@aws-sdk/client-securityhub 3.1028.0 → 3.1030.0

package/dist-es/schemas/schemas_0.js

@@ -606,6 +606,8 @@ const _ANct = "ActionName";
 const _ANp = "ApplicationName";
 const _ANt = "AttributeName";
 const _AO = "AllowOrigins";
+const _AOS = "AwsOrganizationScope";
+const _AOSL = "AwsOrganizationScopeList";
 const _AOSSD = "AwsOpenSearchServiceDomain";
 const _AOSSDASOD = "AwsOpenSearchServiceDomainAdvancedSecurityOptionsDetails";
 const _AOSSDCCD = "AwsOpenSearchServiceDomainClusterConfigDetails";
@@ -622,6 +624,7 @@ const _AOSSDVOD = "AwsOpenSearchServiceDomainVpcOptionsDetails";
 const _AOd = "AdditionalOccurrences";
 const _AOs = "AsnOrg";
 const _AOu = "AuthenticationOptions";
+const _AOw = "AwsOrganizations";
 const _AP = "AccessPolicy";
 const _APA = "AccessPointArn";
 const _API = "AssignPublicIp";
@@ -1742,7 +1745,8 @@ const _FS = "FirstSeen";
 const _FSA = "FirstSeenAt";
 const _FSFRA = "FirehoseSuccessFeedbackRoleArn";
 const _FSI = "FileSystemId";
-const _FSi = "FindingsSummary";
+const _FSi = "FindingScopes";
+const _FSin = "FindingsSummary";
 const _FT = "FindingType";
 const _FTCF = "FindingsTrendsCompositeFilter";
 const _FTCFL = "FindingsTrendsCompositeFilterList";
@@ -2416,6 +2420,7 @@ const _OIA = "OutsideIpAddress";
 const _OICC = "OpenIdConnectConfig";
 const _OIF = "OcsfIpFilter";
 const _OIFL = "OcsfIpFilterList";
+const _OIr = "OrganizationId";
 const _OIw = "OwnerId";
 const _OK = "OutputKey";
 const _OKT = "OriginKeepaliveTimeout";
@@ -2425,6 +2430,7 @@ const _OMF = "OcsfMapFilter";
 const _OMFL = "OcsfMapFilterList";
 const _ON = "OptionName";
 const _ONF = "OcsfNumberFilter";
+const _ONFE = "OrganizationNotFoundException";
 const _ONFL = "OcsfNumberFilterList";
 const _ONw = "OwnerName";
 const _OP = "OriginPath";
@@ -2442,6 +2448,7 @@ const _OST = "OperationStartTime";
 const _OSv = "OverallSeverity";
 const _OU = "OwnerUid";
 const _OUI = "OrganizationalUnitId";
+const _OUNFE = "OrganizationalUnitNotFoundException";
 const _OV = "OutputValue";
 const _OVl = "OldValue";
 const _Oc = "Occurrences";
@@ -2812,6 +2819,7 @@ const _RSen = "RenewalSummary";
 const _RSene = "RenewalStatus";
 const _RSep = "ReplicaStatus";
 const _RSes = "RestoreSummary";
+const _RSeso = "ResourceScopes";
 const _RSest = "RestoreStatus";
 const _RSo = "RouteSettings";
 const _RSou = "RouteSet";
@@ -3121,6 +3129,7 @@ const _Sa = "Sasl";
 const _Sam = "Sample";
 const _Sc = "Scope";
 const _Sch = "Scheme";
+const _Sco = "Scopes";
 const _Scr = "Scram";
 const _Se = "Severity";
 const _Sec = "Secrets";
@@ -3423,7 +3432,7 @@ const _se = "server";
 const _tK = "tagKeys";
 const n0 = "com.amazonaws.securityhub";
 import { TypeRegistry } from "@smithy/core/schema";
-import { AccessDeniedException, ConflictException, InternalException, InternalServerException, InvalidAccessException, InvalidInputException, LimitExceededException, ResourceConflictException, ResourceInUseException, ResourceNotFoundException, ServiceQuotaExceededException, ThrottlingException, ValidationException, } from "../models/errors";
+import { AccessDeniedException, ConflictException, InternalException, InternalServerException, InvalidAccessException, InvalidInputException, LimitExceededException, OrganizationalUnitNotFoundException, OrganizationNotFoundException, ResourceConflictException, ResourceInUseException, ResourceNotFoundException, ServiceQuotaExceededException, ThrottlingException, ValidationException, } from "../models/errors";
 import { SecurityHubServiceException } from "../models/SecurityHubServiceException";
 const _s_registry = TypeRegistry.for(_s);
 export var SecurityHubServiceException$ = [-3, _s, "SecurityHubServiceException", 0, [], []];
@@ -3471,6 +3480,18 @@ export var LimitExceededException$ = [-3, n0, _LEE,
     [0, 0]
 ];
 n0_registry.registerError(LimitExceededException$, LimitExceededException);
+export var OrganizationalUnitNotFoundException$ = [-3, n0, _OUNFE,
+    { [_e]: _c, [_hE]: 400 },
+    [_M, _C],
+    [0, 0]
+];
+n0_registry.registerError(OrganizationalUnitNotFoundException$, OrganizationalUnitNotFoundException);
+export var OrganizationNotFoundException$ = [-3, n0, _ONFE,
+    { [_e]: _c, [_hE]: 400 },
+    [_M, _C],
+    [0, 0]
+];
+n0_registry.registerError(OrganizationNotFoundException$, OrganizationNotFoundException);
 export var ResourceConflictException$ = [-3, n0, _RCE,
     { [_e]: _c, [_hE]: 409 },
     [_M, _C],
@@ -5481,6 +5502,11 @@ export var AwsOpenSearchServiceDomainVpcOptionsDetails$ = [3, n0, _AOSSDVOD,
     [_SGI, _SIub],
     [64 | 0, 64 | 0]
 ];
+export var AwsOrganizationScope$ = [3, n0, _AOS,
+    0,
+    [_OIr, _OUI],
+    [0, 0]
+];
 export var AwsRdsDbClusterAssociatedRole$ = [3, n0, _ARDCAR,
     0,
     [_RAo, _St],
@@ -6856,6 +6882,11 @@ export var FindingProviderSeverity$ = [3, n0, _FPS,
     [_Lab, _Orig],
     [0, 0]
 ];
+export var FindingScopes$ = [3, n0, _FSi,
+    0,
+    [_AOw],
+    [() => AwsOrganizationScopeList]
+];
 export var FindingsTrendsCompositeFilter$ = [3, n0, _FTCF,
     0,
     [_SF, _NCF, _Oper],
@@ -7003,8 +7034,8 @@ export var GetFindingsResponse$ = [3, n0, _GFRe,
 ];
 export var GetFindingStatisticsV2Request$ = [3, n0, _GFSVR,
     0,
-    [_GBR, _SOo, _MSR],
-    [() => GroupByRules, 0, 1], 1
+    [_GBR, _Sco, _SOo, _MSR],
+    [() => GroupByRules, () => FindingScopes$, 0, 1], 1
 ];
 export var GetFindingStatisticsV2Response$ = [3, n0, _GFSVRe,
     0,
@@ -7023,8 +7054,8 @@ export var GetFindingsTrendsV2Response$ = [3, n0, _GFTVRe,
 ];
 export var GetFindingsV2Request$ = [3, n0, _GFVR,
     0,
-    [_Filt, _SCor, _NTe, _MRa],
-    [() => OcsfFindingFilters$, () => SortCriteria, 0, 1]
+    [_Filt, _Sco, _SCor, _NTe, _MRa],
+    [() => OcsfFindingFilters$, () => FindingScopes$, () => SortCriteria, 0, 1]
 ];
 export var GetFindingsV2Response$ = [3, n0, _GFVRe,
     0,
@@ -7083,8 +7114,8 @@ export var GetMembersResponse$ = [3, n0, _GMRe,
 ];
 export var GetResourcesStatisticsV2Request$ = [3, n0, _GRSVR,
     0,
-    [_GBR, _SOo, _MSR],
-    [() => ResourceGroupByRules, 0, 1], 1
+    [_GBR, _Sco, _SOo, _MSR],
+    [() => ResourceGroupByRules, () => ResourceScopes$, 0, 1], 1
 ];
 export var GetResourcesStatisticsV2Response$ = [3, n0, _GRSVRe,
     0,
@@ -7103,8 +7134,8 @@ export var GetResourcesTrendsV2Response$ = [3, n0, _GRTVRe,
 ];
 export var GetResourcesV2Request$ = [3, n0, _GRVR,
     0,
-    [_Filt, _SCor, _NTe, _MRa],
-    [() => ResourcesFilters$, () => SortCriteria, 0, 1]
+    [_Filt, _Sco, _SCor, _NTe, _MRa],
+    [() => ResourcesFilters$, () => ResourceScopes$, () => SortCriteria, 0, 1]
 ];
 export var GetResourcesV2Response$ = [3, n0, _GRVRe,
     0,
@@ -7623,7 +7654,7 @@ export var ResourceGroupByRule$ = [3, n0, _RGBR,
 ];
 export var ResourceResult$ = [3, n0, _RResou,
     0,
-    [_RI, _AIc, _Reg, _RDCTD, _RCeso, _RGe, _RCesou, _RT, _RNes, _RCTD, _FSi, _RTe],
+    [_RI, _AIc, _Reg, _RDCTD, _RCeso, _RGe, _RCesou, _RT, _RNes, _RCTD, _FSin, _RTe],
     [0, 0, 0, 0, 15, 0, 0, 0, 0, 0, () => ResourceFindingsSummaryList, () => ResourceTagList], 5
 ];
 export var ResourcesCompositeFilter$ = [3, n0, _RCF,
@@ -7631,6 +7662,11 @@ export var ResourcesCompositeFilter$ = [3, n0, _RCF,
     [_SF, _DF, _NF, _MF, _NCF, _Oper],
     [() => ResourcesStringFilterList, () => ResourcesDateFilterList, () => ResourcesNumberFilterList, () => ResourcesMapFilterList, () => ResourcesCompositeFilterList, 0]
 ];
+export var ResourceScopes$ = [3, n0, _RSeso,
+    0,
+    [_AOw],
+    [() => AwsOrganizationScopeList]
+];
 export var ResourcesCount$ = [3, n0, _RCesour,
     0,
     [_ARl],
@@ -8606,6 +8642,9 @@ var AwsMountPointList = [1, n0, _AMPL,
 var AwsNetworkFirewallFirewallSubnetMappingsList = [1, n0, _ANFFSML,
     0, () => AwsNetworkFirewallFirewallSubnetMappingsDetails$
 ];
+var AwsOrganizationScopeList = [1, n0, _AOSL,
+    0, () => AwsOrganizationScope$
+];
 var AwsRdsDbClusterAssociatedRoles = [1, n0, _ARDCARw,
     0, () => AwsRdsDbClusterAssociatedRole$
 ];

package/dist-types/commands/BatchUpdateFindingsV2Command.d.ts

@@ -27,12 +27,14 @@ declare const BatchUpdateFindingsV2Command_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Used by customers to update information about their investigation into a finding.
- *          Requested by delegated administrator accounts or member accounts.
- *          Delegated administrator accounts can update findings for their account and their member accounts.
- *          Member accounts can update findings for their account. <code>BatchUpdateFindings</code> and <code>BatchUpdateFindingV2</code> both use <code>securityhub:BatchUpdateFindings</code> in the <code>Action</code> element of an IAM policy statement.
+ * <p>Updates information about a customer's investigation into a finding. Delegated administrator accounts can update findings for their account and their member accounts. Member accounts can update findings for their own account.</p>
+ *          <p>
+ *             <code>BatchUpdateFindings</code> and <code>BatchUpdateFindingsV2</code> both use <code>securityhub:BatchUpdateFindings</code> in the <code>Action</code> element of an IAM policy statement.
  *          You must have permission to perform the <code>securityhub:BatchUpdateFindings</code> action.
- *          Updates from <code>BatchUpdateFindingsV2</code> don't affect the value of f<code>inding_info.modified_time</code>, <code>finding_info.modified_time_dt</code>, <code>time</code>, <code>time_dt for a finding</code>.</p>
+ *          You can configure IAM policies to restrict access to specific finding fields or field values by using the <code>securityhub:OCSFSyntaxPath/<fieldName></code> condition key, where <code><fieldName></code> is one of the following supported fields: <code>SeverityId</code>, <code>StatusId</code>, or <code>Comment</code>.</p>
+ *          <p>To prevent a user from updating a specific field, use a <code>Null</code> condition with <code>securityhub:OCSFSyntaxPath/<fieldName></code> set to <code>"false"</code>.
+ *          To prevent a user from setting a field to a specific value, use a <code>StringEquals</code> condition with <code>securityhub:OCSFSyntaxPath/<fieldName></code> set to the disallowed value or list of values.</p>
+ *          <p>Updates from <code>BatchUpdateFindingsV2</code> don't affect the value of <code>finding_info.modified_time</code>, <code>finding_info.modified_time_dt</code>, <code>time</code>, or <code>time_dt</code> for a finding.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/GetFindingStatisticsV2Command.d.ts

@@ -28,9 +28,11 @@ declare const GetFindingStatisticsV2Command_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Returns aggregated statistical data about findings.
- *          <code>GetFindingStatisticsV2</code> use <code>securityhub:GetAdhocInsightResults</code> in the <code>Action</code> element of an IAM policy statement.
- *          You must have permission to perform the <code>s</code> action.</p>
+ * <p>Returns aggregated statistical data about findings.</p>
+ *          <p>You can use the <code>Scopes</code> parameter to define the data boundary for the query. Currently, <code>Scopes</code> supports <code>AwsOrganizations</code>, which lets you aggregate findings from your entire organization or from specific organizational units. Only the delegated administrator account can use <code>Scopes</code>.</p>
+ *          <p>
+ *             <code>GetFindingStatisticsV2</code> uses <code>securityhub:GetAdhocInsightResults</code> in the <code>Action</code> element of an IAM policy statement.
+ *          You must have permission to perform the <code>securityhub:GetAdhocInsightResults</code> action.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -179,6 +181,14 @@ declare const GetFindingStatisticsV2Command_base: {
  *       GroupByField: "activity_name" || "cloud.account.uid" || "cloud.provider" || "cloud.region" || "compliance.assessments.name" || "compliance.status" || "compliance.control" || "finding_info.title" || "finding_info.related_events.traits.category" || "finding_info.types" || "metadata.product.name" || "metadata.product.uid" || "resources.type" || "resources.uid" || "severity" || "status" || "vulnerabilities.fix_coverage" || "class_name" || "vulnerabilities.affected_packages.name" || "finding_info.analytic.name" || "compliance.standards" || "cloud.account.name" || "vendor_attributes.severity" || "metadata.product.vendor_name", // required
  *     },
  *   ],
+ *   Scopes: { // FindingScopes
+ *     AwsOrganizations: [ // AwsOrganizationScopeList
+ *       { // AwsOrganizationScope
+ *         OrganizationId: "STRING_VALUE",
+ *         OrganizationalUnitId: "STRING_VALUE",
+ *       },
+ *     ],
+ *   },
  *   SortOrder: "asc" || "desc",
  *   MaxStatisticResults: Number("int"),
  * };
@@ -217,6 +227,12 @@ declare const GetFindingStatisticsV2Command_base: {
  *          The request has failed due to an internal failure of the service.
  *       </p>
  *
+ * @throws {@link OrganizationalUnitNotFoundException} (client fault)
+ *  <p>The request failed because one or more organizational units specified in the request don't exist within the caller's organization.</p>
+ *
+ * @throws {@link OrganizationNotFoundException} (client fault)
+ *  <p>The request failed because one or more organizations specified in the request don't exist or don't belong to the caller's organization.</p>
+ *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>
  *          The limit on the number of requests per second was exceeded.

package/dist-types/commands/GetFindingsV2Command.d.ts

@@ -28,8 +28,11 @@ declare const GetFindingsV2Command_base: {
     getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
- * <p>Return a list of findings that match the specified criteria.
- *       <code>GetFindings</code> and <code>GetFindingsV2</code> both use <code>securityhub:GetFindings</code> in the <code>Action</code> element of an IAM policy statement.
+ * <p>Returns a list of findings that match the specified criteria.</p>
+ *          <p>You can use the <code>Scopes</code> parameter to define the data boundary for the query. Currently, <code>Scopes</code> supports <code>AwsOrganizations</code>, which lets you retrieve findings from your entire organization or from specific organizational units. Only the delegated administrator account can use <code>Scopes</code>.</p>
+ *          <p>You can use the <code>Filters</code> parameter to refine results based on finding attributes. You can use <code>Scopes</code> and <code>Filters</code> independently or together. When both are provided, <code>Scopes</code> narrows the data set first, and then <code>Filters</code> refines results within that scoped data set.</p>
+ *          <p>
+ *             <code>GetFindings</code> and <code>GetFindingsV2</code> both use <code>securityhub:GetFindings</code> in the <code>Action</code> element of an IAM policy statement.
  *          You must have permission to perform the <code>securityhub:GetFindings</code> action.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
@@ -174,6 +177,14 @@ declare const GetFindingsV2Command_base: {
  *     ],
  *     CompositeOperator: "AND" || "OR",
  *   },
+ *   Scopes: { // FindingScopes
+ *     AwsOrganizations: [ // AwsOrganizationScopeList
+ *       { // AwsOrganizationScope
+ *         OrganizationId: "STRING_VALUE",
+ *         OrganizationalUnitId: "STRING_VALUE",
+ *       },
+ *     ],
+ *   },
  *   SortCriteria: [ // SortCriteria
  *     { // SortCriterion
  *       Field: "STRING_VALUE",
@@ -211,6 +222,12 @@ declare const GetFindingsV2Command_base: {
  *          The request has failed due to an internal failure of the service.
  *       </p>
  *
+ * @throws {@link OrganizationalUnitNotFoundException} (client fault)
+ *  <p>The request failed because one or more organizational units specified in the request don't exist within the caller's organization.</p>
+ *
+ * @throws {@link OrganizationNotFoundException} (client fault)
+ *  <p>The request failed because one or more organizations specified in the request don't exist or don't belong to the caller's organization.</p>
+ *
  * @throws {@link ThrottlingException} (client fault)
  *  <p>
  *          The limit on the number of requests per second was exceeded.

package/dist-types/commands/GetResourcesStatisticsV2Command.d.ts

@@ -29,6 +29,7 @@ declare const GetResourcesStatisticsV2Command_base: {
 };
 /**
  * <p>Retrieves statistical information about Amazon Web Services resources and their associated security findings.</p>
+ *          <p>You can use the <code>Scopes</code> parameter to define the data boundary for the query. Currently, <code>Scopes</code> supports <code>AwsOrganizations</code>, which lets you aggregate resources from your entire organization or from specific organizational units. Only the delegated administrator account can use <code>Scopes</code>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -145,6 +146,14 @@ declare const GetResourcesStatisticsV2Command_base: {
  *       },
  *     },
  *   ],
+ *   Scopes: { // ResourceScopes
+ *     AwsOrganizations: [ // AwsOrganizationScopeList
+ *       { // AwsOrganizationScope
+ *         OrganizationId: "STRING_VALUE",
+ *         OrganizationalUnitId: "STRING_VALUE",
+ *       },
+ *     ],
+ *   },
  *   SortOrder: "asc" || "desc",
  *   MaxStatisticResults: Number("int"),
  * };
@@ -183,6 +192,12 @@ declare const GetResourcesStatisticsV2Command_base: {
  *          The request has failed due to an internal failure of the service.
  *       </p>
  *
+ * @throws {@link OrganizationalUnitNotFoundException} (client fault)
+ *  <p>The request failed because one or more organizational units specified in the request don't exist within the caller's organization.</p>
+ *
+ * @throws {@link OrganizationNotFoundException} (client fault)
+ *  <p>The request failed because one or more organizations specified in the request don't exist or don't belong to the caller's organization.</p>
+ *
  * @throws {@link ResourceNotFoundException} (client fault)
  *  <p>The request was rejected because we can't find the specified resource.</p>
  *

package/dist-types/commands/GetResourcesV2Command.d.ts

@@ -29,6 +29,8 @@ declare const GetResourcesV2Command_base: {
 };
 /**
  * <p>Returns a list of resources.</p>
+ *          <p>You can use the <code>Scopes</code> parameter to define the data boundary for the query. Currently, <code>Scopes</code> supports <code>AwsOrganizations</code>, which lets you retrieve resources from your entire organization or from specific organizational units. Only the delegated administrator account can use <code>Scopes</code>.</p>
+ *          <p>You can use the <code>Filters</code> parameter to refine results based on resource attributes. You can use <code>Scopes</code> and <code>Filters</code> independently or together. When both are provided, <code>Scopes</code> narrows the data set first, and then <code>Filters</code> refines results within that scoped data set.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript
@@ -140,6 +142,14 @@ declare const GetResourcesV2Command_base: {
  *     ],
  *     CompositeOperator: "AND" || "OR",
  *   },
+ *   Scopes: { // ResourceScopes
+ *     AwsOrganizations: [ // AwsOrganizationScopeList
+ *       { // AwsOrganizationScope
+ *         OrganizationId: "STRING_VALUE",
+ *         OrganizationalUnitId: "STRING_VALUE",
+ *       },
+ *     ],
+ *   },
  *   SortCriteria: [ // SortCriteria
  *     { // SortCriterion
  *       Field: "STRING_VALUE",
@@ -211,6 +221,12 @@ declare const GetResourcesV2Command_base: {
  *          The request has failed due to an internal failure of the service.
  *       </p>
  *
+ * @throws {@link OrganizationalUnitNotFoundException} (client fault)
+ *  <p>The request failed because one or more organizational units specified in the request don't exist within the caller's organization.</p>
+ *
+ * @throws {@link OrganizationNotFoundException} (client fault)
+ *  <p>The request failed because one or more organizations specified in the request don't exist or don't belong to the caller's organization.</p>
+ *
  * @throws {@link ResourceNotFoundException} (client fault)
  *  <p>The request was rejected because we can't find the specified resource.</p>
  *

package/dist-types/commands/ListStandardsControlAssociationsCommand.d.ts

@@ -1,6 +1,7 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ListStandardsControlAssociationsRequest, ListStandardsControlAssociationsResponse } from "../models/models_2";
+import type { ListStandardsControlAssociationsRequest } from "../models/models_2";
+import type { ListStandardsControlAssociationsResponse } from "../models/models_3";
 import type { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
 /**
  * @public

package/dist-types/commands/ListTagsForResourceCommand.d.ts

@@ -1,7 +1,6 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ListTagsForResourceRequest } from "../models/models_2";
-import type { ListTagsForResourceResponse } from "../models/models_3";
+import type { ListTagsForResourceRequest, ListTagsForResourceResponse } from "../models/models_3";
 import type { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
 /**
  * @public

package/dist-types/models/errors.d.ts

@@ -174,6 +174,34 @@ export declare class ServiceQuotaExceededException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<ServiceQuotaExceededException, __BaseException>);
 }
+/**
+ * <p>The request failed because one or more organizational units specified in the request don't exist within the caller's organization.</p>
+ * @public
+ */
+export declare class OrganizationalUnitNotFoundException extends __BaseException {
+    readonly name: "OrganizationalUnitNotFoundException";
+    readonly $fault: "client";
+    Message?: string | undefined;
+    Code?: string | undefined;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<OrganizationalUnitNotFoundException, __BaseException>);
+}
+/**
+ * <p>The request failed because one or more organizations specified in the request don't exist or don't belong to the caller's organization.</p>
+ * @public
+ */
+export declare class OrganizationNotFoundException extends __BaseException {
+    readonly name: "OrganizationNotFoundException";
+    readonly $fault: "client";
+    Message?: string | undefined;
+    Code?: string | undefined;
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<OrganizationNotFoundException, __BaseException>);
+}
 /**
  * <p>
  *             The request was rejected because it conflicts with the resource's availability. For example, you tried

package/dist-types/models/models_0.d.ts

@@ -1163,7 +1163,7 @@ export interface StringFilter {
      *          </ul>
      *          <p>
      *             <code>CONTAINS</code> and <code>NOT_CONTAINS</code> operators can be used only with automation rules V1.
-     *           <code>CONTAINS_WORD</code> operator is only supported in <code>GetFindingsV2</code>, <code>GetFindingStatisticsV2</code>, <code>GetResourcesV2</code>, and <code>GetResourceStatisticsV2</code> APIs.
+     *           <code>CONTAINS_WORD</code> operator is only supported in <code>GetFindingsV2</code>, <code>GetFindingStatisticsV2</code>, <code>GetResourcesV2</code>, and <code>GetResourcesStatisticsV2</code> APIs.
      *           For more information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html">Automation rules</a> in the <i>Security Hub CSPM User Guide</i>.</p>
      * @public
      */

package/dist-types/models/models_1.d.ts

@@ -4187,6 +4187,27 @@ export interface AwsOpenSearchServiceDomainDetails {
      */
     AdvancedSecurityOptions?: AwsOpenSearchServiceDomainAdvancedSecurityOptionsDetails | undefined;
 }
+/**
+ * <p>Specifies an Organizations scope. Data from the specified organization or organizational unit is included in the response.</p>
+ *          <p>To scope to a specific organizational unit, provide <code>OrganizationalUnitId</code>. You can optionally include <code>OrganizationId</code>. If you omit <code>OrganizationId</code>, Security Hub uses the caller's organization ID.
+ *          To scope to the delegated administrator's entire organization, provide only <code>OrganizationId</code>.</p>
+ *          <p>The organization ID and organizational unit must belong to the delegated administrator's own organization.
+ *          Each request must use one scoping approach: either scope to the entire organization by providing an <code>AwsOrganizationScope</code> entry with only <code>OrganizationId</code>, or scope to specific organizational units by providing <code>AwsOrganizationScope</code> entries with <code>OrganizationalUnitId</code>. You can't combine both approaches in the same request.</p>
+ * @public
+ */
+export interface AwsOrganizationScope {
+    /**
+     * <p>The unique identifier (ID) of the organization (for example, <code>o-abcd1234567890</code>). The organization must be the delegated administrator's own organization.
+     *          If you omit this value and provide <code>OrganizationalUnitId</code>, Security Hub uses the caller's organization ID.</p>
+     * @public
+     */
+    OrganizationId?: string | undefined;
+    /**
+     * <p>The unique identifier (ID) of the organizational unit (OU) (for example, <code>ou-ab12-cd345678</code>). The OU must exist within the delegated administrator's own organization. When specified, the results include only data from accounts in this OU.</p>
+     * @public
+     */
+    OrganizationalUnitId?: string | undefined;
+}
 /**
  * <p>An IAM role that is associated with the Amazon RDS DB cluster.</p>
  * @public
@@ -9919,25 +9940,3 @@ export interface AwsWafRuleGroupDetails {
      */
     Rules?: AwsWafRuleGroupRulesDetails[] | undefined;
 }
-/**
- * <p>
- *          A custom header for custom request and response handling.
- *       </p>
- * @public
- */
-export interface AwsWafv2CustomHttpHeader {
-    /**
-     * <p>
-     *          The name of the custom header.
-     *       </p>
-     * @public
-     */
-    Name?: string | undefined;
-    /**
-     * <p>
-     *          The value of the custom header.
-     *       </p>
-     * @public
-     */
-    Value?: string | undefined;
-}