@aws-sdk/client-inspector2 3.354.0 → 3.358.0

package/dist-types/ts3.4/commands/GetEncryptionKeyCommand.d.ts

@@ -0,0 +1,38 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  Handler,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+} from "@aws-sdk/types";
+import {
+  Inspector2ClientResolvedConfig,
+  ServiceInputTypes,
+  ServiceOutputTypes,
+} from "../Inspector2Client";
+import {
+  GetEncryptionKeyRequest,
+  GetEncryptionKeyResponse,
+} from "../models/models_0";
+export { __MetadataBearer, $Command };
+export interface GetEncryptionKeyCommandInput extends GetEncryptionKeyRequest {}
+export interface GetEncryptionKeyCommandOutput
+  extends GetEncryptionKeyResponse,
+    __MetadataBearer {}
+export declare class GetEncryptionKeyCommand extends $Command<
+  GetEncryptionKeyCommandInput,
+  GetEncryptionKeyCommandOutput,
+  Inspector2ClientResolvedConfig
+> {
+  readonly input: GetEncryptionKeyCommandInput;
+  static getEndpointParameterInstructions(): EndpointParameterInstructions;
+  constructor(input: GetEncryptionKeyCommandInput);
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: Inspector2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<GetEncryptionKeyCommandInput, GetEncryptionKeyCommandOutput>;
+  private serialize;
+  private deserialize;
+}

package/dist-types/ts3.4/commands/GetSbomExportCommand.d.ts

@@ -0,0 +1,38 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  Handler,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+} from "@aws-sdk/types";
+import {
+  Inspector2ClientResolvedConfig,
+  ServiceInputTypes,
+  ServiceOutputTypes,
+} from "../Inspector2Client";
+import {
+  GetSbomExportRequest,
+  GetSbomExportResponse,
+} from "../models/models_0";
+export { __MetadataBearer, $Command };
+export interface GetSbomExportCommandInput extends GetSbomExportRequest {}
+export interface GetSbomExportCommandOutput
+  extends GetSbomExportResponse,
+    __MetadataBearer {}
+export declare class GetSbomExportCommand extends $Command<
+  GetSbomExportCommandInput,
+  GetSbomExportCommandOutput,
+  Inspector2ClientResolvedConfig
+> {
+  readonly input: GetSbomExportCommandInput;
+  static getEndpointParameterInstructions(): EndpointParameterInstructions;
+  constructor(input: GetSbomExportCommandInput);
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: Inspector2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<GetSbomExportCommandInput, GetSbomExportCommandOutput>;
+  private serialize;
+  private deserialize;
+}

package/dist-types/ts3.4/commands/ResetEncryptionKeyCommand.d.ts

@@ -0,0 +1,39 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  Handler,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+} from "@aws-sdk/types";
+import {
+  Inspector2ClientResolvedConfig,
+  ServiceInputTypes,
+  ServiceOutputTypes,
+} from "../Inspector2Client";
+import {
+  ResetEncryptionKeyRequest,
+  ResetEncryptionKeyResponse,
+} from "../models/models_0";
+export { __MetadataBearer, $Command };
+export interface ResetEncryptionKeyCommandInput
+  extends ResetEncryptionKeyRequest {}
+export interface ResetEncryptionKeyCommandOutput
+  extends ResetEncryptionKeyResponse,
+    __MetadataBearer {}
+export declare class ResetEncryptionKeyCommand extends $Command<
+  ResetEncryptionKeyCommandInput,
+  ResetEncryptionKeyCommandOutput,
+  Inspector2ClientResolvedConfig
+> {
+  readonly input: ResetEncryptionKeyCommandInput;
+  static getEndpointParameterInstructions(): EndpointParameterInstructions;
+  constructor(input: ResetEncryptionKeyCommandInput);
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: Inspector2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<ResetEncryptionKeyCommandInput, ResetEncryptionKeyCommandOutput>;
+  private serialize;
+  private deserialize;
+}

package/dist-types/ts3.4/commands/UpdateEncryptionKeyCommand.d.ts

@@ -0,0 +1,39 @@
+import { EndpointParameterInstructions } from "@aws-sdk/middleware-endpoint";
+import { Command as $Command } from "@aws-sdk/smithy-client";
+import {
+  Handler,
+  HttpHandlerOptions as __HttpHandlerOptions,
+  MetadataBearer as __MetadataBearer,
+  MiddlewareStack,
+} from "@aws-sdk/types";
+import {
+  Inspector2ClientResolvedConfig,
+  ServiceInputTypes,
+  ServiceOutputTypes,
+} from "../Inspector2Client";
+import {
+  UpdateEncryptionKeyRequest,
+  UpdateEncryptionKeyResponse,
+} from "../models/models_0";
+export { __MetadataBearer, $Command };
+export interface UpdateEncryptionKeyCommandInput
+  extends UpdateEncryptionKeyRequest {}
+export interface UpdateEncryptionKeyCommandOutput
+  extends UpdateEncryptionKeyResponse,
+    __MetadataBearer {}
+export declare class UpdateEncryptionKeyCommand extends $Command<
+  UpdateEncryptionKeyCommandInput,
+  UpdateEncryptionKeyCommandOutput,
+  Inspector2ClientResolvedConfig
+> {
+  readonly input: UpdateEncryptionKeyCommandInput;
+  static getEndpointParameterInstructions(): EndpointParameterInstructions;
+  constructor(input: UpdateEncryptionKeyCommandInput);
+  resolveMiddleware(
+    clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>,
+    configuration: Inspector2ClientResolvedConfig,
+    options?: __HttpHandlerOptions
+  ): Handler<UpdateEncryptionKeyCommandInput, UpdateEncryptionKeyCommandOutput>;
+  private serialize;
+  private deserialize;
+}

package/dist-types/ts3.4/commands/index.d.ts

@@ -1,11 +1,14 @@
 export * from "./AssociateMemberCommand";
 export * from "./BatchGetAccountStatusCommand";
+export * from "./BatchGetCodeSnippetCommand";
 export * from "./BatchGetFreeTrialInfoCommand";
 export * from "./BatchGetMemberEc2DeepInspectionStatusCommand";
 export * from "./BatchUpdateMemberEc2DeepInspectionStatusCommand";
 export * from "./CancelFindingsReportCommand";
+export * from "./CancelSbomExportCommand";
 export * from "./CreateFilterCommand";
 export * from "./CreateFindingsReportCommand";
+export * from "./CreateSbomExportCommand";
 export * from "./DeleteFilterCommand";
 export * from "./DescribeOrganizationConfigurationCommand";
 export * from "./DisableCommand";
@@ -16,8 +19,10 @@ export * from "./EnableDelegatedAdminAccountCommand";
 export * from "./GetConfigurationCommand";
 export * from "./GetDelegatedAdminAccountCommand";
 export * from "./GetEc2DeepInspectionConfigurationCommand";
+export * from "./GetEncryptionKeyCommand";
 export * from "./GetFindingsReportStatusCommand";
 export * from "./GetMemberCommand";
+export * from "./GetSbomExportCommand";
 export * from "./ListAccountPermissionsCommand";
 export * from "./ListCoverageCommand";
 export * from "./ListCoverageStatisticsCommand";
@@ -28,11 +33,13 @@ export * from "./ListFindingsCommand";
 export * from "./ListMembersCommand";
 export * from "./ListTagsForResourceCommand";
 export * from "./ListUsageTotalsCommand";
+export * from "./ResetEncryptionKeyCommand";
 export * from "./SearchVulnerabilitiesCommand";
 export * from "./TagResourceCommand";
 export * from "./UntagResourceCommand";
 export * from "./UpdateConfigurationCommand";
 export * from "./UpdateEc2DeepInspectionConfigurationCommand";
+export * from "./UpdateEncryptionKeyCommand";
 export * from "./UpdateFilterCommand";
 export * from "./UpdateOrgEc2DeepInspectionConfigurationCommand";
 export * from "./UpdateOrganizationConfigurationCommand";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -20,6 +20,7 @@ export interface ResourceStatus {
   ec2: Status | string | undefined;
   ecr: Status | string | undefined;
   lambda?: Status | string;
+  lambdaCode?: Status | string;
 }
 export interface Account {
   accountId: string | undefined;
@@ -27,6 +28,7 @@ export interface Account {
   resourceStatus: ResourceStatus | undefined;
 }
 export declare const AggregationFindingType: {
+  readonly CODE_VULNERABILITY: "CODE_VULNERABILITY";
   readonly NETWORK_REACHABILITY: "NETWORK_REACHABILITY";
   readonly PACKAGE_VULNERABILITY: "PACKAGE_VULNERABILITY";
 };
@@ -92,6 +94,7 @@ export interface ResourceState {
   ec2: State | undefined;
   ecr: State | undefined;
   lambda?: State;
+  lambdaCode?: State;
 }
 export interface AccountState {
   accountId: string | undefined;
@@ -254,6 +257,7 @@ export interface TitleAggregation {
   resourceType?: AggregationResourceType | string;
   sortOrder?: SortOrder | string;
   sortBy?: TitleSortBy | string;
+  findingType?: AggregationFindingType | string;
 }
 export type AggregationRequest =
   | AggregationRequest.AccountAggregationMember
@@ -797,6 +801,7 @@ export interface AutoEnable {
   ec2: boolean | undefined;
   ecr: boolean | undefined;
   lambda?: boolean;
+  lambdaCode?: boolean;
 }
 export interface AwsEc2InstanceDetails {
   type?: string;
@@ -828,6 +833,7 @@ export type PackageType = (typeof PackageType)[keyof typeof PackageType];
 export declare const Runtime: {
   readonly GO_1_X: "GO_1_X";
   readonly JAVA_11: "JAVA_11";
+  readonly JAVA_17: "JAVA_17";
   readonly JAVA_8: "JAVA_8";
   readonly JAVA_8_AL2: "JAVA_8_AL2";
   readonly NODEJS: "NODEJS";
@@ -835,6 +841,7 @@ export declare const Runtime: {
   readonly NODEJS_14_X: "NODEJS_14_X";
   readonly NODEJS_16_X: "NODEJS_16_X";
   readonly NODEJS_18_X: "NODEJS_18_X";
+  readonly PYTHON_3_10: "PYTHON_3_10";
   readonly PYTHON_3_7: "PYTHON_3_7";
   readonly PYTHON_3_8: "PYTHON_3_8";
   readonly PYTHON_3_9: "PYTHON_3_9";
@@ -886,6 +893,41 @@ export declare class ResourceNotFoundException extends __BaseException {
     opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>
   );
 }
+export interface BatchGetCodeSnippetRequest {
+  findingArns: string[] | undefined;
+}
+export interface CodeLine {
+  content: string | undefined;
+  lineNumber: number | undefined;
+}
+export interface SuggestedFix {
+  description?: string;
+  code?: string;
+}
+export interface CodeSnippetResult {
+  findingArn?: string;
+  startLine?: number;
+  endLine?: number;
+  codeSnippet?: CodeLine[];
+  suggestedFixes?: SuggestedFix[];
+}
+export declare const CodeSnippetErrorCode: {
+  readonly ACCESS_DENIED: "ACCESS_DENIED";
+  readonly CODE_SNIPPET_NOT_FOUND: "CODE_SNIPPET_NOT_FOUND";
+  readonly INTERNAL_ERROR: "INTERNAL_ERROR";
+  readonly INVALID_INPUT: "INVALID_INPUT";
+};
+export type CodeSnippetErrorCode =
+  (typeof CodeSnippetErrorCode)[keyof typeof CodeSnippetErrorCode];
+export interface CodeSnippetError {
+  findingArn: string | undefined;
+  errorCode: CodeSnippetErrorCode | string | undefined;
+  errorMessage: string | undefined;
+}
+export interface BatchGetCodeSnippetResponse {
+  codeSnippetResults?: CodeSnippetResult[];
+  errors?: CodeSnippetError[];
+}
 export interface BatchGetFreeTrialInfoRequest {
   accountIds: string[] | undefined;
 }
@@ -899,6 +941,7 @@ export declare const FreeTrialType: {
   readonly EC2: "EC2";
   readonly ECR: "ECR";
   readonly LAMBDA: "LAMBDA";
+  readonly LAMBDA_CODE: "LAMBDA_CODE";
 };
 export type FreeTrialType = (typeof FreeTrialType)[keyof typeof FreeTrialType];
 export interface FreeTrialInfo {
@@ -968,11 +1011,33 @@ export interface CancelFindingsReportRequest {
 export interface CancelFindingsReportResponse {
   reportId: string | undefined;
 }
+export interface CancelSbomExportRequest {
+  reportId: string | undefined;
+}
+export interface CancelSbomExportResponse {
+  reportId?: string;
+}
 export interface CisaData {
   dateAdded?: Date;
   dateDue?: Date;
   action?: string;
 }
+export interface CodeFilePath {
+  fileName: string | undefined;
+  filePath: string | undefined;
+  startLine: number | undefined;
+  endLine: number | undefined;
+}
+export interface CodeVulnerabilityDetails {
+  filePath: CodeFilePath | undefined;
+  detectorTags?: string[];
+  referenceUrls?: string[];
+  ruleId?: string;
+  sourceLambdaLayerArn?: string;
+  detectorId: string | undefined;
+  detectorName: string | undefined;
+  cwes: string[] | undefined;
+}
 export declare class ConflictException extends __BaseException {
   readonly name: "ConflictException";
   readonly $fault: "client";
@@ -1115,6 +1180,7 @@ export interface ScanStatus {
   reason: ScanStatusReason | string | undefined;
 }
 export declare const ScanType: {
+  readonly CODE: "CODE";
   readonly NETWORK: "NETWORK";
   readonly PACKAGE: "PACKAGE";
 };
@@ -1193,6 +1259,10 @@ export interface FilterCriteria {
   lambdaFunctionLastModifiedAt?: DateFilter[];
   lambdaFunctionExecutionRoleArn?: StringFilter[];
   exploitAvailable?: StringFilter[];
+  codeVulnerabilityDetectorName?: StringFilter[];
+  codeVulnerabilityDetectorTags?: StringFilter[];
+  codeVulnerabilityFilePath?: StringFilter[];
+  epssScore?: NumberFilter[];
 }
 export interface CreateFilterRequest {
   action: FilterAction | string | undefined;
@@ -1231,6 +1301,50 @@ export interface CreateFindingsReportRequest {
 export interface CreateFindingsReportResponse {
   reportId?: string;
 }
+export declare const SbomReportFormat: {
+  readonly CYCLONEDX_1_4: "CYCLONEDX_1_4";
+  readonly SPDX_2_3: "SPDX_2_3";
+};
+export type SbomReportFormat =
+  (typeof SbomReportFormat)[keyof typeof SbomReportFormat];
+export declare const ResourceStringComparison: {
+  readonly EQUALS: "EQUALS";
+  readonly NOT_EQUALS: "NOT_EQUALS";
+};
+export type ResourceStringComparison =
+  (typeof ResourceStringComparison)[keyof typeof ResourceStringComparison];
+export interface ResourceStringFilter {
+  comparison: ResourceStringComparison | string | undefined;
+  value: string | undefined;
+}
+export declare const ResourceMapComparison: {
+  readonly EQUALS: "EQUALS";
+};
+export type ResourceMapComparison =
+  (typeof ResourceMapComparison)[keyof typeof ResourceMapComparison];
+export interface ResourceMapFilter {
+  comparison: ResourceMapComparison | string | undefined;
+  key: string | undefined;
+  value?: string;
+}
+export interface ResourceFilterCriteria {
+  accountId?: ResourceStringFilter[];
+  resourceId?: ResourceStringFilter[];
+  resourceType?: ResourceStringFilter[];
+  ecrRepositoryName?: ResourceStringFilter[];
+  lambdaFunctionName?: ResourceStringFilter[];
+  ecrImageTags?: ResourceStringFilter[];
+  ec2InstanceTags?: ResourceMapFilter[];
+  lambdaFunctionTags?: ResourceMapFilter[];
+}
+export interface CreateSbomExportRequest {
+  resourceFilterCriteria?: ResourceFilterCriteria;
+  reportFormat: SbomReportFormat | string | undefined;
+  s3Destination: Destination | undefined;
+}
+export interface CreateSbomExportResponse {
+  reportId?: string;
+}
 export declare const Currency: {
   readonly USD: "USD";
 };
@@ -1306,6 +1420,7 @@ export declare const ResourceScanType: {
   readonly EC2: "EC2";
   readonly ECR: "ECR";
   readonly LAMBDA: "LAMBDA";
+  readonly LAMBDA_CODE: "LAMBDA_CODE";
 };
 export type ResourceScanType =
   (typeof ResourceScanType)[keyof typeof ResourceScanType];
@@ -1373,6 +1488,9 @@ export interface EnableDelegatedAdminAccountResponse {
 export interface Epss {
   score?: number;
 }
+export interface EpssDetails {
+  score?: number;
+}
 export interface ExploitabilityDetails {
   lastKnownExploitAt?: Date;
 }
@@ -1526,6 +1644,7 @@ export declare const FindingStatus: {
 };
 export type FindingStatus = (typeof FindingStatus)[keyof typeof FindingStatus];
 export declare const FindingType: {
+  readonly CODE_VULNERABILITY: "CODE_VULNERABILITY";
   readonly NETWORK_REACHABILITY: "NETWORK_REACHABILITY";
   readonly PACKAGE_VULNERABILITY: "PACKAGE_VULNERABILITY";
 };
@@ -1550,6 +1669,8 @@ export interface Finding {
   fixAvailable?: FixAvailable | string;
   exploitAvailable?: ExploitAvailable | string;
   exploitabilityDetails?: ExploitabilityDetails;
+  codeVulnerabilityDetails?: CodeVulnerabilityDetails;
+  epss?: EpssDetails;
 }
 export interface GetConfigurationRequest {}
 export interface GetConfigurationResponse {
@@ -1566,6 +1687,13 @@ export interface GetEc2DeepInspectionConfigurationResponse {
   status?: Ec2DeepInspectionStatus | string;
   errorMessage?: string;
 }
+export interface GetEncryptionKeyRequest {
+  scanType: ScanType | string | undefined;
+  resourceType: ResourceType | string | undefined;
+}
+export interface GetEncryptionKeyResponse {
+  kmsKeyId: string | undefined;
+}
 export interface GetFindingsReportStatusRequest {
   reportId?: string;
 }
@@ -1599,6 +1727,18 @@ export interface Member {
 export interface GetMemberResponse {
   member?: Member;
 }
+export interface GetSbomExportRequest {
+  reportId: string | undefined;
+}
+export interface GetSbomExportResponse {
+  reportId?: string;
+  format?: SbomReportFormat | string;
+  status?: ExternalReportStatus | string;
+  errorCode?: ReportingErrorCode | string;
+  errorMessage?: string;
+  s3Destination?: Destination;
+  filterCriteria?: ResourceFilterCriteria;
+}
 export declare const Service: {
   readonly EC2: "EC2";
   readonly ECR: "ECR";
@@ -1680,6 +1820,7 @@ export declare const SortField: {
   readonly ECR_IMAGE_PUSHED_AT: "ECR_IMAGE_PUSHED_AT";
   readonly ECR_IMAGE_REGISTRY: "ECR_IMAGE_REGISTRY";
   readonly ECR_IMAGE_REPOSITORY_NAME: "ECR_IMAGE_REPOSITORY_NAME";
+  readonly EPSS_SCORE: "EPSS_SCORE";
   readonly FINDING_STATUS: "FINDING_STATUS";
   readonly FINDING_TYPE: "FINDING_TYPE";
   readonly FIRST_OBSERVED_AT: "FIRST_OBSERVED_AT";
@@ -1731,6 +1872,7 @@ export declare const UsageType: {
   readonly EC2_INSTANCE_HOURS: "EC2_INSTANCE_HOURS";
   readonly ECR_INITIAL_SCAN: "ECR_INITIAL_SCAN";
   readonly ECR_RESCAN: "ECR_RESCAN";
+  readonly LAMBDA_FUNCTION_CODE_HOURS: "LAMBDA_FUNCTION_CODE_HOURS";
   readonly LAMBDA_FUNCTION_HOURS: "LAMBDA_FUNCTION_HOURS";
 };
 export type UsageType = (typeof UsageType)[keyof typeof UsageType];
@@ -1748,6 +1890,11 @@ export interface ListUsageTotalsResponse {
   nextToken?: string;
   totals?: UsageTotal[];
 }
+export interface ResetEncryptionKeyRequest {
+  scanType: ScanType | string | undefined;
+  resourceType: ResourceType | string | undefined;
+}
+export interface ResetEncryptionKeyResponse {}
 export interface SearchVulnerabilitiesFilterCriteria {
   vulnerabilityIds: string[] | undefined;
 }
@@ -1807,6 +1954,12 @@ export interface UpdateEc2DeepInspectionConfigurationResponse {
   status?: Ec2DeepInspectionStatus | string;
   errorMessage?: string;
 }
+export interface UpdateEncryptionKeyRequest {
+  kmsKeyId: string | undefined;
+  scanType: ScanType | string | undefined;
+  resourceType: ResourceType | string | undefined;
+}
+export interface UpdateEncryptionKeyResponse {}
 export interface UpdateFilterRequest {
   action?: FilterAction | string;
   description?: string;