820
- * <p>Additional types of sequences that may be associated with the attack sequence finding,
4821
- * providing further context about the nature of the detected threat.</p>
4033
+ * <p>Additional types of sequences that may be associated with the attack sequence finding, providing further context about the nature of the detected threat.</p>
4822
4034
  * @public
4823
4035
  */
4824
4036
  AdditionalSequenceTypes?: string[] | undefined;
@@ -4829,8 +4041,7 @@ export interface Sequence {
4829
4041
  */
4830
4042
  export interface Detection {
4831
4043
  /**
4832
- * <p>The details about the anomalous activity that caused GuardDuty to
4833
- * generate the finding.</p>
4044
+ * <p>The details about the anomalous activity that caused GuardDuty to generate the finding.</p>
4834
4045
  * @public
4835
4046
  */
4836
4047
  Anomaly?: Anomaly | undefined;
@@ -4856,19 +4067,13 @@ export interface DetectorAdditionalConfigurationResult {
4856
4067
  */
4857
4068
  Status?: FeatureStatus | undefined;
4858
4069
  /**
4859
- * <p>The timestamp at which the additional configuration was last updated. This is in UTC
4860
- * format.</p>
4070
+ * <p>The timestamp at which the additional configuration was last updated. This is in UTC format.</p>
4861
4071
  * @public
4862
4072
  */
4863
4073
  UpdatedAt?: Date | undefined;
4864
4074
  }
4865
4075
  /**
4866
- * <p>Contains information about a GuardDuty feature.</p>
4867
- * <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
4868
- * and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
4869
- * You can add only one of these two features because Runtime Monitoring already includes the
4870
- * threat detection for Amazon EKS resources. For more information, see
4871
- * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
4076
+ * <p>Contains information about a GuardDuty feature.</p> <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>) and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error. You can add only one of these two features because Runtime Monitoring already includes the threat detection for Amazon EKS resources. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
4872
4077
  * @public
4873
4078
  */
4874
4079
  export interface DetectorFeatureConfigurationResult {
@@ -4898,8 +4103,7 @@ export interface DetectorFeatureConfigurationResult {
4898
4103
  */
4899
4104
  export interface DisableOrganizationAdminAccountRequest {
4900
4105
  /**
4901
- * <p>The Amazon Web Services Account ID for the organizations account to be disabled as a GuardDuty delegated
4902
- * administrator.</p>
4106
+ * <p>The Amazon Web Services Account ID for the organizations account to be disabled as a GuardDuty delegated administrator.</p>
4903
4107
  * @public
4904
4108
  */
4905
4109
  AdminAccountId: string | undefined;
@@ -4946,14 +4150,12 @@ export interface DisassociateFromMasterAccountResponse {
4946
4150
  */
4947
4151
  export interface DisassociateMembersRequest {
4948
4152
  /**
4949
- * <p>The unique ID of the detector of the GuardDuty account whose members you want to
4950
- * disassociate from the administrator account.</p>
4153
+ * <p>The unique ID of the detector of the GuardDuty account whose members you want to disassociate from the administrator account.</p>
4951
4154
  * @public
4952
4155
  */
4953
4156
  DetectorId: string | undefined;
4954
4157
  /**
4955
- * <p>A list of account IDs of the GuardDuty member accounts that you want to disassociate from
4956
- * the administrator account.</p>
4158
+ * <p>A list of account IDs of the GuardDuty member accounts that you want to disassociate from the administrator account.</p>
4957
4159
  * @public
4958
4160
  */
4959
4161
  AccountIds: string[] | undefined;
@@ -4963,8 +4165,7 @@ export interface DisassociateMembersRequest {
4963
4165
  */
4964
4166
  export interface DisassociateMembersResponse {
4965
4167
  /**
4966
- * <p>A list of objects that contain the unprocessed account and a result string that explains
4967
- * why it was unprocessed.</p>
4168
+ * <p>A list of objects that contain the unprocessed account and a result string that explains why it was unprocessed.</p>
4968
4169
  * @public
4969
4170
  */
4970
4171
  UnprocessedAccounts: UnprocessedAccount[] | undefined;
@@ -5008,8 +4209,7 @@ export interface EbsVolumeDetails {
5008
4209
  SkippedVolumeDetails?: VolumeDetail[] | undefined;
5009
4210
  }
5010
4211
  /**
5011
- * <p>Contains details of the highest severity threat detected during scan and number of
5012
- * infected files.</p>
4212
+ * <p>Contains details of the highest severity threat detected during scan and number of infected files.</p>
5013
4213
  * @public
5014
4214
  */
5015
4215
  export interface HighestSeverityThreatDetails {
@@ -5077,8 +4277,7 @@ export interface ScanFilePath {
5077
4277
  FileName?: string | undefined;
5078
4278
  }
5079
4279
  /**
5080
- * <p>Contains files infected with the given threat providing details of malware name and
5081
- * severity.</p>
4280
+ * <p>Contains files infected with the given threat providing details of malware name and severity.</p>
5082
4281
  * @public
5083
4282
  */
5084
4283
  export interface ScanThreatName {
@@ -5119,8 +4318,7 @@ export interface ThreatDetectedByName {
5119
4318
  */
5120
4319
  UniqueThreatNameCount?: number | undefined;
5121
4320
  /**
5122
- * <p>Flag to determine if the finding contains every single infected file-path and/or every
5123
- * threat.</p>
4321
+ * <p>Flag to determine if the finding contains every single infected file-path and/or every threat.</p>
5124
4322
  * @public
5125
4323
  */
5126
4324
  Shortened?: boolean | undefined;
@@ -5157,8 +4355,7 @@ export interface ScanDetections {
5157
4355
  */
5158
4356
  ThreatsDetectedItemCount?: ThreatsDetectedItemCount | undefined;
5159
4357
  /**
5160
- * <p>Details of the highest severity threat detected during malware scan and number of infected
5161
- * files.</p>
4358
+ * <p>Details of the highest severity threat detected during malware scan and number of infected files.</p>
5162
4359
  * @public
5163
4360
  */
5164
4361
  HighestSeverityThreatDetails?: HighestSeverityThreatDetails | undefined;
@@ -5221,8 +4418,7 @@ export interface Ec2ImageDetails {
5221
4418
  ImageArn?: string | undefined;
5222
4419
  }
5223
4420
  /**
5224
- * <p>Represents a pre-existing file or directory on the host machine that the volume maps
5225
- * to.</p>
4421
+ * <p>Represents a pre-existing file or directory on the host machine that the volume maps to.</p>
5226
4422
  * @public
5227
4423
  */
5228
4424
  export interface HostPath {
@@ -5243,8 +4439,7 @@ export interface Volume {
5243
4439
  */
5244
4440
  Name?: string | undefined;
5245
4441
  /**
5246
- * <p>Represents a pre-existing file or directory on the host machine that the volume maps
5247
- * to.</p>
4442
+ * <p>Represents a pre-existing file or directory on the host machine that the volume maps to.</p>
5248
4443
  * @public
5249
4444
  */
5250
4445
  HostPath?: HostPath | undefined;
@@ -5397,8 +4592,7 @@ export interface EksClusterDetails {
5397
4592
  */
5398
4593
  export interface EnableOrganizationAdminAccountRequest {
5399
4594
  /**
5400
- * <p>The Amazon Web Services account ID for the organization account to be enabled as a GuardDuty delegated
5401
- * administrator.</p>
4595
+ * <p>The Amazon Web Services account ID for the organization account to be enabled as a GuardDuty delegated administrator.</p>
5402
4596
  * @public
5403
4597
  */
5404
4598
  AdminAccountId: string | undefined;
@@ -5409,8 +4603,7 @@ export interface EnableOrganizationAdminAccountRequest {
5409
4603
  export interface EnableOrganizationAdminAccountResponse {
5410
4604
  }
5411
4605
  /**
5412
- * <p>An instance of a threat intelligence detail that constitutes evidence for the
5413
- * finding.</p>
4606
+ * <p>An instance of a threat intelligence detail that constitutes evidence for the finding.</p>
5414
4607
  * @public
5415
4608
  */
5416
4609
  export interface ThreatIntelligenceDetail {
@@ -5420,8 +4613,7 @@ export interface ThreatIntelligenceDetail {
5420
4613
  */
5421
4614
  ThreatListName?: string | undefined;
5422
4615
  /**
5423
- * <p>A list of names of the threats in the threat intelligence list that triggered the
5424
- * finding.</p>
4616
+ * <p>A list of names of the threats in the threat intelligence list that triggered the finding.</p>
5425
4617
  * @public
5426
4618
  */
5427
4619
  ThreatNames?: string[] | undefined;
@@ -5539,8 +4731,7 @@ export interface InstanceDetails {
5539
4731
  */
5540
4732
  InstanceType?: string | undefined;
5541
4733
  /**
5542
- * <p>The Amazon Resource Name (ARN) of the Amazon Web Services Outpost. Only applicable to Amazon Web Services Outposts
5543
- * instances.</p>
4734
+ * <p>The Amazon Resource Name (ARN) of the Amazon Web Services Outpost. Only applicable to Amazon Web Services Outposts instances.</p>
5544
4735
  * @public
5545
4736
  */
5546
4737
  OutpostArn?: string | undefined;
@@ -5607,8 +4798,7 @@ export interface KubernetesUserDetails {
5607
4798
  */
5608
4799
  Groups?: string[] | undefined;
5609
4800
  /**
5610
- * <p>Entity that assumes the IAM role
5611
- * when Kubernetes RBAC permissions are assigned to that role.</p>
4801
+ * <p>Entity that assumes the IAM role when Kubernetes RBAC permissions are assigned to that role.</p>
5612
4802
  * @public
5613
4803
  */
5614
4804
  SessionName?: string[] | undefined;
@@ -5648,6 +4838,11 @@ export interface KubernetesWorkloadDetails {
5648
4838
  * @public
5649
4839
  */
5650
4840
  HostNetwork?: boolean | undefined;
4841
+ /**
4842
+ * <p>The service account name that is associated with a Kubernetes workload.</p>
4843
+ * @public
4844
+ */
4845
+ ServiceAccountName?: string | undefined;
5651
4846
  /**
5652
4847
  * <p>Containers running as part of the Kubernetes workload.</p>
5653
4848
  * @public
@@ -5658,11 +4853,6 @@ export interface KubernetesWorkloadDetails {
5658
4853
  * @public
5659
4854
  */
5660
4855
  Volumes?: Volume[] | undefined;
5661
- /**
5662
- * <p>The service account name that is associated with a Kubernetes workload.</p>
5663
- * @public
5664
- */
5665
- ServiceAccountName?: string | undefined;
5666
4856
  /**
5667
4857
  * <p>Whether the host IPC flag is enabled for the pods in the workload.</p>
5668
4858
  * @public
@@ -5675,8 +4865,7 @@ export interface KubernetesWorkloadDetails {
5675
4865
  HostPID?: boolean | undefined;
5676
4866
  }
5677
4867
  /**
5678
- * <p>Details about Kubernetes resources such as a Kubernetes user or workload resource involved
5679
- * in a Kubernetes finding.</p>
4868
+ * <p>Details about Kubernetes resources such as a Kubernetes user or workload resource involved in a Kubernetes finding.</p>
5680
4869
  * @public
5681
4870
  */
5682
4871
  export interface KubernetesDetails {
@@ -5733,8 +4922,7 @@ export interface LambdaDetails {
5733
4922
  */
5734
4923
  Description?: string | undefined;
5735
4924
  /**
5736
- * <p>The timestamp when the Lambda function was last modified. This field is in the UTC date string
5737
- * format <code>(2023-03-22T19:37:20.168Z)</code>.</p>
4925
+ * <p>The timestamp when the Lambda function was last modified. This field is in the UTC date string format <code>(2023-03-22T19:37:20.168Z)</code>.</p>
5738
4926
  * @public
5739
4927
  */
5740
4928
  LastModifiedAt?: Date | undefined;
@@ -5759,21 +4947,18 @@ export interface LambdaDetails {
5759
4947
  */
5760
4948
  VpcConfig?: VpcConfig | undefined;
5761
4949
  /**
5762
- * <p>A list of tags attached to this resource, listed in the format of
5763
- * <code>key</code>:<code>value</code> pair.</p>
4950
+ * <p>A list of tags attached to this resource, listed in the format of <code>key</code>:<code>value</code> pair.</p>
5764
4951
  * @public
5765
4952
  */
5766
4953
  Tags?: Tag[] | undefined;
5767
4954
  }
5768
4955
  /**
5769
- * <p>Contains information about the resource type <code>RDSDBInstance</code> involved in a
5770
- * GuardDuty finding.</p>
4956
+ * <p>Contains information about the resource type <code>RDSDBInstance</code> involved in a GuardDuty finding.</p>
5771
4957
  * @public
5772
4958
  */
5773
4959
  export interface RdsDbInstanceDetails {
5774
4960
  /**
5775
- * <p>The identifier associated to the database instance that was involved in the
5776
- * finding.</p>
4961
+ * <p>The identifier associated to the database instance that was involved in the finding.</p>
5777
4962
  * @public
5778
4963
  */
5779
4964
  DbInstanceIdentifier?: string | undefined;
@@ -5788,20 +4973,17 @@ export interface RdsDbInstanceDetails {
5788
4973
  */
5789
4974
  EngineVersion?: string | undefined;
5790
4975
  /**
5791
- * <p>The identifier of the database cluster that contains the database instance ID involved in
5792
- * the finding.</p>
4976
+ * <p>The identifier of the database cluster that contains the database instance ID involved in the finding.</p>
5793
4977
  * @public
5794
4978
  */
5795
4979
  DbClusterIdentifier?: string | undefined;
5796
4980
  /**
5797
- * <p>The Amazon Resource Name (ARN) that identifies the database instance involved in the
5798
- * finding.</p>
4981
+ * <p>The Amazon Resource Name (ARN) that identifies the database instance involved in the finding.</p>
5799
4982
  * @public
5800
4983
  */
5801
4984
  DbInstanceArn?: string | undefined;
5802
4985
  /**
5803
- * <p>The unique ID of the database resource involved in the activity that prompted GuardDuty
5804
- * to generate the finding.</p>
4986
+ * <p>The unique ID of the database resource involved in the activity that prompted GuardDuty to generate the finding.</p>
5805
4987
  * @public
5806
4988
  */
5807
4989
  DbiResourceId?: string | undefined;
@@ -5812,8 +4994,7 @@ export interface RdsDbInstanceDetails {
5812
4994
  Tags?: Tag[] | undefined;
5813
4995
  }
5814
4996
  /**
5815
- * <p>Contains information about the user and authentication details for a database instance
5816
- * involved in the finding.</p>
4997
+ * <p>Contains information about the user and authentication details for a database instance involved in the finding.</p>
5817
4998
  * @public
5818
4999
  */
5819
5000
  export interface RdsDbUserDetails {
@@ -5844,8 +5025,7 @@ export interface RdsDbUserDetails {
5844
5025
  AuthMethod?: string | undefined;
5845
5026
  }
5846
5027
  /**
5847
- * <p>Contains information about the resource type <code>RDSLimitlessDB</code> that is involved in a GuardDuty
5848
- * finding.</p>
5028
+ * <p>Contains information about the resource type <code>RDSLimitlessDB</code> that is involved in a GuardDuty finding.</p>
5849
5029
  * @public
5850
5030
  */
5851
5031
  export interface RdsLimitlessDbDetails {
@@ -5907,10 +5087,7 @@ export interface RecoveryPointDetails {
5907
5087
  */
5908
5088
  export interface Owner {
5909
5089
  /**
5910
- * <p>The canonical user ID of the bucket owner. For information about locating your canonical
5911
- * user ID see <a href="https://docs.aws.amazon.com/general/latest/gr/acct-identifiers.html#FindingCanonicalId">Finding Your Account
5912
- * Canonical User ID.</a>
5913
- * </p>
5090
+ * <p>The canonical user ID of the bucket owner. For information about locating your canonical user ID see <a href="https://docs.aws.amazon.com/general/latest/gr/acct-identifiers.html#FindingCanonicalId">Finding Your Account Canonical User ID.</a> </p>
5914
5091
  * @public
5915
5092
  */
5916
5093
  Id?: string | undefined;
@@ -5942,8 +5119,7 @@ export interface PublicAccess {
5942
5119
  */
5943
5120
  PermissionConfiguration?: PermissionConfiguration | undefined;
5944
5121
  /**
5945
- * <p>Describes the effective permission on this bucket after factoring all attached
5946
- * policies.</p>
5122
+ * <p>Describes the effective permission on this bucket after factoring all attached policies.</p>
5947
5123
  * @public
5948
5124
  */
5949
5125
  EffectivePermission?: string | undefined;
@@ -5964,8 +5140,7 @@ export interface S3ObjectDetail {
5964
5140
  */
5965
5141
  Key?: string | undefined;
5966
5142
  /**
5967
- * <p>The entity tag is a hash of the S3 object. The ETag reflects changes only to the contents of
5968
- * an object, and not its metadata.</p>
5143
+ * <p>The entity tag is a hash of the S3 object. The ETag reflects changes only to the contents of an object, and not its metadata.</p>
5969
5144
  * @public
5970
5145
  */
5971
5146
  ETag?: string | undefined;
@@ -6032,14 +5207,12 @@ export interface S3BucketDetail {
6032
5207
  S3ObjectDetails?: S3ObjectDetail[] | undefined;
6033
5208
  }
6034
5209
  /**
6035
- * <p>Contains information about the Amazon Web Services resource associated with the activity that prompted
6036
- * GuardDuty to generate a finding.</p>
5210
+ * <p>Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.</p>
6037
5211
  * @public
6038
5212
  */
6039
5213
  export interface Resource {
6040
5214
  /**
6041
- * <p>The IAM access key details (user information) of a user that engaged in the activity that
6042
- * prompted GuardDuty to generate a finding.</p>
5215
+ * <p>The IAM access key details (user information) of a user that engaged in the activity that prompted GuardDuty to generate a finding.</p>
6043
5216
  * @public
6044
5217
  */
6045
5218
  AccessKeyDetails?: AccessKeyDetails | undefined;
@@ -6049,8 +5222,7 @@ export interface Resource {
6049
5222
  */
6050
5223
  S3BucketDetails?: S3BucketDetail[] | undefined;
6051
5224
  /**
6052
- * <p>The information about the EC2 instance associated with the activity that prompted
6053
- * GuardDuty to generate a finding.</p>
5225
+ * <p>The information about the EC2 instance associated with the activity that prompted GuardDuty to generate a finding.</p>
6054
5226
  * @public
6055
5227
  */
6056
5228
  InstanceDetails?: InstanceDetails | undefined;
@@ -6085,8 +5257,12 @@ export interface Resource {
6085
5257
  */
6086
5258
  ContainerDetails?: Container | undefined;
6087
5259
  /**
6088
- * <p>Contains information about the database instance to which an anomalous login attempt was
6089
- * made.</p>
5260
+ * <p>Contains information about the Lambda function that was involved in a finding.</p>
5261
+ * @public
5262
+ */
5263
+ LambdaDetails?: LambdaDetails | undefined;
5264
+ /**
5265
+ * <p>Contains information about the database instance to which an anomalous login attempt was made.</p>
6090
5266
  * @public
6091
5267
  */
6092
5268
  RdsDbInstanceDetails?: RdsDbInstanceDetails | undefined;
@@ -6096,16 +5272,10 @@ export interface Resource {
6096
5272
  */
6097
5273
  RdsLimitlessDbDetails?: RdsLimitlessDbDetails | undefined;
6098
5274
  /**
6099
- * <p>Contains information about the user details through which anomalous login attempt was
6100
- * made.</p>
5275
+ * <p>Contains information about the user details through which anomalous login attempt was made.</p>
6101
5276
  * @public
6102
5277
  */
6103
5278
  RdsDbUserDetails?: RdsDbUserDetails | undefined;
6104
- /**
6105
- * <p>Contains information about the Lambda function that was involved in a finding.</p>
6106
- * @public
6107
- */
6108
- LambdaDetails?: LambdaDetails | undefined;
6109
5279
  /**
6110
5280
  * <p>Contains details about the EBS snapshot that was scanned.</p>
6111
5281
  * @public
@@ -6144,8 +5314,7 @@ export interface ServiceAdditionalInfo {
6144
5314
  */
6145
5315
  export interface IncrementalScanDetails {
6146
5316
  /**
6147
- * <p>Amazon Resource Name (ARN) of the baseline resource used for incremental scanning. The scan will only
6148
- * process changes since this baseline resource was created.</p>
5317
+ * <p>Amazon Resource Name (ARN) of the baseline resource used for incremental scanning. The scan will only process changes since this baseline resource was created.</p>
6149
5318
  * @public
6150
5319
  */
6151
5320
  BaselineResourceArn: string | undefined;
@@ -6193,8 +5362,7 @@ export interface ItemDetails {
6193
5362
  AdditionalInfo?: AdditionalInfo | undefined;
6194
5363
  }
6195
5364
  /**
6196
- * <p>Information about the nested item path and hash of the protected
6197
- * resource.</p>
5365
+ * <p>Information about the nested item path and hash of the protected resource.</p>
6198
5366
  * @public
6199
5367
  */
6200
5368
  export interface ItemPath {
@@ -6210,8 +5378,7 @@ export interface ItemPath {
6210
5378
  Hash?: string | undefined;
6211
5379
  }
6212
5380
  /**
6213
- * <p>Information about the detected threats associated with the
6214
- * generated finding.</p>
5381
+ * <p>Information about the detected threats associated with the generated finding.</p>
6215
5382
  * @public
6216
5383
  */
6217
5384
  export interface Threat {
@@ -6226,8 +5393,7 @@ export interface Threat {
6226
5393
  */
6227
5394
  Source?: string | undefined;
6228
5395
  /**
6229
- * <p>Information about the nested item path and
6230
- * hash of the protected resource.</p>
5396
+ * <p>Information about the nested item path and hash of the protected resource.</p>
6231
5397
  * @public
6232
5398
  */
6233
5399
  ItemPaths?: ItemPath[] | undefined;
@@ -6253,8 +5419,7 @@ export interface Threat {
6253
5419
  */
6254
5420
  export interface MalwareScanDetails {
6255
5421
  /**
6256
- * <p>Information about the detected threats associated with the
6257
- * generated GuardDuty finding.</p>
5422
+ * <p>Information about the detected threats associated with the generated GuardDuty finding.</p>
6258
5423
  * @public
6259
5424
  */
6260
5425
  Threats?: Threat[] | undefined;
@@ -6330,8 +5495,7 @@ export interface LineageObject {
6330
5495
  */
6331
5496
  Euid?: number | undefined;
6332
5497
  /**
6333
- * <p>The unique ID of the parent process. This ID is assigned to the parent process by
6334
- * GuardDuty.</p>
5498
+ * <p>The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.</p>
6335
5499
  * @public
6336
5500
  */
6337
5501
  ParentUuid?: string | undefined;
@@ -6382,8 +5546,7 @@ export interface ProcessDetails {
6382
5546
  */
6383
5547
  Uuid?: string | undefined;
6384
5548
  /**
6385
- * <p>The unique ID of the parent process. This ID is assigned to the parent process by
6386
- * GuardDuty.</p>
5549
+ * <p>The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.</p>
6387
5550
  * @public
6388
5551
  */
6389
5552
  ParentUuid?: string | undefined;
@@ -6414,14 +5577,12 @@ export interface ProcessDetails {
6414
5577
  */
6415
5578
  export interface RuntimeContext {
6416
5579
  /**
6417
- * <p>Information about the process that modified the current process. This is available for
6418
- * multiple finding types.</p>
5580
+ * <p>Information about the process that modified the current process. This is available for multiple finding types.</p>
6419
5581
  * @public
6420
5582
  */
6421
5583
  ModifyingProcess?: ProcessDetails | undefined;
6422
5584
  /**
6423
- * <p>The timestamp at which the process modified the current process. The timestamp is in UTC date string
6424
- * format.</p>
5585
+ * <p>The timestamp at which the process modified the current process. The timestamp is in UTC date string format.</p>
6425
5586
  * @public
6426
5587
  */
6427
5588
  ModifiedAt?: Date | undefined;
@@ -6471,8 +5632,7 @@ export interface RuntimeContext {
6471
5632
  */
6472
5633
  FileSystemType?: string | undefined;
6473
5634
  /**
6474
- * <p>Represents options that control the behavior of a runtime operation or action. For
6475
- * example, a filesystem mount operation may contain a read-only flag.</p>
5635
+ * <p>Represents options that control the behavior of a runtime operation or action. For example, a filesystem mount operation may contain a read-only flag.</p>
6476
5636
  * @public
6477
5637
  */
6478
5638
  Flags?: string[] | undefined;
@@ -6502,15 +5662,12 @@ export interface RuntimeContext {
6502
5662
  */
6503
5663
  TargetProcess?: ProcessDetails | undefined;
6504
5664
  /**
6505
- * <p>Represents the communication protocol associated with the address. For example, the address
6506
- * family <code>AF_INET</code> is used for IP version of 4 protocol.</p>
5665
+ * <p>Represents the communication protocol associated with the address. For example, the address family <code>AF_INET</code> is used for IP version of 4 protocol.</p>
6507
5666
  * @public
6508
5667
  */
6509
5668
  AddressFamily?: string | undefined;
6510
5669
  /**
6511
- * <p>Specifies a particular protocol within the address family. Usually there is a single
6512
- * protocol in address families. For example, the address family <code>AF_INET</code> only has
6513
- * the IP protocol.</p>
5670
+ * <p>Specifies a particular protocol within the address family. Usually there is a single protocol in address families. For example, the address family <code>AF_INET</code> only has the IP protocol.</p>
6514
5671
  * @public
6515
5672
  */
6516
5673
  IanaProtocolNumber?: number | undefined;
@@ -6525,8 +5682,7 @@ export interface RuntimeContext {
6525
5682
  */
6526
5683
  ToolName?: string | undefined;
6527
5684
  /**
6528
- * <p>Category that the tool belongs to. Some of the examples
6529
- * are Backdoor Tool, Pentest Tool, Network Scanner, and Network Sniffer.</p>
5685
+ * <p>Category that the tool belongs to. Some of the examples are Backdoor Tool, Pentest Tool, Network Scanner, and Network Sniffer.</p>
6530
5686
  * @public
6531
5687
  */
6532
5688
  ToolCategory?: string | undefined;
@@ -6547,8 +5703,7 @@ export interface RuntimeContext {
6547
5703
  ThreatFilePath?: string | undefined;
6548
5704
  }
6549
5705
  /**
6550
- * <p>Information about the process and any required context values for a specific
6551
- * finding.</p>
5706
+ * <p>Information about the process and any required context values for a specific finding.</p>
6552
5707
  * @public
6553
5708
  */
6554
5709
  export interface RuntimeDetails {
@@ -6594,14 +5749,12 @@ export interface Service {
6594
5749
  */
6595
5750
  DetectorId?: string | undefined;
6596
5751
  /**
6597
- * <p>The first-seen timestamp of the activity that prompted GuardDuty to generate this
6598
- * finding.</p>
5752
+ * <p>The first-seen timestamp of the activity that prompted GuardDuty to generate this finding.</p>
6599
5753
  * @public
6600
5754
  */
6601
5755
  EventFirstSeen?: string | undefined;
6602
5756
  /**
6603
- * <p>The last-seen timestamp of the activity that prompted GuardDuty to generate this
6604
- * finding.</p>
5757
+ * <p>The last-seen timestamp of the activity that prompted GuardDuty to generate this finding.</p>
6605
5758
  * @public
6606
5759
  */
6607
5760
  EventLastSeen?: string | undefined;
@@ -6636,8 +5789,7 @@ export interface Service {
6636
5789
  */
6637
5790
  EbsVolumeScanDetails?: EbsVolumeScanDetails | undefined;
6638
5791
  /**
6639
- * <p>Information about the process and any required context values for a specific
6640
- * finding</p>
5792
+ * <p>Information about the process and any required context values for a specific finding</p>
6641
5793
  * @public
6642
5794
  */
6643
5795
  RuntimeDetails?: RuntimeDetails | undefined;
@@ -6653,8 +5805,7 @@ export interface Service {
6653
5805
  MalwareScanDetails?: MalwareScanDetails | undefined;
6654
5806
  }
6655
5807
  /**
6656
- * <p>Contains information about the finding that is generated when abnormal or suspicious
6657
- * activity is detected.</p>
5808
+ * <p>Contains information about the finding that is generated when abnormal or suspicious activity is detected.</p>
6658
5809
  * @public
6659
5810
  */
6660
5811
  export interface Finding {
@@ -6694,17 +5845,12 @@ export interface Finding {
6694
5845
  */
6695
5846
  Partition?: string | undefined;
6696
5847
  /**
6697
- * <p>The Region where the finding was generated. For findings generated
6698
- * from <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-global-service-events">Global Service Events</a>, the Region value in the finding might differ from the Region where
6699
- * GuardDuty identifies the potential threat. For more information,
6700
- * see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html#cloudtrail_global">How GuardDuty
6701
- * handles Amazon Web Services CloudTrail global events</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
5848
+ * <p>The Region where the finding was generated. For findings generated from <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-global-service-events">Global Service Events</a>, the Region value in the finding might differ from the Region where GuardDuty identifies the potential threat. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html#cloudtrail_global">How GuardDuty handles Amazon Web Services CloudTrail global events</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
6702
5849
  * @public
6703
5850
  */
6704
5851
  Region: string | undefined;
6705
5852
  /**
6706
- * <p>Contains information about the Amazon Web Services resource associated with the activity that prompted
6707
- * GuardDuty to generate a finding.</p>
5853
+ * <p>Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.</p>
6708
5854
  * @public
6709
5855
  */
6710
5856
  Resource: Resource | undefined;
@@ -6745,8 +5891,7 @@ export interface Finding {
6745
5891
  AssociatedAttackSequenceArn?: string | undefined;
6746
5892
  }
6747
5893
  /**
6748
- * <p>Information about each finding type associated with the
6749
- * <code>groupedByFindingType</code> statistics.</p>
5894
+ * <p>Information about each finding type associated with the <code>groupedByFindingType</code> statistics.</p>
6750
5895
  * @public
6751
5896
  */
6752
5897
  export interface FindingTypeStatistics {
@@ -6767,8 +5912,7 @@ export interface FindingTypeStatistics {
6767
5912
  TotalFindings?: number | undefined;
6768
5913
  }
6769
5914
  /**
6770
- * <p>Information about each resource type associated with the
6771
- * <code>groupedByResource</code> statistics.</p>
5915
+ * <p>Information about each resource type associated with the <code>groupedByResource</code> statistics.</p>
6772
5916
  * @public
6773
5917
  */
6774
5918
  export interface ResourceStatistics {
@@ -6783,53 +5927,7 @@ export interface ResourceStatistics {
6783
5927
  */
6784
5928
  LastGeneratedAt?: Date | undefined;
6785
5929
  /**
6786
- * <p>ID associated with each resource. The following list provides the mapping of the resource type
6787
- * and resource ID.</p>
6788
- * <p class="title">
6789
- * <b>Mapping of resource and resource ID</b>
6790
- * </p>
6791
- * <ul>
6792
- * <li>
6793
- * <p>AccessKey - <code>resource.accessKeyDetails.accessKeyId</code>
6794
- * </p>
6795
- * </li>
6796
- * <li>
6797
- * <p>Container - <code>resource.containerDetails.id</code>
6798
- * </p>
6799
- * </li>
6800
- * <li>
6801
- * <p>ECSCluster - <code>resource.ecsClusterDetails.name</code>
6802
- * </p>
6803
- * </li>
6804
- * <li>
6805
- * <p>EKSCluster - <code>resource.eksClusterDetails.name</code>
6806
- * </p>
6807
- * </li>
6808
- * <li>
6809
- * <p>Instance - <code>resource.instanceDetails.instanceId</code>
6810
- * </p>
6811
- * </li>
6812
- * <li>
6813
- * <p>KubernetesCluster - <code>resource.kubernetesDetails.kubernetesWorkloadDetails.name</code>
6814
- * </p>
6815
- * </li>
6816
- * <li>
6817
- * <p>Lambda - <code>resource.lambdaDetails.functionName</code>
6818
- * </p>
6819
- * </li>
6820
- * <li>
6821
- * <p>RDSDBInstance - <code>resource.rdsDbInstanceDetails.dbInstanceIdentifier</code>
6822
- * </p>
6823
- * </li>
6824
- * <li>
6825
- * <p>S3Bucket - <code>resource.s3BucketDetails.name</code>
6826
- * </p>
6827
- * </li>
6828
- * <li>
6829
- * <p>S3Object - <code>resource.s3BucketDetails.name</code>
6830
- * </p>
6831
- * </li>
6832
- * </ul>
5930
+ * <p>ID associated with each resource. The following list provides the mapping of the resource type and resource ID.</p> <p class="title"> <b>Mapping of resource and resource ID</b> </p> <ul> <li> <p>AccessKey - <code>resource.accessKeyDetails.accessKeyId</code> </p> </li> <li> <p>Container - <code>resource.containerDetails.id</code> </p> </li> <li> <p>ECSCluster - <code>resource.ecsClusterDetails.name</code> </p> </li> <li> <p>EKSCluster - <code>resource.eksClusterDetails.name</code> </p> </li> <li> <p>Instance - <code>resource.instanceDetails.instanceId</code> </p> </li> <li> <p>KubernetesCluster - <code>resource.kubernetesDetails.kubernetesWorkloadDetails.name</code> </p> </li> <li> <p>Lambda - <code>resource.lambdaDetails.functionName</code> </p> </li> <li> <p>RDSDBInstance - <code>resource.rdsDbInstanceDetails.dbInstanceIdentifier</code> </p> </li> <li> <p>S3Bucket - <code>resource.s3BucketDetails.name</code> </p> </li> <li> <p>S3Object - <code>resource.s3BucketDetails.name</code> </p> </li> </ul>
6833
5931
  * @public
6834
5932
  */
6835
5933
  ResourceId?: string | undefined;
@@ -6888,12 +5986,7 @@ export interface FindingStatistics {
6888
5986
  */
6889
5987
  GroupedByDate?: DateStatistics[] | undefined;
6890
5988
  /**
6891
- * <p>Represents a list of map of finding types with a count of total findings generated for each type. </p>
6892
- * <p>Based on the <code>orderBy</code>
6893
- * parameter, this request returns either the most occurring finding types or the least occurring finding types. If the
6894
- * <code>orderBy</code> parameter is <code>ASC</code>, this will represent the least occurring finding types in
6895
- * your account; otherwise, this will represent the most occurring finding types. The default
6896
- * value of <code>orderBy</code> is <code>DESC</code>.</p>
5989
+ * <p>Represents a list of map of finding types with a count of total findings generated for each type. </p> <p>Based on the <code>orderBy</code> parameter, this request returns either the most occurring finding types or the least occurring finding types. If the <code>orderBy</code> parameter is <code>ASC</code>, this will represent the least occurring finding types in your account; otherwise, this will represent the most occurring finding types. The default value of <code>orderBy</code> is <code>DESC</code>.</p>
6897
5990
  * @public
6898
5991
  */
6899
5992
  GroupedByFindingType?: FindingTypeStatistics[] | undefined;
@@ -6933,9 +6026,7 @@ export interface GetAdministratorAccountResponse {
6933
6026
  */
6934
6027
  export interface GetCoverageStatisticsRequest {
6935
6028
  /**
6936
- * <p>The unique ID of the GuardDuty detector.</p>
6937
- * <p>To find the <code>detectorId</code> in the current Region, see the
6938
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6029
+ * <p>The unique ID of the GuardDuty detector.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6939
6030
  * @public
6940
6031
  */
6941
6032
  DetectorId: string | undefined;
@@ -6955,8 +6046,7 @@ export interface GetCoverageStatisticsRequest {
6955
6046
  */
6956
6047
  export interface GetCoverageStatisticsResponse {
6957
6048
  /**
6958
- * <p>Represents the count aggregated by the <code>statusCode</code> and
6959
- * <code>resourceType</code>.</p>
6049
+ * <p>Represents the count aggregated by the <code>statusCode</code> and <code>resourceType</code>.</p>
6960
6050
  * @public
6961
6051
  */
6962
6052
  CoverageStatistics?: CoverageStatistics | undefined;
@@ -6966,9 +6056,7 @@ export interface GetCoverageStatisticsResponse {
6966
6056
  */
6967
6057
  export interface GetDetectorRequest {
6968
6058
  /**
6969
- * <p>The unique ID of the detector that you want to get.</p>
6970
- * <p>To find the <code>detectorId</code> in the current Region, see the
6971
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6059
+ * <p>The unique ID of the detector that you want to get.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6972
6060
  * @public
6973
6061
  */
6974
6062
  DetectorId: string | undefined;
@@ -7025,9 +6113,7 @@ export interface GetDetectorResponse {
7025
6113
  */
7026
6114
  export interface GetFilterRequest {
7027
6115
  /**
7028
- * <p>The unique ID of the detector that is associated with this filter.</p>
7029
- * <p>To find the <code>detectorId</code> in the current Region, see the
7030
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6116
+ * <p>The unique ID of the detector that is associated with this filter.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7031
6117
  * @public
7032
6118
  */
7033
6119
  DetectorId: string | undefined;
@@ -7057,8 +6143,7 @@ export interface GetFilterResponse {
7057
6143
  */
7058
6144
  Action: FilterAction | undefined;
7059
6145
  /**
7060
- * <p>Specifies the position of the filter in the list of current filters. Also specifies the
7061
- * order in which this filter is applied to the findings.</p>
6146
+ * <p>Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.</p>
7062
6147
  * @public
7063
6148
  */
7064
6149
  Rank?: number | undefined;
@@ -7078,10 +6163,7 @@ export interface GetFilterResponse {
7078
6163
  */
7079
6164
  export interface GetFindingsRequest {
7080
6165
  /**
7081
- * <p>The ID of the detector that specifies the GuardDuty service whose findings you want to
7082
- * retrieve.</p>
7083
- * <p>To find the <code>detectorId</code> in the current Region, see the
7084
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6166
+ * <p>The ID of the detector that specifies the GuardDuty service whose findings you want to retrieve.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7085
6167
  * @public
7086
6168
  */
7087
6169
  DetectorId: string | undefined;
@@ -7111,10 +6193,7 @@ export interface GetFindingsResponse {
7111
6193
  */
7112
6194
  export interface GetFindingsStatisticsRequest {
7113
6195
  /**
7114
- * <p>The ID of the detector whose findings statistics you
7115
- * want to retrieve.</p>
7116
- * <p>To find the <code>detectorId</code> in the current Region, see the
7117
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6196
+ * <p>The ID of the detector whose findings statistics you want to retrieve.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7118
6197
  * @public
7119
6198
  */
7120
6199
  DetectorId: string | undefined;
@@ -7136,15 +6215,12 @@ export interface GetFindingsStatisticsRequest {
7136
6215
  */
7137
6216
  GroupBy?: GroupByType | undefined;
7138
6217
  /**
7139
- * <p>Displays the sorted findings in the requested order. The default
7140
- * value of <code>orderBy</code> is <code>DESC</code>.</p>
7141
- * <p>You can use this parameter only with the <code>groupBy</code> parameter.</p>
6218
+ * <p>Displays the sorted findings in the requested order. The default value of <code>orderBy</code> is <code>DESC</code>.</p> <p>You can use this parameter only with the <code>groupBy</code> parameter.</p>
7142
6219
  * @public
7143
6220
  */
7144
6221
  OrderBy?: OrderBy | undefined;
7145
6222
  /**
7146
- * <p>The maximum number of results to be returned in the response. The default value is 25.</p>
7147
- * <p>You can use this parameter only with the <code>groupBy</code> parameter.</p>
6223
+ * <p>The maximum number of results to be returned in the response. The default value is 25.</p> <p>You can use this parameter only with the <code>groupBy</code> parameter.</p>
7148
6224
  * @public
7149
6225
  */
7150
6226
  MaxResults?: number | undefined;
@@ -7159,8 +6235,7 @@ export interface GetFindingsStatisticsResponse {
7159
6235
  */
7160
6236
  FindingStatistics: FindingStatistics | undefined;
7161
6237
  /**
7162
- * <p>The pagination parameter to be used on the next list operation to retrieve more items.</p>
7163
- * <p>This parameter is currently not supported.</p>
6238
+ * <p>The pagination parameter to be used on the next list operation to retrieve more items.</p> <p>This parameter is currently not supported.</p>
7164
6239
  * @public
7165
6240
  */
7166
6241
  NextToken?: string | undefined;
@@ -7185,9 +6260,7 @@ export interface GetInvitationsCountResponse {
7185
6260
  */
7186
6261
  export interface GetIPSetRequest {
7187
6262
  /**
7188
- * <p>The unique ID of the detector that is associated with the IPSet.</p>
7189
- * <p>To find the <code>detectorId</code> in the current Region, see the
7190
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6263
+ * <p>The unique ID of the detector that is associated with the IPSet.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7191
6264
  * @public
7192
6265
  */
7193
6266
  DetectorId: string | undefined;
@@ -7227,8 +6300,7 @@ export interface GetIPSetResponse {
7227
6300
  */
7228
6301
  Tags?: Record<string, string> | undefined;
7229
6302
  /**
7230
- * <p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b> parameter. This field appears
7231
- * in the response only if it was provided during IPSet creation or update.</p>
6303
+ * <p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b> parameter. This field appears in the response only if it was provided during IPSet creation or update.</p>
7232
6304
  * @public
7233
6305
  */
7234
6306
  ExpectedBucketOwner?: string | undefined;
@@ -7244,8 +6316,7 @@ export interface GetMalwareProtectionPlanRequest {
7244
6316
  MalwareProtectionPlanId: string | undefined;
7245
6317
  }
7246
6318
  /**
7247
- * <p>Information about the issue code and message associated to the status of
7248
- * your Malware Protection plan.</p>
6319
+ * <p>Information about the issue code and message associated to the status of your Malware Protection plan.</p>
7249
6320
  * @public
7250
6321
  */
7251
6322
  export interface MalwareProtectionPlanStatusReason {
@@ -7255,10 +6326,7 @@ export interface MalwareProtectionPlanStatusReason {
7255
6326
  */
7256
6327
  Code?: string | undefined;
7257
6328
  /**
7258
- * <p>Issue message that specifies the reason. For information
7259
- * about potential troubleshooting steps, see
7260
- * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/troubleshoot-s3-malware-protection-status-errors.html">Troubleshooting Malware Protection for S3 status issues</a> in the
7261
- * <i>Amazon GuardDuty User Guide</i>.</p>
6329
+ * <p>Issue message that specifies the reason. For information about potential troubleshooting steps, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/troubleshoot-s3-malware-protection-status-errors.html">Troubleshooting Malware Protection for S3 status issues</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
7262
6330
  * @public
7263
6331
  */
7264
6332
  Message?: string | undefined;
@@ -7273,15 +6341,12 @@ export interface GetMalwareProtectionPlanResponse {
7273
6341
  */
7274
6342
  Arn?: string | undefined;
7275
6343
  /**
7276
- * <p>Amazon Resource Name (ARN) of the IAM role that includes the permissions to scan and
7277
- * add tags to the associated protected resource.</p>
6344
+ * <p>Amazon Resource Name (ARN) of the IAM role that includes the permissions to scan and add tags to the associated protected resource.</p>
7278
6345
  * @public
7279
6346
  */
7280
6347
  Role?: string | undefined;
7281
6348
  /**
7282
- * <p>Information about the protected resource that is associated with the created
7283
- * Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported
7284
- * protected resource.</p>
6349
+ * <p>Information about the protected resource that is associated with the created Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported protected resource.</p>
7285
6350
  * @public
7286
6351
  */
7287
6352
  ProtectedResource?: CreateProtectedResource | undefined;
@@ -7301,8 +6366,7 @@ export interface GetMalwareProtectionPlanResponse {
7301
6366
  */
7302
6367
  Status?: MalwareProtectionPlanStatus | undefined;
7303
6368
  /**
7304
- * <p>Information about the issue code and message associated to the status of
7305
- * your Malware Protection plan.</p>
6369
+ * <p>Information about the issue code and message associated to the status of your Malware Protection plan.</p>
7306
6370
  * @public
7307
6371
  */
7308
6372
  StatusReasons?: MalwareProtectionPlanStatusReason[] | undefined;
@@ -7317,8 +6381,7 @@ export interface GetMalwareProtectionPlanResponse {
7317
6381
  */
7318
6382
  export interface GetMalwareScanRequest {
7319
6383
  /**
7320
- * <p>A unique identifier that gets generated when you invoke the API without any error. Each malware scan has
7321
- * a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.</p>
6384
+ * <p>A unique identifier that gets generated when you invoke the API without any error. Each malware scan has a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.</p>
7322
6385
  * @public
7323
6386
  */
7324
6387
  ScanId: string | undefined;
@@ -7489,24 +6552,17 @@ export interface GetMalwareScanResultDetails {
7489
6552
  */
7490
6553
  export interface GetMalwareScanResponse {
7491
6554
  /**
7492
- * <p>A unique identifier associated with the malware scan. Each malware scan has
7493
- * a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.</p>
6555
+ * <p>A unique identifier associated with the malware scan. Each malware scan has a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.</p>
7494
6556
  * @public
7495
6557
  */
7496
6558
  ScanId?: string | undefined;
7497
6559
  /**
7498
- * <p>The unique ID of the detector that is associated with the request, if it belongs to an account which is a GuardDuty customer.</p>
7499
- * <p>To find the <code>detectorId</code> in the current Region, see the
7500
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6560
+ * <p>The unique ID of the detector that is associated with the request, if it belongs to an account which is a GuardDuty customer.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7501
6561
  * @public
7502
6562
  */
7503
6563
  DetectorId?: string | undefined;
7504
6564
  /**
7505
- * <p>The unique detector ID of the administrator account that the request is associated with.
7506
- * If the account is an administrator, the <code>AdminDetectorId</code> will be the same as the one used for
7507
- * <code>DetectorId. If the customer is not a GuardDuty customer, this field will not be present.</code>.</p>
7508
- * <p>To find the <code>detectorId</code> in the current Region, see the
7509
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6565
+ * <p>The unique detector ID of the administrator account that the request is associated with. If the account is an administrator, the <code>AdminDetectorId</code> will be the same as the one used for <code>DetectorId. If the customer is not a GuardDuty customer, this field will not be present.</code>.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7510
6566
  * @public
7511
6567
  */
7512
6568
  AdminDetectorId?: string | undefined;
@@ -7586,9 +6642,7 @@ export interface GetMalwareScanResponse {
7586
6642
  */
7587
6643
  export interface GetMalwareScanSettingsRequest {
7588
6644
  /**
7589
- * <p>The unique ID of the detector that is associated with this scan.</p>
7590
- * <p>To find the <code>detectorId</code> in the current Region, see the
7591
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6645
+ * <p>The unique ID of the detector that is associated with this scan.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7592
6646
  * @public
7593
6647
  */
7594
6648
  DetectorId: string | undefined;
@@ -7604,9 +6658,7 @@ export interface ScanConditionPair {
7604
6658
  */
7605
6659
  Key: string | undefined;
7606
6660
  /**
7607
- * <p>Represents optional <b>value</b> in the map
7608
- * condition. If not specified, only the <b>key</b> will be
7609
- * matched.</p>
6661
+ * <p>Represents optional <b>value</b> in the map condition. If not specified, only the <b>key</b> will be matched.</p>
7610
6662
  * @public
7611
6663
  */
7612
6664
  Value?: string | undefined;
@@ -7617,28 +6669,23 @@ export interface ScanConditionPair {
7617
6669
  */
7618
6670
  export interface ScanCondition {
7619
6671
  /**
7620
- * <p>Represents an <i>mapEqual</i>
7621
- * <b></b> condition to be applied
7622
- * to a single field when triggering for malware scan.</p>
6672
+ * <p>Represents an <i>mapEqual</i> <b/> condition to be applied to a single field when triggering for malware scan.</p>
7623
6673
  * @public
7624
6674
  */
7625
6675
  MapEquals: ScanConditionPair[] | undefined;
7626
6676
  }
7627
6677
  /**
7628
- * <p>Contains information about criteria used to filter resources before triggering malware
7629
- * scan.</p>
6678
+ * <p>Contains information about criteria used to filter resources before triggering malware scan.</p>
7630
6679
  * @public
7631
6680
  */
7632
6681
  export interface ScanResourceCriteria {
7633
6682
  /**
7634
- * <p>Represents condition that when matched will allow a malware scan for a certain
7635
- * resource.</p>
6683
+ * <p>Represents condition that when matched will allow a malware scan for a certain resource.</p>
7636
6684
  * @public
7637
6685
  */
7638
6686
  Include?: Partial<Record<ScanCriterionKey, ScanCondition>> | undefined;
7639
6687
  /**
7640
- * <p>Represents condition that when matched will prevent a malware scan for a certain
7641
- * resource.</p>
6688
+ * <p>Represents condition that when matched will prevent a malware scan for a certain resource.</p>
7642
6689
  * @public
7643
6690
  */
7644
6691
  Exclude?: Partial<Record<ScanCriterionKey, ScanCondition>> | undefined;
@@ -7664,9 +6711,7 @@ export interface GetMalwareScanSettingsResponse {
7664
6711
  */
7665
6712
  export interface GetMasterAccountRequest {
7666
6713
  /**
7667
- * <p>The unique ID of the detector of the GuardDuty member account.</p>
7668
- * <p>To find the <code>detectorId</code> in the current Region, see the
7669
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6714
+ * <p>The unique ID of the detector of the GuardDuty member account.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7670
6715
  * @public
7671
6716
  */
7672
6717
  DetectorId: string | undefined;
@@ -7713,9 +6758,7 @@ export interface GetMasterAccountResponse {
7713
6758
  */
7714
6759
  export interface GetMemberDetectorsRequest {
7715
6760
  /**
7716
- * <p>The detector ID for the administrator account.</p>
7717
- * <p>To find the <code>detectorId</code> in the current Region, see the
7718
- * Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
6761
+ * <p>The detector ID for the administrator account.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
7719
6762
  * @public
7720
6763
  */
7721
6764
  DetectorId: string | undefined;