@aws-sdk/client-securityhub 3.28.0 → 3.32.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +35 -0
- package/dist/cjs/models/models_0.js +209 -209
- package/dist/cjs/models/models_0.js.map +1 -1
- package/dist/cjs/models/models_1.js +207 -4
- package/dist/cjs/models/models_1.js.map +1 -1
- package/dist/cjs/package.json +31 -31
- package/dist/cjs/protocols/Aws_restJson1.js +1022 -219
- package/dist/cjs/protocols/Aws_restJson1.js.map +1 -1
- package/dist/es/endpoints.js +1 -2
- package/dist/es/endpoints.js.map +1 -1
- package/dist/es/models/models_0.js +159 -159
- package/dist/es/models/models_0.js.map +1 -1
- package/dist/es/models/models_1.js +159 -0
- package/dist/es/models/models_1.js.map +1 -1
- package/dist/es/package.json +31 -31
- package/dist/es/protocols/Aws_restJson1.js +1061 -326
- package/dist/es/protocols/Aws_restJson1.js.map +1 -1
- package/dist/types/models/models_0.d.ts +882 -763
- package/dist/types/models/models_1.d.ts +653 -16
- package/dist/types/ts3.4/models/models_0.d.ts +882 -763
- package/dist/types/ts3.4/models/models_1.d.ts +653 -16
- package/models/models_0.ts +991 -852
- package/models/models_1.ts +817 -24
- package/package.json +31 -31
- package/protocols/Aws_restJson1.ts +1418 -276
|
@@ -1,12 +1,623 @@
|
|
|
1
|
-
import { AccountDetails, Action, ActionTarget, AdminAccount, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAutoScalingAutoScalingGroupDetails, AwsCertificateManagerCertificateDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCodeBuildProjectDetails, AwsDynamoDbTableDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEcsClusterDetails, AwsEcsServiceDetails, AwsEcsTaskDefinitionDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsIamAccessKeyDetails, AwsIamGroupDetails, AwsIamPolicyDetails, AwsIamRoleDetails, AwsIamUserDetails, AwsKmsKeyDetails, AwsLambdaFunctionDetails, AwsLambdaLayerVersionDetails, AwsRdsDbClusterDetails, AwsRdsDbClusterSnapshotDetails, AwsRdsDbInstanceDetails, AwsRdsDbSnapshotDetails, AwsRdsEventSubscriptionDetails, AwsRedshiftClusterDetails, AwsS3AccountPublicAccessBlockDetails, AwsS3BucketDetails, AwsS3ObjectDetails, AwsSecretsManagerSecretDetails,
|
|
1
|
+
import { AccountDetails, Action, ActionTarget, Adjustment, AdminAccount, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsCertificateManagerCertificateDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCodeBuildProjectDetails, AwsDynamoDbTableDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcsClusterDetails, AwsEcsServiceDetails, AwsEcsTaskDefinitionDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsIamAccessKeyDetails, AwsIamGroupDetails, AwsIamPolicyDetails, AwsIamRoleDetails, AwsIamUserDetails, AwsKmsKeyDetails, AwsLambdaFunctionDetails, AwsLambdaLayerVersionDetails, AwsRdsDbClusterDetails, AwsRdsDbClusterSnapshotDetails, AwsRdsDbInstanceDetails, AwsRdsDbSnapshotDetails, AwsRdsEventSubscriptionDetails, AwsRedshiftClusterDetails, AwsS3AccountPublicAccessBlockDetails, AwsS3BucketDetails, AwsS3ObjectDetails, AwsSecretsManagerSecretDetails, Compliance, FindingProviderFields, Malware, NetworkDirection, PortRange, RelatedFinding, SeverityLabel } from "./models_0";
|
|
2
2
|
import { MetadataBearer as $MetadataBearer, SmithyException as __SmithyException } from "@aws-sdk/types";
|
|
3
|
+
/**
|
|
4
|
+
* <p>The details of network-related information about a finding.</p>
|
|
5
|
+
*/
|
|
6
|
+
export interface Network {
|
|
7
|
+
/**
|
|
8
|
+
* <p>The direction of network traffic associated with a finding.</p>
|
|
9
|
+
*/
|
|
10
|
+
Direction?: NetworkDirection | string;
|
|
11
|
+
/**
|
|
12
|
+
* <p>The protocol of network-related information about a finding.</p>
|
|
13
|
+
*/
|
|
14
|
+
Protocol?: string;
|
|
15
|
+
/**
|
|
16
|
+
* <p>The range of open ports that is present on the network.</p>
|
|
17
|
+
*/
|
|
18
|
+
OpenPortRange?: PortRange;
|
|
19
|
+
/**
|
|
20
|
+
* <p>The source IPv4 address of network-related information about a finding.</p>
|
|
21
|
+
*/
|
|
22
|
+
SourceIpV4?: string;
|
|
23
|
+
/**
|
|
24
|
+
* <p>The source IPv6 address of network-related information about a finding.</p>
|
|
25
|
+
*/
|
|
26
|
+
SourceIpV6?: string;
|
|
27
|
+
/**
|
|
28
|
+
* <p>The source port of network-related information about a finding.</p>
|
|
29
|
+
*/
|
|
30
|
+
SourcePort?: number;
|
|
31
|
+
/**
|
|
32
|
+
* <p>The source domain of network-related information about a finding.</p>
|
|
33
|
+
*/
|
|
34
|
+
SourceDomain?: string;
|
|
35
|
+
/**
|
|
36
|
+
* <p>The source media access control (MAC) address of network-related information about a
|
|
37
|
+
* finding.</p>
|
|
38
|
+
*/
|
|
39
|
+
SourceMac?: string;
|
|
40
|
+
/**
|
|
41
|
+
* <p>The destination IPv4 address of network-related information about a finding.</p>
|
|
42
|
+
*/
|
|
43
|
+
DestinationIpV4?: string;
|
|
44
|
+
/**
|
|
45
|
+
* <p>The destination IPv6 address of network-related information about a finding.</p>
|
|
46
|
+
*/
|
|
47
|
+
DestinationIpV6?: string;
|
|
48
|
+
/**
|
|
49
|
+
* <p>The destination port of network-related information about a finding.</p>
|
|
50
|
+
*/
|
|
51
|
+
DestinationPort?: number;
|
|
52
|
+
/**
|
|
53
|
+
* <p>The destination domain of network-related information about a finding.</p>
|
|
54
|
+
*/
|
|
55
|
+
DestinationDomain?: string;
|
|
56
|
+
}
|
|
57
|
+
export declare namespace Network {
|
|
58
|
+
/**
|
|
59
|
+
* @internal
|
|
60
|
+
*/
|
|
61
|
+
const filterSensitiveLog: (obj: Network) => any;
|
|
62
|
+
}
|
|
63
|
+
/**
|
|
64
|
+
* <p>Information about the destination of the next component in the network path.</p>
|
|
65
|
+
*/
|
|
66
|
+
export interface NetworkPathComponentDetails {
|
|
67
|
+
/**
|
|
68
|
+
* <p>The IP addresses of the destination.</p>
|
|
69
|
+
*/
|
|
70
|
+
Address?: string[];
|
|
71
|
+
/**
|
|
72
|
+
* <p>A list of port ranges for the destination.</p>
|
|
73
|
+
*/
|
|
74
|
+
PortRanges?: PortRange[];
|
|
75
|
+
}
|
|
76
|
+
export declare namespace NetworkPathComponentDetails {
|
|
77
|
+
/**
|
|
78
|
+
* @internal
|
|
79
|
+
*/
|
|
80
|
+
const filterSensitiveLog: (obj: NetworkPathComponentDetails) => any;
|
|
81
|
+
}
|
|
82
|
+
/**
|
|
83
|
+
* <p>Details about a network path component that occurs before or after the current
|
|
84
|
+
* component.</p>
|
|
85
|
+
*/
|
|
86
|
+
export interface NetworkHeader {
|
|
87
|
+
/**
|
|
88
|
+
* <p>The protocol used for the component.</p>
|
|
89
|
+
*/
|
|
90
|
+
Protocol?: string;
|
|
91
|
+
/**
|
|
92
|
+
* <p>Information about the destination of the component.</p>
|
|
93
|
+
*/
|
|
94
|
+
Destination?: NetworkPathComponentDetails;
|
|
95
|
+
/**
|
|
96
|
+
* <p>Information about the origin of the component.</p>
|
|
97
|
+
*/
|
|
98
|
+
Source?: NetworkPathComponentDetails;
|
|
99
|
+
}
|
|
100
|
+
export declare namespace NetworkHeader {
|
|
101
|
+
/**
|
|
102
|
+
* @internal
|
|
103
|
+
*/
|
|
104
|
+
const filterSensitiveLog: (obj: NetworkHeader) => any;
|
|
105
|
+
}
|
|
106
|
+
/**
|
|
107
|
+
* <p>Information about a network path component.</p>
|
|
108
|
+
*/
|
|
109
|
+
export interface NetworkPathComponent {
|
|
110
|
+
/**
|
|
111
|
+
* <p>The identifier of a component in the network path.</p>
|
|
112
|
+
*/
|
|
113
|
+
ComponentId?: string;
|
|
114
|
+
/**
|
|
115
|
+
* <p>The type of component.</p>
|
|
116
|
+
*/
|
|
117
|
+
ComponentType?: string;
|
|
118
|
+
/**
|
|
119
|
+
* <p>Information about the component that comes after the current component in the network
|
|
120
|
+
* path.</p>
|
|
121
|
+
*/
|
|
122
|
+
Egress?: NetworkHeader;
|
|
123
|
+
/**
|
|
124
|
+
* <p>Information about the component that comes before the current node in the network
|
|
125
|
+
* path.</p>
|
|
126
|
+
*/
|
|
127
|
+
Ingress?: NetworkHeader;
|
|
128
|
+
}
|
|
129
|
+
export declare namespace NetworkPathComponent {
|
|
130
|
+
/**
|
|
131
|
+
* @internal
|
|
132
|
+
*/
|
|
133
|
+
const filterSensitiveLog: (obj: NetworkPathComponent) => any;
|
|
134
|
+
}
|
|
135
|
+
/**
|
|
136
|
+
* <p>A user-defined note added to a finding.</p>
|
|
137
|
+
*/
|
|
138
|
+
export interface Note {
|
|
139
|
+
/**
|
|
140
|
+
* <p>The text of a note.</p>
|
|
141
|
+
*/
|
|
142
|
+
Text: string | undefined;
|
|
143
|
+
/**
|
|
144
|
+
* <p>The principal that created a note.</p>
|
|
145
|
+
*/
|
|
146
|
+
UpdatedBy: string | undefined;
|
|
147
|
+
/**
|
|
148
|
+
* <p>The timestamp of when the note was updated.</p>
|
|
149
|
+
* <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
|
|
150
|
+
* Date/Time Format</a>. The value cannot contain spaces. For example,
|
|
151
|
+
* <code>2020-03-22T13:22:13.933Z</code>.</p>
|
|
152
|
+
*/
|
|
153
|
+
UpdatedAt: string | undefined;
|
|
154
|
+
}
|
|
155
|
+
export declare namespace Note {
|
|
156
|
+
/**
|
|
157
|
+
* @internal
|
|
158
|
+
*/
|
|
159
|
+
const filterSensitiveLog: (obj: Note) => any;
|
|
160
|
+
}
|
|
161
|
+
/**
|
|
162
|
+
* <p>Provides an overview of the patch compliance status for an instance against a selected
|
|
163
|
+
* compliance standard.</p>
|
|
164
|
+
*/
|
|
165
|
+
export interface PatchSummary {
|
|
166
|
+
/**
|
|
167
|
+
* <p>The identifier of the compliance standard that was used to determine the patch
|
|
168
|
+
* compliance status.</p>
|
|
169
|
+
*/
|
|
170
|
+
Id: string | undefined;
|
|
171
|
+
/**
|
|
172
|
+
* <p>The number of patches from the compliance standard that were installed
|
|
173
|
+
* successfully.</p>
|
|
174
|
+
*/
|
|
175
|
+
InstalledCount?: number;
|
|
176
|
+
/**
|
|
177
|
+
* <p>The number of patches that are part of the compliance standard but are not installed.
|
|
178
|
+
* The count includes patches that failed to install.</p>
|
|
179
|
+
*/
|
|
180
|
+
MissingCount?: number;
|
|
181
|
+
/**
|
|
182
|
+
* <p>The number of patches from the compliance standard that failed to install.</p>
|
|
183
|
+
*/
|
|
184
|
+
FailedCount?: number;
|
|
185
|
+
/**
|
|
186
|
+
* <p>The number of installed patches that are not part of the compliance standard.</p>
|
|
187
|
+
*/
|
|
188
|
+
InstalledOtherCount?: number;
|
|
189
|
+
/**
|
|
190
|
+
* <p>The number of patches that are installed but are also on a list of patches that the
|
|
191
|
+
* customer rejected.</p>
|
|
192
|
+
*/
|
|
193
|
+
InstalledRejectedCount?: number;
|
|
194
|
+
/**
|
|
195
|
+
* <p>The number of patches that were applied, but that require the instance to be rebooted in
|
|
196
|
+
* order to be marked as installed.</p>
|
|
197
|
+
*/
|
|
198
|
+
InstalledPendingReboot?: number;
|
|
199
|
+
/**
|
|
200
|
+
* <p>Indicates when the operation started.</p>
|
|
201
|
+
* <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
|
|
202
|
+
* Date/Time Format</a>. The value cannot contain spaces. For example,
|
|
203
|
+
* <code>2020-03-22T13:22:13.933Z</code>.</p>
|
|
204
|
+
*/
|
|
205
|
+
OperationStartTime?: string;
|
|
206
|
+
/**
|
|
207
|
+
* <p>Indicates when the operation completed.</p>
|
|
208
|
+
* <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
|
|
209
|
+
* Date/Time Format</a>. The value cannot contain spaces. For example,
|
|
210
|
+
* <code>2020-03-22T13:22:13.933Z</code>.</p>
|
|
211
|
+
*/
|
|
212
|
+
OperationEndTime?: string;
|
|
213
|
+
/**
|
|
214
|
+
* <p>The reboot option specified for the instance.</p>
|
|
215
|
+
*/
|
|
216
|
+
RebootOption?: string;
|
|
217
|
+
/**
|
|
218
|
+
* <p>The type of patch operation performed. For Patch Manager, the values are
|
|
219
|
+
* <code>SCAN</code> and <code>INSTALL</code>. </p>
|
|
220
|
+
*/
|
|
221
|
+
Operation?: string;
|
|
222
|
+
}
|
|
223
|
+
export declare namespace PatchSummary {
|
|
224
|
+
/**
|
|
225
|
+
* @internal
|
|
226
|
+
*/
|
|
227
|
+
const filterSensitiveLog: (obj: PatchSummary) => any;
|
|
228
|
+
}
|
|
229
|
+
/**
|
|
230
|
+
* <p>The details of process-related information about a finding.</p>
|
|
231
|
+
*/
|
|
232
|
+
export interface ProcessDetails {
|
|
233
|
+
/**
|
|
234
|
+
* <p>The name of the process.</p>
|
|
235
|
+
*/
|
|
236
|
+
Name?: string;
|
|
237
|
+
/**
|
|
238
|
+
* <p>The path to the process executable.</p>
|
|
239
|
+
*/
|
|
240
|
+
Path?: string;
|
|
241
|
+
/**
|
|
242
|
+
* <p>The process ID.</p>
|
|
243
|
+
*/
|
|
244
|
+
Pid?: number;
|
|
245
|
+
/**
|
|
246
|
+
* <p>The parent process ID.</p>
|
|
247
|
+
*/
|
|
248
|
+
ParentPid?: number;
|
|
249
|
+
/**
|
|
250
|
+
* <p>Indicates when the process was launched.</p>
|
|
251
|
+
* <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
|
|
252
|
+
* Date/Time Format</a>. The value cannot contain spaces. For example,
|
|
253
|
+
* <code>2020-03-22T13:22:13.933Z</code>.</p>
|
|
254
|
+
*/
|
|
255
|
+
LaunchedAt?: string;
|
|
256
|
+
/**
|
|
257
|
+
* <p>Indicates when the process was terminated.</p>
|
|
258
|
+
* <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
|
|
259
|
+
* Date/Time Format</a>. The value cannot contain spaces. For example,
|
|
260
|
+
* <code>2020-03-22T13:22:13.933Z</code>.</p>
|
|
261
|
+
*/
|
|
262
|
+
TerminatedAt?: string;
|
|
263
|
+
}
|
|
264
|
+
export declare namespace ProcessDetails {
|
|
265
|
+
/**
|
|
266
|
+
* @internal
|
|
267
|
+
*/
|
|
268
|
+
const filterSensitiveLog: (obj: ProcessDetails) => any;
|
|
269
|
+
}
|
|
270
|
+
export declare enum RecordState {
|
|
271
|
+
ACTIVE = "ACTIVE",
|
|
272
|
+
ARCHIVED = "ARCHIVED"
|
|
273
|
+
}
|
|
274
|
+
/**
|
|
275
|
+
* <p>A recommendation on how to remediate the issue identified in a finding.</p>
|
|
276
|
+
*/
|
|
277
|
+
export interface Recommendation {
|
|
278
|
+
/**
|
|
279
|
+
* <p>Describes the recommended steps to take to remediate an issue identified in a finding.</p>
|
|
280
|
+
*/
|
|
281
|
+
Text?: string;
|
|
282
|
+
/**
|
|
283
|
+
* <p>A URL to a page or site that contains information about how to remediate a finding.</p>
|
|
284
|
+
*/
|
|
285
|
+
Url?: string;
|
|
286
|
+
}
|
|
287
|
+
export declare namespace Recommendation {
|
|
288
|
+
/**
|
|
289
|
+
* @internal
|
|
290
|
+
*/
|
|
291
|
+
const filterSensitiveLog: (obj: Recommendation) => any;
|
|
292
|
+
}
|
|
293
|
+
/**
|
|
294
|
+
* <p>Details about the remediation steps for a finding.</p>
|
|
295
|
+
*/
|
|
296
|
+
export interface Remediation {
|
|
297
|
+
/**
|
|
298
|
+
* <p>A recommendation on the steps to take to remediate the issue identified by a finding.</p>
|
|
299
|
+
*/
|
|
300
|
+
Recommendation?: Recommendation;
|
|
301
|
+
}
|
|
302
|
+
export declare namespace Remediation {
|
|
303
|
+
/**
|
|
304
|
+
* @internal
|
|
305
|
+
*/
|
|
306
|
+
const filterSensitiveLog: (obj: Remediation) => any;
|
|
307
|
+
}
|
|
308
|
+
/**
|
|
309
|
+
* <p>An occurrence of sensitive data detected in a Microsoft Excel workbook, comma-separated value (CSV) file, or tab-separated value (TSV) file.</p>
|
|
310
|
+
*/
|
|
311
|
+
export interface Cell {
|
|
312
|
+
/**
|
|
313
|
+
* <p>The column number of the column that contains the data. For a Microsoft Excel workbook, the column number corresponds to the alphabetical column identifiers. For example, a value of 1 for Column corresponds to the A column in the workbook.</p>
|
|
314
|
+
*/
|
|
315
|
+
Column?: number;
|
|
316
|
+
/**
|
|
317
|
+
* <p>The row number of the row that contains the data.</p>
|
|
318
|
+
*/
|
|
319
|
+
Row?: number;
|
|
320
|
+
/**
|
|
321
|
+
* <p>The name of the column that contains the data.</p>
|
|
322
|
+
*/
|
|
323
|
+
ColumnName?: string;
|
|
324
|
+
/**
|
|
325
|
+
* <p>For a Microsoft Excel workbook, provides the location of the cell, as an absolute cell reference, that contains the data. For example, Sheet2!C5 for cell C5 on Sheet2.</p>
|
|
326
|
+
*/
|
|
327
|
+
CellReference?: string;
|
|
328
|
+
}
|
|
329
|
+
export declare namespace Cell {
|
|
330
|
+
/**
|
|
331
|
+
* @internal
|
|
332
|
+
*/
|
|
333
|
+
const filterSensitiveLog: (obj: Cell) => any;
|
|
334
|
+
}
|
|
335
|
+
/**
|
|
336
|
+
* <p>Identifies where the sensitive data begins and ends.</p>
|
|
337
|
+
*/
|
|
338
|
+
export interface Range {
|
|
339
|
+
/**
|
|
340
|
+
* <p>The number of lines (for a line range) or characters (for an offset range) from the beginning of the file to the end of the sensitive data.</p>
|
|
341
|
+
*/
|
|
342
|
+
Start?: number;
|
|
343
|
+
/**
|
|
344
|
+
* <p>The number of lines (for a line range) or characters (for an offset range) from the beginning of the file to the end of the sensitive data.</p>
|
|
345
|
+
*/
|
|
346
|
+
End?: number;
|
|
347
|
+
/**
|
|
348
|
+
* <p>In the line where the sensitive data starts, the column within the line where the sensitive data starts.</p>
|
|
349
|
+
*/
|
|
350
|
+
StartColumn?: number;
|
|
351
|
+
}
|
|
352
|
+
export declare namespace Range {
|
|
353
|
+
/**
|
|
354
|
+
* @internal
|
|
355
|
+
*/
|
|
356
|
+
const filterSensitiveLog: (obj: Range) => any;
|
|
357
|
+
}
|
|
358
|
+
/**
|
|
359
|
+
* <p>An occurrence of sensitive data in an Adobe Portable Document Format (PDF) file.</p>
|
|
360
|
+
*/
|
|
361
|
+
export interface Page {
|
|
362
|
+
/**
|
|
363
|
+
* <p>The page number of the page that contains the sensitive data.</p>
|
|
364
|
+
*/
|
|
365
|
+
PageNumber?: number;
|
|
366
|
+
/**
|
|
367
|
+
* <p>An occurrence of sensitive data detected in a non-binary text file or a Microsoft Word file. Non-binary text files include files such as HTML, XML, JSON, and TXT files.</p>
|
|
368
|
+
*/
|
|
369
|
+
LineRange?: Range;
|
|
370
|
+
/**
|
|
371
|
+
* <p>An occurrence of sensitive data detected in a binary text file.</p>
|
|
372
|
+
*/
|
|
373
|
+
OffsetRange?: Range;
|
|
374
|
+
}
|
|
375
|
+
export declare namespace Page {
|
|
376
|
+
/**
|
|
377
|
+
* @internal
|
|
378
|
+
*/
|
|
379
|
+
const filterSensitiveLog: (obj: Page) => any;
|
|
380
|
+
}
|
|
381
|
+
/**
|
|
382
|
+
* <p>An occurrence of sensitive data in an Apache Avro object container or an Apache Parquet file.</p>
|
|
383
|
+
*/
|
|
384
|
+
export interface _Record {
|
|
385
|
+
/**
|
|
386
|
+
* <p>The path, as a JSONPath expression, to the field in the record that contains the data. If the field name is longer than 20 characters, it is truncated. If the path is longer than 250 characters, it is truncated.</p>
|
|
387
|
+
*/
|
|
388
|
+
JsonPath?: string;
|
|
389
|
+
/**
|
|
390
|
+
* <p>The record index, starting from 0, for the record that contains the data.</p>
|
|
391
|
+
*/
|
|
392
|
+
RecordIndex?: number;
|
|
393
|
+
}
|
|
394
|
+
export declare namespace _Record {
|
|
395
|
+
/**
|
|
396
|
+
* @internal
|
|
397
|
+
*/
|
|
398
|
+
const filterSensitiveLog: (obj: _Record) => any;
|
|
399
|
+
}
|
|
400
|
+
/**
|
|
401
|
+
* <p>The detected occurrences of sensitive data.</p>
|
|
402
|
+
*/
|
|
403
|
+
export interface Occurrences {
|
|
404
|
+
/**
|
|
405
|
+
* <p>Occurrences of sensitive data detected in a non-binary text file or a Microsoft Word file. Non-binary text files include files such as HTML, XML, JSON, and TXT files.</p>
|
|
406
|
+
*/
|
|
407
|
+
LineRanges?: Range[];
|
|
408
|
+
/**
|
|
409
|
+
* <p>Occurrences of sensitive data detected in a binary text file.</p>
|
|
410
|
+
*/
|
|
411
|
+
OffsetRanges?: Range[];
|
|
412
|
+
/**
|
|
413
|
+
* <p>Occurrences of sensitive data in an Adobe Portable Document Format (PDF) file.</p>
|
|
414
|
+
*/
|
|
415
|
+
Pages?: Page[];
|
|
416
|
+
/**
|
|
417
|
+
* <p>Occurrences of sensitive data in an Apache Avro object container or an Apache Parquet file.</p>
|
|
418
|
+
*/
|
|
419
|
+
Records?: _Record[];
|
|
420
|
+
/**
|
|
421
|
+
* <p>Occurrences of sensitive data detected in Microsoft Excel workbooks, comma-separated value (CSV) files, or tab-separated value (TSV) files.</p>
|
|
422
|
+
*/
|
|
423
|
+
Cells?: Cell[];
|
|
424
|
+
}
|
|
425
|
+
export declare namespace Occurrences {
|
|
426
|
+
/**
|
|
427
|
+
* @internal
|
|
428
|
+
*/
|
|
429
|
+
const filterSensitiveLog: (obj: Occurrences) => any;
|
|
430
|
+
}
|
|
431
|
+
/**
|
|
432
|
+
* <p>The list of detected instances of sensitive data.</p>
|
|
433
|
+
*/
|
|
434
|
+
export interface CustomDataIdentifiersDetections {
|
|
435
|
+
/**
|
|
436
|
+
* <p>The total number of occurrences of sensitive data that were detected.</p>
|
|
437
|
+
*/
|
|
438
|
+
Count?: number;
|
|
439
|
+
/**
|
|
440
|
+
* <p>The ARN of the custom identifier that was used to detect the sensitive data.</p>
|
|
441
|
+
*/
|
|
442
|
+
Arn?: string;
|
|
443
|
+
/**
|
|
444
|
+
* <p>he name of the custom identifier that detected the sensitive data.</p>
|
|
445
|
+
*/
|
|
446
|
+
Name?: string;
|
|
447
|
+
/**
|
|
448
|
+
* <p>Details about the sensitive data that was detected.</p>
|
|
449
|
+
*/
|
|
450
|
+
Occurrences?: Occurrences;
|
|
451
|
+
}
|
|
452
|
+
export declare namespace CustomDataIdentifiersDetections {
|
|
453
|
+
/**
|
|
454
|
+
* @internal
|
|
455
|
+
*/
|
|
456
|
+
const filterSensitiveLog: (obj: CustomDataIdentifiersDetections) => any;
|
|
457
|
+
}
|
|
458
|
+
/**
|
|
459
|
+
* <p>Contains an instance of sensitive data that was detected by a customer-defined identifier.</p>
|
|
460
|
+
*/
|
|
461
|
+
export interface CustomDataIdentifiersResult {
|
|
462
|
+
/**
|
|
463
|
+
* <p>The list of detected instances of sensitive data.</p>
|
|
464
|
+
*/
|
|
465
|
+
Detections?: CustomDataIdentifiersDetections[];
|
|
466
|
+
/**
|
|
467
|
+
* <p>The total number of occurrences of sensitive data.</p>
|
|
468
|
+
*/
|
|
469
|
+
TotalCount?: number;
|
|
470
|
+
}
|
|
471
|
+
export declare namespace CustomDataIdentifiersResult {
|
|
472
|
+
/**
|
|
473
|
+
* @internal
|
|
474
|
+
*/
|
|
475
|
+
const filterSensitiveLog: (obj: CustomDataIdentifiersResult) => any;
|
|
476
|
+
}
|
|
477
|
+
/**
|
|
478
|
+
* <p>The list of detected instances of sensitive data.</p>
|
|
479
|
+
*/
|
|
480
|
+
export interface SensitiveDataDetections {
|
|
481
|
+
/**
|
|
482
|
+
* <p>The total number of occurrences of sensitive data that were detected.</p>
|
|
483
|
+
*/
|
|
484
|
+
Count?: number;
|
|
485
|
+
/**
|
|
486
|
+
* <p>The type of sensitive data that was detected. For example, the type might indicate that the data is an email address.</p>
|
|
487
|
+
*/
|
|
488
|
+
Type?: string;
|
|
489
|
+
/**
|
|
490
|
+
* <p>Details about the sensitive data that was detected.</p>
|
|
491
|
+
*/
|
|
492
|
+
Occurrences?: Occurrences;
|
|
493
|
+
}
|
|
494
|
+
export declare namespace SensitiveDataDetections {
|
|
495
|
+
/**
|
|
496
|
+
* @internal
|
|
497
|
+
*/
|
|
498
|
+
const filterSensitiveLog: (obj: SensitiveDataDetections) => any;
|
|
499
|
+
}
|
|
500
|
+
/**
|
|
501
|
+
* <p>Contains a detected instance of sensitive data that are based on built-in identifiers.</p>
|
|
502
|
+
*/
|
|
503
|
+
export interface SensitiveDataResult {
|
|
504
|
+
/**
|
|
505
|
+
* <p>The category of sensitive data that was detected. For example, the category can indicate that the sensitive data involved credentials, financial information, or personal information.</p>
|
|
506
|
+
*/
|
|
507
|
+
Category?: string;
|
|
508
|
+
/**
|
|
509
|
+
* <p>The list of detected instances of sensitive data.</p>
|
|
510
|
+
*/
|
|
511
|
+
Detections?: SensitiveDataDetections[];
|
|
512
|
+
/**
|
|
513
|
+
* <p>The total number of occurrences of sensitive data.</p>
|
|
514
|
+
*/
|
|
515
|
+
TotalCount?: number;
|
|
516
|
+
}
|
|
517
|
+
export declare namespace SensitiveDataResult {
|
|
518
|
+
/**
|
|
519
|
+
* @internal
|
|
520
|
+
*/
|
|
521
|
+
const filterSensitiveLog: (obj: SensitiveDataResult) => any;
|
|
522
|
+
}
|
|
523
|
+
/**
|
|
524
|
+
* <p>Provides details about the current status of the sensitive data detection.</p>
|
|
525
|
+
*/
|
|
526
|
+
export interface ClassificationStatus {
|
|
527
|
+
/**
|
|
528
|
+
* <p>The code that represents the status of the sensitive data detection.</p>
|
|
529
|
+
*/
|
|
530
|
+
Code?: string;
|
|
531
|
+
/**
|
|
532
|
+
* <p>A longer description of the current status of the sensitive data detection.</p>
|
|
533
|
+
*/
|
|
534
|
+
Reason?: string;
|
|
535
|
+
}
|
|
536
|
+
export declare namespace ClassificationStatus {
|
|
537
|
+
/**
|
|
538
|
+
* @internal
|
|
539
|
+
*/
|
|
540
|
+
const filterSensitiveLog: (obj: ClassificationStatus) => any;
|
|
541
|
+
}
|
|
542
|
+
/**
|
|
543
|
+
* <p>Details about the sensitive data that was detected on the resource.</p>
|
|
544
|
+
*/
|
|
545
|
+
export interface ClassificationResult {
|
|
546
|
+
/**
|
|
547
|
+
* <p>The type of content that the finding applies to.</p>
|
|
548
|
+
*/
|
|
549
|
+
MimeType?: string;
|
|
550
|
+
/**
|
|
551
|
+
* <p>The total size in bytes of the affected data.</p>
|
|
552
|
+
*/
|
|
553
|
+
SizeClassified?: number;
|
|
554
|
+
/**
|
|
555
|
+
* <p>Indicates whether there are additional occurrences of sensitive data that are not included in the finding. This occurs when the number of occurrences exceeds the maximum that can be included.</p>
|
|
556
|
+
*/
|
|
557
|
+
AdditionalOccurrences?: boolean;
|
|
558
|
+
/**
|
|
559
|
+
* <p>The current status of the sensitive data detection.</p>
|
|
560
|
+
*/
|
|
561
|
+
Status?: ClassificationStatus;
|
|
562
|
+
/**
|
|
563
|
+
* <p>Provides details about sensitive data that was identified based on built-in configuration.</p>
|
|
564
|
+
*/
|
|
565
|
+
SensitiveData?: SensitiveDataResult[];
|
|
566
|
+
/**
|
|
567
|
+
* <p>Provides details about sensitive data that was identified based on customer-defined configuration.</p>
|
|
568
|
+
*/
|
|
569
|
+
CustomDataIdentifiers?: CustomDataIdentifiersResult;
|
|
570
|
+
}
|
|
571
|
+
export declare namespace ClassificationResult {
|
|
572
|
+
/**
|
|
573
|
+
* @internal
|
|
574
|
+
*/
|
|
575
|
+
const filterSensitiveLog: (obj: ClassificationResult) => any;
|
|
576
|
+
}
|
|
577
|
+
/**
|
|
578
|
+
* <p>Provides details about sensitive data that was detected on a resource.</p>
|
|
579
|
+
*/
|
|
580
|
+
export interface DataClassificationDetails {
|
|
581
|
+
/**
|
|
582
|
+
* <p>The path to the folder or file that contains the sensitive data.</p>
|
|
583
|
+
*/
|
|
584
|
+
DetailedResultsLocation?: string;
|
|
585
|
+
/**
|
|
586
|
+
* <p>The details about the sensitive data that was detected on the resource.</p>
|
|
587
|
+
*/
|
|
588
|
+
Result?: ClassificationResult;
|
|
589
|
+
}
|
|
590
|
+
export declare namespace DataClassificationDetails {
|
|
591
|
+
/**
|
|
592
|
+
* @internal
|
|
593
|
+
*/
|
|
594
|
+
const filterSensitiveLog: (obj: DataClassificationDetails) => any;
|
|
595
|
+
}
|
|
596
|
+
/**
|
|
597
|
+
* <p>A wrapper type for the attributes of an Amazon SNS subscription.</p>
|
|
598
|
+
*/
|
|
599
|
+
export interface AwsSnsTopicSubscription {
|
|
600
|
+
/**
|
|
601
|
+
* <p>The subscription's endpoint (format depends on the protocol).</p>
|
|
602
|
+
*/
|
|
603
|
+
Endpoint?: string;
|
|
604
|
+
/**
|
|
605
|
+
* <p>The subscription's protocol.</p>
|
|
606
|
+
*/
|
|
607
|
+
Protocol?: string;
|
|
608
|
+
}
|
|
609
|
+
export declare namespace AwsSnsTopicSubscription {
|
|
610
|
+
/**
|
|
611
|
+
* @internal
|
|
612
|
+
*/
|
|
613
|
+
const filterSensitiveLog: (obj: AwsSnsTopicSubscription) => any;
|
|
614
|
+
}
|
|
3
615
|
/**
|
|
4
616
|
* <p>A wrapper type for the topic's ARN.</p>
|
|
5
617
|
*/
|
|
6
618
|
export interface AwsSnsTopicDetails {
|
|
7
619
|
/**
|
|
8
|
-
* <p>The ID of an Amazon Web Services managed
|
|
9
|
-
* CMK.</p>
|
|
620
|
+
* <p>The ID of an Amazon Web Services managed key for Amazon SNS or a customer managed key.</p>
|
|
10
621
|
*/
|
|
11
622
|
KmsMasterKeyId?: string;
|
|
12
623
|
/**
|
|
@@ -37,8 +648,8 @@ export interface AwsSqsQueueDetails {
|
|
|
37
648
|
*/
|
|
38
649
|
KmsDataKeyReusePeriodSeconds?: number;
|
|
39
650
|
/**
|
|
40
|
-
* <p>The ID of an Amazon Web Services managed
|
|
41
|
-
*
|
|
651
|
+
* <p>The ID of an Amazon Web Services managed key for Amazon SQS or a custom
|
|
652
|
+
* KMS key.</p>
|
|
42
653
|
*/
|
|
43
654
|
KmsMasterKeyId?: string;
|
|
44
655
|
/**
|
|
@@ -519,7 +1130,7 @@ export interface ResourceDetails {
|
|
|
519
1130
|
*/
|
|
520
1131
|
AwsRedshiftCluster?: AwsRedshiftClusterDetails;
|
|
521
1132
|
/**
|
|
522
|
-
* <p>
|
|
1133
|
+
* <p>Contains details about a Classic Load Balancer.</p>
|
|
523
1134
|
*/
|
|
524
1135
|
AwsElbLoadBalancer?: AwsElbLoadBalancerDetails;
|
|
525
1136
|
/**
|
|
@@ -609,6 +1220,18 @@ export interface ResourceDetails {
|
|
|
609
1220
|
* <p>Details about a service within an ECS cluster.</p>
|
|
610
1221
|
*/
|
|
611
1222
|
AwsEcsService?: AwsEcsServiceDetails;
|
|
1223
|
+
/**
|
|
1224
|
+
* <p>Provides details about a launch configuration.</p>
|
|
1225
|
+
*/
|
|
1226
|
+
AwsAutoScalingLaunchConfiguration?: AwsAutoScalingLaunchConfigurationDetails;
|
|
1227
|
+
/**
|
|
1228
|
+
* <p>Details about an EC2 VPN connection.</p>
|
|
1229
|
+
*/
|
|
1230
|
+
AwsEc2VpnConnection?: AwsEc2VpnConnectionDetails;
|
|
1231
|
+
/**
|
|
1232
|
+
* <p>information about an Amazon ECR image.</p>
|
|
1233
|
+
*/
|
|
1234
|
+
AwsEcrContainerImage?: AwsEcrContainerImageDetails;
|
|
612
1235
|
}
|
|
613
1236
|
export declare namespace ResourceDetails {
|
|
614
1237
|
/**
|
|
@@ -863,6 +1486,14 @@ export interface Cvss {
|
|
|
863
1486
|
* <p>The base scoring vector for the CVSS score.</p>
|
|
864
1487
|
*/
|
|
865
1488
|
BaseVector?: string;
|
|
1489
|
+
/**
|
|
1490
|
+
* <p>The origin of the original CVSS score and vector.</p>
|
|
1491
|
+
*/
|
|
1492
|
+
Source?: string;
|
|
1493
|
+
/**
|
|
1494
|
+
* <p>Adjustments to the CVSS metrics.</p>
|
|
1495
|
+
*/
|
|
1496
|
+
Adjustments?: Adjustment[];
|
|
866
1497
|
}
|
|
867
1498
|
export declare namespace Cvss {
|
|
868
1499
|
/**
|
|
@@ -931,6 +1562,14 @@ export interface SoftwarePackage {
|
|
|
931
1562
|
* <p>The architecture used for the software package.</p>
|
|
932
1563
|
*/
|
|
933
1564
|
Architecture?: string;
|
|
1565
|
+
/**
|
|
1566
|
+
* <p>The source of the package.</p>
|
|
1567
|
+
*/
|
|
1568
|
+
PackageManager?: string;
|
|
1569
|
+
/**
|
|
1570
|
+
* <p>The file system path to the package manager inventory file.</p>
|
|
1571
|
+
*/
|
|
1572
|
+
FilePath?: string;
|
|
934
1573
|
}
|
|
935
1574
|
export declare namespace SoftwarePackage {
|
|
936
1575
|
/**
|
|
@@ -984,8 +1623,8 @@ export declare enum WorkflowStatus {
|
|
|
984
1623
|
*/
|
|
985
1624
|
export interface Workflow {
|
|
986
1625
|
/**
|
|
987
|
-
* <p>The status of the investigation into the finding. The
|
|
988
|
-
* following.</p>
|
|
1626
|
+
* <p>The status of the investigation into the finding. The workflow status is specific to an individual finding. It does not affect the generation of new findings. For example, setting the workflow status to <code>SUPPRESSED</code> or <code>RESOLVED</code> does not prevent a new finding for the same issue.</p>
|
|
1627
|
+
* <p>The allowed values are the following.</p>
|
|
989
1628
|
* <ul>
|
|
990
1629
|
* <li>
|
|
991
1630
|
* <p>
|
|
@@ -1014,8 +1653,7 @@ export interface Workflow {
|
|
|
1014
1653
|
* </li>
|
|
1015
1654
|
* <li>
|
|
1016
1655
|
* <p>
|
|
1017
|
-
* <code>SUPPRESSED</code> -
|
|
1018
|
-
* acted upon.</p>
|
|
1656
|
+
* <code>SUPPRESSED</code> - Indicates that you reviewed the finding and do not believe that any action is needed. The finding is no longer updated.</p>
|
|
1019
1657
|
* </li>
|
|
1020
1658
|
* <li>
|
|
1021
1659
|
* <p>
|
|
@@ -1067,7 +1705,7 @@ export interface AwsSecurityFinding {
|
|
|
1067
1705
|
* <p>The name of the product that generated the finding.</p>
|
|
1068
1706
|
* <p>Security Hub populates this attribute automatically for each finding. You cannot update it using <code>BatchImportFindings</code> or <code>BatchUpdateFindings</code>. The exception to this is when you use a custom integration.</p>
|
|
1069
1707
|
* <p>When you use the Security Hub console to filter findings by product name, you use this attribute.</p>
|
|
1070
|
-
* <p>When you use the Security Hub API to filter findings by product name, you use the <code>aws/securityhub/
|
|
1708
|
+
* <p>When you use the Security Hub API to filter findings by product name, you use the <code>aws/securityhub/ProductName</code> attribute under <code>ProductFields</code>.</p>
|
|
1071
1709
|
* <p>Security Hub does not synchronize those two attributes.</p>
|
|
1072
1710
|
*/
|
|
1073
1711
|
ProductName?: string;
|
|
@@ -2297,8 +2935,8 @@ export declare namespace SeverityUpdate {
|
|
|
2297
2935
|
*/
|
|
2298
2936
|
export interface WorkflowUpdate {
|
|
2299
2937
|
/**
|
|
2300
|
-
* <p>The status of the investigation into the finding. The
|
|
2301
|
-
* following.</p>
|
|
2938
|
+
* <p>The status of the investigation into the finding. The workflow status is specific to an individual finding. It does not affect the generation of new findings. For example, setting the workflow status to <code>SUPPRESSED</code> or <code>RESOLVED</code> does not prevent a new finding for the same issue.</p>
|
|
2939
|
+
* <p>The allowed values are the following.</p>
|
|
2302
2940
|
* <ul>
|
|
2303
2941
|
* <li>
|
|
2304
2942
|
* <p>
|
|
@@ -2330,8 +2968,7 @@ export interface WorkflowUpdate {
|
|
|
2330
2968
|
* </li>
|
|
2331
2969
|
* <li>
|
|
2332
2970
|
* <p>
|
|
2333
|
-
* <code>SUPPRESSED</code> -
|
|
2334
|
-
* acted upon.</p>
|
|
2971
|
+
* <code>SUPPRESSED</code> - Indicates that you reviewed the finding and do not believe that any action is needed. The finding is no longer updated.</p>
|
|
2335
2972
|
* </li>
|
|
2336
2973
|
* </ul>
|
|
2337
2974
|
*/
|
|
@@ -2921,7 +3558,7 @@ export interface Product {
|
|
|
2921
3558
|
IntegrationTypes?: (IntegrationType | string)[];
|
|
2922
3559
|
/**
|
|
2923
3560
|
* <p>For integrations with Amazon Web Services services, the Amazon Web Services Console URL from which to activate the service.</p>
|
|
2924
|
-
* <p>For integrations with third-party products, the Marketplace URL from which to subscribe to or purchase the product.</p>
|
|
3561
|
+
* <p>For integrations with third-party products, the Amazon Web Services Marketplace URL from which to subscribe to or purchase the product.</p>
|
|
2925
3562
|
*/
|
|
2926
3563
|
MarketplaceUrl?: string;
|
|
2927
3564
|
/**
|