@aws-sdk/client-securityhub 3.658.1 → 3.662.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -5
- package/dist-types/SecurityHub.d.ts +5 -5
- package/dist-types/SecurityHubClient.d.ts +5 -5
- package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +6 -1
- package/dist-types/commands/BatchUpdateFindingsCommand.d.ts +1 -1
- package/dist-types/commands/CreateFindingAggregatorCommand.d.ts +5 -2
- package/dist-types/commands/CreateMembersCommand.d.ts +1 -1
- package/dist-types/commands/DeclineInvitationsCommand.d.ts +7 -2
- package/dist-types/commands/DeleteFindingAggregatorCommand.d.ts +7 -2
- package/dist-types/commands/DeleteInvitationsCommand.d.ts +8 -3
- package/dist-types/commands/DescribeProductsCommand.d.ts +1 -1
- package/dist-types/commands/GetFindingAggregatorCommand.d.ts +5 -1
- package/dist-types/commands/GetFindingsCommand.d.ts +1 -1
- package/dist-types/commands/GetInvitationsCountCommand.d.ts +7 -2
- package/dist-types/commands/InviteMembersCommand.d.ts +9 -4
- package/dist-types/commands/ListFindingAggregatorsCommand.d.ts +2 -1
- package/dist-types/commands/ListInvitationsCommand.d.ts +8 -3
- package/dist-types/commands/UpdateFindingAggregatorCommand.d.ts +6 -2
- package/dist-types/index.d.ts +5 -5
- package/dist-types/models/models_0.d.ts +11 -14
- package/dist-types/models/models_1.d.ts +2 -2
- package/dist-types/models/models_2.d.ts +26 -25
- package/package.json +35 -35
package/README.md
CHANGED
|
@@ -8,7 +8,7 @@ AWS SDK for JavaScript SecurityHub Client for Node.js, Browser and React Native.
|
|
|
8
8
|
|
|
9
9
|
<p>Security Hub provides you with a comprehensive view of your security state in Amazon Web Services and helps
|
|
10
10
|
you assess your Amazon Web Services environment against security industry standards and best practices.</p>
|
|
11
|
-
<p>Security Hub collects security data across Amazon Web Services accounts, Amazon Web
|
|
11
|
+
<p>Security Hub collects security data across Amazon Web Services accounts, Amazon Web Services services, and
|
|
12
12
|
supported third-party products and helps you analyze your security trends and identify the highest priority security
|
|
13
13
|
issues.</p>
|
|
14
14
|
<p>To help you manage the security state of your organization, Security Hub supports multiple security standards.
|
|
@@ -17,10 +17,10 @@ and external compliance frameworks such as the Center for Internet Security (CIS
|
|
|
17
17
|
Security Standard (PCI DSS), and the National Institute of Standards and Technology (NIST). Each standard includes
|
|
18
18
|
several security controls, each of which represents a security best practice. Security Hub runs checks against
|
|
19
19
|
security controls and generates control findings to help you assess your compliance against security best practices.</p>
|
|
20
|
-
<p>In addition to generating control findings, Security Hub also receives findings from other Amazon Web
|
|
20
|
+
<p>In addition to generating control findings, Security Hub also receives findings from other Amazon Web Services services,
|
|
21
21
|
such as Amazon GuardDuty and Amazon Inspector, and
|
|
22
22
|
supported third-party products. This gives you a single pane of glass into a variety of security-related issues. You
|
|
23
|
-
can also send Security Hub findings to other Amazon Web
|
|
23
|
+
can also send Security Hub findings to other Amazon Web Services services and supported third-party products.</p>
|
|
24
24
|
<p>Security Hub offers automation features that help you triage and remediate security issues. For example,
|
|
25
25
|
you can use automation rules to automatically update critical findings when a security check fails. You can also leverage the integration with
|
|
26
26
|
Amazon EventBridge to trigger automatic responses to specific findings.</p>
|
|
@@ -31,12 +31,12 @@ and schemas. If you're new to Security Hub, you might find it helpful to also re
|
|
|
31
31
|
</a>. The
|
|
32
32
|
user guide explains key concepts and provides procedures
|
|
33
33
|
that demonstrate how to use Security Hub features. It also provides information about topics such as
|
|
34
|
-
integrating Security Hub with other Amazon Web
|
|
34
|
+
integrating Security Hub with other Amazon Web Services services.</p>
|
|
35
35
|
<p>In addition to interacting with Security Hub by making calls to the Security Hub API, you can
|
|
36
36
|
use a current version of an Amazon Web Services command line tool or SDK. Amazon Web Services provides tools
|
|
37
37
|
and SDKs that consist of libraries and sample code for various languages and platforms, such as PowerShell,
|
|
38
38
|
Java, Go, Python, C++, and .NET. These tools and SDKs provide convenient, programmatic access to
|
|
39
|
-
Security Hub and other Amazon Web
|
|
39
|
+
Security Hub and other Amazon Web Services services . They also handle tasks such as signing requests,
|
|
40
40
|
managing errors, and retrying requests automatically. For information about installing and using the Amazon Web Services tools
|
|
41
41
|
and SDKs, see <a href="http://aws.amazon.com/developer/tools/">Tools to Build on Amazon Web Services</a>.</p>
|
|
42
42
|
<p>With the exception of operations that are related to central configuration, Security Hub API requests are executed only in
|
|
@@ -583,7 +583,7 @@ export interface SecurityHub {
|
|
|
583
583
|
/**
|
|
584
584
|
* <p>Security Hub provides you with a comprehensive view of your security state in Amazon Web Services and helps
|
|
585
585
|
* you assess your Amazon Web Services environment against security industry standards and best practices.</p>
|
|
586
|
-
* <p>Security Hub collects security data across Amazon Web Services accounts, Amazon Web
|
|
586
|
+
* <p>Security Hub collects security data across Amazon Web Services accounts, Amazon Web Services services, and
|
|
587
587
|
* supported third-party products and helps you analyze your security trends and identify the highest priority security
|
|
588
588
|
* issues.</p>
|
|
589
589
|
* <p>To help you manage the security state of your organization, Security Hub supports multiple security standards.
|
|
@@ -592,10 +592,10 @@ export interface SecurityHub {
|
|
|
592
592
|
* Security Standard (PCI DSS), and the National Institute of Standards and Technology (NIST). Each standard includes
|
|
593
593
|
* several security controls, each of which represents a security best practice. Security Hub runs checks against
|
|
594
594
|
* security controls and generates control findings to help you assess your compliance against security best practices.</p>
|
|
595
|
-
* <p>In addition to generating control findings, Security Hub also receives findings from other Amazon Web
|
|
595
|
+
* <p>In addition to generating control findings, Security Hub also receives findings from other Amazon Web Services services,
|
|
596
596
|
* such as Amazon GuardDuty and Amazon Inspector, and
|
|
597
597
|
* supported third-party products. This gives you a single pane of glass into a variety of security-related issues. You
|
|
598
|
-
* can also send Security Hub findings to other Amazon Web
|
|
598
|
+
* can also send Security Hub findings to other Amazon Web Services services and supported third-party products.</p>
|
|
599
599
|
* <p>Security Hub offers automation features that help you triage and remediate security issues. For example,
|
|
600
600
|
* you can use automation rules to automatically update critical findings when a security check fails. You can also leverage the integration with
|
|
601
601
|
* Amazon EventBridge to trigger automatic responses to specific findings.</p>
|
|
@@ -606,12 +606,12 @@ export interface SecurityHub {
|
|
|
606
606
|
* </a>. The
|
|
607
607
|
* user guide explains key concepts and provides procedures
|
|
608
608
|
* that demonstrate how to use Security Hub features. It also provides information about topics such as
|
|
609
|
-
* integrating Security Hub with other Amazon Web
|
|
609
|
+
* integrating Security Hub with other Amazon Web Services services.</p>
|
|
610
610
|
* <p>In addition to interacting with Security Hub by making calls to the Security Hub API, you can
|
|
611
611
|
* use a current version of an Amazon Web Services command line tool or SDK. Amazon Web Services provides tools
|
|
612
612
|
* and SDKs that consist of libraries and sample code for various languages and platforms, such as PowerShell,
|
|
613
613
|
* Java, Go, Python, C++, and .NET. These tools and SDKs provide convenient, programmatic access to
|
|
614
|
-
* Security Hub and other Amazon Web
|
|
614
|
+
* Security Hub and other Amazon Web Services services . They also handle tasks such as signing requests,
|
|
615
615
|
* managing errors, and retrying requests automatically. For information about installing and using the Amazon Web Services tools
|
|
616
616
|
* and SDKs, see <a href="http://aws.amazon.com/developer/tools/">Tools to Build on Amazon Web Services</a>.</p>
|
|
617
617
|
* <p>With the exception of operations that are related to central configuration, Security Hub API requests are executed only in
|
|
@@ -232,7 +232,7 @@ export interface SecurityHubClientResolvedConfig extends SecurityHubClientResolv
|
|
|
232
232
|
/**
|
|
233
233
|
* <p>Security Hub provides you with a comprehensive view of your security state in Amazon Web Services and helps
|
|
234
234
|
* you assess your Amazon Web Services environment against security industry standards and best practices.</p>
|
|
235
|
-
* <p>Security Hub collects security data across Amazon Web Services accounts, Amazon Web
|
|
235
|
+
* <p>Security Hub collects security data across Amazon Web Services accounts, Amazon Web Services services, and
|
|
236
236
|
* supported third-party products and helps you analyze your security trends and identify the highest priority security
|
|
237
237
|
* issues.</p>
|
|
238
238
|
* <p>To help you manage the security state of your organization, Security Hub supports multiple security standards.
|
|
@@ -241,10 +241,10 @@ export interface SecurityHubClientResolvedConfig extends SecurityHubClientResolv
|
|
|
241
241
|
* Security Standard (PCI DSS), and the National Institute of Standards and Technology (NIST). Each standard includes
|
|
242
242
|
* several security controls, each of which represents a security best practice. Security Hub runs checks against
|
|
243
243
|
* security controls and generates control findings to help you assess your compliance against security best practices.</p>
|
|
244
|
-
* <p>In addition to generating control findings, Security Hub also receives findings from other Amazon Web
|
|
244
|
+
* <p>In addition to generating control findings, Security Hub also receives findings from other Amazon Web Services services,
|
|
245
245
|
* such as Amazon GuardDuty and Amazon Inspector, and
|
|
246
246
|
* supported third-party products. This gives you a single pane of glass into a variety of security-related issues. You
|
|
247
|
-
* can also send Security Hub findings to other Amazon Web
|
|
247
|
+
* can also send Security Hub findings to other Amazon Web Services services and supported third-party products.</p>
|
|
248
248
|
* <p>Security Hub offers automation features that help you triage and remediate security issues. For example,
|
|
249
249
|
* you can use automation rules to automatically update critical findings when a security check fails. You can also leverage the integration with
|
|
250
250
|
* Amazon EventBridge to trigger automatic responses to specific findings.</p>
|
|
@@ -255,12 +255,12 @@ export interface SecurityHubClientResolvedConfig extends SecurityHubClientResolv
|
|
|
255
255
|
* </a>. The
|
|
256
256
|
* user guide explains key concepts and provides procedures
|
|
257
257
|
* that demonstrate how to use Security Hub features. It also provides information about topics such as
|
|
258
|
-
* integrating Security Hub with other Amazon Web
|
|
258
|
+
* integrating Security Hub with other Amazon Web Services services.</p>
|
|
259
259
|
* <p>In addition to interacting with Security Hub by making calls to the Security Hub API, you can
|
|
260
260
|
* use a current version of an Amazon Web Services command line tool or SDK. Amazon Web Services provides tools
|
|
261
261
|
* and SDKs that consist of libraries and sample code for various languages and platforms, such as PowerShell,
|
|
262
262
|
* Java, Go, Python, C++, and .NET. These tools and SDKs provide convenient, programmatic access to
|
|
263
|
-
* Security Hub and other Amazon Web
|
|
263
|
+
* Security Hub and other Amazon Web Services services . They also handle tasks such as signing requests,
|
|
264
264
|
* managing errors, and retrying requests automatically. For information about installing and using the Amazon Web Services tools
|
|
265
265
|
* and SDKs, see <a href="http://aws.amazon.com/developer/tools/">Tools to Build on Amazon Web Services</a>.</p>
|
|
266
266
|
* <p>With the exception of operations that are related to central configuration, Security Hub API requests are executed only in
|
|
@@ -27,7 +27,12 @@ declare const AcceptAdministratorInvitationCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>We recommend using Organizations instead of Security Hub invitations to manage your member accounts.
|
|
32
|
+
* For information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html">Managing Security Hub administrator and member accounts with Organizations</a>
|
|
33
|
+
* in the <i>Security Hub User Guide</i>.</p>
|
|
34
|
+
* </note>
|
|
35
|
+
* <p>Accepts the invitation to be a member account and be monitored by the Security Hub administrator
|
|
31
36
|
* account that the invitation was sent from.</p>
|
|
32
37
|
* <p>This operation is only used by member accounts that are not added through
|
|
33
38
|
* Organizations.</p>
|
|
@@ -31,7 +31,7 @@ declare const BatchUpdateFindingsCommand_base: {
|
|
|
31
31
|
* Requested by administrator accounts or member accounts. Administrator accounts can update findings for
|
|
32
32
|
* their account and their member accounts. Member accounts can update findings for their
|
|
33
33
|
* account.</p>
|
|
34
|
-
* <p>Updates from <code>BatchUpdateFindings</code>
|
|
34
|
+
* <p>Updates from <code>BatchUpdateFindings</code> don't affect the value of
|
|
35
35
|
* <code>UpdatedAt</code> for a finding.</p>
|
|
36
36
|
* <p>Administrator and member accounts can use <code>BatchUpdateFindings</code> to update the
|
|
37
37
|
* following finding fields and objects.</p>
|
|
@@ -27,8 +27,11 @@ declare const CreateFindingAggregatorCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
31
|
-
*
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>The <i>aggregation Region</i> is now called the <i>home Region</i>.</p>
|
|
32
|
+
* </note>
|
|
33
|
+
* <p>Used to enable cross-Region aggregation. This operation can be invoked from the home Region only.</p>
|
|
34
|
+
* <p>For information about how cross-Region aggregation works, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html">Understanding cross-Region aggregation in Security Hub</a> in the <i>Security Hub User Guide</i>.
|
|
32
35
|
* </p>
|
|
33
36
|
* @example
|
|
34
37
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -49,7 +49,7 @@ declare const CreateMembersCommand_base: {
|
|
|
49
49
|
* then send an invitation to the member account. To send the invitation, you use the
|
|
50
50
|
* <code>InviteMembers</code> operation. If the account owner accepts
|
|
51
51
|
* the invitation, the account becomes a member account in Security Hub.</p>
|
|
52
|
-
* <p>Accounts that are managed using Organizations
|
|
52
|
+
* <p>Accounts that are managed using Organizations don't receive an invitation. They
|
|
53
53
|
* automatically become a member account in Security Hub.</p>
|
|
54
54
|
* <ul>
|
|
55
55
|
* <li>
|
|
@@ -27,9 +27,14 @@ declare const DeclineInvitationsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>We recommend using Organizations instead of Security Hub invitations to manage your member accounts.
|
|
32
|
+
* For information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html">Managing Security Hub administrator and member accounts with Organizations</a>
|
|
33
|
+
* in the <i>Security Hub User Guide</i>.</p>
|
|
34
|
+
* </note>
|
|
35
|
+
* <p>Declines invitations to become a Security Hub member account.</p>
|
|
31
36
|
* <p>A prospective member account uses this operation to decline an invitation to become a member.</p>
|
|
32
|
-
* <p>
|
|
37
|
+
* <p>Only member accounts that aren't part of an Amazon Web Services organization should use this operation.
|
|
33
38
|
* Organization accounts don't receive invitations.</p>
|
|
34
39
|
* @example
|
|
35
40
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -27,8 +27,13 @@ declare const DeleteFindingAggregatorCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
31
|
-
*
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>The <i>aggregation Region</i> is now called the <i>home Region</i>.</p>
|
|
32
|
+
* </note>
|
|
33
|
+
* <p>Deletes a finding aggregator. When you delete the finding aggregator, you stop cross-Region aggregation. Finding replication stops
|
|
34
|
+
* occurring from the linked Regions to the home Region.</p>
|
|
35
|
+
* <p>When you stop cross-Region aggregation, findings that were already replicated and sent to the home Region are still visible from
|
|
36
|
+
* the home Region. However, new findings and finding updates are no longer replicated and sent to the home Region.
|
|
32
37
|
* </p>
|
|
33
38
|
* @example
|
|
34
39
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -27,9 +27,14 @@ declare const DeleteInvitationsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
31
|
-
*
|
|
32
|
-
*
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>We recommend using Organizations instead of Security Hub invitations to manage your member accounts.
|
|
32
|
+
* For information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html">Managing Security Hub administrator and member accounts with Organizations</a>
|
|
33
|
+
* in the <i>Security Hub User Guide</i>.</p>
|
|
34
|
+
* </note>
|
|
35
|
+
* <p>Deletes invitations to become a Security Hub member account.</p>
|
|
36
|
+
* <p>A Security Hub administrator account can use this operation to delete invitations sent to one or more prospective member accounts.</p>
|
|
37
|
+
* <p>This operation is only used to delete invitations that are sent to prospective member accounts that aren't part of an Amazon Web Services organization.
|
|
33
38
|
* Organization accounts don't receive invitations.</p>
|
|
34
39
|
* @example
|
|
35
40
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -30,7 +30,7 @@ declare const DescribeProductsCommand_base: {
|
|
|
30
30
|
* <p>Returns information about product integrations in Security Hub.</p>
|
|
31
31
|
* <p>You can optionally provide an integration ARN. If you provide an integration ARN, then
|
|
32
32
|
* the results only include that integration.</p>
|
|
33
|
-
* <p>If you
|
|
33
|
+
* <p>If you don't provide an integration ARN, then the results include all of the available
|
|
34
34
|
* product integrations. </p>
|
|
35
35
|
* @example
|
|
36
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
@@ -27,7 +27,11 @@ declare const GetFindingAggregatorCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>The <i>aggregation Region</i> is now called the <i>home Region</i>.</p>
|
|
32
|
+
* </note>
|
|
33
|
+
* <p>Returns the current configuration in the calling account for cross-Region aggregation. A finding aggregator is a resource that establishes
|
|
34
|
+
* the home Region and any linked Regions.</p>
|
|
31
35
|
* @example
|
|
32
36
|
* Use a bare-bones client and the command you need to make an API call.
|
|
33
37
|
* ```javascript
|
|
@@ -28,7 +28,7 @@ declare const GetFindingsCommand_base: {
|
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
30
|
* <p>Returns a list of findings that match the specified criteria.</p>
|
|
31
|
-
* <p>If
|
|
31
|
+
* <p>If cross-Region aggregation is enabled, then when you call <code>GetFindings</code> from the home Region, the results include all of the matching findings from both the home Region and linked Regions.</p>
|
|
32
32
|
* @example
|
|
33
33
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
34
|
* ```javascript
|
|
@@ -27,8 +27,13 @@ declare const GetInvitationsCountCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
31
|
-
*
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>We recommend using Organizations instead of Security Hub invitations to manage your member accounts.
|
|
32
|
+
* For information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html">Managing Security Hub administrator and member accounts with Organizations</a>
|
|
33
|
+
* in the <i>Security Hub User Guide</i>.</p>
|
|
34
|
+
* </note>
|
|
35
|
+
* <p>Returns the count of all Security Hub membership invitations that were sent to the
|
|
36
|
+
* calling member account, not including the currently accepted invitation. </p>
|
|
32
37
|
* @example
|
|
33
38
|
* Use a bare-bones client and the command you need to make an API call.
|
|
34
39
|
* ```javascript
|
|
@@ -27,13 +27,18 @@ declare const InviteMembersCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>We recommend using Organizations instead of Security Hub invitations to manage your member accounts.
|
|
32
|
+
* For information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html">Managing Security Hub administrator and member accounts with Organizations</a>
|
|
33
|
+
* in the <i>Security Hub User Guide</i>.</p>
|
|
34
|
+
* </note>
|
|
35
|
+
* <p>Invites other Amazon Web Services accounts to become member accounts for the Security Hub administrator account that
|
|
31
36
|
* the invitation is sent from.</p>
|
|
32
|
-
* <p>This operation is only used to invite accounts that
|
|
33
|
-
* Organization accounts
|
|
37
|
+
* <p>This operation is only used to invite accounts that don't belong to an Amazon Web Services organization.
|
|
38
|
+
* Organization accounts don't receive invitations.</p>
|
|
34
39
|
* <p>Before you can use this action to invite a member, you must first use the <code>CreateMembers</code> action to create the member account in Security Hub.</p>
|
|
35
40
|
* <p>When the account owner enables Security Hub and accepts the invitation to become a member
|
|
36
|
-
* account, the administrator account can view the findings generated
|
|
41
|
+
* account, the administrator account can view the findings generated in the member account.</p>
|
|
37
42
|
* @example
|
|
38
43
|
* Use a bare-bones client and the command you need to make an API call.
|
|
39
44
|
* ```javascript
|
|
@@ -27,7 +27,8 @@ declare const ListFindingAggregatorsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <p>If
|
|
30
|
+
* <p>If cross-Region aggregation is enabled, then <code>ListFindingAggregators</code> returns the Amazon Resource Name (ARN)
|
|
31
|
+
* of the finding aggregator. You can run this operation from any Amazon Web Services Region.</p>
|
|
31
32
|
* @example
|
|
32
33
|
* Use a bare-bones client and the command you need to make an API call.
|
|
33
34
|
* ```javascript
|
|
@@ -27,9 +27,14 @@ declare const ListInvitationsCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
31
|
-
*
|
|
32
|
-
*
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>We recommend using Organizations instead of Security Hub invitations to manage your member accounts.
|
|
32
|
+
* For information, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-accounts-orgs.html">Managing Security Hub administrator and member accounts with Organizations</a>
|
|
33
|
+
* in the <i>Security Hub User Guide</i>.</p>
|
|
34
|
+
* </note>
|
|
35
|
+
* <p>Lists all Security Hub membership invitations that were sent to the calling account.</p>
|
|
36
|
+
* <p>Only accounts that are managed by invitation can use this operation.
|
|
37
|
+
* Accounts that are managed using the integration with Organizations don't receive invitations.</p>
|
|
33
38
|
* @example
|
|
34
39
|
* Use a bare-bones client and the command you need to make an API call.
|
|
35
40
|
* ```javascript
|
|
@@ -27,8 +27,12 @@ declare const UpdateFindingAggregatorCommand_base: {
|
|
|
27
27
|
getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
|
|
28
28
|
};
|
|
29
29
|
/**
|
|
30
|
-
* <
|
|
31
|
-
*
|
|
30
|
+
* <note>
|
|
31
|
+
* <p>The <i>aggregation Region</i> is now called the <i>home Region</i>.</p>
|
|
32
|
+
* </note>
|
|
33
|
+
* <p>Updates cross-Region aggregation settings. You can use this operation to update the Region linking mode and the list
|
|
34
|
+
* of included or excluded Amazon Web Services Regions. However, you can't use this operation to change the home Region.</p>
|
|
35
|
+
* <p>You can invoke this operation from the current home Region only.
|
|
32
36
|
* </p>
|
|
33
37
|
* @example
|
|
34
38
|
* Use a bare-bones client and the command you need to make an API call.
|
package/dist-types/index.d.ts
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
/**
|
|
2
2
|
* <p>Security Hub provides you with a comprehensive view of your security state in Amazon Web Services and helps
|
|
3
3
|
* you assess your Amazon Web Services environment against security industry standards and best practices.</p>
|
|
4
|
-
* <p>Security Hub collects security data across Amazon Web Services accounts, Amazon Web
|
|
4
|
+
* <p>Security Hub collects security data across Amazon Web Services accounts, Amazon Web Services services, and
|
|
5
5
|
* supported third-party products and helps you analyze your security trends and identify the highest priority security
|
|
6
6
|
* issues.</p>
|
|
7
7
|
* <p>To help you manage the security state of your organization, Security Hub supports multiple security standards.
|
|
@@ -10,10 +10,10 @@
|
|
|
10
10
|
* Security Standard (PCI DSS), and the National Institute of Standards and Technology (NIST). Each standard includes
|
|
11
11
|
* several security controls, each of which represents a security best practice. Security Hub runs checks against
|
|
12
12
|
* security controls and generates control findings to help you assess your compliance against security best practices.</p>
|
|
13
|
-
* <p>In addition to generating control findings, Security Hub also receives findings from other Amazon Web
|
|
13
|
+
* <p>In addition to generating control findings, Security Hub also receives findings from other Amazon Web Services services,
|
|
14
14
|
* such as Amazon GuardDuty and Amazon Inspector, and
|
|
15
15
|
* supported third-party products. This gives you a single pane of glass into a variety of security-related issues. You
|
|
16
|
-
* can also send Security Hub findings to other Amazon Web
|
|
16
|
+
* can also send Security Hub findings to other Amazon Web Services services and supported third-party products.</p>
|
|
17
17
|
* <p>Security Hub offers automation features that help you triage and remediate security issues. For example,
|
|
18
18
|
* you can use automation rules to automatically update critical findings when a security check fails. You can also leverage the integration with
|
|
19
19
|
* Amazon EventBridge to trigger automatic responses to specific findings.</p>
|
|
@@ -24,12 +24,12 @@
|
|
|
24
24
|
* </a>. The
|
|
25
25
|
* user guide explains key concepts and provides procedures
|
|
26
26
|
* that demonstrate how to use Security Hub features. It also provides information about topics such as
|
|
27
|
-
* integrating Security Hub with other Amazon Web
|
|
27
|
+
* integrating Security Hub with other Amazon Web Services services.</p>
|
|
28
28
|
* <p>In addition to interacting with Security Hub by making calls to the Security Hub API, you can
|
|
29
29
|
* use a current version of an Amazon Web Services command line tool or SDK. Amazon Web Services provides tools
|
|
30
30
|
* and SDKs that consist of libraries and sample code for various languages and platforms, such as PowerShell,
|
|
31
31
|
* Java, Go, Python, C++, and .NET. These tools and SDKs provide convenient, programmatic access to
|
|
32
|
-
* Security Hub and other Amazon Web
|
|
32
|
+
* Security Hub and other Amazon Web Services services . They also handle tasks such as signing requests,
|
|
33
33
|
* managing errors, and retrying requests automatically. For information about installing and using the Amazon Web Services tools
|
|
34
34
|
* and SDKs, see <a href="http://aws.amazon.com/developer/tools/">Tools to Build on Amazon Web Services</a>.</p>
|
|
35
35
|
* <p>With the exception of operations that are related to central configuration, Security Hub API requests are executed only in
|
|
@@ -640,7 +640,7 @@ export interface SeverityUpdate {
|
|
|
640
640
|
/**
|
|
641
641
|
* <p>The normalized severity for the finding. This attribute is to be deprecated in favor of
|
|
642
642
|
* <code>Label</code>.</p>
|
|
643
|
-
* <p>If you provide <code>Normalized</code> and
|
|
643
|
+
* <p>If you provide <code>Normalized</code> and don't provide <code>Label</code>,
|
|
644
644
|
* <code>Label</code> is set automatically as follows.</p>
|
|
645
645
|
* <ul>
|
|
646
646
|
* <li>
|
|
@@ -769,7 +769,7 @@ export interface WorkflowUpdate {
|
|
|
769
769
|
* </li>
|
|
770
770
|
* <li>
|
|
771
771
|
* <p>
|
|
772
|
-
* <code>SUPPRESSED</code> - Indicates that you reviewed the finding and
|
|
772
|
+
* <code>SUPPRESSED</code> - Indicates that you reviewed the finding and don't believe that any action is needed. The finding is no longer updated.</p>
|
|
773
773
|
* </li>
|
|
774
774
|
* </ul>
|
|
775
775
|
* @public
|
|
@@ -854,18 +854,15 @@ export declare const AutomationRulesActionType: {
|
|
|
854
854
|
export type AutomationRulesActionType = (typeof AutomationRulesActionType)[keyof typeof AutomationRulesActionType];
|
|
855
855
|
/**
|
|
856
856
|
* <p>
|
|
857
|
-
* One or more actions
|
|
858
|
-
* of
|
|
857
|
+
* One or more actions that Security Hub takes when a finding matches the defined criteria
|
|
858
|
+
* of a rule.
|
|
859
859
|
* </p>
|
|
860
860
|
* @public
|
|
861
861
|
*/
|
|
862
862
|
export interface AutomationRulesAction {
|
|
863
863
|
/**
|
|
864
864
|
* <p>
|
|
865
|
-
* Specifies
|
|
866
|
-
* finding field classifies findings in the format of namespace/category/classifier. For more information, see
|
|
867
|
-
* <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html">Types taxonomy for ASFF</a> in
|
|
868
|
-
* the <i>Security Hub User Guide</i>.
|
|
865
|
+
* Specifies the type of action that Security Hub takes when a finding matches the defined criteria of a rule.
|
|
869
866
|
* </p>
|
|
870
867
|
* @public
|
|
871
868
|
*/
|
|
@@ -1753,7 +1750,7 @@ export interface AutomationRulesFindingFilters {
|
|
|
1753
1750
|
* <p>
|
|
1754
1751
|
* The identifier for the given resource type. For Amazon Web Services resources that are identified by
|
|
1755
1752
|
* Amazon Resource Names (ARNs), this is the ARN. For Amazon Web Services resources that lack ARNs,
|
|
1756
|
-
* this is the identifier as defined by the Amazon Web
|
|
1753
|
+
* this is the identifier as defined by the Amazon Web Services service that created the resource.
|
|
1757
1754
|
* For non-Amazon Web Services resources, this is a unique identifier that is associated with the
|
|
1758
1755
|
* resource.
|
|
1759
1756
|
* </p>
|
|
@@ -4251,7 +4248,7 @@ export interface AwsBackupBackupPlanRuleCopyActionsDetails {
|
|
|
4251
4248
|
/**
|
|
4252
4249
|
* <p>Defines when a protected resource is transitioned to cold storage and when it expires.
|
|
4253
4250
|
* Backup transitions and expires backups automatically according to the
|
|
4254
|
-
* lifecycle that you define. If you
|
|
4251
|
+
* lifecycle that you define. If you don't specify a lifecycle, Backup applies
|
|
4255
4252
|
* the lifecycle policy of the source backup to the destination backup.</p>
|
|
4256
4253
|
* <p>Backups transitioned to cold storage must be stored in cold storage for a minimum of 90 days.</p>
|
|
4257
4254
|
* @public
|
|
@@ -4312,7 +4309,7 @@ export interface AwsBackupBackupPlanRuleDetails {
|
|
|
4312
4309
|
*/
|
|
4313
4310
|
CopyActions?: AwsBackupBackupPlanRuleCopyActionsDetails[];
|
|
4314
4311
|
/**
|
|
4315
|
-
* <p>Defines when a protected resource is transitioned to cold storage and when it expires. Backup transitions and expires backups automatically according to the lifecycle that you define. If you
|
|
4312
|
+
* <p>Defines when a protected resource is transitioned to cold storage and when it expires. Backup transitions and expires backups automatically according to the lifecycle that you define. If you don't specify a lifecycle, Backup applies the lifecycle policy of the source backup to the destination backup.</p>
|
|
4316
4313
|
* <p>Backups transitioned to cold storage must be stored in cold storage for a minimum of 90 days.</p>
|
|
4317
4314
|
* @public
|
|
4318
4315
|
*/
|
|
@@ -4438,7 +4435,7 @@ export interface AwsBackupBackupVaultDetails {
|
|
|
4438
4435
|
BackupVaultName?: string;
|
|
4439
4436
|
/**
|
|
4440
4437
|
* <p>The unique ARN associated with the server-side encryption key. You can specify a key to encrypt your backups from services that support
|
|
4441
|
-
* full Backup management. If you
|
|
4438
|
+
* full Backup management. If you don't specify a key, Backup creates an KMS key for you by default.
|
|
4442
4439
|
* </p>
|
|
4443
4440
|
* @public
|
|
4444
4441
|
*/
|
|
@@ -9580,7 +9577,7 @@ export interface RouteSetDetails {
|
|
|
9580
9577
|
DestinationIpv6CidrBlock?: string;
|
|
9581
9578
|
/**
|
|
9582
9579
|
* <p>
|
|
9583
|
-
* The prefix of the destination Amazon Web
|
|
9580
|
+
* The prefix of the destination Amazon Web Services service.
|
|
9584
9581
|
* </p>
|
|
9585
9582
|
* @public
|
|
9586
9583
|
*/
|
|
@@ -11516,7 +11513,7 @@ export interface AwsEcsServiceDetails {
|
|
|
11516
11513
|
/**
|
|
11517
11514
|
* <p>The scheduling strategy to use for the service.</p>
|
|
11518
11515
|
* <p>The <code>REPLICA</code> scheduling strategy places and maintains the desired number of tasks across the cluster. By default, the service scheduler spreads tasks across Availability Zones. Task placement strategies and constraints are used to customize task placement decisions.</p>
|
|
11519
|
-
* <p>The <code>DAEMON</code> scheduling strategy deploys exactly one task on each active container instance that meets all of the task placement constraints that are specified in the cluster. The service scheduler also evaluates the task placement constraints for running tasks and stops tasks that
|
|
11516
|
+
* <p>The <code>DAEMON</code> scheduling strategy deploys exactly one task on each active container instance that meets all of the task placement constraints that are specified in the cluster. The service scheduler also evaluates the task placement constraints for running tasks and stops tasks that don't meet the placement constraints.</p>
|
|
11520
11517
|
* <p>Valid values: <code>REPLICA</code> | <code>DAEMON</code>
|
|
11521
11518
|
* </p>
|
|
11522
11519
|
* @public
|
|
@@ -5943,7 +5943,7 @@ export interface AwsRdsDbInstanceDetails {
|
|
|
5943
5943
|
* <b>Oracle</b>
|
|
5944
5944
|
* </p>
|
|
5945
5945
|
* <p>Contains the Oracle System ID (SID) of the created DB instance. Not shown when the
|
|
5946
|
-
* returned parameters
|
|
5946
|
+
* returned parameters don't apply to an Oracle DB instance. </p>
|
|
5947
5947
|
* @public
|
|
5948
5948
|
*/
|
|
5949
5949
|
DBName?: string;
|
|
@@ -8945,7 +8945,7 @@ export interface Compliance {
|
|
|
8945
8945
|
/**
|
|
8946
8946
|
* <p>
|
|
8947
8947
|
* Typically provides the unique identifier of a control across standards. For Security Hub controls, this field consists of an
|
|
8948
|
-
* Amazon Web
|
|
8948
|
+
* Amazon Web Services service and a unique number, such as <code>APIGateway.5</code>.
|
|
8949
8949
|
* </p>
|
|
8950
8950
|
* @public
|
|
8951
8951
|
*/
|
|
@@ -746,7 +746,7 @@ export interface AwsWafWebAclRule {
|
|
|
746
746
|
* <p>
|
|
747
747
|
* <code>ActivatedRule</code>|<code>OverrideAction</code> applies only when updating or
|
|
748
748
|
* adding a <code>RuleGroup</code>
|
|
749
|
-
* to a web ACL. In this case you
|
|
749
|
+
* to a web ACL. In this case you don't use <code>ActivatedRule</code>
|
|
750
750
|
* <code>Action</code>. For all other update requests,
|
|
751
751
|
* <code>ActivatedRule</code>
|
|
752
752
|
* <code>Action</code> is used instead of <code>ActivatedRule</code>
|
|
@@ -758,7 +758,7 @@ export interface AwsWafWebAclRule {
|
|
|
758
758
|
* <p>Specifies the order in which the rules in a web
|
|
759
759
|
* ACL are evaluated. Rules with a lower value for <code>Priority</code> are
|
|
760
760
|
* evaluated before rules with a higher value. The value must be a unique integer. If you add
|
|
761
|
-
* multiple rules to a web ACL, the values
|
|
761
|
+
* multiple rules to a web ACL, the values don't need to be consecutive.</p>
|
|
762
762
|
* @public
|
|
763
763
|
*/
|
|
764
764
|
Priority?: number;
|
|
@@ -1619,7 +1619,7 @@ export interface Severity {
|
|
|
1619
1619
|
* escalating.</p>
|
|
1620
1620
|
* </li>
|
|
1621
1621
|
* </ul>
|
|
1622
|
-
* <p>If you provide <code>Normalized</code> and
|
|
1622
|
+
* <p>If you provide <code>Normalized</code> and don't provide <code>Label</code>, then
|
|
1623
1623
|
* <code>Label</code> is set automatically as follows. </p>
|
|
1624
1624
|
* <ul>
|
|
1625
1625
|
* <li>
|
|
@@ -1650,7 +1650,7 @@ export interface Severity {
|
|
|
1650
1650
|
* <p>Deprecated. The normalized severity of a finding.
|
|
1651
1651
|
* Instead of providing <code>Normalized</code>, provide <code>Label</code>.</p>
|
|
1652
1652
|
* <p>The value of <code>Normalized</code> can be an integer between <code>0</code> and <code>100</code>.</p>
|
|
1653
|
-
* <p>If you provide <code>Label</code> and
|
|
1653
|
+
* <p>If you provide <code>Label</code> and don't provide <code>Normalized</code>, then
|
|
1654
1654
|
* <code>Normalized</code> is set automatically as follows.</p>
|
|
1655
1655
|
* <ul>
|
|
1656
1656
|
* <li>
|
|
@@ -2244,7 +2244,7 @@ export interface Workflow {
|
|
|
2244
2244
|
* </li>
|
|
2245
2245
|
* <li>
|
|
2246
2246
|
* <p>
|
|
2247
|
-
* <code>SUPPRESSED</code> - Indicates that you reviewed the finding and
|
|
2247
|
+
* <code>SUPPRESSED</code> - Indicates that you reviewed the finding and don't believe that any action is needed. The finding is no longer updated.</p>
|
|
2248
2248
|
* </li>
|
|
2249
2249
|
* <li>
|
|
2250
2250
|
* <p>
|
|
@@ -3369,7 +3369,7 @@ export interface AwsSecurityFindingFilters {
|
|
|
3369
3369
|
* </li>
|
|
3370
3370
|
* <li>
|
|
3371
3371
|
* <p>
|
|
3372
|
-
* <code>SUPPRESSED</code> - Indicates that you reviewed the finding and
|
|
3372
|
+
* <code>SUPPRESSED</code> - Indicates that you reviewed the finding and don't believe that any action is
|
|
3373
3373
|
* needed.</p>
|
|
3374
3374
|
* <p>The workflow status of a <code>SUPPRESSED</code> finding does not change if
|
|
3375
3375
|
* <code>RecordState</code> changes from <code>ARCHIVED</code> to
|
|
@@ -3490,7 +3490,7 @@ export interface AwsSecurityFindingFilters {
|
|
|
3490
3490
|
/**
|
|
3491
3491
|
* <p>
|
|
3492
3492
|
* The unique identifier of a control across standards. Values for this field typically consist of an
|
|
3493
|
-
* Amazon Web
|
|
3493
|
+
* Amazon Web Services service and a number, such as APIGateway.5.
|
|
3494
3494
|
* </p>
|
|
3495
3495
|
* @public
|
|
3496
3496
|
*/
|
|
@@ -4305,7 +4305,7 @@ export type UpdateStatus = (typeof UpdateStatus)[keyof typeof UpdateStatus];
|
|
|
4305
4305
|
export interface SecurityControl {
|
|
4306
4306
|
/**
|
|
4307
4307
|
* <p>
|
|
4308
|
-
* The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web
|
|
4308
|
+
* The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Services service name and a
|
|
4309
4309
|
* number, such as APIGateway.3.
|
|
4310
4310
|
* </p>
|
|
4311
4311
|
* @public
|
|
@@ -4496,7 +4496,7 @@ export interface StandardsControlAssociationDetail {
|
|
|
4496
4496
|
StandardsArn: string | undefined;
|
|
4497
4497
|
/**
|
|
4498
4498
|
* <p>
|
|
4499
|
-
* The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web
|
|
4499
|
+
* The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Services service
|
|
4500
4500
|
* name and a number, such as APIGateway.3.
|
|
4501
4501
|
* </p>
|
|
4502
4502
|
* @public
|
|
@@ -5753,7 +5753,7 @@ export type Policy = Policy.SecurityHubMember | Policy.$UnknownMember;
|
|
|
5753
5753
|
export declare namespace Policy {
|
|
5754
5754
|
/**
|
|
5755
5755
|
* <p>
|
|
5756
|
-
* The Amazon Web
|
|
5756
|
+
* The Amazon Web Services service that the configuration policy applies to.
|
|
5757
5757
|
* </p>
|
|
5758
5758
|
* @public
|
|
5759
5759
|
*/
|
|
@@ -5906,8 +5906,8 @@ export interface CreateFindingAggregatorRequest {
|
|
|
5906
5906
|
*/
|
|
5907
5907
|
RegionLinkingMode: string | undefined;
|
|
5908
5908
|
/**
|
|
5909
|
-
* <p>If <code>RegionLinkingMode</code> is <code>ALL_REGIONS_EXCEPT_SPECIFIED</code>, then this is a space-separated list of Regions that
|
|
5910
|
-
* <p>If <code>RegionLinkingMode</code> is <code>SPECIFIED_REGIONS</code>, then this is a space-separated list of Regions that do
|
|
5909
|
+
* <p>If <code>RegionLinkingMode</code> is <code>ALL_REGIONS_EXCEPT_SPECIFIED</code>, then this is a space-separated list of Regions that don't replicate and send findings to the home Region.</p>
|
|
5910
|
+
* <p>If <code>RegionLinkingMode</code> is <code>SPECIFIED_REGIONS</code>, then this is a space-separated list of Regions that do replicate and send findings to the home Region.
|
|
5911
5911
|
* </p>
|
|
5912
5912
|
* <p>An <code>InvalidInputException</code> error results if you populate this field while <code>RegionLinkingMode</code> is
|
|
5913
5913
|
* <code>NO_REGIONS</code>.</p>
|
|
@@ -5920,12 +5920,12 @@ export interface CreateFindingAggregatorRequest {
|
|
|
5920
5920
|
*/
|
|
5921
5921
|
export interface CreateFindingAggregatorResponse {
|
|
5922
5922
|
/**
|
|
5923
|
-
* <p>The ARN of the finding aggregator. You use the finding aggregator ARN to retrieve details for, update, and stop
|
|
5923
|
+
* <p>The ARN of the finding aggregator. You use the finding aggregator ARN to retrieve details for, update, and stop cross-Region aggregation.</p>
|
|
5924
5924
|
* @public
|
|
5925
5925
|
*/
|
|
5926
5926
|
FindingAggregatorArn?: string;
|
|
5927
5927
|
/**
|
|
5928
|
-
* <p>The
|
|
5928
|
+
* <p>The home Region. Findings generated in linked Regions are replicated and sent to the home Region.</p>
|
|
5929
5929
|
* @public
|
|
5930
5930
|
*/
|
|
5931
5931
|
FindingAggregationRegion?: string;
|
|
@@ -6795,7 +6795,7 @@ export interface EnableSecurityHubRequest {
|
|
|
6795
6795
|
Tags?: Record<string, string>;
|
|
6796
6796
|
/**
|
|
6797
6797
|
* <p>Whether to enable the security standards that Security Hub has designated as automatically
|
|
6798
|
-
* enabled. If you
|
|
6798
|
+
* enabled. If you don't provide a value for <code>EnableDefaultStandards</code>, it is set
|
|
6799
6799
|
* to <code>true</code>. To not enable the automatically enabled standards, set
|
|
6800
6800
|
* <code>EnableDefaultStandards</code> to <code>false</code>.</p>
|
|
6801
6801
|
* @public
|
|
@@ -6822,7 +6822,8 @@ export interface EnableSecurityHubRequest {
|
|
|
6822
6822
|
export interface EnableSecurityHubResponse {
|
|
6823
6823
|
}
|
|
6824
6824
|
/**
|
|
6825
|
-
* <p>A finding aggregator
|
|
6825
|
+
* <p>A finding aggregator is a Security Hub resource that specifies cross-Region aggregation settings, including the
|
|
6826
|
+
* home Region and any linked Regions.</p>
|
|
6826
6827
|
* @public
|
|
6827
6828
|
*/
|
|
6828
6829
|
export interface FindingAggregator {
|
|
@@ -6887,7 +6888,7 @@ export interface FindingHistoryUpdateSource {
|
|
|
6887
6888
|
* <p>
|
|
6888
6889
|
* Describes the type of finding change event, such as a call to <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html">
|
|
6889
6890
|
* <code>BatchImportFindings</code>
|
|
6890
|
-
* </a> (by an integrated Amazon Web
|
|
6891
|
+
* </a> (by an integrated Amazon Web Services service or third party partner integration) or <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindings.html">
|
|
6891
6892
|
* <code>BatchUpdateFindings</code>
|
|
6892
6893
|
* </a> (by a Security Hub customer).
|
|
6893
6894
|
* </p>
|
|
@@ -6956,7 +6957,7 @@ export interface FindingHistoryRecord {
|
|
|
6956
6957
|
FindingCreated?: boolean;
|
|
6957
6958
|
/**
|
|
6958
6959
|
* <p> Identifies the source of the event that changed the finding. For example, an integrated
|
|
6959
|
-
* Amazon Web
|
|
6960
|
+
* Amazon Web Services service or third-party partner integration may call <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html">
|
|
6960
6961
|
* <code>BatchImportFindings</code>
|
|
6961
6962
|
* </a>, or an Security Hub customer
|
|
6962
6963
|
* may call <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindings.html">
|
|
@@ -7224,7 +7225,7 @@ export interface GetFindingAggregatorResponse {
|
|
|
7224
7225
|
*/
|
|
7225
7226
|
FindingAggregatorArn?: string;
|
|
7226
7227
|
/**
|
|
7227
|
-
* <p>The
|
|
7228
|
+
* <p>The home Region. Findings generated in linked Regions are replicated and sent to the home Region.</p>
|
|
7228
7229
|
* @public
|
|
7229
7230
|
*/
|
|
7230
7231
|
FindingAggregationRegion?: string;
|
|
@@ -7508,7 +7509,7 @@ export interface GetInsightResultsResponse {
|
|
|
7508
7509
|
*/
|
|
7509
7510
|
export interface GetInsightsRequest {
|
|
7510
7511
|
/**
|
|
7511
|
-
* <p>The ARNs of the insights to describe. If you
|
|
7512
|
+
* <p>The ARNs of the insights to describe. If you don't provide any insight ARNs, then
|
|
7512
7513
|
* <code>GetInsights</code> returns all of your custom insights. It does not return any
|
|
7513
7514
|
* managed insights.</p>
|
|
7514
7515
|
* @public
|
|
@@ -7773,7 +7774,7 @@ export interface SecurityControlDefinition {
|
|
|
7773
7774
|
/**
|
|
7774
7775
|
* <p>
|
|
7775
7776
|
* The unique identifier of a security control across standards. Values for this field typically consist of an
|
|
7776
|
-
* Amazon Web
|
|
7777
|
+
* Amazon Web Services service name and a number (for example, APIGateway.3). This parameter differs from
|
|
7777
7778
|
* <code>SecurityControlArn</code>, which is a unique Amazon Resource Name (ARN) assigned to a control. The
|
|
7778
7779
|
* ARN references the security control ID (for example, arn:aws:securityhub:eu-central-1:123456789012:security-control/APIGateway.3).
|
|
7779
7780
|
* </p>
|
|
@@ -8282,7 +8283,7 @@ export interface StandardsControlAssociationSummary {
|
|
|
8282
8283
|
/**
|
|
8283
8284
|
* <p>
|
|
8284
8285
|
* A unique standard-agnostic identifier for a control. Values for this field typically consist of an
|
|
8285
|
-
* Amazon Web
|
|
8286
|
+
* Amazon Web Services service and a number, such as APIGateway.5. This field doesn't reference a specific standard.
|
|
8286
8287
|
* </p>
|
|
8287
8288
|
* @public
|
|
8288
8289
|
*/
|
|
@@ -8697,8 +8698,8 @@ export interface UpdateFindingAggregatorRequest {
|
|
|
8697
8698
|
*/
|
|
8698
8699
|
RegionLinkingMode: string | undefined;
|
|
8699
8700
|
/**
|
|
8700
|
-
* <p>If <code>RegionLinkingMode</code> is <code>ALL_REGIONS_EXCEPT_SPECIFIED</code>, then this is a space-separated list of Regions that
|
|
8701
|
-
* <p>If <code>RegionLinkingMode</code> is <code>SPECIFIED_REGIONS</code>, then this is a space-separated list of Regions that do
|
|
8701
|
+
* <p>If <code>RegionLinkingMode</code> is <code>ALL_REGIONS_EXCEPT_SPECIFIED</code>, then this is a space-separated list of Regions that don't replicate and send findings to the home Region.</p>
|
|
8702
|
+
* <p>If <code>RegionLinkingMode</code> is <code>SPECIFIED_REGIONS</code>, then this is a space-separated list of Regions that do replicate and send findings to the home Region.</p>
|
|
8702
8703
|
* <p>An <code>InvalidInputException</code> error results if you populate this field while <code>RegionLinkingMode</code> is
|
|
8703
8704
|
* <code>NO_REGIONS</code>.</p>
|
|
8704
8705
|
* @public
|
|
@@ -8715,7 +8716,7 @@ export interface UpdateFindingAggregatorResponse {
|
|
|
8715
8716
|
*/
|
|
8716
8717
|
FindingAggregatorArn?: string;
|
|
8717
8718
|
/**
|
|
8718
|
-
* <p>The
|
|
8719
|
+
* <p>The home Region. Findings generated in linked Regions are replicated and sent to the home Region.</p>
|
|
8719
8720
|
* @public
|
|
8720
8721
|
*/
|
|
8721
8722
|
FindingAggregationRegion?: string;
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-securityhub",
|
|
3
3
|
"description": "AWS SDK for JavaScript Securityhub Client for Node.js, Browser and React Native",
|
|
4
|
-
"version": "3.
|
|
4
|
+
"version": "3.662.0",
|
|
5
5
|
"scripts": {
|
|
6
6
|
"build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
|
|
7
7
|
"build:cjs": "node ../../scripts/compilation/inline client-securityhub",
|
|
@@ -20,43 +20,43 @@
|
|
|
20
20
|
"dependencies": {
|
|
21
21
|
"@aws-crypto/sha256-browser": "5.2.0",
|
|
22
22
|
"@aws-crypto/sha256-js": "5.2.0",
|
|
23
|
-
"@aws-sdk/client-sso-oidc": "3.
|
|
24
|
-
"@aws-sdk/client-sts": "3.
|
|
25
|
-
"@aws-sdk/core": "3.
|
|
26
|
-
"@aws-sdk/credential-provider-node": "3.
|
|
27
|
-
"@aws-sdk/middleware-host-header": "3.
|
|
28
|
-
"@aws-sdk/middleware-logger": "3.
|
|
29
|
-
"@aws-sdk/middleware-recursion-detection": "3.
|
|
30
|
-
"@aws-sdk/middleware-user-agent": "3.
|
|
31
|
-
"@aws-sdk/region-config-resolver": "3.
|
|
32
|
-
"@aws-sdk/types": "3.
|
|
33
|
-
"@aws-sdk/util-endpoints": "3.
|
|
34
|
-
"@aws-sdk/util-user-agent-browser": "3.
|
|
35
|
-
"@aws-sdk/util-user-agent-node": "3.
|
|
36
|
-
"@smithy/config-resolver": "^3.0.
|
|
37
|
-
"@smithy/core": "^2.4.
|
|
38
|
-
"@smithy/fetch-http-handler": "^3.2.
|
|
39
|
-
"@smithy/hash-node": "^3.0.
|
|
40
|
-
"@smithy/invalid-dependency": "^3.0.
|
|
41
|
-
"@smithy/middleware-content-length": "^3.0.
|
|
42
|
-
"@smithy/middleware-endpoint": "^3.1.
|
|
43
|
-
"@smithy/middleware-retry": "^3.0.
|
|
44
|
-
"@smithy/middleware-serde": "^3.0.
|
|
45
|
-
"@smithy/middleware-stack": "^3.0.
|
|
46
|
-
"@smithy/node-config-provider": "^3.1.
|
|
47
|
-
"@smithy/node-http-handler": "^3.2.
|
|
48
|
-
"@smithy/protocol-http": "^4.1.
|
|
49
|
-
"@smithy/smithy-client": "^3.3.
|
|
50
|
-
"@smithy/types": "^3.
|
|
51
|
-
"@smithy/url-parser": "^3.0.
|
|
23
|
+
"@aws-sdk/client-sso-oidc": "3.662.0",
|
|
24
|
+
"@aws-sdk/client-sts": "3.662.0",
|
|
25
|
+
"@aws-sdk/core": "3.662.0",
|
|
26
|
+
"@aws-sdk/credential-provider-node": "3.662.0",
|
|
27
|
+
"@aws-sdk/middleware-host-header": "3.662.0",
|
|
28
|
+
"@aws-sdk/middleware-logger": "3.662.0",
|
|
29
|
+
"@aws-sdk/middleware-recursion-detection": "3.662.0",
|
|
30
|
+
"@aws-sdk/middleware-user-agent": "3.662.0",
|
|
31
|
+
"@aws-sdk/region-config-resolver": "3.662.0",
|
|
32
|
+
"@aws-sdk/types": "3.662.0",
|
|
33
|
+
"@aws-sdk/util-endpoints": "3.662.0",
|
|
34
|
+
"@aws-sdk/util-user-agent-browser": "3.662.0",
|
|
35
|
+
"@aws-sdk/util-user-agent-node": "3.662.0",
|
|
36
|
+
"@smithy/config-resolver": "^3.0.9",
|
|
37
|
+
"@smithy/core": "^2.4.7",
|
|
38
|
+
"@smithy/fetch-http-handler": "^3.2.9",
|
|
39
|
+
"@smithy/hash-node": "^3.0.7",
|
|
40
|
+
"@smithy/invalid-dependency": "^3.0.7",
|
|
41
|
+
"@smithy/middleware-content-length": "^3.0.9",
|
|
42
|
+
"@smithy/middleware-endpoint": "^3.1.4",
|
|
43
|
+
"@smithy/middleware-retry": "^3.0.22",
|
|
44
|
+
"@smithy/middleware-serde": "^3.0.7",
|
|
45
|
+
"@smithy/middleware-stack": "^3.0.7",
|
|
46
|
+
"@smithy/node-config-provider": "^3.1.8",
|
|
47
|
+
"@smithy/node-http-handler": "^3.2.4",
|
|
48
|
+
"@smithy/protocol-http": "^4.1.4",
|
|
49
|
+
"@smithy/smithy-client": "^3.3.6",
|
|
50
|
+
"@smithy/types": "^3.5.0",
|
|
51
|
+
"@smithy/url-parser": "^3.0.7",
|
|
52
52
|
"@smithy/util-base64": "^3.0.0",
|
|
53
53
|
"@smithy/util-body-length-browser": "^3.0.0",
|
|
54
54
|
"@smithy/util-body-length-node": "^3.0.0",
|
|
55
|
-
"@smithy/util-defaults-mode-browser": "^3.0.
|
|
56
|
-
"@smithy/util-defaults-mode-node": "^3.0.
|
|
57
|
-
"@smithy/util-endpoints": "^2.1.
|
|
58
|
-
"@smithy/util-middleware": "^3.0.
|
|
59
|
-
"@smithy/util-retry": "^3.0.
|
|
55
|
+
"@smithy/util-defaults-mode-browser": "^3.0.22",
|
|
56
|
+
"@smithy/util-defaults-mode-node": "^3.0.22",
|
|
57
|
+
"@smithy/util-endpoints": "^2.1.3",
|
|
58
|
+
"@smithy/util-middleware": "^3.0.7",
|
|
59
|
+
"@smithy/util-retry": "^3.0.7",
|
|
60
60
|
"@smithy/util-utf8": "^3.0.0",
|
|
61
61
|
"tslib": "^2.6.2"
|
|
62
62
|
},
|