@aws-sdk/client-guardduty 3.229.0 → 3.233.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -9
- package/dist-cjs/endpoint/ruleset.js +1 -10
- package/dist-es/endpoint/ruleset.js +1 -10
- package/dist-types/GuardDuty.d.ts +10 -9
- package/dist-types/GuardDutyClient.d.ts +10 -9
- package/dist-types/endpoint/EndpointParameters.d.ts +1 -1
- package/dist-types/models/models_0.d.ts +7 -4
- package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +1 -1
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -11,20 +11,21 @@ AWS SDK for JavaScript GuardDuty Client for Node.js, Browser and React Native.
|
|
|
11
11
|
|
|
12
12
|
<p>Amazon GuardDuty is a continuous security monitoring service that analyzes and processes
|
|
13
13
|
the following data sources: VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event
|
|
14
|
-
logs, EKS audit logs, and
|
|
14
|
+
logs, EKS audit logs, DNS logs, and Amazon EBS volume data.
|
|
15
15
|
It uses threat intelligence
|
|
16
|
-
feeds
|
|
16
|
+
feeds, such as lists of malicious IPs and domains, and machine learning to identify
|
|
17
17
|
unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment.
|
|
18
18
|
This can include issues like escalations of privileges, uses of exposed credentials, or
|
|
19
|
-
communication with malicious IPs,
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
19
|
+
communication with malicious IPs, domains, or presence of malware on your
|
|
20
|
+
Amazon EC2 instances and container workloads. For example, GuardDuty can detect
|
|
21
|
+
compromised EC2 instances and container workloads serving malware, or mining bitcoin. </p>
|
|
22
|
+
<p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such
|
|
23
|
+
as unauthorized infrastructure deployments like EC2 instances deployed in a Region
|
|
23
24
|
that has never been used, or unusual API calls like a password policy change to reduce
|
|
24
25
|
password strength. </p>
|
|
25
|
-
<p>GuardDuty informs you
|
|
26
|
-
that you can view in the GuardDuty console or through Amazon
|
|
27
|
-
information, see the <i>
|
|
26
|
+
<p>GuardDuty informs you about the status of your Amazon Web Services environment by producing
|
|
27
|
+
security findings that you can view in the GuardDuty console or through Amazon EventBridge.
|
|
28
|
+
For more information, see the <i>
|
|
28
29
|
<a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
29
30
|
GuardDuty User Guide</a>
|
|
30
31
|
</i>. </p>
|
|
@@ -6,7 +6,7 @@ exports.ruleSet = {
|
|
|
6
6
|
parameters: {
|
|
7
7
|
Region: {
|
|
8
8
|
builtIn: "AWS::Region",
|
|
9
|
-
required:
|
|
9
|
+
required: true,
|
|
10
10
|
documentation: "The AWS region used to dispatch the request.",
|
|
11
11
|
type: "String",
|
|
12
12
|
},
|
|
@@ -56,15 +56,6 @@ exports.ruleSet = {
|
|
|
56
56
|
},
|
|
57
57
|
],
|
|
58
58
|
},
|
|
59
|
-
{
|
|
60
|
-
fn: "parseURL",
|
|
61
|
-
argv: [
|
|
62
|
-
{
|
|
63
|
-
ref: "Endpoint",
|
|
64
|
-
},
|
|
65
|
-
],
|
|
66
|
-
assign: "url",
|
|
67
|
-
},
|
|
68
59
|
],
|
|
69
60
|
type: "tree",
|
|
70
61
|
rules: [
|
|
@@ -3,7 +3,7 @@ export const ruleSet = {
|
|
|
3
3
|
parameters: {
|
|
4
4
|
Region: {
|
|
5
5
|
builtIn: "AWS::Region",
|
|
6
|
-
required:
|
|
6
|
+
required: true,
|
|
7
7
|
documentation: "The AWS region used to dispatch the request.",
|
|
8
8
|
type: "String",
|
|
9
9
|
},
|
|
@@ -53,15 +53,6 @@ export const ruleSet = {
|
|
|
53
53
|
},
|
|
54
54
|
],
|
|
55
55
|
},
|
|
56
|
-
{
|
|
57
|
-
fn: "parseURL",
|
|
58
|
-
argv: [
|
|
59
|
-
{
|
|
60
|
-
ref: "Endpoint",
|
|
61
|
-
},
|
|
62
|
-
],
|
|
63
|
-
assign: "url",
|
|
64
|
-
},
|
|
65
56
|
],
|
|
66
57
|
type: "tree",
|
|
67
58
|
rules: [
|
|
@@ -68,20 +68,21 @@ import { GuardDutyClient } from "./GuardDutyClient";
|
|
|
68
68
|
/**
|
|
69
69
|
* <p>Amazon GuardDuty is a continuous security monitoring service that analyzes and processes
|
|
70
70
|
* the following data sources: VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event
|
|
71
|
-
* logs, EKS audit logs, and
|
|
71
|
+
* logs, EKS audit logs, DNS logs, and Amazon EBS volume data.
|
|
72
72
|
* It uses threat intelligence
|
|
73
|
-
* feeds
|
|
73
|
+
* feeds, such as lists of malicious IPs and domains, and machine learning to identify
|
|
74
74
|
* unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment.
|
|
75
75
|
* This can include issues like escalations of privileges, uses of exposed credentials, or
|
|
76
|
-
* communication with malicious IPs,
|
|
77
|
-
*
|
|
78
|
-
*
|
|
79
|
-
*
|
|
76
|
+
* communication with malicious IPs, domains, or presence of malware on your
|
|
77
|
+
* Amazon EC2 instances and container workloads. For example, GuardDuty can detect
|
|
78
|
+
* compromised EC2 instances and container workloads serving malware, or mining bitcoin. </p>
|
|
79
|
+
* <p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such
|
|
80
|
+
* as unauthorized infrastructure deployments like EC2 instances deployed in a Region
|
|
80
81
|
* that has never been used, or unusual API calls like a password policy change to reduce
|
|
81
82
|
* password strength. </p>
|
|
82
|
-
* <p>GuardDuty informs you
|
|
83
|
-
* that you can view in the GuardDuty console or through Amazon
|
|
84
|
-
* information, see the <i>
|
|
83
|
+
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing
|
|
84
|
+
* security findings that you can view in the GuardDuty console or through Amazon EventBridge.
|
|
85
|
+
* For more information, see the <i>
|
|
85
86
|
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
86
87
|
* GuardDuty User Guide</a>
|
|
87
88
|
* </i>. </p>
|
|
@@ -190,20 +190,21 @@ export interface GuardDutyClientResolvedConfig extends GuardDutyClientResolvedCo
|
|
|
190
190
|
/**
|
|
191
191
|
* <p>Amazon GuardDuty is a continuous security monitoring service that analyzes and processes
|
|
192
192
|
* the following data sources: VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event
|
|
193
|
-
* logs, EKS audit logs, and
|
|
193
|
+
* logs, EKS audit logs, DNS logs, and Amazon EBS volume data.
|
|
194
194
|
* It uses threat intelligence
|
|
195
|
-
* feeds
|
|
195
|
+
* feeds, such as lists of malicious IPs and domains, and machine learning to identify
|
|
196
196
|
* unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment.
|
|
197
197
|
* This can include issues like escalations of privileges, uses of exposed credentials, or
|
|
198
|
-
* communication with malicious IPs,
|
|
199
|
-
*
|
|
200
|
-
*
|
|
201
|
-
*
|
|
198
|
+
* communication with malicious IPs, domains, or presence of malware on your
|
|
199
|
+
* Amazon EC2 instances and container workloads. For example, GuardDuty can detect
|
|
200
|
+
* compromised EC2 instances and container workloads serving malware, or mining bitcoin. </p>
|
|
201
|
+
* <p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such
|
|
202
|
+
* as unauthorized infrastructure deployments like EC2 instances deployed in a Region
|
|
202
203
|
* that has never been used, or unusual API calls like a password policy change to reduce
|
|
203
204
|
* password strength. </p>
|
|
204
|
-
* <p>GuardDuty informs you
|
|
205
|
-
* that you can view in the GuardDuty console or through Amazon
|
|
206
|
-
* information, see the <i>
|
|
205
|
+
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing
|
|
206
|
+
* security findings that you can view in the GuardDuty console or through Amazon EventBridge.
|
|
207
|
+
* For more information, see the <i>
|
|
207
208
|
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
208
209
|
* GuardDuty User Guide</a>
|
|
209
210
|
* </i>. </p>
|
|
@@ -12,7 +12,7 @@ export declare const resolveClientEndpointParameters: <T>(options: T & ClientInp
|
|
|
12
12
|
defaultSigningName: string;
|
|
13
13
|
};
|
|
14
14
|
export interface EndpointParameters extends __EndpointParameters {
|
|
15
|
-
Region
|
|
15
|
+
Region: string;
|
|
16
16
|
UseDualStack?: boolean;
|
|
17
17
|
UseFIPS?: boolean;
|
|
18
18
|
Endpoint?: string;
|
|
@@ -939,11 +939,13 @@ export interface CreateFilterRequest {
|
|
|
939
939
|
*/
|
|
940
940
|
DetectorId: string | undefined;
|
|
941
941
|
/**
|
|
942
|
-
* <p>The name of the filter.
|
|
942
|
+
* <p>The name of the filter. Valid characters include period (.), underscore (_),
|
|
943
|
+
* dash (-), and alphanumeric characters. A whitespace is considered to be an invalid character.</p>
|
|
943
944
|
*/
|
|
944
945
|
Name: string | undefined;
|
|
945
946
|
/**
|
|
946
|
-
* <p>The description of the filter
|
|
947
|
+
* <p>The description of the filter. Valid special characters include period (.), underscore (_), dash (-),
|
|
948
|
+
* and whitespace. The new line character is considered to be an invalid input for description.</p>
|
|
947
949
|
*/
|
|
948
950
|
Description?: string;
|
|
949
951
|
/**
|
|
@@ -1743,7 +1745,7 @@ export interface Scan {
|
|
|
1743
1745
|
*/
|
|
1744
1746
|
ScanEndTime?: Date;
|
|
1745
1747
|
/**
|
|
1746
|
-
* <p>
|
|
1748
|
+
* <p>Specifies the reason why the scan was initiated.</p>
|
|
1747
1749
|
*/
|
|
1748
1750
|
TriggerDetails?: TriggerDetails;
|
|
1749
1751
|
/**
|
|
@@ -3984,7 +3986,8 @@ export interface UpdateFilterRequest {
|
|
|
3984
3986
|
*/
|
|
3985
3987
|
FilterName: string | undefined;
|
|
3986
3988
|
/**
|
|
3987
|
-
* <p>The description of the filter
|
|
3989
|
+
* <p>The description of the filter. Valid special characters include period (.), underscore (_), dash (-),
|
|
3990
|
+
* and whitespace. The new line character is considered to be an invalid input for description.</p>
|
|
3988
3991
|
*/
|
|
3989
3992
|
Description?: string;
|
|
3990
3993
|
/**
|
|
@@ -27,7 +27,7 @@ export declare const resolveClientEndpointParameters: <T>(
|
|
|
27
27
|
defaultSigningName: string;
|
|
28
28
|
};
|
|
29
29
|
export interface EndpointParameters extends __EndpointParameters {
|
|
30
|
-
Region
|
|
30
|
+
Region: string;
|
|
31
31
|
UseDualStack?: boolean;
|
|
32
32
|
UseFIPS?: boolean;
|
|
33
33
|
Endpoint?: string;
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-guardduty",
|
|
3
3
|
"description": "AWS SDK for JavaScript Guardduty Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.233.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "tsc -p tsconfig.cjs.json",
|
|
@@ -19,9 +19,9 @@
|
|
|
19
19
|
"dependencies": {
|
|
20
20
|
"@aws-crypto/sha256-browser": "2.0.0",
|
|
21
21
|
"@aws-crypto/sha256-js": "2.0.0",
|
|
22
|
-
"@aws-sdk/client-sts": "3.
|
|
23
|
-
"@aws-sdk/config-resolver": "3.
|
|
24
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
22
|
+
"@aws-sdk/client-sts": "3.231.0",
|
|
23
|
+
"@aws-sdk/config-resolver": "3.231.0",
|
|
24
|
+
"@aws-sdk/credential-provider-node": "3.231.0",
|
|
25
25
|
"@aws-sdk/fetch-http-handler": "3.226.0",
|
|
26
26
|
"@aws-sdk/hash-node": "3.226.0",
|
|
27
27
|
"@aws-sdk/invalid-dependency": "3.226.0",
|
|
@@ -45,7 +45,7 @@
|
|
|
45
45
|
"@aws-sdk/util-body-length-browser": "3.188.0",
|
|
46
46
|
"@aws-sdk/util-body-length-node": "3.208.0",
|
|
47
47
|
"@aws-sdk/util-defaults-mode-browser": "3.226.0",
|
|
48
|
-
"@aws-sdk/util-defaults-mode-node": "3.
|
|
48
|
+
"@aws-sdk/util-defaults-mode-node": "3.231.0",
|
|
49
49
|
"@aws-sdk/util-endpoints": "3.226.0",
|
|
50
50
|
"@aws-sdk/util-retry": "3.229.0",
|
|
51
51
|
"@aws-sdk/util-user-agent-browser": "3.226.0",
|