@aws-sdk/client-securityhub 3.425.0 → 3.426.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,4 +1,155 @@
1
- import { Adjustment, AssociatedStandard, AvailabilityZone, AwsAmazonMqBrokerDetails, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAppSyncGraphQlApiDetails, AwsAthenaWorkGroupDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsBackupBackupPlanDetails, AwsBackupBackupVaultDetails, AwsBackupRecoveryPointDetails, AwsCertificateManagerCertificateDetails, AwsCloudFormationStackDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCloudWatchAlarmDetails, AwsCodeBuildProjectDetails, AwsDynamoDbTableDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2LaunchTemplateDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2RouteTableDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2TransitGatewayDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpcEndpointServiceDetails, AwsEc2VpcPeeringConnectionDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcrRepositoryDetails, AwsEcsClusterDetails, AwsEcsContainerDetails, AwsEcsServiceDetails, AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointPosixUserDetails, AwsEfsAccessPointRootDirectoryCreationInfoDetails, RelatedFinding, SeverityLabel } from "./models_0";
1
+ import { AssociatedStandard, AvailabilityZone, AwsEcsContainerDetails, RelatedFinding, SeverityLabel } from "./models_0";
2
+ /**
3
+ * @public
4
+ * <p>Provides details on a container instance bind mount host volume.
5
+ * </p>
6
+ */
7
+ export interface AwsEcsTaskVolumeHostDetails {
8
+ /**
9
+ * @public
10
+ * <p>When the <code>host</code> parameter is used, specify a <code>sourcePath</code> to declare the path
11
+ * on the host container instance that's presented to the container.
12
+ * </p>
13
+ */
14
+ SourcePath?: string;
15
+ }
16
+ /**
17
+ * @public
18
+ * <p>Provides information about a data volume that's used in a task definition.
19
+ * </p>
20
+ */
21
+ export interface AwsEcsTaskVolumeDetails {
22
+ /**
23
+ * @public
24
+ * <p>The name of the volume. Up to 255 letters (uppercase and lowercase), numbers, underscores, and
25
+ * hyphens are allowed. This name is referenced in the <code>sourceVolume</code> parameter of container definition <code>mountPoints</code>.
26
+ * </p>
27
+ */
28
+ Name?: string;
29
+ /**
30
+ * @public
31
+ * <p>This parameter is specified when you use bind mount host volumes. The contents of the <code>host</code> parameter
32
+ * determine whether your bind mount host volume persists on the host container instance and where it's stored.
33
+ * </p>
34
+ */
35
+ Host?: AwsEcsTaskVolumeHostDetails;
36
+ }
37
+ /**
38
+ * @public
39
+ * <p>Provides details about a task in a cluster.
40
+ * </p>
41
+ */
42
+ export interface AwsEcsTaskDetails {
43
+ /**
44
+ * @public
45
+ * <p>The Amazon Resource Name (ARN) of the cluster that hosts the task.
46
+ * </p>
47
+ */
48
+ ClusterArn?: string;
49
+ /**
50
+ * @public
51
+ * <p>The ARN of the task definition that creates the task.
52
+ * </p>
53
+ */
54
+ TaskDefinitionArn?: string;
55
+ /**
56
+ * @public
57
+ * <p>The version counter for the task.
58
+ * </p>
59
+ */
60
+ Version?: string;
61
+ /**
62
+ * @public
63
+ * <p>The Unix timestamp for the time when the task was created. More specifically, it's for the time when
64
+ * the task entered the <code>PENDING</code> state.
65
+ * </p>
66
+ */
67
+ CreatedAt?: string;
68
+ /**
69
+ * @public
70
+ * <p>The Unix timestamp for the time when the task started. More specifically, it's for the time when the
71
+ * task transitioned from the <code>PENDING</code> state to the <code>RUNNING</code> state.
72
+ * </p>
73
+ */
74
+ StartedAt?: string;
75
+ /**
76
+ * @public
77
+ * <p>The tag specified when a task is started. If an Amazon ECS service started the task, the
78
+ * <code>startedBy</code> parameter contains the deployment ID of that service.
79
+ * </p>
80
+ */
81
+ StartedBy?: string;
82
+ /**
83
+ * @public
84
+ * <p>The name of the task group that's associated with the task.
85
+ * </p>
86
+ */
87
+ Group?: string;
88
+ /**
89
+ * @public
90
+ * <p>Details about the data volume that is used in a task definition.
91
+ * </p>
92
+ */
93
+ Volumes?: AwsEcsTaskVolumeDetails[];
94
+ /**
95
+ * @public
96
+ * <p>The containers that are associated with the task.
97
+ * </p>
98
+ */
99
+ Containers?: AwsEcsContainerDetails[];
100
+ }
101
+ /**
102
+ * @public
103
+ * <p>Provides details for all file system operations using this Amazon EFS access point.
104
+ * </p>
105
+ */
106
+ export interface AwsEfsAccessPointPosixUserDetails {
107
+ /**
108
+ * @public
109
+ * <p>The POSIX group ID used for all file system operations using this access point.
110
+ * </p>
111
+ */
112
+ Gid?: string;
113
+ /**
114
+ * @public
115
+ * <p>Secondary POSIX group IDs used for all file system operations using this access point.
116
+ * </p>
117
+ */
118
+ SecondaryGids?: string[];
119
+ /**
120
+ * @public
121
+ * <p>The POSIX user ID used for all file system operations using this access point.
122
+ * </p>
123
+ */
124
+ Uid?: string;
125
+ }
126
+ /**
127
+ * @public
128
+ * <p>Provides information about the settings that Amazon EFS uses to create the root directory
129
+ * when a client connects to an access point.
130
+ * </p>
131
+ */
132
+ export interface AwsEfsAccessPointRootDirectoryCreationInfoDetails {
133
+ /**
134
+ * @public
135
+ * <p>Specifies the POSIX group ID to apply to the root directory.
136
+ * </p>
137
+ */
138
+ OwnerGid?: string;
139
+ /**
140
+ * @public
141
+ * <p>Specifies the POSIX user ID to apply to the root directory.
142
+ * </p>
143
+ */
144
+ OwnerUid?: string;
145
+ /**
146
+ * @public
147
+ * <p>Specifies the POSIX permissions to apply to the root directory, in the format of an octal number
148
+ * representing the file's mode bits.
149
+ * </p>
150
+ */
151
+ Permissions?: string;
152
+ }
2
153
  /**
3
154
  * @public
4
155
  * <p>Provides information about the directory on the Amazon EFS file system that the access point exposes
@@ -1310,6 +1461,199 @@ export interface AwsEventSchemasRegistryDetails {
1310
1461
  */
1311
1462
  RegistryName?: string;
1312
1463
  }
1464
+ /**
1465
+ * @public
1466
+ * <p>
1467
+ * Provides details about the Amazon EventBridge event buses that the endpoint is associated with.</p>
1468
+ */
1469
+ export interface AwsEventsEndpointEventBusesDetails {
1470
+ /**
1471
+ * @public
1472
+ * <p>
1473
+ * The Amazon Resource Name (ARN) of the event bus that the endpoint is associated with.</p>
1474
+ */
1475
+ EventBusArn?: string;
1476
+ }
1477
+ /**
1478
+ * @public
1479
+ * <p>
1480
+ * Indicates whether replication is enabled or disabled for the endpoint. If enabled, the endpoint can replicate all
1481
+ * events to a secondary Amazon Web Services Region.</p>
1482
+ */
1483
+ export interface AwsEventsEndpointReplicationConfigDetails {
1484
+ /**
1485
+ * @public
1486
+ * <p>
1487
+ * The state of event replication.</p>
1488
+ */
1489
+ State?: string;
1490
+ }
1491
+ /**
1492
+ * @public
1493
+ * <p>
1494
+ * Provides details about the primary Amazon Web Services Region of the endpoint.</p>
1495
+ */
1496
+ export interface AwsEventsEndpointRoutingConfigFailoverConfigPrimaryDetails {
1497
+ /**
1498
+ * @public
1499
+ * <p>
1500
+ * The Amazon Resource Name (ARN) of the health check used by the endpoint to determine whether failover is triggered.</p>
1501
+ */
1502
+ HealthCheck?: string;
1503
+ }
1504
+ /**
1505
+ * @public
1506
+ * <p>
1507
+ * The Amazon Web Services Region that events are routed to when failover is triggered or event replication is enabled.</p>
1508
+ */
1509
+ export interface AwsEventsEndpointRoutingConfigFailoverConfigSecondaryDetails {
1510
+ /**
1511
+ * @public
1512
+ * <p>
1513
+ * Defines the secondary Region.</p>
1514
+ */
1515
+ Route?: string;
1516
+ }
1517
+ /**
1518
+ * @public
1519
+ * <p>
1520
+ * The failover configuration for an endpoint. This includes what triggers failover and what happens when it's triggered.</p>
1521
+ */
1522
+ export interface AwsEventsEndpointRoutingConfigFailoverConfigDetails {
1523
+ /**
1524
+ * @public
1525
+ * <p>
1526
+ * The main Region of the endpoint.</p>
1527
+ */
1528
+ Primary?: AwsEventsEndpointRoutingConfigFailoverConfigPrimaryDetails;
1529
+ /**
1530
+ * @public
1531
+ * <p>
1532
+ * The Region that events are routed to when failover is triggered or event replication is enabled.</p>
1533
+ */
1534
+ Secondary?: AwsEventsEndpointRoutingConfigFailoverConfigSecondaryDetails;
1535
+ }
1536
+ /**
1537
+ * @public
1538
+ * <p>
1539
+ * Provides details about the routing configuration of the endpoint.</p>
1540
+ */
1541
+ export interface AwsEventsEndpointRoutingConfigDetails {
1542
+ /**
1543
+ * @public
1544
+ * <p>
1545
+ * The failover configuration for an endpoint. This includes what triggers failover and what happens when it's triggered.</p>
1546
+ */
1547
+ FailoverConfig?: AwsEventsEndpointRoutingConfigFailoverConfigDetails;
1548
+ }
1549
+ /**
1550
+ * @public
1551
+ * <p>
1552
+ * Provides details about an Amazon EventBridge global endpoint. The endpoint can improve your application’s
1553
+ * availability by making it Regional-fault tolerant.
1554
+ * </p>
1555
+ */
1556
+ export interface AwsEventsEndpointDetails {
1557
+ /**
1558
+ * @public
1559
+ * <p>
1560
+ * The Amazon Resource Name (ARN) of the endpoint.
1561
+ * </p>
1562
+ */
1563
+ Arn?: string;
1564
+ /**
1565
+ * @public
1566
+ * <p>
1567
+ * A description of the endpoint.
1568
+ * </p>
1569
+ */
1570
+ Description?: string;
1571
+ /**
1572
+ * @public
1573
+ * <p>
1574
+ * The URL subdomain of the endpoint. For example, if <code>EndpointUrl</code> is
1575
+ * <code>https://abcde.veo.endpoints.event.amazonaws.com</code>, then the <code>EndpointId</code> is <code>abcde.veo</code>.</p>
1576
+ */
1577
+ EndpointId?: string;
1578
+ /**
1579
+ * @public
1580
+ * <p>
1581
+ * The URL of the endpoint.</p>
1582
+ */
1583
+ EndpointUrl?: string;
1584
+ /**
1585
+ * @public
1586
+ * <p>
1587
+ * The event buses being used by the endpoint.</p>
1588
+ */
1589
+ EventBuses?: AwsEventsEndpointEventBusesDetails[];
1590
+ /**
1591
+ * @public
1592
+ * <p>
1593
+ * The name of the endpoint.</p>
1594
+ */
1595
+ Name?: string;
1596
+ /**
1597
+ * @public
1598
+ * <p>
1599
+ * Whether event replication was enabled or disabled for this endpoint. The default state is <code>ENABLED</code>, which
1600
+ * means you must supply a <code>RoleArn</code>. If you don't have a <code>RoleArn</code> or you don't want event
1601
+ * replication enabled, set the state to <code>DISABLED</code>.</p>
1602
+ */
1603
+ ReplicationConfig?: AwsEventsEndpointReplicationConfigDetails;
1604
+ /**
1605
+ * @public
1606
+ * <p>
1607
+ * The ARN of the role used by event replication for the endpoint.</p>
1608
+ */
1609
+ RoleArn?: string;
1610
+ /**
1611
+ * @public
1612
+ * <p>
1613
+ * The routing configuration of the endpoint.</p>
1614
+ */
1615
+ RoutingConfig?: AwsEventsEndpointRoutingConfigDetails;
1616
+ /**
1617
+ * @public
1618
+ * <p>
1619
+ * The current state of the endpoint.</p>
1620
+ */
1621
+ State?: string;
1622
+ /**
1623
+ * @public
1624
+ * <p>
1625
+ * The reason the endpoint is in its current state.</p>
1626
+ */
1627
+ StateReason?: string;
1628
+ }
1629
+ /**
1630
+ * @public
1631
+ * <p>
1632
+ * Provides details about Amazon EventBridge event bus. An event bus is a router that receives events and delivers
1633
+ * them to zero or more destinations, or targets. This can be a custom event bus which you can use to receive events
1634
+ * from your custom applications and services, or it can be a partner event bus which can be matched to a partner event
1635
+ * source.</p>
1636
+ */
1637
+ export interface AwsEventsEventbusDetails {
1638
+ /**
1639
+ * @public
1640
+ * <p>
1641
+ * The Amazon Resource Name (ARN) of the account permitted to write events to the current account.</p>
1642
+ */
1643
+ Arn?: string;
1644
+ /**
1645
+ * @public
1646
+ * <p>
1647
+ * The name of the event bus.</p>
1648
+ */
1649
+ Name?: string;
1650
+ /**
1651
+ * @public
1652
+ * <p>
1653
+ * The policy that enables the external account to send events to your account.</p>
1654
+ */
1655
+ Policy?: string;
1656
+ }
1313
1657
  /**
1314
1658
  * @public
1315
1659
  * <p>
@@ -2493,33 +2837,245 @@ export interface AwsLambdaLayerVersionDetails {
2493
2837
  }
2494
2838
  /**
2495
2839
  * @public
2496
- * <p>A public subnet that Network Firewall uses for the firewall.</p>
2840
+ * <p>
2841
+ * Details for SASL/IAM client authentication.</p>
2497
2842
  */
2498
- export interface AwsNetworkFirewallFirewallSubnetMappingsDetails {
2843
+ export interface AwsMskClusterClusterInfoClientAuthenticationSaslIamDetails {
2499
2844
  /**
2500
2845
  * @public
2501
- * <p>The identifier of the subnet</p>
2846
+ * <p>
2847
+ * Indicates whether SASL/IAM authentication is enabled or not.</p>
2502
2848
  */
2503
- SubnetId?: string;
2849
+ Enabled?: boolean;
2504
2850
  }
2505
2851
  /**
2506
2852
  * @public
2507
- * <p>Details about an Network Firewall firewall.</p>
2853
+ * <p>
2854
+ * Details for SASL/SCRAM client authentication.</p>
2508
2855
  */
2509
- export interface AwsNetworkFirewallFirewallDetails {
2856
+ export interface AwsMskClusterClusterInfoClientAuthenticationSaslScramDetails {
2510
2857
  /**
2511
2858
  * @public
2512
- * <p>Whether the firewall is protected from deletion. If set to <code>true</code>, then the firewall cannot be deleted.</p>
2859
+ * <p>
2860
+ * Indicates whether SASL/SCRAM authentication is enabled or not.</p>
2513
2861
  */
2514
- DeleteProtection?: boolean;
2862
+ Enabled?: boolean;
2863
+ }
2864
+ /**
2865
+ * @public
2866
+ * <p>
2867
+ * Provides details for client authentication using SASL.</p>
2868
+ */
2869
+ export interface AwsMskClusterClusterInfoClientAuthenticationSaslDetails {
2515
2870
  /**
2516
2871
  * @public
2517
- * <p>A description of the firewall.</p>
2872
+ * <p>
2873
+ * Provides details for SASL client authentication using IAM. </p>
2518
2874
  */
2519
- Description?: string;
2875
+ Iam?: AwsMskClusterClusterInfoClientAuthenticationSaslIamDetails;
2520
2876
  /**
2521
2877
  * @public
2522
- * <p>The ARN of the firewall.</p>
2878
+ * <p>
2879
+ * Details for SASL client authentication using SCRAM.</p>
2880
+ */
2881
+ Scram?: AwsMskClusterClusterInfoClientAuthenticationSaslScramDetails;
2882
+ }
2883
+ /**
2884
+ * @public
2885
+ * <p>
2886
+ * Provides details for client authentication using TLS.</p>
2887
+ */
2888
+ export interface AwsMskClusterClusterInfoClientAuthenticationTlsDetails {
2889
+ /**
2890
+ * @public
2891
+ * <p>
2892
+ * List of Amazon Web Services Private CA Amazon Resource Names (ARNs). Amazon Web Services Private CA enables creation of
2893
+ * private certificate authority (CA) hierarchies, including root and subordinate CAs, without the investment and maintenance costs
2894
+ * of operating an on-premises CA.</p>
2895
+ */
2896
+ CertificateAuthorityArnList?: string[];
2897
+ /**
2898
+ * @public
2899
+ * <p>
2900
+ * Indicates whether TLS authentication is enabled or not.</p>
2901
+ */
2902
+ Enabled?: boolean;
2903
+ }
2904
+ /**
2905
+ * @public
2906
+ * <p>
2907
+ * Provides details for allowing no client authentication.
2908
+ * </p>
2909
+ */
2910
+ export interface AwsMskClusterClusterInfoClientAuthenticationUnauthenticatedDetails {
2911
+ /**
2912
+ * @public
2913
+ * <p>
2914
+ * Indicates whether unauthenticated is allowed or not.</p>
2915
+ */
2916
+ Enabled?: boolean;
2917
+ }
2918
+ /**
2919
+ * @public
2920
+ * <p>
2921
+ * Provides details about different modes of client authentication.</p>
2922
+ */
2923
+ export interface AwsMskClusterClusterInfoClientAuthenticationDetails {
2924
+ /**
2925
+ * @public
2926
+ * <p>
2927
+ * Provides details for client authentication using SASL.</p>
2928
+ */
2929
+ Sasl?: AwsMskClusterClusterInfoClientAuthenticationSaslDetails;
2930
+ /**
2931
+ * @public
2932
+ * <p>
2933
+ * Provides details for allowing no client authentication.</p>
2934
+ */
2935
+ Unauthenticated?: AwsMskClusterClusterInfoClientAuthenticationUnauthenticatedDetails;
2936
+ /**
2937
+ * @public
2938
+ * <p>
2939
+ * Provides details for client authentication using TLS.</p>
2940
+ */
2941
+ Tls?: AwsMskClusterClusterInfoClientAuthenticationTlsDetails;
2942
+ }
2943
+ /**
2944
+ * @public
2945
+ * <p>
2946
+ * The data-volume encryption details. You can't update encryption at rest settings for existing clusters.</p>
2947
+ */
2948
+ export interface AwsMskClusterClusterInfoEncryptionInfoEncryptionAtRestDetails {
2949
+ /**
2950
+ * @public
2951
+ * <p>
2952
+ * The Amazon Resource Name (ARN) of the KMS key for encrypting data at rest. If you don't specify a
2953
+ * KMS key, MSK creates one for you and uses it.</p>
2954
+ */
2955
+ DataVolumeKMSKeyId?: string;
2956
+ }
2957
+ /**
2958
+ * @public
2959
+ * <p>
2960
+ * The settings for encrypting data in transit.</p>
2961
+ */
2962
+ export interface AwsMskClusterClusterInfoEncryptionInfoEncryptionInTransitDetails {
2963
+ /**
2964
+ * @public
2965
+ * <p>
2966
+ * When set to <code>true</code>, it indicates that data communication among the broker nodes of the cluster is
2967
+ * encrypted. When set to <code>false</code>, the communication happens in plain text. The default value is
2968
+ * <code>true</code>.</p>
2969
+ */
2970
+ InCluster?: boolean;
2971
+ /**
2972
+ * @public
2973
+ * <p>
2974
+ * Indicates the encryption setting for data in transit between clients and brokers.</p>
2975
+ */
2976
+ ClientBroker?: string;
2977
+ }
2978
+ /**
2979
+ * @public
2980
+ * <p>
2981
+ * Includes encryption-related information, such as the KMS key used for encrypting data at rest and
2982
+ * whether you want MSK to encrypt your data in transit.</p>
2983
+ */
2984
+ export interface AwsMskClusterClusterInfoEncryptionInfoDetails {
2985
+ /**
2986
+ * @public
2987
+ * <p>
2988
+ * The settings for encrypting data in transit.</p>
2989
+ */
2990
+ EncryptionInTransit?: AwsMskClusterClusterInfoEncryptionInfoEncryptionInTransitDetails;
2991
+ /**
2992
+ * @public
2993
+ * <p>
2994
+ * The data-volume encryption details. You can't update encryption at rest settings for existing clusters.</p>
2995
+ */
2996
+ EncryptionAtRest?: AwsMskClusterClusterInfoEncryptionInfoEncryptionAtRestDetails;
2997
+ }
2998
+ /**
2999
+ * @public
3000
+ * <p>
3001
+ * Provide details about an Amazon MSK cluster.</p>
3002
+ */
3003
+ export interface AwsMskClusterClusterInfoDetails {
3004
+ /**
3005
+ * @public
3006
+ * <p>
3007
+ * Includes encryption-related information, such as the KMS key used for encrypting data at rest and
3008
+ * whether you want Amazon MSK to encrypt your data in transit.</p>
3009
+ */
3010
+ EncryptionInfo?: AwsMskClusterClusterInfoEncryptionInfoDetails;
3011
+ /**
3012
+ * @public
3013
+ * <p>
3014
+ * The current version of the MSK cluster.</p>
3015
+ */
3016
+ CurrentVersion?: string;
3017
+ /**
3018
+ * @public
3019
+ * <p>
3020
+ * The number of broker nodes in the cluster.</p>
3021
+ */
3022
+ NumberOfBrokerNodes?: number;
3023
+ /**
3024
+ * @public
3025
+ * <p>
3026
+ * The name of the cluster.</p>
3027
+ */
3028
+ ClusterName?: string;
3029
+ /**
3030
+ * @public
3031
+ * <p>
3032
+ * Provides information for different modes of client authentication.</p>
3033
+ */
3034
+ ClientAuthentication?: AwsMskClusterClusterInfoClientAuthenticationDetails;
3035
+ }
3036
+ /**
3037
+ * @public
3038
+ * <p>
3039
+ * Provides details about an Amazon Managed Streaming for Apache Kafka (Amazon MSK) cluster.
3040
+ * </p>
3041
+ */
3042
+ export interface AwsMskClusterDetails {
3043
+ /**
3044
+ * @public
3045
+ * <p>
3046
+ * Provides information about a cluster.</p>
3047
+ */
3048
+ ClusterInfo?: AwsMskClusterClusterInfoDetails;
3049
+ }
3050
+ /**
3051
+ * @public
3052
+ * <p>A public subnet that Network Firewall uses for the firewall.</p>
3053
+ */
3054
+ export interface AwsNetworkFirewallFirewallSubnetMappingsDetails {
3055
+ /**
3056
+ * @public
3057
+ * <p>The identifier of the subnet</p>
3058
+ */
3059
+ SubnetId?: string;
3060
+ }
3061
+ /**
3062
+ * @public
3063
+ * <p>Details about an Network Firewall firewall.</p>
3064
+ */
3065
+ export interface AwsNetworkFirewallFirewallDetails {
3066
+ /**
3067
+ * @public
3068
+ * <p>Whether the firewall is protected from deletion. If set to <code>true</code>, then the firewall cannot be deleted.</p>
3069
+ */
3070
+ DeleteProtection?: boolean;
3071
+ /**
3072
+ * @public
3073
+ * <p>A description of the firewall.</p>
3074
+ */
3075
+ Description?: string;
3076
+ /**
3077
+ * @public
3078
+ * <p>The ARN of the firewall.</p>
2523
3079
  */
2524
3080
  FirewallArn?: string;
2525
3081
  /**
@@ -3871,6 +4427,12 @@ export interface AwsRdsDbClusterDetails {
3871
4427
  * <p>Whether the mapping of IAM accounts to database accounts is enabled.</p>
3872
4428
  */
3873
4429
  IamDatabaseAuthenticationEnabled?: boolean;
4430
+ /**
4431
+ * @public
4432
+ * <p>
4433
+ * Indicates if minor version upgrades are automatically applied to the cluster.</p>
4434
+ */
4435
+ AutoMinorVersionUpgrade?: boolean;
3874
4436
  }
3875
4437
  /**
3876
4438
  * @public
@@ -5750,6 +6312,139 @@ export interface AwsRedshiftClusterDetails {
5750
6312
  */
5751
6313
  LoggingStatus?: AwsRedshiftClusterLoggingStatus;
5752
6314
  }
6315
+ /**
6316
+ * @public
6317
+ * <p>
6318
+ * An object that contains an optional comment about your Amazon Route 53 hosted zone.</p>
6319
+ */
6320
+ export interface AwsRoute53HostedZoneConfigDetails {
6321
+ /**
6322
+ * @public
6323
+ * <p> Any comments that you include about the hosted zone.
6324
+ * </p>
6325
+ */
6326
+ Comment?: string;
6327
+ }
6328
+ /**
6329
+ * @public
6330
+ * <p>
6331
+ * An object that contains information about an Amazon Route 53 hosted zone. </p>
6332
+ */
6333
+ export interface AwsRoute53HostedZoneObjectDetails {
6334
+ /**
6335
+ * @public
6336
+ * <p>
6337
+ * The ID that Route 53 assigns to the hosted zone when you create it. </p>
6338
+ */
6339
+ Id?: string;
6340
+ /**
6341
+ * @public
6342
+ * <p>
6343
+ * The name of the domain. For public hosted zones, this is the name that you have registered with your DNS registrar.</p>
6344
+ */
6345
+ Name?: string;
6346
+ /**
6347
+ * @public
6348
+ * <p>
6349
+ * An object that includes the <code>Comment</code> element.</p>
6350
+ */
6351
+ Config?: AwsRoute53HostedZoneConfigDetails;
6352
+ }
6353
+ /**
6354
+ * @public
6355
+ * <p>
6356
+ * The Amazon Resource Name (ARN) and other details of the Amazon CloudWatch Logs log group that Amazon Route 53 is
6357
+ * publishing logs to.</p>
6358
+ */
6359
+ export interface CloudWatchLogsLogGroupArnConfigDetails {
6360
+ /**
6361
+ * @public
6362
+ * <p>
6363
+ * The ARN of the CloudWatch Logs log group that Route 53 is publishing logs to.</p>
6364
+ */
6365
+ CloudWatchLogsLogGroupArn?: string;
6366
+ /**
6367
+ * @public
6368
+ * <p>
6369
+ * The ID of the hosted zone that CloudWatch Logs is logging queries for. </p>
6370
+ */
6371
+ HostedZoneId?: string;
6372
+ /**
6373
+ * @public
6374
+ * <p>
6375
+ * The ID for a DNS query logging configuration.
6376
+ * </p>
6377
+ */
6378
+ Id?: string;
6379
+ }
6380
+ /**
6381
+ * @public
6382
+ * <p>
6383
+ * Provides details about a specified Amazon Route 53 configuration for DNS query logging.</p>
6384
+ */
6385
+ export interface AwsRoute53QueryLoggingConfigDetails {
6386
+ /**
6387
+ * @public
6388
+ * <p>
6389
+ * The Amazon Resource Name (ARN) of the Amazon CloudWatch Logs log group that Route 53 is publishing logs to.</p>
6390
+ */
6391
+ CloudWatchLogsLogGroupArn?: CloudWatchLogsLogGroupArnConfigDetails;
6392
+ }
6393
+ /**
6394
+ * @public
6395
+ * <p>
6396
+ * For private hosted zones, this is a complex type that contains information about an Amazon VPC.</p>
6397
+ */
6398
+ export interface AwsRoute53HostedZoneVpcDetails {
6399
+ /**
6400
+ * @public
6401
+ * <p>
6402
+ * The identifier of an Amazon VPC.
6403
+ * </p>
6404
+ */
6405
+ Id?: string;
6406
+ /**
6407
+ * @public
6408
+ * <p>
6409
+ * The Amazon Web Services Region that an Amazon VPC was created in.</p>
6410
+ */
6411
+ Region?: string;
6412
+ }
6413
+ /**
6414
+ * @public
6415
+ * <p>
6416
+ * Provides details about a specified Amazon Route 53 hosted zone, including the four name servers assigned to
6417
+ * the hosted zone. A hosted zone represents a collection of records that can be managed together, belonging to a single parent
6418
+ * domain name.</p>
6419
+ */
6420
+ export interface AwsRoute53HostedZoneDetails {
6421
+ /**
6422
+ * @public
6423
+ * <p>
6424
+ * An object that contains information about the specified hosted zone.</p>
6425
+ */
6426
+ HostedZone?: AwsRoute53HostedZoneObjectDetails;
6427
+ /**
6428
+ * @public
6429
+ * <p>
6430
+ * An object that contains information about the Amazon Virtual Private Clouds (Amazon VPCs) that are associated with
6431
+ * the specified hosted zone.</p>
6432
+ */
6433
+ Vpcs?: AwsRoute53HostedZoneVpcDetails[];
6434
+ /**
6435
+ * @public
6436
+ * <p>
6437
+ * An object that contains a list of the authoritative name servers for a hosted zone or for a reusable delegation set.</p>
6438
+ */
6439
+ NameServers?: string[];
6440
+ /**
6441
+ * @public
6442
+ * <p>
6443
+ * An array that contains one <code>QueryLoggingConfig</code> element for each DNS query logging configuration that is
6444
+ * associated with the current Amazon Web Services account.</p>
6445
+ */
6446
+ QueryLoggingConfig?: AwsRoute53QueryLoggingConfigDetails;
6447
+ }
5753
6448
  /**
5754
6449
  * @public
5755
6450
  * <p>provides information about the Amazon S3 Public Access Block configuration for accounts.</p>
@@ -8764,1495 +9459,3 @@ export interface AwsWafv2RulesActionDetails {
8764
9459
  */
8765
9460
  Count?: AwsWafv2RulesActionCountDetails;
8766
9461
  }
8767
- /**
8768
- * @public
8769
- * <p>
8770
- * Defines and enables Amazon CloudWatch metrics and web request sample collection.
8771
- * </p>
8772
- */
8773
- export interface AwsWafv2VisibilityConfigDetails {
8774
- /**
8775
- * @public
8776
- * <p>
8777
- * A boolean indicating whether the associated resource sends metrics to Amazon CloudWatch. For the list of available
8778
- * metrics, see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#waf-metrics">WAF metrics and dimensions</a> in the <i>WAF Developer Guide</i>.
8779
- * </p>
8780
- */
8781
- CloudWatchMetricsEnabled?: boolean;
8782
- /**
8783
- * @public
8784
- * <p>
8785
- * A name of the Amazon CloudWatch metric.
8786
- * </p>
8787
- */
8788
- MetricName?: string;
8789
- /**
8790
- * @public
8791
- * <p>
8792
- * A boolean indicating whether WAF should store a sampling of the web requests that match the rules.
8793
- * You can view the sampled requests through the WAF console.
8794
- * </p>
8795
- */
8796
- SampledRequestsEnabled?: boolean;
8797
- }
8798
- /**
8799
- * @public
8800
- * <p>
8801
- * Provides details about rules in a rule group. A rule identifies web requests that you want to allow, block, or count. Each rule includes one top-level Statement that WAF uses to identify matching web requests, and parameters that govern how WAF handles them.
8802
- * </p>
8803
- */
8804
- export interface AwsWafv2RulesDetails {
8805
- /**
8806
- * @public
8807
- * <p>
8808
- * The action that WAF should take on a web request when it matches the rule statement. Settings at the web ACL level can override the rule action setting.
8809
- * </p>
8810
- */
8811
- Action?: AwsWafv2RulesActionDetails;
8812
- /**
8813
- * @public
8814
- * <p>
8815
- * The name of the rule.
8816
- * </p>
8817
- */
8818
- Name?: string;
8819
- /**
8820
- * @public
8821
- * <p>
8822
- * The action to use in the place of the action that results from the rule group evaluation.
8823
- * </p>
8824
- */
8825
- OverrideAction?: string;
8826
- /**
8827
- * @public
8828
- * <p>
8829
- * If you define more than one Rule in a WebACL, WAF evaluates each request against the Rules in order based on the value of <code>Priority</code>.
8830
- * WAF processes rules with lower priority first. The priorities don't need to be consecutive, but they must all be different.
8831
- * </p>
8832
- */
8833
- Priority?: number;
8834
- /**
8835
- * @public
8836
- * <p>
8837
- * Defines and enables Amazon CloudWatch metrics and web request sample collection.
8838
- * </p>
8839
- */
8840
- VisibilityConfig?: AwsWafv2VisibilityConfigDetails;
8841
- }
8842
- /**
8843
- * @public
8844
- * <p>
8845
- * Details about an WAFv2 rule group.
8846
- * </p>
8847
- */
8848
- export interface AwsWafv2RuleGroupDetails {
8849
- /**
8850
- * @public
8851
- * <p>
8852
- * The web ACL capacity units (WCUs) required for this rule group.
8853
- * </p>
8854
- */
8855
- Capacity?: number;
8856
- /**
8857
- * @public
8858
- * <p>
8859
- * A description of the rule group that helps with identification.
8860
- * </p>
8861
- */
8862
- Description?: string;
8863
- /**
8864
- * @public
8865
- * <p>
8866
- * A unique identifier for the rule group.
8867
- * </p>
8868
- */
8869
- Id?: string;
8870
- /**
8871
- * @public
8872
- * <p>
8873
- * The name of the rule group. You cannot change the name of a rule group after you create it.
8874
- * </p>
8875
- */
8876
- Name?: string;
8877
- /**
8878
- * @public
8879
- * <p>
8880
- * The Amazon Resource Name (ARN) of the entity.
8881
- * </p>
8882
- */
8883
- Arn?: string;
8884
- /**
8885
- * @public
8886
- * <p>
8887
- * The Rule statements used to identify the web requests that you want to allow, block, or count. Each rule includes one
8888
- * top-level statement that WAF uses to identify matching web requests, and parameters that govern how
8889
- * WAF handles them.
8890
- * </p>
8891
- */
8892
- Rules?: AwsWafv2RulesDetails[];
8893
- /**
8894
- * @public
8895
- * <p>
8896
- * Specifies whether the rule group is for an Amazon CloudFront distribution or for a regional application.
8897
- * A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync
8898
- * GraphQL API, or an Amazon Cognito user pool.
8899
- * </p>
8900
- */
8901
- Scope?: string;
8902
- /**
8903
- * @public
8904
- * <p>
8905
- * Defines and enables Amazon CloudWatch metrics and web request sample collection.
8906
- * </p>
8907
- */
8908
- VisibilityConfig?: AwsWafv2VisibilityConfigDetails;
8909
- }
8910
- /**
8911
- * @public
8912
- * <p>
8913
- * Used for CAPTCHA and challenge token settings. Determines how long a CAPTCHA or challenge timestamp remains valid after WAF updates it for a successful CAPTCHA or challenge response.
8914
- * </p>
8915
- */
8916
- export interface AwsWafv2WebAclCaptchaConfigImmunityTimePropertyDetails {
8917
- /**
8918
- * @public
8919
- * <p>
8920
- * The amount of time, in seconds, that a CAPTCHA or challenge timestamp is considered valid by WAF.
8921
- * </p>
8922
- */
8923
- ImmunityTime?: number;
8924
- }
8925
- /**
8926
- * @public
8927
- * <p>
8928
- * Specifies how WAF should handle CAPTCHA evaluations for rules that don't have their own <code>CaptchaConfig</code> settings.
8929
- * </p>
8930
- */
8931
- export interface AwsWafv2WebAclCaptchaConfigDetails {
8932
- /**
8933
- * @public
8934
- * <p>
8935
- * Determines how long a CAPTCHA timestamp in the token remains valid after the client successfully solves a CAPTCHA puzzle.
8936
- * </p>
8937
- */
8938
- ImmunityTimeProperty?: AwsWafv2WebAclCaptchaConfigImmunityTimePropertyDetails;
8939
- }
8940
- /**
8941
- * @public
8942
- * <p>
8943
- * Specifies the action that Amazon CloudFront or WAF takes when a web request matches the conditions in the rule.
8944
- * </p>
8945
- */
8946
- export interface AwsWafv2WebAclActionDetails {
8947
- /**
8948
- * @public
8949
- * <p>
8950
- * Specifies that WAF should allow requests by default.
8951
- * </p>
8952
- */
8953
- Allow?: AwsWafv2ActionAllowDetails;
8954
- /**
8955
- * @public
8956
- * <p>
8957
- * Specifies that WAF should block requests by default.
8958
- * </p>
8959
- */
8960
- Block?: AwsWafv2ActionBlockDetails;
8961
- }
8962
- /**
8963
- * @public
8964
- * <p>
8965
- * Details about an WAFv2 web Access Control List (ACL).
8966
- * </p>
8967
- */
8968
- export interface AwsWafv2WebAclDetails {
8969
- /**
8970
- * @public
8971
- * <p>
8972
- * The name of the web ACL.
8973
- * </p>
8974
- */
8975
- Name?: string;
8976
- /**
8977
- * @public
8978
- * <p>
8979
- * The Amazon Resource Name (ARN) of the web ACL that you want to associate with the resource.
8980
- * </p>
8981
- */
8982
- Arn?: string;
8983
- /**
8984
- * @public
8985
- * <p>
8986
- * Indicates whether this web ACL is managed by Firewall Manager.
8987
- * </p>
8988
- */
8989
- ManagedbyFirewallManager?: boolean;
8990
- /**
8991
- * @public
8992
- * <p>
8993
- * A unique identifier for the web ACL.
8994
- * </p>
8995
- */
8996
- Id?: string;
8997
- /**
8998
- * @public
8999
- * <p>
9000
- * The web ACL capacity units (WCUs) currently being used by this web ACL.
9001
- * </p>
9002
- */
9003
- Capacity?: number;
9004
- /**
9005
- * @public
9006
- * <p>
9007
- * Specifies how WAF should handle CAPTCHA evaluations for rules that don't have their own
9008
- * <code>CaptchaConfig</code> settings.
9009
- * </p>
9010
- */
9011
- CaptchaConfig?: AwsWafv2WebAclCaptchaConfigDetails;
9012
- /**
9013
- * @public
9014
- * <p>
9015
- * The action to perform if none of the Rules contained in the web ACL match.
9016
- * </p>
9017
- */
9018
- DefaultAction?: AwsWafv2WebAclActionDetails;
9019
- /**
9020
- * @public
9021
- * <p>
9022
- * A description of the web ACL that helps with identification.
9023
- * </p>
9024
- */
9025
- Description?: string;
9026
- /**
9027
- * @public
9028
- * <p>
9029
- * The Rule statements used to identify the web requests that you want to allow, block, or count. Each rule includes one
9030
- * top-level statement that WAF uses to identify matching web requests, and parameters that govern how
9031
- * WAF handles them.
9032
- * </p>
9033
- */
9034
- Rules?: AwsWafv2RulesDetails[];
9035
- /**
9036
- * @public
9037
- * <p>
9038
- * Defines and enables Amazon CloudWatch metrics and web request sample collection.
9039
- * </p>
9040
- */
9041
- VisibilityConfig?: AwsWafv2VisibilityConfigDetails;
9042
- }
9043
- /**
9044
- * @public
9045
- * <p>Details about the action that CloudFront or WAF takes when a web request matches the
9046
- * conditions in the rule. </p>
9047
- */
9048
- export interface WafAction {
9049
- /**
9050
- * @public
9051
- * <p>Specifies how you want WAF to respond to requests that match the settings in a
9052
- * rule.</p>
9053
- * <p>Valid settings include the following:</p>
9054
- * <ul>
9055
- * <li>
9056
- * <p>
9057
- * <code>ALLOW</code> - WAF allows requests</p>
9058
- * </li>
9059
- * <li>
9060
- * <p>
9061
- * <code>BLOCK</code> - WAF blocks requests</p>
9062
- * </li>
9063
- * <li>
9064
- * <p>
9065
- * <code>COUNT</code> - WAF increments a counter of the requests that
9066
- * match all of the conditions in the rule. WAF then continues to inspect
9067
- * the web request based on the remaining rules in the web ACL. You can't specify
9068
- * <code>COUNT</code> for the default action for a web ACL.</p>
9069
- * </li>
9070
- * </ul>
9071
- */
9072
- Type?: string;
9073
- }
9074
- /**
9075
- * @public
9076
- * <p>Details about a rule to exclude from a rule group.</p>
9077
- */
9078
- export interface WafExcludedRule {
9079
- /**
9080
- * @public
9081
- * <p>The unique identifier for the rule to exclude from the rule group.</p>
9082
- */
9083
- RuleId?: string;
9084
- }
9085
- /**
9086
- * @public
9087
- * <p>Details about an override action for a rule.</p>
9088
- */
9089
- export interface WafOverrideAction {
9090
- /**
9091
- * @public
9092
- * <p>
9093
- * <code>COUNT</code> overrides the action specified by the individual rule within a
9094
- * <code>RuleGroup</code> .</p>
9095
- * <p>If set to <code>NONE</code>, the rule's action takes place.</p>
9096
- */
9097
- Type?: string;
9098
- }
9099
- /**
9100
- * @public
9101
- * <p>Details for a rule in an WAF web ACL.</p>
9102
- */
9103
- export interface AwsWafWebAclRule {
9104
- /**
9105
- * @public
9106
- * <p>Specifies the action that CloudFront or WAF takes when a web request matches the
9107
- * conditions in the rule. </p>
9108
- */
9109
- Action?: WafAction;
9110
- /**
9111
- * @public
9112
- * <p>Rules to exclude from a rule group.</p>
9113
- */
9114
- ExcludedRules?: WafExcludedRule[];
9115
- /**
9116
- * @public
9117
- * <p>Use the <code>OverrideAction</code> to test your <code>RuleGroup</code>.</p>
9118
- * <p>Any rule in a <code>RuleGroup</code> can potentially block a request. If you set the <code>OverrideAction</code> to
9119
- * <code>None</code>, the <code>RuleGroup</code> blocks a request if any individual rule in the <code>RuleGroup</code>
9120
- * matches the request and is configured to block that request.</p>
9121
- * <p>However, if you first want to test the <code>RuleGroup</code>,
9122
- * set the <code>OverrideAction</code> to <code>Count</code>. The <code>RuleGroup</code>
9123
- * then overrides any block action specified by individual rules contained within the group.
9124
- * Instead of blocking matching requests, those requests are counted.</p>
9125
- * <p>
9126
- * <code>ActivatedRule</code>|<code>OverrideAction</code> applies only when updating or
9127
- * adding a <code>RuleGroup</code>
9128
- * to a web ACL. In this case you do not use <code>ActivatedRule</code>
9129
- * <code>Action</code>. For all other update requests,
9130
- * <code>ActivatedRule</code>
9131
- * <code>Action</code> is used instead of <code>ActivatedRule</code>
9132
- * <code>OverrideAction</code>.</p>
9133
- */
9134
- OverrideAction?: WafOverrideAction;
9135
- /**
9136
- * @public
9137
- * <p>Specifies the order in which the rules in a web
9138
- * ACL are evaluated. Rules with a lower value for <code>Priority</code> are
9139
- * evaluated before rules with a higher value. The value must be a unique integer. If you add
9140
- * multiple rules to a web ACL, the values do not need to be consecutive.</p>
9141
- */
9142
- Priority?: number;
9143
- /**
9144
- * @public
9145
- * <p>The identifier for a rule.</p>
9146
- */
9147
- RuleId?: string;
9148
- /**
9149
- * @public
9150
- * <p>The rule type.</p>
9151
- * <p>Valid values: <code>REGULAR</code> | <code>RATE_BASED</code> | <code>GROUP</code>
9152
- * </p>
9153
- * <p>The default is <code>REGULAR</code>.</p>
9154
- */
9155
- Type?: string;
9156
- }
9157
- /**
9158
- * @public
9159
- * <p>Provides information about an WAF web access control list (web ACL).</p>
9160
- */
9161
- export interface AwsWafWebAclDetails {
9162
- /**
9163
- * @public
9164
- * <p>A friendly name or description of the web ACL. You can't change the name of a web ACL after you create it.</p>
9165
- */
9166
- Name?: string;
9167
- /**
9168
- * @public
9169
- * <p>The action to perform if none of the rules contained in the web ACL match.</p>
9170
- */
9171
- DefaultAction?: string;
9172
- /**
9173
- * @public
9174
- * <p>An array that contains the action for each rule in a web ACL, the priority of the rule, and the ID of the rule.</p>
9175
- */
9176
- Rules?: AwsWafWebAclRule[];
9177
- /**
9178
- * @public
9179
- * <p>A unique identifier for a web ACL.</p>
9180
- */
9181
- WebAclId?: string;
9182
- }
9183
- /**
9184
- * @public
9185
- * <p>Information about the encryption configuration for X-Ray.</p>
9186
- */
9187
- export interface AwsXrayEncryptionConfigDetails {
9188
- /**
9189
- * @public
9190
- * <p>The identifier of the KMS key that is used for encryption. Provided if <code>Type</code> is <code>KMS</code>.</p>
9191
- */
9192
- KeyId?: string;
9193
- /**
9194
- * @public
9195
- * <p>The current status of the encryption configuration. Valid values are <code>ACTIVE</code> or <code>UPDATING</code>.</p>
9196
- * <p>When <code>Status</code> is equal to <code>UPDATING</code>, X-Ray might use both the old and new encryption.</p>
9197
- */
9198
- Status?: string;
9199
- /**
9200
- * @public
9201
- * <p>The type of encryption. <code>KMS</code> indicates that the encryption uses KMS keys. <code>NONE</code> indicates the default encryption.</p>
9202
- */
9203
- Type?: string;
9204
- }
9205
- /**
9206
- * @public
9207
- * <p>Describes the mounting of a volume in a container.
9208
- * </p>
9209
- */
9210
- export interface VolumeMount {
9211
- /**
9212
- * @public
9213
- * <p>The name of the volume.
9214
- * </p>
9215
- */
9216
- Name?: string;
9217
- /**
9218
- * @public
9219
- * <p>The path in the container at which the volume should be mounted.
9220
- * </p>
9221
- */
9222
- MountPath?: string;
9223
- }
9224
- /**
9225
- * @public
9226
- * <p>Container details related to a finding.</p>
9227
- */
9228
- export interface ContainerDetails {
9229
- /**
9230
- * @public
9231
- * <p>The runtime of the container.
9232
- * </p>
9233
- */
9234
- ContainerRuntime?: string;
9235
- /**
9236
- * @public
9237
- * <p>The name of the container related to a finding.</p>
9238
- */
9239
- Name?: string;
9240
- /**
9241
- * @public
9242
- * <p>The identifier of the container image related to a finding.</p>
9243
- */
9244
- ImageId?: string;
9245
- /**
9246
- * @public
9247
- * <p>The name of the container image related to a finding.</p>
9248
- */
9249
- ImageName?: string;
9250
- /**
9251
- * @public
9252
- * <p>Indicates when the container started.</p>
9253
- * <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
9254
- * Date/Time Format</a>. The value cannot contain spaces, and date and time should be separated by <code>T</code>. For example,
9255
- * <code>2020-03-22T13:22:13.933Z</code>.</p>
9256
- */
9257
- LaunchedAt?: string;
9258
- /**
9259
- * @public
9260
- * <p>Provides information about the mounting of a volume in a container.
9261
- * </p>
9262
- */
9263
- VolumeMounts?: VolumeMount[];
9264
- /**
9265
- * @public
9266
- * <p>When this parameter is <code>true</code>, the container is given elevated privileges on the host
9267
- * container instance (similar to the root user).
9268
- * </p>
9269
- */
9270
- Privileged?: boolean;
9271
- }
9272
- /**
9273
- * @public
9274
- * <p>Additional details about a resource related to a finding.</p>
9275
- * <p>To provide the details, use the object that corresponds to the resource type. For
9276
- * example, if the resource type is <code>AwsEc2Instance</code>, then you use the
9277
- * <code>AwsEc2Instance</code> object to provide the details.</p>
9278
- * <p>If the type-specific object does not contain all of the fields you want to populate,
9279
- * then you use the <code>Other</code> object to populate those additional fields.</p>
9280
- * <p>You also use the <code>Other</code> object to populate the details when the selected
9281
- * type does not have a corresponding object.</p>
9282
- */
9283
- export interface ResourceDetails {
9284
- /**
9285
- * @public
9286
- * <p>Details for an autoscaling group.</p>
9287
- */
9288
- AwsAutoScalingAutoScalingGroup?: AwsAutoScalingAutoScalingGroupDetails;
9289
- /**
9290
- * @public
9291
- * <p>Details for an CodeBuild project.</p>
9292
- */
9293
- AwsCodeBuildProject?: AwsCodeBuildProjectDetails;
9294
- /**
9295
- * @public
9296
- * <p>Details about a CloudFront distribution.</p>
9297
- */
9298
- AwsCloudFrontDistribution?: AwsCloudFrontDistributionDetails;
9299
- /**
9300
- * @public
9301
- * <p>Details about an EC2 instance related to a finding.</p>
9302
- */
9303
- AwsEc2Instance?: AwsEc2InstanceDetails;
9304
- /**
9305
- * @public
9306
- * <p>Details for an EC2 network interface.</p>
9307
- */
9308
- AwsEc2NetworkInterface?: AwsEc2NetworkInterfaceDetails;
9309
- /**
9310
- * @public
9311
- * <p>Details for an EC2 security group.</p>
9312
- */
9313
- AwsEc2SecurityGroup?: AwsEc2SecurityGroupDetails;
9314
- /**
9315
- * @public
9316
- * <p>Details for an Amazon EC2 volume.</p>
9317
- */
9318
- AwsEc2Volume?: AwsEc2VolumeDetails;
9319
- /**
9320
- * @public
9321
- * <p>Details for an Amazon EC2 VPC.</p>
9322
- */
9323
- AwsEc2Vpc?: AwsEc2VpcDetails;
9324
- /**
9325
- * @public
9326
- * <p>Details about an Elastic IP address.</p>
9327
- */
9328
- AwsEc2Eip?: AwsEc2EipDetails;
9329
- /**
9330
- * @public
9331
- * <p>Details about a subnet in Amazon EC2.</p>
9332
- */
9333
- AwsEc2Subnet?: AwsEc2SubnetDetails;
9334
- /**
9335
- * @public
9336
- * <p>Details about an EC2 network access control list (ACL).</p>
9337
- */
9338
- AwsEc2NetworkAcl?: AwsEc2NetworkAclDetails;
9339
- /**
9340
- * @public
9341
- * <p>Details about a load balancer.</p>
9342
- */
9343
- AwsElbv2LoadBalancer?: AwsElbv2LoadBalancerDetails;
9344
- /**
9345
- * @public
9346
- * <p>Details about an Elastic Beanstalk environment.</p>
9347
- */
9348
- AwsElasticBeanstalkEnvironment?: AwsElasticBeanstalkEnvironmentDetails;
9349
- /**
9350
- * @public
9351
- * <p>Details for an Elasticsearch domain.</p>
9352
- */
9353
- AwsElasticsearchDomain?: AwsElasticsearchDomainDetails;
9354
- /**
9355
- * @public
9356
- * <p>Details about an S3 bucket related to a finding.</p>
9357
- */
9358
- AwsS3Bucket?: AwsS3BucketDetails;
9359
- /**
9360
- * @public
9361
- * <p>Details about the Amazon S3 Public Access Block configuration for an account.</p>
9362
- */
9363
- AwsS3AccountPublicAccessBlock?: AwsS3AccountPublicAccessBlockDetails;
9364
- /**
9365
- * @public
9366
- * <p>Details about an S3 object related to a finding.</p>
9367
- */
9368
- AwsS3Object?: AwsS3ObjectDetails;
9369
- /**
9370
- * @public
9371
- * <p>Details about a Secrets Manager secret.</p>
9372
- */
9373
- AwsSecretsManagerSecret?: AwsSecretsManagerSecretDetails;
9374
- /**
9375
- * @public
9376
- * <p>Details about an IAM access key related to a finding.</p>
9377
- */
9378
- AwsIamAccessKey?: AwsIamAccessKeyDetails;
9379
- /**
9380
- * @public
9381
- * <p>Details about an IAM user.</p>
9382
- */
9383
- AwsIamUser?: AwsIamUserDetails;
9384
- /**
9385
- * @public
9386
- * <p>Details about an IAM permissions policy.</p>
9387
- */
9388
- AwsIamPolicy?: AwsIamPolicyDetails;
9389
- /**
9390
- * @public
9391
- * <p>Provides information about a version 2 stage for Amazon API Gateway.</p>
9392
- */
9393
- AwsApiGatewayV2Stage?: AwsApiGatewayV2StageDetails;
9394
- /**
9395
- * @public
9396
- * <p>Provides information about a version 2 API in Amazon API Gateway.</p>
9397
- */
9398
- AwsApiGatewayV2Api?: AwsApiGatewayV2ApiDetails;
9399
- /**
9400
- * @public
9401
- * <p>Details about a DynamoDB table.</p>
9402
- */
9403
- AwsDynamoDbTable?: AwsDynamoDbTableDetails;
9404
- /**
9405
- * @public
9406
- * <p>Provides information about a version 1 Amazon API Gateway stage.</p>
9407
- */
9408
- AwsApiGatewayStage?: AwsApiGatewayStageDetails;
9409
- /**
9410
- * @public
9411
- * <p>Provides information about a REST API in version 1 of Amazon API Gateway.</p>
9412
- */
9413
- AwsApiGatewayRestApi?: AwsApiGatewayRestApiDetails;
9414
- /**
9415
- * @public
9416
- * <p>Provides details about a CloudTrail trail.</p>
9417
- */
9418
- AwsCloudTrailTrail?: AwsCloudTrailTrailDetails;
9419
- /**
9420
- * @public
9421
- * <p>Provides information about the state of a patch on an instance based on the patch baseline that was used to patch the instance.</p>
9422
- */
9423
- AwsSsmPatchCompliance?: AwsSsmPatchComplianceDetails;
9424
- /**
9425
- * @public
9426
- * <p>Provides details about an Certificate Manager certificate.</p>
9427
- */
9428
- AwsCertificateManagerCertificate?: AwsCertificateManagerCertificateDetails;
9429
- /**
9430
- * @public
9431
- * <p>Contains details about an Amazon Redshift cluster.</p>
9432
- */
9433
- AwsRedshiftCluster?: AwsRedshiftClusterDetails;
9434
- /**
9435
- * @public
9436
- * <p>Contains details about a Classic Load Balancer.</p>
9437
- */
9438
- AwsElbLoadBalancer?: AwsElbLoadBalancerDetails;
9439
- /**
9440
- * @public
9441
- * <p>Contains details about an IAM group.</p>
9442
- */
9443
- AwsIamGroup?: AwsIamGroupDetails;
9444
- /**
9445
- * @public
9446
- * <p>Details about an IAM role.</p>
9447
- */
9448
- AwsIamRole?: AwsIamRoleDetails;
9449
- /**
9450
- * @public
9451
- * <p>Details about an KMS key.</p>
9452
- */
9453
- AwsKmsKey?: AwsKmsKeyDetails;
9454
- /**
9455
- * @public
9456
- * <p>Details about a Lambda function.</p>
9457
- */
9458
- AwsLambdaFunction?: AwsLambdaFunctionDetails;
9459
- /**
9460
- * @public
9461
- * <p>Details for a Lambda layer version.</p>
9462
- */
9463
- AwsLambdaLayerVersion?: AwsLambdaLayerVersionDetails;
9464
- /**
9465
- * @public
9466
- * <p>Details about an Amazon RDS database instance.</p>
9467
- */
9468
- AwsRdsDbInstance?: AwsRdsDbInstanceDetails;
9469
- /**
9470
- * @public
9471
- * <p>Details about an SNS topic.</p>
9472
- */
9473
- AwsSnsTopic?: AwsSnsTopicDetails;
9474
- /**
9475
- * @public
9476
- * <p>Details about an SQS queue.</p>
9477
- */
9478
- AwsSqsQueue?: AwsSqsQueueDetails;
9479
- /**
9480
- * @public
9481
- * <p>Details for an WAF web ACL.</p>
9482
- */
9483
- AwsWafWebAcl?: AwsWafWebAclDetails;
9484
- /**
9485
- * @public
9486
- * <p>Details about an Amazon RDS database snapshot.</p>
9487
- */
9488
- AwsRdsDbSnapshot?: AwsRdsDbSnapshotDetails;
9489
- /**
9490
- * @public
9491
- * <p>Details about an Amazon RDS database cluster snapshot.</p>
9492
- */
9493
- AwsRdsDbClusterSnapshot?: AwsRdsDbClusterSnapshotDetails;
9494
- /**
9495
- * @public
9496
- * <p>Details about an Amazon RDS database cluster.</p>
9497
- */
9498
- AwsRdsDbCluster?: AwsRdsDbClusterDetails;
9499
- /**
9500
- * @public
9501
- * <p>Details about an Amazon ECS cluster.</p>
9502
- */
9503
- AwsEcsCluster?: AwsEcsClusterDetails;
9504
- /**
9505
- * @public
9506
- * <p>Provides information about a Docker container that's part of a task.
9507
- * </p>
9508
- */
9509
- AwsEcsContainer?: AwsEcsContainerDetails;
9510
- /**
9511
- * @public
9512
- * <p>Details about a task definition. A task definition describes the container and volume definitions of an Amazon Elastic Container Service task.</p>
9513
- */
9514
- AwsEcsTaskDefinition?: AwsEcsTaskDefinitionDetails;
9515
- /**
9516
- * @public
9517
- * <p>Details about a container resource related to a finding.</p>
9518
- */
9519
- Container?: ContainerDetails;
9520
- /**
9521
- * @public
9522
- * <p>Details about a resource that are not available in a type-specific details object. Use
9523
- * the <code>Other</code> object in the following cases.</p>
9524
- * <ul>
9525
- * <li>
9526
- * <p>The type-specific object does not contain all of the fields that you want to
9527
- * populate. In this case, first use the type-specific object to populate those fields.
9528
- * Use the <code>Other</code> object to populate the fields that are missing from the
9529
- * type-specific object.</p>
9530
- * </li>
9531
- * <li>
9532
- * <p>The resource type does not have a corresponding object. This includes resources
9533
- * for which the type is <code>Other</code>. </p>
9534
- * </li>
9535
- * </ul>
9536
- */
9537
- Other?: Record<string, string>;
9538
- /**
9539
- * @public
9540
- * <p>Details about an RDS event notification subscription.</p>
9541
- */
9542
- AwsRdsEventSubscription?: AwsRdsEventSubscriptionDetails;
9543
- /**
9544
- * @public
9545
- * <p>Details about a service within an ECS cluster.</p>
9546
- */
9547
- AwsEcsService?: AwsEcsServiceDetails;
9548
- /**
9549
- * @public
9550
- * <p>Provides details about a launch configuration.</p>
9551
- */
9552
- AwsAutoScalingLaunchConfiguration?: AwsAutoScalingLaunchConfigurationDetails;
9553
- /**
9554
- * @public
9555
- * <p>Details about an Amazon EC2 VPN connection.</p>
9556
- */
9557
- AwsEc2VpnConnection?: AwsEc2VpnConnectionDetails;
9558
- /**
9559
- * @public
9560
- * <p>Information about an Amazon ECR image.</p>
9561
- */
9562
- AwsEcrContainerImage?: AwsEcrContainerImageDetails;
9563
- /**
9564
- * @public
9565
- * <p>Details about an Amazon OpenSearch Service domain.</p>
9566
- */
9567
- AwsOpenSearchServiceDomain?: AwsOpenSearchServiceDomainDetails;
9568
- /**
9569
- * @public
9570
- * <p>Details about the service configuration for a VPC endpoint service.</p>
9571
- */
9572
- AwsEc2VpcEndpointService?: AwsEc2VpcEndpointServiceDetails;
9573
- /**
9574
- * @public
9575
- * <p>Information about the encryption configuration for X-Ray.</p>
9576
- */
9577
- AwsXrayEncryptionConfig?: AwsXrayEncryptionConfigDetails;
9578
- /**
9579
- * @public
9580
- * <p>Details about a rate-based rule for global resources.</p>
9581
- */
9582
- AwsWafRateBasedRule?: AwsWafRateBasedRuleDetails;
9583
- /**
9584
- * @public
9585
- * <p>Details about a rate-based rule for Regional resources.</p>
9586
- */
9587
- AwsWafRegionalRateBasedRule?: AwsWafRegionalRateBasedRuleDetails;
9588
- /**
9589
- * @public
9590
- * <p>Information about an Amazon Elastic Container Registry repository.</p>
9591
- */
9592
- AwsEcrRepository?: AwsEcrRepositoryDetails;
9593
- /**
9594
- * @public
9595
- * <p>Details about an Amazon EKS cluster.</p>
9596
- */
9597
- AwsEksCluster?: AwsEksClusterDetails;
9598
- /**
9599
- * @public
9600
- * <p>Details about an Network Firewall firewall policy.</p>
9601
- */
9602
- AwsNetworkFirewallFirewallPolicy?: AwsNetworkFirewallFirewallPolicyDetails;
9603
- /**
9604
- * @public
9605
- * <p>Details about an Network Firewall firewall.</p>
9606
- */
9607
- AwsNetworkFirewallFirewall?: AwsNetworkFirewallFirewallDetails;
9608
- /**
9609
- * @public
9610
- * <p>Details about an Network Firewall rule group.</p>
9611
- */
9612
- AwsNetworkFirewallRuleGroup?: AwsNetworkFirewallRuleGroupDetails;
9613
- /**
9614
- * @public
9615
- * <p>Details about an Amazon RDS DB security group.</p>
9616
- */
9617
- AwsRdsDbSecurityGroup?: AwsRdsDbSecurityGroupDetails;
9618
- /**
9619
- * @public
9620
- * <p>Details about an Amazon Kinesis data stream.</p>
9621
- */
9622
- AwsKinesisStream?: AwsKinesisStreamDetails;
9623
- /**
9624
- * @public
9625
- * <p>Details about an Amazon EC2 transit gateway that interconnects your virtual private clouds (VPC) and on-premises networks.</p>
9626
- */
9627
- AwsEc2TransitGateway?: AwsEc2TransitGatewayDetails;
9628
- /**
9629
- * @public
9630
- * <p>Details about an Amazon EFS access point. An access point is an application-specific view into an EFS file system that
9631
- * applies an operating system user and group, and a file system path, to any file system request made through the access point.
9632
- * </p>
9633
- */
9634
- AwsEfsAccessPoint?: AwsEfsAccessPointDetails;
9635
- /**
9636
- * @public
9637
- * <p>Details about an CloudFormation stack. A stack is a collection of Amazon Web Services resources that you can manage as a single unit.</p>
9638
- */
9639
- AwsCloudFormationStack?: AwsCloudFormationStackDetails;
9640
- /**
9641
- * @public
9642
- * <p>Details about an Amazon CloudWatch alarm. An alarm allows you to monitor and receive alerts about your Amazon Web Services resources and applications across multiple Regions.</p>
9643
- */
9644
- AwsCloudWatchAlarm?: AwsCloudWatchAlarmDetails;
9645
- /**
9646
- * @public
9647
- * <p>Details about an Amazon EC2 VPC peering connection. A VPC peering connection is
9648
- * a networking connection between two VPCs that enables you to route traffic between them
9649
- * privately.
9650
- * </p>
9651
- */
9652
- AwsEc2VpcPeeringConnection?: AwsEc2VpcPeeringConnectionDetails;
9653
- /**
9654
- * @public
9655
- * <p>Details about an WAF rule group for Regional resources.
9656
- * </p>
9657
- */
9658
- AwsWafRegionalRuleGroup?: AwsWafRegionalRuleGroupDetails;
9659
- /**
9660
- * @public
9661
- * <p>Details about an WAF rule for Regional resources.
9662
- * </p>
9663
- */
9664
- AwsWafRegionalRule?: AwsWafRegionalRuleDetails;
9665
- /**
9666
- * @public
9667
- * <p>Details about an WAF web access control list (web ACL) for Regional resources. </p>
9668
- */
9669
- AwsWafRegionalWebAcl?: AwsWafRegionalWebAclDetails;
9670
- /**
9671
- * @public
9672
- * <p>Details about an WAF rule for global resources.
9673
- * </p>
9674
- */
9675
- AwsWafRule?: AwsWafRuleDetails;
9676
- /**
9677
- * @public
9678
- * <p>Details about an WAF rule group for global resources.
9679
- * </p>
9680
- */
9681
- AwsWafRuleGroup?: AwsWafRuleGroupDetails;
9682
- /**
9683
- * @public
9684
- * <p>Details about a task in a cluster. </p>
9685
- */
9686
- AwsEcsTask?: AwsEcsTaskDetails;
9687
- /**
9688
- * @public
9689
- * <p>Provides details about an Backup backup vault.
9690
- * </p>
9691
- */
9692
- AwsBackupBackupVault?: AwsBackupBackupVaultDetails;
9693
- /**
9694
- * @public
9695
- * <p>Provides details about an Backup backup plan.
9696
- * </p>
9697
- */
9698
- AwsBackupBackupPlan?: AwsBackupBackupPlanDetails;
9699
- /**
9700
- * @public
9701
- * <p>Provides details about an Backup backup, or recovery point.
9702
- * </p>
9703
- */
9704
- AwsBackupRecoveryPoint?: AwsBackupRecoveryPointDetails;
9705
- /**
9706
- * @public
9707
- * <p>
9708
- * Specifies the properties for creating an Amazon Elastic Compute Cloud (Amazon EC2) launch template.
9709
- * </p>
9710
- */
9711
- AwsEc2LaunchTemplate?: AwsEc2LaunchTemplateDetails;
9712
- /**
9713
- * @public
9714
- * <p>
9715
- * Provides details about an Amazon SageMaker notebook instance.
9716
- * </p>
9717
- */
9718
- AwsSageMakerNotebookInstance?: AwsSageMakerNotebookInstanceDetails;
9719
- /**
9720
- * @public
9721
- * <p>
9722
- * Details about an WAFv2 web Access Control List (ACL).
9723
- * </p>
9724
- */
9725
- AwsWafv2WebAcl?: AwsWafv2WebAclDetails;
9726
- /**
9727
- * @public
9728
- * <p>
9729
- * Details about an WAFv2 rule group.
9730
- * </p>
9731
- */
9732
- AwsWafv2RuleGroup?: AwsWafv2RuleGroupDetails;
9733
- /**
9734
- * @public
9735
- * <p>
9736
- * Provides details about a route table. A route table contains a set of rules, called routes, that
9737
- * determine where to direct network traffic from your subnet or gateway.
9738
- * </p>
9739
- */
9740
- AwsEc2RouteTable?: AwsEc2RouteTableDetails;
9741
- /**
9742
- * @public
9743
- * <p>
9744
- * Provides details about AppSync message broker. A message broker allows software applications and
9745
- * components to communicate using various programming languages, operating systems, and formal messaging protocols.
9746
- * </p>
9747
- */
9748
- AwsAmazonMqBroker?: AwsAmazonMqBrokerDetails;
9749
- /**
9750
- * @public
9751
- * <p>
9752
- * Provides details about an AppSync Graph QL API, which lets you query multiple databases, microservices,
9753
- * and APIs from a single GraphQL endpoint.
9754
- * </p>
9755
- */
9756
- AwsAppSyncGraphQlApi?: AwsAppSyncGraphQlApiDetails;
9757
- /**
9758
- * @public
9759
- * <p>
9760
- * A schema defines the structure of events that are sent to Amazon EventBridge. Schema registries are containers for
9761
- * schemas. They collect and organize schemas so that your schemas are in logical groups.
9762
- * </p>
9763
- */
9764
- AwsEventSchemasRegistry?: AwsEventSchemasRegistryDetails;
9765
- /**
9766
- * @public
9767
- * <p>
9768
- * Provides details about an Amazon GuardDuty detector. A detector is an object that represents the GuardDuty
9769
- * service. A detector is required for GuardDuty to become operational.
9770
- * </p>
9771
- */
9772
- AwsGuardDutyDetector?: AwsGuardDutyDetectorDetails;
9773
- /**
9774
- * @public
9775
- * <p>
9776
- * Provides details about an Step Functions state machine, which is a workflow consisting of a series of event-driven steps.
9777
- * </p>
9778
- */
9779
- AwsStepFunctionStateMachine?: AwsStepFunctionStateMachineDetails;
9780
- /**
9781
- * @public
9782
- * <p>
9783
- * Provides information about an Amazon Athena workgroup. A workgroup helps you separate users, teams,
9784
- * applications, or workloads. It also helps you set limits on data processing and track costs.
9785
- * </p>
9786
- */
9787
- AwsAthenaWorkGroup?: AwsAthenaWorkGroupDetails;
9788
- }
9789
- /**
9790
- * @public
9791
- * @enum
9792
- */
9793
- export declare const Partition: {
9794
- readonly AWS: "aws";
9795
- readonly AWS_CN: "aws-cn";
9796
- readonly AWS_US_GOV: "aws-us-gov";
9797
- };
9798
- /**
9799
- * @public
9800
- */
9801
- export type Partition = (typeof Partition)[keyof typeof Partition];
9802
- /**
9803
- * @public
9804
- * <p>A resource related to a finding.</p>
9805
- */
9806
- export interface Resource {
9807
- /**
9808
- * @public
9809
- * <p>The type of the resource that details are provided for. If possible, set
9810
- * <code>Type</code> to one of the supported resource types. For example, if the resource
9811
- * is an EC2 instance, then set <code>Type</code> to <code>AwsEc2Instance</code>.</p>
9812
- * <p>If the resource does not match any of the provided types, then set <code>Type</code> to
9813
- * <code>Other</code>. </p>
9814
- */
9815
- Type: string | undefined;
9816
- /**
9817
- * @public
9818
- * <p>The canonical identifier for the given resource type.</p>
9819
- */
9820
- Id: string | undefined;
9821
- /**
9822
- * @public
9823
- * <p>The canonical Amazon Web Services partition name that the Region is assigned to.</p>
9824
- */
9825
- Partition?: Partition | string;
9826
- /**
9827
- * @public
9828
- * <p>The canonical Amazon Web Services external Region name where this resource is located.</p>
9829
- */
9830
- Region?: string;
9831
- /**
9832
- * @public
9833
- * <p>Identifies the role of the resource in the finding. A resource is either the actor or target of the finding activity,</p>
9834
- */
9835
- ResourceRole?: string;
9836
- /**
9837
- * @public
9838
- * <p>A list of Amazon Web Services tags associated with a resource at the time the finding was
9839
- * processed.</p>
9840
- */
9841
- Tags?: Record<string, string>;
9842
- /**
9843
- * @public
9844
- * <p>Contains information about sensitive data that was detected on the resource.</p>
9845
- */
9846
- DataClassification?: DataClassificationDetails;
9847
- /**
9848
- * @public
9849
- * <p>Additional details about the resource related to a finding.</p>
9850
- */
9851
- Details?: ResourceDetails;
9852
- }
9853
- /**
9854
- * @public
9855
- * <p>The severity of the finding.</p>
9856
- * <p>The finding provider can provide the initial severity. The finding provider can only
9857
- * update the severity if it hasn't been updated using
9858
- * <code>BatchUpdateFindings</code>.</p>
9859
- * <p>The finding must have either <code>Label</code> or <code>Normalized</code> populated. If
9860
- * only one of these attributes is populated, then Security Hub automatically populates the other
9861
- * one. If neither attribute is populated, then the finding is invalid. <code>Label</code> is
9862
- * the preferred attribute.</p>
9863
- */
9864
- export interface Severity {
9865
- /**
9866
- * @public
9867
- * <p>Deprecated. This attribute is being deprecated. Instead of providing
9868
- * <code>Product</code>, provide <code>Original</code>.</p>
9869
- * <p>The native severity as defined by the Amazon Web Services service or integrated partner product that
9870
- * generated the finding.</p>
9871
- */
9872
- Product?: number;
9873
- /**
9874
- * @public
9875
- * <p>The severity value of the finding. The allowed values are the following.</p>
9876
- * <ul>
9877
- * <li>
9878
- * <p>
9879
- * <code>INFORMATIONAL</code> - No issue was found.</p>
9880
- * </li>
9881
- * <li>
9882
- * <p>
9883
- * <code>LOW</code> - The issue does not require action on its own.</p>
9884
- * </li>
9885
- * <li>
9886
- * <p>
9887
- * <code>MEDIUM</code> - The issue must be addressed but not urgently.</p>
9888
- * </li>
9889
- * <li>
9890
- * <p>
9891
- * <code>HIGH</code> - The issue must be addressed as a priority.</p>
9892
- * </li>
9893
- * <li>
9894
- * <p>
9895
- * <code>CRITICAL</code> - The issue must be remediated immediately to avoid it
9896
- * escalating.</p>
9897
- * </li>
9898
- * </ul>
9899
- * <p>If you provide <code>Normalized</code> and do not provide <code>Label</code>, then
9900
- * <code>Label</code> is set automatically as follows. </p>
9901
- * <ul>
9902
- * <li>
9903
- * <p>0 - <code>INFORMATIONAL</code>
9904
- * </p>
9905
- * </li>
9906
- * <li>
9907
- * <p>1–39 - <code>LOW</code>
9908
- * </p>
9909
- * </li>
9910
- * <li>
9911
- * <p>40–69 - <code>MEDIUM</code>
9912
- * </p>
9913
- * </li>
9914
- * <li>
9915
- * <p>70–89 - <code>HIGH</code>
9916
- * </p>
9917
- * </li>
9918
- * <li>
9919
- * <p>90–100 - <code>CRITICAL</code>
9920
- * </p>
9921
- * </li>
9922
- * </ul>
9923
- */
9924
- Label?: SeverityLabel | string;
9925
- /**
9926
- * @public
9927
- * <p>Deprecated. The normalized severity of a finding. This attribute is being deprecated.
9928
- * Instead of providing <code>Normalized</code>, provide <code>Label</code>.</p>
9929
- * <p>If you provide <code>Label</code> and do not provide <code>Normalized</code>, then
9930
- * <code>Normalized</code> is set automatically as follows.</p>
9931
- * <ul>
9932
- * <li>
9933
- * <p>
9934
- * <code>INFORMATIONAL</code> - 0</p>
9935
- * </li>
9936
- * <li>
9937
- * <p>
9938
- * <code>LOW</code> - 1</p>
9939
- * </li>
9940
- * <li>
9941
- * <p>
9942
- * <code>MEDIUM</code> - 40</p>
9943
- * </li>
9944
- * <li>
9945
- * <p>
9946
- * <code>HIGH</code> - 70</p>
9947
- * </li>
9948
- * <li>
9949
- * <p>
9950
- * <code>CRITICAL</code> - 90</p>
9951
- * </li>
9952
- * </ul>
9953
- */
9954
- Normalized?: number;
9955
- /**
9956
- * @public
9957
- * <p>The native severity from the finding product that generated the finding.</p>
9958
- */
9959
- Original?: string;
9960
- }
9961
- /**
9962
- * @public
9963
- * @enum
9964
- */
9965
- export declare const ThreatIntelIndicatorCategory: {
9966
- readonly BACKDOOR: "BACKDOOR";
9967
- readonly CARD_STEALER: "CARD_STEALER";
9968
- readonly COMMAND_AND_CONTROL: "COMMAND_AND_CONTROL";
9969
- readonly DROP_SITE: "DROP_SITE";
9970
- readonly EXPLOIT_SITE: "EXPLOIT_SITE";
9971
- readonly KEYLOGGER: "KEYLOGGER";
9972
- };
9973
- /**
9974
- * @public
9975
- */
9976
- export type ThreatIntelIndicatorCategory = (typeof ThreatIntelIndicatorCategory)[keyof typeof ThreatIntelIndicatorCategory];
9977
- /**
9978
- * @public
9979
- * @enum
9980
- */
9981
- export declare const ThreatIntelIndicatorType: {
9982
- readonly DOMAIN: "DOMAIN";
9983
- readonly EMAIL_ADDRESS: "EMAIL_ADDRESS";
9984
- readonly HASH_MD5: "HASH_MD5";
9985
- readonly HASH_SHA1: "HASH_SHA1";
9986
- readonly HASH_SHA256: "HASH_SHA256";
9987
- readonly HASH_SHA512: "HASH_SHA512";
9988
- readonly IPV4_ADDRESS: "IPV4_ADDRESS";
9989
- readonly IPV6_ADDRESS: "IPV6_ADDRESS";
9990
- readonly MUTEX: "MUTEX";
9991
- readonly PROCESS: "PROCESS";
9992
- readonly URL: "URL";
9993
- };
9994
- /**
9995
- * @public
9996
- */
9997
- export type ThreatIntelIndicatorType = (typeof ThreatIntelIndicatorType)[keyof typeof ThreatIntelIndicatorType];
9998
- /**
9999
- * @public
10000
- * <p>Details about the threat intelligence related to a finding.</p>
10001
- */
10002
- export interface ThreatIntelIndicator {
10003
- /**
10004
- * @public
10005
- * <p>The type of threat intelligence indicator.</p>
10006
- */
10007
- Type?: ThreatIntelIndicatorType | string;
10008
- /**
10009
- * @public
10010
- * <p>The value of a threat intelligence indicator.</p>
10011
- */
10012
- Value?: string;
10013
- /**
10014
- * @public
10015
- * <p>The category of a threat intelligence indicator.</p>
10016
- */
10017
- Category?: ThreatIntelIndicatorCategory | string;
10018
- /**
10019
- * @public
10020
- * <p>Indicates when the most recent instance of a threat intelligence indicator was
10021
- * observed.</p>
10022
- * <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
10023
- * Date/Time Format</a>. The value cannot contain spaces, and date and time should be separated by <code>T</code>. For example,
10024
- * <code>2020-03-22T13:22:13.933Z</code>.</p>
10025
- */
10026
- LastObservedAt?: string;
10027
- /**
10028
- * @public
10029
- * <p>The source of the threat intelligence indicator.</p>
10030
- */
10031
- Source?: string;
10032
- /**
10033
- * @public
10034
- * <p>The URL to the page or site where you can get more information about the threat
10035
- * intelligence indicator.</p>
10036
- */
10037
- SourceUrl?: string;
10038
- }
10039
- /**
10040
- * @public
10041
- * <p>Provides information about the file paths that were affected by the threat.
10042
- * </p>
10043
- */
10044
- export interface FilePaths {
10045
- /**
10046
- * @public
10047
- * <p>Path to the infected or suspicious file on the resource it was detected on.
10048
- * </p>
10049
- */
10050
- FilePath?: string;
10051
- /**
10052
- * @public
10053
- * <p>The name of the infected or suspicious file corresponding to the hash.
10054
- * </p>
10055
- */
10056
- FileName?: string;
10057
- /**
10058
- * @public
10059
- * <p>The Amazon Resource Name (ARN) of the resource on which the threat was detected.
10060
- * </p>
10061
- */
10062
- ResourceId?: string;
10063
- /**
10064
- * @public
10065
- * <p>The hash value for the infected or suspicious file.
10066
- * </p>
10067
- */
10068
- Hash?: string;
10069
- }
10070
- /**
10071
- * @public
10072
- * <p>Provides information about the threat detected in a security finding and the file paths that were affected by the threat.
10073
- * </p>
10074
- */
10075
- export interface Threat {
10076
- /**
10077
- * @public
10078
- * <p>The name of the threat.
10079
- * </p>
10080
- */
10081
- Name?: string;
10082
- /**
10083
- * @public
10084
- * <p>The severity of the threat.
10085
- * </p>
10086
- */
10087
- Severity?: string;
10088
- /**
10089
- * @public
10090
- * <p>This total number of items in which the threat has been detected.
10091
- * </p>
10092
- */
10093
- ItemCount?: number;
10094
- /**
10095
- * @public
10096
- * <p>Provides information about the file paths that were affected by the threat.
10097
- * </p>
10098
- */
10099
- FilePaths?: FilePaths[];
10100
- }
10101
- /**
10102
- * @public
10103
- * <p>
10104
- * Provides details about where a code vulnerability is located in your Lambda function.
10105
- * </p>
10106
- */
10107
- export interface CodeVulnerabilitiesFilePath {
10108
- /**
10109
- * @public
10110
- * <p>
10111
- * The line number of the last line of code in which the vulnerability is located.
10112
- * </p>
10113
- */
10114
- EndLine?: number;
10115
- /**
10116
- * @public
10117
- * <p>
10118
- * The name of the file in which the code vulnerability is located.
10119
- * </p>
10120
- */
10121
- FileName?: string;
10122
- /**
10123
- * @public
10124
- * <p>
10125
- * The file path to the code in which the vulnerability is located.
10126
- * </p>
10127
- */
10128
- FilePath?: string;
10129
- /**
10130
- * @public
10131
- * <p>
10132
- * The line number of the first line of code in which the vulnerability is located.
10133
- * </p>
10134
- */
10135
- StartLine?: number;
10136
- }
10137
- /**
10138
- * @public
10139
- * <p>Provides details about the vulnerabilities found in your Lambda function code. This field pertains to findings that
10140
- * Security Hub receives from Amazon Inspector.
10141
- * </p>
10142
- */
10143
- export interface VulnerabilityCodeVulnerabilities {
10144
- /**
10145
- * @public
10146
- * <p>
10147
- * The Common Weakness Enumeration (CWE) item associated with the detected code vulnerability.
10148
- * </p>
10149
- */
10150
- Cwes?: string[];
10151
- /**
10152
- * @public
10153
- * <p>
10154
- * Provides details about where a code vulnerability is located in your Lambda function.
10155
- * </p>
10156
- */
10157
- FilePath?: CodeVulnerabilitiesFilePath;
10158
- /**
10159
- * @public
10160
- * <p>
10161
- * The Amazon Resource Name (ARN) of the Lambda layer in which the code vulnerability is located.
10162
- * </p>
10163
- */
10164
- SourceArn?: string;
10165
- }
10166
- /**
10167
- * @public
10168
- * <p>CVSS scores from the advisory related to the vulnerability.</p>
10169
- */
10170
- export interface Cvss {
10171
- /**
10172
- * @public
10173
- * <p>The version of CVSS for the CVSS score.</p>
10174
- */
10175
- Version?: string;
10176
- /**
10177
- * @public
10178
- * <p>The base CVSS score.</p>
10179
- */
10180
- BaseScore?: number;
10181
- /**
10182
- * @public
10183
- * <p>The base scoring vector for the CVSS score.</p>
10184
- */
10185
- BaseVector?: string;
10186
- /**
10187
- * @public
10188
- * <p>The origin of the original CVSS score and vector.</p>
10189
- */
10190
- Source?: string;
10191
- /**
10192
- * @public
10193
- * <p>Adjustments to the CVSS metrics.</p>
10194
- */
10195
- Adjustments?: Adjustment[];
10196
- }
10197
- /**
10198
- * @public
10199
- * @enum
10200
- */
10201
- export declare const VulnerabilityExploitAvailable: {
10202
- readonly NO: "NO";
10203
- readonly YES: "YES";
10204
- };
10205
- /**
10206
- * @public
10207
- */
10208
- export type VulnerabilityExploitAvailable = (typeof VulnerabilityExploitAvailable)[keyof typeof VulnerabilityExploitAvailable];
10209
- /**
10210
- * @public
10211
- * @enum
10212
- */
10213
- export declare const VulnerabilityFixAvailable: {
10214
- readonly NO: "NO";
10215
- readonly PARTIAL: "PARTIAL";
10216
- readonly YES: "YES";
10217
- };
10218
- /**
10219
- * @public
10220
- */
10221
- export type VulnerabilityFixAvailable = (typeof VulnerabilityFixAvailable)[keyof typeof VulnerabilityFixAvailable];
10222
- /**
10223
- * @public
10224
- * <p>A vendor that generates a vulnerability report.</p>
10225
- */
10226
- export interface VulnerabilityVendor {
10227
- /**
10228
- * @public
10229
- * <p>The name of the vendor.</p>
10230
- */
10231
- Name: string | undefined;
10232
- /**
10233
- * @public
10234
- * <p>The URL of the vulnerability advisory.</p>
10235
- */
10236
- Url?: string;
10237
- /**
10238
- * @public
10239
- * <p>The severity that the vendor assigned to the vulnerability.</p>
10240
- */
10241
- VendorSeverity?: string;
10242
- /**
10243
- * @public
10244
- * <p>Indicates when the vulnerability advisory was created.</p>
10245
- * <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
10246
- * Date/Time Format</a>. The value cannot contain spaces, and date and time should be separated by <code>T</code>. For example,
10247
- * <code>2020-03-22T13:22:13.933Z</code>.</p>
10248
- */
10249
- VendorCreatedAt?: string;
10250
- /**
10251
- * @public
10252
- * <p>Indicates when the vulnerability advisory was last updated.</p>
10253
- * <p>Uses the <code>date-time</code> format specified in <a href="https://tools.ietf.org/html/rfc3339#section-5.6">RFC 3339 section 5.6, Internet
10254
- * Date/Time Format</a>. The value cannot contain spaces, and date and time should be separated by <code>T</code>. For example,
10255
- * <code>2020-03-22T13:22:13.933Z</code>.</p>
10256
- */
10257
- VendorUpdatedAt?: string;
10258
- }