@aws-sdk/client-guardduty 3.1024.0 → 3.1026.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -20
- package/dist-cjs/schemas/schemas_0.js +97 -100
- package/dist-es/schemas/schemas_0.js +97 -100
- package/dist-types/GuardDuty.d.ts +1 -20
- package/dist-types/GuardDutyClient.d.ts +1 -20
- package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +1 -2
- package/dist-types/commands/ArchiveFindingsCommand.d.ts +1 -5
- package/dist-types/commands/CreateDetectorCommand.d.ts +2 -24
- package/dist-types/commands/CreateFilterCommand.d.ts +1 -2
- package/dist-types/commands/CreateIPSetCommand.d.ts +1 -4
- package/dist-types/commands/CreateMalwareProtectionPlanCommand.d.ts +1 -3
- package/dist-types/commands/CreateMembersCommand.d.ts +1 -20
- package/dist-types/commands/CreatePublishingDestinationCommand.d.ts +1 -2
- package/dist-types/commands/CreateSampleFindingsCommand.d.ts +1 -3
- package/dist-types/commands/CreateThreatEntitySetCommand.d.ts +1 -5
- package/dist-types/commands/CreateThreatIntelSetCommand.d.ts +1 -3
- package/dist-types/commands/CreateTrustedEntitySetCommand.d.ts +1 -6
- package/dist-types/commands/DeclineInvitationsCommand.d.ts +1 -2
- package/dist-types/commands/DeleteIPSetCommand.d.ts +1 -2
- package/dist-types/commands/DeleteInvitationsCommand.d.ts +1 -2
- package/dist-types/commands/DeleteMalwareProtectionPlanCommand.d.ts +1 -3
- package/dist-types/commands/DeleteMembersCommand.d.ts +1 -5
- package/dist-types/commands/DeleteThreatEntitySetCommand.d.ts +1 -2
- package/dist-types/commands/DeleteTrustedEntitySetCommand.d.ts +1 -2
- package/dist-types/commands/DescribeMalwareScansCommand.d.ts +1 -5
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +2 -6
- package/dist-types/commands/DescribePublishingDestinationCommand.d.ts +1 -2
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +1 -3
- package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +1 -10
- package/dist-types/commands/DisassociateFromMasterAccountCommand.d.ts +1 -7
- package/dist-types/commands/DisassociateMembersCommand.d.ts +1 -19
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +1 -3
- package/dist-types/commands/GetAdministratorAccountCommand.d.ts +1 -16
- package/dist-types/commands/GetCoverageStatisticsCommand.d.ts +2 -5
- package/dist-types/commands/GetDetectorCommand.d.ts +2 -5
- package/dist-types/commands/GetFindingsCommand.d.ts +43 -43
- package/dist-types/commands/GetFindingsStatisticsCommand.d.ts +1 -6
- package/dist-types/commands/GetInvitationsCountCommand.d.ts +1 -2
- package/dist-types/commands/GetMalwareProtectionPlanCommand.d.ts +1 -2
- package/dist-types/commands/GetMalwareScanCommand.d.ts +1 -5
- package/dist-types/commands/GetMalwareScanSettingsCommand.d.ts +1 -4
- package/dist-types/commands/GetMasterAccountCommand.d.ts +1 -2
- package/dist-types/commands/GetMemberDetectorsCommand.d.ts +2 -5
- package/dist-types/commands/GetMembersCommand.d.ts +1 -2
- package/dist-types/commands/GetOrganizationStatisticsCommand.d.ts +2 -5
- package/dist-types/commands/GetRemainingFreeTrialDaysCommand.d.ts +2 -3
- package/dist-types/commands/GetUsageStatisticsCommand.d.ts +4 -7
- package/dist-types/commands/InviteMembersCommand.d.ts +1 -26
- package/dist-types/commands/ListCoverageCommand.d.ts +4 -7
- package/dist-types/commands/ListFindingsCommand.d.ts +1 -3
- package/dist-types/commands/ListIPSetsCommand.d.ts +1 -3
- package/dist-types/commands/ListInvitationsCommand.d.ts +1 -2
- package/dist-types/commands/ListMalwareProtectionPlansCommand.d.ts +1 -2
- package/dist-types/commands/ListMalwareScansCommand.d.ts +1 -2
- package/dist-types/commands/ListMembersCommand.d.ts +1 -2
- package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +1 -3
- package/dist-types/commands/ListPublishingDestinationsCommand.d.ts +1 -2
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +1 -4
- package/dist-types/commands/ListThreatEntitySetsCommand.d.ts +1 -3
- package/dist-types/commands/ListThreatIntelSetsCommand.d.ts +1 -3
- package/dist-types/commands/ListTrustedEntitySetsCommand.d.ts +1 -3
- package/dist-types/commands/SendObjectMalwareScanCommand.d.ts +1 -3
- package/dist-types/commands/StartMalwareScanCommand.d.ts +1 -6
- package/dist-types/commands/StartMonitoringMembersCommand.d.ts +1 -2
- package/dist-types/commands/StopMonitoringMembersCommand.d.ts +1 -6
- package/dist-types/commands/UpdateDetectorCommand.d.ts +2 -10
- package/dist-types/commands/UpdateMalwareScanSettingsCommand.d.ts +1 -4
- package/dist-types/commands/UpdateMemberDetectorsCommand.d.ts +2 -10
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +2 -11
- package/dist-types/commands/UpdatePublishingDestinationCommand.d.ts +1 -2
- package/dist-types/index.d.ts +1 -20
- package/dist-types/models/models_0.d.ts +351 -1308
- package/dist-types/models/models_1.d.ts +151 -637
- package/dist-types/ts3.4/models/models_0.d.ts +8 -8
- package/dist-types/ts3.4/models/models_1.d.ts +1 -1
- package/package.json +33 -33
|
@@ -9,14 +9,12 @@ export interface AcceptAdministratorInvitationRequest {
|
|
|
9
9
|
*/
|
|
10
10
|
DetectorId: string | undefined;
|
|
11
11
|
/**
|
|
12
|
-
* <p>The account ID of the GuardDuty administrator account whose invitation you're
|
|
13
|
-
* accepting.</p>
|
|
12
|
+
* <p>The account ID of the GuardDuty administrator account whose invitation you're accepting.</p>
|
|
14
13
|
* @public
|
|
15
14
|
*/
|
|
16
15
|
AdministratorId: string | undefined;
|
|
17
16
|
/**
|
|
18
|
-
* <p>The value that is used to validate the administrator account to the member
|
|
19
|
-
* account.</p>
|
|
17
|
+
* <p>The value that is used to validate the administrator account to the member account.</p>
|
|
20
18
|
* @public
|
|
21
19
|
*/
|
|
22
20
|
InvitationId: string | undefined;
|
|
@@ -32,21 +30,17 @@ export interface AcceptAdministratorInvitationResponse {
|
|
|
32
30
|
*/
|
|
33
31
|
export interface AcceptInvitationRequest {
|
|
34
32
|
/**
|
|
35
|
-
* <p>The unique ID of the detector of the GuardDuty member account.</p>
|
|
36
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
37
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
33
|
+
* <p>The unique ID of the detector of the GuardDuty member account.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
38
34
|
* @public
|
|
39
35
|
*/
|
|
40
36
|
DetectorId: string | undefined;
|
|
41
37
|
/**
|
|
42
|
-
* <p>The account ID of the GuardDuty administrator account whose invitation you're
|
|
43
|
-
* accepting.</p>
|
|
38
|
+
* <p>The account ID of the GuardDuty administrator account whose invitation you're accepting.</p>
|
|
44
39
|
* @public
|
|
45
40
|
*/
|
|
46
41
|
MasterId: string | undefined;
|
|
47
42
|
/**
|
|
48
|
-
* <p>The value that is used to validate the administrator account to the member
|
|
49
|
-
* account.</p>
|
|
43
|
+
* <p>The value that is used to validate the administrator account to the member account.</p>
|
|
50
44
|
* @public
|
|
51
45
|
*/
|
|
52
46
|
InvitationId: string | undefined;
|
|
@@ -63,14 +57,12 @@ export interface AcceptInvitationResponse {
|
|
|
63
57
|
*/
|
|
64
58
|
export interface AccessControlList {
|
|
65
59
|
/**
|
|
66
|
-
* <p>A value that indicates whether public read access for the bucket is enabled through an
|
|
67
|
-
* Access Control List (ACL).</p>
|
|
60
|
+
* <p>A value that indicates whether public read access for the bucket is enabled through an Access Control List (ACL).</p>
|
|
68
61
|
* @public
|
|
69
62
|
*/
|
|
70
63
|
AllowsPublicReadAccess?: boolean | undefined;
|
|
71
64
|
/**
|
|
72
|
-
* <p>A value that indicates whether public write access for the bucket is enabled through an
|
|
73
|
-
* Access Control List (ACL).</p>
|
|
65
|
+
* <p>A value that indicates whether public write access for the bucket is enabled through an Access Control List (ACL).</p>
|
|
74
66
|
* @public
|
|
75
67
|
*/
|
|
76
68
|
AllowsPublicWriteAccess?: boolean | undefined;
|
|
@@ -149,42 +141,13 @@ export interface AccountDetail {
|
|
|
149
141
|
*/
|
|
150
142
|
AccountId: string | undefined;
|
|
151
143
|
/**
|
|
152
|
-
* <p>The email address of the member account. The following list includes the
|
|
153
|
-
* rules for a valid email address:</p>
|
|
154
|
-
* <ul>
|
|
155
|
-
* <li>
|
|
156
|
-
* <p>The email address must be a minimum of 6 and a maximum of 64 characters long.</p>
|
|
157
|
-
* </li>
|
|
158
|
-
* <li>
|
|
159
|
-
* <p>All characters must be 7-bit ASCII characters.</p>
|
|
160
|
-
* </li>
|
|
161
|
-
* <li>
|
|
162
|
-
* <p>There must be one and only one @ symbol, which separates the local name from the domain name.</p>
|
|
163
|
-
* </li>
|
|
164
|
-
* <li>
|
|
165
|
-
* <p>The local name can't contain any of the following characters:</p>
|
|
166
|
-
* <p>whitespace, " ' ( ) < > [ ] : ' , \ | % &</p>
|
|
167
|
-
* </li>
|
|
168
|
-
* <li>
|
|
169
|
-
* <p>The local name can't begin with a dot (.).</p>
|
|
170
|
-
* </li>
|
|
171
|
-
* <li>
|
|
172
|
-
* <p>The domain name can consist of only the characters [a-z], [A-Z], [0-9], hyphen (-), or dot (.).</p>
|
|
173
|
-
* </li>
|
|
174
|
-
* <li>
|
|
175
|
-
* <p>The domain name can't begin or end with a dot (.) or hyphen (-).</p>
|
|
176
|
-
* </li>
|
|
177
|
-
* <li>
|
|
178
|
-
* <p>The domain name must contain at least one dot. </p>
|
|
179
|
-
* </li>
|
|
180
|
-
* </ul>
|
|
144
|
+
* <p>The email address of the member account. The following list includes the rules for a valid email address:</p> <ul> <li> <p>The email address must be a minimum of 6 and a maximum of 64 characters long.</p> </li> <li> <p>All characters must be 7-bit ASCII characters.</p> </li> <li> <p>There must be one and only one @ symbol, which separates the local name from the domain name.</p> </li> <li> <p>The local name can't contain any of the following characters:</p> <p>whitespace, " ' ( ) < > [ ] : ' , \ | % &</p> </li> <li> <p>The local name can't begin with a dot (.).</p> </li> <li> <p>The domain name can consist of only the characters [a-z], [A-Z], [0-9], hyphen (-), or dot (.).</p> </li> <li> <p>The domain name can't begin or end with a dot (.) or hyphen (-).</p> </li> <li> <p>The domain name must contain at least one dot. </p> </li> </ul>
|
|
181
145
|
* @public
|
|
182
146
|
*/
|
|
183
147
|
Email: string | undefined;
|
|
184
148
|
}
|
|
185
149
|
/**
|
|
186
|
-
* <p>Contains information about which data sources are enabled for the GuardDuty member
|
|
187
|
-
* account.</p>
|
|
150
|
+
* <p>Contains information about which data sources are enabled for the GuardDuty member account.</p>
|
|
188
151
|
* @public
|
|
189
152
|
*/
|
|
190
153
|
export interface DataSourceFreeTrial {
|
|
@@ -195,8 +158,7 @@ export interface DataSourceFreeTrial {
|
|
|
195
158
|
FreeTrialDaysRemaining?: number | undefined;
|
|
196
159
|
}
|
|
197
160
|
/**
|
|
198
|
-
* <p>Provides details about the Kubernetes resources when it is enabled as a data
|
|
199
|
-
* source.</p>
|
|
161
|
+
* <p>Provides details about the Kubernetes resources when it is enabled as a data source.</p>
|
|
200
162
|
* @public
|
|
201
163
|
*/
|
|
202
164
|
export interface KubernetesDataSourceFreeTrial {
|
|
@@ -212,15 +174,13 @@ export interface KubernetesDataSourceFreeTrial {
|
|
|
212
174
|
*/
|
|
213
175
|
export interface MalwareProtectionDataSourceFreeTrial {
|
|
214
176
|
/**
|
|
215
|
-
* <p>Describes whether Malware Protection for EC2 instances with findings is enabled as a data
|
|
216
|
-
* source.</p>
|
|
177
|
+
* <p>Describes whether Malware Protection for EC2 instances with findings is enabled as a data source.</p>
|
|
217
178
|
* @public
|
|
218
179
|
*/
|
|
219
180
|
ScanEc2InstanceWithFindings?: DataSourceFreeTrial | undefined;
|
|
220
181
|
}
|
|
221
182
|
/**
|
|
222
|
-
* <p>Contains information about which data sources are enabled for the GuardDuty member
|
|
223
|
-
* account.</p>
|
|
183
|
+
* <p>Contains information about which data sources are enabled for the GuardDuty member account.</p>
|
|
224
184
|
* @public
|
|
225
185
|
*/
|
|
226
186
|
export interface DataSourcesFreeTrial {
|
|
@@ -295,9 +255,7 @@ export interface AccountFreeTrialInfo {
|
|
|
295
255
|
Features?: FreeTrialFeatureConfigurationResult[] | undefined;
|
|
296
256
|
}
|
|
297
257
|
/**
|
|
298
|
-
* <p>Contains information on how the bucker owner's S3 Block Public Access settings are being
|
|
299
|
-
* applied to the S3 bucket. See <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html">S3 Block Public
|
|
300
|
-
* Access</a> for more information. </p>
|
|
258
|
+
* <p>Contains information on how the bucker owner's S3 Block Public Access settings are being applied to the S3 bucket. See <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html">S3 Block Public Access</a> for more information. </p>
|
|
301
259
|
* @public
|
|
302
260
|
*/
|
|
303
261
|
export interface BlockPublicAccess {
|
|
@@ -376,10 +334,7 @@ export interface RemoteAccountDetails {
|
|
|
376
334
|
*/
|
|
377
335
|
AccountId?: string | undefined;
|
|
378
336
|
/**
|
|
379
|
-
* <p>Details on whether the Amazon Web Services account of the remote API caller is related to your GuardDuty
|
|
380
|
-
* environment. If this value is <code>True</code> the API caller is affiliated to your account
|
|
381
|
-
* in some way. If it is <code>False</code> the API caller is from outside your
|
|
382
|
-
* environment.</p>
|
|
337
|
+
* <p>Details on whether the Amazon Web Services account of the remote API caller is related to your GuardDuty environment. If this value is <code>True</code> the API caller is affiliated to your account in some way. If it is <code>False</code> the API caller is from outside your environment.</p>
|
|
383
338
|
* @public
|
|
384
339
|
*/
|
|
385
340
|
Affiliated?: boolean | undefined;
|
|
@@ -412,8 +367,7 @@ export interface Country {
|
|
|
412
367
|
CountryName?: string | undefined;
|
|
413
368
|
}
|
|
414
369
|
/**
|
|
415
|
-
* <p>Contains information about the location of the remote IP address. By default, GuardDuty
|
|
416
|
-
* returns <code>Geolocation</code> with <code>Lat</code> and <code>Lon</code> as <code>0.0</code>.</p>
|
|
370
|
+
* <p>Contains information about the location of the remote IP address. By default, GuardDuty returns <code>Geolocation</code> with <code>Lat</code> and <code>Lon</code> as <code>0.0</code>.</p>
|
|
417
371
|
* @public
|
|
418
372
|
*/
|
|
419
373
|
export interface GeoLocation {
|
|
@@ -434,8 +388,7 @@ export interface GeoLocation {
|
|
|
434
388
|
*/
|
|
435
389
|
export interface Organization {
|
|
436
390
|
/**
|
|
437
|
-
* <p>The Autonomous System Number (ASN) of the internet provider of the remote IP
|
|
438
|
-
* address.</p>
|
|
391
|
+
* <p>The Autonomous System Number (ASN) of the internet provider of the remote IP address.</p>
|
|
439
392
|
* @public
|
|
440
393
|
*/
|
|
441
394
|
Asn?: string | undefined;
|
|
@@ -532,14 +485,12 @@ export interface AwsApiCallAction {
|
|
|
532
485
|
*/
|
|
533
486
|
ServiceName?: string | undefined;
|
|
534
487
|
/**
|
|
535
|
-
* <p>The details of the Amazon Web Services account that made the API call. This field appears if the call
|
|
536
|
-
* was made from outside your account.</p>
|
|
488
|
+
* <p>The details of the Amazon Web Services account that made the API call. This field appears if the call was made from outside your account.</p>
|
|
537
489
|
* @public
|
|
538
490
|
*/
|
|
539
491
|
RemoteAccountDetails?: RemoteAccountDetails | undefined;
|
|
540
492
|
/**
|
|
541
|
-
* <p>The details of the Amazon Web Services account that made the API call. This field identifies the
|
|
542
|
-
* resources that were affected by this API call.</p>
|
|
493
|
+
* <p>The details of the Amazon Web Services account that made the API call. This field identifies the resources that were affected by this API call.</p>
|
|
543
494
|
* @public
|
|
544
495
|
*/
|
|
545
496
|
AffectedResources?: Record<string, string> | undefined;
|
|
@@ -555,8 +506,7 @@ export interface DnsRequestAction {
|
|
|
555
506
|
*/
|
|
556
507
|
Domain?: string | undefined;
|
|
557
508
|
/**
|
|
558
|
-
* <p>The network connection protocol observed in the activity that prompted GuardDuty to
|
|
559
|
-
* generate the finding.</p>
|
|
509
|
+
* <p>The network connection protocol observed in the activity that prompted GuardDuty to generate the finding.</p>
|
|
560
510
|
* @public
|
|
561
511
|
*/
|
|
562
512
|
Protocol?: string | undefined;
|
|
@@ -566,9 +516,7 @@ export interface DnsRequestAction {
|
|
|
566
516
|
*/
|
|
567
517
|
Blocked?: boolean | undefined;
|
|
568
518
|
/**
|
|
569
|
-
* <p>The second and top level domain involved in the
|
|
570
|
-
* activity that potentially prompted GuardDuty to generate this finding.
|
|
571
|
-
* For a list of top-level and second-level domains, see <a href="https://publicsuffix.org/">public suffix list</a>.</p>
|
|
519
|
+
* <p>The second and top level domain involved in the activity that potentially prompted GuardDuty to generate this finding. For a list of top-level and second-level domains, see <a href="https://publicsuffix.org/">public suffix list</a>.</p>
|
|
572
520
|
* @public
|
|
573
521
|
*/
|
|
574
522
|
DomainWithSuffix?: string | undefined;
|
|
@@ -594,51 +542,50 @@ export interface KubernetesApiCallAction {
|
|
|
594
542
|
*/
|
|
595
543
|
Verb?: string | undefined;
|
|
596
544
|
/**
|
|
597
|
-
* <p>The
|
|
598
|
-
* the caller and the API endpoint.</p>
|
|
545
|
+
* <p>The resource component in the Kubernetes API call action.</p>
|
|
599
546
|
* @public
|
|
600
547
|
*/
|
|
601
|
-
|
|
548
|
+
Resource?: string | undefined;
|
|
602
549
|
/**
|
|
603
|
-
* <p>The
|
|
550
|
+
* <p>The name of the sub-resource in the Kubernetes API call action.</p>
|
|
604
551
|
* @public
|
|
605
552
|
*/
|
|
606
|
-
|
|
553
|
+
Subresource?: string | undefined;
|
|
607
554
|
/**
|
|
608
|
-
* <p>
|
|
555
|
+
* <p>The name of the namespace where the Kubernetes API call action takes place.</p>
|
|
609
556
|
* @public
|
|
610
557
|
*/
|
|
611
|
-
|
|
558
|
+
Namespace?: string | undefined;
|
|
612
559
|
/**
|
|
613
|
-
* <p>The
|
|
560
|
+
* <p>The name of the resource in the Kubernetes API call action.</p>
|
|
614
561
|
* @public
|
|
615
562
|
*/
|
|
616
|
-
|
|
563
|
+
ResourceName?: string | undefined;
|
|
617
564
|
/**
|
|
618
|
-
* <p>
|
|
565
|
+
* <p>The IP of the Kubernetes API caller and the IPs of any proxies or load balancers between the caller and the API endpoint.</p>
|
|
619
566
|
* @public
|
|
620
567
|
*/
|
|
621
|
-
|
|
568
|
+
SourceIps?: string[] | undefined;
|
|
622
569
|
/**
|
|
623
|
-
* <p>The
|
|
570
|
+
* <p>The user agent of the caller of the Kubernetes API.</p>
|
|
624
571
|
* @public
|
|
625
572
|
*/
|
|
626
|
-
|
|
573
|
+
UserAgent?: string | undefined;
|
|
627
574
|
/**
|
|
628
|
-
* <p>
|
|
575
|
+
* <p>Contains information about the remote IP address of the connection.</p>
|
|
629
576
|
* @public
|
|
630
577
|
*/
|
|
631
|
-
|
|
578
|
+
RemoteIpDetails?: RemoteIpDetails | undefined;
|
|
632
579
|
/**
|
|
633
|
-
* <p>The
|
|
580
|
+
* <p>The resulting HTTP response code of the Kubernetes API call action.</p>
|
|
634
581
|
* @public
|
|
635
582
|
*/
|
|
636
|
-
|
|
583
|
+
StatusCode?: number | undefined;
|
|
637
584
|
/**
|
|
638
|
-
* <p>
|
|
585
|
+
* <p>Parameters related to the Kubernetes API call action.</p>
|
|
639
586
|
* @public
|
|
640
587
|
*/
|
|
641
|
-
|
|
588
|
+
Parameters?: string | undefined;
|
|
642
589
|
}
|
|
643
590
|
/**
|
|
644
591
|
* <p>Information about the Kubernetes API for which you check if you have permission to call.</p>
|
|
@@ -646,8 +593,7 @@ export interface KubernetesApiCallAction {
|
|
|
646
593
|
*/
|
|
647
594
|
export interface KubernetesPermissionCheckedDetails {
|
|
648
595
|
/**
|
|
649
|
-
* <p>The verb component of the Kubernetes API call. For example, when you check whether or not you have the permission
|
|
650
|
-
* to call the <code>CreatePod</code> API, the verb component will be <code>Create</code>.</p>
|
|
596
|
+
* <p>The verb component of the Kubernetes API call. For example, when you check whether or not you have the permission to call the <code>CreatePod</code> API, the verb component will be <code>Create</code>.</p>
|
|
651
597
|
* @public
|
|
652
598
|
*/
|
|
653
599
|
Verb?: string | undefined;
|
|
@@ -688,14 +634,12 @@ export interface KubernetesRoleBindingDetails {
|
|
|
688
634
|
*/
|
|
689
635
|
Uid?: string | undefined;
|
|
690
636
|
/**
|
|
691
|
-
* <p>The name of the role being referenced. This must match the name of the <code>Role</code>
|
|
692
|
-
* or <code>ClusterRole</code> that you want to bind to.</p>
|
|
637
|
+
* <p>The name of the role being referenced. This must match the name of the <code>Role</code> or <code>ClusterRole</code> that you want to bind to.</p>
|
|
693
638
|
* @public
|
|
694
639
|
*/
|
|
695
640
|
RoleRefName?: string | undefined;
|
|
696
641
|
/**
|
|
697
|
-
* <p>The type of the role being referenced. This could be either <code>Role</code> or
|
|
698
|
-
* <code>ClusterRole</code>.</p>
|
|
642
|
+
* <p>The type of the role being referenced. This could be either <code>Role</code> or <code>ClusterRole</code>.</p>
|
|
699
643
|
* @public
|
|
700
644
|
*/
|
|
701
645
|
RoleRefKind?: string | undefined;
|
|
@@ -868,21 +812,18 @@ export interface LoginAttribute {
|
|
|
868
812
|
*/
|
|
869
813
|
Application?: string | undefined;
|
|
870
814
|
/**
|
|
871
|
-
* <p>Represents the sum of failed (unsuccessful) login attempts made to establish a connection
|
|
872
|
-
* to the database instance.</p>
|
|
815
|
+
* <p>Represents the sum of failed (unsuccessful) login attempts made to establish a connection to the database instance.</p>
|
|
873
816
|
* @public
|
|
874
817
|
*/
|
|
875
818
|
FailedLoginAttempts?: number | undefined;
|
|
876
819
|
/**
|
|
877
|
-
* <p>Represents the sum of successful connections (a correct combination of login attributes)
|
|
878
|
-
* made to the database instance by the actor.</p>
|
|
820
|
+
* <p>Represents the sum of successful connections (a correct combination of login attributes) made to the database instance by the actor.</p>
|
|
879
821
|
* @public
|
|
880
822
|
*/
|
|
881
823
|
SuccessfulLoginAttempts?: number | undefined;
|
|
882
824
|
}
|
|
883
825
|
/**
|
|
884
|
-
* <p>Indicates that a login attempt was made to the potentially compromised database from a
|
|
885
|
-
* remote IP address.</p>
|
|
826
|
+
* <p>Indicates that a login attempt was made to the potentially compromised database from a remote IP address.</p>
|
|
886
827
|
* @public
|
|
887
828
|
*/
|
|
888
829
|
export interface RdsLoginAttemptAction {
|
|
@@ -932,11 +873,6 @@ export interface Action {
|
|
|
932
873
|
* @public
|
|
933
874
|
*/
|
|
934
875
|
KubernetesApiCallAction?: KubernetesApiCallAction | undefined;
|
|
935
|
-
/**
|
|
936
|
-
* <p>Information about <code>RDS_LOGIN_ATTEMPT</code> action described in this finding.</p>
|
|
937
|
-
* @public
|
|
938
|
-
*/
|
|
939
|
-
RdsLoginAttemptAction?: RdsLoginAttemptAction | undefined;
|
|
940
876
|
/**
|
|
941
877
|
* <p>Information whether the user has the permission to use a specific Kubernetes API.</p>
|
|
942
878
|
* @public
|
|
@@ -952,10 +888,14 @@ export interface Action {
|
|
|
952
888
|
* @public
|
|
953
889
|
*/
|
|
954
890
|
KubernetesRoleDetails?: KubernetesRoleDetails | undefined;
|
|
891
|
+
/**
|
|
892
|
+
* <p>Information about <code>RDS_LOGIN_ATTEMPT</code> action described in this finding.</p>
|
|
893
|
+
* @public
|
|
894
|
+
*/
|
|
895
|
+
RdsLoginAttemptAction?: RdsLoginAttemptAction | undefined;
|
|
955
896
|
}
|
|
956
897
|
/**
|
|
957
|
-
* <p>Contains information about a process involved in a GuardDuty finding, including process identification,
|
|
958
|
-
* execution details, and file information.</p>
|
|
898
|
+
* <p>Contains information about a process involved in a GuardDuty finding, including process identification, execution details, and file information.</p>
|
|
959
899
|
* @public
|
|
960
900
|
*/
|
|
961
901
|
export interface ActorProcess {
|
|
@@ -970,8 +910,7 @@ export interface ActorProcess {
|
|
|
970
910
|
*/
|
|
971
911
|
Path: string | undefined;
|
|
972
912
|
/**
|
|
973
|
-
* <p>The SHA256 hash of the process executable file, which can be used for identification
|
|
974
|
-
* and verification purposes.</p>
|
|
913
|
+
* <p>The SHA256 hash of the process executable file, which can be used for identification and verification purposes.</p>
|
|
975
914
|
* @public
|
|
976
915
|
*/
|
|
977
916
|
Sha256?: string | undefined;
|
|
@@ -987,20 +926,17 @@ export interface Session {
|
|
|
987
926
|
*/
|
|
988
927
|
Uid?: string | undefined;
|
|
989
928
|
/**
|
|
990
|
-
* <p>Indicates whether or not multi-factor authencation (MFA) was used during authentication.</p>
|
|
991
|
-
* <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.attributes.mfaAuthenticated</code>.</p>
|
|
929
|
+
* <p>Indicates whether or not multi-factor authencation (MFA) was used during authentication.</p> <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.attributes.mfaAuthenticated</code>.</p>
|
|
992
930
|
* @public
|
|
993
931
|
*/
|
|
994
932
|
MfaStatus?: MfaStatus | undefined;
|
|
995
933
|
/**
|
|
996
|
-
* <p>The timestamp for when the session was created.</p>
|
|
997
|
-
* <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.attributes.creationDate</code>.</p>
|
|
934
|
+
* <p>The timestamp for when the session was created.</p> <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.attributes.creationDate</code>.</p>
|
|
998
935
|
* @public
|
|
999
936
|
*/
|
|
1000
937
|
CreatedTime?: Date | undefined;
|
|
1001
938
|
/**
|
|
1002
|
-
* <p>Identifier of the session issuer.</p>
|
|
1003
|
-
* <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.sessionIssuer.arn</code>.</p>
|
|
939
|
+
* <p>Identifier of the session issuer.</p> <p>In Amazon Web Services CloudTrail, you can find this value as <code>userIdentity.sessionContext.sessionIssuer.arn</code>.</p>
|
|
1004
940
|
* @public
|
|
1005
941
|
*/
|
|
1006
942
|
Issuer?: string | undefined;
|
|
@@ -1057,9 +993,7 @@ export interface Actor {
|
|
|
1057
993
|
*/
|
|
1058
994
|
Session?: Session | undefined;
|
|
1059
995
|
/**
|
|
1060
|
-
* <p>Contains information about the process associated with the threat actor.
|
|
1061
|
-
* This includes details such as process name, path, execution time, and
|
|
1062
|
-
* unique identifiers that help track the actor's activities within the system.</p>
|
|
996
|
+
* <p>Contains information about the process associated with the threat actor. This includes details such as process name, path, execution time, and unique identifiers that help track the actor's activities within the system.</p>
|
|
1063
997
|
* @public
|
|
1064
998
|
*/
|
|
1065
999
|
Process?: ActorProcess | undefined;
|
|
@@ -1097,8 +1031,7 @@ export interface AddonDetails {
|
|
|
1097
1031
|
AddonStatus?: string | undefined;
|
|
1098
1032
|
}
|
|
1099
1033
|
/**
|
|
1100
|
-
* <p>The account within the organization specified as the GuardDuty delegated
|
|
1101
|
-
* administrator.</p>
|
|
1034
|
+
* <p>The account within the organization specified as the GuardDuty delegated administrator.</p>
|
|
1102
1035
|
* @public
|
|
1103
1036
|
*/
|
|
1104
1037
|
export interface AdminAccount {
|
|
@@ -1124,8 +1057,7 @@ export interface Administrator {
|
|
|
1124
1057
|
*/
|
|
1125
1058
|
AccountId?: string | undefined;
|
|
1126
1059
|
/**
|
|
1127
|
-
* <p>The value that is used to validate the administrator account to the member
|
|
1128
|
-
* account.</p>
|
|
1060
|
+
* <p>The value that is used to validate the administrator account to the member account.</p>
|
|
1129
1061
|
* @public
|
|
1130
1062
|
*/
|
|
1131
1063
|
InvitationId?: string | undefined;
|
|
@@ -1189,8 +1121,7 @@ export interface AnomalyObject {
|
|
|
1189
1121
|
*/
|
|
1190
1122
|
export interface AnomalyUnusual {
|
|
1191
1123
|
/**
|
|
1192
|
-
* <p>The behavior of the anomalous activity that caused GuardDuty to
|
|
1193
|
-
* generate the finding.</p>
|
|
1124
|
+
* <p>The behavior of the anomalous activity that caused GuardDuty to generate the finding.</p>
|
|
1194
1125
|
* @public
|
|
1195
1126
|
*/
|
|
1196
1127
|
Behavior?: Record<string, Record<string, AnomalyObject>> | undefined;
|
|
@@ -1216,10 +1147,7 @@ export interface Anomaly {
|
|
|
1216
1147
|
*/
|
|
1217
1148
|
export interface ArchiveFindingsRequest {
|
|
1218
1149
|
/**
|
|
1219
|
-
* <p>The ID of the detector that specifies the GuardDuty service whose findings you want to
|
|
1220
|
-
* archive.</p>
|
|
1221
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
1222
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
1150
|
+
* <p>The ID of the detector that specifies the GuardDuty service whose findings you want to archive.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
1223
1151
|
* @public
|
|
1224
1152
|
*/
|
|
1225
1153
|
DetectorId: string | undefined;
|
|
@@ -1235,8 +1163,7 @@ export interface ArchiveFindingsRequest {
|
|
|
1235
1163
|
export interface ArchiveFindingsResponse {
|
|
1236
1164
|
}
|
|
1237
1165
|
/**
|
|
1238
|
-
* <p>Contains information about the Autonomous System (AS) associated with the network
|
|
1239
|
-
* endpoints involved in an attack sequence.</p>
|
|
1166
|
+
* <p>Contains information about the Autonomous System (AS) associated with the network endpoints involved in an attack sequence.</p>
|
|
1240
1167
|
* @public
|
|
1241
1168
|
*/
|
|
1242
1169
|
export interface AutonomousSystem {
|
|
@@ -1252,14 +1179,12 @@ export interface AutonomousSystem {
|
|
|
1252
1179
|
Number: number | undefined;
|
|
1253
1180
|
}
|
|
1254
1181
|
/**
|
|
1255
|
-
* <p>Contains information about the Auto Scaling Group involved in a GuardDuty finding,
|
|
1256
|
-
* including unique identifiers of the Amazon EC2 instances.</p>
|
|
1182
|
+
* <p>Contains information about the Auto Scaling Group involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
|
|
1257
1183
|
* @public
|
|
1258
1184
|
*/
|
|
1259
1185
|
export interface AutoscalingAutoScalingGroup {
|
|
1260
1186
|
/**
|
|
1261
|
-
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that are part of the
|
|
1262
|
-
* same Auto Scaling Group.</p>
|
|
1187
|
+
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that are part of the same Auto Scaling Group.</p>
|
|
1263
1188
|
* @public
|
|
1264
1189
|
*/
|
|
1265
1190
|
Ec2InstanceUids?: string[] | undefined;
|
|
@@ -1270,14 +1195,12 @@ export interface AutoscalingAutoScalingGroup {
|
|
|
1270
1195
|
*/
|
|
1271
1196
|
export interface BucketPolicy {
|
|
1272
1197
|
/**
|
|
1273
|
-
* <p>A value that indicates whether public read access for the bucket is enabled through a
|
|
1274
|
-
* bucket policy.</p>
|
|
1198
|
+
* <p>A value that indicates whether public read access for the bucket is enabled through a bucket policy.</p>
|
|
1275
1199
|
* @public
|
|
1276
1200
|
*/
|
|
1277
1201
|
AllowsPublicReadAccess?: boolean | undefined;
|
|
1278
1202
|
/**
|
|
1279
|
-
* <p>A value that indicates whether public write access for the bucket is enabled through a
|
|
1280
|
-
* bucket policy.</p>
|
|
1203
|
+
* <p>A value that indicates whether public write access for the bucket is enabled through a bucket policy.</p>
|
|
1281
1204
|
* @public
|
|
1282
1205
|
*/
|
|
1283
1206
|
AllowsPublicWriteAccess?: boolean | undefined;
|
|
@@ -1298,21 +1221,18 @@ export interface BucketLevelPermissions {
|
|
|
1298
1221
|
*/
|
|
1299
1222
|
BucketPolicy?: BucketPolicy | undefined;
|
|
1300
1223
|
/**
|
|
1301
|
-
* <p>Contains information on which account level S3 Block Public Access settings are applied to
|
|
1302
|
-
* the S3 bucket.</p>
|
|
1224
|
+
* <p>Contains information on which account level S3 Block Public Access settings are applied to the S3 bucket.</p>
|
|
1303
1225
|
* @public
|
|
1304
1226
|
*/
|
|
1305
1227
|
BlockPublicAccess?: BlockPublicAccess | undefined;
|
|
1306
1228
|
}
|
|
1307
1229
|
/**
|
|
1308
|
-
* <p>Contains information about the CloudFormation stack involved in a GuardDuty finding,
|
|
1309
|
-
* including unique identifiers of the Amazon EC2 instances.</p>
|
|
1230
|
+
* <p>Contains information about the CloudFormation stack involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
|
|
1310
1231
|
* @public
|
|
1311
1232
|
*/
|
|
1312
1233
|
export interface CloudformationStack {
|
|
1313
1234
|
/**
|
|
1314
|
-
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that were created as part of the
|
|
1315
|
-
* same CloudFormation stack.</p>
|
|
1235
|
+
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that were created as part of the same CloudFormation stack.</p>
|
|
1316
1236
|
* @public
|
|
1317
1237
|
*/
|
|
1318
1238
|
Ec2InstanceUids?: string[] | undefined;
|
|
@@ -1334,110 +1254,84 @@ export interface CloudTrailConfigurationResult {
|
|
|
1334
1254
|
*/
|
|
1335
1255
|
export interface Condition {
|
|
1336
1256
|
/**
|
|
1337
|
-
* <p>Represents the <i>equal</i> condition to be applied to a single field when
|
|
1338
|
-
* querying for findings.</p>
|
|
1257
|
+
* <p>Represents the <i>equal</i> condition to be applied to a single field when querying for findings.</p>
|
|
1339
1258
|
*
|
|
1340
1259
|
* @deprecated deprecated.
|
|
1341
1260
|
* @public
|
|
1342
1261
|
*/
|
|
1343
1262
|
Eq?: string[] | undefined;
|
|
1344
1263
|
/**
|
|
1345
|
-
* <p>Represents the <i>not equal</i> condition to be applied to a single field
|
|
1346
|
-
* when querying for findings.</p>
|
|
1264
|
+
* <p>Represents the <i>not equal</i> condition to be applied to a single field when querying for findings.</p>
|
|
1347
1265
|
*
|
|
1348
1266
|
* @deprecated deprecated.
|
|
1349
1267
|
* @public
|
|
1350
1268
|
*/
|
|
1351
1269
|
Neq?: string[] | undefined;
|
|
1352
1270
|
/**
|
|
1353
|
-
* <p>Represents a <i>greater than</i> condition to be applied to a single field
|
|
1354
|
-
* when querying for findings.</p>
|
|
1271
|
+
* <p>Represents a <i>greater than</i> condition to be applied to a single field when querying for findings.</p>
|
|
1355
1272
|
*
|
|
1356
1273
|
* @deprecated deprecated.
|
|
1357
1274
|
* @public
|
|
1358
1275
|
*/
|
|
1359
1276
|
Gt?: number | undefined;
|
|
1360
1277
|
/**
|
|
1361
|
-
* <p>Represents a <i>greater than or equal</i> condition to be applied to a
|
|
1362
|
-
* single field when querying for findings.</p>
|
|
1278
|
+
* <p>Represents a <i>greater than or equal</i> condition to be applied to a single field when querying for findings.</p>
|
|
1363
1279
|
*
|
|
1364
1280
|
* @deprecated deprecated.
|
|
1365
1281
|
* @public
|
|
1366
1282
|
*/
|
|
1367
1283
|
Gte?: number | undefined;
|
|
1368
1284
|
/**
|
|
1369
|
-
* <p>Represents a <i>less than</i> condition to be applied to a single field when
|
|
1370
|
-
* querying for findings.</p>
|
|
1285
|
+
* <p>Represents a <i>less than</i> condition to be applied to a single field when querying for findings.</p>
|
|
1371
1286
|
*
|
|
1372
1287
|
* @deprecated deprecated.
|
|
1373
1288
|
* @public
|
|
1374
1289
|
*/
|
|
1375
1290
|
Lt?: number | undefined;
|
|
1376
1291
|
/**
|
|
1377
|
-
* <p>Represents a <i>less than or equal</i> condition to be applied to a single
|
|
1378
|
-
* field when querying for findings.</p>
|
|
1292
|
+
* <p>Represents a <i>less than or equal</i> condition to be applied to a single field when querying for findings.</p>
|
|
1379
1293
|
*
|
|
1380
1294
|
* @deprecated deprecated.
|
|
1381
1295
|
* @public
|
|
1382
1296
|
*/
|
|
1383
1297
|
Lte?: number | undefined;
|
|
1384
1298
|
/**
|
|
1385
|
-
* <p>Represents an <i>equal</i>
|
|
1386
|
-
* <b></b> condition to be applied to
|
|
1387
|
-
* a single field when querying for findings.</p>
|
|
1299
|
+
* <p>Represents an <i>equal</i> <b/> condition to be applied to a single field when querying for findings.</p>
|
|
1388
1300
|
* @public
|
|
1389
1301
|
*/
|
|
1390
1302
|
Equals?: string[] | undefined;
|
|
1391
1303
|
/**
|
|
1392
|
-
* <p>Represents a <i>not equal</i>
|
|
1393
|
-
* <b></b> condition to be applied
|
|
1394
|
-
* to a single field when querying for findings.</p>
|
|
1304
|
+
* <p>Represents a <i>not equal</i> <b/> condition to be applied to a single field when querying for findings.</p>
|
|
1395
1305
|
* @public
|
|
1396
1306
|
*/
|
|
1397
1307
|
NotEquals?: string[] | undefined;
|
|
1398
1308
|
/**
|
|
1399
|
-
* <p>Represents a <i>greater than</i> condition to be applied to a single field
|
|
1400
|
-
* when querying for findings.</p>
|
|
1309
|
+
* <p>Represents a <i>greater than</i> condition to be applied to a single field when querying for findings.</p>
|
|
1401
1310
|
* @public
|
|
1402
1311
|
*/
|
|
1403
1312
|
GreaterThan?: number | undefined;
|
|
1404
1313
|
/**
|
|
1405
|
-
* <p>Represents a <i>greater than or equal</i> condition to be applied to a
|
|
1406
|
-
* single field when querying for findings.</p>
|
|
1314
|
+
* <p>Represents a <i>greater than or equal</i> condition to be applied to a single field when querying for findings.</p>
|
|
1407
1315
|
* @public
|
|
1408
1316
|
*/
|
|
1409
1317
|
GreaterThanOrEqual?: number | undefined;
|
|
1410
1318
|
/**
|
|
1411
|
-
* <p>Represents a <i>less than</i> condition to be applied to a single field when
|
|
1412
|
-
* querying for findings.</p>
|
|
1319
|
+
* <p>Represents a <i>less than</i> condition to be applied to a single field when querying for findings.</p>
|
|
1413
1320
|
* @public
|
|
1414
1321
|
*/
|
|
1415
1322
|
LessThan?: number | undefined;
|
|
1416
1323
|
/**
|
|
1417
|
-
* <p>Represents a <i>less than or equal</i> condition to be applied to a single
|
|
1418
|
-
* field when querying for findings.</p>
|
|
1324
|
+
* <p>Represents a <i>less than or equal</i> condition to be applied to a single field when querying for findings.</p>
|
|
1419
1325
|
* @public
|
|
1420
1326
|
*/
|
|
1421
1327
|
LessThanOrEqual?: number | undefined;
|
|
1422
1328
|
/**
|
|
1423
|
-
* <p>Represents the <i>match</i> condition to be applied to a single field when querying for findings.
|
|
1424
|
-
* </p>
|
|
1425
|
-
* <note>
|
|
1426
|
-
* <p>
|
|
1427
|
-
* The <i>matches</i> condition is available only for create-filter and update-filter APIs.
|
|
1428
|
-
* </p>
|
|
1429
|
-
* </note>
|
|
1329
|
+
* <p>Represents the <i>match</i> condition to be applied to a single field when querying for findings. </p> <note> <p> The <i>matches</i> condition is available only for create-filter and update-filter APIs. </p> </note>
|
|
1430
1330
|
* @public
|
|
1431
1331
|
*/
|
|
1432
1332
|
Matches?: string[] | undefined;
|
|
1433
1333
|
/**
|
|
1434
|
-
* <p>Represents the <i>not match</i> condition to be applied to a single field when querying for findings.
|
|
1435
|
-
* </p>
|
|
1436
|
-
* <note>
|
|
1437
|
-
* <p>
|
|
1438
|
-
* The <i>not-matches</i> condition is available only for create-filter and update-filter APIs.
|
|
1439
|
-
* </p>
|
|
1440
|
-
* </note>
|
|
1334
|
+
* <p>Represents the <i>not match</i> condition to be applied to a single field when querying for findings. </p> <note> <p> The <i>not-matches</i> condition is available only for create-filter and update-filter APIs. </p> </note>
|
|
1441
1335
|
* @public
|
|
1442
1336
|
*/
|
|
1443
1337
|
NotMatches?: string[] | undefined;
|
|
@@ -1500,9 +1394,7 @@ export interface Container {
|
|
|
1500
1394
|
*/
|
|
1501
1395
|
Image?: string | undefined;
|
|
1502
1396
|
/**
|
|
1503
|
-
* <p>Part of the image name before the last slash. For example, imagePrefix for
|
|
1504
|
-
* public.ecr.aws/amazonlinux/amazonlinux:latest would be public.ecr.aws/amazonlinux. If the
|
|
1505
|
-
* image name is relative and does not have a slash, this field is empty.</p>
|
|
1397
|
+
* <p>Part of the image name before the last slash. For example, imagePrefix for public.ecr.aws/amazonlinux/amazonlinux:latest would be public.ecr.aws/amazonlinux. If the image name is relative and does not have a slash, this field is empty.</p>
|
|
1506
1398
|
* @public
|
|
1507
1399
|
*/
|
|
1508
1400
|
ImagePrefix?: string | undefined;
|
|
@@ -1518,15 +1410,12 @@ export interface Container {
|
|
|
1518
1410
|
SecurityContext?: SecurityContext | undefined;
|
|
1519
1411
|
}
|
|
1520
1412
|
/**
|
|
1521
|
-
* <p>Contains information about container resources involved in a GuardDuty finding.
|
|
1522
|
-
* This structure provides details about containers that were identified as part of
|
|
1523
|
-
* suspicious or malicious activity.</p>
|
|
1413
|
+
* <p>Contains information about container resources involved in a GuardDuty finding. This structure provides details about containers that were identified as part of suspicious or malicious activity.</p>
|
|
1524
1414
|
* @public
|
|
1525
1415
|
*/
|
|
1526
1416
|
export interface ContainerFindingResource {
|
|
1527
1417
|
/**
|
|
1528
|
-
* <p>The container image information, including the image name and tag used to run the container
|
|
1529
|
-
* that was involved in the finding.</p>
|
|
1418
|
+
* <p>The container image information, including the image name and tag used to run the container that was involved in the finding.</p>
|
|
1530
1419
|
* @public
|
|
1531
1420
|
*/
|
|
1532
1421
|
Image: string | undefined;
|
|
@@ -1537,14 +1426,12 @@ export interface ContainerFindingResource {
|
|
|
1537
1426
|
ImageUid?: string | undefined;
|
|
1538
1427
|
}
|
|
1539
1428
|
/**
|
|
1540
|
-
* <p>Contains information about the Amazon EC2 instance that is running
|
|
1541
|
-
* the Amazon ECS container.</p>
|
|
1429
|
+
* <p>Contains information about the Amazon EC2 instance that is running the Amazon ECS container.</p>
|
|
1542
1430
|
* @public
|
|
1543
1431
|
*/
|
|
1544
1432
|
export interface ContainerInstanceDetails {
|
|
1545
1433
|
/**
|
|
1546
|
-
* <p>Represents the nodes in the Amazon ECS cluster that has a <code>HEALTHY</code>
|
|
1547
|
-
* coverage status.</p>
|
|
1434
|
+
* <p>Represents the nodes in the Amazon ECS cluster that has a <code>HEALTHY</code> coverage status.</p>
|
|
1548
1435
|
* @public
|
|
1549
1436
|
*/
|
|
1550
1437
|
CoveredContainerInstances?: number | undefined;
|
|
@@ -1555,8 +1442,7 @@ export interface ContainerInstanceDetails {
|
|
|
1555
1442
|
CompatibleContainerInstances?: number | undefined;
|
|
1556
1443
|
}
|
|
1557
1444
|
/**
|
|
1558
|
-
* <p>Contains information about the Amazon EC2 instance runtime
|
|
1559
|
-
* coverage details.</p>
|
|
1445
|
+
* <p>Contains information about the Amazon EC2 instance runtime coverage details.</p>
|
|
1560
1446
|
* @public
|
|
1561
1447
|
*/
|
|
1562
1448
|
export interface CoverageEc2InstanceDetails {
|
|
@@ -1571,8 +1457,7 @@ export interface CoverageEc2InstanceDetails {
|
|
|
1571
1457
|
*/
|
|
1572
1458
|
InstanceType?: string | undefined;
|
|
1573
1459
|
/**
|
|
1574
|
-
* <p>The cluster ARN of the Amazon ECS cluster running on
|
|
1575
|
-
* the Amazon EC2 instance.</p>
|
|
1460
|
+
* <p>The cluster ARN of the Amazon ECS cluster running on the Amazon EC2 instance.</p>
|
|
1576
1461
|
* @public
|
|
1577
1462
|
*/
|
|
1578
1463
|
ClusterArn?: string | undefined;
|
|
@@ -1582,29 +1467,13 @@ export interface CoverageEc2InstanceDetails {
|
|
|
1582
1467
|
*/
|
|
1583
1468
|
AgentDetails?: AgentDetails | undefined;
|
|
1584
1469
|
/**
|
|
1585
|
-
* <p>Indicates how the GuardDuty security agent is managed for this resource.</p>
|
|
1586
|
-
* <ul>
|
|
1587
|
-
* <li>
|
|
1588
|
-
* <p>
|
|
1589
|
-
* <code>AUTO_MANAGED</code> indicates that GuardDuty deploys and manages updates for this resource.</p>
|
|
1590
|
-
* </li>
|
|
1591
|
-
* <li>
|
|
1592
|
-
* <p>
|
|
1593
|
-
* <code>MANUAL</code> indicates that you are responsible to deploy, update, and manage the GuardDuty
|
|
1594
|
-
* security agent updates for this resource.</p>
|
|
1595
|
-
* </li>
|
|
1596
|
-
* </ul>
|
|
1597
|
-
* <note>
|
|
1598
|
-
* <p>The <code>DISABLED</code> status doesn't apply to Amazon
|
|
1599
|
-
* EC2 instances and Amazon EKS clusters.</p>
|
|
1600
|
-
* </note>
|
|
1470
|
+
* <p>Indicates how the GuardDuty security agent is managed for this resource.</p> <ul> <li> <p> <code>AUTO_MANAGED</code> indicates that GuardDuty deploys and manages updates for this resource.</p> </li> <li> <p> <code>MANUAL</code> indicates that you are responsible to deploy, update, and manage the GuardDuty security agent updates for this resource.</p> </li> </ul> <note> <p>The <code>DISABLED</code> status doesn't apply to Amazon EC2 instances and Amazon EKS clusters.</p> </note>
|
|
1601
1471
|
* @public
|
|
1602
1472
|
*/
|
|
1603
1473
|
ManagementType?: ManagementType | undefined;
|
|
1604
1474
|
}
|
|
1605
1475
|
/**
|
|
1606
|
-
* <p>Contains information about Amazon Web Services Fargate details associated with
|
|
1607
|
-
* an Amazon ECS cluster.</p>
|
|
1476
|
+
* <p>Contains information about Amazon Web Services Fargate details associated with an Amazon ECS cluster.</p>
|
|
1608
1477
|
* @public
|
|
1609
1478
|
*/
|
|
1610
1479
|
export interface FargateDetails {
|
|
@@ -1614,20 +1483,7 @@ export interface FargateDetails {
|
|
|
1614
1483
|
*/
|
|
1615
1484
|
Issues?: string[] | undefined;
|
|
1616
1485
|
/**
|
|
1617
|
-
* <p>Indicates how the GuardDuty security agent is managed for this resource.</p>
|
|
1618
|
-
* <ul>
|
|
1619
|
-
* <li>
|
|
1620
|
-
* <p>
|
|
1621
|
-
* <code>AUTO_MANAGED</code> indicates that GuardDuty deploys and manages updates for this resource.</p>
|
|
1622
|
-
* </li>
|
|
1623
|
-
* <li>
|
|
1624
|
-
* <p>
|
|
1625
|
-
* <code>DISABLED</code> indicates that the deployment of the GuardDuty security agent is disabled for this resource.</p>
|
|
1626
|
-
* </li>
|
|
1627
|
-
* </ul>
|
|
1628
|
-
* <note>
|
|
1629
|
-
* <p>The <code>MANUAL</code> status doesn't apply to the Amazon Web Services Fargate (Amazon ECS only) woprkloads.</p>
|
|
1630
|
-
* </note>
|
|
1486
|
+
* <p>Indicates how the GuardDuty security agent is managed for this resource.</p> <ul> <li> <p> <code>AUTO_MANAGED</code> indicates that GuardDuty deploys and manages updates for this resource.</p> </li> <li> <p> <code>DISABLED</code> indicates that the deployment of the GuardDuty security agent is disabled for this resource.</p> </li> </ul> <note> <p>The <code>MANUAL</code> status doesn't apply to the Amazon Web Services Fargate (Amazon ECS only) woprkloads.</p> </note>
|
|
1631
1487
|
* @public
|
|
1632
1488
|
*/
|
|
1633
1489
|
ManagementType?: ManagementType | undefined;
|
|
@@ -1643,14 +1499,12 @@ export interface CoverageEcsClusterDetails {
|
|
|
1643
1499
|
*/
|
|
1644
1500
|
ClusterName?: string | undefined;
|
|
1645
1501
|
/**
|
|
1646
|
-
* <p>Information about the Fargate details associated with the Amazon
|
|
1647
|
-
* ECS cluster.</p>
|
|
1502
|
+
* <p>Information about the Fargate details associated with the Amazon ECS cluster.</p>
|
|
1648
1503
|
* @public
|
|
1649
1504
|
*/
|
|
1650
1505
|
FargateDetails?: FargateDetails | undefined;
|
|
1651
1506
|
/**
|
|
1652
|
-
* <p>Information about the Amazon ECS container running on Amazon EC2
|
|
1653
|
-
* instance.</p>
|
|
1507
|
+
* <p>Information about the Amazon ECS container running on Amazon EC2 instance.</p>
|
|
1654
1508
|
* @public
|
|
1655
1509
|
*/
|
|
1656
1510
|
ContainerInstanceDetails?: ContainerInstanceDetails | undefined;
|
|
@@ -1666,8 +1520,7 @@ export interface CoverageEksClusterDetails {
|
|
|
1666
1520
|
*/
|
|
1667
1521
|
ClusterName?: string | undefined;
|
|
1668
1522
|
/**
|
|
1669
|
-
* <p>Represents the nodes within the EKS cluster that have a <code>HEALTHY</code> coverage
|
|
1670
|
-
* status.</p>
|
|
1523
|
+
* <p>Represents the nodes within the EKS cluster that have a <code>HEALTHY</code> coverage status.</p>
|
|
1671
1524
|
* @public
|
|
1672
1525
|
*/
|
|
1673
1526
|
CoveredNodes?: number | undefined;
|
|
@@ -1682,47 +1535,34 @@ export interface CoverageEksClusterDetails {
|
|
|
1682
1535
|
*/
|
|
1683
1536
|
AddonDetails?: AddonDetails | undefined;
|
|
1684
1537
|
/**
|
|
1685
|
-
* <p>Indicates how the Amazon EKS add-on GuardDuty agent is managed for this EKS cluster.</p>
|
|
1686
|
-
* <p>
|
|
1687
|
-
* <code>AUTO_MANAGED</code> indicates GuardDuty deploys and manages updates for this resource.</p>
|
|
1688
|
-
* <p>
|
|
1689
|
-
* <code>MANUAL</code> indicates that you are responsible to deploy, update, and manage
|
|
1690
|
-
* the Amazon EKS add-on GuardDuty agent for this resource.</p>
|
|
1538
|
+
* <p>Indicates how the Amazon EKS add-on GuardDuty agent is managed for this EKS cluster.</p> <p> <code>AUTO_MANAGED</code> indicates GuardDuty deploys and manages updates for this resource.</p> <p> <code>MANUAL</code> indicates that you are responsible to deploy, update, and manage the Amazon EKS add-on GuardDuty agent for this resource.</p>
|
|
1691
1539
|
* @public
|
|
1692
1540
|
*/
|
|
1693
1541
|
ManagementType?: ManagementType | undefined;
|
|
1694
1542
|
}
|
|
1695
1543
|
/**
|
|
1696
|
-
* <p>Represents a condition that when matched will be added to the response of the
|
|
1697
|
-
* operation.</p>
|
|
1544
|
+
* <p>Represents a condition that when matched will be added to the response of the operation.</p>
|
|
1698
1545
|
* @public
|
|
1699
1546
|
*/
|
|
1700
1547
|
export interface CoverageFilterCondition {
|
|
1701
1548
|
/**
|
|
1702
|
-
* <p>Represents an equal condition that is applied to a single field while retrieving the
|
|
1703
|
-
* coverage details.</p>
|
|
1549
|
+
* <p>Represents an equal condition that is applied to a single field while retrieving the coverage details.</p>
|
|
1704
1550
|
* @public
|
|
1705
1551
|
*/
|
|
1706
1552
|
Equals?: string[] | undefined;
|
|
1707
1553
|
/**
|
|
1708
|
-
* <p>Represents a not equal condition that is applied to a single field while retrieving the
|
|
1709
|
-
* coverage details.</p>
|
|
1554
|
+
* <p>Represents a not equal condition that is applied to a single field while retrieving the coverage details.</p>
|
|
1710
1555
|
* @public
|
|
1711
1556
|
*/
|
|
1712
1557
|
NotEquals?: string[] | undefined;
|
|
1713
1558
|
}
|
|
1714
1559
|
/**
|
|
1715
|
-
* <p>Represents a condition that when matched will be added to the response of the
|
|
1716
|
-
* operation.</p>
|
|
1560
|
+
* <p>Represents a condition that when matched will be added to the response of the operation.</p>
|
|
1717
1561
|
* @public
|
|
1718
1562
|
*/
|
|
1719
1563
|
export interface CoverageFilterCriterion {
|
|
1720
1564
|
/**
|
|
1721
|
-
* <p>An enum value representing possible filter fields.</p>
|
|
1722
|
-
* <note>
|
|
1723
|
-
* <p>Replace the enum value <code>CLUSTER_NAME</code> with <code>EKS_CLUSTER_NAME</code>.
|
|
1724
|
-
* <code>CLUSTER_NAME</code> has been deprecated.</p>
|
|
1725
|
-
* </note>
|
|
1565
|
+
* <p>An enum value representing possible filter fields.</p> <note> <p>Replace the enum value <code>CLUSTER_NAME</code> with <code>EKS_CLUSTER_NAME</code>. <code>CLUSTER_NAME</code> has been deprecated.</p> </note>
|
|
1726
1566
|
* @public
|
|
1727
1567
|
*/
|
|
1728
1568
|
CriterionKey?: CoverageFilterCriterionKey | undefined;
|
|
@@ -1738,8 +1578,7 @@ export interface CoverageFilterCriterion {
|
|
|
1738
1578
|
*/
|
|
1739
1579
|
export interface CoverageFilterCriteria {
|
|
1740
1580
|
/**
|
|
1741
|
-
* <p>Represents a condition that when matched will be added to the response of the
|
|
1742
|
-
* operation.</p>
|
|
1581
|
+
* <p>Represents a condition that when matched will be added to the response of the operation.</p>
|
|
1743
1582
|
* @public
|
|
1744
1583
|
*/
|
|
1745
1584
|
FilterCriterion?: CoverageFilterCriterion[] | undefined;
|
|
@@ -1755,22 +1594,20 @@ export interface CoverageResourceDetails {
|
|
|
1755
1594
|
*/
|
|
1756
1595
|
EksClusterDetails?: CoverageEksClusterDetails | undefined;
|
|
1757
1596
|
/**
|
|
1758
|
-
* <p>
|
|
1597
|
+
* <p>Information about the Amazon ECS cluster that is assessed for runtime coverage.</p>
|
|
1759
1598
|
* @public
|
|
1760
1599
|
*/
|
|
1761
|
-
|
|
1600
|
+
EcsClusterDetails?: CoverageEcsClusterDetails | undefined;
|
|
1762
1601
|
/**
|
|
1763
|
-
* <p>Information about the Amazon
|
|
1764
|
-
* runtime coverage.</p>
|
|
1602
|
+
* <p>Information about the Amazon EC2 instance assessed for runtime coverage.</p>
|
|
1765
1603
|
* @public
|
|
1766
1604
|
*/
|
|
1767
|
-
|
|
1605
|
+
Ec2InstanceDetails?: CoverageEc2InstanceDetails | undefined;
|
|
1768
1606
|
/**
|
|
1769
|
-
* <p>
|
|
1770
|
-
* for runtime coverage.</p>
|
|
1607
|
+
* <p>The type of Amazon Web Services resource.</p>
|
|
1771
1608
|
* @public
|
|
1772
1609
|
*/
|
|
1773
|
-
|
|
1610
|
+
ResourceType?: ResourceType | undefined;
|
|
1774
1611
|
}
|
|
1775
1612
|
/**
|
|
1776
1613
|
* <p>Information about the resource of the GuardDuty account.</p>
|
|
@@ -1803,14 +1640,12 @@ export interface CoverageResource {
|
|
|
1803
1640
|
*/
|
|
1804
1641
|
CoverageStatus?: CoverageStatus | undefined;
|
|
1805
1642
|
/**
|
|
1806
|
-
* <p>Represents the reason why a coverage status was <code>UNHEALTHY</code> for the EKS
|
|
1807
|
-
* cluster.</p>
|
|
1643
|
+
* <p>Represents the reason why a coverage status was <code>UNHEALTHY</code> for the EKS cluster.</p>
|
|
1808
1644
|
* @public
|
|
1809
1645
|
*/
|
|
1810
1646
|
Issue?: string | undefined;
|
|
1811
1647
|
/**
|
|
1812
|
-
* <p>The timestamp at which the coverage details for the resource were last updated. This is in
|
|
1813
|
-
* UTC format.</p>
|
|
1648
|
+
* <p>The timestamp at which the coverage details for the resource were last updated. This is in UTC format.</p>
|
|
1814
1649
|
* @public
|
|
1815
1650
|
*/
|
|
1816
1651
|
UpdatedAt?: Date | undefined;
|
|
@@ -1821,11 +1656,7 @@ export interface CoverageResource {
|
|
|
1821
1656
|
*/
|
|
1822
1657
|
export interface CoverageSortCriteria {
|
|
1823
1658
|
/**
|
|
1824
|
-
* <p>Represents the field name used to sort the coverage details.</p>
|
|
1825
|
-
* <note>
|
|
1826
|
-
* <p>Replace the enum value <code>CLUSTER_NAME</code> with <code>EKS_CLUSTER_NAME</code>.
|
|
1827
|
-
* <code>CLUSTER_NAME</code> has been deprecated.</p>
|
|
1828
|
-
* </note>
|
|
1659
|
+
* <p>Represents the field name used to sort the coverage details.</p> <note> <p>Replace the enum value <code>CLUSTER_NAME</code> with <code>EKS_CLUSTER_NAME</code>. <code>CLUSTER_NAME</code> has been deprecated.</p> </note>
|
|
1829
1660
|
* @public
|
|
1830
1661
|
*/
|
|
1831
1662
|
AttributeName?: CoverageSortKey | undefined;
|
|
@@ -1874,8 +1705,7 @@ export interface KubernetesConfiguration {
|
|
|
1874
1705
|
AuditLogs: KubernetesAuditLogsConfiguration | undefined;
|
|
1875
1706
|
}
|
|
1876
1707
|
/**
|
|
1877
|
-
* <p>Describes whether Malware Protection for EC2 instances with findings will be enabled as a
|
|
1878
|
-
* data source.</p>
|
|
1708
|
+
* <p>Describes whether Malware Protection for EC2 instances with findings will be enabled as a data source.</p>
|
|
1879
1709
|
* @public
|
|
1880
1710
|
*/
|
|
1881
1711
|
export interface ScanEc2InstanceWithFindings {
|
|
@@ -1945,12 +1775,7 @@ export interface DetectorAdditionalConfiguration {
|
|
|
1945
1775
|
Status?: FeatureStatus | undefined;
|
|
1946
1776
|
}
|
|
1947
1777
|
/**
|
|
1948
|
-
* <p>Contains information about a GuardDuty feature.</p>
|
|
1949
|
-
* <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
|
|
1950
|
-
* and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
|
|
1951
|
-
* You can add only one of these two features because Runtime Monitoring already includes the
|
|
1952
|
-
* threat detection for Amazon EKS resources. For more information, see
|
|
1953
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
|
|
1778
|
+
* <p>Contains information about a GuardDuty feature.</p> <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>) and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error. You can add only one of these two features because Runtime Monitoring already includes the threat detection for Amazon EKS resources. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
|
|
1954
1779
|
* @public
|
|
1955
1780
|
*/
|
|
1956
1781
|
export interface DetectorFeatureConfiguration {
|
|
@@ -1990,10 +1815,7 @@ export interface CreateDetectorRequest {
|
|
|
1990
1815
|
*/
|
|
1991
1816
|
FindingPublishingFrequency?: FindingPublishingFrequency | undefined;
|
|
1992
1817
|
/**
|
|
1993
|
-
* <p>Describes which data sources will be enabled for the detector.</p>
|
|
1994
|
-
* <p>There might be regional differences because some data sources might not be
|
|
1995
|
-
* available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
|
|
1996
|
-
* information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
1818
|
+
* <p>Describes which data sources will be enabled for the detector.</p> <p>There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
|
|
1997
1819
|
*
|
|
1998
1820
|
* @deprecated This parameter is deprecated, use Features instead.
|
|
1999
1821
|
* @public
|
|
@@ -2021,15 +1843,13 @@ export interface EbsVolumesResult {
|
|
|
2021
1843
|
*/
|
|
2022
1844
|
Status?: DataSourceStatus | undefined;
|
|
2023
1845
|
/**
|
|
2024
|
-
* <p>Specifies the reason why scanning EBS volumes (Malware Protection) was not enabled as a
|
|
2025
|
-
* data source.</p>
|
|
1846
|
+
* <p>Specifies the reason why scanning EBS volumes (Malware Protection) was not enabled as a data source.</p>
|
|
2026
1847
|
* @public
|
|
2027
1848
|
*/
|
|
2028
1849
|
Reason?: string | undefined;
|
|
2029
1850
|
}
|
|
2030
1851
|
/**
|
|
2031
|
-
* <p>An object that contains information on the status of whether Malware Protection for EC2
|
|
2032
|
-
* instances with findings will be enabled as a data source.</p>
|
|
1852
|
+
* <p>An object that contains information on the status of whether Malware Protection for EC2 instances with findings will be enabled as a data source.</p>
|
|
2033
1853
|
* @public
|
|
2034
1854
|
*/
|
|
2035
1855
|
export interface ScanEc2InstanceWithFindingsResult {
|
|
@@ -2040,8 +1860,7 @@ export interface ScanEc2InstanceWithFindingsResult {
|
|
|
2040
1860
|
EbsVolumes?: EbsVolumesResult | undefined;
|
|
2041
1861
|
}
|
|
2042
1862
|
/**
|
|
2043
|
-
* <p>An object that contains information on the status of all Malware Protection data
|
|
2044
|
-
* sources.</p>
|
|
1863
|
+
* <p>An object that contains information on the status of all Malware Protection data sources.</p>
|
|
2045
1864
|
* @public
|
|
2046
1865
|
*/
|
|
2047
1866
|
export interface MalwareProtectionConfigurationResult {
|
|
@@ -2062,8 +1881,7 @@ export interface MalwareProtectionConfigurationResult {
|
|
|
2062
1881
|
*/
|
|
2063
1882
|
export interface UnprocessedDataSourcesResult {
|
|
2064
1883
|
/**
|
|
2065
|
-
* <p>An object that contains information on the status of all Malware Protection data
|
|
2066
|
-
* sources.</p>
|
|
1884
|
+
* <p>An object that contains information on the status of all Malware Protection data sources.</p>
|
|
2067
1885
|
* @public
|
|
2068
1886
|
*/
|
|
2069
1887
|
MalwareProtection?: MalwareProtectionConfigurationResult | undefined;
|
|
@@ -2078,8 +1896,7 @@ export interface CreateDetectorResponse {
|
|
|
2078
1896
|
*/
|
|
2079
1897
|
DetectorId?: string | undefined;
|
|
2080
1898
|
/**
|
|
2081
|
-
* <p>Specifies the data sources that couldn't be enabled when GuardDuty was enabled for the
|
|
2082
|
-
* first time.</p>
|
|
1899
|
+
* <p>Specifies the data sources that couldn't be enabled when GuardDuty was enabled for the first time.</p>
|
|
2083
1900
|
* @public
|
|
2084
1901
|
*/
|
|
2085
1902
|
UnprocessedDataSources?: UnprocessedDataSourcesResult | undefined;
|
|
@@ -2090,8 +1907,7 @@ export interface CreateDetectorResponse {
|
|
|
2090
1907
|
*/
|
|
2091
1908
|
export interface FindingCriteria {
|
|
2092
1909
|
/**
|
|
2093
|
-
* <p>Represents a map of finding properties that match specified conditions and values when
|
|
2094
|
-
* querying findings.</p>
|
|
1910
|
+
* <p>Represents a map of finding properties that match specified conditions and values when querying findings.</p>
|
|
2095
1911
|
* @public
|
|
2096
1912
|
*/
|
|
2097
1913
|
Criterion?: Record<string, Condition> | undefined;
|
|
@@ -2101,23 +1917,17 @@ export interface FindingCriteria {
|
|
|
2101
1917
|
*/
|
|
2102
1918
|
export interface CreateFilterRequest {
|
|
2103
1919
|
/**
|
|
2104
|
-
* <p>The detector ID associated with the GuardDuty account for which you want to create a filter.</p>
|
|
2105
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
2106
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
1920
|
+
* <p>The detector ID associated with the GuardDuty account for which you want to create a filter.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2107
1921
|
* @public
|
|
2108
1922
|
*/
|
|
2109
1923
|
DetectorId: string | undefined;
|
|
2110
1924
|
/**
|
|
2111
|
-
* <p>The name of the filter. Valid characters include period (.), underscore (_), dash (-), and
|
|
2112
|
-
* alphanumeric characters. A whitespace is considered to be an invalid character.</p>
|
|
1925
|
+
* <p>The name of the filter. Valid characters include period (.), underscore (_), dash (-), and alphanumeric characters. A whitespace is considered to be an invalid character.</p>
|
|
2113
1926
|
* @public
|
|
2114
1927
|
*/
|
|
2115
1928
|
Name: string | undefined;
|
|
2116
1929
|
/**
|
|
2117
|
-
* <p>The description of the filter. Valid characters include alphanumeric characters, and
|
|
2118
|
-
* special characters such as hyphen, period, colon, underscore, parentheses (<code>\{ \}</code>,
|
|
2119
|
-
* <code>[ ]</code>, and <code>( )</code>), forward slash, horizontal tab, vertical tab,
|
|
2120
|
-
* newline, form feed, return, and whitespace.</p>
|
|
1930
|
+
* <p>The description of the filter. Valid characters include alphanumeric characters, and special characters such as hyphen, period, colon, underscore, parentheses (<code>\{ \}</code>, <code>[ ]</code>, and <code>( )</code>), forward slash, horizontal tab, vertical tab, newline, form feed, return, and whitespace.</p>
|
|
2121
1931
|
* @public
|
|
2122
1932
|
*/
|
|
2123
1933
|
Description?: string | undefined;
|
|
@@ -2127,333 +1937,12 @@ export interface CreateFilterRequest {
|
|
|
2127
1937
|
*/
|
|
2128
1938
|
Action?: FilterAction | undefined;
|
|
2129
1939
|
/**
|
|
2130
|
-
* <p>Specifies the position of the filter in the list of current filters. Also specifies the
|
|
2131
|
-
* order in which this filter is applied to the findings.</p>
|
|
1940
|
+
* <p>Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.</p>
|
|
2132
1941
|
* @public
|
|
2133
1942
|
*/
|
|
2134
1943
|
Rank?: number | undefined;
|
|
2135
1944
|
/**
|
|
2136
|
-
* <p>Represents the criteria to be used in the filter for querying findings.</p>
|
|
2137
|
-
* <p>You can only use the following attributes to query findings:</p>
|
|
2138
|
-
* <ul>
|
|
2139
|
-
* <li>
|
|
2140
|
-
* <p>accountId</p>
|
|
2141
|
-
* </li>
|
|
2142
|
-
* <li>
|
|
2143
|
-
* <p>id</p>
|
|
2144
|
-
* </li>
|
|
2145
|
-
* <li>
|
|
2146
|
-
* <p>region</p>
|
|
2147
|
-
* </li>
|
|
2148
|
-
* <li>
|
|
2149
|
-
* <p>severity</p>
|
|
2150
|
-
* <p>To filter on the basis of severity, the API and CLI use the following input list for
|
|
2151
|
-
* the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_FindingCriteria.html">FindingCriteria</a>
|
|
2152
|
-
* condition:</p>
|
|
2153
|
-
* <ul>
|
|
2154
|
-
* <li>
|
|
2155
|
-
* <p>
|
|
2156
|
-
* <b>Low</b>: <code>["1", "2", "3"]</code>
|
|
2157
|
-
* </p>
|
|
2158
|
-
* </li>
|
|
2159
|
-
* <li>
|
|
2160
|
-
* <p>
|
|
2161
|
-
* <b>Medium</b>: <code>["4", "5", "6"]</code>
|
|
2162
|
-
* </p>
|
|
2163
|
-
* </li>
|
|
2164
|
-
* <li>
|
|
2165
|
-
* <p>
|
|
2166
|
-
* <b>High</b>: <code>["7", "8"]</code>
|
|
2167
|
-
* </p>
|
|
2168
|
-
* </li>
|
|
2169
|
-
* <li>
|
|
2170
|
-
* <p>
|
|
2171
|
-
* <b>Critical</b>: <code>["9", "10"]</code>
|
|
2172
|
-
* </p>
|
|
2173
|
-
* </li>
|
|
2174
|
-
* </ul>
|
|
2175
|
-
* <p>For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a>
|
|
2176
|
-
* in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
2177
|
-
* </li>
|
|
2178
|
-
* <li>
|
|
2179
|
-
* <p>type</p>
|
|
2180
|
-
* </li>
|
|
2181
|
-
* <li>
|
|
2182
|
-
* <p>updatedAt</p>
|
|
2183
|
-
* <p>Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ
|
|
2184
|
-
* depending on whether the value contains milliseconds.</p>
|
|
2185
|
-
* </li>
|
|
2186
|
-
* <li>
|
|
2187
|
-
* <p>resource.accessKeyDetails.accessKeyId</p>
|
|
2188
|
-
* </li>
|
|
2189
|
-
* <li>
|
|
2190
|
-
* <p>resource.accessKeyDetails.principalId</p>
|
|
2191
|
-
* </li>
|
|
2192
|
-
* <li>
|
|
2193
|
-
* <p>resource.accessKeyDetails.userName</p>
|
|
2194
|
-
* </li>
|
|
2195
|
-
* <li>
|
|
2196
|
-
* <p>resource.accessKeyDetails.userType</p>
|
|
2197
|
-
* </li>
|
|
2198
|
-
* <li>
|
|
2199
|
-
* <p>resource.instanceDetails.iamInstanceProfile.id</p>
|
|
2200
|
-
* </li>
|
|
2201
|
-
* <li>
|
|
2202
|
-
* <p>resource.instanceDetails.imageId</p>
|
|
2203
|
-
* </li>
|
|
2204
|
-
* <li>
|
|
2205
|
-
* <p>resource.instanceDetails.instanceId</p>
|
|
2206
|
-
* </li>
|
|
2207
|
-
* <li>
|
|
2208
|
-
* <p>resource.instanceDetails.tags.key</p>
|
|
2209
|
-
* </li>
|
|
2210
|
-
* <li>
|
|
2211
|
-
* <p>resource.instanceDetails.tags.value</p>
|
|
2212
|
-
* </li>
|
|
2213
|
-
* <li>
|
|
2214
|
-
* <p>resource.instanceDetails.networkInterfaces.ipv6Addresses</p>
|
|
2215
|
-
* </li>
|
|
2216
|
-
* <li>
|
|
2217
|
-
* <p>resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress</p>
|
|
2218
|
-
* </li>
|
|
2219
|
-
* <li>
|
|
2220
|
-
* <p>resource.instanceDetails.networkInterfaces.publicDnsName</p>
|
|
2221
|
-
* </li>
|
|
2222
|
-
* <li>
|
|
2223
|
-
* <p>resource.instanceDetails.networkInterfaces.publicIp</p>
|
|
2224
|
-
* </li>
|
|
2225
|
-
* <li>
|
|
2226
|
-
* <p>resource.instanceDetails.networkInterfaces.securityGroups.groupId</p>
|
|
2227
|
-
* </li>
|
|
2228
|
-
* <li>
|
|
2229
|
-
* <p>resource.instanceDetails.networkInterfaces.securityGroups.groupName</p>
|
|
2230
|
-
* </li>
|
|
2231
|
-
* <li>
|
|
2232
|
-
* <p>resource.instanceDetails.networkInterfaces.subnetId</p>
|
|
2233
|
-
* </li>
|
|
2234
|
-
* <li>
|
|
2235
|
-
* <p>resource.instanceDetails.networkInterfaces.vpcId</p>
|
|
2236
|
-
* </li>
|
|
2237
|
-
* <li>
|
|
2238
|
-
* <p>resource.instanceDetails.outpostArn</p>
|
|
2239
|
-
* </li>
|
|
2240
|
-
* <li>
|
|
2241
|
-
* <p>resource.resourceType</p>
|
|
2242
|
-
* </li>
|
|
2243
|
-
* <li>
|
|
2244
|
-
* <p>resource.s3BucketDetails.publicAccess.effectivePermissions</p>
|
|
2245
|
-
* </li>
|
|
2246
|
-
* <li>
|
|
2247
|
-
* <p>resource.s3BucketDetails.name</p>
|
|
2248
|
-
* </li>
|
|
2249
|
-
* <li>
|
|
2250
|
-
* <p>resource.s3BucketDetails.tags.key</p>
|
|
2251
|
-
* </li>
|
|
2252
|
-
* <li>
|
|
2253
|
-
* <p>resource.s3BucketDetails.tags.value</p>
|
|
2254
|
-
* </li>
|
|
2255
|
-
* <li>
|
|
2256
|
-
* <p>resource.s3BucketDetails.type</p>
|
|
2257
|
-
* </li>
|
|
2258
|
-
* <li>
|
|
2259
|
-
* <p>service.action.actionType</p>
|
|
2260
|
-
* </li>
|
|
2261
|
-
* <li>
|
|
2262
|
-
* <p>service.action.awsApiCallAction.api</p>
|
|
2263
|
-
* </li>
|
|
2264
|
-
* <li>
|
|
2265
|
-
* <p>service.action.awsApiCallAction.callerType</p>
|
|
2266
|
-
* </li>
|
|
2267
|
-
* <li>
|
|
2268
|
-
* <p>service.action.awsApiCallAction.errorCode</p>
|
|
2269
|
-
* </li>
|
|
2270
|
-
* <li>
|
|
2271
|
-
* <p>service.action.awsApiCallAction.remoteIpDetails.city.cityName</p>
|
|
2272
|
-
* </li>
|
|
2273
|
-
* <li>
|
|
2274
|
-
* <p>service.action.awsApiCallAction.remoteIpDetails.country.countryName</p>
|
|
2275
|
-
* </li>
|
|
2276
|
-
* <li>
|
|
2277
|
-
* <p>service.action.awsApiCallAction.remoteIpDetails.ipAddressV4</p>
|
|
2278
|
-
* </li>
|
|
2279
|
-
* <li>
|
|
2280
|
-
* <p>service.action.awsApiCallAction.remoteIpDetails.ipAddressV6</p>
|
|
2281
|
-
* </li>
|
|
2282
|
-
* <li>
|
|
2283
|
-
* <p>service.action.awsApiCallAction.remoteIpDetails.organization.asn</p>
|
|
2284
|
-
* </li>
|
|
2285
|
-
* <li>
|
|
2286
|
-
* <p>service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg</p>
|
|
2287
|
-
* </li>
|
|
2288
|
-
* <li>
|
|
2289
|
-
* <p>service.action.awsApiCallAction.serviceName</p>
|
|
2290
|
-
* </li>
|
|
2291
|
-
* <li>
|
|
2292
|
-
* <p>service.action.dnsRequestAction.domain</p>
|
|
2293
|
-
* </li>
|
|
2294
|
-
* <li>
|
|
2295
|
-
* <p>service.action.dnsRequestAction.domainWithSuffix</p>
|
|
2296
|
-
* </li>
|
|
2297
|
-
* <li>
|
|
2298
|
-
* <p>service.action.dnsRequestAction.vpcOwnerAccountId</p>
|
|
2299
|
-
* </li>
|
|
2300
|
-
* <li>
|
|
2301
|
-
* <p>service.action.networkConnectionAction.blocked</p>
|
|
2302
|
-
* </li>
|
|
2303
|
-
* <li>
|
|
2304
|
-
* <p>service.action.networkConnectionAction.connectionDirection</p>
|
|
2305
|
-
* </li>
|
|
2306
|
-
* <li>
|
|
2307
|
-
* <p>service.action.networkConnectionAction.localPortDetails.port</p>
|
|
2308
|
-
* </li>
|
|
2309
|
-
* <li>
|
|
2310
|
-
* <p>service.action.networkConnectionAction.protocol</p>
|
|
2311
|
-
* </li>
|
|
2312
|
-
* <li>
|
|
2313
|
-
* <p>service.action.networkConnectionAction.remoteIpDetails.city.cityName</p>
|
|
2314
|
-
* </li>
|
|
2315
|
-
* <li>
|
|
2316
|
-
* <p>service.action.networkConnectionAction.remoteIpDetails.country.countryName</p>
|
|
2317
|
-
* </li>
|
|
2318
|
-
* <li>
|
|
2319
|
-
* <p>service.action.networkConnectionAction.remoteIpDetails.ipAddressV4</p>
|
|
2320
|
-
* </li>
|
|
2321
|
-
* <li>
|
|
2322
|
-
* <p>service.action.networkConnectionAction.remoteIpDetails.ipAddressV6</p>
|
|
2323
|
-
* </li>
|
|
2324
|
-
* <li>
|
|
2325
|
-
* <p>service.action.networkConnectionAction.remoteIpDetails.organization.asn</p>
|
|
2326
|
-
* </li>
|
|
2327
|
-
* <li>
|
|
2328
|
-
* <p>service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg</p>
|
|
2329
|
-
* </li>
|
|
2330
|
-
* <li>
|
|
2331
|
-
* <p>service.action.networkConnectionAction.remotePortDetails.port</p>
|
|
2332
|
-
* </li>
|
|
2333
|
-
* <li>
|
|
2334
|
-
* <p>service.action.awsApiCallAction.remoteAccountDetails.affiliated</p>
|
|
2335
|
-
* </li>
|
|
2336
|
-
* <li>
|
|
2337
|
-
* <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4</p>
|
|
2338
|
-
* </li>
|
|
2339
|
-
* <li>
|
|
2340
|
-
* <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV6</p>
|
|
2341
|
-
* </li>
|
|
2342
|
-
* <li>
|
|
2343
|
-
* <p>service.action.kubernetesApiCallAction.namespace</p>
|
|
2344
|
-
* </li>
|
|
2345
|
-
* <li>
|
|
2346
|
-
* <p>service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn</p>
|
|
2347
|
-
* </li>
|
|
2348
|
-
* <li>
|
|
2349
|
-
* <p>service.action.kubernetesApiCallAction.requestUri</p>
|
|
2350
|
-
* </li>
|
|
2351
|
-
* <li>
|
|
2352
|
-
* <p>service.action.kubernetesApiCallAction.statusCode</p>
|
|
2353
|
-
* </li>
|
|
2354
|
-
* <li>
|
|
2355
|
-
* <p>service.action.networkConnectionAction.localIpDetails.ipAddressV4</p>
|
|
2356
|
-
* </li>
|
|
2357
|
-
* <li>
|
|
2358
|
-
* <p>service.action.networkConnectionAction.localIpDetails.ipAddressV6</p>
|
|
2359
|
-
* </li>
|
|
2360
|
-
* <li>
|
|
2361
|
-
* <p>service.action.networkConnectionAction.protocol</p>
|
|
2362
|
-
* </li>
|
|
2363
|
-
* <li>
|
|
2364
|
-
* <p>service.action.awsApiCallAction.serviceName</p>
|
|
2365
|
-
* </li>
|
|
2366
|
-
* <li>
|
|
2367
|
-
* <p>service.action.awsApiCallAction.remoteAccountDetails.accountId</p>
|
|
2368
|
-
* </li>
|
|
2369
|
-
* <li>
|
|
2370
|
-
* <p>service.additionalInfo.threatListName</p>
|
|
2371
|
-
* </li>
|
|
2372
|
-
* <li>
|
|
2373
|
-
* <p>service.resourceRole</p>
|
|
2374
|
-
* </li>
|
|
2375
|
-
* <li>
|
|
2376
|
-
* <p>resource.eksClusterDetails.name</p>
|
|
2377
|
-
* </li>
|
|
2378
|
-
* <li>
|
|
2379
|
-
* <p>resource.kubernetesDetails.kubernetesWorkloadDetails.name</p>
|
|
2380
|
-
* </li>
|
|
2381
|
-
* <li>
|
|
2382
|
-
* <p>resource.kubernetesDetails.kubernetesWorkloadDetails.namespace</p>
|
|
2383
|
-
* </li>
|
|
2384
|
-
* <li>
|
|
2385
|
-
* <p>resource.kubernetesDetails.kubernetesUserDetails.username</p>
|
|
2386
|
-
* </li>
|
|
2387
|
-
* <li>
|
|
2388
|
-
* <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.image</p>
|
|
2389
|
-
* </li>
|
|
2390
|
-
* <li>
|
|
2391
|
-
* <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.imagePrefix</p>
|
|
2392
|
-
* </li>
|
|
2393
|
-
* <li>
|
|
2394
|
-
* <p>service.ebsVolumeScanDetails.scanId</p>
|
|
2395
|
-
* </li>
|
|
2396
|
-
* <li>
|
|
2397
|
-
* <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name</p>
|
|
2398
|
-
* </li>
|
|
2399
|
-
* <li>
|
|
2400
|
-
* <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity</p>
|
|
2401
|
-
* </li>
|
|
2402
|
-
* <li>
|
|
2403
|
-
* <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash</p>
|
|
2404
|
-
* </li>
|
|
2405
|
-
* <li>
|
|
2406
|
-
* <p>resource.ecsClusterDetails.name</p>
|
|
2407
|
-
* </li>
|
|
2408
|
-
* <li>
|
|
2409
|
-
* <p>resource.ecsClusterDetails.taskDetails.containers.image</p>
|
|
2410
|
-
* </li>
|
|
2411
|
-
* <li>
|
|
2412
|
-
* <p>resource.ecsClusterDetails.taskDetails.definitionArn</p>
|
|
2413
|
-
* </li>
|
|
2414
|
-
* <li>
|
|
2415
|
-
* <p>resource.containerDetails.image</p>
|
|
2416
|
-
* </li>
|
|
2417
|
-
* <li>
|
|
2418
|
-
* <p>resource.rdsDbInstanceDetails.dbInstanceIdentifier</p>
|
|
2419
|
-
* </li>
|
|
2420
|
-
* <li>
|
|
2421
|
-
* <p>resource.rdsDbInstanceDetails.dbClusterIdentifier</p>
|
|
2422
|
-
* </li>
|
|
2423
|
-
* <li>
|
|
2424
|
-
* <p>resource.rdsDbInstanceDetails.engine</p>
|
|
2425
|
-
* </li>
|
|
2426
|
-
* <li>
|
|
2427
|
-
* <p>resource.rdsDbUserDetails.user</p>
|
|
2428
|
-
* </li>
|
|
2429
|
-
* <li>
|
|
2430
|
-
* <p>resource.rdsDbInstanceDetails.tags.key</p>
|
|
2431
|
-
* </li>
|
|
2432
|
-
* <li>
|
|
2433
|
-
* <p>resource.rdsDbInstanceDetails.tags.value</p>
|
|
2434
|
-
* </li>
|
|
2435
|
-
* <li>
|
|
2436
|
-
* <p>service.runtimeDetails.process.executableSha256</p>
|
|
2437
|
-
* </li>
|
|
2438
|
-
* <li>
|
|
2439
|
-
* <p>service.runtimeDetails.process.name</p>
|
|
2440
|
-
* </li>
|
|
2441
|
-
* <li>
|
|
2442
|
-
* <p>service.runtimeDetails.process.executablePath</p>
|
|
2443
|
-
* </li>
|
|
2444
|
-
* <li>
|
|
2445
|
-
* <p>resource.lambdaDetails.functionName</p>
|
|
2446
|
-
* </li>
|
|
2447
|
-
* <li>
|
|
2448
|
-
* <p>resource.lambdaDetails.functionArn</p>
|
|
2449
|
-
* </li>
|
|
2450
|
-
* <li>
|
|
2451
|
-
* <p>resource.lambdaDetails.tags.key</p>
|
|
2452
|
-
* </li>
|
|
2453
|
-
* <li>
|
|
2454
|
-
* <p>resource.lambdaDetails.tags.value</p>
|
|
2455
|
-
* </li>
|
|
2456
|
-
* </ul>
|
|
1945
|
+
* <p>Represents the criteria to be used in the filter for querying findings.</p> <p>You can only use the following attributes to query findings:</p> <ul> <li> <p>accountId</p> </li> <li> <p>id</p> </li> <li> <p>region</p> </li> <li> <p>severity</p> <p>To filter on the basis of severity, the API and CLI use the following input list for the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_FindingCriteria.html">FindingCriteria</a> condition:</p> <ul> <li> <p> <b>Low</b>: <code>["1", "2", "3"]</code> </p> </li> <li> <p> <b>Medium</b>: <code>["4", "5", "6"]</code> </p> </li> <li> <p> <b>High</b>: <code>["7", "8"]</code> </p> </li> <li> <p> <b>Critical</b>: <code>["9", "10"]</code> </p> </li> </ul> <p>For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a> in the <i>Amazon GuardDuty User Guide</i>.</p> </li> <li> <p>type</p> </li> <li> <p>updatedAt</p> <p>Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds.</p> </li> <li> <p>resource.accessKeyDetails.accessKeyId</p> </li> <li> <p>resource.accessKeyDetails.principalId</p> </li> <li> <p>resource.accessKeyDetails.userName</p> </li> <li> <p>resource.accessKeyDetails.userType</p> </li> <li> <p>resource.instanceDetails.iamInstanceProfile.id</p> </li> <li> <p>resource.instanceDetails.imageId</p> </li> <li> <p>resource.instanceDetails.instanceId</p> </li> <li> <p>resource.instanceDetails.tags.key</p> </li> <li> <p>resource.instanceDetails.tags.value</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.ipv6Addresses</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.publicDnsName</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.publicIp</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.securityGroups.groupId</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.securityGroups.groupName</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.subnetId</p> </li> <li> <p>resource.instanceDetails.networkInterfaces.vpcId</p> </li> <li> <p>resource.instanceDetails.outpostArn</p> </li> <li> <p>resource.resourceType</p> </li> <li> <p>resource.s3BucketDetails.publicAccess.effectivePermissions</p> </li> <li> <p>resource.s3BucketDetails.name</p> </li> <li> <p>resource.s3BucketDetails.tags.key</p> </li> <li> <p>resource.s3BucketDetails.tags.value</p> </li> <li> <p>resource.s3BucketDetails.type</p> </li> <li> <p>service.action.actionType</p> </li> <li> <p>service.action.awsApiCallAction.api</p> </li> <li> <p>service.action.awsApiCallAction.callerType</p> </li> <li> <p>service.action.awsApiCallAction.errorCode</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.city.cityName</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.country.countryName</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.ipAddressV4</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.ipAddressV6</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.organization.asn</p> </li> <li> <p>service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg</p> </li> <li> <p>service.action.awsApiCallAction.serviceName</p> </li> <li> <p>service.action.dnsRequestAction.domain</p> </li> <li> <p>service.action.dnsRequestAction.domainWithSuffix</p> </li> <li> <p>service.action.dnsRequestAction.vpcOwnerAccountId</p> </li> <li> <p>service.action.networkConnectionAction.blocked</p> </li> <li> <p>service.action.networkConnectionAction.connectionDirection</p> </li> <li> <p>service.action.networkConnectionAction.localPortDetails.port</p> </li> <li> <p>service.action.networkConnectionAction.protocol</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.city.cityName</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.country.countryName</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.ipAddressV4</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.ipAddressV6</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.organization.asn</p> </li> <li> <p>service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg</p> </li> <li> <p>service.action.networkConnectionAction.remotePortDetails.port</p> </li> <li> <p>service.action.awsApiCallAction.remoteAccountDetails.affiliated</p> </li> <li> <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4</p> </li> <li> <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV6</p> </li> <li> <p>service.action.kubernetesApiCallAction.namespace</p> </li> <li> <p>service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn</p> </li> <li> <p>service.action.kubernetesApiCallAction.requestUri</p> </li> <li> <p>service.action.kubernetesApiCallAction.statusCode</p> </li> <li> <p>service.action.networkConnectionAction.localIpDetails.ipAddressV4</p> </li> <li> <p>service.action.networkConnectionAction.localIpDetails.ipAddressV6</p> </li> <li> <p>service.action.networkConnectionAction.protocol</p> </li> <li> <p>service.action.awsApiCallAction.serviceName</p> </li> <li> <p>service.action.awsApiCallAction.remoteAccountDetails.accountId</p> </li> <li> <p>service.additionalInfo.threatListName</p> </li> <li> <p>service.resourceRole</p> </li> <li> <p>resource.eksClusterDetails.name</p> </li> <li> <p>resource.kubernetesDetails.kubernetesWorkloadDetails.name</p> </li> <li> <p>resource.kubernetesDetails.kubernetesWorkloadDetails.namespace</p> </li> <li> <p>resource.kubernetesDetails.kubernetesUserDetails.username</p> </li> <li> <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.image</p> </li> <li> <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.imagePrefix</p> </li> <li> <p>service.ebsVolumeScanDetails.scanId</p> </li> <li> <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name</p> </li> <li> <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity</p> </li> <li> <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash</p> </li> <li> <p>resource.ecsClusterDetails.name</p> </li> <li> <p>resource.ecsClusterDetails.taskDetails.containers.image</p> </li> <li> <p>resource.ecsClusterDetails.taskDetails.definitionArn</p> </li> <li> <p>resource.containerDetails.image</p> </li> <li> <p>resource.rdsDbInstanceDetails.dbInstanceIdentifier</p> </li> <li> <p>resource.rdsDbInstanceDetails.dbClusterIdentifier</p> </li> <li> <p>resource.rdsDbInstanceDetails.engine</p> </li> <li> <p>resource.rdsDbUserDetails.user</p> </li> <li> <p>resource.rdsDbInstanceDetails.tags.key</p> </li> <li> <p>resource.rdsDbInstanceDetails.tags.value</p> </li> <li> <p>service.runtimeDetails.process.executableSha256</p> </li> <li> <p>service.runtimeDetails.process.name</p> </li> <li> <p>service.runtimeDetails.process.executablePath</p> </li> <li> <p>resource.lambdaDetails.functionName</p> </li> <li> <p>resource.lambdaDetails.functionArn</p> </li> <li> <p>resource.lambdaDetails.tags.key</p> </li> <li> <p>resource.lambdaDetails.tags.value</p> </li> </ul>
|
|
2457
1946
|
* @public
|
|
2458
1947
|
*/
|
|
2459
1948
|
FindingCriteria: FindingCriteria | undefined;
|
|
@@ -2483,15 +1972,12 @@ export interface CreateFilterResponse {
|
|
|
2483
1972
|
*/
|
|
2484
1973
|
export interface CreateIPSetRequest {
|
|
2485
1974
|
/**
|
|
2486
|
-
* <p>The unique ID of the detector of the GuardDuty account for which you want to create an IPSet.</p>
|
|
2487
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
2488
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
1975
|
+
* <p>The unique ID of the detector of the GuardDuty account for which you want to create an IPSet.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2489
1976
|
* @public
|
|
2490
1977
|
*/
|
|
2491
1978
|
DetectorId: string | undefined;
|
|
2492
1979
|
/**
|
|
2493
|
-
* <p>The user-friendly name to identify the IPSet.</p>
|
|
2494
|
-
* <p> Allowed characters are alphanumeric, whitespace, dash (-), and underscores (_).</p>
|
|
1980
|
+
* <p>The user-friendly name to identify the IPSet.</p> <p> Allowed characters are alphanumeric, whitespace, dash (-), and underscores (_).</p>
|
|
2495
1981
|
* @public
|
|
2496
1982
|
*/
|
|
2497
1983
|
Name: string | undefined;
|
|
@@ -2506,8 +1992,7 @@ export interface CreateIPSetRequest {
|
|
|
2506
1992
|
*/
|
|
2507
1993
|
Location: string | undefined;
|
|
2508
1994
|
/**
|
|
2509
|
-
* <p>A Boolean value that indicates whether GuardDuty is to start using the uploaded
|
|
2510
|
-
* IPSet.</p>
|
|
1995
|
+
* <p>A Boolean value that indicates whether GuardDuty is to start using the uploaded IPSet.</p>
|
|
2511
1996
|
* @public
|
|
2512
1997
|
*/
|
|
2513
1998
|
Activate: boolean | undefined;
|
|
@@ -2570,17 +2055,13 @@ export interface CreateS3BucketResource {
|
|
|
2570
2055
|
*/
|
|
2571
2056
|
BucketName?: string | undefined;
|
|
2572
2057
|
/**
|
|
2573
|
-
* <p>Information about the specified object prefixes. The S3 object will be scanned only
|
|
2574
|
-
* if it belongs to any of the specified object prefixes.</p>
|
|
2058
|
+
* <p>Information about the specified object prefixes. The S3 object will be scanned only if it belongs to any of the specified object prefixes.</p>
|
|
2575
2059
|
* @public
|
|
2576
2060
|
*/
|
|
2577
2061
|
ObjectPrefixes?: string[] | undefined;
|
|
2578
2062
|
}
|
|
2579
2063
|
/**
|
|
2580
|
-
* <p>Information about the protected resource that
|
|
2581
|
-
* is associated with the created Malware Protection plan.
|
|
2582
|
-
* Presently, <code>S3Bucket</code> is the only supported
|
|
2583
|
-
* protected resource.</p>
|
|
2064
|
+
* <p>Information about the protected resource that is associated with the created Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported protected resource.</p>
|
|
2584
2065
|
* @public
|
|
2585
2066
|
*/
|
|
2586
2067
|
export interface CreateProtectedResource {
|
|
@@ -2600,15 +2081,12 @@ export interface CreateMalwareProtectionPlanRequest {
|
|
|
2600
2081
|
*/
|
|
2601
2082
|
ClientToken?: string | undefined;
|
|
2602
2083
|
/**
|
|
2603
|
-
* <p>Amazon Resource Name (ARN) of the IAM role that has the permissions to scan and add tags to the associated
|
|
2604
|
-
* protected resource.</p>
|
|
2084
|
+
* <p>Amazon Resource Name (ARN) of the IAM role that has the permissions to scan and add tags to the associated protected resource.</p>
|
|
2605
2085
|
* @public
|
|
2606
2086
|
*/
|
|
2607
2087
|
Role: string | undefined;
|
|
2608
2088
|
/**
|
|
2609
|
-
* <p>Information about the protected resource that is associated with the created
|
|
2610
|
-
* Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported
|
|
2611
|
-
* protected resource.</p>
|
|
2089
|
+
* <p>Information about the protected resource that is associated with the created Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported protected resource.</p>
|
|
2612
2090
|
* @public
|
|
2613
2091
|
*/
|
|
2614
2092
|
ProtectedResource: CreateProtectedResource | undefined;
|
|
@@ -2638,16 +2116,12 @@ export interface CreateMalwareProtectionPlanResponse {
|
|
|
2638
2116
|
*/
|
|
2639
2117
|
export interface CreateMembersRequest {
|
|
2640
2118
|
/**
|
|
2641
|
-
* <p>The unique ID of the detector of the GuardDuty account for which you want to associate member
|
|
2642
|
-
* accounts.</p>
|
|
2643
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
2644
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2119
|
+
* <p>The unique ID of the detector of the GuardDuty account for which you want to associate member accounts.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2645
2120
|
* @public
|
|
2646
2121
|
*/
|
|
2647
2122
|
DetectorId: string | undefined;
|
|
2648
2123
|
/**
|
|
2649
|
-
* <p>A list of account ID and email address pairs of the accounts that you want to associate
|
|
2650
|
-
* with the GuardDuty administrator account.</p>
|
|
2124
|
+
* <p>A list of account ID and email address pairs of the accounts that you want to associate with the GuardDuty administrator account.</p>
|
|
2651
2125
|
* @public
|
|
2652
2126
|
*/
|
|
2653
2127
|
AccountDetails: AccountDetail[] | undefined;
|
|
@@ -2673,23 +2147,18 @@ export interface UnprocessedAccount {
|
|
|
2673
2147
|
*/
|
|
2674
2148
|
export interface CreateMembersResponse {
|
|
2675
2149
|
/**
|
|
2676
|
-
* <p>A list of objects that include the <code>accountIds</code> of the unprocessed accounts and
|
|
2677
|
-
* a result string that explains why each was unprocessed.</p>
|
|
2150
|
+
* <p>A list of objects that include the <code>accountIds</code> of the unprocessed accounts and a result string that explains why each was unprocessed.</p>
|
|
2678
2151
|
* @public
|
|
2679
2152
|
*/
|
|
2680
2153
|
UnprocessedAccounts: UnprocessedAccount[] | undefined;
|
|
2681
2154
|
}
|
|
2682
2155
|
/**
|
|
2683
|
-
* <p>Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3
|
|
2684
|
-
* bucket, and the ARN of the KMS key to use to encrypt published findings.</p>
|
|
2156
|
+
* <p>Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.</p>
|
|
2685
2157
|
* @public
|
|
2686
2158
|
*/
|
|
2687
2159
|
export interface DestinationProperties {
|
|
2688
2160
|
/**
|
|
2689
|
-
* <p>The ARN of the resource to publish to.</p>
|
|
2690
|
-
* <p>To specify an S3 bucket folder use the following format:
|
|
2691
|
-
* <code>arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/</code>
|
|
2692
|
-
* </p>
|
|
2161
|
+
* <p>The ARN of the resource to publish to.</p> <p>To specify an S3 bucket folder use the following format: <code>arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/</code> </p>
|
|
2693
2162
|
* @public
|
|
2694
2163
|
*/
|
|
2695
2164
|
DestinationArn?: string | undefined;
|
|
@@ -2704,21 +2173,17 @@ export interface DestinationProperties {
|
|
|
2704
2173
|
*/
|
|
2705
2174
|
export interface CreatePublishingDestinationRequest {
|
|
2706
2175
|
/**
|
|
2707
|
-
* <p>The ID of the GuardDuty detector associated with the publishing destination.</p>
|
|
2708
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
2709
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2176
|
+
* <p>The ID of the GuardDuty detector associated with the publishing destination.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2710
2177
|
* @public
|
|
2711
2178
|
*/
|
|
2712
2179
|
DetectorId: string | undefined;
|
|
2713
2180
|
/**
|
|
2714
|
-
* <p>The type of resource for the publishing destination. Currently only Amazon S3 buckets are
|
|
2715
|
-
* supported.</p>
|
|
2181
|
+
* <p>The type of resource for the publishing destination. Currently only Amazon S3 buckets are supported.</p>
|
|
2716
2182
|
* @public
|
|
2717
2183
|
*/
|
|
2718
2184
|
DestinationType: DestinationType | undefined;
|
|
2719
2185
|
/**
|
|
2720
|
-
* <p>The properties of the publishing destination, including the ARNs for the destination and
|
|
2721
|
-
* the KMS key used for encryption.</p>
|
|
2186
|
+
* <p>The properties of the publishing destination, including the ARNs for the destination and the KMS key used for encryption.</p>
|
|
2722
2187
|
* @public
|
|
2723
2188
|
*/
|
|
2724
2189
|
DestinationProperties: DestinationProperties | undefined;
|
|
@@ -2748,9 +2213,7 @@ export interface CreatePublishingDestinationResponse {
|
|
|
2748
2213
|
*/
|
|
2749
2214
|
export interface CreateSampleFindingsRequest {
|
|
2750
2215
|
/**
|
|
2751
|
-
* <p>The ID of the detector for which you need to create sample findings.</p>
|
|
2752
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
2753
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2216
|
+
* <p>The ID of the detector for which you need to create sample findings.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2754
2217
|
* @public
|
|
2755
2218
|
*/
|
|
2756
2219
|
DetectorId: string | undefined;
|
|
@@ -2770,16 +2233,12 @@ export interface CreateSampleFindingsResponse {
|
|
|
2770
2233
|
*/
|
|
2771
2234
|
export interface CreateThreatEntitySetRequest {
|
|
2772
2235
|
/**
|
|
2773
|
-
* <p>The unique ID of the detector of the GuardDuty account for which you want to create a threat entity set.</p>
|
|
2774
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
2775
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2236
|
+
* <p>The unique ID of the detector of the GuardDuty account for which you want to create a threat entity set.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2776
2237
|
* @public
|
|
2777
2238
|
*/
|
|
2778
2239
|
DetectorId: string | undefined;
|
|
2779
2240
|
/**
|
|
2780
|
-
* <p>A user-friendly name to identify the threat entity set.</p>
|
|
2781
|
-
* <p>The name of your list can include
|
|
2782
|
-
* lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).</p>
|
|
2241
|
+
* <p>A user-friendly name to identify the threat entity set.</p> <p>The name of your list can include lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).</p>
|
|
2783
2242
|
* @public
|
|
2784
2243
|
*/
|
|
2785
2244
|
Name: string | undefined;
|
|
@@ -2789,10 +2248,7 @@ export interface CreateThreatEntitySetRequest {
|
|
|
2789
2248
|
*/
|
|
2790
2249
|
Format: ThreatEntitySetFormat | undefined;
|
|
2791
2250
|
/**
|
|
2792
|
-
* <p>The URI of the file that contains the threat entity set. The format of the <code>Location</code> URL must be a valid
|
|
2793
|
-
* Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about
|
|
2794
|
-
* format of the location URLs, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-lists-create-activate.html">Format of location URL under Step 2: Adding trusted or threat intelligence data</a>
|
|
2795
|
-
* in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
2251
|
+
* <p>The URI of the file that contains the threat entity set. The format of the <code>Location</code> URL must be a valid Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about format of the location URLs, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-lists-create-activate.html">Format of location URL under Step 2: Adding trusted or threat intelligence data</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
2796
2252
|
* @public
|
|
2797
2253
|
*/
|
|
2798
2254
|
Location: string | undefined;
|
|
@@ -2802,8 +2258,7 @@ export interface CreateThreatEntitySetRequest {
|
|
|
2802
2258
|
*/
|
|
2803
2259
|
ExpectedBucketOwner?: string | undefined;
|
|
2804
2260
|
/**
|
|
2805
|
-
* <p>A boolean value that indicates whether GuardDuty should start using the uploaded threat entity set to
|
|
2806
|
-
* generate findings.</p>
|
|
2261
|
+
* <p>A boolean value that indicates whether GuardDuty should start using the uploaded threat entity set to generate findings.</p>
|
|
2807
2262
|
* @public
|
|
2808
2263
|
*/
|
|
2809
2264
|
Activate: boolean | undefined;
|
|
@@ -2833,16 +2288,12 @@ export interface CreateThreatEntitySetResponse {
|
|
|
2833
2288
|
*/
|
|
2834
2289
|
export interface CreateThreatIntelSetRequest {
|
|
2835
2290
|
/**
|
|
2836
|
-
* <p>The unique ID of the detector of the GuardDuty account for which you want to create a
|
|
2837
|
-
* <code>threatIntelSet</code>.</p>
|
|
2838
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
2839
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2291
|
+
* <p>The unique ID of the detector of the GuardDuty account for which you want to create a <code>threatIntelSet</code>.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2840
2292
|
* @public
|
|
2841
2293
|
*/
|
|
2842
2294
|
DetectorId: string | undefined;
|
|
2843
2295
|
/**
|
|
2844
|
-
* <p>A user-friendly ThreatIntelSet name displayed in all findings that are generated by
|
|
2845
|
-
* activity that involves IP addresses included in this ThreatIntelSet.</p>
|
|
2296
|
+
* <p>A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.</p>
|
|
2846
2297
|
* @public
|
|
2847
2298
|
*/
|
|
2848
2299
|
Name: string | undefined;
|
|
@@ -2857,8 +2308,7 @@ export interface CreateThreatIntelSetRequest {
|
|
|
2857
2308
|
*/
|
|
2858
2309
|
Location: string | undefined;
|
|
2859
2310
|
/**
|
|
2860
|
-
* <p>A Boolean value that indicates whether GuardDuty is to start using the uploaded
|
|
2861
|
-
* ThreatIntelSet.</p>
|
|
2311
|
+
* <p>A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.</p>
|
|
2862
2312
|
* @public
|
|
2863
2313
|
*/
|
|
2864
2314
|
Activate: boolean | undefined;
|
|
@@ -2893,17 +2343,12 @@ export interface CreateThreatIntelSetResponse {
|
|
|
2893
2343
|
*/
|
|
2894
2344
|
export interface CreateTrustedEntitySetRequest {
|
|
2895
2345
|
/**
|
|
2896
|
-
* <p>The unique ID of the detector of the GuardDuty account for which you want to create a trusted
|
|
2897
|
-
* entity set.</p>
|
|
2898
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
2899
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2346
|
+
* <p>The unique ID of the detector of the GuardDuty account for which you want to create a trusted entity set.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2900
2347
|
* @public
|
|
2901
2348
|
*/
|
|
2902
2349
|
DetectorId: string | undefined;
|
|
2903
2350
|
/**
|
|
2904
|
-
* <p>A user-friendly name to identify the trusted entity set.</p>
|
|
2905
|
-
* <p>The name of your list can include
|
|
2906
|
-
* lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).</p>
|
|
2351
|
+
* <p>A user-friendly name to identify the trusted entity set.</p> <p>The name of your list can include lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).</p>
|
|
2907
2352
|
* @public
|
|
2908
2353
|
*/
|
|
2909
2354
|
Name: string | undefined;
|
|
@@ -2913,16 +2358,12 @@ export interface CreateTrustedEntitySetRequest {
|
|
|
2913
2358
|
*/
|
|
2914
2359
|
Format: TrustedEntitySetFormat | undefined;
|
|
2915
2360
|
/**
|
|
2916
|
-
* <p>The URI of the file that contains the threat entity set. The format of the <code>Location</code> URL must be a valid
|
|
2917
|
-
* Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about
|
|
2918
|
-
* format of the location URLs, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-lists-create-activate.html">Format of location URL under Step 2: Adding trusted or threat intelligence data</a>
|
|
2919
|
-
* in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
2361
|
+
* <p>The URI of the file that contains the threat entity set. The format of the <code>Location</code> URL must be a valid Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about format of the location URLs, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-lists-create-activate.html">Format of location URL under Step 2: Adding trusted or threat intelligence data</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
2920
2362
|
* @public
|
|
2921
2363
|
*/
|
|
2922
2364
|
Location: string | undefined;
|
|
2923
2365
|
/**
|
|
2924
|
-
* <p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b>
|
|
2925
|
-
* parameter.</p>
|
|
2366
|
+
* <p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b> parameter.</p>
|
|
2926
2367
|
* @public
|
|
2927
2368
|
*/
|
|
2928
2369
|
ExpectedBucketOwner?: string | undefined;
|
|
@@ -3002,8 +2443,7 @@ export interface KubernetesConfigurationResult {
|
|
|
3002
2443
|
*/
|
|
3003
2444
|
export interface S3LogsConfigurationResult {
|
|
3004
2445
|
/**
|
|
3005
|
-
* <p>A value that describes whether S3 data event logs are automatically enabled for new
|
|
3006
|
-
* members of the organization.</p>
|
|
2446
|
+
* <p>A value that describes whether S3 data event logs are automatically enabled for new members of the organization.</p>
|
|
3007
2447
|
* @public
|
|
3008
2448
|
*/
|
|
3009
2449
|
Status: DataSourceStatus | undefined;
|
|
@@ -3024,14 +2464,12 @@ export interface DataSourceConfigurationsResult {
|
|
|
3024
2464
|
*/
|
|
3025
2465
|
DNSLogs: DNSLogsConfigurationResult | undefined;
|
|
3026
2466
|
/**
|
|
3027
|
-
* <p>An object that contains information on the status of VPC flow logs as a data
|
|
3028
|
-
* source.</p>
|
|
2467
|
+
* <p>An object that contains information on the status of VPC flow logs as a data source.</p>
|
|
3029
2468
|
* @public
|
|
3030
2469
|
*/
|
|
3031
2470
|
FlowLogs: FlowLogsConfigurationResult | undefined;
|
|
3032
2471
|
/**
|
|
3033
|
-
* <p>An object that contains information on the status of S3 Data event logs as a data
|
|
3034
|
-
* source.</p>
|
|
2472
|
+
* <p>An object that contains information on the status of S3 Data event logs as a data source.</p>
|
|
3035
2473
|
* @public
|
|
3036
2474
|
*/
|
|
3037
2475
|
S3Logs: S3LogsConfigurationResult | undefined;
|
|
@@ -3052,9 +2490,7 @@ export interface DataSourceConfigurationsResult {
|
|
|
3052
2490
|
*/
|
|
3053
2491
|
export interface DateStatistics {
|
|
3054
2492
|
/**
|
|
3055
|
-
* <p>The timestamp when the total findings count is observed.</p>
|
|
3056
|
-
* <p>For example, <code>Date</code> would look like <code>"2024-09-05T17:00:00-07:00"</code>
|
|
3057
|
-
* whereas <code>LastGeneratedAt</code> would look like 2024-09-05T17:12:29-07:00".</p>
|
|
2493
|
+
* <p>The timestamp when the total findings count is observed.</p> <p>For example, <code>Date</code> would look like <code>"2024-09-05T17:00:00-07:00"</code> whereas <code>LastGeneratedAt</code> would look like 2024-09-05T17:12:29-07:00".</p>
|
|
3058
2494
|
* @public
|
|
3059
2495
|
*/
|
|
3060
2496
|
Date?: Date | undefined;
|
|
@@ -3079,8 +2515,7 @@ export interface DateStatistics {
|
|
|
3079
2515
|
*/
|
|
3080
2516
|
export interface DeclineInvitationsRequest {
|
|
3081
2517
|
/**
|
|
3082
|
-
* <p>A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member
|
|
3083
|
-
* account that you want to decline invitations from.</p>
|
|
2518
|
+
* <p>A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member account that you want to decline invitations from.</p>
|
|
3084
2519
|
* @public
|
|
3085
2520
|
*/
|
|
3086
2521
|
AccountIds: string[] | undefined;
|
|
@@ -3090,16 +2525,13 @@ export interface DeclineInvitationsRequest {
|
|
|
3090
2525
|
*/
|
|
3091
2526
|
export interface DeclineInvitationsResponse {
|
|
3092
2527
|
/**
|
|
3093
|
-
* <p>A list of objects that contain the unprocessed account and a result string that explains
|
|
3094
|
-
* why it was unprocessed.</p>
|
|
2528
|
+
* <p>A list of objects that contain the unprocessed account and a result string that explains why it was unprocessed.</p>
|
|
3095
2529
|
* @public
|
|
3096
2530
|
*/
|
|
3097
2531
|
UnprocessedAccounts: UnprocessedAccount[] | undefined;
|
|
3098
2532
|
}
|
|
3099
2533
|
/**
|
|
3100
|
-
* <p>Contains information on the server side encryption method used in the S3 bucket. See
|
|
3101
|
-
* <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html">S3
|
|
3102
|
-
* Server-Side Encryption</a> for more information.</p>
|
|
2534
|
+
* <p>Contains information on the server side encryption method used in the S3 bucket. See <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/serv-side-encryption.html">S3 Server-Side Encryption</a> for more information.</p>
|
|
3103
2535
|
* @public
|
|
3104
2536
|
*/
|
|
3105
2537
|
export interface DefaultServerSideEncryption {
|
|
@@ -3109,8 +2541,7 @@ export interface DefaultServerSideEncryption {
|
|
|
3109
2541
|
*/
|
|
3110
2542
|
EncryptionType?: string | undefined;
|
|
3111
2543
|
/**
|
|
3112
|
-
* <p>The Amazon Resource Name (ARN) of the KMS encryption key. Only available if the bucket
|
|
3113
|
-
* <code>EncryptionType</code> is <code>aws:kms</code>.</p>
|
|
2544
|
+
* <p>The Amazon Resource Name (ARN) of the KMS encryption key. Only available if the bucket <code>EncryptionType</code> is <code>aws:kms</code>.</p>
|
|
3114
2545
|
* @public
|
|
3115
2546
|
*/
|
|
3116
2547
|
KmsMasterKeyArn?: string | undefined;
|
|
@@ -3120,9 +2551,7 @@ export interface DefaultServerSideEncryption {
|
|
|
3120
2551
|
*/
|
|
3121
2552
|
export interface DeleteDetectorRequest {
|
|
3122
2553
|
/**
|
|
3123
|
-
* <p>The unique ID of the detector that you want to delete.</p>
|
|
3124
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3125
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2554
|
+
* <p>The unique ID of the detector that you want to delete.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3126
2555
|
* @public
|
|
3127
2556
|
*/
|
|
3128
2557
|
DetectorId: string | undefined;
|
|
@@ -3137,9 +2566,7 @@ export interface DeleteDetectorResponse {
|
|
|
3137
2566
|
*/
|
|
3138
2567
|
export interface DeleteFilterRequest {
|
|
3139
2568
|
/**
|
|
3140
|
-
* <p>The unique ID of the detector that is associated with the filter.</p>
|
|
3141
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3142
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2569
|
+
* <p>The unique ID of the detector that is associated with the filter.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3143
2570
|
* @public
|
|
3144
2571
|
*/
|
|
3145
2572
|
DetectorId: string | undefined;
|
|
@@ -3159,8 +2586,7 @@ export interface DeleteFilterResponse {
|
|
|
3159
2586
|
*/
|
|
3160
2587
|
export interface DeleteInvitationsRequest {
|
|
3161
2588
|
/**
|
|
3162
|
-
* <p>A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member
|
|
3163
|
-
* account that you want to delete invitations from.</p>
|
|
2589
|
+
* <p>A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member account that you want to delete invitations from.</p>
|
|
3164
2590
|
* @public
|
|
3165
2591
|
*/
|
|
3166
2592
|
AccountIds: string[] | undefined;
|
|
@@ -3170,8 +2596,7 @@ export interface DeleteInvitationsRequest {
|
|
|
3170
2596
|
*/
|
|
3171
2597
|
export interface DeleteInvitationsResponse {
|
|
3172
2598
|
/**
|
|
3173
|
-
* <p>A list of objects that contain the unprocessed account and a result string that explains
|
|
3174
|
-
* why it was unprocessed.</p>
|
|
2599
|
+
* <p>A list of objects that contain the unprocessed account and a result string that explains why it was unprocessed.</p>
|
|
3175
2600
|
* @public
|
|
3176
2601
|
*/
|
|
3177
2602
|
UnprocessedAccounts: UnprocessedAccount[] | undefined;
|
|
@@ -3181,9 +2606,7 @@ export interface DeleteInvitationsResponse {
|
|
|
3181
2606
|
*/
|
|
3182
2607
|
export interface DeleteIPSetRequest {
|
|
3183
2608
|
/**
|
|
3184
|
-
* <p>The unique ID of the detector associated with the IPSet.</p>
|
|
3185
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3186
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2609
|
+
* <p>The unique ID of the detector associated with the IPSet.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3187
2610
|
* @public
|
|
3188
2611
|
*/
|
|
3189
2612
|
DetectorId: string | undefined;
|
|
@@ -3213,10 +2636,7 @@ export interface DeleteMalwareProtectionPlanRequest {
|
|
|
3213
2636
|
*/
|
|
3214
2637
|
export interface DeleteMembersRequest {
|
|
3215
2638
|
/**
|
|
3216
|
-
* <p>The unique ID of the detector of the GuardDuty account whose members you want to
|
|
3217
|
-
* delete.</p>
|
|
3218
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3219
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2639
|
+
* <p>The unique ID of the detector of the GuardDuty account whose members you want to delete.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3220
2640
|
* @public
|
|
3221
2641
|
*/
|
|
3222
2642
|
DetectorId: string | undefined;
|
|
@@ -3241,9 +2661,7 @@ export interface DeleteMembersResponse {
|
|
|
3241
2661
|
*/
|
|
3242
2662
|
export interface DeletePublishingDestinationRequest {
|
|
3243
2663
|
/**
|
|
3244
|
-
* <p>The unique ID of the detector associated with the publishing destination to delete.</p>
|
|
3245
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3246
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2664
|
+
* <p>The unique ID of the detector associated with the publishing destination to delete.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3247
2665
|
* @public
|
|
3248
2666
|
*/
|
|
3249
2667
|
DetectorId: string | undefined;
|
|
@@ -3263,9 +2681,7 @@ export interface DeletePublishingDestinationResponse {
|
|
|
3263
2681
|
*/
|
|
3264
2682
|
export interface DeleteThreatEntitySetRequest {
|
|
3265
2683
|
/**
|
|
3266
|
-
* <p>The unique ID of the detector associated with the threat entity set resource.</p>
|
|
3267
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3268
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2684
|
+
* <p>The unique ID of the detector associated with the threat entity set resource.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3269
2685
|
* @public
|
|
3270
2686
|
*/
|
|
3271
2687
|
DetectorId: string | undefined;
|
|
@@ -3285,9 +2701,7 @@ export interface DeleteThreatEntitySetResponse {
|
|
|
3285
2701
|
*/
|
|
3286
2702
|
export interface DeleteThreatIntelSetRequest {
|
|
3287
2703
|
/**
|
|
3288
|
-
* <p>The unique ID of the detector that is associated with the threatIntelSet.</p>
|
|
3289
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3290
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2704
|
+
* <p>The unique ID of the detector that is associated with the threatIntelSet.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3291
2705
|
* @public
|
|
3292
2706
|
*/
|
|
3293
2707
|
DetectorId: string | undefined;
|
|
@@ -3307,9 +2721,7 @@ export interface DeleteThreatIntelSetResponse {
|
|
|
3307
2721
|
*/
|
|
3308
2722
|
export interface DeleteTrustedEntitySetRequest {
|
|
3309
2723
|
/**
|
|
3310
|
-
* <p>The unique ID of the detector associated with the trusted entity set resource.</p>
|
|
3311
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3312
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2724
|
+
* <p>The unique ID of the detector associated with the trusted entity set resource.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3313
2725
|
* @public
|
|
3314
2726
|
*/
|
|
3315
2727
|
DetectorId: string | undefined;
|
|
@@ -3330,36 +2742,28 @@ export interface DeleteTrustedEntitySetResponse {
|
|
|
3330
2742
|
*/
|
|
3331
2743
|
export interface FilterCondition {
|
|
3332
2744
|
/**
|
|
3333
|
-
* <p>Represents an <i>equal</i>
|
|
3334
|
-
* <b></b> condition to be applied to
|
|
3335
|
-
* a single field when querying for scan entries.</p>
|
|
2745
|
+
* <p>Represents an <i>equal</i> <b/> condition to be applied to a single field when querying for scan entries.</p>
|
|
3336
2746
|
* @public
|
|
3337
2747
|
*/
|
|
3338
2748
|
EqualsValue?: string | undefined;
|
|
3339
2749
|
/**
|
|
3340
|
-
* <p>Represents a <i>greater than</i> condition to be applied to a single field
|
|
3341
|
-
* when querying for scan entries.</p>
|
|
2750
|
+
* <p>Represents a <i>greater than</i> condition to be applied to a single field when querying for scan entries.</p>
|
|
3342
2751
|
* @public
|
|
3343
2752
|
*/
|
|
3344
2753
|
GreaterThan?: number | undefined;
|
|
3345
2754
|
/**
|
|
3346
|
-
* <p>Represents a <i>less than</i> condition to be applied to a single field when
|
|
3347
|
-
* querying for scan entries.</p>
|
|
2755
|
+
* <p>Represents a <i>less than</i> condition to be applied to a single field when querying for scan entries.</p>
|
|
3348
2756
|
* @public
|
|
3349
2757
|
*/
|
|
3350
2758
|
LessThan?: number | undefined;
|
|
3351
2759
|
}
|
|
3352
2760
|
/**
|
|
3353
|
-
* <p>Represents a condition that when matched will be added to the response of the operation.
|
|
3354
|
-
* Irrespective of using any filter criteria, an administrator account can view the scan entries
|
|
3355
|
-
* for all of its member accounts. However, each member account can view the scan entries only
|
|
3356
|
-
* for their own account.</p>
|
|
2761
|
+
* <p>Represents a condition that when matched will be added to the response of the operation. Irrespective of using any filter criteria, an administrator account can view the scan entries for all of its member accounts. However, each member account can view the scan entries only for their own account.</p>
|
|
3357
2762
|
* @public
|
|
3358
2763
|
*/
|
|
3359
2764
|
export interface FilterCriterion {
|
|
3360
2765
|
/**
|
|
3361
|
-
* <p>An enum value representing possible scan properties to match with given scan
|
|
3362
|
-
* entries.</p>
|
|
2766
|
+
* <p>An enum value representing possible scan properties to match with given scan entries.</p>
|
|
3363
2767
|
* @public
|
|
3364
2768
|
*/
|
|
3365
2769
|
CriterionKey?: CriterionKey | undefined;
|
|
@@ -3375,8 +2779,7 @@ export interface FilterCriterion {
|
|
|
3375
2779
|
*/
|
|
3376
2780
|
export interface FilterCriteria {
|
|
3377
2781
|
/**
|
|
3378
|
-
* <p>Represents a condition that when matched will be added to the response of the
|
|
3379
|
-
* operation.</p>
|
|
2782
|
+
* <p>Represents a condition that when matched will be added to the response of the operation.</p>
|
|
3380
2783
|
* @public
|
|
3381
2784
|
*/
|
|
3382
2785
|
FilterCriterion?: FilterCriterion[] | undefined;
|
|
@@ -3387,8 +2790,7 @@ export interface FilterCriteria {
|
|
|
3387
2790
|
*/
|
|
3388
2791
|
export interface SortCriteria {
|
|
3389
2792
|
/**
|
|
3390
|
-
* <p>Represents the finding attribute, such as <code>accountId</code>, that sorts the
|
|
3391
|
-
* findings.</p>
|
|
2793
|
+
* <p>Represents the finding attribute, such as <code>accountId</code>, that sorts the findings.</p>
|
|
3392
2794
|
* @public
|
|
3393
2795
|
*/
|
|
3394
2796
|
AttributeName?: string | undefined;
|
|
@@ -3403,23 +2805,17 @@ export interface SortCriteria {
|
|
|
3403
2805
|
*/
|
|
3404
2806
|
export interface DescribeMalwareScansRequest {
|
|
3405
2807
|
/**
|
|
3406
|
-
* <p>The unique ID of the detector that the request is associated with.</p>
|
|
3407
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3408
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2808
|
+
* <p>The unique ID of the detector that the request is associated with.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3409
2809
|
* @public
|
|
3410
2810
|
*/
|
|
3411
2811
|
DetectorId: string | undefined;
|
|
3412
2812
|
/**
|
|
3413
|
-
* <p>You can use this parameter when paginating results. Set the value of this parameter to
|
|
3414
|
-
* null on your first call to the list action. For subsequent calls to the action, fill nextToken
|
|
3415
|
-
* in the request with the value of NextToken from the previous response to continue listing
|
|
3416
|
-
* data.</p>
|
|
2813
|
+
* <p>You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action, fill nextToken in the request with the value of NextToken from the previous response to continue listing data.</p>
|
|
3417
2814
|
* @public
|
|
3418
2815
|
*/
|
|
3419
2816
|
NextToken?: string | undefined;
|
|
3420
2817
|
/**
|
|
3421
|
-
* <p>You can use this parameter to indicate the maximum number of items that you want in the
|
|
3422
|
-
* response. The default value is 50. The maximum value is 50.</p>
|
|
2818
|
+
* <p>You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 50. The maximum value is 50.</p>
|
|
3423
2819
|
* @public
|
|
3424
2820
|
*/
|
|
3425
2821
|
MaxResults?: number | undefined;
|
|
@@ -3429,10 +2825,7 @@ export interface DescribeMalwareScansRequest {
|
|
|
3429
2825
|
*/
|
|
3430
2826
|
FilterCriteria?: FilterCriteria | undefined;
|
|
3431
2827
|
/**
|
|
3432
|
-
* <p>Represents the criteria used for sorting scan entries. The <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SortCriteria.html#guardduty-Type-SortCriteria-attributeName">
|
|
3433
|
-
* <code>attributeName</code>
|
|
3434
|
-
* </a> is required and it must be
|
|
3435
|
-
* <code>scanStartTime</code>.</p>
|
|
2828
|
+
* <p>Represents the criteria used for sorting scan entries. The <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_SortCriteria.html#guardduty-Type-SortCriteria-attributeName"> <code>attributeName</code> </a> is required and it must be <code>scanStartTime</code>.</p>
|
|
3436
2829
|
* @public
|
|
3437
2830
|
*/
|
|
3438
2831
|
SortCriteria?: SortCriteria | undefined;
|
|
@@ -3527,18 +2920,12 @@ export interface TriggerDetails {
|
|
|
3527
2920
|
*/
|
|
3528
2921
|
export interface Scan {
|
|
3529
2922
|
/**
|
|
3530
|
-
* <p>The unique ID of the detector that is associated with the request.</p>
|
|
3531
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3532
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2923
|
+
* <p>The unique ID of the detector that is associated with the request.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3533
2924
|
* @public
|
|
3534
2925
|
*/
|
|
3535
2926
|
DetectorId?: string | undefined;
|
|
3536
2927
|
/**
|
|
3537
|
-
* <p>The unique detector ID of the administrator account that the request is associated with.
|
|
3538
|
-
* If the account is an administrator, the <code>AdminDetectorId</code> will be the same as the one used for
|
|
3539
|
-
* <code>DetectorId</code>.</p>
|
|
3540
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3541
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
2928
|
+
* <p>The unique detector ID of the administrator account that the request is associated with. If the account is an administrator, the <code>AdminDetectorId</code> will be the same as the one used for <code>DetectorId</code>.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3542
2929
|
* @public
|
|
3543
2930
|
*/
|
|
3544
2931
|
AdminDetectorId?: string | undefined;
|
|
@@ -3618,8 +3005,7 @@ export interface DescribeMalwareScansResponse {
|
|
|
3618
3005
|
*/
|
|
3619
3006
|
Scans: Scan[] | undefined;
|
|
3620
3007
|
/**
|
|
3621
|
-
* <p>The pagination parameter to be used on the next list operation to retrieve more
|
|
3622
|
-
* items.</p>
|
|
3008
|
+
* <p>The pagination parameter to be used on the next list operation to retrieve more items.</p>
|
|
3623
3009
|
* @public
|
|
3624
3010
|
*/
|
|
3625
3011
|
NextToken?: string | undefined;
|
|
@@ -3629,36 +3015,28 @@ export interface DescribeMalwareScansResponse {
|
|
|
3629
3015
|
*/
|
|
3630
3016
|
export interface DescribeOrganizationConfigurationRequest {
|
|
3631
3017
|
/**
|
|
3632
|
-
* <p>The detector ID of the delegated administrator for which you need to retrieve the information.</p>
|
|
3633
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3634
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3018
|
+
* <p>The detector ID of the delegated administrator for which you need to retrieve the information.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3635
3019
|
* @public
|
|
3636
3020
|
*/
|
|
3637
3021
|
DetectorId: string | undefined;
|
|
3638
3022
|
/**
|
|
3639
|
-
* <p>You can use this parameter to indicate the maximum number of items that you want in the
|
|
3640
|
-
* response.</p>
|
|
3023
|
+
* <p>You can use this parameter to indicate the maximum number of items that you want in the response.</p>
|
|
3641
3024
|
* @public
|
|
3642
3025
|
*/
|
|
3643
3026
|
MaxResults?: number | undefined;
|
|
3644
3027
|
/**
|
|
3645
|
-
* <p>You can use this parameter when paginating results. Set the value of this parameter to
|
|
3646
|
-
* null on your first call to the list action. For subsequent calls to the action, fill
|
|
3647
|
-
* <code>nextToken</code> in the request with the value of <code>NextToken</code> from the
|
|
3648
|
-
* previous response to continue listing data.</p>
|
|
3028
|
+
* <p>You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action, fill <code>nextToken</code> in the request with the value of <code>NextToken</code> from the previous response to continue listing data.</p>
|
|
3649
3029
|
* @public
|
|
3650
3030
|
*/
|
|
3651
3031
|
NextToken?: string | undefined;
|
|
3652
3032
|
}
|
|
3653
3033
|
/**
|
|
3654
|
-
* <p>The current configuration of Kubernetes audit logs as a data source for the
|
|
3655
|
-
* organization.</p>
|
|
3034
|
+
* <p>The current configuration of Kubernetes audit logs as a data source for the organization.</p>
|
|
3656
3035
|
* @public
|
|
3657
3036
|
*/
|
|
3658
3037
|
export interface OrganizationKubernetesAuditLogsConfigurationResult {
|
|
3659
3038
|
/**
|
|
3660
|
-
* <p>Whether Kubernetes audit logs data source should be auto-enabled for new members joining
|
|
3661
|
-
* the organization.</p>
|
|
3039
|
+
* <p>Whether Kubernetes audit logs data source should be auto-enabled for new members joining the organization.</p>
|
|
3662
3040
|
* @public
|
|
3663
3041
|
*/
|
|
3664
3042
|
AutoEnable: boolean | undefined;
|
|
@@ -3669,28 +3047,24 @@ export interface OrganizationKubernetesAuditLogsConfigurationResult {
|
|
|
3669
3047
|
*/
|
|
3670
3048
|
export interface OrganizationKubernetesConfigurationResult {
|
|
3671
3049
|
/**
|
|
3672
|
-
* <p>The current configuration of Kubernetes audit logs as a data source for the
|
|
3673
|
-
* organization.</p>
|
|
3050
|
+
* <p>The current configuration of Kubernetes audit logs as a data source for the organization.</p>
|
|
3674
3051
|
* @public
|
|
3675
3052
|
*/
|
|
3676
3053
|
AuditLogs: OrganizationKubernetesAuditLogsConfigurationResult | undefined;
|
|
3677
3054
|
}
|
|
3678
3055
|
/**
|
|
3679
|
-
* <p>An object that contains information on the status of whether EBS volumes scanning will be
|
|
3680
|
-
* enabled as a data source for an organization.</p>
|
|
3056
|
+
* <p>An object that contains information on the status of whether EBS volumes scanning will be enabled as a data source for an organization.</p>
|
|
3681
3057
|
* @public
|
|
3682
3058
|
*/
|
|
3683
3059
|
export interface OrganizationEbsVolumesResult {
|
|
3684
3060
|
/**
|
|
3685
|
-
* <p>An object that contains the status of whether scanning EBS volumes should be auto-enabled
|
|
3686
|
-
* for new members joining the organization.</p>
|
|
3061
|
+
* <p>An object that contains the status of whether scanning EBS volumes should be auto-enabled for new members joining the organization.</p>
|
|
3687
3062
|
* @public
|
|
3688
3063
|
*/
|
|
3689
3064
|
AutoEnable?: boolean | undefined;
|
|
3690
3065
|
}
|
|
3691
3066
|
/**
|
|
3692
|
-
* <p>An object that contains information on the status of scanning EC2 instances with findings
|
|
3693
|
-
* for an organization.</p>
|
|
3067
|
+
* <p>An object that contains information on the status of scanning EC2 instances with findings for an organization.</p>
|
|
3694
3068
|
* @public
|
|
3695
3069
|
*/
|
|
3696
3070
|
export interface OrganizationScanEc2InstanceWithFindingsResult {
|
|
@@ -3701,34 +3075,29 @@ export interface OrganizationScanEc2InstanceWithFindingsResult {
|
|
|
3701
3075
|
EbsVolumes?: OrganizationEbsVolumesResult | undefined;
|
|
3702
3076
|
}
|
|
3703
3077
|
/**
|
|
3704
|
-
* <p>An object that contains information on the status of all Malware Protection data source
|
|
3705
|
-
* for an organization.</p>
|
|
3078
|
+
* <p>An object that contains information on the status of all Malware Protection data source for an organization.</p>
|
|
3706
3079
|
* @public
|
|
3707
3080
|
*/
|
|
3708
3081
|
export interface OrganizationMalwareProtectionConfigurationResult {
|
|
3709
3082
|
/**
|
|
3710
|
-
* <p>Describes the configuration for scanning EC2 instances with findings for an
|
|
3711
|
-
* organization.</p>
|
|
3083
|
+
* <p>Describes the configuration for scanning EC2 instances with findings for an organization.</p>
|
|
3712
3084
|
* @public
|
|
3713
3085
|
*/
|
|
3714
3086
|
ScanEc2InstanceWithFindings?: OrganizationScanEc2InstanceWithFindingsResult | undefined;
|
|
3715
3087
|
}
|
|
3716
3088
|
/**
|
|
3717
|
-
* <p>The current configuration of S3 data event logs as a data source for the
|
|
3718
|
-
* organization.</p>
|
|
3089
|
+
* <p>The current configuration of S3 data event logs as a data source for the organization.</p>
|
|
3719
3090
|
* @public
|
|
3720
3091
|
*/
|
|
3721
3092
|
export interface OrganizationS3LogsConfigurationResult {
|
|
3722
3093
|
/**
|
|
3723
|
-
* <p>A value that describes whether S3 data event logs are automatically enabled for new
|
|
3724
|
-
* members of the organization.</p>
|
|
3094
|
+
* <p>A value that describes whether S3 data event logs are automatically enabled for new members of the organization.</p>
|
|
3725
3095
|
* @public
|
|
3726
3096
|
*/
|
|
3727
3097
|
AutoEnable: boolean | undefined;
|
|
3728
3098
|
}
|
|
3729
3099
|
/**
|
|
3730
|
-
* <p>An object that contains information on which data sources are automatically enabled for
|
|
3731
|
-
* new members within the organization.</p>
|
|
3100
|
+
* <p>An object that contains information on which data sources are automatically enabled for new members within the organization.</p>
|
|
3732
3101
|
* @public
|
|
3733
3102
|
*/
|
|
3734
3103
|
export interface OrganizationDataSourceConfigurationsResult {
|
|
@@ -3754,38 +3123,12 @@ export interface OrganizationDataSourceConfigurationsResult {
|
|
|
3754
3123
|
*/
|
|
3755
3124
|
export interface OrganizationAdditionalConfigurationResult {
|
|
3756
3125
|
/**
|
|
3757
|
-
* <p>The name of the additional configuration that is configured for the member accounts within
|
|
3758
|
-
* the organization. These values are applicable to only Runtime Monitoring protection plan.</p>
|
|
3126
|
+
* <p>The name of the additional configuration that is configured for the member accounts within the organization. These values are applicable to only Runtime Monitoring protection plan.</p>
|
|
3759
3127
|
* @public
|
|
3760
3128
|
*/
|
|
3761
3129
|
Name?: OrgFeatureAdditionalConfiguration | undefined;
|
|
3762
3130
|
/**
|
|
3763
|
-
* <p>Describes the status of the additional configuration that is configured for the
|
|
3764
|
-
* member accounts within the organization. One of the following
|
|
3765
|
-
* values is the status for the entire organization:</p>
|
|
3766
|
-
* <ul>
|
|
3767
|
-
* <li>
|
|
3768
|
-
* <p>
|
|
3769
|
-
* <code>NEW</code>: Indicates that when a new account joins the organization, they will
|
|
3770
|
-
* have the additional configuration enabled automatically. </p>
|
|
3771
|
-
* </li>
|
|
3772
|
-
* <li>
|
|
3773
|
-
* <p>
|
|
3774
|
-
* <code>ALL</code>: Indicates that all accounts in the organization have
|
|
3775
|
-
* the additional configuration
|
|
3776
|
-
* enabled automatically. This includes <code>NEW</code> accounts that join the organization
|
|
3777
|
-
* and accounts that may have been suspended or removed from the organization in
|
|
3778
|
-
* GuardDuty.</p>
|
|
3779
|
-
* <p>It may take up to 24 hours to update the configuration for all the member accounts.</p>
|
|
3780
|
-
* </li>
|
|
3781
|
-
* <li>
|
|
3782
|
-
* <p>
|
|
3783
|
-
* <code>NONE</code>: Indicates that the additional configuration will not be
|
|
3784
|
-
* automatically enabled for any
|
|
3785
|
-
* account in the organization. The administrator must manage the additional configuration
|
|
3786
|
-
* for each account individually.</p>
|
|
3787
|
-
* </li>
|
|
3788
|
-
* </ul>
|
|
3131
|
+
* <p>Describes the status of the additional configuration that is configured for the member accounts within the organization. One of the following values is the status for the entire organization:</p> <ul> <li> <p> <code>NEW</code>: Indicates that when a new account joins the organization, they will have the additional configuration enabled automatically. </p> </li> <li> <p> <code>ALL</code>: Indicates that all accounts in the organization have the additional configuration enabled automatically. This includes <code>NEW</code> accounts that join the organization and accounts that may have been suspended or removed from the organization in GuardDuty.</p> <p>It may take up to 24 hours to update the configuration for all the member accounts.</p> </li> <li> <p> <code>NONE</code>: Indicates that the additional configuration will not be automatically enabled for any account in the organization. The administrator must manage the additional configuration for each account individually.</p> </li> </ul>
|
|
3789
3132
|
* @public
|
|
3790
3133
|
*/
|
|
3791
3134
|
AutoEnable?: OrgFeatureStatus | undefined;
|
|
@@ -3796,41 +3139,17 @@ export interface OrganizationAdditionalConfigurationResult {
|
|
|
3796
3139
|
*/
|
|
3797
3140
|
export interface OrganizationFeatureConfigurationResult {
|
|
3798
3141
|
/**
|
|
3799
|
-
* <p>The name of the feature that is configured for the member accounts within the
|
|
3800
|
-
* organization.</p>
|
|
3142
|
+
* <p>The name of the feature that is configured for the member accounts within the organization.</p>
|
|
3801
3143
|
* @public
|
|
3802
3144
|
*/
|
|
3803
3145
|
Name?: OrgFeature | undefined;
|
|
3804
3146
|
/**
|
|
3805
|
-
* <p>Describes the status of the feature that is configured for the member accounts within
|
|
3806
|
-
* the organization.</p>
|
|
3807
|
-
* <ul>
|
|
3808
|
-
* <li>
|
|
3809
|
-
* <p>
|
|
3810
|
-
* <code>NEW</code>: Indicates that when a new account joins the organization, they will
|
|
3811
|
-
* have the feature enabled automatically. </p>
|
|
3812
|
-
* </li>
|
|
3813
|
-
* <li>
|
|
3814
|
-
* <p>
|
|
3815
|
-
* <code>ALL</code>: Indicates that all accounts in the organization have the feature
|
|
3816
|
-
* enabled automatically. This includes <code>NEW</code> accounts that join the organization
|
|
3817
|
-
* and accounts that may have been suspended or removed from the organization in
|
|
3818
|
-
* GuardDuty.</p>
|
|
3819
|
-
* </li>
|
|
3820
|
-
* <li>
|
|
3821
|
-
* <p>
|
|
3822
|
-
* <code>NONE</code>: Indicates that the feature will not be automatically enabled for any
|
|
3823
|
-
* account in the organization. In this case, each account will be managed individually
|
|
3824
|
-
* by the
|
|
3825
|
-
* administrator.</p>
|
|
3826
|
-
* </li>
|
|
3827
|
-
* </ul>
|
|
3147
|
+
* <p>Describes the status of the feature that is configured for the member accounts within the organization.</p> <ul> <li> <p> <code>NEW</code>: Indicates that when a new account joins the organization, they will have the feature enabled automatically. </p> </li> <li> <p> <code>ALL</code>: Indicates that all accounts in the organization have the feature enabled automatically. This includes <code>NEW</code> accounts that join the organization and accounts that may have been suspended or removed from the organization in GuardDuty.</p> </li> <li> <p> <code>NONE</code>: Indicates that the feature will not be automatically enabled for any account in the organization. In this case, each account will be managed individually by the administrator.</p> </li> </ul>
|
|
3828
3148
|
* @public
|
|
3829
3149
|
*/
|
|
3830
3150
|
AutoEnable?: OrgFeatureStatus | undefined;
|
|
3831
3151
|
/**
|
|
3832
|
-
* <p>The additional configuration that is configured for the member accounts within the
|
|
3833
|
-
* organization.</p>
|
|
3152
|
+
* <p>The additional configuration that is configured for the member accounts within the organization.</p>
|
|
3834
3153
|
* @public
|
|
3835
3154
|
*/
|
|
3836
3155
|
AdditionalConfiguration?: OrganizationAdditionalConfigurationResult[] | undefined;
|
|
@@ -3840,18 +3159,14 @@ export interface OrganizationFeatureConfigurationResult {
|
|
|
3840
3159
|
*/
|
|
3841
3160
|
export interface DescribeOrganizationConfigurationResponse {
|
|
3842
3161
|
/**
|
|
3843
|
-
* <p>Indicates whether GuardDuty is automatically enabled for accounts added to the
|
|
3844
|
-
* organization.</p>
|
|
3845
|
-
* <p>Even though this is still supported, we recommend using
|
|
3846
|
-
* <code>AutoEnableOrganizationMembers</code> to achieve the similar results.</p>
|
|
3162
|
+
* <p>Indicates whether GuardDuty is automatically enabled for accounts added to the organization.</p> <p>Even though this is still supported, we recommend using <code>AutoEnableOrganizationMembers</code> to achieve the similar results.</p>
|
|
3847
3163
|
*
|
|
3848
3164
|
* @deprecated This field is deprecated, use AutoEnableOrganizationMembers instead.
|
|
3849
3165
|
* @public
|
|
3850
3166
|
*/
|
|
3851
3167
|
AutoEnable?: boolean | undefined;
|
|
3852
3168
|
/**
|
|
3853
|
-
* <p>Indicates whether the maximum number of allowed member accounts are already associated
|
|
3854
|
-
* with the delegated administrator account for your organization.</p>
|
|
3169
|
+
* <p>Indicates whether the maximum number of allowed member accounts are already associated with the delegated administrator account for your organization.</p>
|
|
3855
3170
|
* @public
|
|
3856
3171
|
*/
|
|
3857
3172
|
MemberAccountLimitReached: boolean | undefined;
|
|
@@ -3868,39 +3183,12 @@ export interface DescribeOrganizationConfigurationResponse {
|
|
|
3868
3183
|
*/
|
|
3869
3184
|
Features?: OrganizationFeatureConfigurationResult[] | undefined;
|
|
3870
3185
|
/**
|
|
3871
|
-
* <p>The pagination parameter to be used on the next list operation to retrieve more
|
|
3872
|
-
* items.</p>
|
|
3186
|
+
* <p>The pagination parameter to be used on the next list operation to retrieve more items.</p>
|
|
3873
3187
|
* @public
|
|
3874
3188
|
*/
|
|
3875
3189
|
NextToken?: string | undefined;
|
|
3876
3190
|
/**
|
|
3877
|
-
* <p>Indicates the auto-enablement configuration of GuardDuty or any of the corresponding protection plans for the member accounts in the
|
|
3878
|
-
* organization.</p>
|
|
3879
|
-
* <ul>
|
|
3880
|
-
* <li>
|
|
3881
|
-
* <p>
|
|
3882
|
-
* <code>NEW</code>: Indicates that when a new account joins the organization, they will
|
|
3883
|
-
* have GuardDuty or any of the corresponding protection plans enabled automatically. </p>
|
|
3884
|
-
* </li>
|
|
3885
|
-
* <li>
|
|
3886
|
-
* <p>
|
|
3887
|
-
* <code>ALL</code>: Indicates that all accounts in the organization have GuardDuty and any of the corresponding
|
|
3888
|
-
* protection plans enabled automatically. This includes <code>NEW</code> accounts that join the organization
|
|
3889
|
-
* and accounts that may have been suspended or removed from the organization in
|
|
3890
|
-
* GuardDuty.</p>
|
|
3891
|
-
* </li>
|
|
3892
|
-
* <li>
|
|
3893
|
-
* <p>
|
|
3894
|
-
* <code>NONE</code>: Indicates that GuardDuty or any of the corresponding protection plans
|
|
3895
|
-
* will not be automatically enabled for any
|
|
3896
|
-
* account in the organization. The administrator must manage GuardDuty for each account in
|
|
3897
|
-
* the organization individually.</p>
|
|
3898
|
-
* <p>When you update the auto-enable setting from <code>ALL</code> or <code>NEW</code> to
|
|
3899
|
-
* <code>NONE</code>, this action doesn't disable the corresponding option for your existing accounts. This
|
|
3900
|
-
* configuration will apply to the new accounts that join the organization. After you update the auto-enable settings,
|
|
3901
|
-
* no new account will have the corresponding option as enabled.</p>
|
|
3902
|
-
* </li>
|
|
3903
|
-
* </ul>
|
|
3191
|
+
* <p>Indicates the auto-enablement configuration of GuardDuty or any of the corresponding protection plans for the member accounts in the organization.</p> <ul> <li> <p> <code>NEW</code>: Indicates that when a new account joins the organization, they will have GuardDuty or any of the corresponding protection plans enabled automatically. </p> </li> <li> <p> <code>ALL</code>: Indicates that all accounts in the organization have GuardDuty and any of the corresponding protection plans enabled automatically. This includes <code>NEW</code> accounts that join the organization and accounts that may have been suspended or removed from the organization in GuardDuty.</p> </li> <li> <p> <code>NONE</code>: Indicates that GuardDuty or any of the corresponding protection plans will not be automatically enabled for any account in the organization. The administrator must manage GuardDuty for each account in the organization individually.</p> <p>When you update the auto-enable setting from <code>ALL</code> or <code>NEW</code> to <code>NONE</code>, this action doesn't disable the corresponding option for your existing accounts. This configuration will apply to the new accounts that join the organization. After you update the auto-enable settings, no new account will have the corresponding option as enabled.</p> </li> </ul>
|
|
3904
3192
|
* @public
|
|
3905
3193
|
*/
|
|
3906
3194
|
AutoEnableOrganizationMembers?: AutoEnableMembers | undefined;
|
|
@@ -3910,10 +3198,7 @@ export interface DescribeOrganizationConfigurationResponse {
|
|
|
3910
3198
|
*/
|
|
3911
3199
|
export interface DescribePublishingDestinationRequest {
|
|
3912
3200
|
/**
|
|
3913
|
-
* <p>The unique ID of the detector associated with the publishing destination to
|
|
3914
|
-
* retrieve.</p>
|
|
3915
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
3916
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3201
|
+
* <p>The unique ID of the detector associated with the publishing destination to retrieve.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
3917
3202
|
* @public
|
|
3918
3203
|
*/
|
|
3919
3204
|
DetectorId: string | undefined;
|
|
@@ -3933,8 +3218,7 @@ export interface DescribePublishingDestinationResponse {
|
|
|
3933
3218
|
*/
|
|
3934
3219
|
DestinationId: string | undefined;
|
|
3935
3220
|
/**
|
|
3936
|
-
* <p>The type of publishing destination. Currently, only Amazon S3 buckets are
|
|
3937
|
-
* supported.</p>
|
|
3221
|
+
* <p>The type of publishing destination. Currently, only Amazon S3 buckets are supported.</p>
|
|
3938
3222
|
* @public
|
|
3939
3223
|
*/
|
|
3940
3224
|
DestinationType: DestinationType | undefined;
|
|
@@ -3944,14 +3228,12 @@ export interface DescribePublishingDestinationResponse {
|
|
|
3944
3228
|
*/
|
|
3945
3229
|
Status: PublishingStatus | undefined;
|
|
3946
3230
|
/**
|
|
3947
|
-
* <p>The time, in epoch millisecond format, at which GuardDuty was first unable to publish
|
|
3948
|
-
* findings to the destination.</p>
|
|
3231
|
+
* <p>The time, in epoch millisecond format, at which GuardDuty was first unable to publish findings to the destination.</p>
|
|
3949
3232
|
* @public
|
|
3950
3233
|
*/
|
|
3951
3234
|
PublishingFailureStartTimestamp: number | undefined;
|
|
3952
3235
|
/**
|
|
3953
|
-
* <p>A <code>DestinationProperties</code> object that includes the <code>DestinationArn</code>
|
|
3954
|
-
* and <code>KmsKeyArn</code> of the publishing destination.</p>
|
|
3236
|
+
* <p>A <code>DestinationProperties</code> object that includes the <code>DestinationArn</code> and <code>KmsKeyArn</code> of the publishing destination.</p>
|
|
3955
3237
|
* @public
|
|
3956
3238
|
*/
|
|
3957
3239
|
DestinationProperties: DestinationProperties | undefined;
|
|
@@ -3962,8 +3244,7 @@ export interface DescribePublishingDestinationResponse {
|
|
|
3962
3244
|
Tags?: Record<string, string> | undefined;
|
|
3963
3245
|
}
|
|
3964
3246
|
/**
|
|
3965
|
-
* <p>Contains information about the publishing destination, including the ID, type, and
|
|
3966
|
-
* status.</p>
|
|
3247
|
+
* <p>Contains information about the publishing destination, including the ID, type, and status.</p>
|
|
3967
3248
|
* @public
|
|
3968
3249
|
*/
|
|
3969
3250
|
export interface Destination {
|
|
@@ -3973,8 +3254,7 @@ export interface Destination {
|
|
|
3973
3254
|
*/
|
|
3974
3255
|
DestinationId: string | undefined;
|
|
3975
3256
|
/**
|
|
3976
|
-
* <p>The type of resource used for the publishing destination. Currently, only Amazon S3
|
|
3977
|
-
* buckets are supported.</p>
|
|
3257
|
+
* <p>The type of resource used for the publishing destination. Currently, only Amazon S3 buckets are supported.</p>
|
|
3978
3258
|
* @public
|
|
3979
3259
|
*/
|
|
3980
3260
|
DestinationType: DestinationType | undefined;
|
|
@@ -4063,14 +3343,12 @@ export interface NetworkEndpoint {
|
|
|
4063
3343
|
Connection?: NetworkConnection | undefined;
|
|
4064
3344
|
}
|
|
4065
3345
|
/**
|
|
4066
|
-
* <p>Contains information about the Amazon EC2 Image involved in a GuardDuty finding,
|
|
4067
|
-
* including unique identifiers of the Amazon EC2 instances.</p>
|
|
3346
|
+
* <p>Contains information about the Amazon EC2 Image involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
|
|
4068
3347
|
* @public
|
|
4069
3348
|
*/
|
|
4070
3349
|
export interface Ec2Image {
|
|
4071
3350
|
/**
|
|
4072
|
-
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that were launched with the
|
|
4073
|
-
* same Amazon Machine Image (AMI).</p>
|
|
3351
|
+
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that were launched with the same Amazon Machine Image (AMI).</p>
|
|
4074
3352
|
* @public
|
|
4075
3353
|
*/
|
|
4076
3354
|
Ec2InstanceUids?: string[] | undefined;
|
|
@@ -4113,9 +3391,7 @@ export interface ProductCode {
|
|
|
4113
3391
|
*/
|
|
4114
3392
|
export interface Ec2Instance {
|
|
4115
3393
|
/**
|
|
4116
|
-
* <p>The availability zone of the Amazon EC2 instance. For more information, see
|
|
4117
|
-
* <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-availability-zones">Availability zones</a>
|
|
4118
|
-
* in the <i>Amazon EC2 User Guide</i>.</p>
|
|
3394
|
+
* <p>The availability zone of the Amazon EC2 instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html#concepts-availability-zones">Availability zones</a> in the <i>Amazon EC2 User Guide</i>.</p>
|
|
4119
3395
|
* @public
|
|
4120
3396
|
*/
|
|
4121
3397
|
AvailabilityZone?: string | undefined;
|
|
@@ -4125,9 +3401,7 @@ export interface Ec2Instance {
|
|
|
4125
3401
|
*/
|
|
4126
3402
|
ImageDescription?: string | undefined;
|
|
4127
3403
|
/**
|
|
4128
|
-
* <p>The state of the Amazon EC2 instance. For more information, see
|
|
4129
|
-
* <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html">Amazon EC2 instance state changes</a>
|
|
4130
|
-
* in the <i>Amazon EC2 User Guide</i>.</p>
|
|
3404
|
+
* <p>The state of the Amazon EC2 instance. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-lifecycle.html">Amazon EC2 instance state changes</a> in the <i>Amazon EC2 User Guide</i>.</p>
|
|
4131
3405
|
* @public
|
|
4132
3406
|
*/
|
|
4133
3407
|
InstanceState?: string | undefined;
|
|
@@ -4163,14 +3437,12 @@ export interface Ec2Instance {
|
|
|
4163
3437
|
Ec2NetworkInterfaceUids?: string[] | undefined;
|
|
4164
3438
|
}
|
|
4165
3439
|
/**
|
|
4166
|
-
* <p>Contains information about the Amazon EC2 launch template involved in a GuardDuty finding,
|
|
4167
|
-
* including unique identifiers of the Amazon EC2 instances.</p>
|
|
3440
|
+
* <p>Contains information about the Amazon EC2 launch template involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
|
|
4168
3441
|
* @public
|
|
4169
3442
|
*/
|
|
4170
3443
|
export interface Ec2LaunchTemplate {
|
|
4171
3444
|
/**
|
|
4172
|
-
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that share the
|
|
4173
|
-
* same Amazon EC2 launch template.</p>
|
|
3445
|
+
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that share the same Amazon EC2 launch template.</p>
|
|
4174
3446
|
* @public
|
|
4175
3447
|
*/
|
|
4176
3448
|
Ec2InstanceUids?: string[] | undefined;
|
|
@@ -4249,21 +3521,18 @@ export interface Ec2NetworkInterface {
|
|
|
4249
3521
|
VpcId?: string | undefined;
|
|
4250
3522
|
}
|
|
4251
3523
|
/**
|
|
4252
|
-
* <p>Contains information about the Amazon EC2 VPC involved in a GuardDuty finding,
|
|
4253
|
-
* including unique identifiers of the Amazon EC2 instances.</p>
|
|
3524
|
+
* <p>Contains information about the Amazon EC2 VPC involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
|
|
4254
3525
|
* @public
|
|
4255
3526
|
*/
|
|
4256
3527
|
export interface Ec2Vpc {
|
|
4257
3528
|
/**
|
|
4258
|
-
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that were launched within the
|
|
4259
|
-
* same Virtual Private Cloud (VPC).</p>
|
|
3529
|
+
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that were launched within the same Virtual Private Cloud (VPC).</p>
|
|
4260
3530
|
* @public
|
|
4261
3531
|
*/
|
|
4262
3532
|
Ec2InstanceUids?: string[] | undefined;
|
|
4263
3533
|
}
|
|
4264
3534
|
/**
|
|
4265
|
-
* <p>Contains information about the Amazon ECS cluster involved in a GuardDuty finding,
|
|
4266
|
-
* including cluster identification and status.</p>
|
|
3535
|
+
* <p>Contains information about the Amazon ECS cluster involved in a GuardDuty finding, including cluster identification and status.</p>
|
|
4267
3536
|
* @public
|
|
4268
3537
|
*/
|
|
4269
3538
|
export interface EcsCluster {
|
|
@@ -4273,15 +3542,13 @@ export interface EcsCluster {
|
|
|
4273
3542
|
*/
|
|
4274
3543
|
Status?: EcsClusterStatus | undefined;
|
|
4275
3544
|
/**
|
|
4276
|
-
* <p>A list of unique identifiers for the Amazon EC2 instances that serve as container instances in
|
|
4277
|
-
* the Amazon ECS cluster.</p>
|
|
3545
|
+
* <p>A list of unique identifiers for the Amazon EC2 instances that serve as container instances in the Amazon ECS cluster.</p>
|
|
4278
3546
|
* @public
|
|
4279
3547
|
*/
|
|
4280
3548
|
Ec2InstanceUids?: string[] | undefined;
|
|
4281
3549
|
}
|
|
4282
3550
|
/**
|
|
4283
|
-
* <p>Contains information about Amazon ECS task involved in a GuardDuty finding,
|
|
4284
|
-
* including task definition and container identifiers.</p>
|
|
3551
|
+
* <p>Contains information about Amazon ECS task involved in a GuardDuty finding, including task definition and container identifiers.</p>
|
|
4285
3552
|
* @public
|
|
4286
3553
|
*/
|
|
4287
3554
|
export interface EcsTask {
|
|
@@ -4307,8 +3574,7 @@ export interface EcsTask {
|
|
|
4307
3574
|
ContainerUids?: string[] | undefined;
|
|
4308
3575
|
}
|
|
4309
3576
|
/**
|
|
4310
|
-
* <p>Contains information about the Amazon EKS cluster involved in a GuardDuty finding,
|
|
4311
|
-
* including cluster identification, status, and network configuration.</p>
|
|
3577
|
+
* <p>Contains information about the Amazon EKS cluster involved in a GuardDuty finding, including cluster identification, status, and network configuration.</p>
|
|
4312
3578
|
* @public
|
|
4313
3579
|
*/
|
|
4314
3580
|
export interface EksCluster {
|
|
@@ -4339,21 +3605,18 @@ export interface EksCluster {
|
|
|
4339
3605
|
Ec2InstanceUids?: string[] | undefined;
|
|
4340
3606
|
}
|
|
4341
3607
|
/**
|
|
4342
|
-
* <p>Contains information about the IAM instance profile involved in a GuardDuty finding,
|
|
4343
|
-
* including unique identifiers of the Amazon EC2 instances.</p>
|
|
3608
|
+
* <p>Contains information about the IAM instance profile involved in a GuardDuty finding, including unique identifiers of the Amazon EC2 instances.</p>
|
|
4344
3609
|
* @public
|
|
4345
3610
|
*/
|
|
4346
3611
|
export interface IamInstanceProfileV2 {
|
|
4347
3612
|
/**
|
|
4348
|
-
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that share the
|
|
4349
|
-
* same IAM instance profile.</p>
|
|
3613
|
+
* <p>A list of unique identifiers for the compromised Amazon EC2 instances that share the same IAM instance profile.</p>
|
|
4350
3614
|
* @public
|
|
4351
3615
|
*/
|
|
4352
3616
|
Ec2InstanceUids?: string[] | undefined;
|
|
4353
3617
|
}
|
|
4354
3618
|
/**
|
|
4355
|
-
* <p>Contains information about Kubernetes workloads involved in a GuardDuty finding,
|
|
4356
|
-
* including pods, deployments, and other Kubernetes resources.</p>
|
|
3619
|
+
* <p>Contains information about Kubernetes workloads involved in a GuardDuty finding, including pods, deployments, and other Kubernetes resources.</p>
|
|
4357
3620
|
* @public
|
|
4358
3621
|
*/
|
|
4359
3622
|
export interface KubernetesWorkload {
|
|
@@ -4374,15 +3637,12 @@ export interface KubernetesWorkload {
|
|
|
4374
3637
|
KubernetesResourcesTypes?: KubernetesResourcesTypes | undefined;
|
|
4375
3638
|
}
|
|
4376
3639
|
/**
|
|
4377
|
-
* <p>Describes public access policies that apply to the Amazon S3 bucket.</p>
|
|
4378
|
-
* <p>For information about each of the following settings, see
|
|
4379
|
-
* <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html">Blocking public access to your Amazon S3 storage</a> in the <i>Amazon S3 User Guide</i>.</p>
|
|
3640
|
+
* <p>Describes public access policies that apply to the Amazon S3 bucket.</p> <p>For information about each of the following settings, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html">Blocking public access to your Amazon S3 storage</a> in the <i>Amazon S3 User Guide</i>.</p>
|
|
4380
3641
|
* @public
|
|
4381
3642
|
*/
|
|
4382
3643
|
export interface PublicAccessConfiguration {
|
|
4383
3644
|
/**
|
|
4384
|
-
* <p>Indicates whether or not there is a setting that allows public access to the Amazon S3 buckets through access
|
|
4385
|
-
* control lists (ACLs).</p>
|
|
3645
|
+
* <p>Indicates whether or not there is a setting that allows public access to the Amazon S3 buckets through access control lists (ACLs).</p>
|
|
4386
3646
|
* @public
|
|
4387
3647
|
*/
|
|
4388
3648
|
PublicAclAccess?: PublicAccessStatus | undefined;
|
|
@@ -4392,8 +3652,7 @@ export interface PublicAccessConfiguration {
|
|
|
4392
3652
|
*/
|
|
4393
3653
|
PublicPolicyAccess?: PublicAccessStatus | undefined;
|
|
4394
3654
|
/**
|
|
4395
|
-
* <p>Indicates whether or not there is a setting that ignores all public access control lists (ACLs)
|
|
4396
|
-
* on the Amazon S3 bucket and the objects that it contains.</p>
|
|
3655
|
+
* <p>Indicates whether or not there is a setting that ignores all public access control lists (ACLs) on the Amazon S3 bucket and the objects that it contains.</p>
|
|
4397
3656
|
* @public
|
|
4398
3657
|
*/
|
|
4399
3658
|
PublicAclIgnoreBehavior?: PublicAclIgnoreBehavior | undefined;
|
|
@@ -4419,9 +3678,7 @@ export interface S3Bucket {
|
|
|
4419
3678
|
*/
|
|
4420
3679
|
CreatedAt?: Date | undefined;
|
|
4421
3680
|
/**
|
|
4422
|
-
* <p>The type of encryption used for the Amazon S3 buckets and its objects. For more information,
|
|
4423
|
-
* see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/serv-side-encryption.html">Protecting data with server-side encryption</a>
|
|
4424
|
-
* in the <i>Amazon S3 User Guide</i>.</p>
|
|
3681
|
+
* <p>The type of encryption used for the Amazon S3 buckets and its objects. For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/serv-side-encryption.html">Protecting data with server-side encryption</a> in the <i>Amazon S3 User Guide</i>.</p>
|
|
4425
3682
|
* @public
|
|
4426
3683
|
*/
|
|
4427
3684
|
EncryptionType?: string | undefined;
|
|
@@ -4467,8 +3724,7 @@ export interface S3Bucket {
|
|
|
4467
3724
|
*/
|
|
4468
3725
|
export interface S3Object {
|
|
4469
3726
|
/**
|
|
4470
|
-
* <p>The entity tag is a hash of the Amazon S3 object. The ETag reflects changes only to the
|
|
4471
|
-
* contents of an object, and not its metadata.</p>
|
|
3727
|
+
* <p>The entity tag is a hash of the Amazon S3 object. The ETag reflects changes only to the contents of an object, and not its metadata.</p>
|
|
4472
3728
|
* @public
|
|
4473
3729
|
*/
|
|
4474
3730
|
ETag?: string | undefined;
|
|
@@ -4484,8 +3740,7 @@ export interface S3Object {
|
|
|
4484
3740
|
VersionId?: string | undefined;
|
|
4485
3741
|
}
|
|
4486
3742
|
/**
|
|
4487
|
-
* <p>Contains information about the Amazon Web Services resource that is associated with the activity that prompted
|
|
4488
|
-
* GuardDuty to generate a finding.</p>
|
|
3743
|
+
* <p>Contains information about the Amazon Web Services resource that is associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4489
3744
|
* @public
|
|
4490
3745
|
*/
|
|
4491
3746
|
export interface ResourceData {
|
|
@@ -4515,68 +3770,57 @@ export interface ResourceData {
|
|
|
4515
3770
|
*/
|
|
4516
3771
|
S3Object?: S3Object | undefined;
|
|
4517
3772
|
/**
|
|
4518
|
-
* <p>Contains detailed information about the Amazon EKS cluster associated with the activity that
|
|
4519
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3773
|
+
* <p>Contains detailed information about the Amazon EKS cluster associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4520
3774
|
* @public
|
|
4521
3775
|
*/
|
|
4522
3776
|
EksCluster?: EksCluster | undefined;
|
|
4523
3777
|
/**
|
|
4524
|
-
* <p>Contains detailed information about the Kubernetes workload associated with the activity that
|
|
4525
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3778
|
+
* <p>Contains detailed information about the Kubernetes workload associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4526
3779
|
* @public
|
|
4527
3780
|
*/
|
|
4528
3781
|
KubernetesWorkload?: KubernetesWorkload | undefined;
|
|
4529
3782
|
/**
|
|
4530
|
-
* <p>Contains detailed information about the container associated with the activity that
|
|
4531
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3783
|
+
* <p>Contains detailed information about the container associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4532
3784
|
* @public
|
|
4533
3785
|
*/
|
|
4534
3786
|
Container?: ContainerFindingResource | undefined;
|
|
4535
3787
|
/**
|
|
4536
|
-
* <p>Contains detailed information about the Amazon ECS cluster associated with the activity that
|
|
4537
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3788
|
+
* <p>Contains detailed information about the Amazon ECS cluster associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4538
3789
|
* @public
|
|
4539
3790
|
*/
|
|
4540
3791
|
EcsCluster?: EcsCluster | undefined;
|
|
4541
3792
|
/**
|
|
4542
|
-
* <p>Contains detailed information about the Amazon ECS task associated with the activity that
|
|
4543
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3793
|
+
* <p>Contains detailed information about the Amazon ECS task associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4544
3794
|
* @public
|
|
4545
3795
|
*/
|
|
4546
3796
|
EcsTask?: EcsTask | undefined;
|
|
4547
3797
|
/**
|
|
4548
|
-
* <p>Contains detailed information about the IAM instance profile associated with the activity that
|
|
4549
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3798
|
+
* <p>Contains detailed information about the IAM instance profile associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4550
3799
|
* @public
|
|
4551
3800
|
*/
|
|
4552
3801
|
IamInstanceProfile?: IamInstanceProfileV2 | undefined;
|
|
4553
3802
|
/**
|
|
4554
|
-
* <p>Contains detailed information about the Auto Scaling Group associated with the activity that
|
|
4555
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3803
|
+
* <p>Contains detailed information about the Auto Scaling Group associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4556
3804
|
* @public
|
|
4557
3805
|
*/
|
|
4558
3806
|
AutoscalingAutoScalingGroup?: AutoscalingAutoScalingGroup | undefined;
|
|
4559
3807
|
/**
|
|
4560
|
-
* <p>Contains detailed information about the EC2 launch template associated with the activity that
|
|
4561
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3808
|
+
* <p>Contains detailed information about the EC2 launch template associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4562
3809
|
* @public
|
|
4563
3810
|
*/
|
|
4564
3811
|
Ec2LaunchTemplate?: Ec2LaunchTemplate | undefined;
|
|
4565
3812
|
/**
|
|
4566
|
-
* <p>Contains detailed information about the EC2 VPC associated with the activity that
|
|
4567
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3813
|
+
* <p>Contains detailed information about the EC2 VPC associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4568
3814
|
* @public
|
|
4569
3815
|
*/
|
|
4570
3816
|
Ec2Vpc?: Ec2Vpc | undefined;
|
|
4571
3817
|
/**
|
|
4572
|
-
* <p>Contains detailed information about the EC2 Image associated with the activity that
|
|
4573
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3818
|
+
* <p>Contains detailed information about the EC2 Image associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4574
3819
|
* @public
|
|
4575
3820
|
*/
|
|
4576
3821
|
Ec2Image?: Ec2Image | undefined;
|
|
4577
3822
|
/**
|
|
4578
|
-
* <p>Contains detailed information about the CloudFormation stack associated with the activity that
|
|
4579
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
3823
|
+
* <p>Contains detailed information about the CloudFormation stack associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4580
3824
|
* @public
|
|
4581
3825
|
*/
|
|
4582
3826
|
CloudformationStack?: CloudformationStack | undefined;
|
|
@@ -4643,28 +3887,23 @@ export interface ResourceV2 {
|
|
|
4643
3887
|
*/
|
|
4644
3888
|
Tags?: Tag[] | undefined;
|
|
4645
3889
|
/**
|
|
4646
|
-
* <p>Contains information about the Amazon Web Services resource associated with the activity that prompted
|
|
4647
|
-
* GuardDuty to generate a finding.</p>
|
|
3890
|
+
* <p>Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
4648
3891
|
* @public
|
|
4649
3892
|
*/
|
|
4650
3893
|
Data?: ResourceData | undefined;
|
|
4651
3894
|
}
|
|
4652
3895
|
/**
|
|
4653
|
-
* <p>Contains information about the indicators that include a set of
|
|
4654
|
-
* signals observed in an attack sequence.</p>
|
|
3896
|
+
* <p>Contains information about the indicators that include a set of signals observed in an attack sequence.</p>
|
|
4655
3897
|
* @public
|
|
4656
3898
|
*/
|
|
4657
3899
|
export interface Indicator {
|
|
4658
3900
|
/**
|
|
4659
|
-
* <p>Specific indicator keys observed in the attack sequence. For description of the valid values for key,
|
|
4660
|
-
* see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-summary.html#guardduty-extended-threat-detection-attack-sequence-finding-details">Attack sequence finding details</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
3901
|
+
* <p>Specific indicator keys observed in the attack sequence. For description of the valid values for key, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-summary.html#guardduty-extended-threat-detection-attack-sequence-finding-details">Attack sequence finding details</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
4661
3902
|
* @public
|
|
4662
3903
|
*/
|
|
4663
3904
|
Key: IndicatorType | undefined;
|
|
4664
3905
|
/**
|
|
4665
|
-
* <p>Values associated with each indicator key. For example, if the indicator key is
|
|
4666
|
-
* <code>SUSPICIOUS_NETWORK</code>, then the value will be the name of the network. If
|
|
4667
|
-
* the indicator key is <code>ATTACK_TACTIC</code>, then the value will be one of the MITRE tactics. </p>
|
|
3906
|
+
* <p>Values associated with each indicator key. For example, if the indicator key is <code>SUSPICIOUS_NETWORK</code>, then the value will be the name of the network. If the indicator key is <code>ATTACK_TACTIC</code>, then the value will be one of the MITRE tactics. </p>
|
|
4668
3907
|
* @public
|
|
4669
3908
|
*/
|
|
4670
3909
|
Values?: string[] | undefined;
|
|
@@ -4685,30 +3924,7 @@ export interface Signal {
|
|
|
4685
3924
|
*/
|
|
4686
3925
|
Uid: string | undefined;
|
|
4687
3926
|
/**
|
|
4688
|
-
* <p>The type of the signal used to identify an attack sequence.</p>
|
|
4689
|
-
* <p>Signals can be GuardDuty findings or activities observed in data sources that GuardDuty monitors. For
|
|
4690
|
-
* more information, see
|
|
4691
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html">Foundational data sources</a> in the
|
|
4692
|
-
* <i>Amazon GuardDuty User Guide</i>.</p>
|
|
4693
|
-
* <p>A signal type can be one of the valid values listed in this API. Here are the related descriptions:</p>
|
|
4694
|
-
* <ul>
|
|
4695
|
-
* <li>
|
|
4696
|
-
* <p>
|
|
4697
|
-
* <code>FINDING</code> - Individually generated GuardDuty finding.</p>
|
|
4698
|
-
* </li>
|
|
4699
|
-
* <li>
|
|
4700
|
-
* <p>
|
|
4701
|
-
* <code>CLOUD_TRAIL</code> - Activity observed from CloudTrail logs</p>
|
|
4702
|
-
* </li>
|
|
4703
|
-
* <li>
|
|
4704
|
-
* <p>
|
|
4705
|
-
* <code>S3_DATA_EVENTS</code> - Activity observed from CloudTrail data events for S3. Activities associated
|
|
4706
|
-
* with this type will show up only when
|
|
4707
|
-
* you have enabled GuardDuty S3 Protection feature in your account. For more information about S3 Protection and
|
|
4708
|
-
* steps to enable it, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html">S3 Protection</a> in the
|
|
4709
|
-
* <i>Amazon GuardDuty User Guide</i>.</p>
|
|
4710
|
-
* </li>
|
|
4711
|
-
* </ul>
|
|
3927
|
+
* <p>The type of the signal used to identify an attack sequence.</p> <p>Signals can be GuardDuty findings or activities observed in data sources that GuardDuty monitors. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html">Foundational data sources</a> in the <i>Amazon GuardDuty User Guide</i>.</p> <p>A signal type can be one of the valid values listed in this API. Here are the related descriptions:</p> <ul> <li> <p> <code>FINDING</code> - Individually generated GuardDuty finding.</p> </li> <li> <p> <code>CLOUD_TRAIL</code> - Activity observed from CloudTrail logs</p> </li> <li> <p> <code>S3_DATA_EVENTS</code> - Activity observed from CloudTrail data events for S3. Activities associated with this type will show up only when you have enabled GuardDuty S3 Protection feature in your account. For more information about S3 Protection and steps to enable it, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html">S3 Protection</a> in the <i>Amazon GuardDuty User Guide</i>.</p> </li> </ul>
|
|
4712
3928
|
* @public
|
|
4713
3929
|
*/
|
|
4714
3930
|
Type: SignalType | undefined;
|
|
@@ -4718,8 +3934,7 @@ export interface Signal {
|
|
|
4718
3934
|
*/
|
|
4719
3935
|
Description?: string | undefined;
|
|
4720
3936
|
/**
|
|
4721
|
-
* <p>The name of the signal. For example, when signal type is <code>FINDING</code>,
|
|
4722
|
-
* the signal name is the name of the finding.</p>
|
|
3937
|
+
* <p>The name of the signal. For example, when signal type is <code>FINDING</code>, the signal name is the name of the finding.</p>
|
|
4723
3938
|
* @public
|
|
4724
3939
|
*/
|
|
4725
3940
|
Name: string | undefined;
|
|
@@ -4744,9 +3959,7 @@ export interface Signal {
|
|
|
4744
3959
|
*/
|
|
4745
3960
|
LastSeenAt: Date | undefined;
|
|
4746
3961
|
/**
|
|
4747
|
-
* <p>The severity associated with the signal. For more information about severity, see
|
|
4748
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a>
|
|
4749
|
-
* in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
3962
|
+
* <p>The severity associated with the signal. For more information about severity, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
4750
3963
|
* @public
|
|
4751
3964
|
*/
|
|
4752
3965
|
Severity?: number | undefined;
|
|
@@ -4817,8 +4030,7 @@ export interface Sequence {
|
|
|
4817
4030
|
*/
|
|
4818
4031
|
SequenceIndicators?: Indicator[] | undefined;
|
|
4819
4032
|
/**
|
|
4820
|
-
* <p>Additional types of sequences that may be associated with the attack sequence finding,
|
|
4821
|
-
* providing further context about the nature of the detected threat.</p>
|
|
4033
|
+
* <p>Additional types of sequences that may be associated with the attack sequence finding, providing further context about the nature of the detected threat.</p>
|
|
4822
4034
|
* @public
|
|
4823
4035
|
*/
|
|
4824
4036
|
AdditionalSequenceTypes?: string[] | undefined;
|
|
@@ -4829,8 +4041,7 @@ export interface Sequence {
|
|
|
4829
4041
|
*/
|
|
4830
4042
|
export interface Detection {
|
|
4831
4043
|
/**
|
|
4832
|
-
* <p>The details about the anomalous activity that caused GuardDuty to
|
|
4833
|
-
* generate the finding.</p>
|
|
4044
|
+
* <p>The details about the anomalous activity that caused GuardDuty to generate the finding.</p>
|
|
4834
4045
|
* @public
|
|
4835
4046
|
*/
|
|
4836
4047
|
Anomaly?: Anomaly | undefined;
|
|
@@ -4856,19 +4067,13 @@ export interface DetectorAdditionalConfigurationResult {
|
|
|
4856
4067
|
*/
|
|
4857
4068
|
Status?: FeatureStatus | undefined;
|
|
4858
4069
|
/**
|
|
4859
|
-
* <p>The timestamp at which the additional configuration was last updated. This is in UTC
|
|
4860
|
-
* format.</p>
|
|
4070
|
+
* <p>The timestamp at which the additional configuration was last updated. This is in UTC format.</p>
|
|
4861
4071
|
* @public
|
|
4862
4072
|
*/
|
|
4863
4073
|
UpdatedAt?: Date | undefined;
|
|
4864
4074
|
}
|
|
4865
4075
|
/**
|
|
4866
|
-
* <p>Contains information about a GuardDuty feature.</p>
|
|
4867
|
-
* <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
|
|
4868
|
-
* and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
|
|
4869
|
-
* You can add only one of these two features because Runtime Monitoring already includes the
|
|
4870
|
-
* threat detection for Amazon EKS resources. For more information, see
|
|
4871
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
|
|
4076
|
+
* <p>Contains information about a GuardDuty feature.</p> <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>) and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error. You can add only one of these two features because Runtime Monitoring already includes the threat detection for Amazon EKS resources. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
|
|
4872
4077
|
* @public
|
|
4873
4078
|
*/
|
|
4874
4079
|
export interface DetectorFeatureConfigurationResult {
|
|
@@ -4898,8 +4103,7 @@ export interface DetectorFeatureConfigurationResult {
|
|
|
4898
4103
|
*/
|
|
4899
4104
|
export interface DisableOrganizationAdminAccountRequest {
|
|
4900
4105
|
/**
|
|
4901
|
-
* <p>The Amazon Web Services Account ID for the organizations account to be disabled as a GuardDuty delegated
|
|
4902
|
-
* administrator.</p>
|
|
4106
|
+
* <p>The Amazon Web Services Account ID for the organizations account to be disabled as a GuardDuty delegated administrator.</p>
|
|
4903
4107
|
* @public
|
|
4904
4108
|
*/
|
|
4905
4109
|
AdminAccountId: string | undefined;
|
|
@@ -4946,14 +4150,12 @@ export interface DisassociateFromMasterAccountResponse {
|
|
|
4946
4150
|
*/
|
|
4947
4151
|
export interface DisassociateMembersRequest {
|
|
4948
4152
|
/**
|
|
4949
|
-
* <p>The unique ID of the detector of the GuardDuty account whose members you want to
|
|
4950
|
-
* disassociate from the administrator account.</p>
|
|
4153
|
+
* <p>The unique ID of the detector of the GuardDuty account whose members you want to disassociate from the administrator account.</p>
|
|
4951
4154
|
* @public
|
|
4952
4155
|
*/
|
|
4953
4156
|
DetectorId: string | undefined;
|
|
4954
4157
|
/**
|
|
4955
|
-
* <p>A list of account IDs of the GuardDuty member accounts that you want to disassociate from
|
|
4956
|
-
* the administrator account.</p>
|
|
4158
|
+
* <p>A list of account IDs of the GuardDuty member accounts that you want to disassociate from the administrator account.</p>
|
|
4957
4159
|
* @public
|
|
4958
4160
|
*/
|
|
4959
4161
|
AccountIds: string[] | undefined;
|
|
@@ -4963,8 +4165,7 @@ export interface DisassociateMembersRequest {
|
|
|
4963
4165
|
*/
|
|
4964
4166
|
export interface DisassociateMembersResponse {
|
|
4965
4167
|
/**
|
|
4966
|
-
* <p>A list of objects that contain the unprocessed account and a result string that explains
|
|
4967
|
-
* why it was unprocessed.</p>
|
|
4168
|
+
* <p>A list of objects that contain the unprocessed account and a result string that explains why it was unprocessed.</p>
|
|
4968
4169
|
* @public
|
|
4969
4170
|
*/
|
|
4970
4171
|
UnprocessedAccounts: UnprocessedAccount[] | undefined;
|
|
@@ -5008,8 +4209,7 @@ export interface EbsVolumeDetails {
|
|
|
5008
4209
|
SkippedVolumeDetails?: VolumeDetail[] | undefined;
|
|
5009
4210
|
}
|
|
5010
4211
|
/**
|
|
5011
|
-
* <p>Contains details of the highest severity threat detected during scan and number of
|
|
5012
|
-
* infected files.</p>
|
|
4212
|
+
* <p>Contains details of the highest severity threat detected during scan and number of infected files.</p>
|
|
5013
4213
|
* @public
|
|
5014
4214
|
*/
|
|
5015
4215
|
export interface HighestSeverityThreatDetails {
|
|
@@ -5077,8 +4277,7 @@ export interface ScanFilePath {
|
|
|
5077
4277
|
FileName?: string | undefined;
|
|
5078
4278
|
}
|
|
5079
4279
|
/**
|
|
5080
|
-
* <p>Contains files infected with the given threat providing details of malware name and
|
|
5081
|
-
* severity.</p>
|
|
4280
|
+
* <p>Contains files infected with the given threat providing details of malware name and severity.</p>
|
|
5082
4281
|
* @public
|
|
5083
4282
|
*/
|
|
5084
4283
|
export interface ScanThreatName {
|
|
@@ -5119,8 +4318,7 @@ export interface ThreatDetectedByName {
|
|
|
5119
4318
|
*/
|
|
5120
4319
|
UniqueThreatNameCount?: number | undefined;
|
|
5121
4320
|
/**
|
|
5122
|
-
* <p>Flag to determine if the finding contains every single infected file-path and/or every
|
|
5123
|
-
* threat.</p>
|
|
4321
|
+
* <p>Flag to determine if the finding contains every single infected file-path and/or every threat.</p>
|
|
5124
4322
|
* @public
|
|
5125
4323
|
*/
|
|
5126
4324
|
Shortened?: boolean | undefined;
|
|
@@ -5157,8 +4355,7 @@ export interface ScanDetections {
|
|
|
5157
4355
|
*/
|
|
5158
4356
|
ThreatsDetectedItemCount?: ThreatsDetectedItemCount | undefined;
|
|
5159
4357
|
/**
|
|
5160
|
-
* <p>Details of the highest severity threat detected during malware scan and number of infected
|
|
5161
|
-
* files.</p>
|
|
4358
|
+
* <p>Details of the highest severity threat detected during malware scan and number of infected files.</p>
|
|
5162
4359
|
* @public
|
|
5163
4360
|
*/
|
|
5164
4361
|
HighestSeverityThreatDetails?: HighestSeverityThreatDetails | undefined;
|
|
@@ -5221,8 +4418,7 @@ export interface Ec2ImageDetails {
|
|
|
5221
4418
|
ImageArn?: string | undefined;
|
|
5222
4419
|
}
|
|
5223
4420
|
/**
|
|
5224
|
-
* <p>Represents a pre-existing file or directory on the host machine that the volume maps
|
|
5225
|
-
* to.</p>
|
|
4421
|
+
* <p>Represents a pre-existing file or directory on the host machine that the volume maps to.</p>
|
|
5226
4422
|
* @public
|
|
5227
4423
|
*/
|
|
5228
4424
|
export interface HostPath {
|
|
@@ -5243,8 +4439,7 @@ export interface Volume {
|
|
|
5243
4439
|
*/
|
|
5244
4440
|
Name?: string | undefined;
|
|
5245
4441
|
/**
|
|
5246
|
-
* <p>Represents a pre-existing file or directory on the host machine that the volume maps
|
|
5247
|
-
* to.</p>
|
|
4442
|
+
* <p>Represents a pre-existing file or directory on the host machine that the volume maps to.</p>
|
|
5248
4443
|
* @public
|
|
5249
4444
|
*/
|
|
5250
4445
|
HostPath?: HostPath | undefined;
|
|
@@ -5397,8 +4592,7 @@ export interface EksClusterDetails {
|
|
|
5397
4592
|
*/
|
|
5398
4593
|
export interface EnableOrganizationAdminAccountRequest {
|
|
5399
4594
|
/**
|
|
5400
|
-
* <p>The Amazon Web Services account ID for the organization account to be enabled as a GuardDuty delegated
|
|
5401
|
-
* administrator.</p>
|
|
4595
|
+
* <p>The Amazon Web Services account ID for the organization account to be enabled as a GuardDuty delegated administrator.</p>
|
|
5402
4596
|
* @public
|
|
5403
4597
|
*/
|
|
5404
4598
|
AdminAccountId: string | undefined;
|
|
@@ -5409,8 +4603,7 @@ export interface EnableOrganizationAdminAccountRequest {
|
|
|
5409
4603
|
export interface EnableOrganizationAdminAccountResponse {
|
|
5410
4604
|
}
|
|
5411
4605
|
/**
|
|
5412
|
-
* <p>An instance of a threat intelligence detail that constitutes evidence for the
|
|
5413
|
-
* finding.</p>
|
|
4606
|
+
* <p>An instance of a threat intelligence detail that constitutes evidence for the finding.</p>
|
|
5414
4607
|
* @public
|
|
5415
4608
|
*/
|
|
5416
4609
|
export interface ThreatIntelligenceDetail {
|
|
@@ -5420,8 +4613,7 @@ export interface ThreatIntelligenceDetail {
|
|
|
5420
4613
|
*/
|
|
5421
4614
|
ThreatListName?: string | undefined;
|
|
5422
4615
|
/**
|
|
5423
|
-
* <p>A list of names of the threats in the threat intelligence list that triggered the
|
|
5424
|
-
* finding.</p>
|
|
4616
|
+
* <p>A list of names of the threats in the threat intelligence list that triggered the finding.</p>
|
|
5425
4617
|
* @public
|
|
5426
4618
|
*/
|
|
5427
4619
|
ThreatNames?: string[] | undefined;
|
|
@@ -5539,8 +4731,7 @@ export interface InstanceDetails {
|
|
|
5539
4731
|
*/
|
|
5540
4732
|
InstanceType?: string | undefined;
|
|
5541
4733
|
/**
|
|
5542
|
-
* <p>The Amazon Resource Name (ARN) of the Amazon Web Services Outpost. Only applicable to Amazon Web Services Outposts
|
|
5543
|
-
* instances.</p>
|
|
4734
|
+
* <p>The Amazon Resource Name (ARN) of the Amazon Web Services Outpost. Only applicable to Amazon Web Services Outposts instances.</p>
|
|
5544
4735
|
* @public
|
|
5545
4736
|
*/
|
|
5546
4737
|
OutpostArn?: string | undefined;
|
|
@@ -5607,8 +4798,7 @@ export interface KubernetesUserDetails {
|
|
|
5607
4798
|
*/
|
|
5608
4799
|
Groups?: string[] | undefined;
|
|
5609
4800
|
/**
|
|
5610
|
-
* <p>Entity that assumes the IAM role
|
|
5611
|
-
* when Kubernetes RBAC permissions are assigned to that role.</p>
|
|
4801
|
+
* <p>Entity that assumes the IAM role when Kubernetes RBAC permissions are assigned to that role.</p>
|
|
5612
4802
|
* @public
|
|
5613
4803
|
*/
|
|
5614
4804
|
SessionName?: string[] | undefined;
|
|
@@ -5648,6 +4838,11 @@ export interface KubernetesWorkloadDetails {
|
|
|
5648
4838
|
* @public
|
|
5649
4839
|
*/
|
|
5650
4840
|
HostNetwork?: boolean | undefined;
|
|
4841
|
+
/**
|
|
4842
|
+
* <p>The service account name that is associated with a Kubernetes workload.</p>
|
|
4843
|
+
* @public
|
|
4844
|
+
*/
|
|
4845
|
+
ServiceAccountName?: string | undefined;
|
|
5651
4846
|
/**
|
|
5652
4847
|
* <p>Containers running as part of the Kubernetes workload.</p>
|
|
5653
4848
|
* @public
|
|
@@ -5658,11 +4853,6 @@ export interface KubernetesWorkloadDetails {
|
|
|
5658
4853
|
* @public
|
|
5659
4854
|
*/
|
|
5660
4855
|
Volumes?: Volume[] | undefined;
|
|
5661
|
-
/**
|
|
5662
|
-
* <p>The service account name that is associated with a Kubernetes workload.</p>
|
|
5663
|
-
* @public
|
|
5664
|
-
*/
|
|
5665
|
-
ServiceAccountName?: string | undefined;
|
|
5666
4856
|
/**
|
|
5667
4857
|
* <p>Whether the host IPC flag is enabled for the pods in the workload.</p>
|
|
5668
4858
|
* @public
|
|
@@ -5675,8 +4865,7 @@ export interface KubernetesWorkloadDetails {
|
|
|
5675
4865
|
HostPID?: boolean | undefined;
|
|
5676
4866
|
}
|
|
5677
4867
|
/**
|
|
5678
|
-
* <p>Details about Kubernetes resources such as a Kubernetes user or workload resource involved
|
|
5679
|
-
* in a Kubernetes finding.</p>
|
|
4868
|
+
* <p>Details about Kubernetes resources such as a Kubernetes user or workload resource involved in a Kubernetes finding.</p>
|
|
5680
4869
|
* @public
|
|
5681
4870
|
*/
|
|
5682
4871
|
export interface KubernetesDetails {
|
|
@@ -5733,8 +4922,7 @@ export interface LambdaDetails {
|
|
|
5733
4922
|
*/
|
|
5734
4923
|
Description?: string | undefined;
|
|
5735
4924
|
/**
|
|
5736
|
-
* <p>The timestamp when the Lambda function was last modified. This field is in the UTC date string
|
|
5737
|
-
* format <code>(2023-03-22T19:37:20.168Z)</code>.</p>
|
|
4925
|
+
* <p>The timestamp when the Lambda function was last modified. This field is in the UTC date string format <code>(2023-03-22T19:37:20.168Z)</code>.</p>
|
|
5738
4926
|
* @public
|
|
5739
4927
|
*/
|
|
5740
4928
|
LastModifiedAt?: Date | undefined;
|
|
@@ -5759,21 +4947,18 @@ export interface LambdaDetails {
|
|
|
5759
4947
|
*/
|
|
5760
4948
|
VpcConfig?: VpcConfig | undefined;
|
|
5761
4949
|
/**
|
|
5762
|
-
* <p>A list of tags attached to this resource, listed in the format of
|
|
5763
|
-
* <code>key</code>:<code>value</code> pair.</p>
|
|
4950
|
+
* <p>A list of tags attached to this resource, listed in the format of <code>key</code>:<code>value</code> pair.</p>
|
|
5764
4951
|
* @public
|
|
5765
4952
|
*/
|
|
5766
4953
|
Tags?: Tag[] | undefined;
|
|
5767
4954
|
}
|
|
5768
4955
|
/**
|
|
5769
|
-
* <p>Contains information about the resource type <code>RDSDBInstance</code> involved in a
|
|
5770
|
-
* GuardDuty finding.</p>
|
|
4956
|
+
* <p>Contains information about the resource type <code>RDSDBInstance</code> involved in a GuardDuty finding.</p>
|
|
5771
4957
|
* @public
|
|
5772
4958
|
*/
|
|
5773
4959
|
export interface RdsDbInstanceDetails {
|
|
5774
4960
|
/**
|
|
5775
|
-
* <p>The identifier associated to the database instance that was involved in the
|
|
5776
|
-
* finding.</p>
|
|
4961
|
+
* <p>The identifier associated to the database instance that was involved in the finding.</p>
|
|
5777
4962
|
* @public
|
|
5778
4963
|
*/
|
|
5779
4964
|
DbInstanceIdentifier?: string | undefined;
|
|
@@ -5788,20 +4973,17 @@ export interface RdsDbInstanceDetails {
|
|
|
5788
4973
|
*/
|
|
5789
4974
|
EngineVersion?: string | undefined;
|
|
5790
4975
|
/**
|
|
5791
|
-
* <p>The identifier of the database cluster that contains the database instance ID involved in
|
|
5792
|
-
* the finding.</p>
|
|
4976
|
+
* <p>The identifier of the database cluster that contains the database instance ID involved in the finding.</p>
|
|
5793
4977
|
* @public
|
|
5794
4978
|
*/
|
|
5795
4979
|
DbClusterIdentifier?: string | undefined;
|
|
5796
4980
|
/**
|
|
5797
|
-
* <p>The Amazon Resource Name (ARN) that identifies the database instance involved in the
|
|
5798
|
-
* finding.</p>
|
|
4981
|
+
* <p>The Amazon Resource Name (ARN) that identifies the database instance involved in the finding.</p>
|
|
5799
4982
|
* @public
|
|
5800
4983
|
*/
|
|
5801
4984
|
DbInstanceArn?: string | undefined;
|
|
5802
4985
|
/**
|
|
5803
|
-
* <p>The unique ID of the database resource involved in the activity that prompted GuardDuty
|
|
5804
|
-
* to generate the finding.</p>
|
|
4986
|
+
* <p>The unique ID of the database resource involved in the activity that prompted GuardDuty to generate the finding.</p>
|
|
5805
4987
|
* @public
|
|
5806
4988
|
*/
|
|
5807
4989
|
DbiResourceId?: string | undefined;
|
|
@@ -5812,8 +4994,7 @@ export interface RdsDbInstanceDetails {
|
|
|
5812
4994
|
Tags?: Tag[] | undefined;
|
|
5813
4995
|
}
|
|
5814
4996
|
/**
|
|
5815
|
-
* <p>Contains information about the user and authentication details for a database instance
|
|
5816
|
-
* involved in the finding.</p>
|
|
4997
|
+
* <p>Contains information about the user and authentication details for a database instance involved in the finding.</p>
|
|
5817
4998
|
* @public
|
|
5818
4999
|
*/
|
|
5819
5000
|
export interface RdsDbUserDetails {
|
|
@@ -5844,8 +5025,7 @@ export interface RdsDbUserDetails {
|
|
|
5844
5025
|
AuthMethod?: string | undefined;
|
|
5845
5026
|
}
|
|
5846
5027
|
/**
|
|
5847
|
-
* <p>Contains information about the resource type <code>RDSLimitlessDB</code> that is involved in a GuardDuty
|
|
5848
|
-
* finding.</p>
|
|
5028
|
+
* <p>Contains information about the resource type <code>RDSLimitlessDB</code> that is involved in a GuardDuty finding.</p>
|
|
5849
5029
|
* @public
|
|
5850
5030
|
*/
|
|
5851
5031
|
export interface RdsLimitlessDbDetails {
|
|
@@ -5907,10 +5087,7 @@ export interface RecoveryPointDetails {
|
|
|
5907
5087
|
*/
|
|
5908
5088
|
export interface Owner {
|
|
5909
5089
|
/**
|
|
5910
|
-
* <p>The canonical user ID of the bucket owner. For information about locating your canonical
|
|
5911
|
-
* user ID see <a href="https://docs.aws.amazon.com/general/latest/gr/acct-identifiers.html#FindingCanonicalId">Finding Your Account
|
|
5912
|
-
* Canonical User ID.</a>
|
|
5913
|
-
* </p>
|
|
5090
|
+
* <p>The canonical user ID of the bucket owner. For information about locating your canonical user ID see <a href="https://docs.aws.amazon.com/general/latest/gr/acct-identifiers.html#FindingCanonicalId">Finding Your Account Canonical User ID.</a> </p>
|
|
5914
5091
|
* @public
|
|
5915
5092
|
*/
|
|
5916
5093
|
Id?: string | undefined;
|
|
@@ -5942,8 +5119,7 @@ export interface PublicAccess {
|
|
|
5942
5119
|
*/
|
|
5943
5120
|
PermissionConfiguration?: PermissionConfiguration | undefined;
|
|
5944
5121
|
/**
|
|
5945
|
-
* <p>Describes the effective permission on this bucket after factoring all attached
|
|
5946
|
-
* policies.</p>
|
|
5122
|
+
* <p>Describes the effective permission on this bucket after factoring all attached policies.</p>
|
|
5947
5123
|
* @public
|
|
5948
5124
|
*/
|
|
5949
5125
|
EffectivePermission?: string | undefined;
|
|
@@ -5964,8 +5140,7 @@ export interface S3ObjectDetail {
|
|
|
5964
5140
|
*/
|
|
5965
5141
|
Key?: string | undefined;
|
|
5966
5142
|
/**
|
|
5967
|
-
* <p>The entity tag is a hash of the S3 object. The ETag reflects changes only to the contents of
|
|
5968
|
-
* an object, and not its metadata.</p>
|
|
5143
|
+
* <p>The entity tag is a hash of the S3 object. The ETag reflects changes only to the contents of an object, and not its metadata.</p>
|
|
5969
5144
|
* @public
|
|
5970
5145
|
*/
|
|
5971
5146
|
ETag?: string | undefined;
|
|
@@ -6032,14 +5207,12 @@ export interface S3BucketDetail {
|
|
|
6032
5207
|
S3ObjectDetails?: S3ObjectDetail[] | undefined;
|
|
6033
5208
|
}
|
|
6034
5209
|
/**
|
|
6035
|
-
* <p>Contains information about the Amazon Web Services resource associated with the activity that prompted
|
|
6036
|
-
* GuardDuty to generate a finding.</p>
|
|
5210
|
+
* <p>Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
6037
5211
|
* @public
|
|
6038
5212
|
*/
|
|
6039
5213
|
export interface Resource {
|
|
6040
5214
|
/**
|
|
6041
|
-
* <p>The IAM access key details (user information) of a user that engaged in the activity that
|
|
6042
|
-
* prompted GuardDuty to generate a finding.</p>
|
|
5215
|
+
* <p>The IAM access key details (user information) of a user that engaged in the activity that prompted GuardDuty to generate a finding.</p>
|
|
6043
5216
|
* @public
|
|
6044
5217
|
*/
|
|
6045
5218
|
AccessKeyDetails?: AccessKeyDetails | undefined;
|
|
@@ -6049,8 +5222,7 @@ export interface Resource {
|
|
|
6049
5222
|
*/
|
|
6050
5223
|
S3BucketDetails?: S3BucketDetail[] | undefined;
|
|
6051
5224
|
/**
|
|
6052
|
-
* <p>The information about the EC2 instance associated with the activity that prompted
|
|
6053
|
-
* GuardDuty to generate a finding.</p>
|
|
5225
|
+
* <p>The information about the EC2 instance associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
6054
5226
|
* @public
|
|
6055
5227
|
*/
|
|
6056
5228
|
InstanceDetails?: InstanceDetails | undefined;
|
|
@@ -6085,8 +5257,12 @@ export interface Resource {
|
|
|
6085
5257
|
*/
|
|
6086
5258
|
ContainerDetails?: Container | undefined;
|
|
6087
5259
|
/**
|
|
6088
|
-
* <p>Contains information about the
|
|
6089
|
-
*
|
|
5260
|
+
* <p>Contains information about the Lambda function that was involved in a finding.</p>
|
|
5261
|
+
* @public
|
|
5262
|
+
*/
|
|
5263
|
+
LambdaDetails?: LambdaDetails | undefined;
|
|
5264
|
+
/**
|
|
5265
|
+
* <p>Contains information about the database instance to which an anomalous login attempt was made.</p>
|
|
6090
5266
|
* @public
|
|
6091
5267
|
*/
|
|
6092
5268
|
RdsDbInstanceDetails?: RdsDbInstanceDetails | undefined;
|
|
@@ -6096,16 +5272,10 @@ export interface Resource {
|
|
|
6096
5272
|
*/
|
|
6097
5273
|
RdsLimitlessDbDetails?: RdsLimitlessDbDetails | undefined;
|
|
6098
5274
|
/**
|
|
6099
|
-
* <p>Contains information about the user details through which anomalous login attempt was
|
|
6100
|
-
* made.</p>
|
|
5275
|
+
* <p>Contains information about the user details through which anomalous login attempt was made.</p>
|
|
6101
5276
|
* @public
|
|
6102
5277
|
*/
|
|
6103
5278
|
RdsDbUserDetails?: RdsDbUserDetails | undefined;
|
|
6104
|
-
/**
|
|
6105
|
-
* <p>Contains information about the Lambda function that was involved in a finding.</p>
|
|
6106
|
-
* @public
|
|
6107
|
-
*/
|
|
6108
|
-
LambdaDetails?: LambdaDetails | undefined;
|
|
6109
5279
|
/**
|
|
6110
5280
|
* <p>Contains details about the EBS snapshot that was scanned.</p>
|
|
6111
5281
|
* @public
|
|
@@ -6144,8 +5314,7 @@ export interface ServiceAdditionalInfo {
|
|
|
6144
5314
|
*/
|
|
6145
5315
|
export interface IncrementalScanDetails {
|
|
6146
5316
|
/**
|
|
6147
|
-
* <p>Amazon Resource Name (ARN) of the baseline resource used for incremental scanning. The scan will only
|
|
6148
|
-
* process changes since this baseline resource was created.</p>
|
|
5317
|
+
* <p>Amazon Resource Name (ARN) of the baseline resource used for incremental scanning. The scan will only process changes since this baseline resource was created.</p>
|
|
6149
5318
|
* @public
|
|
6150
5319
|
*/
|
|
6151
5320
|
BaselineResourceArn: string | undefined;
|
|
@@ -6193,8 +5362,7 @@ export interface ItemDetails {
|
|
|
6193
5362
|
AdditionalInfo?: AdditionalInfo | undefined;
|
|
6194
5363
|
}
|
|
6195
5364
|
/**
|
|
6196
|
-
* <p>Information about the nested item path and hash of the protected
|
|
6197
|
-
* resource.</p>
|
|
5365
|
+
* <p>Information about the nested item path and hash of the protected resource.</p>
|
|
6198
5366
|
* @public
|
|
6199
5367
|
*/
|
|
6200
5368
|
export interface ItemPath {
|
|
@@ -6210,8 +5378,7 @@ export interface ItemPath {
|
|
|
6210
5378
|
Hash?: string | undefined;
|
|
6211
5379
|
}
|
|
6212
5380
|
/**
|
|
6213
|
-
* <p>Information about the detected threats associated with the
|
|
6214
|
-
* generated finding.</p>
|
|
5381
|
+
* <p>Information about the detected threats associated with the generated finding.</p>
|
|
6215
5382
|
* @public
|
|
6216
5383
|
*/
|
|
6217
5384
|
export interface Threat {
|
|
@@ -6226,8 +5393,7 @@ export interface Threat {
|
|
|
6226
5393
|
*/
|
|
6227
5394
|
Source?: string | undefined;
|
|
6228
5395
|
/**
|
|
6229
|
-
* <p>Information about the nested item path and
|
|
6230
|
-
* hash of the protected resource.</p>
|
|
5396
|
+
* <p>Information about the nested item path and hash of the protected resource.</p>
|
|
6231
5397
|
* @public
|
|
6232
5398
|
*/
|
|
6233
5399
|
ItemPaths?: ItemPath[] | undefined;
|
|
@@ -6253,8 +5419,7 @@ export interface Threat {
|
|
|
6253
5419
|
*/
|
|
6254
5420
|
export interface MalwareScanDetails {
|
|
6255
5421
|
/**
|
|
6256
|
-
* <p>Information about the detected threats associated with the
|
|
6257
|
-
* generated GuardDuty finding.</p>
|
|
5422
|
+
* <p>Information about the detected threats associated with the generated GuardDuty finding.</p>
|
|
6258
5423
|
* @public
|
|
6259
5424
|
*/
|
|
6260
5425
|
Threats?: Threat[] | undefined;
|
|
@@ -6330,8 +5495,7 @@ export interface LineageObject {
|
|
|
6330
5495
|
*/
|
|
6331
5496
|
Euid?: number | undefined;
|
|
6332
5497
|
/**
|
|
6333
|
-
* <p>The unique ID of the parent process. This ID is assigned to the parent process by
|
|
6334
|
-
* GuardDuty.</p>
|
|
5498
|
+
* <p>The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.</p>
|
|
6335
5499
|
* @public
|
|
6336
5500
|
*/
|
|
6337
5501
|
ParentUuid?: string | undefined;
|
|
@@ -6382,8 +5546,7 @@ export interface ProcessDetails {
|
|
|
6382
5546
|
*/
|
|
6383
5547
|
Uuid?: string | undefined;
|
|
6384
5548
|
/**
|
|
6385
|
-
* <p>The unique ID of the parent process. This ID is assigned to the parent process by
|
|
6386
|
-
* GuardDuty.</p>
|
|
5549
|
+
* <p>The unique ID of the parent process. This ID is assigned to the parent process by GuardDuty.</p>
|
|
6387
5550
|
* @public
|
|
6388
5551
|
*/
|
|
6389
5552
|
ParentUuid?: string | undefined;
|
|
@@ -6414,14 +5577,12 @@ export interface ProcessDetails {
|
|
|
6414
5577
|
*/
|
|
6415
5578
|
export interface RuntimeContext {
|
|
6416
5579
|
/**
|
|
6417
|
-
* <p>Information about the process that modified the current process. This is available for
|
|
6418
|
-
* multiple finding types.</p>
|
|
5580
|
+
* <p>Information about the process that modified the current process. This is available for multiple finding types.</p>
|
|
6419
5581
|
* @public
|
|
6420
5582
|
*/
|
|
6421
5583
|
ModifyingProcess?: ProcessDetails | undefined;
|
|
6422
5584
|
/**
|
|
6423
|
-
* <p>The timestamp at which the process modified the current process. The timestamp is in UTC date string
|
|
6424
|
-
* format.</p>
|
|
5585
|
+
* <p>The timestamp at which the process modified the current process. The timestamp is in UTC date string format.</p>
|
|
6425
5586
|
* @public
|
|
6426
5587
|
*/
|
|
6427
5588
|
ModifiedAt?: Date | undefined;
|
|
@@ -6471,8 +5632,7 @@ export interface RuntimeContext {
|
|
|
6471
5632
|
*/
|
|
6472
5633
|
FileSystemType?: string | undefined;
|
|
6473
5634
|
/**
|
|
6474
|
-
* <p>Represents options that control the behavior of a runtime operation or action. For
|
|
6475
|
-
* example, a filesystem mount operation may contain a read-only flag.</p>
|
|
5635
|
+
* <p>Represents options that control the behavior of a runtime operation or action. For example, a filesystem mount operation may contain a read-only flag.</p>
|
|
6476
5636
|
* @public
|
|
6477
5637
|
*/
|
|
6478
5638
|
Flags?: string[] | undefined;
|
|
@@ -6502,15 +5662,12 @@ export interface RuntimeContext {
|
|
|
6502
5662
|
*/
|
|
6503
5663
|
TargetProcess?: ProcessDetails | undefined;
|
|
6504
5664
|
/**
|
|
6505
|
-
* <p>Represents the communication protocol associated with the address. For example, the address
|
|
6506
|
-
* family <code>AF_INET</code> is used for IP version of 4 protocol.</p>
|
|
5665
|
+
* <p>Represents the communication protocol associated with the address. For example, the address family <code>AF_INET</code> is used for IP version of 4 protocol.</p>
|
|
6507
5666
|
* @public
|
|
6508
5667
|
*/
|
|
6509
5668
|
AddressFamily?: string | undefined;
|
|
6510
5669
|
/**
|
|
6511
|
-
* <p>Specifies a particular protocol within the address family. Usually there is a single
|
|
6512
|
-
* protocol in address families. For example, the address family <code>AF_INET</code> only has
|
|
6513
|
-
* the IP protocol.</p>
|
|
5670
|
+
* <p>Specifies a particular protocol within the address family. Usually there is a single protocol in address families. For example, the address family <code>AF_INET</code> only has the IP protocol.</p>
|
|
6514
5671
|
* @public
|
|
6515
5672
|
*/
|
|
6516
5673
|
IanaProtocolNumber?: number | undefined;
|
|
@@ -6525,8 +5682,7 @@ export interface RuntimeContext {
|
|
|
6525
5682
|
*/
|
|
6526
5683
|
ToolName?: string | undefined;
|
|
6527
5684
|
/**
|
|
6528
|
-
* <p>Category that the tool belongs to. Some of the examples
|
|
6529
|
-
* are Backdoor Tool, Pentest Tool, Network Scanner, and Network Sniffer.</p>
|
|
5685
|
+
* <p>Category that the tool belongs to. Some of the examples are Backdoor Tool, Pentest Tool, Network Scanner, and Network Sniffer.</p>
|
|
6530
5686
|
* @public
|
|
6531
5687
|
*/
|
|
6532
5688
|
ToolCategory?: string | undefined;
|
|
@@ -6547,8 +5703,7 @@ export interface RuntimeContext {
|
|
|
6547
5703
|
ThreatFilePath?: string | undefined;
|
|
6548
5704
|
}
|
|
6549
5705
|
/**
|
|
6550
|
-
* <p>Information about the process and any required context values for a specific
|
|
6551
|
-
* finding.</p>
|
|
5706
|
+
* <p>Information about the process and any required context values for a specific finding.</p>
|
|
6552
5707
|
* @public
|
|
6553
5708
|
*/
|
|
6554
5709
|
export interface RuntimeDetails {
|
|
@@ -6594,14 +5749,12 @@ export interface Service {
|
|
|
6594
5749
|
*/
|
|
6595
5750
|
DetectorId?: string | undefined;
|
|
6596
5751
|
/**
|
|
6597
|
-
* <p>The first-seen timestamp of the activity that prompted GuardDuty to generate this
|
|
6598
|
-
* finding.</p>
|
|
5752
|
+
* <p>The first-seen timestamp of the activity that prompted GuardDuty to generate this finding.</p>
|
|
6599
5753
|
* @public
|
|
6600
5754
|
*/
|
|
6601
5755
|
EventFirstSeen?: string | undefined;
|
|
6602
5756
|
/**
|
|
6603
|
-
* <p>The last-seen timestamp of the activity that prompted GuardDuty to generate this
|
|
6604
|
-
* finding.</p>
|
|
5757
|
+
* <p>The last-seen timestamp of the activity that prompted GuardDuty to generate this finding.</p>
|
|
6605
5758
|
* @public
|
|
6606
5759
|
*/
|
|
6607
5760
|
EventLastSeen?: string | undefined;
|
|
@@ -6636,8 +5789,7 @@ export interface Service {
|
|
|
6636
5789
|
*/
|
|
6637
5790
|
EbsVolumeScanDetails?: EbsVolumeScanDetails | undefined;
|
|
6638
5791
|
/**
|
|
6639
|
-
* <p>Information about the process and any required context values for a specific
|
|
6640
|
-
* finding</p>
|
|
5792
|
+
* <p>Information about the process and any required context values for a specific finding</p>
|
|
6641
5793
|
* @public
|
|
6642
5794
|
*/
|
|
6643
5795
|
RuntimeDetails?: RuntimeDetails | undefined;
|
|
@@ -6653,8 +5805,7 @@ export interface Service {
|
|
|
6653
5805
|
MalwareScanDetails?: MalwareScanDetails | undefined;
|
|
6654
5806
|
}
|
|
6655
5807
|
/**
|
|
6656
|
-
* <p>Contains information about the finding that is generated when abnormal or suspicious
|
|
6657
|
-
* activity is detected.</p>
|
|
5808
|
+
* <p>Contains information about the finding that is generated when abnormal or suspicious activity is detected.</p>
|
|
6658
5809
|
* @public
|
|
6659
5810
|
*/
|
|
6660
5811
|
export interface Finding {
|
|
@@ -6694,17 +5845,12 @@ export interface Finding {
|
|
|
6694
5845
|
*/
|
|
6695
5846
|
Partition?: string | undefined;
|
|
6696
5847
|
/**
|
|
6697
|
-
* <p>The Region where the finding was generated. For findings generated
|
|
6698
|
-
* from <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-global-service-events">Global Service Events</a>, the Region value in the finding might differ from the Region where
|
|
6699
|
-
* GuardDuty identifies the potential threat. For more information,
|
|
6700
|
-
* see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html#cloudtrail_global">How GuardDuty
|
|
6701
|
-
* handles Amazon Web Services CloudTrail global events</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
5848
|
+
* <p>The Region where the finding was generated. For findings generated from <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-global-service-events">Global Service Events</a>, the Region value in the finding might differ from the Region where GuardDuty identifies the potential threat. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html#cloudtrail_global">How GuardDuty handles Amazon Web Services CloudTrail global events</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
6702
5849
|
* @public
|
|
6703
5850
|
*/
|
|
6704
5851
|
Region: string | undefined;
|
|
6705
5852
|
/**
|
|
6706
|
-
* <p>Contains information about the Amazon Web Services resource associated with the activity that prompted
|
|
6707
|
-
* GuardDuty to generate a finding.</p>
|
|
5853
|
+
* <p>Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.</p>
|
|
6708
5854
|
* @public
|
|
6709
5855
|
*/
|
|
6710
5856
|
Resource: Resource | undefined;
|
|
@@ -6745,8 +5891,7 @@ export interface Finding {
|
|
|
6745
5891
|
AssociatedAttackSequenceArn?: string | undefined;
|
|
6746
5892
|
}
|
|
6747
5893
|
/**
|
|
6748
|
-
* <p>Information about each finding type associated with the
|
|
6749
|
-
* <code>groupedByFindingType</code> statistics.</p>
|
|
5894
|
+
* <p>Information about each finding type associated with the <code>groupedByFindingType</code> statistics.</p>
|
|
6750
5895
|
* @public
|
|
6751
5896
|
*/
|
|
6752
5897
|
export interface FindingTypeStatistics {
|
|
@@ -6767,8 +5912,7 @@ export interface FindingTypeStatistics {
|
|
|
6767
5912
|
TotalFindings?: number | undefined;
|
|
6768
5913
|
}
|
|
6769
5914
|
/**
|
|
6770
|
-
* <p>Information about each resource type associated with the
|
|
6771
|
-
* <code>groupedByResource</code> statistics.</p>
|
|
5915
|
+
* <p>Information about each resource type associated with the <code>groupedByResource</code> statistics.</p>
|
|
6772
5916
|
* @public
|
|
6773
5917
|
*/
|
|
6774
5918
|
export interface ResourceStatistics {
|
|
@@ -6783,53 +5927,7 @@ export interface ResourceStatistics {
|
|
|
6783
5927
|
*/
|
|
6784
5928
|
LastGeneratedAt?: Date | undefined;
|
|
6785
5929
|
/**
|
|
6786
|
-
* <p>ID associated with each resource. The following list provides the mapping of the resource type
|
|
6787
|
-
* and resource ID.</p>
|
|
6788
|
-
* <p class="title">
|
|
6789
|
-
* <b>Mapping of resource and resource ID</b>
|
|
6790
|
-
* </p>
|
|
6791
|
-
* <ul>
|
|
6792
|
-
* <li>
|
|
6793
|
-
* <p>AccessKey - <code>resource.accessKeyDetails.accessKeyId</code>
|
|
6794
|
-
* </p>
|
|
6795
|
-
* </li>
|
|
6796
|
-
* <li>
|
|
6797
|
-
* <p>Container - <code>resource.containerDetails.id</code>
|
|
6798
|
-
* </p>
|
|
6799
|
-
* </li>
|
|
6800
|
-
* <li>
|
|
6801
|
-
* <p>ECSCluster - <code>resource.ecsClusterDetails.name</code>
|
|
6802
|
-
* </p>
|
|
6803
|
-
* </li>
|
|
6804
|
-
* <li>
|
|
6805
|
-
* <p>EKSCluster - <code>resource.eksClusterDetails.name</code>
|
|
6806
|
-
* </p>
|
|
6807
|
-
* </li>
|
|
6808
|
-
* <li>
|
|
6809
|
-
* <p>Instance - <code>resource.instanceDetails.instanceId</code>
|
|
6810
|
-
* </p>
|
|
6811
|
-
* </li>
|
|
6812
|
-
* <li>
|
|
6813
|
-
* <p>KubernetesCluster - <code>resource.kubernetesDetails.kubernetesWorkloadDetails.name</code>
|
|
6814
|
-
* </p>
|
|
6815
|
-
* </li>
|
|
6816
|
-
* <li>
|
|
6817
|
-
* <p>Lambda - <code>resource.lambdaDetails.functionName</code>
|
|
6818
|
-
* </p>
|
|
6819
|
-
* </li>
|
|
6820
|
-
* <li>
|
|
6821
|
-
* <p>RDSDBInstance - <code>resource.rdsDbInstanceDetails.dbInstanceIdentifier</code>
|
|
6822
|
-
* </p>
|
|
6823
|
-
* </li>
|
|
6824
|
-
* <li>
|
|
6825
|
-
* <p>S3Bucket - <code>resource.s3BucketDetails.name</code>
|
|
6826
|
-
* </p>
|
|
6827
|
-
* </li>
|
|
6828
|
-
* <li>
|
|
6829
|
-
* <p>S3Object - <code>resource.s3BucketDetails.name</code>
|
|
6830
|
-
* </p>
|
|
6831
|
-
* </li>
|
|
6832
|
-
* </ul>
|
|
5930
|
+
* <p>ID associated with each resource. The following list provides the mapping of the resource type and resource ID.</p> <p class="title"> <b>Mapping of resource and resource ID</b> </p> <ul> <li> <p>AccessKey - <code>resource.accessKeyDetails.accessKeyId</code> </p> </li> <li> <p>Container - <code>resource.containerDetails.id</code> </p> </li> <li> <p>ECSCluster - <code>resource.ecsClusterDetails.name</code> </p> </li> <li> <p>EKSCluster - <code>resource.eksClusterDetails.name</code> </p> </li> <li> <p>Instance - <code>resource.instanceDetails.instanceId</code> </p> </li> <li> <p>KubernetesCluster - <code>resource.kubernetesDetails.kubernetesWorkloadDetails.name</code> </p> </li> <li> <p>Lambda - <code>resource.lambdaDetails.functionName</code> </p> </li> <li> <p>RDSDBInstance - <code>resource.rdsDbInstanceDetails.dbInstanceIdentifier</code> </p> </li> <li> <p>S3Bucket - <code>resource.s3BucketDetails.name</code> </p> </li> <li> <p>S3Object - <code>resource.s3BucketDetails.name</code> </p> </li> </ul>
|
|
6833
5931
|
* @public
|
|
6834
5932
|
*/
|
|
6835
5933
|
ResourceId?: string | undefined;
|
|
@@ -6888,12 +5986,7 @@ export interface FindingStatistics {
|
|
|
6888
5986
|
*/
|
|
6889
5987
|
GroupedByDate?: DateStatistics[] | undefined;
|
|
6890
5988
|
/**
|
|
6891
|
-
* <p>Represents a list of map of finding types with a count of total findings generated for each type. </p>
|
|
6892
|
-
* <p>Based on the <code>orderBy</code>
|
|
6893
|
-
* parameter, this request returns either the most occurring finding types or the least occurring finding types. If the
|
|
6894
|
-
* <code>orderBy</code> parameter is <code>ASC</code>, this will represent the least occurring finding types in
|
|
6895
|
-
* your account; otherwise, this will represent the most occurring finding types. The default
|
|
6896
|
-
* value of <code>orderBy</code> is <code>DESC</code>.</p>
|
|
5989
|
+
* <p>Represents a list of map of finding types with a count of total findings generated for each type. </p> <p>Based on the <code>orderBy</code> parameter, this request returns either the most occurring finding types or the least occurring finding types. If the <code>orderBy</code> parameter is <code>ASC</code>, this will represent the least occurring finding types in your account; otherwise, this will represent the most occurring finding types. The default value of <code>orderBy</code> is <code>DESC</code>.</p>
|
|
6897
5990
|
* @public
|
|
6898
5991
|
*/
|
|
6899
5992
|
GroupedByFindingType?: FindingTypeStatistics[] | undefined;
|
|
@@ -6933,9 +6026,7 @@ export interface GetAdministratorAccountResponse {
|
|
|
6933
6026
|
*/
|
|
6934
6027
|
export interface GetCoverageStatisticsRequest {
|
|
6935
6028
|
/**
|
|
6936
|
-
* <p>The unique ID of the GuardDuty detector.</p>
|
|
6937
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
6938
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6029
|
+
* <p>The unique ID of the GuardDuty detector.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6939
6030
|
* @public
|
|
6940
6031
|
*/
|
|
6941
6032
|
DetectorId: string | undefined;
|
|
@@ -6955,8 +6046,7 @@ export interface GetCoverageStatisticsRequest {
|
|
|
6955
6046
|
*/
|
|
6956
6047
|
export interface GetCoverageStatisticsResponse {
|
|
6957
6048
|
/**
|
|
6958
|
-
* <p>Represents the count aggregated by the <code>statusCode</code> and
|
|
6959
|
-
* <code>resourceType</code>.</p>
|
|
6049
|
+
* <p>Represents the count aggregated by the <code>statusCode</code> and <code>resourceType</code>.</p>
|
|
6960
6050
|
* @public
|
|
6961
6051
|
*/
|
|
6962
6052
|
CoverageStatistics?: CoverageStatistics | undefined;
|
|
@@ -6966,9 +6056,7 @@ export interface GetCoverageStatisticsResponse {
|
|
|
6966
6056
|
*/
|
|
6967
6057
|
export interface GetDetectorRequest {
|
|
6968
6058
|
/**
|
|
6969
|
-
* <p>The unique ID of the detector that you want to get.</p>
|
|
6970
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
6971
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6059
|
+
* <p>The unique ID of the detector that you want to get.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6972
6060
|
* @public
|
|
6973
6061
|
*/
|
|
6974
6062
|
DetectorId: string | undefined;
|
|
@@ -7025,9 +6113,7 @@ export interface GetDetectorResponse {
|
|
|
7025
6113
|
*/
|
|
7026
6114
|
export interface GetFilterRequest {
|
|
7027
6115
|
/**
|
|
7028
|
-
* <p>The unique ID of the detector that is associated with this filter.</p>
|
|
7029
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7030
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6116
|
+
* <p>The unique ID of the detector that is associated with this filter.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7031
6117
|
* @public
|
|
7032
6118
|
*/
|
|
7033
6119
|
DetectorId: string | undefined;
|
|
@@ -7057,8 +6143,7 @@ export interface GetFilterResponse {
|
|
|
7057
6143
|
*/
|
|
7058
6144
|
Action: FilterAction | undefined;
|
|
7059
6145
|
/**
|
|
7060
|
-
* <p>Specifies the position of the filter in the list of current filters. Also specifies the
|
|
7061
|
-
* order in which this filter is applied to the findings.</p>
|
|
6146
|
+
* <p>Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.</p>
|
|
7062
6147
|
* @public
|
|
7063
6148
|
*/
|
|
7064
6149
|
Rank?: number | undefined;
|
|
@@ -7078,10 +6163,7 @@ export interface GetFilterResponse {
|
|
|
7078
6163
|
*/
|
|
7079
6164
|
export interface GetFindingsRequest {
|
|
7080
6165
|
/**
|
|
7081
|
-
* <p>The ID of the detector that specifies the GuardDuty service whose findings you want to
|
|
7082
|
-
* retrieve.</p>
|
|
7083
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7084
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6166
|
+
* <p>The ID of the detector that specifies the GuardDuty service whose findings you want to retrieve.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7085
6167
|
* @public
|
|
7086
6168
|
*/
|
|
7087
6169
|
DetectorId: string | undefined;
|
|
@@ -7111,10 +6193,7 @@ export interface GetFindingsResponse {
|
|
|
7111
6193
|
*/
|
|
7112
6194
|
export interface GetFindingsStatisticsRequest {
|
|
7113
6195
|
/**
|
|
7114
|
-
* <p>The ID of the detector whose findings statistics you
|
|
7115
|
-
* want to retrieve.</p>
|
|
7116
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7117
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6196
|
+
* <p>The ID of the detector whose findings statistics you want to retrieve.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7118
6197
|
* @public
|
|
7119
6198
|
*/
|
|
7120
6199
|
DetectorId: string | undefined;
|
|
@@ -7136,15 +6215,12 @@ export interface GetFindingsStatisticsRequest {
|
|
|
7136
6215
|
*/
|
|
7137
6216
|
GroupBy?: GroupByType | undefined;
|
|
7138
6217
|
/**
|
|
7139
|
-
* <p>Displays the sorted findings in the requested order. The default
|
|
7140
|
-
* value of <code>orderBy</code> is <code>DESC</code>.</p>
|
|
7141
|
-
* <p>You can use this parameter only with the <code>groupBy</code> parameter.</p>
|
|
6218
|
+
* <p>Displays the sorted findings in the requested order. The default value of <code>orderBy</code> is <code>DESC</code>.</p> <p>You can use this parameter only with the <code>groupBy</code> parameter.</p>
|
|
7142
6219
|
* @public
|
|
7143
6220
|
*/
|
|
7144
6221
|
OrderBy?: OrderBy | undefined;
|
|
7145
6222
|
/**
|
|
7146
|
-
* <p>The maximum number of results to be returned in the response. The default value is 25.</p>
|
|
7147
|
-
* <p>You can use this parameter only with the <code>groupBy</code> parameter.</p>
|
|
6223
|
+
* <p>The maximum number of results to be returned in the response. The default value is 25.</p> <p>You can use this parameter only with the <code>groupBy</code> parameter.</p>
|
|
7148
6224
|
* @public
|
|
7149
6225
|
*/
|
|
7150
6226
|
MaxResults?: number | undefined;
|
|
@@ -7159,8 +6235,7 @@ export interface GetFindingsStatisticsResponse {
|
|
|
7159
6235
|
*/
|
|
7160
6236
|
FindingStatistics: FindingStatistics | undefined;
|
|
7161
6237
|
/**
|
|
7162
|
-
* <p>The pagination parameter to be used on the next list operation to retrieve more items.</p>
|
|
7163
|
-
* <p>This parameter is currently not supported.</p>
|
|
6238
|
+
* <p>The pagination parameter to be used on the next list operation to retrieve more items.</p> <p>This parameter is currently not supported.</p>
|
|
7164
6239
|
* @public
|
|
7165
6240
|
*/
|
|
7166
6241
|
NextToken?: string | undefined;
|
|
@@ -7185,9 +6260,7 @@ export interface GetInvitationsCountResponse {
|
|
|
7185
6260
|
*/
|
|
7186
6261
|
export interface GetIPSetRequest {
|
|
7187
6262
|
/**
|
|
7188
|
-
* <p>The unique ID of the detector that is associated with the IPSet.</p>
|
|
7189
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7190
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6263
|
+
* <p>The unique ID of the detector that is associated with the IPSet.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7191
6264
|
* @public
|
|
7192
6265
|
*/
|
|
7193
6266
|
DetectorId: string | undefined;
|
|
@@ -7227,8 +6300,7 @@ export interface GetIPSetResponse {
|
|
|
7227
6300
|
*/
|
|
7228
6301
|
Tags?: Record<string, string> | undefined;
|
|
7229
6302
|
/**
|
|
7230
|
-
* <p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b> parameter. This field appears
|
|
7231
|
-
* in the response only if it was provided during IPSet creation or update.</p>
|
|
6303
|
+
* <p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b> parameter. This field appears in the response only if it was provided during IPSet creation or update.</p>
|
|
7232
6304
|
* @public
|
|
7233
6305
|
*/
|
|
7234
6306
|
ExpectedBucketOwner?: string | undefined;
|
|
@@ -7244,8 +6316,7 @@ export interface GetMalwareProtectionPlanRequest {
|
|
|
7244
6316
|
MalwareProtectionPlanId: string | undefined;
|
|
7245
6317
|
}
|
|
7246
6318
|
/**
|
|
7247
|
-
* <p>Information about the issue code and message associated to the status of
|
|
7248
|
-
* your Malware Protection plan.</p>
|
|
6319
|
+
* <p>Information about the issue code and message associated to the status of your Malware Protection plan.</p>
|
|
7249
6320
|
* @public
|
|
7250
6321
|
*/
|
|
7251
6322
|
export interface MalwareProtectionPlanStatusReason {
|
|
@@ -7255,10 +6326,7 @@ export interface MalwareProtectionPlanStatusReason {
|
|
|
7255
6326
|
*/
|
|
7256
6327
|
Code?: string | undefined;
|
|
7257
6328
|
/**
|
|
7258
|
-
* <p>Issue message that specifies the reason. For information
|
|
7259
|
-
* about potential troubleshooting steps, see
|
|
7260
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/troubleshoot-s3-malware-protection-status-errors.html">Troubleshooting Malware Protection for S3 status issues</a> in the
|
|
7261
|
-
* <i>Amazon GuardDuty User Guide</i>.</p>
|
|
6329
|
+
* <p>Issue message that specifies the reason. For information about potential troubleshooting steps, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/troubleshoot-s3-malware-protection-status-errors.html">Troubleshooting Malware Protection for S3 status issues</a> in the <i>Amazon GuardDuty User Guide</i>.</p>
|
|
7262
6330
|
* @public
|
|
7263
6331
|
*/
|
|
7264
6332
|
Message?: string | undefined;
|
|
@@ -7273,15 +6341,12 @@ export interface GetMalwareProtectionPlanResponse {
|
|
|
7273
6341
|
*/
|
|
7274
6342
|
Arn?: string | undefined;
|
|
7275
6343
|
/**
|
|
7276
|
-
* <p>Amazon Resource Name (ARN) of the IAM role that includes the permissions to scan and
|
|
7277
|
-
* add tags to the associated protected resource.</p>
|
|
6344
|
+
* <p>Amazon Resource Name (ARN) of the IAM role that includes the permissions to scan and add tags to the associated protected resource.</p>
|
|
7278
6345
|
* @public
|
|
7279
6346
|
*/
|
|
7280
6347
|
Role?: string | undefined;
|
|
7281
6348
|
/**
|
|
7282
|
-
* <p>Information about the protected resource that is associated with the created
|
|
7283
|
-
* Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported
|
|
7284
|
-
* protected resource.</p>
|
|
6349
|
+
* <p>Information about the protected resource that is associated with the created Malware Protection plan. Presently, <code>S3Bucket</code> is the only supported protected resource.</p>
|
|
7285
6350
|
* @public
|
|
7286
6351
|
*/
|
|
7287
6352
|
ProtectedResource?: CreateProtectedResource | undefined;
|
|
@@ -7301,8 +6366,7 @@ export interface GetMalwareProtectionPlanResponse {
|
|
|
7301
6366
|
*/
|
|
7302
6367
|
Status?: MalwareProtectionPlanStatus | undefined;
|
|
7303
6368
|
/**
|
|
7304
|
-
* <p>Information about the issue code and message associated to the status of
|
|
7305
|
-
* your Malware Protection plan.</p>
|
|
6369
|
+
* <p>Information about the issue code and message associated to the status of your Malware Protection plan.</p>
|
|
7306
6370
|
* @public
|
|
7307
6371
|
*/
|
|
7308
6372
|
StatusReasons?: MalwareProtectionPlanStatusReason[] | undefined;
|
|
@@ -7317,8 +6381,7 @@ export interface GetMalwareProtectionPlanResponse {
|
|
|
7317
6381
|
*/
|
|
7318
6382
|
export interface GetMalwareScanRequest {
|
|
7319
6383
|
/**
|
|
7320
|
-
* <p>A unique identifier that gets generated when you invoke the API without any error. Each malware scan has
|
|
7321
|
-
* a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.</p>
|
|
6384
|
+
* <p>A unique identifier that gets generated when you invoke the API without any error. Each malware scan has a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.</p>
|
|
7322
6385
|
* @public
|
|
7323
6386
|
*/
|
|
7324
6387
|
ScanId: string | undefined;
|
|
@@ -7489,24 +6552,17 @@ export interface GetMalwareScanResultDetails {
|
|
|
7489
6552
|
*/
|
|
7490
6553
|
export interface GetMalwareScanResponse {
|
|
7491
6554
|
/**
|
|
7492
|
-
* <p>A unique identifier associated with the malware scan. Each malware scan has
|
|
7493
|
-
* a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.</p>
|
|
6555
|
+
* <p>A unique identifier associated with the malware scan. Each malware scan has a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.</p>
|
|
7494
6556
|
* @public
|
|
7495
6557
|
*/
|
|
7496
6558
|
ScanId?: string | undefined;
|
|
7497
6559
|
/**
|
|
7498
|
-
* <p>The unique ID of the detector that is associated with the request, if it belongs to an account which is a GuardDuty customer.</p>
|
|
7499
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7500
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6560
|
+
* <p>The unique ID of the detector that is associated with the request, if it belongs to an account which is a GuardDuty customer.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7501
6561
|
* @public
|
|
7502
6562
|
*/
|
|
7503
6563
|
DetectorId?: string | undefined;
|
|
7504
6564
|
/**
|
|
7505
|
-
* <p>The unique detector ID of the administrator account that the request is associated with.
|
|
7506
|
-
* If the account is an administrator, the <code>AdminDetectorId</code> will be the same as the one used for
|
|
7507
|
-
* <code>DetectorId. If the customer is not a GuardDuty customer, this field will not be present.</code>.</p>
|
|
7508
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7509
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6565
|
+
* <p>The unique detector ID of the administrator account that the request is associated with. If the account is an administrator, the <code>AdminDetectorId</code> will be the same as the one used for <code>DetectorId. If the customer is not a GuardDuty customer, this field will not be present.</code>.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7510
6566
|
* @public
|
|
7511
6567
|
*/
|
|
7512
6568
|
AdminDetectorId?: string | undefined;
|
|
@@ -7586,9 +6642,7 @@ export interface GetMalwareScanResponse {
|
|
|
7586
6642
|
*/
|
|
7587
6643
|
export interface GetMalwareScanSettingsRequest {
|
|
7588
6644
|
/**
|
|
7589
|
-
* <p>The unique ID of the detector that is associated with this scan.</p>
|
|
7590
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7591
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6645
|
+
* <p>The unique ID of the detector that is associated with this scan.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7592
6646
|
* @public
|
|
7593
6647
|
*/
|
|
7594
6648
|
DetectorId: string | undefined;
|
|
@@ -7604,9 +6658,7 @@ export interface ScanConditionPair {
|
|
|
7604
6658
|
*/
|
|
7605
6659
|
Key: string | undefined;
|
|
7606
6660
|
/**
|
|
7607
|
-
* <p>Represents optional <b>value</b> in the map
|
|
7608
|
-
* condition. If not specified, only the <b>key</b> will be
|
|
7609
|
-
* matched.</p>
|
|
6661
|
+
* <p>Represents optional <b>value</b> in the map condition. If not specified, only the <b>key</b> will be matched.</p>
|
|
7610
6662
|
* @public
|
|
7611
6663
|
*/
|
|
7612
6664
|
Value?: string | undefined;
|
|
@@ -7617,28 +6669,23 @@ export interface ScanConditionPair {
|
|
|
7617
6669
|
*/
|
|
7618
6670
|
export interface ScanCondition {
|
|
7619
6671
|
/**
|
|
7620
|
-
* <p>Represents an <i>mapEqual</i>
|
|
7621
|
-
* <b></b> condition to be applied
|
|
7622
|
-
* to a single field when triggering for malware scan.</p>
|
|
6672
|
+
* <p>Represents an <i>mapEqual</i> <b/> condition to be applied to a single field when triggering for malware scan.</p>
|
|
7623
6673
|
* @public
|
|
7624
6674
|
*/
|
|
7625
6675
|
MapEquals: ScanConditionPair[] | undefined;
|
|
7626
6676
|
}
|
|
7627
6677
|
/**
|
|
7628
|
-
* <p>Contains information about criteria used to filter resources before triggering malware
|
|
7629
|
-
* scan.</p>
|
|
6678
|
+
* <p>Contains information about criteria used to filter resources before triggering malware scan.</p>
|
|
7630
6679
|
* @public
|
|
7631
6680
|
*/
|
|
7632
6681
|
export interface ScanResourceCriteria {
|
|
7633
6682
|
/**
|
|
7634
|
-
* <p>Represents condition that when matched will allow a malware scan for a certain
|
|
7635
|
-
* resource.</p>
|
|
6683
|
+
* <p>Represents condition that when matched will allow a malware scan for a certain resource.</p>
|
|
7636
6684
|
* @public
|
|
7637
6685
|
*/
|
|
7638
6686
|
Include?: Partial<Record<ScanCriterionKey, ScanCondition>> | undefined;
|
|
7639
6687
|
/**
|
|
7640
|
-
* <p>Represents condition that when matched will prevent a malware scan for a certain
|
|
7641
|
-
* resource.</p>
|
|
6688
|
+
* <p>Represents condition that when matched will prevent a malware scan for a certain resource.</p>
|
|
7642
6689
|
* @public
|
|
7643
6690
|
*/
|
|
7644
6691
|
Exclude?: Partial<Record<ScanCriterionKey, ScanCondition>> | undefined;
|
|
@@ -7664,9 +6711,7 @@ export interface GetMalwareScanSettingsResponse {
|
|
|
7664
6711
|
*/
|
|
7665
6712
|
export interface GetMasterAccountRequest {
|
|
7666
6713
|
/**
|
|
7667
|
-
* <p>The unique ID of the detector of the GuardDuty member account.</p>
|
|
7668
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7669
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6714
|
+
* <p>The unique ID of the detector of the GuardDuty member account.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7670
6715
|
* @public
|
|
7671
6716
|
*/
|
|
7672
6717
|
DetectorId: string | undefined;
|
|
@@ -7713,9 +6758,7 @@ export interface GetMasterAccountResponse {
|
|
|
7713
6758
|
*/
|
|
7714
6759
|
export interface GetMemberDetectorsRequest {
|
|
7715
6760
|
/**
|
|
7716
|
-
* <p>The detector ID for the administrator account.</p>
|
|
7717
|
-
* <p>To find the <code>detectorId</code> in the current Region, see the
|
|
7718
|
-
* Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
6761
|
+
* <p>The detector ID for the administrator account.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>
|
|
7719
6762
|
* @public
|
|
7720
6763
|
*/
|
|
7721
6764
|
DetectorId: string | undefined;
|