@aws-sdk/client-securityhub 3.454.0 → 3.459.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (109) hide show
  1. package/README.md +163 -67
  2. package/dist-cjs/SecurityHub.js +24 -0
  3. package/dist-cjs/commands/BatchGetConfigurationPolicyAssociationsCommand.js +51 -0
  4. package/dist-cjs/commands/CreateConfigurationPolicyCommand.js +51 -0
  5. package/dist-cjs/commands/DeleteConfigurationPolicyCommand.js +51 -0
  6. package/dist-cjs/commands/GetConfigurationPolicyAssociationCommand.js +51 -0
  7. package/dist-cjs/commands/GetConfigurationPolicyCommand.js +51 -0
  8. package/dist-cjs/commands/GetSecurityControlDefinitionCommand.js +51 -0
  9. package/dist-cjs/commands/ListConfigurationPoliciesCommand.js +51 -0
  10. package/dist-cjs/commands/ListConfigurationPolicyAssociationsCommand.js +51 -0
  11. package/dist-cjs/commands/StartConfigurationPolicyAssociationCommand.js +51 -0
  12. package/dist-cjs/commands/StartConfigurationPolicyDisassociationCommand.js +51 -0
  13. package/dist-cjs/commands/UpdateConfigurationPolicyCommand.js +51 -0
  14. package/dist-cjs/commands/UpdateSecurityControlCommand.js +51 -0
  15. package/dist-cjs/commands/index.js +12 -0
  16. package/dist-cjs/models/models_0.js +10 -1
  17. package/dist-cjs/models/models_2.js +104 -1
  18. package/dist-cjs/pagination/ListConfigurationPoliciesPaginator.js +29 -0
  19. package/dist-cjs/pagination/ListConfigurationPolicyAssociationsPaginator.js +29 -0
  20. package/dist-cjs/pagination/index.js +2 -0
  21. package/dist-cjs/protocols/Aws_restJson1.js +1283 -31
  22. package/dist-es/SecurityHub.js +24 -0
  23. package/dist-es/commands/BatchGetConfigurationPolicyAssociationsCommand.js +47 -0
  24. package/dist-es/commands/CreateConfigurationPolicyCommand.js +47 -0
  25. package/dist-es/commands/DeleteConfigurationPolicyCommand.js +47 -0
  26. package/dist-es/commands/GetConfigurationPolicyAssociationCommand.js +47 -0
  27. package/dist-es/commands/GetConfigurationPolicyCommand.js +47 -0
  28. package/dist-es/commands/GetSecurityControlDefinitionCommand.js +47 -0
  29. package/dist-es/commands/ListConfigurationPoliciesCommand.js +47 -0
  30. package/dist-es/commands/ListConfigurationPolicyAssociationsCommand.js +47 -0
  31. package/dist-es/commands/StartConfigurationPolicyAssociationCommand.js +47 -0
  32. package/dist-es/commands/StartConfigurationPolicyDisassociationCommand.js +47 -0
  33. package/dist-es/commands/UpdateConfigurationPolicyCommand.js +47 -0
  34. package/dist-es/commands/UpdateSecurityControlCommand.js +47 -0
  35. package/dist-es/commands/index.js +12 -0
  36. package/dist-es/models/models_0.js +9 -0
  37. package/dist-es/models/models_2.js +102 -0
  38. package/dist-es/pagination/ListConfigurationPoliciesPaginator.js +25 -0
  39. package/dist-es/pagination/ListConfigurationPolicyAssociationsPaginator.js +25 -0
  40. package/dist-es/pagination/index.js +2 -0
  41. package/dist-es/protocols/Aws_restJson1.js +1258 -31
  42. package/dist-types/SecurityHub.d.ts +84 -0
  43. package/dist-types/SecurityHubClient.d.ts +14 -2
  44. package/dist-types/commands/BatchDisableStandardsCommand.d.ts +3 -0
  45. package/dist-types/commands/BatchEnableStandardsCommand.d.ts +3 -0
  46. package/dist-types/commands/BatchGetAutomationRulesCommand.d.ts +7 -0
  47. package/dist-types/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +128 -0
  48. package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +45 -2
  49. package/dist-types/commands/BatchImportFindingsCommand.d.ts +13 -3
  50. package/dist-types/commands/BatchUpdateAutomationRulesCommand.d.ts +7 -0
  51. package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +3 -0
  52. package/dist-types/commands/CreateAutomationRuleCommand.d.ts +7 -0
  53. package/dist-types/commands/CreateConfigurationPolicyCommand.d.ts +189 -0
  54. package/dist-types/commands/CreateInsightCommand.d.ts +17 -0
  55. package/dist-types/commands/CreateMembersCommand.d.ts +3 -0
  56. package/dist-types/commands/DeleteConfigurationPolicyCommand.d.ts +98 -0
  57. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +7 -2
  58. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +3 -0
  59. package/dist-types/commands/DisableSecurityHubCommand.d.ts +3 -0
  60. package/dist-types/commands/DisassociateMembersCommand.d.ts +3 -0
  61. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +3 -0
  62. package/dist-types/commands/GetConfigurationPolicyAssociationCommand.d.ts +107 -0
  63. package/dist-types/commands/GetConfigurationPolicyCommand.d.ts +143 -0
  64. package/dist-types/commands/GetFindingsCommand.d.ts +30 -3
  65. package/dist-types/commands/GetInsightsCommand.d.ts +17 -0
  66. package/dist-types/commands/GetSecurityControlDefinitionCommand.d.ts +193 -0
  67. package/dist-types/commands/ListConfigurationPoliciesCommand.d.ts +104 -0
  68. package/dist-types/commands/ListConfigurationPolicyAssociationsCommand.d.ts +110 -0
  69. package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +65 -0
  70. package/dist-types/commands/StartConfigurationPolicyAssociationCommand.d.ts +108 -0
  71. package/dist-types/commands/StartConfigurationPolicyDisassociationCommand.d.ts +102 -0
  72. package/dist-types/commands/UpdateConfigurationPolicyCommand.d.ts +191 -0
  73. package/dist-types/commands/UpdateFindingsCommand.d.ts +17 -0
  74. package/dist-types/commands/UpdateInsightCommand.d.ts +17 -0
  75. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +16 -2
  76. package/dist-types/commands/UpdateSecurityControlCommand.d.ts +141 -0
  77. package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +3 -0
  78. package/dist-types/commands/UpdateStandardsControlCommand.d.ts +3 -0
  79. package/dist-types/commands/index.d.ts +12 -0
  80. package/dist-types/models/models_0.d.ts +101 -193
  81. package/dist-types/models/models_1.d.ts +221 -86
  82. package/dist-types/models/models_2.d.ts +2377 -394
  83. package/dist-types/pagination/ListConfigurationPoliciesPaginator.d.ts +7 -0
  84. package/dist-types/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +7 -0
  85. package/dist-types/pagination/index.d.ts +2 -0
  86. package/dist-types/protocols/Aws_restJson1.d.ts +108 -0
  87. package/dist-types/ts3.4/SecurityHub.d.ts +234 -0
  88. package/dist-types/ts3.4/SecurityHubClient.d.ts +72 -0
  89. package/dist-types/ts3.4/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +42 -0
  90. package/dist-types/ts3.4/commands/CreateConfigurationPolicyCommand.d.ts +42 -0
  91. package/dist-types/ts3.4/commands/DeleteConfigurationPolicyCommand.d.ts +42 -0
  92. package/dist-types/ts3.4/commands/GetConfigurationPolicyAssociationCommand.d.ts +42 -0
  93. package/dist-types/ts3.4/commands/GetConfigurationPolicyCommand.d.ts +42 -0
  94. package/dist-types/ts3.4/commands/GetSecurityControlDefinitionCommand.d.ts +42 -0
  95. package/dist-types/ts3.4/commands/ListConfigurationPoliciesCommand.d.ts +42 -0
  96. package/dist-types/ts3.4/commands/ListConfigurationPolicyAssociationsCommand.d.ts +42 -0
  97. package/dist-types/ts3.4/commands/StartConfigurationPolicyAssociationCommand.d.ts +42 -0
  98. package/dist-types/ts3.4/commands/StartConfigurationPolicyDisassociationCommand.d.ts +42 -0
  99. package/dist-types/ts3.4/commands/UpdateConfigurationPolicyCommand.d.ts +42 -0
  100. package/dist-types/ts3.4/commands/UpdateSecurityControlCommand.d.ts +42 -0
  101. package/dist-types/ts3.4/commands/index.d.ts +12 -0
  102. package/dist-types/ts3.4/models/models_0.d.ts +23 -26
  103. package/dist-types/ts3.4/models/models_1.d.ts +37 -15
  104. package/dist-types/ts3.4/models/models_2.d.ts +602 -17
  105. package/dist-types/ts3.4/pagination/ListConfigurationPoliciesPaginator.d.ts +11 -0
  106. package/dist-types/ts3.4/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +11 -0
  107. package/dist-types/ts3.4/pagination/index.d.ts +2 -0
  108. package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +144 -0
  109. package/package.json +3 -3
@@ -109,6 +109,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
109
109
  * { // NumberFilter
110
110
  * Gte: Number("double"),
111
111
  * Lte: Number("double"),
112
+ * Gt: Number("double"),
113
+ * Lt: Number("double"),
112
114
  * Eq: Number("double"),
113
115
  * },
114
116
  * ],
@@ -116,6 +118,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
116
118
  * {
117
119
  * Gte: Number("double"),
118
120
  * Lte: Number("double"),
121
+ * Gt: Number("double"),
122
+ * Lt: Number("double"),
119
123
  * Eq: Number("double"),
120
124
  * },
121
125
  * ],
@@ -124,6 +128,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
124
128
  * {
125
129
  * Gte: Number("double"),
126
130
  * Lte: Number("double"),
131
+ * Gt: Number("double"),
132
+ * Lt: Number("double"),
127
133
  * Eq: Number("double"),
128
134
  * },
129
135
  * ],
@@ -131,6 +137,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
131
137
  * {
132
138
  * Gte: Number("double"),
133
139
  * Lte: Number("double"),
140
+ * Gt: Number("double"),
141
+ * Lt: Number("double"),
134
142
  * Eq: Number("double"),
135
143
  * },
136
144
  * ],
@@ -174,6 +182,8 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
174
182
  * {
175
183
  * Gte: Number("double"),
176
184
  * Lte: Number("double"),
185
+ * Gt: Number("double"),
186
+ * Lt: Number("double"),
177
187
  * Eq: Number("double"),
178
188
  * },
179
189
  * ],
@@ -283,6 +293,13 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
283
293
  * ],
284
294
  * ComplianceSecurityControlId: "<StringFilterList>",
285
295
  * ComplianceAssociatedStandardsId: "<StringFilterList>",
296
+ * VulnerabilitiesExploitAvailable: "<StringFilterList>",
297
+ * VulnerabilitiesFixAvailable: "<StringFilterList>",
298
+ * ComplianceSecurityControlParametersName: "<StringFilterList>",
299
+ * ComplianceSecurityControlParametersValue: "<StringFilterList>",
300
+ * AwsAccountName: "<StringFilterList>",
301
+ * ResourceApplicationName: "<StringFilterList>",
302
+ * ResourceApplicationArn: "<StringFilterList>",
286
303
  * },
287
304
  * GroupByAttribute: "STRING_VALUE",
288
305
  * };
@@ -23,8 +23,8 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
23
23
  }
24
24
  /**
25
25
  * @public
26
- * <p>Used to update the configuration related to Organizations. Can only be called from a
27
- * Security Hub administrator account.</p>
26
+ * <p>Updates the configuration of your organization in Security Hub. Only the
27
+ * Security Hub administrator account can invoke this operation.</p>
28
28
  * @example
29
29
  * Use a bare-bones client and the command you need to make an API call.
30
30
  * ```javascript
@@ -34,6 +34,11 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
34
34
  * const input = { // UpdateOrganizationConfigurationRequest
35
35
  * AutoEnable: true || false, // required
36
36
  * AutoEnableStandards: "NONE" || "DEFAULT",
37
+ * OrganizationConfiguration: { // OrganizationConfiguration
38
+ * ConfigurationType: "CENTRAL" || "LOCAL",
39
+ * Status: "PENDING" || "ENABLED" || "FAILED",
40
+ * StatusMessage: "STRING_VALUE",
41
+ * },
37
42
  * };
38
43
  * const command = new UpdateOrganizationConfigurationCommand(input);
39
44
  * const response = await client.send(command);
@@ -47,6 +52,9 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
47
52
  * @see {@link UpdateOrganizationConfigurationCommandOutput} for command's `response` shape.
48
53
  * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
49
54
  *
55
+ * @throws {@link AccessDeniedException} (client fault)
56
+ * <p>You don't have permission to perform the action specified in the request.</p>
57
+ *
50
58
  * @throws {@link InternalException} (server fault)
51
59
  * <p>Internal server error.</p>
52
60
  *
@@ -61,6 +69,12 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
61
69
  * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
62
70
  * account or throttling limits. The error code describes the limit exceeded.</p>
63
71
  *
72
+ * @throws {@link ResourceConflictException} (client fault)
73
+ * <p>The resource specified in the request conflicts with an existing resource.</p>
74
+ *
75
+ * @throws {@link ResourceNotFoundException} (client fault)
76
+ * <p>The request was rejected because we can't find the specified resource.</p>
77
+ *
64
78
  * @throws {@link SecurityHubServiceException}
65
79
  * <p>Base exception class for all service exceptions from SecurityHub service.</p>
66
80
  *
@@ -0,0 +1,141 @@
1
+ import { EndpointParameterInstructions } from "@smithy/middleware-endpoint";
2
+ import { Command as $Command } from "@smithy/smithy-client";
3
+ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@smithy/types";
4
+ import { UpdateSecurityControlRequest, UpdateSecurityControlResponse } from "../models/models_2";
5
+ import { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
6
+ /**
7
+ * @public
8
+ */
9
+ export { __MetadataBearer, $Command };
10
+ /**
11
+ * @public
12
+ *
13
+ * The input for {@link UpdateSecurityControlCommand}.
14
+ */
15
+ export interface UpdateSecurityControlCommandInput extends UpdateSecurityControlRequest {
16
+ }
17
+ /**
18
+ * @public
19
+ *
20
+ * The output of {@link UpdateSecurityControlCommand}.
21
+ */
22
+ export interface UpdateSecurityControlCommandOutput extends UpdateSecurityControlResponse, __MetadataBearer {
23
+ }
24
+ /**
25
+ * @public
26
+ * <p>
27
+ * Updates the properties of a security control.
28
+ * </p>
29
+ * @example
30
+ * Use a bare-bones client and the command you need to make an API call.
31
+ * ```javascript
32
+ * import { SecurityHubClient, UpdateSecurityControlCommand } from "@aws-sdk/client-securityhub"; // ES Modules import
33
+ * // const { SecurityHubClient, UpdateSecurityControlCommand } = require("@aws-sdk/client-securityhub"); // CommonJS import
34
+ * const client = new SecurityHubClient(config);
35
+ * const input = { // UpdateSecurityControlRequest
36
+ * SecurityControlId: "STRING_VALUE", // required
37
+ * Parameters: { // Parameters // required
38
+ * "<keys>": { // ParameterConfiguration
39
+ * ValueType: "DEFAULT" || "CUSTOM", // required
40
+ * Value: { // ParameterValue Union: only one key present
41
+ * Integer: Number("int"),
42
+ * IntegerList: [ // IntegerList
43
+ * Number("int"),
44
+ * ],
45
+ * Double: Number("double"),
46
+ * String: "STRING_VALUE",
47
+ * StringList: [ // StringList
48
+ * "STRING_VALUE",
49
+ * ],
50
+ * Boolean: true || false,
51
+ * Enum: "STRING_VALUE",
52
+ * EnumList: [
53
+ * "STRING_VALUE",
54
+ * ],
55
+ * },
56
+ * },
57
+ * },
58
+ * LastUpdateReason: "STRING_VALUE",
59
+ * };
60
+ * const command = new UpdateSecurityControlCommand(input);
61
+ * const response = await client.send(command);
62
+ * // {};
63
+ *
64
+ * ```
65
+ *
66
+ * @param UpdateSecurityControlCommandInput - {@link UpdateSecurityControlCommandInput}
67
+ * @returns {@link UpdateSecurityControlCommandOutput}
68
+ * @see {@link UpdateSecurityControlCommandInput} for command's `input` shape.
69
+ * @see {@link UpdateSecurityControlCommandOutput} for command's `response` shape.
70
+ * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
71
+ *
72
+ * @throws {@link AccessDeniedException} (client fault)
73
+ * <p>You don't have permission to perform the action specified in the request.</p>
74
+ *
75
+ * @throws {@link InternalException} (server fault)
76
+ * <p>Internal server error.</p>
77
+ *
78
+ * @throws {@link InvalidAccessException} (client fault)
79
+ * <p>The account doesn't have permission to perform this action.</p>
80
+ *
81
+ * @throws {@link InvalidInputException} (client fault)
82
+ * <p>The request was rejected because you supplied an invalid or out-of-range value for an
83
+ * input parameter.</p>
84
+ *
85
+ * @throws {@link LimitExceededException} (client fault)
86
+ * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
87
+ * account or throttling limits. The error code describes the limit exceeded.</p>
88
+ *
89
+ * @throws {@link ResourceInUseException} (client fault)
90
+ * <p>
91
+ * The request was rejected because it conflicts with the resource's availability. For example, you tried
92
+ * to update a security control that's currently in the <code>UPDATING</code> state.
93
+ * </p>
94
+ *
95
+ * @throws {@link ResourceNotFoundException} (client fault)
96
+ * <p>The request was rejected because we can't find the specified resource.</p>
97
+ *
98
+ * @throws {@link SecurityHubServiceException}
99
+ * <p>Base exception class for all service exceptions from SecurityHub service.</p>
100
+ *
101
+ * @example To update security control properties
102
+ * ```javascript
103
+ * // The following example updates the specified security control. Specifically, this example updates control parameters.
104
+ * const input = {
105
+ * "LastUpdateReason": "Comply with internal requirements",
106
+ * "Parameters": {
107
+ * "maxCredentialUsageAge": {
108
+ * "Value": {
109
+ * "Integer": 15
110
+ * },
111
+ * "ValueType": "CUSTOM"
112
+ * }
113
+ * },
114
+ * "SecurityControlId": "ACM.1"
115
+ * };
116
+ * const command = new UpdateSecurityControlCommand(input);
117
+ * await client.send(command);
118
+ * // example id: to-update-security-control-properties-1699282942434
119
+ * ```
120
+ *
121
+ */
122
+ export declare class UpdateSecurityControlCommand extends $Command<UpdateSecurityControlCommandInput, UpdateSecurityControlCommandOutput, SecurityHubClientResolvedConfig> {
123
+ readonly input: UpdateSecurityControlCommandInput;
124
+ static getEndpointParameterInstructions(): EndpointParameterInstructions;
125
+ /**
126
+ * @public
127
+ */
128
+ constructor(input: UpdateSecurityControlCommandInput);
129
+ /**
130
+ * @internal
131
+ */
132
+ resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: SecurityHubClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateSecurityControlCommandInput, UpdateSecurityControlCommandOutput>;
133
+ /**
134
+ * @internal
135
+ */
136
+ private serialize;
137
+ /**
138
+ * @internal
139
+ */
140
+ private deserialize;
141
+ }
@@ -46,6 +46,9 @@ export interface UpdateSecurityHubConfigurationCommandOutput extends UpdateSecur
46
46
  * @see {@link UpdateSecurityHubConfigurationCommandOutput} for command's `response` shape.
47
47
  * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
48
48
  *
49
+ * @throws {@link AccessDeniedException} (client fault)
50
+ * <p>You don't have permission to perform the action specified in the request.</p>
51
+ *
49
52
  * @throws {@link InternalException} (server fault)
50
53
  * <p>Internal server error.</p>
51
54
  *
@@ -48,6 +48,9 @@ export interface UpdateStandardsControlCommandOutput extends UpdateStandardsCont
48
48
  * @see {@link UpdateStandardsControlCommandOutput} for command's `response` shape.
49
49
  * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
50
50
  *
51
+ * @throws {@link AccessDeniedException} (client fault)
52
+ * <p>You don't have permission to perform the action specified in the request.</p>
53
+ *
51
54
  * @throws {@link InternalException} (server fault)
52
55
  * <p>Internal server error.</p>
53
56
  *
@@ -4,6 +4,7 @@ export * from "./BatchDeleteAutomationRulesCommand";
4
4
  export * from "./BatchDisableStandardsCommand";
5
5
  export * from "./BatchEnableStandardsCommand";
6
6
  export * from "./BatchGetAutomationRulesCommand";
7
+ export * from "./BatchGetConfigurationPolicyAssociationsCommand";
7
8
  export * from "./BatchGetSecurityControlsCommand";
8
9
  export * from "./BatchGetStandardsControlAssociationsCommand";
9
10
  export * from "./BatchImportFindingsCommand";
@@ -12,11 +13,13 @@ export * from "./BatchUpdateFindingsCommand";
12
13
  export * from "./BatchUpdateStandardsControlAssociationsCommand";
13
14
  export * from "./CreateActionTargetCommand";
14
15
  export * from "./CreateAutomationRuleCommand";
16
+ export * from "./CreateConfigurationPolicyCommand";
15
17
  export * from "./CreateFindingAggregatorCommand";
16
18
  export * from "./CreateInsightCommand";
17
19
  export * from "./CreateMembersCommand";
18
20
  export * from "./DeclineInvitationsCommand";
19
21
  export * from "./DeleteActionTargetCommand";
22
+ export * from "./DeleteConfigurationPolicyCommand";
20
23
  export * from "./DeleteFindingAggregatorCommand";
21
24
  export * from "./DeleteInsightCommand";
22
25
  export * from "./DeleteInvitationsCommand";
@@ -37,6 +40,8 @@ export * from "./EnableImportFindingsForProductCommand";
37
40
  export * from "./EnableOrganizationAdminAccountCommand";
38
41
  export * from "./EnableSecurityHubCommand";
39
42
  export * from "./GetAdministratorAccountCommand";
43
+ export * from "./GetConfigurationPolicyAssociationCommand";
44
+ export * from "./GetConfigurationPolicyCommand";
40
45
  export * from "./GetEnabledStandardsCommand";
41
46
  export * from "./GetFindingAggregatorCommand";
42
47
  export * from "./GetFindingHistoryCommand";
@@ -46,8 +51,11 @@ export * from "./GetInsightsCommand";
46
51
  export * from "./GetInvitationsCountCommand";
47
52
  export * from "./GetMasterAccountCommand";
48
53
  export * from "./GetMembersCommand";
54
+ export * from "./GetSecurityControlDefinitionCommand";
49
55
  export * from "./InviteMembersCommand";
50
56
  export * from "./ListAutomationRulesCommand";
57
+ export * from "./ListConfigurationPoliciesCommand";
58
+ export * from "./ListConfigurationPolicyAssociationsCommand";
51
59
  export * from "./ListEnabledProductsForImportCommand";
52
60
  export * from "./ListFindingAggregatorsCommand";
53
61
  export * from "./ListInvitationsCommand";
@@ -56,12 +64,16 @@ export * from "./ListOrganizationAdminAccountsCommand";
56
64
  export * from "./ListSecurityControlDefinitionsCommand";
57
65
  export * from "./ListStandardsControlAssociationsCommand";
58
66
  export * from "./ListTagsForResourceCommand";
67
+ export * from "./StartConfigurationPolicyAssociationCommand";
68
+ export * from "./StartConfigurationPolicyDisassociationCommand";
59
69
  export * from "./TagResourceCommand";
60
70
  export * from "./UntagResourceCommand";
61
71
  export * from "./UpdateActionTargetCommand";
72
+ export * from "./UpdateConfigurationPolicyCommand";
62
73
  export * from "./UpdateFindingAggregatorCommand";
63
74
  export * from "./UpdateFindingsCommand";
64
75
  export * from "./UpdateInsightCommand";
65
76
  export * from "./UpdateOrganizationConfigurationCommand";
77
+ export * from "./UpdateSecurityControlCommand";
66
78
  export * from "./UpdateSecurityHubConfigurationCommand";
67
79
  export * from "./UpdateStandardsControlCommand";
@@ -904,6 +904,62 @@ export interface AssociatedStandard {
904
904
  */
905
905
  StandardsId?: string;
906
906
  }
907
+ /**
908
+ * @public
909
+ * @enum
910
+ */
911
+ export declare const ConfigurationPolicyAssociationStatus: {
912
+ readonly FAILED: "FAILED";
913
+ readonly PENDING: "PENDING";
914
+ readonly SUCCESS: "SUCCESS";
915
+ };
916
+ /**
917
+ * @public
918
+ */
919
+ export type ConfigurationPolicyAssociationStatus = (typeof ConfigurationPolicyAssociationStatus)[keyof typeof ConfigurationPolicyAssociationStatus];
920
+ /**
921
+ * @public
922
+ * @enum
923
+ */
924
+ export declare const AssociationType: {
925
+ readonly APPLIED: "APPLIED";
926
+ readonly INHERITED: "INHERITED";
927
+ };
928
+ /**
929
+ * @public
930
+ */
931
+ export type AssociationType = (typeof AssociationType)[keyof typeof AssociationType];
932
+ /**
933
+ * @public
934
+ * <p>
935
+ * Options for filtering the <code>ListConfigurationPolicyAssociations</code> response. You can filter by the Amazon Resource Name (ARN) or
936
+ * universally unique identifier (UUID) of a configuration policy, <code>AssociationType</code>, or <code>AssociationStatus</code>.
937
+ * </p>
938
+ */
939
+ export interface AssociationFilters {
940
+ /**
941
+ * @public
942
+ * <p>
943
+ * The ARN or UUID of the configuration policy.
944
+ * </p>
945
+ */
946
+ ConfigurationPolicyId?: string;
947
+ /**
948
+ * @public
949
+ * <p>
950
+ * Indicates whether the association between a target and a configuration was directly applied by the
951
+ * Security Hub delegated administrator or inherited from a parent.
952
+ * </p>
953
+ */
954
+ AssociationType?: AssociationType;
955
+ /**
956
+ * @public
957
+ * <p>
958
+ * The current status of the association between a target and a configuration policy.
959
+ * </p>
960
+ */
961
+ AssociationStatus?: ConfigurationPolicyAssociationStatus;
962
+ }
907
963
  /**
908
964
  * @public
909
965
  * <p>
@@ -1133,6 +1189,20 @@ export interface NumberFilter {
1133
1189
  * findings. </p>
1134
1190
  */
1135
1191
  Lte?: number;
1192
+ /**
1193
+ * @public
1194
+ * <p>
1195
+ * The greater-than condition to be applied to a single field when querying for findings.
1196
+ * </p>
1197
+ */
1198
+ Gt?: number;
1199
+ /**
1200
+ * @public
1201
+ * <p>
1202
+ * The less-than condition to be applied to a single field when querying for findings.
1203
+ * </p>
1204
+ */
1205
+ Lt?: number;
1136
1206
  /**
1137
1207
  * @public
1138
1208
  * <p>The equal-to condition to be applied to a single field when querying for
@@ -1300,7 +1370,7 @@ export interface AutomationRulesFindingFilters {
1300
1370
  ProductArn?: StringFilter[];
1301
1371
  /**
1302
1372
  * @public
1303
- * <p> The Amazon Web Services account ID in which a finding was generated. </p>
1373
+ * <p>The Amazon Web Services account ID in which a finding was generated.</p>
1304
1374
  * <p>
1305
1375
  * Array Members: Minimum number of 1 item. Maximum number of 100 items.
1306
1376
  * </p>
@@ -1664,6 +1734,35 @@ export interface AutomationRulesFindingFilters {
1664
1734
  * </p>
1665
1735
  */
1666
1736
  UserDefinedFields?: MapFilter[];
1737
+ /**
1738
+ * @public
1739
+ * <p>
1740
+ * The Amazon Resource Name (ARN) of the application that is related to a finding.
1741
+ * </p>
1742
+ * <p>
1743
+ * Array Members: Minimum number of 1 item. Maximum number of 20 items.
1744
+ * </p>
1745
+ */
1746
+ ResourceApplicationArn?: StringFilter[];
1747
+ /**
1748
+ * @public
1749
+ * <p>
1750
+ * The name of the application that is related to a finding.
1751
+ * </p>
1752
+ * <p>
1753
+ * Array Members: Minimum number of 1 item. Maximum number of 20 items.
1754
+ * </p>
1755
+ */
1756
+ ResourceApplicationName?: StringFilter[];
1757
+ /**
1758
+ * @public
1759
+ * <p>The name of the Amazon Web Services account in which a finding was generated.
1760
+ * </p>
1761
+ * <p>
1762
+ * Array Members: Minimum number of 1 item. Maximum number of 20 items.
1763
+ * </p>
1764
+ */
1765
+ AwsAccountName?: StringFilter[];
1667
1766
  }
1668
1767
  /**
1669
1768
  * @public
@@ -4815,7 +4914,7 @@ export interface AwsCloudFrontDistributionOriginS3OriginConfig {
4815
4914
  /**
4816
4915
  * @public
4817
4916
  * <p>A complex type that describes the
4818
- * Amazon S3 bucket, HTTP server (for example, a web server), AWS Elemental MediaStore, or other server from which CloudFront gets your files.</p>
4917
+ * Amazon S3 bucket, HTTP server (for example, a web server), Elemental MediaStore, or other server from which CloudFront gets your files.</p>
4819
4918
  */
4820
4919
  export interface AwsCloudFrontDistributionOriginItem {
4821
4920
  /**
@@ -11274,194 +11373,3 @@ export interface AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails {
11274
11373
  */
11275
11374
  TransitEncryptionPort?: number;
11276
11375
  }
11277
- /**
11278
- * @public
11279
- * <p>Information about a bind mount host volume.</p>
11280
- */
11281
- export interface AwsEcsTaskDefinitionVolumesHostDetails {
11282
- /**
11283
- * @public
11284
- * <p>The path on the host container instance that is presented to the container.</p>
11285
- */
11286
- SourcePath?: string;
11287
- }
11288
- /**
11289
- * @public
11290
- * <p>A data volume to mount from another container.</p>
11291
- */
11292
- export interface AwsEcsTaskDefinitionVolumesDetails {
11293
- /**
11294
- * @public
11295
- * <p>Information about a Docker volume.</p>
11296
- */
11297
- DockerVolumeConfiguration?: AwsEcsTaskDefinitionVolumesDockerVolumeConfigurationDetails;
11298
- /**
11299
- * @public
11300
- * <p>Information about the Amazon Elastic File System file system that is used for task storage.</p>
11301
- */
11302
- EfsVolumeConfiguration?: AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails;
11303
- /**
11304
- * @public
11305
- * <p>Information about a bind mount host volume.</p>
11306
- */
11307
- Host?: AwsEcsTaskDefinitionVolumesHostDetails;
11308
- /**
11309
- * @public
11310
- * <p>The name of the data volume.</p>
11311
- */
11312
- Name?: string;
11313
- }
11314
- /**
11315
- * @public
11316
- * <p>Details about a task definition. A task definition describes the container and volume definitions
11317
- * of an Amazon Elastic Container Service task.</p>
11318
- */
11319
- export interface AwsEcsTaskDefinitionDetails {
11320
- /**
11321
- * @public
11322
- * <p>The container definitions that describe the containers that make up the task.</p>
11323
- */
11324
- ContainerDefinitions?: AwsEcsTaskDefinitionContainerDefinitionsDetails[];
11325
- /**
11326
- * @public
11327
- * <p>The number of CPU units used by the task.Valid values are as follows:</p>
11328
- * <ul>
11329
- * <li>
11330
- * <p>
11331
- * <code>256 (.25 vCPU)</code>
11332
- * </p>
11333
- * </li>
11334
- * <li>
11335
- * <p>
11336
- * <code>512 (.5 vCPU)</code>
11337
- * </p>
11338
- * </li>
11339
- * <li>
11340
- * <p>
11341
- * <code>1024 (1 vCPU)</code>
11342
- * </p>
11343
- * </li>
11344
- * <li>
11345
- * <p>
11346
- * <code>2048 (2 vCPU)</code>
11347
- * </p>
11348
- * </li>
11349
- * <li>
11350
- * <p>
11351
- * <code>4096 (4 vCPU)</code>
11352
- * </p>
11353
- * </li>
11354
- * </ul>
11355
- */
11356
- Cpu?: string;
11357
- /**
11358
- * @public
11359
- * <p>The ARN of the task execution role that grants the container agent permission to make API calls on behalf of the container user.</p>
11360
- */
11361
- ExecutionRoleArn?: string;
11362
- /**
11363
- * @public
11364
- * <p>The name of a family that this task definition is registered to.</p>
11365
- */
11366
- Family?: string;
11367
- /**
11368
- * @public
11369
- * <p>The Elastic Inference accelerators to use for the containers in the task.</p>
11370
- */
11371
- InferenceAccelerators?: AwsEcsTaskDefinitionInferenceAcceleratorsDetails[];
11372
- /**
11373
- * @public
11374
- * <p>The inter-process communication (IPC) resource namespace to use for the containers in the task. Valid values are as follows:</p>
11375
- * <ul>
11376
- * <li>
11377
- * <p>
11378
- * <code>host</code>
11379
- * </p>
11380
- * </li>
11381
- * <li>
11382
- * <p>
11383
- * <code>none</code>
11384
- * </p>
11385
- * </li>
11386
- * <li>
11387
- * <p>
11388
- * <code>task</code>
11389
- * </p>
11390
- * </li>
11391
- * </ul>
11392
- */
11393
- IpcMode?: string;
11394
- /**
11395
- * @public
11396
- * <p>The amount (in MiB) of memory used by the task. </p>
11397
- * <p>For tasks that are hosted on Amazon EC2, you can provide a task-level memory value or a container-level memory value.
11398
- * For tasks that are hosted on Fargate, you must use one of the <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size">specified values</a> in the <i>
11399
- * <i>Amazon Elastic Container Service Developer Guide</i>
11400
- * </i>, which determines your range of supported values for the <code>Cpu</code> and <code>Memory</code> parameters.</p>
11401
- */
11402
- Memory?: string;
11403
- /**
11404
- * @public
11405
- * <p>The Docker networking mode to use for the containers in the task. Valid values are as follows:</p>
11406
- * <ul>
11407
- * <li>
11408
- * <p>
11409
- * <code>awsvpc</code>
11410
- * </p>
11411
- * </li>
11412
- * <li>
11413
- * <p>
11414
- * <code>bridge</code>
11415
- * </p>
11416
- * </li>
11417
- * <li>
11418
- * <p>
11419
- * <code>host</code>
11420
- * </p>
11421
- * </li>
11422
- * <li>
11423
- * <p>
11424
- * <code>none</code>
11425
- * </p>
11426
- * </li>
11427
- * </ul>
11428
- */
11429
- NetworkMode?: string;
11430
- /**
11431
- * @public
11432
- * <p>The process namespace to use for the containers in the task. Valid values are <code>host</code> or <code>task</code>.</p>
11433
- */
11434
- PidMode?: string;
11435
- /**
11436
- * @public
11437
- * <p>The placement constraint objects to use for tasks.</p>
11438
- */
11439
- PlacementConstraints?: AwsEcsTaskDefinitionPlacementConstraintsDetails[];
11440
- /**
11441
- * @public
11442
- * <p>The configuration details for the App Mesh proxy.</p>
11443
- */
11444
- ProxyConfiguration?: AwsEcsTaskDefinitionProxyConfigurationDetails;
11445
- /**
11446
- * @public
11447
- * <p>The task launch types that the task definition was validated against.</p>
11448
- */
11449
- RequiresCompatibilities?: string[];
11450
- /**
11451
- * @public
11452
- * <p>The short name or ARN of the IAM role that grants containers in the task permission to call Amazon Web Services API operations on your behalf.</p>
11453
- */
11454
- TaskRoleArn?: string;
11455
- /**
11456
- * @public
11457
- * <p>The data volume definitions for the task.</p>
11458
- */
11459
- Volumes?: AwsEcsTaskDefinitionVolumesDetails[];
11460
- /**
11461
- * @public
11462
- * <p>
11463
- * The status of the task definition.
11464
- * </p>
11465
- */
11466
- Status?: string;
11467
- }