@aws-sdk/client-securityhub 3.315.0 → 3.317.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (59) hide show
  1. package/dist-cjs/SecurityHub.js +65 -854
  2. package/dist-es/SecurityHub.js +65 -854
  3. package/dist-types/SecurityHub.d.ts +113 -480
  4. package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +12 -0
  5. package/dist-types/commands/BatchDisableStandardsCommand.d.ts +25 -0
  6. package/dist-types/commands/BatchEnableStandardsCommand.d.ts +27 -0
  7. package/dist-types/commands/BatchImportFindingsCommand.d.ts +47 -0
  8. package/dist-types/commands/BatchUpdateFindingsCommand.d.ts +60 -0
  9. package/dist-types/commands/CreateActionTargetCommand.d.ts +18 -0
  10. package/dist-types/commands/CreateFindingAggregatorCommand.d.ts +26 -0
  11. package/dist-types/commands/CreateInsightCommand.d.ts +31 -0
  12. package/dist-types/commands/CreateMembersCommand.d.ts +23 -0
  13. package/dist-types/commands/DeclineInvitationsCommand.d.ts +19 -0
  14. package/dist-types/commands/DeleteActionTargetCommand.d.ts +16 -0
  15. package/dist-types/commands/DeleteFindingAggregatorCommand.d.ts +11 -0
  16. package/dist-types/commands/DeleteInsightCommand.d.ts +16 -0
  17. package/dist-types/commands/DeleteInvitationsCommand.d.ts +18 -0
  18. package/dist-types/commands/DeleteMembersCommand.d.ts +19 -0
  19. package/dist-types/commands/DescribeActionTargetsCommand.d.ts +24 -0
  20. package/dist-types/commands/DescribeHubCommand.d.ts +19 -0
  21. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +16 -0
  22. package/dist-types/commands/DescribeProductsCommand.d.ts +39 -0
  23. package/dist-types/commands/DescribeStandardsCommand.d.ts +39 -0
  24. package/dist-types/commands/DescribeStandardsControlsCommand.d.ts +46 -0
  25. package/dist-types/commands/DisableImportFindingsForProductCommand.d.ts +11 -0
  26. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +11 -0
  27. package/dist-types/commands/DisableSecurityHubCommand.d.ts +9 -0
  28. package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +9 -0
  29. package/dist-types/commands/DisassociateMembersCommand.d.ts +14 -0
  30. package/dist-types/commands/EnableImportFindingsForProductCommand.d.ts +16 -0
  31. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +11 -0
  32. package/dist-types/commands/EnableSecurityHubCommand.d.ts +14 -0
  33. package/dist-types/commands/GetAdministratorAccountCommand.d.ts +19 -0
  34. package/dist-types/commands/GetEnabledStandardsCommand.d.ts +25 -0
  35. package/dist-types/commands/GetFindingAggregatorCommand.d.ts +22 -0
  36. package/dist-types/commands/GetFindingsCommand.d.ts +111 -0
  37. package/dist-types/commands/GetInsightResultsCommand.d.ts +29 -0
  38. package/dist-types/commands/GetInsightsCommand.d.ts +38 -0
  39. package/dist-types/commands/GetInvitationsCountCommand.d.ts +16 -0
  40. package/dist-types/commands/GetMembersCommand.d.ts +37 -0
  41. package/dist-types/commands/InviteMembersCommand.d.ts +19 -0
  42. package/dist-types/commands/ListEnabledProductsForImportCommand.d.ts +17 -0
  43. package/dist-types/commands/ListFindingAggregatorsCommand.d.ts +18 -0
  44. package/dist-types/commands/ListInvitationsCommand.d.ts +21 -0
  45. package/dist-types/commands/ListMembersCommand.d.ts +31 -0
  46. package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +21 -0
  47. package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +44 -0
  48. package/dist-types/commands/ListStandardsControlAssociationsCommand.d.ts +44 -0
  49. package/dist-types/commands/ListTagsForResourceCommand.d.ts +19 -0
  50. package/dist-types/commands/TagResourceCommand.d.ts +15 -0
  51. package/dist-types/commands/UntagResourceCommand.d.ts +14 -0
  52. package/dist-types/commands/UpdateActionTargetCommand.d.ts +13 -0
  53. package/dist-types/commands/UpdateFindingAggregatorCommand.d.ts +27 -0
  54. package/dist-types/commands/UpdateInsightCommand.d.ts +26 -0
  55. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +11 -0
  56. package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +12 -0
  57. package/dist-types/commands/UpdateStandardsControlCommand.d.ts +13 -0
  58. package/dist-types/ts3.4/SecurityHub.d.ts +4 -1
  59. package/package.json +6 -6
@@ -61,789 +61,422 @@ import { UpdateOrganizationConfigurationCommandInput, UpdateOrganizationConfigur
61
61
  import { UpdateSecurityHubConfigurationCommandInput, UpdateSecurityHubConfigurationCommandOutput } from "./commands/UpdateSecurityHubConfigurationCommand";
62
62
  import { UpdateStandardsControlCommandInput, UpdateStandardsControlCommandOutput } from "./commands/UpdateStandardsControlCommand";
63
63
  import { SecurityHubClient } from "./SecurityHubClient";
64
- /**
65
- * @public
66
- * <p>Security Hub provides you with a comprehensive view of the security state of
67
- * your Amazon Web Services environment and resources. It also provides you with the readiness
68
- * status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
69
- * integrated third-party products and helps you analyze security trends in your environment
70
- * to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
71
- * Guide</a>.</p>
72
- * <p>When you use operations in the Security Hub API, the requests are executed only in
73
- * the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
74
- * that results from the operation is applied only to that Region. To make the same change in
75
- * other Regions, run the same command for each Region in which you want to apply the change.</p>
76
- * <p>For example, if your Region is set to <code>us-west-2</code>, when you use <code>CreateMembers</code> to add a member account to Security Hub, the association of
77
- * the member account with the administrator account is created only in the <code>us-west-2</code>
78
- * Region. Security Hub must be enabled for the member account in the same Region that the invitation
79
- * was sent from.</p>
80
- * <p>The following throttling limits apply to using Security Hub API operations.</p>
81
- * <ul>
82
- * <li>
83
- * <p>
84
- * <code>BatchEnableStandards</code> - <code>RateLimit</code> of 1 request per
85
- * second. <code>BurstLimit</code> of 1 request per second.</p>
86
- * </li>
87
- * <li>
88
- * <p>
89
- * <code>GetFindings</code> - <code>RateLimit</code> of 3 requests per second.
90
- * <code>BurstLimit</code> of 6 requests per second.</p>
91
- * </li>
92
- * <li>
93
- * <p>
94
- * <code>BatchImportFindings</code> - <code>RateLimit</code> of 10 requests per second.
95
- * <code>BurstLimit</code> of 30 requests per second.</p>
96
- * </li>
97
- * <li>
98
- * <p>
99
- * <code>BatchUpdateFindings</code> - <code>RateLimit</code> of 10 requests per second.
100
- * <code>BurstLimit</code> of 30 requests per second.</p>
101
- * </li>
102
- * <li>
103
- * <p>
104
- * <code>UpdateStandardsControl</code> - <code>RateLimit</code> of 1 request per
105
- * second. <code>BurstLimit</code> of 5 requests per second.</p>
106
- * </li>
107
- * <li>
108
- * <p>All other operations - <code>RateLimit</code> of 10 requests per second.
109
- * <code>BurstLimit</code> of 30 requests per second.</p>
110
- * </li>
111
- * </ul>
112
- */
113
- export declare class SecurityHub extends SecurityHubClient {
64
+ export interface SecurityHub {
114
65
  /**
115
- * @public
116
- * <p>Accepts the invitation to be a member account and be monitored by the Security Hub administrator
117
- * account that the invitation was sent from.</p>
118
- * <p>This operation is only used by member accounts that are not added through
119
- * Organizations.</p>
120
- * <p>When the member account accepts the invitation, permission is granted to the administrator
121
- * account to view findings generated in the member account.</p>
66
+ * @see {@link AcceptAdministratorInvitationCommand}
122
67
  */
123
68
  acceptAdministratorInvitation(args: AcceptAdministratorInvitationCommandInput, options?: __HttpHandlerOptions): Promise<AcceptAdministratorInvitationCommandOutput>;
124
69
  acceptAdministratorInvitation(args: AcceptAdministratorInvitationCommandInput, cb: (err: any, data?: AcceptAdministratorInvitationCommandOutput) => void): void;
125
70
  acceptAdministratorInvitation(args: AcceptAdministratorInvitationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AcceptAdministratorInvitationCommandOutput) => void): void;
126
71
  /**
127
- * @public
128
- * @deprecated
129
- *
130
- * <p>This method is deprecated. Instead, use <code>AcceptAdministratorInvitation</code>.</p>
131
- * <p>The Security Hub console continues to use <code>AcceptInvitation</code>. It will eventually change to use <code>AcceptAdministratorInvitation</code>. Any IAM policies that specifically control access to this function must continue to use <code>AcceptInvitation</code>. You should also add <code>AcceptAdministratorInvitation</code> to your policies to ensure that the correct permissions are in place after the console begins to use <code>AcceptAdministratorInvitation</code>.</p>
132
- * <p>Accepts the invitation to be a member account and be monitored by the Security Hub administrator
133
- * account that the invitation was sent from.</p>
134
- * <p>This operation is only used by member accounts that are not added through
135
- * Organizations.</p>
136
- * <p>When the member account accepts the invitation, permission is granted to the administrator
137
- * account to view findings generated in the member account.</p>
72
+ * @see {@link AcceptInvitationCommand}
138
73
  */
139
74
  acceptInvitation(args: AcceptInvitationCommandInput, options?: __HttpHandlerOptions): Promise<AcceptInvitationCommandOutput>;
140
75
  acceptInvitation(args: AcceptInvitationCommandInput, cb: (err: any, data?: AcceptInvitationCommandOutput) => void): void;
141
76
  acceptInvitation(args: AcceptInvitationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: AcceptInvitationCommandOutput) => void): void;
142
77
  /**
143
- * @public
144
- * <p>Disables the standards specified by the provided
145
- * <code>StandardsSubscriptionArns</code>.</p>
146
- * <p>For more information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards.html">Security Standards</a> section of the <i>Security Hub User
147
- * Guide</i>.</p>
78
+ * @see {@link BatchDisableStandardsCommand}
148
79
  */
149
80
  batchDisableStandards(args: BatchDisableStandardsCommandInput, options?: __HttpHandlerOptions): Promise<BatchDisableStandardsCommandOutput>;
150
81
  batchDisableStandards(args: BatchDisableStandardsCommandInput, cb: (err: any, data?: BatchDisableStandardsCommandOutput) => void): void;
151
82
  batchDisableStandards(args: BatchDisableStandardsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: BatchDisableStandardsCommandOutput) => void): void;
152
83
  /**
153
- * @public
154
- * <p>Enables the standards specified by the provided <code>StandardsArn</code>. To obtain the
155
- * ARN for a standard, use the <code>DescribeStandards</code>
156
- * operation.</p>
157
- * <p>For more information, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards.html">Security Standards</a>
158
- * section of the <i>Security Hub User Guide</i>.</p>
84
+ * @see {@link BatchEnableStandardsCommand}
159
85
  */
160
86
  batchEnableStandards(args: BatchEnableStandardsCommandInput, options?: __HttpHandlerOptions): Promise<BatchEnableStandardsCommandOutput>;
161
87
  batchEnableStandards(args: BatchEnableStandardsCommandInput, cb: (err: any, data?: BatchEnableStandardsCommandOutput) => void): void;
162
88
  batchEnableStandards(args: BatchEnableStandardsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: BatchEnableStandardsCommandOutput) => void): void;
163
89
  /**
164
- * @public
165
- * <p>
166
- * Provides details about a batch of security controls for the current Amazon Web Services account and Amazon Web Services Region.
167
- * </p>
90
+ * @see {@link BatchGetSecurityControlsCommand}
168
91
  */
169
92
  batchGetSecurityControls(args: BatchGetSecurityControlsCommandInput, options?: __HttpHandlerOptions): Promise<BatchGetSecurityControlsCommandOutput>;
170
93
  batchGetSecurityControls(args: BatchGetSecurityControlsCommandInput, cb: (err: any, data?: BatchGetSecurityControlsCommandOutput) => void): void;
171
94
  batchGetSecurityControls(args: BatchGetSecurityControlsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: BatchGetSecurityControlsCommandOutput) => void): void;
172
95
  /**
173
- * @public
174
- * <p>
175
- * For a batch of security controls and standards, identifies whether each control is currently enabled or disabled in a standard.
176
- * </p>
96
+ * @see {@link BatchGetStandardsControlAssociationsCommand}
177
97
  */
178
98
  batchGetStandardsControlAssociations(args: BatchGetStandardsControlAssociationsCommandInput, options?: __HttpHandlerOptions): Promise<BatchGetStandardsControlAssociationsCommandOutput>;
179
99
  batchGetStandardsControlAssociations(args: BatchGetStandardsControlAssociationsCommandInput, cb: (err: any, data?: BatchGetStandardsControlAssociationsCommandOutput) => void): void;
180
100
  batchGetStandardsControlAssociations(args: BatchGetStandardsControlAssociationsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: BatchGetStandardsControlAssociationsCommandOutput) => void): void;
181
101
  /**
182
- * @public
183
- * <p>Imports security findings generated by a finding provider into Security Hub.
184
- * This action is requested by the finding provider to import its findings into
185
- * Security Hub.</p>
186
- * <p>
187
- * <code>BatchImportFindings</code> must be called by one of the following:</p>
188
- * <ul>
189
- * <li>
190
- * <p>The Amazon Web Services account that is associated with a finding if you are using
191
- * the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-custom-providers.html#securityhub-custom-providers-bfi-reqs">default product ARN</a>
192
- * or are a partner sending findings from within a customer's Amazon Web Services account.
193
- * In these cases, the identifier of the account that you are calling <code>BatchImportFindings</code>
194
- * from needs to be the same as the <code>AwsAccountId</code> attribute for the finding.</p>
195
- * </li>
196
- * <li>
197
- * <p>An Amazon Web Services account that Security Hub has allow-listed for an official partner
198
- * integration. In this case, you can call <code>BatchImportFindings</code> from the allow-listed
199
- * account and send findings from different customer accounts in the same batch.</p>
200
- * </li>
201
- * </ul>
202
- * <p>The maximum allowed size for a finding is 240 Kb. An error is returned for any finding
203
- * larger than 240 Kb.</p>
204
- * <p>After a finding is created, <code>BatchImportFindings</code> cannot be used to update
205
- * the following finding fields and objects, which Security Hub customers use to manage their
206
- * investigation workflow.</p>
207
- * <ul>
208
- * <li>
209
- * <p>
210
- * <code>Note</code>
211
- * </p>
212
- * </li>
213
- * <li>
214
- * <p>
215
- * <code>UserDefinedFields</code>
216
- * </p>
217
- * </li>
218
- * <li>
219
- * <p>
220
- * <code>VerificationState</code>
221
- * </p>
222
- * </li>
223
- * <li>
224
- * <p>
225
- * <code>Workflow</code>
226
- * </p>
227
- * </li>
228
- * </ul>
229
- * <p>Finding providers also should not use <code>BatchImportFindings</code> to update the following attributes.</p>
230
- * <ul>
231
- * <li>
232
- * <p>
233
- * <code>Confidence</code>
234
- * </p>
235
- * </li>
236
- * <li>
237
- * <p>
238
- * <code>Criticality</code>
239
- * </p>
240
- * </li>
241
- * <li>
242
- * <p>
243
- * <code>RelatedFindings</code>
244
- * </p>
245
- * </li>
246
- * <li>
247
- * <p>
248
- * <code>Severity</code>
249
- * </p>
250
- * </li>
251
- * <li>
252
- * <p>
253
- * <code>Types</code>
254
- * </p>
255
- * </li>
256
- * </ul>
257
- * <p>Instead, finding providers use <code>FindingProviderFields</code> to provide values for these attributes.</p>
102
+ * @see {@link BatchImportFindingsCommand}
258
103
  */
259
104
  batchImportFindings(args: BatchImportFindingsCommandInput, options?: __HttpHandlerOptions): Promise<BatchImportFindingsCommandOutput>;
260
105
  batchImportFindings(args: BatchImportFindingsCommandInput, cb: (err: any, data?: BatchImportFindingsCommandOutput) => void): void;
261
106
  batchImportFindings(args: BatchImportFindingsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: BatchImportFindingsCommandOutput) => void): void;
262
107
  /**
263
- * @public
264
- * <p>Used by Security Hub customers to update information about their investigation into a finding.
265
- * Requested by administrator accounts or member accounts. Administrator accounts can update findings for
266
- * their account and their member accounts. Member accounts can update findings for their
267
- * account.</p>
268
- * <p>Updates from <code>BatchUpdateFindings</code> do not affect the value of
269
- * <code>UpdatedAt</code> for a finding.</p>
270
- * <p>Administrator and member accounts can use <code>BatchUpdateFindings</code> to update the
271
- * following finding fields and objects.</p>
272
- * <ul>
273
- * <li>
274
- * <p>
275
- * <code>Confidence</code>
276
- * </p>
277
- * </li>
278
- * <li>
279
- * <p>
280
- * <code>Criticality</code>
281
- * </p>
282
- * </li>
283
- * <li>
284
- * <p>
285
- * <code>Note</code>
286
- * </p>
287
- * </li>
288
- * <li>
289
- * <p>
290
- * <code>RelatedFindings</code>
291
- * </p>
292
- * </li>
293
- * <li>
294
- * <p>
295
- * <code>Severity</code>
296
- * </p>
297
- * </li>
298
- * <li>
299
- * <p>
300
- * <code>Types</code>
301
- * </p>
302
- * </li>
303
- * <li>
304
- * <p>
305
- * <code>UserDefinedFields</code>
306
- * </p>
307
- * </li>
308
- * <li>
309
- * <p>
310
- * <code>VerificationState</code>
311
- * </p>
312
- * </li>
313
- * <li>
314
- * <p>
315
- * <code>Workflow</code>
316
- * </p>
317
- * </li>
318
- * </ul>
319
- * <p>You can configure IAM policies to restrict access to fields and field values. For
320
- * example, you might not want member accounts to be able to suppress findings or change the
321
- * finding severity. See <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/finding-update-batchupdatefindings.html#batchupdatefindings-configure-access">Configuring access to BatchUpdateFindings</a> in the
322
- * <i>Security Hub User Guide</i>.</p>
108
+ * @see {@link BatchUpdateFindingsCommand}
323
109
  */
324
110
  batchUpdateFindings(args: BatchUpdateFindingsCommandInput, options?: __HttpHandlerOptions): Promise<BatchUpdateFindingsCommandOutput>;
325
111
  batchUpdateFindings(args: BatchUpdateFindingsCommandInput, cb: (err: any, data?: BatchUpdateFindingsCommandOutput) => void): void;
326
112
  batchUpdateFindings(args: BatchUpdateFindingsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: BatchUpdateFindingsCommandOutput) => void): void;
327
113
  /**
328
- * @public
329
- * <p>
330
- * For a batch of security controls and standards, this operation updates the enablement status of a control in a standard.
331
- * </p>
114
+ * @see {@link BatchUpdateStandardsControlAssociationsCommand}
332
115
  */
333
116
  batchUpdateStandardsControlAssociations(args: BatchUpdateStandardsControlAssociationsCommandInput, options?: __HttpHandlerOptions): Promise<BatchUpdateStandardsControlAssociationsCommandOutput>;
334
117
  batchUpdateStandardsControlAssociations(args: BatchUpdateStandardsControlAssociationsCommandInput, cb: (err: any, data?: BatchUpdateStandardsControlAssociationsCommandOutput) => void): void;
335
118
  batchUpdateStandardsControlAssociations(args: BatchUpdateStandardsControlAssociationsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: BatchUpdateStandardsControlAssociationsCommandOutput) => void): void;
336
119
  /**
337
- * @public
338
- * <p>Creates a custom action target in Security Hub.</p>
339
- * <p>You can use custom actions on findings and insights in Security Hub to trigger target actions
340
- * in Amazon CloudWatch Events.</p>
120
+ * @see {@link CreateActionTargetCommand}
341
121
  */
342
122
  createActionTarget(args: CreateActionTargetCommandInput, options?: __HttpHandlerOptions): Promise<CreateActionTargetCommandOutput>;
343
123
  createActionTarget(args: CreateActionTargetCommandInput, cb: (err: any, data?: CreateActionTargetCommandOutput) => void): void;
344
124
  createActionTarget(args: CreateActionTargetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateActionTargetCommandOutput) => void): void;
345
125
  /**
346
- * @public
347
- * <p>Used to enable finding aggregation. Must be called from the aggregation Region.</p>
348
- * <p>For more details about cross-Region replication, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html">Configuring finding aggregation</a> in the <i>Security Hub User Guide</i>.
349
- * </p>
126
+ * @see {@link CreateFindingAggregatorCommand}
350
127
  */
351
128
  createFindingAggregator(args: CreateFindingAggregatorCommandInput, options?: __HttpHandlerOptions): Promise<CreateFindingAggregatorCommandOutput>;
352
129
  createFindingAggregator(args: CreateFindingAggregatorCommandInput, cb: (err: any, data?: CreateFindingAggregatorCommandOutput) => void): void;
353
130
  createFindingAggregator(args: CreateFindingAggregatorCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateFindingAggregatorCommandOutput) => void): void;
354
131
  /**
355
- * @public
356
- * <p>Creates a custom insight in Security Hub. An insight is a consolidation of findings that relate
357
- * to a security issue that requires attention or remediation.</p>
358
- * <p>To group the related findings in the insight, use the
359
- * <code>GroupByAttribute</code>.</p>
132
+ * @see {@link CreateInsightCommand}
360
133
  */
361
134
  createInsight(args: CreateInsightCommandInput, options?: __HttpHandlerOptions): Promise<CreateInsightCommandOutput>;
362
135
  createInsight(args: CreateInsightCommandInput, cb: (err: any, data?: CreateInsightCommandOutput) => void): void;
363
136
  createInsight(args: CreateInsightCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateInsightCommandOutput) => void): void;
364
137
  /**
365
- * @public
366
- * <p>Creates a member association in Security Hub between the specified accounts and the account
367
- * used to make the request, which is the administrator account. If you are integrated with
368
- * Organizations, then the administrator account is designated by the organization management account.</p>
369
- * <p>
370
- * <code>CreateMembers</code> is always used to add accounts that are not organization
371
- * members.</p>
372
- * <p>For accounts that are managed using Organizations, <code>CreateMembers</code> is only used
373
- * in the following cases:</p>
374
- * <ul>
375
- * <li>
376
- * <p>Security Hub is not configured to automatically add new organization accounts.</p>
377
- * </li>
378
- * <li>
379
- * <p>The account was disassociated or deleted in Security Hub.</p>
380
- * </li>
381
- * </ul>
382
- * <p>This action can only be used by an account that has Security Hub enabled. To enable Security Hub, you
383
- * can use the <code>EnableSecurityHub</code> operation.</p>
384
- * <p>For accounts that are not organization members, you create the account association and
385
- * then send an invitation to the member account. To send the invitation, you use the
386
- * <code>InviteMembers</code> operation. If the account owner accepts
387
- * the invitation, the account becomes a member account in Security Hub.</p>
388
- * <p>Accounts that are managed using Organizations do not receive an invitation. They
389
- * automatically become a member account in Security Hub.</p>
390
- * <ul>
391
- * <li>
392
- * <p>If the organization account does not have Security Hub enabled, then Security Hub and the default standards are automatically enabled. Note that Security Hub cannot be enabled automatically for the organization management account. The organization management account must enable Security Hub before the administrator account enables it as a member account.</p>
393
- * </li>
394
- * <li>
395
- * <p>For organization accounts that already have Security Hub enabled, Security Hub does not make any other changes to those accounts. It does not change their enabled standards or controls.</p>
396
- * </li>
397
- * </ul>
398
- * <p>A permissions policy is added that permits the administrator account to view the findings
399
- * generated in the member account.</p>
400
- * <p>To remove the association between the administrator and member accounts, use the <code>DisassociateFromMasterAccount</code> or <code>DisassociateMembers</code> operation.</p>
138
+ * @see {@link CreateMembersCommand}
401
139
  */
402
140
  createMembers(args: CreateMembersCommandInput, options?: __HttpHandlerOptions): Promise<CreateMembersCommandOutput>;
403
141
  createMembers(args: CreateMembersCommandInput, cb: (err: any, data?: CreateMembersCommandOutput) => void): void;
404
142
  createMembers(args: CreateMembersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: CreateMembersCommandOutput) => void): void;
405
143
  /**
406
- * @public
407
- * <p>Declines invitations to become a member account.</p>
408
- * <p>A prospective member account uses this operation to decline an invitation to become a member.</p>
409
- * <p>This operation is only called by member accounts that aren't part of an organization.
410
- * Organization accounts don't receive invitations.</p>
144
+ * @see {@link DeclineInvitationsCommand}
411
145
  */
412
146
  declineInvitations(args: DeclineInvitationsCommandInput, options?: __HttpHandlerOptions): Promise<DeclineInvitationsCommandOutput>;
413
147
  declineInvitations(args: DeclineInvitationsCommandInput, cb: (err: any, data?: DeclineInvitationsCommandOutput) => void): void;
414
148
  declineInvitations(args: DeclineInvitationsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeclineInvitationsCommandOutput) => void): void;
415
149
  /**
416
- * @public
417
- * <p>Deletes a custom action target from Security Hub.</p>
418
- * <p>Deleting a custom action target does not affect any findings or insights that were
419
- * already sent to Amazon CloudWatch Events using the custom action.</p>
150
+ * @see {@link DeleteActionTargetCommand}
420
151
  */
421
152
  deleteActionTarget(args: DeleteActionTargetCommandInput, options?: __HttpHandlerOptions): Promise<DeleteActionTargetCommandOutput>;
422
153
  deleteActionTarget(args: DeleteActionTargetCommandInput, cb: (err: any, data?: DeleteActionTargetCommandOutput) => void): void;
423
154
  deleteActionTarget(args: DeleteActionTargetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteActionTargetCommandOutput) => void): void;
424
155
  /**
425
- * @public
426
- * <p>Deletes a finding aggregator. When you delete the finding aggregator, you stop finding aggregation.</p>
427
- * <p>When you stop finding aggregation, findings that were already aggregated to the aggregation Region are still visible from the aggregation Region. New findings and finding updates are not aggregated.
428
- * </p>
156
+ * @see {@link DeleteFindingAggregatorCommand}
429
157
  */
430
158
  deleteFindingAggregator(args: DeleteFindingAggregatorCommandInput, options?: __HttpHandlerOptions): Promise<DeleteFindingAggregatorCommandOutput>;
431
159
  deleteFindingAggregator(args: DeleteFindingAggregatorCommandInput, cb: (err: any, data?: DeleteFindingAggregatorCommandOutput) => void): void;
432
160
  deleteFindingAggregator(args: DeleteFindingAggregatorCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteFindingAggregatorCommandOutput) => void): void;
433
161
  /**
434
- * @public
435
- * <p>Deletes the insight specified by the <code>InsightArn</code>.</p>
162
+ * @see {@link DeleteInsightCommand}
436
163
  */
437
164
  deleteInsight(args: DeleteInsightCommandInput, options?: __HttpHandlerOptions): Promise<DeleteInsightCommandOutput>;
438
165
  deleteInsight(args: DeleteInsightCommandInput, cb: (err: any, data?: DeleteInsightCommandOutput) => void): void;
439
166
  deleteInsight(args: DeleteInsightCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteInsightCommandOutput) => void): void;
440
167
  /**
441
- * @public
442
- * <p>Deletes invitations received by the Amazon Web Services account to become a member account.</p>
443
- * <p>A Security Hub administrator account can use this operation to delete invitations sent to one or more member accounts.</p>
444
- * <p>This operation is only used to delete invitations that are sent to member accounts that aren't part of an organization.
445
- * Organization accounts don't receive invitations.</p>
168
+ * @see {@link DeleteInvitationsCommand}
446
169
  */
447
170
  deleteInvitations(args: DeleteInvitationsCommandInput, options?: __HttpHandlerOptions): Promise<DeleteInvitationsCommandOutput>;
448
171
  deleteInvitations(args: DeleteInvitationsCommandInput, cb: (err: any, data?: DeleteInvitationsCommandOutput) => void): void;
449
172
  deleteInvitations(args: DeleteInvitationsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteInvitationsCommandOutput) => void): void;
450
173
  /**
451
- * @public
452
- * <p>Deletes the specified member accounts from Security Hub.</p>
453
- * <p>Can be used to delete member accounts that belong to an organization as well as member
454
- * accounts that were invited manually.</p>
174
+ * @see {@link DeleteMembersCommand}
455
175
  */
456
176
  deleteMembers(args: DeleteMembersCommandInput, options?: __HttpHandlerOptions): Promise<DeleteMembersCommandOutput>;
457
177
  deleteMembers(args: DeleteMembersCommandInput, cb: (err: any, data?: DeleteMembersCommandOutput) => void): void;
458
178
  deleteMembers(args: DeleteMembersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteMembersCommandOutput) => void): void;
459
179
  /**
460
- * @public
461
- * <p>Returns a list of the custom action targets in Security Hub in your account.</p>
180
+ * @see {@link DescribeActionTargetsCommand}
462
181
  */
463
182
  describeActionTargets(args: DescribeActionTargetsCommandInput, options?: __HttpHandlerOptions): Promise<DescribeActionTargetsCommandOutput>;
464
183
  describeActionTargets(args: DescribeActionTargetsCommandInput, cb: (err: any, data?: DescribeActionTargetsCommandOutput) => void): void;
465
184
  describeActionTargets(args: DescribeActionTargetsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeActionTargetsCommandOutput) => void): void;
466
185
  /**
467
- * @public
468
- * <p>Returns details about the Hub resource in your account, including the
469
- * <code>HubArn</code> and the time when you enabled Security Hub.</p>
186
+ * @see {@link DescribeHubCommand}
470
187
  */
471
188
  describeHub(args: DescribeHubCommandInput, options?: __HttpHandlerOptions): Promise<DescribeHubCommandOutput>;
472
189
  describeHub(args: DescribeHubCommandInput, cb: (err: any, data?: DescribeHubCommandOutput) => void): void;
473
190
  describeHub(args: DescribeHubCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeHubCommandOutput) => void): void;
474
191
  /**
475
- * @public
476
- * <p>Returns information about the Organizations configuration for Security Hub. Can only be
477
- * called from a Security Hub administrator account.</p>
192
+ * @see {@link DescribeOrganizationConfigurationCommand}
478
193
  */
479
194
  describeOrganizationConfiguration(args: DescribeOrganizationConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<DescribeOrganizationConfigurationCommandOutput>;
480
195
  describeOrganizationConfiguration(args: DescribeOrganizationConfigurationCommandInput, cb: (err: any, data?: DescribeOrganizationConfigurationCommandOutput) => void): void;
481
196
  describeOrganizationConfiguration(args: DescribeOrganizationConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeOrganizationConfigurationCommandOutput) => void): void;
482
197
  /**
483
- * @public
484
- * <p>Returns information about product integrations in Security Hub.</p>
485
- * <p>You can optionally provide an integration ARN. If you provide an integration ARN, then
486
- * the results only include that integration.</p>
487
- * <p>If you do not provide an integration ARN, then the results include all of the available
488
- * product integrations. </p>
198
+ * @see {@link DescribeProductsCommand}
489
199
  */
490
200
  describeProducts(args: DescribeProductsCommandInput, options?: __HttpHandlerOptions): Promise<DescribeProductsCommandOutput>;
491
201
  describeProducts(args: DescribeProductsCommandInput, cb: (err: any, data?: DescribeProductsCommandOutput) => void): void;
492
202
  describeProducts(args: DescribeProductsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeProductsCommandOutput) => void): void;
493
203
  /**
494
- * @public
495
- * <p>Returns a list of the available standards in Security Hub.</p>
496
- * <p>For each standard, the results include the standard ARN, the name, and a description. </p>
204
+ * @see {@link DescribeStandardsCommand}
497
205
  */
498
206
  describeStandards(args: DescribeStandardsCommandInput, options?: __HttpHandlerOptions): Promise<DescribeStandardsCommandOutput>;
499
207
  describeStandards(args: DescribeStandardsCommandInput, cb: (err: any, data?: DescribeStandardsCommandOutput) => void): void;
500
208
  describeStandards(args: DescribeStandardsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeStandardsCommandOutput) => void): void;
501
209
  /**
502
- * @public
503
- * <p>Returns a list of security standards controls.</p>
504
- * <p>For each control, the results include information about whether it is currently enabled,
505
- * the severity, and a link to remediation information.</p>
210
+ * @see {@link DescribeStandardsControlsCommand}
506
211
  */
507
212
  describeStandardsControls(args: DescribeStandardsControlsCommandInput, options?: __HttpHandlerOptions): Promise<DescribeStandardsControlsCommandOutput>;
508
213
  describeStandardsControls(args: DescribeStandardsControlsCommandInput, cb: (err: any, data?: DescribeStandardsControlsCommandOutput) => void): void;
509
214
  describeStandardsControls(args: DescribeStandardsControlsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DescribeStandardsControlsCommandOutput) => void): void;
510
215
  /**
511
- * @public
512
- * <p>Disables the integration of the specified product with Security Hub. After the integration is
513
- * disabled, findings from that product are no longer sent to Security Hub.</p>
216
+ * @see {@link DisableImportFindingsForProductCommand}
514
217
  */
515
218
  disableImportFindingsForProduct(args: DisableImportFindingsForProductCommandInput, options?: __HttpHandlerOptions): Promise<DisableImportFindingsForProductCommandOutput>;
516
219
  disableImportFindingsForProduct(args: DisableImportFindingsForProductCommandInput, cb: (err: any, data?: DisableImportFindingsForProductCommandOutput) => void): void;
517
220
  disableImportFindingsForProduct(args: DisableImportFindingsForProductCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisableImportFindingsForProductCommandOutput) => void): void;
518
221
  /**
519
- * @public
520
- * <p>Disables a Security Hub administrator account. Can only be called by the organization
521
- * management account.</p>
222
+ * @see {@link DisableOrganizationAdminAccountCommand}
522
223
  */
523
224
  disableOrganizationAdminAccount(args: DisableOrganizationAdminAccountCommandInput, options?: __HttpHandlerOptions): Promise<DisableOrganizationAdminAccountCommandOutput>;
524
225
  disableOrganizationAdminAccount(args: DisableOrganizationAdminAccountCommandInput, cb: (err: any, data?: DisableOrganizationAdminAccountCommandOutput) => void): void;
525
226
  disableOrganizationAdminAccount(args: DisableOrganizationAdminAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisableOrganizationAdminAccountCommandOutput) => void): void;
526
227
  /**
527
- * @public
528
- * <p>Disables Security Hub in your account only in the current Region. To disable Security Hub in all
529
- * Regions, you must submit one request per Region where you have enabled Security Hub.</p>
530
- * <p>When you disable Security Hub for an administrator account, it doesn't disable Security Hub for any associated
531
- * member accounts.</p>
532
- * <p>When you disable Security Hub, your existing findings and insights and any Security Hub configuration
533
- * settings are deleted after 90 days and cannot be recovered. Any standards that were enabled
534
- * are disabled, and your administrator and member account associations are removed.</p>
535
- * <p>If you want to save your existing findings, you must export them before you disable
536
- * Security Hub.</p>
228
+ * @see {@link DisableSecurityHubCommand}
537
229
  */
538
230
  disableSecurityHub(args: DisableSecurityHubCommandInput, options?: __HttpHandlerOptions): Promise<DisableSecurityHubCommandOutput>;
539
231
  disableSecurityHub(args: DisableSecurityHubCommandInput, cb: (err: any, data?: DisableSecurityHubCommandOutput) => void): void;
540
232
  disableSecurityHub(args: DisableSecurityHubCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisableSecurityHubCommandOutput) => void): void;
541
233
  /**
542
- * @public
543
- * <p>Disassociates the current Security Hub member account from the associated administrator
544
- * account.</p>
545
- * <p>This operation is only used by accounts that are not part of an organization. For
546
- * organization accounts, only the administrator account can
547
- * disassociate a member account.</p>
234
+ * @see {@link DisassociateFromAdministratorAccountCommand}
548
235
  */
549
236
  disassociateFromAdministratorAccount(args: DisassociateFromAdministratorAccountCommandInput, options?: __HttpHandlerOptions): Promise<DisassociateFromAdministratorAccountCommandOutput>;
550
237
  disassociateFromAdministratorAccount(args: DisassociateFromAdministratorAccountCommandInput, cb: (err: any, data?: DisassociateFromAdministratorAccountCommandOutput) => void): void;
551
238
  disassociateFromAdministratorAccount(args: DisassociateFromAdministratorAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisassociateFromAdministratorAccountCommandOutput) => void): void;
552
239
  /**
553
- * @public
554
- * @deprecated
555
- *
556
- * <p>This method is deprecated. Instead, use <code>DisassociateFromAdministratorAccount</code>.</p>
557
- * <p>The Security Hub console continues to use <code>DisassociateFromMasterAccount</code>. It will eventually change to use <code>DisassociateFromAdministratorAccount</code>. Any IAM policies that specifically control access to this function must continue to use <code>DisassociateFromMasterAccount</code>. You should also add <code>DisassociateFromAdministratorAccount</code> to your policies to ensure that the correct permissions are in place after the console begins to use <code>DisassociateFromAdministratorAccount</code>.</p>
558
- * <p>Disassociates the current Security Hub member account from the associated administrator
559
- * account.</p>
560
- * <p>This operation is only used by accounts that are not part of an organization. For
561
- * organization accounts, only the administrator account can
562
- * disassociate a member account.</p>
240
+ * @see {@link DisassociateFromMasterAccountCommand}
563
241
  */
564
242
  disassociateFromMasterAccount(args: DisassociateFromMasterAccountCommandInput, options?: __HttpHandlerOptions): Promise<DisassociateFromMasterAccountCommandOutput>;
565
243
  disassociateFromMasterAccount(args: DisassociateFromMasterAccountCommandInput, cb: (err: any, data?: DisassociateFromMasterAccountCommandOutput) => void): void;
566
244
  disassociateFromMasterAccount(args: DisassociateFromMasterAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisassociateFromMasterAccountCommandOutput) => void): void;
567
245
  /**
568
- * @public
569
- * <p>Disassociates the specified member accounts from the associated administrator account.</p>
570
- * <p>Can be used to disassociate both accounts that are managed using Organizations and accounts that
571
- * were invited manually.</p>
246
+ * @see {@link DisassociateMembersCommand}
572
247
  */
573
248
  disassociateMembers(args: DisassociateMembersCommandInput, options?: __HttpHandlerOptions): Promise<DisassociateMembersCommandOutput>;
574
249
  disassociateMembers(args: DisassociateMembersCommandInput, cb: (err: any, data?: DisassociateMembersCommandOutput) => void): void;
575
250
  disassociateMembers(args: DisassociateMembersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DisassociateMembersCommandOutput) => void): void;
576
251
  /**
577
- * @public
578
- * <p>Enables the integration of a partner product with Security Hub. Integrated products send
579
- * findings to Security Hub.</p>
580
- * <p>When you enable a product integration, a permissions policy that grants permission for
581
- * the product to send findings to Security Hub is applied.</p>
252
+ * @see {@link EnableImportFindingsForProductCommand}
582
253
  */
583
254
  enableImportFindingsForProduct(args: EnableImportFindingsForProductCommandInput, options?: __HttpHandlerOptions): Promise<EnableImportFindingsForProductCommandOutput>;
584
255
  enableImportFindingsForProduct(args: EnableImportFindingsForProductCommandInput, cb: (err: any, data?: EnableImportFindingsForProductCommandOutput) => void): void;
585
256
  enableImportFindingsForProduct(args: EnableImportFindingsForProductCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnableImportFindingsForProductCommandOutput) => void): void;
586
257
  /**
587
- * @public
588
- * <p>Designates the Security Hub administrator account for an organization. Can only be called by
589
- * the organization management account.</p>
258
+ * @see {@link EnableOrganizationAdminAccountCommand}
590
259
  */
591
260
  enableOrganizationAdminAccount(args: EnableOrganizationAdminAccountCommandInput, options?: __HttpHandlerOptions): Promise<EnableOrganizationAdminAccountCommandOutput>;
592
261
  enableOrganizationAdminAccount(args: EnableOrganizationAdminAccountCommandInput, cb: (err: any, data?: EnableOrganizationAdminAccountCommandOutput) => void): void;
593
262
  enableOrganizationAdminAccount(args: EnableOrganizationAdminAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnableOrganizationAdminAccountCommandOutput) => void): void;
594
263
  /**
595
- * @public
596
- * <p>Enables Security Hub for your account in the current Region or the Region you specify in the
597
- * request.</p>
598
- * <p>When you enable Security Hub, you grant to Security Hub the permissions necessary to gather findings
599
- * from other services that are integrated with Security Hub.</p>
600
- * <p>When you use the <code>EnableSecurityHub</code> operation to enable Security Hub, you also
601
- * automatically enable the following standards:</p>
602
- * <ul>
603
- * <li>
604
- * <p>Center for Internet Security (CIS) Amazon Web Services Foundations Benchmark v1.2.0</p>
605
- * </li>
606
- * <li>
607
- * <p>Amazon Web Services Foundational Security Best Practices</p>
608
- * </li>
609
- * </ul>
610
- * <p>Other standards are not automatically enabled. </p>
611
- * <p>To opt out of automatically enabled standards, set
612
- * <code>EnableDefaultStandards</code> to <code>false</code>.</p>
613
- * <p>After you enable Security Hub, to enable a standard, use the <code>BatchEnableStandards</code> operation. To disable a standard, use the
614
- * <code>BatchDisableStandards</code> operation.</p>
615
- * <p>To learn more, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-settingup.html">setup information</a> in the <i>Security Hub User Guide</i>.</p>
264
+ * @see {@link EnableSecurityHubCommand}
616
265
  */
617
266
  enableSecurityHub(args: EnableSecurityHubCommandInput, options?: __HttpHandlerOptions): Promise<EnableSecurityHubCommandOutput>;
618
267
  enableSecurityHub(args: EnableSecurityHubCommandInput, cb: (err: any, data?: EnableSecurityHubCommandOutput) => void): void;
619
268
  enableSecurityHub(args: EnableSecurityHubCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: EnableSecurityHubCommandOutput) => void): void;
620
269
  /**
621
- * @public
622
- * <p>Provides the details for the Security Hub administrator account for the current member account.</p>
623
- * <p>Can be used by both member accounts that are managed using Organizations and accounts that were
624
- * invited manually.</p>
270
+ * @see {@link GetAdministratorAccountCommand}
625
271
  */
626
272
  getAdministratorAccount(args: GetAdministratorAccountCommandInput, options?: __HttpHandlerOptions): Promise<GetAdministratorAccountCommandOutput>;
627
273
  getAdministratorAccount(args: GetAdministratorAccountCommandInput, cb: (err: any, data?: GetAdministratorAccountCommandOutput) => void): void;
628
274
  getAdministratorAccount(args: GetAdministratorAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetAdministratorAccountCommandOutput) => void): void;
629
275
  /**
630
- * @public
631
- * <p>Returns a list of the standards that are currently enabled.</p>
276
+ * @see {@link GetEnabledStandardsCommand}
632
277
  */
633
278
  getEnabledStandards(args: GetEnabledStandardsCommandInput, options?: __HttpHandlerOptions): Promise<GetEnabledStandardsCommandOutput>;
634
279
  getEnabledStandards(args: GetEnabledStandardsCommandInput, cb: (err: any, data?: GetEnabledStandardsCommandOutput) => void): void;
635
280
  getEnabledStandards(args: GetEnabledStandardsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetEnabledStandardsCommandOutput) => void): void;
636
281
  /**
637
- * @public
638
- * <p>Returns the current finding aggregation configuration.</p>
282
+ * @see {@link GetFindingAggregatorCommand}
639
283
  */
640
284
  getFindingAggregator(args: GetFindingAggregatorCommandInput, options?: __HttpHandlerOptions): Promise<GetFindingAggregatorCommandOutput>;
641
285
  getFindingAggregator(args: GetFindingAggregatorCommandInput, cb: (err: any, data?: GetFindingAggregatorCommandOutput) => void): void;
642
286
  getFindingAggregator(args: GetFindingAggregatorCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetFindingAggregatorCommandOutput) => void): void;
643
287
  /**
644
- * @public
645
- * <p>Returns a list of findings that match the specified criteria.</p>
646
- * <p>If finding aggregation is enabled, then when you call <code>GetFindings</code> from the aggregation Region, the results include all of the matching findings from both the aggregation Region and the linked Regions.</p>
288
+ * @see {@link GetFindingsCommand}
647
289
  */
648
290
  getFindings(args: GetFindingsCommandInput, options?: __HttpHandlerOptions): Promise<GetFindingsCommandOutput>;
649
291
  getFindings(args: GetFindingsCommandInput, cb: (err: any, data?: GetFindingsCommandOutput) => void): void;
650
292
  getFindings(args: GetFindingsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetFindingsCommandOutput) => void): void;
651
293
  /**
652
- * @public
653
- * <p>Lists the results of the Security Hub insight specified by the insight ARN.</p>
294
+ * @see {@link GetInsightResultsCommand}
654
295
  */
655
296
  getInsightResults(args: GetInsightResultsCommandInput, options?: __HttpHandlerOptions): Promise<GetInsightResultsCommandOutput>;
656
297
  getInsightResults(args: GetInsightResultsCommandInput, cb: (err: any, data?: GetInsightResultsCommandOutput) => void): void;
657
298
  getInsightResults(args: GetInsightResultsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetInsightResultsCommandOutput) => void): void;
658
299
  /**
659
- * @public
660
- * <p>Lists and describes insights for the specified insight ARNs.</p>
300
+ * @see {@link GetInsightsCommand}
661
301
  */
662
302
  getInsights(args: GetInsightsCommandInput, options?: __HttpHandlerOptions): Promise<GetInsightsCommandOutput>;
663
303
  getInsights(args: GetInsightsCommandInput, cb: (err: any, data?: GetInsightsCommandOutput) => void): void;
664
304
  getInsights(args: GetInsightsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetInsightsCommandOutput) => void): void;
665
305
  /**
666
- * @public
667
- * <p>Returns the count of all Security Hub membership invitations that were sent to the
668
- * current member account, not including the currently accepted invitation. </p>
306
+ * @see {@link GetInvitationsCountCommand}
669
307
  */
670
308
  getInvitationsCount(args: GetInvitationsCountCommandInput, options?: __HttpHandlerOptions): Promise<GetInvitationsCountCommandOutput>;
671
309
  getInvitationsCount(args: GetInvitationsCountCommandInput, cb: (err: any, data?: GetInvitationsCountCommandOutput) => void): void;
672
310
  getInvitationsCount(args: GetInvitationsCountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetInvitationsCountCommandOutput) => void): void;
673
311
  /**
674
- * @public
675
- * @deprecated
676
- *
677
- * <p>This method is deprecated. Instead, use <code>GetAdministratorAccount</code>.</p>
678
- * <p>The Security Hub console continues to use <code>GetMasterAccount</code>. It will eventually change to use <code>GetAdministratorAccount</code>. Any IAM policies that specifically control access to this function must continue to use <code>GetMasterAccount</code>. You should also add <code>GetAdministratorAccount</code> to your policies to ensure that the correct permissions are in place after the console begins to use <code>GetAdministratorAccount</code>.</p>
679
- * <p>Provides the details for the Security Hub administrator account for the current member account.</p>
680
- * <p>Can be used by both member accounts that are managed using Organizations and accounts that were
681
- * invited manually.</p>
312
+ * @see {@link GetMasterAccountCommand}
682
313
  */
683
314
  getMasterAccount(args: GetMasterAccountCommandInput, options?: __HttpHandlerOptions): Promise<GetMasterAccountCommandOutput>;
684
315
  getMasterAccount(args: GetMasterAccountCommandInput, cb: (err: any, data?: GetMasterAccountCommandOutput) => void): void;
685
316
  getMasterAccount(args: GetMasterAccountCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetMasterAccountCommandOutput) => void): void;
686
317
  /**
687
- * @public
688
- * <p>Returns the details for the Security Hub member accounts for the specified account IDs.</p>
689
- * <p>An administrator account can be either the delegated Security Hub administrator account for an
690
- * organization or an administrator account that enabled Security Hub manually.</p>
691
- * <p>The results include both member accounts that are managed using Organizations and accounts that
692
- * were invited manually.</p>
318
+ * @see {@link GetMembersCommand}
693
319
  */
694
320
  getMembers(args: GetMembersCommandInput, options?: __HttpHandlerOptions): Promise<GetMembersCommandOutput>;
695
321
  getMembers(args: GetMembersCommandInput, cb: (err: any, data?: GetMembersCommandOutput) => void): void;
696
322
  getMembers(args: GetMembersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: GetMembersCommandOutput) => void): void;
697
323
  /**
698
- * @public
699
- * <p>Invites other Amazon Web Services accounts to become member accounts for the Security Hub administrator account that
700
- * the invitation is sent from.</p>
701
- * <p>This operation is only used to invite accounts that do not belong to an organization.
702
- * Organization accounts do not receive invitations.</p>
703
- * <p>Before you can use this action to invite a member, you must first use the <code>CreateMembers</code> action to create the member account in Security Hub.</p>
704
- * <p>When the account owner enables Security Hub and accepts the invitation to become a member
705
- * account, the administrator account can view the findings generated from the member account.</p>
324
+ * @see {@link InviteMembersCommand}
706
325
  */
707
326
  inviteMembers(args: InviteMembersCommandInput, options?: __HttpHandlerOptions): Promise<InviteMembersCommandOutput>;
708
327
  inviteMembers(args: InviteMembersCommandInput, cb: (err: any, data?: InviteMembersCommandOutput) => void): void;
709
328
  inviteMembers(args: InviteMembersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: InviteMembersCommandOutput) => void): void;
710
329
  /**
711
- * @public
712
- * <p>Lists all findings-generating solutions (products) that you are subscribed to receive
713
- * findings from in Security Hub.</p>
330
+ * @see {@link ListEnabledProductsForImportCommand}
714
331
  */
715
332
  listEnabledProductsForImport(args: ListEnabledProductsForImportCommandInput, options?: __HttpHandlerOptions): Promise<ListEnabledProductsForImportCommandOutput>;
716
333
  listEnabledProductsForImport(args: ListEnabledProductsForImportCommandInput, cb: (err: any, data?: ListEnabledProductsForImportCommandOutput) => void): void;
717
334
  listEnabledProductsForImport(args: ListEnabledProductsForImportCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListEnabledProductsForImportCommandOutput) => void): void;
718
335
  /**
719
- * @public
720
- * <p>If finding aggregation is enabled, then <code>ListFindingAggregators</code> returns the ARN of the finding aggregator. You can run this operation from any Region.</p>
336
+ * @see {@link ListFindingAggregatorsCommand}
721
337
  */
722
338
  listFindingAggregators(args: ListFindingAggregatorsCommandInput, options?: __HttpHandlerOptions): Promise<ListFindingAggregatorsCommandOutput>;
723
339
  listFindingAggregators(args: ListFindingAggregatorsCommandInput, cb: (err: any, data?: ListFindingAggregatorsCommandOutput) => void): void;
724
340
  listFindingAggregators(args: ListFindingAggregatorsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListFindingAggregatorsCommandOutput) => void): void;
725
341
  /**
726
- * @public
727
- * <p>Lists all Security Hub membership invitations that were sent to the current Amazon Web Services account.</p>
728
- * <p>This operation is only used by accounts that are managed by invitation.
729
- * Accounts that are managed using the integration with Organizations do not receive invitations.</p>
342
+ * @see {@link ListInvitationsCommand}
730
343
  */
731
344
  listInvitations(args: ListInvitationsCommandInput, options?: __HttpHandlerOptions): Promise<ListInvitationsCommandOutput>;
732
345
  listInvitations(args: ListInvitationsCommandInput, cb: (err: any, data?: ListInvitationsCommandOutput) => void): void;
733
346
  listInvitations(args: ListInvitationsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListInvitationsCommandOutput) => void): void;
734
347
  /**
735
- * @public
736
- * <p>Lists details about all member accounts for the current Security Hub administrator
737
- * account.</p>
738
- * <p>The results include both member accounts that belong to an organization and member
739
- * accounts that were invited manually.</p>
348
+ * @see {@link ListMembersCommand}
740
349
  */
741
350
  listMembers(args: ListMembersCommandInput, options?: __HttpHandlerOptions): Promise<ListMembersCommandOutput>;
742
351
  listMembers(args: ListMembersCommandInput, cb: (err: any, data?: ListMembersCommandOutput) => void): void;
743
352
  listMembers(args: ListMembersCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListMembersCommandOutput) => void): void;
744
353
  /**
745
- * @public
746
- * <p>Lists the Security Hub administrator accounts. Can only be called by the organization
747
- * management account.</p>
354
+ * @see {@link ListOrganizationAdminAccountsCommand}
748
355
  */
749
356
  listOrganizationAdminAccounts(args: ListOrganizationAdminAccountsCommandInput, options?: __HttpHandlerOptions): Promise<ListOrganizationAdminAccountsCommandOutput>;
750
357
  listOrganizationAdminAccounts(args: ListOrganizationAdminAccountsCommandInput, cb: (err: any, data?: ListOrganizationAdminAccountsCommandOutput) => void): void;
751
358
  listOrganizationAdminAccounts(args: ListOrganizationAdminAccountsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListOrganizationAdminAccountsCommandOutput) => void): void;
752
359
  /**
753
- * @public
754
- * <p>
755
- * Lists all of the security controls that apply to a specified standard.
756
- * </p>
360
+ * @see {@link ListSecurityControlDefinitionsCommand}
757
361
  */
758
362
  listSecurityControlDefinitions(args: ListSecurityControlDefinitionsCommandInput, options?: __HttpHandlerOptions): Promise<ListSecurityControlDefinitionsCommandOutput>;
759
363
  listSecurityControlDefinitions(args: ListSecurityControlDefinitionsCommandInput, cb: (err: any, data?: ListSecurityControlDefinitionsCommandOutput) => void): void;
760
364
  listSecurityControlDefinitions(args: ListSecurityControlDefinitionsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListSecurityControlDefinitionsCommandOutput) => void): void;
761
365
  /**
762
- * @public
763
- * <p>
764
- * Specifies whether a control is currently enabled or disabled in each enabled standard in the calling account.
765
- * </p>
366
+ * @see {@link ListStandardsControlAssociationsCommand}
766
367
  */
767
368
  listStandardsControlAssociations(args: ListStandardsControlAssociationsCommandInput, options?: __HttpHandlerOptions): Promise<ListStandardsControlAssociationsCommandOutput>;
768
369
  listStandardsControlAssociations(args: ListStandardsControlAssociationsCommandInput, cb: (err: any, data?: ListStandardsControlAssociationsCommandOutput) => void): void;
769
370
  listStandardsControlAssociations(args: ListStandardsControlAssociationsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListStandardsControlAssociationsCommandOutput) => void): void;
770
371
  /**
771
- * @public
772
- * <p>Returns a list of tags associated with a resource.</p>
372
+ * @see {@link ListTagsForResourceCommand}
773
373
  */
774
374
  listTagsForResource(args: ListTagsForResourceCommandInput, options?: __HttpHandlerOptions): Promise<ListTagsForResourceCommandOutput>;
775
375
  listTagsForResource(args: ListTagsForResourceCommandInput, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
776
376
  listTagsForResource(args: ListTagsForResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTagsForResourceCommandOutput) => void): void;
777
377
  /**
778
- * @public
779
- * <p>Adds one or more tags to a resource.</p>
378
+ * @see {@link TagResourceCommand}
780
379
  */
781
380
  tagResource(args: TagResourceCommandInput, options?: __HttpHandlerOptions): Promise<TagResourceCommandOutput>;
782
381
  tagResource(args: TagResourceCommandInput, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
783
382
  tagResource(args: TagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: TagResourceCommandOutput) => void): void;
784
383
  /**
785
- * @public
786
- * <p>Removes one or more tags from a resource.</p>
384
+ * @see {@link UntagResourceCommand}
787
385
  */
788
386
  untagResource(args: UntagResourceCommandInput, options?: __HttpHandlerOptions): Promise<UntagResourceCommandOutput>;
789
387
  untagResource(args: UntagResourceCommandInput, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
790
388
  untagResource(args: UntagResourceCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UntagResourceCommandOutput) => void): void;
791
389
  /**
792
- * @public
793
- * <p>Updates the name and description of a custom action target in Security Hub.</p>
390
+ * @see {@link UpdateActionTargetCommand}
794
391
  */
795
392
  updateActionTarget(args: UpdateActionTargetCommandInput, options?: __HttpHandlerOptions): Promise<UpdateActionTargetCommandOutput>;
796
393
  updateActionTarget(args: UpdateActionTargetCommandInput, cb: (err: any, data?: UpdateActionTargetCommandOutput) => void): void;
797
394
  updateActionTarget(args: UpdateActionTargetCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateActionTargetCommandOutput) => void): void;
798
395
  /**
799
- * @public
800
- * <p>Updates the finding aggregation configuration. Used to update the Region linking mode and the list of included or excluded Regions. You cannot use <code>UpdateFindingAggregator</code> to change the aggregation Region.</p>
801
- * <p>You must run <code>UpdateFindingAggregator</code> from the current aggregation Region.
802
- * </p>
396
+ * @see {@link UpdateFindingAggregatorCommand}
803
397
  */
804
398
  updateFindingAggregator(args: UpdateFindingAggregatorCommandInput, options?: __HttpHandlerOptions): Promise<UpdateFindingAggregatorCommandOutput>;
805
399
  updateFindingAggregator(args: UpdateFindingAggregatorCommandInput, cb: (err: any, data?: UpdateFindingAggregatorCommandOutput) => void): void;
806
400
  updateFindingAggregator(args: UpdateFindingAggregatorCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateFindingAggregatorCommandOutput) => void): void;
807
401
  /**
808
- * @public
809
- * <p>
810
- * <code>UpdateFindings</code> is deprecated. Instead of <code>UpdateFindings</code>, use
811
- * <code>BatchUpdateFindings</code>.</p>
812
- * <p>Updates the <code>Note</code> and <code>RecordState</code> of the Security Hub-aggregated
813
- * findings that the filter attributes specify. Any member account that can view the finding
814
- * also sees the update to the finding.</p>
402
+ * @see {@link UpdateFindingsCommand}
815
403
  */
816
404
  updateFindings(args: UpdateFindingsCommandInput, options?: __HttpHandlerOptions): Promise<UpdateFindingsCommandOutput>;
817
405
  updateFindings(args: UpdateFindingsCommandInput, cb: (err: any, data?: UpdateFindingsCommandOutput) => void): void;
818
406
  updateFindings(args: UpdateFindingsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateFindingsCommandOutput) => void): void;
819
407
  /**
820
- * @public
821
- * <p>Updates the Security Hub insight identified by the specified insight ARN.</p>
408
+ * @see {@link UpdateInsightCommand}
822
409
  */
823
410
  updateInsight(args: UpdateInsightCommandInput, options?: __HttpHandlerOptions): Promise<UpdateInsightCommandOutput>;
824
411
  updateInsight(args: UpdateInsightCommandInput, cb: (err: any, data?: UpdateInsightCommandOutput) => void): void;
825
412
  updateInsight(args: UpdateInsightCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateInsightCommandOutput) => void): void;
826
413
  /**
827
- * @public
828
- * <p>Used to update the configuration related to Organizations. Can only be called from a
829
- * Security Hub administrator account.</p>
414
+ * @see {@link UpdateOrganizationConfigurationCommand}
830
415
  */
831
416
  updateOrganizationConfiguration(args: UpdateOrganizationConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<UpdateOrganizationConfigurationCommandOutput>;
832
417
  updateOrganizationConfiguration(args: UpdateOrganizationConfigurationCommandInput, cb: (err: any, data?: UpdateOrganizationConfigurationCommandOutput) => void): void;
833
418
  updateOrganizationConfiguration(args: UpdateOrganizationConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateOrganizationConfigurationCommandOutput) => void): void;
834
419
  /**
835
- * @public
836
- * <p>Updates configuration options for Security Hub.</p>
420
+ * @see {@link UpdateSecurityHubConfigurationCommand}
837
421
  */
838
422
  updateSecurityHubConfiguration(args: UpdateSecurityHubConfigurationCommandInput, options?: __HttpHandlerOptions): Promise<UpdateSecurityHubConfigurationCommandOutput>;
839
423
  updateSecurityHubConfiguration(args: UpdateSecurityHubConfigurationCommandInput, cb: (err: any, data?: UpdateSecurityHubConfigurationCommandOutput) => void): void;
840
424
  updateSecurityHubConfiguration(args: UpdateSecurityHubConfigurationCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateSecurityHubConfigurationCommandOutput) => void): void;
841
425
  /**
842
- * @public
843
- * <p>Used to control whether an individual security standard control is enabled or
844
- * disabled.</p>
426
+ * @see {@link UpdateStandardsControlCommand}
845
427
  */
846
428
  updateStandardsControl(args: UpdateStandardsControlCommandInput, options?: __HttpHandlerOptions): Promise<UpdateStandardsControlCommandOutput>;
847
429
  updateStandardsControl(args: UpdateStandardsControlCommandInput, cb: (err: any, data?: UpdateStandardsControlCommandOutput) => void): void;
848
430
  updateStandardsControl(args: UpdateStandardsControlCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateStandardsControlCommandOutput) => void): void;
849
431
  }
432
+ /**
433
+ * @public
434
+ * <p>Security Hub provides you with a comprehensive view of the security state of
435
+ * your Amazon Web Services environment and resources. It also provides you with the readiness
436
+ * status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
437
+ * integrated third-party products and helps you analyze security trends in your environment
438
+ * to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
439
+ * Guide</a>.</p>
440
+ * <p>When you use operations in the Security Hub API, the requests are executed only in
441
+ * the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
442
+ * that results from the operation is applied only to that Region. To make the same change in
443
+ * other Regions, run the same command for each Region in which you want to apply the change.</p>
444
+ * <p>For example, if your Region is set to <code>us-west-2</code>, when you use <code>CreateMembers</code> to add a member account to Security Hub, the association of
445
+ * the member account with the administrator account is created only in the <code>us-west-2</code>
446
+ * Region. Security Hub must be enabled for the member account in the same Region that the invitation
447
+ * was sent from.</p>
448
+ * <p>The following throttling limits apply to using Security Hub API operations.</p>
449
+ * <ul>
450
+ * <li>
451
+ * <p>
452
+ * <code>BatchEnableStandards</code> - <code>RateLimit</code> of 1 request per
453
+ * second. <code>BurstLimit</code> of 1 request per second.</p>
454
+ * </li>
455
+ * <li>
456
+ * <p>
457
+ * <code>GetFindings</code> - <code>RateLimit</code> of 3 requests per second.
458
+ * <code>BurstLimit</code> of 6 requests per second.</p>
459
+ * </li>
460
+ * <li>
461
+ * <p>
462
+ * <code>BatchImportFindings</code> - <code>RateLimit</code> of 10 requests per second.
463
+ * <code>BurstLimit</code> of 30 requests per second.</p>
464
+ * </li>
465
+ * <li>
466
+ * <p>
467
+ * <code>BatchUpdateFindings</code> - <code>RateLimit</code> of 10 requests per second.
468
+ * <code>BurstLimit</code> of 30 requests per second.</p>
469
+ * </li>
470
+ * <li>
471
+ * <p>
472
+ * <code>UpdateStandardsControl</code> - <code>RateLimit</code> of 1 request per
473
+ * second. <code>BurstLimit</code> of 5 requests per second.</p>
474
+ * </li>
475
+ * <li>
476
+ * <p>All other operations - <code>RateLimit</code> of 10 requests per second.
477
+ * <code>BurstLimit</code> of 30 requests per second.</p>
478
+ * </li>
479
+ * </ul>
480
+ */
481
+ export declare class SecurityHub extends SecurityHubClient implements SecurityHub {
482
+ }