@aws-sdk/client-securityhub 3.774.0 → 3.777.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/auth/httpAuthSchemeProvider.js +1 -3
- package/dist-cjs/index.js +17 -18
- package/dist-es/SecurityHubClient.js +2 -1
- package/dist-es/auth/httpAuthSchemeProvider.js +1 -3
- package/dist-es/endpoint/EndpointParameters.js +2 -3
- package/dist-es/runtimeExtensions.js +2 -14
- package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +8 -5
- package/dist-types/commands/AcceptInvitationCommand.d.ts +1 -0
- package/dist-types/commands/BatchDeleteAutomationRulesCommand.d.ts +9 -9
- package/dist-types/commands/BatchDisableStandardsCommand.d.ts +9 -9
- package/dist-types/commands/BatchEnableStandardsCommand.d.ts +10 -10
- package/dist-types/commands/BatchGetAutomationRulesCommand.d.ts +49 -49
- package/dist-types/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +22 -22
- package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +33 -33
- package/dist-types/commands/BatchGetStandardsControlAssociationsCommand.d.ts +1 -50
- package/dist-types/commands/BatchImportFindingsCommand.d.ts +26 -26
- package/dist-types/commands/BatchUpdateAutomationRulesCommand.d.ts +10 -10
- package/dist-types/commands/BatchUpdateFindingsCommand.d.ts +30 -30
- package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +20 -20
- package/dist-types/commands/CreateActionTargetCommand.d.ts +7 -7
- package/dist-types/commands/CreateAutomationRuleCommand.d.ts +35 -35
- package/dist-types/commands/CreateConfigurationPolicyCommand.d.ts +37 -37
- package/dist-types/commands/CreateFindingAggregatorCommand.d.ts +9 -9
- package/dist-types/commands/CreateInsightCommand.d.ts +13 -13
- package/dist-types/commands/CreateMembersCommand.d.ts +7 -7
- package/dist-types/commands/DeclineInvitationsCommand.d.ts +5 -5
- package/dist-types/commands/DeleteActionTargetCommand.d.ts +5 -5
- package/dist-types/commands/DeleteConfigurationPolicyCommand.d.ts +7 -4
- package/dist-types/commands/DeleteFindingAggregatorCommand.d.ts +7 -4
- package/dist-types/commands/DeleteInsightCommand.d.ts +5 -5
- package/dist-types/commands/DeleteInvitationsCommand.d.ts +5 -5
- package/dist-types/commands/DeleteMembersCommand.d.ts +5 -5
- package/dist-types/commands/DescribeActionTargetsCommand.d.ts +8 -8
- package/dist-types/commands/DescribeHubCommand.d.ts +8 -8
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +10 -10
- package/dist-types/commands/DescribeProductsCommand.d.ts +17 -17
- package/dist-types/commands/DescribeStandardsCommand.d.ts +21 -21
- package/dist-types/commands/DescribeStandardsControlsCommand.d.ts +1 -46
- package/dist-types/commands/DisableImportFindingsForProductCommand.d.ts +7 -4
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +7 -4
- package/dist-types/commands/DisableSecurityHubCommand.d.ts +7 -4
- package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +7 -4
- package/dist-types/commands/DisassociateFromMasterAccountCommand.d.ts +1 -0
- package/dist-types/commands/DisassociateMembersCommand.d.ts +7 -4
- package/dist-types/commands/EnableImportFindingsForProductCommand.d.ts +5 -5
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +7 -4
- package/dist-types/commands/EnableSecurityHubCommand.d.ts +9 -6
- package/dist-types/commands/GetAdministratorAccountCommand.d.ts +1 -19
- package/dist-types/commands/GetConfigurationPolicyAssociationCommand.d.ts +12 -12
- package/dist-types/commands/GetConfigurationPolicyCommand.d.ts +23 -23
- package/dist-types/commands/GetEnabledStandardsCommand.d.ts +9 -9
- package/dist-types/commands/GetFindingAggregatorCommand.d.ts +8 -8
- package/dist-types/commands/GetFindingHistoryCommand.d.ts +1 -42
- package/dist-types/commands/GetFindingsCommand.d.ts +63 -63
- package/dist-types/commands/GetInsightResultsCommand.d.ts +12 -12
- package/dist-types/commands/GetInsightsCommand.d.ts +15 -15
- package/dist-types/commands/GetInvitationsCountCommand.d.ts +7 -7
- package/dist-types/commands/GetMasterAccountCommand.d.ts +1 -0
- package/dist-types/commands/GetMembersCommand.d.ts +1 -37
- package/dist-types/commands/GetSecurityControlDefinitionCommand.d.ts +19 -19
- package/dist-types/commands/InviteMembersCommand.d.ts +5 -5
- package/dist-types/commands/ListAutomationRulesCommand.d.ts +23 -23
- package/dist-types/commands/ListConfigurationPoliciesCommand.d.ts +13 -13
- package/dist-types/commands/ListConfigurationPolicyAssociationsCommand.d.ts +15 -15
- package/dist-types/commands/ListEnabledProductsForImportCommand.d.ts +5 -5
- package/dist-types/commands/ListFindingAggregatorsCommand.d.ts +6 -6
- package/dist-types/commands/ListInvitationsCommand.d.ts +1 -21
- package/dist-types/commands/ListMembersCommand.d.ts +1 -31
- package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +7 -7
- package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +28 -28
- package/dist-types/commands/ListStandardsControlAssociationsCommand.d.ts +1 -44
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +7 -7
- package/dist-types/commands/StartConfigurationPolicyAssociationCommand.d.ts +13 -13
- package/dist-types/commands/StartConfigurationPolicyDisassociationCommand.d.ts +9 -6
- package/dist-types/commands/TagResourceCommand.d.ts +10 -7
- package/dist-types/commands/UntagResourceCommand.d.ts +8 -5
- package/dist-types/commands/UpdateActionTargetCommand.d.ts +9 -6
- package/dist-types/commands/UpdateConfigurationPolicyCommand.d.ts +39 -39
- package/dist-types/commands/UpdateFindingAggregatorCommand.d.ts +10 -10
- package/dist-types/commands/UpdateFindingsCommand.d.ts +1 -0
- package/dist-types/commands/UpdateInsightCommand.d.ts +15 -12
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +10 -7
- package/dist-types/commands/UpdateSecurityControlCommand.d.ts +13 -10
- package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +8 -5
- package/dist-types/commands/UpdateStandardsControlCommand.d.ts +9 -6
- package/package.json +33 -33
|
@@ -85,34 +85,34 @@ declare const ListConfigurationPoliciesCommand_base: {
|
|
|
85
85
|
* @throws {@link SecurityHubServiceException}
|
|
86
86
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
87
87
|
*
|
|
88
|
-
*
|
|
88
|
+
*
|
|
89
89
|
* @example To view a list of configuration policies
|
|
90
90
|
* ```javascript
|
|
91
91
|
* // This operation provides a list of your configuration policies, including metadata for each policy.
|
|
92
92
|
* const input = {
|
|
93
|
-
*
|
|
94
|
-
*
|
|
93
|
+
* MaxResults: 1,
|
|
94
|
+
* NextToken: "U1FsdGVkX19nBV2zoh+Gou9NgnulLJHWpn9xnG4hqSOhvw3o2JqjI86QDxdf"
|
|
95
95
|
* };
|
|
96
96
|
* const command = new ListConfigurationPoliciesCommand(input);
|
|
97
97
|
* const response = await client.send(command);
|
|
98
|
-
* /* response
|
|
98
|
+
* /* response is
|
|
99
99
|
* {
|
|
100
|
-
*
|
|
100
|
+
* ConfigurationPolicySummaries: [
|
|
101
101
|
* {
|
|
102
|
-
*
|
|
103
|
-
*
|
|
104
|
-
*
|
|
105
|
-
*
|
|
106
|
-
*
|
|
107
|
-
*
|
|
102
|
+
* Arn: "arn:aws:securityhub:us-east-1:123456789012:configuration-policy/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
103
|
+
* Description: "Configuration policy for testing FSBP and CIS",
|
|
104
|
+
* Id: "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
105
|
+
* Name: "TestConfigurationPolicy",
|
|
106
|
+
* ServiceEnabled: true,
|
|
107
|
+
* UpdatedAt: "2023-01-11T06:17:17.154Z"
|
|
108
108
|
* }
|
|
109
109
|
* ],
|
|
110
|
-
*
|
|
110
|
+
* NextToken: "U1FsdGVkX19nBV2zoh+Gou9NgnulLJHWpn9xnG4hqSOfvw3o2JqjI86QDxef"
|
|
111
111
|
* }
|
|
112
112
|
* *\/
|
|
113
|
-
* // example id: to-view-a-list-of-configuration-policies-1695173268602
|
|
114
113
|
* ```
|
|
115
114
|
*
|
|
115
|
+
* @public
|
|
116
116
|
*/
|
|
117
117
|
export declare class ListConfigurationPoliciesCommand extends ListConfigurationPoliciesCommand_base {
|
|
118
118
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -91,37 +91,37 @@ declare const ListConfigurationPolicyAssociationsCommand_base: {
|
|
|
91
91
|
* @throws {@link SecurityHubServiceException}
|
|
92
92
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
93
93
|
*
|
|
94
|
-
*
|
|
94
|
+
*
|
|
95
95
|
* @example To list configuration associations
|
|
96
96
|
* ```javascript
|
|
97
97
|
* // This operation lists all of the associations between targets and configuration policies or self-managed behavior. Targets can include accounts, organizational units, or the root.
|
|
98
98
|
* const input = {
|
|
99
|
-
*
|
|
100
|
-
*
|
|
99
|
+
* Filters: {
|
|
100
|
+
* AssociationType: "APPLIED"
|
|
101
101
|
* },
|
|
102
|
-
*
|
|
103
|
-
*
|
|
102
|
+
* MaxResults: 1,
|
|
103
|
+
* NextToken: "U1FsdGVkX19nBV2zoh+Gou9NgnulLJHWpn9xnG4hqSOhvw3o2JqjI86QDxdf"
|
|
104
104
|
* };
|
|
105
105
|
* const command = new ListConfigurationPolicyAssociationsCommand(input);
|
|
106
106
|
* const response = await client.send(command);
|
|
107
|
-
* /* response
|
|
107
|
+
* /* response is
|
|
108
108
|
* {
|
|
109
|
-
*
|
|
109
|
+
* ConfigurationPolicyAssociationSummaries: [
|
|
110
110
|
* {
|
|
111
|
-
*
|
|
112
|
-
*
|
|
113
|
-
*
|
|
114
|
-
*
|
|
115
|
-
*
|
|
116
|
-
*
|
|
111
|
+
* AssociationStatus: "PENDING",
|
|
112
|
+
* AssociationType: "APPLIED",
|
|
113
|
+
* ConfigurationPolicyId: "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
114
|
+
* TargetId: "123456789012",
|
|
115
|
+
* TargetType: "ACCOUNT",
|
|
116
|
+
* UpdatedAt: "2023-01-11T06:17:17.154Z"
|
|
117
117
|
* }
|
|
118
118
|
* ],
|
|
119
|
-
*
|
|
119
|
+
* NextToken: "U1FsdGVkX19nBV2zoh+Gou9NgnulLJHWpn9xnG4hqSOfvw3o2JqjI86QDxef"
|
|
120
120
|
* }
|
|
121
121
|
* *\/
|
|
122
|
-
* // example id: to-list-configuration-associations-1695177309791
|
|
123
122
|
* ```
|
|
124
123
|
*
|
|
124
|
+
* @public
|
|
125
125
|
*/
|
|
126
126
|
export declare class ListConfigurationPolicyAssociationsCommand extends ListConfigurationPolicyAssociationsCommand_base {
|
|
127
127
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -69,24 +69,24 @@ declare const ListEnabledProductsForImportCommand_base: {
|
|
|
69
69
|
* @throws {@link SecurityHubServiceException}
|
|
70
70
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
71
71
|
*
|
|
72
|
-
*
|
|
72
|
+
*
|
|
73
73
|
* @example To list ARNs for enabled integrations
|
|
74
74
|
* ```javascript
|
|
75
75
|
* // The following example returns a list of subscription Amazon Resource Names (ARNs) for the product integrations that you have currently enabled in Security Hub.
|
|
76
|
-
* const input = {};
|
|
76
|
+
* const input = { /* empty *\/ };
|
|
77
77
|
* const command = new ListEnabledProductsForImportCommand(input);
|
|
78
78
|
* const response = await client.send(command);
|
|
79
|
-
* /* response
|
|
79
|
+
* /* response is
|
|
80
80
|
* {
|
|
81
|
-
*
|
|
81
|
+
* ProductSubscriptions: [
|
|
82
82
|
* "arn:aws:securityhub:us-east-1:517716713836:product-subscription/crowdstrike/crowdstrike-falcon",
|
|
83
83
|
* "arn:aws:securityhub:us-east-1::product/3coresec/3coresec"
|
|
84
84
|
* ]
|
|
85
85
|
* }
|
|
86
86
|
* *\/
|
|
87
|
-
* // example id: to-list-arns-for-enabled-integrations-1678294870020
|
|
88
87
|
* ```
|
|
89
88
|
*
|
|
89
|
+
* @public
|
|
90
90
|
*/
|
|
91
91
|
export declare class ListEnabledProductsForImportCommand extends ListEnabledProductsForImportCommand_base {
|
|
92
92
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -78,25 +78,25 @@ declare const ListFindingAggregatorsCommand_base: {
|
|
|
78
78
|
* @throws {@link SecurityHubServiceException}
|
|
79
79
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
80
80
|
*
|
|
81
|
-
*
|
|
81
|
+
*
|
|
82
82
|
* @example To update the enablement status of a standard control
|
|
83
83
|
* ```javascript
|
|
84
84
|
* // The following example disables the specified control in the specified security standard.
|
|
85
|
-
* const input = {};
|
|
85
|
+
* const input = { /* empty *\/ };
|
|
86
86
|
* const command = new ListFindingAggregatorsCommand(input);
|
|
87
87
|
* const response = await client.send(command);
|
|
88
|
-
* /* response
|
|
88
|
+
* /* response is
|
|
89
89
|
* {
|
|
90
|
-
*
|
|
90
|
+
* FindingAggregators: [
|
|
91
91
|
* {
|
|
92
|
-
*
|
|
92
|
+
* FindingAggregatorArn: "arn:aws:securityhub:us-east-1:222222222222:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
93
93
|
* }
|
|
94
94
|
* ]
|
|
95
95
|
* }
|
|
96
96
|
* *\/
|
|
97
|
-
* // example id: to-update-the-enablement-status-of-a-standard-control-1678912506444
|
|
98
97
|
* ```
|
|
99
98
|
*
|
|
99
|
+
* @public
|
|
100
100
|
*/
|
|
101
101
|
export declare class ListFindingAggregatorsCommand extends ListFindingAggregatorsCommand_base {
|
|
102
102
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -84,28 +84,8 @@ declare const ListInvitationsCommand_base: {
|
|
|
84
84
|
* @throws {@link SecurityHubServiceException}
|
|
85
85
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
86
86
|
*
|
|
87
|
-
* @public
|
|
88
|
-
* @example To list membership invitations to calling account
|
|
89
|
-
* ```javascript
|
|
90
|
-
* // The following example returns a list of Security Hub member invitations sent to the calling AWS account. Only accounts that are invited manually use this operation. It's not for use by accounts that are managed through AWS Organizations.
|
|
91
|
-
* const input = {};
|
|
92
|
-
* const command = new ListInvitationsCommand(input);
|
|
93
|
-
* const response = await client.send(command);
|
|
94
|
-
* /* response ==
|
|
95
|
-
* {
|
|
96
|
-
* "Invitations": [
|
|
97
|
-
* {
|
|
98
|
-
* "AccountId": "123456789012",
|
|
99
|
-
* "InvitationId": "7ab938c5d52d7904ad09f9e7c20cc4eb",
|
|
100
|
-
* "InvitedAt": "2020-06-01T20:21:18.042000+00:00",
|
|
101
|
-
* "MemberStatus": "ASSOCIATED"
|
|
102
|
-
* }
|
|
103
|
-
* ]
|
|
104
|
-
* }
|
|
105
|
-
* *\/
|
|
106
|
-
* // example id: to-list-membership-invitations-to-calling-account-1678295758285
|
|
107
|
-
* ```
|
|
108
87
|
*
|
|
88
|
+
* @public
|
|
109
89
|
*/
|
|
110
90
|
export declare class ListInvitationsCommand extends ListInvitationsCommand_base {
|
|
111
91
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -84,38 +84,8 @@ declare const ListMembersCommand_base: {
|
|
|
84
84
|
* @throws {@link SecurityHubServiceException}
|
|
85
85
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
86
86
|
*
|
|
87
|
-
* @public
|
|
88
|
-
* @example To list member account details
|
|
89
|
-
* ```javascript
|
|
90
|
-
* // The following example returns details about member accounts for the calling Security Hub administrator account. The response includes member accounts that are managed through AWS Organizations and those that were invited manually.
|
|
91
|
-
* const input = {};
|
|
92
|
-
* const command = new ListMembersCommand(input);
|
|
93
|
-
* const response = await client.send(command);
|
|
94
|
-
* /* response ==
|
|
95
|
-
* {
|
|
96
|
-
* "Members": [
|
|
97
|
-
* {
|
|
98
|
-
* "AccountId": "111122223333",
|
|
99
|
-
* "AdministratorId": "123456789012",
|
|
100
|
-
* "InvitedAt": "2020-06-01T20:15:15.289000+00:00",
|
|
101
|
-
* "MasterId": "123456789012",
|
|
102
|
-
* "MemberStatus": "ASSOCIATED",
|
|
103
|
-
* "UpdatedAt": "2020-06-01T20:15:15.289000+00:00"
|
|
104
|
-
* },
|
|
105
|
-
* {
|
|
106
|
-
* "AccountId": "444455556666",
|
|
107
|
-
* "AdministratorId": "123456789012",
|
|
108
|
-
* "InvitedAt": "2020-06-01T20:15:15.289000+00:00",
|
|
109
|
-
* "MasterId": "123456789012",
|
|
110
|
-
* "MemberStatus": "ASSOCIATED",
|
|
111
|
-
* "UpdatedAt": "2020-06-01T20:15:15.289000+00:00"
|
|
112
|
-
* }
|
|
113
|
-
* ]
|
|
114
|
-
* }
|
|
115
|
-
* *\/
|
|
116
|
-
* // example id: to-list-member-account-details-1678385639113
|
|
117
|
-
* ```
|
|
118
87
|
*
|
|
88
|
+
* @public
|
|
119
89
|
*/
|
|
120
90
|
export declare class ListMembersCommand extends ListMembersCommand_base {
|
|
121
91
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -76,28 +76,28 @@ declare const ListOrganizationAdminAccountsCommand_base: {
|
|
|
76
76
|
* @throws {@link SecurityHubServiceException}
|
|
77
77
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
78
78
|
*
|
|
79
|
-
*
|
|
79
|
+
*
|
|
80
80
|
* @example To list administrator acccounts for an organization
|
|
81
81
|
* ```javascript
|
|
82
82
|
* // The following example lists the Security Hub administrator accounts for an organization. Only the organization management account can call this operation.
|
|
83
|
-
* const input = {};
|
|
83
|
+
* const input = { /* empty *\/ };
|
|
84
84
|
* const command = new ListOrganizationAdminAccountsCommand(input);
|
|
85
85
|
* const response = await client.send(command);
|
|
86
|
-
* /* response
|
|
86
|
+
* /* response is
|
|
87
87
|
* {
|
|
88
|
-
*
|
|
88
|
+
* AdminAccounts: [
|
|
89
89
|
* {
|
|
90
|
-
*
|
|
90
|
+
* AccountId: "777788889999"
|
|
91
91
|
* },
|
|
92
92
|
* {
|
|
93
|
-
*
|
|
93
|
+
* Status: "ENABLED"
|
|
94
94
|
* }
|
|
95
95
|
* ]
|
|
96
96
|
* }
|
|
97
97
|
* *\/
|
|
98
|
-
* // example id: to-list-administrator-acccounts-for-an-organization-1678386548110
|
|
99
98
|
* ```
|
|
100
99
|
*
|
|
100
|
+
* @public
|
|
101
101
|
*/
|
|
102
102
|
export declare class ListOrganizationAdminAccountsCommand extends ListOrganizationAdminAccountsCommand_base {
|
|
103
103
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -141,57 +141,57 @@ declare const ListSecurityControlDefinitionsCommand_base: {
|
|
|
141
141
|
* @throws {@link SecurityHubServiceException}
|
|
142
142
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
143
143
|
*
|
|
144
|
-
*
|
|
144
|
+
*
|
|
145
145
|
* @example To list security controls that apply to a standard
|
|
146
146
|
* ```javascript
|
|
147
147
|
* // The following example lists security controls that apply to a specified Security Hub standard.
|
|
148
148
|
* const input = {
|
|
149
|
-
*
|
|
150
|
-
*
|
|
151
|
-
*
|
|
149
|
+
* MaxResults: 3,
|
|
150
|
+
* NextToken: "NULL",
|
|
151
|
+
* StandardsArn: "arn:aws:securityhub:::standards/aws-foundational-security-best-practices/v/1.0.0"
|
|
152
152
|
* };
|
|
153
153
|
* const command = new ListSecurityControlDefinitionsCommand(input);
|
|
154
154
|
* const response = await client.send(command);
|
|
155
|
-
* /* response
|
|
155
|
+
* /* response is
|
|
156
156
|
* {
|
|
157
|
-
*
|
|
158
|
-
*
|
|
157
|
+
* NextToken: "U2FsdGVkX1...",
|
|
158
|
+
* SecurityControlDefinitions: [
|
|
159
159
|
* {
|
|
160
|
-
*
|
|
161
|
-
*
|
|
160
|
+
* CurrentRegionAvailability: "AVAILABLE",
|
|
161
|
+
* CustomizableProperties: [
|
|
162
162
|
* "Parameters"
|
|
163
163
|
* ],
|
|
164
|
-
*
|
|
165
|
-
*
|
|
166
|
-
*
|
|
167
|
-
*
|
|
168
|
-
*
|
|
164
|
+
* Description: "This AWS control checks whether ACM Certificates in your account are marked for expiration within a specified time period. Certificates provided by ACM are automatically renewed. ACM does not automatically renew certificates that you import.",
|
|
165
|
+
* RemediationUrl: "https://docs.aws.amazon.com/console/securityhub/ACM.1/remediation",
|
|
166
|
+
* SecurityControlId: "ACM.1",
|
|
167
|
+
* SeverityRating: "MEDIUM",
|
|
168
|
+
* Title: "Imported and ACM-issued certificates should be renewed after a specified time period"
|
|
169
169
|
* },
|
|
170
170
|
* {
|
|
171
|
-
*
|
|
172
|
-
*
|
|
171
|
+
* CurrentRegionAvailability: "AVAILABLE",
|
|
172
|
+
* CustomizableProperties: [
|
|
173
173
|
* "Parameters"
|
|
174
174
|
* ],
|
|
175
|
-
*
|
|
176
|
-
*
|
|
177
|
-
*
|
|
178
|
-
*
|
|
179
|
-
*
|
|
175
|
+
* Description: "This control checks whether all stages of Amazon API Gateway REST and WebSocket APIs have logging enabled. The control fails if logging is not enabled for all methods of a stage or if loggingLevel is neither ERROR nor INFO.",
|
|
176
|
+
* RemediationUrl: "https://docs.aws.amazon.com/console/securityhub/APIGateway.1/remediation",
|
|
177
|
+
* SecurityControlId: "APIGateway.1",
|
|
178
|
+
* SeverityRating: "MEDIUM",
|
|
179
|
+
* Title: "API Gateway REST and WebSocket API execution logging should be enabled"
|
|
180
180
|
* },
|
|
181
181
|
* {
|
|
182
|
-
*
|
|
183
|
-
*
|
|
184
|
-
*
|
|
185
|
-
*
|
|
186
|
-
*
|
|
187
|
-
*
|
|
182
|
+
* CurrentRegionAvailability: "AVAILABLE",
|
|
183
|
+
* Description: "This control checks whether Amazon API Gateway REST API stages have SSL certificates configured that backend systems can use to authenticate that incoming requests are from the API Gateway.",
|
|
184
|
+
* RemediationUrl: "https://docs.aws.amazon.com/console/securityhub/APIGateway.2/remediation",
|
|
185
|
+
* SecurityControlId: "APIGateway.2",
|
|
186
|
+
* SeverityRating: "MEDIUM",
|
|
187
|
+
* Title: "API Gateway REST API stages should be configured to use SSL certificates for backend authentication"
|
|
188
188
|
* }
|
|
189
189
|
* ]
|
|
190
190
|
* }
|
|
191
191
|
* *\/
|
|
192
|
-
* // example id: to-list-security-controls-that-apply-to-a-standard-1678386912894
|
|
193
192
|
* ```
|
|
194
193
|
*
|
|
194
|
+
* @public
|
|
195
195
|
*/
|
|
196
196
|
export declare class ListSecurityControlDefinitionsCommand extends ListSecurityControlDefinitionsCommand_base {
|
|
197
197
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -88,51 +88,8 @@ declare const ListStandardsControlAssociationsCommand_base: {
|
|
|
88
88
|
* @throws {@link SecurityHubServiceException}
|
|
89
89
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
90
90
|
*
|
|
91
|
-
* @public
|
|
92
|
-
* @example To say whether standard
|
|
93
|
-
* ```javascript
|
|
94
|
-
* // The following example specifies whether a control is currently enabled or disabled in each enabled standard in the calling account. The response also provides other details about the control.
|
|
95
|
-
* const input = {
|
|
96
|
-
* "SecurityControlId": "S3.1"
|
|
97
|
-
* };
|
|
98
|
-
* const command = new ListStandardsControlAssociationsCommand(input);
|
|
99
|
-
* const response = await client.send(command);
|
|
100
|
-
* /* response ==
|
|
101
|
-
* {
|
|
102
|
-
* "StandardsControlAssociationSummaries": [
|
|
103
|
-
* {
|
|
104
|
-
* "AssociationStatus": "ENABLED",
|
|
105
|
-
* "RelatedRequirements": [
|
|
106
|
-
* "PCI DSS 1.2.1",
|
|
107
|
-
* "PCI DSS 1.3.1",
|
|
108
|
-
* "PCI DSS 1.3.2",
|
|
109
|
-
* "PCI DSS 1.3.4",
|
|
110
|
-
* "PCI DSS 1.3.6"
|
|
111
|
-
* ],
|
|
112
|
-
* "SecurityControlArn": "arn:aws:securityhub:us-west-2:110479873537:security-control/S3.1",
|
|
113
|
-
* "SecurityControlId": "S3.1",
|
|
114
|
-
* "StandardsArn": "arn:aws:securityhub:us-west-2::standards/pci-dss/v/3.2.1",
|
|
115
|
-
* "StandardsControlDescription": "This AWS control checks whether the following public access block settings are configured from account level: ignorePublicAcls: True, blockPublicPolicy: True, blockPublicAcls: True, restrictPublicBuckets: True.",
|
|
116
|
-
* "StandardsControlTitle": "S3 Block Public Access setting should be enabled",
|
|
117
|
-
* "UpdatedAt": "2022-01-13T23:03:46.648000+00:00"
|
|
118
|
-
* },
|
|
119
|
-
* {
|
|
120
|
-
* "AssociationStatus": "DISABLED",
|
|
121
|
-
* "RelatedRequirements": [],
|
|
122
|
-
* "SecurityControlArn": "arn:aws:securityhub:us-west-2:110479873537:security-control/S3.1",
|
|
123
|
-
* "SecurityControlId": "S3.1",
|
|
124
|
-
* "StandardsArn": "arn:aws:securityhub:us-west-2::standards/aws-foundational-security-best-practices/v/1.0.0",
|
|
125
|
-
* "StandardsControlDescription": "This AWS control checks whether the following public access block settings are configured from account level: ignorePublicAcls: True, blockPublicPolicy: True, blockPublicAcls: True, restrictPublicBuckets: True.",
|
|
126
|
-
* "StandardsControlTitle": "S3 Block Public Access setting should be enabled",
|
|
127
|
-
* "UpdatedAt": "2022-08-12T22:59:04.924000+00:00",
|
|
128
|
-
* "UpdatedReason": "Not relevant to environment"
|
|
129
|
-
* }
|
|
130
|
-
* ]
|
|
131
|
-
* }
|
|
132
|
-
* *\/
|
|
133
|
-
* // example id: to-say-whether-standard-1678389297986
|
|
134
|
-
* ```
|
|
135
91
|
*
|
|
92
|
+
* @public
|
|
136
93
|
*/
|
|
137
94
|
export declare class ListStandardsControlAssociationsCommand extends ListStandardsControlAssociationsCommand_base {
|
|
138
95
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -66,26 +66,26 @@ declare const ListTagsForResourceCommand_base: {
|
|
|
66
66
|
* @throws {@link SecurityHubServiceException}
|
|
67
67
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
68
68
|
*
|
|
69
|
-
*
|
|
69
|
+
*
|
|
70
70
|
* @example To get a list of tags for a resource
|
|
71
71
|
* ```javascript
|
|
72
72
|
* // The following example returns a list of tags associated with the specified resource.
|
|
73
73
|
* const input = {
|
|
74
|
-
*
|
|
74
|
+
* ResourceArn: "arn:aws:securityhub:us-west-1:123456789012:hub/default"
|
|
75
75
|
* };
|
|
76
76
|
* const command = new ListTagsForResourceCommand(input);
|
|
77
77
|
* const response = await client.send(command);
|
|
78
|
-
* /* response
|
|
78
|
+
* /* response is
|
|
79
79
|
* {
|
|
80
|
-
*
|
|
81
|
-
*
|
|
82
|
-
*
|
|
80
|
+
* Tags: {
|
|
81
|
+
* Area: "USMidwest",
|
|
82
|
+
* Department: "Operations"
|
|
83
83
|
* }
|
|
84
84
|
* }
|
|
85
85
|
* *\/
|
|
86
|
-
* // example id: to-get-a-list-of-tags-for-a-resource-1678477883796
|
|
87
86
|
* ```
|
|
88
87
|
*
|
|
88
|
+
* @public
|
|
89
89
|
*/
|
|
90
90
|
export declare class ListTagsForResourceCommand extends ListTagsForResourceCommand_base {
|
|
91
91
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -89,32 +89,32 @@ declare const StartConfigurationPolicyAssociationCommand_base: {
|
|
|
89
89
|
* @throws {@link SecurityHubServiceException}
|
|
90
90
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
91
91
|
*
|
|
92
|
-
*
|
|
92
|
+
*
|
|
93
93
|
* @example To associate a configuration with a target
|
|
94
94
|
* ```javascript
|
|
95
95
|
* // This operation associates a configuration policy or self-managed behavior with the target account, organizational unit, or the root.
|
|
96
96
|
* const input = {
|
|
97
|
-
*
|
|
98
|
-
*
|
|
99
|
-
*
|
|
97
|
+
* ConfigurationPolicyIdentifier: "arn:aws:securityhub:us-east-1:123456789012:configuration-policy/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
98
|
+
* Target: {
|
|
99
|
+
* AccountId: "111122223333"
|
|
100
100
|
* }
|
|
101
101
|
* };
|
|
102
102
|
* const command = new StartConfigurationPolicyAssociationCommand(input);
|
|
103
103
|
* const response = await client.send(command);
|
|
104
|
-
* /* response
|
|
104
|
+
* /* response is
|
|
105
105
|
* {
|
|
106
|
-
*
|
|
107
|
-
*
|
|
108
|
-
*
|
|
109
|
-
*
|
|
110
|
-
*
|
|
111
|
-
*
|
|
112
|
-
*
|
|
106
|
+
* AssociationStatus: "SUCCESS",
|
|
107
|
+
* AssociationStatusMessage: "This field is populated only if the association fails",
|
|
108
|
+
* AssociationType: "APPLIED",
|
|
109
|
+
* ConfigurationPolicyId: "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
110
|
+
* TargetId: "111122223333",
|
|
111
|
+
* TargetType: "ACCOUNT",
|
|
112
|
+
* UpdatedAt: "2023-01-11T06:17:17.154Z"
|
|
113
113
|
* }
|
|
114
114
|
* *\/
|
|
115
|
-
* // example id: to-associate-a-configuration-with-a-target-1695176455638
|
|
116
115
|
* ```
|
|
117
116
|
*
|
|
117
|
+
* @public
|
|
118
118
|
*/
|
|
119
119
|
export declare class StartConfigurationPolicyAssociationCommand extends StartConfigurationPolicyAssociationCommand_base {
|
|
120
120
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -83,21 +83,24 @@ declare const StartConfigurationPolicyDisassociationCommand_base: {
|
|
|
83
83
|
* @throws {@link SecurityHubServiceException}
|
|
84
84
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
85
85
|
*
|
|
86
|
-
*
|
|
86
|
+
*
|
|
87
87
|
* @example To disassociate a configuration from a target
|
|
88
88
|
* ```javascript
|
|
89
89
|
* // This operation disassociates a configuration policy or self-managed behavior from the target account, organizational unit, or the root.
|
|
90
90
|
* const input = {
|
|
91
|
-
*
|
|
92
|
-
*
|
|
93
|
-
*
|
|
91
|
+
* ConfigurationPolicyIdentifier: "SELF_MANAGED_SECURITY_HUB",
|
|
92
|
+
* Target: {
|
|
93
|
+
* RootId: "r-f6g7h8i9j0example"
|
|
94
94
|
* }
|
|
95
95
|
* };
|
|
96
96
|
* const command = new StartConfigurationPolicyDisassociationCommand(input);
|
|
97
|
-
* await client.send(command);
|
|
98
|
-
*
|
|
97
|
+
* const response = await client.send(command);
|
|
98
|
+
* /* response is
|
|
99
|
+
* { /* metadata only *\/ }
|
|
100
|
+
* *\/
|
|
99
101
|
* ```
|
|
100
102
|
*
|
|
103
|
+
* @public
|
|
101
104
|
*/
|
|
102
105
|
export declare class StartConfigurationPolicyDisassociationCommand extends StartConfigurationPolicyDisassociationCommand_base {
|
|
103
106
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -65,22 +65,25 @@ declare const TagResourceCommand_base: {
|
|
|
65
65
|
* @throws {@link SecurityHubServiceException}
|
|
66
66
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
67
67
|
*
|
|
68
|
-
*
|
|
68
|
+
*
|
|
69
69
|
* @example To tag a resource
|
|
70
70
|
* ```javascript
|
|
71
71
|
* // The following example adds the 'Department' and 'Area' tags to the specified resource.
|
|
72
72
|
* const input = {
|
|
73
|
-
*
|
|
74
|
-
*
|
|
75
|
-
*
|
|
76
|
-
*
|
|
73
|
+
* ResourceArn: "arn:aws:securityhub:us-west-1:123456789012:hub/default",
|
|
74
|
+
* Tags: {
|
|
75
|
+
* Area: "USMidwest",
|
|
76
|
+
* Department: "Operations"
|
|
77
77
|
* }
|
|
78
78
|
* };
|
|
79
79
|
* const command = new TagResourceCommand(input);
|
|
80
|
-
* await client.send(command);
|
|
81
|
-
*
|
|
80
|
+
* const response = await client.send(command);
|
|
81
|
+
* /* response is
|
|
82
|
+
* { /* metadata only *\/ }
|
|
83
|
+
* *\/
|
|
82
84
|
* ```
|
|
83
85
|
*
|
|
86
|
+
* @public
|
|
84
87
|
*/
|
|
85
88
|
export declare class TagResourceCommand extends TagResourceCommand_base {
|
|
86
89
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -65,21 +65,24 @@ declare const UntagResourceCommand_base: {
|
|
|
65
65
|
* @throws {@link SecurityHubServiceException}
|
|
66
66
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
67
67
|
*
|
|
68
|
-
*
|
|
68
|
+
*
|
|
69
69
|
* @example To remove tags from a resource
|
|
70
70
|
* ```javascript
|
|
71
71
|
* // The following example removes the 'Department' tag from the specified resource.
|
|
72
72
|
* const input = {
|
|
73
|
-
*
|
|
74
|
-
*
|
|
73
|
+
* ResourceArn: "arn:aws:securityhub:us-west-1:123456789012:hub/default",
|
|
74
|
+
* TagKeys: [
|
|
75
75
|
* "Department"
|
|
76
76
|
* ]
|
|
77
77
|
* };
|
|
78
78
|
* const command = new UntagResourceCommand(input);
|
|
79
|
-
* await client.send(command);
|
|
80
|
-
*
|
|
79
|
+
* const response = await client.send(command);
|
|
80
|
+
* /* response is
|
|
81
|
+
* { /* metadata only *\/ }
|
|
82
|
+
* *\/
|
|
81
83
|
* ```
|
|
82
84
|
*
|
|
85
|
+
* @public
|
|
83
86
|
*/
|
|
84
87
|
export declare class UntagResourceCommand extends UntagResourceCommand_base {
|
|
85
88
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -67,20 +67,23 @@ declare const UpdateActionTargetCommand_base: {
|
|
|
67
67
|
* @throws {@link SecurityHubServiceException}
|
|
68
68
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
69
69
|
*
|
|
70
|
-
*
|
|
70
|
+
*
|
|
71
71
|
* @example To update the name and description of a custom action target
|
|
72
72
|
* ```javascript
|
|
73
73
|
* // The following example updates the name and description of a custom action target in Security Hub. You can create custom actions to automatically respond to Security Hub findings using Amazon EventBridge.
|
|
74
74
|
* const input = {
|
|
75
|
-
*
|
|
76
|
-
*
|
|
77
|
-
*
|
|
75
|
+
* ActionTargetArn: "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation",
|
|
76
|
+
* Description: "Sends specified findings to customer service chat",
|
|
77
|
+
* Name: "Chat custom action"
|
|
78
78
|
* };
|
|
79
79
|
* const command = new UpdateActionTargetCommand(input);
|
|
80
|
-
* await client.send(command);
|
|
81
|
-
*
|
|
80
|
+
* const response = await client.send(command);
|
|
81
|
+
* /* response is
|
|
82
|
+
* { /* metadata only *\/ }
|
|
83
|
+
* *\/
|
|
82
84
|
* ```
|
|
83
85
|
*
|
|
86
|
+
* @public
|
|
84
87
|
*/
|
|
85
88
|
export declare class UpdateActionTargetCommand extends UpdateActionTargetCommand_base {
|
|
86
89
|
/** @internal type navigation helper, not in runtime. */
|