@aws-sdk/client-inspector2 3.216.0 → 3.219.0

package/dist-types/models/models_0.d.ts

@@ -31,6 +31,10 @@ export interface ResourceStatus {
      * <p>The status of Amazon Inspector scanning for Amazon ECR resources.</p>
      */
     ecr: Status | string | undefined;
+    /**
+     * <p>The status of Amazon Inspector scanning for AWS Lambda function resources.</p>
+     */
+    lambda?: Status | string;
 }
 /**
  * <p>An Amazon Web Services account within your environment that Amazon Inspector has been enabled for.</p>
@@ -55,7 +59,8 @@ export declare enum AggregationFindingType {
 }
 export declare enum AggregationResourceType {
     AWS_EC2_INSTANCE = "AWS_EC2_INSTANCE",
-    AWS_ECR_CONTAINER_IMAGE = "AWS_ECR_CONTAINER_IMAGE"
+    AWS_ECR_CONTAINER_IMAGE = "AWS_ECR_CONTAINER_IMAGE",
+    AWS_LAMBDA_FUNCTION = "AWS_LAMBDA_FUNCTION"
 }
 export declare enum AccountSortBy {
     ALL = "ALL",
@@ -167,9 +172,13 @@ export interface ResourceState {
      * <p>An object detailing the state of Amazon Inspector scanning for Amazon ECR resources.</p>
      */
     ecr: State | undefined;
+    /**
+     * <p>An object that described the state of Amazon Inspector scans for an account.</p>
+     */
+    lambda?: State;
 }
 /**
- * <p>An object with details the status of an Amazon Web Services account within your Amazon Inspector environment</p>
+ * <p>An object with details the status of an Amazon Web Services account within your Amazon Inspector environment.</p>
  */
 export interface AccountState {
     /**
@@ -195,7 +204,7 @@ export declare enum StringComparison {
  */
 export interface StringFilter {
     /**
-     * <p>The operator to use when comparing values in the filter</p>
+     * <p>The operator to use when comparing values in the filter.</p>
      */
     comparison: StringComparison | string | undefined;
     /**
@@ -377,6 +386,71 @@ export interface ImageLayerAggregation {
      */
     sortBy?: ImageLayerSortBy | string;
 }
+export declare enum LambdaFunctionSortBy {
+    ALL = "ALL",
+    CRITICAL = "CRITICAL",
+    HIGH = "HIGH"
+}
+/**
+ * <p>The details that define a findings aggregation based on AWS Lambda functions.</p>
+ */
+export interface LambdaFunctionAggregation {
+    /**
+     * <p>The resource IDs to include in the aggregation results.</p>
+     */
+    resourceIds?: StringFilter[];
+    /**
+     * <p>The AWS Lambda function names to include in the aggregation results.</p>
+     */
+    functionNames?: StringFilter[];
+    /**
+     * <p>Returns findings aggregated by AWS Lambda function runtime environments.</p>
+     */
+    runtimes?: StringFilter[];
+    /**
+     * <p>The tags to include in the aggregation results.</p>
+     */
+    functionTags?: MapFilter[];
+    /**
+     * <p>The order to use for sorting the results.</p>
+     */
+    sortOrder?: SortOrder | string;
+    /**
+     * <p>The finding severity to use for sorting the results.</p>
+     */
+    sortBy?: LambdaFunctionSortBy | string;
+}
+export declare enum LambdaLayerSortBy {
+    ALL = "ALL",
+    CRITICAL = "CRITICAL",
+    HIGH = "HIGH"
+}
+/**
+ * <p>The details that define a findings aggregation based on an AWS Lambda function's layers.</p>
+ */
+export interface LambdaLayerAggregation {
+    /**
+     * <p>The names of the AWS Lambda functions associated with the layers.</p>
+     */
+    functionNames?: StringFilter[];
+    /**
+     * <p>The resource IDs for the AWS Lambda function layers.</p>
+     */
+    resourceIds?: StringFilter[];
+    /**
+     * <p>The Amazon Resource Name (ARN) of the AWS Lambda function layer.
+     *       </p>
+     */
+    layerArns?: StringFilter[];
+    /**
+     * <p>The order to use for sorting the results.</p>
+     */
+    sortOrder?: SortOrder | string;
+    /**
+     * <p>The finding severity to use for sorting the results.</p>
+     */
+    sortBy?: LambdaLayerSortBy | string;
+}
 export declare enum PackageSortBy {
     ALL = "ALL",
     CRITICAL = "CRITICAL",
@@ -455,7 +529,7 @@ export interface TitleAggregation {
 /**
  * <p>Contains details about an aggregation request.</p>
  */
-export declare type AggregationRequest = AggregationRequest.AccountAggregationMember | AggregationRequest.AmiAggregationMember | AggregationRequest.AwsEcrContainerAggregationMember | AggregationRequest.Ec2InstanceAggregationMember | AggregationRequest.FindingTypeAggregationMember | AggregationRequest.ImageLayerAggregationMember | AggregationRequest.PackageAggregationMember | AggregationRequest.RepositoryAggregationMember | AggregationRequest.TitleAggregationMember | AggregationRequest.$UnknownMember;
+export declare type AggregationRequest = AggregationRequest.AccountAggregationMember | AggregationRequest.AmiAggregationMember | AggregationRequest.AwsEcrContainerAggregationMember | AggregationRequest.Ec2InstanceAggregationMember | AggregationRequest.FindingTypeAggregationMember | AggregationRequest.ImageLayerAggregationMember | AggregationRequest.LambdaFunctionAggregationMember | AggregationRequest.LambdaLayerAggregationMember | AggregationRequest.PackageAggregationMember | AggregationRequest.RepositoryAggregationMember | AggregationRequest.TitleAggregationMember | AggregationRequest.$UnknownMember;
 export declare namespace AggregationRequest {
     /**
      * <p>An object that contains details about an aggregation request based on Amazon Web Services account
@@ -471,6 +545,8 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -487,6 +563,8 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -503,6 +581,8 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -519,6 +599,8 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -534,6 +616,8 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -550,6 +634,8 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -566,6 +652,8 @@ export declare namespace AggregationRequest {
         packageAggregation: PackageAggregation;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -581,6 +669,8 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation: RepositoryAggregation;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -596,6 +686,42 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation: TitleAggregation;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Returns an object with findings aggregated by AWS Lambda layer.</p>
+     */
+    interface LambdaLayerAggregationMember {
+        accountAggregation?: never;
+        amiAggregation?: never;
+        awsEcrContainerAggregation?: never;
+        ec2InstanceAggregation?: never;
+        findingTypeAggregation?: never;
+        imageLayerAggregation?: never;
+        packageAggregation?: never;
+        repositoryAggregation?: never;
+        titleAggregation?: never;
+        lambdaLayerAggregation: LambdaLayerAggregation;
+        lambdaFunctionAggregation?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>Returns an object with findings aggregated by AWS Lambda function.</p>
+     */
+    interface LambdaFunctionAggregationMember {
+        accountAggregation?: never;
+        amiAggregation?: never;
+        awsEcrContainerAggregation?: never;
+        ec2InstanceAggregation?: never;
+        findingTypeAggregation?: never;
+        imageLayerAggregation?: never;
+        packageAggregation?: never;
+        repositoryAggregation?: never;
+        titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation: LambdaFunctionAggregation;
         $unknown?: never;
     }
     interface $UnknownMember {
@@ -608,6 +734,8 @@ export declare namespace AggregationRequest {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown: [string, any];
     }
     interface Visitor<T> {
@@ -620,6 +748,8 @@ export declare namespace AggregationRequest {
         packageAggregation: (value: PackageAggregation) => T;
         repositoryAggregation: (value: RepositoryAggregation) => T;
         titleAggregation: (value: TitleAggregation) => T;
+        lambdaLayerAggregation: (value: LambdaLayerAggregation) => T;
+        lambdaFunctionAggregation: (value: LambdaFunctionAggregation) => T;
         _: (name: string, value: any) => T;
     }
     const visit: <T>(value: AggregationRequest, visitor: Visitor<T>) => T;
@@ -633,7 +763,7 @@ export interface AmiAggregationResponse {
      */
     ami: string | undefined;
     /**
-     * <p>The Amazon Web Services account ID that the AMI belongs.</p>
+     * <p>The Amazon Web Services account ID for the AMI.</p>
      */
     accountId?: string;
     /**
@@ -699,7 +829,7 @@ export interface Ec2InstanceAggregationResponse {
      */
     instanceTags?: Record<string, string>;
     /**
-     * <p>The Amazon Web Services account the Amazon EC2 instance belongs to.</p>
+     * <p>The Amazon Web Services account for the Amazon EC2 instance.</p>
      */
     accountId?: string;
     /**
@@ -749,6 +879,65 @@ export interface ImageLayerAggregationResponse {
      */
     severityCounts?: SeverityCounts;
 }
+/**
+ * <p>A response that contains the results of an AWS Lambda function finding aggregation.</p>
+ */
+export interface LambdaFunctionAggregationResponse {
+    /**
+     * <p>The resource IDs included in the aggregation results.</p>
+     */
+    resourceId: string | undefined;
+    /**
+     * <p>The AWS Lambda function names included in the aggregation results.</p>
+     */
+    functionName?: string;
+    /**
+     * <p>The runtimes included in the aggregation results.</p>
+     */
+    runtime?: string;
+    /**
+     * <p>The tags included in the aggregation results.</p>
+     */
+    lambdaTags?: Record<string, string>;
+    /**
+     * <p>The ID of the AWS account that owns the AWS Lambda function.
+     *       </p>
+     */
+    accountId?: string;
+    /**
+     * <p>An object that contains the counts of aggregated finding per severity.</p>
+     */
+    severityCounts?: SeverityCounts;
+    /**
+     * <p>The date that the AWS Lambda function included in the aggregation results was last changed.</p>
+     */
+    lastModifiedAt?: Date;
+}
+/**
+ * <p>A response that contains the results of an AWS Lambda function layer finding aggregation.</p>
+ */
+export interface LambdaLayerAggregationResponse {
+    /**
+     * <p>The names of the AWS Lambda functions associated with the layers.</p>
+     */
+    functionName: string | undefined;
+    /**
+     * <p>The Resource ID of the AWS Lambda function layer.</p>
+     */
+    resourceId: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the AWS Lambda function layer.</p>
+     */
+    layerArn: string | undefined;
+    /**
+     * <p>The account ID of the AWS Lambda function layer.</p>
+     */
+    accountId: string | undefined;
+    /**
+     * <p>An object that contains the counts of aggregated finding per severity.</p>
+     */
+    severityCounts?: SeverityCounts;
+}
 /**
  * <p>A response that contains the results of a finding aggregation by image layer.</p>
  */
@@ -811,7 +1000,7 @@ export interface TitleAggregationResponse {
 /**
  * <p>A structure that contains details about the results of an aggregation type.</p>
  */
-export declare type AggregationResponse = AggregationResponse.AccountAggregationMember | AggregationResponse.AmiAggregationMember | AggregationResponse.AwsEcrContainerAggregationMember | AggregationResponse.Ec2InstanceAggregationMember | AggregationResponse.FindingTypeAggregationMember | AggregationResponse.ImageLayerAggregationMember | AggregationResponse.PackageAggregationMember | AggregationResponse.RepositoryAggregationMember | AggregationResponse.TitleAggregationMember | AggregationResponse.$UnknownMember;
+export declare type AggregationResponse = AggregationResponse.AccountAggregationMember | AggregationResponse.AmiAggregationMember | AggregationResponse.AwsEcrContainerAggregationMember | AggregationResponse.Ec2InstanceAggregationMember | AggregationResponse.FindingTypeAggregationMember | AggregationResponse.ImageLayerAggregationMember | AggregationResponse.LambdaFunctionAggregationMember | AggregationResponse.LambdaLayerAggregationMember | AggregationResponse.PackageAggregationMember | AggregationResponse.RepositoryAggregationMember | AggregationResponse.TitleAggregationMember | AggregationResponse.$UnknownMember;
 export declare namespace AggregationResponse {
     /**
      * <p>An object that contains details about an aggregation response based on Amazon Web Services account
@@ -827,6 +1016,8 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -843,6 +1034,8 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -859,6 +1052,8 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -875,6 +1070,8 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -890,6 +1087,8 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -906,6 +1105,8 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -922,6 +1123,8 @@ export declare namespace AggregationResponse {
         packageAggregation: PackageAggregationResponse;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -938,6 +1141,8 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation: RepositoryAggregationResponse;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown?: never;
     }
     /**
@@ -953,6 +1158,42 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation: TitleAggregationResponse;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>An aggregation of findings by AWS Lambda layer.</p>
+     */
+    interface LambdaLayerAggregationMember {
+        accountAggregation?: never;
+        amiAggregation?: never;
+        awsEcrContainerAggregation?: never;
+        ec2InstanceAggregation?: never;
+        findingTypeAggregation?: never;
+        imageLayerAggregation?: never;
+        packageAggregation?: never;
+        repositoryAggregation?: never;
+        titleAggregation?: never;
+        lambdaLayerAggregation: LambdaLayerAggregationResponse;
+        lambdaFunctionAggregation?: never;
+        $unknown?: never;
+    }
+    /**
+     * <p>An aggregation of findings by AWS Lambda function.</p>
+     */
+    interface LambdaFunctionAggregationMember {
+        accountAggregation?: never;
+        amiAggregation?: never;
+        awsEcrContainerAggregation?: never;
+        ec2InstanceAggregation?: never;
+        findingTypeAggregation?: never;
+        imageLayerAggregation?: never;
+        packageAggregation?: never;
+        repositoryAggregation?: never;
+        titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation: LambdaFunctionAggregationResponse;
         $unknown?: never;
     }
     interface $UnknownMember {
@@ -965,6 +1206,8 @@ export declare namespace AggregationResponse {
         packageAggregation?: never;
         repositoryAggregation?: never;
         titleAggregation?: never;
+        lambdaLayerAggregation?: never;
+        lambdaFunctionAggregation?: never;
         $unknown: [string, any];
     }
     interface Visitor<T> {
@@ -977,6 +1220,8 @@ export declare namespace AggregationResponse {
         packageAggregation: (value: PackageAggregationResponse) => T;
         repositoryAggregation: (value: RepositoryAggregationResponse) => T;
         titleAggregation: (value: TitleAggregationResponse) => T;
+        lambdaLayerAggregation: (value: LambdaLayerAggregationResponse) => T;
+        lambdaFunctionAggregation: (value: LambdaFunctionAggregationResponse) => T;
         _: (name: string, value: any) => T;
     }
     const visit: <T>(value: AggregationResponse, visitor: Visitor<T>) => T;
@@ -986,12 +1231,18 @@ export declare enum AggregationType {
     AMI = "AMI",
     AWS_EC2_INSTANCE = "AWS_EC2_INSTANCE",
     AWS_ECR_CONTAINER = "AWS_ECR_CONTAINER",
+    AWS_LAMBDA_FUNCTION = "AWS_LAMBDA_FUNCTION",
     FINDING_TYPE = "FINDING_TYPE",
     IMAGE_LAYER = "IMAGE_LAYER",
+    LAMBDA_LAYER = "LAMBDA_LAYER",
     PACKAGE = "PACKAGE",
     REPOSITORY = "REPOSITORY",
     TITLE = "TITLE"
 }
+export declare enum Architecture {
+    ARM64 = "ARM64",
+    X86_64 = "X86_64"
+}
 export interface AssociateMemberRequest {
     /**
      * <p>The Amazon Web Services account ID of the member account to be associated.</p>
@@ -1026,6 +1277,13 @@ export declare class InternalServerException extends __BaseException {
 export declare class ThrottlingException extends __BaseException {
     readonly name: "ThrottlingException";
     readonly $fault: "client";
+    $retryable: {
+        throttling: boolean;
+    };
+    /**
+     * <p>The number of seconds to wait before retrying the request.</p>
+     */
+    retryAfterSeconds?: number;
     /**
      * @internal
      */
@@ -1083,6 +1341,11 @@ export interface AutoEnable {
      *          organization.</p>
      */
     ecr: boolean | undefined;
+    /**
+     * <p>Represents whether AWS Lambda scans are automatically enabled for new members of your Amazon Inspector organization.
+     *       </p>
+     */
+    lambda?: boolean;
 }
 /**
  * <p>Details of the Amazon EC2 instance involved in a finding.</p>
@@ -1158,7 +1421,7 @@ export interface AwsEcrContainerImageDetails {
      */
     imageHash: string | undefined;
     /**
-     * <p>The registry the Amazon ECR container image belongs to.</p>
+     * <p>The registry for the Amazon ECR container image.</p>
      */
     registry: string | undefined;
     /**
@@ -1166,6 +1429,88 @@ export interface AwsEcrContainerImageDetails {
      */
     platform?: string;
 }
+export declare enum PackageType {
+    IMAGE = "IMAGE",
+    ZIP = "ZIP"
+}
+export declare enum Runtime {
+    JAVA_11 = "JAVA_11",
+    JAVA_8 = "JAVA_8",
+    JAVA_8_AL2 = "JAVA_8_AL2",
+    NODEJS = "NODEJS",
+    NODEJS_12_X = "NODEJS_12_X",
+    NODEJS_14_X = "NODEJS_14_X",
+    NODEJS_16_X = "NODEJS_16_X",
+    PYTHON_3_7 = "PYTHON_3_7",
+    PYTHON_3_8 = "PYTHON_3_8",
+    PYTHON_3_9 = "PYTHON_3_9",
+    UNSUPPORTED = "UNSUPPORTED"
+}
+/**
+ * <p>The VPC security groups and subnets that are attached to an AWS Lambda function. For more information, see <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html">VPC Settings</a>.</p>
+ */
+export interface LambdaVpcConfig {
+    /**
+     * <p>A list of VPC subnet IDs.</p>
+     */
+    subnetIds?: string[];
+    /**
+     * <p>The VPC security groups and subnets that are attached to an AWS Lambda function. For more information, see <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html">VPC Settings</a>.</p>
+     */
+    securityGroupIds?: string[];
+    /**
+     * <p>The ID of the VPC.</p>
+     */
+    vpcId?: string;
+}
+/**
+ * <p> A summary of information about the AWS Lambda function.</p>
+ */
+export interface AwsLambdaFunctionDetails {
+    /**
+     * <p>The name of the AWS Lambda function.</p>
+     */
+    functionName: string | undefined;
+    /**
+     * <p>The runtime environment for the AWS Lambda function.</p>
+     */
+    runtime: Runtime | string | undefined;
+    /**
+     * <p>The SHA256 hash of the AWS Lambda function's deployment package.</p>
+     */
+    codeSha256: string | undefined;
+    /**
+     * <p>The version of the AWS Lambda function.</p>
+     */
+    version: string | undefined;
+    /**
+     * <p>The AWS Lambda function's execution role.</p>
+     */
+    executionRoleArn: string | undefined;
+    /**
+     * <p>The AWS Lambda function's <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html">
+     *          layers</a>. A Lambda function can have up to five layers.</p>
+     */
+    layers?: string[];
+    /**
+     * <p>The AWS Lambda function's networking configuration.</p>
+     */
+    vpcConfig?: LambdaVpcConfig;
+    /**
+     * <p>The type of deployment package. Set to <code>Image</code> for container image and set <code>Zip</code> for .zip file archive.</p>
+     */
+    packageType?: PackageType | string;
+    /**
+     * <p>The instruction set architecture that the AWS Lambda function supports. Architecture is a string array with one of the
+     *          valid values. The default architecture value is <code>x86_64</code>.</p>
+     */
+    architectures?: (Architecture | string)[];
+    /**
+     * <p>The date and time that a user last updated the configuration, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO 8601 format</a>
+     *          </p>
+     */
+    lastModifiedAt?: Date;
+}
 /**
  * <p>One or more tags submitted as part of the request is not valid.</p>
  */
@@ -1241,7 +1586,8 @@ export declare enum FreeTrialStatus {
 }
 export declare enum FreeTrialType {
     EC2 = "EC2",
-    ECR = "ECR"
+    ECR = "ECR",
+    LAMBDA = "LAMBDA"
 }
 /**
  * <p>An object that contains information about the Amazon Inspector free trial for an account.</p>
@@ -1437,11 +1783,24 @@ export interface CoverageFilterCriteria {
      * <p>The Amazon EC2 instance tags to filter on.</p>
      */
     ec2InstanceTags?: CoverageMapFilter[];
+    /**
+     * <p>Returns coverage statistics for AWS Lambda functions filtered by function names.</p>
+     */
+    lambdaFunctionName?: CoverageStringFilter[];
+    /**
+     * <p>Returns coverage statistics for AWS Lambda functions filtered by tag.</p>
+     */
+    lambdaFunctionTags?: CoverageMapFilter[];
+    /**
+     * <p>Returns coverage statistics for AWS Lambda functions filtered by runtime.</p>
+     */
+    lambdaFunctionRuntime?: CoverageStringFilter[];
 }
 export declare enum CoverageResourceType {
     AWS_EC2_INSTANCE = "AWS_EC2_INSTANCE",
     AWS_ECR_CONTAINER_IMAGE = "AWS_ECR_CONTAINER_IMAGE",
-    AWS_ECR_REPOSITORY = "AWS_ECR_REPOSITORY"
+    AWS_ECR_REPOSITORY = "AWS_ECR_REPOSITORY",
+    AWS_LAMBDA_FUNCTION = "AWS_LAMBDA_FUNCTION"
 }
 export declare enum Ec2Platform {
     LINUX = "LINUX",
@@ -1492,6 +1851,27 @@ export interface EcrRepositoryMetadata {
      */
     scanFrequency?: EcrScanFrequency | string;
 }
+/**
+ * <p>The AWS Lambda function metadata.</p>
+ */
+export interface LambdaFunctionMetadata {
+    /**
+     * <p>The resource tags on an AWS Lambda function.</p>
+     */
+    functionTags?: Record<string, string>;
+    /**
+     * <p>The layers for an AWS Lambda function. A Lambda function can have up to five layers.</p>
+     */
+    layers?: string[];
+    /**
+     * <p>The name of a function.</p>
+     */
+    functionName?: string;
+    /**
+     * <p>An AWS Lambda function's runtime.</p>
+     */
+    runtime?: Runtime | string;
+}
 /**
  * <p>An object that contains details about the metadata for an Amazon ECR resource.</p>
  */
@@ -1508,10 +1888,15 @@ export interface ResourceScanMetadata {
      * <p>An object that contains metadata details for an Amazon EC2 instance.</p>
      */
     ec2?: Ec2Metadata;
+    /**
+     * <p>An object that contains metadata details for an AWS Lambda function.</p>
+     */
+    lambdaFunction?: LambdaFunctionMetadata;
 }
 export declare enum ScanStatusReason {
     ACCESS_DENIED = "ACCESS_DENIED",
     EC2_INSTANCE_STOPPED = "EC2_INSTANCE_STOPPED",
+    EXCLUDED_BY_TAG = "EXCLUDED_BY_TAG",
     IMAGE_SIZE_EXCEEDED = "IMAGE_SIZE_EXCEEDED",
     INTERNAL_ERROR = "INTERNAL_ERROR",
     NO_INVENTORY = "NO_INVENTORY",
@@ -1525,7 +1910,8 @@ export declare enum ScanStatusReason {
     STALE_INVENTORY = "STALE_INVENTORY",
     SUCCESSFUL = "SUCCESSFUL",
     UNMANAGED_EC2_INSTANCE = "UNMANAGED_EC2_INSTANCE",
-    UNSUPPORTED_OS = "UNSUPPORTED_OS"
+    UNSUPPORTED_OS = "UNSUPPORTED_OS",
+    UNSUPPORTED_RUNTIME = "UNSUPPORTED_RUNTIME"
 }
 export declare enum ScanStatusCode {
     ACTIVE = "ACTIVE",
@@ -1648,6 +2034,10 @@ export interface PackageFilter {
      * <p>An object that contains details on the source layer hash to filter on.</p>
      */
     sourceLayerHash?: StringFilter;
+    /**
+     * <p>An object that describes the details of a string filter.</p>
+     */
+    sourceLambdaLayerArn?: StringFilter;
 }
 /**
  * <p>Details on the criteria used to define the filter.</p>
@@ -1781,6 +2171,32 @@ export interface FilterCriteria {
      * <p>Details on whether a fix is available through a version update. This value can be <code>YES</code>, <code>NO</code>, or <code>PARTIAL</code>.  A <code>PARTIAL</code> fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.</p>
      */
     fixAvailable?: StringFilter[];
+    /**
+     * <p>Filters the list of AWS Lambda functions by the name of the function.</p>
+     */
+    lambdaFunctionName?: StringFilter[];
+    /**
+     * <p>Filters the list of AWS Lambda functions by the function's <a href="https://docs.aws.amazon.com/lambda/latest/dg/configuration-layers.html">
+     *          layers</a>. A Lambda function can have up to five layers.</p>
+     */
+    lambdaFunctionLayers?: StringFilter[];
+    /**
+     * <p>Filters the list of AWS Lambda functions by the runtime environment for the Lambda function.</p>
+     */
+    lambdaFunctionRuntime?: StringFilter[];
+    /**
+     * <p>Filters the list of AWS Lambda functions by the date and time that a user last updated the configuration, in <a href="https://www.iso.org/iso-8601-date-and-time-format.html">ISO 8601 format</a>
+     *          </p>
+     */
+    lambdaFunctionLastModifiedAt?: DateFilter[];
+    /**
+     * <p>Filters the list of AWS Lambda functions by execution role.</p>
+     */
+    lambdaFunctionExecutionRoleArn?: StringFilter[];
+    /**
+     * <p>Filters the list of AWS Lambda findings by the availability of exploits.</p>
+     */
+    exploitAvailable?: StringFilter[];
 }
 export interface CreateFilterRequest {
     /**
@@ -2009,7 +2425,8 @@ export interface DescribeOrganizationConfigurationResponse {
 }
 export declare enum ResourceScanType {
     EC2 = "EC2",
-    ECR = "ECR"
+    ECR = "ECR",
+    LAMBDA = "LAMBDA"
 }
 export interface DisableRequest {
     /**
@@ -2063,7 +2480,7 @@ export declare enum EcrRescanDuration {
     LIFETIME = "LIFETIME"
 }
 /**
- * <p>Details about the ECR automated re-scan duration setting for your environment</p>
+ * <p>Details about the ECR automated re-scan duration setting for your environment.</p>
  */
 export interface EcrConfiguration {
     /**
@@ -2144,6 +2561,19 @@ export interface EnableDelegatedAdminAccountResponse {
      */
     delegatedAdminAccountId: string | undefined;
 }
+/**
+ * <p>The details of an exploit available for a finding discovered in your environment.</p>
+ */
+export interface ExploitabilityDetails {
+    /**
+     * <p>The date and time of the last exploit associated with a finding discovered in your environment.</p>
+     */
+    lastKnownExploitAt?: Date;
+}
+export declare enum ExploitAvailable {
+    NO = "NO",
+    YES = "YES"
+}
 export declare enum ExternalReportStatus {
     CANCELLED = "CANCELLED",
     FAILED = "FAILED",
@@ -2327,6 +2757,10 @@ export interface VulnerablePackage {
      * <p>The code to run in your environment to update packages with a fix available.</p>
      */
     remediation?: string;
+    /**
+     * <p>The Amazon Resource Number (ARN) of the AWS Lambda function affected by a finding.</p>
+     */
+    sourceLambdaLayerArn?: string;
 }
 /**
  * <p>Information about a package vulnerability finding.</p>
@@ -2407,11 +2841,16 @@ export interface ResourceDetails {
      * <p>An object that contains details about the Amazon ECR container image involved in the finding.</p>
      */
     awsEcrContainerImage?: AwsEcrContainerImageDetails;
+    /**
+     * <p>A summary of the information about an AWS Lambda function affected by a finding.</p>
+     */
+    awsLambdaFunction?: AwsLambdaFunctionDetails;
 }
 export declare enum ResourceType {
     AWS_EC2_INSTANCE = "AWS_EC2_INSTANCE",
     AWS_ECR_CONTAINER_IMAGE = "AWS_ECR_CONTAINER_IMAGE",
-    AWS_ECR_REPOSITORY = "AWS_ECR_REPOSITORY"
+    AWS_ECR_REPOSITORY = "AWS_ECR_REPOSITORY",
+    AWS_LAMBDA_FUNCTION = "AWS_LAMBDA_FUNCTION"
 }
 /**
  * <p>Details about the resource involved in a finding.</p>
@@ -2531,6 +2970,14 @@ export interface Finding {
      * <p>Details on whether a fix is available through a version update. This value can be <code>YES</code>, <code>NO</code>, or <code>PARTIAL</code>.  A <code>PARTIAL</code> fix means that some, but not all, of the packages identified in the finding have fixes available through updated versions.</p>
      */
     fixAvailable?: FixAvailable | string;
+    /**
+     * <p>If a finding discovered in your environment has an exploit available.</p>
+     */
+    exploitAvailable?: ExploitAvailable | string;
+    /**
+     * <p>The details of an exploit available for a finding discovered in your environment.</p>
+     */
+    exploitabilityDetails?: ExploitabilityDetails;
 }
 export interface GetConfigurationRequest {
 }
@@ -2623,7 +3070,8 @@ export interface GetMemberResponse {
 }
 export declare enum Service {
     EC2 = "EC2",
-    ECR = "ECR"
+    ECR = "ECR",
+    LAMBDA = "LAMBDA"
 }
 export interface ListAccountPermissionsRequest {
     /**
@@ -2968,7 +3416,8 @@ export interface ListUsageTotalsRequest {
 export declare enum UsageType {
     EC2_INSTANCE_HOURS = "EC2_INSTANCE_HOURS",
     ECR_INITIAL_SCAN = "ECR_INITIAL_SCAN",
-    ECR_RESCAN = "ECR_RESCAN"
+    ECR_RESCAN = "ECR_RESCAN",
+    LAMBDA_FUNCTION_HOURS = "LAMBDA_FUNCTION_HOURS"
 }
 /**
  * <p>Contains usage information about the cost of Amazon Inspector operation.</p>
@@ -3150,6 +3599,14 @@ export declare const FindingTypeAggregationFilterSensitiveLog: (obj: FindingType
  * @internal
  */
 export declare const ImageLayerAggregationFilterSensitiveLog: (obj: ImageLayerAggregation) => any;
+/**
+ * @internal
+ */
+export declare const LambdaFunctionAggregationFilterSensitiveLog: (obj: LambdaFunctionAggregation) => any;
+/**
+ * @internal
+ */
+export declare const LambdaLayerAggregationFilterSensitiveLog: (obj: LambdaLayerAggregation) => any;
 /**
  * @internal
  */
@@ -3186,6 +3643,14 @@ export declare const FindingTypeAggregationResponseFilterSensitiveLog: (obj: Fin
  * @internal
  */
 export declare const ImageLayerAggregationResponseFilterSensitiveLog: (obj: ImageLayerAggregationResponse) => any;
+/**
+ * @internal
+ */
+export declare const LambdaFunctionAggregationResponseFilterSensitiveLog: (obj: LambdaFunctionAggregationResponse) => any;
+/**
+ * @internal
+ */
+export declare const LambdaLayerAggregationResponseFilterSensitiveLog: (obj: LambdaLayerAggregationResponse) => any;
 /**
  * @internal
  */
@@ -3226,6 +3691,14 @@ export declare const AwsEc2InstanceDetailsFilterSensitiveLog: (obj: AwsEc2Instan
  * @internal
  */
 export declare const AwsEcrContainerImageDetailsFilterSensitiveLog: (obj: AwsEcrContainerImageDetails) => any;
+/**
+ * @internal
+ */
+export declare const LambdaVpcConfigFilterSensitiveLog: (obj: LambdaVpcConfig) => any;
+/**
+ * @internal
+ */
+export declare const AwsLambdaFunctionDetailsFilterSensitiveLog: (obj: AwsLambdaFunctionDetails) => any;
 /**
  * @internal
  */
@@ -3294,6 +3767,10 @@ export declare const EcrContainerImageMetadataFilterSensitiveLog: (obj: EcrConta
  * @internal
  */
 export declare const EcrRepositoryMetadataFilterSensitiveLog: (obj: EcrRepositoryMetadata) => any;
+/**
+ * @internal
+ */
+export declare const LambdaFunctionMetadataFilterSensitiveLog: (obj: LambdaFunctionMetadata) => any;
 /**
  * @internal
  */
@@ -3434,6 +3911,10 @@ export declare const EnableDelegatedAdminAccountRequestFilterSensitiveLog: (obj:
  * @internal
  */
 export declare const EnableDelegatedAdminAccountResponseFilterSensitiveLog: (obj: EnableDelegatedAdminAccountResponse) => any;
+/**
+ * @internal
+ */
+export declare const ExploitabilityDetailsFilterSensitiveLog: (obj: ExploitabilityDetails) => any;
 /**
  * @internal
  */