@aws-sdk/client-securityhub 3.316.0 → 3.317.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (55) hide show
  1. package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +12 -0
  2. package/dist-types/commands/BatchDisableStandardsCommand.d.ts +25 -0
  3. package/dist-types/commands/BatchEnableStandardsCommand.d.ts +27 -0
  4. package/dist-types/commands/BatchImportFindingsCommand.d.ts +47 -0
  5. package/dist-types/commands/BatchUpdateFindingsCommand.d.ts +60 -0
  6. package/dist-types/commands/CreateActionTargetCommand.d.ts +18 -0
  7. package/dist-types/commands/CreateFindingAggregatorCommand.d.ts +26 -0
  8. package/dist-types/commands/CreateInsightCommand.d.ts +31 -0
  9. package/dist-types/commands/CreateMembersCommand.d.ts +23 -0
  10. package/dist-types/commands/DeclineInvitationsCommand.d.ts +19 -0
  11. package/dist-types/commands/DeleteActionTargetCommand.d.ts +16 -0
  12. package/dist-types/commands/DeleteFindingAggregatorCommand.d.ts +11 -0
  13. package/dist-types/commands/DeleteInsightCommand.d.ts +16 -0
  14. package/dist-types/commands/DeleteInvitationsCommand.d.ts +18 -0
  15. package/dist-types/commands/DeleteMembersCommand.d.ts +19 -0
  16. package/dist-types/commands/DescribeActionTargetsCommand.d.ts +24 -0
  17. package/dist-types/commands/DescribeHubCommand.d.ts +19 -0
  18. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +16 -0
  19. package/dist-types/commands/DescribeProductsCommand.d.ts +39 -0
  20. package/dist-types/commands/DescribeStandardsCommand.d.ts +39 -0
  21. package/dist-types/commands/DescribeStandardsControlsCommand.d.ts +46 -0
  22. package/dist-types/commands/DisableImportFindingsForProductCommand.d.ts +11 -0
  23. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +11 -0
  24. package/dist-types/commands/DisableSecurityHubCommand.d.ts +9 -0
  25. package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +9 -0
  26. package/dist-types/commands/DisassociateMembersCommand.d.ts +14 -0
  27. package/dist-types/commands/EnableImportFindingsForProductCommand.d.ts +16 -0
  28. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +11 -0
  29. package/dist-types/commands/EnableSecurityHubCommand.d.ts +14 -0
  30. package/dist-types/commands/GetAdministratorAccountCommand.d.ts +19 -0
  31. package/dist-types/commands/GetEnabledStandardsCommand.d.ts +25 -0
  32. package/dist-types/commands/GetFindingAggregatorCommand.d.ts +22 -0
  33. package/dist-types/commands/GetFindingsCommand.d.ts +111 -0
  34. package/dist-types/commands/GetInsightResultsCommand.d.ts +29 -0
  35. package/dist-types/commands/GetInsightsCommand.d.ts +38 -0
  36. package/dist-types/commands/GetInvitationsCountCommand.d.ts +16 -0
  37. package/dist-types/commands/GetMembersCommand.d.ts +37 -0
  38. package/dist-types/commands/InviteMembersCommand.d.ts +19 -0
  39. package/dist-types/commands/ListEnabledProductsForImportCommand.d.ts +17 -0
  40. package/dist-types/commands/ListFindingAggregatorsCommand.d.ts +18 -0
  41. package/dist-types/commands/ListInvitationsCommand.d.ts +21 -0
  42. package/dist-types/commands/ListMembersCommand.d.ts +31 -0
  43. package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +21 -0
  44. package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +44 -0
  45. package/dist-types/commands/ListStandardsControlAssociationsCommand.d.ts +44 -0
  46. package/dist-types/commands/ListTagsForResourceCommand.d.ts +19 -0
  47. package/dist-types/commands/TagResourceCommand.d.ts +15 -0
  48. package/dist-types/commands/UntagResourceCommand.d.ts +14 -0
  49. package/dist-types/commands/UpdateActionTargetCommand.d.ts +13 -0
  50. package/dist-types/commands/UpdateFindingAggregatorCommand.d.ts +27 -0
  51. package/dist-types/commands/UpdateInsightCommand.d.ts +26 -0
  52. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +11 -0
  53. package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +12 -0
  54. package/dist-types/commands/UpdateStandardsControlCommand.d.ts +13 -0
  55. package/package.json +1 -1
@@ -63,6 +63,18 @@ export interface AcceptAdministratorInvitationCommandOutput extends AcceptAdmini
63
63
  * <p>The request was rejected because we can't find the specified resource.</p>
64
64
  *
65
65
  *
66
+ * @example To accept an invitation be a member account
67
+ * ```javascript
68
+ * // The following example demonstrates how an account can accept an invitation from the Security Hub administrator account to be a member account. This operation is applicable only to member accounts that are not added through AWS Organizations.
69
+ * const input = {
70
+ * "AdministratorId": "123456789012",
71
+ * "InvitationId": "7ab938c5d52d7904ad09f9e7c20cc4eb"
72
+ * };
73
+ * const command = new AcceptAdministratorInvitationCommand(input);
74
+ * await client.send(command);
75
+ * // example id: to-accept-an-invitation-be-a-member-account-1674849870467
76
+ * ```
77
+ *
66
78
  */
67
79
  export declare class AcceptAdministratorInvitationCommand extends $Command<AcceptAdministratorInvitationCommandInput, AcceptAdministratorInvitationCommandOutput, SecurityHubClientResolvedConfig> {
68
80
  readonly input: AcceptAdministratorInvitationCommandInput;
@@ -59,6 +59,31 @@ export interface BatchDisableStandardsCommandOutput extends BatchDisableStandard
59
59
  * account or throttling limits. The error code describes the limit exceeded.</p>
60
60
  *
61
61
  *
62
+ * @example To disable one or more security standards
63
+ * ```javascript
64
+ * // The following example disables a security standard in Security Hub.
65
+ * const input = {
66
+ * "StandardsSubscriptionArns": [
67
+ * "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1"
68
+ * ]
69
+ * };
70
+ * const command = new BatchDisableStandardsCommand(input);
71
+ * const response = await client.send(command);
72
+ * /* response ==
73
+ * {
74
+ * "StandardsSubscriptions": [
75
+ * {
76
+ * "StandardsArn": "arn:aws:securityhub:eu-central-1::standards/pci-dss/v/3.2.1",
77
+ * "StandardsInput": {},
78
+ * "StandardsStatus": "DELETING",
79
+ * "StandardsSubscriptionArn": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1"
80
+ * }
81
+ * ]
82
+ * }
83
+ * *\/
84
+ * // example id: to-disable-one-or-more-security-standards-1674851507200
85
+ * ```
86
+ *
62
87
  */
63
88
  export declare class BatchDisableStandardsCommand extends $Command<BatchDisableStandardsCommandInput, BatchDisableStandardsCommandOutput, SecurityHubClientResolvedConfig> {
64
89
  readonly input: BatchDisableStandardsCommandInput;
@@ -65,6 +65,33 @@ export interface BatchEnableStandardsCommandOutput extends BatchEnableStandardsR
65
65
  * account or throttling limits. The error code describes the limit exceeded.</p>
66
66
  *
67
67
  *
68
+ * @example To import security findings from a third party provider to Security Hub
69
+ * ```javascript
70
+ * // The following example imports findings from a third party provider to Security Hub.
71
+ * const input = {
72
+ * "StandardsSubscriptionRequests": [
73
+ * {
74
+ * "StandardsArn": "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1"
75
+ * }
76
+ * ]
77
+ * };
78
+ * const command = new BatchEnableStandardsCommand(input);
79
+ * const response = await client.send(command);
80
+ * /* response ==
81
+ * {
82
+ * "StandardsSubscriptions": [
83
+ * {
84
+ * "StandardsArn": "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1",
85
+ * "StandardsInput": {},
86
+ * "StandardsStatus": "PENDING",
87
+ * "StandardsSubscriptionArn": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1"
88
+ * }
89
+ * ]
90
+ * }
91
+ * *\/
92
+ * // example id: to-import-security-findings-from-a-third-party-provider-to-security-hub-1675090935260
93
+ * ```
94
+ *
68
95
  */
69
96
  export declare class BatchEnableStandardsCommand extends $Command<BatchEnableStandardsCommandInput, BatchEnableStandardsCommandOutput, SecurityHubClientResolvedConfig> {
70
97
  readonly input: BatchEnableStandardsCommandInput;
@@ -3881,6 +3881,53 @@ export interface BatchImportFindingsCommandOutput extends BatchImportFindingsRes
3881
3881
  * account or throttling limits. The error code describes the limit exceeded.</p>
3882
3882
  *
3883
3883
  *
3884
+ * @example To import security findings from a third party provider to Security Hub
3885
+ * ```javascript
3886
+ * // The following example imports findings from a third party provider to Security Hub.
3887
+ * const input = {
3888
+ * "Findings": [
3889
+ * {
3890
+ * "AwsAccountId": "123456789012",
3891
+ * "CreatedAt": "2020-05-27T17:05:54.832Z",
3892
+ * "Description": "Vulnerability in a CloudTrail trail",
3893
+ * "FindingProviderFields": {
3894
+ * "Severity": {
3895
+ * "Label": "LOW",
3896
+ * "Original": "10"
3897
+ * },
3898
+ * "Types": [
3899
+ * "Software and Configuration Checks/Vulnerabilities/CVE"
3900
+ * ]
3901
+ * },
3902
+ * "GeneratorId": "TestGeneratorId",
3903
+ * "Id": "Id1",
3904
+ * "ProductArn": "arn:aws:securityhub:us-west-1:123456789012:product/123456789012/default",
3905
+ * "Resources": [
3906
+ * {
3907
+ * "Id": "arn:aws:cloudtrail:us-west-1:123456789012:trail/TrailName",
3908
+ * "Partition": "aws",
3909
+ * "Region": "us-west-1",
3910
+ * "Type": "AwsCloudTrailTrail"
3911
+ * }
3912
+ * ],
3913
+ * "SchemaVersion": "2018-10-08",
3914
+ * "Title": "CloudTrail trail vulnerability",
3915
+ * "UpdatedAt": "2020-06-02T16:05:54.832Z"
3916
+ * }
3917
+ * ]
3918
+ * };
3919
+ * const command = new BatchImportFindingsCommand(input);
3920
+ * const response = await client.send(command);
3921
+ * /* response ==
3922
+ * {
3923
+ * "FailedCount": 123,
3924
+ * "FailedFindings": [],
3925
+ * "SuccessCount": 123
3926
+ * }
3927
+ * *\/
3928
+ * // example id: to-import-security-findings-from-a-third-party-provider-to-security-hub-1675090935260
3929
+ * ```
3930
+ *
3884
3931
  */
3885
3932
  export declare class BatchImportFindingsCommand extends $Command<BatchImportFindingsCommandInput, BatchImportFindingsCommandOutput, SecurityHubClientResolvedConfig> {
3886
3933
  readonly input: BatchImportFindingsCommandInput;
@@ -144,6 +144,66 @@ export interface BatchUpdateFindingsCommandOutput extends BatchUpdateFindingsRes
144
144
  * account or throttling limits. The error code describes the limit exceeded.</p>
145
145
  *
146
146
  *
147
+ * @example To update Security Hub findings
148
+ * ```javascript
149
+ * // The following example updates Security Hub findings. The finding identifier parameter specifies which findings to update. Only specific finding fields can be updated with this operation.
150
+ * const input = {
151
+ * "Confidence": 80,
152
+ * "Criticality": 80,
153
+ * "FindingIdentifiers": [
154
+ * {
155
+ * "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
156
+ * "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
157
+ * },
158
+ * {
159
+ * "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
160
+ * "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
161
+ * }
162
+ * ],
163
+ * "Note": {
164
+ * "Text": "Known issue that is not a risk.",
165
+ * "UpdatedBy": "user1"
166
+ * },
167
+ * "RelatedFindings": [
168
+ * {
169
+ * "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
170
+ * "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
171
+ * }
172
+ * ],
173
+ * "Severity": {
174
+ * "Label": "LOW"
175
+ * },
176
+ * "Types": [
177
+ * "Software and Configuration Checks/Vulnerabilities/CVE"
178
+ * ],
179
+ * "UserDefinedFields": {
180
+ * "reviewedByCio": "true"
181
+ * },
182
+ * "VerificationState": "TRUE_POSITIVE",
183
+ * "Workflow": {
184
+ * "Status": "RESOLVED"
185
+ * }
186
+ * };
187
+ * const command = new BatchUpdateFindingsCommand(input);
188
+ * const response = await client.send(command);
189
+ * /* response ==
190
+ * {
191
+ * "ProcessedFindings": [
192
+ * {
193
+ * "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
194
+ * "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
195
+ * },
196
+ * {
197
+ * "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
198
+ * "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
199
+ * }
200
+ * ],
201
+ * "UnprocessedFindings": []
202
+ * }
203
+ * *\/
204
+ * // example id: to-update-security-hub-findings-1675183938248
205
+ * ```
206
+ *
147
207
  */
148
208
  export declare class BatchUpdateFindingsCommand extends $Command<BatchUpdateFindingsCommandInput, BatchUpdateFindingsCommandOutput, SecurityHubClientResolvedConfig> {
149
209
  readonly input: BatchUpdateFindingsCommandInput;
@@ -61,6 +61,24 @@ export interface CreateActionTargetCommandOutput extends CreateActionTargetRespo
61
61
  * <p>The resource specified in the request conflicts with an existing resource.</p>
62
62
  *
63
63
  *
64
+ * @example To create a custom action target
65
+ * ```javascript
66
+ * // The following example creates a custom action target in Security Hub. Custom actions on findings and insights automatically trigger actions in Amazon CloudWatch Events.
67
+ * const input = {
68
+ * "Description": "Action to send the finding for remediation tracking",
69
+ * "Id": "Remediation",
70
+ * "Name": "Send to remediation"
71
+ * };
72
+ * const command = new CreateActionTargetCommand(input);
73
+ * const response = await client.send(command);
74
+ * /* response ==
75
+ * {
76
+ * "ActionTargetArn": "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
77
+ * }
78
+ * *\/
79
+ * // example id: to-create-a-custom-action-target-1675184966299
80
+ * ```
81
+ *
64
82
  */
65
83
  export declare class CreateActionTargetCommand extends $Command<CreateActionTargetCommandInput, CreateActionTargetCommandOutput, SecurityHubClientResolvedConfig> {
66
84
  readonly input: CreateActionTargetCommandInput;
@@ -62,6 +62,32 @@ export interface CreateFindingAggregatorCommandOutput extends CreateFindingAggre
62
62
  * account or throttling limits. The error code describes the limit exceeded.</p>
63
63
  *
64
64
  *
65
+ * @example To enable cross-Region aggregation
66
+ * ```javascript
67
+ * // The following example creates a finding aggregator. This is required to enable cross-Region aggregation.
68
+ * const input = {
69
+ * "RegionLinkingMode": "SPECIFIED_REGIONS",
70
+ * "Regions": [
71
+ * "us-west-1",
72
+ * "us-west-2"
73
+ * ]
74
+ * };
75
+ * const command = new CreateFindingAggregatorCommand(input);
76
+ * const response = await client.send(command);
77
+ * /* response ==
78
+ * {
79
+ * "FindingAggregationRegion": "us-east-1",
80
+ * "FindingAggregatorArn": "arn:aws:securityhub:us-east-1:222222222222:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
81
+ * "RegionLinkingMode": "SPECIFIED_REGIONS",
82
+ * "Regions": [
83
+ * "us-west-1",
84
+ * "us-west-2"
85
+ * ]
86
+ * }
87
+ * *\/
88
+ * // example id: to-enable-cross-region-aggregation-1674766716226
89
+ * ```
90
+ *
65
91
  */
66
92
  export declare class CreateFindingAggregatorCommand extends $Command<CreateFindingAggregatorCommandInput, CreateFindingAggregatorCommandOutput, SecurityHubClientResolvedConfig> {
67
93
  readonly input: CreateFindingAggregatorCommandInput;
@@ -312,6 +312,37 @@ export interface CreateInsightCommandOutput extends CreateInsightResponse, __Met
312
312
  * <p>The resource specified in the request conflicts with an existing resource.</p>
313
313
  *
314
314
  *
315
+ * @example To create a custom insight
316
+ * ```javascript
317
+ * // The following example creates a custom insight in Security Hub. An insight is a collection of findings that relate to a security issue.
318
+ * const input = {
319
+ * "Filters": {
320
+ * "ResourceType": [
321
+ * {
322
+ * "Comparison": "EQUALS",
323
+ * "Value": "AwsIamRole"
324
+ * }
325
+ * ],
326
+ * "SeverityLabel": [
327
+ * {
328
+ * "Comparison": "EQUALS",
329
+ * "Value": "CRITICAL"
330
+ * }
331
+ * ]
332
+ * },
333
+ * "GroupByAttribute": "ResourceId",
334
+ * "Name": "Critical role findings"
335
+ * };
336
+ * const command = new CreateInsightCommand(input);
337
+ * const response = await client.send(command);
338
+ * /* response ==
339
+ * {
340
+ * "InsightArn": "arn:aws:securityhub:us-west-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
341
+ * }
342
+ * *\/
343
+ * // example id: to-create-a-custom-insight-1675354046628
344
+ * ```
345
+ *
315
346
  */
316
347
  export declare class CreateInsightCommand extends $Command<CreateInsightCommandInput, CreateInsightCommandOutput, SecurityHubClientResolvedConfig> {
317
348
  readonly input: CreateInsightCommandInput;
@@ -96,6 +96,29 @@ export interface CreateMembersCommandOutput extends CreateMembersResponse, __Met
96
96
  * <p>The resource specified in the request conflicts with an existing resource.</p>
97
97
  *
98
98
  *
99
+ * @example To add a member account
100
+ * ```javascript
101
+ * // The following example creates a member association between the specified accounts and the administrator account (the account that makes the request). This operation is used to add accounts that aren't part of an organization.
102
+ * const input = {
103
+ * "AccountDetails": [
104
+ * {
105
+ * "AccountId": "123456789012"
106
+ * },
107
+ * {
108
+ * "AccountId": "111122223333"
109
+ * }
110
+ * ]
111
+ * };
112
+ * const command = new CreateMembersCommand(input);
113
+ * const response = await client.send(command);
114
+ * /* response ==
115
+ * {
116
+ * "UnprocessedAccounts": []
117
+ * }
118
+ * *\/
119
+ * // example id: to-add-a-member-account-1675354709996
120
+ * ```
121
+ *
99
122
  */
100
123
  export declare class CreateMembersCommand extends $Command<CreateMembersCommandInput, CreateMembersCommandOutput, SecurityHubClientResolvedConfig> {
101
124
  readonly input: CreateMembersCommandInput;
@@ -58,6 +58,25 @@ export interface DeclineInvitationsCommandOutput extends DeclineInvitationsRespo
58
58
  * <p>The request was rejected because we can't find the specified resource.</p>
59
59
  *
60
60
  *
61
+ * @example To decline invitation to become a member account
62
+ * ```javascript
63
+ * // The following example declines an invitation from the Security Hub administrator account to become a member account. The invited account makes the request.
64
+ * const input = {
65
+ * "AccountIds": [
66
+ * "123456789012",
67
+ * "111122223333"
68
+ * ]
69
+ * };
70
+ * const command = new DeclineInvitationsCommand(input);
71
+ * const response = await client.send(command);
72
+ * /* response ==
73
+ * {
74
+ * "UnprocessedAccounts": []
75
+ * }
76
+ * *\/
77
+ * // example id: to-decline-invitation-to-become-a-member-account-1675448487605
78
+ * ```
79
+ *
61
80
  */
62
81
  export declare class DeclineInvitationsCommand extends $Command<DeclineInvitationsCommandInput, DeclineInvitationsCommandOutput, SecurityHubClientResolvedConfig> {
63
82
  readonly input: DeclineInvitationsCommandInput;
@@ -55,6 +55,22 @@ export interface DeleteActionTargetCommandOutput extends DeleteActionTargetRespo
55
55
  * <p>The request was rejected because we can't find the specified resource.</p>
56
56
  *
57
57
  *
58
+ * @example To delete a custom action target
59
+ * ```javascript
60
+ * // The following example deletes a custom action target that triggers target actions in Amazon CloudWatch Events. Deleting a custom action target doesn't affect findings or insights that were already sent to CloudWatch Events based on the custom action.
61
+ * const input = {
62
+ * "ActionTargetArn": "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
63
+ * };
64
+ * const command = new DeleteActionTargetCommand(input);
65
+ * const response = await client.send(command);
66
+ * /* response ==
67
+ * {
68
+ * "ActionTargetArn": "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
69
+ * }
70
+ * *\/
71
+ * // example id: to-delete-a-custom-action-target-1675449272793
72
+ * ```
73
+ *
58
74
  */
59
75
  export declare class DeleteActionTargetCommand extends $Command<DeleteActionTargetCommandInput, DeleteActionTargetCommandOutput, SecurityHubClientResolvedConfig> {
60
76
  readonly input: DeleteActionTargetCommandInput;
@@ -62,6 +62,17 @@ export interface DeleteFindingAggregatorCommandOutput extends DeleteFindingAggre
62
62
  * <p>The request was rejected because we can't find the specified resource.</p>
63
63
  *
64
64
  *
65
+ * @example To delete a finding aggregator
66
+ * ```javascript
67
+ * // The following example deletes a finding aggregator in Security Hub. Deleting the finding aggregator stops cross-Region aggregation. This operation produces no output.
68
+ * const input = {
69
+ * "FindingAggregatorArn": "arn:aws:securityhub:us-east-1:123456789012:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
70
+ * };
71
+ * const command = new DeleteFindingAggregatorCommand(input);
72
+ * await client.send(command);
73
+ * // example id: to-delete-a-finding-aggregator-1675701750629
74
+ * ```
75
+ *
65
76
  */
66
77
  export declare class DeleteFindingAggregatorCommand extends $Command<DeleteFindingAggregatorCommandInput, DeleteFindingAggregatorCommandOutput, SecurityHubClientResolvedConfig> {
67
78
  readonly input: DeleteFindingAggregatorCommandInput;
@@ -57,6 +57,22 @@ export interface DeleteInsightCommandOutput extends DeleteInsightResponse, __Met
57
57
  * <p>The request was rejected because we can't find the specified resource.</p>
58
58
  *
59
59
  *
60
+ * @example To delete a custom insight
61
+ * ```javascript
62
+ * // The following example deletes a custom insight in Security Hub.
63
+ * const input = {
64
+ * "InsightArn": "arn:aws:securityhub:us-west-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
65
+ * };
66
+ * const command = new DeleteInsightCommand(input);
67
+ * const response = await client.send(command);
68
+ * /* response ==
69
+ * {
70
+ * "InsightArn": "arn:aws:securityhub:eu-central-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
71
+ * }
72
+ * *\/
73
+ * // example id: to-delete-a-custom-insight-1675702697204
74
+ * ```
75
+ *
60
76
  */
61
77
  export declare class DeleteInsightCommand extends $Command<DeleteInsightCommandInput, DeleteInsightCommandOutput, SecurityHubClientResolvedConfig> {
62
78
  readonly input: DeleteInsightCommandInput;
@@ -62,6 +62,24 @@ export interface DeleteInvitationsCommandOutput extends DeleteInvitationsRespons
62
62
  * <p>The request was rejected because we can't find the specified resource.</p>
63
63
  *
64
64
  *
65
+ * @example To delete a custom insight
66
+ * ```javascript
67
+ * // The following example deletes an invitation sent by the Security Hub administrator account to a prospective member account. This operation is used only for invitations sent to accounts that aren't part of an organization. Organization accounts don't receive invitations.
68
+ * const input = {
69
+ * "AccountIds": [
70
+ * "123456789012"
71
+ * ]
72
+ * };
73
+ * const command = new DeleteInvitationsCommand(input);
74
+ * const response = await client.send(command);
75
+ * /* response ==
76
+ * {
77
+ * "UnprocessedAccounts": []
78
+ * }
79
+ * *\/
80
+ * // example id: to-delete-a-custom-insight-1675702697204
81
+ * ```
82
+ *
65
83
  */
66
84
  export declare class DeleteInvitationsCommand extends $Command<DeleteInvitationsCommandInput, DeleteInvitationsCommandOutput, SecurityHubClientResolvedConfig> {
67
85
  readonly input: DeleteInvitationsCommandInput;
@@ -61,6 +61,25 @@ export interface DeleteMembersCommandOutput extends DeleteMembersResponse, __Met
61
61
  * <p>The request was rejected because we can't find the specified resource.</p>
62
62
  *
63
63
  *
64
+ * @example To delete a member account
65
+ * ```javascript
66
+ * // The following example deletes the specified member account from Security Hub. This operation can be used to delete member accounts that are part of an organization or that were invited manually.
67
+ * const input = {
68
+ * "AccountIds": [
69
+ * "123456789111",
70
+ * "123456789222"
71
+ * ]
72
+ * };
73
+ * const command = new DeleteMembersCommand(input);
74
+ * const response = await client.send(command);
75
+ * /* response ==
76
+ * {
77
+ * "UnprocessedAccounts": []
78
+ * }
79
+ * *\/
80
+ * // example id: to-delete-a-member-account-1675883040513
81
+ * ```
82
+ *
64
83
  */
65
84
  export declare class DeleteMembersCommand extends $Command<DeleteMembersCommandInput, DeleteMembersCommandOutput, SecurityHubClientResolvedConfig> {
66
85
  readonly input: DeleteMembersCommandInput;
@@ -57,6 +57,30 @@ export interface DescribeActionTargetsCommandOutput extends DescribeActionTarget
57
57
  * <p>The request was rejected because we can't find the specified resource.</p>
58
58
  *
59
59
  *
60
+ * @example To return custom action targets
61
+ * ```javascript
62
+ * // The following example returns a list of custom action targets. You use custom actions on findings and insights in Security Hub to trigger target actions in Amazon CloudWatch Events.
63
+ * const input = {
64
+ * "ActionTargetArns": [
65
+ * "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
66
+ * ]
67
+ * };
68
+ * const command = new DescribeActionTargetsCommand(input);
69
+ * const response = await client.send(command);
70
+ * /* response ==
71
+ * {
72
+ * "ActionTargets": [
73
+ * {
74
+ * "ActionTargetArn": "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation",
75
+ * "Description": "Action to send the finding for remediation tracking",
76
+ * "Name": "Send to remediation"
77
+ * }
78
+ * ]
79
+ * }
80
+ * *\/
81
+ * // example id: to-return-custom-action-targets-1675883682038
82
+ * ```
83
+ *
60
84
  */
61
85
  export declare class DescribeActionTargetsCommand extends $Command<DescribeActionTargetsCommandInput, DescribeActionTargetsCommandOutput, SecurityHubClientResolvedConfig> {
62
86
  readonly input: DescribeActionTargetsCommandInput;
@@ -58,6 +58,25 @@ export interface DescribeHubCommandOutput extends DescribeHubResponse, __Metadat
58
58
  * <p>The request was rejected because we can't find the specified resource.</p>
59
59
  *
60
60
  *
61
+ * @example To return details about Hub resource
62
+ * ```javascript
63
+ * // The following example returns details about the Hub resource in the calling account. The Hub resource represents the implementation of the AWS Security Hub service in the calling account.
64
+ * const input = {
65
+ * "HubArn": "arn:aws:securityhub:us-west-1:123456789012:hub/default"
66
+ * };
67
+ * const command = new DescribeHubCommand(input);
68
+ * const response = await client.send(command);
69
+ * /* response ==
70
+ * {
71
+ * "AutoEnableControls": true,
72
+ * "ControlFindingGenerator": "SECURITY_CONTROL",
73
+ * "HubArn": "arn:aws:securityhub:us-west-1:123456789012:hub/default",
74
+ * "SubscribedAt": "2019-11-19T23:15:10.046Z"
75
+ * }
76
+ * *\/
77
+ * // example id: to-return-details-about-hub-resource-1675884542597
78
+ * ```
79
+ *
61
80
  */
62
81
  export declare class DescribeHubCommand extends $Command<DescribeHubCommandInput, DescribeHubCommandOutput, SecurityHubClientResolvedConfig> {
63
82
  readonly input: DescribeHubCommandInput;
@@ -53,6 +53,22 @@ export interface DescribeOrganizationConfigurationCommandOutput extends Describe
53
53
  * account or throttling limits. The error code describes the limit exceeded.</p>
54
54
  *
55
55
  *
56
+ * @example To get information about Organizations configuration
57
+ * ```javascript
58
+ * // The following example returns details about the way in which AWS Organizations is configured for a Security Hub account that belongs to an organization. Only a Security Hub administrator account can call this operation.
59
+ * const input = {};
60
+ * const command = new DescribeOrganizationConfigurationCommand(input);
61
+ * const response = await client.send(command);
62
+ * /* response ==
63
+ * {
64
+ * "AutoEnable": true,
65
+ * "AutoEnableStandards": "DEFAULT",
66
+ * "MemberAccountLimitReached": true
67
+ * }
68
+ * *\/
69
+ * // example id: to-get-information-about-organizations-configuration-1676059786304
70
+ * ```
71
+ *
56
72
  */
57
73
  export declare class DescribeOrganizationConfigurationCommand extends $Command<DescribeOrganizationConfigurationCommandInput, DescribeOrganizationConfigurationCommandOutput, SecurityHubClientResolvedConfig> {
58
74
  readonly input: DescribeOrganizationConfigurationCommandInput;
@@ -60,6 +60,45 @@ export interface DescribeProductsCommandOutput extends DescribeProductsResponse,
60
60
  * account or throttling limits. The error code describes the limit exceeded.</p>
61
61
  *
62
62
  *
63
+ * @example To get information about Security Hub integrations
64
+ * ```javascript
65
+ * // The following example returns details about AWS services and third-party products that Security Hub integrates with.
66
+ * const input = {
67
+ * "MaxResults": 1,
68
+ * "NextToken": "NULL",
69
+ * "ProductArn": "arn:aws:securityhub:us-east-1:517716713836:product/crowdstrike/crowdstrike-falcon"
70
+ * };
71
+ * const command = new DescribeProductsCommand(input);
72
+ * const response = await client.send(command);
73
+ * /* response ==
74
+ * {
75
+ * "NextToken": "U2FsdGVkX18vvPlOqb7RDrWRWVFBJI46MOIAb+nZmRJmR15NoRi2gm13sdQEn3O/pq/78dGs+bKpgA+7HMPHO0qX33/zoRI+uIG/F9yLNhcOrOWzFUdy36JcXLQji3Rpnn/cD1SVkGA98qI3zPOSDg==",
76
+ * "Products": [
77
+ * {
78
+ * "ActivationUrl": "https://falcon.crowdstrike.com/support/documentation",
79
+ * "Categories": [
80
+ * "Endpoint Detection and Response (EDR)",
81
+ * "AV Scanning and Sandboxing",
82
+ * "Threat Intelligence Feeds and Reports",
83
+ * "Endpoint Forensics",
84
+ * "Network Forensics"
85
+ * ],
86
+ * "CompanyName": "CrowdStrike",
87
+ * "Description": "CrowdStrike Falcon's single lightweight sensor unifies next-gen antivirus, endpoint detection and response, and 24/7 managed hunting, via the cloud.",
88
+ * "IntegrationTypes": [
89
+ * "SEND_FINDINGS_TO_SECURITY_HUB"
90
+ * ],
91
+ * "MarketplaceUrl": "https://aws.amazon.com/marketplace/seller-profile?id=a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
92
+ * "ProductArn": "arn:aws:securityhub:us-east-1:517716713836:product/crowdstrike/crowdstrike-falcon",
93
+ * "ProductName": "CrowdStrike Falcon",
94
+ * "ProductSubscriptionResourcePolicy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"123456789333\"},\"Action\":[\"securityhub:BatchImportFindings\"],\"Resource\":\"arn:aws:securityhub:us-west-1:123456789012:product-subscription/crowdstrike/crowdstrike-falcon\",\"Condition\":{\"StringEquals\":{\"securityhub:TargetAccount\":\"123456789012\"}}},{\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"123456789012\"},\"Action\":[\"securityhub:BatchImportFindings\"],\"Resource\":\"arn:aws:securityhub:us-west-1:123456789333:product/crowdstrike/crowdstrike-falcon\",\"Condition\":{\"StringEquals\":{\"securityhub:TargetAccount\":\"123456789012\"}}}]}"
95
+ * }
96
+ * ]
97
+ * }
98
+ * *\/
99
+ * // example id: to-get-information-about-security-hub-integrations-1676061228533
100
+ * ```
101
+ *
63
102
  */
64
103
  export declare class DescribeProductsCommand extends $Command<DescribeProductsCommandInput, DescribeProductsCommandOutput, SecurityHubClientResolvedConfig> {
65
104
  readonly input: DescribeProductsCommandInput;
@@ -52,6 +52,45 @@ export interface DescribeStandardsCommandOutput extends DescribeStandardsRespons
52
52
  * input parameter.</p>
53
53
  *
54
54
  *
55
+ * @example To get available Security Hub standards
56
+ * ```javascript
57
+ * // The following example returns a list of available security standards in Security Hub.
58
+ * const input = {};
59
+ * const command = new DescribeStandardsCommand(input);
60
+ * const response = await client.send(command);
61
+ * /* response ==
62
+ * {
63
+ * "Standards": [
64
+ * {
65
+ * "Description": "The AWS Foundational Security Best Practices standard is a set of automated security checks that detect when AWS accounts and deployed resources do not align to security best practices. The standard is defined by AWS security experts. This curated set of controls helps improve your security posture in AWS, and cover AWS's most popular and foundational services.",
66
+ * "EnabledByDefault": true,
67
+ * "Name": "AWS Foundational Security Best Practices v1.0.0",
68
+ * "StandardsArn": "arn:aws:securityhub:us-west-1::standards/aws-foundational-security-best-practices/v/1.0.0"
69
+ * },
70
+ * {
71
+ * "Description": "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.",
72
+ * "EnabledByDefault": true,
73
+ * "Name": "CIS AWS Foundations Benchmark v1.2.0",
74
+ * "StandardsArn": "arn:aws:securityhub:us-west-1::ruleset/cis-aws-foundations-benchmark/v/1.2.0"
75
+ * },
76
+ * {
77
+ * "Description": "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.4.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.",
78
+ * "EnabledByDefault": false,
79
+ * "Name": "CIS AWS Foundations Benchmark v1.4.0",
80
+ * "StandardsArn": "arn:aws::securityhub:us-west-1::standards/cis-aws-foundations-benchmark/v/1.4.0"
81
+ * },
82
+ * {
83
+ * "Description": "The Payment Card Industry Data Security Standard (PCI DSS) v3.2.1 is an information security standard for entities that store, process, and/or transmit cardholder data. This Security Hub standard automatically checks for your compliance readiness against a subset of PCI DSS requirements.",
84
+ * "EnabledByDefault": false,
85
+ * "Name": "PCI DSS v3.2.1",
86
+ * "StandardsArn": "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1"
87
+ * }
88
+ * ]
89
+ * }
90
+ * *\/
91
+ * // example id: to-get-available-security-hub-standards-1676307464661
92
+ * ```
93
+ *
55
94
  */
56
95
  export declare class DescribeStandardsCommand extends $Command<DescribeStandardsCommandInput, DescribeStandardsCommandOutput, SecurityHubClientResolvedConfig> {
57
96
  readonly input: DescribeStandardsCommandInput;