@aws-sdk/client-securityhub 3.458.0 → 3.459.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +80 -0
- package/dist-cjs/SecurityHub.js +20 -0
- package/dist-cjs/commands/BatchGetConfigurationPolicyAssociationsCommand.js +51 -0
- package/dist-cjs/commands/CreateConfigurationPolicyCommand.js +51 -0
- package/dist-cjs/commands/DeleteConfigurationPolicyCommand.js +51 -0
- package/dist-cjs/commands/GetConfigurationPolicyAssociationCommand.js +51 -0
- package/dist-cjs/commands/GetConfigurationPolicyCommand.js +51 -0
- package/dist-cjs/commands/ListConfigurationPoliciesCommand.js +51 -0
- package/dist-cjs/commands/ListConfigurationPolicyAssociationsCommand.js +51 -0
- package/dist-cjs/commands/StartConfigurationPolicyAssociationCommand.js +51 -0
- package/dist-cjs/commands/StartConfigurationPolicyDisassociationCommand.js +51 -0
- package/dist-cjs/commands/UpdateConfigurationPolicyCommand.js +51 -0
- package/dist-cjs/commands/index.js +10 -0
- package/dist-cjs/models/models_0.js +10 -1
- package/dist-cjs/models/models_2.js +34 -1
- package/dist-cjs/pagination/ListConfigurationPoliciesPaginator.js +29 -0
- package/dist-cjs/pagination/ListConfigurationPolicyAssociationsPaginator.js +29 -0
- package/dist-cjs/pagination/index.js +2 -0
- package/dist-cjs/protocols/Aws_restJson1.js +943 -35
- package/dist-es/SecurityHub.js +20 -0
- package/dist-es/commands/BatchGetConfigurationPolicyAssociationsCommand.js +47 -0
- package/dist-es/commands/CreateConfigurationPolicyCommand.js +47 -0
- package/dist-es/commands/DeleteConfigurationPolicyCommand.js +47 -0
- package/dist-es/commands/GetConfigurationPolicyAssociationCommand.js +47 -0
- package/dist-es/commands/GetConfigurationPolicyCommand.js +47 -0
- package/dist-es/commands/ListConfigurationPoliciesCommand.js +47 -0
- package/dist-es/commands/ListConfigurationPolicyAssociationsCommand.js +47 -0
- package/dist-es/commands/StartConfigurationPolicyAssociationCommand.js +47 -0
- package/dist-es/commands/StartConfigurationPolicyDisassociationCommand.js +47 -0
- package/dist-es/commands/UpdateConfigurationPolicyCommand.js +47 -0
- package/dist-es/commands/index.js +10 -0
- package/dist-es/models/models_0.js +9 -0
- package/dist-es/models/models_2.js +33 -0
- package/dist-es/pagination/ListConfigurationPoliciesPaginator.js +25 -0
- package/dist-es/pagination/ListConfigurationPolicyAssociationsPaginator.js +25 -0
- package/dist-es/pagination/index.js +2 -0
- package/dist-es/protocols/Aws_restJson1.js +920 -33
- package/dist-types/SecurityHub.d.ts +70 -0
- package/dist-types/SecurityHubClient.d.ts +12 -2
- package/dist-types/commands/BatchDisableStandardsCommand.d.ts +3 -0
- package/dist-types/commands/BatchEnableStandardsCommand.d.ts +3 -0
- package/dist-types/commands/BatchGetAutomationRulesCommand.d.ts +3 -0
- package/dist-types/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +128 -0
- package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +22 -2
- package/dist-types/commands/BatchImportFindingsCommand.d.ts +4 -0
- package/dist-types/commands/BatchUpdateAutomationRulesCommand.d.ts +3 -0
- package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +3 -0
- package/dist-types/commands/CreateAutomationRuleCommand.d.ts +3 -0
- package/dist-types/commands/CreateConfigurationPolicyCommand.d.ts +189 -0
- package/dist-types/commands/CreateInsightCommand.d.ts +3 -0
- package/dist-types/commands/CreateMembersCommand.d.ts +3 -0
- package/dist-types/commands/DeleteConfigurationPolicyCommand.d.ts +98 -0
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +7 -2
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +3 -0
- package/dist-types/commands/DisableSecurityHubCommand.d.ts +3 -0
- package/dist-types/commands/DisassociateMembersCommand.d.ts +3 -0
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +3 -0
- package/dist-types/commands/GetConfigurationPolicyAssociationCommand.d.ts +107 -0
- package/dist-types/commands/GetConfigurationPolicyCommand.d.ts +143 -0
- package/dist-types/commands/GetFindingsCommand.d.ts +7 -0
- package/dist-types/commands/GetInsightsCommand.d.ts +3 -0
- package/dist-types/commands/GetSecurityControlDefinitionCommand.d.ts +35 -0
- package/dist-types/commands/ListConfigurationPoliciesCommand.d.ts +104 -0
- package/dist-types/commands/ListConfigurationPolicyAssociationsCommand.d.ts +110 -0
- package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +6 -0
- package/dist-types/commands/StartConfigurationPolicyAssociationCommand.d.ts +108 -0
- package/dist-types/commands/StartConfigurationPolicyDisassociationCommand.d.ts +102 -0
- package/dist-types/commands/UpdateConfigurationPolicyCommand.d.ts +191 -0
- package/dist-types/commands/UpdateFindingsCommand.d.ts +3 -0
- package/dist-types/commands/UpdateInsightCommand.d.ts +3 -0
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +16 -2
- package/dist-types/commands/UpdateSecurityControlCommand.d.ts +23 -0
- package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +3 -0
- package/dist-types/commands/UpdateStandardsControlCommand.d.ts +3 -0
- package/dist-types/commands/index.d.ts +10 -0
- package/dist-types/models/models_0.d.ts +86 -192
- package/dist-types/models/models_1.d.ts +192 -49
- package/dist-types/models/models_2.d.ts +1180 -37
- package/dist-types/pagination/ListConfigurationPoliciesPaginator.d.ts +7 -0
- package/dist-types/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +7 -0
- package/dist-types/pagination/index.d.ts +2 -0
- package/dist-types/protocols/Aws_restJson1.d.ts +90 -0
- package/dist-types/ts3.4/SecurityHub.d.ts +200 -0
- package/dist-types/ts3.4/SecurityHubClient.d.ts +60 -0
- package/dist-types/ts3.4/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/CreateConfigurationPolicyCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/DeleteConfigurationPolicyCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/GetConfigurationPolicyAssociationCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/GetConfigurationPolicyCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/ListConfigurationPoliciesCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/ListConfigurationPolicyAssociationsCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/StartConfigurationPolicyAssociationCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/StartConfigurationPolicyDisassociationCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/UpdateConfigurationPolicyCommand.d.ts +42 -0
- package/dist-types/ts3.4/commands/index.d.ts +10 -0
- package/dist-types/ts3.4/models/models_0.d.ts +21 -26
- package/dist-types/ts3.4/models/models_1.d.ts +32 -9
- package/dist-types/ts3.4/models/models_2.d.ts +243 -4
- package/dist-types/ts3.4/pagination/ListConfigurationPoliciesPaginator.d.ts +11 -0
- package/dist-types/ts3.4/pagination/ListConfigurationPolicyAssociationsPaginator.d.ts +11 -0
- package/dist-types/ts3.4/pagination/index.d.ts +2 -0
- package/dist-types/ts3.4/protocols/Aws_restJson1.d.ts +120 -0
- package/package.json +1 -1
|
@@ -0,0 +1,191 @@
|
|
|
1
|
+
import { EndpointParameterInstructions } from "@smithy/middleware-endpoint";
|
|
2
|
+
import { Command as $Command } from "@smithy/smithy-client";
|
|
3
|
+
import { Handler, HttpHandlerOptions as __HttpHandlerOptions, MetadataBearer as __MetadataBearer, MiddlewareStack } from "@smithy/types";
|
|
4
|
+
import { UpdateConfigurationPolicyRequest, UpdateConfigurationPolicyResponse } from "../models/models_2";
|
|
5
|
+
import { SecurityHubClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../SecurityHubClient";
|
|
6
|
+
/**
|
|
7
|
+
* @public
|
|
8
|
+
*/
|
|
9
|
+
export { __MetadataBearer, $Command };
|
|
10
|
+
/**
|
|
11
|
+
* @public
|
|
12
|
+
*
|
|
13
|
+
* The input for {@link UpdateConfigurationPolicyCommand}.
|
|
14
|
+
*/
|
|
15
|
+
export interface UpdateConfigurationPolicyCommandInput extends UpdateConfigurationPolicyRequest {
|
|
16
|
+
}
|
|
17
|
+
/**
|
|
18
|
+
* @public
|
|
19
|
+
*
|
|
20
|
+
* The output of {@link UpdateConfigurationPolicyCommand}.
|
|
21
|
+
*/
|
|
22
|
+
export interface UpdateConfigurationPolicyCommandOutput extends UpdateConfigurationPolicyResponse, __MetadataBearer {
|
|
23
|
+
}
|
|
24
|
+
/**
|
|
25
|
+
* @public
|
|
26
|
+
* <p>
|
|
27
|
+
* Updates a configuration policy. Only the Security Hub delegated
|
|
28
|
+
* administrator can invoke this operation from the home Region.
|
|
29
|
+
* </p>
|
|
30
|
+
* @example
|
|
31
|
+
* Use a bare-bones client and the command you need to make an API call.
|
|
32
|
+
* ```javascript
|
|
33
|
+
* import { SecurityHubClient, UpdateConfigurationPolicyCommand } from "@aws-sdk/client-securityhub"; // ES Modules import
|
|
34
|
+
* // const { SecurityHubClient, UpdateConfigurationPolicyCommand } = require("@aws-sdk/client-securityhub"); // CommonJS import
|
|
35
|
+
* const client = new SecurityHubClient(config);
|
|
36
|
+
* const input = { // UpdateConfigurationPolicyRequest
|
|
37
|
+
* Identifier: "STRING_VALUE", // required
|
|
38
|
+
* Name: "STRING_VALUE",
|
|
39
|
+
* Description: "STRING_VALUE",
|
|
40
|
+
* UpdatedReason: "STRING_VALUE",
|
|
41
|
+
* ConfigurationPolicy: { // Policy Union: only one key present
|
|
42
|
+
* SecurityHub: { // SecurityHubPolicy
|
|
43
|
+
* ServiceEnabled: true || false,
|
|
44
|
+
* EnabledStandardIdentifiers: [ // EnabledStandardIdentifierList
|
|
45
|
+
* "STRING_VALUE",
|
|
46
|
+
* ],
|
|
47
|
+
* SecurityControlsConfiguration: { // SecurityControlsConfiguration
|
|
48
|
+
* EnabledSecurityControlIdentifiers: [ // EnabledSecurityControlIdentifierList
|
|
49
|
+
* "STRING_VALUE",
|
|
50
|
+
* ],
|
|
51
|
+
* DisabledSecurityControlIdentifiers: [ // DisabledSecurityControlIdentifierList
|
|
52
|
+
* "STRING_VALUE",
|
|
53
|
+
* ],
|
|
54
|
+
* SecurityControlCustomParameters: [ // SecurityControlCustomParametersList
|
|
55
|
+
* { // SecurityControlCustomParameter
|
|
56
|
+
* SecurityControlId: "STRING_VALUE",
|
|
57
|
+
* Parameters: { // Parameters
|
|
58
|
+
* "<keys>": { // ParameterConfiguration
|
|
59
|
+
* ValueType: "DEFAULT" || "CUSTOM", // required
|
|
60
|
+
* Value: { // ParameterValue Union: only one key present
|
|
61
|
+
* Integer: Number("int"),
|
|
62
|
+
* IntegerList: [ // IntegerList
|
|
63
|
+
* Number("int"),
|
|
64
|
+
* ],
|
|
65
|
+
* Double: Number("double"),
|
|
66
|
+
* String: "STRING_VALUE",
|
|
67
|
+
* StringList: [ // StringList
|
|
68
|
+
* "STRING_VALUE",
|
|
69
|
+
* ],
|
|
70
|
+
* Boolean: true || false,
|
|
71
|
+
* Enum: "STRING_VALUE",
|
|
72
|
+
* EnumList: [
|
|
73
|
+
* "STRING_VALUE",
|
|
74
|
+
* ],
|
|
75
|
+
* },
|
|
76
|
+
* },
|
|
77
|
+
* },
|
|
78
|
+
* },
|
|
79
|
+
* ],
|
|
80
|
+
* },
|
|
81
|
+
* },
|
|
82
|
+
* },
|
|
83
|
+
* };
|
|
84
|
+
* const command = new UpdateConfigurationPolicyCommand(input);
|
|
85
|
+
* const response = await client.send(command);
|
|
86
|
+
* // { // UpdateConfigurationPolicyResponse
|
|
87
|
+
* // Arn: "STRING_VALUE",
|
|
88
|
+
* // Id: "STRING_VALUE",
|
|
89
|
+
* // Name: "STRING_VALUE",
|
|
90
|
+
* // Description: "STRING_VALUE",
|
|
91
|
+
* // UpdatedAt: new Date("TIMESTAMP"),
|
|
92
|
+
* // CreatedAt: new Date("TIMESTAMP"),
|
|
93
|
+
* // ConfigurationPolicy: { // Policy Union: only one key present
|
|
94
|
+
* // SecurityHub: { // SecurityHubPolicy
|
|
95
|
+
* // ServiceEnabled: true || false,
|
|
96
|
+
* // EnabledStandardIdentifiers: [ // EnabledStandardIdentifierList
|
|
97
|
+
* // "STRING_VALUE",
|
|
98
|
+
* // ],
|
|
99
|
+
* // SecurityControlsConfiguration: { // SecurityControlsConfiguration
|
|
100
|
+
* // EnabledSecurityControlIdentifiers: [ // EnabledSecurityControlIdentifierList
|
|
101
|
+
* // "STRING_VALUE",
|
|
102
|
+
* // ],
|
|
103
|
+
* // DisabledSecurityControlIdentifiers: [ // DisabledSecurityControlIdentifierList
|
|
104
|
+
* // "STRING_VALUE",
|
|
105
|
+
* // ],
|
|
106
|
+
* // SecurityControlCustomParameters: [ // SecurityControlCustomParametersList
|
|
107
|
+
* // { // SecurityControlCustomParameter
|
|
108
|
+
* // SecurityControlId: "STRING_VALUE",
|
|
109
|
+
* // Parameters: { // Parameters
|
|
110
|
+
* // "<keys>": { // ParameterConfiguration
|
|
111
|
+
* // ValueType: "DEFAULT" || "CUSTOM", // required
|
|
112
|
+
* // Value: { // ParameterValue Union: only one key present
|
|
113
|
+
* // Integer: Number("int"),
|
|
114
|
+
* // IntegerList: [ // IntegerList
|
|
115
|
+
* // Number("int"),
|
|
116
|
+
* // ],
|
|
117
|
+
* // Double: Number("double"),
|
|
118
|
+
* // String: "STRING_VALUE",
|
|
119
|
+
* // StringList: [ // StringList
|
|
120
|
+
* // "STRING_VALUE",
|
|
121
|
+
* // ],
|
|
122
|
+
* // Boolean: true || false,
|
|
123
|
+
* // Enum: "STRING_VALUE",
|
|
124
|
+
* // EnumList: [
|
|
125
|
+
* // "STRING_VALUE",
|
|
126
|
+
* // ],
|
|
127
|
+
* // },
|
|
128
|
+
* // },
|
|
129
|
+
* // },
|
|
130
|
+
* // },
|
|
131
|
+
* // ],
|
|
132
|
+
* // },
|
|
133
|
+
* // },
|
|
134
|
+
* // },
|
|
135
|
+
* // };
|
|
136
|
+
*
|
|
137
|
+
* ```
|
|
138
|
+
*
|
|
139
|
+
* @param UpdateConfigurationPolicyCommandInput - {@link UpdateConfigurationPolicyCommandInput}
|
|
140
|
+
* @returns {@link UpdateConfigurationPolicyCommandOutput}
|
|
141
|
+
* @see {@link UpdateConfigurationPolicyCommandInput} for command's `input` shape.
|
|
142
|
+
* @see {@link UpdateConfigurationPolicyCommandOutput} for command's `response` shape.
|
|
143
|
+
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
144
|
+
*
|
|
145
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
146
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
147
|
+
*
|
|
148
|
+
* @throws {@link InternalException} (server fault)
|
|
149
|
+
* <p>Internal server error.</p>
|
|
150
|
+
*
|
|
151
|
+
* @throws {@link InvalidAccessException} (client fault)
|
|
152
|
+
* <p>The account doesn't have permission to perform this action.</p>
|
|
153
|
+
*
|
|
154
|
+
* @throws {@link InvalidInputException} (client fault)
|
|
155
|
+
* <p>The request was rejected because you supplied an invalid or out-of-range value for an
|
|
156
|
+
* input parameter.</p>
|
|
157
|
+
*
|
|
158
|
+
* @throws {@link LimitExceededException} (client fault)
|
|
159
|
+
* <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
|
|
160
|
+
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
161
|
+
*
|
|
162
|
+
* @throws {@link ResourceConflictException} (client fault)
|
|
163
|
+
* <p>The resource specified in the request conflicts with an existing resource.</p>
|
|
164
|
+
*
|
|
165
|
+
* @throws {@link ResourceNotFoundException} (client fault)
|
|
166
|
+
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
167
|
+
*
|
|
168
|
+
* @throws {@link SecurityHubServiceException}
|
|
169
|
+
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
170
|
+
*
|
|
171
|
+
*/
|
|
172
|
+
export declare class UpdateConfigurationPolicyCommand extends $Command<UpdateConfigurationPolicyCommandInput, UpdateConfigurationPolicyCommandOutput, SecurityHubClientResolvedConfig> {
|
|
173
|
+
readonly input: UpdateConfigurationPolicyCommandInput;
|
|
174
|
+
static getEndpointParameterInstructions(): EndpointParameterInstructions;
|
|
175
|
+
/**
|
|
176
|
+
* @public
|
|
177
|
+
*/
|
|
178
|
+
constructor(input: UpdateConfigurationPolicyCommandInput);
|
|
179
|
+
/**
|
|
180
|
+
* @internal
|
|
181
|
+
*/
|
|
182
|
+
resolveMiddleware(clientStack: MiddlewareStack<ServiceInputTypes, ServiceOutputTypes>, configuration: SecurityHubClientResolvedConfig, options?: __HttpHandlerOptions): Handler<UpdateConfigurationPolicyCommandInput, UpdateConfigurationPolicyCommandOutput>;
|
|
183
|
+
/**
|
|
184
|
+
* @internal
|
|
185
|
+
*/
|
|
186
|
+
private serialize;
|
|
187
|
+
/**
|
|
188
|
+
* @internal
|
|
189
|
+
*/
|
|
190
|
+
private deserialize;
|
|
191
|
+
}
|
|
@@ -300,6 +300,9 @@ export interface UpdateFindingsCommandOutput extends UpdateFindingsResponse, __M
|
|
|
300
300
|
* VulnerabilitiesFixAvailable: "<StringFilterList>",
|
|
301
301
|
* ComplianceSecurityControlParametersName: "<StringFilterList>",
|
|
302
302
|
* ComplianceSecurityControlParametersValue: "<StringFilterList>",
|
|
303
|
+
* AwsAccountName: "<StringFilterList>",
|
|
304
|
+
* ResourceApplicationName: "<StringFilterList>",
|
|
305
|
+
* ResourceApplicationArn: "<StringFilterList>",
|
|
303
306
|
* },
|
|
304
307
|
* Note: { // NoteUpdate
|
|
305
308
|
* Text: "STRING_VALUE", // required
|
|
@@ -297,6 +297,9 @@ export interface UpdateInsightCommandOutput extends UpdateInsightResponse, __Met
|
|
|
297
297
|
* VulnerabilitiesFixAvailable: "<StringFilterList>",
|
|
298
298
|
* ComplianceSecurityControlParametersName: "<StringFilterList>",
|
|
299
299
|
* ComplianceSecurityControlParametersValue: "<StringFilterList>",
|
|
300
|
+
* AwsAccountName: "<StringFilterList>",
|
|
301
|
+
* ResourceApplicationName: "<StringFilterList>",
|
|
302
|
+
* ResourceApplicationArn: "<StringFilterList>",
|
|
300
303
|
* },
|
|
301
304
|
* GroupByAttribute: "STRING_VALUE",
|
|
302
305
|
* };
|
|
@@ -23,8 +23,8 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
23
23
|
}
|
|
24
24
|
/**
|
|
25
25
|
* @public
|
|
26
|
-
* <p>
|
|
27
|
-
* Security Hub administrator account.</p>
|
|
26
|
+
* <p>Updates the configuration of your organization in Security Hub. Only the
|
|
27
|
+
* Security Hub administrator account can invoke this operation.</p>
|
|
28
28
|
* @example
|
|
29
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
30
|
* ```javascript
|
|
@@ -34,6 +34,11 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
34
34
|
* const input = { // UpdateOrganizationConfigurationRequest
|
|
35
35
|
* AutoEnable: true || false, // required
|
|
36
36
|
* AutoEnableStandards: "NONE" || "DEFAULT",
|
|
37
|
+
* OrganizationConfiguration: { // OrganizationConfiguration
|
|
38
|
+
* ConfigurationType: "CENTRAL" || "LOCAL",
|
|
39
|
+
* Status: "PENDING" || "ENABLED" || "FAILED",
|
|
40
|
+
* StatusMessage: "STRING_VALUE",
|
|
41
|
+
* },
|
|
37
42
|
* };
|
|
38
43
|
* const command = new UpdateOrganizationConfigurationCommand(input);
|
|
39
44
|
* const response = await client.send(command);
|
|
@@ -47,6 +52,9 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
47
52
|
* @see {@link UpdateOrganizationConfigurationCommandOutput} for command's `response` shape.
|
|
48
53
|
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
49
54
|
*
|
|
55
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
56
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
57
|
+
*
|
|
50
58
|
* @throws {@link InternalException} (server fault)
|
|
51
59
|
* <p>Internal server error.</p>
|
|
52
60
|
*
|
|
@@ -61,6 +69,12 @@ export interface UpdateOrganizationConfigurationCommandOutput extends UpdateOrga
|
|
|
61
69
|
* <p>The request was rejected because it attempted to create resources beyond the current Amazon Web Services
|
|
62
70
|
* account or throttling limits. The error code describes the limit exceeded.</p>
|
|
63
71
|
*
|
|
72
|
+
* @throws {@link ResourceConflictException} (client fault)
|
|
73
|
+
* <p>The resource specified in the request conflicts with an existing resource.</p>
|
|
74
|
+
*
|
|
75
|
+
* @throws {@link ResourceNotFoundException} (client fault)
|
|
76
|
+
* <p>The request was rejected because we can't find the specified resource.</p>
|
|
77
|
+
*
|
|
64
78
|
* @throws {@link SecurityHubServiceException}
|
|
65
79
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
66
80
|
*
|
|
@@ -69,6 +69,9 @@ export interface UpdateSecurityControlCommandOutput extends UpdateSecurityContro
|
|
|
69
69
|
* @see {@link UpdateSecurityControlCommandOutput} for command's `response` shape.
|
|
70
70
|
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
71
71
|
*
|
|
72
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
73
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
74
|
+
*
|
|
72
75
|
* @throws {@link InternalException} (server fault)
|
|
73
76
|
* <p>Internal server error.</p>
|
|
74
77
|
*
|
|
@@ -95,6 +98,26 @@ export interface UpdateSecurityControlCommandOutput extends UpdateSecurityContro
|
|
|
95
98
|
* @throws {@link SecurityHubServiceException}
|
|
96
99
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
97
100
|
*
|
|
101
|
+
* @example To update security control properties
|
|
102
|
+
* ```javascript
|
|
103
|
+
* // The following example updates the specified security control. Specifically, this example updates control parameters.
|
|
104
|
+
* const input = {
|
|
105
|
+
* "LastUpdateReason": "Comply with internal requirements",
|
|
106
|
+
* "Parameters": {
|
|
107
|
+
* "maxCredentialUsageAge": {
|
|
108
|
+
* "Value": {
|
|
109
|
+
* "Integer": 15
|
|
110
|
+
* },
|
|
111
|
+
* "ValueType": "CUSTOM"
|
|
112
|
+
* }
|
|
113
|
+
* },
|
|
114
|
+
* "SecurityControlId": "ACM.1"
|
|
115
|
+
* };
|
|
116
|
+
* const command = new UpdateSecurityControlCommand(input);
|
|
117
|
+
* await client.send(command);
|
|
118
|
+
* // example id: to-update-security-control-properties-1699282942434
|
|
119
|
+
* ```
|
|
120
|
+
*
|
|
98
121
|
*/
|
|
99
122
|
export declare class UpdateSecurityControlCommand extends $Command<UpdateSecurityControlCommandInput, UpdateSecurityControlCommandOutput, SecurityHubClientResolvedConfig> {
|
|
100
123
|
readonly input: UpdateSecurityControlCommandInput;
|
|
@@ -46,6 +46,9 @@ export interface UpdateSecurityHubConfigurationCommandOutput extends UpdateSecur
|
|
|
46
46
|
* @see {@link UpdateSecurityHubConfigurationCommandOutput} for command's `response` shape.
|
|
47
47
|
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
48
48
|
*
|
|
49
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
50
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
51
|
+
*
|
|
49
52
|
* @throws {@link InternalException} (server fault)
|
|
50
53
|
* <p>Internal server error.</p>
|
|
51
54
|
*
|
|
@@ -48,6 +48,9 @@ export interface UpdateStandardsControlCommandOutput extends UpdateStandardsCont
|
|
|
48
48
|
* @see {@link UpdateStandardsControlCommandOutput} for command's `response` shape.
|
|
49
49
|
* @see {@link SecurityHubClientResolvedConfig | config} for SecurityHubClient's `config` shape.
|
|
50
50
|
*
|
|
51
|
+
* @throws {@link AccessDeniedException} (client fault)
|
|
52
|
+
* <p>You don't have permission to perform the action specified in the request.</p>
|
|
53
|
+
*
|
|
51
54
|
* @throws {@link InternalException} (server fault)
|
|
52
55
|
* <p>Internal server error.</p>
|
|
53
56
|
*
|
|
@@ -4,6 +4,7 @@ export * from "./BatchDeleteAutomationRulesCommand";
|
|
|
4
4
|
export * from "./BatchDisableStandardsCommand";
|
|
5
5
|
export * from "./BatchEnableStandardsCommand";
|
|
6
6
|
export * from "./BatchGetAutomationRulesCommand";
|
|
7
|
+
export * from "./BatchGetConfigurationPolicyAssociationsCommand";
|
|
7
8
|
export * from "./BatchGetSecurityControlsCommand";
|
|
8
9
|
export * from "./BatchGetStandardsControlAssociationsCommand";
|
|
9
10
|
export * from "./BatchImportFindingsCommand";
|
|
@@ -12,11 +13,13 @@ export * from "./BatchUpdateFindingsCommand";
|
|
|
12
13
|
export * from "./BatchUpdateStandardsControlAssociationsCommand";
|
|
13
14
|
export * from "./CreateActionTargetCommand";
|
|
14
15
|
export * from "./CreateAutomationRuleCommand";
|
|
16
|
+
export * from "./CreateConfigurationPolicyCommand";
|
|
15
17
|
export * from "./CreateFindingAggregatorCommand";
|
|
16
18
|
export * from "./CreateInsightCommand";
|
|
17
19
|
export * from "./CreateMembersCommand";
|
|
18
20
|
export * from "./DeclineInvitationsCommand";
|
|
19
21
|
export * from "./DeleteActionTargetCommand";
|
|
22
|
+
export * from "./DeleteConfigurationPolicyCommand";
|
|
20
23
|
export * from "./DeleteFindingAggregatorCommand";
|
|
21
24
|
export * from "./DeleteInsightCommand";
|
|
22
25
|
export * from "./DeleteInvitationsCommand";
|
|
@@ -37,6 +40,8 @@ export * from "./EnableImportFindingsForProductCommand";
|
|
|
37
40
|
export * from "./EnableOrganizationAdminAccountCommand";
|
|
38
41
|
export * from "./EnableSecurityHubCommand";
|
|
39
42
|
export * from "./GetAdministratorAccountCommand";
|
|
43
|
+
export * from "./GetConfigurationPolicyAssociationCommand";
|
|
44
|
+
export * from "./GetConfigurationPolicyCommand";
|
|
40
45
|
export * from "./GetEnabledStandardsCommand";
|
|
41
46
|
export * from "./GetFindingAggregatorCommand";
|
|
42
47
|
export * from "./GetFindingHistoryCommand";
|
|
@@ -49,6 +54,8 @@ export * from "./GetMembersCommand";
|
|
|
49
54
|
export * from "./GetSecurityControlDefinitionCommand";
|
|
50
55
|
export * from "./InviteMembersCommand";
|
|
51
56
|
export * from "./ListAutomationRulesCommand";
|
|
57
|
+
export * from "./ListConfigurationPoliciesCommand";
|
|
58
|
+
export * from "./ListConfigurationPolicyAssociationsCommand";
|
|
52
59
|
export * from "./ListEnabledProductsForImportCommand";
|
|
53
60
|
export * from "./ListFindingAggregatorsCommand";
|
|
54
61
|
export * from "./ListInvitationsCommand";
|
|
@@ -57,9 +64,12 @@ export * from "./ListOrganizationAdminAccountsCommand";
|
|
|
57
64
|
export * from "./ListSecurityControlDefinitionsCommand";
|
|
58
65
|
export * from "./ListStandardsControlAssociationsCommand";
|
|
59
66
|
export * from "./ListTagsForResourceCommand";
|
|
67
|
+
export * from "./StartConfigurationPolicyAssociationCommand";
|
|
68
|
+
export * from "./StartConfigurationPolicyDisassociationCommand";
|
|
60
69
|
export * from "./TagResourceCommand";
|
|
61
70
|
export * from "./UntagResourceCommand";
|
|
62
71
|
export * from "./UpdateActionTargetCommand";
|
|
72
|
+
export * from "./UpdateConfigurationPolicyCommand";
|
|
63
73
|
export * from "./UpdateFindingAggregatorCommand";
|
|
64
74
|
export * from "./UpdateFindingsCommand";
|
|
65
75
|
export * from "./UpdateInsightCommand";
|
|
@@ -904,6 +904,62 @@ export interface AssociatedStandard {
|
|
|
904
904
|
*/
|
|
905
905
|
StandardsId?: string;
|
|
906
906
|
}
|
|
907
|
+
/**
|
|
908
|
+
* @public
|
|
909
|
+
* @enum
|
|
910
|
+
*/
|
|
911
|
+
export declare const ConfigurationPolicyAssociationStatus: {
|
|
912
|
+
readonly FAILED: "FAILED";
|
|
913
|
+
readonly PENDING: "PENDING";
|
|
914
|
+
readonly SUCCESS: "SUCCESS";
|
|
915
|
+
};
|
|
916
|
+
/**
|
|
917
|
+
* @public
|
|
918
|
+
*/
|
|
919
|
+
export type ConfigurationPolicyAssociationStatus = (typeof ConfigurationPolicyAssociationStatus)[keyof typeof ConfigurationPolicyAssociationStatus];
|
|
920
|
+
/**
|
|
921
|
+
* @public
|
|
922
|
+
* @enum
|
|
923
|
+
*/
|
|
924
|
+
export declare const AssociationType: {
|
|
925
|
+
readonly APPLIED: "APPLIED";
|
|
926
|
+
readonly INHERITED: "INHERITED";
|
|
927
|
+
};
|
|
928
|
+
/**
|
|
929
|
+
* @public
|
|
930
|
+
*/
|
|
931
|
+
export type AssociationType = (typeof AssociationType)[keyof typeof AssociationType];
|
|
932
|
+
/**
|
|
933
|
+
* @public
|
|
934
|
+
* <p>
|
|
935
|
+
* Options for filtering the <code>ListConfigurationPolicyAssociations</code> response. You can filter by the Amazon Resource Name (ARN) or
|
|
936
|
+
* universally unique identifier (UUID) of a configuration policy, <code>AssociationType</code>, or <code>AssociationStatus</code>.
|
|
937
|
+
* </p>
|
|
938
|
+
*/
|
|
939
|
+
export interface AssociationFilters {
|
|
940
|
+
/**
|
|
941
|
+
* @public
|
|
942
|
+
* <p>
|
|
943
|
+
* The ARN or UUID of the configuration policy.
|
|
944
|
+
* </p>
|
|
945
|
+
*/
|
|
946
|
+
ConfigurationPolicyId?: string;
|
|
947
|
+
/**
|
|
948
|
+
* @public
|
|
949
|
+
* <p>
|
|
950
|
+
* Indicates whether the association between a target and a configuration was directly applied by the
|
|
951
|
+
* Security Hub delegated administrator or inherited from a parent.
|
|
952
|
+
* </p>
|
|
953
|
+
*/
|
|
954
|
+
AssociationType?: AssociationType;
|
|
955
|
+
/**
|
|
956
|
+
* @public
|
|
957
|
+
* <p>
|
|
958
|
+
* The current status of the association between a target and a configuration policy.
|
|
959
|
+
* </p>
|
|
960
|
+
*/
|
|
961
|
+
AssociationStatus?: ConfigurationPolicyAssociationStatus;
|
|
962
|
+
}
|
|
907
963
|
/**
|
|
908
964
|
* @public
|
|
909
965
|
* <p>
|
|
@@ -1314,7 +1370,7 @@ export interface AutomationRulesFindingFilters {
|
|
|
1314
1370
|
ProductArn?: StringFilter[];
|
|
1315
1371
|
/**
|
|
1316
1372
|
* @public
|
|
1317
|
-
* <p>
|
|
1373
|
+
* <p>The Amazon Web Services account ID in which a finding was generated.</p>
|
|
1318
1374
|
* <p>
|
|
1319
1375
|
* Array Members: Minimum number of 1 item. Maximum number of 100 items.
|
|
1320
1376
|
* </p>
|
|
@@ -1678,6 +1734,35 @@ export interface AutomationRulesFindingFilters {
|
|
|
1678
1734
|
* </p>
|
|
1679
1735
|
*/
|
|
1680
1736
|
UserDefinedFields?: MapFilter[];
|
|
1737
|
+
/**
|
|
1738
|
+
* @public
|
|
1739
|
+
* <p>
|
|
1740
|
+
* The Amazon Resource Name (ARN) of the application that is related to a finding.
|
|
1741
|
+
* </p>
|
|
1742
|
+
* <p>
|
|
1743
|
+
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
1744
|
+
* </p>
|
|
1745
|
+
*/
|
|
1746
|
+
ResourceApplicationArn?: StringFilter[];
|
|
1747
|
+
/**
|
|
1748
|
+
* @public
|
|
1749
|
+
* <p>
|
|
1750
|
+
* The name of the application that is related to a finding.
|
|
1751
|
+
* </p>
|
|
1752
|
+
* <p>
|
|
1753
|
+
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
1754
|
+
* </p>
|
|
1755
|
+
*/
|
|
1756
|
+
ResourceApplicationName?: StringFilter[];
|
|
1757
|
+
/**
|
|
1758
|
+
* @public
|
|
1759
|
+
* <p>The name of the Amazon Web Services account in which a finding was generated.
|
|
1760
|
+
* </p>
|
|
1761
|
+
* <p>
|
|
1762
|
+
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
1763
|
+
* </p>
|
|
1764
|
+
*/
|
|
1765
|
+
AwsAccountName?: StringFilter[];
|
|
1681
1766
|
}
|
|
1682
1767
|
/**
|
|
1683
1768
|
* @public
|
|
@@ -11288,194 +11373,3 @@ export interface AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails {
|
|
|
11288
11373
|
*/
|
|
11289
11374
|
TransitEncryptionPort?: number;
|
|
11290
11375
|
}
|
|
11291
|
-
/**
|
|
11292
|
-
* @public
|
|
11293
|
-
* <p>Information about a bind mount host volume.</p>
|
|
11294
|
-
*/
|
|
11295
|
-
export interface AwsEcsTaskDefinitionVolumesHostDetails {
|
|
11296
|
-
/**
|
|
11297
|
-
* @public
|
|
11298
|
-
* <p>The path on the host container instance that is presented to the container.</p>
|
|
11299
|
-
*/
|
|
11300
|
-
SourcePath?: string;
|
|
11301
|
-
}
|
|
11302
|
-
/**
|
|
11303
|
-
* @public
|
|
11304
|
-
* <p>A data volume to mount from another container.</p>
|
|
11305
|
-
*/
|
|
11306
|
-
export interface AwsEcsTaskDefinitionVolumesDetails {
|
|
11307
|
-
/**
|
|
11308
|
-
* @public
|
|
11309
|
-
* <p>Information about a Docker volume.</p>
|
|
11310
|
-
*/
|
|
11311
|
-
DockerVolumeConfiguration?: AwsEcsTaskDefinitionVolumesDockerVolumeConfigurationDetails;
|
|
11312
|
-
/**
|
|
11313
|
-
* @public
|
|
11314
|
-
* <p>Information about the Amazon Elastic File System file system that is used for task storage.</p>
|
|
11315
|
-
*/
|
|
11316
|
-
EfsVolumeConfiguration?: AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails;
|
|
11317
|
-
/**
|
|
11318
|
-
* @public
|
|
11319
|
-
* <p>Information about a bind mount host volume.</p>
|
|
11320
|
-
*/
|
|
11321
|
-
Host?: AwsEcsTaskDefinitionVolumesHostDetails;
|
|
11322
|
-
/**
|
|
11323
|
-
* @public
|
|
11324
|
-
* <p>The name of the data volume.</p>
|
|
11325
|
-
*/
|
|
11326
|
-
Name?: string;
|
|
11327
|
-
}
|
|
11328
|
-
/**
|
|
11329
|
-
* @public
|
|
11330
|
-
* <p>Details about a task definition. A task definition describes the container and volume definitions
|
|
11331
|
-
* of an Amazon Elastic Container Service task.</p>
|
|
11332
|
-
*/
|
|
11333
|
-
export interface AwsEcsTaskDefinitionDetails {
|
|
11334
|
-
/**
|
|
11335
|
-
* @public
|
|
11336
|
-
* <p>The container definitions that describe the containers that make up the task.</p>
|
|
11337
|
-
*/
|
|
11338
|
-
ContainerDefinitions?: AwsEcsTaskDefinitionContainerDefinitionsDetails[];
|
|
11339
|
-
/**
|
|
11340
|
-
* @public
|
|
11341
|
-
* <p>The number of CPU units used by the task.Valid values are as follows:</p>
|
|
11342
|
-
* <ul>
|
|
11343
|
-
* <li>
|
|
11344
|
-
* <p>
|
|
11345
|
-
* <code>256 (.25 vCPU)</code>
|
|
11346
|
-
* </p>
|
|
11347
|
-
* </li>
|
|
11348
|
-
* <li>
|
|
11349
|
-
* <p>
|
|
11350
|
-
* <code>512 (.5 vCPU)</code>
|
|
11351
|
-
* </p>
|
|
11352
|
-
* </li>
|
|
11353
|
-
* <li>
|
|
11354
|
-
* <p>
|
|
11355
|
-
* <code>1024 (1 vCPU)</code>
|
|
11356
|
-
* </p>
|
|
11357
|
-
* </li>
|
|
11358
|
-
* <li>
|
|
11359
|
-
* <p>
|
|
11360
|
-
* <code>2048 (2 vCPU)</code>
|
|
11361
|
-
* </p>
|
|
11362
|
-
* </li>
|
|
11363
|
-
* <li>
|
|
11364
|
-
* <p>
|
|
11365
|
-
* <code>4096 (4 vCPU)</code>
|
|
11366
|
-
* </p>
|
|
11367
|
-
* </li>
|
|
11368
|
-
* </ul>
|
|
11369
|
-
*/
|
|
11370
|
-
Cpu?: string;
|
|
11371
|
-
/**
|
|
11372
|
-
* @public
|
|
11373
|
-
* <p>The ARN of the task execution role that grants the container agent permission to make API calls on behalf of the container user.</p>
|
|
11374
|
-
*/
|
|
11375
|
-
ExecutionRoleArn?: string;
|
|
11376
|
-
/**
|
|
11377
|
-
* @public
|
|
11378
|
-
* <p>The name of a family that this task definition is registered to.</p>
|
|
11379
|
-
*/
|
|
11380
|
-
Family?: string;
|
|
11381
|
-
/**
|
|
11382
|
-
* @public
|
|
11383
|
-
* <p>The Elastic Inference accelerators to use for the containers in the task.</p>
|
|
11384
|
-
*/
|
|
11385
|
-
InferenceAccelerators?: AwsEcsTaskDefinitionInferenceAcceleratorsDetails[];
|
|
11386
|
-
/**
|
|
11387
|
-
* @public
|
|
11388
|
-
* <p>The inter-process communication (IPC) resource namespace to use for the containers in the task. Valid values are as follows:</p>
|
|
11389
|
-
* <ul>
|
|
11390
|
-
* <li>
|
|
11391
|
-
* <p>
|
|
11392
|
-
* <code>host</code>
|
|
11393
|
-
* </p>
|
|
11394
|
-
* </li>
|
|
11395
|
-
* <li>
|
|
11396
|
-
* <p>
|
|
11397
|
-
* <code>none</code>
|
|
11398
|
-
* </p>
|
|
11399
|
-
* </li>
|
|
11400
|
-
* <li>
|
|
11401
|
-
* <p>
|
|
11402
|
-
* <code>task</code>
|
|
11403
|
-
* </p>
|
|
11404
|
-
* </li>
|
|
11405
|
-
* </ul>
|
|
11406
|
-
*/
|
|
11407
|
-
IpcMode?: string;
|
|
11408
|
-
/**
|
|
11409
|
-
* @public
|
|
11410
|
-
* <p>The amount (in MiB) of memory used by the task. </p>
|
|
11411
|
-
* <p>For tasks that are hosted on Amazon EC2, you can provide a task-level memory value or a container-level memory value.
|
|
11412
|
-
* For tasks that are hosted on Fargate, you must use one of the <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size">specified values</a> in the <i>
|
|
11413
|
-
* <i>Amazon Elastic Container Service Developer Guide</i>
|
|
11414
|
-
* </i>, which determines your range of supported values for the <code>Cpu</code> and <code>Memory</code> parameters.</p>
|
|
11415
|
-
*/
|
|
11416
|
-
Memory?: string;
|
|
11417
|
-
/**
|
|
11418
|
-
* @public
|
|
11419
|
-
* <p>The Docker networking mode to use for the containers in the task. Valid values are as follows:</p>
|
|
11420
|
-
* <ul>
|
|
11421
|
-
* <li>
|
|
11422
|
-
* <p>
|
|
11423
|
-
* <code>awsvpc</code>
|
|
11424
|
-
* </p>
|
|
11425
|
-
* </li>
|
|
11426
|
-
* <li>
|
|
11427
|
-
* <p>
|
|
11428
|
-
* <code>bridge</code>
|
|
11429
|
-
* </p>
|
|
11430
|
-
* </li>
|
|
11431
|
-
* <li>
|
|
11432
|
-
* <p>
|
|
11433
|
-
* <code>host</code>
|
|
11434
|
-
* </p>
|
|
11435
|
-
* </li>
|
|
11436
|
-
* <li>
|
|
11437
|
-
* <p>
|
|
11438
|
-
* <code>none</code>
|
|
11439
|
-
* </p>
|
|
11440
|
-
* </li>
|
|
11441
|
-
* </ul>
|
|
11442
|
-
*/
|
|
11443
|
-
NetworkMode?: string;
|
|
11444
|
-
/**
|
|
11445
|
-
* @public
|
|
11446
|
-
* <p>The process namespace to use for the containers in the task. Valid values are <code>host</code> or <code>task</code>.</p>
|
|
11447
|
-
*/
|
|
11448
|
-
PidMode?: string;
|
|
11449
|
-
/**
|
|
11450
|
-
* @public
|
|
11451
|
-
* <p>The placement constraint objects to use for tasks.</p>
|
|
11452
|
-
*/
|
|
11453
|
-
PlacementConstraints?: AwsEcsTaskDefinitionPlacementConstraintsDetails[];
|
|
11454
|
-
/**
|
|
11455
|
-
* @public
|
|
11456
|
-
* <p>The configuration details for the App Mesh proxy.</p>
|
|
11457
|
-
*/
|
|
11458
|
-
ProxyConfiguration?: AwsEcsTaskDefinitionProxyConfigurationDetails;
|
|
11459
|
-
/**
|
|
11460
|
-
* @public
|
|
11461
|
-
* <p>The task launch types that the task definition was validated against.</p>
|
|
11462
|
-
*/
|
|
11463
|
-
RequiresCompatibilities?: string[];
|
|
11464
|
-
/**
|
|
11465
|
-
* @public
|
|
11466
|
-
* <p>The short name or ARN of the IAM role that grants containers in the task permission to call Amazon Web Services API operations on your behalf.</p>
|
|
11467
|
-
*/
|
|
11468
|
-
TaskRoleArn?: string;
|
|
11469
|
-
/**
|
|
11470
|
-
* @public
|
|
11471
|
-
* <p>The data volume definitions for the task.</p>
|
|
11472
|
-
*/
|
|
11473
|
-
Volumes?: AwsEcsTaskDefinitionVolumesDetails[];
|
|
11474
|
-
/**
|
|
11475
|
-
* @public
|
|
11476
|
-
* <p>
|
|
11477
|
-
* The status of the task definition.
|
|
11478
|
-
* </p>
|
|
11479
|
-
*/
|
|
11480
|
-
Status?: string;
|
|
11481
|
-
}
|