@aws-sdk/client-securityhub 3.388.0 → 3.395.0

package/README.md

@@ -10,8 +10,10 @@ AWS SDK for JavaScript SecurityHub Client for Node.js, Browser and React Native.
 your Amazon Web Services environment and resources. It also provides you with the readiness
 status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
 integrated third-party products and helps you analyze security trends in your environment
-to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
-Guide</a>.</p>
+to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">
+<i>Security Hub User
+Guide</i>
+</a>.</p>
 <p>When you use operations in the Security Hub API, the requests are executed only in
 the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
 that results from the operation is applied only to that Region. To make the same change in

package/dist-cjs/SecurityHubClient.js

@@ -14,6 +14,7 @@ const smithy_client_1 = require("@smithy/smithy-client");
 Object.defineProperty(exports, "__Client", { enumerable: true, get: function () { return smithy_client_1.Client; } });
 const EndpointParameters_1 = require("./endpoint/EndpointParameters");
 const runtimeConfig_1 = require("./runtimeConfig");
+const runtimeExtensions_1 = require("./runtimeExtensions");
 class SecurityHubClient extends smithy_client_1.Client {
     constructor(...[configuration]) {
         const _config_0 = (0, runtimeConfig_1.getRuntimeConfig)(configuration || {});
@@ -24,8 +25,9 @@ class SecurityHubClient extends smithy_client_1.Client {
         const _config_5 = (0, middleware_host_header_1.resolveHostHeaderConfig)(_config_4);
         const _config_6 = (0, middleware_signing_1.resolveAwsAuthConfig)(_config_5);
         const _config_7 = (0, middleware_user_agent_1.resolveUserAgentConfig)(_config_6);
-        super(_config_7);
-        this.config = _config_7;
+        const _config_8 = (0, runtimeExtensions_1.resolveRuntimeExtensions)(_config_7, configuration?.extensions || []);
+        super(_config_8);
+        this.config = _config_8;
         this.middlewareStack.use((0, middleware_retry_1.getRetryPlugin)(this.config));
         this.middlewareStack.use((0, middleware_content_length_1.getContentLengthPlugin)(this.config));
         this.middlewareStack.use((0, middleware_host_header_1.getHostHeaderPlugin)(this.config));

package/dist-cjs/clientConfiguration.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist-cjs/endpoint/ruleset.js

@@ -3,5 +3,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ruleSet = void 0;
 const q = "required", r = "fn", s = "argv", t = "ref";
 const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = { [q]: false, "type": "String" }, g = { [q]: true, "default": false, "type": "Boolean" }, h = { [t]: "Endpoint" }, i = { [r]: "booleanEquals", [s]: [{ [t]: "UseFIPS" }, true] }, j = { [r]: "booleanEquals", [s]: [{ [t]: "UseDualStack" }, true] }, k = {}, l = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsFIPS"] }] }, m = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsDualStack"] }] }, n = [i], o = [j], p = [{ [t]: "Region" }];
-const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://securityhub-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://securityhub-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://securityhub.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ endpoint: { url: "https://securityhub.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
+const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }, { conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ endpoint: { url: "https://securityhub-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ endpoint: { url: "https://securityhub-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ endpoint: { url: "https://securityhub.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://securityhub.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] };
 exports.ruleSet = _data;

package/dist-cjs/models/models_1.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.WorkflowState = exports.VulnerabilityFixAvailable = exports.ThreatIntelIndicatorType = exports.ThreatIntelIndicatorCategory = exports.Partition = exports.RecordState = exports.NetworkDirection = exports.MalwareType = exports.MalwareState = exports.ComplianceStatus = exports.AwsS3BucketNotificationConfigurationS3KeyFilterRuleName = exports.AwsIamAccessKeyStatus = void 0;
+exports.VulnerabilityFixAvailable = exports.VulnerabilityExploitAvailable = exports.ThreatIntelIndicatorType = exports.ThreatIntelIndicatorCategory = exports.Partition = exports.RecordState = exports.NetworkDirection = exports.MalwareType = exports.MalwareState = exports.ComplianceStatus = exports.AwsS3BucketNotificationConfigurationS3KeyFilterRuleName = exports.AwsIamAccessKeyStatus = void 0;
 exports.AwsIamAccessKeyStatus = {
     ACTIVE: "Active",
     INACTIVE: "Inactive",
@@ -71,15 +71,12 @@ exports.ThreatIntelIndicatorType = {
     PROCESS: "PROCESS",
     URL: "URL",
 };
+exports.VulnerabilityExploitAvailable = {
+    NO: "NO",
+    YES: "YES",
+};
 exports.VulnerabilityFixAvailable = {
     NO: "NO",
     PARTIAL: "PARTIAL",
     YES: "YES",
 };
-exports.WorkflowState = {
-    ASSIGNED: "ASSIGNED",
-    DEFERRED: "DEFERRED",
-    IN_PROGRESS: "IN_PROGRESS",
-    NEW: "NEW",
-    RESOLVED: "RESOLVED",
-};

package/dist-cjs/models/models_2.js

@@ -1,7 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.RegionAvailabilityStatus = exports.SortOrder = exports.FindingHistoryUpdateSourceType = exports.IntegrationType = exports.ResourceConflictException = exports.ControlFindingGenerator = exports.UnprocessedErrorCode = exports.SeverityRating = exports.ControlStatus = exports.StatusReasonCode = exports.StandardsStatus = void 0;
+exports.RegionAvailabilityStatus = exports.SortOrder = exports.FindingHistoryUpdateSourceType = exports.IntegrationType = exports.ResourceConflictException = exports.ControlFindingGenerator = exports.UnprocessedErrorCode = exports.SeverityRating = exports.ControlStatus = exports.StatusReasonCode = exports.StandardsStatus = exports.WorkflowState = void 0;
 const SecurityHubServiceException_1 = require("./SecurityHubServiceException");
+exports.WorkflowState = {
+    ASSIGNED: "ASSIGNED",
+    DEFERRED: "DEFERRED",
+    IN_PROGRESS: "IN_PROGRESS",
+    NEW: "NEW",
+    RESOLVED: "RESOLVED",
+};
 exports.StandardsStatus = {
     DELETING: "DELETING",
     FAILED: "FAILED",

package/dist-cjs/protocols/Aws_restJson1.js

@@ -4849,6 +4849,7 @@ const se_AwsSecurityFinding = (input, context) => {
         Description: [],
         FindingProviderFields: smithy_client_1._json,
         FirstObservedAt: [],
+        GeneratorDetails: smithy_client_1._json,
         GeneratorId: [],
         Id: [],
         LastObservedAt: [],
@@ -5205,7 +5206,10 @@ const se_UpdateAutomationRulesRequestItemsList = (input, context) => {
 };
 const se_Vulnerability = (input, context) => {
     return (0, smithy_client_1.take)(input, {
+        CodeVulnerabilities: smithy_client_1._json,
         Cvss: (_) => se_CvssList(_, context),
+        EpssScore: smithy_client_1.serializeFloat,
+        ExploitAvailable: [],
         FixAvailable: [],
         Id: [],
         ReferenceUrls: smithy_client_1._json,
@@ -5638,6 +5642,7 @@ const de_AwsSecurityFinding = (output, context) => {
         Description: smithy_client_1.expectString,
         FindingProviderFields: smithy_client_1._json,
         FirstObservedAt: smithy_client_1.expectString,
+        GeneratorDetails: smithy_client_1._json,
         GeneratorId: smithy_client_1.expectString,
         Id: smithy_client_1.expectString,
         LastObservedAt: smithy_client_1.expectString,
@@ -6114,7 +6119,10 @@ const de_StandardsControls = (output, context) => {
 };
 const de_Vulnerability = (output, context) => {
     return (0, smithy_client_1.take)(output, {
+        CodeVulnerabilities: smithy_client_1._json,
         Cvss: (_) => de_CvssList(_, context),
+        EpssScore: smithy_client_1.limitedParseDouble,
+        ExploitAvailable: smithy_client_1.expectString,
         FixAvailable: smithy_client_1.expectString,
         Id: smithy_client_1.expectString,
         ReferenceUrls: smithy_client_1._json,

package/dist-cjs/runtimeConfig.shared.js

@@ -12,6 +12,7 @@ const getRuntimeConfig = (config) => ({
     base64Encoder: config?.base64Encoder ?? util_base64_1.toBase64,
     disableHostPrefix: config?.disableHostPrefix ?? false,
     endpointProvider: config?.endpointProvider ?? endpointResolver_1.defaultEndpointResolver,
+    extensions: config?.extensions ?? [],
     logger: config?.logger ?? new smithy_client_1.NoOpLogger(),
     serviceId: config?.serviceId ?? "SecurityHub",
     urlParser: config?.urlParser ?? url_parser_1.parseUrl,

package/dist-cjs/runtimeExtensions.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveRuntimeExtensions = void 0;
+const types_1 = require("@smithy/types");
+const asPartial = (t) => t;
+const resolveRuntimeExtensions = (runtimeConfig, extensions) => {
+    const clientConfiguration = {
+        ...asPartial((0, types_1.getDefaultClientConfiguration)(runtimeConfig)),
+    };
+    extensions.forEach((extension) => extension.configureClient(clientConfiguration));
+    return {
+        ...runtimeConfig,
+        ...(0, types_1.resolveDefaultRuntimeConfig)(clientConfiguration),
+    };
+};
+exports.resolveRuntimeExtensions = resolveRuntimeExtensions;

package/dist-es/SecurityHubClient.js

@@ -10,6 +10,7 @@ import { getRetryPlugin, resolveRetryConfig } from "@smithy/middleware-retry";
 import { Client as __Client, } from "@smithy/smithy-client";
 import { resolveClientEndpointParameters, } from "./endpoint/EndpointParameters";
 import { getRuntimeConfig as __getRuntimeConfig } from "./runtimeConfig";
+import { resolveRuntimeExtensions } from "./runtimeExtensions";
 export { __Client };
 export class SecurityHubClient extends __Client {
     constructor(...[configuration]) {
@@ -21,8 +22,9 @@ export class SecurityHubClient extends __Client {
         const _config_5 = resolveHostHeaderConfig(_config_4);
         const _config_6 = resolveAwsAuthConfig(_config_5);
         const _config_7 = resolveUserAgentConfig(_config_6);
-        super(_config_7);
-        this.config = _config_7;
+        const _config_8 = resolveRuntimeExtensions(_config_7, configuration?.extensions || []);
+        super(_config_8);
+        this.config = _config_8;
         this.middlewareStack.use(getRetryPlugin(this.config));
         this.middlewareStack.use(getContentLengthPlugin(this.config));
         this.middlewareStack.use(getHostHeaderPlugin(this.config));

package/dist-es/clientConfiguration.js

@@ -0,0 +1 @@
+export {};

package/dist-es/endpoint/ruleset.js

@@ -1,4 +1,4 @@
 const q = "required", r = "fn", s = "argv", t = "ref";
 const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = { [q]: false, "type": "String" }, g = { [q]: true, "default": false, "type": "Boolean" }, h = { [t]: "Endpoint" }, i = { [r]: "booleanEquals", [s]: [{ [t]: "UseFIPS" }, true] }, j = { [r]: "booleanEquals", [s]: [{ [t]: "UseDualStack" }, true] }, k = {}, l = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsFIPS"] }] }, m = { [r]: "booleanEquals", [s]: [true, { [r]: "getAttr", [s]: [{ [t]: e }, "supportsDualStack"] }] }, n = [i], o = [j], p = [{ [t]: "Region" }];
-const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://securityhub-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://securityhub-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://securityhub.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ endpoint: { url: "https://securityhub.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
+const _data = { version: "1.0", parameters: { Region: f, UseDualStack: g, UseFIPS: g, Endpoint: f }, rules: [{ conditions: [{ [r]: a, [s]: [h] }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: h, properties: k, headers: k }, type: d }] }, { conditions: [{ [r]: a, [s]: p }], type: b, rules: [{ conditions: [{ [r]: "aws.partition", [s]: p, assign: e }], type: b, rules: [{ conditions: [i, j], type: b, rules: [{ conditions: [l, m], type: b, rules: [{ endpoint: { url: "https://securityhub-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [l], type: b, rules: [{ endpoint: { url: "https://securityhub-fips.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [m], type: b, rules: [{ endpoint: { url: "https://securityhub.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: k, headers: k }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://securityhub.{Region}.{PartitionResult#dnsSuffix}", properties: k, headers: k }, type: d }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] };
 export const ruleSet = _data;

package/dist-es/models/models_1.js

@@ -68,15 +68,12 @@ export const ThreatIntelIndicatorType = {
     PROCESS: "PROCESS",
     URL: "URL",
 };
+export const VulnerabilityExploitAvailable = {
+    NO: "NO",
+    YES: "YES",
+};
 export const VulnerabilityFixAvailable = {
     NO: "NO",
     PARTIAL: "PARTIAL",
     YES: "YES",
 };
-export const WorkflowState = {
-    ASSIGNED: "ASSIGNED",
-    DEFERRED: "DEFERRED",
-    IN_PROGRESS: "IN_PROGRESS",
-    NEW: "NEW",
-    RESOLVED: "RESOLVED",
-};

package/dist-es/models/models_2.js

@@ -1,4 +1,11 @@
 import { SecurityHubServiceException as __BaseException } from "./SecurityHubServiceException";
+export const WorkflowState = {
+    ASSIGNED: "ASSIGNED",
+    DEFERRED: "DEFERRED",
+    IN_PROGRESS: "IN_PROGRESS",
+    NEW: "NEW",
+    RESOLVED: "RESOLVED",
+};
 export const StandardsStatus = {
     DELETING: "DELETING",
     FAILED: "FAILED",

package/dist-es/protocols/Aws_restJson1.js

@@ -4710,6 +4710,7 @@ const se_AwsSecurityFinding = (input, context) => {
         Description: [],
         FindingProviderFields: _json,
         FirstObservedAt: [],
+        GeneratorDetails: _json,
         GeneratorId: [],
         Id: [],
         LastObservedAt: [],
@@ -5066,7 +5067,10 @@ const se_UpdateAutomationRulesRequestItemsList = (input, context) => {
 };
 const se_Vulnerability = (input, context) => {
     return take(input, {
+        CodeVulnerabilities: _json,
         Cvss: (_) => se_CvssList(_, context),
+        EpssScore: __serializeFloat,
+        ExploitAvailable: [],
         FixAvailable: [],
         Id: [],
         ReferenceUrls: _json,
@@ -5499,6 +5503,7 @@ const de_AwsSecurityFinding = (output, context) => {
         Description: __expectString,
         FindingProviderFields: _json,
         FirstObservedAt: __expectString,
+        GeneratorDetails: _json,
         GeneratorId: __expectString,
         Id: __expectString,
         LastObservedAt: __expectString,
@@ -5975,7 +5980,10 @@ const de_StandardsControls = (output, context) => {
 };
 const de_Vulnerability = (output, context) => {
     return take(output, {
+        CodeVulnerabilities: _json,
         Cvss: (_) => de_CvssList(_, context),
+        EpssScore: __limitedParseDouble,
+        ExploitAvailable: __expectString,
         FixAvailable: __expectString,
         Id: __expectString,
         ReferenceUrls: _json,

package/dist-es/runtimeConfig.shared.js

@@ -9,6 +9,7 @@ export const getRuntimeConfig = (config) => ({
     base64Encoder: config?.base64Encoder ?? toBase64,
     disableHostPrefix: config?.disableHostPrefix ?? false,
     endpointProvider: config?.endpointProvider ?? defaultEndpointResolver,
+    extensions: config?.extensions ?? [],
     logger: config?.logger ?? new NoOpLogger(),
     serviceId: config?.serviceId ?? "SecurityHub",
     urlParser: config?.urlParser ?? parseUrl,

package/dist-es/runtimeExtensions.js

@@ -0,0 +1,12 @@
+import { getDefaultClientConfiguration, resolveDefaultRuntimeConfig } from "@smithy/types";
+const asPartial = (t) => t;
+export const resolveRuntimeExtensions = (runtimeConfig, extensions) => {
+    const clientConfiguration = {
+        ...asPartial(getDefaultClientConfiguration(runtimeConfig)),
+    };
+    extensions.forEach((extension) => extension.configureClient(clientConfiguration));
+    return {
+        ...runtimeConfig,
+        ...resolveDefaultRuntimeConfig(clientConfiguration),
+    };
+};

package/dist-types/SecurityHub.d.ts

@@ -477,8 +477,10 @@ export interface SecurityHub {
  *          your Amazon Web Services environment and resources. It also provides you with the readiness
  *          status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
  *          integrated third-party products and helps you analyze security trends in your environment
- *          to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
- *             Guide</a>.</p>
+ *          to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">
+ *                <i>Security Hub User
+ * Guide</i>
+ *             </a>.</p>
  *          <p>When you use operations in the Security Hub API, the requests are executed only in
  *          the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
  *          that results from the operation is applied only to that Region. To make the same change in

package/dist-types/SecurityHubClient.d.ts

@@ -76,6 +76,7 @@ import { UpdateOrganizationConfigurationCommandInput, UpdateOrganizationConfigur
 import { UpdateSecurityHubConfigurationCommandInput, UpdateSecurityHubConfigurationCommandOutput } from "./commands/UpdateSecurityHubConfigurationCommand";
 import { UpdateStandardsControlCommandInput, UpdateStandardsControlCommandOutput } from "./commands/UpdateStandardsControlCommand";
 import { ClientInputEndpointParameters, ClientResolvedEndpointParameters, EndpointParameters } from "./endpoint/EndpointParameters";
+import { RuntimeExtension, RuntimeExtensionsConfig } from "./runtimeExtensions";
 export { __Client };
 /**
  * @public
@@ -183,6 +184,10 @@ export interface ClientDefaults extends Partial<__SmithyResolvedConfiguration<__
      * Optional logger for logging debug/info/warn/error.
      */
     logger?: __Logger;
+    /**
+     * Optional extensions
+     */
+    extensions?: RuntimeExtension[];
     /**
      * The {@link @smithy/smithy-client#DefaultsMode} that will be used to determine how certain default configuration options are resolved in the SDK.
      */
@@ -202,7 +207,7 @@ export interface SecurityHubClientConfig extends SecurityHubClientConfigType {
 /**
  * @public
  */
-export type SecurityHubClientResolvedConfigType = __SmithyResolvedConfiguration<__HttpHandlerOptions> & Required<ClientDefaults> & RegionResolvedConfig & EndpointResolvedConfig<EndpointParameters> & RetryResolvedConfig & HostHeaderResolvedConfig & AwsAuthResolvedConfig & UserAgentResolvedConfig & ClientResolvedEndpointParameters;
+export type SecurityHubClientResolvedConfigType = __SmithyResolvedConfiguration<__HttpHandlerOptions> & Required<ClientDefaults> & RuntimeExtensionsConfig & RegionResolvedConfig & EndpointResolvedConfig<EndpointParameters> & RetryResolvedConfig & HostHeaderResolvedConfig & AwsAuthResolvedConfig & UserAgentResolvedConfig & ClientResolvedEndpointParameters;
 /**
  * @public
  *
@@ -216,8 +221,10 @@ export interface SecurityHubClientResolvedConfig extends SecurityHubClientResolv
  *          your Amazon Web Services environment and resources. It also provides you with the readiness
  *          status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
  *          integrated third-party products and helps you analyze security trends in your environment
- *          to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
- *             Guide</a>.</p>
+ *          to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">
+ *                <i>Security Hub User
+ * Guide</i>
+ *             </a>.</p>
  *          <p>When you use operations in the Security Hub API, the requests are executed only in
  *          the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
  *          that results from the operation is applied only to that Region. To make the same change in

package/dist-types/clientConfiguration.d.ts

@@ -0,0 +1,6 @@
+import { DefaultClientConfiguration } from "@smithy/types";
+/**
+ * @internal
+ */
+export interface SecurityHubClientConfiguration extends DefaultClientConfiguration {
+}

package/dist-types/commands/BatchImportFindingsCommand.d.ts

@@ -3908,6 +3908,22 @@ export interface BatchImportFindingsCommandOutput extends BatchImportFindingsRes
  *           },
  *           ReferenceUrls: "<StringList>",
  *           FixAvailable: "YES" || "NO" || "PARTIAL",
+ *           EpssScore: Number("double"),
+ *           ExploitAvailable: "YES" || "NO",
+ *           CodeVulnerabilities: [ // VulnerabilityCodeVulnerabilitiesList
+ *             { // VulnerabilityCodeVulnerabilities
+ *               Cwes: [
+ *                 "STRING_VALUE",
+ *               ],
+ *               FilePath: { // CodeVulnerabilitiesFilePath
+ *                 EndLine: Number("int"),
+ *                 FileName: "STRING_VALUE",
+ *                 FilePath: "STRING_VALUE",
+ *                 StartLine: Number("int"),
+ *               },
+ *               SourceArn: "STRING_VALUE",
+ *             },
+ *           ],
  *         },
  *       ],
  *       PatchSummary: { // PatchSummary
@@ -4042,11 +4058,14 @@ export interface BatchImportFindingsCommandOutput extends BatchImportFindingsRes
  *           Label: "INFORMATIONAL" || "LOW" || "MEDIUM" || "HIGH" || "CRITICAL",
  *           Original: "STRING_VALUE",
  *         },
- *         Types: [
- *           "STRING_VALUE",
- *         ],
+ *         Types: "<TypeList>",
  *       },
  *       Sample: true || false,
+ *       GeneratorDetails: { // GeneratorDetails
+ *         Name: "STRING_VALUE",
+ *         Description: "STRING_VALUE",
+ *         Labels: "<TypeList>",
+ *       },
  *     },
  *   ],
  * };

package/dist-types/commands/DeleteMembersCommand.d.ts

@@ -24,8 +24,8 @@ export interface DeleteMembersCommandOutput extends DeleteMembersResponse, __Met
 /**
  * @public
  * <p>Deletes the specified member accounts from Security Hub.</p>
- *          <p>Can be used to delete member accounts that belong to an organization as well as member
- *          accounts that were invited manually.</p>
+ *          <p>You can invoke this API only to delete accounts that became members through invitation. You can't invoke this
+ *         API to delete accounts that belong to an Organizations organization.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DisableSecurityHubCommand.d.ts

@@ -23,10 +23,9 @@ export interface DisableSecurityHubCommandOutput extends DisableSecurityHubRespo
 }
 /**
  * @public
- * <p>Disables Security Hub in your account only in the current Region. To disable Security Hub in all
+ * <p>Disables Security Hub in your account only in the current Amazon Web Services Region. To disable Security Hub in all
  *          Regions, you must submit one request per Region where you have enabled Security Hub.</p>
- *          <p>When you disable Security Hub for an administrator account, it doesn't disable Security Hub for any associated
- *          member accounts.</p>
+ *          <p>You can't disable Security Hub in an account that is currently the Security Hub administrator.</p>
  *          <p>When you disable Security Hub, your existing findings and insights and any Security Hub configuration
  *          settings are deleted after 90 days and cannot be recovered. Any standards that were enabled
  *          are disabled, and your administrator and member account associations are removed.</p>

package/dist-types/commands/GetFindingsCommand.d.ts

@@ -4098,6 +4098,22 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
  * //           },
  * //           ReferenceUrls: "<StringList>",
  * //           FixAvailable: "YES" || "NO" || "PARTIAL",
+ * //           EpssScore: Number("double"),
+ * //           ExploitAvailable: "YES" || "NO",
+ * //           CodeVulnerabilities: [ // VulnerabilityCodeVulnerabilitiesList
+ * //             { // VulnerabilityCodeVulnerabilities
+ * //               Cwes: [
+ * //                 "STRING_VALUE",
+ * //               ],
+ * //               FilePath: { // CodeVulnerabilitiesFilePath
+ * //                 EndLine: Number("int"),
+ * //                 FileName: "STRING_VALUE",
+ * //                 FilePath: "STRING_VALUE",
+ * //                 StartLine: Number("int"),
+ * //               },
+ * //               SourceArn: "STRING_VALUE",
+ * //             },
+ * //           ],
  * //         },
  * //       ],
  * //       PatchSummary: { // PatchSummary
@@ -4232,11 +4248,14 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
  * //           Label: "INFORMATIONAL" || "LOW" || "MEDIUM" || "HIGH" || "CRITICAL",
  * //           Original: "STRING_VALUE",
  * //         },
- * //         Types: [
- * //           "STRING_VALUE",
- * //         ],
+ * //         Types: "<TypeList>",
  * //       },
  * //       Sample: true || false,
+ * //       GeneratorDetails: { // GeneratorDetails
+ * //         Name: "STRING_VALUE",
+ * //         Description: "STRING_VALUE",
+ * //         Labels: "<TypeList>",
+ * //       },
  * //     },
  * //   ],
  * //   NextToken: "STRING_VALUE",

package/dist-types/index.d.ts

@@ -3,8 +3,10 @@
  *          your Amazon Web Services environment and resources. It also provides you with the readiness
  *          status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
  *          integrated third-party products and helps you analyze security trends in your environment
- *          to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
- *             Guide</a>.</p>
+ *          to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">
+ *                <i>Security Hub User
+ * Guide</i>
+ *             </a>.</p>
  *          <p>When you use operations in the Security Hub API, the requests are executed only in
  *          the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
  *          that results from the operation is applied only to that Region. To make the same change in