@aws-sdk/client-securityhub 3.454.0 → 3.459.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (109) hide show
  1. package/README.md +163 -67
  2. package/dist-cjs/SecurityHub.js +24 -0
  3. package/dist-cjs/commands/BatchGetConfigurationPolicyAssociationsCommand.js +51 -0
  4. package/dist-cjs/commands/CreateConfigurationPolicyCommand.js +51 -0
  5. package/dist-cjs/commands/DeleteConfigurationPolicyCommand.js +51 -0
  6. package/dist-cjs/commands/GetConfigurationPolicyAssociationCommand.js +51 -0
  7. package/dist-cjs/commands/GetConfigurationPolicyCommand.js +51 -0
  8. package/dist-cjs/commands/GetSecurityControlDefinitionCommand.js +51 -0
  9. package/dist-cjs/commands/ListConfigurationPoliciesCommand.js +51 -0
  10. package/dist-cjs/commands/ListConfigurationPolicyAssociationsCommand.js +51 -0
  11. package/dist-cjs/commands/StartConfigurationPolicyAssociationCommand.js +51 -0
  12. package/dist-cjs/commands/StartConfigurationPolicyDisassociationCommand.js +51 -0
  13. package/dist-cjs/commands/UpdateConfigurationPolicyCommand.js +51 -0
  14. package/dist-cjs/commands/UpdateSecurityControlCommand.js +51 -0
  15. package/dist-cjs/commands/index.js +12 -0
  16. package/dist-cjs/models/models_0.js +10 -1
  17. package/dist-cjs/models/models_2.js +104 -1
  18. package/dist-cjs/pagination/ListConfigurationPoliciesPaginator.js +29 -0
  19. package/dist-cjs/pagination/ListConfigurationPolicyAssociationsPaginator.js +29 -0
  20. package/dist-cjs/pagination/index.js +2 -0
  21. package/dist-cjs/protocols/Aws_restJson1.js +1283 -31
  22. package/dist-es/SecurityHub.js +24 -0
  23. package/dist-es/commands/BatchGetConfigurationPolicyAssociationsCommand.js +47 -0
  24. package/dist-es/commands/CreateConfigurationPolicyCommand.js +47 -0
  25. package/dist-es/commands/DeleteConfigurationPolicyCommand.js +47 -0
  26. package/dist-es/commands/GetConfigurationPolicyAssociationCommand.js +47 -0
  27. package/dist-es/commands/GetConfigurationPolicyCommand.js +47 -0
  28. package/dist-es/commands/GetSecurityControlDefinitionCommand.js +47 -0
  29. package/dist-es/commands/ListConfigurationPoliciesCommand.js +47 -0
  30. package/dist-es/commands/ListConfigurationPolicyAssociationsCommand.js +47 -0
  31. package/dist-es/commands/StartConfigurationPolicyAssociationCommand.js +47 -0
  32. package/dist-es/commands/StartConfigurationPolicyDisassociationCommand.js +47 -0
  33. package/dist-es/commands/UpdateConfigurationPolicyCommand.js +47 -0
  34. package/dist-es/commands/UpdateSecurityControlCommand.js +47 -0
  35. package/dist-es/commands/index.js +12 -0
  36. package/dist-es/models/models_0.js +9 -0
  37. package/dist-es/models/models_2.js +102 -0
  38. package/dist-es/pagination/ListConfigurationPoliciesPaginator.js +25 -0
  39. package/dist-es/pagination/ListConfigurationPolicyAssociationsPaginator.js +25 -0
  40. package/dist-es/pagination/index.js +2 -0
  41. package/dist-es/protocols/Aws_restJson1.js +1258 -31
  42. package/dist-types/SecurityHub.d.ts +84 -0
  43. package/dist-types/SecurityHubClient.d.ts +14 -2
  44. package/dist-types/commands/BatchDisableStandardsCommand.d.ts +3 -0
  45. package/dist-types/commands/BatchEnableStandardsCommand.d.ts +3 -0
  46. package/dist-types/commands/BatchGetAutomationRulesCommand.d.ts +7 -0
  47. package/dist-types/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +128 -0
  48. package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +45 -2
  49. package/dist-types/commands/BatchImportFindingsCommand.d.ts +13 -3
  50. package/dist-types/commands/BatchUpdateAutomationRulesCommand.d.ts +7 -0
  51. package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +3 -0
  52. package/dist-types/commands/CreateAutomationRuleCommand.d.ts +7 -0
  53. package/dist-types/commands/CreateConfigurationPolicyCommand.d.ts +189 -0
  54. package/dist-types/commands/CreateInsightCommand.d.ts +17 -0
  55. package/dist-types/commands/CreateMembersCommand.d.ts +3 -0
  56. package/dist-types/commands/DeleteConfigurationPolicyCommand.d.ts +98 -0
  57. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +7 -2
  58. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +3 -0
  59. package/dist-types/commands/DisableSecurityHubCommand.d.ts +3 -0
  60. package/dist-types/commands/DisassociateMembersCommand.d.ts +3 -0
  61. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +3 -0
  62. package/dist-types/commands/GetConfigurationPolicyAssociationCommand.d.ts +107 -0
  63. package/dist-types/commands/GetConfigurationPolicyCommand.d.ts +143 -0
  64. package/dist-types/commands/GetFindingsCommand.d.ts +30 -3
  65. package/dist-types/commands/GetInsightsCommand.d.ts +17 -0
  66. package/dist-types/commands/GetSecurityControlDefinitionCommand.d.ts +193 -0
  67. package/dist-types/commands/ListConfigurationPoliciesCommand.d.ts +104 -0
  68. package/dist-types/commands/ListConfigurationPolicyAssociationsCommand.d.ts +110 -0
  69. package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +65 -0
  70. package/dist-types/commands/StartConfigurationPolicyAssociationCommand.d.ts +108 -0
  71. package/dist-types/commands/StartConfigurationPolicyDisassociationCommand.d.ts +102 -0
  72. package/dist-types/commands/UpdateConfigurationPolicyCommand.d.ts +191 -0
  73. package/dist-types/commands/UpdateFindingsCommand.d.ts +17 -0
  74. package/dist-types/commands/UpdateInsightCommand.d.ts +17 -0
  75. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +16 -2
  76. package/dist-types/commands/UpdateSecurityControlCommand.d.ts +141 -0
  77. package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +3 -0
  78. package/dist-types/commands/UpdateStandardsControlCommand.d.ts +3 -0
  79. package/dist-types/commands/index.d.ts +12 -0
  80. package/dist-types/models/models_0.d.ts +101 -193
  81. package/dist-types/models/models_1.d.ts +221 -86
  82. package/dist-types/models/models_2.d.ts +2377 -394
  83. package/dist-types/pagination/ListConfigurationPoliciesPaginator.d.ts +7 -0
  84. package/dist-types/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +7 -0
  85. package/dist-types/pagination/index.d.ts +2 -0
  86. package/dist-types/protocols/Aws_restJson1.d.ts +108 -0
  87. package/dist-types/ts3.4/SecurityHub.d.ts +234 -0
  88. package/dist-types/ts3.4/SecurityHubClient.d.ts +72 -0
  89. package/dist-types/ts3.4/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +42 -0
  90. package/dist-types/ts3.4/commands/CreateConfigurationPolicyCommand.d.ts +42 -0
  91. package/dist-types/ts3.4/commands/DeleteConfigurationPolicyCommand.d.ts +42 -0
  92. package/dist-types/ts3.4/commands/GetConfigurationPolicyAssociationCommand.d.ts +42 -0
  93. package/dist-types/ts3.4/commands/GetConfigurationPolicyCommand.d.ts +42 -0
  94. package/dist-types/ts3.4/commands/GetSecurityControlDefinitionCommand.d.ts +42 -0
  95. package/dist-types/ts3.4/commands/ListConfigurationPoliciesCommand.d.ts +42 -0
  96. package/dist-types/ts3.4/commands/ListConfigurationPolicyAssociationsCommand.d.ts +42 -0
  97. package/dist-types/ts3.4/commands/StartConfigurationPolicyAssociationCommand.d.ts +42 -0
  98. package/dist-types/ts3.4/commands/StartConfigurationPolicyDisassociationCommand.d.ts +42 -0
  99. package/dist-types/ts3.4/commands/UpdateConfigurationPolicyCommand.d.ts +42 -0
  100. package/dist-types/ts3.4/commands/UpdateSecurityControlCommand.d.ts +42 -0
  101. package/dist-types/ts3.4/commands/index.d.ts +12 -0
  102. package/dist-types/ts3.4/models/models_0.d.ts +23 -26
  103. package/dist-types/ts3.4/models/models_1.d.ts +37 -15
  104. package/dist-types/ts3.4/models/models_2.d.ts +602 -17
  105. package/dist-types/ts3.4/pagination/ListConfigurationPoliciesPaginator.d.ts +11 -0
  106. package/dist-types/ts3.4/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +11 -0
  107. package/dist-types/ts3.4/pagination/index.d.ts +2 -0
  108. package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +144 -0
  109. package/package.json +3 -3
@@ -5,7 +5,9 @@ import {
5
5
  ActionTarget,
6
6
  Adjustment,
7
7
  AdminAccount,
8
+ AssociationFilters,
8
9
  AssociationStatus,
10
+ AssociationType,
9
11
  AutoEnableStandards,
10
12
  AutomationRulesAction,
11
13
  AutomationRulesConfig,
@@ -52,7 +54,7 @@ import {
52
54
  AwsEcsClusterDetails,
53
55
  AwsEcsContainerDetails,
54
56
  AwsEcsServiceDetails,
55
- AwsEcsTaskDefinitionDetails,
57
+ ConfigurationPolicyAssociationStatus,
56
58
  DateFilter,
57
59
  MapFilter,
58
60
  NoteUpdate,
@@ -67,6 +69,7 @@ import {
67
69
  WorkflowUpdate,
68
70
  } from "./models_0";
69
71
  import {
72
+ AwsEcsTaskDefinitionDetails,
70
73
  AwsEcsTaskDetails,
71
74
  AwsEfsAccessPointDetails,
72
75
  AwsEksClusterDetails,
@@ -117,8 +120,8 @@ import {
117
120
  AwsWafRuleDetails,
118
121
  AwsWafRuleGroupDetails,
119
122
  AwsWafv2ActionAllowDetails,
120
- AwsWafv2ActionBlockDetails,
121
- AwsWafv2RulesActionDetails,
123
+ AwsWafv2CustomRequestHandlingDetails,
124
+ AwsWafv2CustomResponseDetails,
122
125
  Compliance,
123
126
  DataClassificationDetails,
124
127
  FindingProviderFields,
@@ -133,6 +136,21 @@ import {
133
136
  Remediation,
134
137
  } from "./models_1";
135
138
  import { SecurityHubServiceException as __BaseException } from "./SecurityHubServiceException";
139
+ export interface AwsWafv2ActionBlockDetails {
140
+ CustomResponse?: AwsWafv2CustomResponseDetails;
141
+ }
142
+ export interface AwsWafv2RulesActionCaptchaDetails {
143
+ CustomRequestHandling?: AwsWafv2CustomRequestHandlingDetails;
144
+ }
145
+ export interface AwsWafv2RulesActionCountDetails {
146
+ CustomRequestHandling?: AwsWafv2CustomRequestHandlingDetails;
147
+ }
148
+ export interface AwsWafv2RulesActionDetails {
149
+ Allow?: AwsWafv2ActionAllowDetails;
150
+ Block?: AwsWafv2ActionBlockDetails;
151
+ Captcha?: AwsWafv2RulesActionCaptchaDetails;
152
+ Count?: AwsWafv2RulesActionCountDetails;
153
+ }
136
154
  export interface AwsWafv2VisibilityConfigDetails {
137
155
  CloudWatchMetricsEnabled?: boolean;
138
156
  MetricName?: string;
@@ -332,6 +350,8 @@ export interface Resource {
332
350
  Tags?: Record<string, string>;
333
351
  DataClassification?: DataClassificationDetails;
334
352
  Details?: ResourceDetails;
353
+ ApplicationName?: string;
354
+ ApplicationArn?: string;
335
355
  }
336
356
  export interface Severity {
337
357
  Product?: number;
@@ -501,6 +521,8 @@ export interface AwsSecurityFinding {
501
521
  FindingProviderFields?: FindingProviderFields;
502
522
  Sample?: boolean;
503
523
  GeneratorDetails?: GeneratorDetails;
524
+ ProcessedAt?: string;
525
+ AwsAccountName?: string;
504
526
  }
505
527
  export interface KeywordFilter {
506
528
  Value?: string;
@@ -609,6 +631,13 @@ export interface AwsSecurityFindingFilters {
609
631
  Sample?: BooleanFilter[];
610
632
  ComplianceSecurityControlId?: StringFilter[];
611
633
  ComplianceAssociatedStandardsId?: StringFilter[];
634
+ VulnerabilitiesExploitAvailable?: StringFilter[];
635
+ VulnerabilitiesFixAvailable?: StringFilter[];
636
+ ComplianceSecurityControlParametersName?: StringFilter[];
637
+ ComplianceSecurityControlParametersValue?: StringFilter[];
638
+ AwsAccountName?: StringFilter[];
639
+ ResourceApplicationName?: StringFilter[];
640
+ ResourceApplicationArn?: StringFilter[];
612
641
  }
613
642
  export interface AwsSecurityFindingIdentifier {
614
643
  Id: string | undefined;
@@ -674,9 +703,211 @@ export interface BatchGetAutomationRulesResponse {
674
703
  Rules?: AutomationRulesConfig[];
675
704
  UnprocessedAutomationRules?: UnprocessedAutomationRule[];
676
705
  }
706
+ export type Target =
707
+ | Target.AccountIdMember
708
+ | Target.OrganizationalUnitIdMember
709
+ | Target.RootIdMember
710
+ | Target.$UnknownMember;
711
+ export declare namespace Target {
712
+ interface AccountIdMember {
713
+ AccountId: string;
714
+ OrganizationalUnitId?: never;
715
+ RootId?: never;
716
+ $unknown?: never;
717
+ }
718
+ interface OrganizationalUnitIdMember {
719
+ AccountId?: never;
720
+ OrganizationalUnitId: string;
721
+ RootId?: never;
722
+ $unknown?: never;
723
+ }
724
+ interface RootIdMember {
725
+ AccountId?: never;
726
+ OrganizationalUnitId?: never;
727
+ RootId: string;
728
+ $unknown?: never;
729
+ }
730
+ interface $UnknownMember {
731
+ AccountId?: never;
732
+ OrganizationalUnitId?: never;
733
+ RootId?: never;
734
+ $unknown: [string, any];
735
+ }
736
+ interface Visitor<T> {
737
+ AccountId: (value: string) => T;
738
+ OrganizationalUnitId: (value: string) => T;
739
+ RootId: (value: string) => T;
740
+ _: (name: string, value: any) => T;
741
+ }
742
+ const visit: <T>(value: Target, visitor: Visitor<T>) => T;
743
+ }
744
+ export interface ConfigurationPolicyAssociation {
745
+ Target?: Target;
746
+ }
747
+ export interface BatchGetConfigurationPolicyAssociationsRequest {
748
+ ConfigurationPolicyAssociationIdentifiers:
749
+ | ConfigurationPolicyAssociation[]
750
+ | undefined;
751
+ }
752
+ export declare const TargetType: {
753
+ readonly ACCOUNT: "ACCOUNT";
754
+ readonly ORGANIZATIONAL_UNIT: "ORGANIZATIONAL_UNIT";
755
+ };
756
+ export type TargetType = (typeof TargetType)[keyof typeof TargetType];
757
+ export interface ConfigurationPolicyAssociationSummary {
758
+ ConfigurationPolicyId?: string;
759
+ TargetId?: string;
760
+ TargetType?: TargetType;
761
+ AssociationType?: AssociationType;
762
+ UpdatedAt?: Date;
763
+ AssociationStatus?: ConfigurationPolicyAssociationStatus;
764
+ AssociationStatusMessage?: string;
765
+ }
766
+ export interface UnprocessedConfigurationPolicyAssociation {
767
+ ConfigurationPolicyAssociationIdentifiers?: ConfigurationPolicyAssociation;
768
+ ErrorCode?: string;
769
+ ErrorReason?: string;
770
+ }
771
+ export interface BatchGetConfigurationPolicyAssociationsResponse {
772
+ ConfigurationPolicyAssociations?: ConfigurationPolicyAssociationSummary[];
773
+ UnprocessedConfigurationPolicyAssociations?: UnprocessedConfigurationPolicyAssociation[];
774
+ }
677
775
  export interface BatchGetSecurityControlsRequest {
678
776
  SecurityControlIds: string[] | undefined;
679
777
  }
778
+ export type ParameterValue =
779
+ | ParameterValue.BooleanMember
780
+ | ParameterValue.DoubleMember
781
+ | ParameterValue.EnumMember
782
+ | ParameterValue.EnumListMember
783
+ | ParameterValue.IntegerMember
784
+ | ParameterValue.IntegerListMember
785
+ | ParameterValue.StringMember
786
+ | ParameterValue.StringListMember
787
+ | ParameterValue.$UnknownMember;
788
+ export declare namespace ParameterValue {
789
+ interface IntegerMember {
790
+ Integer: number;
791
+ IntegerList?: never;
792
+ Double?: never;
793
+ String?: never;
794
+ StringList?: never;
795
+ Boolean?: never;
796
+ Enum?: never;
797
+ EnumList?: never;
798
+ $unknown?: never;
799
+ }
800
+ interface IntegerListMember {
801
+ Integer?: never;
802
+ IntegerList: number[];
803
+ Double?: never;
804
+ String?: never;
805
+ StringList?: never;
806
+ Boolean?: never;
807
+ Enum?: never;
808
+ EnumList?: never;
809
+ $unknown?: never;
810
+ }
811
+ interface DoubleMember {
812
+ Integer?: never;
813
+ IntegerList?: never;
814
+ Double: number;
815
+ String?: never;
816
+ StringList?: never;
817
+ Boolean?: never;
818
+ Enum?: never;
819
+ EnumList?: never;
820
+ $unknown?: never;
821
+ }
822
+ interface StringMember {
823
+ Integer?: never;
824
+ IntegerList?: never;
825
+ Double?: never;
826
+ String: string;
827
+ StringList?: never;
828
+ Boolean?: never;
829
+ Enum?: never;
830
+ EnumList?: never;
831
+ $unknown?: never;
832
+ }
833
+ interface StringListMember {
834
+ Integer?: never;
835
+ IntegerList?: never;
836
+ Double?: never;
837
+ String?: never;
838
+ StringList: string[];
839
+ Boolean?: never;
840
+ Enum?: never;
841
+ EnumList?: never;
842
+ $unknown?: never;
843
+ }
844
+ interface BooleanMember {
845
+ Integer?: never;
846
+ IntegerList?: never;
847
+ Double?: never;
848
+ String?: never;
849
+ StringList?: never;
850
+ Boolean: boolean;
851
+ Enum?: never;
852
+ EnumList?: never;
853
+ $unknown?: never;
854
+ }
855
+ interface EnumMember {
856
+ Integer?: never;
857
+ IntegerList?: never;
858
+ Double?: never;
859
+ String?: never;
860
+ StringList?: never;
861
+ Boolean?: never;
862
+ Enum: string;
863
+ EnumList?: never;
864
+ $unknown?: never;
865
+ }
866
+ interface EnumListMember {
867
+ Integer?: never;
868
+ IntegerList?: never;
869
+ Double?: never;
870
+ String?: never;
871
+ StringList?: never;
872
+ Boolean?: never;
873
+ Enum?: never;
874
+ EnumList: string[];
875
+ $unknown?: never;
876
+ }
877
+ interface $UnknownMember {
878
+ Integer?: never;
879
+ IntegerList?: never;
880
+ Double?: never;
881
+ String?: never;
882
+ StringList?: never;
883
+ Boolean?: never;
884
+ Enum?: never;
885
+ EnumList?: never;
886
+ $unknown: [string, any];
887
+ }
888
+ interface Visitor<T> {
889
+ Integer: (value: number) => T;
890
+ IntegerList: (value: number[]) => T;
891
+ Double: (value: number) => T;
892
+ String: (value: string) => T;
893
+ StringList: (value: string[]) => T;
894
+ Boolean: (value: boolean) => T;
895
+ Enum: (value: string) => T;
896
+ EnumList: (value: string[]) => T;
897
+ _: (name: string, value: any) => T;
898
+ }
899
+ const visit: <T>(value: ParameterValue, visitor: Visitor<T>) => T;
900
+ }
901
+ export declare const ParameterValueType: {
902
+ readonly CUSTOM: "CUSTOM";
903
+ readonly DEFAULT: "DEFAULT";
904
+ };
905
+ export type ParameterValueType =
906
+ (typeof ParameterValueType)[keyof typeof ParameterValueType];
907
+ export interface ParameterConfiguration {
908
+ ValueType: ParameterValueType | undefined;
909
+ Value?: ParameterValue;
910
+ }
680
911
  export declare const ControlStatus: {
681
912
  readonly DISABLED: "DISABLED";
682
913
  readonly ENABLED: "ENABLED";
@@ -690,6 +921,11 @@ export declare const SeverityRating: {
690
921
  };
691
922
  export type SeverityRating =
692
923
  (typeof SeverityRating)[keyof typeof SeverityRating];
924
+ export declare const UpdateStatus: {
925
+ readonly READY: "READY";
926
+ readonly UPDATING: "UPDATING";
927
+ };
928
+ export type UpdateStatus = (typeof UpdateStatus)[keyof typeof UpdateStatus];
693
929
  export interface SecurityControl {
694
930
  SecurityControlId: string | undefined;
695
931
  SecurityControlArn: string | undefined;
@@ -698,6 +934,9 @@ export interface SecurityControl {
698
934
  RemediationUrl: string | undefined;
699
935
  SeverityRating: SeverityRating | undefined;
700
936
  SecurityControlStatus: ControlStatus | undefined;
937
+ UpdateStatus?: UpdateStatus;
938
+ Parameters?: Record<string, ParameterConfiguration>;
939
+ LastUpdateReason?: string;
701
940
  }
702
941
  export declare const UnprocessedErrorCode: {
703
942
  readonly ACCESS_DENIED: "ACCESS_DENIED";
@@ -820,6 +1059,176 @@ export interface UnprocessedStandardsControlAssociationUpdate {
820
1059
  export interface BatchUpdateStandardsControlAssociationsResponse {
821
1060
  UnprocessedAssociationUpdates?: UnprocessedStandardsControlAssociationUpdate[];
822
1061
  }
1062
+ export interface BooleanConfigurationOptions {
1063
+ DefaultValue?: boolean;
1064
+ }
1065
+ export interface DoubleConfigurationOptions {
1066
+ DefaultValue?: number;
1067
+ Min?: number;
1068
+ Max?: number;
1069
+ }
1070
+ export interface EnumConfigurationOptions {
1071
+ DefaultValue?: string;
1072
+ AllowedValues?: string[];
1073
+ }
1074
+ export interface EnumListConfigurationOptions {
1075
+ DefaultValue?: string[];
1076
+ MaxItems?: number;
1077
+ AllowedValues?: string[];
1078
+ }
1079
+ export interface IntegerConfigurationOptions {
1080
+ DefaultValue?: number;
1081
+ Min?: number;
1082
+ Max?: number;
1083
+ }
1084
+ export interface IntegerListConfigurationOptions {
1085
+ DefaultValue?: number[];
1086
+ Min?: number;
1087
+ Max?: number;
1088
+ MaxItems?: number;
1089
+ }
1090
+ export interface StringConfigurationOptions {
1091
+ DefaultValue?: string;
1092
+ Re2Expression?: string;
1093
+ ExpressionDescription?: string;
1094
+ }
1095
+ export interface StringListConfigurationOptions {
1096
+ DefaultValue?: string[];
1097
+ Re2Expression?: string;
1098
+ MaxItems?: number;
1099
+ ExpressionDescription?: string;
1100
+ }
1101
+ export type ConfigurationOptions =
1102
+ | ConfigurationOptions.BooleanMember
1103
+ | ConfigurationOptions.DoubleMember
1104
+ | ConfigurationOptions.EnumMember
1105
+ | ConfigurationOptions.EnumListMember
1106
+ | ConfigurationOptions.IntegerMember
1107
+ | ConfigurationOptions.IntegerListMember
1108
+ | ConfigurationOptions.StringMember
1109
+ | ConfigurationOptions.StringListMember
1110
+ | ConfigurationOptions.$UnknownMember;
1111
+ export declare namespace ConfigurationOptions {
1112
+ interface IntegerMember {
1113
+ Integer: IntegerConfigurationOptions;
1114
+ IntegerList?: never;
1115
+ Double?: never;
1116
+ String?: never;
1117
+ StringList?: never;
1118
+ Boolean?: never;
1119
+ Enum?: never;
1120
+ EnumList?: never;
1121
+ $unknown?: never;
1122
+ }
1123
+ interface IntegerListMember {
1124
+ Integer?: never;
1125
+ IntegerList: IntegerListConfigurationOptions;
1126
+ Double?: never;
1127
+ String?: never;
1128
+ StringList?: never;
1129
+ Boolean?: never;
1130
+ Enum?: never;
1131
+ EnumList?: never;
1132
+ $unknown?: never;
1133
+ }
1134
+ interface DoubleMember {
1135
+ Integer?: never;
1136
+ IntegerList?: never;
1137
+ Double: DoubleConfigurationOptions;
1138
+ String?: never;
1139
+ StringList?: never;
1140
+ Boolean?: never;
1141
+ Enum?: never;
1142
+ EnumList?: never;
1143
+ $unknown?: never;
1144
+ }
1145
+ interface StringMember {
1146
+ Integer?: never;
1147
+ IntegerList?: never;
1148
+ Double?: never;
1149
+ String: StringConfigurationOptions;
1150
+ StringList?: never;
1151
+ Boolean?: never;
1152
+ Enum?: never;
1153
+ EnumList?: never;
1154
+ $unknown?: never;
1155
+ }
1156
+ interface StringListMember {
1157
+ Integer?: never;
1158
+ IntegerList?: never;
1159
+ Double?: never;
1160
+ String?: never;
1161
+ StringList: StringListConfigurationOptions;
1162
+ Boolean?: never;
1163
+ Enum?: never;
1164
+ EnumList?: never;
1165
+ $unknown?: never;
1166
+ }
1167
+ interface BooleanMember {
1168
+ Integer?: never;
1169
+ IntegerList?: never;
1170
+ Double?: never;
1171
+ String?: never;
1172
+ StringList?: never;
1173
+ Boolean: BooleanConfigurationOptions;
1174
+ Enum?: never;
1175
+ EnumList?: never;
1176
+ $unknown?: never;
1177
+ }
1178
+ interface EnumMember {
1179
+ Integer?: never;
1180
+ IntegerList?: never;
1181
+ Double?: never;
1182
+ String?: never;
1183
+ StringList?: never;
1184
+ Boolean?: never;
1185
+ Enum: EnumConfigurationOptions;
1186
+ EnumList?: never;
1187
+ $unknown?: never;
1188
+ }
1189
+ interface EnumListMember {
1190
+ Integer?: never;
1191
+ IntegerList?: never;
1192
+ Double?: never;
1193
+ String?: never;
1194
+ StringList?: never;
1195
+ Boolean?: never;
1196
+ Enum?: never;
1197
+ EnumList: EnumListConfigurationOptions;
1198
+ $unknown?: never;
1199
+ }
1200
+ interface $UnknownMember {
1201
+ Integer?: never;
1202
+ IntegerList?: never;
1203
+ Double?: never;
1204
+ String?: never;
1205
+ StringList?: never;
1206
+ Boolean?: never;
1207
+ Enum?: never;
1208
+ EnumList?: never;
1209
+ $unknown: [string, any];
1210
+ }
1211
+ interface Visitor<T> {
1212
+ Integer: (value: IntegerConfigurationOptions) => T;
1213
+ IntegerList: (value: IntegerListConfigurationOptions) => T;
1214
+ Double: (value: DoubleConfigurationOptions) => T;
1215
+ String: (value: StringConfigurationOptions) => T;
1216
+ StringList: (value: StringListConfigurationOptions) => T;
1217
+ Boolean: (value: BooleanConfigurationOptions) => T;
1218
+ Enum: (value: EnumConfigurationOptions) => T;
1219
+ EnumList: (value: EnumListConfigurationOptions) => T;
1220
+ _: (name: string, value: any) => T;
1221
+ }
1222
+ const visit: <T>(value: ConfigurationOptions, visitor: Visitor<T>) => T;
1223
+ }
1224
+ export interface ConfigurationPolicySummary {
1225
+ Arn?: string;
1226
+ Id?: string;
1227
+ Name?: string;
1228
+ Description?: string;
1229
+ UpdatedAt?: Date;
1230
+ ServiceEnabled?: boolean;
1231
+ }
823
1232
  export declare const ControlFindingGenerator: {
824
1233
  readonly SECURITY_CONTROL: "SECURITY_CONTROL";
825
1234
  readonly STANDARD_CONTROL: "STANDARD_CONTROL";
@@ -856,6 +1265,51 @@ export interface CreateAutomationRuleRequest {
856
1265
  export interface CreateAutomationRuleResponse {
857
1266
  RuleArn?: string;
858
1267
  }
1268
+ export interface SecurityControlCustomParameter {
1269
+ SecurityControlId?: string;
1270
+ Parameters?: Record<string, ParameterConfiguration>;
1271
+ }
1272
+ export interface SecurityControlsConfiguration {
1273
+ EnabledSecurityControlIdentifiers?: string[];
1274
+ DisabledSecurityControlIdentifiers?: string[];
1275
+ SecurityControlCustomParameters?: SecurityControlCustomParameter[];
1276
+ }
1277
+ export interface SecurityHubPolicy {
1278
+ ServiceEnabled?: boolean;
1279
+ EnabledStandardIdentifiers?: string[];
1280
+ SecurityControlsConfiguration?: SecurityControlsConfiguration;
1281
+ }
1282
+ export type Policy = Policy.SecurityHubMember | Policy.$UnknownMember;
1283
+ export declare namespace Policy {
1284
+ interface SecurityHubMember {
1285
+ SecurityHub: SecurityHubPolicy;
1286
+ $unknown?: never;
1287
+ }
1288
+ interface $UnknownMember {
1289
+ SecurityHub?: never;
1290
+ $unknown: [string, any];
1291
+ }
1292
+ interface Visitor<T> {
1293
+ SecurityHub: (value: SecurityHubPolicy) => T;
1294
+ _: (name: string, value: any) => T;
1295
+ }
1296
+ const visit: <T>(value: Policy, visitor: Visitor<T>) => T;
1297
+ }
1298
+ export interface CreateConfigurationPolicyRequest {
1299
+ Name: string | undefined;
1300
+ Description?: string;
1301
+ ConfigurationPolicy: Policy | undefined;
1302
+ Tags?: Record<string, string>;
1303
+ }
1304
+ export interface CreateConfigurationPolicyResponse {
1305
+ Arn?: string;
1306
+ Id?: string;
1307
+ Name?: string;
1308
+ Description?: string;
1309
+ UpdatedAt?: Date;
1310
+ CreatedAt?: Date;
1311
+ ConfigurationPolicy?: Policy;
1312
+ }
859
1313
  export interface CreateFindingAggregatorRequest {
860
1314
  RegionLinkingMode: string | undefined;
861
1315
  Regions?: string[];
@@ -884,6 +1338,11 @@ export interface Result {
884
1338
  export interface CreateMembersResponse {
885
1339
  UnprocessedAccounts?: Result[];
886
1340
  }
1341
+ export declare const SecurityControlProperty: {
1342
+ readonly Parameters: "Parameters";
1343
+ };
1344
+ export type SecurityControlProperty =
1345
+ (typeof SecurityControlProperty)[keyof typeof SecurityControlProperty];
887
1346
  export interface DeclineInvitationsRequest {
888
1347
  AccountIds: string[] | undefined;
889
1348
  }
@@ -896,6 +1355,10 @@ export interface DeleteActionTargetRequest {
896
1355
  export interface DeleteActionTargetResponse {
897
1356
  ActionTargetArn: string | undefined;
898
1357
  }
1358
+ export interface DeleteConfigurationPolicyRequest {
1359
+ Identifier: string | undefined;
1360
+ }
1361
+ export interface DeleteConfigurationPolicyResponse {}
899
1362
  export interface DeleteFindingAggregatorRequest {
900
1363
  FindingAggregatorArn: string | undefined;
901
1364
  }
@@ -937,10 +1400,29 @@ export interface DescribeHubResponse {
937
1400
  ControlFindingGenerator?: ControlFindingGenerator;
938
1401
  }
939
1402
  export interface DescribeOrganizationConfigurationRequest {}
1403
+ export declare const OrganizationConfigurationConfigurationType: {
1404
+ readonly CENTRAL: "CENTRAL";
1405
+ readonly LOCAL: "LOCAL";
1406
+ };
1407
+ export type OrganizationConfigurationConfigurationType =
1408
+ (typeof OrganizationConfigurationConfigurationType)[keyof typeof OrganizationConfigurationConfigurationType];
1409
+ export declare const OrganizationConfigurationStatus: {
1410
+ readonly ENABLED: "ENABLED";
1411
+ readonly FAILED: "FAILED";
1412
+ readonly PENDING: "PENDING";
1413
+ };
1414
+ export type OrganizationConfigurationStatus =
1415
+ (typeof OrganizationConfigurationStatus)[keyof typeof OrganizationConfigurationStatus];
1416
+ export interface OrganizationConfiguration {
1417
+ ConfigurationType?: OrganizationConfigurationConfigurationType;
1418
+ Status?: OrganizationConfigurationStatus;
1419
+ StatusMessage?: string;
1420
+ }
940
1421
  export interface DescribeOrganizationConfigurationResponse {
941
1422
  AutoEnable?: boolean;
942
1423
  MemberAccountLimitReached?: boolean;
943
1424
  AutoEnableStandards?: AutoEnableStandards;
1425
+ OrganizationConfiguration?: OrganizationConfiguration;
944
1426
  }
945
1427
  export interface DescribeProductsRequest {
946
1428
  NextToken?: string;
@@ -1079,6 +1561,30 @@ export interface Invitation {
1079
1561
  export interface GetAdministratorAccountResponse {
1080
1562
  Administrator?: Invitation;
1081
1563
  }
1564
+ export interface GetConfigurationPolicyRequest {
1565
+ Identifier: string | undefined;
1566
+ }
1567
+ export interface GetConfigurationPolicyResponse {
1568
+ Arn?: string;
1569
+ Id?: string;
1570
+ Name?: string;
1571
+ Description?: string;
1572
+ UpdatedAt?: Date;
1573
+ CreatedAt?: Date;
1574
+ ConfigurationPolicy?: Policy;
1575
+ }
1576
+ export interface GetConfigurationPolicyAssociationRequest {
1577
+ Target: Target | undefined;
1578
+ }
1579
+ export interface GetConfigurationPolicyAssociationResponse {
1580
+ ConfigurationPolicyId?: string;
1581
+ TargetId?: string;
1582
+ TargetType?: TargetType;
1583
+ AssociationType?: AssociationType;
1584
+ UpdatedAt?: Date;
1585
+ AssociationStatus?: ConfigurationPolicyAssociationStatus;
1586
+ AssociationStatusMessage?: string;
1587
+ }
1082
1588
  export interface GetEnabledStandardsRequest {
1083
1589
  StandardsSubscriptionArns?: string[];
1084
1590
  NextToken?: string;
@@ -1181,6 +1687,32 @@ export interface GetMembersResponse {
1181
1687
  Members?: Member[];
1182
1688
  UnprocessedAccounts?: Result[];
1183
1689
  }
1690
+ export interface GetSecurityControlDefinitionRequest {
1691
+ SecurityControlId: string | undefined;
1692
+ }
1693
+ export declare const RegionAvailabilityStatus: {
1694
+ readonly AVAILABLE: "AVAILABLE";
1695
+ readonly UNAVAILABLE: "UNAVAILABLE";
1696
+ };
1697
+ export type RegionAvailabilityStatus =
1698
+ (typeof RegionAvailabilityStatus)[keyof typeof RegionAvailabilityStatus];
1699
+ export interface ParameterDefinition {
1700
+ Description: string | undefined;
1701
+ ConfigurationOptions: ConfigurationOptions | undefined;
1702
+ }
1703
+ export interface SecurityControlDefinition {
1704
+ SecurityControlId: string | undefined;
1705
+ Title: string | undefined;
1706
+ Description: string | undefined;
1707
+ RemediationUrl: string | undefined;
1708
+ SeverityRating: SeverityRating | undefined;
1709
+ CurrentRegionAvailability: RegionAvailabilityStatus | undefined;
1710
+ CustomizableProperties?: SecurityControlProperty[];
1711
+ ParameterDefinitions?: Record<string, ParameterDefinition>;
1712
+ }
1713
+ export interface GetSecurityControlDefinitionResponse {
1714
+ SecurityControlDefinition: SecurityControlDefinition | undefined;
1715
+ }
1184
1716
  export interface InviteMembersRequest {
1185
1717
  AccountIds: string[] | undefined;
1186
1718
  }
@@ -1195,6 +1727,23 @@ export interface ListAutomationRulesResponse {
1195
1727
  AutomationRulesMetadata?: AutomationRulesMetadata[];
1196
1728
  NextToken?: string;
1197
1729
  }
1730
+ export interface ListConfigurationPoliciesRequest {
1731
+ NextToken?: string;
1732
+ MaxResults?: number;
1733
+ }
1734
+ export interface ListConfigurationPoliciesResponse {
1735
+ ConfigurationPolicySummaries?: ConfigurationPolicySummary[];
1736
+ NextToken?: string;
1737
+ }
1738
+ export interface ListConfigurationPolicyAssociationsRequest {
1739
+ NextToken?: string;
1740
+ MaxResults?: number;
1741
+ Filters?: AssociationFilters;
1742
+ }
1743
+ export interface ListConfigurationPolicyAssociationsResponse {
1744
+ ConfigurationPolicyAssociationSummaries?: ConfigurationPolicyAssociationSummary[];
1745
+ NextToken?: string;
1746
+ }
1198
1747
  export interface ListEnabledProductsForImportRequest {
1199
1748
  NextToken?: string;
1200
1749
  MaxResults?: number;
@@ -1241,20 +1790,6 @@ export interface ListSecurityControlDefinitionsRequest {
1241
1790
  NextToken?: string;
1242
1791
  MaxResults?: number;
1243
1792
  }
1244
- export declare const RegionAvailabilityStatus: {
1245
- readonly AVAILABLE: "AVAILABLE";
1246
- readonly UNAVAILABLE: "UNAVAILABLE";
1247
- };
1248
- export type RegionAvailabilityStatus =
1249
- (typeof RegionAvailabilityStatus)[keyof typeof RegionAvailabilityStatus];
1250
- export interface SecurityControlDefinition {
1251
- SecurityControlId: string | undefined;
1252
- Title: string | undefined;
1253
- Description: string | undefined;
1254
- RemediationUrl: string | undefined;
1255
- SeverityRating: SeverityRating | undefined;
1256
- CurrentRegionAvailability: RegionAvailabilityStatus | undefined;
1257
- }
1258
1793
  export interface ListSecurityControlDefinitionsResponse {
1259
1794
  SecurityControlDefinitions: SecurityControlDefinition[] | undefined;
1260
1795
  NextToken?: string;
@@ -1287,6 +1822,33 @@ export interface ListTagsForResourceRequest {
1287
1822
  export interface ListTagsForResourceResponse {
1288
1823
  Tags?: Record<string, string>;
1289
1824
  }
1825
+ export declare class ResourceInUseException extends __BaseException {
1826
+ readonly name: "ResourceInUseException";
1827
+ readonly $fault: "client";
1828
+ Message?: string;
1829
+ Code?: string;
1830
+ constructor(
1831
+ opts: __ExceptionOptionType<ResourceInUseException, __BaseException>
1832
+ );
1833
+ }
1834
+ export interface StartConfigurationPolicyAssociationRequest {
1835
+ ConfigurationPolicyIdentifier: string | undefined;
1836
+ Target: Target | undefined;
1837
+ }
1838
+ export interface StartConfigurationPolicyAssociationResponse {
1839
+ ConfigurationPolicyId?: string;
1840
+ TargetId?: string;
1841
+ TargetType?: TargetType;
1842
+ AssociationType?: AssociationType;
1843
+ UpdatedAt?: Date;
1844
+ AssociationStatus?: ConfigurationPolicyAssociationStatus;
1845
+ AssociationStatusMessage?: string;
1846
+ }
1847
+ export interface StartConfigurationPolicyDisassociationRequest {
1848
+ Target?: Target;
1849
+ ConfigurationPolicyIdentifier: string | undefined;
1850
+ }
1851
+ export interface StartConfigurationPolicyDisassociationResponse {}
1290
1852
  export interface TagResourceRequest {
1291
1853
  ResourceArn: string | undefined;
1292
1854
  Tags: Record<string, string> | undefined;
@@ -1303,6 +1865,22 @@ export interface UpdateActionTargetRequest {
1303
1865
  Description?: string;
1304
1866
  }
1305
1867
  export interface UpdateActionTargetResponse {}
1868
+ export interface UpdateConfigurationPolicyRequest {
1869
+ Identifier: string | undefined;
1870
+ Name?: string;
1871
+ Description?: string;
1872
+ UpdatedReason?: string;
1873
+ ConfigurationPolicy?: Policy;
1874
+ }
1875
+ export interface UpdateConfigurationPolicyResponse {
1876
+ Arn?: string;
1877
+ Id?: string;
1878
+ Name?: string;
1879
+ Description?: string;
1880
+ UpdatedAt?: Date;
1881
+ CreatedAt?: Date;
1882
+ ConfigurationPolicy?: Policy;
1883
+ }
1306
1884
  export interface UpdateFindingAggregatorRequest {
1307
1885
  FindingAggregatorArn: string | undefined;
1308
1886
  RegionLinkingMode: string | undefined;
@@ -1330,8 +1908,15 @@ export interface UpdateInsightResponse {}
1330
1908
  export interface UpdateOrganizationConfigurationRequest {
1331
1909
  AutoEnable: boolean | undefined;
1332
1910
  AutoEnableStandards?: AutoEnableStandards;
1911
+ OrganizationConfiguration?: OrganizationConfiguration;
1333
1912
  }
1334
1913
  export interface UpdateOrganizationConfigurationResponse {}
1914
+ export interface UpdateSecurityControlRequest {
1915
+ SecurityControlId: string | undefined;
1916
+ Parameters: Record<string, ParameterConfiguration> | undefined;
1917
+ LastUpdateReason?: string;
1918
+ }
1919
+ export interface UpdateSecurityControlResponse {}
1335
1920
  export interface UpdateSecurityHubConfigurationRequest {
1336
1921
  AutoEnableControls?: boolean;
1337
1922
  ControlFindingGenerator?: ControlFindingGenerator;