@aws-sdk/client-securityhub 3.1042.0 → 3.1044.0

package/dist-types/commands/GetFindingsV2Command.d.ts

@@ -64,6 +64,7 @@ declare const GetFindingsV2Command_base: {
  *               DateRange: { // DateRange
  *                 Value: Number("int"),
  *                 Unit: "DAYS",
+ *                 Comparison: "WITHIN" || "OLDER_THAN",
  *               },
  *             },
  *           },
@@ -126,6 +127,7 @@ declare const GetFindingsV2Command_base: {
  *                   DateRange: {
  *                     Value: Number("int"),
  *                     Unit: "DAYS",
+ *                     Comparison: "WITHIN" || "OLDER_THAN",
  *                   },
  *                 },
  *               },

package/dist-types/commands/GetInsightsCommand.d.ts

@@ -89,6 +89,7 @@ declare const GetInsightsCommand_base: {
  * //             DateRange: { // DateRange
  * //               Value: Number("int"),
  * //               Unit: "DAYS",
+ * //               Comparison: "WITHIN" || "OLDER_THAN",
  * //             },
  * //           },
  * //         ],
@@ -99,6 +100,7 @@ declare const GetInsightsCommand_base: {
  * //             DateRange: {
  * //               Value: Number("int"),
  * //               Unit: "DAYS",
+ * //               Comparison: "WITHIN" || "OLDER_THAN",
  * //             },
  * //           },
  * //         ],
@@ -109,6 +111,7 @@ declare const GetInsightsCommand_base: {
  * //             DateRange: {
  * //               Value: Number("int"),
  * //               Unit: "DAYS",
+ * //               Comparison: "WITHIN" || "OLDER_THAN",
  * //             },
  * //           },
  * //         ],
@@ -119,6 +122,7 @@ declare const GetInsightsCommand_base: {
  * //             DateRange: {
  * //               Value: Number("int"),
  * //               Unit: "DAYS",
+ * //               Comparison: "WITHIN" || "OLDER_THAN",
  * //             },
  * //           },
  * //         ],
@@ -229,6 +233,7 @@ declare const GetInsightsCommand_base: {
  * //             DateRange: {
  * //               Value: Number("int"),
  * //               Unit: "DAYS",
+ * //               Comparison: "WITHIN" || "OLDER_THAN",
  * //             },
  * //           },
  * //         ],

package/dist-types/commands/GetRecommendedPolicyV2Command.d.ts

@@ -0,0 +1,118 @@
+import { Command as $Command } from "@smithy/smithy-client";
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { GetRecommendedPolicyV2Request, GetRecommendedPolicyV2Response } from "../models/models_2";
+import type { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+export { $Command };
+/**
+ * @public
+ *
+ * The input for {@link GetRecommendedPolicyV2Command}.
+ */
+export interface GetRecommendedPolicyV2CommandInput extends GetRecommendedPolicyV2Request {
+}
+/**
+ * @public
+ *
+ * The output of {@link GetRecommendedPolicyV2Command}.
+ */
+export interface GetRecommendedPolicyV2CommandOutput extends GetRecommendedPolicyV2Response, __MetadataBearer {
+}
+declare const GetRecommendedPolicyV2Command_base: {
+    new (input: GetRecommendedPolicyV2CommandInput): import("@smithy/smithy-client").CommandImpl<GetRecommendedPolicyV2CommandInput, GetRecommendedPolicyV2CommandOutput, SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    new (input: GetRecommendedPolicyV2CommandInput): import("@smithy/smithy-client").CommandImpl<GetRecommendedPolicyV2CommandInput, GetRecommendedPolicyV2CommandOutput, SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
+};
+/**
+ * <p>Retrieves the recommended policy to remediate a Security Hub finding.
+ *          <code>GetRecommendedPolicyV2</code> only supports findings for unused permissions.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { SecurityHubClient, GetRecommendedPolicyV2Command } from "@aws-sdk/client-securityhub"; // ES Modules import
+ * // const { SecurityHubClient, GetRecommendedPolicyV2Command } = require("@aws-sdk/client-securityhub"); // CommonJS import
+ * // import type { SecurityHubClientConfig } from "@aws-sdk/client-securityhub";
+ * const config = {}; // type is SecurityHubClientConfig
+ * const client = new SecurityHubClient(config);
+ * const input = { // GetRecommendedPolicyV2Request
+ *   MetadataUid: "STRING_VALUE", // required
+ *   NextToken: "STRING_VALUE",
+ *   MaxResults: Number("int"),
+ * };
+ * const command = new GetRecommendedPolicyV2Command(input);
+ * const response = await client.send(command);
+ * // { // GetRecommendedPolicyV2Response
+ * //   NextToken: "STRING_VALUE",
+ * //   RecommendationType: "UNUSED_PERMISSION_RECOMMENDATION",
+ * //   RecommendationSteps: [ // RecommendationSteps
+ * //     { // RecommendationStep Union: only one key present
+ * //       UnusedPermissions: { // UnusedPermissionsRecommendationStep
+ * //         RecommendedAction: "STRING_VALUE",
+ * //         ExistingPolicy: "STRING_VALUE",
+ * //         ExistingPolicyId: "STRING_VALUE",
+ * //         PolicyUpdatedAt: new Date("TIMESTAMP"),
+ * //         RecommendedPolicy: "STRING_VALUE",
+ * //       },
+ * //     },
+ * //   ],
+ * //   Error: { // RecommendationError
+ * //     Code: "STRING_VALUE",
+ * //     Message: "STRING_VALUE",
+ * //   },
+ * //   Status: "IN_PROGRESS" || "SUCCEEDED" || "FAILED",
+ * //   ResourceArn: "STRING_VALUE",
+ * // };
+ *
+ * ```
+ *
+ * @param GetRecommendedPolicyV2CommandInput - {@link GetRecommendedPolicyV2CommandInput}
+ * @returns {@link GetRecommendedPolicyV2CommandOutput}
+ * @see {@link GetRecommendedPolicyV2CommandInput} for command's `input` shape.
+ * @see {@link GetRecommendedPolicyV2CommandOutput} for command's `response` shape.
+ * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
+ *
+ * @throws {@link AccessDeniedException} (client fault)
+ *  <p>You don't have permission to perform the action specified in the request.</p>
+ *
+ * @throws {@link InternalServerException} (server fault)
+ *  <p>
+ *          The request has failed due to an internal failure of the service.
+ *       </p>
+ *
+ * @throws {@link InvalidInputException} (client fault)
+ *  <p>The request was rejected because you supplied an invalid or out-of-range value for an
+ *          input parameter.</p>
+ *
+ * @throws {@link ResourceNotFoundException} (client fault)
+ *  <p>The request was rejected because we can't find the specified resource.</p>
+ *
+ * @throws {@link ThrottlingException} (client fault)
+ *  <p>
+ *          The limit on the number of requests per second was exceeded.
+ *       </p>
+ *
+ * @throws {@link ValidationException} (client fault)
+ *  <p>The request has failed validation because it's missing required fields or has invalid inputs.</p>
+ *
+ * @throws {@link SecurityHubServiceException}
+ * <p>Base exception class for all service exceptions from SecurityHub service.</p>
+ *
+ *
+ * @public
+ */
+export declare class GetRecommendedPolicyV2Command extends GetRecommendedPolicyV2Command_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: GetRecommendedPolicyV2Request;
+            output: GetRecommendedPolicyV2Response;
+        };
+        sdk: {
+            input: GetRecommendedPolicyV2CommandInput;
+            output: GetRecommendedPolicyV2CommandOutput;
+        };
+    };
+}

package/dist-types/commands/GetResourcesStatisticsV2Command.d.ts

@@ -63,6 +63,7 @@ declare const GetResourcesStatisticsV2Command_base: {
  *                   DateRange: { // DateRange
  *                     Value: Number("int"),
  *                     Unit: "DAYS",
+ *                     Comparison: "WITHIN" || "OLDER_THAN",
  *                   },
  *                 },
  *               },
@@ -109,6 +110,7 @@ declare const GetResourcesStatisticsV2Command_base: {
  *                       DateRange: {
  *                         Value: Number("int"),
  *                         Unit: "DAYS",
+ *                         Comparison: "WITHIN" || "OLDER_THAN",
  *                       },
  *                     },
  *                   },

package/dist-types/commands/GetResourcesV2Command.d.ts

@@ -61,6 +61,7 @@ declare const GetResourcesV2Command_base: {
  *               DateRange: { // DateRange
  *                 Value: Number("int"),
  *                 Unit: "DAYS",
+ *                 Comparison: "WITHIN" || "OLDER_THAN",
  *               },
  *             },
  *           },
@@ -107,6 +108,7 @@ declare const GetResourcesV2Command_base: {
  *                   DateRange: {
  *                     Value: Number("int"),
  *                     Unit: "DAYS",
+ *                     Comparison: "WITHIN" || "OLDER_THAN",
  *                   },
  *                 },
  *               },

package/dist-types/commands/ListMembersCommand.d.ts

@@ -1,6 +1,6 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ListMembersRequest, ListMembersResponse } from "../models/models_2";
+import type { ListMembersRequest, ListMembersResponse } from "../models/models_3";
 import type { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
 /**
  * @public

package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts

@@ -1,6 +1,6 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ListOrganizationAdminAccountsRequest, ListOrganizationAdminAccountsResponse } from "../models/models_2";
+import type { ListOrganizationAdminAccountsRequest, ListOrganizationAdminAccountsResponse } from "../models/models_3";
 import type { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
 /**
  * @public

package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts

@@ -1,6 +1,6 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ListSecurityControlDefinitionsRequest, ListSecurityControlDefinitionsResponse } from "../models/models_2";
+import type { ListSecurityControlDefinitionsRequest, ListSecurityControlDefinitionsResponse } from "../models/models_3";
 import type { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
 /**
  * @public

package/dist-types/commands/ListStandardsControlAssociationsCommand.d.ts

@@ -1,7 +1,6 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ListStandardsControlAssociationsRequest } from "../models/models_2";
-import type { ListStandardsControlAssociationsResponse } from "../models/models_3";
+import type { ListStandardsControlAssociationsRequest, ListStandardsControlAssociationsResponse } from "../models/models_3";
 import type { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
 /**
  * @public

package/dist-types/commands/UpdateAutomationRuleV2Command.d.ts

@@ -64,6 +64,7 @@ declare const UpdateAutomationRuleV2Command_base: {
  *                 DateRange: { // DateRange
  *                   Value: Number("int"),
  *                   Unit: "DAYS",
+ *                   Comparison: "WITHIN" || "OLDER_THAN",
  *                 },
  *               },
  *             },
@@ -126,6 +127,7 @@ declare const UpdateAutomationRuleV2Command_base: {
  *                     DateRange: {
  *                       Value: Number("int"),
  *                       Unit: "DAYS",
+ *                       Comparison: "WITHIN" || "OLDER_THAN",
  *                     },
  *                   },
  *                 },

package/dist-types/commands/UpdateFindingsCommand.d.ts

@@ -84,6 +84,7 @@ declare const UpdateFindingsCommand_base: {
  *         DateRange: { // DateRange
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],
@@ -94,6 +95,7 @@ declare const UpdateFindingsCommand_base: {
  *         DateRange: {
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],
@@ -104,6 +106,7 @@ declare const UpdateFindingsCommand_base: {
  *         DateRange: {
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],
@@ -114,6 +117,7 @@ declare const UpdateFindingsCommand_base: {
  *         DateRange: {
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],
@@ -224,6 +228,7 @@ declare const UpdateFindingsCommand_base: {
  *         DateRange: {
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],

package/dist-types/commands/UpdateInsightCommand.d.ts

@@ -78,6 +78,7 @@ declare const UpdateInsightCommand_base: {
  *         DateRange: { // DateRange
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],
@@ -88,6 +89,7 @@ declare const UpdateInsightCommand_base: {
  *         DateRange: {
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],
@@ -98,6 +100,7 @@ declare const UpdateInsightCommand_base: {
  *         DateRange: {
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],
@@ -108,6 +111,7 @@ declare const UpdateInsightCommand_base: {
  *         DateRange: {
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],
@@ -218,6 +222,7 @@ declare const UpdateInsightCommand_base: {
  *         DateRange: {
  *           Value: Number("int"),
  *           Unit: "DAYS",
+ *           Comparison: "WITHIN" || "OLDER_THAN",
  *         },
  *       },
  *     ],

package/dist-types/commands/index.d.ts

@@ -51,6 +51,7 @@ export * from "./EnableImportFindingsForProductCommand";
 export * from "./EnableOrganizationAdminAccountCommand";
 export * from "./EnableSecurityHubCommand";
 export * from "./EnableSecurityHubV2Command";
+export * from "./GenerateRecommendedPolicyV2Command";
 export * from "./GetAdministratorAccountCommand";
 export * from "./GetAggregatorV2Command";
 export * from "./GetAutomationRuleV2Command";
@@ -69,6 +70,7 @@ export * from "./GetInsightsCommand";
 export * from "./GetInvitationsCountCommand";
 export * from "./GetMasterAccountCommand";
 export * from "./GetMembersCommand";
+export * from "./GetRecommendedPolicyV2Command";
 export * from "./GetResourcesStatisticsV2Command";
 export * from "./GetResourcesTrendsV2Command";
 export * from "./GetResourcesV2Command";

package/dist-types/models/enums.d.ts

@@ -166,6 +166,18 @@ export declare const StringFilterComparison: {
  * @public
  */
 export type StringFilterComparison = (typeof StringFilterComparison)[keyof typeof StringFilterComparison];
+/**
+ * @public
+ * @enum
+ */
+export declare const DateRangeComparison: {
+    readonly OLDER_THAN: "OLDER_THAN";
+    readonly WITHIN: "WITHIN";
+};
+/**
+ * @public
+ */
+export type DateRangeComparison = (typeof DateRangeComparison)[keyof typeof DateRangeComparison];
 /**
  * @public
  * @enum
@@ -937,6 +949,30 @@ export declare const GranularityField: {
  * @public
  */
 export type GranularityField = (typeof GranularityField)[keyof typeof GranularityField];
+/**
+ * @public
+ * @enum
+ */
+export declare const RecommendationType: {
+    readonly UNUSED_PERMISSION_RECOMMENDATION: "UNUSED_PERMISSION_RECOMMENDATION";
+};
+/**
+ * @public
+ */
+export type RecommendationType = (typeof RecommendationType)[keyof typeof RecommendationType];
+/**
+ * @public
+ * @enum
+ */
+export declare const RecommendationStatus: {
+    readonly FAILED: "FAILED";
+    readonly IN_PROGRESS: "IN_PROGRESS";
+    readonly SUCCEEDED: "SUCCEEDED";
+};
+/**
+ * @public
+ */
+export type RecommendationStatus = (typeof RecommendationStatus)[keyof typeof RecommendationStatus];
 /**
  * @public
  * @enum

package/dist-types/models/models_0.d.ts

@@ -1,4 +1,4 @@
-import type { ActorSessionMfaStatus, AdminStatus, AssociationType, AutomationRulesActionType, AutomationRulesActionTypeV2, ConfigurationPolicyAssociationStatus, DateRangeUnit, MapFilterComparison, RuleStatus, RuleStatusV2, SeverityLabel, StringFilterComparison, VerificationState, WorkflowStatus } from "./enums";
+import type { ActorSessionMfaStatus, AdminStatus, AssociationType, AutomationRulesActionType, AutomationRulesActionTypeV2, ConfigurationPolicyAssociationStatus, DateRangeComparison, DateRangeUnit, MapFilterComparison, RuleStatus, RuleStatusV2, SeverityLabel, StringFilterComparison, VerificationState, WorkflowStatus } from "./enums";
 /**
  * @public
  */
@@ -1161,9 +1161,9 @@ export interface StringFilter {
      *                </p>
      *             </li>
      *          </ul>
-     *          <p>
-     *             <code>CONTAINS</code> and <code>NOT_CONTAINS</code> operators can be used only with automation rules V1.
-     *           <code>CONTAINS_WORD</code> operator is only supported in <code>GetFindingsV2</code>, <code>GetFindingStatisticsV2</code>, <code>GetResourcesV2</code>, and <code>GetResourcesStatisticsV2</code> APIs.
+     *          <p>The <code>CONTAINS</code> operator works with automation rules V1 and V2.
+     *           The <code>NOT_CONTAINS</code> operator works only with automation rules V1.
+     *           The <code>CONTAINS_WORD</code> operator works only in the <code>GetFindingsV2</code>, <code>GetFindingStatisticsV2</code>, <code>GetResourcesV2</code>, and <code>GetResourcesStatisticsV2</code> APIs.
      *           For more information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html">Automation rules</a> in the <i>Security Hub CSPM User Guide</i>.</p>
      * @public
      */
@@ -1222,6 +1222,11 @@ export interface DateRange {
      * @public
      */
     Unit?: DateRangeUnit | undefined;
+    /**
+     * <p>The condition to apply to a date range filter. If you specify <code>WITHIN</code>, Security Hub filters for dates within the specified date range. If you specify <code>OLDER_THAN</code>, Security Hub filters for dates before the specified date range. If you don't specify a value, the default is <code>WITHIN</code>.</p>
+     * @public
+     */
+    Comparison?: DateRangeComparison | undefined;
 }
 /**
  * <p>A date filter for querying findings.</p>