@aws-sdk/client-securityhub 3.699.0 → 3.709.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,7 +1,470 @@
1
1
  import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
2
2
  import { AccountDetails, Action, ActionTarget, Adjustment, AdminAccount, AssociationFilters, AssociationStatus, AssociationType, AutoEnableStandards, AutomationRulesAction, AutomationRulesConfig, AutomationRulesFindingFilters, AutomationRulesMetadata, AwsAmazonMqBrokerDetails, AwsApiGatewayRestApiDetails, AwsApiGatewayStageDetails, AwsApiGatewayV2ApiDetails, AwsApiGatewayV2StageDetails, AwsAppSyncGraphQlApiDetails, AwsAthenaWorkGroupDetails, AwsAutoScalingAutoScalingGroupDetails, AwsAutoScalingLaunchConfigurationDetails, AwsBackupBackupPlanDetails, AwsBackupBackupVaultDetails, AwsBackupRecoveryPointDetails, AwsCertificateManagerCertificateDetails, AwsCloudFormationStackDetails, AwsCloudFrontDistributionDetails, AwsCloudTrailTrailDetails, AwsCloudWatchAlarmDetails, AwsCodeBuildProjectDetails, AwsDmsEndpointDetails, AwsDmsReplicationInstanceDetails, AwsDmsReplicationTaskDetails, AwsDynamoDbTableDetails, AwsEc2ClientVpnEndpointDetails, AwsEc2EipDetails, AwsEc2InstanceDetails, AwsEc2LaunchTemplateDetails, AwsEc2NetworkAclDetails, AwsEc2NetworkInterfaceDetails, AwsEc2RouteTableDetails, AwsEc2SecurityGroupDetails, AwsEc2SubnetDetails, AwsEc2TransitGatewayDetails, AwsEc2VolumeDetails, AwsEc2VpcDetails, AwsEc2VpcEndpointServiceDetails, AwsEc2VpcPeeringConnectionDetails, AwsEc2VpnConnectionDetails, AwsEcrContainerImageDetails, AwsEcrRepositoryDetails, AwsEcsClusterDetails, AwsEcsContainerDetails, AwsEcsServiceDetails, ConfigurationPolicyAssociationStatus, DateFilter, MapFilter, NoteUpdate, NumberFilter, RelatedFinding, RuleStatus, SeverityLabel, SeverityUpdate, StringFilter, VerificationState, WorkflowStatus, WorkflowUpdate } from "./models_0";
3
- import { AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointDetails, AwsEksClusterDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsEventSchemasRegistryDetails, AwsEventsEndpointDetails, AwsEventsEventbusDetails, AwsGuardDutyDetectorDetails, AwsIamAccessKeyDetails, AwsIamGroupDetails, AwsIamPolicyDetails, AwsIamRoleDetails, AwsIamUserDetails, AwsKinesisStreamDetails, AwsKmsKeyDetails, AwsLambdaFunctionDetails, AwsLambdaLayerVersionDetails, AwsMskClusterDetails, AwsNetworkFirewallFirewallDetails, AwsNetworkFirewallFirewallPolicyDetails, AwsNetworkFirewallRuleGroupDetails, AwsOpenSearchServiceDomainDetails, AwsRdsDbClusterDetails, AwsRdsDbClusterSnapshotDetails, AwsRdsDbInstanceDetails, AwsRdsDbSecurityGroupDetails, AwsRdsDbSnapshotDetails, AwsRdsEventSubscriptionDetails, AwsRedshiftClusterDetails, AwsRoute53HostedZoneDetails, AwsS3AccessPointDetails, AwsS3AccountPublicAccessBlockDetails, AwsS3BucketDetails, AwsS3ObjectDetails, AwsSageMakerNotebookInstanceDetails, AwsSecretsManagerSecretDetails, AwsSnsTopicDetails, AwsSqsQueueDetails, AwsSsmPatchComplianceDetails, AwsStepFunctionStateMachineDetails, AwsWafRateBasedRuleDetails, AwsWafRegionalRateBasedRuleDetails, AwsWafRegionalRuleDetails, AwsWafRegionalRuleGroupDetails, AwsWafRegionalWebAclRulesListActionDetails, AwsWafRegionalWebAclRulesListOverrideActionDetails, Compliance, DataClassificationDetails, FindingProviderFields, GeneratorDetails, Malware, Network, NetworkPathComponent, Note, PatchSummary, ProcessDetails, RecordState, Remediation } from "./models_1";
3
+ import { AwsEcsTaskDefinitionDetails, AwsEcsTaskDetails, AwsEfsAccessPointDetails, AwsEksClusterDetails, AwsElasticBeanstalkEnvironmentDetails, AwsElasticsearchDomainDetails, AwsElbLoadBalancerDetails, AwsElbv2LoadBalancerDetails, AwsEventSchemasRegistryDetails, AwsEventsEndpointDetails, AwsEventsEventbusDetails, AwsGuardDutyDetectorDetails, AwsIamAccessKeyDetails, AwsIamGroupDetails, AwsIamPolicyDetails, AwsIamRoleDetails, AwsIamUserDetails, AwsKinesisStreamDetails, AwsKmsKeyDetails, AwsLambdaFunctionDetails, AwsLambdaLayerVersionDetails, AwsMskClusterDetails, AwsNetworkFirewallFirewallDetails, AwsNetworkFirewallFirewallPolicyDetails, AwsNetworkFirewallRuleGroupDetails, AwsOpenSearchServiceDomainDetails, AwsRdsDbClusterDetails, AwsRdsDbClusterSnapshotDetails, AwsRdsDbInstanceDetails, AwsRdsDbSecurityGroupDetails, AwsRdsDbSnapshotDetails, AwsRdsEventSubscriptionDetails, AwsRedshiftClusterDetails, AwsRoute53HostedZoneDetails, AwsS3AccessPointDetails, AwsS3AccountPublicAccessBlockDetails, AwsS3BucketDetails, AwsS3ObjectDetails, AwsSageMakerNotebookInstanceDetails, AwsSecretsManagerSecretDetails, AwsSnsTopicDetails, AwsSqsQueueDetails, AwsSsmPatchComplianceDetails, AwsStepFunctionStateMachineLoggingConfigurationDestinationsDetails, Compliance, DataClassificationDetails, Detection, FindingProviderFields, GeneratorDetails, Malware, Network, NetworkPathComponent, Note, PatchSummary, ProcessDetails, RecordState, Remediation } from "./models_1";
4
4
  import { SecurityHubServiceException as __BaseException } from "./SecurityHubServiceException";
5
+ /**
6
+ * <p>
7
+ * The <code>LoggingConfiguration</code> data type is used to set CloudWatch Logs options.
8
+ * </p>
9
+ * @public
10
+ */
11
+ export interface AwsStepFunctionStateMachineLoggingConfigurationDetails {
12
+ /**
13
+ * <p>
14
+ * An array of objects that describes where your execution history events will be logged.
15
+ * </p>
16
+ * @public
17
+ */
18
+ Destinations?: AwsStepFunctionStateMachineLoggingConfigurationDestinationsDetails[] | undefined;
19
+ /**
20
+ * <p>
21
+ * Determines whether execution data is included in your log. When set to false, data is excluded.
22
+ * </p>
23
+ * @public
24
+ */
25
+ IncludeExecutionData?: boolean | undefined;
26
+ /**
27
+ * <p>
28
+ * Defines which category of execution history events are logged.
29
+ * </p>
30
+ * @public
31
+ */
32
+ Level?: string | undefined;
33
+ }
34
+ /**
35
+ * <p>
36
+ * Specifies whether X-Ray tracing is enabled.
37
+ * </p>
38
+ * @public
39
+ */
40
+ export interface AwsStepFunctionStateMachineTracingConfigurationDetails {
41
+ /**
42
+ * <p>
43
+ * When set to true, X-Ray tracing is enabled.
44
+ * </p>
45
+ * @public
46
+ */
47
+ Enabled?: boolean | undefined;
48
+ }
49
+ /**
50
+ * <p>
51
+ * Provides details about an Step Functions state machine, which is a workflow consisting of a series of event-
52
+ * driven steps.
53
+ * </p>
54
+ * @public
55
+ */
56
+ export interface AwsStepFunctionStateMachineDetails {
57
+ /**
58
+ * <p>
59
+ * A user-defined or an auto-generated string that identifies a <code>Map</code> state. This parameter is present only if
60
+ * the <code>stateMachineArn</code> specified in input is a qualified state machine ARN.
61
+ * </p>
62
+ * @public
63
+ */
64
+ Label?: string | undefined;
65
+ /**
66
+ * <p>
67
+ * Used to set CloudWatch Logs options.
68
+ * </p>
69
+ * @public
70
+ */
71
+ LoggingConfiguration?: AwsStepFunctionStateMachineLoggingConfigurationDetails | undefined;
72
+ /**
73
+ * <p>
74
+ * The name of the state machine.
75
+ * </p>
76
+ * @public
77
+ */
78
+ Name?: string | undefined;
79
+ /**
80
+ * <p>
81
+ * The Amazon Resource Name (ARN) of the IAM role used when creating this state machine.
82
+ * </p>
83
+ * @public
84
+ */
85
+ RoleArn?: string | undefined;
86
+ /**
87
+ * <p>
88
+ * The ARN that identifies the state machine.
89
+ * </p>
90
+ * @public
91
+ */
92
+ StateMachineArn?: string | undefined;
93
+ /**
94
+ * <p>
95
+ * The current status of the state machine.
96
+ * </p>
97
+ * @public
98
+ */
99
+ Status?: string | undefined;
100
+ /**
101
+ * <p>
102
+ * Specifies whether X-Ray tracing is enabled.
103
+ * </p>
104
+ * @public
105
+ */
106
+ TracingConfiguration?: AwsStepFunctionStateMachineTracingConfigurationDetails | undefined;
107
+ /**
108
+ * <p>
109
+ * The type of the state machine (STANDARD or EXPRESS).
110
+ * </p>
111
+ * @public
112
+ */
113
+ Type?: string | undefined;
114
+ }
115
+ /**
116
+ * <p>A match predicate. A predicate might look for characteristics such as specific IP addresses, geographic locations, or sizes.</p>
117
+ * @public
118
+ */
119
+ export interface AwsWafRateBasedRuleMatchPredicate {
120
+ /**
121
+ * <p>The unique identifier for the predicate.</p>
122
+ * @public
123
+ */
124
+ DataId?: string | undefined;
125
+ /**
126
+ * <p>If set to <code>true</code>, then the rule actions are performed on requests that match the predicate settings.</p>
127
+ * <p>If set to <code>false</code>, then the rule actions are performed on all requests except those that match the predicate settings.
128
+ * </p>
129
+ * @public
130
+ */
131
+ Negated?: boolean | undefined;
132
+ /**
133
+ * <p>The type of predicate. Valid values are as follows:</p>
134
+ * <ul>
135
+ * <li>
136
+ * <p>
137
+ * <code>ByteMatch</code>
138
+ * </p>
139
+ * </li>
140
+ * <li>
141
+ * <p>
142
+ * <code>GeoMatch</code>
143
+ * </p>
144
+ * </li>
145
+ * <li>
146
+ * <p>
147
+ * <code>IPMatch</code>
148
+ * </p>
149
+ * </li>
150
+ * <li>
151
+ * <p>
152
+ * <code>RegexMatch</code>
153
+ * </p>
154
+ * </li>
155
+ * <li>
156
+ * <p>
157
+ * <code>SizeConstraint</code>
158
+ * </p>
159
+ * </li>
160
+ * <li>
161
+ * <p>
162
+ * <code>SqlInjectionMatch</code>
163
+ * </p>
164
+ * </li>
165
+ * <li>
166
+ * <p>
167
+ * <code>XssMatch</code>
168
+ * </p>
169
+ * </li>
170
+ * </ul>
171
+ * @public
172
+ */
173
+ Type?: string | undefined;
174
+ }
175
+ /**
176
+ * <p>Details about a rate-based rule for global resources. A rate-based rule provides settings to indicate when to allow, block, or count a request. Rate-based rules include the number of requests that arrive over a specified period of time.</p>
177
+ * @public
178
+ */
179
+ export interface AwsWafRateBasedRuleDetails {
180
+ /**
181
+ * <p>The name of the metrics for the rate-based rule.</p>
182
+ * @public
183
+ */
184
+ MetricName?: string | undefined;
185
+ /**
186
+ * <p>The name of the rate-based rule.</p>
187
+ * @public
188
+ */
189
+ Name?: string | undefined;
190
+ /**
191
+ * <p>The field that WAF uses to determine whether requests are likely arriving from single source and are subject to rate monitoring.</p>
192
+ * @public
193
+ */
194
+ RateKey?: string | undefined;
195
+ /**
196
+ * <p>The maximum number of requests that have an identical value for the field specified in <code>RateKey</code> that are allowed within a five-minute period. If the number of requests exceeds <code>RateLimit</code> and the other predicates specified in the rule are met, WAF triggers the action for the rule.</p>
197
+ * @public
198
+ */
199
+ RateLimit?: number | undefined;
200
+ /**
201
+ * <p>The unique identifier for the rate-based rule.</p>
202
+ * @public
203
+ */
204
+ RuleId?: string | undefined;
205
+ /**
206
+ * <p>The predicates to include in the rate-based rule.</p>
207
+ * @public
208
+ */
209
+ MatchPredicates?: AwsWafRateBasedRuleMatchPredicate[] | undefined;
210
+ }
211
+ /**
212
+ * <p>Details for a match predicate. A predicate might look for characteristics such as specific IP addresses, geographic locations, or sizes.</p>
213
+ * @public
214
+ */
215
+ export interface AwsWafRegionalRateBasedRuleMatchPredicate {
216
+ /**
217
+ * <p>The unique identifier for the predicate.</p>
218
+ * @public
219
+ */
220
+ DataId?: string | undefined;
221
+ /**
222
+ * <p>If set to <code>true</code>, then the rule actions are performed on requests that match the predicate settings.</p>
223
+ * <p>If set to <code>false</code>, then the rule actions are performed on all requests except those that match the predicate settings.</p>
224
+ * @public
225
+ */
226
+ Negated?: boolean | undefined;
227
+ /**
228
+ * <p>The type of predicate. Valid values are as follows:</p>
229
+ * <ul>
230
+ * <li>
231
+ * <p>
232
+ * <code>ByteMatch</code>
233
+ * </p>
234
+ * </li>
235
+ * <li>
236
+ * <p>
237
+ * <code>GeoMatch</code>
238
+ * </p>
239
+ * </li>
240
+ * <li>
241
+ * <p>
242
+ * <code>IPMatch</code>
243
+ * </p>
244
+ * </li>
245
+ * <li>
246
+ * <p>
247
+ * <code>RegexMatch</code>
248
+ * </p>
249
+ * </li>
250
+ * <li>
251
+ * <p>
252
+ * <code>SizeConstraint</code>
253
+ * </p>
254
+ * </li>
255
+ * <li>
256
+ * <p>
257
+ * <code>SqlInjectionMatch</code>
258
+ * </p>
259
+ * </li>
260
+ * <li>
261
+ * <p>
262
+ * <code>XssMatch</code>
263
+ * </p>
264
+ * </li>
265
+ * </ul>
266
+ * @public
267
+ */
268
+ Type?: string | undefined;
269
+ }
270
+ /**
271
+ * <p>contains details about a rate-based rule for Regional resources. A rate-based rule provides settings to indicate when to allow, block, or count a request. Rate-based rules include the number of requests that arrive over a specified period of time.</p>
272
+ * @public
273
+ */
274
+ export interface AwsWafRegionalRateBasedRuleDetails {
275
+ /**
276
+ * <p>The name of the metrics for the rate-based rule.</p>
277
+ * @public
278
+ */
279
+ MetricName?: string | undefined;
280
+ /**
281
+ * <p>The name of the rate-based rule.</p>
282
+ * @public
283
+ */
284
+ Name?: string | undefined;
285
+ /**
286
+ * <p>The field that WAF uses to determine whether requests are likely arriving from single source and are subject to rate monitoring.</p>
287
+ * @public
288
+ */
289
+ RateKey?: string | undefined;
290
+ /**
291
+ * <p>The maximum number of requests that have an identical value for the field specified in <code>RateKey</code> that are allowed within a five-minute period. If the number of requests exceeds <code>RateLimit</code> and the other predicates specified in the rule are met, WAF triggers the action for the rule.</p>
292
+ * @public
293
+ */
294
+ RateLimit?: number | undefined;
295
+ /**
296
+ * <p>The unique identifier for the rate-based rule.</p>
297
+ * @public
298
+ */
299
+ RuleId?: string | undefined;
300
+ /**
301
+ * <p>The predicates to include in the rate-based rule.</p>
302
+ * @public
303
+ */
304
+ MatchPredicates?: AwsWafRegionalRateBasedRuleMatchPredicate[] | undefined;
305
+ }
306
+ /**
307
+ * <p>Provides details about the <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>,
308
+ * <code>RegexMatchSet</code>, <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to add to a rule and, for each object, indicates whether you want to negate the settings.
309
+ * </p>
310
+ * @public
311
+ */
312
+ export interface AwsWafRegionalRulePredicateListDetails {
313
+ /**
314
+ * <p>A unique identifier for a predicate in a rule, such as <code>ByteMatchSetId</code> or <code>IPSetId</code>.
315
+ * </p>
316
+ * @public
317
+ */
318
+ DataId?: string | undefined;
319
+ /**
320
+ * <p>Specifies if you want WAF to allow, block, or count requests based on the settings in the
321
+ * <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>,
322
+ * <code>RegexMatchSet</code>, <code>GeoMatchSet</code>, or <code>SizeConstraintSet</code>.
323
+ * </p>
324
+ * @public
325
+ */
326
+ Negated?: boolean | undefined;
327
+ /**
328
+ * <p>The type of predicate in a rule, such as <code>ByteMatch</code> or <code>IPSet</code>.
329
+ * </p>
330
+ * @public
331
+ */
332
+ Type?: string | undefined;
333
+ }
334
+ /**
335
+ * <p>Provides information about an WAF Regional rule. This rule identifies the web requests that you want to allow, block, or count. </p>
336
+ * @public
337
+ */
338
+ export interface AwsWafRegionalRuleDetails {
339
+ /**
340
+ * <p>A name for the metrics for the rule.
341
+ * </p>
342
+ * @public
343
+ */
344
+ MetricName?: string | undefined;
345
+ /**
346
+ * <p>A descriptive name for the rule.
347
+ * </p>
348
+ * @public
349
+ */
350
+ Name?: string | undefined;
351
+ /**
352
+ * <p>Specifies the <code>ByteMatchSet</code>, <code>IPSet</code>,
353
+ * <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>, <code>RegexMatchSet</code>,
354
+ * <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to
355
+ * add to a rule and, for each object, indicates whether you want to negate the settings. </p>
356
+ * @public
357
+ */
358
+ PredicateList?: AwsWafRegionalRulePredicateListDetails[] | undefined;
359
+ /**
360
+ * <p>The ID of the rule.
361
+ * </p>
362
+ * @public
363
+ */
364
+ RuleId?: string | undefined;
365
+ }
366
+ /**
367
+ * <p>Describes the action that WAF should take on a web request when it matches the criteria defined in the rule.
368
+ * </p>
369
+ * @public
370
+ */
371
+ export interface AwsWafRegionalRuleGroupRulesActionDetails {
372
+ /**
373
+ * <p>Specifies the <code>ByteMatchSet</code>, <code>IPSet</code>, <code>SqlInjectionMatchSet</code>, <code>XssMatchSet</code>, <code>RegexMatchSet</code>,
374
+ * <code>GeoMatchSet</code>, and <code>SizeConstraintSet</code> objects that you want to add to a rule and, for each object, indicates whether you want to negate the settings.</p>
375
+ * @public
376
+ */
377
+ Type?: string | undefined;
378
+ }
379
+ /**
380
+ * <p>Provides information about the rules attached to a rule group
381
+ * </p>
382
+ * @public
383
+ */
384
+ export interface AwsWafRegionalRuleGroupRulesDetails {
385
+ /**
386
+ * <p>The action that WAF should take on a web request when it matches the criteria defined in the rule. </p>
387
+ * @public
388
+ */
389
+ Action?: AwsWafRegionalRuleGroupRulesActionDetails | undefined;
390
+ /**
391
+ * <p>If you define more than one rule in a web ACL, WAF evaluates each request against the rules in
392
+ * order based on the value of <code>Priority</code>. </p>
393
+ * @public
394
+ */
395
+ Priority?: number | undefined;
396
+ /**
397
+ * <p>The ID for a rule.
398
+ * </p>
399
+ * @public
400
+ */
401
+ RuleId?: string | undefined;
402
+ /**
403
+ * <p>The type of rule in the rule group.
404
+ * </p>
405
+ * @public
406
+ */
407
+ Type?: string | undefined;
408
+ }
409
+ /**
410
+ * <p>Provides information about an WAF Regional rule group. The rule group is a collection of rules for inspecting and controlling web
411
+ * requests. </p>
412
+ * @public
413
+ */
414
+ export interface AwsWafRegionalRuleGroupDetails {
415
+ /**
416
+ * <p>A name for the metrics for this rule group.
417
+ * </p>
418
+ * @public
419
+ */
420
+ MetricName?: string | undefined;
421
+ /**
422
+ * <p>The descriptive name of the rule group.
423
+ * </p>
424
+ * @public
425
+ */
426
+ Name?: string | undefined;
427
+ /**
428
+ * <p>The ID of the rule group.
429
+ * </p>
430
+ * @public
431
+ */
432
+ RuleGroupId?: string | undefined;
433
+ /**
434
+ * <p>Provides information about the rule statements used to identify the web requests that you want to allow, block, or
435
+ * count.
436
+ * </p>
437
+ * @public
438
+ */
439
+ Rules?: AwsWafRegionalRuleGroupRulesDetails[] | undefined;
440
+ }
441
+ /**
442
+ * <p>The action that WAF takes when a web request matches all conditions in the
443
+ * rule, such as allow, block, or count the request. </p>
444
+ * @public
445
+ */
446
+ export interface AwsWafRegionalWebAclRulesListActionDetails {
447
+ /**
448
+ * <p>For actions that are associated with a rule, the action that WAF takes when a web request matches all conditions in a rule.
449
+ * </p>
450
+ * @public
451
+ */
452
+ Type?: string | undefined;
453
+ }
454
+ /**
455
+ * <p>Provides details about the action to use in the place of the action that results from the rule group
456
+ * evaluation.
457
+ * </p>
458
+ * @public
459
+ */
460
+ export interface AwsWafRegionalWebAclRulesListOverrideActionDetails {
461
+ /**
462
+ * <p>Overrides the rule evaluation result in the rule group.
463
+ * </p>
464
+ * @public
465
+ */
466
+ Type?: string | undefined;
467
+ }
5
468
  /**
6
469
  * <p>A combination of <code>ByteMatchSet</code>, <code>IPSet</code>, and/or <code>SqlInjectionMatchSet</code>
7
470
  * objects that identify the web requests that you want to allow, block, or count.
@@ -2684,6 +3147,15 @@ export interface AwsSecurityFinding {
2684
3147
  * @public
2685
3148
  */
2686
3149
  AwsAccountName?: string | undefined;
3150
+ /**
3151
+ * <p>
3152
+ * Provides details about an Amazon GuardDuty Extended Threat Detection attack sequence. GuardDuty generates an attack
3153
+ * sequence finding when multiple events align to a potentially suspicious activity. To receive GuardDuty attack sequence findings in Security Hub, you
3154
+ * must have GuardDuty and GuardDuty S3 Protection enabled. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html">GuardDuty Extended Threat Detection </a> in the <i>Amazon GuardDuty User Guide</i>.
3155
+ * </p>
3156
+ * @public
3157
+ */
3158
+ Detection?: Detection | undefined;
2687
3159
  }
2688
3160
  /**
2689
3161
  * <p>A keyword filter for querying findings.</p>
@@ -208,6 +208,34 @@ export interface ActionTarget {
208
208
  Name: string | undefined;
209
209
  Description: string | undefined;
210
210
  }
211
+ export declare const ActorSessionMfaStatus: {
212
+ readonly DISABLED: "DISABLED";
213
+ readonly ENABLED: "ENABLED";
214
+ };
215
+ export type ActorSessionMfaStatus =
216
+ (typeof ActorSessionMfaStatus)[keyof typeof ActorSessionMfaStatus];
217
+ export interface ActorSession {
218
+ Uid?: string | undefined;
219
+ MfaStatus?: ActorSessionMfaStatus | undefined;
220
+ CreatedTime?: number | undefined;
221
+ Issuer?: string | undefined;
222
+ }
223
+ export interface UserAccount {
224
+ Uid?: string | undefined;
225
+ Name?: string | undefined;
226
+ }
227
+ export interface ActorUser {
228
+ Name?: string | undefined;
229
+ Uid?: string | undefined;
230
+ Type?: string | undefined;
231
+ CredentialUid?: string | undefined;
232
+ Account?: UserAccount | undefined;
233
+ }
234
+ export interface Actor {
235
+ Id?: string | undefined;
236
+ User?: ActorUser | undefined;
237
+ Session?: ActorSession | undefined;
238
+ }
211
239
  export interface Adjustment {
212
240
  Metric?: string | undefined;
213
241
  Reason?: string | undefined;
@@ -2133,23 +2161,3 @@ export interface AwsEcsTaskDefinitionContainerDefinitionsPortMappingsDetails {
2133
2161
  HostPort?: number | undefined;
2134
2162
  Protocol?: string | undefined;
2135
2163
  }
2136
- export interface AwsEcsTaskDefinitionContainerDefinitionsRepositoryCredentialsDetails {
2137
- CredentialsParameter?: string | undefined;
2138
- }
2139
- export interface AwsEcsTaskDefinitionContainerDefinitionsResourceRequirementsDetails {
2140
- Type?: string | undefined;
2141
- Value?: string | undefined;
2142
- }
2143
- export interface AwsEcsTaskDefinitionContainerDefinitionsSecretsDetails {
2144
- Name?: string | undefined;
2145
- ValueFrom?: string | undefined;
2146
- }
2147
- export interface AwsEcsTaskDefinitionContainerDefinitionsSystemControlsDetails {
2148
- Namespace?: string | undefined;
2149
- Value?: string | undefined;
2150
- }
2151
- export interface AwsEcsTaskDefinitionContainerDefinitionsUlimitsDetails {
2152
- HardLimit?: number | undefined;
2153
- Name?: string | undefined;
2154
- SoftLimit?: number | undefined;
2155
- }