@aws-sdk/client-securityhub 3.298.0 → 3.300.0

package/dist-types/models/models_1.d.ts

@@ -1,6 +1,135 @@
 import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-client";
-import { AccountDetails, Action, Adjustment, AssociatedStandard, AssociationStatus, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsBackupBackupPlanDetails, AwsBackupBackupVaultDetails, AwsBackupRecoveryPointDetails, AwsCertificateManagerCertificateDetails, AwsCloudFormationStackDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCloudWatchAlarmDetails, AwsCodeBuildProjectDetails, AwsDynamoDbTableDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2LaunchTemplateDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2TransitGatewayDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpcEndpointServiceDetails, AwsEc2VpcPeeringConnectionDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcrRepositoryDetails, AwsEcsClusterDetails, AwsEcsContainerDetails, AwsEcsServiceDetails, AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointDetails, AwsEksClusterDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsIamAccessKeyDetails, AwsIamAttachedManagedPolicy } from "./models_0";
+import { Action, Adjustment, AssociatedStandard, AssociationStatus, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsBackupBackupPlanDetails, AwsBackupBackupVaultDetails, AwsBackupRecoveryPointDetails, AwsCertificateManagerCertificateDetails, AwsCloudFormationStackDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCloudWatchAlarmDetails, AwsCodeBuildProjectDetails, AwsDynamoDbTableDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2LaunchTemplateDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2RouteTableDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2TransitGatewayDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpcEndpointServiceDetails, AwsEc2VpcPeeringConnectionDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcrRepositoryDetails, AwsEcsClusterDetails, AwsEcsContainerDetails, AwsEcsServiceDetails, AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointDetails, AwsEksClusterDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails } from "./models_0";
 import { SecurityHubServiceException as __BaseException } from "./SecurityHubServiceException";
+/**
+ * @public
+ * <p>Attributes of the session that the key was used for.</p>
+ */
+export interface AwsIamAccessKeySessionContextAttributes {
+    /**
+     * <p>Indicates whether the session used multi-factor authentication (MFA).</p>
+     */
+    MfaAuthenticated?: boolean;
+    /**
+     * <p>Indicates when the session was created.</p>
+     *          <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
+     *             Date/Time Format</a>. The value cannot contain spaces, and date and time should be separated by <code>T</code>. For example,
+     *             <code>2020-03-22T13:22:13.933Z</code>.</p>
+     */
+    CreationDate?: string;
+}
+/**
+ * @public
+ * <p>Information about the entity that created the session.</p>
+ */
+export interface AwsIamAccessKeySessionContextSessionIssuer {
+    /**
+     * <p>The type of principal (user, role, or group) that created the session.</p>
+     */
+    Type?: string;
+    /**
+     * <p>The principal ID of the principal (user, role, or group) that created the
+     *          session.</p>
+     */
+    PrincipalId?: string;
+    /**
+     * <p>The ARN of the session.</p>
+     */
+    Arn?: string;
+    /**
+     * <p>The identifier of the Amazon Web Services account that created the session.</p>
+     */
+    AccountId?: string;
+    /**
+     * <p>The name of the principal that created the session.</p>
+     */
+    UserName?: string;
+}
+/**
+ * @public
+ * <p>Provides information about the session that the key was used for.</p>
+ */
+export interface AwsIamAccessKeySessionContext {
+    /**
+     * <p>Attributes of the session that the key was used for.</p>
+     */
+    Attributes?: AwsIamAccessKeySessionContextAttributes;
+    /**
+     * <p>Information about the entity that created the session.</p>
+     */
+    SessionIssuer?: AwsIamAccessKeySessionContextSessionIssuer;
+}
+/**
+ * @public
+ */
+export declare enum AwsIamAccessKeyStatus {
+    ACTIVE = "Active",
+    INACTIVE = "Inactive"
+}
+/**
+ * @public
+ * <p>IAM access key details related to a finding.</p>
+ */
+export interface AwsIamAccessKeyDetails {
+    /**
+     * @deprecated
+     *
+     * <p>The user associated with the IAM access key related to a finding.</p>
+     *          <p>The <code>UserName</code> parameter has been replaced with the
+     *             <code>PrincipalName</code> parameter because access keys can also be assigned to
+     *          principals that are not IAM users.</p>
+     */
+    UserName?: string;
+    /**
+     * <p>The status of the IAM access key related to a finding.</p>
+     */
+    Status?: AwsIamAccessKeyStatus | string;
+    /**
+     * <p>Indicates when the IAM access key was created.</p>
+     *          <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
+     *             Date/Time Format</a>. The value cannot contain spaces, and date and time should be separated by <code>T</code>. For example,
+     *             <code>2020-03-22T13:22:13.933Z</code>.</p>
+     */
+    CreatedAt?: string;
+    /**
+     * <p>The ID of the principal associated with an access key.</p>
+     */
+    PrincipalId?: string;
+    /**
+     * <p>The type of principal associated with an access key.</p>
+     */
+    PrincipalType?: string;
+    /**
+     * <p>The name of the principal.</p>
+     */
+    PrincipalName?: string;
+    /**
+     * <p>The Amazon Web Services account ID of the account for the key.</p>
+     */
+    AccountId?: string;
+    /**
+     * <p>The identifier of the access key.</p>
+     */
+    AccessKeyId?: string;
+    /**
+     * <p>Information about the session that the key was used for.</p>
+     */
+    SessionContext?: AwsIamAccessKeySessionContext;
+}
+/**
+ * @public
+ * <p>A managed policy that is attached to an IAM principal.</p>
+ */
+export interface AwsIamAttachedManagedPolicy {
+    /**
+     * <p>The name of the policy.</p>
+     */
+    PolicyName?: string;
+    /**
+     * <p>The ARN of the policy.</p>
+     */
+    PolicyArn?: string;
+}
 /**
  * @public
  * <p>A managed policy that is attached to the IAM group.</p>
@@ -3893,6 +4022,66 @@ export interface AwsS3BucketWebsiteConfiguration {
      */
     RoutingRules?: AwsS3BucketWebsiteConfigurationRoutingRule[];
 }
+/**
+ * @public
+ * <p>
+ *          The default S3 Object Lock retention mode and period that you want to apply to new objects placed in the specified Amazon S3 bucket.
+ *       </p>
+ */
+export interface AwsS3BucketObjectLockConfigurationRuleDefaultRetentionDetails {
+    /**
+     * <p>
+     *          The number of days that you want to specify for the default retention period.
+     *       </p>
+     */
+    Days?: number;
+    /**
+     * <p>
+     *          The default Object Lock retention mode you want to apply to new objects placed in the specified bucket.
+     *       </p>
+     */
+    Mode?: string;
+    /**
+     * <p>
+     *          The number of years that you want to specify for the default retention period.
+     *       </p>
+     */
+    Years?: number;
+}
+/**
+ * @public
+ * <p>
+ *          Specifies the S3 Object Lock rule for the specified object. In Amazon S3, Object Lock can help prevent objects from being deleted or overwritten for a fixed amount of time or indefinitely.
+ *       </p>
+ */
+export interface AwsS3BucketObjectLockConfigurationRuleDetails {
+    /**
+     * <p>
+     *          The default Object Lock retention mode and period that you want to apply to new objects placed in the specified bucket.
+     *       </p>
+     */
+    DefaultRetention?: AwsS3BucketObjectLockConfigurationRuleDefaultRetentionDetails;
+}
+/**
+ * @public
+ * <p>
+ *          The container element for S3 Object Lock configuration parameters. In Amazon S3, Object Lock can help prevent objects from being deleted or overwritten for a fixed amount of time or indefinitely.
+ *       </p>
+ */
+export interface AwsS3BucketObjectLockConfiguration {
+    /**
+     * <p>
+     *          Indicates whether the bucket has an Object Lock configuration enabled.
+     *       </p>
+     */
+    ObjectLockEnabled?: string;
+    /**
+     * <p>
+     *          Specifies the Object Lock rule for the specified object.
+     *       </p>
+     */
+    Rule?: AwsS3BucketObjectLockConfigurationRuleDetails;
+}
 /**
  * @public
  * <p>Specifies the default server-side encryption to apply to new objects in the
@@ -3987,6 +4176,12 @@ export interface AwsS3BucketDetails {
      * <p>The versioning state of an S3 bucket.</p>
      */
     BucketVersioningConfiguration?: AwsS3BucketBucketVersioningConfiguration;
+    /**
+     * <p>
+     *          Specifies which rule Amazon S3 applies by default to every new object placed in the specified bucket.
+     *       </p>
+     */
+    ObjectLockConfiguration?: AwsS3BucketObjectLockConfiguration;
 }
 /**
  * @public
@@ -4664,7 +4859,7 @@ export interface ProcessDetails {
      */
     Pid?: number;
     /**
-     * <p>The parent process ID.</p>
+     * <p>The parent process ID. This field accepts positive integers between <code>O</code> and <code>2147483647</code>.</p>
      */
     ParentPid?: number;
     /**
@@ -6687,6 +6882,13 @@ export interface ResourceDetails {
      *       </p>
      */
     AwsWafv2RuleGroup?: AwsWafv2RuleGroupDetails;
+    /**
+     * <p>
+     *          Provides details about a route table. A route table contains a set of rules, called routes, that
+     *          determine where to direct network traffic from your subnet or gateway.
+     *       </p>
+     */
+    AwsEc2RouteTable?: AwsEc2RouteTableDetails;
 }
 /**
  * @public
@@ -7877,7 +8079,7 @@ export interface AwsSecurityFindingFilters {
      */
     ProcessPid?: NumberFilter[];
     /**
-     * <p>The parent process ID.</p>
+     * <p>The parent process ID. This field accepts positive integers between <code>O</code> and <code>2147483647</code>.</p>
      */
     ProcessParentPid?: NumberFilter[];
     /**
@@ -9156,105 +9358,3 @@ export interface CreateFindingAggregatorResponse {
      */
     Regions?: string[];
 }
-/**
- * @public
- */
-export interface CreateInsightRequest {
-    /**
-     * <p>The name of the custom insight to create.</p>
-     */
-    Name: string | undefined;
-    /**
-     * <p>One or more attributes used to filter the findings included in the insight. The insight
-     *          only includes findings that match the criteria defined in the filters.</p>
-     */
-    Filters: AwsSecurityFindingFilters | undefined;
-    /**
-     * <p>The attribute used to group the findings for the insight. The grouping attribute
-     *          identifies the type of item that the insight applies to. For example, if an insight is
-     *          grouped by resource identifier, then the insight produces a list of resource
-     *          identifiers.</p>
-     */
-    GroupByAttribute: string | undefined;
-}
-/**
- * @public
- */
-export interface CreateInsightResponse {
-    /**
-     * <p>The ARN of the insight created.</p>
-     */
-    InsightArn: string | undefined;
-}
-/**
- * @public
- */
-export interface CreateMembersRequest {
-    /**
-     * <p>The list of accounts to associate with the Security Hub administrator account. For each account, the
-     *          list includes the account ID and optionally the email address.</p>
-     */
-    AccountDetails: AccountDetails[] | undefined;
-}
-/**
- * @public
- * <p>Details about the account that was not processed.</p>
- */
-export interface Result {
-    /**
-     * <p>An Amazon Web Services account ID of the account that was not processed.</p>
-     */
-    AccountId?: string;
-    /**
-     * <p>The reason that the account was not processed.</p>
-     */
-    ProcessingResult?: string;
-}
-/**
- * @public
- */
-export interface CreateMembersResponse {
-    /**
-     * <p>The list of Amazon Web Services accounts that were not processed. For each account, the list includes
-     *          the account ID and the email address.</p>
-     */
-    UnprocessedAccounts?: Result[];
-}
-/**
- * @public
- */
-export interface DeclineInvitationsRequest {
-    /**
-     * <p>The list of account IDs for the accounts from which to decline the invitations to
-     *          Security Hub.</p>
-     */
-    AccountIds: string[] | undefined;
-}
-/**
- * @public
- */
-export interface DeclineInvitationsResponse {
-    /**
-     * <p>The list of Amazon Web Services accounts that were not processed. For each account, the list includes
-     *          the account ID and the email address.</p>
-     */
-    UnprocessedAccounts?: Result[];
-}
-/**
- * @public
- */
-export interface DeleteActionTargetRequest {
-    /**
-     * <p>The Amazon Resource Name (ARN) of the custom action target to delete.</p>
-     */
-    ActionTargetArn: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteActionTargetResponse {
-    /**
-     * <p>The ARN of the custom action target that was deleted.</p>
-     */
-    ActionTargetArn: string | undefined;
-}

package/dist-types/models/models_2.d.ts

@@ -1,5 +1,106 @@
-import { ActionTarget, AdminAccount, AssociationStatus, AutoEnableStandards } from "./models_0";
-import { AwsSecurityFinding, AwsSecurityFindingFilters, ControlFindingGenerator, ControlStatus, NoteUpdate, RecordState, Result, SeverityRating, StandardsSubscription } from "./models_1";
+import { AccountDetails, ActionTarget, AdminAccount, AssociationStatus, AutoEnableStandards } from "./models_0";
+import { AwsSecurityFinding, AwsSecurityFindingFilters, ControlFindingGenerator, ControlStatus, NoteUpdate, RecordState, SeverityRating, StandardsSubscription } from "./models_1";
+/**
+ * @public
+ */
+export interface CreateInsightRequest {
+    /**
+     * <p>The name of the custom insight to create.</p>
+     */
+    Name: string | undefined;
+    /**
+     * <p>One or more attributes used to filter the findings included in the insight. The insight
+     *          only includes findings that match the criteria defined in the filters.</p>
+     */
+    Filters: AwsSecurityFindingFilters | undefined;
+    /**
+     * <p>The attribute used to group the findings for the insight. The grouping attribute
+     *          identifies the type of item that the insight applies to. For example, if an insight is
+     *          grouped by resource identifier, then the insight produces a list of resource
+     *          identifiers.</p>
+     */
+    GroupByAttribute: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateInsightResponse {
+    /**
+     * <p>The ARN of the insight created.</p>
+     */
+    InsightArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateMembersRequest {
+    /**
+     * <p>The list of accounts to associate with the Security Hub administrator account. For each account, the
+     *          list includes the account ID and optionally the email address.</p>
+     */
+    AccountDetails: AccountDetails[] | undefined;
+}
+/**
+ * @public
+ * <p>Details about the account that was not processed.</p>
+ */
+export interface Result {
+    /**
+     * <p>An Amazon Web Services account ID of the account that was not processed.</p>
+     */
+    AccountId?: string;
+    /**
+     * <p>The reason that the account was not processed.</p>
+     */
+    ProcessingResult?: string;
+}
+/**
+ * @public
+ */
+export interface CreateMembersResponse {
+    /**
+     * <p>The list of Amazon Web Services accounts that were not processed. For each account, the list includes
+     *          the account ID and the email address.</p>
+     */
+    UnprocessedAccounts?: Result[];
+}
+/**
+ * @public
+ */
+export interface DeclineInvitationsRequest {
+    /**
+     * <p>The list of prospective member account IDs for which to decline an invitation.</p>
+     */
+    AccountIds: string[] | undefined;
+}
+/**
+ * @public
+ */
+export interface DeclineInvitationsResponse {
+    /**
+     * <p>The list of Amazon Web Services accounts that were not processed. For each account, the list includes
+     *          the account ID and the email address.</p>
+     */
+    UnprocessedAccounts?: Result[];
+}
+/**
+ * @public
+ */
+export interface DeleteActionTargetRequest {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the custom action target to delete.</p>
+     */
+    ActionTargetArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteActionTargetResponse {
+    /**
+     * <p>The ARN of the custom action target that was deleted.</p>
+     */
+    ActionTargetArn: string | undefined;
+}
 /**
  * @public
  */
@@ -37,7 +138,7 @@ export interface DeleteInsightResponse {
  */
 export interface DeleteInvitationsRequest {
     /**
-     * <p>The list of the account IDs that sent the invitations to delete.</p>
+     * <p>The list of member account IDs that received the invitations you want to delete.</p>
      */
     AccountIds: string[] | undefined;
 }
@@ -142,7 +243,7 @@ export interface DescribeHubResponse {
      *          for a control check when the check applies to multiple enabled standards.</p>
      *          <p>The value for this field in a member account matches the value in the administrator
      *          account. For accounts that aren't part of an organization, the default value of this field
-     *          is <code>SECURITY_CONTROL</code> if you enabled Security Hub on or after February 9,
+     *          is <code>SECURITY_CONTROL</code> if you enabled Security Hub on or after February 23,
      *          2023.</p>
      */
     ControlFindingGenerator?: ControlFindingGenerator | string;
@@ -574,7 +675,7 @@ export interface EnableSecurityHubRequest {
      *       for a control check when the check applies to multiple enabled standards.</p>
      *          <p>The value for this field in a member account matches the value in the administrator
      *          account. For accounts that aren't part of an organization, the default value of this field
-     *          is <code>SECURITY_CONTROL</code> if you enabled Security Hub on or after February 9,
+     *          is <code>SECURITY_CONTROL</code> if you enabled Security Hub on or after February 23,
      *          2023.</p>
      */
     ControlFindingGenerator?: ControlFindingGenerator | string;

package/dist-types/ts3.4/commands/CreateInsightCommand.d.ts

@@ -9,7 +9,7 @@ import {
 import {
   CreateInsightRequest,
   CreateInsightResponse,
-} from "../models/models_1";
+} from "../models/models_2";
 import {
   SecurityHubClientResolvedConfig,
   ServiceInputTypes,

package/dist-types/ts3.4/commands/CreateMembersCommand.d.ts

@@ -9,7 +9,7 @@ import {
 import {
   CreateMembersRequest,
   CreateMembersResponse,
-} from "../models/models_1";
+} from "../models/models_2";
 import {
   SecurityHubClientResolvedConfig,
   ServiceInputTypes,

package/dist-types/ts3.4/commands/DeclineInvitationsCommand.d.ts

@@ -9,7 +9,7 @@ import {
 import {
   DeclineInvitationsRequest,
   DeclineInvitationsResponse,
-} from "../models/models_1";
+} from "../models/models_2";
 import {
   SecurityHubClientResolvedConfig,
   ServiceInputTypes,

package/dist-types/ts3.4/commands/DeleteActionTargetCommand.d.ts

@@ -9,7 +9,7 @@ import {
 import {
   DeleteActionTargetRequest,
   DeleteActionTargetResponse,
-} from "../models/models_1";
+} from "../models/models_2";
 import {
   SecurityHubClientResolvedConfig,
   ServiceInputTypes,

package/dist-types/ts3.4/models/models_0.d.ts

@@ -163,6 +163,18 @@ export interface AdminAccount {
 export interface AssociatedStandard {
   StandardsId?: string;
 }
+export interface AssociationStateDetails {
+  State?: string;
+  StatusMessage?: string;
+}
+export interface AssociationSetDetails {
+  AssociationState?: AssociationStateDetails;
+  GatewayId?: string;
+  Main?: boolean;
+  RouteTableAssociationId?: string;
+  RouteTableId?: string;
+  SubnetId?: string;
+}
 export declare enum AssociationStatus {
   DISABLED = "DISABLED",
   ENABLED = "ENABLED",
@@ -815,6 +827,9 @@ export interface AwsEc2InstanceMetadataOptions {
   HttpTokens?: string;
   InstanceMetadataTags?: string;
 }
+export interface AwsEc2InstanceMonitoringDetails {
+  State?: string;
+}
 export interface AwsEc2InstanceNetworkInterfacesDetails {
   NetworkInterfaceId?: string;
 }
@@ -831,6 +846,7 @@ export interface AwsEc2InstanceDetails {
   NetworkInterfaces?: AwsEc2InstanceNetworkInterfacesDetails[];
   VirtualizationType?: string;
   MetadataOptions?: AwsEc2InstanceMetadataOptions;
+  Monitoring?: AwsEc2InstanceMonitoringDetails;
 }
 export interface AwsEc2LaunchTemplateDataBlockDeviceMappingSetEbsDetails {
   DeleteOnTermination?: boolean;
@@ -1111,6 +1127,35 @@ export interface AwsEc2NetworkInterfaceDetails {
   PublicDnsName?: string;
   PublicIp?: string;
 }
+export interface PropagatingVgwSetDetails {
+  GatewayId?: string;
+}
+export interface RouteSetDetails {
+  CarrierGatewayId?: string;
+  CoreNetworkArn?: string;
+  DestinationCidrBlock?: string;
+  DestinationIpv6CidrBlock?: string;
+  DestinationPrefixListId?: string;
+  EgressOnlyInternetGatewayId?: string;
+  GatewayId?: string;
+  InstanceId?: string;
+  InstanceOwnerId?: string;
+  LocalGatewayId?: string;
+  NatGatewayId?: string;
+  NetworkInterfaceId?: string;
+  Origin?: string;
+  State?: string;
+  TransitGatewayId?: string;
+  VpcPeeringConnectionId?: string;
+}
+export interface AwsEc2RouteTableDetails {
+  AssociationSet?: AssociationSetDetails[];
+  OwnerId?: string;
+  PropagatingVgwSet?: PropagatingVgwSetDetails[];
+  RouteTableId?: string;
+  RouteSet?: RouteSetDetails[];
+  VpcId?: string;
+}
 export interface AwsEc2SecurityGroupIpRange {
   CidrIp?: string;
 }
@@ -1685,6 +1730,7 @@ export interface AwsEksClusterLoggingDetails {
 export interface AwsEksClusterResourcesVpcConfigDetails {
   SecurityGroupIds?: string[];
   SubnetIds?: string[];
+  EndpointPublicAccess?: boolean;
 }
 export interface AwsEksClusterDetails {
   Arn?: string;
@@ -1901,37 +1947,3 @@ export interface AwsElbv2LoadBalancerDetails {
   VpcId?: string;
   LoadBalancerAttributes?: AwsElbv2LoadBalancerAttribute[];
 }
-export interface AwsIamAccessKeySessionContextAttributes {
-  MfaAuthenticated?: boolean;
-  CreationDate?: string;
-}
-export interface AwsIamAccessKeySessionContextSessionIssuer {
-  Type?: string;
-  PrincipalId?: string;
-  Arn?: string;
-  AccountId?: string;
-  UserName?: string;
-}
-export interface AwsIamAccessKeySessionContext {
-  Attributes?: AwsIamAccessKeySessionContextAttributes;
-  SessionIssuer?: AwsIamAccessKeySessionContextSessionIssuer;
-}
-export declare enum AwsIamAccessKeyStatus {
-  ACTIVE = "Active",
-  INACTIVE = "Inactive",
-}
-export interface AwsIamAccessKeyDetails {
-  UserName?: string;
-  Status?: AwsIamAccessKeyStatus | string;
-  CreatedAt?: string;
-  PrincipalId?: string;
-  PrincipalType?: string;
-  PrincipalName?: string;
-  AccountId?: string;
-  AccessKeyId?: string;
-  SessionContext?: AwsIamAccessKeySessionContext;
-}
-export interface AwsIamAttachedManagedPolicy {
-  PolicyName?: string;
-  PolicyArn?: string;
-}