@aws-sdk/client-guardduty 3.529.1 → 3.530.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/dist-cjs/index.js +2 -0
  2. package/dist-es/models/models_0.js +2 -0
  3. package/dist-types/commands/CreateDetectorCommand.d.ts +17 -1
  4. package/dist-types/commands/GetOrganizationStatisticsCommand.d.ts +2 -3
  5. package/dist-types/commands/GetUsageStatisticsCommand.d.ts +3 -3
  6. package/dist-types/commands/StartMalwareScanCommand.d.ts +3 -1
  7. package/dist-types/commands/UpdateDetectorCommand.d.ts +6 -1
  8. package/dist-types/commands/UpdateMemberDetectorsCommand.d.ts +5 -0
  9. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +5 -0
  10. package/dist-types/models/models_0.d.ts +22 -5
  11. package/dist-types/models/models_1.d.ts +4 -0
  12. package/dist-types/ts3.4/models/models_0.d.ts +2 -0
  13. package/package.json +1 -1
package/dist-cjs/index.js CHANGED
@@ -664,6 +664,8 @@ var UsageFeature = {
664
664
  FARGATE_RUNTIME_MONITORING: "FARGATE_RUNTIME_MONITORING",
665
665
  FLOW_LOGS: "FLOW_LOGS",
666
666
  LAMBDA_NETWORK_LOGS: "LAMBDA_NETWORK_LOGS",
667
+ RDS_DBI_PROTECTION_PROVISIONED: "RDS_DBI_PROTECTION_PROVISIONED",
668
+ RDS_DBI_PROTECTION_SERVERLESS: "RDS_DBI_PROTECTION_SERVERLESS",
667
669
  RDS_LOGIN_EVENTS: "RDS_LOGIN_EVENTS",
668
670
  S3_DATA_EVENTS: "S3_DATA_EVENTS"
669
671
  };
package/dist-es/models/models_0.js CHANGED
@@ -295,6 +295,8 @@ export const UsageFeature = {
295
295
  FARGATE_RUNTIME_MONITORING: "FARGATE_RUNTIME_MONITORING",
296
296
  FLOW_LOGS: "FLOW_LOGS",
297
297
  LAMBDA_NETWORK_LOGS: "LAMBDA_NETWORK_LOGS",
298
+ RDS_DBI_PROTECTION_PROVISIONED: "RDS_DBI_PROTECTION_PROVISIONED",
299
+ RDS_DBI_PROTECTION_SERVERLESS: "RDS_DBI_PROTECTION_SERVERLESS",
298
300
  RDS_LOGIN_EVENTS: "RDS_LOGIN_EVENTS",
299
301
  S3_DATA_EVENTS: "S3_DATA_EVENTS",
300
302
  };
package/dist-types/commands/CreateDetectorCommand.d.ts CHANGED
@@ -26,10 +26,26 @@ declare const CreateDetectorCommand_base: {
26
26
  };
27
27
  /**
28
28
  * @public
29
- * <p>Creates a single Amazon GuardDuty detector. A detector is a resource that represents the
29
+ * <p>Creates a single GuardDuty detector. A detector is a resource that represents the
30
30
  * GuardDuty service. To start using GuardDuty, you must create a detector in each Region where
31
31
  * you enable the service. You can have only one detector per account per Region. All data
32
32
  * sources are enabled in a new detector by default.</p>
33
+ * <ul>
34
+ * <li>
35
+ * <p>When you don't specify any <code>features</code>, with an
36
+ * exception to <code>RUNTIME_MONITORING</code>, all the optional features are
37
+ * enabled by default.</p>
38
+ * </li>
39
+ * <li>
40
+ * <p>When you specify some of the <code>features</code>, any feature that is not specified in the
41
+ * API call gets enabled by default, with an exception to <code>RUNTIME_MONITORING</code>. </p>
42
+ * </li>
43
+ * </ul>
44
+ * <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
45
+ * and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
46
+ * You can add only one of these two features because Runtime Monitoring already includes the
47
+ * threat detection for Amazon EKS resources. For more information, see
48
+ * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
33
49
  * <p>There might be regional differences because some data sources might not be
34
50
  * available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
35
51
  * information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
package/dist-types/commands/GetOrganizationStatisticsCommand.d.ts CHANGED
@@ -26,10 +26,9 @@ declare const GetOrganizationStatisticsCommand_base: {
26
26
  };
27
27
  /**
28
28
  * @public
29
- * <p>Retrieves how many active member accounts
30
- * in your Amazon Web Services organization have
29
+ * <p>Retrieves how many active member accounts have
31
30
  * each feature enabled within GuardDuty. Only a delegated GuardDuty administrator of an organization can run this API.</p>
32
- * <p>When you create a new Amazon Web Services organization, it might take up to 24
31
+ * <p>When you create a new organization, it might take up to 24
33
32
  * hours to generate the statistics for the entire organization.</p>
34
33
  * @example
35
34
  * Use a bare-bones client and the command you need to make an API call.
package/dist-types/commands/GetUsageStatisticsCommand.d.ts CHANGED
@@ -50,7 +50,7 @@ declare const GetUsageStatisticsCommand_base: {
50
50
  * "STRING_VALUE",
51
51
  * ],
52
52
  * Features: [ // UsageFeatureList
53
- * "FLOW_LOGS" || "CLOUD_TRAIL" || "DNS_LOGS" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "FARGATE_RUNTIME_MONITORING" || "EC2_RUNTIME_MONITORING",
53
+ * "FLOW_LOGS" || "CLOUD_TRAIL" || "DNS_LOGS" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "FARGATE_RUNTIME_MONITORING" || "EC2_RUNTIME_MONITORING" || "RDS_DBI_PROTECTION_PROVISIONED" || "RDS_DBI_PROTECTION_SERVERLESS",
54
54
  * ],
55
55
  * },
56
56
  * Unit: "STRING_VALUE",
@@ -72,7 +72,7 @@ declare const GetUsageStatisticsCommand_base: {
72
72
  * // ],
73
73
  * // TopAccountsByFeature: [ // UsageTopAccountsResultList
74
74
  * // { // UsageTopAccountsResult
75
- * // Feature: "FLOW_LOGS" || "CLOUD_TRAIL" || "DNS_LOGS" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "FARGATE_RUNTIME_MONITORING" || "EC2_RUNTIME_MONITORING",
75
+ * // Feature: "FLOW_LOGS" || "CLOUD_TRAIL" || "DNS_LOGS" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "FARGATE_RUNTIME_MONITORING" || "EC2_RUNTIME_MONITORING" || "RDS_DBI_PROTECTION_PROVISIONED" || "RDS_DBI_PROTECTION_SERVERLESS",
76
76
  * // Accounts: [ // UsageTopAccountsByFeatureList
77
77
  * // { // UsageTopAccountResult
78
78
  * // AccountId: "STRING_VALUE",
@@ -113,7 +113,7 @@ declare const GetUsageStatisticsCommand_base: {
113
113
  * // ],
114
114
  * // SumByFeature: [ // UsageFeatureResultList
115
115
  * // { // UsageFeatureResult
116
- * // Feature: "FLOW_LOGS" || "CLOUD_TRAIL" || "DNS_LOGS" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "FARGATE_RUNTIME_MONITORING" || "EC2_RUNTIME_MONITORING",
116
+ * // Feature: "FLOW_LOGS" || "CLOUD_TRAIL" || "DNS_LOGS" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "LAMBDA_NETWORK_LOGS" || "EKS_RUNTIME_MONITORING" || "FARGATE_RUNTIME_MONITORING" || "EC2_RUNTIME_MONITORING" || "RDS_DBI_PROTECTION_PROVISIONED" || "RDS_DBI_PROTECTION_SERVERLESS",
117
117
  * // Total: "<Total>",
118
118
  * // },
119
119
  * // ],
package/dist-types/commands/StartMalwareScanCommand.d.ts CHANGED
@@ -26,8 +26,10 @@ declare const StartMalwareScanCommand_base: {
26
26
  };
27
27
  /**
28
28
  * @public
29
- * <p>Initiates the malware scan. Invoking this API will automatically create the <a href="https://docs.aws.amazon.com/guardduty/latest/ug/slr-permissions-malware-protection.html">Service-linked role </a> in
29
+ * <p>Initiates the malware scan. Invoking this API will automatically create the <a href="https://docs.aws.amazon.com/guardduty/latest/ug/slr-permissions-malware-protection.html">Service-linked role</a> in
30
30
  * the corresponding account.</p>
31
+ * <p>When the malware scan starts, you can use the associated scan ID to track the status of the scan. For more information,
32
+ * see <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DescribeMalwareScans.html">DescribeMalwareScans</a>.</p>
31
33
  * @example
32
34
  * Use a bare-bones client and the command you need to make an API call.
33
35
  * ```javascript
package/dist-types/commands/UpdateDetectorCommand.d.ts CHANGED
@@ -26,7 +26,12 @@ declare const UpdateDetectorCommand_base: {
26
26
  };
27
27
  /**
28
28
  * @public
29
- * <p>Updates the GuardDuty detector specified by the detectorId.</p>
29
+ * <p>Updates the GuardDuty detector specified by the detector ID.</p>
30
+ * <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
31
+ * and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
32
+ * You can add only one of these two features because Runtime Monitoring already includes the
33
+ * threat detection for Amazon EKS resources. For more information, see
34
+ * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
30
35
  * <p>There might be regional differences because some data sources might not be
31
36
  * available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
32
37
  * information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
package/dist-types/commands/UpdateMemberDetectorsCommand.d.ts CHANGED
@@ -27,6 +27,11 @@ declare const UpdateMemberDetectorsCommand_base: {
27
27
  /**
28
28
  * @public
29
29
  * <p>Contains information on member accounts to be updated.</p>
30
+ * <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
31
+ * and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
32
+ * You can add only one of these two features because Runtime Monitoring already includes the
33
+ * threat detection for Amazon EKS resources. For more information, see
34
+ * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
30
35
  * <p>There might be regional differences because some data sources might not be
31
36
  * available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
32
37
  * information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts CHANGED
@@ -28,6 +28,11 @@ declare const UpdateOrganizationConfigurationCommand_base: {
28
28
  * @public
29
29
  * <p>Configures the delegated administrator account with the provided values. You must provide
30
30
  * a value for either <code>autoEnableOrganizationMembers</code> or <code>autoEnable</code>, but not both. </p>
31
+ * <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
32
+ * and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
33
+ * You can add only one of these two features because Runtime Monitoring already includes the
34
+ * threat detection for Amazon EKS resources. For more information, see
35
+ * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
31
36
  * <p>There might be regional differences because some data sources might not be
32
37
  * available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more
33
38
  * information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_regions.html">Regions and endpoints</a>.</p>
package/dist-types/models/models_0.d.ts CHANGED
@@ -1949,6 +1949,11 @@ export type DetectorFeature = (typeof DetectorFeature)[keyof typeof DetectorFeat
1949
1949
  /**
1950
1950
  * @public
1951
1951
  * <p>Contains information about a GuardDuty feature.</p>
1952
+ * <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
1953
+ * and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
1954
+ * You can add only one of these two features because Runtime Monitoring already includes the
1955
+ * threat detection for Amazon EKS resources. For more information, see
1956
+ * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
1952
1957
  */
1953
1958
  export interface DetectorFeatureConfiguration {
1954
1959
  /**
@@ -3683,26 +3688,31 @@ export interface DescribeOrganizationConfigurationResponse {
3683
3688
  NextToken?: string;
3684
3689
  /**
3685
3690
  * @public
3686
- * <p>Indicates the auto-enablement configuration of GuardDuty for the member accounts in the
3691
+ * <p>Indicates the auto-enablement configuration of GuardDuty or any of the corresponding protection plans for the member accounts in the
3687
3692
  * organization.</p>
3688
3693
  * <ul>
3689
3694
  * <li>
3690
3695
  * <p>
3691
3696
  * <code>NEW</code>: Indicates that when a new account joins the organization, they will
3692
- * have GuardDuty enabled automatically. </p>
3697
+ * have GuardDuty or any of the corresponding protection plans enabled automatically. </p>
3693
3698
  * </li>
3694
3699
  * <li>
3695
3700
  * <p>
3696
- * <code>ALL</code>: Indicates that all accounts in the organization have GuardDuty
3697
- * enabled automatically. This includes <code>NEW</code> accounts that join the organization
3701
+ * <code>ALL</code>: Indicates that all accounts in the organization have GuardDuty and any of the corresponding
3702
+ * protection plans enabled automatically. This includes <code>NEW</code> accounts that join the organization
3698
3703
  * and accounts that may have been suspended or removed from the organization in
3699
3704
  * GuardDuty.</p>
3700
3705
  * </li>
3701
3706
  * <li>
3702
3707
  * <p>
3703
- * <code>NONE</code>: Indicates that GuardDuty will not be automatically enabled for any
3708
+ * <code>NONE</code>: Indicates that GuardDuty or any of the corresponding protection plans
3709
+ * will not be automatically enabled for any
3704
3710
  * account in the organization. The administrator must manage GuardDuty for each account in
3705
3711
  * the organization individually.</p>
3712
+ * <p>When you update the auto-enable setting from <code>ALL</code> or <code>NEW</code> to
3713
+ * <code>NONE</code>, this action doesn't disable the corresponding option for your existing accounts. This
3714
+ * configuration will apply to the new accounts that join the organization. After you update the auto-enable settings,
3715
+ * no new account will have the corresponding option as enabled.</p>
3706
3716
  * </li>
3707
3717
  * </ul>
3708
3718
  */
@@ -3851,6 +3861,11 @@ export type DetectorFeatureResult = (typeof DetectorFeatureResult)[keyof typeof
3851
3861
  /**
3852
3862
  * @public
3853
3863
  * <p>Contains information about a GuardDuty feature.</p>
3864
+ * <p>Specifying both EKS Runtime Monitoring (<code>EKS_RUNTIME_MONITORING</code>)
3865
+ * and Runtime Monitoring (<code>RUNTIME_MONITORING</code>) will cause an error.
3866
+ * You can add only one of these two features because Runtime Monitoring already includes the
3867
+ * threat detection for Amazon EKS resources. For more information, see
3868
+ * <a href="https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring.html">Runtime Monitoring</a>.</p>
3854
3869
  */
3855
3870
  export interface DetectorFeatureConfigurationResult {
3856
3871
  /**
@@ -6344,6 +6359,8 @@ export declare const UsageFeature: {
6344
6359
  readonly FARGATE_RUNTIME_MONITORING: "FARGATE_RUNTIME_MONITORING";
6345
6360
  readonly FLOW_LOGS: "FLOW_LOGS";
6346
6361
  readonly LAMBDA_NETWORK_LOGS: "LAMBDA_NETWORK_LOGS";
6362
+ readonly RDS_DBI_PROTECTION_PROVISIONED: "RDS_DBI_PROTECTION_PROVISIONED";
6363
+ readonly RDS_DBI_PROTECTION_SERVERLESS: "RDS_DBI_PROTECTION_SERVERLESS";
6347
6364
  readonly RDS_LOGIN_EVENTS: "RDS_LOGIN_EVENTS";
6348
6365
  readonly S3_DATA_EVENTS: "S3_DATA_EVENTS";
6349
6366
  };
package/dist-types/models/models_1.d.ts CHANGED
@@ -1202,6 +1202,10 @@ export interface UpdateOrganizationConfigurationRequest {
1202
1202
  * <p>
1203
1203
  * <code>NONE</code>: Indicates that GuardDuty will not be automatically enabled for any
1204
1204
  * account in the organization. The administrator must manage GuardDuty for each account in the organization individually.</p>
1205
+ * <p>When you update the auto-enable setting from <code>ALL</code> or <code>NEW</code> to
1206
+ * <code>NONE</code>, this action doesn't disable the corresponding option for your existing accounts. This
1207
+ * configuration will apply to the new accounts that join the organization. After you update the auto-enable settings,
1208
+ * no new account will have the corresponding option as enabled.</p>
1205
1209
  * </li>
1206
1210
  * </ul>
1207
1211
  */
package/dist-types/ts3.4/models/models_0.d.ts CHANGED
@@ -1532,6 +1532,8 @@ export declare const UsageFeature: {
1532
1532
  readonly FARGATE_RUNTIME_MONITORING: "FARGATE_RUNTIME_MONITORING";
1533
1533
  readonly FLOW_LOGS: "FLOW_LOGS";
1534
1534
  readonly LAMBDA_NETWORK_LOGS: "LAMBDA_NETWORK_LOGS";
1535
+ readonly RDS_DBI_PROTECTION_PROVISIONED: "RDS_DBI_PROTECTION_PROVISIONED";
1536
+ readonly RDS_DBI_PROTECTION_SERVERLESS: "RDS_DBI_PROTECTION_SERVERLESS";
1535
1537
  readonly RDS_LOGIN_EVENTS: "RDS_LOGIN_EVENTS";
1536
1538
  readonly S3_DATA_EVENTS: "S3_DATA_EVENTS";
1537
1539
  };
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-guardduty",
3
3
  "description": "AWS SDK for JavaScript Guardduty Client for Node.js, Browser and React Native",
4
- "version": "3.529.1",
4
+ "version": "3.530.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "node ../../scripts/compilation/inline client-guardduty",