@aws-sdk/client-securityhub 3.458.0 → 3.459.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (103) hide show
  1. package/README.md +80 -0
  2. package/dist-cjs/SecurityHub.js +20 -0
  3. package/dist-cjs/commands/BatchGetConfigurationPolicyAssociationsCommand.js +51 -0
  4. package/dist-cjs/commands/CreateConfigurationPolicyCommand.js +51 -0
  5. package/dist-cjs/commands/DeleteConfigurationPolicyCommand.js +51 -0
  6. package/dist-cjs/commands/GetConfigurationPolicyAssociationCommand.js +51 -0
  7. package/dist-cjs/commands/GetConfigurationPolicyCommand.js +51 -0
  8. package/dist-cjs/commands/ListConfigurationPoliciesCommand.js +51 -0
  9. package/dist-cjs/commands/ListConfigurationPolicyAssociationsCommand.js +51 -0
  10. package/dist-cjs/commands/StartConfigurationPolicyAssociationCommand.js +51 -0
  11. package/dist-cjs/commands/StartConfigurationPolicyDisassociationCommand.js +51 -0
  12. package/dist-cjs/commands/UpdateConfigurationPolicyCommand.js +51 -0
  13. package/dist-cjs/commands/index.js +10 -0
  14. package/dist-cjs/models/models_0.js +10 -1
  15. package/dist-cjs/models/models_2.js +34 -1
  16. package/dist-cjs/pagination/ListConfigurationPoliciesPaginator.js +29 -0
  17. package/dist-cjs/pagination/ListConfigurationPolicyAssociationsPaginator.js +29 -0
  18. package/dist-cjs/pagination/index.js +2 -0
  19. package/dist-cjs/protocols/Aws_restJson1.js +943 -35
  20. package/dist-es/SecurityHub.js +20 -0
  21. package/dist-es/commands/BatchGetConfigurationPolicyAssociationsCommand.js +47 -0
  22. package/dist-es/commands/CreateConfigurationPolicyCommand.js +47 -0
  23. package/dist-es/commands/DeleteConfigurationPolicyCommand.js +47 -0
  24. package/dist-es/commands/GetConfigurationPolicyAssociationCommand.js +47 -0
  25. package/dist-es/commands/GetConfigurationPolicyCommand.js +47 -0
  26. package/dist-es/commands/ListConfigurationPoliciesCommand.js +47 -0
  27. package/dist-es/commands/ListConfigurationPolicyAssociationsCommand.js +47 -0
  28. package/dist-es/commands/StartConfigurationPolicyAssociationCommand.js +47 -0
  29. package/dist-es/commands/StartConfigurationPolicyDisassociationCommand.js +47 -0
  30. package/dist-es/commands/UpdateConfigurationPolicyCommand.js +47 -0
  31. package/dist-es/commands/index.js +10 -0
  32. package/dist-es/models/models_0.js +9 -0
  33. package/dist-es/models/models_2.js +33 -0
  34. package/dist-es/pagination/ListConfigurationPoliciesPaginator.js +25 -0
  35. package/dist-es/pagination/ListConfigurationPolicyAssociationsPaginator.js +25 -0
  36. package/dist-es/pagination/index.js +2 -0
  37. package/dist-es/protocols/Aws_restJson1.js +920 -33
  38. package/dist-types/SecurityHub.d.ts +70 -0
  39. package/dist-types/SecurityHubClient.d.ts +12 -2
  40. package/dist-types/commands/BatchDisableStandardsCommand.d.ts +3 -0
  41. package/dist-types/commands/BatchEnableStandardsCommand.d.ts +3 -0
  42. package/dist-types/commands/BatchGetAutomationRulesCommand.d.ts +3 -0
  43. package/dist-types/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +128 -0
  44. package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +22 -2
  45. package/dist-types/commands/BatchImportFindingsCommand.d.ts +4 -0
  46. package/dist-types/commands/BatchUpdateAutomationRulesCommand.d.ts +3 -0
  47. package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +3 -0
  48. package/dist-types/commands/CreateAutomationRuleCommand.d.ts +3 -0
  49. package/dist-types/commands/CreateConfigurationPolicyCommand.d.ts +189 -0
  50. package/dist-types/commands/CreateInsightCommand.d.ts +3 -0
  51. package/dist-types/commands/CreateMembersCommand.d.ts +3 -0
  52. package/dist-types/commands/DeleteConfigurationPolicyCommand.d.ts +98 -0
  53. package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +7 -2
  54. package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +3 -0
  55. package/dist-types/commands/DisableSecurityHubCommand.d.ts +3 -0
  56. package/dist-types/commands/DisassociateMembersCommand.d.ts +3 -0
  57. package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +3 -0
  58. package/dist-types/commands/GetConfigurationPolicyAssociationCommand.d.ts +107 -0
  59. package/dist-types/commands/GetConfigurationPolicyCommand.d.ts +143 -0
  60. package/dist-types/commands/GetFindingsCommand.d.ts +7 -0
  61. package/dist-types/commands/GetInsightsCommand.d.ts +3 -0
  62. package/dist-types/commands/GetSecurityControlDefinitionCommand.d.ts +35 -0
  63. package/dist-types/commands/ListConfigurationPoliciesCommand.d.ts +104 -0
  64. package/dist-types/commands/ListConfigurationPolicyAssociationsCommand.d.ts +110 -0
  65. package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +6 -0
  66. package/dist-types/commands/StartConfigurationPolicyAssociationCommand.d.ts +108 -0
  67. package/dist-types/commands/StartConfigurationPolicyDisassociationCommand.d.ts +102 -0
  68. package/dist-types/commands/UpdateConfigurationPolicyCommand.d.ts +191 -0
  69. package/dist-types/commands/UpdateFindingsCommand.d.ts +3 -0
  70. package/dist-types/commands/UpdateInsightCommand.d.ts +3 -0
  71. package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +16 -2
  72. package/dist-types/commands/UpdateSecurityControlCommand.d.ts +23 -0
  73. package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +3 -0
  74. package/dist-types/commands/UpdateStandardsControlCommand.d.ts +3 -0
  75. package/dist-types/commands/index.d.ts +10 -0
  76. package/dist-types/models/models_0.d.ts +86 -192
  77. package/dist-types/models/models_1.d.ts +192 -49
  78. package/dist-types/models/models_2.d.ts +1180 -37
  79. package/dist-types/pagination/ListConfigurationPoliciesPaginator.d.ts +7 -0
  80. package/dist-types/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +7 -0
  81. package/dist-types/pagination/index.d.ts +2 -0
  82. package/dist-types/protocols/Aws_restJson1.d.ts +90 -0
  83. package/dist-types/ts3.4/SecurityHub.d.ts +200 -0
  84. package/dist-types/ts3.4/SecurityHubClient.d.ts +60 -0
  85. package/dist-types/ts3.4/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +42 -0
  86. package/dist-types/ts3.4/commands/CreateConfigurationPolicyCommand.d.ts +42 -0
  87. package/dist-types/ts3.4/commands/DeleteConfigurationPolicyCommand.d.ts +42 -0
  88. package/dist-types/ts3.4/commands/GetConfigurationPolicyAssociationCommand.d.ts +42 -0
  89. package/dist-types/ts3.4/commands/GetConfigurationPolicyCommand.d.ts +42 -0
  90. package/dist-types/ts3.4/commands/ListConfigurationPoliciesCommand.d.ts +42 -0
  91. package/dist-types/ts3.4/commands/ListConfigurationPolicyAssociationsCommand.d.ts +42 -0
  92. package/dist-types/ts3.4/commands/StartConfigurationPolicyAssociationCommand.d.ts +42 -0
  93. package/dist-types/ts3.4/commands/StartConfigurationPolicyDisassociationCommand.d.ts +42 -0
  94. package/dist-types/ts3.4/commands/UpdateConfigurationPolicyCommand.d.ts +42 -0
  95. package/dist-types/ts3.4/commands/index.d.ts +10 -0
  96. package/dist-types/ts3.4/models/models_0.d.ts +21 -26
  97. package/dist-types/ts3.4/models/models_1.d.ts +32 -9
  98. package/dist-types/ts3.4/models/models_2.d.ts +243 -4
  99. package/dist-types/ts3.4/pagination/ListConfigurationPoliciesPaginator.d.ts +11 -0
  100. package/dist-types/ts3.4/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +11 -0
  101. package/dist-types/ts3.4/pagination/index.d.ts +2 -0
  102. package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +120 -0
  103. package/package.json +1 -1
@@ -0,0 +1,191 @@
1
+ import { EndpointParameterInstructions } from "@smithy/middleware-endpoint";
2
+ import { Command as $Command } from "@smithy/smithy-client";
3
+ import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@smithy/types";
4
+ import { UpdateConfigurationPolicyRequest, UpdateConfigurationPolicyResponse } from "../models/models_2";
5
+ import { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
6
+ /**
7
+ * @public
8
+ */
9
+ export { __MetadataBearer, $Command };
10
+ /**
11
+ * @public
12
+ *
13
+ * The input for {@link UpdateConfigurationPolicyCommand}.
14
+ */
15
+ export interface UpdateConfigurationPolicyCommandInput extends UpdateConfigurationPolicyRequest {
16
+ }
17
+ /**
18
+ * @public
19
+ *
20
+ * The output of {@link UpdateConfigurationPolicyCommand}.
21
+ */
22
+ export interface UpdateConfigurationPolicyCommandOutput extends UpdateConfigurationPolicyResponse, __MetadataBearer {
23
+ }
24
+ /**
25
+ * @public
26
+ * <p>
27
+ * Updates a configuration policy. Only the Security Hub delegated
28
+ * administrator can invoke this operation from the home Region.
29
+ * </p>
30
+ * @example
31
+ * Use a bare-bones client and the command you need to make an API call.
32
+ * ```javascript
33
+ * import { SecurityHubClient, UpdateConfigurationPolicyCommand } from "@aws-sdk/client-securityhub"; // ES Modules import
34
+ * // const { SecurityHubClient, UpdateConfigurationPolicyCommand } = require("@aws-sdk/client-securityhub"); // CommonJS import
35
+ * const client = new SecurityHubClient(config);
36
+ * const input = { // UpdateConfigurationPolicyRequest
37
+ * Identifier: "STRING_VALUE", // required
38
+ * Name: "STRING_VALUE",
39
+ * Description: "STRING_VALUE",
40
+ * UpdatedReason: "STRING_VALUE",
41
+ * ConfigurationPolicy: { // Policy Union: only one key present
42
+ * SecurityHub: { // SecurityHubPolicy
43
+ * ServiceEnabled: true || false,
44
+ * EnabledStandardIdentifiers: [ // EnabledStandardIdentifierList
45
+ * "STRING_VALUE",
46
+ * ],
47
+ * SecurityControlsConfiguration: { // SecurityControlsConfiguration
48
+ * EnabledSecurityControlIdentifiers: [ // EnabledSecurityControlIdentifierList
49
+ * "STRING_VALUE",
50
+ * ],
51
+ * DisabledSecurityControlIdentifiers: [ // DisabledSecurityControlIdentifierList
52
+ * "STRING_VALUE",
53
+ * ],
54
+ * SecurityControlCustomParameters: [ // SecurityControlCustomParametersList
55
+ * { // SecurityControlCustomParameter
56
+ * SecurityControlId: "STRING_VALUE",
57
+ * Parameters: { // Parameters
58
+ * "<keys>": { // ParameterConfiguration
59
+ * ValueType: "DEFAULT" || "CUSTOM", // required
60
+ * Value: { // ParameterValue Union: only one key present
61
+ * Integer: Number("int"),
62
+ * IntegerList: [ // IntegerList
63
+ * Number("int"),
64
+ * ],
65
+ * Double: Number("double"),
66
+ * String: "STRING_VALUE",
67
+ * StringList: [ // StringList
68
+ * "STRING_VALUE",
69
+ * ],
70
+ * Boolean: true || false,
71
+ * Enum: "STRING_VALUE",
72
+ * EnumList: [
73
+ * "STRING_VALUE",
74
+ * ],
75
+ * },
76
+ * },
77
+ * },
78
+ * },
79
+ * ],
80
+ * },
81
+ * },
82
+ * },
83
+ * };
84
+ * const command = new UpdateConfigurationPolicyCommand(input);
85
+ * const response = await client.send(command);
86
+ * // { // UpdateConfigurationPolicyResponse
87
+ * // Arn: "STRING_VALUE",
88
+ * // Id: "STRING_VALUE",
89
+ * // Name: "STRING_VALUE",
90
+ * // Description: "STRING_VALUE",
91
+ * // UpdatedAt: new Date("TIMESTAMP"),
92
+ * // CreatedAt: new Date("TIMESTAMP"),
93
+ * // ConfigurationPolicy: { // Policy Union: only one key present
94
+ * // SecurityHub: { // SecurityHubPolicy
95
+ * // ServiceEnabled: true || false,
96
+ * // EnabledStandardIdentifiers: [ // EnabledStandardIdentifierList
97
+ * // "STRING_VALUE",
98
+ * // ],
99
+ * // SecurityControlsConfiguration: { // SecurityControlsConfiguration
100
+ * // EnabledSecurityControlIdentifiers: [ // EnabledSecurityControlIdentifierList
101
+ * // "STRING_VALUE",
102
+ * // ],
103
+ * // DisabledSecurityControlIdentifiers: [ // DisabledSecurityControlIdentifierList
104
+ * // "STRING_VALUE",
105
+ * // ],
106
+ * // SecurityControlCustomParameters: [ // SecurityControlCustomParametersList
107
+ * // { // SecurityControlCustomParameter
108
+ * // SecurityControlId: "STRING_VALUE",
109
+ * // Parameters: { // Parameters
110
+ * // "<keys>": { // ParameterConfiguration
111
+ * // ValueType: "DEFAULT" || "CUSTOM", // required
112
+ * // Value: { // ParameterValue Union: only one key present
113
+ * // Integer: Number("int"),
114
+ * // IntegerList: [ // IntegerList
115
+ * // Number("int"),
116
+ * // ],
117
+ * // Double: Number("double"),
118
+ * // String: "STRING_VALUE",
119
+ * // StringList: [ // StringList
120
+ * // "STRING_VALUE",
121
+ * // ],
122
+ * // Boolean: true || false,
123
+ * // Enum: "STRING_VALUE",
124
+ * // EnumList: [
125
+ * // "STRING_VALUE",
126
+ * // ],
127
+ * // },
128
+ * // },
129
+ * // },
130
+ * // },
131
+ * // ],
132
+ * // },
133
+ * // },
134
+ * // },
135
+ * // };
136
+ *
137
+ * ```
138
+ *
139
+ * @param UpdateConfigurationPolicyCommandInput - {@link UpdateConfigurationPolicyCommandInput}
140
+ * @returns {@link UpdateConfigurationPolicyCommandOutput}
141
+ * @see {@link UpdateConfigurationPolicyCommandInput} for command's `input` shape.
142
+ * @see {@link UpdateConfigurationPolicyCommandOutput} for command's `response` shape.
143
+ * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
144
+ *
145
+ * @throws {@link AccessDeniedException} (client fault)
146
+ * <p>You don't have permission to perform the action specified in the request.</p>
147
+ *
148
+ * @throws {@link InternalException} (server fault)
149
+ * <p>Internal server error.</p>
150
+ *
151
+ * @throws {@link InvalidAccessException} (client fault)
152
+ * <p>The account doesn't have permission to perform this action.</p>
153
+ *
154
+ * @throws {@link InvalidInputException} (client fault)
155
+ * <p>The request was rejected because you supplied an invalid or out-of-range value for an
156
+ * input parameter.</p>
157
+ *
158
+ * @throws {@link LimitExceededException} (client fault)
159
+ * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
160
+ * account or throttling limits. The error code describes the limit exceeded.</p>
161
+ *
162
+ * @throws {@link ResourceConflictException} (client fault)
163
+ * <p>The resource specified in the request conflicts with an existing resource.</p>
164
+ *
165
+ * @throws {@link ResourceNotFoundException} (client fault)
166
+ * <p>The request was rejected because we can't find the specified resource.</p>
167
+ *
168
+ * @throws {@link SecurityHubServiceException}
169
+ * <p>Base exception class for all service exceptions from SecurityHub service.</p>
170
+ *
171
+ */
172
+ export declare class UpdateConfigurationPolicyCommand extends $Command<UpdateConfigurationPolicyCommandInput, UpdateConfigurationPolicyCommandOutput, SecurityHubClientResolvedConfig> {
173
+ readonly input: UpdateConfigurationPolicyCommandInput;
174
+ static getEndpointParameterInstructions(): EndpointParameterInstructions;
175
+ /**
176
+ * @public
177
+ */
178
+ constructor(input: UpdateConfigurationPolicyCommandInput);
179
+ /**
180
+ * @internal
181
+ */
182
+ resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: SecurityHubClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateConfigurationPolicyCommandInput, UpdateConfigurationPolicyCommandOutput>;
183
+ /**
184
+ * @internal
185
+ */
186
+ private serialize;
187
+ /**
188
+ * @internal
189
+ */
190
+ private deserialize;
191
+ }
@@ -300,6 +300,9 @@ export interface UpdateFindingsCommandOutput extends UpdateFindingsResponse, __M
300
300
  * VulnerabilitiesFixAvailable: "<StringFilterList>",
301
301
  * ComplianceSecurityControlParametersName: "<StringFilterList>",
302
302
  * ComplianceSecurityControlParametersValue: "<StringFilterList>",
303
+ * AwsAccountName: "<StringFilterList>",
304
+ * ResourceApplicationName: "<StringFilterList>",
305
+ * ResourceApplicationArn: "<StringFilterList>",
303
306
  * },
304
307
  * Note: { // NoteUpdate
305
308
  * Text: "STRING_VALUE", // required
@@ -297,6 +297,9 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
297
297
  * VulnerabilitiesFixAvailable: "<StringFilterList>",
298
298
  * ComplianceSecurityControlParametersName: "<StringFilterList>",
299
299
  * ComplianceSecurityControlParametersValue: "<StringFilterList>",
300
+ * AwsAccountName: "<StringFilterList>",
301
+ * ResourceApplicationName: "<StringFilterList>",
302
+ * ResourceApplicationArn: "<StringFilterList>",
300
303
  * },
301
304
  * GroupByAttribute: "STRING_VALUE",
302
305
  * };
@@ -23,8 +23,8 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
23
23
  }
24
24
  /**
25
25
  * @public
26
- * <p>Used to update the configuration related to Organizations. Can only be called from a
27
- * Security Hub administrator account.</p>
26
+ * <p>Updates the configuration of your organization in Security Hub. Only the
27
+ * Security Hub administrator account can invoke this operation.</p>
28
28
  * @example
29
29
  * Use a bare-bones client and the command you need to make an API call.
30
30
  * ```javascript
@@ -34,6 +34,11 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
34
34
  * const input = { // UpdateOrganizationConfigurationRequest
35
35
  * AutoEnable: true || false, // required
36
36
  * AutoEnableStandards: "NONE" || "DEFAULT",
37
+ * OrganizationConfiguration: { // OrganizationConfiguration
38
+ * ConfigurationType: "CENTRAL" || "LOCAL",
39
+ * Status: "PENDING" || "ENABLED" || "FAILED",
40
+ * StatusMessage: "STRING_VALUE",
41
+ * },
37
42
  * };
38
43
  * const command = new UpdateOrganizationConfigurationCommand(input);
39
44
  * const response = await client.send(command);
@@ -47,6 +52,9 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
47
52
  * @see {@link UpdateOrganizationConfigurationCommandOutput} for command's `response` shape.
48
53
  * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
49
54
  *
55
+ * @throws {@link AccessDeniedException} (client fault)
56
+ * <p>You don't have permission to perform the action specified in the request.</p>
57
+ *
50
58
  * @throws {@link InternalException} (server fault)
51
59
  * <p>Internal server error.</p>
52
60
  *
@@ -61,6 +69,12 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
61
69
  * <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
62
70
  * account or throttling limits. The error code describes the limit exceeded.</p>
63
71
  *
72
+ * @throws {@link ResourceConflictException} (client fault)
73
+ * <p>The resource specified in the request conflicts with an existing resource.</p>
74
+ *
75
+ * @throws {@link ResourceNotFoundException} (client fault)
76
+ * <p>The request was rejected because we can't find the specified resource.</p>
77
+ *
64
78
  * @throws {@link SecurityHubServiceException}
65
79
  * <p>Base exception class for all service exceptions from SecurityHub service.</p>
66
80
  *
@@ -69,6 +69,9 @@ export interface UpdateSecurityControlCommandOutput extends UpdateSecurityContro
69
69
  * @see {@link UpdateSecurityControlCommandOutput} for command's `response` shape.
70
70
  * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
71
71
  *
72
+ * @throws {@link AccessDeniedException} (client fault)
73
+ * <p>You don't have permission to perform the action specified in the request.</p>
74
+ *
72
75
  * @throws {@link InternalException} (server fault)
73
76
  * <p>Internal server error.</p>
74
77
  *
@@ -95,6 +98,26 @@ export interface UpdateSecurityControlCommandOutput extends UpdateSecurityContro
95
98
  * @throws {@link SecurityHubServiceException}
96
99
  * <p>Base exception class for all service exceptions from SecurityHub service.</p>
97
100
  *
101
+ * @example To update security control properties
102
+ * ```javascript
103
+ * // The following example updates the specified security control. Specifically, this example updates control parameters.
104
+ * const input = {
105
+ * "LastUpdateReason": "Comply with internal requirements",
106
+ * "Parameters": {
107
+ * "maxCredentialUsageAge": {
108
+ * "Value": {
109
+ * "Integer": 15
110
+ * },
111
+ * "ValueType": "CUSTOM"
112
+ * }
113
+ * },
114
+ * "SecurityControlId": "ACM.1"
115
+ * };
116
+ * const command = new UpdateSecurityControlCommand(input);
117
+ * await client.send(command);
118
+ * // example id: to-update-security-control-properties-1699282942434
119
+ * ```
120
+ *
98
121
  */
99
122
  export declare class UpdateSecurityControlCommand extends $Command<UpdateSecurityControlCommandInput, UpdateSecurityControlCommandOutput, SecurityHubClientResolvedConfig> {
100
123
  readonly input: UpdateSecurityControlCommandInput;
@@ -46,6 +46,9 @@ export interface UpdateSecurityHubConfigurationCommandOutput extends UpdateSecur
46
46
  * @see {@link UpdateSecurityHubConfigurationCommandOutput} for command's `response` shape.
47
47
  * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
48
48
  *
49
+ * @throws {@link AccessDeniedException} (client fault)
50
+ * <p>You don't have permission to perform the action specified in the request.</p>
51
+ *
49
52
  * @throws {@link InternalException} (server fault)
50
53
  * <p>Internal server error.</p>
51
54
  *
@@ -48,6 +48,9 @@ export interface UpdateStandardsControlCommandOutput extends UpdateStandardsCont
48
48
  * @see {@link UpdateStandardsControlCommandOutput} for command's `response` shape.
49
49
  * @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
50
50
  *
51
+ * @throws {@link AccessDeniedException} (client fault)
52
+ * <p>You don't have permission to perform the action specified in the request.</p>
53
+ *
51
54
  * @throws {@link InternalException} (server fault)
52
55
  * <p>Internal server error.</p>
53
56
  *
@@ -4,6 +4,7 @@ export * from "./BatchDeleteAutomationRulesCommand";
4
4
  export * from "./BatchDisableStandardsCommand";
5
5
  export * from "./BatchEnableStandardsCommand";
6
6
  export * from "./BatchGetAutomationRulesCommand";
7
+ export * from "./BatchGetConfigurationPolicyAssociationsCommand";
7
8
  export * from "./BatchGetSecurityControlsCommand";
8
9
  export * from "./BatchGetStandardsControlAssociationsCommand";
9
10
  export * from "./BatchImportFindingsCommand";
@@ -12,11 +13,13 @@ export * from "./BatchUpdateFindingsCommand";
12
13
  export * from "./BatchUpdateStandardsControlAssociationsCommand";
13
14
  export * from "./CreateActionTargetCommand";
14
15
  export * from "./CreateAutomationRuleCommand";
16
+ export * from "./CreateConfigurationPolicyCommand";
15
17
  export * from "./CreateFindingAggregatorCommand";
16
18
  export * from "./CreateInsightCommand";
17
19
  export * from "./CreateMembersCommand";
18
20
  export * from "./DeclineInvitationsCommand";
19
21
  export * from "./DeleteActionTargetCommand";
22
+ export * from "./DeleteConfigurationPolicyCommand";
20
23
  export * from "./DeleteFindingAggregatorCommand";
21
24
  export * from "./DeleteInsightCommand";
22
25
  export * from "./DeleteInvitationsCommand";
@@ -37,6 +40,8 @@ export * from "./EnableImportFindingsForProductCommand";
37
40
  export * from "./EnableOrganizationAdminAccountCommand";
38
41
  export * from "./EnableSecurityHubCommand";
39
42
  export * from "./GetAdministratorAccountCommand";
43
+ export * from "./GetConfigurationPolicyAssociationCommand";
44
+ export * from "./GetConfigurationPolicyCommand";
40
45
  export * from "./GetEnabledStandardsCommand";
41
46
  export * from "./GetFindingAggregatorCommand";
42
47
  export * from "./GetFindingHistoryCommand";
@@ -49,6 +54,8 @@ export * from "./GetMembersCommand";
49
54
  export * from "./GetSecurityControlDefinitionCommand";
50
55
  export * from "./InviteMembersCommand";
51
56
  export * from "./ListAutomationRulesCommand";
57
+ export * from "./ListConfigurationPoliciesCommand";
58
+ export * from "./ListConfigurationPolicyAssociationsCommand";
52
59
  export * from "./ListEnabledProductsForImportCommand";
53
60
  export * from "./ListFindingAggregatorsCommand";
54
61
  export * from "./ListInvitationsCommand";
@@ -57,9 +64,12 @@ export * from "./ListOrganizationAdminAccountsCommand";
57
64
  export * from "./ListSecurityControlDefinitionsCommand";
58
65
  export * from "./ListStandardsControlAssociationsCommand";
59
66
  export * from "./ListTagsForResourceCommand";
67
+ export * from "./StartConfigurationPolicyAssociationCommand";
68
+ export * from "./StartConfigurationPolicyDisassociationCommand";
60
69
  export * from "./TagResourceCommand";
61
70
  export * from "./UntagResourceCommand";
62
71
  export * from "./UpdateActionTargetCommand";
72
+ export * from "./UpdateConfigurationPolicyCommand";
63
73
  export * from "./UpdateFindingAggregatorCommand";
64
74
  export * from "./UpdateFindingsCommand";
65
75
  export * from "./UpdateInsightCommand";
@@ -904,6 +904,62 @@ export interface AssociatedStandard {
904
904
  */
905
905
  StandardsId?: string;
906
906
  }
907
+ /**
908
+ * @public
909
+ * @enum
910
+ */
911
+ export declare const ConfigurationPolicyAssociationStatus: {
912
+ readonly FAILED: "FAILED";
913
+ readonly PENDING: "PENDING";
914
+ readonly SUCCESS: "SUCCESS";
915
+ };
916
+ /**
917
+ * @public
918
+ */
919
+ export type ConfigurationPolicyAssociationStatus = (typeof ConfigurationPolicyAssociationStatus)[keyof typeof ConfigurationPolicyAssociationStatus];
920
+ /**
921
+ * @public
922
+ * @enum
923
+ */
924
+ export declare const AssociationType: {
925
+ readonly APPLIED: "APPLIED";
926
+ readonly INHERITED: "INHERITED";
927
+ };
928
+ /**
929
+ * @public
930
+ */
931
+ export type AssociationType = (typeof AssociationType)[keyof typeof AssociationType];
932
+ /**
933
+ * @public
934
+ * <p>
935
+ * Options for filtering the <code>ListConfigurationPolicyAssociations</code> response. You can filter by the Amazon Resource Name (ARN) or
936
+ * universally unique identifier (UUID) of a configuration policy, <code>AssociationType</code>, or <code>AssociationStatus</code>.
937
+ * </p>
938
+ */
939
+ export interface AssociationFilters {
940
+ /**
941
+ * @public
942
+ * <p>
943
+ * The ARN or UUID of the configuration policy.
944
+ * </p>
945
+ */
946
+ ConfigurationPolicyId?: string;
947
+ /**
948
+ * @public
949
+ * <p>
950
+ * Indicates whether the association between a target and a configuration was directly applied by the
951
+ * Security Hub delegated administrator or inherited from a parent.
952
+ * </p>
953
+ */
954
+ AssociationType?: AssociationType;
955
+ /**
956
+ * @public
957
+ * <p>
958
+ * The current status of the association between a target and a configuration policy.
959
+ * </p>
960
+ */
961
+ AssociationStatus?: ConfigurationPolicyAssociationStatus;
962
+ }
907
963
  /**
908
964
  * @public
909
965
  * <p>
@@ -1314,7 +1370,7 @@ export interface AutomationRulesFindingFilters {
1314
1370
  ProductArn?: StringFilter[];
1315
1371
  /**
1316
1372
  * @public
1317
- * <p> The Amazon Web Services account ID in which a finding was generated. </p>
1373
+ * <p>The Amazon Web Services account ID in which a finding was generated.</p>
1318
1374
  * <p>
1319
1375
  * Array Members: Minimum number of 1 item. Maximum number of 100 items.
1320
1376
  * </p>
@@ -1678,6 +1734,35 @@ export interface AutomationRulesFindingFilters {
1678
1734
  * </p>
1679
1735
  */
1680
1736
  UserDefinedFields?: MapFilter[];
1737
+ /**
1738
+ * @public
1739
+ * <p>
1740
+ * The Amazon Resource Name (ARN) of the application that is related to a finding.
1741
+ * </p>
1742
+ * <p>
1743
+ * Array Members: Minimum number of 1 item. Maximum number of 20 items.
1744
+ * </p>
1745
+ */
1746
+ ResourceApplicationArn?: StringFilter[];
1747
+ /**
1748
+ * @public
1749
+ * <p>
1750
+ * The name of the application that is related to a finding.
1751
+ * </p>
1752
+ * <p>
1753
+ * Array Members: Minimum number of 1 item. Maximum number of 20 items.
1754
+ * </p>
1755
+ */
1756
+ ResourceApplicationName?: StringFilter[];
1757
+ /**
1758
+ * @public
1759
+ * <p>The name of the Amazon Web Services account in which a finding was generated.
1760
+ * </p>
1761
+ * <p>
1762
+ * Array Members: Minimum number of 1 item. Maximum number of 20 items.
1763
+ * </p>
1764
+ */
1765
+ AwsAccountName?: StringFilter[];
1681
1766
  }
1682
1767
  /**
1683
1768
  * @public
@@ -11288,194 +11373,3 @@ export interface AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails {
11288
11373
  */
11289
11374
  TransitEncryptionPort?: number;
11290
11375
  }
11291
- /**
11292
- * @public
11293
- * <p>Information about a bind mount host volume.</p>
11294
- */
11295
- export interface AwsEcsTaskDefinitionVolumesHostDetails {
11296
- /**
11297
- * @public
11298
- * <p>The path on the host container instance that is presented to the container.</p>
11299
- */
11300
- SourcePath?: string;
11301
- }
11302
- /**
11303
- * @public
11304
- * <p>A data volume to mount from another container.</p>
11305
- */
11306
- export interface AwsEcsTaskDefinitionVolumesDetails {
11307
- /**
11308
- * @public
11309
- * <p>Information about a Docker volume.</p>
11310
- */
11311
- DockerVolumeConfiguration?: AwsEcsTaskDefinitionVolumesDockerVolumeConfigurationDetails;
11312
- /**
11313
- * @public
11314
- * <p>Information about the Amazon Elastic File System file system that is used for task storage.</p>
11315
- */
11316
- EfsVolumeConfiguration?: AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails;
11317
- /**
11318
- * @public
11319
- * <p>Information about a bind mount host volume.</p>
11320
- */
11321
- Host?: AwsEcsTaskDefinitionVolumesHostDetails;
11322
- /**
11323
- * @public
11324
- * <p>The name of the data volume.</p>
11325
- */
11326
- Name?: string;
11327
- }
11328
- /**
11329
- * @public
11330
- * <p>Details about a task definition. A task definition describes the container and volume definitions
11331
- * of an Amazon Elastic Container Service task.</p>
11332
- */
11333
- export interface AwsEcsTaskDefinitionDetails {
11334
- /**
11335
- * @public
11336
- * <p>The container definitions that describe the containers that make up the task.</p>
11337
- */
11338
- ContainerDefinitions?: AwsEcsTaskDefinitionContainerDefinitionsDetails[];
11339
- /**
11340
- * @public
11341
- * <p>The number of CPU units used by the task.Valid values are as follows:</p>
11342
- * <ul>
11343
- * <li>
11344
- * <p>
11345
- * <code>256 (.25 vCPU)</code>
11346
- * </p>
11347
- * </li>
11348
- * <li>
11349
- * <p>
11350
- * <code>512 (.5 vCPU)</code>
11351
- * </p>
11352
- * </li>
11353
- * <li>
11354
- * <p>
11355
- * <code>1024 (1 vCPU)</code>
11356
- * </p>
11357
- * </li>
11358
- * <li>
11359
- * <p>
11360
- * <code>2048 (2 vCPU)</code>
11361
- * </p>
11362
- * </li>
11363
- * <li>
11364
- * <p>
11365
- * <code>4096 (4 vCPU)</code>
11366
- * </p>
11367
- * </li>
11368
- * </ul>
11369
- */
11370
- Cpu?: string;
11371
- /**
11372
- * @public
11373
- * <p>The ARN of the task execution role that grants the container agent permission to make API calls on behalf of the container user.</p>
11374
- */
11375
- ExecutionRoleArn?: string;
11376
- /**
11377
- * @public
11378
- * <p>The name of a family that this task definition is registered to.</p>
11379
- */
11380
- Family?: string;
11381
- /**
11382
- * @public
11383
- * <p>The Elastic Inference accelerators to use for the containers in the task.</p>
11384
- */
11385
- InferenceAccelerators?: AwsEcsTaskDefinitionInferenceAcceleratorsDetails[];
11386
- /**
11387
- * @public
11388
- * <p>The inter-process communication (IPC) resource namespace to use for the containers in the task. Valid values are as follows:</p>
11389
- * <ul>
11390
- * <li>
11391
- * <p>
11392
- * <code>host</code>
11393
- * </p>
11394
- * </li>
11395
- * <li>
11396
- * <p>
11397
- * <code>none</code>
11398
- * </p>
11399
- * </li>
11400
- * <li>
11401
- * <p>
11402
- * <code>task</code>
11403
- * </p>
11404
- * </li>
11405
- * </ul>
11406
- */
11407
- IpcMode?: string;
11408
- /**
11409
- * @public
11410
- * <p>The amount (in MiB) of memory used by the task. </p>
11411
- * <p>For tasks that are hosted on Amazon EC2, you can provide a task-level memory value or a container-level memory value.
11412
- * For tasks that are hosted on Fargate, you must use one of the <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size">specified values</a> in the <i>
11413
- * <i>Amazon Elastic Container Service Developer Guide</i>
11414
- * </i>, which determines your range of supported values for the <code>Cpu</code> and <code>Memory</code> parameters.</p>
11415
- */
11416
- Memory?: string;
11417
- /**
11418
- * @public
11419
- * <p>The Docker networking mode to use for the containers in the task. Valid values are as follows:</p>
11420
- * <ul>
11421
- * <li>
11422
- * <p>
11423
- * <code>awsvpc</code>
11424
- * </p>
11425
- * </li>
11426
- * <li>
11427
- * <p>
11428
- * <code>bridge</code>
11429
- * </p>
11430
- * </li>
11431
- * <li>
11432
- * <p>
11433
- * <code>host</code>
11434
- * </p>
11435
- * </li>
11436
- * <li>
11437
- * <p>
11438
- * <code>none</code>
11439
- * </p>
11440
- * </li>
11441
- * </ul>
11442
- */
11443
- NetworkMode?: string;
11444
- /**
11445
- * @public
11446
- * <p>The process namespace to use for the containers in the task. Valid values are <code>host</code> or <code>task</code>.</p>
11447
- */
11448
- PidMode?: string;
11449
- /**
11450
- * @public
11451
- * <p>The placement constraint objects to use for tasks.</p>
11452
- */
11453
- PlacementConstraints?: AwsEcsTaskDefinitionPlacementConstraintsDetails[];
11454
- /**
11455
- * @public
11456
- * <p>The configuration details for the App Mesh proxy.</p>
11457
- */
11458
- ProxyConfiguration?: AwsEcsTaskDefinitionProxyConfigurationDetails;
11459
- /**
11460
- * @public
11461
- * <p>The task launch types that the task definition was validated against.</p>
11462
- */
11463
- RequiresCompatibilities?: string[];
11464
- /**
11465
- * @public
11466
- * <p>The short name or ARN of the IAM role that grants containers in the task permission to call Amazon Web Services API operations on your behalf.</p>
11467
- */
11468
- TaskRoleArn?: string;
11469
- /**
11470
- * @public
11471
- * <p>The data volume definitions for the task.</p>
11472
- */
11473
- Volumes?: AwsEcsTaskDefinitionVolumesDetails[];
11474
- /**
11475
- * @public
11476
- * <p>
11477
- * The status of the task definition.
11478
- * </p>
11479
- */
11480
- Status?: string;
11481
- }