@aws-sdk/client-securityhub 3.696.0 → 3.703.0

package/dist-types/models/models_1.d.ts

@@ -1,4 +1,166 @@
-import { AssociatedStandard, AvailabilityZone, AwsEcsContainerDetails, AwsEcsTaskDefinitionContainerDefinitionsDependsOnDetails, AwsEcsTaskDefinitionContainerDefinitionsEnvironmentDetails, AwsEcsTaskDefinitionContainerDefinitionsEnvironmentFilesDetails, AwsEcsTaskDefinitionContainerDefinitionsExtraHostsDetails, AwsEcsTaskDefinitionContainerDefinitionsFirelensConfigurationDetails, AwsEcsTaskDefinitionContainerDefinitionsHealthCheckDetails, AwsEcsTaskDefinitionContainerDefinitionsLinuxParametersDetails, AwsEcsTaskDefinitionContainerDefinitionsLogConfigurationDetails, AwsEcsTaskDefinitionContainerDefinitionsMountPointsDetails, AwsEcsTaskDefinitionContainerDefinitionsPortMappingsDetails, AwsEcsTaskDefinitionContainerDefinitionsRepositoryCredentialsDetails, AwsEcsTaskDefinitionContainerDefinitionsResourceRequirementsDetails, AwsEcsTaskDefinitionContainerDefinitionsSecretsDetails, AwsEcsTaskDefinitionContainerDefinitionsSystemControlsDetails, AwsEcsTaskDefinitionContainerDefinitionsUlimitsDetails, RelatedFinding, SeverityLabel } from "./models_0";
+import { Actor, AssociatedStandard, AvailabilityZone, AwsEcsContainerDetails, AwsEcsTaskDefinitionContainerDefinitionsDependsOnDetails, AwsEcsTaskDefinitionContainerDefinitionsEnvironmentDetails, AwsEcsTaskDefinitionContainerDefinitionsEnvironmentFilesDetails, AwsEcsTaskDefinitionContainerDefinitionsExtraHostsDetails, AwsEcsTaskDefinitionContainerDefinitionsFirelensConfigurationDetails, AwsEcsTaskDefinitionContainerDefinitionsHealthCheckDetails, AwsEcsTaskDefinitionContainerDefinitionsLinuxParametersDetails, AwsEcsTaskDefinitionContainerDefinitionsLogConfigurationDetails, AwsEcsTaskDefinitionContainerDefinitionsMountPointsDetails, AwsEcsTaskDefinitionContainerDefinitionsPortMappingsDetails, RelatedFinding, SeverityLabel } from "./models_0";
+/**
+ * <p>The private repository authentication credentials to use.</p>
+ * @public
+ */
+export interface AwsEcsTaskDefinitionContainerDefinitionsRepositoryCredentialsDetails {
+    /**
+     * <p>The ARN of the secret that contains the private repository credentials.</p>
+     * @public
+     */
+    CredentialsParameter?: string | undefined;
+}
+/**
+ * <p>A resource to assign to a container.</p>
+ * @public
+ */
+export interface AwsEcsTaskDefinitionContainerDefinitionsResourceRequirementsDetails {
+    /**
+     * <p>The type of resource to assign to a container. Valid values are <code>GPU</code> or <code>InferenceAccelerator</code>.</p>
+     * @public
+     */
+    Type?: string | undefined;
+    /**
+     * <p>The value for the specified resource type.</p>
+     *          <p>For <code>GPU</code>, the value is the number of physical GPUs the Amazon ECS container agent
+     *          reserves for the container.</p>
+     *          <p>For <code>InferenceAccelerator</code>, the value should match the <code>DeviceName</code>
+     *          attribute of an entry in <code>InferenceAccelerators</code>.</p>
+     * @public
+     */
+    Value?: string | undefined;
+}
+/**
+ * <p>A secret to pass to the container.</p>
+ * @public
+ */
+export interface AwsEcsTaskDefinitionContainerDefinitionsSecretsDetails {
+    /**
+     * <p>The name of the secret.</p>
+     * @public
+     */
+    Name?: string | undefined;
+    /**
+     * <p>The secret to expose to the container. The value is either the full ARN of the Secrets Manager
+     *          secret or the full ARN of the parameter in the Systems Manager Parameter Store.</p>
+     * @public
+     */
+    ValueFrom?: string | undefined;
+}
+/**
+ * <p>A namespaced kernel parameter to set in the container.</p>
+ * @public
+ */
+export interface AwsEcsTaskDefinitionContainerDefinitionsSystemControlsDetails {
+    /**
+     * <p>The namespaced kernel parameter for which to set a value.</p>
+     * @public
+     */
+    Namespace?: string | undefined;
+    /**
+     * <p>The value of the parameter.</p>
+     * @public
+     */
+    Value?: string | undefined;
+}
+/**
+ * <p>A ulimit to set in the container.</p>
+ * @public
+ */
+export interface AwsEcsTaskDefinitionContainerDefinitionsUlimitsDetails {
+    /**
+     * <p>The hard limit for the ulimit type.</p>
+     * @public
+     */
+    HardLimit?: number | undefined;
+    /**
+     * <p>The type of the ulimit. Valid values are as follows:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>core</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>cpu</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>data</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>fsize</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>locks</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>memlock</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>msgqueue</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>nice</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>nofile</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>nproc</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>rss</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>rtprio</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>rttime</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>sigpending</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>stack</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    Name?: string | undefined;
+    /**
+     * <p>The soft limit for the ulimit type.</p>
+     * @public
+     */
+    SoftLimit?: number | undefined;
+}
 /**
  * <p>A data volume to mount from another container.</p>
  * @public
@@ -8877,7 +9039,7 @@ export type ComplianceStatus = (typeof ComplianceStatus)[keyof typeof Compliance
 export interface StatusReason {
     /**
      * <p>A code that represents a reason for the control status. For the list of status reason
-     *          codes and their meanings, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-results.html#securityhub-standards-results-asff">Standards-related information in the ASFF</a> in the
+     *          codes and their meanings, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/controls-findings-create-update.html#control-findings-asff-compliance">Compliance details for control findings</a> in the
      *             <i>Security Hub User Guide</i>. </p>
      * @public
      */
@@ -8965,1764 +9127,1699 @@ export interface Compliance {
     SecurityControlParameters?: SecurityControlParameter[] | undefined;
 }
 /**
- * <p>The severity assigned to a finding by the finding provider. This object may include one or more of the following
- * attributes:</p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <code>Label</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>Normalized</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>Original</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>Product</code>
- *                </p>
- *             </li>
- *          </ul>
- *          <p>If a <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html">
- *                <code>BatchImportFindings</code>
- *             </a> request for a
- *            new finding only provides <code>Label</code> or only provides <code>Normalized</code>, Security Hub
- *            automatically populates the value of the other field.</p>
- *          <p>The <code>Normalized</code> and <code>Product</code> attributes are included in the <code>FindingProviderSeverity</code>
- *            structure to preserve the historical information associated with the finding, even if the top-level
- *            <code>Severity</code> object is later modified using the <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindings.html">
- *                <code>BatchUpdateFindings</code>
- *             </a> operation.</p>
- *          <p>If the top-level <code>Finding.Severity</code> object is present, but <code>Finding.FindingProviderFields</code> isn't present,
- *            Security Hub creates the <code>FindingProviderFields.Severity</code> object and copies the entire <code>Finding.Severity</code> object into it.
- *            This ensures that the original, provider-supplied details are retained within the <code>FindingProviderFields.Severity</code>
- *            object, even if the top-level <code>Severity</code> object is overwritten.
- *        </p>
+ * <p>
+ *             Contains information about the Autonomous System (AS) of the network
+ *             endpoints involved in an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack
+ *             sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
+ * 				must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.
+ *         </p>
  * @public
  */
-export interface FindingProviderSeverity {
+export interface NetworkAutonomousSystem {
     /**
-     * <p>The severity label assigned to the finding by the finding provider.</p>
+     * <p>
+     *             The name associated with the AS.
+     *         </p>
      * @public
      */
-    Label?: SeverityLabel | undefined;
+    Name?: string | undefined;
     /**
-     * <p>The finding provider's original value for the severity.</p>
-     *          <p>Length Constraints: Minimum length of 1. Maximum length of 64.</p>
+     * <p>
+     *             The unique number that identifies the AS.
+     *         </p>
      * @public
      */
-    Original?: string | undefined;
+    Number?: number | undefined;
 }
 /**
- * <p>In a <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html">
- *                <code>BatchImportFindings</code>
- *             </a> request, finding providers use <code>FindingProviderFields</code> to provide
- *            and update values for the following fields:</p>
- *          <ul>
- *             <li>
- *                <p>
- *                   <code>Confidence</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>Criticality</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>RelatedFindings</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>Severity</code>
- *                </p>
- *             </li>
- *             <li>
- *                <p>
- *                   <code>Types</code>
- *                </p>
- *             </li>
- *          </ul>
- *          <p>The preceding fields are nested under the <code>FindingProviderFields</code> object, but also have analogues of the same name
- *            as top-level ASFF fields. When a new finding is sent to Security Hub by a finding provider, Security Hub populates the
- *            <code>FindingProviderFields</code> object automatically, if it is empty, based on the corresponding top-level fields.</p>
- *          <p>Finding providers can update <code>FindingProviderFields</code> only by using the <code>BatchImportFindings</code>
- *         operation. Finding providers can't update
- *            this object with the <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindings.html">
- *                <code>BatchUpdateFindings</code>
- *             </a> operation. Customers can update the top-level fields by using the <code>BatchUpdateFindings</code> operation. Customers can't
- *            update <code>FindingProviderFields</code>.</p>
- *          <p>For information about how Security Hub handles updates from <code>BatchImportFindings</code> to
- *            <code>FindingProviderFields</code> and to the corresponding top-level
- *            attributes, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/finding-update-batchimportfindings.html#batchimportfindings-findingproviderfields">Using <code>FindingProviderFields</code>
- *             </a> in the <i>Security Hub User Guide</i>.</p>
- *          <p></p>
  * @public
+ * @enum
  */
-export interface FindingProviderFields {
+export declare const ConnectionDirection: {
+    readonly INBOUND: "INBOUND";
+    readonly OUTBOUND: "OUTBOUND";
+};
+/**
+ * @public
+ */
+export type ConnectionDirection = (typeof ConnectionDirection)[keyof typeof ConnectionDirection];
+/**
+ * <p>
+ *             Contains information about the network connection involved in an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack
+ *             sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
+ * 				must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.
+ *         </p>
+ * @public
+ */
+export interface NetworkConnection {
     /**
-     * <p>A finding's confidence. Confidence is defined as the likelihood that a finding
-     *          accurately identifies the behavior or issue that it was intended to identify.</p>
-     *          <p>Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent
-     *          confidence and 100 means 100 percent confidence.</p>
+     * <p>
+     *             The direction in which the network traffic is flowing.
+     *         </p>
      * @public
      */
-    Confidence?: number | undefined;
+    Direction?: ConnectionDirection | undefined;
+}
+/**
+ * <p>
+ *             Contains information about the location of a network endpoint involved in an Amazon GuardDuty Extended Threat Detection attack sequence.
+ * GuardDuty generates an attack
+ *             sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
+ * 				must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.
+ *         </p>
+ * @public
+ */
+export interface NetworkGeoLocation {
     /**
-     * <p>The level of importance assigned to the resources associated with the finding.</p>
-     *          <p>A score of 0 means that the underlying resources have no criticality, and a score of 100
-     *          is reserved for the most critical resources.</p>
+     * <p>
+     *             The name of the city.
+     *         </p>
      * @public
      */
-    Criticality?: number | undefined;
+    City?: string | undefined;
     /**
-     * <p>A list of findings that are related to the current finding.</p>
+     * <p>
+     *             The name of the country.
+     *         </p>
      * @public
      */
-    RelatedFindings?: RelatedFinding[] | undefined;
+    Country?: string | undefined;
     /**
-     * <p>The severity of a finding.</p>
+     * <p>
+     *             The latitude information of the endpoint location.
+     *         </p>
      * @public
      */
-    Severity?: FindingProviderSeverity | undefined;
+    Lat?: number | undefined;
     /**
-     * <p>One or more finding types in the format of <code>namespace/category/classifier</code>
-     *          that classify a finding.</p>
-     *          <p>Valid namespace values are: Software and Configuration Checks | TTPs | Effects | Unusual
-     *          Behaviors | Sensitive Data Identifications</p>
+     * <p>
+     *             The longitude information of the endpoint location.
+     *         </p>
      * @public
      */
-    Types?: string[] | undefined;
+    Lon?: number | undefined;
 }
 /**
  * <p>
- *                 Provides metadata for the Amazon CodeGuru detector associated with a finding. This field pertains to
- *                 findings that relate to Lambda functions. Amazon Inspector identifies policy violations and
- *                 vulnerabilities in Lambda function code based on internal detectors developed
- *                 in collaboration with Amazon CodeGuru. Security Hub receives those findings.
+ *             Contains information about network endpoints involved in an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack
+ *             sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
+ * 				must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.
  *         </p>
+ *          <p>This field can provide information about the network endpoints associated with the resource in the attack sequence finding,
+ * or about a specific network endpoint used for the attack.</p>
  * @public
  */
-export interface GeneratorDetails {
+export interface NetworkEndpoint {
     /**
      * <p>
-     *             The name of the detector used to identify the code vulnerability.
+     *             The identifier of the network endpoint involved in the attack sequence.
      *         </p>
      * @public
      */
-    Name?: string | undefined;
+    Id?: string | undefined;
     /**
      * <p>
-     *             The description of the detector used to identify the code vulnerability.
+     *             The IP address used in the network endpoint.
      *         </p>
      * @public
      */
-    Description?: string | undefined;
+    Ip?: string | undefined;
     /**
      * <p>
-     *             An array of tags used to identify the detector associated with the finding.
+     *             The domain information for the network endpoint.
      *         </p>
-     *          <p>Array Members: Minimum number of 0 items. Maximum number of 10 items.</p>
      * @public
      */
-    Labels?: string[] | undefined;
-}
-/**
- * @public
- * @enum
- */
-export declare const MalwareState: {
-    readonly OBSERVED: "OBSERVED";
-    readonly REMOVAL_FAILED: "REMOVAL_FAILED";
-    readonly REMOVED: "REMOVED";
-};
-/**
- * @public
- */
-export type MalwareState = (typeof MalwareState)[keyof typeof MalwareState];
-/**
- * @public
- * @enum
- */
-export declare const MalwareType: {
-    readonly ADWARE: "ADWARE";
-    readonly BLENDED_THREAT: "BLENDED_THREAT";
-    readonly BOTNET_AGENT: "BOTNET_AGENT";
-    readonly COIN_MINER: "COIN_MINER";
-    readonly EXPLOIT_KIT: "EXPLOIT_KIT";
-    readonly KEYLOGGER: "KEYLOGGER";
-    readonly MACRO: "MACRO";
-    readonly POTENTIALLY_UNWANTED: "POTENTIALLY_UNWANTED";
-    readonly RANSOMWARE: "RANSOMWARE";
-    readonly REMOTE_ACCESS: "REMOTE_ACCESS";
-    readonly ROOTKIT: "ROOTKIT";
-    readonly SPYWARE: "SPYWARE";
-    readonly TROJAN: "TROJAN";
-    readonly VIRUS: "VIRUS";
-    readonly WORM: "WORM";
-};
-/**
- * @public
- */
-export type MalwareType = (typeof MalwareType)[keyof typeof MalwareType];
-/**
- * <p>A list of malware related to a finding.</p>
- * @public
- */
-export interface Malware {
+    Domain?: string | undefined;
     /**
-     * <p>The name of the malware that was observed.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 64.</p>
+     * <p>
+     *             The port number associated with the network endpoint.
+     *         </p>
      * @public
      */
-    Name: string | undefined;
+    Port?: number | undefined;
     /**
-     * <p>The type of the malware that was observed.</p>
+     * <p>
+     *             Information about the location of the network endpoint.
+     *         </p>
      * @public
      */
-    Type?: MalwareType | undefined;
+    Location?: NetworkGeoLocation | undefined;
     /**
-     * <p>The file system path of the malware that was observed.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 512.</p>
+     * <p>
+     *             The Autonomous System Number (ASN) of the network endpoint.
+     *         </p>
      * @public
      */
-    Path?: string | undefined;
+    AutonomousSystem?: NetworkAutonomousSystem | undefined;
     /**
-     * <p>The state of the malware that was observed.</p>
+     * <p>
+     *             Information about the network connection.
+     *         </p>
      * @public
      */
-    State?: MalwareState | undefined;
+    Connection?: NetworkConnection | undefined;
 }
 /**
- * @public
- * @enum
- */
-export declare const NetworkDirection: {
-    readonly IN: "IN";
-    readonly OUT: "OUT";
-};
-/**
- * @public
- */
-export type NetworkDirection = (typeof NetworkDirection)[keyof typeof NetworkDirection];
-/**
- * <p>A range of ports.</p>
+ * <p>
+ *             Contains information about the indicators observed in an Amazon GuardDuty Extended Threat Detection attack sequence.
+ *             Indicators include a set of signals, which can be API activities or findings that GuardDuty uses to detect an attack sequence finding. GuardDuty
+ *             generates an attack sequence finding when multiple signals align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
+ *             must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.
+ *         </p>
  * @public
  */
-export interface PortRange {
+export interface Indicator {
     /**
-     * <p>The first port in the port range.</p>
+     * <p>
+     *             The name of the indicator that’s present in the attack sequence finding.
+     *         </p>
      * @public
      */
-    Begin?: number | undefined;
+    Key?: string | undefined;
     /**
-     * <p>The last port in the port range.</p>
+     * <p>Values associated with each indicator key. For example, if the indicator key is
+     *             <code>SUSPICIOUS_NETWORK</code>, then the value will be the name of the network. If
+     *             the indicator key is <code>ATTACK_TACTIC</code>, then the value will be one of the MITRE tactics.</p>
      * @public
      */
-    End?: number | undefined;
-}
-/**
- * <p>The details of network-related information about a finding.</p>
- * @public
- */
-export interface Network {
+    Values?: string[] | undefined;
     /**
-     * <p>The direction of network traffic associated with a finding.</p>
+     * <p>
+     *             The title describing the indicator.
+     *         </p>
      * @public
      */
-    Direction?: NetworkDirection | undefined;
+    Title?: string | undefined;
     /**
-     * <p>The protocol of network-related information about a finding.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 16.</p>
+     * <p>
+     *             The type of indicator.
+     *         </p>
      * @public
      */
-    Protocol?: string | undefined;
+    Type?: string | undefined;
+}
+/**
+ * <p>
+ *             Contains information about the signals involved in an Amazon GuardDuty Extended Threat Detection attack sequence. An attack sequence is a
+ * type of threat detected by GuardDuty. GuardDuty generates an attack sequence finding when multiple events, or
+ * signals, align to a potentially suspicious activity. When GuardDuty and Security Hub are integrated, GuardDuty
+ * sends attack sequence findings to Security Hub.</p>
+ *          <p>A signal can be an API activity or a finding that GuardDuty uses to detect an attack sequence finding.</p>
+ * @public
+ */
+export interface Signal {
     /**
-     * <p>The range of open ports that is present on the network.</p>
+     * <p>
+     *             The type of the signal used to identify an attack sequence.
+     *         </p>
+     *          <p>Signals can be GuardDuty findings or activities observed in data sources that GuardDuty monitors.
+     *             For
+     *             more information, see
+     *             <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html">GuardDuty foundational data sources</a> in the
+     *             <i>Amazon GuardDuty User Guide</i>.</p>
+     *          <p>A signal type can be one of the following values. Here are the related descriptions:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>FINDING</code> - Individually generated GuardDuty finding.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>CLOUD_TRAIL</code> - Activity observed from CloudTrail logs</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>S3_DATA_EVENTS</code> - Activity observed from CloudTrail data events for Amazon Simple Storage Service (S3).
+     *                     Activities associated
+     *                     with this type will show up only when
+     *                     you have enabled GuardDuty S3 Protection feature in your account. For more information about
+     *                     S3 Protection and the
+     *                     steps to enable it, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html">S3 Protection</a> in the
+     *                     <i>Amazon GuardDuty User Guide</i>.</p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    OpenPortRange?: PortRange | undefined;
+    Type?: string | undefined;
     /**
-     * <p>The source IPv4 address of network-related information about a finding.</p>
+     * <p>
+     *             The identifier of the signal.
+     *         </p>
      * @public
      */
-    SourceIpV4?: string | undefined;
+    Id?: string | undefined;
     /**
-     * <p>The source IPv6 address of network-related information about a finding.</p>
+     * <p>
+     *             The description of the GuardDuty finding.
+     *         </p>
      * @public
      */
-    SourceIpV6?: string | undefined;
+    Title?: string | undefined;
     /**
-     * <p>The source port of network-related information about a finding.</p>
+     * <p>
+     *             The Amazon Resource Name (ARN) of the product that generated the signal.
+     *         </p>
      * @public
      */
-    SourcePort?: number | undefined;
+    ProductArn?: string | undefined;
     /**
-     * <p>The source domain of network-related information about a finding.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 128.</p>
+     * <p>
+     *             The ARN or ID of the Amazon Web Services resource associated with the signal.
+     *         </p>
      * @public
      */
-    SourceDomain?: string | undefined;
+    ResourceIds?: string[] | undefined;
     /**
-     * <p>The source media access control (MAC) address of network-related information about a
-     *          finding.</p>
+     * <p>
+     *             Contains information about the indicators associated with the signals in this attack sequence finding. The values for
+     *             <code>SignalIndicators</code> are a subset of the values for <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_Sequence.html">SequenceIndicators</a>, but the values for
+     *             these fields don't always match 1:1.
+     *         </p>
      * @public
      */
-    SourceMac?: string | undefined;
+    SignalIndicators?: Indicator[] | undefined;
     /**
-     * <p>The destination IPv4 address of network-related information about a finding.</p>
+     * <p>
+     *             The name of the GuardDuty signal. For example, when signal type is <code>FINDING</code>,
+     *             the signal name is the name of the finding.
+     *         </p>
      * @public
      */
-    DestinationIpV4?: string | undefined;
+    Name?: string | undefined;
     /**
-     * <p>The destination IPv6 address of network-related information about a finding.</p>
+     * <p>
+     *             The timestamp when the first finding or activity related to this signal was observed.
+     *         </p>
      * @public
      */
-    DestinationIpV6?: string | undefined;
+    CreatedAt?: number | undefined;
     /**
-     * <p>The destination port of network-related information about a finding.</p>
+     * <p>
+     *             The timestamp when this signal was last observed.
+     *         </p>
      * @public
      */
-    DestinationPort?: number | undefined;
+    UpdatedAt?: number | undefined;
     /**
-     * <p>The destination domain of network-related information about a finding.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 128.</p>
+     * <p>
+     *             The timestamp when the first finding or activity related to this signal was observed.
+     *         </p>
      * @public
      */
-    DestinationDomain?: string | undefined;
-}
-/**
- * <p>Information about the destination of the next component in the network path.</p>
- * @public
- */
-export interface NetworkPathComponentDetails {
+    FirstSeenAt?: number | undefined;
     /**
-     * <p>The IP addresses of the destination.</p>
+     * <p>
+     *             The timestamp when the last finding or activity related to this signal was observed.
+     *         </p>
      * @public
      */
-    Address?: string[] | undefined;
+    LastSeenAt?: number | undefined;
     /**
-     * <p>A list of port ranges for the destination.</p>
+     * <p>The severity associated with the signal. For more information about severity, see
+     *             <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings-severity.html">Findings severity levels</a>
+     *             in the <i>Amazon GuardDuty User Guide</i>.</p>
      * @public
      */
-    PortRanges?: PortRange[] | undefined;
-}
-/**
- * <p>Details about a network path component that occurs before or after the current
- *          component.</p>
- * @public
- */
-export interface NetworkHeader {
+    Severity?: number | undefined;
     /**
-     * <p>The protocol used for the component.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 16.</p>
+     * <p>
+     *             The number of times this signal was observed.
+     *         </p>
      * @public
      */
-    Protocol?: string | undefined;
+    Count?: number | undefined;
     /**
-     * <p>Information about the destination of the component.</p>
+     * <p>
+     *             The IDs of the threat actors involved in the signal.
+     *         </p>
      * @public
      */
-    Destination?: NetworkPathComponentDetails | undefined;
+    ActorIds?: string[] | undefined;
     /**
-     * <p>Information about the origin of the component.</p>
+     * <p>Information about the endpoint IDs associated with this signal.</p>
      * @public
      */
-    Source?: NetworkPathComponentDetails | undefined;
+    EndpointIds?: string[] | undefined;
 }
 /**
- * <p>Information about a network path component.</p>
+ * <p>
+ *             Contains information about an Amazon GuardDuty Extended Threat Detection attack sequence finding. GuardDuty generates an attack
+ *             sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
+ * 				must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.
+ *         </p>
  * @public
  */
-export interface NetworkPathComponent {
+export interface Sequence {
     /**
-     * <p>The identifier of a component in the network path.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 32.</p>
+     * <p>
+     *             Unique identifier of the attack sequence.
+     *         </p>
      * @public
      */
-    ComponentId?: string | undefined;
+    Uid?: string | undefined;
     /**
-     * <p>The type of component.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 32.</p>
+     * <p>
+     *             Provides information about the actors involved in the attack sequence.
+     *         </p>
      * @public
      */
-    ComponentType?: string | undefined;
+    Actors?: Actor[] | undefined;
     /**
-     * <p>Information about the component that comes after the current component in the network
-     *          path.</p>
+     * <p>
+     *             Contains information about the network endpoints that were used in the attack sequence.
+     *         </p>
      * @public
      */
-    Egress?: NetworkHeader | undefined;
+    Endpoints?: NetworkEndpoint[] | undefined;
     /**
-     * <p>Information about the component that comes before the current node in the network
-     *          path.</p>
+     * <p>
+     *             Contains information about the signals involved in the attack sequence.
+     *         </p>
      * @public
      */
-    Ingress?: NetworkHeader | undefined;
+    Signals?: Signal[] | undefined;
+    /**
+     * <p>
+     *             Contains information about the indicators observed in the attack sequence. The values for
+     *             <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_Signal.html">SignalIndicators</a> are a subset of the values for <code>SequenceIndicators</code>, but the values for
+     *             these fields don't always match 1:1.</p>
+     * @public
+     */
+    SequenceIndicators?: Indicator[] | undefined;
 }
 /**
- * <p>A user-defined note added to a finding.</p>
+ * <p>
+ *             A top-level object field that provides details about an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack
+ *             sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
+ * 				must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.</p>
  * @public
  */
-export interface Note {
-    /**
-     * <p>The text of a note.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 512.</p>
-     * @public
-     */
-    Text: string | undefined;
+export interface Detection {
     /**
-     * <p>The principal that created a note.</p>
+     * <p>
+     *             Provides details about an attack sequence.
+     *         </p>
      * @public
      */
-    UpdatedBy: string | undefined;
-    /**
-     * <p>A timestamp that indicates when the note was updated.</p>
-     *          <p>This field accepts only the specified formats. Timestamps
-     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
-     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
-     *             </li>
-     *          </ul>
-     * @public
-     */
-    UpdatedAt: string | undefined;
+    Sequence?: Sequence | undefined;
 }
 /**
- * <p>Provides an overview of the patch compliance status for an instance against a selected
- *          compliance standard.</p>
+ * <p>The severity assigned to a finding by the finding provider. This object may include one or more of the following
+ * attributes:</p>
+ *          <ul>
+ *             <li>
+ *                <p>
+ *                   <code>Label</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>Normalized</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>Original</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>Product</code>
+ *                </p>
+ *             </li>
+ *          </ul>
+ *          <p>If a <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html">
+ *                <code>BatchImportFindings</code>
+ *             </a> request for a
+ *            new finding only provides <code>Label</code> or only provides <code>Normalized</code>, Security Hub
+ *            automatically populates the value of the other field.</p>
+ *          <p>The <code>Normalized</code> and <code>Product</code> attributes are included in the <code>FindingProviderSeverity</code>
+ *            structure to preserve the historical information associated with the finding, even if the top-level
+ *            <code>Severity</code> object is later modified using the <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindings.html">
+ *                <code>BatchUpdateFindings</code>
+ *             </a> operation.</p>
+ *          <p>If the top-level <code>Finding.Severity</code> object is present, but <code>Finding.FindingProviderFields</code> isn't present,
+ *            Security Hub creates the <code>FindingProviderFields.Severity</code> object and copies the entire <code>Finding.Severity</code> object into it.
+ *            This ensures that the original, provider-supplied details are retained within the <code>FindingProviderFields.Severity</code>
+ *            object, even if the top-level <code>Severity</code> object is overwritten.
+ *        </p>
  * @public
  */
-export interface PatchSummary {
-    /**
-     * <p>The identifier of the compliance standard that was used to determine the patch
-     *          compliance status.</p>
-     *          <p>Length Constraints: Minimum length of 1. Maximum length of 256.</p>
-     * @public
-     */
-    Id: string | undefined;
-    /**
-     * <p>The number of patches from the compliance standard that were installed
-     *          successfully.</p>
-     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
-     * @public
-     */
-    InstalledCount?: number | undefined;
-    /**
-     * <p>The number of patches that are part of the compliance standard but are not installed.
-     *          The count includes patches that failed to install.</p>
-     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
-     * @public
-     */
-    MissingCount?: number | undefined;
-    /**
-     * <p>The number of patches from the compliance standard that failed to install.</p>
-     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
-     * @public
-     */
-    FailedCount?: number | undefined;
+export interface FindingProviderSeverity {
     /**
-     * <p>The number of installed patches that are not part of the compliance standard.</p>
-     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
+     * <p>The severity label assigned to the finding by the finding provider.</p>
      * @public
      */
-    InstalledOtherCount?: number | undefined;
+    Label?: SeverityLabel | undefined;
     /**
-     * <p>The number of patches that are installed but are also on a list of patches that the
-     *          customer rejected.</p>
-     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
+     * <p>The finding provider's original value for the severity.</p>
+     *          <p>Length Constraints: Minimum length of 1. Maximum length of 64.</p>
      * @public
      */
-    InstalledRejectedCount?: number | undefined;
+    Original?: string | undefined;
+}
+/**
+ * <p>In a <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchImportFindings.html">
+ *                <code>BatchImportFindings</code>
+ *             </a> request, finding providers use <code>FindingProviderFields</code> to provide
+ *            and update values for the following fields:</p>
+ *          <ul>
+ *             <li>
+ *                <p>
+ *                   <code>Confidence</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>Criticality</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>RelatedFindings</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>Severity</code>
+ *                </p>
+ *             </li>
+ *             <li>
+ *                <p>
+ *                   <code>Types</code>
+ *                </p>
+ *             </li>
+ *          </ul>
+ *          <p>The preceding fields are nested under the <code>FindingProviderFields</code> object, but also have analogues of the same name
+ *            as top-level ASFF fields. When a new finding is sent to Security Hub by a finding provider, Security Hub populates the
+ *            <code>FindingProviderFields</code> object automatically, if it is empty, based on the corresponding top-level fields.</p>
+ *          <p>Finding providers can update <code>FindingProviderFields</code> only by using the <code>BatchImportFindings</code>
+ *         operation. Finding providers can't update
+ *            this object with the <a href="https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateFindings.html">
+ *                <code>BatchUpdateFindings</code>
+ *             </a> operation. Customers can update the top-level fields by using the <code>BatchUpdateFindings</code> operation. Customers can't
+ *            update <code>FindingProviderFields</code>.</p>
+ *          <p>For information about how Security Hub handles updates from <code>BatchImportFindings</code> to
+ *            <code>FindingProviderFields</code> and to the corresponding top-level
+ *            attributes, see <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/finding-update-batchimportfindings.html#batchimportfindings-findingproviderfields">Using <code>FindingProviderFields</code>
+ *             </a> in the <i>Security Hub User Guide</i>.</p>
+ *          <p></p>
+ * @public
+ */
+export interface FindingProviderFields {
     /**
-     * <p>The number of patches that were applied, but that require the instance to be rebooted in
-     *          order to be marked as installed.</p>
-     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
+     * <p>A finding's confidence. Confidence is defined as the likelihood that a finding
+     *          accurately identifies the behavior or issue that it was intended to identify.</p>
+     *          <p>Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent
+     *          confidence and 100 means 100 percent confidence.</p>
      * @public
      */
-    InstalledPendingReboot?: number | undefined;
+    Confidence?: number | undefined;
     /**
-     * <p>Indicates when the operation started.</p>
-     *          <p>This field accepts only the specified formats. Timestamps
-     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
-     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
-     *             </li>
-     *          </ul>
+     * <p>The level of importance assigned to the resources associated with the finding.</p>
+     *          <p>A score of 0 means that the underlying resources have no criticality, and a score of 100
+     *          is reserved for the most critical resources.</p>
      * @public
      */
-    OperationStartTime?: string | undefined;
+    Criticality?: number | undefined;
     /**
-     * <p>Indicates when the operation completed.</p>
-     *          <p>This field accepts only the specified formats. Timestamps
-     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
-     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
-     *             </li>
-     *          </ul>
+     * <p>A list of findings that are related to the current finding.</p>
      * @public
      */
-    OperationEndTime?: string | undefined;
+    RelatedFindings?: RelatedFinding[] | undefined;
     /**
-     * <p>The reboot option specified for the instance.</p>
-     *          <p>Length Constraints: Minimum length of 1. Maximum length of 256.</p>
+     * <p>The severity of a finding.</p>
      * @public
      */
-    RebootOption?: string | undefined;
+    Severity?: FindingProviderSeverity | undefined;
     /**
-     * <p>The type of patch operation performed. For Patch Manager, the values are
-     *             <code>SCAN</code> and <code>INSTALL</code>.</p>
-     *          <p>Length Constraints: Minimum length of 1. Maximum length of 256.</p>
+     * <p>One or more finding types in the format of <code>namespace/category/classifier</code>
+     *          that classify a finding.</p>
+     *          <p>Valid namespace values are: Software and Configuration Checks | TTPs | Effects | Unusual
+     *          Behaviors | Sensitive Data Identifications</p>
      * @public
      */
-    Operation?: string | undefined;
+    Types?: string[] | undefined;
 }
 /**
- * <p>The details of process-related information about a finding.</p>
+ * <p>
+ *                 Provides metadata for the Amazon CodeGuru detector associated with a finding. This field pertains to
+ *                 findings that relate to Lambda functions. Amazon Inspector identifies policy violations and
+ *                 vulnerabilities in Lambda function code based on internal detectors developed
+ *                 in collaboration with Amazon CodeGuru. Security Hub receives those findings.
+ *         </p>
  * @public
  */
-export interface ProcessDetails {
+export interface GeneratorDetails {
     /**
-     * <p>The name of the process.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 64.</p>
+     * <p>
+     *             The name of the detector used to identify the code vulnerability.
+     *         </p>
      * @public
      */
     Name?: string | undefined;
     /**
-     * <p>The path to the process executable.</p>
-     *          <p>Length Constraints: Minimum of 1. Maximum of 512.</p>
-     * @public
-     */
-    Path?: string | undefined;
-    /**
-     * <p>The process ID.</p>
-     * @public
-     */
-    Pid?: number | undefined;
-    /**
-     * <p>The parent process ID. This field accepts positive integers between <code>O</code> and <code>2147483647</code>.</p>
-     * @public
-     */
-    ParentPid?: number | undefined;
-    /**
-     * <p>Indicates when the process was launched.</p>
-     *          <p>This field accepts only the specified formats. Timestamps
-     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
-     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
-     *             </li>
-     *          </ul>
+     * <p>
+     *             The description of the detector used to identify the code vulnerability.
+     *         </p>
      * @public
      */
-    LaunchedAt?: string | undefined;
+    Description?: string | undefined;
     /**
-     * <p>Indicates when the process was terminated.</p>
-     *          <p>This field accepts only the specified formats. Timestamps
-     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
-     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
-     *             </li>
-     *          </ul>
+     * <p>
+     *             An array of tags used to identify the detector associated with the finding.
+     *         </p>
+     *          <p>Array Members: Minimum number of 0 items. Maximum number of 10 items.</p>
      * @public
      */
-    TerminatedAt?: string | undefined;
+    Labels?: string[] | undefined;
 }
 /**
  * @public
  * @enum
  */
-export declare const RecordState: {
-    readonly ACTIVE: "ACTIVE";
-    readonly ARCHIVED: "ARCHIVED";
+export declare const MalwareState: {
+    readonly OBSERVED: "OBSERVED";
+    readonly REMOVAL_FAILED: "REMOVAL_FAILED";
+    readonly REMOVED: "REMOVED";
 };
 /**
  * @public
  */
-export type RecordState = (typeof RecordState)[keyof typeof RecordState];
+export type MalwareState = (typeof MalwareState)[keyof typeof MalwareState];
 /**
- * <p>A recommendation on how to remediate the issue identified in a finding.</p>
  * @public
+ * @enum
  */
-export interface Recommendation {
-    /**
-     * <p>Describes the recommended steps to take to remediate an issue identified in a finding.</p>
-     *          <p>Length Constraints: Minimum of 1 length. Maximum of 512 length.</p>
-     * @public
-     */
-    Text?: string | undefined;
-    /**
-     * <p>A URL to a page or site that contains information about how to remediate a finding.</p>
-     * @public
-     */
-    Url?: string | undefined;
-}
+export declare const MalwareType: {
+    readonly ADWARE: "ADWARE";
+    readonly BLENDED_THREAT: "BLENDED_THREAT";
+    readonly BOTNET_AGENT: "BOTNET_AGENT";
+    readonly COIN_MINER: "COIN_MINER";
+    readonly EXPLOIT_KIT: "EXPLOIT_KIT";
+    readonly KEYLOGGER: "KEYLOGGER";
+    readonly MACRO: "MACRO";
+    readonly POTENTIALLY_UNWANTED: "POTENTIALLY_UNWANTED";
+    readonly RANSOMWARE: "RANSOMWARE";
+    readonly REMOTE_ACCESS: "REMOTE_ACCESS";
+    readonly ROOTKIT: "ROOTKIT";
+    readonly SPYWARE: "SPYWARE";
+    readonly TROJAN: "TROJAN";
+    readonly VIRUS: "VIRUS";
+    readonly WORM: "WORM";
+};
 /**
- * <p>Details about the remediation steps for a finding.</p>
  * @public
  */
-export interface Remediation {
-    /**
-     * <p>A recommendation on the steps to take to remediate the issue identified by a finding.</p>
-     * @public
-     */
-    Recommendation?: Recommendation | undefined;
-}
+export type MalwareType = (typeof MalwareType)[keyof typeof MalwareType];
 /**
- * <p>An occurrence of sensitive data detected in a Microsoft Excel workbook, comma-separated value (CSV) file, or tab-separated value (TSV) file.</p>
+ * <p>A list of malware related to a finding.</p>
  * @public
  */
-export interface Cell {
+export interface Malware {
     /**
-     * <p>The column number of the column that contains the data. For a Microsoft Excel workbook, the column number corresponds to the alphabetical column identifiers. For example, a value of 1 for Column corresponds to the A column in the workbook.</p>
+     * <p>The name of the malware that was observed.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 64.</p>
      * @public
      */
-    Column?: number | undefined;
+    Name: string | undefined;
     /**
-     * <p>The row number of the row that contains the data.</p>
+     * <p>The type of the malware that was observed.</p>
      * @public
      */
-    Row?: number | undefined;
+    Type?: MalwareType | undefined;
     /**
-     * <p>The name of the column that contains the data.</p>
+     * <p>The file system path of the malware that was observed.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 512.</p>
      * @public
      */
-    ColumnName?: string | undefined;
+    Path?: string | undefined;
     /**
-     * <p>For a Microsoft Excel workbook, provides the location of the cell, as an absolute cell reference, that contains the data. For example, Sheet2!C5 for cell C5 on Sheet2.</p>
+     * <p>The state of the malware that was observed.</p>
      * @public
      */
-    CellReference?: string | undefined;
+    State?: MalwareState | undefined;
 }
 /**
- * <p>Identifies where the sensitive data begins and ends.</p>
  * @public
+ * @enum
  */
-export interface Range {
-    /**
-     * <p>The number of lines (for a line range) or characters (for an offset range) from the beginning of the file to the end of the sensitive data.</p>
-     * @public
-     */
-    Start?: number | undefined;
-    /**
-     * <p>The number of lines (for a line range) or characters (for an offset range) from the beginning of the file to the end of the sensitive data.</p>
-     * @public
-     */
-    End?: number | undefined;
-    /**
-     * <p>In the line where the sensitive data starts, the column within the line where the sensitive data starts.</p>
-     * @public
-     */
-    StartColumn?: number | undefined;
-}
+export declare const NetworkDirection: {
+    readonly IN: "IN";
+    readonly OUT: "OUT";
+};
 /**
- * <p>An occurrence of sensitive data in an Adobe Portable Document Format (PDF) file.</p>
  * @public
  */
-export interface Page {
-    /**
-     * <p>The page number of the page that contains the sensitive data.</p>
-     * @public
-     */
-    PageNumber?: number | undefined;
+export type NetworkDirection = (typeof NetworkDirection)[keyof typeof NetworkDirection];
+/**
+ * <p>A range of ports.</p>
+ * @public
+ */
+export interface PortRange {
     /**
-     * <p>An occurrence of sensitive data detected in a non-binary text file or a Microsoft Word file. Non-binary text files include files such as HTML, XML, JSON, and TXT files.</p>
+     * <p>The first port in the port range.</p>
      * @public
      */
-    LineRange?: Range | undefined;
+    Begin?: number | undefined;
     /**
-     * <p>An occurrence of sensitive data detected in a binary text file.</p>
+     * <p>The last port in the port range.</p>
      * @public
      */
-    OffsetRange?: Range | undefined;
+    End?: number | undefined;
 }
 /**
- * <p>An occurrence of sensitive data in an Apache Avro object container or an Apache Parquet file.</p>
+ * <p>The details of network-related information about a finding.</p>
  * @public
  */
-export interface _Record {
+export interface Network {
     /**
-     * <p>The path, as a JSONPath expression, to the field in the record that contains the data. If the field name is longer than 20 characters, it is truncated. If the path is longer than 250 characters, it is truncated.</p>
+     * <p>The direction of network traffic associated with a finding.</p>
      * @public
      */
-    JsonPath?: string | undefined;
+    Direction?: NetworkDirection | undefined;
     /**
-     * <p>The record index, starting from 0, for the record that contains the data.</p>
+     * <p>The protocol of network-related information about a finding.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 16.</p>
      * @public
      */
-    RecordIndex?: number | undefined;
-}
-/**
- * <p>The detected occurrences of sensitive data.</p>
- * @public
- */
-export interface Occurrences {
+    Protocol?: string | undefined;
+    /**
+     * <p>The range of open ports that is present on the network.</p>
+     * @public
+     */
+    OpenPortRange?: PortRange | undefined;
     /**
-     * <p>Occurrences of sensitive data detected in a non-binary text file or a Microsoft Word file. Non-binary text files include files such as HTML, XML, JSON, and TXT files.</p>
+     * <p>The source IPv4 address of network-related information about a finding.</p>
      * @public
      */
-    LineRanges?: Range[] | undefined;
+    SourceIpV4?: string | undefined;
     /**
-     * <p>Occurrences of sensitive data detected in a binary text file.</p>
+     * <p>The source IPv6 address of network-related information about a finding.</p>
      * @public
      */
-    OffsetRanges?: Range[] | undefined;
+    SourceIpV6?: string | undefined;
     /**
-     * <p>Occurrences of sensitive data in an Adobe Portable Document Format (PDF) file.</p>
+     * <p>The source port of network-related information about a finding.</p>
      * @public
      */
-    Pages?: Page[] | undefined;
+    SourcePort?: number | undefined;
     /**
-     * <p>Occurrences of sensitive data in an Apache Avro object container or an Apache Parquet file.</p>
+     * <p>The source domain of network-related information about a finding.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 128.</p>
      * @public
      */
-    Records?: _Record[] | undefined;
+    SourceDomain?: string | undefined;
     /**
-     * <p>Occurrences of sensitive data detected in Microsoft Excel workbooks, comma-separated value (CSV) files, or tab-separated value (TSV) files.</p>
+     * <p>The source media access control (MAC) address of network-related information about a
+     *          finding.</p>
      * @public
      */
-    Cells?: Cell[] | undefined;
-}
-/**
- * <p>The list of detected instances of sensitive data.</p>
- * @public
- */
-export interface CustomDataIdentifiersDetections {
+    SourceMac?: string | undefined;
     /**
-     * <p>The total number of occurrences of sensitive data that were detected.</p>
+     * <p>The destination IPv4 address of network-related information about a finding.</p>
      * @public
      */
-    Count?: number | undefined;
+    DestinationIpV4?: string | undefined;
     /**
-     * <p>The ARN of the custom identifier that was used to detect the sensitive data.</p>
+     * <p>The destination IPv6 address of network-related information about a finding.</p>
      * @public
      */
-    Arn?: string | undefined;
+    DestinationIpV6?: string | undefined;
     /**
-     * <p>he name of the custom identifier that detected the sensitive data.</p>
+     * <p>The destination port of network-related information about a finding.</p>
      * @public
      */
-    Name?: string | undefined;
+    DestinationPort?: number | undefined;
     /**
-     * <p>Details about the sensitive data that was detected.</p>
+     * <p>The destination domain of network-related information about a finding.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 128.</p>
      * @public
      */
-    Occurrences?: Occurrences | undefined;
+    DestinationDomain?: string | undefined;
 }
 /**
- * <p>Contains an instance of sensitive data that was detected by a customer-defined identifier.</p>
+ * <p>Information about the destination of the next component in the network path.</p>
  * @public
  */
-export interface CustomDataIdentifiersResult {
+export interface NetworkPathComponentDetails {
     /**
-     * <p>The list of detected instances of sensitive data.</p>
+     * <p>The IP addresses of the destination.</p>
      * @public
      */
-    Detections?: CustomDataIdentifiersDetections[] | undefined;
+    Address?: string[] | undefined;
     /**
-     * <p>The total number of occurrences of sensitive data.</p>
+     * <p>A list of port ranges for the destination.</p>
      * @public
      */
-    TotalCount?: number | undefined;
+    PortRanges?: PortRange[] | undefined;
 }
 /**
- * <p>The list of detected instances of sensitive data.</p>
+ * <p>Details about a network path component that occurs before or after the current
+ *          component.</p>
  * @public
  */
-export interface SensitiveDataDetections {
+export interface NetworkHeader {
     /**
-     * <p>The total number of occurrences of sensitive data that were detected.</p>
+     * <p>The protocol used for the component.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 16.</p>
      * @public
      */
-    Count?: number | undefined;
+    Protocol?: string | undefined;
     /**
-     * <p>The type of sensitive data that was detected. For example, the type might indicate that the data is an email address.</p>
+     * <p>Information about the destination of the component.</p>
      * @public
      */
-    Type?: string | undefined;
+    Destination?: NetworkPathComponentDetails | undefined;
     /**
-     * <p>Details about the sensitive data that was detected.</p>
+     * <p>Information about the origin of the component.</p>
      * @public
      */
-    Occurrences?: Occurrences | undefined;
+    Source?: NetworkPathComponentDetails | undefined;
 }
 /**
- * <p>Contains a detected instance of sensitive data that are based on built-in identifiers.</p>
+ * <p>Information about a network path component.</p>
  * @public
  */
-export interface SensitiveDataResult {
+export interface NetworkPathComponent {
     /**
-     * <p>The category of sensitive data that was detected. For example, the category can indicate that the sensitive data involved credentials, financial information, or personal information.</p>
+     * <p>The identifier of a component in the network path.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 32.</p>
      * @public
      */
-    Category?: string | undefined;
+    ComponentId?: string | undefined;
     /**
-     * <p>The list of detected instances of sensitive data.</p>
+     * <p>The type of component.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 32.</p>
      * @public
      */
-    Detections?: SensitiveDataDetections[] | undefined;
+    ComponentType?: string | undefined;
     /**
-     * <p>The total number of occurrences of sensitive data.</p>
+     * <p>Information about the component that comes after the current component in the network
+     *          path.</p>
      * @public
      */
-    TotalCount?: number | undefined;
+    Egress?: NetworkHeader | undefined;
+    /**
+     * <p>Information about the component that comes before the current node in the network
+     *          path.</p>
+     * @public
+     */
+    Ingress?: NetworkHeader | undefined;
 }
 /**
- * <p>Provides details about the current status of the sensitive data detection.</p>
+ * <p>A user-defined note added to a finding.</p>
  * @public
  */
-export interface ClassificationStatus {
+export interface Note {
     /**
-     * <p>The code that represents the status of the sensitive data detection.</p>
+     * <p>The text of a note.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 512.</p>
      * @public
      */
-    Code?: string | undefined;
+    Text: string | undefined;
     /**
-     * <p>A longer description of the current status of the sensitive data detection.</p>
+     * <p>The principal that created a note.</p>
      * @public
      */
-    Reason?: string | undefined;
+    UpdatedBy: string | undefined;
+    /**
+     * <p>A timestamp that indicates when the note was updated.</p>
+     *          <p>This field accepts only the specified formats. Timestamps
+     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
+     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    UpdatedAt: string | undefined;
 }
 /**
- * <p>Details about the sensitive data that was detected on the resource.</p>
+ * <p>Provides an overview of the patch compliance status for an instance against a selected
+ *          compliance standard.</p>
  * @public
  */
-export interface ClassificationResult {
+export interface PatchSummary {
     /**
-     * <p>The type of content that the finding applies to.</p>
+     * <p>The identifier of the compliance standard that was used to determine the patch
+     *          compliance status.</p>
+     *          <p>Length Constraints: Minimum length of 1. Maximum length of 256.</p>
      * @public
      */
-    MimeType?: string | undefined;
+    Id: string | undefined;
     /**
-     * <p>The total size in bytes of the affected data.</p>
+     * <p>The number of patches from the compliance standard that were installed
+     *          successfully.</p>
+     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
      * @public
      */
-    SizeClassified?: number | undefined;
+    InstalledCount?: number | undefined;
     /**
-     * <p>Indicates whether there are additional occurrences of sensitive data that are not included in the finding. This occurs when the number of occurrences exceeds the maximum that can be included.</p>
+     * <p>The number of patches that are part of the compliance standard but are not installed.
+     *          The count includes patches that failed to install.</p>
+     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
      * @public
      */
-    AdditionalOccurrences?: boolean | undefined;
+    MissingCount?: number | undefined;
     /**
-     * <p>The current status of the sensitive data detection.</p>
+     * <p>The number of patches from the compliance standard that failed to install.</p>
+     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
      * @public
      */
-    Status?: ClassificationStatus | undefined;
+    FailedCount?: number | undefined;
     /**
-     * <p>Provides details about sensitive data that was identified based on built-in configuration.</p>
+     * <p>The number of installed patches that are not part of the compliance standard.</p>
+     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
      * @public
      */
-    SensitiveData?: SensitiveDataResult[] | undefined;
+    InstalledOtherCount?: number | undefined;
     /**
-     * <p>Provides details about sensitive data that was identified based on customer-defined configuration.</p>
+     * <p>The number of patches that are installed but are also on a list of patches that the
+     *          customer rejected.</p>
+     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
      * @public
      */
-    CustomDataIdentifiers?: CustomDataIdentifiersResult | undefined;
-}
-/**
- * <p>Provides details about sensitive data that was detected on a resource.</p>
- * @public
- */
-export interface DataClassificationDetails {
+    InstalledRejectedCount?: number | undefined;
     /**
-     * <p>The path to the folder or file that contains the sensitive data.</p>
+     * <p>The number of patches that were applied, but that require the instance to be rebooted in
+     *          order to be marked as installed.</p>
+     *          <p>The value can be an integer from <code>0</code> to <code>100000</code>.</p>
      * @public
      */
-    DetailedResultsLocation?: string | undefined;
+    InstalledPendingReboot?: number | undefined;
     /**
-     * <p>The details about the sensitive data that was detected on the resource.</p>
+     * <p>Indicates when the operation started.</p>
+     *          <p>This field accepts only the specified formats. Timestamps
+     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
+     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    Result?: ClassificationResult | undefined;
-}
-/**
- * <p>A wrapper type for the attributes of an Amazon SNS subscription.</p>
- * @public
- */
-export interface AwsSnsTopicSubscription {
+    OperationStartTime?: string | undefined;
+    /**
+     * <p>Indicates when the operation completed.</p>
+     *          <p>This field accepts only the specified formats. Timestamps
+     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
+     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    OperationEndTime?: string | undefined;
     /**
-     * <p>The subscription's endpoint (format depends on the protocol).</p>
+     * <p>The reboot option specified for the instance.</p>
+     *          <p>Length Constraints: Minimum length of 1. Maximum length of 256.</p>
      * @public
      */
-    Endpoint?: string | undefined;
+    RebootOption?: string | undefined;
     /**
-     * <p>The subscription's protocol.</p>
+     * <p>The type of patch operation performed. For Patch Manager, the values are
+     *             <code>SCAN</code> and <code>INSTALL</code>.</p>
+     *          <p>Length Constraints: Minimum length of 1. Maximum length of 256.</p>
      * @public
      */
-    Protocol?: string | undefined;
+    Operation?: string | undefined;
 }
 /**
- * <p>Provides information about an Amazon SNS topic to which notifications can be published.</p>
+ * <p>The details of process-related information about a finding.</p>
  * @public
  */
-export interface AwsSnsTopicDetails {
-    /**
-     * <p>The ID of an Amazon Web Services managed key for Amazon SNS or a customer managed key.</p>
-     * @public
-     */
-    KmsMasterKeyId?: string | undefined;
-    /**
-     * <p>Subscription is an embedded property that describes the subscription endpoints of an Amazon SNS topic.</p>
-     * @public
-     */
-    Subscription?: AwsSnsTopicSubscription[] | undefined;
+export interface ProcessDetails {
     /**
-     * <p>The name of the Amazon SNS topic.</p>
+     * <p>The name of the process.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 64.</p>
      * @public
      */
-    TopicName?: string | undefined;
+    Name?: string | undefined;
     /**
-     * <p>The subscription's owner.</p>
+     * <p>The path to the process executable.</p>
+     *          <p>Length Constraints: Minimum of 1. Maximum of 512.</p>
      * @public
      */
-    Owner?: string | undefined;
+    Path?: string | undefined;
     /**
-     * <p>Indicates successful message delivery status for an Amazon SNS topic that is subscribed to an Amazon SQS endpoint.
-     *       </p>
+     * <p>The process ID.</p>
      * @public
      */
-    SqsSuccessFeedbackRoleArn?: string | undefined;
+    Pid?: number | undefined;
     /**
-     * <p>Indicates failed message delivery status for an Amazon SNS topic that is subscribed to an Amazon SQS endpoint.
-     *       </p>
+     * <p>The parent process ID. This field accepts positive integers between <code>O</code> and <code>2147483647</code>.</p>
      * @public
      */
-    SqsFailureFeedbackRoleArn?: string | undefined;
+    ParentPid?: number | undefined;
     /**
-     * <p>Indicates failed message delivery status for an Amazon SNS topic that is subscribed to a platform application endpoint.
-     *       </p>
+     * <p>Indicates when the process was launched.</p>
+     *          <p>This field accepts only the specified formats. Timestamps
+     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
+     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    ApplicationSuccessFeedbackRoleArn?: string | undefined;
+    LaunchedAt?: string | undefined;
     /**
-     * <p>Indicates successful message delivery status for an Amazon SNS topic that is subscribed to an Amazon Kinesis Data Firehose endpoint.
-     *       </p>
+     * <p>Indicates when the process was terminated.</p>
+     *          <p>This field accepts only the specified formats. Timestamps
+     * can end with <code>Z</code> or <code>("+" / "-") time-hour [":" time-minute]</code>. The time-secfrac after seconds is limited
+     * to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SSZ</code> (for example, <code>2019-01-31T23:00:00Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ</code> (for example, <code>2019-01-31T23:00:00.123456789Z</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS+HH:MM</code> (for example, <code>2024-01-04T15:25:10+17:59</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS-HHMM</code> (for example, <code>2024-01-04T15:25:10-1759</code>)</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM</code> (for example, <code>2024-01-04T15:25:10.123456789+17:59</code>)</p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    FirehoseSuccessFeedbackRoleArn?: string | undefined;
+    TerminatedAt?: string | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const RecordState: {
+    readonly ACTIVE: "ACTIVE";
+    readonly ARCHIVED: "ARCHIVED";
+};
+/**
+ * @public
+ */
+export type RecordState = (typeof RecordState)[keyof typeof RecordState];
+/**
+ * <p>A recommendation on how to remediate the issue identified in a finding.</p>
+ * @public
+ */
+export interface Recommendation {
     /**
-     * <p>Indicates failed message delivery status for an Amazon SNS topic that is subscribed to an Amazon Kinesis Data Firehose endpoint.
-     *       </p>
+     * <p>Describes the recommended steps to take to remediate an issue identified in a finding.</p>
+     *          <p>Length Constraints: Minimum of 1 length. Maximum of 512 length.</p>
      * @public
      */
-    FirehoseFailureFeedbackRoleArn?: string | undefined;
+    Text?: string | undefined;
     /**
-     * <p>Indicates successful message delivery status for an Amazon SNS topic that is subscribed to an HTTP endpoint.
-     *       </p>
+     * <p>A URL to a page or site that contains information about how to remediate a finding.</p>
      * @public
      */
-    HttpSuccessFeedbackRoleArn?: string | undefined;
+    Url?: string | undefined;
+}
+/**
+ * <p>Details about the remediation steps for a finding.</p>
+ * @public
+ */
+export interface Remediation {
     /**
-     * <p>Indicates failed message delivery status for an Amazon SNS topic that is subscribed to an HTTP endpoint. </p>
+     * <p>A recommendation on the steps to take to remediate the issue identified by a finding.</p>
      * @public
      */
-    HttpFailureFeedbackRoleArn?: string | undefined;
+    Recommendation?: Recommendation | undefined;
 }
 /**
- * <p>Data about a queue.</p>
+ * <p>An occurrence of sensitive data detected in a Microsoft Excel workbook, comma-separated value (CSV) file, or tab-separated value (TSV) file.</p>
  * @public
  */
-export interface AwsSqsQueueDetails {
+export interface Cell {
     /**
-     * <p>The length of time, in seconds, for which Amazon SQS can reuse a data key to encrypt or decrypt messages before calling KMS again.</p>
+     * <p>The column number of the column that contains the data. For a Microsoft Excel workbook, the column number corresponds to the alphabetical column identifiers. For example, a value of 1 for Column corresponds to the A column in the workbook.</p>
      * @public
      */
-    KmsDataKeyReusePeriodSeconds?: number | undefined;
+    Column?: number | undefined;
     /**
-     * <p>The ID of an Amazon Web Services managed key for Amazon SQS or a custom
-     *          KMS key.</p>
+     * <p>The row number of the row that contains the data.</p>
      * @public
      */
-    KmsMasterKeyId?: string | undefined;
+    Row?: number | undefined;
     /**
-     * <p>The name of the new queue.</p>
+     * <p>The name of the column that contains the data.</p>
      * @public
      */
-    QueueName?: string | undefined;
+    ColumnName?: string | undefined;
     /**
-     * <p>The ARN of the dead-letter queue to which Amazon SQS moves
-     *          messages after the value of <code>maxReceiveCount</code> is exceeded. </p>
+     * <p>For a Microsoft Excel workbook, provides the location of the cell, as an absolute cell reference, that contains the data. For example, Sheet2!C5 for cell C5 on Sheet2.</p>
      * @public
      */
-    DeadLetterTargetArn?: string | undefined;
+    CellReference?: string | undefined;
 }
 /**
- * <p>Provides the details about the compliance status for a patch.</p>
+ * <p>Identifies where the sensitive data begins and ends.</p>
  * @public
  */
-export interface AwsSsmComplianceSummary {
-    /**
-     * <p>The current patch compliance status. Valid values are as follows:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>COMPLIANT</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>NON_COMPLIANT</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>UNSPECIFIED_DATA</code>
-     *                </p>
-     *             </li>
-     *          </ul>
-     * @public
-     */
-    Status?: string | undefined;
+export interface Range {
     /**
-     * <p>For the patches that are compliant, the number that have a severity of
-     *             <code>CRITICAL</code>.</p>
+     * <p>The number of lines (for a line range) or characters (for an offset range) from the beginning of the file to the end of the sensitive data.</p>
      * @public
      */
-    CompliantCriticalCount?: number | undefined;
+    Start?: number | undefined;
     /**
-     * <p>For the patches that are compliant, the number that have a severity of
-     *          <code>HIGH</code>.</p>
+     * <p>The number of lines (for a line range) or characters (for an offset range) from the beginning of the file to the end of the sensitive data.</p>
      * @public
      */
-    CompliantHighCount?: number | undefined;
+    End?: number | undefined;
     /**
-     * <p>For the patches that are compliant, the number that have a severity of
-     *             <code>MEDIUM</code>.</p>
+     * <p>In the line where the sensitive data starts, the column within the line where the sensitive data starts.</p>
      * @public
      */
-    CompliantMediumCount?: number | undefined;
+    StartColumn?: number | undefined;
+}
+/**
+ * <p>An occurrence of sensitive data in an Adobe Portable Document Format (PDF) file.</p>
+ * @public
+ */
+export interface Page {
     /**
-     * <p>The type of execution that was used determine compliance.</p>
+     * <p>The page number of the page that contains the sensitive data.</p>
      * @public
      */
-    ExecutionType?: string | undefined;
+    PageNumber?: number | undefined;
     /**
-     * <p>For the patch items that are noncompliant, the number of items that have a severity of
-     *             <code>CRITICAL</code>.</p>
+     * <p>An occurrence of sensitive data detected in a non-binary text file or a Microsoft Word file. Non-binary text files include files such as HTML, XML, JSON, and TXT files.</p>
      * @public
      */
-    NonCompliantCriticalCount?: number | undefined;
+    LineRange?: Range | undefined;
     /**
-     * <p>For the patches that are compliant, the number that have a severity of
-     *             <code>INFORMATIONAL</code>.</p>
+     * <p>An occurrence of sensitive data detected in a binary text file.</p>
      * @public
      */
-    CompliantInformationalCount?: number | undefined;
+    OffsetRange?: Range | undefined;
+}
+/**
+ * <p>An occurrence of sensitive data in an Apache Avro object container or an Apache Parquet file.</p>
+ * @public
+ */
+export interface _Record {
     /**
-     * <p>For the patches that are noncompliant, the number that have a severity of
-     *             <code>INFORMATIONAL</code>.</p>
+     * <p>The path, as a JSONPath expression, to the field in the record that contains the data. If the field name is longer than 20 characters, it is truncated. If the path is longer than 250 characters, it is truncated.</p>
      * @public
      */
-    NonCompliantInformationalCount?: number | undefined;
+    JsonPath?: string | undefined;
     /**
-     * <p>For the patches that are compliant, the number that have a severity of
-     *             <code>UNSPECIFIED</code>.</p>
+     * <p>The record index, starting from 0, for the record that contains the data.</p>
      * @public
      */
-    CompliantUnspecifiedCount?: number | undefined;
+    RecordIndex?: number | undefined;
+}
+/**
+ * <p>The detected occurrences of sensitive data.</p>
+ * @public
+ */
+export interface Occurrences {
     /**
-     * <p>For the patches that are noncompliant, the number that have a severity of
-     *             <code>LOW</code>.</p>
+     * <p>Occurrences of sensitive data detected in a non-binary text file or a Microsoft Word file. Non-binary text files include files such as HTML, XML, JSON, and TXT files.</p>
      * @public
      */
-    NonCompliantLowCount?: number | undefined;
+    LineRanges?: Range[] | undefined;
     /**
-     * <p>For the patches that are noncompliant, the number that have a severity of
-     *             <code>HIGH</code>.</p>
+     * <p>Occurrences of sensitive data detected in a binary text file.</p>
      * @public
      */
-    NonCompliantHighCount?: number | undefined;
+    OffsetRanges?: Range[] | undefined;
     /**
-     * <p>For the patches that are compliant, the number that have a severity of
-     *          <code>LOW</code>.</p>
+     * <p>Occurrences of sensitive data in an Adobe Portable Document Format (PDF) file.</p>
      * @public
      */
-    CompliantLowCount?: number | undefined;
+    Pages?: Page[] | undefined;
     /**
-     * <p>The type of resource for which the compliance was determined. For
-     *             <code>AwsSsmPatchCompliance</code>, <code>ComplianceType</code> is <code>Patch</code>. </p>
+     * <p>Occurrences of sensitive data in an Apache Avro object container or an Apache Parquet file.</p>
      * @public
      */
-    ComplianceType?: string | undefined;
+    Records?: _Record[] | undefined;
     /**
-     * <p>The identifier of the patch baseline. The patch baseline lists the patches that are
-     *          approved for installation.</p>
+     * <p>Occurrences of sensitive data detected in Microsoft Excel workbooks, comma-separated value (CSV) files, or tab-separated value (TSV) files.</p>
      * @public
      */
-    PatchBaselineId?: string | undefined;
+    Cells?: Cell[] | undefined;
+}
+/**
+ * <p>The list of detected instances of sensitive data.</p>
+ * @public
+ */
+export interface CustomDataIdentifiersDetections {
     /**
-     * <p>The highest severity for the patches. Valid values are as follows:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>CRITICAL</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>HIGH</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>MEDIUM</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>LOW</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>INFORMATIONAL</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>UNSPECIFIED</code>
-     *                </p>
-     *             </li>
-     *          </ul>
+     * <p>The total number of occurrences of sensitive data that were detected.</p>
      * @public
      */
-    OverallSeverity?: string | undefined;
+    Count?: number | undefined;
     /**
-     * <p>For the patches that are noncompliant, the number that have a severity of
-     *             <code>MEDIUM</code>.</p>
+     * <p>The ARN of the custom identifier that was used to detect the sensitive data.</p>
      * @public
      */
-    NonCompliantMediumCount?: number | undefined;
+    Arn?: string | undefined;
     /**
-     * <p>For the patches that are noncompliant, the number that have a severity of
-     *             <code>UNSPECIFIED</code>.</p>
+     * <p>he name of the custom identifier that detected the sensitive data.</p>
      * @public
      */
-    NonCompliantUnspecifiedCount?: number | undefined;
+    Name?: string | undefined;
     /**
-     * <p>The identifier of the patch group for which compliance was determined. A patch group
-     *          uses tags to group EC2 instances that should have the same patch compliance.</p>
+     * <p>Details about the sensitive data that was detected.</p>
      * @public
      */
-    PatchGroup?: string | undefined;
+    Occurrences?: Occurrences | undefined;
 }
 /**
- * <p>Provides details about the compliance for a patch.</p>
+ * <p>Contains an instance of sensitive data that was detected by a customer-defined identifier.</p>
  * @public
  */
-export interface AwsSsmPatch {
+export interface CustomDataIdentifiersResult {
     /**
-     * <p>The compliance status details for the patch.</p>
+     * <p>The list of detected instances of sensitive data.</p>
      * @public
      */
-    ComplianceSummary?: AwsSsmComplianceSummary | undefined;
-}
-/**
- * <p>Provides information about the state of a patch on an instance based on the patch
- *          baseline that was used to patch the instance.</p>
- * @public
- */
-export interface AwsSsmPatchComplianceDetails {
+    Detections?: CustomDataIdentifiersDetections[] | undefined;
     /**
-     * <p>Information about the status of a patch.</p>
+     * <p>The total number of occurrences of sensitive data.</p>
      * @public
      */
-    Patch?: AwsSsmPatch | undefined;
+    TotalCount?: number | undefined;
 }
 /**
- * <p>
- *             An object describing a CloudWatch log group. For more information, see
- *             <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html">
- *                 Amazon Web Services::Logs::LogGroup</a> in the <i>CloudFormation User Guide</i>.
- *         </p>
+ * <p>The list of detected instances of sensitive data.</p>
  * @public
  */
-export interface AwsStepFunctionStateMachineLoggingConfigurationDestinationsCloudWatchLogsLogGroupDetails {
+export interface SensitiveDataDetections {
     /**
-     * <p>The ARN (ends with <code>:*</code>) of the CloudWatch Logs log group to which you want your logs emitted.</p>
+     * <p>The total number of occurrences of sensitive data that were detected.</p>
      * @public
      */
-    LogGroupArn?: string | undefined;
-}
-/**
- * <p>
- *             An array of objects that describes where your execution history events will be logged.
- *         </p>
- * @public
- */
-export interface AwsStepFunctionStateMachineLoggingConfigurationDestinationsDetails {
+    Count?: number | undefined;
     /**
-     * <p>
-     *             An object describing a CloudWatch Logs log group. For more information, see
-     *             <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html">
-     *                 Amazon Web Services::Logs::LogGroup</a> in the <i>CloudFormation User Guide</i>.
-     *         </p>
+     * <p>The type of sensitive data that was detected. For example, the type might indicate that the data is an email address.</p>
      * @public
      */
-    CloudWatchLogsLogGroup?: AwsStepFunctionStateMachineLoggingConfigurationDestinationsCloudWatchLogsLogGroupDetails | undefined;
+    Type?: string | undefined;
+    /**
+     * <p>Details about the sensitive data that was detected.</p>
+     * @public
+     */
+    Occurrences?: Occurrences | undefined;
 }
 /**
- * <p>
- *             The <code>LoggingConfiguration</code> data type is used to set CloudWatch Logs options.
- *         </p>
+ * <p>Contains a detected instance of sensitive data that are based on built-in identifiers.</p>
  * @public
  */
-export interface AwsStepFunctionStateMachineLoggingConfigurationDetails {
+export interface SensitiveDataResult {
     /**
-     * <p>
-     *             An array of objects that describes where your execution history events will be logged.
-     *         </p>
+     * <p>The category of sensitive data that was detected. For example, the category can indicate that the sensitive data involved credentials, financial information, or personal information.</p>
      * @public
      */
-    Destinations?: AwsStepFunctionStateMachineLoggingConfigurationDestinationsDetails[] | undefined;
+    Category?: string | undefined;
     /**
-     * <p>
-     *             Determines whether execution data is included in your log. When set to false, data is excluded.
-     *         </p>
+     * <p>The list of detected instances of sensitive data.</p>
      * @public
      */
-    IncludeExecutionData?: boolean | undefined;
+    Detections?: SensitiveDataDetections[] | undefined;
     /**
-     * <p>
-     *             Defines which category of execution history events are logged.
-     *         </p>
+     * <p>The total number of occurrences of sensitive data.</p>
      * @public
      */
-    Level?: string | undefined;
+    TotalCount?: number | undefined;
 }
 /**
- * <p>
- *             Specifies whether X-Ray tracing is enabled.
- *         </p>
+ * <p>Provides details about the current status of the sensitive data detection.</p>
  * @public
  */
-export interface AwsStepFunctionStateMachineTracingConfigurationDetails {
+export interface ClassificationStatus {
     /**
-     * <p>
-     *             When set to true, X-Ray tracing is enabled.
-     *         </p>
+     * <p>The code that represents the status of the sensitive data detection.</p>
      * @public
      */
-    Enabled?: boolean | undefined;
+    Code?: string | undefined;
+    /**
+     * <p>A longer description of the current status of the sensitive data detection.</p>
+     * @public
+     */
+    Reason?: string | undefined;
 }
 /**
- * <p>
- *             Provides details about an Step Functions state machine, which is a workflow consisting of a series of event-
- *             driven steps.
- *         </p>
+ * <p>Details about the sensitive data that was detected on the resource.</p>
  * @public
  */
-export interface AwsStepFunctionStateMachineDetails {
+export interface ClassificationResult {
     /**
-     * <p>
-     *             A user-defined or an auto-generated string that identifies a <code>Map</code> state. This parameter is present only if
-     *             the <code>stateMachineArn</code> specified in input is a qualified state machine ARN.
-     *         </p>
+     * <p>The type of content that the finding applies to.</p>
      * @public
      */
-    Label?: string | undefined;
+    MimeType?: string | undefined;
     /**
-     * <p>
-     *             Used to set CloudWatch Logs options.
-     *         </p>
+     * <p>The total size in bytes of the affected data.</p>
      * @public
      */
-    LoggingConfiguration?: AwsStepFunctionStateMachineLoggingConfigurationDetails | undefined;
+    SizeClassified?: number | undefined;
     /**
-     * <p>
-     *             The name of the state machine.
-     *         </p>
+     * <p>Indicates whether there are additional occurrences of sensitive data that are not included in the finding. This occurs when the number of occurrences exceeds the maximum that can be included.</p>
      * @public
      */
-    Name?: string | undefined;
+    AdditionalOccurrences?: boolean | undefined;
     /**
-     * <p>
-     *             The Amazon Resource Name (ARN) of the IAM role used when creating this state machine.
-     *         </p>
+     * <p>The current status of the sensitive data detection.</p>
      * @public
      */
-    RoleArn?: string | undefined;
+    Status?: ClassificationStatus | undefined;
     /**
-     * <p>
-     *             The ARN that identifies the state machine.
-     *         </p>
+     * <p>Provides details about sensitive data that was identified based on built-in configuration.</p>
      * @public
      */
-    StateMachineArn?: string | undefined;
+    SensitiveData?: SensitiveDataResult[] | undefined;
     /**
-     * <p>
-     *             The current status of the state machine.
-     *         </p>
+     * <p>Provides details about sensitive data that was identified based on customer-defined configuration.</p>
      * @public
      */
-    Status?: string | undefined;
+    CustomDataIdentifiers?: CustomDataIdentifiersResult | undefined;
+}
+/**
+ * <p>Provides details about sensitive data that was detected on a resource.</p>
+ * @public
+ */
+export interface DataClassificationDetails {
     /**
-     * <p>
-     *             Specifies whether X-Ray tracing is enabled.
-     *         </p>
+     * <p>The path to the folder or file that contains the sensitive data.</p>
      * @public
      */
-    TracingConfiguration?: AwsStepFunctionStateMachineTracingConfigurationDetails | undefined;
+    DetailedResultsLocation?: string | undefined;
     /**
-     * <p>
-     *             The type of the state machine (STANDARD or EXPRESS).
-     *         </p>
+     * <p>The details about the sensitive data that was detected on the resource.</p>
      * @public
      */
-    Type?: string | undefined;
+    Result?: ClassificationResult | undefined;
 }
 /**
- * <p>A match predicate. A predicate might look for characteristics such as specific IP addresses, geographic locations, or sizes.</p>
+ * <p>A wrapper type for the attributes of an Amazon SNS subscription.</p>
  * @public
  */
-export interface AwsWafRateBasedRuleMatchPredicate {
+export interface AwsSnsTopicSubscription {
     /**
-     * <p>The unique identifier for the predicate.</p>
+     * <p>The subscription's endpoint (format depends on the protocol).</p>
      * @public
      */
-    DataId?: string | undefined;
+    Endpoint?: string | undefined;
     /**
-     * <p>If set to <code>true</code>, then the rule actions are performed on requests that match the predicate settings.</p>
-     *          <p>If set to <code>false</code>, then the rule actions are performed on all requests except those that match the predicate settings.
-     *       </p>
+     * <p>The subscription's protocol.</p>
      * @public
      */
-    Negated?: boolean | undefined;
+    Protocol?: string | undefined;
+}
+/**
+ * <p>Provides information about an Amazon SNS topic to which notifications can be published.</p>
+ * @public
+ */
+export interface AwsSnsTopicDetails {
     /**
-     * <p>The type of predicate. Valid values are as follows:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <code>ByteMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>GeoMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>IPMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>RegexMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>SizeConstraint</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>SqlInjectionMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>XssMatch</code>
-     *                </p>
-     *             </li>
-     *          </ul>
+     * <p>The ID of an Amazon Web Services managed key for Amazon SNS or a customer managed key.</p>
+     * @public
+     */
+    KmsMasterKeyId?: string | undefined;
+    /**
+     * <p>Subscription is an embedded property that describes the subscription endpoints of an Amazon SNS topic.</p>
      * @public
      */
-    Type?: string | undefined;
-}
-/**
- * <p>Details about a rate-based rule for global resources. A rate-based rule provides settings to indicate when to allow, block, or count a request. Rate-based rules include the number of requests that arrive over a specified period of time.</p>
- * @public
- */
-export interface AwsWafRateBasedRuleDetails {
+    Subscription?: AwsSnsTopicSubscription[] | undefined;
     /**
-     * <p>The name of the metrics for the rate-based rule.</p>
+     * <p>The name of the Amazon SNS topic.</p>
      * @public
      */
-    MetricName?: string | undefined;
+    TopicName?: string | undefined;
     /**
-     * <p>The name of the rate-based rule.</p>
+     * <p>The subscription's owner.</p>
      * @public
      */
-    Name?: string | undefined;
+    Owner?: string | undefined;
+    /**
+     * <p>Indicates successful message delivery status for an Amazon SNS topic that is subscribed to an Amazon SQS endpoint.
+     *       </p>
+     * @public
+     */
+    SqsSuccessFeedbackRoleArn?: string | undefined;
+    /**
+     * <p>Indicates failed message delivery status for an Amazon SNS topic that is subscribed to an Amazon SQS endpoint.
+     *       </p>
+     * @public
+     */
+    SqsFailureFeedbackRoleArn?: string | undefined;
     /**
-     * <p>The field that WAF uses to determine whether requests are likely arriving from single source and are subject to rate monitoring.</p>
+     * <p>Indicates failed message delivery status for an Amazon SNS topic that is subscribed to a platform application endpoint.
+     *       </p>
+     * @public
+     */
+    ApplicationSuccessFeedbackRoleArn?: string | undefined;
+    /**
+     * <p>Indicates successful message delivery status for an Amazon SNS topic that is subscribed to an Amazon Kinesis Data Firehose endpoint.
+     *       </p>
      * @public
      */
-    RateKey?: string | undefined;
+    FirehoseSuccessFeedbackRoleArn?: string | undefined;
     /**
-     * <p>The maximum number of requests that have an identical value for the field specified in <code>RateKey</code> that are allowed within a five-minute period. If the number of requests exceeds <code>RateLimit</code> and the other predicates specified in the rule are met, WAF triggers the action for the rule.</p>
+     * <p>Indicates failed message delivery status for an Amazon SNS topic that is subscribed to an Amazon Kinesis Data Firehose endpoint.
+     *       </p>
      * @public
      */
-    RateLimit?: number | undefined;
+    FirehoseFailureFeedbackRoleArn?: string | undefined;
     /**
-     * <p>The unique identifier for the rate-based rule.</p>
+     * <p>Indicates successful message delivery status for an Amazon SNS topic that is subscribed to an HTTP endpoint.
+     *       </p>
      * @public
      */
-    RuleId?: string | undefined;
+    HttpSuccessFeedbackRoleArn?: string | undefined;
     /**
-     * <p>The predicates to include in the rate-based rule.</p>
+     * <p>Indicates failed message delivery status for an Amazon SNS topic that is subscribed to an HTTP endpoint. </p>
      * @public
      */
-    MatchPredicates?: AwsWafRateBasedRuleMatchPredicate[] | undefined;
+    HttpFailureFeedbackRoleArn?: string | undefined;
 }
 /**
- * <p>Details for a match predicate. A predicate might look for characteristics such as specific IP addresses, geographic locations, or sizes.</p>
+ * <p>Data about a queue.</p>
  * @public
  */
-export interface AwsWafRegionalRateBasedRuleMatchPredicate {
+export interface AwsSqsQueueDetails {
+    /**
+     * <p>The length of time, in seconds, for which Amazon SQS can reuse a data key to encrypt or decrypt messages before calling KMS again.</p>
+     * @public
+     */
+    KmsDataKeyReusePeriodSeconds?: number | undefined;
     /**
-     * <p>The unique identifier for the predicate.</p>
+     * <p>The ID of an Amazon Web Services managed key for Amazon SQS or a custom
+     *          KMS key.</p>
+     * @public
+     */
+    KmsMasterKeyId?: string | undefined;
+    /**
+     * <p>The name of the new queue.</p>
      * @public
      */
-    DataId?: string | undefined;
+    QueueName?: string | undefined;
     /**
-     * <p>If set to <code>true</code>, then the rule actions are performed on requests that match the predicate settings.</p>
-     *          <p>If set to <code>false</code>, then the rule actions are performed on all requests except those that match the predicate settings.</p>
+     * <p>The ARN of the dead-letter queue to which Amazon SQS moves
+     *          messages after the value of <code>maxReceiveCount</code> is exceeded. </p>
      * @public
      */
-    Negated?: boolean | undefined;
+    DeadLetterTargetArn?: string | undefined;
+}
+/**
+ * <p>Provides the details about the compliance status for a patch.</p>
+ * @public
+ */
+export interface AwsSsmComplianceSummary {
     /**
-     * <p>The type of predicate. Valid values are as follows:</p>
+     * <p>The current patch compliance status. Valid values are as follows:</p>
      *          <ul>
      *             <li>
      *                <p>
-     *                   <code>ByteMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>GeoMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>IPMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>RegexMatch</code>
-     *                </p>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <code>SizeConstraint</code>
+     *                   <code>COMPLIANT</code>
      *                </p>
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>SqlInjectionMatch</code>
+     *                   <code>NON_COMPLIANT</code>
      *                </p>
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>XssMatch</code>
+     *                   <code>UNSPECIFIED_DATA</code>
      *                </p>
      *             </li>
      *          </ul>
      * @public
      */
-    Type?: string | undefined;
-}
-/**
- * <p>contains details about a rate-based rule for Regional resources. A rate-based rule provides settings to indicate when to allow, block, or count a request. Rate-based rules include the number of requests that arrive over a specified period of time.</p>
- * @public
- */
-export interface AwsWafRegionalRateBasedRuleDetails {
-    /**
-     * <p>The name of the metrics for the rate-based rule.</p>
-     * @public
-     */
-    MetricName?: string | undefined;
+    Status?: string | undefined;
     /**
-     * <p>The name of the rate-based rule.</p>
+     * <p>For the patches that are compliant, the number that have a severity of
+     *             <code>CRITICAL</code>.</p>
      * @public
      */
-    Name?: string | undefined;
+    CompliantCriticalCount?: number | undefined;
     /**
-     * <p>The field that WAF uses to determine whether requests are likely arriving from single source and are subject to rate monitoring.</p>
+     * <p>For the patches that are compliant, the number that have a severity of
+     *          <code>HIGH</code>.</p>
      * @public
      */
-    RateKey?: string | undefined;
+    CompliantHighCount?: number | undefined;
     /**
-     * <p>The maximum number of requests that have an identical value for the field specified in <code>RateKey</code> that are allowed within a five-minute period. If the number of requests exceeds <code>RateLimit</code> and the other predicates specified in the rule are met, WAF triggers the action for the rule.</p>
+     * <p>For the patches that are compliant, the number that have a severity of
+     *             <code>MEDIUM</code>.</p>
      * @public
      */
-    RateLimit?: number | undefined;
+    CompliantMediumCount?: number | undefined;
     /**
-     * <p>The unique identifier for the rate-based rule.</p>
+     * <p>The type of execution that was used determine compliance.</p>
      * @public
      */
-    RuleId?: string | undefined;
+    ExecutionType?: string | undefined;
     /**
-     * <p>The predicates to include in the rate-based rule.</p>
+     * <p>For the patch items that are noncompliant, the number of items that have a severity of
+     *             <code>CRITICAL</code>.</p>
      * @public
      */
-    MatchPredicates?: AwsWafRegionalRateBasedRuleMatchPredicate[] | undefined;
-}
-/**
- * <p>Provides details about the <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>,
- *          <code>RegexMatchSet</code>, <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to add to a rule and, for each object, indicates whether you want to negate the settings.
- *       </p>
- * @public
- */
-export interface AwsWafRegionalRulePredicateListDetails {
+    NonCompliantCriticalCount?: number | undefined;
     /**
-     * <p>A unique identifier for a predicate in a rule, such as <code>ByteMatchSetId</code> or <code>IPSetId</code>.
-     *       </p>
+     * <p>For the patches that are compliant, the number that have a severity of
+     *             <code>INFORMATIONAL</code>.</p>
      * @public
      */
-    DataId?: string | undefined;
+    CompliantInformationalCount?: number | undefined;
     /**
-     * <p>Specifies if you want WAF to allow, block, or count requests based on the settings in the
-     *          <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>,
-     *          <code>RegexMatchSet</code>, <code>GeoMatchSet</code>, or <code>SizeConstraintSet</code>.
-     *       </p>
+     * <p>For the patches that are noncompliant, the number that have a severity of
+     *             <code>INFORMATIONAL</code>.</p>
      * @public
      */
-    Negated?: boolean | undefined;
+    NonCompliantInformationalCount?: number | undefined;
     /**
-     * <p>The type of predicate in a rule, such as <code>ByteMatch</code> or <code>IPSet</code>.
-     *       </p>
+     * <p>For the patches that are compliant, the number that have a severity of
+     *             <code>UNSPECIFIED</code>.</p>
      * @public
      */
-    Type?: string | undefined;
-}
-/**
- * <p>Provides information about an WAF Regional rule. This rule identifies the web requests that you want to allow, block, or count. </p>
- * @public
- */
-export interface AwsWafRegionalRuleDetails {
+    CompliantUnspecifiedCount?: number | undefined;
     /**
-     * <p>A name for the metrics for the rule.
-     *       </p>
+     * <p>For the patches that are noncompliant, the number that have a severity of
+     *             <code>LOW</code>.</p>
      * @public
      */
-    MetricName?: string | undefined;
+    NonCompliantLowCount?: number | undefined;
     /**
-     * <p>A descriptive name for the rule.
-     *       </p>
+     * <p>For the patches that are noncompliant, the number that have a severity of
+     *             <code>HIGH</code>.</p>
      * @public
      */
-    Name?: string | undefined;
+    NonCompliantHighCount?: number | undefined;
     /**
-     * <p>Specifies the <code>ByteMatchSet</code>, <code>IPSet</code>,
-     *             <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>, <code>RegexMatchSet</code>,
-     *             <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to
-     *          add to a rule and, for each object, indicates whether you want to negate the settings. </p>
+     * <p>For the patches that are compliant, the number that have a severity of
+     *          <code>LOW</code>.</p>
      * @public
      */
-    PredicateList?: AwsWafRegionalRulePredicateListDetails[] | undefined;
+    CompliantLowCount?: number | undefined;
     /**
-     * <p>The ID of the rule.
-     *       </p>
+     * <p>The type of resource for which the compliance was determined. For
+     *             <code>AwsSsmPatchCompliance</code>, <code>ComplianceType</code> is <code>Patch</code>. </p>
      * @public
      */
-    RuleId?: string | undefined;
-}
-/**
- * <p>Describes the action that WAF should take on a web request when it matches the criteria defined in the rule.
- *       </p>
- * @public
- */
-export interface AwsWafRegionalRuleGroupRulesActionDetails {
+    ComplianceType?: string | undefined;
     /**
-     * <p>Specifies the <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>, <code>RegexMatchSet</code>,
-     * <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to add to a rule and, for each object, indicates whether you want to negate the settings.</p>
+     * <p>The identifier of the patch baseline. The patch baseline lists the patches that are
+     *          approved for installation.</p>
      * @public
      */
-    Type?: string | undefined;
-}
-/**
- * <p>Provides information about the rules attached to a rule group
- *       </p>
- * @public
- */
-export interface AwsWafRegionalRuleGroupRulesDetails {
+    PatchBaselineId?: string | undefined;
     /**
-     * <p>The action that WAF should take on a web request when it matches the criteria defined in the rule. </p>
+     * <p>The highest severity for the patches. Valid values are as follows:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>CRITICAL</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>HIGH</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>MEDIUM</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>LOW</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>INFORMATIONAL</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>UNSPECIFIED</code>
+     *                </p>
+     *             </li>
+     *          </ul>
      * @public
      */
-    Action?: AwsWafRegionalRuleGroupRulesActionDetails | undefined;
+    OverallSeverity?: string | undefined;
     /**
-     * <p>If you define more than one rule in a web ACL, WAF evaluates each request against the rules in
-     *          order based on the value of <code>Priority</code>. </p>
+     * <p>For the patches that are noncompliant, the number that have a severity of
+     *             <code>MEDIUM</code>.</p>
      * @public
      */
-    Priority?: number | undefined;
+    NonCompliantMediumCount?: number | undefined;
     /**
-     * <p>The ID for a rule.
-     *       </p>
+     * <p>For the patches that are noncompliant, the number that have a severity of
+     *             <code>UNSPECIFIED</code>.</p>
      * @public
      */
-    RuleId?: string | undefined;
+    NonCompliantUnspecifiedCount?: number | undefined;
     /**
-     * <p>The type of rule in the rule group.
-     *       </p>
+     * <p>The identifier of the patch group for which compliance was determined. A patch group
+     *          uses tags to group EC2 instances that should have the same patch compliance.</p>
      * @public
      */
-    Type?: string | undefined;
+    PatchGroup?: string | undefined;
 }
 /**
- * <p>Provides information about an WAF Regional rule group. The rule group is a collection of rules for inspecting and controlling web
- *          requests. </p>
+ * <p>Provides details about the compliance for a patch.</p>
  * @public
  */
-export interface AwsWafRegionalRuleGroupDetails {
-    /**
-     * <p>A name for the metrics for this rule group.
-     *       </p>
-     * @public
-     */
-    MetricName?: string | undefined;
-    /**
-     * <p>The descriptive name of the rule group.
-     *       </p>
-     * @public
-     */
-    Name?: string | undefined;
+export interface AwsSsmPatch {
     /**
-     * <p>The ID of the rule group.
-     *       </p>
+     * <p>The compliance status details for the patch.</p>
      * @public
      */
-    RuleGroupId?: string | undefined;
+    ComplianceSummary?: AwsSsmComplianceSummary | undefined;
+}
+/**
+ * <p>Provides information about the state of a patch on an instance based on the patch
+ *          baseline that was used to patch the instance.</p>
+ * @public
+ */
+export interface AwsSsmPatchComplianceDetails {
     /**
-     * <p>Provides information about the rule statements used to identify the web requests that you want to allow, block, or
-     * count.
-     *       </p>
+     * <p>Information about the status of a patch.</p>
      * @public
      */
-    Rules?: AwsWafRegionalRuleGroupRulesDetails[] | undefined;
+    Patch?: AwsSsmPatch | undefined;
 }
 /**
- * <p>The action that WAF takes when a web request matches all conditions in the
- *          rule, such as allow, block, or count the request. </p>
+ * <p>
+ *             An object describing a CloudWatch log group. For more information, see
+ *             <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html">
+ *                 Amazon Web Services::Logs::LogGroup</a> in the <i>CloudFormation User Guide</i>.
+ *         </p>
  * @public
  */
-export interface AwsWafRegionalWebAclRulesListActionDetails {
+export interface AwsStepFunctionStateMachineLoggingConfigurationDestinationsCloudWatchLogsLogGroupDetails {
     /**
-     * <p>For actions that are associated with a rule, the action that WAF takes when a web request matches all conditions in a rule.
-     *       </p>
+     * <p>The ARN (ends with <code>:*</code>) of the CloudWatch Logs log group to which you want your logs emitted.</p>
      * @public
      */
-    Type?: string | undefined;
+    LogGroupArn?: string | undefined;
 }
 /**
- * <p>Provides details about the action to use in the place of the action that results from the rule group
- * evaluation.
- *       </p>
+ * <p>
+ *             An array of objects that describes where your execution history events will be logged.
+ *         </p>
  * @public
  */
-export interface AwsWafRegionalWebAclRulesListOverrideActionDetails {
+export interface AwsStepFunctionStateMachineLoggingConfigurationDestinationsDetails {
     /**
-     * <p>Overrides the rule evaluation result in the rule group.
-     *       </p>
+     * <p>
+     *             An object describing a CloudWatch Logs log group. For more information, see
+     *             <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html">
+     *                 Amazon Web Services::Logs::LogGroup</a> in the <i>CloudFormation User Guide</i>.
+     *         </p>
      * @public
      */
-    Type?: string | undefined;
+    CloudWatchLogsLogGroup?: AwsStepFunctionStateMachineLoggingConfigurationDestinationsCloudWatchLogsLogGroupDetails | undefined;
 }