@aws-sdk/client-securityhub 3.296.0 → 3.297.0

package/dist-types/models/models_1.d.ts

@@ -2,6 +2,7 @@ import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-cl
 import { AccountDetails, Action, Adjustment, AssociatedStandard, AssociationStatus, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsBackupBackupPlanDetails, AwsBackupBackupVaultDetails, AwsBackupRecoveryPointDetails, AwsCertificateManagerCertificateDetails, AwsCloudFormationStackDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCloudWatchAlarmDetails, AwsCodeBuildProjectDetails, AwsDynamoDbTableDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2LaunchTemplateDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2TransitGatewayDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpcEndpointServiceDetails, AwsEc2VpcPeeringConnectionDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcrRepositoryDetails, AwsEcsClusterDetails, AwsEcsContainerDetails, AwsEcsServiceDetails, AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointDetails, AwsEksClusterDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsIamAccessKeyDetails, AwsIamAttachedManagedPolicy } from "./models_0";
 import { SecurityHubServiceException as __BaseException } from "./SecurityHubServiceException";
 /**
+ * @public
  * <p>A managed policy that is attached to the IAM group.</p>
  */
 export interface AwsIamGroupPolicy {
@@ -11,6 +12,7 @@ export interface AwsIamGroupPolicy {
     PolicyName?: string;
 }
 /**
+ * @public
  * <p>Contains details about an IAM group.</p>
  */
 export interface AwsIamGroupDetails {
@@ -43,6 +45,7 @@ export interface AwsIamGroupDetails {
     Path?: string;
 }
 /**
+ * @public
  * <p>Information about a role associated with an instance profile.</p>
  */
 export interface AwsIamInstanceProfileRole {
@@ -75,6 +78,7 @@ export interface AwsIamInstanceProfileRole {
     RoleName?: string;
 }
 /**
+ * @public
  * <p>Information about an instance profile.</p>
  */
 export interface AwsIamInstanceProfile {
@@ -107,6 +111,7 @@ export interface AwsIamInstanceProfile {
     Roles?: AwsIamInstanceProfileRole[];
 }
 /**
+ * @public
  * <p>Information about the policy used to set the permissions boundary for an IAM
  *          principal.</p>
  */
@@ -121,6 +126,7 @@ export interface AwsIamPermissionsBoundary {
     PermissionsBoundaryType?: string;
 }
 /**
+ * @public
  * <p>A version of an IAM policy.</p>
  */
 export interface AwsIamPolicyVersion {
@@ -141,6 +147,7 @@ export interface AwsIamPolicyVersion {
     CreateDate?: string;
 }
 /**
+ * @public
  * <p>Represents an IAM permissions policy.</p>
  */
 export interface AwsIamPolicyDetails {
@@ -197,6 +204,7 @@ export interface AwsIamPolicyDetails {
     UpdateDate?: string;
 }
 /**
+ * @public
  * <p>An inline policy that is embedded in the role.</p>
  */
 export interface AwsIamRolePolicy {
@@ -206,6 +214,7 @@ export interface AwsIamRolePolicy {
     PolicyName?: string;
 }
 /**
+ * @public
  * <p>Contains information about an IAM role, including all of the role's policies.</p>
  */
 export interface AwsIamRoleDetails {
@@ -255,6 +264,7 @@ export interface AwsIamRoleDetails {
     Path?: string;
 }
 /**
+ * @public
  * <p>Information about an inline policy that is embedded in the user.</p>
  */
 export interface AwsIamUserPolicy {
@@ -264,6 +274,7 @@ export interface AwsIamUserPolicy {
     PolicyName?: string;
 }
 /**
+ * @public
  * <p>Information about an IAM user.</p>
  */
 export interface AwsIamUserDetails {
@@ -304,6 +315,7 @@ export interface AwsIamUserDetails {
     UserPolicyList?: AwsIamUserPolicy[];
 }
 /**
+ * @public
  * <p>Provides information about stream encryption.
  *       </p>
  */
@@ -319,6 +331,7 @@ export interface AwsKinesisStreamStreamEncryptionDetails {
     KeyId?: string;
 }
 /**
+ * @public
  * <p>Provides information about an Amazon Kinesis data stream.
  *       </p>
  */
@@ -352,6 +365,7 @@ export interface AwsKinesisStreamDetails {
     RetentionPeriodHours?: number;
 }
 /**
+ * @public
  * <p>Contains metadata about an KMS key.</p>
  */
 export interface AwsKmsKeyDetails {
@@ -423,6 +437,7 @@ export interface AwsKmsKeyDetails {
     KeyRotationStatus?: boolean;
 }
 /**
+ * @public
  * <p>The code for the Lambda function. You can specify either an object in Amazon S3, or upload a deployment package directly.</p>
  */
 export interface AwsLambdaFunctionCode {
@@ -444,6 +459,7 @@ export interface AwsLambdaFunctionCode {
     ZipFile?: string;
 }
 /**
+ * @public
  * <p>The dead-letter queue for failed asynchronous invocations.</p>
  */
 export interface AwsLambdaFunctionDeadLetterConfig {
@@ -453,6 +469,7 @@ export interface AwsLambdaFunctionDeadLetterConfig {
     TargetArn?: string;
 }
 /**
+ * @public
  * <p>Error messages for environment variables that could not be applied.</p>
  */
 export interface AwsLambdaFunctionEnvironmentError {
@@ -466,6 +483,7 @@ export interface AwsLambdaFunctionEnvironmentError {
     Message?: string;
 }
 /**
+ * @public
  * <p>A function's environment variable settings.</p>
  */
 export interface AwsLambdaFunctionEnvironment {
@@ -479,6 +497,7 @@ export interface AwsLambdaFunctionEnvironment {
     Error?: AwsLambdaFunctionEnvironmentError;
 }
 /**
+ * @public
  * <p>An Lambda layer.</p>
  */
 export interface AwsLambdaFunctionLayer {
@@ -492,6 +511,7 @@ export interface AwsLambdaFunctionLayer {
     CodeSize?: number;
 }
 /**
+ * @public
  * <p>The function's X-Ray tracing configuration.</p>
  */
 export interface AwsLambdaFunctionTracingConfig {
@@ -501,6 +521,7 @@ export interface AwsLambdaFunctionTracingConfig {
     Mode?: string;
 }
 /**
+ * @public
  * <p>The VPC security groups and subnets that are attached to a Lambda function.</p>
  */
 export interface AwsLambdaFunctionVpcConfig {
@@ -518,6 +539,7 @@ export interface AwsLambdaFunctionVpcConfig {
     VpcId?: string;
 }
 /**
+ * @public
  * <p>Details about an Lambda function's configuration.</p>
  */
 export interface AwsLambdaFunctionDetails {
@@ -608,6 +630,7 @@ export interface AwsLambdaFunctionDetails {
     PackageType?: string;
 }
 /**
+ * @public
  * <p>Details about a Lambda layer version.</p>
  */
 export interface AwsLambdaLayerVersionDetails {
@@ -634,6 +657,7 @@ export interface AwsLambdaLayerVersionDetails {
     CreatedDate?: string;
 }
 /**
+ * @public
  * <p>A public subnet that Network Firewall uses for the firewall.</p>
  */
 export interface AwsNetworkFirewallFirewallSubnetMappingsDetails {
@@ -643,6 +667,7 @@ export interface AwsNetworkFirewallFirewallSubnetMappingsDetails {
     SubnetId?: string;
 }
 /**
+ * @public
  * <p>Details about an Network Firewall firewall.</p>
  */
 export interface AwsNetworkFirewallFirewallDetails {
@@ -688,6 +713,7 @@ export interface AwsNetworkFirewallFirewallDetails {
     VpcId?: string;
 }
 /**
+ * @public
  * <p>A stateful rule group that is used by the firewall policy.</p>
  */
 export interface FirewallPolicyStatefulRuleGroupReferencesDetails {
@@ -697,6 +723,7 @@ export interface FirewallPolicyStatefulRuleGroupReferencesDetails {
     ResourceArn?: string;
 }
 /**
+ * @public
  * <p>Defines a CloudWatch dimension value to publish.</p>
  */
 export interface StatelessCustomPublishMetricActionDimension {
@@ -706,6 +733,7 @@ export interface StatelessCustomPublishMetricActionDimension {
     Value?: string;
 }
 /**
+ * @public
  * <p>Information about metrics to publish to CloudWatch.</p>
  */
 export interface StatelessCustomPublishMetricAction {
@@ -715,6 +743,7 @@ export interface StatelessCustomPublishMetricAction {
     Dimensions?: StatelessCustomPublishMetricActionDimension[];
 }
 /**
+ * @public
  * <p>The definition of a custom action that can be used for stateless packet handling.</p>
  */
 export interface StatelessCustomActionDefinition {
@@ -724,6 +753,7 @@ export interface StatelessCustomActionDefinition {
     PublishMetricAction?: StatelessCustomPublishMetricAction;
 }
 /**
+ * @public
  * <p>A custom action that can be used for stateless packet handling.</p>
  */
 export interface FirewallPolicyStatelessCustomActionsDetails {
@@ -737,6 +767,7 @@ export interface FirewallPolicyStatelessCustomActionsDetails {
     ActionName?: string;
 }
 /**
+ * @public
  * <p>A stateless rule group that is used by the firewall policy.</p>
  */
 export interface FirewallPolicyStatelessRuleGroupReferencesDetails {
@@ -750,6 +781,7 @@ export interface FirewallPolicyStatelessRuleGroupReferencesDetails {
     ResourceArn?: string;
 }
 /**
+ * @public
  * <p>Defines the behavior of the firewall.</p>
  */
 export interface FirewallPolicyDetails {
@@ -779,6 +811,7 @@ export interface FirewallPolicyDetails {
     StatelessRuleGroupReferences?: FirewallPolicyStatelessRuleGroupReferencesDetails[];
 }
 /**
+ * @public
  * <p>Details about a firewall policy. A firewall policy defines the behavior of a network firewall.</p>
  */
 export interface AwsNetworkFirewallFirewallPolicyDetails {
@@ -804,6 +837,7 @@ export interface AwsNetworkFirewallFirewallPolicyDetails {
     Description?: string;
 }
 /**
+ * @public
  * <p>Stateful inspection criteria for a domain list rule group.</p>
  */
 export interface RuleGroupSourceListDetails {
@@ -821,6 +855,7 @@ export interface RuleGroupSourceListDetails {
     Targets?: string[];
 }
 /**
+ * @public
  * <p>The inspection criteria for a stateful rule.</p>
  */
 export interface RuleGroupSourceStatefulRulesHeaderDetails {
@@ -850,6 +885,7 @@ export interface RuleGroupSourceStatefulRulesHeaderDetails {
     SourcePort?: string;
 }
 /**
+ * @public
  * <p>A rule option for a stateful rule.</p>
  */
 export interface RuleGroupSourceStatefulRulesOptionsDetails {
@@ -863,6 +899,7 @@ export interface RuleGroupSourceStatefulRulesOptionsDetails {
     Settings?: string[];
 }
 /**
+ * @public
  * <p>A Suricata rule specification.</p>
  */
 export interface RuleGroupSourceStatefulRulesDetails {
@@ -880,6 +917,7 @@ export interface RuleGroupSourceStatefulRulesDetails {
     RuleOptions?: RuleGroupSourceStatefulRulesOptionsDetails[];
 }
 /**
+ * @public
  * <p>A custom action definition. A custom action is an optional, non-standard action to use for stateless packet handling.</p>
  */
 export interface RuleGroupSourceCustomActionsDetails {
@@ -893,6 +931,7 @@ export interface RuleGroupSourceCustomActionsDetails {
     ActionName?: string;
 }
 /**
+ * @public
  * <p>A port range to specify the destination ports to inspect for.</p>
  */
 export interface RuleGroupSourceStatelessRuleMatchAttributesDestinationPorts {
@@ -906,6 +945,7 @@ export interface RuleGroupSourceStatelessRuleMatchAttributesDestinationPorts {
     ToPort?: number;
 }
 /**
+ * @public
  * <p>A destination IP address or range.</p>
  */
 export interface RuleGroupSourceStatelessRuleMatchAttributesDestinations {
@@ -915,6 +955,7 @@ export interface RuleGroupSourceStatelessRuleMatchAttributesDestinations {
     AddressDefinition?: string;
 }
 /**
+ * @public
  * <p>A port range to specify the source ports to inspect for.</p>
  */
 export interface RuleGroupSourceStatelessRuleMatchAttributesSourcePorts {
@@ -928,6 +969,7 @@ export interface RuleGroupSourceStatelessRuleMatchAttributesSourcePorts {
     ToPort?: number;
 }
 /**
+ * @public
  * <p>A source IP addresses and address range to inspect for.</p>
  */
 export interface RuleGroupSourceStatelessRuleMatchAttributesSources {
@@ -937,6 +979,7 @@ export interface RuleGroupSourceStatelessRuleMatchAttributesSources {
     AddressDefinition?: string;
 }
 /**
+ * @public
  * <p>A set of TCP flags and masks to inspect for.</p>
  */
 export interface RuleGroupSourceStatelessRuleMatchAttributesTcpFlags {
@@ -950,6 +993,7 @@ export interface RuleGroupSourceStatelessRuleMatchAttributesTcpFlags {
     Masks?: string[];
 }
 /**
+ * @public
  * <p>Criteria for the stateless rule.</p>
  */
 export interface RuleGroupSourceStatelessRuleMatchAttributes {
@@ -979,6 +1023,7 @@ export interface RuleGroupSourceStatelessRuleMatchAttributes {
     TcpFlags?: RuleGroupSourceStatelessRuleMatchAttributesTcpFlags[];
 }
 /**
+ * @public
  * <p>The definition of the stateless rule.</p>
  */
 export interface RuleGroupSourceStatelessRuleDefinition {
@@ -992,6 +1037,7 @@ export interface RuleGroupSourceStatelessRuleDefinition {
     MatchAttributes?: RuleGroupSourceStatelessRuleMatchAttributes;
 }
 /**
+ * @public
  * <p>A stateless rule in the rule group.</p>
  */
 export interface RuleGroupSourceStatelessRulesDetails {
@@ -1005,6 +1051,7 @@ export interface RuleGroupSourceStatelessRulesDetails {
     RuleDefinition?: RuleGroupSourceStatelessRuleDefinition;
 }
 /**
+ * @public
  * <p>Stateless rules and custom actions for a stateless rule group.</p>
  */
 export interface RuleGroupSourceStatelessRulesAndCustomActionsDetails {
@@ -1018,6 +1065,7 @@ export interface RuleGroupSourceStatelessRulesAndCustomActionsDetails {
     StatelessRules?: RuleGroupSourceStatelessRulesDetails[];
 }
 /**
+ * @public
  * <p>The rules and actions for the rule group.</p>
  */
 export interface RuleGroupSource {
@@ -1039,6 +1087,7 @@ export interface RuleGroupSource {
     StatelessRulesAndCustomActions?: RuleGroupSourceStatelessRulesAndCustomActionsDetails;
 }
 /**
+ * @public
  * <p>A list of IP addresses and address ranges, in CIDR notation.</p>
  */
 export interface RuleGroupVariablesIpSetsDetails {
@@ -1048,6 +1097,7 @@ export interface RuleGroupVariablesIpSetsDetails {
     Definition?: string[];
 }
 /**
+ * @public
  * <p>A list of port ranges.</p>
  */
 export interface RuleGroupVariablesPortSetsDetails {
@@ -1057,6 +1107,7 @@ export interface RuleGroupVariablesPortSetsDetails {
     Definition?: string[];
 }
 /**
+ * @public
  * <p>Additional settings to use in the specified rules.</p>
  */
 export interface RuleGroupVariables {
@@ -1070,6 +1121,7 @@ export interface RuleGroupVariables {
     PortSets?: RuleGroupVariablesPortSetsDetails;
 }
 /**
+ * @public
  * <p>Details about the rule group.</p>
  */
 export interface RuleGroupDetails {
@@ -1085,6 +1137,7 @@ export interface RuleGroupDetails {
     RulesSource?: RuleGroupSource;
 }
 /**
+ * @public
  * <p>Details about an Network Firewall rule group. Rule groups are used to inspect and control network traffic. Stateless rule groups apply to individual packets. Stateful rule groups apply to packets in the context of their traffic flow.</p>
  *          <p>Rule groups are referenced in firewall policies.
  *       </p>
@@ -1120,6 +1173,7 @@ export interface AwsNetworkFirewallRuleGroupDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Specifies information about the master user of the domain.
  *       </p>
  */
@@ -1141,6 +1195,7 @@ export interface AwsOpenSearchServiceDomainMasterUserOptionsDetails {
     MasterUserPassword?: string;
 }
 /**
+ * @public
  * <p>Provides information about domain access control options.
  *       </p>
  */
@@ -1162,6 +1217,7 @@ export interface AwsOpenSearchServiceDomainAdvancedSecurityOptionsDetails {
     MasterUserOptions?: AwsOpenSearchServiceDomainMasterUserOptionsDetails;
 }
 /**
+ * @public
  * <p>Configuration options for zone awareness.</p>
  */
 export interface AwsOpenSearchServiceDomainClusterConfigZoneAwarenessConfigDetails {
@@ -1171,6 +1227,7 @@ export interface AwsOpenSearchServiceDomainClusterConfigZoneAwarenessConfigDetai
     AvailabilityZoneCount?: number;
 }
 /**
+ * @public
  * <p>Details about the configuration of an OpenSearch cluster.</p>
  */
 export interface AwsOpenSearchServiceDomainClusterConfigDetails {
@@ -1219,6 +1276,7 @@ export interface AwsOpenSearchServiceDomainClusterConfigDetails {
     DedicatedMasterType?: string;
 }
 /**
+ * @public
  * <p>Information about additional options for the domain endpoint.</p>
  */
 export interface AwsOpenSearchServiceDomainDomainEndpointOptionsDetails {
@@ -1244,6 +1302,7 @@ export interface AwsOpenSearchServiceDomainDomainEndpointOptionsDetails {
     TLSSecurityPolicy?: string;
 }
 /**
+ * @public
  * <p>Details about the configuration for encryption at rest for the OpenSearch domain.</p>
  */
 export interface AwsOpenSearchServiceDomainEncryptionAtRestOptionsDetails {
@@ -1257,6 +1316,7 @@ export interface AwsOpenSearchServiceDomainEncryptionAtRestOptionsDetails {
     KmsKeyId?: string;
 }
 /**
+ * @public
  * <p>Configuration details for a log publishing option.</p>
  */
 export interface AwsOpenSearchServiceDomainLogPublishingOption {
@@ -1270,6 +1330,7 @@ export interface AwsOpenSearchServiceDomainLogPublishingOption {
     Enabled?: boolean;
 }
 /**
+ * @public
  * <p>Configures the CloudWatch Logs to publish for the OpenSearch domain.</p>
  */
 export interface AwsOpenSearchServiceDomainLogPublishingOptionsDetails {
@@ -1287,6 +1348,7 @@ export interface AwsOpenSearchServiceDomainLogPublishingOptionsDetails {
     AuditLogs?: AwsOpenSearchServiceDomainLogPublishingOption;
 }
 /**
+ * @public
  * <p>Provides details about the configuration for node-to-node encryption.</p>
  */
 export interface AwsOpenSearchServiceDomainNodeToNodeEncryptionOptionsDetails {
@@ -1296,6 +1358,7 @@ export interface AwsOpenSearchServiceDomainNodeToNodeEncryptionOptionsDetails {
     Enabled?: boolean;
 }
 /**
+ * @public
  * <p>Provides information about the state of the domain relative to the latest service software.</p>
  */
 export interface AwsOpenSearchServiceDomainServiceSoftwareOptionsDetails {
@@ -1360,6 +1423,7 @@ export interface AwsOpenSearchServiceDomainServiceSoftwareOptionsDetails {
     OptionalDeployment?: boolean;
 }
 /**
+ * @public
  * <p>Contains information that OpenSearch Service derives based on the <code>VPCOptions</code> for the domain.</p>
  */
 export interface AwsOpenSearchServiceDomainVpcOptionsDetails {
@@ -1373,6 +1437,7 @@ export interface AwsOpenSearchServiceDomainVpcOptionsDetails {
     SubnetIds?: string[];
 }
 /**
+ * @public
  * <p>Information about an Amazon OpenSearch Service domain.</p>
  */
 export interface AwsOpenSearchServiceDomainDetails {
@@ -1440,6 +1505,7 @@ export interface AwsOpenSearchServiceDomainDetails {
     AdvancedSecurityOptions?: AwsOpenSearchServiceDomainAdvancedSecurityOptionsDetails;
 }
 /**
+ * @public
  * <p>An IAM role that is associated with the Amazon RDS DB cluster.</p>
  */
 export interface AwsRdsDbClusterAssociatedRole {
@@ -1470,6 +1536,7 @@ export interface AwsRdsDbClusterAssociatedRole {
     Status?: string;
 }
 /**
+ * @public
  * <p>Information about an instance in the DB cluster.</p>
  */
 export interface AwsRdsDbClusterMember {
@@ -1492,6 +1559,7 @@ export interface AwsRdsDbClusterMember {
     DbClusterParameterGroupStatus?: string;
 }
 /**
+ * @public
  * <p>Information about an option group membership for a DB cluster.</p>
  */
 export interface AwsRdsDbClusterOptionGroupMembership {
@@ -1505,6 +1573,7 @@ export interface AwsRdsDbClusterOptionGroupMembership {
     Status?: string;
 }
 /**
+ * @public
  * <p>Information about an Active Directory domain membership record associated with the DB
  *          instance.</p>
  */
@@ -1527,6 +1596,7 @@ export interface AwsRdsDbDomainMembership {
     IamRoleName?: string;
 }
 /**
+ * @public
  * <p>A VPC security groups that the DB instance belongs to.</p>
  */
 export interface AwsRdsDbInstanceVpcSecurityGroup {
@@ -1540,6 +1610,7 @@ export interface AwsRdsDbInstanceVpcSecurityGroup {
     Status?: string;
 }
 /**
+ * @public
  * <p>Information about an Amazon RDS DB cluster.</p>
  */
 export interface AwsRdsDbClusterDetails {
@@ -1779,6 +1850,7 @@ export interface AwsRdsDbClusterDetails {
     IamDatabaseAuthenticationEnabled?: boolean;
 }
 /**
+ * @public
  * <p>Information about an Amazon RDS DB cluster snapshot.</p>
  */
 export interface AwsRdsDbClusterSnapshotDetails {
@@ -1863,6 +1935,7 @@ export interface AwsRdsDbClusterSnapshotDetails {
     IamDatabaseAuthenticationEnabled?: boolean;
 }
 /**
+ * @public
  * <p>An IAM role associated with the DB instance.</p>
  */
 export interface AwsRdsDbInstanceAssociatedRole {
@@ -1900,6 +1973,7 @@ export interface AwsRdsDbInstanceAssociatedRole {
     Status?: string;
 }
 /**
+ * @public
  * <p>Provides information about a parameter group for a DB instance.</p>
  */
 export interface AwsRdsDbParameterGroup {
@@ -1913,6 +1987,7 @@ export interface AwsRdsDbParameterGroup {
     ParameterApplyStatus?: string;
 }
 /**
+ * @public
  * <p>An Availability Zone for a subnet in a subnet group.</p>
  */
 export interface AwsRdsDbSubnetGroupSubnetAvailabilityZone {
@@ -1922,6 +1997,7 @@ export interface AwsRdsDbSubnetGroupSubnetAvailabilityZone {
     Name?: string;
 }
 /**
+ * @public
  * <p>Information about a subnet in a subnet group.</p>
  */
 export interface AwsRdsDbSubnetGroupSubnet {
@@ -1939,6 +2015,7 @@ export interface AwsRdsDbSubnetGroupSubnet {
     SubnetStatus?: string;
 }
 /**
+ * @public
  * <p>Information about the subnet group for the database instance.</p>
  */
 export interface AwsRdsDbSubnetGroup {
@@ -1968,6 +2045,7 @@ export interface AwsRdsDbSubnetGroup {
     DbSubnetGroupArn?: string;
 }
 /**
+ * @public
  * <p>Specifies the connection endpoint.</p>
  */
 export interface AwsRdsDbInstanceEndpoint {
@@ -1985,6 +2063,7 @@ export interface AwsRdsDbInstanceEndpoint {
     HostedZoneId?: string;
 }
 /**
+ * @public
  * <p>An option group membership.</p>
  */
 export interface AwsRdsDbOptionGroupMembership {
@@ -1998,6 +2077,7 @@ export interface AwsRdsDbOptionGroupMembership {
     Status?: string;
 }
 /**
+ * @public
  * <p>Identifies the log types to enable and disable.</p>
  */
 export interface AwsRdsPendingCloudWatchLogsExports {
@@ -2011,6 +2091,7 @@ export interface AwsRdsPendingCloudWatchLogsExports {
     LogTypesToDisable?: string[];
 }
 /**
+ * @public
  * <p>A processor feature.</p>
  */
 export interface AwsRdsDbProcessorFeature {
@@ -2024,6 +2105,7 @@ export interface AwsRdsDbProcessorFeature {
     Value?: string;
 }
 /**
+ * @public
  * <p>Changes to a DB instance that are currently pending.</p>
  */
 export interface AwsRdsDbPendingModifiedValues {
@@ -2089,6 +2171,7 @@ export interface AwsRdsDbPendingModifiedValues {
     ProcessorFeatures?: AwsRdsDbProcessorFeature[];
 }
 /**
+ * @public
  * <p>Information about the status of a read replica.</p>
  */
 export interface AwsRdsDbStatusInfo {
@@ -2110,6 +2193,7 @@ export interface AwsRdsDbStatusInfo {
     Message?: string;
 }
 /**
+ * @public
  * <p>Contains the details of an Amazon RDS DB instance.</p>
  */
 export interface AwsRdsDbInstanceDetails {
@@ -2404,6 +2488,7 @@ export interface AwsRdsDbInstanceDetails {
     MaxAllocatedStorage?: number;
 }
 /**
+ * @public
  * <p>EC2 security group information for an RDS DB security group.</p>
  */
 export interface AwsRdsDbSecurityGroupEc2SecurityGroup {
@@ -2425,6 +2510,7 @@ export interface AwsRdsDbSecurityGroupEc2SecurityGroup {
     Status?: string;
 }
 /**
+ * @public
  * <p>IP range information for an RDS DB security group.</p>
  */
 export interface AwsRdsDbSecurityGroupIpRange {
@@ -2438,6 +2524,7 @@ export interface AwsRdsDbSecurityGroupIpRange {
     Status?: string;
 }
 /**
+ * @public
  * <p>Provides information about an Amazon RDS DB security group.</p>
  */
 export interface AwsRdsDbSecurityGroupDetails {
@@ -2472,6 +2559,7 @@ export interface AwsRdsDbSecurityGroupDetails {
     VpcId?: string;
 }
 /**
+ * @public
  * <p>Provides details about an Amazon RDS DB cluster snapshot.</p>
  */
 export interface AwsRdsDbSnapshotDetails {
@@ -2674,6 +2762,7 @@ export interface AwsRdsDbSnapshotDetails {
     DbiResourceId?: string;
 }
 /**
+ * @public
  * <p>Details about an Amazon RDS event notification subscription. The subscription allows Amazon RDS to post events to an SNS topic.</p>
  */
 export interface AwsRdsEventSubscriptionDetails {
@@ -2724,6 +2813,7 @@ export interface AwsRdsEventSubscriptionDetails {
     SubscriptionCreationTime?: string;
 }
 /**
+ * @public
  * <p>A node in an Amazon Redshift cluster.</p>
  */
 export interface AwsRedshiftClusterClusterNode {
@@ -2741,6 +2831,7 @@ export interface AwsRedshiftClusterClusterNode {
     PublicIpAddress?: string;
 }
 /**
+ * @public
  * <p>The status of a parameter in a cluster parameter group for an Amazon Redshift
  *          cluster.</p>
  */
@@ -2764,6 +2855,7 @@ export interface AwsRedshiftClusterClusterParameterStatus {
     ParameterApplyErrorDescription?: string;
 }
 /**
+ * @public
  * <p>A cluster parameter group that is associated with an Amazon Redshift cluster.</p>
  */
 export interface AwsRedshiftClusterClusterParameterGroup {
@@ -2781,6 +2873,7 @@ export interface AwsRedshiftClusterClusterParameterGroup {
     ParameterGroupName?: string;
 }
 /**
+ * @public
  * <p>A security group that is associated with the cluster.</p>
  */
 export interface AwsRedshiftClusterClusterSecurityGroup {
@@ -2794,6 +2887,7 @@ export interface AwsRedshiftClusterClusterSecurityGroup {
     Status?: string;
 }
 /**
+ * @public
  * <p>You can configure Amazon Redshift to copy snapshots for a cluster to another Amazon Web Services Region. This parameter
  *          provides information about a cross-Region snapshot copy.</p>
  */
@@ -2823,6 +2917,7 @@ export interface AwsRedshiftClusterClusterSnapshotCopyStatus {
     SnapshotCopyGrantName?: string;
 }
 /**
+ * @public
  * <p>A time windows during which maintenance was deferred for an Amazon Redshift
  *          cluster.</p>
  */
@@ -2847,6 +2942,7 @@ export interface AwsRedshiftClusterDeferredMaintenanceWindow {
     DeferMaintenanceStartTime?: string;
 }
 /**
+ * @public
  * <p>The status of the elastic IP (EIP) address for an Amazon Redshift cluster.</p>
  */
 export interface AwsRedshiftClusterElasticIpStatus {
@@ -2860,6 +2956,7 @@ export interface AwsRedshiftClusterElasticIpStatus {
     Status?: string;
 }
 /**
+ * @public
  * <p>The connection endpoint for an Amazon Redshift cluster.</p>
  */
 export interface AwsRedshiftClusterEndpoint {
@@ -2873,6 +2970,7 @@ export interface AwsRedshiftClusterEndpoint {
     Port?: number;
 }
 /**
+ * @public
  * <p>Information about whether an Amazon Redshift cluster finished applying any hardware
  *          changes to security module (HSM) settings that were specified in a modify cluster
  *          command.</p>
@@ -2898,6 +2996,7 @@ export interface AwsRedshiftClusterHsmStatus {
     Status?: string;
 }
 /**
+ * @public
  * <p>An IAM role that the cluster can use to access other Amazon Web Services services.</p>
  */
 export interface AwsRedshiftClusterIamRole {
@@ -2913,6 +3012,7 @@ export interface AwsRedshiftClusterIamRole {
     IamRoleArn?: string;
 }
 /**
+ * @public
  * <p>Provides information about the logging status of the cluster.</p>
  */
 export interface AwsRedshiftClusterLoggingStatus {
@@ -2948,6 +3048,7 @@ export interface AwsRedshiftClusterLoggingStatus {
     S3KeyPrefix?: string;
 }
 /**
+ * @public
  * <p>Changes to the Amazon Redshift cluster that are currently pending.</p>
  */
 export interface AwsRedshiftClusterPendingModifiedValues {
@@ -2999,6 +3100,7 @@ export interface AwsRedshiftClusterPendingModifiedValues {
     PubliclyAccessible?: boolean;
 }
 /**
+ * @public
  * <p>Information about the resize operation for the cluster.</p>
  */
 export interface AwsRedshiftClusterResizeInfo {
@@ -3014,6 +3116,7 @@ export interface AwsRedshiftClusterResizeInfo {
     ResizeType?: string;
 }
 /**
+ * @public
  * <p>Information about the status of a cluster restore action. It only applies if the cluster
  *          was created by restoring a snapshot.</p>
  */
@@ -3055,6 +3158,7 @@ export interface AwsRedshiftClusterRestoreStatus {
     Status?: string;
 }
 /**
+ * @public
  * <p>A VPC security group that the cluster belongs to, if the cluster is in a VPC.</p>
  */
 export interface AwsRedshiftClusterVpcSecurityGroup {
@@ -3068,6 +3172,7 @@ export interface AwsRedshiftClusterVpcSecurityGroup {
     VpcSecurityGroupId?: string;
 }
 /**
+ * @public
  * <p>Details about an Amazon Redshift cluster.</p>
  */
 export interface AwsRedshiftClusterDetails {
@@ -3324,6 +3429,7 @@ export interface AwsRedshiftClusterDetails {
     LoggingStatus?: AwsRedshiftClusterLoggingStatus;
 }
 /**
+ * @public
  * <p>provides information about the Amazon S3 Public Access Block configuration for accounts.</p>
  */
 export interface AwsS3AccountPublicAccessBlockDetails {
@@ -3345,6 +3451,7 @@ export interface AwsS3AccountPublicAccessBlockDetails {
     RestrictPublicBuckets?: boolean;
 }
 /**
+ * @public
  * <p>Information about what Amazon S3
  *          does when a multipart upload is incomplete.</p>
  */
@@ -3355,6 +3462,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesAbortIncompleteMult
     DaysAfterInitiation?: number;
 }
 /**
+ * @public
  * <p>A tag that is assigned to matching objects.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateOperandsTagDetails {
@@ -3368,6 +3476,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateOper
     Value?: string;
 }
 /**
+ * @public
  * <p>A value to use for the filter.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateOperandsDetails {
@@ -3386,6 +3495,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateOper
     Type?: string;
 }
 /**
+ * @public
  * <p>A tag filter.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateTagDetails {
@@ -3399,6 +3509,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateTagD
     Value?: string;
 }
 /**
+ * @public
  * <p>The configuration for the filter.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateDetails {
@@ -3421,6 +3532,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateDeta
     Type?: string;
 }
 /**
+ * @public
  * <p>Identifies the objects that a rule applies to.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterDetails {
@@ -3430,6 +3542,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesFilterDetails {
     Predicate?: AwsS3BucketBucketLifecycleConfigurationRulesFilterPredicateDetails;
 }
 /**
+ * @public
  * <p>A transition rule that describes when noncurrent objects transition to a specified storage class.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationRulesNoncurrentVersionTransitionsDetails {
@@ -3443,6 +3556,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesNoncurrentVersionTr
     StorageClass?: string;
 }
 /**
+ * @public
  * <p>A rule for when objects transition to specific storage classes.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationRulesTransitionsDetails {
@@ -3490,6 +3604,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesTransitionsDetails
     StorageClass?: string;
 }
 /**
+ * @public
  * <p>Configuration for a lifecycle rule.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationRulesDetails {
@@ -3547,6 +3662,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationRulesDetails {
     Transitions?: AwsS3BucketBucketLifecycleConfigurationRulesTransitionsDetails[];
 }
 /**
+ * @public
  * <p>The lifecycle configuration for the objects in the S3 bucket.</p>
  */
 export interface AwsS3BucketBucketLifecycleConfigurationDetails {
@@ -3556,6 +3672,7 @@ export interface AwsS3BucketBucketLifecycleConfigurationDetails {
     Rules?: AwsS3BucketBucketLifecycleConfigurationRulesDetails[];
 }
 /**
+ * @public
  * <p>Describes the versioning state of an S3 bucket.</p>
  */
 export interface AwsS3BucketBucketVersioningConfiguration {
@@ -3569,6 +3686,7 @@ export interface AwsS3BucketBucketVersioningConfiguration {
     Status?: string;
 }
 /**
+ * @public
  * <p>Information about logging for
  *          the S3 bucket</p>
  */
@@ -3582,11 +3700,15 @@ export interface AwsS3BucketLoggingConfiguration {
      */
     LogFilePrefix?: string;
 }
+/**
+ * @public
+ */
 export declare enum AwsS3BucketNotificationConfigurationS3KeyFilterRuleName {
     PREFIX = "Prefix",
     SUFFIX = "Suffix"
 }
 /**
+ * @public
  * <p>Details for a filter rule.</p>
  */
 export interface AwsS3BucketNotificationConfigurationS3KeyFilterRule {
@@ -3600,6 +3722,7 @@ export interface AwsS3BucketNotificationConfigurationS3KeyFilterRule {
     Value?: string;
 }
 /**
+ * @public
  * <p>Details for an Amazon S3 filter.</p>
  */
 export interface AwsS3BucketNotificationConfigurationS3KeyFilter {
@@ -3609,6 +3732,7 @@ export interface AwsS3BucketNotificationConfigurationS3KeyFilter {
     FilterRules?: AwsS3BucketNotificationConfigurationS3KeyFilterRule[];
 }
 /**
+ * @public
  * <p>Filtering information for the notifications. The
  *          filtering is based on Amazon S3 key names.</p>
  */
@@ -3619,6 +3743,7 @@ export interface AwsS3BucketNotificationConfigurationFilter {
     S3KeyFilter?: AwsS3BucketNotificationConfigurationS3KeyFilter;
 }
 /**
+ * @public
  * <p>Details for an S3 bucket notification configuration.</p>
  */
 export interface AwsS3BucketNotificationConfigurationDetail {
@@ -3659,6 +3784,7 @@ export interface AwsS3BucketNotificationConfigurationDetail {
     Type?: string;
 }
 /**
+ * @public
  * <p>The notification
  *          configuration for the S3 bucket.</p>
  */
@@ -3669,6 +3795,7 @@ export interface AwsS3BucketNotificationConfiguration {
     Configurations?: AwsS3BucketNotificationConfigurationDetail[];
 }
 /**
+ * @public
  * <p>The redirect behavior for requests
  *          to the website.</p>
  */
@@ -3684,6 +3811,7 @@ export interface AwsS3BucketWebsiteConfigurationRedirectTo {
     Protocol?: string;
 }
 /**
+ * @public
  * <p>The condition that must be met in order to apply the routing rule.</p>
  */
 export interface AwsS3BucketWebsiteConfigurationRoutingRuleCondition {
@@ -3697,6 +3825,7 @@ export interface AwsS3BucketWebsiteConfigurationRoutingRuleCondition {
     KeyPrefixEquals?: string;
 }
 /**
+ * @public
  * <p>The rules to redirect the request if the condition in <code>Condition</code> is
  *          met.</p>
  */
@@ -3726,6 +3855,7 @@ export interface AwsS3BucketWebsiteConfigurationRoutingRuleRedirect {
     ReplaceKeyWith?: string;
 }
 /**
+ * @public
  * <p>A rule for redirecting requests
  *          to the website.</p>
  */
@@ -3741,6 +3871,7 @@ export interface AwsS3BucketWebsiteConfigurationRoutingRule {
     Redirect?: AwsS3BucketWebsiteConfigurationRoutingRuleRedirect;
 }
 /**
+ * @public
  * <p>Website parameters for the S3
  *          bucket.</p>
  */
@@ -3763,6 +3894,7 @@ export interface AwsS3BucketWebsiteConfiguration {
     RoutingRules?: AwsS3BucketWebsiteConfigurationRoutingRule[];
 }
 /**
+ * @public
  * <p>Specifies the default server-side encryption to apply to new objects in the
  *          bucket.</p>
  */
@@ -3778,6 +3910,7 @@ export interface AwsS3BucketServerSideEncryptionByDefault {
     KMSMasterKeyID?: string;
 }
 /**
+ * @public
  * <p>An encryption rule to apply to the S3 bucket.</p>
  */
 export interface AwsS3BucketServerSideEncryptionRule {
@@ -3789,6 +3922,7 @@ export interface AwsS3BucketServerSideEncryptionRule {
     ApplyServerSideEncryptionByDefault?: AwsS3BucketServerSideEncryptionByDefault;
 }
 /**
+ * @public
  * <p>The encryption configuration for the S3 bucket.</p>
  */
 export interface AwsS3BucketServerSideEncryptionConfiguration {
@@ -3798,6 +3932,7 @@ export interface AwsS3BucketServerSideEncryptionConfiguration {
     Rules?: AwsS3BucketServerSideEncryptionRule[];
 }
 /**
+ * @public
  * <p>The details of an Amazon S3 bucket.</p>
  */
 export interface AwsS3BucketDetails {
@@ -3854,6 +3989,7 @@ export interface AwsS3BucketDetails {
     BucketVersioningConfiguration?: AwsS3BucketBucketVersioningConfiguration;
 }
 /**
+ * @public
  * <p>Details about an Amazon S3 object.</p>
  */
 export interface AwsS3ObjectDetails {
@@ -3888,6 +4024,7 @@ export interface AwsS3ObjectDetails {
     SSEKMSKeyId?: string;
 }
 /**
+ * @public
  * <p>
  *          Information on the instance metadata service (IMDS) configuration of the notebook instance.
  *       </p>
@@ -3901,6 +4038,7 @@ export interface AwsSageMakerNotebookInstanceMetadataServiceConfigurationDetails
     MinimumInstanceMetadataServiceVersion?: string;
 }
 /**
+ * @public
  * <p>
  *          Provides details about an Amazon SageMaker notebook instance.
  *       </p>
@@ -4031,6 +4169,7 @@ export interface AwsSageMakerNotebookInstanceDetails {
     VolumeSizeInGB?: number;
 }
 /**
+ * @public
  * <p>Defines the rotation schedule for the secret.</p>
  */
 export interface AwsSecretsManagerSecretRotationRules {
@@ -4040,6 +4179,7 @@ export interface AwsSecretsManagerSecretRotationRules {
     AutomaticallyAfterDays?: number;
 }
 /**
+ * @public
  * <p>Details about an Secrets Manager secret.</p>
  */
 export interface AwsSecretsManagerSecretDetails {
@@ -4078,6 +4218,9 @@ export interface AwsSecretsManagerSecretDetails {
      */
     Description?: string;
 }
+/**
+ * @public
+ */
 export declare enum ComplianceStatus {
     FAILED = "FAILED",
     NOT_AVAILABLE = "NOT_AVAILABLE",
@@ -4085,6 +4228,7 @@ export declare enum ComplianceStatus {
     WARNING = "WARNING"
 }
 /**
+ * @public
  * <p>Provides additional context for the value of <code>Compliance.Status</code>.</p>
  */
 export interface StatusReason {
@@ -4100,6 +4244,7 @@ export interface StatusReason {
     Description?: string;
 }
 /**
+ * @public
  * <p>Contains finding details that are specific to control-based findings. Only returned for
  *          findings generated from controls.</p>
  */
@@ -4163,6 +4308,7 @@ export interface Compliance {
     AssociatedStandards?: AssociatedStandard[];
 }
 /**
+ * @public
  * <p>Details about a related finding.</p>
  */
 export interface RelatedFinding {
@@ -4175,6 +4321,9 @@ export interface RelatedFinding {
      */
     Id: string | undefined;
 }
+/**
+ * @public
+ */
 export declare enum SeverityLabel {
     CRITICAL = "CRITICAL",
     HIGH = "HIGH",
@@ -4183,6 +4332,7 @@ export declare enum SeverityLabel {
     MEDIUM = "MEDIUM"
 }
 /**
+ * @public
  * <p>The severity assigned to the finding by the finding provider.</p>
  */
 export interface FindingProviderSeverity {
@@ -4196,6 +4346,7 @@ export interface FindingProviderSeverity {
     Original?: string;
 }
 /**
+ * @public
  * <p>In a <code>BatchImportFindings</code> request, finding providers use <code>FindingProviderFields</code> to provide and update values for confidence, criticality, related findings, severity, and types.</p>
  */
 export interface FindingProviderFields {
@@ -4228,11 +4379,17 @@ export interface FindingProviderFields {
      */
     Types?: string[];
 }
+/**
+ * @public
+ */
 export declare enum MalwareState {
     OBSERVED = "OBSERVED",
     REMOVAL_FAILED = "REMOVAL_FAILED",
     REMOVED = "REMOVED"
 }
+/**
+ * @public
+ */
 export declare enum MalwareType {
     ADWARE = "ADWARE",
     BLENDED_THREAT = "BLENDED_THREAT",
@@ -4251,6 +4408,7 @@ export declare enum MalwareType {
     WORM = "WORM"
 }
 /**
+ * @public
  * <p>A list of malware related to a finding.</p>
  */
 export interface Malware {
@@ -4271,11 +4429,15 @@ export interface Malware {
      */
     State?: MalwareState | string;
 }
+/**
+ * @public
+ */
 export declare enum NetworkDirection {
     IN = "IN",
     OUT = "OUT"
 }
 /**
+ * @public
  * <p>A range of ports.</p>
  */
 export interface PortRange {
@@ -4289,6 +4451,7 @@ export interface PortRange {
     End?: number;
 }
 /**
+ * @public
  * <p>The details of network-related information about a finding.</p>
  */
 export interface Network {
@@ -4343,6 +4506,7 @@ export interface Network {
     DestinationDomain?: string;
 }
 /**
+ * @public
  * <p>Information about the destination of the next component in the network path.</p>
  */
 export interface NetworkPathComponentDetails {
@@ -4356,6 +4520,7 @@ export interface NetworkPathComponentDetails {
     PortRanges?: PortRange[];
 }
 /**
+ * @public
  * <p>Details about a network path component that occurs before or after the current
  *          component.</p>
  */
@@ -4374,6 +4539,7 @@ export interface NetworkHeader {
     Source?: NetworkPathComponentDetails;
 }
 /**
+ * @public
  * <p>Information about a network path component.</p>
  */
 export interface NetworkPathComponent {
@@ -4397,6 +4563,7 @@ export interface NetworkPathComponent {
     Ingress?: NetworkHeader;
 }
 /**
+ * @public
  * <p>A user-defined note added to a finding.</p>
  */
 export interface Note {
@@ -4417,6 +4584,7 @@ export interface Note {
     UpdatedAt: string | undefined;
 }
 /**
+ * @public
  * <p>Provides an overview of the patch compliance status for an instance against a selected
  *          compliance standard.</p>
  */
@@ -4479,6 +4647,7 @@ export interface PatchSummary {
     Operation?: string;
 }
 /**
+ * @public
  * <p>The details of process-related information about a finding.</p>
  */
 export interface ProcessDetails {
@@ -4513,11 +4682,15 @@ export interface ProcessDetails {
      */
     TerminatedAt?: string;
 }
+/**
+ * @public
+ */
 export declare enum RecordState {
     ACTIVE = "ACTIVE",
     ARCHIVED = "ARCHIVED"
 }
 /**
+ * @public
  * <p>A recommendation on how to remediate the issue identified in a finding.</p>
  */
 export interface Recommendation {
@@ -4531,6 +4704,7 @@ export interface Recommendation {
     Url?: string;
 }
 /**
+ * @public
  * <p>Details about the remediation steps for a finding.</p>
  */
 export interface Remediation {
@@ -4540,6 +4714,7 @@ export interface Remediation {
     Recommendation?: Recommendation;
 }
 /**
+ * @public
  * <p>An occurrence of sensitive data detected in a Microsoft Excel workbook, comma-separated value (CSV) file, or tab-separated value (TSV) file.</p>
  */
 export interface Cell {
@@ -4561,6 +4736,7 @@ export interface Cell {
     CellReference?: string;
 }
 /**
+ * @public
  * <p>Identifies where the sensitive data begins and ends.</p>
  */
 export interface Range {
@@ -4578,6 +4754,7 @@ export interface Range {
     StartColumn?: number;
 }
 /**
+ * @public
  * <p>An occurrence of sensitive data in an Adobe Portable Document Format (PDF) file.</p>
  */
 export interface Page {
@@ -4595,6 +4772,7 @@ export interface Page {
     OffsetRange?: Range;
 }
 /**
+ * @public
  * <p>An occurrence of sensitive data in an Apache Avro object container or an Apache Parquet file.</p>
  */
 export interface _Record {
@@ -4608,6 +4786,7 @@ export interface _Record {
     RecordIndex?: number;
 }
 /**
+ * @public
  * <p>The detected occurrences of sensitive data.</p>
  */
 export interface Occurrences {
@@ -4633,6 +4812,7 @@ export interface Occurrences {
     Cells?: Cell[];
 }
 /**
+ * @public
  * <p>The list of detected instances of sensitive data.</p>
  */
 export interface CustomDataIdentifiersDetections {
@@ -4654,6 +4834,7 @@ export interface CustomDataIdentifiersDetections {
     Occurrences?: Occurrences;
 }
 /**
+ * @public
  * <p>Contains an instance of sensitive data that was detected by a customer-defined identifier.</p>
  */
 export interface CustomDataIdentifiersResult {
@@ -4667,6 +4848,7 @@ export interface CustomDataIdentifiersResult {
     TotalCount?: number;
 }
 /**
+ * @public
  * <p>The list of detected instances of sensitive data.</p>
  */
 export interface SensitiveDataDetections {
@@ -4684,6 +4866,7 @@ export interface SensitiveDataDetections {
     Occurrences?: Occurrences;
 }
 /**
+ * @public
  * <p>Contains a detected instance of sensitive data that are based on built-in identifiers.</p>
  */
 export interface SensitiveDataResult {
@@ -4701,6 +4884,7 @@ export interface SensitiveDataResult {
     TotalCount?: number;
 }
 /**
+ * @public
  * <p>Provides details about the current status of the sensitive data detection.</p>
  */
 export interface ClassificationStatus {
@@ -4714,6 +4898,7 @@ export interface ClassificationStatus {
     Reason?: string;
 }
 /**
+ * @public
  * <p>Details about the sensitive data that was detected on the resource.</p>
  */
 export interface ClassificationResult {
@@ -4743,6 +4928,7 @@ export interface ClassificationResult {
     CustomDataIdentifiers?: CustomDataIdentifiersResult;
 }
 /**
+ * @public
  * <p>Provides details about sensitive data that was detected on a resource.</p>
  */
 export interface DataClassificationDetails {
@@ -4756,6 +4942,7 @@ export interface DataClassificationDetails {
     Result?: ClassificationResult;
 }
 /**
+ * @public
  * <p>A wrapper type for the attributes of an Amazon SNS subscription.</p>
  */
 export interface AwsSnsTopicSubscription {
@@ -4769,6 +4956,7 @@ export interface AwsSnsTopicSubscription {
     Protocol?: string;
 }
 /**
+ * @public
  * <p>Provides information about an Amazon SNS topic to which notifications can be published.</p>
  */
 export interface AwsSnsTopicDetails {
@@ -4824,6 +5012,7 @@ export interface AwsSnsTopicDetails {
     HttpFailureFeedbackRoleArn?: string;
 }
 /**
+ * @public
  * <p>Data about a queue.</p>
  */
 export interface AwsSqsQueueDetails {
@@ -4847,6 +5036,7 @@ export interface AwsSqsQueueDetails {
     DeadLetterTargetArn?: string;
 }
 /**
+ * @public
  * <p>Provides the details about the compliance status for a patch.</p>
  */
 export interface AwsSsmComplianceSummary {
@@ -4988,6 +5178,7 @@ export interface AwsSsmComplianceSummary {
     PatchGroup?: string;
 }
 /**
+ * @public
  * <p>Provides details about the compliance for a patch.</p>
  */
 export interface AwsSsmPatch {
@@ -4997,6 +5188,7 @@ export interface AwsSsmPatch {
     ComplianceSummary?: AwsSsmComplianceSummary;
 }
 /**
+ * @public
  * <p>Provides information about the state of a patch on an instance based on the patch
  *          baseline that was used to patch the instance.</p>
  */
@@ -5007,6 +5199,7 @@ export interface AwsSsmPatchComplianceDetails {
     Patch?: AwsSsmPatch;
 }
 /**
+ * @public
  * <p>A match predicate. A predicate might look for characteristics such as specific IP addresses, geographic locations, or sizes.</p>
  */
 export interface AwsWafRateBasedRuleMatchPredicate {
@@ -5063,6 +5256,7 @@ export interface AwsWafRateBasedRuleMatchPredicate {
     Type?: string;
 }
 /**
+ * @public
  * <p>Details about a rate-based rule for global resources. A rate-based rule provides settings to indicate when to allow, block, or count a request. Rate-based rules include the number of requests that arrive over a specified period of time.</p>
  */
 export interface AwsWafRateBasedRuleDetails {
@@ -5092,6 +5286,7 @@ export interface AwsWafRateBasedRuleDetails {
     MatchPredicates?: AwsWafRateBasedRuleMatchPredicate[];
 }
 /**
+ * @public
  * <p>Details for a match predicate. A predicate might look for characteristics such as specific IP addresses, geographic locations, or sizes.</p>
  */
 export interface AwsWafRegionalRateBasedRuleMatchPredicate {
@@ -5147,6 +5342,7 @@ export interface AwsWafRegionalRateBasedRuleMatchPredicate {
     Type?: string;
 }
 /**
+ * @public
  * <p>contains details about a rate-based rule for Regional resources. A rate-based rule provides settings to indicate when to allow, block, or count a request. Rate-based rules include the number of requests that arrive over a specified period of time.</p>
  */
 export interface AwsWafRegionalRateBasedRuleDetails {
@@ -5176,6 +5372,7 @@ export interface AwsWafRegionalRateBasedRuleDetails {
     MatchPredicates?: AwsWafRegionalRateBasedRuleMatchPredicate[];
 }
 /**
+ * @public
  * <p>Provides details about the <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>,
  *          <code>RegexMatchSet</code>, <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to add to a rule and, for each object, indicates whether you want to negate the settings.
  *       </p>
@@ -5200,6 +5397,7 @@ export interface AwsWafRegionalRulePredicateListDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides information about an WAF Regional rule. This rule identifies the web requests that you want to allow, block, or count. </p>
  */
 export interface AwsWafRegionalRuleDetails {
@@ -5227,6 +5425,7 @@ export interface AwsWafRegionalRuleDetails {
     RuleId?: string;
 }
 /**
+ * @public
  * <p>Describes the action that WAF should take on a web request when it matches the criteria defined in the rule.
  *       </p>
  */
@@ -5238,6 +5437,7 @@ export interface AwsWafRegionalRuleGroupRulesActionDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides information about the rules attached to a rule group
  *       </p>
  */
@@ -5263,6 +5463,7 @@ export interface AwsWafRegionalRuleGroupRulesDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides information about an WAF Regional rule group. The rule group is a collection of rules for inspecting and controlling web
  *          requests. </p>
  */
@@ -5290,6 +5491,7 @@ export interface AwsWafRegionalRuleGroupDetails {
     Rules?: AwsWafRegionalRuleGroupRulesDetails[];
 }
 /**
+ * @public
  * <p>The action that WAF takes when a web request matches all conditions in the
  *          rule, such as allow, block, or count the request. </p>
  */
@@ -5301,6 +5503,7 @@ export interface AwsWafRegionalWebAclRulesListActionDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides details about the action to use in the place of the action that results from the rule group
  * evaluation.
  *       </p>
@@ -5313,6 +5516,7 @@ export interface AwsWafRegionalWebAclRulesListOverrideActionDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>A combination of <code>ByteMatchSet</code>, <code>IPSet</code>, and/or <code>SqlInjectionMatchSet</code>
  * objects that identify the web requests that you want to allow, block, or count.
  *       </p>
@@ -5346,6 +5550,7 @@ export interface AwsWafRegionalWebAclRulesListDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides information about the web access control list (web ACL). The web ACL contains the rules that identify the requests that you
  *          want to allow, block, or count. </p>
  */
@@ -5378,6 +5583,7 @@ export interface AwsWafRegionalWebAclDetails {
     WebAclId?: string;
 }
 /**
+ * @public
  * <p>Provides details about the <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>,
  *          <code>RegexMatchSet</code>, <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to add to a rule and,
  * for each object, indicates whether you want to negate the settings.
@@ -5403,6 +5609,7 @@ export interface AwsWafRulePredicateListDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides information about a WAF rule. This rule specifies the web requests that you want to allow, block, or count.
  *       </p>
  */
@@ -5431,6 +5638,7 @@ export interface AwsWafRuleDetails {
     RuleId?: string;
 }
 /**
+ * @public
  * <p>Provides information about what action WAF should take on a web request when it matches the criteria defined in the rule.
  *       </p>
  */
@@ -5442,6 +5650,7 @@ export interface AwsWafRuleGroupRulesActionDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides information about the rules attached to the rule group. These rules identify the web requests that you want to
  *          allow, block, or count.
  *       </p>
@@ -5469,6 +5678,7 @@ export interface AwsWafRuleGroupRulesDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides information about an WAF rule group. A rule group is a collection of rules for inspecting and controlling web requests.
  *       </p>
  */
@@ -5496,6 +5706,7 @@ export interface AwsWafRuleGroupDetails {
     Rules?: AwsWafRuleGroupRulesDetails[];
 }
 /**
+ * @public
  * <p>
  *          A custom header for custom request and response handling.
  *       </p>
@@ -5515,6 +5726,7 @@ export interface AwsWafv2CustomHttpHeader {
     Value?: string;
 }
 /**
+ * @public
  * <p>
  *          Custom request handling behavior that inserts custom headers into a web request. WAF uses custom request handling when the rule action doesn't block the request.
  *       </p>
@@ -5528,6 +5740,7 @@ export interface AwsWafv2CustomRequestHandlingDetails {
     InsertHeaders?: AwsWafv2CustomHttpHeader[];
 }
 /**
+ * @public
  * <p>
  *          Specifies that WAF should allow the request and optionally defines additional custom handling for the request.
  *       </p>
@@ -5542,6 +5755,7 @@ export interface AwsWafv2ActionAllowDetails {
     CustomRequestHandling?: AwsWafv2CustomRequestHandlingDetails;
 }
 /**
+ * @public
  * <p>
  *          A custom response to send to the client. You can define a custom response for rule actions and default web ACL actions that are set to block.
  *       </p>
@@ -5568,6 +5782,7 @@ export interface AwsWafv2CustomResponseDetails {
     ResponseHeaders?: AwsWafv2CustomHttpHeader[];
 }
 /**
+ * @public
  * <p>
  *          Specifies that WAF should block the request and optionally defines additional custom handling for the response to the web request.
  *       </p>
@@ -5582,6 +5797,7 @@ export interface AwsWafv2ActionBlockDetails {
     CustomResponse?: AwsWafv2CustomResponseDetails;
 }
 /**
+ * @public
  * <p>
  *          Specifies that WAF should run a CAPTCHA check against the request.
  *       </p>
@@ -5596,6 +5812,7 @@ export interface AwsWafv2RulesActionCaptchaDetails {
     CustomRequestHandling?: AwsWafv2CustomRequestHandlingDetails;
 }
 /**
+ * @public
  * <p>
  *          Specifies that WAF should count the request.
  *       </p>
@@ -5610,6 +5827,7 @@ export interface AwsWafv2RulesActionCountDetails {
     CustomRequestHandling?: AwsWafv2CustomRequestHandlingDetails;
 }
 /**
+ * @public
  * <p>
  *          The action that WAF should take on a web request when it matches a rule's statement.
  *          Settings at the web ACL level can override the rule action setting.
@@ -5642,6 +5860,7 @@ export interface AwsWafv2RulesActionDetails {
     Count?: AwsWafv2RulesActionCountDetails;
 }
 /**
+ * @public
  * <p>
  *          Defines and enables Amazon CloudWatch metrics and web request sample collection.
  *       </p>
@@ -5669,6 +5888,7 @@ export interface AwsWafv2VisibilityConfigDetails {
     SampledRequestsEnabled?: boolean;
 }
 /**
+ * @public
  * <p>
  *          Provides details about rules in a rule group. A rule identifies web requests that you want to allow, block, or count. Each rule includes one top-level Statement that WAF uses to identify matching web requests, and parameters that govern how WAF handles them.
  *       </p>
@@ -5707,6 +5927,7 @@ export interface AwsWafv2RulesDetails {
     VisibilityConfig?: AwsWafv2VisibilityConfigDetails;
 }
 /**
+ * @public
  * <p>
  *          Details about an WAFv2 rule group.
  *       </p>
@@ -5766,6 +5987,7 @@ export interface AwsWafv2RuleGroupDetails {
     VisibilityConfig?: AwsWafv2VisibilityConfigDetails;
 }
 /**
+ * @public
  * <p>
  *          Used for CAPTCHA and challenge token settings. Determines how long a CAPTCHA or challenge timestamp remains valid after WAF updates it for a successful CAPTCHA or challenge response.
  *       </p>
@@ -5779,6 +6001,7 @@ export interface AwsWafv2WebAclCaptchaConfigImmunityTimePropertyDetails {
     ImmunityTime?: number;
 }
 /**
+ * @public
  * <p>
  *          Specifies how WAF should handle CAPTCHA evaluations for rules that don't have their own <code>CaptchaConfig</code> settings.
  *       </p>
@@ -5792,6 +6015,7 @@ export interface AwsWafv2WebAclCaptchaConfigDetails {
     ImmunityTimeProperty?: AwsWafv2WebAclCaptchaConfigImmunityTimePropertyDetails;
 }
 /**
+ * @public
  * <p>
  *          Specifies the action that Amazon CloudFront or WAF takes when a web request matches the conditions in the rule.
  *       </p>
@@ -5811,6 +6035,7 @@ export interface AwsWafv2WebAclActionDetails {
     Block?: AwsWafv2ActionBlockDetails;
 }
 /**
+ * @public
  * <p>
  *          Details about an WAFv2 web Access Control List (ACL).
  *       </p>
@@ -5881,6 +6106,7 @@ export interface AwsWafv2WebAclDetails {
     VisibilityConfig?: AwsWafv2VisibilityConfigDetails;
 }
 /**
+ * @public
  * <p>Details about the action that CloudFront or WAF takes when a web request matches the
  *          conditions in the rule. </p>
  */
@@ -5910,6 +6136,7 @@ export interface WafAction {
     Type?: string;
 }
 /**
+ * @public
  * <p>Details about a rule to exclude from a rule group.</p>
  */
 export interface WafExcludedRule {
@@ -5919,6 +6146,7 @@ export interface WafExcludedRule {
     RuleId?: string;
 }
 /**
+ * @public
  * <p>Details about an override action for a rule.</p>
  */
 export interface WafOverrideAction {
@@ -5931,6 +6159,7 @@ export interface WafOverrideAction {
     Type?: string;
 }
 /**
+ * @public
  * <p>Details for a rule in an WAF web ACL.</p>
  */
 export interface AwsWafWebAclRule {
@@ -5982,6 +6211,7 @@ export interface AwsWafWebAclRule {
     Type?: string;
 }
 /**
+ * @public
  * <p>Provides information about an WAF web access control list (web ACL).</p>
  */
 export interface AwsWafWebAclDetails {
@@ -6003,6 +6233,7 @@ export interface AwsWafWebAclDetails {
     WebAclId?: string;
 }
 /**
+ * @public
  * <p>Information about the encryption configuration for X-Ray.</p>
  */
 export interface AwsXrayEncryptionConfigDetails {
@@ -6021,6 +6252,7 @@ export interface AwsXrayEncryptionConfigDetails {
     Type?: string;
 }
 /**
+ * @public
  * <p>Describes the mounting of a volume in a container.
  *       </p>
  */
@@ -6037,6 +6269,7 @@ export interface VolumeMount {
     MountPath?: string;
 }
 /**
+ * @public
  * <p>Container details related to a finding.</p>
  */
 export interface ContainerDetails {
@@ -6077,6 +6310,7 @@ export interface ContainerDetails {
     Privileged?: boolean;
 }
 /**
+ * @public
  * <p>Additional details about a resource related to a finding.</p>
  *          <p>To provide the details, use the object that corresponds to the resource type. For
  *          example, if the resource type is <code>AwsEc2Instance</code>, then you use the
@@ -6454,12 +6688,16 @@ export interface ResourceDetails {
      */
     AwsWafv2RuleGroup?: AwsWafv2RuleGroupDetails;
 }
+/**
+ * @public
+ */
 export declare enum Partition {
     AWS = "aws",
     AWS_CN = "aws-cn",
     AWS_US_GOV = "aws-us-gov"
 }
 /**
+ * @public
  * <p>A resource related to a finding.</p>
  */
 export interface Resource {
@@ -6502,6 +6740,7 @@ export interface Resource {
     Details?: ResourceDetails;
 }
 /**
+ * @public
  * <p>The severity of the finding.</p>
  *          <p>The finding provider can provide the initial severity. The finding provider can only
  *          update the severity if it hasn't been updated using
@@ -6604,6 +6843,9 @@ export interface Severity {
      */
     Original?: string;
 }
+/**
+ * @public
+ */
 export declare enum ThreatIntelIndicatorCategory {
     BACKDOOR = "BACKDOOR",
     CARD_STEALER = "CARD_STEALER",
@@ -6612,6 +6854,9 @@ export declare enum ThreatIntelIndicatorCategory {
     EXPLOIT_SITE = "EXPLOIT_SITE",
     KEYLOGGER = "KEYLOGGER"
 }
+/**
+ * @public
+ */
 export declare enum ThreatIntelIndicatorType {
     DOMAIN = "DOMAIN",
     EMAIL_ADDRESS = "EMAIL_ADDRESS",
@@ -6626,6 +6871,7 @@ export declare enum ThreatIntelIndicatorType {
     URL = "URL"
 }
 /**
+ * @public
  * <p>Details about the threat intelligence related to a finding.</p>
  */
 export interface ThreatIntelIndicator {
@@ -6660,6 +6906,7 @@ export interface ThreatIntelIndicator {
     SourceUrl?: string;
 }
 /**
+ * @public
  * <p>Provides information about the file paths that were affected by the threat.
  * 		</p>
  */
@@ -6686,6 +6933,7 @@ export interface FilePaths {
     Hash?: string;
 }
 /**
+ * @public
  * <p>Provides information about the threat detected in a security finding and the file paths that were affected by the threat.
  * 		</p>
  */
@@ -6711,6 +6959,9 @@ export interface Threat {
      */
     FilePaths?: FilePaths[];
 }
+/**
+ * @public
+ */
 export declare enum VerificationState {
     BENIGN_POSITIVE = "BENIGN_POSITIVE",
     FALSE_POSITIVE = "FALSE_POSITIVE",
@@ -6718,6 +6969,7 @@ export declare enum VerificationState {
     UNKNOWN = "UNKNOWN"
 }
 /**
+ * @public
  * <p>CVSS scores from the advisory related to the vulnerability.</p>
  */
 export interface Cvss {
@@ -6742,12 +6994,16 @@ export interface Cvss {
      */
     Adjustments?: Adjustment[];
 }
+/**
+ * @public
+ */
 export declare enum VulnerabilityFixAvailable {
     NO = "NO",
     PARTIAL = "PARTIAL",
     YES = "YES"
 }
 /**
+ * @public
  * <p>A vendor that generates a vulnerability report.</p>
  */
 export interface VulnerabilityVendor {
@@ -6779,6 +7035,7 @@ export interface VulnerabilityVendor {
     VendorUpdatedAt?: string;
 }
 /**
+ * @public
  * <p>Information about a software package.</p>
  */
 export interface SoftwarePackage {
@@ -6832,6 +7089,7 @@ export interface SoftwarePackage {
     SourceLayerArn?: string;
 }
 /**
+ * @public
  * <p>A vulnerability associated with a finding.</p>
  */
 export interface Vulnerability {
@@ -6883,6 +7141,9 @@ export interface Vulnerability {
      */
     FixAvailable?: VulnerabilityFixAvailable | string;
 }
+/**
+ * @public
+ */
 export declare enum WorkflowStatus {
     NEW = "NEW",
     NOTIFIED = "NOTIFIED",
@@ -6890,6 +7151,7 @@ export declare enum WorkflowStatus {
     SUPPRESSED = "SUPPRESSED"
 }
 /**
+ * @public
  * <p>Provides information about the status of the investigation into a finding.</p>
  */
 export interface Workflow {
@@ -6935,6 +7197,9 @@ export interface Workflow {
      */
     Status?: WorkflowStatus | string;
 }
+/**
+ * @public
+ */
 export declare enum WorkflowState {
     ASSIGNED = "ASSIGNED",
     DEFERRED = "DEFERRED",
@@ -6943,6 +7208,7 @@ export declare enum WorkflowState {
     RESOLVED = "RESOLVED"
 }
 /**
+ * @public
  * <p>Provides a consistent format for Security Hub findings.
  *          <code>AwsSecurityFinding</code> format allows you to share findings between Amazon Web Services
  *          security services and third-party solutions.</p>
@@ -7167,6 +7433,9 @@ export interface AwsSecurityFinding {
      */
     Sample?: boolean;
 }
+/**
+ * @public
+ */
 export declare enum StringFilterComparison {
     EQUALS = "EQUALS",
     NOT_EQUALS = "NOT_EQUALS",
@@ -7174,6 +7443,7 @@ export declare enum StringFilterComparison {
     PREFIX_NOT_EQUALS = "PREFIX_NOT_EQUALS"
 }
 /**
+ * @public
  * <p>A string filter for querying findings.</p>
  */
 export interface StringFilter {
@@ -7267,6 +7537,7 @@ export interface StringFilter {
     Comparison?: StringFilterComparison | string;
 }
 /**
+ * @public
  * <p>A number filter for querying findings.</p>
  */
 export interface NumberFilter {
@@ -7286,10 +7557,14 @@ export interface NumberFilter {
      */
     Eq?: number;
 }
+/**
+ * @public
+ */
 export declare enum DateRangeUnit {
     DAYS = "DAYS"
 }
 /**
+ * @public
  * <p>A date range for the date filter.</p>
  */
 export interface DateRange {
@@ -7303,6 +7578,7 @@ export interface DateRange {
     Unit?: DateRangeUnit | string;
 }
 /**
+ * @public
  * <p>A date filter for querying findings.</p>
  */
 export interface DateFilter {
@@ -7324,6 +7600,7 @@ export interface DateFilter {
     DateRange?: DateRange;
 }
 /**
+ * @public
  * <p>A keyword filter for querying findings.</p>
  */
 export interface KeywordFilter {
@@ -7333,6 +7610,7 @@ export interface KeywordFilter {
     Value?: string;
 }
 /**
+ * @public
  * <p>The IP filter for querying findings.</p>
  */
 export interface IpFilter {
@@ -7341,11 +7619,15 @@ export interface IpFilter {
      */
     Cidr?: string;
 }
+/**
+ * @public
+ */
 export declare enum MapFilterComparison {
     EQUALS = "EQUALS",
     NOT_EQUALS = "NOT_EQUALS"
 }
 /**
+ * @public
  * <p>A map filter for querying findings. Each map filter provides the field to check, the
  *          value to look for, and the comparison operator.</p>
  */
@@ -7385,6 +7667,7 @@ export interface MapFilter {
     Comparison?: MapFilterComparison | string;
 }
 /**
+ * @public
  * <p>Boolean filter for querying findings.</p>
  */
 export interface BooleanFilter {
@@ -7394,6 +7677,7 @@ export interface BooleanFilter {
     Value?: boolean;
 }
 /**
+ * @public
  * <p>A collection of attributes that are applied to all active Security Hub-aggregated findings and
  *          that result in a subset of findings that are included in this insight.</p>
  *          <p>You can filter by up to 10 finding attributes. For each attribute, you can provide up to
@@ -7915,6 +8199,7 @@ export interface AwsSecurityFindingFilters {
     ComplianceAssociatedStandardsId?: StringFilter[];
 }
 /**
+ * @public
  * <p>Identifies a finding to update using <code>BatchUpdateFindings</code>.</p>
  */
 export interface AwsSecurityFindingIdentifier {
@@ -7929,12 +8214,18 @@ export interface AwsSecurityFindingIdentifier {
      */
     ProductArn: string | undefined;
 }
+/**
+ * @public
+ */
 export interface BatchDisableStandardsRequest {
     /**
      * <p>The ARNs of the standards subscriptions to disable.</p>
      */
     StandardsSubscriptionArns: string[] | undefined;
 }
+/**
+ * @public
+ */
 export declare enum StandardsStatus {
     DELETING = "DELETING",
     FAILED = "FAILED",
@@ -7942,11 +8233,15 @@ export declare enum StandardsStatus {
     PENDING = "PENDING",
     READY = "READY"
 }
+/**
+ * @public
+ */
 export declare enum StatusReasonCode {
     INTERNAL_ERROR = "INTERNAL_ERROR",
     NO_AVAILABLE_CONFIGURATION_RECORDER = "NO_AVAILABLE_CONFIGURATION_RECORDER"
 }
 /**
+ * @public
  * <p>The reason for the current status of a standard subscription.</p>
  */
 export interface StandardsStatusReason {
@@ -7956,6 +8251,7 @@ export interface StandardsStatusReason {
     StatusReasonCode: StatusReasonCode | string | undefined;
 }
 /**
+ * @public
  * <p>A resource that represents your subscription to a supported standard.</p>
  */
 export interface StandardsSubscription {
@@ -8003,6 +8299,9 @@ export interface StandardsSubscription {
      */
     StandardsStatusReason?: StandardsStatusReason;
 }
+/**
+ * @public
+ */
 export interface BatchDisableStandardsResponse {
     /**
      * <p>The details of the standards subscriptions that were disabled.</p>
@@ -8010,6 +8309,7 @@ export interface BatchDisableStandardsResponse {
     StandardsSubscriptions?: StandardsSubscription[];
 }
 /**
+ * @public
  * <p>The standard that you want to enable.</p>
  */
 export interface StandardsSubscriptionRequest {
@@ -8023,18 +8323,27 @@ export interface StandardsSubscriptionRequest {
      */
     StandardsInput?: Record<string, string>;
 }
+/**
+ * @public
+ */
 export interface BatchEnableStandardsRequest {
     /**
      * <p>The list of standards checks to enable.</p>
      */
     StandardsSubscriptionRequests: StandardsSubscriptionRequest[] | undefined;
 }
+/**
+ * @public
+ */
 export interface BatchEnableStandardsResponse {
     /**
      * <p>The details of the standards subscriptions that were enabled.</p>
      */
     StandardsSubscriptions?: StandardsSubscription[];
 }
+/**
+ * @public
+ */
 export interface BatchGetSecurityControlsRequest {
     /**
      * <p> A list of security controls (identified with <code>SecurityControlId</code>,
@@ -8043,10 +8352,16 @@ export interface BatchGetSecurityControlsRequest {
      */
     SecurityControlIds: string[] | undefined;
 }
+/**
+ * @public
+ */
 export declare enum ControlStatus {
     DISABLED = "DISABLED",
     ENABLED = "ENABLED"
 }
+/**
+ * @public
+ */
 export declare enum SeverityRating {
     CRITICAL = "CRITICAL",
     HIGH = "HIGH",
@@ -8054,6 +8369,7 @@ export declare enum SeverityRating {
     MEDIUM = "MEDIUM"
 }
 /**
+ * @public
  * <p>
  *          A security control in Security Hub describes a security best practice related to a specific resource.
  *       </p>
@@ -8106,6 +8422,9 @@ export interface SecurityControl {
      */
     SecurityControlStatus: ControlStatus | string | undefined;
 }
+/**
+ * @public
+ */
 export declare enum UnprocessedErrorCode {
     ACCESS_DENIED = "ACCESS_DENIED",
     INVALID_INPUT = "INVALID_INPUT",
@@ -8113,6 +8432,7 @@ export declare enum UnprocessedErrorCode {
     NOT_FOUND = "NOT_FOUND"
 }
 /**
+ * @public
  * <p> Provides details about a security control for which a response couldn't be returned. </p>
  */
 export interface UnprocessedSecurityControl {
@@ -8135,6 +8455,9 @@ export interface UnprocessedSecurityControl {
      */
     ErrorReason?: string;
 }
+/**
+ * @public
+ */
 export interface BatchGetSecurityControlsResponse {
     /**
      * <p>
@@ -8152,6 +8475,7 @@ export interface BatchGetSecurityControlsResponse {
     UnprocessedIds?: UnprocessedSecurityControl[];
 }
 /**
+ * @public
  * <p>
  *          An array with one or more objects that includes a security control (identified with <code>SecurityControlId</code>, <code>SecurityControlArn</code>, or a mix of both parameters)
  *          and the Amazon Resource Name (ARN) of a standard. The security control ID or ARN is the same across standards.
@@ -8172,6 +8496,9 @@ export interface StandardsControlAssociationId {
      */
     StandardsArn: string | undefined;
 }
+/**
+ * @public
+ */
 export interface BatchGetStandardsControlAssociationsRequest {
     /**
      * <p>
@@ -8182,6 +8509,7 @@ export interface BatchGetStandardsControlAssociationsRequest {
     StandardsControlAssociationIds: StandardsControlAssociationId[] | undefined;
 }
 /**
+ * @public
  * <p> Provides details about a control's enablement status in a specified standard. </p>
  */
 export interface StandardsControlAssociationDetail {
@@ -8248,6 +8576,7 @@ export interface StandardsControlAssociationDetail {
     StandardsControlArns?: string[];
 }
 /**
+ * @public
  * <p> Provides details about which
  *          control's enablement status couldn't be retrieved in a specified standard when calling <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateStandardsControlAssociations.html">BatchUpdateStandardsControlAssociations</a>. This parameter also provides details
  *          about why the request was unprocessed. </p>
@@ -8271,6 +8600,9 @@ export interface UnprocessedStandardsControlAssociation {
      */
     ErrorReason?: string;
 }
+/**
+ * @public
+ */
 export interface BatchGetStandardsControlAssociationsResponse {
     /**
      * <p>Provides the enablement status of a security control in a specified standard and other details for the control in relation to
@@ -8286,6 +8618,9 @@ export interface BatchGetStandardsControlAssociationsResponse {
      */
     UnprocessedAssociations?: UnprocessedStandardsControlAssociation[];
 }
+/**
+ * @public
+ */
 export interface BatchImportFindingsRequest {
     /**
      * <p>A list of findings to import. To successfully import a finding, it must follow the
@@ -8294,6 +8629,7 @@ export interface BatchImportFindingsRequest {
     Findings: AwsSecurityFinding[] | undefined;
 }
 /**
+ * @public
  * <p>The list of the findings that cannot be imported. For each finding, the list provides
  *          the error.</p>
  */
@@ -8312,6 +8648,9 @@ export interface ImportFindingsError {
      */
     ErrorMessage: string | undefined;
 }
+/**
+ * @public
+ */
 export interface BatchImportFindingsResponse {
     /**
      * <p>The number of findings that failed to import.</p>
@@ -8327,6 +8666,7 @@ export interface BatchImportFindingsResponse {
     FailedFindings?: ImportFindingsError[];
 }
 /**
+ * @public
  * <p>The updated note.</p>
  */
 export interface NoteUpdate {
@@ -8340,6 +8680,7 @@ export interface NoteUpdate {
     UpdatedBy: string | undefined;
 }
 /**
+ * @public
  * <p>Updates to the severity information for a finding.</p>
  */
 export interface SeverityUpdate {
@@ -8406,6 +8747,7 @@ export interface SeverityUpdate {
     Label?: SeverityLabel | string;
 }
 /**
+ * @public
  * <p>Used to update information about the investigation into the finding.</p>
  */
 export interface WorkflowUpdate {
@@ -8449,6 +8791,9 @@ export interface WorkflowUpdate {
      */
     Status?: WorkflowStatus | string;
 }
+/**
+ * @public
+ */
 export interface BatchUpdateFindingsRequest {
     /**
      * <p>The list of findings to update. <code>BatchUpdateFindings</code> can be used to update
@@ -8544,6 +8889,7 @@ export interface BatchUpdateFindingsRequest {
     RelatedFindings?: RelatedFinding[];
 }
 /**
+ * @public
  * <p>A finding from a <code>BatchUpdateFindings</code> request that Security Hub was unable to
  *          update.</p>
  */
@@ -8625,6 +8971,9 @@ export interface BatchUpdateFindingsUnprocessedFinding {
      */
     ErrorMessage: string | undefined;
 }
+/**
+ * @public
+ */
 export interface BatchUpdateFindingsResponse {
     /**
      * <p>The list of findings that were updated successfully.</p>
@@ -8636,6 +8985,7 @@ export interface BatchUpdateFindingsResponse {
     UnprocessedFindings: BatchUpdateFindingsUnprocessedFinding[] | undefined;
 }
 /**
+ * @public
  * <p>An array of requested updates to the enablement status of controls in specified
  *          standards. The objects in the array include a security control ID, the Amazon Resource Name (ARN) of the standard, the requested
  *          enablement status, and the reason for updating the enablement status.</p>
@@ -8659,6 +9009,9 @@ export interface StandardsControlAssociationUpdate {
      */
     UpdatedReason?: string;
 }
+/**
+ * @public
+ */
 export interface BatchUpdateStandardsControlAssociationsRequest {
     /**
      * <p>
@@ -8668,6 +9021,7 @@ export interface BatchUpdateStandardsControlAssociationsRequest {
     StandardsControlAssociationUpdates: StandardsControlAssociationUpdate[] | undefined;
 }
 /**
+ * @public
  * <p>Provides details about which control's enablement status could not be updated in a
  *          specified standard when calling the <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateStandardsControlAssociations.html">BatchUpdateStandardsControlAssociations</a> API. This parameter also provides
  *          details about why the request was unprocessed. </p>
@@ -8689,6 +9043,9 @@ export interface UnprocessedStandardsControlAssociationUpdate {
      */
     ErrorReason?: string;
 }
+/**
+ * @public
+ */
 export interface BatchUpdateStandardsControlAssociationsResponse {
     /**
      * <p>
@@ -8697,10 +9054,16 @@ export interface BatchUpdateStandardsControlAssociationsResponse {
      */
     UnprocessedAssociationUpdates?: UnprocessedStandardsControlAssociationUpdate[];
 }
+/**
+ * @public
+ */
 export declare enum ControlFindingGenerator {
     SECURITY_CONTROL = "SECURITY_CONTROL",
     STANDARD_CONTROL = "STANDARD_CONTROL"
 }
+/**
+ * @public
+ */
 export interface CreateActionTargetRequest {
     /**
      * <p>The name of the custom action target. Can contain up to 20 characters.</p>
@@ -8715,6 +9078,9 @@ export interface CreateActionTargetRequest {
      */
     Id: string | undefined;
 }
+/**
+ * @public
+ */
 export interface CreateActionTargetResponse {
     /**
      * <p>The Amazon Resource Name (ARN) for the custom action target.</p>
@@ -8722,6 +9088,7 @@ export interface CreateActionTargetResponse {
     ActionTargetArn: string | undefined;
 }
 /**
+ * @public
  * <p>The resource specified in the request conflicts with an existing resource.</p>
  */
 export declare class ResourceConflictException extends __BaseException {
@@ -8734,6 +9101,9 @@ export declare class ResourceConflictException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<ResourceConflictException, __BaseException>);
 }
+/**
+ * @public
+ */
 export interface CreateFindingAggregatorRequest {
     /**
      * <p>Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them.</p>
@@ -8765,6 +9135,9 @@ export interface CreateFindingAggregatorRequest {
      */
     Regions?: string[];
 }
+/**
+ * @public
+ */
 export interface CreateFindingAggregatorResponse {
     /**
      * <p>The ARN of the finding aggregator. You use the finding aggregator ARN to retrieve details for, update, and stop finding aggregation.</p>
@@ -8783,6 +9156,9 @@ export interface CreateFindingAggregatorResponse {
      */
     Regions?: string[];
 }
+/**
+ * @public
+ */
 export interface CreateInsightRequest {
     /**
      * <p>The name of the custom insight to create.</p>
@@ -8801,12 +9177,18 @@ export interface CreateInsightRequest {
      */
     GroupByAttribute: string | undefined;
 }
+/**
+ * @public
+ */
 export interface CreateInsightResponse {
     /**
      * <p>The ARN of the insight created.</p>
      */
     InsightArn: string | undefined;
 }
+/**
+ * @public
+ */
 export interface CreateMembersRequest {
     /**
      * <p>The list of accounts to associate with the Security Hub administrator account. For each account, the
@@ -8815,6 +9197,7 @@ export interface CreateMembersRequest {
     AccountDetails: AccountDetails[] | undefined;
 }
 /**
+ * @public
  * <p>Details about the account that was not processed.</p>
  */
 export interface Result {
@@ -8827,6 +9210,9 @@ export interface Result {
      */
     ProcessingResult?: string;
 }
+/**
+ * @public
+ */
 export interface CreateMembersResponse {
     /**
      * <p>The list of Amazon Web Services accounts that were not processed. For each account, the list includes
@@ -8834,6 +9220,9 @@ export interface CreateMembersResponse {
      */
     UnprocessedAccounts?: Result[];
 }
+/**
+ * @public
+ */
 export interface DeclineInvitationsRequest {
     /**
      * <p>The list of account IDs for the accounts from which to decline the invitations to
@@ -8841,6 +9230,9 @@ export interface DeclineInvitationsRequest {
      */
     AccountIds: string[] | undefined;
 }
+/**
+ * @public
+ */
 export interface DeclineInvitationsResponse {
     /**
      * <p>The list of Amazon Web Services accounts that were not processed. For each account, the list includes
@@ -8848,12 +9240,18 @@ export interface DeclineInvitationsResponse {
      */
     UnprocessedAccounts?: Result[];
 }
+/**
+ * @public
+ */
 export interface DeleteActionTargetRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the custom action target to delete.</p>
      */
     ActionTargetArn: string | undefined;
 }
+/**
+ * @public
+ */
 export interface DeleteActionTargetResponse {
     /**
      * <p>The ARN of the custom action target that was deleted.</p>