@aws-sdk/client-macie2 3.272.0 → 3.278.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/endpoint/ruleset.js +3 -3
- package/dist-cjs/models/models_0.js +1 -0
- package/dist-es/endpoint/ruleset.js +3 -3
- package/dist-es/models/models_0.js +1 -0
- package/dist-types/endpoint/EndpointParameters.d.ts +1 -1
- package/dist-types/models/models_0.d.ts +41 -40
- package/dist-types/models/models_1.d.ts +4 -4
- package/dist-types/ts3.4/endpoint/EndpointParameters.d.ts +1 -1
- package/dist-types/ts3.4/models/models_0.d.ts +1 -0
- package/package.json +4 -4
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
"use strict";
|
|
2
2
|
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
3
|
exports.ruleSet = void 0;
|
|
4
|
-
const q = "
|
|
5
|
-
const a =
|
|
6
|
-
const _data = { version: "1.0", parameters: { Region:
|
|
4
|
+
const q = "required", r = "fn", s = "argv", t = "ref";
|
|
5
|
+
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = { [q]: false, "type": "String" }, g = { [q]: true, "default": false, "type": "Boolean" }, h = { [t]: "Endpoint" }, i = { [r]: "booleanEquals", [s]: [{ [t]: "UseFIPS" }, true] }, j = { [r]: "booleanEquals", [s]: [{ [t]: "UseDualStack" }, true] }, k = {}, l = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsFIPS"] }] }, m = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsDualStack"] }] }, n = [i], o = [j], p = [{ [t]: "Region" }];
|
|
6
|
+
const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://macie2-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://macie2-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://macie2.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ endpoint: { url: "https://macie2.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
|
|
7
7
|
exports.ruleSet = _data;
|
|
@@ -138,6 +138,7 @@ var FindingType;
|
|
|
138
138
|
FindingType["Policy_IAMUser_S3BucketPublic"] = "Policy:IAMUser/S3BucketPublic";
|
|
139
139
|
FindingType["Policy_IAMUser_S3BucketReplicatedExternally"] = "Policy:IAMUser/S3BucketReplicatedExternally";
|
|
140
140
|
FindingType["Policy_IAMUser_S3BucketSharedExternally"] = "Policy:IAMUser/S3BucketSharedExternally";
|
|
141
|
+
FindingType["Policy_IAMUser_S3BucketSharedWithCloudFront"] = "Policy:IAMUser/S3BucketSharedWithCloudFront";
|
|
141
142
|
FindingType["SensitiveData_S3Object_Credentials"] = "SensitiveData:S3Object/Credentials";
|
|
142
143
|
FindingType["SensitiveData_S3Object_CustomIdentifier"] = "SensitiveData:S3Object/CustomIdentifier";
|
|
143
144
|
FindingType["SensitiveData_S3Object_Financial"] = "SensitiveData:S3Object/Financial";
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
const q = "
|
|
2
|
-
const a =
|
|
3
|
-
const _data = { version: "1.0", parameters: { Region:
|
|
1
|
+
const q = "required", r = "fn", s = "argv", t = "ref";
|
|
2
|
+
const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = { [q]: false, "type": "String" }, g = { [q]: true, "default": false, "type": "Boolean" }, h = { [t]: "Endpoint" }, i = { [r]: "booleanEquals", [s]: [{ [t]: "UseFIPS" }, true] }, j = { [r]: "booleanEquals", [s]: [{ [t]: "UseDualStack" }, true] }, k = {}, l = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsFIPS"] }] }, m = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsDualStack"] }] }, n = [i], o = [j], p = [{ [t]: "Region" }];
|
|
3
|
+
const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://macie2-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://macie2-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://macie2.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ endpoint: { url: "https://macie2.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
|
|
4
4
|
export const ruleSet = _data;
|
|
@@ -130,6 +130,7 @@ export var FindingType;
|
|
|
130
130
|
FindingType["Policy_IAMUser_S3BucketPublic"] = "Policy:IAMUser/S3BucketPublic";
|
|
131
131
|
FindingType["Policy_IAMUser_S3BucketReplicatedExternally"] = "Policy:IAMUser/S3BucketReplicatedExternally";
|
|
132
132
|
FindingType["Policy_IAMUser_S3BucketSharedExternally"] = "Policy:IAMUser/S3BucketSharedExternally";
|
|
133
|
+
FindingType["Policy_IAMUser_S3BucketSharedWithCloudFront"] = "Policy:IAMUser/S3BucketSharedWithCloudFront";
|
|
133
134
|
FindingType["SensitiveData_S3Object_Credentials"] = "SensitiveData:S3Object/Credentials";
|
|
134
135
|
FindingType["SensitiveData_S3Object_CustomIdentifier"] = "SensitiveData:S3Object/CustomIdentifier";
|
|
135
136
|
FindingType["SensitiveData_S3Object_Financial"] = "SensitiveData:S3Object/Financial";
|
|
@@ -12,7 +12,7 @@ export declare const resolveClientEndpointParameters: <T>(options: T & ClientInp
|
|
|
12
12
|
defaultSigningName: string;
|
|
13
13
|
};
|
|
14
14
|
export interface EndpointParameters extends __EndpointParameters {
|
|
15
|
-
Region
|
|
15
|
+
Region?: string;
|
|
16
16
|
UseDualStack?: boolean;
|
|
17
17
|
UseFIPS?: boolean;
|
|
18
18
|
Endpoint?: string;
|
|
@@ -252,11 +252,11 @@ export interface ReplicationDetails {
|
|
|
252
252
|
*/
|
|
253
253
|
replicated?: boolean;
|
|
254
254
|
/**
|
|
255
|
-
* <p>Specifies whether the bucket is configured to replicate one or more objects to an Amazon Web Services account that isn't part of
|
|
255
|
+
* <p>Specifies whether the bucket is configured to replicate one or more objects to a bucket for an Amazon Web Services account that isn't part of your Amazon Macie organization. An <i>Amazon Macie organization</i> is a set of Macie accounts that are centrally managed as a group of related accounts through Organizations or by Macie invitation.</p>
|
|
256
256
|
*/
|
|
257
257
|
replicatedExternally?: boolean;
|
|
258
258
|
/**
|
|
259
|
-
* <p>An array of Amazon Web Services account IDs, one for each Amazon Web Services account that the bucket is configured to replicate one or more objects to.</p>
|
|
259
|
+
* <p>An array of Amazon Web Services account IDs, one for each Amazon Web Services account that owns a bucket that the bucket is configured to replicate one or more objects to.</p>
|
|
260
260
|
*/
|
|
261
261
|
replicationAccounts?: string[];
|
|
262
262
|
}
|
|
@@ -315,7 +315,7 @@ export interface ObjectLevelStatistics {
|
|
|
315
315
|
total?: number;
|
|
316
316
|
}
|
|
317
317
|
/**
|
|
318
|
-
* <p>Provides statistical data and other information about an S3 bucket that Amazon Macie monitors and analyzes for your account. If an error occurs when Macie attempts to retrieve and process metadata from Amazon S3 for the bucket
|
|
318
|
+
* <p>Provides statistical data and other information about an S3 bucket that Amazon Macie monitors and analyzes for your account. By default, object count and storage size values include data for object parts that are the result of incomplete multipart uploads. For more information, see <a href="https://docs.aws.amazon.com/macie/latest/user/monitoring-s3-how-it-works.html">How Macie monitors Amazon S3 data security</a> in the <i>Amazon Macie User Guide</i>.</p> <p>If an error occurs when Macie attempts to retrieve and process metadata from Amazon S3 for the bucket or the bucket's objects, the value for the versioning property is false and the value for most other properties is null. Key exceptions are accountId, bucketArn, bucketCreatedAt, bucketName, lastUpdated, and region. To identify the cause of the error, refer to the errorCode and errorMessage values.</p>
|
|
319
319
|
*/
|
|
320
320
|
export interface BucketMetadata {
|
|
321
321
|
/**
|
|
@@ -331,7 +331,7 @@ export interface BucketMetadata {
|
|
|
331
331
|
*/
|
|
332
332
|
bucketArn?: string;
|
|
333
333
|
/**
|
|
334
|
-
* <p>The date and time, in UTC and extended ISO 8601 format, when the bucket was created
|
|
334
|
+
* <p>The date and time, in UTC and extended ISO 8601 format, when the bucket was created. This value can also indicate when changes such as edits to the bucket's policy were most recently made to the bucket.</p>
|
|
335
335
|
*/
|
|
336
336
|
bucketCreatedAt?: Date;
|
|
337
337
|
/**
|
|
@@ -347,7 +347,7 @@ export interface BucketMetadata {
|
|
|
347
347
|
*/
|
|
348
348
|
classifiableSizeInBytes?: number;
|
|
349
349
|
/**
|
|
350
|
-
* <p>
|
|
350
|
+
* <p>The error code for an error that prevented Amazon Macie from retrieving and processing information about the bucket and the bucket's objects. If this value is ACCESS_DENIED, Macie doesn't have permission to retrieve the information. For example, the bucket has a restrictive bucket policy and Amazon S3 denied the request. If this value is null, Macie was able to retrieve and process the information.</p>
|
|
351
351
|
*/
|
|
352
352
|
errorCode?: BucketMetadataErrorCode | string;
|
|
353
353
|
/**
|
|
@@ -359,11 +359,11 @@ export interface BucketMetadata {
|
|
|
359
359
|
*/
|
|
360
360
|
jobDetails?: JobDetails;
|
|
361
361
|
/**
|
|
362
|
-
* <p>The date and time, in UTC and extended ISO 8601 format, when Amazon Macie most recently
|
|
362
|
+
* <p>The date and time, in UTC and extended ISO 8601 format, when Amazon Macie most recently analyzed data in the bucket while performing automated sensitive data discovery for your account. This value is null if automated sensitive data discovery is currently disabled for your account.</p>
|
|
363
363
|
*/
|
|
364
364
|
lastAutomatedDiscoveryTime?: Date;
|
|
365
365
|
/**
|
|
366
|
-
* <p>The date and time, in UTC and extended ISO 8601 format, when Amazon Macie most recently retrieved
|
|
366
|
+
* <p>The date and time, in UTC and extended ISO 8601 format, when Amazon Macie most recently retrieved bucket or object metadata from Amazon S3 for the bucket.</p>
|
|
367
367
|
*/
|
|
368
368
|
lastUpdated?: Date;
|
|
369
369
|
/**
|
|
@@ -371,7 +371,7 @@ export interface BucketMetadata {
|
|
|
371
371
|
*/
|
|
372
372
|
objectCount?: number;
|
|
373
373
|
/**
|
|
374
|
-
* <p>The total number of objects
|
|
374
|
+
* <p>The total number of objects in the bucket, grouped by server-side encryption type. This includes a grouping that reports the total number of objects that aren't encrypted or use client-side encryption.</p>
|
|
375
375
|
*/
|
|
376
376
|
objectCountByEncryptionType?: ObjectCountByEncryptionType;
|
|
377
377
|
/**
|
|
@@ -387,7 +387,7 @@ export interface BucketMetadata {
|
|
|
387
387
|
*/
|
|
388
388
|
replicationDetails?: ReplicationDetails;
|
|
389
389
|
/**
|
|
390
|
-
* <p>The sensitivity score for the bucket, ranging from
|
|
390
|
+
* <p>The sensitivity score for the bucket, ranging from -1 (classification error) to 100 (sensitive). This value is null if automated sensitive data discovery is currently disabled for your account.</p>
|
|
391
391
|
*/
|
|
392
392
|
sensitivityScore?: number;
|
|
393
393
|
/**
|
|
@@ -395,7 +395,7 @@ export interface BucketMetadata {
|
|
|
395
395
|
*/
|
|
396
396
|
serverSideEncryption?: BucketServerSideEncryption;
|
|
397
397
|
/**
|
|
398
|
-
* <p>Specifies whether the bucket is shared with another Amazon Web Services account. Possible values are:</p> <ul><li><p>EXTERNAL - The bucket is shared with an Amazon Web Services account that isn't part of
|
|
398
|
+
* <p>Specifies whether the bucket is shared with another Amazon Web Services account, an Amazon CloudFront origin access identity (OAI), or a CloudFront origin access control (OAC). Possible values are:</p> <ul><li><p>EXTERNAL - The bucket is shared with one or more of the following or any combination of the following: an Amazon Web Services account that isn't part of your Amazon Macie organization, a CloudFront OAI, or a CloudFront OAC.</p></li> <li><p>INTERNAL - The bucket is shared with one or more Amazon Web Services accounts that are part of your Amazon Macie organization. It isn't shared with a CloudFront OAI or OAC.</p></li> <li><p>NOT_SHARED - The bucket isn't shared with another Amazon Web Services account, a CloudFront OAI, or a CloudFront OAC.</p></li> <li><p>UNKNOWN - Amazon Macie wasn't able to evaluate the shared access settings for the bucket.</p></li></ul> <p>An <i>Amazon Macie organization</i> is a set of Macie accounts that are centrally managed as a group of related accounts through Organizations or by Macie invitation.</p>
|
|
399
399
|
*/
|
|
400
400
|
sharedAccess?: SharedAccess | string;
|
|
401
401
|
/**
|
|
@@ -432,7 +432,7 @@ export interface ClassificationScopeSummary {
|
|
|
432
432
|
*/
|
|
433
433
|
id?: string;
|
|
434
434
|
/**
|
|
435
|
-
* <p>The name of the classification scope.</p>
|
|
435
|
+
* <p>The name of the classification scope: automated-sensitive-data-discovery.</p>
|
|
436
436
|
*/
|
|
437
437
|
name?: string;
|
|
438
438
|
}
|
|
@@ -605,7 +605,7 @@ export interface Cell {
|
|
|
605
605
|
row?: number;
|
|
606
606
|
}
|
|
607
607
|
/**
|
|
608
|
-
* <p>Specifies the location of an occurrence of sensitive data in a non-binary text file
|
|
608
|
+
* <p>Specifies the location of an occurrence of sensitive data in an email message or a non-binary text file such as an HTML, TXT, or XML file.</p>
|
|
609
609
|
*/
|
|
610
610
|
export interface Range {
|
|
611
611
|
/**
|
|
@@ -660,7 +660,7 @@ export interface Occurrences {
|
|
|
660
660
|
*/
|
|
661
661
|
cells?: Cell[];
|
|
662
662
|
/**
|
|
663
|
-
* <p>An array of objects, one for each occurrence of sensitive data in a non-binary text file
|
|
663
|
+
* <p>An array of objects, one for each occurrence of sensitive data in an email message or a non-binary text file such as an HTML, TXT, or XML file. Each Range object specifies a line or inclusive range of lines that contains the sensitive data, and the position of the data on the specified line or lines.</p> <p>This value is often null for file types that are supported by Cell, Page, or Record objects. Exceptions are the location of sensitive data in: unstructured sections of an otherwise structured file, such as a comment in a file; a malformed file that Amazon Macie analyzes as plain text; and, a CSV or TSV file that has any column names that contain sensitive data.</p>
|
|
664
664
|
*/
|
|
665
665
|
lineRanges?: Range[];
|
|
666
666
|
/**
|
|
@@ -681,7 +681,7 @@ export interface Occurrences {
|
|
|
681
681
|
*/
|
|
682
682
|
export interface CustomDetection {
|
|
683
683
|
/**
|
|
684
|
-
* <p>The
|
|
684
|
+
* <p>The unique identifier for the custom data identifier.</p>
|
|
685
685
|
*/
|
|
686
686
|
arn?: string;
|
|
687
687
|
/**
|
|
@@ -759,7 +759,7 @@ export interface ClassificationResultStatus {
|
|
|
759
759
|
*/
|
|
760
760
|
code?: string;
|
|
761
761
|
/**
|
|
762
|
-
* <p>A brief description of the status of the finding. This value is null if the status (code) of the finding is COMPLETE.</p> <p>Amazon Macie uses this value to notify you of any errors, warnings, or considerations that might impact your analysis of the finding and the affected S3 object. Possible values are:</p> <ul><li><p>ARCHIVE_CONTAINS_UNPROCESSED_FILES - The object is an archive file and Macie extracted and analyzed only some or none of the files in the archive. To determine which files Macie analyzed, if any,
|
|
762
|
+
* <p>A brief description of the status of the finding. This value is null if the status (code) of the finding is COMPLETE.</p> <p>Amazon Macie uses this value to notify you of any errors, warnings, or considerations that might impact your analysis of the finding and the affected S3 object. Possible values are:</p> <ul><li><p>ARCHIVE_CONTAINS_UNPROCESSED_FILES - The object is an archive file and Macie extracted and analyzed only some or none of the files in the archive. To determine which files Macie analyzed, if any, refer to the corresponding sensitive data discovery result for the finding (ClassificationDetails.detailedResultsLocation).</p></li> <li><p>ARCHIVE_EXCEEDS_SIZE_LIMIT - The object is an archive file whose total storage size exceeds the size quota for this type of archive.</p></li> <li><p>ARCHIVE_NESTING_LEVEL_OVER_LIMIT - The object is an archive file whose nested depth exceeds the quota for the maximum number of nested levels that Macie analyzes for this type of archive.</p></li> <li><p>ARCHIVE_TOTAL_BYTES_EXTRACTED_OVER_LIMIT - The object is an archive file that exceeds the quota for the maximum amount of data that Macie extracts and analyzes for this type of archive.</p></li> <li><p>ARCHIVE_TOTAL_DOCUMENTS_PROCESSED_OVER_LIMIT - The object is an archive file that contains more than the maximum number of files that Macie extracts and analyzes for this type of archive.</p></li> <li><p>FILE_EXCEEDS_SIZE_LIMIT - The storage size of the object exceeds the size quota for this type of file.</p></li> <li><p>INVALID_ENCRYPTION - The object is encrypted using server-side encryption but Macie isn't allowed to use the key. Macie can't decrypt and analyze the object.</p></li> <li><p>INVALID_KMS_KEY - The object is encrypted with an KMS key that was disabled or is being deleted. Macie can't decrypt and analyze the object.</p></li> <li><p>INVALID_OBJECT_STATE - The object doesn't use a supported Amazon S3 storage class.</p></li> <li><p>JSON_NESTING_LEVEL_OVER_LIMIT - The object contains JSON data and the nested depth of the data exceeds the quota for the number of nested levels that Macie analyzes for this type of file.</p></li> <li><p>MALFORMED_FILE - The object is a malformed or corrupted file. An error occurred when Macie attempted to detect the file's type or extract data from the file.</p></li> <li><p>MALFORMED_OR_FILE_SIZE_EXCEEDS_LIMIT - The object is a Microsoft Office file that is malformed or exceeds the size quota for this type of file. If the file is malformed, an error occurred when Macie attempted to extract data from the file.</p></li> <li><p>NO_SUCH_BUCKET_AVAILABLE - The object was in a bucket that was deleted shortly before or when Macie attempted to analyze the object.</p></li> <li><p>OBJECT_VERSION_MISMATCH - The object was changed while Macie was analyzing it.</p></li> <li><p>OOXML_UNCOMPRESSED_RATIO_EXCEEDS_LIMIT - The object is an Office Open XML file whose compression ratio exceeds the compression quota for this type of file.</p></li> <li><p>OOXML_UNCOMPRESSED_SIZE_EXCEEDS_LIMIT - The object is an Office Open XML file that exceeds the size quota for this type of file.</p></li> <li><p>PERMISSION_DENIED - Macie isn't allowed to access the object. The object's permissions settings prevent Macie from analyzing the object.</p></li> <li><p>SOURCE_OBJECT_NO_LONGER_AVAILABLE - The object was deleted shortly before or when Macie attempted to analyze it.</p></li> <li><p>TIME_CUT_OFF_REACHED - Macie started analyzing the object but additional analysis would exceed the time quota for analyzing an object.</p></li> <li><p>UNABLE_TO_PARSE_FILE - The object is a file that contains structured data and an error occurred when Macie attempted to parse the data.</p></li> <li><p>UNSUPPORTED_FILE_TYPE_EXCEPTION - The object is a file that uses an unsupported file or storage format.</p></li></ul> <p>For information about quotas, supported storage classes, and supported file and storage formats, see <a href="https://docs.aws.amazon.com/macie/latest/user/macie-quotas.html">Quotas</a> and <a href="https://docs.aws.amazon.com/macie/latest/user/discovery-supported-storage.html">Supported storage classes and formats</a> in the <i>Amazon Macie User Guide</i>.</p>
|
|
763
763
|
*/
|
|
764
764
|
reason?: string;
|
|
765
765
|
}
|
|
@@ -966,7 +966,7 @@ export interface SessionIssuer {
|
|
|
966
966
|
*/
|
|
967
967
|
accountId?: string;
|
|
968
968
|
/**
|
|
969
|
-
* <p>The Amazon Resource Name (ARN) of the source account, IAM user, or role that was used to get the credentials.</p>
|
|
969
|
+
* <p>The Amazon Resource Name (ARN) of the source account, Identity and Access Management (IAM) user, or role that was used to get the credentials.</p>
|
|
970
970
|
*/
|
|
971
971
|
arn?: string;
|
|
972
972
|
/**
|
|
@@ -1221,7 +1221,7 @@ export interface S3Bucket {
|
|
|
1221
1221
|
*/
|
|
1222
1222
|
arn?: string;
|
|
1223
1223
|
/**
|
|
1224
|
-
* <p>The date and time, in UTC and extended ISO 8601 format, when the bucket was created.</p>
|
|
1224
|
+
* <p>The date and time, in UTC and extended ISO 8601 format, when the bucket was created. This value can also indicate when changes such as edits to the bucket's policy were most recently made to the bucket, relative to when the finding was created or last updated.</p>
|
|
1225
1225
|
*/
|
|
1226
1226
|
createdAt?: Date;
|
|
1227
1227
|
/**
|
|
@@ -1346,6 +1346,7 @@ export declare enum FindingType {
|
|
|
1346
1346
|
Policy_IAMUser_S3BucketPublic = "Policy:IAMUser/S3BucketPublic",
|
|
1347
1347
|
Policy_IAMUser_S3BucketReplicatedExternally = "Policy:IAMUser/S3BucketReplicatedExternally",
|
|
1348
1348
|
Policy_IAMUser_S3BucketSharedExternally = "Policy:IAMUser/S3BucketSharedExternally",
|
|
1349
|
+
Policy_IAMUser_S3BucketSharedWithCloudFront = "Policy:IAMUser/S3BucketSharedWithCloudFront",
|
|
1349
1350
|
SensitiveData_S3Object_Credentials = "SensitiveData:S3Object/Credentials",
|
|
1350
1351
|
SensitiveData_S3Object_CustomIdentifier = "SensitiveData:S3Object/CustomIdentifier",
|
|
1351
1352
|
SensitiveData_S3Object_Financial = "SensitiveData:S3Object/Financial",
|
|
@@ -1732,7 +1733,7 @@ export interface ManagedDataIdentifierSummary {
|
|
|
1732
1733
|
id?: string;
|
|
1733
1734
|
}
|
|
1734
1735
|
/**
|
|
1735
|
-
* <p>Provides statistical data and other information about an S3 bucket that Amazon Macie monitors and analyzes for your account. If an error occurs when Macie attempts to retrieve and process information about the bucket or the bucket's objects, the value for most of these properties is null. Key exceptions are accountId and bucketName. To identify the cause of the error, refer to the errorCode and errorMessage values.</p>
|
|
1736
|
+
* <p>Provides statistical data and other information about an S3 bucket that Amazon Macie monitors and analyzes for your account. By default, object count and storage size values include data for object parts that are the result of incomplete multipart uploads. For more information, see <a href="https://docs.aws.amazon.com/macie/latest/user/monitoring-s3-how-it-works.html">How Macie monitors Amazon S3 data security</a> in the <i>Amazon Macie User Guide</i>.</p> <p>If an error occurs when Macie attempts to retrieve and process information about the bucket or the bucket's objects, the value for most of these properties is null. Key exceptions are accountId and bucketName. To identify the cause of the error, refer to the errorCode and errorMessage values.</p>
|
|
1736
1737
|
*/
|
|
1737
1738
|
export interface MatchingBucket {
|
|
1738
1739
|
/**
|
|
@@ -1752,7 +1753,7 @@ export interface MatchingBucket {
|
|
|
1752
1753
|
*/
|
|
1753
1754
|
classifiableSizeInBytes?: number;
|
|
1754
1755
|
/**
|
|
1755
|
-
* <p>
|
|
1756
|
+
* <p>The error code for an error that prevented Amazon Macie from retrieving and processing information about the bucket and the bucket's objects. If this value is ACCESS_DENIED, Macie doesn't have permission to retrieve the information. For example, the bucket has a restrictive bucket policy and Amazon S3 denied the request. If this value is null, Macie was able to retrieve and process the information.</p>
|
|
1756
1757
|
*/
|
|
1757
1758
|
errorCode?: BucketMetadataErrorCode | string;
|
|
1758
1759
|
/**
|
|
@@ -1764,7 +1765,7 @@ export interface MatchingBucket {
|
|
|
1764
1765
|
*/
|
|
1765
1766
|
jobDetails?: JobDetails;
|
|
1766
1767
|
/**
|
|
1767
|
-
* <p>The date and time, in UTC and extended ISO 8601 format, when Amazon Macie most recently
|
|
1768
|
+
* <p>The date and time, in UTC and extended ISO 8601 format, when Amazon Macie most recently analyzed data in the bucket while performing automated sensitive data discovery for your account. This value is null if automated sensitive data discovery is currently disabled for your account.</p>
|
|
1768
1769
|
*/
|
|
1769
1770
|
lastAutomatedDiscoveryTime?: Date;
|
|
1770
1771
|
/**
|
|
@@ -1776,7 +1777,7 @@ export interface MatchingBucket {
|
|
|
1776
1777
|
*/
|
|
1777
1778
|
objectCountByEncryptionType?: ObjectCountByEncryptionType;
|
|
1778
1779
|
/**
|
|
1779
|
-
* <p>The current sensitivity score for the bucket, ranging from
|
|
1780
|
+
* <p>The current sensitivity score for the bucket, ranging from -1 (classification error) to 100 (sensitive). This value is null if automated sensitive data discovery is currently disabled for your account.</p>
|
|
1780
1781
|
*/
|
|
1781
1782
|
sensitivityScore?: number;
|
|
1782
1783
|
/**
|
|
@@ -1822,11 +1823,11 @@ export interface Member {
|
|
|
1822
1823
|
*/
|
|
1823
1824
|
arn?: string;
|
|
1824
1825
|
/**
|
|
1825
|
-
* <p>The email address for the account.</p>
|
|
1826
|
+
* <p>The email address for the account. This value is null if the account is associated with the administrator account through Organizations.</p>
|
|
1826
1827
|
*/
|
|
1827
1828
|
email?: string;
|
|
1828
1829
|
/**
|
|
1829
|
-
* <p>The date and time, in UTC and extended ISO 8601 format, when an Amazon Macie membership invitation was last sent to the account. This value is null if
|
|
1830
|
+
* <p>The date and time, in UTC and extended ISO 8601 format, when an Amazon Macie membership invitation was last sent to the account. This value is null if a Macie membership invitation hasn't been sent to the account.</p>
|
|
1830
1831
|
*/
|
|
1831
1832
|
invitedAt?: Date;
|
|
1832
1833
|
/**
|
|
@@ -1938,7 +1939,7 @@ export interface SensitivityInspectionTemplatesEntry {
|
|
|
1938
1939
|
*/
|
|
1939
1940
|
id?: string;
|
|
1940
1941
|
/**
|
|
1941
|
-
* <p>The name of the sensitivity inspection template for the account.</p>
|
|
1942
|
+
* <p>The name of the sensitivity inspection template for the account: automated-sensitive-data-discovery.</p>
|
|
1942
1943
|
*/
|
|
1943
1944
|
name?: string;
|
|
1944
1945
|
}
|
|
@@ -2283,7 +2284,7 @@ export interface BatchGetCustomDataIdentifiersResponse {
|
|
|
2283
2284
|
notFoundIdentifierIds?: string[];
|
|
2284
2285
|
}
|
|
2285
2286
|
/**
|
|
2286
|
-
* <p>Provides information about the number of S3 buckets that are publicly accessible
|
|
2287
|
+
* <p>Provides information about the number of S3 buckets that are publicly accessible due to a combination of permissions settings for each bucket.</p>
|
|
2287
2288
|
*/
|
|
2288
2289
|
export interface BucketCountByEffectivePermission {
|
|
2289
2290
|
/**
|
|
@@ -2325,23 +2326,23 @@ export interface BucketCountByEncryptionType {
|
|
|
2325
2326
|
unknown?: number;
|
|
2326
2327
|
}
|
|
2327
2328
|
/**
|
|
2328
|
-
* <p>Provides information about the number of S3 buckets that are or aren't shared with other Amazon Web Services accounts.</p>
|
|
2329
|
+
* <p>Provides information about the number of S3 buckets that are or aren't shared with other Amazon Web Services accounts, Amazon CloudFront origin access identities (OAIs), or CloudFront origin access controls (OACs). In this data, an <i>Amazon Macie organization</i> is defined as a set of Macie accounts that are centrally managed as a group of related accounts through Organizations or by Macie invitation.</p>
|
|
2329
2330
|
*/
|
|
2330
2331
|
export interface BucketCountBySharedAccessType {
|
|
2331
2332
|
/**
|
|
2332
|
-
* <p>The total number of buckets that are shared with an Amazon Web Services account that isn't
|
|
2333
|
+
* <p>The total number of buckets that are shared with one or more of the following or any combination of the following: an Amazon Web Services account that isn't in the same Amazon Macie organization, an Amazon CloudFront OAI, or a CloudFront OAC.</p>
|
|
2333
2334
|
*/
|
|
2334
2335
|
external?: number;
|
|
2335
2336
|
/**
|
|
2336
|
-
* <p>The total number of buckets that are shared with
|
|
2337
|
+
* <p>The total number of buckets that are shared with one or more Amazon Web Services accounts in the same Amazon Macie organization. These buckets aren't shared with Amazon CloudFront OAIs or OACs.</p>
|
|
2337
2338
|
*/
|
|
2338
2339
|
internal?: number;
|
|
2339
2340
|
/**
|
|
2340
|
-
* <p>The total number of buckets that aren't shared with other Amazon Web Services accounts.</p>
|
|
2341
|
+
* <p>The total number of buckets that aren't shared with other Amazon Web Services accounts, Amazon CloudFront OAIs, or CloudFront OACs.</p>
|
|
2341
2342
|
*/
|
|
2342
2343
|
notShared?: number;
|
|
2343
2344
|
/**
|
|
2344
|
-
* <p>The total number of buckets that Amazon Macie wasn't able to evaluate shared access settings for. Macie can't determine whether these buckets are shared with other Amazon Web Services accounts.</p>
|
|
2345
|
+
* <p>The total number of buckets that Amazon Macie wasn't able to evaluate shared access settings for. Macie can't determine whether these buckets are shared with other Amazon Web Services accounts, Amazon CloudFront OAIs, or CloudFront OACs.</p>
|
|
2345
2346
|
*/
|
|
2346
2347
|
unknown?: number;
|
|
2347
2348
|
}
|
|
@@ -2421,7 +2422,7 @@ export interface SensitivityAggregations {
|
|
|
2421
2422
|
*/
|
|
2422
2423
|
classifiableSizeInBytes?: number;
|
|
2423
2424
|
/**
|
|
2424
|
-
* <p>The total number of buckets that are publicly accessible
|
|
2425
|
+
* <p>The total number of buckets that are publicly accessible due to a combination of permissions settings for each bucket.</p>
|
|
2425
2426
|
*/
|
|
2426
2427
|
publiclyAccessibleCount?: number;
|
|
2427
2428
|
/**
|
|
@@ -2446,7 +2447,7 @@ export interface BucketStatisticsBySensitivity {
|
|
|
2446
2447
|
*/
|
|
2447
2448
|
notClassified?: SensitivityAggregations;
|
|
2448
2449
|
/**
|
|
2449
|
-
* <p>The aggregated statistical data for all buckets that have a sensitivity score of
|
|
2450
|
+
* <p>The aggregated statistical data for all buckets that have a sensitivity score of 1-49.</p>
|
|
2450
2451
|
*/
|
|
2451
2452
|
notSensitive?: SensitivityAggregations;
|
|
2452
2453
|
/**
|
|
@@ -3242,7 +3243,7 @@ export interface GetBucketStatisticsResponse {
|
|
|
3242
3243
|
*/
|
|
3243
3244
|
bucketCount?: number;
|
|
3244
3245
|
/**
|
|
3245
|
-
* <p>The total number of buckets that are publicly accessible
|
|
3246
|
+
* <p>The total number of buckets that are publicly accessible due to a combination of permissions settings for each bucket.</p>
|
|
3246
3247
|
*/
|
|
3247
3248
|
bucketCountByEffectivePermission?: BucketCountByEffectivePermission;
|
|
3248
3249
|
/**
|
|
@@ -3254,7 +3255,7 @@ export interface GetBucketStatisticsResponse {
|
|
|
3254
3255
|
*/
|
|
3255
3256
|
bucketCountByObjectEncryptionRequirement?: BucketCountPolicyAllowsUnencryptedObjectUploads;
|
|
3256
3257
|
/**
|
|
3257
|
-
* <p>The total number of buckets that are or aren't shared with
|
|
3258
|
+
* <p>The total number of buckets that are or aren't shared with other Amazon Web Services accounts, Amazon CloudFront origin access identities (OAIs), or CloudFront origin access controls (OACs).</p>
|
|
3258
3259
|
*/
|
|
3259
3260
|
bucketCountBySharedAccessType?: BucketCountBySharedAccessType;
|
|
3260
3261
|
/**
|
|
@@ -3270,7 +3271,7 @@ export interface GetBucketStatisticsResponse {
|
|
|
3270
3271
|
*/
|
|
3271
3272
|
classifiableSizeInBytes?: number;
|
|
3272
3273
|
/**
|
|
3273
|
-
* <p>The date and time, in UTC and extended ISO 8601 format, when Amazon Macie most recently retrieved
|
|
3274
|
+
* <p>The date and time, in UTC and extended ISO 8601 format, when Amazon Macie most recently retrieved bucket or object metadata from Amazon S3 for the buckets.</p>
|
|
3274
3275
|
*/
|
|
3275
3276
|
lastUpdated?: Date;
|
|
3276
3277
|
/**
|
|
@@ -3332,7 +3333,7 @@ export interface GetClassificationScopeResponse {
|
|
|
3332
3333
|
*/
|
|
3333
3334
|
id?: string;
|
|
3334
3335
|
/**
|
|
3335
|
-
* <p>The name of the classification scope.</p>
|
|
3336
|
+
* <p>The name of the classification scope: automated-sensitive-data-discovery.</p>
|
|
3336
3337
|
*/
|
|
3337
3338
|
name?: string;
|
|
3338
3339
|
/**
|
|
@@ -3576,11 +3577,11 @@ export interface GetMemberResponse {
|
|
|
3576
3577
|
*/
|
|
3577
3578
|
arn?: string;
|
|
3578
3579
|
/**
|
|
3579
|
-
* <p>The email address for the account.</p>
|
|
3580
|
+
* <p>The email address for the account. This value is null if the account is associated with the administrator account through Organizations.</p>
|
|
3580
3581
|
*/
|
|
3581
3582
|
email?: string;
|
|
3582
3583
|
/**
|
|
3583
|
-
* <p>The date and time, in UTC and extended ISO 8601 format, when an Amazon Macie membership invitation was last sent to the account. This value is null if
|
|
3584
|
+
* <p>The date and time, in UTC and extended ISO 8601 format, when an Amazon Macie membership invitation was last sent to the account. This value is null if a Macie membership invitation hasn't been sent to the account.</p>
|
|
3584
3585
|
*/
|
|
3585
3586
|
invitedAt?: Date;
|
|
3586
3587
|
/**
|
|
@@ -3653,7 +3654,7 @@ export interface GetResourceProfileResponse {
|
|
|
3653
3654
|
*/
|
|
3654
3655
|
profileUpdatedAt?: Date;
|
|
3655
3656
|
/**
|
|
3656
|
-
* <p>The current sensitivity score for the bucket, ranging from
|
|
3657
|
+
* <p>The current sensitivity score for the bucket, ranging from -1 (classification error) to 100 (sensitive). By default, this score is calculated automatically based on the amount of data that Amazon Macie has analyzed in the bucket and the amount of sensitive data that Macie has found in the bucket.</p>
|
|
3657
3658
|
*/
|
|
3658
3659
|
sensitivityScore?: number;
|
|
3659
3660
|
/**
|
|
@@ -3788,7 +3789,7 @@ export interface GetSensitivityInspectionTemplateResponse {
|
|
|
3788
3789
|
*/
|
|
3789
3790
|
includes?: SensitivityInspectionTemplateIncludes;
|
|
3790
3791
|
/**
|
|
3791
|
-
* <p>The name of the template.</p>
|
|
3792
|
+
* <p>The name of the template: automated-sensitive-data-discovery.</p>
|
|
3792
3793
|
*/
|
|
3793
3794
|
name?: string;
|
|
3794
3795
|
/**
|
|
@@ -91,7 +91,7 @@ export interface ListResourceProfileArtifactsRequest {
|
|
|
91
91
|
}
|
|
92
92
|
export interface ListResourceProfileArtifactsResponse {
|
|
93
93
|
/**
|
|
94
|
-
* <p>An array of objects, one for each S3
|
|
94
|
+
* <p>An array of objects, one for each of 1-100 S3 objects that Amazon Macie selected for analysis.</p> <p>If Macie has analyzed more than 100 objects in the bucket, Macie populates the array based on the value for the ResourceProfileArtifact.sensitive field for an object: true (sensitive), followed by false (not sensitive). Macie then populates any remaining items in the array with information about objects where the value for the ResourceProfileArtifact.classificationResultStatus field is SKIPPED.</p>
|
|
95
95
|
*/
|
|
96
96
|
artifacts?: ResourceProfileArtifact[];
|
|
97
97
|
/**
|
|
@@ -392,7 +392,7 @@ export interface UpdateFindingsFilterRequest {
|
|
|
392
392
|
*/
|
|
393
393
|
clientToken?: string;
|
|
394
394
|
/**
|
|
395
|
-
* <p>A custom description of the filter. The description can contain as many as 512 characters.</p> <p>We strongly recommend that you avoid including any sensitive data in the description of a filter. Other users might be able to see this description, depending on the actions that they're allowed to perform in Amazon Macie.</p>
|
|
395
|
+
* <p>A custom description of the filter. The description can contain as many as 512 characters.</p> <p>We strongly recommend that you avoid including any sensitive data in the description of a filter. Other users of your account might be able to see this description, depending on the actions that they're allowed to perform in Amazon Macie.</p>
|
|
396
396
|
*/
|
|
397
397
|
description?: string;
|
|
398
398
|
/**
|
|
@@ -404,7 +404,7 @@ export interface UpdateFindingsFilterRequest {
|
|
|
404
404
|
*/
|
|
405
405
|
id: string | undefined;
|
|
406
406
|
/**
|
|
407
|
-
* <p>A custom name for the filter. The name must contain at least 3 characters and can contain as many as 64 characters.</p> <p>We strongly recommend that you avoid including any sensitive data in the name of a filter. Other users might be able to see this name, depending on the actions that they're allowed to perform in Amazon Macie.</p>
|
|
407
|
+
* <p>A custom name for the filter. The name must contain at least 3 characters and can contain as many as 64 characters.</p> <p>We strongly recommend that you avoid including any sensitive data in the name of a filter. Other users of your account might be able to see this name, depending on the actions that they're allowed to perform in Amazon Macie.</p>
|
|
408
408
|
*/
|
|
409
409
|
name?: string;
|
|
410
410
|
/**
|
|
@@ -492,7 +492,7 @@ export interface UpdateRevealConfigurationResponse {
|
|
|
492
492
|
}
|
|
493
493
|
export interface UpdateSensitivityInspectionTemplateRequest {
|
|
494
494
|
/**
|
|
495
|
-
* <p>A custom description of the template.</p>
|
|
495
|
+
* <p>A custom description of the template. The description can contain as many as 200 characters.</p>
|
|
496
496
|
*/
|
|
497
497
|
description?: string;
|
|
498
498
|
/**
|
|
@@ -27,7 +27,7 @@ export declare const resolveClientEndpointParameters: <T>(
|
|
|
27
27
|
defaultSigningName: string;
|
|
28
28
|
};
|
|
29
29
|
export interface EndpointParameters extends __EndpointParameters {
|
|
30
|
-
Region
|
|
30
|
+
Region?: string;
|
|
31
31
|
UseDualStack?: boolean;
|
|
32
32
|
UseFIPS?: boolean;
|
|
33
33
|
Endpoint?: string;
|
|
@@ -467,6 +467,7 @@ export declare enum FindingType {
|
|
|
467
467
|
Policy_IAMUser_S3BucketPublic = "Policy:IAMUser/S3BucketPublic",
|
|
468
468
|
Policy_IAMUser_S3BucketReplicatedExternally = "Policy:IAMUser/S3BucketReplicatedExternally",
|
|
469
469
|
Policy_IAMUser_S3BucketSharedExternally = "Policy:IAMUser/S3BucketSharedExternally",
|
|
470
|
+
Policy_IAMUser_S3BucketSharedWithCloudFront = "Policy:IAMUser/S3BucketSharedWithCloudFront",
|
|
470
471
|
SensitiveData_S3Object_Credentials = "SensitiveData:S3Object/Credentials",
|
|
471
472
|
SensitiveData_S3Object_CustomIdentifier = "SensitiveData:S3Object/CustomIdentifier",
|
|
472
473
|
SensitiveData_S3Object_Financial = "SensitiveData:S3Object/Financial",
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-macie2",
|
|
3
3
|
"description": "AWS SDK for JavaScript Macie2 Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.278.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "tsc -p tsconfig.cjs.json",
|
|
@@ -20,15 +20,15 @@
|
|
|
20
20
|
"dependencies": {
|
|
21
21
|
"@aws-crypto/sha256-browser": "3.0.0",
|
|
22
22
|
"@aws-crypto/sha256-js": "3.0.0",
|
|
23
|
-
"@aws-sdk/client-sts": "3.
|
|
23
|
+
"@aws-sdk/client-sts": "3.278.0",
|
|
24
24
|
"@aws-sdk/config-resolver": "3.272.0",
|
|
25
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
25
|
+
"@aws-sdk/credential-provider-node": "3.278.0",
|
|
26
26
|
"@aws-sdk/fetch-http-handler": "3.272.0",
|
|
27
27
|
"@aws-sdk/hash-node": "3.272.0",
|
|
28
28
|
"@aws-sdk/invalid-dependency": "3.272.0",
|
|
29
29
|
"@aws-sdk/middleware-content-length": "3.272.0",
|
|
30
30
|
"@aws-sdk/middleware-endpoint": "3.272.0",
|
|
31
|
-
"@aws-sdk/middleware-host-header": "3.
|
|
31
|
+
"@aws-sdk/middleware-host-header": "3.278.0",
|
|
32
32
|
"@aws-sdk/middleware-logger": "3.272.0",
|
|
33
33
|
"@aws-sdk/middleware-recursion-detection": "3.272.0",
|
|
34
34
|
"@aws-sdk/middleware-retry": "3.272.0",
|