@aws-sdk/client-securityhub 3.458.0 → 3.460.0

package/dist-types/commands/index.d.ts

@@ -4,6 +4,7 @@ export * from "./BatchDeleteAutomationRulesCommand";
 export * from "./BatchDisableStandardsCommand";
 export * from "./BatchEnableStandardsCommand";
 export * from "./BatchGetAutomationRulesCommand";
+export * from "./BatchGetConfigurationPolicyAssociationsCommand";
 export * from "./BatchGetSecurityControlsCommand";
 export * from "./BatchGetStandardsControlAssociationsCommand";
 export * from "./BatchImportFindingsCommand";
@@ -12,11 +13,13 @@ export * from "./BatchUpdateFindingsCommand";
 export * from "./BatchUpdateStandardsControlAssociationsCommand";
 export * from "./CreateActionTargetCommand";
 export * from "./CreateAutomationRuleCommand";
+export * from "./CreateConfigurationPolicyCommand";
 export * from "./CreateFindingAggregatorCommand";
 export * from "./CreateInsightCommand";
 export * from "./CreateMembersCommand";
 export * from "./DeclineInvitationsCommand";
 export * from "./DeleteActionTargetCommand";
+export * from "./DeleteConfigurationPolicyCommand";
 export * from "./DeleteFindingAggregatorCommand";
 export * from "./DeleteInsightCommand";
 export * from "./DeleteInvitationsCommand";
@@ -37,6 +40,8 @@ export * from "./EnableImportFindingsForProductCommand";
 export * from "./EnableOrganizationAdminAccountCommand";
 export * from "./EnableSecurityHubCommand";
 export * from "./GetAdministratorAccountCommand";
+export * from "./GetConfigurationPolicyAssociationCommand";
+export * from "./GetConfigurationPolicyCommand";
 export * from "./GetEnabledStandardsCommand";
 export * from "./GetFindingAggregatorCommand";
 export * from "./GetFindingHistoryCommand";
@@ -49,6 +54,8 @@ export * from "./GetMembersCommand";
 export * from "./GetSecurityControlDefinitionCommand";
 export * from "./InviteMembersCommand";
 export * from "./ListAutomationRulesCommand";
+export * from "./ListConfigurationPoliciesCommand";
+export * from "./ListConfigurationPolicyAssociationsCommand";
 export * from "./ListEnabledProductsForImportCommand";
 export * from "./ListFindingAggregatorsCommand";
 export * from "./ListInvitationsCommand";
@@ -57,9 +64,12 @@ export * from "./ListOrganizationAdminAccountsCommand";
 export * from "./ListSecurityControlDefinitionsCommand";
 export * from "./ListStandardsControlAssociationsCommand";
 export * from "./ListTagsForResourceCommand";
+export * from "./StartConfigurationPolicyAssociationCommand";
+export * from "./StartConfigurationPolicyDisassociationCommand";
 export * from "./TagResourceCommand";
 export * from "./UntagResourceCommand";
 export * from "./UpdateActionTargetCommand";
+export * from "./UpdateConfigurationPolicyCommand";
 export * from "./UpdateFindingAggregatorCommand";
 export * from "./UpdateFindingsCommand";
 export * from "./UpdateInsightCommand";

package/dist-types/models/models_0.d.ts

@@ -904,6 +904,62 @@ export interface AssociatedStandard {
      */
     StandardsId?: string;
 }
+/**
+ * @public
+ * @enum
+ */
+export declare const ConfigurationPolicyAssociationStatus: {
+    readonly FAILED: "FAILED";
+    readonly PENDING: "PENDING";
+    readonly SUCCESS: "SUCCESS";
+};
+/**
+ * @public
+ */
+export type ConfigurationPolicyAssociationStatus = (typeof ConfigurationPolicyAssociationStatus)[keyof typeof ConfigurationPolicyAssociationStatus];
+/**
+ * @public
+ * @enum
+ */
+export declare const AssociationType: {
+    readonly APPLIED: "APPLIED";
+    readonly INHERITED: "INHERITED";
+};
+/**
+ * @public
+ */
+export type AssociationType = (typeof AssociationType)[keyof typeof AssociationType];
+/**
+ * @public
+ * <p>
+ *             Options for filtering the <code>ListConfigurationPolicyAssociations</code> response. You can filter by the Amazon Resource Name (ARN) or
+ *             universally unique identifier (UUID) of a configuration policy, <code>AssociationType</code>, or <code>AssociationStatus</code>.
+ *         </p>
+ */
+export interface AssociationFilters {
+    /**
+     * @public
+     * <p>
+     *             The ARN or UUID of the configuration policy.
+     *         </p>
+     */
+    ConfigurationPolicyId?: string;
+    /**
+     * @public
+     * <p>
+     *             Indicates whether the association between a target and a configuration was directly applied by the
+     *             Security Hub delegated administrator or inherited from a parent.
+     *         </p>
+     */
+    AssociationType?: AssociationType;
+    /**
+     * @public
+     * <p>
+     *             The current status of the association between a target and a configuration policy.
+     *         </p>
+     */
+    AssociationStatus?: ConfigurationPolicyAssociationStatus;
+}
 /**
  * @public
  * <p>
@@ -1314,7 +1370,7 @@ export interface AutomationRulesFindingFilters {
     ProductArn?: StringFilter[];
     /**
      * @public
-     * <p> The Amazon Web Services account ID in which a finding was generated. </p>
+     * <p>The Amazon Web Services account ID in which a finding was generated.</p>
      *          <p>
      *    		Array Members: Minimum number of 1 item. Maximum number of 100 items.
      *    	</p>
@@ -1678,6 +1734,35 @@ export interface AutomationRulesFindingFilters {
      *     	</p>
      */
     UserDefinedFields?: MapFilter[];
+    /**
+     * @public
+     * <p>
+     *             The Amazon Resource Name (ARN) of the application that is related to a finding.
+     *         </p>
+     *          <p>
+     *             Array Members: Minimum number of 1 item. Maximum number of 20 items.
+     *         </p>
+     */
+    ResourceApplicationArn?: StringFilter[];
+    /**
+     * @public
+     * <p>
+     *             The name of the application that is related to a finding.
+     *         </p>
+     *          <p>
+     *             Array Members: Minimum number of 1 item. Maximum number of 20 items.
+     *         </p>
+     */
+    ResourceApplicationName?: StringFilter[];
+    /**
+     * @public
+     * <p>The name of the Amazon Web Services account in which a finding was generated.
+     *         </p>
+     *          <p>
+     *             Array Members: Minimum number of 1 item. Maximum number of 20 items.
+     *         </p>
+     */
+    AwsAccountName?: StringFilter[];
 }
 /**
  * @public
@@ -11288,194 +11373,3 @@ export interface AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails {
      */
     TransitEncryptionPort?: number;
 }
-/**
- * @public
- * <p>Information about a bind mount host volume.</p>
- */
-export interface AwsEcsTaskDefinitionVolumesHostDetails {
-    /**
-     * @public
-     * <p>The path on the host container instance that is presented to the container.</p>
-     */
-    SourcePath?: string;
-}
-/**
- * @public
- * <p>A data volume to mount from another container.</p>
- */
-export interface AwsEcsTaskDefinitionVolumesDetails {
-    /**
-     * @public
-     * <p>Information about a Docker volume.</p>
-     */
-    DockerVolumeConfiguration?: AwsEcsTaskDefinitionVolumesDockerVolumeConfigurationDetails;
-    /**
-     * @public
-     * <p>Information about the Amazon Elastic File System file system that is used for task storage.</p>
-     */
-    EfsVolumeConfiguration?: AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails;
-    /**
-     * @public
-     * <p>Information about a bind mount host volume.</p>
-     */
-    Host?: AwsEcsTaskDefinitionVolumesHostDetails;
-    /**
-     * @public
-     * <p>The name of the data volume.</p>
-     */
-    Name?: string;
-}
-/**
- * @public
- * <p>Details about a task definition. A task definition describes the container and volume definitions
- *          of an Amazon Elastic Container Service task.</p>
- */
-export interface AwsEcsTaskDefinitionDetails {
-    /**
-     * @public
-     * <p>The container definitions that describe the containers that make up the task.</p>
-     */
-    ContainerDefinitions?: AwsEcsTaskDefinitionContainerDefinitionsDetails[];
-    /**
-     * @public
-     * <p>The number of CPU units used by the task.Valid values are as follows:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>256 (.25 vCPU)</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>512 (.5 vCPU)</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>1024 (1 vCPU)</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>2048 (2 vCPU)</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>4096 (4 vCPU)</code>
-     *                </p>
-     *             </li>
-     *          </ul>
-     */
-    Cpu?: string;
-    /**
-     * @public
-     * <p>The ARN of the task execution role that grants the container agent permission to make API calls on behalf of the container user.</p>
-     */
-    ExecutionRoleArn?: string;
-    /**
-     * @public
-     * <p>The name of a family that this task definition is registered to.</p>
-     */
-    Family?: string;
-    /**
-     * @public
-     * <p>The Elastic Inference accelerators to use for the containers in the task.</p>
-     */
-    InferenceAccelerators?: AwsEcsTaskDefinitionInferenceAcceleratorsDetails[];
-    /**
-     * @public
-     * <p>The inter-process communication (IPC) resource namespace to use for the containers in the task. Valid values are as follows:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>host</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>none</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>task</code>
-     *                </p>
-     *             </li>
-     *          </ul>
-     */
-    IpcMode?: string;
-    /**
-     * @public
-     * <p>The amount (in MiB) of memory used by the task. </p>
-     *          <p>For tasks that are hosted on Amazon EC2, you can provide a task-level memory value or a container-level memory value.
-     *       For tasks that are hosted on Fargate, you must use one of the <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size">specified values</a> in the <i>
-     *                <i>Amazon Elastic Container Service Developer Guide</i>
-     *             </i>, which determines your range of supported values for the <code>Cpu</code> and <code>Memory</code> parameters.</p>
-     */
-    Memory?: string;
-    /**
-     * @public
-     * <p>The Docker networking mode to use for the containers in the task. Valid values are as follows:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>awsvpc</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>bridge</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>host</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>none</code>
-     *                </p>
-     *             </li>
-     *          </ul>
-     */
-    NetworkMode?: string;
-    /**
-     * @public
-     * <p>The process namespace to use for the containers in the task. Valid values are <code>host</code> or <code>task</code>.</p>
-     */
-    PidMode?: string;
-    /**
-     * @public
-     * <p>The placement constraint objects to use for tasks.</p>
-     */
-    PlacementConstraints?: AwsEcsTaskDefinitionPlacementConstraintsDetails[];
-    /**
-     * @public
-     * <p>The configuration details for the App Mesh proxy.</p>
-     */
-    ProxyConfiguration?: AwsEcsTaskDefinitionProxyConfigurationDetails;
-    /**
-     * @public
-     * <p>The task launch types that the task definition was validated against.</p>
-     */
-    RequiresCompatibilities?: string[];
-    /**
-     * @public
-     * <p>The short name or ARN of the IAM role that grants containers in the task permission to call Amazon Web Services API operations on your behalf.</p>
-     */
-    TaskRoleArn?: string;
-    /**
-     * @public
-     * <p>The data volume definitions for the task.</p>
-     */
-    Volumes?: AwsEcsTaskDefinitionVolumesDetails[];
-    /**
-     * @public
-     * <p>
-     *             The status of the task definition.
-     *         </p>
-     */
-    Status?: string;
-}

package/dist-types/models/models_1.d.ts

@@ -1,4 +1,195 @@
-import { AssociatedStandard, AvailabilityZone, AwsEcsContainerDetails, RelatedFinding, SeverityLabel } from "./models_0";
+import { AssociatedStandard, AvailabilityZone, AwsEcsContainerDetails, AwsEcsTaskDefinitionContainerDefinitionsDetails, AwsEcsTaskDefinitionInferenceAcceleratorsDetails, AwsEcsTaskDefinitionPlacementConstraintsDetails, AwsEcsTaskDefinitionProxyConfigurationDetails, AwsEcsTaskDefinitionVolumesDockerVolumeConfigurationDetails, AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails, RelatedFinding, SeverityLabel } from "./models_0";
+/**
+ * @public
+ * <p>Information about a bind mount host volume.</p>
+ */
+export interface AwsEcsTaskDefinitionVolumesHostDetails {
+    /**
+     * @public
+     * <p>The path on the host container instance that is presented to the container.</p>
+     */
+    SourcePath?: string;
+}
+/**
+ * @public
+ * <p>A data volume to mount from another container.</p>
+ */
+export interface AwsEcsTaskDefinitionVolumesDetails {
+    /**
+     * @public
+     * <p>Information about a Docker volume.</p>
+     */
+    DockerVolumeConfiguration?: AwsEcsTaskDefinitionVolumesDockerVolumeConfigurationDetails;
+    /**
+     * @public
+     * <p>Information about the Amazon Elastic File System file system that is used for task storage.</p>
+     */
+    EfsVolumeConfiguration?: AwsEcsTaskDefinitionVolumesEfsVolumeConfigurationDetails;
+    /**
+     * @public
+     * <p>Information about a bind mount host volume.</p>
+     */
+    Host?: AwsEcsTaskDefinitionVolumesHostDetails;
+    /**
+     * @public
+     * <p>The name of the data volume.</p>
+     */
+    Name?: string;
+}
+/**
+ * @public
+ * <p>Details about a task definition. A task definition describes the container and volume definitions
+ *          of an Amazon Elastic Container Service task.</p>
+ */
+export interface AwsEcsTaskDefinitionDetails {
+    /**
+     * @public
+     * <p>The container definitions that describe the containers that make up the task.</p>
+     */
+    ContainerDefinitions?: AwsEcsTaskDefinitionContainerDefinitionsDetails[];
+    /**
+     * @public
+     * <p>The number of CPU units used by the task.Valid values are as follows:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>256 (.25 vCPU)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>512 (.5 vCPU)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>1024 (1 vCPU)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>2048 (2 vCPU)</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>4096 (4 vCPU)</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     */
+    Cpu?: string;
+    /**
+     * @public
+     * <p>The ARN of the task execution role that grants the container agent permission to make API calls on behalf of the container user.</p>
+     */
+    ExecutionRoleArn?: string;
+    /**
+     * @public
+     * <p>The name of a family that this task definition is registered to.</p>
+     */
+    Family?: string;
+    /**
+     * @public
+     * <p>The Elastic Inference accelerators to use for the containers in the task.</p>
+     */
+    InferenceAccelerators?: AwsEcsTaskDefinitionInferenceAcceleratorsDetails[];
+    /**
+     * @public
+     * <p>The inter-process communication (IPC) resource namespace to use for the containers in the task. Valid values are as follows:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>host</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>none</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>task</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     */
+    IpcMode?: string;
+    /**
+     * @public
+     * <p>The amount (in MiB) of memory used by the task. </p>
+     *          <p>For tasks that are hosted on Amazon EC2, you can provide a task-level memory value or a container-level memory value.
+     *       For tasks that are hosted on Fargate, you must use one of the <a href="https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_definition_parameters.html#task_size">specified values</a> in the <i>
+     *                <i>Amazon Elastic Container Service Developer Guide</i>
+     *             </i>, which determines your range of supported values for the <code>Cpu</code> and <code>Memory</code> parameters.</p>
+     */
+    Memory?: string;
+    /**
+     * @public
+     * <p>The Docker networking mode to use for the containers in the task. Valid values are as follows:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>awsvpc</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>bridge</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>host</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>none</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     */
+    NetworkMode?: string;
+    /**
+     * @public
+     * <p>The process namespace to use for the containers in the task. Valid values are <code>host</code> or <code>task</code>.</p>
+     */
+    PidMode?: string;
+    /**
+     * @public
+     * <p>The placement constraint objects to use for tasks.</p>
+     */
+    PlacementConstraints?: AwsEcsTaskDefinitionPlacementConstraintsDetails[];
+    /**
+     * @public
+     * <p>The configuration details for the App Mesh proxy.</p>
+     */
+    ProxyConfiguration?: AwsEcsTaskDefinitionProxyConfigurationDetails;
+    /**
+     * @public
+     * <p>The task launch types that the task definition was validated against.</p>
+     */
+    RequiresCompatibilities?: string[];
+    /**
+     * @public
+     * <p>The short name or ARN of the IAM role that grants containers in the task permission to call Amazon Web Services API operations on your behalf.</p>
+     */
+    TaskRoleArn?: string;
+    /**
+     * @public
+     * <p>The data volume definitions for the task.</p>
+     */
+    Volumes?: AwsEcsTaskDefinitionVolumesDetails[];
+    /**
+     * @public
+     * <p>
+     *             The status of the task definition.
+     *         </p>
+     */
+    Status?: string;
+}
 /**
  * @public
  * <p>Provides details on a container instance bind mount host volume.
@@ -9403,51 +9594,3 @@ export interface AwsWafv2CustomResponseDetails {
      */
     ResponseHeaders?: AwsWafv2CustomHttpHeader[];
 }
-/**
- * @public
- * <p>
- *          Specifies that WAF should block the request and optionally defines additional custom handling for the response to the web request.
- *       </p>
- */
-export interface AwsWafv2ActionBlockDetails {
-    /**
-     * @public
-     * <p>
-     *          Defines a custom response for the web request. For information, see
-     *          <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the <i>WAF Developer Guide.</i>.
-     *       </p>
-     */
-    CustomResponse?: AwsWafv2CustomResponseDetails;
-}
-/**
- * @public
- * <p>
- *          Specifies that WAF should run a CAPTCHA check against the request.
- *       </p>
- */
-export interface AwsWafv2RulesActionCaptchaDetails {
-    /**
-     * @public
-     * <p>
-     *          Defines custom handling for the web request, used when the CAPTCHA inspection determines that the request's token is valid and unexpired. For more information,
-     *          see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the <i>WAF Developer Guide.</i>.
-     *       </p>
-     */
-    CustomRequestHandling?: AwsWafv2CustomRequestHandlingDetails;
-}
-/**
- * @public
- * <p>
- *          Specifies that WAF should count the request.
- *       </p>
- */
-export interface AwsWafv2RulesActionCountDetails {
-    /**
-     * @public
-     * <p>
-     *          Defines custom handling for the web request. For more information,
-     *          see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/waf-custom-request-response.html">Customizing web requests and responses in WAF</a> in the <i>WAF Developer Guide.</i>.
-     *       </p>
-     */
-    CustomRequestHandling?: AwsWafv2CustomRequestHandlingDetails;
-}