@aws-sdk/client-guardduty 3.387.0 → 3.388.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/dist-cjs/endpoint/ruleset.js +1 -1
- package/dist-cjs/models/models_0.js +1 -0
- package/dist-es/endpoint/ruleset.js +1 -1
- package/dist-es/models/models_0.js +1 -0
- package/dist-types/GuardDuty.d.ts +2 -2
- package/dist-types/GuardDutyClient.d.ts +2 -2
- package/dist-types/commands/CreateMembersCommand.d.ts +10 -10
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +2 -2
- package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +6 -6
- package/dist-types/commands/DisassociateFromMasterAccountCommand.d.ts +6 -6
- package/dist-types/commands/DisassociateMembersCommand.d.ts +8 -8
- package/dist-types/commands/InviteMembersCommand.d.ts +16 -18
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +2 -2
- package/dist-types/commands/StartMalwareScanCommand.d.ts +1 -2
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +2 -2
- package/dist-types/index.d.ts +2 -2
- package/dist-types/models/models_0.d.ts +155 -34
- package/dist-types/ts3.4/models/models_0.d.ts +1 -0
- package/package.json +3 -3
package/README.md
CHANGED
|
@@ -22,8 +22,8 @@ been used, or unusual API calls like a password policy change to reduce password
|
|
|
22
22
|
<p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
|
|
23
23
|
findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
|
|
24
24
|
information, see the <i>
|
|
25
|
-
<a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
26
|
-
|
|
25
|
+
<a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User
|
|
26
|
+
Guide</a>
|
|
27
27
|
</i>. </p>
|
|
28
28
|
|
|
29
29
|
## Installing
|
|
@@ -3,5 +3,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
|
|
|
3
3
|
exports.ruleSet = void 0;
|
|
4
4
|
const s = "required", t = "fn", u = "argv", v = "ref";
|
|
5
5
|
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "getAttr", g = { [s]: false, "type": "String" }, h = { [s]: true, "default": false, "type": "Boolean" }, i = { [v]: "Endpoint" }, j = { [t]: "booleanEquals", [u]: [{ [v]: "UseFIPS" }, true] }, k = { [t]: "booleanEquals", [u]: [{ [v]: "UseDualStack" }, true] }, l = {}, m = { [t]: "booleanEquals", [u]: [true, { [t]: f, [u]: [{ [v]: e }, "supportsFIPS"] }] }, n = { [v]: e }, o = { [t]: "booleanEquals", [u]: [true, { [t]: f, [u]: [n, "supportsDualStack"] }] }, p = [j], q = [k], r = [{ [v]: "Region" }];
|
|
6
|
-
const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, rules: [{ conditions: [{ [t]: a, [u]: [i] }], type: b, rules: [{ conditions: p, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, {
|
|
6
|
+
const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, rules: [{ conditions: [{ [t]: a, [u]: [i] }], type: b, rules: [{ conditions: p, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { conditions: q, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: i, properties: l, headers: l }, type: d }] }, { conditions: [{ [t]: a, [u]: r }], type: b, rules: [{ conditions: [{ [t]: "aws.partition", [u]: r, assign: e }], type: b, rules: [{ conditions: [j, k], type: b, rules: [{ conditions: [m, o], type: b, rules: [{ endpoint: { url: "https://guardduty-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: p, type: b, rules: [{ conditions: [m], type: b, rules: [{ conditions: [{ [t]: "stringEquals", [u]: ["aws-us-gov", { [t]: f, [u]: [n, "name"] }] }], endpoint: { url: "https://guardduty.{Region}.amazonaws.com", properties: l, headers: l }, type: d }, { endpoint: { url: "https://guardduty-fips.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: q, type: b, rules: [{ conditions: [o], type: b, rules: [{ endpoint: { url: "https://guardduty.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://guardduty.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] };
|
|
7
7
|
exports.ruleSet = _data;
|
|
@@ -1,4 +1,4 @@
|
|
|
1
1
|
const s = "required", t = "fn", u = "argv", v = "ref";
|
|
2
2
|
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "getAttr", g = { [s]: false, "type": "String" }, h = { [s]: true, "default": false, "type": "Boolean" }, i = { [v]: "Endpoint" }, j = { [t]: "booleanEquals", [u]: [{ [v]: "UseFIPS" }, true] }, k = { [t]: "booleanEquals", [u]: [{ [v]: "UseDualStack" }, true] }, l = {}, m = { [t]: "booleanEquals", [u]: [true, { [t]: f, [u]: [{ [v]: e }, "supportsFIPS"] }] }, n = { [v]: e }, o = { [t]: "booleanEquals", [u]: [true, { [t]: f, [u]: [n, "supportsDualStack"] }] }, p = [j], q = [k], r = [{ [v]: "Region" }];
|
|
3
|
-
const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, rules: [{ conditions: [{ [t]: a, [u]: [i] }], type: b, rules: [{ conditions: p, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, {
|
|
3
|
+
const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, rules: [{ conditions: [{ [t]: a, [u]: [i] }], type: b, rules: [{ conditions: p, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { conditions: q, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: i, properties: l, headers: l }, type: d }] }, { conditions: [{ [t]: a, [u]: r }], type: b, rules: [{ conditions: [{ [t]: "aws.partition", [u]: r, assign: e }], type: b, rules: [{ conditions: [j, k], type: b, rules: [{ conditions: [m, o], type: b, rules: [{ endpoint: { url: "https://guardduty-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: p, type: b, rules: [{ conditions: [m], type: b, rules: [{ conditions: [{ [t]: "stringEquals", [u]: ["aws-us-gov", { [t]: f, [u]: [n, "name"] }] }], endpoint: { url: "https://guardduty.{Region}.amazonaws.com", properties: l, headers: l }, type: d }, { endpoint: { url: "https://guardduty-fips.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: q, type: b, rules: [{ conditions: [o], type: b, rules: [{ endpoint: { url: "https://guardduty.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://guardduty.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] };
|
|
4
4
|
export const ruleSet = _data;
|
|
@@ -496,8 +496,8 @@ export interface GuardDuty {
|
|
|
496
496
|
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
|
|
497
497
|
* findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
|
|
498
498
|
* information, see the <i>
|
|
499
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
500
|
-
*
|
|
499
|
+
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User
|
|
500
|
+
* Guide</a>
|
|
501
501
|
* </i>. </p>
|
|
502
502
|
*/
|
|
503
503
|
export declare class GuardDuty extends GuardDutyClient implements GuardDuty {
|
|
@@ -229,8 +229,8 @@ export interface GuardDutyClientResolvedConfig extends GuardDutyClientResolvedCo
|
|
|
229
229
|
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
|
|
230
230
|
* findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
|
|
231
231
|
* information, see the <i>
|
|
232
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
233
|
-
*
|
|
232
|
+
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User
|
|
233
|
+
* Guide</a>
|
|
234
234
|
* </i>. </p>
|
|
235
235
|
*/
|
|
236
236
|
export declare class GuardDutyClient extends __Client<__HttpHandlerOptions, ServiceInputTypes, ServiceOutputTypes, GuardDutyClientResolvedConfig> {
|
|
@@ -27,17 +27,17 @@ export interface CreateMembersCommandOutput extends CreateMembersResponse, __Met
|
|
|
27
27
|
* IDs. This step is a prerequisite for managing the associated member accounts either by
|
|
28
28
|
* invitation or through an organization.</p>
|
|
29
29
|
* <p>As a delegated administrator, using <code>CreateMembers</code> will enable GuardDuty in
|
|
30
|
-
* the added member accounts, with the exception of the
|
|
31
|
-
*
|
|
32
|
-
*
|
|
30
|
+
* the added member accounts, with the exception of the organization delegated administrator
|
|
31
|
+
* account. A delegated administrator must enable GuardDuty prior to being added as a
|
|
32
|
+
* member.</p>
|
|
33
33
|
* <p>If you are adding accounts by invitation, before using <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a>, use
|
|
34
|
-
*
|
|
35
|
-
* <p>If you disassociate a member from a GuardDuty
|
|
36
|
-
*
|
|
37
|
-
*
|
|
38
|
-
*
|
|
39
|
-
*
|
|
40
|
-
*
|
|
34
|
+
* <code>CreateMembers</code> after GuardDuty has been enabled in potential member accounts.</p>
|
|
35
|
+
* <p>If you disassociate a member from a GuardDuty delegated administrator, the member account
|
|
36
|
+
* details obtained from this API, including the associated email addresses, will be retained.
|
|
37
|
+
* This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without
|
|
38
|
+
* the need to invoke the CreateMembers API again. To remove the details associated with a member
|
|
39
|
+
* account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API.
|
|
40
|
+
* </p>
|
|
41
41
|
* @example
|
|
42
42
|
* Use a bare-bones client and the command you need to make an API call.
|
|
43
43
|
* ```javascript
|
|
@@ -64,11 +64,11 @@ export interface DescribeOrganizationConfigurationCommandOutput extends Describe
|
|
|
64
64
|
* // Features: [ // OrganizationFeaturesConfigurationsResults
|
|
65
65
|
* // { // OrganizationFeatureConfigurationResult
|
|
66
66
|
* // Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "EKS_RUNTIME_MONITORING" || "LAMBDA_NETWORK_LOGS",
|
|
67
|
-
* // AutoEnable: "NEW" || "NONE",
|
|
67
|
+
* // AutoEnable: "NEW" || "NONE" || "ALL",
|
|
68
68
|
* // AdditionalConfiguration: [ // OrganizationAdditionalConfigurationResults
|
|
69
69
|
* // { // OrganizationAdditionalConfigurationResult
|
|
70
70
|
* // Name: "EKS_ADDON_MANAGEMENT",
|
|
71
|
-
* // AutoEnable: "NEW" || "NONE",
|
|
71
|
+
* // AutoEnable: "NEW" || "NONE" || "ALL",
|
|
72
72
|
* // },
|
|
73
73
|
* // ],
|
|
74
74
|
* // },
|
|
@@ -24,12 +24,12 @@ export interface DisassociateFromAdministratorAccountCommandOutput extends Disas
|
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
26
|
* <p>Disassociates the current GuardDuty member account from its administrator account.</p>
|
|
27
|
-
* <p>When you
|
|
28
|
-
*
|
|
29
|
-
*
|
|
30
|
-
*
|
|
31
|
-
*
|
|
32
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
|
|
27
|
+
* <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member
|
|
28
|
+
* account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API,
|
|
29
|
+
* including the associated email addresses, are retained. This is done so that the delegated
|
|
30
|
+
* administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without
|
|
31
|
+
* the need to invoke the CreateMembers API again. To remove the details associated with a member
|
|
32
|
+
* account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
|
|
33
33
|
* <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to
|
|
34
34
|
* <code>ALL</code>, you'll receive an error if you attempt to disable GuardDuty in a member
|
|
35
35
|
* account.</p>
|
|
@@ -26,12 +26,12 @@ export interface DisassociateFromMasterAccountCommandOutput extends Disassociate
|
|
|
26
26
|
* @deprecated
|
|
27
27
|
*
|
|
28
28
|
* <p>Disassociates the current GuardDuty member account from its administrator account.</p>
|
|
29
|
-
* <p>When you
|
|
30
|
-
*
|
|
31
|
-
*
|
|
32
|
-
*
|
|
33
|
-
*
|
|
34
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API.</p>
|
|
29
|
+
* <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member
|
|
30
|
+
* account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API,
|
|
31
|
+
* including the associated email addresses, are retained. This is done so that the delegated
|
|
32
|
+
* administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without
|
|
33
|
+
* the need to invoke the CreateMembers API again. To remove the details associated with a member
|
|
34
|
+
* account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API.</p>
|
|
35
35
|
* @example
|
|
36
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
37
37
|
* ```javascript
|
|
@@ -23,14 +23,14 @@ export interface DisassociateMembersCommandOutput extends DisassociateMembersRes
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Disassociates GuardDuty member accounts (from the current administrator account)
|
|
27
|
-
* by the account IDs.</p>
|
|
28
|
-
* <p>When you
|
|
29
|
-
*
|
|
30
|
-
*
|
|
31
|
-
*
|
|
32
|
-
*
|
|
33
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
|
|
26
|
+
* <p>Disassociates GuardDuty member accounts (from the current administrator account)
|
|
27
|
+
* specified by the account IDs.</p>
|
|
28
|
+
* <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member
|
|
29
|
+
* account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API,
|
|
30
|
+
* including the associated email addresses, are retained. This is done so that the delegated
|
|
31
|
+
* administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without
|
|
32
|
+
* the need to invoke the CreateMembers API again. To remove the details associated with a member
|
|
33
|
+
* account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
|
|
34
34
|
* <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to
|
|
35
35
|
* <code>ALL</code>, you'll receive an error if you attempt to disassociate a member account
|
|
36
36
|
* before removing them from your Amazon Web Services organization.</p>
|
|
@@ -23,24 +23,22 @@ export interface InviteMembersCommandOutput extends InviteMembersResponse, __Met
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services
|
|
27
|
-
* that invokes this API. If you are using Amazon Web Services Organizations to manager your GuardDuty
|
|
28
|
-
* needed. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_organizations.html">Managing accounts with Amazon Web Services
|
|
29
|
-
*
|
|
30
|
-
*
|
|
31
|
-
* to add accounts by invitation. The
|
|
32
|
-
* invited accounts can either accept or decline the invitation from their GuardDuty accounts. Each
|
|
33
|
-
* choose to accept the invitation from only one Amazon Web Services account. For
|
|
34
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_invitations.html">Managing GuardDuty accounts
|
|
35
|
-
*
|
|
36
|
-
* <p>After the invite has been accepted and you choose to disassociate a member account
|
|
37
|
-
*
|
|
38
|
-
*
|
|
39
|
-
* associated email addresses, will be retained.
|
|
40
|
-
*
|
|
41
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/
|
|
42
|
-
* remove the details associated with a member account, you must also invoke
|
|
43
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a>. </p>
|
|
26
|
+
* <p>Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services
|
|
27
|
+
* account that invokes this API. If you are using Amazon Web Services Organizations to manager your GuardDuty
|
|
28
|
+
* environment, this step is not needed. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_organizations.html">Managing accounts with Amazon Web Services
|
|
29
|
+
* Organizations</a>.</p>
|
|
30
|
+
* <p>To invite Amazon Web Services accounts, the first step is to ensure that GuardDuty has been enabled in the
|
|
31
|
+
* potential member accounts. You can now invoke this API to add accounts by invitation. The
|
|
32
|
+
* invited accounts can either accept or decline the invitation from their GuardDuty accounts. Each
|
|
33
|
+
* invited Amazon Web Services account can choose to accept the invitation from only one Amazon Web Services account. For
|
|
34
|
+
* more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_invitations.html">Managing GuardDuty accounts by
|
|
35
|
+
* invitation</a>.</p>
|
|
36
|
+
* <p>After the invite has been accepted and you choose to disassociate a member account (by
|
|
37
|
+
* using <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateMembers.html">DisassociateMembers</a>) from your account, the details of the member account obtained by
|
|
38
|
+
* invoking <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a>, including
|
|
39
|
+
* the associated email addresses, will be retained. This is done so that you can invoke
|
|
40
|
+
* InviteMembers without the need to invoke <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> again. To
|
|
41
|
+
* remove the details associated with a member account, you must also invoke <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a>. </p>
|
|
44
42
|
* @example
|
|
45
43
|
* Use a bare-bones client and the command you need to make an API call.
|
|
46
44
|
* ```javascript
|
|
@@ -24,8 +24,8 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
|
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
26
|
* <p>Lists tags for a resource. Tagging is currently supported for detectors, finding filters,
|
|
27
|
-
* IP sets, threat intel sets, publishing destination, with a limit of 50 tags per
|
|
28
|
-
* operation returns all assigned tags for a given resource.</p>
|
|
27
|
+
* IP sets, threat intel sets, and publishing destination, with a limit of 50 tags per each
|
|
28
|
+
* resource. When invoked, this operation returns all assigned tags for a given resource.</p>
|
|
29
29
|
* @example
|
|
30
30
|
* Use a bare-bones client and the command you need to make an API call.
|
|
31
31
|
* ```javascript
|
|
@@ -23,8 +23,7 @@ export interface StartMalwareScanCommandOutput extends StartMalwareScanResponse,
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>Initiates the malware scan. Invoking this API will automatically create the <a href="https://docs.aws.amazon.com/guardduty/latest/ug/slr-permissions-malware-protection.html">Service-linked role </a> in
|
|
27
|
-
* the corresponding account.</p>
|
|
26
|
+
* <p>Initiates the malware scan. Invoking this API will automatically create the <a href="https://docs.aws.amazon.com/guardduty/latest/ug/slr-permissions-malware-protection.html">Service-linked role </a> in the corresponding account.</p>
|
|
28
27
|
* @example
|
|
29
28
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
29
|
* ```javascript
|
|
@@ -57,11 +57,11 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
57
57
|
* Features: [ // OrganizationFeaturesConfigurations
|
|
58
58
|
* { // OrganizationFeatureConfiguration
|
|
59
59
|
* Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "EKS_RUNTIME_MONITORING" || "LAMBDA_NETWORK_LOGS",
|
|
60
|
-
* AutoEnable: "NEW" || "NONE",
|
|
60
|
+
* AutoEnable: "NEW" || "NONE" || "ALL",
|
|
61
61
|
* AdditionalConfiguration: [ // OrganizationAdditionalConfigurations
|
|
62
62
|
* { // OrganizationAdditionalConfiguration
|
|
63
63
|
* Name: "EKS_ADDON_MANAGEMENT",
|
|
64
|
-
* AutoEnable: "NEW" || "NONE",
|
|
64
|
+
* AutoEnable: "NEW" || "NONE" || "ALL",
|
|
65
65
|
* },
|
|
66
66
|
* ],
|
|
67
67
|
* },
|
package/dist-types/index.d.ts
CHANGED
|
@@ -15,8 +15,8 @@
|
|
|
15
15
|
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
|
|
16
16
|
* findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
|
|
17
17
|
* information, see the <i>
|
|
18
|
-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
|
|
19
|
-
*
|
|
18
|
+
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User
|
|
19
|
+
* Guide</a>
|
|
20
20
|
* </i>. </p>
|
|
21
21
|
*
|
|
22
22
|
* @packageDocumentation
|
|
@@ -1750,10 +1750,43 @@ export interface CreateFilterRequest {
|
|
|
1750
1750
|
* <p>accountId</p>
|
|
1751
1751
|
* </li>
|
|
1752
1752
|
* <li>
|
|
1753
|
+
* <p>id</p>
|
|
1754
|
+
* </li>
|
|
1755
|
+
* <li>
|
|
1753
1756
|
* <p>region</p>
|
|
1754
1757
|
* </li>
|
|
1755
1758
|
* <li>
|
|
1756
|
-
* <p>
|
|
1759
|
+
* <p>severity</p>
|
|
1760
|
+
* <p>To filter on the basis of severity, the API and CLI use the following input list for
|
|
1761
|
+
* the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_FindingCriteria.html">FindingCriteria</a>
|
|
1762
|
+
* condition:</p>
|
|
1763
|
+
* <ul>
|
|
1764
|
+
* <li>
|
|
1765
|
+
* <p>
|
|
1766
|
+
* <b>Low</b>: <code>["1", "2", "3"]</code>
|
|
1767
|
+
* </p>
|
|
1768
|
+
* </li>
|
|
1769
|
+
* <li>
|
|
1770
|
+
* <p>
|
|
1771
|
+
* <b>Medium</b>: <code>["4", "5", "6"]</code>
|
|
1772
|
+
* </p>
|
|
1773
|
+
* </li>
|
|
1774
|
+
* <li>
|
|
1775
|
+
* <p>
|
|
1776
|
+
* <b>High</b>: <code>["7", "8", "9"]</code>
|
|
1777
|
+
* </p>
|
|
1778
|
+
* </li>
|
|
1779
|
+
* </ul>
|
|
1780
|
+
* <p>For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings.html#guardduty_findings-severity">Severity
|
|
1781
|
+
* levels for GuardDuty findings</a>.</p>
|
|
1782
|
+
* </li>
|
|
1783
|
+
* <li>
|
|
1784
|
+
* <p>type</p>
|
|
1785
|
+
* </li>
|
|
1786
|
+
* <li>
|
|
1787
|
+
* <p>updatedAt</p>
|
|
1788
|
+
* <p>Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ
|
|
1789
|
+
* depending on whether the value contains milliseconds.</p>
|
|
1757
1790
|
* </li>
|
|
1758
1791
|
* <li>
|
|
1759
1792
|
* <p>resource.accessKeyDetails.accessKeyId</p>
|
|
@@ -1777,7 +1810,10 @@ export interface CreateFilterRequest {
|
|
|
1777
1810
|
* <p>resource.instanceDetails.instanceId</p>
|
|
1778
1811
|
* </li>
|
|
1779
1812
|
* <li>
|
|
1780
|
-
* <p>resource.instanceDetails.
|
|
1813
|
+
* <p>resource.instanceDetails.tags.key</p>
|
|
1814
|
+
* </li>
|
|
1815
|
+
* <li>
|
|
1816
|
+
* <p>resource.instanceDetails.tags.value</p>
|
|
1781
1817
|
* </li>
|
|
1782
1818
|
* <li>
|
|
1783
1819
|
* <p>resource.instanceDetails.networkInterfaces.ipv6Addresses</p>
|
|
@@ -1804,13 +1840,25 @@ export interface CreateFilterRequest {
|
|
|
1804
1840
|
* <p>resource.instanceDetails.networkInterfaces.vpcId</p>
|
|
1805
1841
|
* </li>
|
|
1806
1842
|
* <li>
|
|
1807
|
-
* <p>resource.instanceDetails.
|
|
1843
|
+
* <p>resource.instanceDetails.outpostArn</p>
|
|
1808
1844
|
* </li>
|
|
1809
1845
|
* <li>
|
|
1810
|
-
* <p>resource.
|
|
1846
|
+
* <p>resource.resourceType</p>
|
|
1811
1847
|
* </li>
|
|
1812
1848
|
* <li>
|
|
1813
|
-
* <p>resource.
|
|
1849
|
+
* <p>resource.s3BucketDetails.publicAccess.effectivePermissions</p>
|
|
1850
|
+
* </li>
|
|
1851
|
+
* <li>
|
|
1852
|
+
* <p>resource.s3BucketDetails.name</p>
|
|
1853
|
+
* </li>
|
|
1854
|
+
* <li>
|
|
1855
|
+
* <p>resource.s3BucketDetails.tags.key</p>
|
|
1856
|
+
* </li>
|
|
1857
|
+
* <li>
|
|
1858
|
+
* <p>resource.s3BucketDetails.tags.value</p>
|
|
1859
|
+
* </li>
|
|
1860
|
+
* <li>
|
|
1861
|
+
* <p>resource.s3BucketDetails.type</p>
|
|
1814
1862
|
* </li>
|
|
1815
1863
|
* <li>
|
|
1816
1864
|
* <p>service.action.actionType</p>
|
|
@@ -1825,9 +1873,6 @@ export interface CreateFilterRequest {
|
|
|
1825
1873
|
* <p>service.action.awsApiCallAction.errorCode</p>
|
|
1826
1874
|
* </li>
|
|
1827
1875
|
* <li>
|
|
1828
|
-
* <p>service.action.awsApiCallAction.userAgent</p>
|
|
1829
|
-
* </li>
|
|
1830
|
-
* <li>
|
|
1831
1876
|
* <p>service.action.awsApiCallAction.remoteIpDetails.city.cityName</p>
|
|
1832
1877
|
* </li>
|
|
1833
1878
|
* <li>
|
|
@@ -1861,9 +1906,6 @@ export interface CreateFilterRequest {
|
|
|
1861
1906
|
* <p>service.action.networkConnectionAction.protocol</p>
|
|
1862
1907
|
* </li>
|
|
1863
1908
|
* <li>
|
|
1864
|
-
* <p>service.action.networkConnectionAction.localIpDetails.ipAddressV4</p>
|
|
1865
|
-
* </li>
|
|
1866
|
-
* <li>
|
|
1867
1909
|
* <p>service.action.networkConnectionAction.remoteIpDetails.city.cityName</p>
|
|
1868
1910
|
* </li>
|
|
1869
1911
|
* <li>
|
|
@@ -1882,36 +1924,112 @@ export interface CreateFilterRequest {
|
|
|
1882
1924
|
* <p>service.action.networkConnectionAction.remotePortDetails.port</p>
|
|
1883
1925
|
* </li>
|
|
1884
1926
|
* <li>
|
|
1885
|
-
* <p>service.
|
|
1927
|
+
* <p>service.action.awsApiCallAction.remoteAccountDetails.affiliated</p>
|
|
1886
1928
|
* </li>
|
|
1887
1929
|
* <li>
|
|
1888
|
-
* <p>
|
|
1930
|
+
* <p>service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4</p>
|
|
1889
1931
|
* </li>
|
|
1890
1932
|
* <li>
|
|
1891
|
-
* <p>
|
|
1933
|
+
* <p>service.action.kubernetesApiCallAction.requestUri</p>
|
|
1892
1934
|
* </li>
|
|
1893
1935
|
* <li>
|
|
1894
|
-
* <p>
|
|
1936
|
+
* <p>service.action.networkConnectionAction.localIpDetails.ipAddressV4</p>
|
|
1895
1937
|
* </li>
|
|
1896
1938
|
* <li>
|
|
1897
|
-
* <p>
|
|
1939
|
+
* <p>service.action.networkConnectionAction.protocol</p>
|
|
1898
1940
|
* </li>
|
|
1899
1941
|
* <li>
|
|
1900
|
-
* <p>
|
|
1942
|
+
* <p>service.action.awsApiCallAction.serviceName</p>
|
|
1943
|
+
* </li>
|
|
1944
|
+
* <li>
|
|
1945
|
+
* <p>service.action.awsApiCallAction.remoteAccountDetails.accountId</p>
|
|
1946
|
+
* </li>
|
|
1947
|
+
* <li>
|
|
1948
|
+
* <p>service.additionalInfo.threatListName</p>
|
|
1901
1949
|
* </li>
|
|
1902
1950
|
* <li>
|
|
1903
1951
|
* <p>service.resourceRole</p>
|
|
1904
1952
|
* </li>
|
|
1905
1953
|
* <li>
|
|
1906
|
-
* <p>
|
|
1954
|
+
* <p>resource.eksClusterDetails.name</p>
|
|
1907
1955
|
* </li>
|
|
1908
1956
|
* <li>
|
|
1909
|
-
* <p>
|
|
1957
|
+
* <p>resource.kubernetesDetails.kubernetesWorkloadDetails.name</p>
|
|
1910
1958
|
* </li>
|
|
1911
1959
|
* <li>
|
|
1912
|
-
* <p>
|
|
1913
|
-
*
|
|
1914
|
-
*
|
|
1960
|
+
* <p>resource.kubernetesDetails.kubernetesWorkloadDetails.namespace</p>
|
|
1961
|
+
* </li>
|
|
1962
|
+
* <li>
|
|
1963
|
+
* <p>resource.kubernetesDetails.kubernetesUserDetails.username</p>
|
|
1964
|
+
* </li>
|
|
1965
|
+
* <li>
|
|
1966
|
+
* <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.image</p>
|
|
1967
|
+
* </li>
|
|
1968
|
+
* <li>
|
|
1969
|
+
* <p>resource.kubernetesDetails.kubernetesWorkloadDetails.containers.imagePrefix</p>
|
|
1970
|
+
* </li>
|
|
1971
|
+
* <li>
|
|
1972
|
+
* <p>service.ebsVolumeScanDetails.scanId</p>
|
|
1973
|
+
* </li>
|
|
1974
|
+
* <li>
|
|
1975
|
+
* <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.name</p>
|
|
1976
|
+
* </li>
|
|
1977
|
+
* <li>
|
|
1978
|
+
* <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.severity</p>
|
|
1979
|
+
* </li>
|
|
1980
|
+
* <li>
|
|
1981
|
+
* <p>service.ebsVolumeScanDetails.scanDetections.threatDetectedByName.threatNames.filePaths.hash</p>
|
|
1982
|
+
* </li>
|
|
1983
|
+
* <li>
|
|
1984
|
+
* <p>resource.ecsClusterDetails.name</p>
|
|
1985
|
+
* </li>
|
|
1986
|
+
* <li>
|
|
1987
|
+
* <p>resource.ecsClusterDetails.taskDetails.containers.image</p>
|
|
1988
|
+
* </li>
|
|
1989
|
+
* <li>
|
|
1990
|
+
* <p>resource.ecsClusterDetails.taskDetails.definitionArn</p>
|
|
1991
|
+
* </li>
|
|
1992
|
+
* <li>
|
|
1993
|
+
* <p>resource.containerDetails.image</p>
|
|
1994
|
+
* </li>
|
|
1995
|
+
* <li>
|
|
1996
|
+
* <p>resource.rdsDbInstanceDetails.dbInstanceIdentifier</p>
|
|
1997
|
+
* </li>
|
|
1998
|
+
* <li>
|
|
1999
|
+
* <p>resource.rdsDbInstanceDetails.dbClusterIdentifier</p>
|
|
2000
|
+
* </li>
|
|
2001
|
+
* <li>
|
|
2002
|
+
* <p>resource.rdsDbInstanceDetails.engine</p>
|
|
2003
|
+
* </li>
|
|
2004
|
+
* <li>
|
|
2005
|
+
* <p>resource.rdsDbUserDetails.user</p>
|
|
2006
|
+
* </li>
|
|
2007
|
+
* <li>
|
|
2008
|
+
* <p>resource.rdsDbInstanceDetails.tags.key</p>
|
|
2009
|
+
* </li>
|
|
2010
|
+
* <li>
|
|
2011
|
+
* <p>resource.rdsDbInstanceDetails.tags.value</p>
|
|
2012
|
+
* </li>
|
|
2013
|
+
* <li>
|
|
2014
|
+
* <p>service.runtimeDetails.process.executableSha256</p>
|
|
2015
|
+
* </li>
|
|
2016
|
+
* <li>
|
|
2017
|
+
* <p>service.runtimeDetails.process.name</p>
|
|
2018
|
+
* </li>
|
|
2019
|
+
* <li>
|
|
2020
|
+
* <p>service.runtimeDetails.process.name</p>
|
|
2021
|
+
* </li>
|
|
2022
|
+
* <li>
|
|
2023
|
+
* <p>resource.lambdaDetails.functionName</p>
|
|
2024
|
+
* </li>
|
|
2025
|
+
* <li>
|
|
2026
|
+
* <p>resource.lambdaDetails.functionArn</p>
|
|
2027
|
+
* </li>
|
|
2028
|
+
* <li>
|
|
2029
|
+
* <p>resource.lambdaDetails.tags.key</p>
|
|
2030
|
+
* </li>
|
|
2031
|
+
* <li>
|
|
2032
|
+
* <p>resource.lambdaDetails.tags.value</p>
|
|
1915
2033
|
* </li>
|
|
1916
2034
|
* </ul>
|
|
1917
2035
|
*/
|
|
@@ -2973,6 +3091,7 @@ export interface OrganizationDataSourceConfigurationsResult {
|
|
|
2973
3091
|
* @enum
|
|
2974
3092
|
*/
|
|
2975
3093
|
export declare const OrgFeatureStatus: {
|
|
3094
|
+
readonly ALL: "ALL";
|
|
2976
3095
|
readonly NEW: "NEW";
|
|
2977
3096
|
readonly NONE: "NONE";
|
|
2978
3097
|
};
|
|
@@ -4045,8 +4164,8 @@ export interface KubernetesUserDetails {
|
|
|
4045
4164
|
Groups?: string[];
|
|
4046
4165
|
/**
|
|
4047
4166
|
* @public
|
|
4048
|
-
* <p>Entity that assumes the IAM role
|
|
4049
|
-
*
|
|
4167
|
+
* <p>Entity that assumes the IAM role when Kubernetes RBAC permissions are assigned to that
|
|
4168
|
+
* role.</p>
|
|
4050
4169
|
*/
|
|
4051
4170
|
SessionName?: string[];
|
|
4052
4171
|
}
|
|
@@ -4151,8 +4270,8 @@ export interface LambdaDetails {
|
|
|
4151
4270
|
Description?: string;
|
|
4152
4271
|
/**
|
|
4153
4272
|
* @public
|
|
4154
|
-
* <p>The timestamp when the Lambda function was last modified. This field is in the UTC date
|
|
4155
|
-
* format <code>(2023-03-22T19:37:20.168Z)</code>.</p>
|
|
4273
|
+
* <p>The timestamp when the Lambda function was last modified. This field is in the UTC date
|
|
4274
|
+
* string format <code>(2023-03-22T19:37:20.168Z)</code>.</p>
|
|
4156
4275
|
*/
|
|
4157
4276
|
LastModifiedAt?: Date;
|
|
4158
4277
|
/**
|
|
@@ -4178,7 +4297,7 @@ export interface LambdaDetails {
|
|
|
4178
4297
|
/**
|
|
4179
4298
|
* @public
|
|
4180
4299
|
* <p>A list of tags attached to this resource, listed in the format of
|
|
4181
|
-
*
|
|
4300
|
+
* <code>key</code>:<code>value</code> pair.</p>
|
|
4182
4301
|
*/
|
|
4183
4302
|
Tags?: Tag[];
|
|
4184
4303
|
}
|
|
@@ -4571,8 +4690,8 @@ export interface RuntimeContext {
|
|
|
4571
4690
|
ModifyingProcess?: ProcessDetails;
|
|
4572
4691
|
/**
|
|
4573
4692
|
* @public
|
|
4574
|
-
* <p>The timestamp at which the process modified the current process. The timestamp is in UTC
|
|
4575
|
-
* format.</p>
|
|
4693
|
+
* <p>The timestamp at which the process modified the current process. The timestamp is in UTC
|
|
4694
|
+
* date string format.</p>
|
|
4576
4695
|
*/
|
|
4577
4696
|
ModifiedAt?: Date;
|
|
4578
4697
|
/**
|
|
@@ -4648,13 +4767,14 @@ export interface RuntimeContext {
|
|
|
4648
4767
|
ShellHistoryFilePath?: string;
|
|
4649
4768
|
/**
|
|
4650
4769
|
* @public
|
|
4651
|
-
* <p>Information about the process that had its memory overwritten by the current
|
|
4770
|
+
* <p>Information about the process that had its memory overwritten by the current
|
|
4771
|
+
* process.</p>
|
|
4652
4772
|
*/
|
|
4653
4773
|
TargetProcess?: ProcessDetails;
|
|
4654
4774
|
/**
|
|
4655
4775
|
* @public
|
|
4656
|
-
* <p>Represents the communication protocol associated with the address. For example, the
|
|
4657
|
-
* family <code>AF_INET</code> is used for IP version of 4 protocol.</p>
|
|
4776
|
+
* <p>Represents the communication protocol associated with the address. For example, the
|
|
4777
|
+
* address family <code>AF_INET</code> is used for IP version of 4 protocol.</p>
|
|
4658
4778
|
*/
|
|
4659
4779
|
AddressFamily?: string;
|
|
4660
4780
|
/**
|
|
@@ -6484,8 +6604,9 @@ export interface StartMalwareScanRequest {
|
|
|
6484
6604
|
export interface StartMalwareScanResponse {
|
|
6485
6605
|
/**
|
|
6486
6606
|
* @public
|
|
6487
|
-
* <p>A unique identifier that gets generated when you invoke the API without any error. Each
|
|
6488
|
-
* a corresponding scan ID. Using this scan ID, you can monitor the status of
|
|
6607
|
+
* <p>A unique identifier that gets generated when you invoke the API without any error. Each
|
|
6608
|
+
* malware scan has a corresponding scan ID. Using this scan ID, you can monitor the status of
|
|
6609
|
+
* your malware scan.</p>
|
|
6489
6610
|
*/
|
|
6490
6611
|
ScanId?: string;
|
|
6491
6612
|
}
|
|
@@ -747,6 +747,7 @@ export interface OrganizationDataSourceConfigurationsResult {
|
|
|
747
747
|
MalwareProtection?: OrganizationMalwareProtectionConfigurationResult;
|
|
748
748
|
}
|
|
749
749
|
export declare const OrgFeatureStatus: {
|
|
750
|
+
readonly ALL: "ALL";
|
|
750
751
|
readonly NEW: "NEW";
|
|
751
752
|
readonly NONE: "NONE";
|
|
752
753
|
};
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-guardduty",
|
|
3
3
|
"description": "AWS SDK for JavaScript Guardduty Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.388.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "tsc -p tsconfig.cjs.json",
|
|
@@ -21,8 +21,8 @@
|
|
|
21
21
|
"dependencies": {
|
|
22
22
|
"@aws-crypto/sha256-browser": "3.0.0",
|
|
23
23
|
"@aws-crypto/sha256-js": "3.0.0",
|
|
24
|
-
"@aws-sdk/client-sts": "3.
|
|
25
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
24
|
+
"@aws-sdk/client-sts": "3.388.0",
|
|
25
|
+
"@aws-sdk/credential-provider-node": "3.388.0",
|
|
26
26
|
"@aws-sdk/middleware-host-header": "3.387.0",
|
|
27
27
|
"@aws-sdk/middleware-logger": "3.387.0",
|
|
28
28
|
"@aws-sdk/middleware-recursion-detection": "3.387.0",
|