@aws-sdk/client-securityhub 3.454.0 → 3.459.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +163 -67
- package/dist-cjs/SecurityHub.js +24 -0
- package/dist-cjs/commands/BatchGetConfigurationPolicyAssociationsCommand.js +51 -0
- package/dist-cjs/commands/CreateConfigurationPolicyCommand.js +51 -0
- package/dist-cjs/commands/DeleteConfigurationPolicyCommand.js +51 -0
- package/dist-cjs/commands/GetConfigurationPolicyAssociationCommand.js +51 -0
- package/dist-cjs/commands/GetConfigurationPolicyCommand.js +51 -0
- package/dist-cjs/commands/GetSecurityControlDefinitionCommand.js +51 -0
- package/dist-cjs/commands/ListConfigurationPoliciesCommand.js +51 -0
- package/dist-cjs/commands/ListConfigurationPolicyAssociationsCommand.js +51 -0
- package/dist-cjs/commands/StartConfigurationPolicyAssociationCommand.js +51 -0
- package/dist-cjs/commands/StartConfigurationPolicyDisassociationCommand.js +51 -0
- package/dist-cjs/commands/UpdateConfigurationPolicyCommand.js +51 -0
- package/dist-cjs/commands/UpdateSecurityControlCommand.js +51 -0
- package/dist-cjs/commands/index.js +12 -0
- package/dist-cjs/models/models_0.js +10 -1
- package/dist-cjs/models/models_2.js +104 -1
- package/dist-cjs/pagination/ListConfigurationPoliciesPaginator.js +29 -0
- package/dist-cjs/pagination/ListConfigurationPolicyAssociationsPaginator.js +29 -0
- package/dist-cjs/pagination/index.js +2 -0
- package/dist-cjs/protocols/Aws_restJson1.js +1283 -31
- package/dist-es/SecurityHub.js +24 -0
- package/dist-es/commands/BatchGetConfigurationPolicyAssociationsCommand.js +47 -0
- package/dist-es/commands/CreateConfigurationPolicyCommand.js +47 -0
- package/dist-es/commands/DeleteConfigurationPolicyCommand.js +47 -0
- package/dist-es/commands/GetConfigurationPolicyAssociationCommand.js +47 -0
- package/dist-es/commands/GetConfigurationPolicyCommand.js +47 -0
- package/dist-es/commands/GetSecurityControlDefinitionCommand.js +47 -0
- package/dist-es/commands/ListConfigurationPoliciesCommand.js +47 -0
- package/dist-es/commands/ListConfigurationPolicyAssociationsCommand.js +47 -0
- package/dist-es/commands/StartConfigurationPolicyAssociationCommand.js +47 -0
- package/dist-es/commands/StartConfigurationPolicyDisassociationCommand.js +47 -0
- package/dist-es/commands/UpdateConfigurationPolicyCommand.js +47 -0
- package/dist-es/commands/UpdateSecurityControlCommand.js +47 -0
- package/dist-es/commands/index.js +12 -0
- package/dist-es/models/models_0.js +9 -0
- package/dist-es/models/models_2.js +102 -0
- package/dist-es/pagination/ListConfigurationPoliciesPaginator.js +25 -0
- package/dist-es/pagination/ListConfigurationPolicyAssociationsPaginator.js +25 -0
- package/dist-es/pagination/index.js +2 -0
- package/dist-es/protocols/Aws_restJson1.js +1258 -31
- package/dist-types/SecurityHub.d.ts +84 -0
- package/dist-types/SecurityHubClient.d.ts +14 -2
- package/dist-types/commands/BatchDisableStandardsCommand.d.ts +3 -0
- package/dist-types/commands/BatchEnableStandardsCommand.d.ts +3 -0
- package/dist-types/commands/BatchGetAutomationRulesCommand.d.ts +7 -0
- package/dist-types/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +128 -0
- package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +45 -2
- package/dist-types/commands/BatchImportFindingsCommand.d.ts +13 -3
- package/dist-types/commands/BatchUpdateAutomationRulesCommand.d.ts +7 -0
- package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +3 -0
- package/dist-types/commands/CreateAutomationRuleCommand.d.ts +7 -0
- package/dist-types/commands/CreateConfigurationPolicyCommand.d.ts +189 -0
- package/dist-types/commands/CreateInsightCommand.d.ts +17 -0
- package/dist-types/commands/CreateMembersCommand.d.ts +3 -0
- package/dist-types/commands/DeleteConfigurationPolicyCommand.d.ts +98 -0
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +7 -2
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +3 -0
- package/dist-types/commands/DisableSecurityHubCommand.d.ts +3 -0
- package/dist-types/commands/DisassociateMembersCommand.d.ts +3 -0
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +3 -0
- package/dist-types/commands/GetConfigurationPolicyAssociationCommand.d.ts +107 -0
- package/dist-types/commands/GetConfigurationPolicyCommand.d.ts +143 -0
- package/dist-types/commands/GetFindingsCommand.d.ts +30 -3
- package/dist-types/commands/GetInsightsCommand.d.ts +17 -0
- package/dist-types/commands/GetSecurityControlDefinitionCommand.d.ts +193 -0
- package/dist-types/commands/ListConfigurationPoliciesCommand.d.ts +104 -0
- package/dist-types/commands/ListConfigurationPolicyAssociationsCommand.d.ts +110 -0
- package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +65 -0
- package/dist-types/commands/StartConfigurationPolicyAssociationCommand.d.ts +108 -0
- package/dist-types/commands/StartConfigurationPolicyDisassociationCommand.d.ts +102 -0
- package/dist-types/commands/UpdateConfigurationPolicyCommand.d.ts +191 -0
- package/dist-types/commands/UpdateFindingsCommand.d.ts +17 -0
- package/dist-types/commands/UpdateInsightCommand.d.ts +17 -0
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +16 -2
- package/dist-types/commands/UpdateSecurityControlCommand.d.ts +141 -0
- package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +3 -0
- package/dist-types/commands/UpdateStandardsControlCommand.d.ts +3 -0
- package/dist-types/commands/index.d.ts +12 -0
- package/dist-types/models/models_0.d.ts +101 -193
- package/dist-types/models/models_1.d.ts +221 -86
- package/dist-types/models/models_2.d.ts +2377 -394
- package/dist-types/pagination/ListConfigurationPoliciesPaginator.d.ts +7 -0
- package/dist-types/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +7 -0
- package/dist-types/pagination/index.d.ts +2 -0
- package/dist-types/protocols/Aws_restJson1.d.ts +108 -0
- package/dist-types/ts3.4/SecurityHub.d.ts +234 -0
- package/dist-types/ts3.4/SecurityHubClient.d.ts +72 -0
- package/dist-types/ts3.4/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/CreateConfigurationPolicyCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/DeleteConfigurationPolicyCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/GetConfigurationPolicyAssociationCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/GetConfigurationPolicyCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/GetSecurityControlDefinitionCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/ListConfigurationPoliciesCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/ListConfigurationPolicyAssociationsCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/StartConfigurationPolicyAssociationCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/StartConfigurationPolicyDisassociationCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/UpdateConfigurationPolicyCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/UpdateSecurityControlCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/index.d.ts +12 -0
- package/dist-types/ts3.4/models/models_0.d.ts +23 -26
- package/dist-types/ts3.4/models/models_1.d.ts +37 -15
- package/dist-types/ts3.4/models/models_2.d.ts +602 -17
- package/dist-types/ts3.4/pagination/ListConfigurationPoliciesPaginator.d.ts +11 -0
- package/dist-types/ts3.4/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +11 -0
- package/dist-types/ts3.4/pagination/index.d.ts +2 -0
- package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +144 -0
- package/package.json +3 -3
|
@@ -109,6 +109,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
|
|
|
109
109
|
* { // NumberFilter
|
|
110
110
|
* Gte: Number("double"),
|
|
111
111
|
* Lte: Number("double"),
|
|
112
|
+
* Gt: Number("double"),
|
|
113
|
+
* Lt: Number("double"),
|
|
112
114
|
* Eq: Number("double"),
|
|
113
115
|
* },
|
|
114
116
|
* ],
|
|
@@ -116,6 +118,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
|
|
|
116
118
|
* {
|
|
117
119
|
* Gte: Number("double"),
|
|
118
120
|
* Lte: Number("double"),
|
|
121
|
+
* Gt: Number("double"),
|
|
122
|
+
* Lt: Number("double"),
|
|
119
123
|
* Eq: Number("double"),
|
|
120
124
|
* },
|
|
121
125
|
* ],
|
|
@@ -124,6 +128,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
|
|
|
124
128
|
* {
|
|
125
129
|
* Gte: Number("double"),
|
|
126
130
|
* Lte: Number("double"),
|
|
131
|
+
* Gt: Number("double"),
|
|
132
|
+
* Lt: Number("double"),
|
|
127
133
|
* Eq: Number("double"),
|
|
128
134
|
* },
|
|
129
135
|
* ],
|
|
@@ -131,6 +137,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
|
|
|
131
137
|
* {
|
|
132
138
|
* Gte: Number("double"),
|
|
133
139
|
* Lte: Number("double"),
|
|
140
|
+
* Gt: Number("double"),
|
|
141
|
+
* Lt: Number("double"),
|
|
134
142
|
* Eq: Number("double"),
|
|
135
143
|
* },
|
|
136
144
|
* ],
|
|
@@ -174,6 +182,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
|
|
|
174
182
|
* {
|
|
175
183
|
* Gte: Number("double"),
|
|
176
184
|
* Lte: Number("double"),
|
|
185
|
+
* Gt: Number("double"),
|
|
186
|
+
* Lt: Number("double"),
|
|
177
187
|
* Eq: Number("double"),
|
|
178
188
|
* },
|
|
179
189
|
* ],
|
|
@@ -283,6 +293,13 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
|
|
|
283
293
|
* ],
|
|
284
294
|
* ComplianceSecurityControlId: "<StringFilterList>",
|
|
285
295
|
* ComplianceAssociatedStandardsId: "<StringFilterList>",
|
|
296
|
+
* VulnerabilitiesExploitAvailable: "<StringFilterList>",
|
|
297
|
+
* VulnerabilitiesFixAvailable: "<StringFilterList>",
|
|
298
|
+
* ComplianceSecurityControlParametersName: "<StringFilterList>",
|
|
299
|
+
* ComplianceSecurityControlParametersValue: "<StringFilterList>",
|
|
300
|
+
* AwsAccountName: "<StringFilterList>",
|
|
301
|
+
* ResourceApplicationName: "<StringFilterList>",
|
|
302
|
+
* ResourceApplicationArn: "<StringFilterList>",
|
|
286
303
|
* },
|
|
287
304
|
* GroupByAttribute: "STRING_VALUE",
|
|
288
305
|
* };
|
|
@@ -23,8 +23,8 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>
|
|
27
|
-
* Security Hub administrator account.</p>
|
|
26
|
+
* <p>Updates the configuration of your organization in Security Hub. Only the
|
|
27
|
+
* Security Hub administrator account can invoke this operation.</p>
|
|
28
28
|
* @example
|
|
29
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
30
|
* ```javascript
|
|
@@ -34,6 +34,11 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
34
34
|
* const input = { // UpdateOrganizationConfigurationRequest
|
|
35
35
|
* AutoEnable: true || false, // required
|
|
36
36
|
* AutoEnableStandards: "NONE" || "DEFAULT",
|
|
37
|
+
* OrganizationConfiguration: { // OrganizationConfiguration
|
|
38
|
+
* ConfigurationType: "CENTRAL" || "LOCAL",
|
|
39
|
+
* Status: "PENDING" || "ENABLED" || "FAILED",
|
|
40
|
+
* StatusMessage: "STRING_VALUE",
|
|
41
|
+
* },
|
|
37
42
|
* };
|
|
38
43
|
* const command = new UpdateOrganizationConfigurationCommand(input);
|
|
39
44
|
* const response = await client.send(command);
|
|
@@ -47,6 +52,9 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
47
52
|
* @see {@link UpdateOrganizationConfigurationCommandOutput} for command's `response` shape.
|
|
48
53
|
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
49
54
|
*
|
|
55
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
56
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
57
|
+
*
|
|
50
58
|
* @throws {@link InternalException} (server fault)
|
|
51
59
|
* <p>Internal server error.</p>
|
|
52
60
|
*
|
|
@@ -61,6 +69,12 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
61
69
|
* <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
|
|
62
70
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
63
71
|
*
|
|
72
|
+
* @throws {@link ResourceConflictException} (client fault)
|
|
73
|
+
* <p>The resource specified in the request conflicts with an existing resource.</p>
|
|
74
|
+
*
|
|
75
|
+
* @throws {@link ResourceNotFoundException} (client fault)
|
|
76
|
+
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
77
|
+
*
|
|
64
78
|
* @throws {@link SecurityHubServiceException}
|
|
65
79
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
66
80
|
*
|
|
@@ -0,0 +1,141 @@
|
|
|
1
|
+
import { EndpointParameterInstructions } from "@smithy/middleware-endpoint";
|
|
2
|
+
import { Command as $Command } from "@smithy/smithy-client";
|
|
3
|
+
import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@smithy/types";
|
|
4
|
+
import { UpdateSecurityControlRequest, UpdateSecurityControlResponse } from "../models/models_2";
|
|
5
|
+
import { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
|
|
6
|
+
/**
|
|
7
|
+
* @public
|
|
8
|
+
*/
|
|
9
|
+
export { __MetadataBearer, $Command };
|
|
10
|
+
/**
|
|
11
|
+
* @public
|
|
12
|
+
*
|
|
13
|
+
* The input for {@link UpdateSecurityControlCommand}.
|
|
14
|
+
*/
|
|
15
|
+
export interface UpdateSecurityControlCommandInput extends UpdateSecurityControlRequest {
|
|
16
|
+
}
|
|
17
|
+
/**
|
|
18
|
+
* @public
|
|
19
|
+
*
|
|
20
|
+
* The output of {@link UpdateSecurityControlCommand}.
|
|
21
|
+
*/
|
|
22
|
+
export interface UpdateSecurityControlCommandOutput extends UpdateSecurityControlResponse, __MetadataBearer {
|
|
23
|
+
}
|
|
24
|
+
/**
|
|
25
|
+
* @public
|
|
26
|
+
* <p>
|
|
27
|
+
* Updates the properties of a security control.
|
|
28
|
+
* </p>
|
|
29
|
+
* @example
|
|
30
|
+
* Use a bare-bones client and the command you need to make an API call.
|
|
31
|
+
* ```javascript
|
|
32
|
+
* import { SecurityHubClient, UpdateSecurityControlCommand } from "@aws-sdk/client-securityhub"; // ES Modules import
|
|
33
|
+
* // const { SecurityHubClient, UpdateSecurityControlCommand } = require("@aws-sdk/client-securityhub"); // CommonJS import
|
|
34
|
+
* const client = new SecurityHubClient(config);
|
|
35
|
+
* const input = { // UpdateSecurityControlRequest
|
|
36
|
+
* SecurityControlId: "STRING_VALUE", // required
|
|
37
|
+
* Parameters: { // Parameters // required
|
|
38
|
+
* "<keys>": { // ParameterConfiguration
|
|
39
|
+
* ValueType: "DEFAULT" || "CUSTOM", // required
|
|
40
|
+
* Value: { // ParameterValue Union: only one key present
|
|
41
|
+
* Integer: Number("int"),
|
|
42
|
+
* IntegerList: [ // IntegerList
|
|
43
|
+
* Number("int"),
|
|
44
|
+
* ],
|
|
45
|
+
* Double: Number("double"),
|
|
46
|
+
* String: "STRING_VALUE",
|
|
47
|
+
* StringList: [ // StringList
|
|
48
|
+
* "STRING_VALUE",
|
|
49
|
+
* ],
|
|
50
|
+
* Boolean: true || false,
|
|
51
|
+
* Enum: "STRING_VALUE",
|
|
52
|
+
* EnumList: [
|
|
53
|
+
* "STRING_VALUE",
|
|
54
|
+
* ],
|
|
55
|
+
* },
|
|
56
|
+
* },
|
|
57
|
+
* },
|
|
58
|
+
* LastUpdateReason: "STRING_VALUE",
|
|
59
|
+
* };
|
|
60
|
+
* const command = new UpdateSecurityControlCommand(input);
|
|
61
|
+
* const response = await client.send(command);
|
|
62
|
+
* // {};
|
|
63
|
+
*
|
|
64
|
+
* ```
|
|
65
|
+
*
|
|
66
|
+
* @param UpdateSecurityControlCommandInput - {@link UpdateSecurityControlCommandInput}
|
|
67
|
+
* @returns {@link UpdateSecurityControlCommandOutput}
|
|
68
|
+
* @see {@link UpdateSecurityControlCommandInput} for command's `input` shape.
|
|
69
|
+
* @see {@link UpdateSecurityControlCommandOutput} for command's `response` shape.
|
|
70
|
+
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
71
|
+
*
|
|
72
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
73
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
74
|
+
*
|
|
75
|
+
* @throws {@link InternalException} (server fault)
|
|
76
|
+
* <p>Internal server error.</p>
|
|
77
|
+
*
|
|
78
|
+
* @throws {@link InvalidAccessException} (client fault)
|
|
79
|
+
* <p>The account doesn't have permission to perform this action.</p>
|
|
80
|
+
*
|
|
81
|
+
* @throws {@link InvalidInputException} (client fault)
|
|
82
|
+
* <p>The request was rejected because you supplied an invalid or out-of-range value for an
|
|
83
|
+
* input parameter.</p>
|
|
84
|
+
*
|
|
85
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
86
|
+
* <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
|
|
87
|
+
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
88
|
+
*
|
|
89
|
+
* @throws {@link ResourceInUseException} (client fault)
|
|
90
|
+
* <p>
|
|
91
|
+
* The request was rejected because it conflicts with the resource's availability. For example, you tried
|
|
92
|
+
* to update a security control that's currently in the <code>UPDATING</code> state.
|
|
93
|
+
* </p>
|
|
94
|
+
*
|
|
95
|
+
* @throws {@link ResourceNotFoundException} (client fault)
|
|
96
|
+
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
97
|
+
*
|
|
98
|
+
* @throws {@link SecurityHubServiceException}
|
|
99
|
+
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
100
|
+
*
|
|
101
|
+
* @example To update security control properties
|
|
102
|
+
* ```javascript
|
|
103
|
+
* // The following example updates the specified security control. Specifically, this example updates control parameters.
|
|
104
|
+
* const input = {
|
|
105
|
+
* "LastUpdateReason": "Comply with internal requirements",
|
|
106
|
+
* "Parameters": {
|
|
107
|
+
* "maxCredentialUsageAge": {
|
|
108
|
+
* "Value": {
|
|
109
|
+
* "Integer": 15
|
|
110
|
+
* },
|
|
111
|
+
* "ValueType": "CUSTOM"
|
|
112
|
+
* }
|
|
113
|
+
* },
|
|
114
|
+
* "SecurityControlId": "ACM.1"
|
|
115
|
+
* };
|
|
116
|
+
* const command = new UpdateSecurityControlCommand(input);
|
|
117
|
+
* await client.send(command);
|
|
118
|
+
* // example id: to-update-security-control-properties-1699282942434
|
|
119
|
+
* ```
|
|
120
|
+
*
|
|
121
|
+
*/
|
|
122
|
+
export declare class UpdateSecurityControlCommand extends $Command<UpdateSecurityControlCommandInput, UpdateSecurityControlCommandOutput, SecurityHubClientResolvedConfig> {
|
|
123
|
+
readonly input: UpdateSecurityControlCommandInput;
|
|
124
|
+
static getEndpointParameterInstructions(): EndpointParameterInstructions;
|
|
125
|
+
/**
|
|
126
|
+
* @public
|
|
127
|
+
*/
|
|
128
|
+
constructor(input: UpdateSecurityControlCommandInput);
|
|
129
|
+
/**
|
|
130
|
+
* @internal
|
|
131
|
+
*/
|
|
132
|
+
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: SecurityHubClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateSecurityControlCommandInput, UpdateSecurityControlCommandOutput>;
|
|
133
|
+
/**
|
|
134
|
+
* @internal
|
|
135
|
+
*/
|
|
136
|
+
private serialize;
|
|
137
|
+
/**
|
|
138
|
+
* @internal
|
|
139
|
+
*/
|
|
140
|
+
private deserialize;
|
|
141
|
+
}
|
|
@@ -46,6 +46,9 @@ export interface UpdateSecurityHubConfigurationCommandOutput extends UpdateSecur
|
|
|
46
46
|
* @see {@link UpdateSecurityHubConfigurationCommandOutput} for command's `response` shape.
|
|
47
47
|
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
48
48
|
*
|
|
49
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
50
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
51
|
+
*
|
|
49
52
|
* @throws {@link InternalException} (server fault)
|
|
50
53
|
* <p>Internal server error.</p>
|
|
51
54
|
*
|
|
@@ -48,6 +48,9 @@ export interface UpdateStandardsControlCommandOutput extends UpdateStandardsCont
|
|
|
48
48
|
* @see {@link UpdateStandardsControlCommandOutput} for command's `response` shape.
|
|
49
49
|
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
50
50
|
*
|
|
51
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
52
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
53
|
+
*
|
|
51
54
|
* @throws {@link InternalException} (server fault)
|
|
52
55
|
* <p>Internal server error.</p>
|
|
53
56
|
*
|
|
@@ -4,6 +4,7 @@ export * from "./BatchDeleteAutomationRulesCommand";
|
|
|
4
4
|
export * from "./BatchDisableStandardsCommand";
|
|
5
5
|
export * from "./BatchEnableStandardsCommand";
|
|
6
6
|
export * from "./BatchGetAutomationRulesCommand";
|
|
7
|
+
export * from "./BatchGetConfigurationPolicyAssociationsCommand";
|
|
7
8
|
export * from "./BatchGetSecurityControlsCommand";
|
|
8
9
|
export * from "./BatchGetStandardsControlAssociationsCommand";
|
|
9
10
|
export * from "./BatchImportFindingsCommand";
|
|
@@ -12,11 +13,13 @@ export * from "./BatchUpdateFindingsCommand";
|
|
|
12
13
|
export * from "./BatchUpdateStandardsControlAssociationsCommand";
|
|
13
14
|
export * from "./CreateActionTargetCommand";
|
|
14
15
|
export * from "./CreateAutomationRuleCommand";
|
|
16
|
+
export * from "./CreateConfigurationPolicyCommand";
|
|
15
17
|
export * from "./CreateFindingAggregatorCommand";
|
|
16
18
|
export * from "./CreateInsightCommand";
|
|
17
19
|
export * from "./CreateMembersCommand";
|
|
18
20
|
export * from "./DeclineInvitationsCommand";
|
|
19
21
|
export * from "./DeleteActionTargetCommand";
|
|
22
|
+
export * from "./DeleteConfigurationPolicyCommand";
|
|
20
23
|
export * from "./DeleteFindingAggregatorCommand";
|
|
21
24
|
export * from "./DeleteInsightCommand";
|
|
22
25
|
export * from "./DeleteInvitationsCommand";
|
|
@@ -37,6 +40,8 @@ export * from "./EnableImportFindingsForProductCommand";
|
|
|
37
40
|
export * from "./EnableOrganizationAdminAccountCommand";
|
|
38
41
|
export * from "./EnableSecurityHubCommand";
|
|
39
42
|
export * from "./GetAdministratorAccountCommand";
|
|
43
|
+
export * from "./GetConfigurationPolicyAssociationCommand";
|
|
44
|
+
export * from "./GetConfigurationPolicyCommand";
|
|
40
45
|
export * from "./GetEnabledStandardsCommand";
|
|
41
46
|
export * from "./GetFindingAggregatorCommand";
|
|
42
47
|
export * from "./GetFindingHistoryCommand";
|
|
@@ -46,8 +51,11 @@ export * from "./GetInsightsCommand";
|
|
|
46
51
|
export * from "./GetInvitationsCountCommand";
|
|
47
52
|
export * from "./GetMasterAccountCommand";
|
|
48
53
|
export * from "./GetMembersCommand";
|
|
54
|
+
export * from "./GetSecurityControlDefinitionCommand";
|
|
49
55
|
export * from "./InviteMembersCommand";
|
|
50
56
|
export * from "./ListAutomationRulesCommand";
|
|
57
|
+
export * from "./ListConfigurationPoliciesCommand";
|
|
58
|
+
export * from "./ListConfigurationPolicyAssociationsCommand";
|
|
51
59
|
export * from "./ListEnabledProductsForImportCommand";
|
|
52
60
|
export * from "./ListFindingAggregatorsCommand";
|
|
53
61
|
export * from "./ListInvitationsCommand";
|
|
@@ -56,12 +64,16 @@ export * from "./ListOrganizationAdminAccountsCommand";
|
|
|
56
64
|
export * from "./ListSecurityControlDefinitionsCommand";
|
|
57
65
|
export * from "./ListStandardsControlAssociationsCommand";
|
|
58
66
|
export * from "./ListTagsForResourceCommand";
|
|
67
|
+
export * from "./StartConfigurationPolicyAssociationCommand";
|
|
68
|
+
export * from "./StartConfigurationPolicyDisassociationCommand";
|
|
59
69
|
export * from "./TagResourceCommand";
|
|
60
70
|
export * from "./UntagResourceCommand";
|
|
61
71
|
export * from "./UpdateActionTargetCommand";
|
|
72
|
+
export * from "./UpdateConfigurationPolicyCommand";
|
|
62
73
|
export * from "./UpdateFindingAggregatorCommand";
|
|
63
74
|
export * from "./UpdateFindingsCommand";
|
|
64
75
|
export * from "./UpdateInsightCommand";
|
|
65
76
|
export * from "./UpdateOrganizationConfigurationCommand";
|
|
77
|
+
export * from "./UpdateSecurityControlCommand";
|
|
66
78
|
export * from "./UpdateSecurityHubConfigurationCommand";
|
|
67
79
|
export * from "./UpdateStandardsControlCommand";
|
|
@@ -904,6 +904,62 @@ export interface AssociatedStandard {
|
|
|
904
904
|
*/
|
|
905
905
|
StandardsId?: string;
|
|
906
906
|
}
|
|
907
|
+
/**
|
|
908
|
+
* @public
|
|
909
|
+
* @enum
|
|
910
|
+
*/
|
|
911
|
+
export declare const ConfigurationPolicyAssociationStatus: {
|
|
912
|
+
readonly FAILED: "FAILED";
|
|
913
|
+
readonly PENDING: "PENDING";
|
|
914
|
+
readonly SUCCESS: "SUCCESS";
|
|
915
|
+
};
|
|
916
|
+
/**
|
|
917
|
+
* @public
|
|
918
|
+
*/
|
|
919
|
+
export type ConfigurationPolicyAssociationStatus = (typeof ConfigurationPolicyAssociationStatus)[keyof typeof ConfigurationPolicyAssociationStatus];
|
|
920
|
+
/**
|
|
921
|
+
* @public
|
|
922
|
+
* @enum
|
|
923
|
+
*/
|
|
924
|
+
export declare const AssociationType: {
|
|
925
|
+
readonly APPLIED: "APPLIED";
|
|
926
|
+
readonly INHERITED: "INHERITED";
|
|
927
|
+
};
|
|
928
|
+
/**
|
|
929
|
+
* @public
|
|
930
|
+
*/
|
|
931
|
+
export type AssociationType = (typeof AssociationType)[keyof typeof AssociationType];
|
|
932
|
+
/**
|
|
933
|
+
* @public
|
|
934
|
+
* <p>
|
|
935
|
+
* Options for filtering the <code>ListConfigurationPolicyAssociations</code> response. You can filter by the Amazon Resource Name (ARN) or
|
|
936
|
+
* universally unique identifier (UUID) of a configuration policy, <code>AssociationType</code>, or <code>AssociationStatus</code>.
|
|
937
|
+
* </p>
|
|
938
|
+
*/
|
|
939
|
+
export interface AssociationFilters {
|
|
940
|
+
/**
|
|
941
|
+
* @public
|
|
942
|
+
* <p>
|
|
943
|
+
* The ARN or UUID of the configuration policy.
|
|
944
|
+
* </p>
|
|
945
|
+
*/
|
|
946
|
+
ConfigurationPolicyId?: string;
|
|
947
|
+
/**
|
|
948
|
+
* @public
|
|
949
|
+
* <p>
|
|
950
|
+
* Indicates whether the association between a target and a configuration was directly applied by the
|
|
951
|
+
* Security Hub delegated administrator or inherited from a parent.
|
|
952
|
+
* </p>
|
|
953
|
+
*/
|
|
954
|
+
AssociationType?: AssociationType;
|
|
955
|
+
/**
|
|
956
|
+
* @public
|
|
957
|
+
* <p>
|
|
958
|
+
* The current status of the association between a target and a configuration policy.
|
|
959
|
+
* </p>
|
|
960
|
+
*/
|
|
961
|
+
AssociationStatus?: ConfigurationPolicyAssociationStatus;
|
|
962
|
+
}
|
|
907
963
|
/**
|
|
908
964
|
* @public
|
|
909
965
|
* <p>
|
|
@@ -1133,6 +1189,20 @@ export interface NumberFilter {
|
|
|
1133
1189
|
* findings. </p>
|
|
1134
1190
|
*/
|
|
1135
1191
|
Lte?: number;
|
|
1192
|
+
/**
|
|
1193
|
+
* @public
|
|
1194
|
+
* <p>
|
|
1195
|
+
* The greater-than condition to be applied to a single field when querying for findings.
|
|
1196
|
+
* </p>
|
|
1197
|
+
*/
|
|
1198
|
+
Gt?: number;
|
|
1199
|
+
/**
|
|
1200
|
+
* @public
|
|
1201
|
+
* <p>
|
|
1202
|
+
* The less-than condition to be applied to a single field when querying for findings.
|
|
1203
|
+
* </p>
|
|
1204
|
+
*/
|
|
1205
|
+
Lt?: number;
|
|
1136
1206
|
/**
|
|
1137
1207
|
* @public
|
|
1138
1208
|
* <p>The equal-to condition to be applied to a single field when querying for
|
|
@@ -1300,7 +1370,7 @@ export interface AutomationRulesFindingFilters {
|
|
|
1300
1370
|
ProductArn?: StringFilter[];
|
|
1301
1371
|
/**
|
|
1302
1372
|
* @public
|
|
1303
|
-
* <p>
|
|
1373
|
+
* <p>The Amazon Web Services account ID in which a finding was generated.</p>
|
|
1304
1374
|
* <p>
|
|
1305
1375
|
* Array Members: Minimum number of 1 item. Maximum number of 100 items.
|
|
1306
1376
|
* </p>
|
|
@@ -1664,6 +1734,35 @@ export interface AutomationRulesFindingFilters {
|
|
|
1664
1734
|
* </p>
|
|
1665
1735
|
*/
|
|
1666
1736
|
UserDefinedFields?: MapFilter[];
|
|
1737
|
+
/**
|
|
1738
|
+
* @public
|
|
1739
|
+
* <p>
|
|
1740
|
+
* The Amazon Resource Name (ARN) of the application that is related to a finding.
|
|
1741
|
+
* </p>
|
|
1742
|
+
* <p>
|
|
1743
|
+
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
1744
|
+
* </p>
|
|
1745
|
+
*/
|
|
1746
|
+
ResourceApplicationArn?: StringFilter[];
|
|
1747
|
+
/**
|
|
1748
|
+
* @public
|
|
1749
|
+
* <p>
|
|
1750
|
+
* The name of the application that is related to a finding.
|
|
1751
|
+
* </p>
|
|
1752
|
+
* <p>
|
|
1753
|
+
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
1754
|
+
* </p>
|
|
1755
|
+
*/
|
|
1756
|
+
ResourceApplicationName?: StringFilter[];
|
|
1757
|
+
/**
|
|
1758
|
+
* @public
|
|
1759
|
+
* <p>The name of the Amazon Web Services account in which a finding was generated.
|
|
1760
|
+
* </p>
|
|
1761
|
+
* <p>
|
|
1762
|
+
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
1763
|
+
* </p>
|
|
1764
|
+
*/
|
|
1765
|
+
AwsAccountName?: StringFilter[];
|
|
1667
1766
|
}
|
|
1668
1767
|
/**
|
|
1669
1768
|
* @public
|
|
@@ -4815,7 +4914,7 @@ export interface AwsCloudFrontDistributionOriginS3OriginConfig {
|
|
|
4815
4914
|
/**
|
|
4816
4915
|
* @public
|
|
4817
4916
|
* <p>A complex type that describes the
|
|
4818
|
-
* Amazon S3 bucket, HTTP server (for example, a web server),
|
|
4917
|
+
* Amazon S3 bucket, HTTP server (for example, a web server), Elemental MediaStore, or other server from which CloudFront gets your files.</p>
|
|
4819
4918
|
*/
|
|
4820
4919
|
export interface AwsCloudFrontDistributionOriginItem {
|
|
4821
4920
|
/**
|
|
@@ -11274,194 +11373,3 @@ export interface AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails {
|
|
|
11274
11373
|
*/
|
|
11275
11374
|
TransitEncryptionPort?: number;
|
|
11276
11375
|
}
|
|
11277
|
-
/**
|
|
11278
|
-
* @public
|
|
11279
|
-
* <p>Information about a bind mount host volume.</p>
|
|
11280
|
-
*/
|
|
11281
|
-
export interface AwsEcsTaskDefinitionVolumesHostDetails {
|
|
11282
|
-
/**
|
|
11283
|
-
* @public
|
|
11284
|
-
* <p>The path on the host container instance that is presented to the container.</p>
|
|
11285
|
-
*/
|
|
11286
|
-
SourcePath?: string;
|
|
11287
|
-
}
|
|
11288
|
-
/**
|
|
11289
|
-
* @public
|
|
11290
|
-
* <p>A data volume to mount from another container.</p>
|
|
11291
|
-
*/
|
|
11292
|
-
export interface AwsEcsTaskDefinitionVolumesDetails {
|
|
11293
|
-
/**
|
|
11294
|
-
* @public
|
|
11295
|
-
* <p>Information about a Docker volume.</p>
|
|
11296
|
-
*/
|
|
11297
|
-
DockerVolumeConfiguration?: AwsEcsTaskDefinitionVolumesDockerVolumeConfigurationDetails;
|
|
11298
|
-
/**
|
|
11299
|
-
* @public
|
|
11300
|
-
* <p>Information about the Amazon Elastic File System file system that is used for task storage.</p>
|
|
11301
|
-
*/
|
|
11302
|
-
EfsVolumeConfiguration?: AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails;
|
|
11303
|
-
/**
|
|
11304
|
-
* @public
|
|
11305
|
-
* <p>Information about a bind mount host volume.</p>
|
|
11306
|
-
*/
|
|
11307
|
-
Host?: AwsEcsTaskDefinitionVolumesHostDetails;
|
|
11308
|
-
/**
|
|
11309
|
-
* @public
|
|
11310
|
-
* <p>The name of the data volume.</p>
|
|
11311
|
-
*/
|
|
11312
|
-
Name?: string;
|
|
11313
|
-
}
|
|
11314
|
-
/**
|
|
11315
|
-
* @public
|
|
11316
|
-
* <p>Details about a task definition. A task definition describes the container and volume definitions
|
|
11317
|
-
* of an Amazon Elastic Container Service task.</p>
|
|
11318
|
-
*/
|
|
11319
|
-
export interface AwsEcsTaskDefinitionDetails {
|
|
11320
|
-
/**
|
|
11321
|
-
* @public
|
|
11322
|
-
* <p>The container definitions that describe the containers that make up the task.</p>
|
|
11323
|
-
*/
|
|
11324
|
-
ContainerDefinitions?: AwsEcsTaskDefinitionContainerDefinitionsDetails[];
|
|
11325
|
-
/**
|
|
11326
|
-
* @public
|
|
11327
|
-
* <p>The number of CPU units used by the task.Valid values are as follows:</p>
|
|
11328
|
-
* <ul>
|
|
11329
|
-
* <li>
|
|
11330
|
-
* <p>
|
|
11331
|
-
* <code>256 (.25 vCPU)</code>
|
|
11332
|
-
* </p>
|
|
11333
|
-
* </li>
|
|
11334
|
-
* <li>
|
|
11335
|
-
* <p>
|
|
11336
|
-
* <code>512 (.5 vCPU)</code>
|
|
11337
|
-
* </p>
|
|
11338
|
-
* </li>
|
|
11339
|
-
* <li>
|
|
11340
|
-
* <p>
|
|
11341
|
-
* <code>1024 (1 vCPU)</code>
|
|
11342
|
-
* </p>
|
|
11343
|
-
* </li>
|
|
11344
|
-
* <li>
|
|
11345
|
-
* <p>
|
|
11346
|
-
* <code>2048 (2 vCPU)</code>
|
|
11347
|
-
* </p>
|
|
11348
|
-
* </li>
|
|
11349
|
-
* <li>
|
|
11350
|
-
* <p>
|
|
11351
|
-
* <code>4096 (4 vCPU)</code>
|
|
11352
|
-
* </p>
|
|
11353
|
-
* </li>
|
|
11354
|
-
* </ul>
|
|
11355
|
-
*/
|
|
11356
|
-
Cpu?: string;
|
|
11357
|
-
/**
|
|
11358
|
-
* @public
|
|
11359
|
-
* <p>The ARN of the task execution role that grants the container agent permission to make API calls on behalf of the container user.</p>
|
|
11360
|
-
*/
|
|
11361
|
-
ExecutionRoleArn?: string;
|
|
11362
|
-
/**
|
|
11363
|
-
* @public
|
|
11364
|
-
* <p>The name of a family that this task definition is registered to.</p>
|
|
11365
|
-
*/
|
|
11366
|
-
Family?: string;
|
|
11367
|
-
/**
|
|
11368
|
-
* @public
|
|
11369
|
-
* <p>The Elastic Inference accelerators to use for the containers in the task.</p>
|
|
11370
|
-
*/
|
|
11371
|
-
InferenceAccelerators?: AwsEcsTaskDefinitionInferenceAcceleratorsDetails[];
|
|
11372
|
-
/**
|
|
11373
|
-
* @public
|
|
11374
|
-
* <p>The inter-process communication (IPC) resource namespace to use for the containers in the task. Valid values are as follows:</p>
|
|
11375
|
-
* <ul>
|
|
11376
|
-
* <li>
|
|
11377
|
-
* <p>
|
|
11378
|
-
* <code>host</code>
|
|
11379
|
-
* </p>
|
|
11380
|
-
* </li>
|
|
11381
|
-
* <li>
|
|
11382
|
-
* <p>
|
|
11383
|
-
* <code>none</code>
|
|
11384
|
-
* </p>
|
|
11385
|
-
* </li>
|
|
11386
|
-
* <li>
|
|
11387
|
-
* <p>
|
|
11388
|
-
* <code>task</code>
|
|
11389
|
-
* </p>
|
|
11390
|
-
* </li>
|
|
11391
|
-
* </ul>
|
|
11392
|
-
*/
|
|
11393
|
-
IpcMode?: string;
|
|
11394
|
-
/**
|
|
11395
|
-
* @public
|
|
11396
|
-
* <p>The amount (in MiB) of memory used by the task. </p>
|
|
11397
|
-
* <p>For tasks that are hosted on Amazon EC2, you can provide a task-level memory value or a container-level memory value.
|
|
11398
|
-
* For tasks that are hosted on Fargate, you must use one of the <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size">specified values</a> in the <i>
|
|
11399
|
-
* <i>Amazon Elastic Container Service Developer Guide</i>
|
|
11400
|
-
* </i>, which determines your range of supported values for the <code>Cpu</code> and <code>Memory</code> parameters.</p>
|
|
11401
|
-
*/
|
|
11402
|
-
Memory?: string;
|
|
11403
|
-
/**
|
|
11404
|
-
* @public
|
|
11405
|
-
* <p>The Docker networking mode to use for the containers in the task. Valid values are as follows:</p>
|
|
11406
|
-
* <ul>
|
|
11407
|
-
* <li>
|
|
11408
|
-
* <p>
|
|
11409
|
-
* <code>awsvpc</code>
|
|
11410
|
-
* </p>
|
|
11411
|
-
* </li>
|
|
11412
|
-
* <li>
|
|
11413
|
-
* <p>
|
|
11414
|
-
* <code>bridge</code>
|
|
11415
|
-
* </p>
|
|
11416
|
-
* </li>
|
|
11417
|
-
* <li>
|
|
11418
|
-
* <p>
|
|
11419
|
-
* <code>host</code>
|
|
11420
|
-
* </p>
|
|
11421
|
-
* </li>
|
|
11422
|
-
* <li>
|
|
11423
|
-
* <p>
|
|
11424
|
-
* <code>none</code>
|
|
11425
|
-
* </p>
|
|
11426
|
-
* </li>
|
|
11427
|
-
* </ul>
|
|
11428
|
-
*/
|
|
11429
|
-
NetworkMode?: string;
|
|
11430
|
-
/**
|
|
11431
|
-
* @public
|
|
11432
|
-
* <p>The process namespace to use for the containers in the task. Valid values are <code>host</code> or <code>task</code>.</p>
|
|
11433
|
-
*/
|
|
11434
|
-
PidMode?: string;
|
|
11435
|
-
/**
|
|
11436
|
-
* @public
|
|
11437
|
-
* <p>The placement constraint objects to use for tasks.</p>
|
|
11438
|
-
*/
|
|
11439
|
-
PlacementConstraints?: AwsEcsTaskDefinitionPlacementConstraintsDetails[];
|
|
11440
|
-
/**
|
|
11441
|
-
* @public
|
|
11442
|
-
* <p>The configuration details for the App Mesh proxy.</p>
|
|
11443
|
-
*/
|
|
11444
|
-
ProxyConfiguration?: AwsEcsTaskDefinitionProxyConfigurationDetails;
|
|
11445
|
-
/**
|
|
11446
|
-
* @public
|
|
11447
|
-
* <p>The task launch types that the task definition was validated against.</p>
|
|
11448
|
-
*/
|
|
11449
|
-
RequiresCompatibilities?: string[];
|
|
11450
|
-
/**
|
|
11451
|
-
* @public
|
|
11452
|
-
* <p>The short name or ARN of the IAM role that grants containers in the task permission to call Amazon Web Services API operations on your behalf.</p>
|
|
11453
|
-
*/
|
|
11454
|
-
TaskRoleArn?: string;
|
|
11455
|
-
/**
|
|
11456
|
-
* @public
|
|
11457
|
-
* <p>The data volume definitions for the task.</p>
|
|
11458
|
-
*/
|
|
11459
|
-
Volumes?: AwsEcsTaskDefinitionVolumesDetails[];
|
|
11460
|
-
/**
|
|
11461
|
-
* @public
|
|
11462
|
-
* <p>
|
|
11463
|
-
* The status of the task definition.
|
|
11464
|
-
* </p>
|
|
11465
|
-
*/
|
|
11466
|
-
Status?: string;
|
|
11467
|
-
}
|