@aws-sdk/client-securityhub 3.699.0 → 3.703.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/index.js +140 -0
- package/dist-es/models/models_0.js +4 -0
- package/dist-es/models/models_1.js +4 -0
- package/dist-es/protocols/Aws_restJson1.js +136 -0
- package/dist-types/commands/BatchImportFindingsCommand.d.ts +81 -0
- package/dist-types/commands/GetFindingsCommand.d.ts +81 -0
- package/dist-types/models/models_0.d.ts +146 -162
- package/dist-types/models/models_1.d.ts +1213 -1116
- package/dist-types/models/models_2.d.ts +473 -1
- package/dist-types/ts3.4/models/models_0.d.ts +28 -20
- package/dist-types/ts3.4/models/models_1.d.ts +82 -87
- package/dist-types/ts3.4/models/models_2.d.ts +85 -7
- package/package.json +1 -1
|
@@ -1,7 +1,470 @@
|
|
|
1
1
|
import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
|
|
2
2
|
import { AccountDetails, Action, ActionTarget, Adjustment, AdminAccount, AssociationFilters, AssociationStatus, AssociationType, AutoEnableStandards, AutomationRulesAction, AutomationRulesConfig, AutomationRulesFindingFilters, AutomationRulesMetadata, AwsAmazonMqBrokerDetails, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAppSyncGraphQlApiDetails, AwsAthenaWorkGroupDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsBackupBackupPlanDetails, AwsBackupBackupVaultDetails, AwsBackupRecoveryPointDetails, AwsCertificateManagerCertificateDetails, AwsCloudFormationStackDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCloudWatchAlarmDetails, AwsCodeBuildProjectDetails, AwsDmsEndpointDetails, AwsDmsReplicationInstanceDetails, AwsDmsReplicationTaskDetails, AwsDynamoDbTableDetails, AwsEc2ClientVpnEndpointDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2LaunchTemplateDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2RouteTableDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2TransitGatewayDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpcEndpointServiceDetails, AwsEc2VpcPeeringConnectionDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcrRepositoryDetails, AwsEcsClusterDetails, AwsEcsContainerDetails, AwsEcsServiceDetails, ConfigurationPolicyAssociationStatus, DateFilter, MapFilter, NoteUpdate, NumberFilter, RelatedFinding, RuleStatus, SeverityLabel, SeverityUpdate, StringFilter, VerificationState, WorkflowStatus, WorkflowUpdate } from "./models_0";
|
|
3
|
-
import { AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointDetails, AwsEksClusterDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsEventSchemasRegistryDetails, AwsEventsEndpointDetails, AwsEventsEventbusDetails, AwsGuardDutyDetectorDetails, AwsIamAccessKeyDetails, AwsIamGroupDetails, AwsIamPolicyDetails, AwsIamRoleDetails, AwsIamUserDetails, AwsKinesisStreamDetails, AwsKmsKeyDetails, AwsLambdaFunctionDetails, AwsLambdaLayerVersionDetails, AwsMskClusterDetails, AwsNetworkFirewallFirewallDetails, AwsNetworkFirewallFirewallPolicyDetails, AwsNetworkFirewallRuleGroupDetails, AwsOpenSearchServiceDomainDetails, AwsRdsDbClusterDetails, AwsRdsDbClusterSnapshotDetails, AwsRdsDbInstanceDetails, AwsRdsDbSecurityGroupDetails, AwsRdsDbSnapshotDetails, AwsRdsEventSubscriptionDetails, AwsRedshiftClusterDetails, AwsRoute53HostedZoneDetails, AwsS3AccessPointDetails, AwsS3AccountPublicAccessBlockDetails, AwsS3BucketDetails, AwsS3ObjectDetails, AwsSageMakerNotebookInstanceDetails, AwsSecretsManagerSecretDetails, AwsSnsTopicDetails, AwsSqsQueueDetails, AwsSsmPatchComplianceDetails,
|
|
3
|
+
import { AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointDetails, AwsEksClusterDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsEventSchemasRegistryDetails, AwsEventsEndpointDetails, AwsEventsEventbusDetails, AwsGuardDutyDetectorDetails, AwsIamAccessKeyDetails, AwsIamGroupDetails, AwsIamPolicyDetails, AwsIamRoleDetails, AwsIamUserDetails, AwsKinesisStreamDetails, AwsKmsKeyDetails, AwsLambdaFunctionDetails, AwsLambdaLayerVersionDetails, AwsMskClusterDetails, AwsNetworkFirewallFirewallDetails, AwsNetworkFirewallFirewallPolicyDetails, AwsNetworkFirewallRuleGroupDetails, AwsOpenSearchServiceDomainDetails, AwsRdsDbClusterDetails, AwsRdsDbClusterSnapshotDetails, AwsRdsDbInstanceDetails, AwsRdsDbSecurityGroupDetails, AwsRdsDbSnapshotDetails, AwsRdsEventSubscriptionDetails, AwsRedshiftClusterDetails, AwsRoute53HostedZoneDetails, AwsS3AccessPointDetails, AwsS3AccountPublicAccessBlockDetails, AwsS3BucketDetails, AwsS3ObjectDetails, AwsSageMakerNotebookInstanceDetails, AwsSecretsManagerSecretDetails, AwsSnsTopicDetails, AwsSqsQueueDetails, AwsSsmPatchComplianceDetails, AwsStepFunctionStateMachineLoggingConfigurationDestinationsDetails, Compliance, DataClassificationDetails, Detection, FindingProviderFields, GeneratorDetails, Malware, Network, NetworkPathComponent, Note, PatchSummary, ProcessDetails, RecordState, Remediation } from "./models_1";
|
|
4
4
|
import { SecurityHubServiceException as __BaseException } from "./SecurityHubServiceException";
|
|
5
|
+
/**
|
|
6
|
+
* <p>
|
|
7
|
+
* The <code>LoggingConfiguration</code> data type is used to set CloudWatch Logs options.
|
|
8
|
+
* </p>
|
|
9
|
+
* @public
|
|
10
|
+
*/
|
|
11
|
+
export interface AwsStepFunctionStateMachineLoggingConfigurationDetails {
|
|
12
|
+
/**
|
|
13
|
+
* <p>
|
|
14
|
+
* An array of objects that describes where your execution history events will be logged.
|
|
15
|
+
* </p>
|
|
16
|
+
* @public
|
|
17
|
+
*/
|
|
18
|
+
Destinations?: AwsStepFunctionStateMachineLoggingConfigurationDestinationsDetails[] | undefined;
|
|
19
|
+
/**
|
|
20
|
+
* <p>
|
|
21
|
+
* Determines whether execution data is included in your log. When set to false, data is excluded.
|
|
22
|
+
* </p>
|
|
23
|
+
* @public
|
|
24
|
+
*/
|
|
25
|
+
IncludeExecutionData?: boolean | undefined;
|
|
26
|
+
/**
|
|
27
|
+
* <p>
|
|
28
|
+
* Defines which category of execution history events are logged.
|
|
29
|
+
* </p>
|
|
30
|
+
* @public
|
|
31
|
+
*/
|
|
32
|
+
Level?: string | undefined;
|
|
33
|
+
}
|
|
34
|
+
/**
|
|
35
|
+
* <p>
|
|
36
|
+
* Specifies whether X-Ray tracing is enabled.
|
|
37
|
+
* </p>
|
|
38
|
+
* @public
|
|
39
|
+
*/
|
|
40
|
+
export interface AwsStepFunctionStateMachineTracingConfigurationDetails {
|
|
41
|
+
/**
|
|
42
|
+
* <p>
|
|
43
|
+
* When set to true, X-Ray tracing is enabled.
|
|
44
|
+
* </p>
|
|
45
|
+
* @public
|
|
46
|
+
*/
|
|
47
|
+
Enabled?: boolean | undefined;
|
|
48
|
+
}
|
|
49
|
+
/**
|
|
50
|
+
* <p>
|
|
51
|
+
* Provides details about an Step Functions state machine, which is a workflow consisting of a series of event-
|
|
52
|
+
* driven steps.
|
|
53
|
+
* </p>
|
|
54
|
+
* @public
|
|
55
|
+
*/
|
|
56
|
+
export interface AwsStepFunctionStateMachineDetails {
|
|
57
|
+
/**
|
|
58
|
+
* <p>
|
|
59
|
+
* A user-defined or an auto-generated string that identifies a <code>Map</code> state. This parameter is present only if
|
|
60
|
+
* the <code>stateMachineArn</code> specified in input is a qualified state machine ARN.
|
|
61
|
+
* </p>
|
|
62
|
+
* @public
|
|
63
|
+
*/
|
|
64
|
+
Label?: string | undefined;
|
|
65
|
+
/**
|
|
66
|
+
* <p>
|
|
67
|
+
* Used to set CloudWatch Logs options.
|
|
68
|
+
* </p>
|
|
69
|
+
* @public
|
|
70
|
+
*/
|
|
71
|
+
LoggingConfiguration?: AwsStepFunctionStateMachineLoggingConfigurationDetails | undefined;
|
|
72
|
+
/**
|
|
73
|
+
* <p>
|
|
74
|
+
* The name of the state machine.
|
|
75
|
+
* </p>
|
|
76
|
+
* @public
|
|
77
|
+
*/
|
|
78
|
+
Name?: string | undefined;
|
|
79
|
+
/**
|
|
80
|
+
* <p>
|
|
81
|
+
* The Amazon Resource Name (ARN) of the IAM role used when creating this state machine.
|
|
82
|
+
* </p>
|
|
83
|
+
* @public
|
|
84
|
+
*/
|
|
85
|
+
RoleArn?: string | undefined;
|
|
86
|
+
/**
|
|
87
|
+
* <p>
|
|
88
|
+
* The ARN that identifies the state machine.
|
|
89
|
+
* </p>
|
|
90
|
+
* @public
|
|
91
|
+
*/
|
|
92
|
+
StateMachineArn?: string | undefined;
|
|
93
|
+
/**
|
|
94
|
+
* <p>
|
|
95
|
+
* The current status of the state machine.
|
|
96
|
+
* </p>
|
|
97
|
+
* @public
|
|
98
|
+
*/
|
|
99
|
+
Status?: string | undefined;
|
|
100
|
+
/**
|
|
101
|
+
* <p>
|
|
102
|
+
* Specifies whether X-Ray tracing is enabled.
|
|
103
|
+
* </p>
|
|
104
|
+
* @public
|
|
105
|
+
*/
|
|
106
|
+
TracingConfiguration?: AwsStepFunctionStateMachineTracingConfigurationDetails | undefined;
|
|
107
|
+
/**
|
|
108
|
+
* <p>
|
|
109
|
+
* The type of the state machine (STANDARD or EXPRESS).
|
|
110
|
+
* </p>
|
|
111
|
+
* @public
|
|
112
|
+
*/
|
|
113
|
+
Type?: string | undefined;
|
|
114
|
+
}
|
|
115
|
+
/**
|
|
116
|
+
* <p>A match predicate. A predicate might look for characteristics such as specific IP addresses, geographic locations, or sizes.</p>
|
|
117
|
+
* @public
|
|
118
|
+
*/
|
|
119
|
+
export interface AwsWafRateBasedRuleMatchPredicate {
|
|
120
|
+
/**
|
|
121
|
+
* <p>The unique identifier for the predicate.</p>
|
|
122
|
+
* @public
|
|
123
|
+
*/
|
|
124
|
+
DataId?: string | undefined;
|
|
125
|
+
/**
|
|
126
|
+
* <p>If set to <code>true</code>, then the rule actions are performed on requests that match the predicate settings.</p>
|
|
127
|
+
* <p>If set to <code>false</code>, then the rule actions are performed on all requests except those that match the predicate settings.
|
|
128
|
+
* </p>
|
|
129
|
+
* @public
|
|
130
|
+
*/
|
|
131
|
+
Negated?: boolean | undefined;
|
|
132
|
+
/**
|
|
133
|
+
* <p>The type of predicate. Valid values are as follows:</p>
|
|
134
|
+
* <ul>
|
|
135
|
+
* <li>
|
|
136
|
+
* <p>
|
|
137
|
+
* <code>ByteMatch</code>
|
|
138
|
+
* </p>
|
|
139
|
+
* </li>
|
|
140
|
+
* <li>
|
|
141
|
+
* <p>
|
|
142
|
+
* <code>GeoMatch</code>
|
|
143
|
+
* </p>
|
|
144
|
+
* </li>
|
|
145
|
+
* <li>
|
|
146
|
+
* <p>
|
|
147
|
+
* <code>IPMatch</code>
|
|
148
|
+
* </p>
|
|
149
|
+
* </li>
|
|
150
|
+
* <li>
|
|
151
|
+
* <p>
|
|
152
|
+
* <code>RegexMatch</code>
|
|
153
|
+
* </p>
|
|
154
|
+
* </li>
|
|
155
|
+
* <li>
|
|
156
|
+
* <p>
|
|
157
|
+
* <code>SizeConstraint</code>
|
|
158
|
+
* </p>
|
|
159
|
+
* </li>
|
|
160
|
+
* <li>
|
|
161
|
+
* <p>
|
|
162
|
+
* <code>SqlInjectionMatch</code>
|
|
163
|
+
* </p>
|
|
164
|
+
* </li>
|
|
165
|
+
* <li>
|
|
166
|
+
* <p>
|
|
167
|
+
* <code>XssMatch</code>
|
|
168
|
+
* </p>
|
|
169
|
+
* </li>
|
|
170
|
+
* </ul>
|
|
171
|
+
* @public
|
|
172
|
+
*/
|
|
173
|
+
Type?: string | undefined;
|
|
174
|
+
}
|
|
175
|
+
/**
|
|
176
|
+
* <p>Details about a rate-based rule for global resources. A rate-based rule provides settings to indicate when to allow, block, or count a request. Rate-based rules include the number of requests that arrive over a specified period of time.</p>
|
|
177
|
+
* @public
|
|
178
|
+
*/
|
|
179
|
+
export interface AwsWafRateBasedRuleDetails {
|
|
180
|
+
/**
|
|
181
|
+
* <p>The name of the metrics for the rate-based rule.</p>
|
|
182
|
+
* @public
|
|
183
|
+
*/
|
|
184
|
+
MetricName?: string | undefined;
|
|
185
|
+
/**
|
|
186
|
+
* <p>The name of the rate-based rule.</p>
|
|
187
|
+
* @public
|
|
188
|
+
*/
|
|
189
|
+
Name?: string | undefined;
|
|
190
|
+
/**
|
|
191
|
+
* <p>The field that WAF uses to determine whether requests are likely arriving from single source and are subject to rate monitoring.</p>
|
|
192
|
+
* @public
|
|
193
|
+
*/
|
|
194
|
+
RateKey?: string | undefined;
|
|
195
|
+
/**
|
|
196
|
+
* <p>The maximum number of requests that have an identical value for the field specified in <code>RateKey</code> that are allowed within a five-minute period. If the number of requests exceeds <code>RateLimit</code> and the other predicates specified in the rule are met, WAF triggers the action for the rule.</p>
|
|
197
|
+
* @public
|
|
198
|
+
*/
|
|
199
|
+
RateLimit?: number | undefined;
|
|
200
|
+
/**
|
|
201
|
+
* <p>The unique identifier for the rate-based rule.</p>
|
|
202
|
+
* @public
|
|
203
|
+
*/
|
|
204
|
+
RuleId?: string | undefined;
|
|
205
|
+
/**
|
|
206
|
+
* <p>The predicates to include in the rate-based rule.</p>
|
|
207
|
+
* @public
|
|
208
|
+
*/
|
|
209
|
+
MatchPredicates?: AwsWafRateBasedRuleMatchPredicate[] | undefined;
|
|
210
|
+
}
|
|
211
|
+
/**
|
|
212
|
+
* <p>Details for a match predicate. A predicate might look for characteristics such as specific IP addresses, geographic locations, or sizes.</p>
|
|
213
|
+
* @public
|
|
214
|
+
*/
|
|
215
|
+
export interface AwsWafRegionalRateBasedRuleMatchPredicate {
|
|
216
|
+
/**
|
|
217
|
+
* <p>The unique identifier for the predicate.</p>
|
|
218
|
+
* @public
|
|
219
|
+
*/
|
|
220
|
+
DataId?: string | undefined;
|
|
221
|
+
/**
|
|
222
|
+
* <p>If set to <code>true</code>, then the rule actions are performed on requests that match the predicate settings.</p>
|
|
223
|
+
* <p>If set to <code>false</code>, then the rule actions are performed on all requests except those that match the predicate settings.</p>
|
|
224
|
+
* @public
|
|
225
|
+
*/
|
|
226
|
+
Negated?: boolean | undefined;
|
|
227
|
+
/**
|
|
228
|
+
* <p>The type of predicate. Valid values are as follows:</p>
|
|
229
|
+
* <ul>
|
|
230
|
+
* <li>
|
|
231
|
+
* <p>
|
|
232
|
+
* <code>ByteMatch</code>
|
|
233
|
+
* </p>
|
|
234
|
+
* </li>
|
|
235
|
+
* <li>
|
|
236
|
+
* <p>
|
|
237
|
+
* <code>GeoMatch</code>
|
|
238
|
+
* </p>
|
|
239
|
+
* </li>
|
|
240
|
+
* <li>
|
|
241
|
+
* <p>
|
|
242
|
+
* <code>IPMatch</code>
|
|
243
|
+
* </p>
|
|
244
|
+
* </li>
|
|
245
|
+
* <li>
|
|
246
|
+
* <p>
|
|
247
|
+
* <code>RegexMatch</code>
|
|
248
|
+
* </p>
|
|
249
|
+
* </li>
|
|
250
|
+
* <li>
|
|
251
|
+
* <p>
|
|
252
|
+
* <code>SizeConstraint</code>
|
|
253
|
+
* </p>
|
|
254
|
+
* </li>
|
|
255
|
+
* <li>
|
|
256
|
+
* <p>
|
|
257
|
+
* <code>SqlInjectionMatch</code>
|
|
258
|
+
* </p>
|
|
259
|
+
* </li>
|
|
260
|
+
* <li>
|
|
261
|
+
* <p>
|
|
262
|
+
* <code>XssMatch</code>
|
|
263
|
+
* </p>
|
|
264
|
+
* </li>
|
|
265
|
+
* </ul>
|
|
266
|
+
* @public
|
|
267
|
+
*/
|
|
268
|
+
Type?: string | undefined;
|
|
269
|
+
}
|
|
270
|
+
/**
|
|
271
|
+
* <p>contains details about a rate-based rule for Regional resources. A rate-based rule provides settings to indicate when to allow, block, or count a request. Rate-based rules include the number of requests that arrive over a specified period of time.</p>
|
|
272
|
+
* @public
|
|
273
|
+
*/
|
|
274
|
+
export interface AwsWafRegionalRateBasedRuleDetails {
|
|
275
|
+
/**
|
|
276
|
+
* <p>The name of the metrics for the rate-based rule.</p>
|
|
277
|
+
* @public
|
|
278
|
+
*/
|
|
279
|
+
MetricName?: string | undefined;
|
|
280
|
+
/**
|
|
281
|
+
* <p>The name of the rate-based rule.</p>
|
|
282
|
+
* @public
|
|
283
|
+
*/
|
|
284
|
+
Name?: string | undefined;
|
|
285
|
+
/**
|
|
286
|
+
* <p>The field that WAF uses to determine whether requests are likely arriving from single source and are subject to rate monitoring.</p>
|
|
287
|
+
* @public
|
|
288
|
+
*/
|
|
289
|
+
RateKey?: string | undefined;
|
|
290
|
+
/**
|
|
291
|
+
* <p>The maximum number of requests that have an identical value for the field specified in <code>RateKey</code> that are allowed within a five-minute period. If the number of requests exceeds <code>RateLimit</code> and the other predicates specified in the rule are met, WAF triggers the action for the rule.</p>
|
|
292
|
+
* @public
|
|
293
|
+
*/
|
|
294
|
+
RateLimit?: number | undefined;
|
|
295
|
+
/**
|
|
296
|
+
* <p>The unique identifier for the rate-based rule.</p>
|
|
297
|
+
* @public
|
|
298
|
+
*/
|
|
299
|
+
RuleId?: string | undefined;
|
|
300
|
+
/**
|
|
301
|
+
* <p>The predicates to include in the rate-based rule.</p>
|
|
302
|
+
* @public
|
|
303
|
+
*/
|
|
304
|
+
MatchPredicates?: AwsWafRegionalRateBasedRuleMatchPredicate[] | undefined;
|
|
305
|
+
}
|
|
306
|
+
/**
|
|
307
|
+
* <p>Provides details about the <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>,
|
|
308
|
+
* <code>RegexMatchSet</code>, <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to add to a rule and, for each object, indicates whether you want to negate the settings.
|
|
309
|
+
* </p>
|
|
310
|
+
* @public
|
|
311
|
+
*/
|
|
312
|
+
export interface AwsWafRegionalRulePredicateListDetails {
|
|
313
|
+
/**
|
|
314
|
+
* <p>A unique identifier for a predicate in a rule, such as <code>ByteMatchSetId</code> or <code>IPSetId</code>.
|
|
315
|
+
* </p>
|
|
316
|
+
* @public
|
|
317
|
+
*/
|
|
318
|
+
DataId?: string | undefined;
|
|
319
|
+
/**
|
|
320
|
+
* <p>Specifies if you want WAF to allow, block, or count requests based on the settings in the
|
|
321
|
+
* <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>,
|
|
322
|
+
* <code>RegexMatchSet</code>, <code>GeoMatchSet</code>, or <code>SizeConstraintSet</code>.
|
|
323
|
+
* </p>
|
|
324
|
+
* @public
|
|
325
|
+
*/
|
|
326
|
+
Negated?: boolean | undefined;
|
|
327
|
+
/**
|
|
328
|
+
* <p>The type of predicate in a rule, such as <code>ByteMatch</code> or <code>IPSet</code>.
|
|
329
|
+
* </p>
|
|
330
|
+
* @public
|
|
331
|
+
*/
|
|
332
|
+
Type?: string | undefined;
|
|
333
|
+
}
|
|
334
|
+
/**
|
|
335
|
+
* <p>Provides information about an WAF Regional rule. This rule identifies the web requests that you want to allow, block, or count. </p>
|
|
336
|
+
* @public
|
|
337
|
+
*/
|
|
338
|
+
export interface AwsWafRegionalRuleDetails {
|
|
339
|
+
/**
|
|
340
|
+
* <p>A name for the metrics for the rule.
|
|
341
|
+
* </p>
|
|
342
|
+
* @public
|
|
343
|
+
*/
|
|
344
|
+
MetricName?: string | undefined;
|
|
345
|
+
/**
|
|
346
|
+
* <p>A descriptive name for the rule.
|
|
347
|
+
* </p>
|
|
348
|
+
* @public
|
|
349
|
+
*/
|
|
350
|
+
Name?: string | undefined;
|
|
351
|
+
/**
|
|
352
|
+
* <p>Specifies the <code>ByteMatchSet</code>, <code>IPSet</code>,
|
|
353
|
+
* <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>, <code>RegexMatchSet</code>,
|
|
354
|
+
* <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to
|
|
355
|
+
* add to a rule and, for each object, indicates whether you want to negate the settings. </p>
|
|
356
|
+
* @public
|
|
357
|
+
*/
|
|
358
|
+
PredicateList?: AwsWafRegionalRulePredicateListDetails[] | undefined;
|
|
359
|
+
/**
|
|
360
|
+
* <p>The ID of the rule.
|
|
361
|
+
* </p>
|
|
362
|
+
* @public
|
|
363
|
+
*/
|
|
364
|
+
RuleId?: string | undefined;
|
|
365
|
+
}
|
|
366
|
+
/**
|
|
367
|
+
* <p>Describes the action that WAF should take on a web request when it matches the criteria defined in the rule.
|
|
368
|
+
* </p>
|
|
369
|
+
* @public
|
|
370
|
+
*/
|
|
371
|
+
export interface AwsWafRegionalRuleGroupRulesActionDetails {
|
|
372
|
+
/**
|
|
373
|
+
* <p>Specifies the <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>, <code>RegexMatchSet</code>,
|
|
374
|
+
* <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to add to a rule and, for each object, indicates whether you want to negate the settings.</p>
|
|
375
|
+
* @public
|
|
376
|
+
*/
|
|
377
|
+
Type?: string | undefined;
|
|
378
|
+
}
|
|
379
|
+
/**
|
|
380
|
+
* <p>Provides information about the rules attached to a rule group
|
|
381
|
+
* </p>
|
|
382
|
+
* @public
|
|
383
|
+
*/
|
|
384
|
+
export interface AwsWafRegionalRuleGroupRulesDetails {
|
|
385
|
+
/**
|
|
386
|
+
* <p>The action that WAF should take on a web request when it matches the criteria defined in the rule. </p>
|
|
387
|
+
* @public
|
|
388
|
+
*/
|
|
389
|
+
Action?: AwsWafRegionalRuleGroupRulesActionDetails | undefined;
|
|
390
|
+
/**
|
|
391
|
+
* <p>If you define more than one rule in a web ACL, WAF evaluates each request against the rules in
|
|
392
|
+
* order based on the value of <code>Priority</code>. </p>
|
|
393
|
+
* @public
|
|
394
|
+
*/
|
|
395
|
+
Priority?: number | undefined;
|
|
396
|
+
/**
|
|
397
|
+
* <p>The ID for a rule.
|
|
398
|
+
* </p>
|
|
399
|
+
* @public
|
|
400
|
+
*/
|
|
401
|
+
RuleId?: string | undefined;
|
|
402
|
+
/**
|
|
403
|
+
* <p>The type of rule in the rule group.
|
|
404
|
+
* </p>
|
|
405
|
+
* @public
|
|
406
|
+
*/
|
|
407
|
+
Type?: string | undefined;
|
|
408
|
+
}
|
|
409
|
+
/**
|
|
410
|
+
* <p>Provides information about an WAF Regional rule group. The rule group is a collection of rules for inspecting and controlling web
|
|
411
|
+
* requests. </p>
|
|
412
|
+
* @public
|
|
413
|
+
*/
|
|
414
|
+
export interface AwsWafRegionalRuleGroupDetails {
|
|
415
|
+
/**
|
|
416
|
+
* <p>A name for the metrics for this rule group.
|
|
417
|
+
* </p>
|
|
418
|
+
* @public
|
|
419
|
+
*/
|
|
420
|
+
MetricName?: string | undefined;
|
|
421
|
+
/**
|
|
422
|
+
* <p>The descriptive name of the rule group.
|
|
423
|
+
* </p>
|
|
424
|
+
* @public
|
|
425
|
+
*/
|
|
426
|
+
Name?: string | undefined;
|
|
427
|
+
/**
|
|
428
|
+
* <p>The ID of the rule group.
|
|
429
|
+
* </p>
|
|
430
|
+
* @public
|
|
431
|
+
*/
|
|
432
|
+
RuleGroupId?: string | undefined;
|
|
433
|
+
/**
|
|
434
|
+
* <p>Provides information about the rule statements used to identify the web requests that you want to allow, block, or
|
|
435
|
+
* count.
|
|
436
|
+
* </p>
|
|
437
|
+
* @public
|
|
438
|
+
*/
|
|
439
|
+
Rules?: AwsWafRegionalRuleGroupRulesDetails[] | undefined;
|
|
440
|
+
}
|
|
441
|
+
/**
|
|
442
|
+
* <p>The action that WAF takes when a web request matches all conditions in the
|
|
443
|
+
* rule, such as allow, block, or count the request. </p>
|
|
444
|
+
* @public
|
|
445
|
+
*/
|
|
446
|
+
export interface AwsWafRegionalWebAclRulesListActionDetails {
|
|
447
|
+
/**
|
|
448
|
+
* <p>For actions that are associated with a rule, the action that WAF takes when a web request matches all conditions in a rule.
|
|
449
|
+
* </p>
|
|
450
|
+
* @public
|
|
451
|
+
*/
|
|
452
|
+
Type?: string | undefined;
|
|
453
|
+
}
|
|
454
|
+
/**
|
|
455
|
+
* <p>Provides details about the action to use in the place of the action that results from the rule group
|
|
456
|
+
* evaluation.
|
|
457
|
+
* </p>
|
|
458
|
+
* @public
|
|
459
|
+
*/
|
|
460
|
+
export interface AwsWafRegionalWebAclRulesListOverrideActionDetails {
|
|
461
|
+
/**
|
|
462
|
+
* <p>Overrides the rule evaluation result in the rule group.
|
|
463
|
+
* </p>
|
|
464
|
+
* @public
|
|
465
|
+
*/
|
|
466
|
+
Type?: string | undefined;
|
|
467
|
+
}
|
|
5
468
|
/**
|
|
6
469
|
* <p>A combination of <code>ByteMatchSet</code>, <code>IPSet</code>, and/or <code>SqlInjectionMatchSet</code>
|
|
7
470
|
* objects that identify the web requests that you want to allow, block, or count.
|
|
@@ -2684,6 +3147,15 @@ export interface AwsSecurityFinding {
|
|
|
2684
3147
|
* @public
|
|
2685
3148
|
*/
|
|
2686
3149
|
AwsAccountName?: string | undefined;
|
|
3150
|
+
/**
|
|
3151
|
+
* <p>
|
|
3152
|
+
* Provides details about an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack
|
|
3153
|
+
* sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
|
|
3154
|
+
* must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.
|
|
3155
|
+
* </p>
|
|
3156
|
+
* @public
|
|
3157
|
+
*/
|
|
3158
|
+
Detection?: Detection | undefined;
|
|
2687
3159
|
}
|
|
2688
3160
|
/**
|
|
2689
3161
|
* <p>A keyword filter for querying findings.</p>
|
|
@@ -208,6 +208,34 @@ export interface ActionTarget {
|
|
|
208
208
|
Name: string | undefined;
|
|
209
209
|
Description: string | undefined;
|
|
210
210
|
}
|
|
211
|
+
export declare const ActorSessionMfaStatus: {
|
|
212
|
+
readonly DISABLED: "DISABLED";
|
|
213
|
+
readonly ENABLED: "ENABLED";
|
|
214
|
+
};
|
|
215
|
+
export type ActorSessionMfaStatus =
|
|
216
|
+
(typeof ActorSessionMfaStatus)[keyof typeof ActorSessionMfaStatus];
|
|
217
|
+
export interface ActorSession {
|
|
218
|
+
Uid?: string | undefined;
|
|
219
|
+
MfaStatus?: ActorSessionMfaStatus | undefined;
|
|
220
|
+
CreatedTime?: number | undefined;
|
|
221
|
+
Issuer?: string | undefined;
|
|
222
|
+
}
|
|
223
|
+
export interface UserAccount {
|
|
224
|
+
Uid?: string | undefined;
|
|
225
|
+
Name?: string | undefined;
|
|
226
|
+
}
|
|
227
|
+
export interface ActorUser {
|
|
228
|
+
Name?: string | undefined;
|
|
229
|
+
Uid?: string | undefined;
|
|
230
|
+
Type?: string | undefined;
|
|
231
|
+
CredentialUid?: string | undefined;
|
|
232
|
+
Account?: UserAccount | undefined;
|
|
233
|
+
}
|
|
234
|
+
export interface Actor {
|
|
235
|
+
Id?: string | undefined;
|
|
236
|
+
User?: ActorUser | undefined;
|
|
237
|
+
Session?: ActorSession | undefined;
|
|
238
|
+
}
|
|
211
239
|
export interface Adjustment {
|
|
212
240
|
Metric?: string | undefined;
|
|
213
241
|
Reason?: string | undefined;
|
|
@@ -2133,23 +2161,3 @@ export interface AwsEcsTaskDefinitionContainerDefinitionsPortMappingsDetails {
|
|
|
2133
2161
|
HostPort?: number | undefined;
|
|
2134
2162
|
Protocol?: string | undefined;
|
|
2135
2163
|
}
|
|
2136
|
-
export interface AwsEcsTaskDefinitionContainerDefinitionsRepositoryCredentialsDetails {
|
|
2137
|
-
CredentialsParameter?: string | undefined;
|
|
2138
|
-
}
|
|
2139
|
-
export interface AwsEcsTaskDefinitionContainerDefinitionsResourceRequirementsDetails {
|
|
2140
|
-
Type?: string | undefined;
|
|
2141
|
-
Value?: string | undefined;
|
|
2142
|
-
}
|
|
2143
|
-
export interface AwsEcsTaskDefinitionContainerDefinitionsSecretsDetails {
|
|
2144
|
-
Name?: string | undefined;
|
|
2145
|
-
ValueFrom?: string | undefined;
|
|
2146
|
-
}
|
|
2147
|
-
export interface AwsEcsTaskDefinitionContainerDefinitionsSystemControlsDetails {
|
|
2148
|
-
Namespace?: string | undefined;
|
|
2149
|
-
Value?: string | undefined;
|
|
2150
|
-
}
|
|
2151
|
-
export interface AwsEcsTaskDefinitionContainerDefinitionsUlimitsDetails {
|
|
2152
|
-
HardLimit?: number | undefined;
|
|
2153
|
-
Name?: string | undefined;
|
|
2154
|
-
SoftLimit?: number | undefined;
|
|
2155
|
-
}
|