@aws-sdk/client-guardduty 3.699.0 → 3.703.0

package/dist-es/commands/GetMembersCommand.js

@@ -2,7 +2,7 @@ import { getEndpointPlugin } from "@smithy/middleware-endpoint";
 import { getSerdePlugin } from "@smithy/middleware-serde";
 import { Command as $Command } from "@smithy/smithy-client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { GetMembersResponseFilterSensitiveLog } from "../models/models_0";
+import { GetMembersResponseFilterSensitiveLog } from "../models/models_1";
 import { de_GetMembersCommand, se_GetMembersCommand } from "../protocols/Aws_restJson1";
 export { $Command };
 export class GetMembersCommand extends $Command

package/dist-es/models/models_0.js

@@ -55,6 +55,10 @@ export const FreeTrialFeatureResult = {
     RDS_LOGIN_EVENTS: "RDS_LOGIN_EVENTS",
     S3_DATA_EVENTS: "S3_DATA_EVENTS",
 };
+export const MfaStatus = {
+    DISABLED: "DISABLED",
+    ENABLED: "ENABLED",
+};
 export const AdminStatus = {
     DISABLE_IN_PROGRESS: "DISABLE_IN_PROGRESS",
     ENABLED: "ENABLED",
@@ -257,6 +261,46 @@ export const PublishingStatus = {
     STOPPED: "STOPPED",
     UNABLE_TO_PUBLISH_FIX_DESTINATION_PROPERTY: "UNABLE_TO_PUBLISH_FIX_DESTINATION_PROPERTY",
 };
+export const NetworkDirection = {
+    INBOUND: "INBOUND",
+    OUTBOUND: "OUTBOUND",
+};
+export const PublicAccessStatus = {
+    ALLOWED: "ALLOWED",
+    BLOCKED: "BLOCKED",
+};
+export const PublicAclIgnoreBehavior = {
+    IGNORED: "IGNORED",
+    NOT_IGNORED: "NOT_IGNORED",
+};
+export const PublicBucketRestrictBehavior = {
+    NOT_RESTRICTED: "NOT_RESTRICTED",
+    RESTRICTED: "RESTRICTED",
+};
+export const FindingResourceType = {
+    ACCESS_KEY: "ACCESS_KEY",
+    EC2_INSTANCE: "EC2_INSTANCE",
+    EC2_NETWORK_INTERFACE: "EC2_NETWORK_INTERFACE",
+    S3_BUCKET: "S3_BUCKET",
+    S3_OBJECT: "S3_OBJECT",
+};
+export const IndicatorType = {
+    ATTACK_TACTIC: "ATTACK_TACTIC",
+    ATTACK_TECHNIQUE: "ATTACK_TECHNIQUE",
+    HIGH_RISK_API: "HIGH_RISK_API",
+    MALICIOUS_IP: "MALICIOUS_IP",
+    SUSPICIOUS_NETWORK: "SUSPICIOUS_NETWORK",
+    SUSPICIOUS_USER_AGENT: "SUSPICIOUS_USER_AGENT",
+    TOR_IP: "TOR_IP",
+    UNUSUAL_API_FOR_ACCOUNT: "UNUSUAL_API_FOR_ACCOUNT",
+    UNUSUAL_ASN_FOR_ACCOUNT: "UNUSUAL_ASN_FOR_ACCOUNT",
+    UNUSUAL_ASN_FOR_USER: "UNUSUAL_ASN_FOR_USER",
+};
+export const SignalType = {
+    CLOUD_TRAIL: "CLOUD_TRAIL",
+    FINDING: "FINDING",
+    S3_DATA_EVENTS: "S3_DATA_EVENTS",
+};
 export const DetectorFeatureResult = {
     CLOUD_TRAIL: "CLOUD_TRAIL",
     DNS_LOGS: "DNS_LOGS",
@@ -291,23 +335,6 @@ export const GroupByType = {
     RESOURCE: "RESOURCE",
     SEVERITY: "SEVERITY",
 };
-export const IpSetStatus = {
-    ACTIVATING: "ACTIVATING",
-    ACTIVE: "ACTIVE",
-    DEACTIVATING: "DEACTIVATING",
-    DELETED: "DELETED",
-    DELETE_PENDING: "DELETE_PENDING",
-    ERROR: "ERROR",
-    INACTIVE: "INACTIVE",
-};
-export const MalwareProtectionPlanStatus = {
-    ACTIVE: "ACTIVE",
-    ERROR: "ERROR",
-    WARNING: "WARNING",
-};
-export const ScanCriterionKey = {
-    EC2_INSTANCE_TAG: "EC2_INSTANCE_TAG",
-};
 export const AccountDetailFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.Email && { Email: SENSITIVE_STRING }),
@@ -374,6 +401,27 @@ export const PrivateIpAddressDetailsFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.PrivateIpAddress && { PrivateIpAddress: SENSITIVE_STRING }),
 });
+export const Ec2NetworkInterfaceFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.PrivateIpAddresses && {
+        PrivateIpAddresses: obj.PrivateIpAddresses.map((item) => PrivateIpAddressDetailsFilterSensitiveLog(item)),
+    }),
+});
+export const ResourceDataFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.Ec2NetworkInterface && {
+        Ec2NetworkInterface: Ec2NetworkInterfaceFilterSensitiveLog(obj.Ec2NetworkInterface),
+    }),
+});
+export const ResourceV2FilterSensitiveLog = (obj) => ({
+    ...obj,
+});
+export const SequenceFilterSensitiveLog = (obj) => ({
+    ...obj,
+});
+export const DetectionFilterSensitiveLog = (obj) => ({
+    ...obj,
+});
 export const NetworkInterfaceFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.PrivateIpAddress && { PrivateIpAddress: SENSITIVE_STRING }),
@@ -403,11 +451,3 @@ export const GetFindingsResponseFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.Findings && { Findings: obj.Findings.map((item) => FindingFilterSensitiveLog(item)) }),
 });
-export const MemberFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.Email && { Email: SENSITIVE_STRING }),
-});
-export const GetMembersResponseFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.Members && { Members: obj.Members.map((item) => MemberFilterSensitiveLog(item)) }),
-});

package/dist-es/models/models_1.js

@@ -1,4 +1,21 @@
-import { MemberFilterSensitiveLog, } from "./models_0";
+import { SENSITIVE_STRING } from "@smithy/smithy-client";
+export const IpSetStatus = {
+    ACTIVATING: "ACTIVATING",
+    ACTIVE: "ACTIVE",
+    DEACTIVATING: "DEACTIVATING",
+    DELETED: "DELETED",
+    DELETE_PENDING: "DELETE_PENDING",
+    ERROR: "ERROR",
+    INACTIVE: "INACTIVE",
+};
+export const MalwareProtectionPlanStatus = {
+    ACTIVE: "ACTIVE",
+    ERROR: "ERROR",
+    WARNING: "WARNING",
+};
+export const ScanCriterionKey = {
+    EC2_INSTANCE_TAG: "EC2_INSTANCE_TAG",
+};
 export const ThreatIntelSetStatus = {
     ACTIVATING: "ACTIVATING",
     ACTIVE: "ACTIVE",
@@ -31,6 +48,14 @@ export const UsageStatisticType = {
     TOP_ACCOUNTS_BY_FEATURE: "TOP_ACCOUNTS_BY_FEATURE",
     TOP_RESOURCES: "TOP_RESOURCES",
 };
+export const MemberFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.Email && { Email: SENSITIVE_STRING }),
+});
+export const GetMembersResponseFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.Members && { Members: obj.Members.map((item) => MemberFilterSensitiveLog(item)) }),
+});
 export const ListMembersResponseFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.Members && { Members: obj.Members.map((item) => MemberFilterSensitiveLog(item)) }),

package/dist-es/protocols/Aws_restJson1.js

@@ -2432,6 +2432,13 @@ const de_AccessControlList = (output, context) => {
         AllowsPublicWriteAccess: [, __expectBoolean, `allowsPublicWriteAccess`],
     });
 };
+const de_AccessKey = (output, context) => {
+    return take(output, {
+        PrincipalId: [, __expectString, `principalId`],
+        UserName: [, __expectString, `userName`],
+        UserType: [, __expectString, `userType`],
+    });
+};
 const de_AccessKeyDetails = (output, context) => {
     return take(output, {
         AccessKeyId: [, __expectString, `accessKeyId`],
@@ -2440,6 +2447,12 @@ const de_AccessKeyDetails = (output, context) => {
         UserType: [, __expectString, `userType`],
     });
 };
+const de_Account = (output, context) => {
+    return take(output, {
+        Name: [, __expectString, `account`],
+        Uid: [, __expectString, `uid`],
+    });
+};
 const de_AccountFreeTrialInfo = (output, context) => {
     return take(output, {
         AccountId: [, __expectString, `accountId`],
@@ -2489,6 +2502,21 @@ const de_Action = (output, context) => {
         RdsLoginAttemptAction: [, (_) => de_RdsLoginAttemptAction(_, context), `rdsLoginAttemptAction`],
     });
 };
+const de_Actor = (output, context) => {
+    return take(output, {
+        Id: [, __expectString, `id`],
+        Session: [, (_) => de_Session(_, context), `session`],
+        User: [, (_) => de_User(_, context), `user`],
+    });
+};
+const de_Actors = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        return de_Actor(entry, context);
+    });
+    return retVal;
+};
 const de_AddonDetails = (output, context) => {
     return take(output, {
         AddonStatus: [, __expectString, `addonStatus`],
@@ -2575,6 +2603,12 @@ const de_AnomalyUnusualBehaviorFeature = (output, context) => {
         return acc;
     }, {});
 };
+const de_AutonomousSystem = (output, context) => {
+    return take(output, {
+        Name: [, __expectString, `name`],
+        Number: [, __expectInt32, `number`],
+    });
+};
 const de_AwsApiCallAction = (output, context) => {
     return take(output, {
         AffectedResources: [, _json, `affectedResources`],
@@ -2816,6 +2850,7 @@ const de_Destinations = (output, context) => {
 const de_Detection = (output, context) => {
     return take(output, {
         Anomaly: [, (_) => de_Anomaly(_, context), `anomaly`],
+        Sequence: [, (_) => de_Sequence(_, context), `sequence`],
     });
 };
 const de_DetectorAdditionalConfigurationResult = (output, context) => {
@@ -2894,6 +2929,29 @@ const de_EbsVolumesResult = (output, context) => {
         Status: [, __expectString, `status`],
     });
 };
+const de_Ec2Instance = (output, context) => {
+    return take(output, {
+        AvailabilityZone: [, __expectString, `availabilityZone`],
+        Ec2NetworkInterfaceUids: [, _json, `ec2NetworkInterfaceUids`],
+        IamInstanceProfile: (_) => de_IamInstanceProfile(_, context),
+        ImageDescription: [, __expectString, `imageDescription`],
+        InstanceState: [, __expectString, `instanceState`],
+        InstanceType: [, __expectString, `instanceType`],
+        OutpostArn: [, __expectString, `outpostArn`],
+        Platform: [, __expectString, `platform`],
+        ProductCodes: [, (_) => de_ProductCodes(_, context), `productCodes`],
+    });
+};
+const de_Ec2NetworkInterface = (output, context) => {
+    return take(output, {
+        Ipv6Addresses: [, _json, `ipv6Addresses`],
+        PrivateIpAddresses: [, (_) => de_PrivateIpAddresses(_, context), `privateIpAddresses`],
+        PublicIp: [, __expectString, `publicIp`],
+        SecurityGroups: [, (_) => de_SecurityGroups(_, context), `securityGroups`],
+        SubNetId: [, __expectString, `subNetId`],
+        VpcId: [, __expectString, `vpcId`],
+    });
+};
 const de_EcsClusterDetails = (output, context) => {
     return take(output, {
         ActiveServicesCount: [, __expectInt32, `activeServicesCount`],
@@ -2954,6 +3012,7 @@ const de_Finding = (output, context) => {
     return take(output, {
         AccountId: [, __expectString, `accountId`],
         Arn: [, __expectString, `arn`],
+        AssociatedAttackSequenceArn: [, __expectString, `associatedAttackSequenceArn`],
         Confidence: [, __limitedParseDouble, `confidence`],
         CreatedAt: [, __expectString, `createdAt`],
         Description: [, __expectString, `description`],
@@ -3088,6 +3147,21 @@ const de_ImpersonatedUser = (output, context) => {
         Username: [, __expectString, `username`],
     });
 };
+const de_Indicator = (output, context) => {
+    return take(output, {
+        Key: [, __expectString, `key`],
+        Title: [, __expectString, `title`],
+        Values: [, _json, `values`],
+    });
+};
+const de_Indicators = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        return de_Indicator(entry, context);
+    });
+    return retVal;
+};
 const de_InstanceDetails = (output, context) => {
     return take(output, {
         AvailabilityZone: [, __expectString, `availabilityZone`],
@@ -3423,6 +3497,11 @@ const de_Members = (output, context) => {
     });
     return retVal;
 };
+const de_NetworkConnection = (output, context) => {
+    return take(output, {
+        Direction: [, __expectString, `direction`],
+    });
+};
 const de_NetworkConnectionAction = (output, context) => {
     return take(output, {
         Blocked: [, __expectBoolean, `blocked`],
@@ -3435,6 +3514,33 @@ const de_NetworkConnectionAction = (output, context) => {
         RemotePortDetails: [, (_) => de_RemotePortDetails(_, context), `remotePortDetails`],
     });
 };
+const de_NetworkEndpoint = (output, context) => {
+    return take(output, {
+        AutonomousSystem: [, (_) => de_AutonomousSystem(_, context), `autonomousSystem`],
+        Connection: [, (_) => de_NetworkConnection(_, context), `connection`],
+        Domain: [, __expectString, `domain`],
+        Id: [, __expectString, `id`],
+        Ip: [, __expectString, `ip`],
+        Location: [, (_) => de_NetworkGeoLocation(_, context), `location`],
+        Port: [, __expectInt32, `port`],
+    });
+};
+const de_NetworkEndpoints = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        return de_NetworkEndpoint(entry, context);
+    });
+    return retVal;
+};
+const de_NetworkGeoLocation = (output, context) => {
+    return take(output, {
+        City: [, __expectString, `city`],
+        Country: [, __expectString, `country`],
+        Latitude: [, __limitedParseDouble, `lat`],
+        Longitude: [, __limitedParseDouble, `lon`],
+    });
+};
 const de_NetworkInterface = (output, context) => {
     return take(output, {
         Ipv6Addresses: [, _json, `ipv6Addresses`],
@@ -3679,6 +3785,14 @@ const de_PublicAccess = (output, context) => {
         PermissionConfiguration: [, (_) => de_PermissionConfiguration(_, context), `permissionConfiguration`],
     });
 };
+const de_PublicAccessConfiguration = (output, context) => {
+    return take(output, {
+        PublicAclAccess: [, __expectString, `publicAclAccess`],
+        PublicAclIgnoreBehavior: [, __expectString, `publicAclIgnoreBehavior`],
+        PublicBucketRestrictBehavior: [, __expectString, `publicBucketRestrictBehavior`],
+        PublicPolicyAccess: [, __expectString, `publicPolicyAccess`],
+    });
+};
 const de_RdsDbInstanceDetails = (output, context) => {
     return take(output, {
         DbClusterIdentifier: [, __expectString, `dbClusterIdentifier`],
@@ -3754,11 +3868,28 @@ const de_Resource = (output, context) => {
         S3BucketDetails: [, (_) => de_S3BucketDetails(_, context), `s3BucketDetails`],
     });
 };
+const de_ResourceData = (output, context) => {
+    return take(output, {
+        AccessKey: [, (_) => de_AccessKey(_, context), `accessKey`],
+        Ec2Instance: [, (_) => de_Ec2Instance(_, context), `ec2Instance`],
+        Ec2NetworkInterface: [, (_) => de_Ec2NetworkInterface(_, context), `ec2NetworkInterface`],
+        S3Bucket: [, (_) => de_S3Bucket(_, context), `s3Bucket`],
+        S3Object: [, (_) => de_S3Object(_, context), `s3Object`],
+    });
+};
 const de_ResourceDetails = (output, context) => {
     return take(output, {
         InstanceArn: [, __expectString, `instanceArn`],
     });
 };
+const de_Resources = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        return de_ResourceV2(entry, context);
+    });
+    return retVal;
+};
 const de_ResourceStatistics = (output, context) => {
     return take(output, {
         AccountId: [, __expectString, `accountId`],
@@ -3768,6 +3899,19 @@ const de_ResourceStatistics = (output, context) => {
         TotalFindings: [, __expectInt32, `totalFindings`],
     });
 };
+const de_ResourceV2 = (output, context) => {
+    return take(output, {
+        AccountId: [, __expectString, `accountId`],
+        CloudPartition: [, __expectString, `cloudPartition`],
+        Data: [, (_) => de_ResourceData(_, context), `data`],
+        Name: [, __expectString, `name`],
+        Region: [, __expectString, `region`],
+        ResourceType: [, __expectString, `resourceType`],
+        Service: [, __expectString, `service`],
+        Tags: [, (_) => de_Tags(_, context), `tags`],
+        Uid: [, __expectString, `uid`],
+    });
+};
 const de_RuntimeContext = (output, context) => {
     return take(output, {
         AddressFamily: [, __expectString, `addressFamily`],
@@ -3803,6 +3947,20 @@ const de_RuntimeDetails = (output, context) => {
         Process: [, (_) => de_ProcessDetails(_, context), `process`],
     });
 };
+const de_S3Bucket = (output, context) => {
+    return take(output, {
+        AccountPublicAccess: [, (_) => de_PublicAccessConfiguration(_, context), `accountPublicAccess`],
+        BucketPublicAccess: [, (_) => de_PublicAccessConfiguration(_, context), `bucketPublicAccess`],
+        CreatedAt: [, (_) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))), `createdAt`],
+        EffectivePermission: [, __expectString, `effectivePermission`],
+        EncryptionKeyArn: [, __expectString, `encryptionKeyArn`],
+        EncryptionType: [, __expectString, `encryptionType`],
+        OwnerId: [, __expectString, `ownerId`],
+        PublicReadAccess: [, __expectString, `publicReadAccess`],
+        PublicWriteAccess: [, __expectString, `publicWriteAccess`],
+        S3ObjectUids: [, _json, `s3ObjectUids`],
+    });
+};
 const de_S3BucketDetail = (output, context) => {
     return take(output, {
         Arn: [, __expectString, `arn`],
@@ -3833,6 +3991,13 @@ const de_S3LogsConfigurationResult = (output, context) => {
         Status: [, __expectString, `status`],
     });
 };
+const de_S3Object = (output, context) => {
+    return take(output, {
+        ETag: [, __expectString, `eTag`],
+        Key: [, __expectString, `key`],
+        VersionId: [, __expectString, `versionId`],
+    });
+};
 const de_S3ObjectDetail = (output, context) => {
     return take(output, {
         ETag: [, __expectString, `eTag`],
@@ -3976,6 +4141,17 @@ const de_SecurityGroups = (output, context) => {
     });
     return retVal;
 };
+const de_Sequence = (output, context) => {
+    return take(output, {
+        Actors: [, (_) => de_Actors(_, context), `actors`],
+        Description: [, __expectString, `description`],
+        Endpoints: [, (_) => de_NetworkEndpoints(_, context), `endpoints`],
+        Resources: [, (_) => de_Resources(_, context), `resources`],
+        SequenceIndicators: [, (_) => de_Indicators(_, context), `sequenceIndicators`],
+        Signals: [, (_) => de_Signals(_, context), `signals`],
+        Uid: [, __expectString, `uid`],
+    });
+};
 const de_Service = (output, context) => {
     return take(output, {
         Action: [, (_) => de_Action(_, context), `action`],
@@ -4002,6 +4178,14 @@ const de_ServiceAdditionalInfo = (output, context) => {
         Value: [, __expectString, `value`],
     });
 };
+const de_Session = (output, context) => {
+    return take(output, {
+        CreatedTime: [, (_) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))), `createdTime`],
+        Issuer: [, __expectString, `issuer`],
+        MfaStatus: [, __expectString, `mfaStatus`],
+        Uid: [, __expectString, `uid`],
+    });
+};
 const de_SeverityStatistics = (output, context) => {
     return take(output, {
         LastGeneratedAt: [, (_) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))), `lastGeneratedAt`],
@@ -4009,6 +4193,32 @@ const de_SeverityStatistics = (output, context) => {
         TotalFindings: [, __expectInt32, `totalFindings`],
     });
 };
+const de_Signal = (output, context) => {
+    return take(output, {
+        ActorIds: [, _json, `actorIds`],
+        Count: [, __expectInt32, `count`],
+        CreatedAt: [, (_) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))), `createdAt`],
+        Description: [, __expectString, `description`],
+        EndpointIds: [, _json, `endpointIds`],
+        FirstSeenAt: [, (_) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))), `firstSeenAt`],
+        LastSeenAt: [, (_) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))), `lastSeenAt`],
+        Name: [, __expectString, `name`],
+        ResourceUids: [, _json, `resourceUids`],
+        Severity: [, __limitedParseDouble, `severity`],
+        SignalIndicators: [, (_) => de_Indicators(_, context), `signalIndicators`],
+        Type: [, __expectString, `type`],
+        Uid: [, __expectString, `uid`],
+        UpdatedAt: [, (_) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))), `updatedAt`],
+    });
+};
+const de_Signals = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        return de_Signal(entry, context);
+    });
+    return retVal;
+};
 const de_Tag = (output, context) => {
     return take(output, {
         Key: [, __expectString, `key`],
@@ -4191,6 +4401,15 @@ const de_UsageTopAccountsResultList = (output, context) => {
     });
     return retVal;
 };
+const de_User = (output, context) => {
+    return take(output, {
+        Account: [, (_) => de_Account(_, context), `account`],
+        CredentialUid: [, __expectString, `credentialUid`],
+        Name: [, __expectString, `name`],
+        Type: [, __expectString, `type`],
+        Uid: [, __expectString, `uid`],
+    });
+};
 const de_Volume = (output, context) => {
     return take(output, {
         HostPath: [, (_) => de_HostPath(_, context), `hostPath`],