@aws-sdk/client-securityhub 3.1043.0 → 3.1045.0

package/dist-types/models/models_2.d.ts

@@ -1,6 +1,6 @@
 import type { DocumentType as __DocumentType } from "@smithy/types";
-import type { AssociationStatus, AssociationType, AutoEnableStandards, BatchUpdateFindingsV2UnprocessedFindingErrorCode, ConfigurationPolicyAssociationStatus, ConnectorAuthStatus, ConnectorProviderName, ConnectorStatus, ControlFindingGenerator, ControlStatus, FindingHistoryUpdateSourceType, FindingsTrendsStringField, GranularityField, IntegrationType, IntegrationV2Type, OcsfBooleanField, OcsfDateField, OcsfIpField, OcsfMapField, OcsfNumberField, OcsfStringField, OrganizationConfigurationConfigurationType, OrganizationConfigurationStatus, ParameterValueType, Partition, RecordState, RegionAvailabilityStatus, ResourceCategory, ResourcesDateField, ResourcesMapField, ResourcesNumberField, ResourcesStringField, ResourcesTrendsStringField, RuleStatus, SecurityControlProperty, SecurityHubFeature, SeverityLabel, SeverityRating, SortOrder, StandardsControlsUpdatable, StandardsStatus, StatusReasonCode, TargetType, ThreatIntelIndicatorCategory, ThreatIntelIndicatorType, TicketCreationMode, UnprocessedErrorCode, UpdateStatus, VerificationState, VulnerabilityExploitAvailable, VulnerabilityFixAvailable, WorkflowState, WorkflowStatus } from "./enums";
-import type { AccountDetails, Action, ActionTarget, Adjustment, AdminAccount, AggregatorV2, AssociationFilters, AutomationRulesAction, AutomationRulesConfig, AutomationRulesFindingFilters, AutomationRulesMetadata, AutomationRulesMetadataV2, AwsAmazonMqBrokerDetails, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAppSyncGraphQlApiDetails, AwsAthenaWorkGroupDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsBackupBackupPlanDetails, AwsBackupBackupVaultDetails, AwsBackupRecoveryPointDetails, AwsCertificateManagerCertificateDetails, AwsCloudFormationStackDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCloudWatchAlarmDetails, AwsCodeBuildProjectDetails, AwsDmsEndpointDetails, AwsDmsReplicationInstanceDetails, AwsDmsReplicationTaskDetails, AwsDynamoDbTableDetails, AwsEc2ClientVpnEndpointDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2LaunchTemplateDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2RouteTableDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2TransitGatewayDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpcEndpointServiceDetails, AwsEc2VpcPeeringConnectionDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcrRepositoryDetails, AwsEcsClusterDetails, AwsEcsContainerDetails, AwsEcsServiceDetails, DateFilter, MapFilter, NoteUpdate, NumberFilter, RelatedFinding, SeverityUpdate, StringFilter, WorkflowUpdate } from "./models_0";
+import type { AssociationStatus, AssociationType, AutoEnableStandards, BatchUpdateFindingsV2UnprocessedFindingErrorCode, ConfigurationPolicyAssociationStatus, ConnectorAuthStatus, ConnectorProviderName, ConnectorStatus, ControlFindingGenerator, ControlStatus, FindingHistoryUpdateSourceType, FindingsTrendsStringField, GranularityField, IntegrationType, IntegrationV2Type, OcsfBooleanField, OcsfDateField, OcsfIpField, OcsfMapField, OcsfNumberField, OcsfStringField, OrganizationConfigurationConfigurationType, OrganizationConfigurationStatus, ParameterValueType, Partition, RecommendationStatus, RecommendationType, RecordState, RegionAvailabilityStatus, ResourceCategory, ResourcesDateField, ResourcesMapField, ResourcesNumberField, ResourcesStringField, ResourcesTrendsStringField, RuleStatus, SecurityControlProperty, SecurityHubFeature, SeverityLabel, SeverityRating, SortOrder, StandardsControlsUpdatable, StandardsStatus, StatusReasonCode, TargetType, ThreatIntelIndicatorCategory, ThreatIntelIndicatorType, TicketCreationMode, UnprocessedErrorCode, UpdateStatus, VerificationState, VulnerabilityExploitAvailable, VulnerabilityFixAvailable, WorkflowState, WorkflowStatus } from "./enums";
+import type { AccountDetails, Action, ActionTarget, Adjustment, AggregatorV2, AssociationFilters, AutomationRulesAction, AutomationRulesConfig, AutomationRulesFindingFilters, AutomationRulesMetadata, AutomationRulesMetadataV2, AwsAmazonMqBrokerDetails, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAppSyncGraphQlApiDetails, AwsAthenaWorkGroupDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsBackupBackupPlanDetails, AwsBackupBackupVaultDetails, AwsBackupRecoveryPointDetails, AwsCertificateManagerCertificateDetails, AwsCloudFormationStackDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCloudWatchAlarmDetails, AwsCodeBuildProjectDetails, AwsDmsEndpointDetails, AwsDmsReplicationInstanceDetails, AwsDmsReplicationTaskDetails, AwsDynamoDbTableDetails, AwsEc2ClientVpnEndpointDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2LaunchTemplateDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2RouteTableDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2TransitGatewayDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpcEndpointServiceDetails, AwsEc2VpcPeeringConnectionDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcrRepositoryDetails, AwsEcsClusterDetails, AwsEcsContainerDetails, AwsEcsServiceDetails, DateFilter, MapFilter, NoteUpdate, NumberFilter, RelatedFinding, SeverityUpdate, StringFilter, WorkflowUpdate } from "./models_0";
 import type { AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointDetails, AwsEksClusterDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsEventSchemasRegistryDetails, AwsEventsEndpointDetails, AwsEventsEventbusDetails, AwsGuardDutyDetectorDetails, AwsIamAccessKeyDetails, AwsIamGroupDetails, AwsIamPolicyDetails, AwsIamRoleDetails, AwsIamUserDetails, AwsKinesisStreamDetails, AwsKmsKeyDetails, AwsLambdaFunctionDetails, AwsLambdaLayerVersionDetails, AwsMskClusterDetails, AwsNetworkFirewallFirewallDetails, AwsNetworkFirewallFirewallPolicyDetails, AwsNetworkFirewallRuleGroupDetails, AwsOpenSearchServiceDomainDetails, AwsOrganizationScope, AwsRdsDbClusterDetails, AwsRdsDbClusterSnapshotDetails, AwsRdsDbInstanceDetails, AwsRdsDbSecurityGroupDetails, AwsRdsDbSnapshotDetails, AwsRdsEventSubscriptionDetails, AwsRedshiftClusterDetails, AwsRoute53HostedZoneDetails, AwsS3AccessPointDetails, AwsS3AccountPublicAccessBlockDetails, AwsS3BucketDetails, AwsS3ObjectDetails, AwsSageMakerNotebookInstanceDetails, AwsSecretsManagerSecretDetails, AwsSnsTopicDetails, AwsSqsQueueDetails, AwsSsmPatchComplianceDetails, AwsStepFunctionStateMachineDetails, AwsWafRateBasedRuleDetails, AwsWafRegionalRateBasedRuleDetails, AwsWafRegionalRuleDetails, AwsWafRegionalRuleGroupDetails, AwsWafRegionalWebAclDetails, AwsWafRuleDetails, AwsWafRuleGroupDetails, Compliance, DataClassificationDetails, Detection, FindingProviderFields, GeneratorDetails, Malware, Network, NetworkPathComponent, Note, PatchSummary, ProcessDetails, Remediation } from "./models_1";
 /**
  * <p>
@@ -6894,6 +6894,21 @@ export interface FindingsTrendsStringFilter {
      */
     Filter?: StringFilter | undefined;
 }
+/**
+ * @public
+ */
+export interface GenerateRecommendedPolicyV2Request {
+    /**
+     * <p>The unique identifier (ID) of Security Hub OCSF findings found under the <code>metadata.uid</code> field of the finding.</p>
+     * @public
+     */
+    MetadataUid: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GenerateRecommendedPolicyV2Response {
+}
 /**
  * @public
  */
@@ -7937,6 +7952,146 @@ export interface GetMembersResponse {
      */
     UnprocessedAccounts?: Result[] | undefined;
 }
+/**
+ * @public
+ */
+export interface GetRecommendedPolicyV2Request {
+    /**
+     * <p>The unique identifier (ID) of Security Hub OCSF findings found under the <code>metadata.uid</code> field of the finding.</p>
+     * @public
+     */
+    MetadataUid: string | undefined;
+    /**
+     * <p>The token used to paginate the <code>RecommendationSteps</code> list returned.
+     *            On your first call to <code>GetRecommendedPolicyV2</code>, omit this parameter or set it
+     *            to <code>NULL</code>. For subsequent calls, use the <code>NextToken</code> value returned in
+     *            the previous response to retrieve the next page of results.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The maximum number of recommendation steps to return.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+}
+/**
+ * <p>Contains information about the reason that the retrieval of a recommended policy for a finding failed.</p>
+ * @public
+ */
+export interface RecommendationError {
+    /**
+     * <p>The error code for a failed retrieval of a recommended policy for a finding.</p>
+     * @public
+     */
+    Code?: string | undefined;
+    /**
+     * <p>The error message for a failed retrieval of a recommended policy for a finding.</p>
+     * @public
+     */
+    Message?: string | undefined;
+}
+/**
+ * <p>Contains information about the action to take for a policy in an unused permissions finding.</p>
+ * @public
+ */
+export interface UnusedPermissionsRecommendationStep {
+    /**
+     * <p>A recommendation of whether to create or detach a policy for an unused permissions finding.</p>
+     * @public
+     */
+    RecommendedAction?: string | undefined;
+    /**
+     * <p>The contents of the existing policy identified by <code>ExistingPolicyId</code> which needs to be replaced,
+     *           when the <code>RecommendedAction</code> is <code>CREATE_POLICY</code>.</p>
+     * @public
+     */
+    ExistingPolicy?: string | undefined;
+    /**
+     * <p>The ID of an existing policy to be replaced or detached.</p>
+     * @public
+     */
+    ExistingPolicyId?: string | undefined;
+    /**
+     * <p>The time at which the existing policy for the unused permissions finding was last updated.</p>
+     * @public
+     */
+    PolicyUpdatedAt?: Date | undefined;
+    /**
+     * <p>The contents of the least-privileged recommended replacement for <code>ExistingPolicyId</code>,
+     *           when the <code>RecommendedAction</code> is <code>CREATE_POLICY</code>.</p>
+     * @public
+     */
+    RecommendedPolicy?: string | undefined;
+}
+/**
+ * <p>Contains information about a recommended step to remediate a Security Hub finding.</p>
+ * @public
+ */
+export type RecommendationStep = RecommendationStep.UnusedPermissionsMember | RecommendationStep.$UnknownMember;
+/**
+ * @public
+ */
+export declare namespace RecommendationStep {
+    /**
+     * <p>A recommended step to remediate an unused permissions finding.</p>
+     * @public
+     */
+    interface UnusedPermissionsMember {
+        UnusedPermissions: UnusedPermissionsRecommendationStep;
+        $unknown?: never;
+    }
+    /**
+     * @public
+     */
+    interface $UnknownMember {
+        UnusedPermissions?: never;
+        $unknown: [string, any];
+    }
+    /**
+     * @deprecated unused in schema-serde mode.
+     *
+     */
+    interface Visitor<T> {
+        UnusedPermissions: (value: UnusedPermissionsRecommendationStep) => T;
+        _: (name: string, value: any) => T;
+    }
+}
+/**
+ * @public
+ */
+export interface GetRecommendedPolicyV2Response {
+    /**
+     * <p>The pagination token to use to request the next page of results.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The type of recommendation for the finding.</p>
+     * @public
+     */
+    RecommendationType?: RecommendationType | undefined;
+    /**
+     * <p>The recommended steps to take to resolve the finding.</p>
+     * @public
+     */
+    RecommendationSteps?: RecommendationStep[] | undefined;
+    /**
+     * <p>Detailed information for a <code>FAILED</code> retrieval status.</p>
+     * @public
+     */
+    Error?: RecommendationError | undefined;
+    /**
+     * <p>The current status of the recommended policy retrieval.</p>
+     * @public
+     */
+    Status?: RecommendationStatus | undefined;
+    /**
+     * <p>The ARN of the resource of the finding.</p>
+     * @public
+     */
+    ResourceArn?: string | undefined;
+}
 /**
  * <p>Enables the filtering of Amazon Web Services resources based on date and timestamp attributes.</p>
  * @public
@@ -8769,169 +8924,3 @@ export interface ListInvitationsResponse {
      */
     NextToken?: string | undefined;
 }
-/**
- * @public
- */
-export interface ListMembersRequest {
-    /**
-     * <p>Specifies which member accounts to include in the response based on their relationship
-     *          status with the administrator account. The default value is <code>TRUE</code>.</p>
-     *          <p>If <code>OnlyAssociated</code> is set to <code>TRUE</code>, the response includes member
-     *          accounts whose relationship status with the administrator account is set to <code>ENABLED</code>.</p>
-     *          <p>If <code>OnlyAssociated</code> is set to <code>FALSE</code>, the response includes all
-     *          existing member accounts. </p>
-     * @public
-     */
-    OnlyAssociated?: boolean | undefined;
-    /**
-     * <p>The maximum number of items to return in the response. </p>
-     * @public
-     */
-    MaxResults?: number | undefined;
-    /**
-     * <p>The token that is required for pagination. On your first call to the
-     *             <code>ListMembers</code> operation, set the value of this parameter to
-     *          <code>NULL</code>.</p>
-     *          <p>For subsequent calls to the operation, to continue listing data, set the value of this
-     *          parameter to the value returned from the previous response.</p>
-     * @public
-     */
-    NextToken?: string | undefined;
-}
-/**
- * @public
- */
-export interface ListMembersResponse {
-    /**
-     * <p>Member details returned by the operation.</p>
-     * @public
-     */
-    Members?: Member[] | undefined;
-    /**
-     * <p>The pagination token to use to request the next page of results.</p>
-     * @public
-     */
-    NextToken?: string | undefined;
-}
-/**
- * @public
- */
-export interface ListOrganizationAdminAccountsRequest {
-    /**
-     * <p>The maximum number of items to return in the response.</p>
-     * @public
-     */
-    MaxResults?: number | undefined;
-    /**
-     * <p>The token that is required for pagination. On your first call to the
-     *             <code>ListOrganizationAdminAccounts</code> operation, set the value of this parameter to
-     *             <code>NULL</code>. For subsequent calls to the operation, to continue listing data, set
-     *          the value of this parameter to the value returned from the previous response. </p>
-     * @public
-     */
-    NextToken?: string | undefined;
-    /**
-     * <p>The feature where the delegated administrator account is listed.
-     *          Defaults to Security Hub CSPM if not specified.</p>
-     * @public
-     */
-    Feature?: SecurityHubFeature | undefined;
-}
-/**
- * @public
- */
-export interface ListOrganizationAdminAccountsResponse {
-    /**
-     * <p>The list of Security Hub CSPM administrator accounts.</p>
-     * @public
-     */
-    AdminAccounts?: AdminAccount[] | undefined;
-    /**
-     * <p>The pagination token to use to request the next page of results.</p>
-     * @public
-     */
-    NextToken?: string | undefined;
-    /**
-     * <p>The feature where the delegated administrator account is listed.
-     *          Defaults to Security Hub CSPM CSPM if not specified.</p>
-     * @public
-     */
-    Feature?: SecurityHubFeature | undefined;
-}
-/**
- * @public
- */
-export interface ListSecurityControlDefinitionsRequest {
-    /**
-     * <p>
-     *          The Amazon Resource Name (ARN) of the standard that you want to view controls for.
-     *       </p>
-     * @public
-     */
-    StandardsArn?: string | undefined;
-    /**
-     * <p>
-     *          Optional pagination parameter.
-     *       </p>
-     * @public
-     */
-    NextToken?: string | undefined;
-    /**
-     * <p> An optional parameter that limits the total results of the API response to the
-     *          specified number. If this parameter isn't provided in the request, the results include the
-     *          first 25 security controls that apply to the specified standard. The results also include a
-     *             <code>NextToken</code> parameter that you can use in a subsequent API call to get the
-     *          next 25 controls. This repeats until all controls for the standard are returned. </p>
-     * @public
-     */
-    MaxResults?: number | undefined;
-}
-/**
- * @public
- */
-export interface ListSecurityControlDefinitionsResponse {
-    /**
-     * <p>
-     *          An array of controls that apply to the specified standard.
-     *       </p>
-     * @public
-     */
-    SecurityControlDefinitions: SecurityControlDefinition[] | undefined;
-    /**
-     * <p> A pagination parameter that's included in the response only if it was included in the
-     *          request. </p>
-     * @public
-     */
-    NextToken?: string | undefined;
-}
-/**
- * @public
- */
-export interface ListStandardsControlAssociationsRequest {
-    /**
-     * <p>
-     *          The identifier of the control (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) that you
-     *          want to determine the enablement status of in each enabled standard.
-     *       </p>
-     * @public
-     */
-    SecurityControlId: string | undefined;
-    /**
-     * <p>
-     *          Optional pagination parameter.
-     *       </p>
-     * @public
-     */
-    NextToken?: string | undefined;
-    /**
-     * <p> An optional parameter that limits the total results of the API response to the
-     *          specified number. If this parameter isn't provided in the request, the results include the
-     *          first 25 standard and control associations. The results also include a
-     *             <code>NextToken</code> parameter that you can use in a subsequent API call to get the
-     *          next 25 associations. This repeats until all associations for the specified control are
-     *          returned. The number of results is limited by the number of supported Security Hub CSPM
-     *          standards that you've enabled in the calling account. </p>
-     * @public
-     */
-    MaxResults?: number | undefined;
-}

package/dist-types/models/models_3.d.ts

@@ -1,6 +1,172 @@
-import type { AllowedOperators, AssociationStatus, AssociationType, AutoEnableStandards, ConfigurationPolicyAssociationStatus, ControlFindingGenerator, ControlStatus, GroupByField, RecordState, ResourceGroupByField, RuleStatusV2, SortOrder, TargetType } from "./enums";
-import type { AutomationRulesActionV2, NoteUpdate } from "./models_0";
-import type { AwsSecurityFindingFilters, FindingScopes, FindingsTrendsStringFilter, JiraCloudUpdateConfiguration, OcsfBooleanFilter, OcsfDateFilter, OcsfIpFilter, OcsfMapFilter, OcsfNumberFilter, OcsfStringFilter, OrganizationConfiguration, ParameterConfiguration, Policy, ResourceScopes, ResourcesDateFilter, ResourcesMapFilter, ResourcesNumberFilter, ResourcesStringFilter, ResourcesTrendsStringFilter, SortCriterion, Target } from "./models_2";
+import type { AllowedOperators, AssociationStatus, AssociationType, AutoEnableStandards, ConfigurationPolicyAssociationStatus, ControlFindingGenerator, ControlStatus, GroupByField, RecordState, ResourceGroupByField, RuleStatusV2, SecurityHubFeature, SortOrder, TargetType } from "./enums";
+import type { AdminAccount, AutomationRulesActionV2, NoteUpdate } from "./models_0";
+import type { AwsSecurityFindingFilters, FindingScopes, FindingsTrendsStringFilter, JiraCloudUpdateConfiguration, Member, OcsfBooleanFilter, OcsfDateFilter, OcsfIpFilter, OcsfMapFilter, OcsfNumberFilter, OcsfStringFilter, OrganizationConfiguration, ParameterConfiguration, Policy, ResourceScopes, ResourcesDateFilter, ResourcesMapFilter, ResourcesNumberFilter, ResourcesStringFilter, ResourcesTrendsStringFilter, SecurityControlDefinition, SortCriterion, Target } from "./models_2";
+/**
+ * @public
+ */
+export interface ListMembersRequest {
+    /**
+     * <p>Specifies which member accounts to include in the response based on their relationship
+     *          status with the administrator account. The default value is <code>TRUE</code>.</p>
+     *          <p>If <code>OnlyAssociated</code> is set to <code>TRUE</code>, the response includes member
+     *          accounts whose relationship status with the administrator account is set to <code>ENABLED</code>.</p>
+     *          <p>If <code>OnlyAssociated</code> is set to <code>FALSE</code>, the response includes all
+     *          existing member accounts. </p>
+     * @public
+     */
+    OnlyAssociated?: boolean | undefined;
+    /**
+     * <p>The maximum number of items to return in the response. </p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The token that is required for pagination. On your first call to the
+     *             <code>ListMembers</code> operation, set the value of this parameter to
+     *          <code>NULL</code>.</p>
+     *          <p>For subsequent calls to the operation, to continue listing data, set the value of this
+     *          parameter to the value returned from the previous response.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListMembersResponse {
+    /**
+     * <p>Member details returned by the operation.</p>
+     * @public
+     */
+    Members?: Member[] | undefined;
+    /**
+     * <p>The pagination token to use to request the next page of results.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListOrganizationAdminAccountsRequest {
+    /**
+     * <p>The maximum number of items to return in the response.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The token that is required for pagination. On your first call to the
+     *             <code>ListOrganizationAdminAccounts</code> operation, set the value of this parameter to
+     *             <code>NULL</code>. For subsequent calls to the operation, to continue listing data, set
+     *          the value of this parameter to the value returned from the previous response. </p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The feature where the delegated administrator account is listed.
+     *          Defaults to Security Hub CSPM if not specified.</p>
+     * @public
+     */
+    Feature?: SecurityHubFeature | undefined;
+}
+/**
+ * @public
+ */
+export interface ListOrganizationAdminAccountsResponse {
+    /**
+     * <p>The list of Security Hub CSPM administrator accounts.</p>
+     * @public
+     */
+    AdminAccounts?: AdminAccount[] | undefined;
+    /**
+     * <p>The pagination token to use to request the next page of results.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The feature where the delegated administrator account is listed.
+     *          Defaults to Security Hub CSPM CSPM if not specified.</p>
+     * @public
+     */
+    Feature?: SecurityHubFeature | undefined;
+}
+/**
+ * @public
+ */
+export interface ListSecurityControlDefinitionsRequest {
+    /**
+     * <p>
+     *          The Amazon Resource Name (ARN) of the standard that you want to view controls for.
+     *       </p>
+     * @public
+     */
+    StandardsArn?: string | undefined;
+    /**
+     * <p>
+     *          Optional pagination parameter.
+     *       </p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p> An optional parameter that limits the total results of the API response to the
+     *          specified number. If this parameter isn't provided in the request, the results include the
+     *          first 25 security controls that apply to the specified standard. The results also include a
+     *             <code>NextToken</code> parameter that you can use in a subsequent API call to get the
+     *          next 25 controls. This repeats until all controls for the standard are returned. </p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+}
+/**
+ * @public
+ */
+export interface ListSecurityControlDefinitionsResponse {
+    /**
+     * <p>
+     *          An array of controls that apply to the specified standard.
+     *       </p>
+     * @public
+     */
+    SecurityControlDefinitions: SecurityControlDefinition[] | undefined;
+    /**
+     * <p> A pagination parameter that's included in the response only if it was included in the
+     *          request. </p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListStandardsControlAssociationsRequest {
+    /**
+     * <p>
+     *          The identifier of the control (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters) that you
+     *          want to determine the enablement status of in each enabled standard.
+     *       </p>
+     * @public
+     */
+    SecurityControlId: string | undefined;
+    /**
+     * <p>
+     *          Optional pagination parameter.
+     *       </p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p> An optional parameter that limits the total results of the API response to the
+     *          specified number. If this parameter isn't provided in the request, the results include the
+     *          first 25 standard and control associations. The results also include a
+     *             <code>NextToken</code> parameter that you can use in a subsequent API call to get the
+     *          next 25 associations. This repeats until all associations for the specified control are
+     *          returned. The number of results is limited by the number of supported Security Hub CSPM
+     *          standards that you've enabled in the calling account. </p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+}
 /**
  * <p> An array that provides the enablement status and other details for each control that
  *          applies to each enabled standard. </p>

package/dist-types/pagination/GetRecommendedPolicyV2Paginator.d.ts

@@ -0,0 +1,7 @@
+import type { Paginator } from "@smithy/types";
+import { GetRecommendedPolicyV2CommandInput, GetRecommendedPolicyV2CommandOutput } from "../commands/GetRecommendedPolicyV2Command";
+import type { SecurityHubPaginationConfiguration } from "./Interfaces";
+/**
+ * @public
+ */
+export declare const paginateGetRecommendedPolicyV2: (config: SecurityHubPaginationConfiguration, input: GetRecommendedPolicyV2CommandInput, ...rest: any[]) => Paginator<GetRecommendedPolicyV2CommandOutput>;

package/dist-types/pagination/index.d.ts

@@ -10,6 +10,7 @@ export * from "./GetFindingsPaginator";
 export * from "./GetFindingsTrendsV2Paginator";
 export * from "./GetFindingsV2Paginator";
 export * from "./GetInsightsPaginator";
+export * from "./GetRecommendedPolicyV2Paginator";
 export * from "./GetResourcesTrendsV2Paginator";
 export * from "./GetResourcesV2Paginator";
 export * from "./ListAggregatorsV2Paginator";

package/dist-types/schemas/schemas_0.d.ts

@@ -700,6 +700,8 @@ export declare var FirewallPolicyDetails$: StaticStructureSchema;
 export declare var FirewallPolicyStatefulRuleGroupReferencesDetails$: StaticStructureSchema;
 export declare var FirewallPolicyStatelessCustomActionsDetails$: StaticStructureSchema;
 export declare var FirewallPolicyStatelessRuleGroupReferencesDetails$: StaticStructureSchema;
+export declare var GenerateRecommendedPolicyV2Request$: StaticStructureSchema;
+export declare var GenerateRecommendedPolicyV2Response$: StaticStructureSchema;
 export declare var GeneratorDetails$: StaticStructureSchema;
 export declare var GeoLocation$: StaticStructureSchema;
 export declare var GetAdministratorAccountRequest$: StaticStructureSchema;
@@ -738,6 +740,8 @@ export declare var GetMasterAccountRequest$: StaticStructureSchema;
 export declare var GetMasterAccountResponse$: StaticStructureSchema;
 export declare var GetMembersRequest$: StaticStructureSchema;
 export declare var GetMembersResponse$: StaticStructureSchema;
+export declare var GetRecommendedPolicyV2Request$: StaticStructureSchema;
+export declare var GetRecommendedPolicyV2Response$: StaticStructureSchema;
 export declare var GetResourcesStatisticsV2Request$: StaticStructureSchema;
 export declare var GetResourcesStatisticsV2Response$: StaticStructureSchema;
 export declare var GetResourcesTrendsV2Request$: StaticStructureSchema;
@@ -837,6 +841,7 @@ export declare var PropagatingVgwSetDetails$: StaticStructureSchema;
 export declare var ProviderSummary$: StaticStructureSchema;
 export declare var Range$: StaticStructureSchema;
 export declare var Recommendation$: StaticStructureSchema;
+export declare var RecommendationError$: StaticStructureSchema;
 export declare var _Record$: StaticStructureSchema;
 export declare var RegisterConnectorV2Request$: StaticStructureSchema;
 export declare var RegisterConnectorV2Response$: StaticStructureSchema;
@@ -935,6 +940,7 @@ export declare var UnprocessedStandardsControlAssociation$: StaticStructureSchem
 export declare var UnprocessedStandardsControlAssociationUpdate$: StaticStructureSchema;
 export declare var UntagResourceRequest$: StaticStructureSchema;
 export declare var UntagResourceResponse$: StaticStructureSchema;
+export declare var UnusedPermissionsRecommendationStep$: StaticStructureSchema;
 export declare var UpdateActionTargetRequest$: StaticStructureSchema;
 export declare var UpdateActionTargetResponse$: StaticStructureSchema;
 export declare var UpdateAggregatorV2Request$: StaticStructureSchema;
@@ -980,6 +986,7 @@ export declare var Policy$: StaticUnionSchema;
 export declare var ProviderConfiguration$: StaticUnionSchema;
 export declare var ProviderDetail$: StaticUnionSchema;
 export declare var ProviderUpdateConfiguration$: StaticUnionSchema;
+export declare var RecommendationStep$: StaticUnionSchema;
 export declare var Target$: StaticUnionSchema;
 export declare var AcceptAdministratorInvitation$: StaticOperationSchema;
 export declare var AcceptInvitation$: StaticOperationSchema;
@@ -1034,6 +1041,7 @@ export declare var EnableImportFindingsForProduct$: StaticOperationSchema;
 export declare var EnableOrganizationAdminAccount$: StaticOperationSchema;
 export declare var EnableSecurityHub$: StaticOperationSchema;
 export declare var EnableSecurityHubV2$: StaticOperationSchema;
+export declare var GenerateRecommendedPolicyV2$: StaticOperationSchema;
 export declare var GetAdministratorAccount$: StaticOperationSchema;
 export declare var GetAggregatorV2$: StaticOperationSchema;
 export declare var GetAutomationRuleV2$: StaticOperationSchema;
@@ -1052,6 +1060,7 @@ export declare var GetInsights$: StaticOperationSchema;
 export declare var GetInvitationsCount$: StaticOperationSchema;
 export declare var GetMasterAccount$: StaticOperationSchema;
 export declare var GetMembers$: StaticOperationSchema;
+export declare var GetRecommendedPolicyV2$: StaticOperationSchema;
 export declare var GetResourcesStatisticsV2$: StaticOperationSchema;
 export declare var GetResourcesTrendsV2$: StaticOperationSchema;
 export declare var GetResourcesV2$: StaticOperationSchema;

package/dist-types/ts3.4/SecurityHub.d.ts

@@ -215,6 +215,10 @@ import {
   EnableSecurityHubV2CommandInput,
   EnableSecurityHubV2CommandOutput,
 } from "./commands/EnableSecurityHubV2Command";
+import {
+  GenerateRecommendedPolicyV2CommandInput,
+  GenerateRecommendedPolicyV2CommandOutput,
+} from "./commands/GenerateRecommendedPolicyV2Command";
 import {
   GetAdministratorAccountCommandInput,
   GetAdministratorAccountCommandOutput,
@@ -287,6 +291,10 @@ import {
   GetMembersCommandInput,
   GetMembersCommandOutput,
 } from "./commands/GetMembersCommand";
+import {
+  GetRecommendedPolicyV2CommandInput,
+  GetRecommendedPolicyV2CommandOutput,
+} from "./commands/GetRecommendedPolicyV2Command";
 import {
   GetResourcesStatisticsV2CommandInput,
   GetResourcesStatisticsV2CommandOutput,
@@ -1166,6 +1174,19 @@ export interface SecurityHub {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: EnableSecurityHubV2CommandOutput) => void
   ): void;
+  generateRecommendedPolicyV2(
+    args: GenerateRecommendedPolicyV2CommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<GenerateRecommendedPolicyV2CommandOutput>;
+  generateRecommendedPolicyV2(
+    args: GenerateRecommendedPolicyV2CommandInput,
+    cb: (err: any, data?: GenerateRecommendedPolicyV2CommandOutput) => void
+  ): void;
+  generateRecommendedPolicyV2(
+    args: GenerateRecommendedPolicyV2CommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GenerateRecommendedPolicyV2CommandOutput) => void
+  ): void;
   getAdministratorAccount(): Promise<GetAdministratorAccountCommandOutput>;
   getAdministratorAccount(
     args: GetAdministratorAccountCommandInput,
@@ -1413,6 +1434,19 @@ export interface SecurityHub {
     options: __HttpHandlerOptions,
     cb: (err: any, data?: GetMembersCommandOutput) => void
   ): void;
+  getRecommendedPolicyV2(
+    args: GetRecommendedPolicyV2CommandInput,
+    options?: __HttpHandlerOptions
+  ): Promise<GetRecommendedPolicyV2CommandOutput>;
+  getRecommendedPolicyV2(
+    args: GetRecommendedPolicyV2CommandInput,
+    cb: (err: any, data?: GetRecommendedPolicyV2CommandOutput) => void
+  ): void;
+  getRecommendedPolicyV2(
+    args: GetRecommendedPolicyV2CommandInput,
+    options: __HttpHandlerOptions,
+    cb: (err: any, data?: GetRecommendedPolicyV2CommandOutput) => void
+  ): void;
   getResourcesStatisticsV2(
     args: GetResourcesStatisticsV2CommandInput,
     options?: __HttpHandlerOptions
@@ -1990,6 +2024,13 @@ export interface SecurityHub {
       Exclude<keyof PaginationConfiguration, "client">
     >
   ): Paginator<GetInsightsCommandOutput>;
+  paginateGetRecommendedPolicyV2(
+    args: GetRecommendedPolicyV2CommandInput,
+    paginationConfig?: Pick<
+      PaginationConfiguration,
+      Exclude<keyof PaginationConfiguration, "client">
+    >
+  ): Paginator<GetRecommendedPolicyV2CommandOutput>;
   paginateGetResourcesTrendsV2(
     args: GetResourcesTrendsV2CommandInput,
     paginationConfig?: Pick<