@aws-sdk/client-securityhub 3.316.0 → 3.319.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +12 -0
- package/dist-types/commands/BatchDisableStandardsCommand.d.ts +25 -0
- package/dist-types/commands/BatchEnableStandardsCommand.d.ts +27 -0
- package/dist-types/commands/BatchImportFindingsCommand.d.ts +47 -0
- package/dist-types/commands/BatchUpdateFindingsCommand.d.ts +60 -0
- package/dist-types/commands/CreateActionTargetCommand.d.ts +18 -0
- package/dist-types/commands/CreateFindingAggregatorCommand.d.ts +26 -0
- package/dist-types/commands/CreateInsightCommand.d.ts +31 -0
- package/dist-types/commands/CreateMembersCommand.d.ts +23 -0
- package/dist-types/commands/DeclineInvitationsCommand.d.ts +19 -0
- package/dist-types/commands/DeleteActionTargetCommand.d.ts +16 -0
- package/dist-types/commands/DeleteFindingAggregatorCommand.d.ts +11 -0
- package/dist-types/commands/DeleteInsightCommand.d.ts +16 -0
- package/dist-types/commands/DeleteInvitationsCommand.d.ts +18 -0
- package/dist-types/commands/DeleteMembersCommand.d.ts +19 -0
- package/dist-types/commands/DescribeActionTargetsCommand.d.ts +24 -0
- package/dist-types/commands/DescribeHubCommand.d.ts +19 -0
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +16 -0
- package/dist-types/commands/DescribeProductsCommand.d.ts +39 -0
- package/dist-types/commands/DescribeStandardsCommand.d.ts +39 -0
- package/dist-types/commands/DescribeStandardsControlsCommand.d.ts +46 -0
- package/dist-types/commands/DisableImportFindingsForProductCommand.d.ts +11 -0
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +11 -0
- package/dist-types/commands/DisableSecurityHubCommand.d.ts +9 -0
- package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +9 -0
- package/dist-types/commands/DisassociateMembersCommand.d.ts +14 -0
- package/dist-types/commands/EnableImportFindingsForProductCommand.d.ts +16 -0
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +11 -0
- package/dist-types/commands/EnableSecurityHubCommand.d.ts +14 -0
- package/dist-types/commands/GetAdministratorAccountCommand.d.ts +19 -0
- package/dist-types/commands/GetEnabledStandardsCommand.d.ts +25 -0
- package/dist-types/commands/GetFindingAggregatorCommand.d.ts +22 -0
- package/dist-types/commands/GetFindingsCommand.d.ts +111 -0
- package/dist-types/commands/GetInsightResultsCommand.d.ts +29 -0
- package/dist-types/commands/GetInsightsCommand.d.ts +38 -0
- package/dist-types/commands/GetInvitationsCountCommand.d.ts +16 -0
- package/dist-types/commands/GetMembersCommand.d.ts +37 -0
- package/dist-types/commands/InviteMembersCommand.d.ts +19 -0
- package/dist-types/commands/ListEnabledProductsForImportCommand.d.ts +17 -0
- package/dist-types/commands/ListFindingAggregatorsCommand.d.ts +18 -0
- package/dist-types/commands/ListInvitationsCommand.d.ts +21 -0
- package/dist-types/commands/ListMembersCommand.d.ts +31 -0
- package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +21 -0
- package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +44 -0
- package/dist-types/commands/ListStandardsControlAssociationsCommand.d.ts +44 -0
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +19 -0
- package/dist-types/commands/TagResourceCommand.d.ts +15 -0
- package/dist-types/commands/UntagResourceCommand.d.ts +14 -0
- package/dist-types/commands/UpdateActionTargetCommand.d.ts +13 -0
- package/dist-types/commands/UpdateFindingAggregatorCommand.d.ts +27 -0
- package/dist-types/commands/UpdateInsightCommand.d.ts +26 -0
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +11 -0
- package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +12 -0
- package/dist-types/commands/UpdateStandardsControlCommand.d.ts +13 -0
- package/package.json +5 -5
|
@@ -63,6 +63,18 @@ export interface AcceptAdministratorInvitationCommandOutput extends AcceptAdmini
|
|
|
63
63
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
64
64
|
*
|
|
65
65
|
*
|
|
66
|
+
* @example To accept an invitation be a member account
|
|
67
|
+
* ```javascript
|
|
68
|
+
* // The following example demonstrates how an account can accept an invitation from the Security Hub administrator account to be a member account. This operation is applicable only to member accounts that are not added through AWS Organizations.
|
|
69
|
+
* const input = {
|
|
70
|
+
* "AdministratorId": "123456789012",
|
|
71
|
+
* "InvitationId": "7ab938c5d52d7904ad09f9e7c20cc4eb"
|
|
72
|
+
* };
|
|
73
|
+
* const command = new AcceptAdministratorInvitationCommand(input);
|
|
74
|
+
* await client.send(command);
|
|
75
|
+
* // example id: to-accept-an-invitation-be-a-member-account-1674849870467
|
|
76
|
+
* ```
|
|
77
|
+
*
|
|
66
78
|
*/
|
|
67
79
|
export declare class AcceptAdministratorInvitationCommand extends $Command<AcceptAdministratorInvitationCommandInput, AcceptAdministratorInvitationCommandOutput, SecurityHubClientResolvedConfig> {
|
|
68
80
|
readonly input: AcceptAdministratorInvitationCommandInput;
|
|
@@ -59,6 +59,31 @@ export interface BatchDisableStandardsCommandOutput extends BatchDisableStandard
|
|
|
59
59
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
60
60
|
*
|
|
61
61
|
*
|
|
62
|
+
* @example To disable one or more security standards
|
|
63
|
+
* ```javascript
|
|
64
|
+
* // The following example disables a security standard in Security Hub.
|
|
65
|
+
* const input = {
|
|
66
|
+
* "StandardsSubscriptionArns": [
|
|
67
|
+
* "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1"
|
|
68
|
+
* ]
|
|
69
|
+
* };
|
|
70
|
+
* const command = new BatchDisableStandardsCommand(input);
|
|
71
|
+
* const response = await client.send(command);
|
|
72
|
+
* /* response ==
|
|
73
|
+
* {
|
|
74
|
+
* "StandardsSubscriptions": [
|
|
75
|
+
* {
|
|
76
|
+
* "StandardsArn": "arn:aws:securityhub:eu-central-1::standards/pci-dss/v/3.2.1",
|
|
77
|
+
* "StandardsInput": {},
|
|
78
|
+
* "StandardsStatus": "DELETING",
|
|
79
|
+
* "StandardsSubscriptionArn": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1"
|
|
80
|
+
* }
|
|
81
|
+
* ]
|
|
82
|
+
* }
|
|
83
|
+
* *\/
|
|
84
|
+
* // example id: to-disable-one-or-more-security-standards-1674851507200
|
|
85
|
+
* ```
|
|
86
|
+
*
|
|
62
87
|
*/
|
|
63
88
|
export declare class BatchDisableStandardsCommand extends $Command<BatchDisableStandardsCommandInput, BatchDisableStandardsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
64
89
|
readonly input: BatchDisableStandardsCommandInput;
|
|
@@ -65,6 +65,33 @@ export interface BatchEnableStandardsCommandOutput extends BatchEnableStandardsR
|
|
|
65
65
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
66
66
|
*
|
|
67
67
|
*
|
|
68
|
+
* @example To import security findings from a third party provider to Security Hub
|
|
69
|
+
* ```javascript
|
|
70
|
+
* // The following example imports findings from a third party provider to Security Hub.
|
|
71
|
+
* const input = {
|
|
72
|
+
* "StandardsSubscriptionRequests": [
|
|
73
|
+
* {
|
|
74
|
+
* "StandardsArn": "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1"
|
|
75
|
+
* }
|
|
76
|
+
* ]
|
|
77
|
+
* };
|
|
78
|
+
* const command = new BatchEnableStandardsCommand(input);
|
|
79
|
+
* const response = await client.send(command);
|
|
80
|
+
* /* response ==
|
|
81
|
+
* {
|
|
82
|
+
* "StandardsSubscriptions": [
|
|
83
|
+
* {
|
|
84
|
+
* "StandardsArn": "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1",
|
|
85
|
+
* "StandardsInput": {},
|
|
86
|
+
* "StandardsStatus": "PENDING",
|
|
87
|
+
* "StandardsSubscriptionArn": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1"
|
|
88
|
+
* }
|
|
89
|
+
* ]
|
|
90
|
+
* }
|
|
91
|
+
* *\/
|
|
92
|
+
* // example id: to-import-security-findings-from-a-third-party-provider-to-security-hub-1675090935260
|
|
93
|
+
* ```
|
|
94
|
+
*
|
|
68
95
|
*/
|
|
69
96
|
export declare class BatchEnableStandardsCommand extends $Command<BatchEnableStandardsCommandInput, BatchEnableStandardsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
70
97
|
readonly input: BatchEnableStandardsCommandInput;
|
|
@@ -3881,6 +3881,53 @@ export interface BatchImportFindingsCommandOutput extends BatchImportFindingsRes
|
|
|
3881
3881
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
3882
3882
|
*
|
|
3883
3883
|
*
|
|
3884
|
+
* @example To import security findings from a third party provider to Security Hub
|
|
3885
|
+
* ```javascript
|
|
3886
|
+
* // The following example imports findings from a third party provider to Security Hub.
|
|
3887
|
+
* const input = {
|
|
3888
|
+
* "Findings": [
|
|
3889
|
+
* {
|
|
3890
|
+
* "AwsAccountId": "123456789012",
|
|
3891
|
+
* "CreatedAt": "2020-05-27T17:05:54.832Z",
|
|
3892
|
+
* "Description": "Vulnerability in a CloudTrail trail",
|
|
3893
|
+
* "FindingProviderFields": {
|
|
3894
|
+
* "Severity": {
|
|
3895
|
+
* "Label": "LOW",
|
|
3896
|
+
* "Original": "10"
|
|
3897
|
+
* },
|
|
3898
|
+
* "Types": [
|
|
3899
|
+
* "Software and Configuration Checks/Vulnerabilities/CVE"
|
|
3900
|
+
* ]
|
|
3901
|
+
* },
|
|
3902
|
+
* "GeneratorId": "TestGeneratorId",
|
|
3903
|
+
* "Id": "Id1",
|
|
3904
|
+
* "ProductArn": "arn:aws:securityhub:us-west-1:123456789012:product/123456789012/default",
|
|
3905
|
+
* "Resources": [
|
|
3906
|
+
* {
|
|
3907
|
+
* "Id": "arn:aws:cloudtrail:us-west-1:123456789012:trail/TrailName",
|
|
3908
|
+
* "Partition": "aws",
|
|
3909
|
+
* "Region": "us-west-1",
|
|
3910
|
+
* "Type": "AwsCloudTrailTrail"
|
|
3911
|
+
* }
|
|
3912
|
+
* ],
|
|
3913
|
+
* "SchemaVersion": "2018-10-08",
|
|
3914
|
+
* "Title": "CloudTrail trail vulnerability",
|
|
3915
|
+
* "UpdatedAt": "2020-06-02T16:05:54.832Z"
|
|
3916
|
+
* }
|
|
3917
|
+
* ]
|
|
3918
|
+
* };
|
|
3919
|
+
* const command = new BatchImportFindingsCommand(input);
|
|
3920
|
+
* const response = await client.send(command);
|
|
3921
|
+
* /* response ==
|
|
3922
|
+
* {
|
|
3923
|
+
* "FailedCount": 123,
|
|
3924
|
+
* "FailedFindings": [],
|
|
3925
|
+
* "SuccessCount": 123
|
|
3926
|
+
* }
|
|
3927
|
+
* *\/
|
|
3928
|
+
* // example id: to-import-security-findings-from-a-third-party-provider-to-security-hub-1675090935260
|
|
3929
|
+
* ```
|
|
3930
|
+
*
|
|
3884
3931
|
*/
|
|
3885
3932
|
export declare class BatchImportFindingsCommand extends $Command<BatchImportFindingsCommandInput, BatchImportFindingsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
3886
3933
|
readonly input: BatchImportFindingsCommandInput;
|
|
@@ -144,6 +144,66 @@ export interface BatchUpdateFindingsCommandOutput extends BatchUpdateFindingsRes
|
|
|
144
144
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
145
145
|
*
|
|
146
146
|
*
|
|
147
|
+
* @example To update Security Hub findings
|
|
148
|
+
* ```javascript
|
|
149
|
+
* // The following example updates Security Hub findings. The finding identifier parameter specifies which findings to update. Only specific finding fields can be updated with this operation.
|
|
150
|
+
* const input = {
|
|
151
|
+
* "Confidence": 80,
|
|
152
|
+
* "Criticality": 80,
|
|
153
|
+
* "FindingIdentifiers": [
|
|
154
|
+
* {
|
|
155
|
+
* "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
156
|
+
* "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
|
|
157
|
+
* },
|
|
158
|
+
* {
|
|
159
|
+
* "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
|
|
160
|
+
* "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
|
|
161
|
+
* }
|
|
162
|
+
* ],
|
|
163
|
+
* "Note": {
|
|
164
|
+
* "Text": "Known issue that is not a risk.",
|
|
165
|
+
* "UpdatedBy": "user1"
|
|
166
|
+
* },
|
|
167
|
+
* "RelatedFindings": [
|
|
168
|
+
* {
|
|
169
|
+
* "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
|
|
170
|
+
* "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
|
|
171
|
+
* }
|
|
172
|
+
* ],
|
|
173
|
+
* "Severity": {
|
|
174
|
+
* "Label": "LOW"
|
|
175
|
+
* },
|
|
176
|
+
* "Types": [
|
|
177
|
+
* "Software and Configuration Checks/Vulnerabilities/CVE"
|
|
178
|
+
* ],
|
|
179
|
+
* "UserDefinedFields": {
|
|
180
|
+
* "reviewedByCio": "true"
|
|
181
|
+
* },
|
|
182
|
+
* "VerificationState": "TRUE_POSITIVE",
|
|
183
|
+
* "Workflow": {
|
|
184
|
+
* "Status": "RESOLVED"
|
|
185
|
+
* }
|
|
186
|
+
* };
|
|
187
|
+
* const command = new BatchUpdateFindingsCommand(input);
|
|
188
|
+
* const response = await client.send(command);
|
|
189
|
+
* /* response ==
|
|
190
|
+
* {
|
|
191
|
+
* "ProcessedFindings": [
|
|
192
|
+
* {
|
|
193
|
+
* "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
194
|
+
* "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
|
|
195
|
+
* },
|
|
196
|
+
* {
|
|
197
|
+
* "Id": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1/PCI.Lambda.2/finding/a1b2c3d4-5678-90ab-cdef-EXAMPLE22222",
|
|
198
|
+
* "ProductArn": "arn:aws:securityhub:us-west-1::product/aws/securityhub"
|
|
199
|
+
* }
|
|
200
|
+
* ],
|
|
201
|
+
* "UnprocessedFindings": []
|
|
202
|
+
* }
|
|
203
|
+
* *\/
|
|
204
|
+
* // example id: to-update-security-hub-findings-1675183938248
|
|
205
|
+
* ```
|
|
206
|
+
*
|
|
147
207
|
*/
|
|
148
208
|
export declare class BatchUpdateFindingsCommand extends $Command<BatchUpdateFindingsCommandInput, BatchUpdateFindingsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
149
209
|
readonly input: BatchUpdateFindingsCommandInput;
|
|
@@ -61,6 +61,24 @@ export interface CreateActionTargetCommandOutput extends CreateActionTargetRespo
|
|
|
61
61
|
* <p>The resource specified in the request conflicts with an existing resource.</p>
|
|
62
62
|
*
|
|
63
63
|
*
|
|
64
|
+
* @example To create a custom action target
|
|
65
|
+
* ```javascript
|
|
66
|
+
* // The following example creates a custom action target in Security Hub. Custom actions on findings and insights automatically trigger actions in Amazon CloudWatch Events.
|
|
67
|
+
* const input = {
|
|
68
|
+
* "Description": "Action to send the finding for remediation tracking",
|
|
69
|
+
* "Id": "Remediation",
|
|
70
|
+
* "Name": "Send to remediation"
|
|
71
|
+
* };
|
|
72
|
+
* const command = new CreateActionTargetCommand(input);
|
|
73
|
+
* const response = await client.send(command);
|
|
74
|
+
* /* response ==
|
|
75
|
+
* {
|
|
76
|
+
* "ActionTargetArn": "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
|
|
77
|
+
* }
|
|
78
|
+
* *\/
|
|
79
|
+
* // example id: to-create-a-custom-action-target-1675184966299
|
|
80
|
+
* ```
|
|
81
|
+
*
|
|
64
82
|
*/
|
|
65
83
|
export declare class CreateActionTargetCommand extends $Command<CreateActionTargetCommandInput, CreateActionTargetCommandOutput, SecurityHubClientResolvedConfig> {
|
|
66
84
|
readonly input: CreateActionTargetCommandInput;
|
|
@@ -62,6 +62,32 @@ export interface CreateFindingAggregatorCommandOutput extends CreateFindingAggre
|
|
|
62
62
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
63
63
|
*
|
|
64
64
|
*
|
|
65
|
+
* @example To enable cross-Region aggregation
|
|
66
|
+
* ```javascript
|
|
67
|
+
* // The following example creates a finding aggregator. This is required to enable cross-Region aggregation.
|
|
68
|
+
* const input = {
|
|
69
|
+
* "RegionLinkingMode": "SPECIFIED_REGIONS",
|
|
70
|
+
* "Regions": [
|
|
71
|
+
* "us-west-1",
|
|
72
|
+
* "us-west-2"
|
|
73
|
+
* ]
|
|
74
|
+
* };
|
|
75
|
+
* const command = new CreateFindingAggregatorCommand(input);
|
|
76
|
+
* const response = await client.send(command);
|
|
77
|
+
* /* response ==
|
|
78
|
+
* {
|
|
79
|
+
* "FindingAggregationRegion": "us-east-1",
|
|
80
|
+
* "FindingAggregatorArn": "arn:aws:securityhub:us-east-1:222222222222:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
81
|
+
* "RegionLinkingMode": "SPECIFIED_REGIONS",
|
|
82
|
+
* "Regions": [
|
|
83
|
+
* "us-west-1",
|
|
84
|
+
* "us-west-2"
|
|
85
|
+
* ]
|
|
86
|
+
* }
|
|
87
|
+
* *\/
|
|
88
|
+
* // example id: to-enable-cross-region-aggregation-1674766716226
|
|
89
|
+
* ```
|
|
90
|
+
*
|
|
65
91
|
*/
|
|
66
92
|
export declare class CreateFindingAggregatorCommand extends $Command<CreateFindingAggregatorCommandInput, CreateFindingAggregatorCommandOutput, SecurityHubClientResolvedConfig> {
|
|
67
93
|
readonly input: CreateFindingAggregatorCommandInput;
|
|
@@ -312,6 +312,37 @@ export interface CreateInsightCommandOutput extends CreateInsightResponse, __Met
|
|
|
312
312
|
* <p>The resource specified in the request conflicts with an existing resource.</p>
|
|
313
313
|
*
|
|
314
314
|
*
|
|
315
|
+
* @example To create a custom insight
|
|
316
|
+
* ```javascript
|
|
317
|
+
* // The following example creates a custom insight in Security Hub. An insight is a collection of findings that relate to a security issue.
|
|
318
|
+
* const input = {
|
|
319
|
+
* "Filters": {
|
|
320
|
+
* "ResourceType": [
|
|
321
|
+
* {
|
|
322
|
+
* "Comparison": "EQUALS",
|
|
323
|
+
* "Value": "AwsIamRole"
|
|
324
|
+
* }
|
|
325
|
+
* ],
|
|
326
|
+
* "SeverityLabel": [
|
|
327
|
+
* {
|
|
328
|
+
* "Comparison": "EQUALS",
|
|
329
|
+
* "Value": "CRITICAL"
|
|
330
|
+
* }
|
|
331
|
+
* ]
|
|
332
|
+
* },
|
|
333
|
+
* "GroupByAttribute": "ResourceId",
|
|
334
|
+
* "Name": "Critical role findings"
|
|
335
|
+
* };
|
|
336
|
+
* const command = new CreateInsightCommand(input);
|
|
337
|
+
* const response = await client.send(command);
|
|
338
|
+
* /* response ==
|
|
339
|
+
* {
|
|
340
|
+
* "InsightArn": "arn:aws:securityhub:us-west-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
341
|
+
* }
|
|
342
|
+
* *\/
|
|
343
|
+
* // example id: to-create-a-custom-insight-1675354046628
|
|
344
|
+
* ```
|
|
345
|
+
*
|
|
315
346
|
*/
|
|
316
347
|
export declare class CreateInsightCommand extends $Command<CreateInsightCommandInput, CreateInsightCommandOutput, SecurityHubClientResolvedConfig> {
|
|
317
348
|
readonly input: CreateInsightCommandInput;
|
|
@@ -96,6 +96,29 @@ export interface CreateMembersCommandOutput extends CreateMembersResponse, __Met
|
|
|
96
96
|
* <p>The resource specified in the request conflicts with an existing resource.</p>
|
|
97
97
|
*
|
|
98
98
|
*
|
|
99
|
+
* @example To add a member account
|
|
100
|
+
* ```javascript
|
|
101
|
+
* // The following example creates a member association between the specified accounts and the administrator account (the account that makes the request). This operation is used to add accounts that aren't part of an organization.
|
|
102
|
+
* const input = {
|
|
103
|
+
* "AccountDetails": [
|
|
104
|
+
* {
|
|
105
|
+
* "AccountId": "123456789012"
|
|
106
|
+
* },
|
|
107
|
+
* {
|
|
108
|
+
* "AccountId": "111122223333"
|
|
109
|
+
* }
|
|
110
|
+
* ]
|
|
111
|
+
* };
|
|
112
|
+
* const command = new CreateMembersCommand(input);
|
|
113
|
+
* const response = await client.send(command);
|
|
114
|
+
* /* response ==
|
|
115
|
+
* {
|
|
116
|
+
* "UnprocessedAccounts": []
|
|
117
|
+
* }
|
|
118
|
+
* *\/
|
|
119
|
+
* // example id: to-add-a-member-account-1675354709996
|
|
120
|
+
* ```
|
|
121
|
+
*
|
|
99
122
|
*/
|
|
100
123
|
export declare class CreateMembersCommand extends $Command<CreateMembersCommandInput, CreateMembersCommandOutput, SecurityHubClientResolvedConfig> {
|
|
101
124
|
readonly input: CreateMembersCommandInput;
|
|
@@ -58,6 +58,25 @@ export interface DeclineInvitationsCommandOutput extends DeclineInvitationsRespo
|
|
|
58
58
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
59
59
|
*
|
|
60
60
|
*
|
|
61
|
+
* @example To decline invitation to become a member account
|
|
62
|
+
* ```javascript
|
|
63
|
+
* // The following example declines an invitation from the Security Hub administrator account to become a member account. The invited account makes the request.
|
|
64
|
+
* const input = {
|
|
65
|
+
* "AccountIds": [
|
|
66
|
+
* "123456789012",
|
|
67
|
+
* "111122223333"
|
|
68
|
+
* ]
|
|
69
|
+
* };
|
|
70
|
+
* const command = new DeclineInvitationsCommand(input);
|
|
71
|
+
* const response = await client.send(command);
|
|
72
|
+
* /* response ==
|
|
73
|
+
* {
|
|
74
|
+
* "UnprocessedAccounts": []
|
|
75
|
+
* }
|
|
76
|
+
* *\/
|
|
77
|
+
* // example id: to-decline-invitation-to-become-a-member-account-1675448487605
|
|
78
|
+
* ```
|
|
79
|
+
*
|
|
61
80
|
*/
|
|
62
81
|
export declare class DeclineInvitationsCommand extends $Command<DeclineInvitationsCommandInput, DeclineInvitationsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
63
82
|
readonly input: DeclineInvitationsCommandInput;
|
|
@@ -55,6 +55,22 @@ export interface DeleteActionTargetCommandOutput extends DeleteActionTargetRespo
|
|
|
55
55
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
56
56
|
*
|
|
57
57
|
*
|
|
58
|
+
* @example To delete a custom action target
|
|
59
|
+
* ```javascript
|
|
60
|
+
* // The following example deletes a custom action target that triggers target actions in Amazon CloudWatch Events. Deleting a custom action target doesn't affect findings or insights that were already sent to CloudWatch Events based on the custom action.
|
|
61
|
+
* const input = {
|
|
62
|
+
* "ActionTargetArn": "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
|
|
63
|
+
* };
|
|
64
|
+
* const command = new DeleteActionTargetCommand(input);
|
|
65
|
+
* const response = await client.send(command);
|
|
66
|
+
* /* response ==
|
|
67
|
+
* {
|
|
68
|
+
* "ActionTargetArn": "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
|
|
69
|
+
* }
|
|
70
|
+
* *\/
|
|
71
|
+
* // example id: to-delete-a-custom-action-target-1675449272793
|
|
72
|
+
* ```
|
|
73
|
+
*
|
|
58
74
|
*/
|
|
59
75
|
export declare class DeleteActionTargetCommand extends $Command<DeleteActionTargetCommandInput, DeleteActionTargetCommandOutput, SecurityHubClientResolvedConfig> {
|
|
60
76
|
readonly input: DeleteActionTargetCommandInput;
|
|
@@ -62,6 +62,17 @@ export interface DeleteFindingAggregatorCommandOutput extends DeleteFindingAggre
|
|
|
62
62
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
63
63
|
*
|
|
64
64
|
*
|
|
65
|
+
* @example To delete a finding aggregator
|
|
66
|
+
* ```javascript
|
|
67
|
+
* // The following example deletes a finding aggregator in Security Hub. Deleting the finding aggregator stops cross-Region aggregation. This operation produces no output.
|
|
68
|
+
* const input = {
|
|
69
|
+
* "FindingAggregatorArn": "arn:aws:securityhub:us-east-1:123456789012:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
70
|
+
* };
|
|
71
|
+
* const command = new DeleteFindingAggregatorCommand(input);
|
|
72
|
+
* await client.send(command);
|
|
73
|
+
* // example id: to-delete-a-finding-aggregator-1675701750629
|
|
74
|
+
* ```
|
|
75
|
+
*
|
|
65
76
|
*/
|
|
66
77
|
export declare class DeleteFindingAggregatorCommand extends $Command<DeleteFindingAggregatorCommandInput, DeleteFindingAggregatorCommandOutput, SecurityHubClientResolvedConfig> {
|
|
67
78
|
readonly input: DeleteFindingAggregatorCommandInput;
|
|
@@ -57,6 +57,22 @@ export interface DeleteInsightCommandOutput extends DeleteInsightResponse, __Met
|
|
|
57
57
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
58
58
|
*
|
|
59
59
|
*
|
|
60
|
+
* @example To delete a custom insight
|
|
61
|
+
* ```javascript
|
|
62
|
+
* // The following example deletes a custom insight in Security Hub.
|
|
63
|
+
* const input = {
|
|
64
|
+
* "InsightArn": "arn:aws:securityhub:us-west-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
65
|
+
* };
|
|
66
|
+
* const command = new DeleteInsightCommand(input);
|
|
67
|
+
* const response = await client.send(command);
|
|
68
|
+
* /* response ==
|
|
69
|
+
* {
|
|
70
|
+
* "InsightArn": "arn:aws:securityhub:eu-central-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
71
|
+
* }
|
|
72
|
+
* *\/
|
|
73
|
+
* // example id: to-delete-a-custom-insight-1675702697204
|
|
74
|
+
* ```
|
|
75
|
+
*
|
|
60
76
|
*/
|
|
61
77
|
export declare class DeleteInsightCommand extends $Command<DeleteInsightCommandInput, DeleteInsightCommandOutput, SecurityHubClientResolvedConfig> {
|
|
62
78
|
readonly input: DeleteInsightCommandInput;
|
|
@@ -62,6 +62,24 @@ export interface DeleteInvitationsCommandOutput extends DeleteInvitationsRespons
|
|
|
62
62
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
63
63
|
*
|
|
64
64
|
*
|
|
65
|
+
* @example To delete a custom insight
|
|
66
|
+
* ```javascript
|
|
67
|
+
* // The following example deletes an invitation sent by the Security Hub administrator account to a prospective member account. This operation is used only for invitations sent to accounts that aren't part of an organization. Organization accounts don't receive invitations.
|
|
68
|
+
* const input = {
|
|
69
|
+
* "AccountIds": [
|
|
70
|
+
* "123456789012"
|
|
71
|
+
* ]
|
|
72
|
+
* };
|
|
73
|
+
* const command = new DeleteInvitationsCommand(input);
|
|
74
|
+
* const response = await client.send(command);
|
|
75
|
+
* /* response ==
|
|
76
|
+
* {
|
|
77
|
+
* "UnprocessedAccounts": []
|
|
78
|
+
* }
|
|
79
|
+
* *\/
|
|
80
|
+
* // example id: to-delete-a-custom-insight-1675702697204
|
|
81
|
+
* ```
|
|
82
|
+
*
|
|
65
83
|
*/
|
|
66
84
|
export declare class DeleteInvitationsCommand extends $Command<DeleteInvitationsCommandInput, DeleteInvitationsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
67
85
|
readonly input: DeleteInvitationsCommandInput;
|
|
@@ -61,6 +61,25 @@ export interface DeleteMembersCommandOutput extends DeleteMembersResponse, __Met
|
|
|
61
61
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
62
62
|
*
|
|
63
63
|
*
|
|
64
|
+
* @example To delete a member account
|
|
65
|
+
* ```javascript
|
|
66
|
+
* // The following example deletes the specified member account from Security Hub. This operation can be used to delete member accounts that are part of an organization or that were invited manually.
|
|
67
|
+
* const input = {
|
|
68
|
+
* "AccountIds": [
|
|
69
|
+
* "123456789111",
|
|
70
|
+
* "123456789222"
|
|
71
|
+
* ]
|
|
72
|
+
* };
|
|
73
|
+
* const command = new DeleteMembersCommand(input);
|
|
74
|
+
* const response = await client.send(command);
|
|
75
|
+
* /* response ==
|
|
76
|
+
* {
|
|
77
|
+
* "UnprocessedAccounts": []
|
|
78
|
+
* }
|
|
79
|
+
* *\/
|
|
80
|
+
* // example id: to-delete-a-member-account-1675883040513
|
|
81
|
+
* ```
|
|
82
|
+
*
|
|
64
83
|
*/
|
|
65
84
|
export declare class DeleteMembersCommand extends $Command<DeleteMembersCommandInput, DeleteMembersCommandOutput, SecurityHubClientResolvedConfig> {
|
|
66
85
|
readonly input: DeleteMembersCommandInput;
|
|
@@ -57,6 +57,30 @@ export interface DescribeActionTargetsCommandOutput extends DescribeActionTarget
|
|
|
57
57
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
58
58
|
*
|
|
59
59
|
*
|
|
60
|
+
* @example To return custom action targets
|
|
61
|
+
* ```javascript
|
|
62
|
+
* // The following example returns a list of custom action targets. You use custom actions on findings and insights in Security Hub to trigger target actions in Amazon CloudWatch Events.
|
|
63
|
+
* const input = {
|
|
64
|
+
* "ActionTargetArns": [
|
|
65
|
+
* "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
|
|
66
|
+
* ]
|
|
67
|
+
* };
|
|
68
|
+
* const command = new DescribeActionTargetsCommand(input);
|
|
69
|
+
* const response = await client.send(command);
|
|
70
|
+
* /* response ==
|
|
71
|
+
* {
|
|
72
|
+
* "ActionTargets": [
|
|
73
|
+
* {
|
|
74
|
+
* "ActionTargetArn": "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation",
|
|
75
|
+
* "Description": "Action to send the finding for remediation tracking",
|
|
76
|
+
* "Name": "Send to remediation"
|
|
77
|
+
* }
|
|
78
|
+
* ]
|
|
79
|
+
* }
|
|
80
|
+
* *\/
|
|
81
|
+
* // example id: to-return-custom-action-targets-1675883682038
|
|
82
|
+
* ```
|
|
83
|
+
*
|
|
60
84
|
*/
|
|
61
85
|
export declare class DescribeActionTargetsCommand extends $Command<DescribeActionTargetsCommandInput, DescribeActionTargetsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
62
86
|
readonly input: DescribeActionTargetsCommandInput;
|
|
@@ -58,6 +58,25 @@ export interface DescribeHubCommandOutput extends DescribeHubResponse, __Metadat
|
|
|
58
58
|
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
59
59
|
*
|
|
60
60
|
*
|
|
61
|
+
* @example To return details about Hub resource
|
|
62
|
+
* ```javascript
|
|
63
|
+
* // The following example returns details about the Hub resource in the calling account. The Hub resource represents the implementation of the AWS Security Hub service in the calling account.
|
|
64
|
+
* const input = {
|
|
65
|
+
* "HubArn": "arn:aws:securityhub:us-west-1:123456789012:hub/default"
|
|
66
|
+
* };
|
|
67
|
+
* const command = new DescribeHubCommand(input);
|
|
68
|
+
* const response = await client.send(command);
|
|
69
|
+
* /* response ==
|
|
70
|
+
* {
|
|
71
|
+
* "AutoEnableControls": true,
|
|
72
|
+
* "ControlFindingGenerator": "SECURITY_CONTROL",
|
|
73
|
+
* "HubArn": "arn:aws:securityhub:us-west-1:123456789012:hub/default",
|
|
74
|
+
* "SubscribedAt": "2019-11-19T23:15:10.046Z"
|
|
75
|
+
* }
|
|
76
|
+
* *\/
|
|
77
|
+
* // example id: to-return-details-about-hub-resource-1675884542597
|
|
78
|
+
* ```
|
|
79
|
+
*
|
|
61
80
|
*/
|
|
62
81
|
export declare class DescribeHubCommand extends $Command<DescribeHubCommandInput, DescribeHubCommandOutput, SecurityHubClientResolvedConfig> {
|
|
63
82
|
readonly input: DescribeHubCommandInput;
|
|
@@ -53,6 +53,22 @@ export interface DescribeOrganizationConfigurationCommandOutput extends Describe
|
|
|
53
53
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
54
54
|
*
|
|
55
55
|
*
|
|
56
|
+
* @example To get information about Organizations configuration
|
|
57
|
+
* ```javascript
|
|
58
|
+
* // The following example returns details about the way in which AWS Organizations is configured for a Security Hub account that belongs to an organization. Only a Security Hub administrator account can call this operation.
|
|
59
|
+
* const input = {};
|
|
60
|
+
* const command = new DescribeOrganizationConfigurationCommand(input);
|
|
61
|
+
* const response = await client.send(command);
|
|
62
|
+
* /* response ==
|
|
63
|
+
* {
|
|
64
|
+
* "AutoEnable": true,
|
|
65
|
+
* "AutoEnableStandards": "DEFAULT",
|
|
66
|
+
* "MemberAccountLimitReached": true
|
|
67
|
+
* }
|
|
68
|
+
* *\/
|
|
69
|
+
* // example id: to-get-information-about-organizations-configuration-1676059786304
|
|
70
|
+
* ```
|
|
71
|
+
*
|
|
56
72
|
*/
|
|
57
73
|
export declare class DescribeOrganizationConfigurationCommand extends $Command<DescribeOrganizationConfigurationCommandInput, DescribeOrganizationConfigurationCommandOutput, SecurityHubClientResolvedConfig> {
|
|
58
74
|
readonly input: DescribeOrganizationConfigurationCommandInput;
|
|
@@ -60,6 +60,45 @@ export interface DescribeProductsCommandOutput extends DescribeProductsResponse,
|
|
|
60
60
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
61
61
|
*
|
|
62
62
|
*
|
|
63
|
+
* @example To get information about Security Hub integrations
|
|
64
|
+
* ```javascript
|
|
65
|
+
* // The following example returns details about AWS services and third-party products that Security Hub integrates with.
|
|
66
|
+
* const input = {
|
|
67
|
+
* "MaxResults": 1,
|
|
68
|
+
* "NextToken": "NULL",
|
|
69
|
+
* "ProductArn": "arn:aws:securityhub:us-east-1:517716713836:product/crowdstrike/crowdstrike-falcon"
|
|
70
|
+
* };
|
|
71
|
+
* const command = new DescribeProductsCommand(input);
|
|
72
|
+
* const response = await client.send(command);
|
|
73
|
+
* /* response ==
|
|
74
|
+
* {
|
|
75
|
+
* "NextToken": "U2FsdGVkX18vvPlOqb7RDrWRWVFBJI46MOIAb+nZmRJmR15NoRi2gm13sdQEn3O/pq/78dGs+bKpgA+7HMPHO0qX33/zoRI+uIG/F9yLNhcOrOWzFUdy36JcXLQji3Rpnn/cD1SVkGA98qI3zPOSDg==",
|
|
76
|
+
* "Products": [
|
|
77
|
+
* {
|
|
78
|
+
* "ActivationUrl": "https://falcon.crowdstrike.com/support/documentation",
|
|
79
|
+
* "Categories": [
|
|
80
|
+
* "Endpoint Detection and Response (EDR)",
|
|
81
|
+
* "AV Scanning and Sandboxing",
|
|
82
|
+
* "Threat Intelligence Feeds and Reports",
|
|
83
|
+
* "Endpoint Forensics",
|
|
84
|
+
* "Network Forensics"
|
|
85
|
+
* ],
|
|
86
|
+
* "CompanyName": "CrowdStrike",
|
|
87
|
+
* "Description": "CrowdStrike Falcon's single lightweight sensor unifies next-gen antivirus, endpoint detection and response, and 24/7 managed hunting, via the cloud.",
|
|
88
|
+
* "IntegrationTypes": [
|
|
89
|
+
* "SEND_FINDINGS_TO_SECURITY_HUB"
|
|
90
|
+
* ],
|
|
91
|
+
* "MarketplaceUrl": "https://aws.amazon.com/marketplace/seller-profile?id=a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
92
|
+
* "ProductArn": "arn:aws:securityhub:us-east-1:517716713836:product/crowdstrike/crowdstrike-falcon",
|
|
93
|
+
* "ProductName": "CrowdStrike Falcon",
|
|
94
|
+
* "ProductSubscriptionResourcePolicy": "{\"Version\":\"2012-10-17\",\"Statement\":[{\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"123456789333\"},\"Action\":[\"securityhub:BatchImportFindings\"],\"Resource\":\"arn:aws:securityhub:us-west-1:123456789012:product-subscription/crowdstrike/crowdstrike-falcon\",\"Condition\":{\"StringEquals\":{\"securityhub:TargetAccount\":\"123456789012\"}}},{\"Effect\":\"Allow\",\"Principal\":{\"AWS\":\"123456789012\"},\"Action\":[\"securityhub:BatchImportFindings\"],\"Resource\":\"arn:aws:securityhub:us-west-1:123456789333:product/crowdstrike/crowdstrike-falcon\",\"Condition\":{\"StringEquals\":{\"securityhub:TargetAccount\":\"123456789012\"}}}]}"
|
|
95
|
+
* }
|
|
96
|
+
* ]
|
|
97
|
+
* }
|
|
98
|
+
* *\/
|
|
99
|
+
* // example id: to-get-information-about-security-hub-integrations-1676061228533
|
|
100
|
+
* ```
|
|
101
|
+
*
|
|
63
102
|
*/
|
|
64
103
|
export declare class DescribeProductsCommand extends $Command<DescribeProductsCommandInput, DescribeProductsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
65
104
|
readonly input: DescribeProductsCommandInput;
|
|
@@ -52,6 +52,45 @@ export interface DescribeStandardsCommandOutput extends DescribeStandardsRespons
|
|
|
52
52
|
* input parameter.</p>
|
|
53
53
|
*
|
|
54
54
|
*
|
|
55
|
+
* @example To get available Security Hub standards
|
|
56
|
+
* ```javascript
|
|
57
|
+
* // The following example returns a list of available security standards in Security Hub.
|
|
58
|
+
* const input = {};
|
|
59
|
+
* const command = new DescribeStandardsCommand(input);
|
|
60
|
+
* const response = await client.send(command);
|
|
61
|
+
* /* response ==
|
|
62
|
+
* {
|
|
63
|
+
* "Standards": [
|
|
64
|
+
* {
|
|
65
|
+
* "Description": "The AWS Foundational Security Best Practices standard is a set of automated security checks that detect when AWS accounts and deployed resources do not align to security best practices. The standard is defined by AWS security experts. This curated set of controls helps improve your security posture in AWS, and cover AWS's most popular and foundational services.",
|
|
66
|
+
* "EnabledByDefault": true,
|
|
67
|
+
* "Name": "AWS Foundational Security Best Practices v1.0.0",
|
|
68
|
+
* "StandardsArn": "arn:aws:securityhub:us-west-1::standards/aws-foundational-security-best-practices/v/1.0.0"
|
|
69
|
+
* },
|
|
70
|
+
* {
|
|
71
|
+
* "Description": "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.",
|
|
72
|
+
* "EnabledByDefault": true,
|
|
73
|
+
* "Name": "CIS AWS Foundations Benchmark v1.2.0",
|
|
74
|
+
* "StandardsArn": "arn:aws:securityhub:us-west-1::ruleset/cis-aws-foundations-benchmark/v/1.2.0"
|
|
75
|
+
* },
|
|
76
|
+
* {
|
|
77
|
+
* "Description": "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.4.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.",
|
|
78
|
+
* "EnabledByDefault": false,
|
|
79
|
+
* "Name": "CIS AWS Foundations Benchmark v1.4.0",
|
|
80
|
+
* "StandardsArn": "arn:aws::securityhub:us-west-1::standards/cis-aws-foundations-benchmark/v/1.4.0"
|
|
81
|
+
* },
|
|
82
|
+
* {
|
|
83
|
+
* "Description": "The Payment Card Industry Data Security Standard (PCI DSS) v3.2.1 is an information security standard for entities that store, process, and/or transmit cardholder data. This Security Hub standard automatically checks for your compliance readiness against a subset of PCI DSS requirements.",
|
|
84
|
+
* "EnabledByDefault": false,
|
|
85
|
+
* "Name": "PCI DSS v3.2.1",
|
|
86
|
+
* "StandardsArn": "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1"
|
|
87
|
+
* }
|
|
88
|
+
* ]
|
|
89
|
+
* }
|
|
90
|
+
* *\/
|
|
91
|
+
* // example id: to-get-available-security-hub-standards-1676307464661
|
|
92
|
+
* ```
|
|
93
|
+
*
|
|
55
94
|
*/
|
|
56
95
|
export declare class DescribeStandardsCommand extends $Command<DescribeStandardsCommandInput, DescribeStandardsCommandOutput, SecurityHubClientResolvedConfig> {
|
|
57
96
|
readonly input: DescribeStandardsCommandInput;
|