@aws-sdk/client-securityhub 3.775.0 → 3.777.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +8 -5
- package/dist-types/commands/AcceptInvitationCommand.d.ts +1 -0
- package/dist-types/commands/BatchDeleteAutomationRulesCommand.d.ts +9 -9
- package/dist-types/commands/BatchDisableStandardsCommand.d.ts +9 -9
- package/dist-types/commands/BatchEnableStandardsCommand.d.ts +10 -10
- package/dist-types/commands/BatchGetAutomationRulesCommand.d.ts +49 -49
- package/dist-types/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +22 -22
- package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +33 -33
- package/dist-types/commands/BatchGetStandardsControlAssociationsCommand.d.ts +1 -50
- package/dist-types/commands/BatchImportFindingsCommand.d.ts +26 -26
- package/dist-types/commands/BatchUpdateAutomationRulesCommand.d.ts +10 -10
- package/dist-types/commands/BatchUpdateFindingsCommand.d.ts +30 -30
- package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +20 -20
- package/dist-types/commands/CreateActionTargetCommand.d.ts +7 -7
- package/dist-types/commands/CreateAutomationRuleCommand.d.ts +35 -35
- package/dist-types/commands/CreateConfigurationPolicyCommand.d.ts +37 -37
- package/dist-types/commands/CreateFindingAggregatorCommand.d.ts +9 -9
- package/dist-types/commands/CreateInsightCommand.d.ts +13 -13
- package/dist-types/commands/CreateMembersCommand.d.ts +7 -7
- package/dist-types/commands/DeclineInvitationsCommand.d.ts +5 -5
- package/dist-types/commands/DeleteActionTargetCommand.d.ts +5 -5
- package/dist-types/commands/DeleteConfigurationPolicyCommand.d.ts +7 -4
- package/dist-types/commands/DeleteFindingAggregatorCommand.d.ts +7 -4
- package/dist-types/commands/DeleteInsightCommand.d.ts +5 -5
- package/dist-types/commands/DeleteInvitationsCommand.d.ts +5 -5
- package/dist-types/commands/DeleteMembersCommand.d.ts +5 -5
- package/dist-types/commands/DescribeActionTargetsCommand.d.ts +8 -8
- package/dist-types/commands/DescribeHubCommand.d.ts +8 -8
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +10 -10
- package/dist-types/commands/DescribeProductsCommand.d.ts +17 -17
- package/dist-types/commands/DescribeStandardsCommand.d.ts +21 -21
- package/dist-types/commands/DescribeStandardsControlsCommand.d.ts +1 -46
- package/dist-types/commands/DisableImportFindingsForProductCommand.d.ts +7 -4
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +7 -4
- package/dist-types/commands/DisableSecurityHubCommand.d.ts +7 -4
- package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +7 -4
- package/dist-types/commands/DisassociateFromMasterAccountCommand.d.ts +1 -0
- package/dist-types/commands/DisassociateMembersCommand.d.ts +7 -4
- package/dist-types/commands/EnableImportFindingsForProductCommand.d.ts +5 -5
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +7 -4
- package/dist-types/commands/EnableSecurityHubCommand.d.ts +9 -6
- package/dist-types/commands/GetAdministratorAccountCommand.d.ts +1 -19
- package/dist-types/commands/GetConfigurationPolicyAssociationCommand.d.ts +12 -12
- package/dist-types/commands/GetConfigurationPolicyCommand.d.ts +23 -23
- package/dist-types/commands/GetEnabledStandardsCommand.d.ts +9 -9
- package/dist-types/commands/GetFindingAggregatorCommand.d.ts +8 -8
- package/dist-types/commands/GetFindingHistoryCommand.d.ts +1 -42
- package/dist-types/commands/GetFindingsCommand.d.ts +63 -63
- package/dist-types/commands/GetInsightResultsCommand.d.ts +12 -12
- package/dist-types/commands/GetInsightsCommand.d.ts +15 -15
- package/dist-types/commands/GetInvitationsCountCommand.d.ts +7 -7
- package/dist-types/commands/GetMasterAccountCommand.d.ts +1 -0
- package/dist-types/commands/GetMembersCommand.d.ts +1 -37
- package/dist-types/commands/GetSecurityControlDefinitionCommand.d.ts +19 -19
- package/dist-types/commands/InviteMembersCommand.d.ts +5 -5
- package/dist-types/commands/ListAutomationRulesCommand.d.ts +23 -23
- package/dist-types/commands/ListConfigurationPoliciesCommand.d.ts +13 -13
- package/dist-types/commands/ListConfigurationPolicyAssociationsCommand.d.ts +15 -15
- package/dist-types/commands/ListEnabledProductsForImportCommand.d.ts +5 -5
- package/dist-types/commands/ListFindingAggregatorsCommand.d.ts +6 -6
- package/dist-types/commands/ListInvitationsCommand.d.ts +1 -21
- package/dist-types/commands/ListMembersCommand.d.ts +1 -31
- package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +7 -7
- package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +28 -28
- package/dist-types/commands/ListStandardsControlAssociationsCommand.d.ts +1 -44
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +7 -7
- package/dist-types/commands/StartConfigurationPolicyAssociationCommand.d.ts +13 -13
- package/dist-types/commands/StartConfigurationPolicyDisassociationCommand.d.ts +9 -6
- package/dist-types/commands/TagResourceCommand.d.ts +10 -7
- package/dist-types/commands/UntagResourceCommand.d.ts +8 -5
- package/dist-types/commands/UpdateActionTargetCommand.d.ts +9 -6
- package/dist-types/commands/UpdateConfigurationPolicyCommand.d.ts +39 -39
- package/dist-types/commands/UpdateFindingAggregatorCommand.d.ts +10 -10
- package/dist-types/commands/UpdateFindingsCommand.d.ts +1 -0
- package/dist-types/commands/UpdateInsightCommand.d.ts +15 -12
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +10 -7
- package/dist-types/commands/UpdateSecurityControlCommand.d.ts +13 -10
- package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +8 -5
- package/dist-types/commands/UpdateStandardsControlCommand.d.ts +9 -6
- package/package.json +2 -2
|
@@ -141,57 +141,57 @@ declare const ListSecurityControlDefinitionsCommand_base: {
|
|
|
141
141
|
* @throws {@link SecurityHubServiceException}
|
|
142
142
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
143
143
|
*
|
|
144
|
-
*
|
|
144
|
+
*
|
|
145
145
|
* @example To list security controls that apply to a standard
|
|
146
146
|
* ```javascript
|
|
147
147
|
* // The following example lists security controls that apply to a specified Security Hub standard.
|
|
148
148
|
* const input = {
|
|
149
|
-
*
|
|
150
|
-
*
|
|
151
|
-
*
|
|
149
|
+
* MaxResults: 3,
|
|
150
|
+
* NextToken: "NULL",
|
|
151
|
+
* StandardsArn: "arn:aws:securityhub:::standards/aws-foundational-security-best-practices/v/1.0.0"
|
|
152
152
|
* };
|
|
153
153
|
* const command = new ListSecurityControlDefinitionsCommand(input);
|
|
154
154
|
* const response = await client.send(command);
|
|
155
|
-
* /* response
|
|
155
|
+
* /* response is
|
|
156
156
|
* {
|
|
157
|
-
*
|
|
158
|
-
*
|
|
157
|
+
* NextToken: "U2FsdGVkX1...",
|
|
158
|
+
* SecurityControlDefinitions: [
|
|
159
159
|
* {
|
|
160
|
-
*
|
|
161
|
-
*
|
|
160
|
+
* CurrentRegionAvailability: "AVAILABLE",
|
|
161
|
+
* CustomizableProperties: [
|
|
162
162
|
* "Parameters"
|
|
163
163
|
* ],
|
|
164
|
-
*
|
|
165
|
-
*
|
|
166
|
-
*
|
|
167
|
-
*
|
|
168
|
-
*
|
|
164
|
+
* Description: "This AWS control checks whether ACM Certificates in your account are marked for expiration within a specified time period. Certificates provided by ACM are automatically renewed. ACM does not automatically renew certificates that you import.",
|
|
165
|
+
* RemediationUrl: "https://docs.aws.amazon.com/console/securityhub/ACM.1/remediation",
|
|
166
|
+
* SecurityControlId: "ACM.1",
|
|
167
|
+
* SeverityRating: "MEDIUM",
|
|
168
|
+
* Title: "Imported and ACM-issued certificates should be renewed after a specified time period"
|
|
169
169
|
* },
|
|
170
170
|
* {
|
|
171
|
-
*
|
|
172
|
-
*
|
|
171
|
+
* CurrentRegionAvailability: "AVAILABLE",
|
|
172
|
+
* CustomizableProperties: [
|
|
173
173
|
* "Parameters"
|
|
174
174
|
* ],
|
|
175
|
-
*
|
|
176
|
-
*
|
|
177
|
-
*
|
|
178
|
-
*
|
|
179
|
-
*
|
|
175
|
+
* Description: "This control checks whether all stages of Amazon API Gateway REST and WebSocket APIs have logging enabled. The control fails if logging is not enabled for all methods of a stage or if loggingLevel is neither ERROR nor INFO.",
|
|
176
|
+
* RemediationUrl: "https://docs.aws.amazon.com/console/securityhub/APIGateway.1/remediation",
|
|
177
|
+
* SecurityControlId: "APIGateway.1",
|
|
178
|
+
* SeverityRating: "MEDIUM",
|
|
179
|
+
* Title: "API Gateway REST and WebSocket API execution logging should be enabled"
|
|
180
180
|
* },
|
|
181
181
|
* {
|
|
182
|
-
*
|
|
183
|
-
*
|
|
184
|
-
*
|
|
185
|
-
*
|
|
186
|
-
*
|
|
187
|
-
*
|
|
182
|
+
* CurrentRegionAvailability: "AVAILABLE",
|
|
183
|
+
* Description: "This control checks whether Amazon API Gateway REST API stages have SSL certificates configured that backend systems can use to authenticate that incoming requests are from the API Gateway.",
|
|
184
|
+
* RemediationUrl: "https://docs.aws.amazon.com/console/securityhub/APIGateway.2/remediation",
|
|
185
|
+
* SecurityControlId: "APIGateway.2",
|
|
186
|
+
* SeverityRating: "MEDIUM",
|
|
187
|
+
* Title: "API Gateway REST API stages should be configured to use SSL certificates for backend authentication"
|
|
188
188
|
* }
|
|
189
189
|
* ]
|
|
190
190
|
* }
|
|
191
191
|
* *\/
|
|
192
|
-
* // example id: to-list-security-controls-that-apply-to-a-standard-1678386912894
|
|
193
192
|
* ```
|
|
194
193
|
*
|
|
194
|
+
* @public
|
|
195
195
|
*/
|
|
196
196
|
export declare class ListSecurityControlDefinitionsCommand extends ListSecurityControlDefinitionsCommand_base {
|
|
197
197
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -88,51 +88,8 @@ declare const ListStandardsControlAssociationsCommand_base: {
|
|
|
88
88
|
* @throws {@link SecurityHubServiceException}
|
|
89
89
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
90
90
|
*
|
|
91
|
-
* @public
|
|
92
|
-
* @example To say whether standard
|
|
93
|
-
* ```javascript
|
|
94
|
-
* // The following example specifies whether a control is currently enabled or disabled in each enabled standard in the calling account. The response also provides other details about the control.
|
|
95
|
-
* const input = {
|
|
96
|
-
* "SecurityControlId": "S3.1"
|
|
97
|
-
* };
|
|
98
|
-
* const command = new ListStandardsControlAssociationsCommand(input);
|
|
99
|
-
* const response = await client.send(command);
|
|
100
|
-
* /* response ==
|
|
101
|
-
* {
|
|
102
|
-
* "StandardsControlAssociationSummaries": [
|
|
103
|
-
* {
|
|
104
|
-
* "AssociationStatus": "ENABLED",
|
|
105
|
-
* "RelatedRequirements": [
|
|
106
|
-
* "PCI DSS 1.2.1",
|
|
107
|
-
* "PCI DSS 1.3.1",
|
|
108
|
-
* "PCI DSS 1.3.2",
|
|
109
|
-
* "PCI DSS 1.3.4",
|
|
110
|
-
* "PCI DSS 1.3.6"
|
|
111
|
-
* ],
|
|
112
|
-
* "SecurityControlArn": "arn:aws:securityhub:us-west-2:110479873537:security-control/S3.1",
|
|
113
|
-
* "SecurityControlId": "S3.1",
|
|
114
|
-
* "StandardsArn": "arn:aws:securityhub:us-west-2::standards/pci-dss/v/3.2.1",
|
|
115
|
-
* "StandardsControlDescription": "This AWS control checks whether the following public access block settings are configured from account level: ignorePublicAcls: True, blockPublicPolicy: True, blockPublicAcls: True, restrictPublicBuckets: True.",
|
|
116
|
-
* "StandardsControlTitle": "S3 Block Public Access setting should be enabled",
|
|
117
|
-
* "UpdatedAt": "2022-01-13T23:03:46.648000+00:00"
|
|
118
|
-
* },
|
|
119
|
-
* {
|
|
120
|
-
* "AssociationStatus": "DISABLED",
|
|
121
|
-
* "RelatedRequirements": [],
|
|
122
|
-
* "SecurityControlArn": "arn:aws:securityhub:us-west-2:110479873537:security-control/S3.1",
|
|
123
|
-
* "SecurityControlId": "S3.1",
|
|
124
|
-
* "StandardsArn": "arn:aws:securityhub:us-west-2::standards/aws-foundational-security-best-practices/v/1.0.0",
|
|
125
|
-
* "StandardsControlDescription": "This AWS control checks whether the following public access block settings are configured from account level: ignorePublicAcls: True, blockPublicPolicy: True, blockPublicAcls: True, restrictPublicBuckets: True.",
|
|
126
|
-
* "StandardsControlTitle": "S3 Block Public Access setting should be enabled",
|
|
127
|
-
* "UpdatedAt": "2022-08-12T22:59:04.924000+00:00",
|
|
128
|
-
* "UpdatedReason": "Not relevant to environment"
|
|
129
|
-
* }
|
|
130
|
-
* ]
|
|
131
|
-
* }
|
|
132
|
-
* *\/
|
|
133
|
-
* // example id: to-say-whether-standard-1678389297986
|
|
134
|
-
* ```
|
|
135
91
|
*
|
|
92
|
+
* @public
|
|
136
93
|
*/
|
|
137
94
|
export declare class ListStandardsControlAssociationsCommand extends ListStandardsControlAssociationsCommand_base {
|
|
138
95
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -66,26 +66,26 @@ declare const ListTagsForResourceCommand_base: {
|
|
|
66
66
|
* @throws {@link SecurityHubServiceException}
|
|
67
67
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
68
68
|
*
|
|
69
|
-
*
|
|
69
|
+
*
|
|
70
70
|
* @example To get a list of tags for a resource
|
|
71
71
|
* ```javascript
|
|
72
72
|
* // The following example returns a list of tags associated with the specified resource.
|
|
73
73
|
* const input = {
|
|
74
|
-
*
|
|
74
|
+
* ResourceArn: "arn:aws:securityhub:us-west-1:123456789012:hub/default"
|
|
75
75
|
* };
|
|
76
76
|
* const command = new ListTagsForResourceCommand(input);
|
|
77
77
|
* const response = await client.send(command);
|
|
78
|
-
* /* response
|
|
78
|
+
* /* response is
|
|
79
79
|
* {
|
|
80
|
-
*
|
|
81
|
-
*
|
|
82
|
-
*
|
|
80
|
+
* Tags: {
|
|
81
|
+
* Area: "USMidwest",
|
|
82
|
+
* Department: "Operations"
|
|
83
83
|
* }
|
|
84
84
|
* }
|
|
85
85
|
* *\/
|
|
86
|
-
* // example id: to-get-a-list-of-tags-for-a-resource-1678477883796
|
|
87
86
|
* ```
|
|
88
87
|
*
|
|
88
|
+
* @public
|
|
89
89
|
*/
|
|
90
90
|
export declare class ListTagsForResourceCommand extends ListTagsForResourceCommand_base {
|
|
91
91
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -89,32 +89,32 @@ declare const StartConfigurationPolicyAssociationCommand_base: {
|
|
|
89
89
|
* @throws {@link SecurityHubServiceException}
|
|
90
90
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
91
91
|
*
|
|
92
|
-
*
|
|
92
|
+
*
|
|
93
93
|
* @example To associate a configuration with a target
|
|
94
94
|
* ```javascript
|
|
95
95
|
* // This operation associates a configuration policy or self-managed behavior with the target account, organizational unit, or the root.
|
|
96
96
|
* const input = {
|
|
97
|
-
*
|
|
98
|
-
*
|
|
99
|
-
*
|
|
97
|
+
* ConfigurationPolicyIdentifier: "arn:aws:securityhub:us-east-1:123456789012:configuration-policy/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
98
|
+
* Target: {
|
|
99
|
+
* AccountId: "111122223333"
|
|
100
100
|
* }
|
|
101
101
|
* };
|
|
102
102
|
* const command = new StartConfigurationPolicyAssociationCommand(input);
|
|
103
103
|
* const response = await client.send(command);
|
|
104
|
-
* /* response
|
|
104
|
+
* /* response is
|
|
105
105
|
* {
|
|
106
|
-
*
|
|
107
|
-
*
|
|
108
|
-
*
|
|
109
|
-
*
|
|
110
|
-
*
|
|
111
|
-
*
|
|
112
|
-
*
|
|
106
|
+
* AssociationStatus: "SUCCESS",
|
|
107
|
+
* AssociationStatusMessage: "This field is populated only if the association fails",
|
|
108
|
+
* AssociationType: "APPLIED",
|
|
109
|
+
* ConfigurationPolicyId: "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
110
|
+
* TargetId: "111122223333",
|
|
111
|
+
* TargetType: "ACCOUNT",
|
|
112
|
+
* UpdatedAt: "2023-01-11T06:17:17.154Z"
|
|
113
113
|
* }
|
|
114
114
|
* *\/
|
|
115
|
-
* // example id: to-associate-a-configuration-with-a-target-1695176455638
|
|
116
115
|
* ```
|
|
117
116
|
*
|
|
117
|
+
* @public
|
|
118
118
|
*/
|
|
119
119
|
export declare class StartConfigurationPolicyAssociationCommand extends StartConfigurationPolicyAssociationCommand_base {
|
|
120
120
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -83,21 +83,24 @@ declare const StartConfigurationPolicyDisassociationCommand_base: {
|
|
|
83
83
|
* @throws {@link SecurityHubServiceException}
|
|
84
84
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
85
85
|
*
|
|
86
|
-
*
|
|
86
|
+
*
|
|
87
87
|
* @example To disassociate a configuration from a target
|
|
88
88
|
* ```javascript
|
|
89
89
|
* // This operation disassociates a configuration policy or self-managed behavior from the target account, organizational unit, or the root.
|
|
90
90
|
* const input = {
|
|
91
|
-
*
|
|
92
|
-
*
|
|
93
|
-
*
|
|
91
|
+
* ConfigurationPolicyIdentifier: "SELF_MANAGED_SECURITY_HUB",
|
|
92
|
+
* Target: {
|
|
93
|
+
* RootId: "r-f6g7h8i9j0example"
|
|
94
94
|
* }
|
|
95
95
|
* };
|
|
96
96
|
* const command = new StartConfigurationPolicyDisassociationCommand(input);
|
|
97
|
-
* await client.send(command);
|
|
98
|
-
*
|
|
97
|
+
* const response = await client.send(command);
|
|
98
|
+
* /* response is
|
|
99
|
+
* { /* metadata only *\/ }
|
|
100
|
+
* *\/
|
|
99
101
|
* ```
|
|
100
102
|
*
|
|
103
|
+
* @public
|
|
101
104
|
*/
|
|
102
105
|
export declare class StartConfigurationPolicyDisassociationCommand extends StartConfigurationPolicyDisassociationCommand_base {
|
|
103
106
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -65,22 +65,25 @@ declare const TagResourceCommand_base: {
|
|
|
65
65
|
* @throws {@link SecurityHubServiceException}
|
|
66
66
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
67
67
|
*
|
|
68
|
-
*
|
|
68
|
+
*
|
|
69
69
|
* @example To tag a resource
|
|
70
70
|
* ```javascript
|
|
71
71
|
* // The following example adds the 'Department' and 'Area' tags to the specified resource.
|
|
72
72
|
* const input = {
|
|
73
|
-
*
|
|
74
|
-
*
|
|
75
|
-
*
|
|
76
|
-
*
|
|
73
|
+
* ResourceArn: "arn:aws:securityhub:us-west-1:123456789012:hub/default",
|
|
74
|
+
* Tags: {
|
|
75
|
+
* Area: "USMidwest",
|
|
76
|
+
* Department: "Operations"
|
|
77
77
|
* }
|
|
78
78
|
* };
|
|
79
79
|
* const command = new TagResourceCommand(input);
|
|
80
|
-
* await client.send(command);
|
|
81
|
-
*
|
|
80
|
+
* const response = await client.send(command);
|
|
81
|
+
* /* response is
|
|
82
|
+
* { /* metadata only *\/ }
|
|
83
|
+
* *\/
|
|
82
84
|
* ```
|
|
83
85
|
*
|
|
86
|
+
* @public
|
|
84
87
|
*/
|
|
85
88
|
export declare class TagResourceCommand extends TagResourceCommand_base {
|
|
86
89
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -65,21 +65,24 @@ declare const UntagResourceCommand_base: {
|
|
|
65
65
|
* @throws {@link SecurityHubServiceException}
|
|
66
66
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
67
67
|
*
|
|
68
|
-
*
|
|
68
|
+
*
|
|
69
69
|
* @example To remove tags from a resource
|
|
70
70
|
* ```javascript
|
|
71
71
|
* // The following example removes the 'Department' tag from the specified resource.
|
|
72
72
|
* const input = {
|
|
73
|
-
*
|
|
74
|
-
*
|
|
73
|
+
* ResourceArn: "arn:aws:securityhub:us-west-1:123456789012:hub/default",
|
|
74
|
+
* TagKeys: [
|
|
75
75
|
* "Department"
|
|
76
76
|
* ]
|
|
77
77
|
* };
|
|
78
78
|
* const command = new UntagResourceCommand(input);
|
|
79
|
-
* await client.send(command);
|
|
80
|
-
*
|
|
79
|
+
* const response = await client.send(command);
|
|
80
|
+
* /* response is
|
|
81
|
+
* { /* metadata only *\/ }
|
|
82
|
+
* *\/
|
|
81
83
|
* ```
|
|
82
84
|
*
|
|
85
|
+
* @public
|
|
83
86
|
*/
|
|
84
87
|
export declare class UntagResourceCommand extends UntagResourceCommand_base {
|
|
85
88
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -67,20 +67,23 @@ declare const UpdateActionTargetCommand_base: {
|
|
|
67
67
|
* @throws {@link SecurityHubServiceException}
|
|
68
68
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
69
69
|
*
|
|
70
|
-
*
|
|
70
|
+
*
|
|
71
71
|
* @example To update the name and description of a custom action target
|
|
72
72
|
* ```javascript
|
|
73
73
|
* // The following example updates the name and description of a custom action target in Security Hub. You can create custom actions to automatically respond to Security Hub findings using Amazon EventBridge.
|
|
74
74
|
* const input = {
|
|
75
|
-
*
|
|
76
|
-
*
|
|
77
|
-
*
|
|
75
|
+
* ActionTargetArn: "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation",
|
|
76
|
+
* Description: "Sends specified findings to customer service chat",
|
|
77
|
+
* Name: "Chat custom action"
|
|
78
78
|
* };
|
|
79
79
|
* const command = new UpdateActionTargetCommand(input);
|
|
80
|
-
* await client.send(command);
|
|
81
|
-
*
|
|
80
|
+
* const response = await client.send(command);
|
|
81
|
+
* /* response is
|
|
82
|
+
* { /* metadata only *\/ }
|
|
83
|
+
* *\/
|
|
82
84
|
* ```
|
|
83
85
|
*
|
|
86
|
+
* @public
|
|
84
87
|
*/
|
|
85
88
|
export declare class UpdateActionTargetCommand extends UpdateActionTargetCommand_base {
|
|
86
89
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -172,87 +172,87 @@ declare const UpdateConfigurationPolicyCommand_base: {
|
|
|
172
172
|
* @throws {@link SecurityHubServiceException}
|
|
173
173
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
174
174
|
*
|
|
175
|
-
*
|
|
175
|
+
*
|
|
176
176
|
* @example To update a configuration policy
|
|
177
177
|
* ```javascript
|
|
178
178
|
* // This operation updates the specified configuration policy.
|
|
179
179
|
* const input = {
|
|
180
|
-
*
|
|
181
|
-
*
|
|
182
|
-
*
|
|
180
|
+
* ConfigurationPolicy: {
|
|
181
|
+
* SecurityHub: {
|
|
182
|
+
* EnabledStandardIdentifiers: [
|
|
183
183
|
* "arn:aws:securityhub:us-east-1::standards/aws-foundational-security-best-practices/v/1.0.0",
|
|
184
184
|
* "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"
|
|
185
185
|
* ],
|
|
186
|
-
*
|
|
187
|
-
*
|
|
186
|
+
* SecurityControlsConfiguration: {
|
|
187
|
+
* DisabledSecurityControlIdentifiers: [
|
|
188
188
|
* "CloudWatch.1",
|
|
189
189
|
* "CloudWatch.2"
|
|
190
190
|
* ],
|
|
191
|
-
*
|
|
191
|
+
* SecurityControlCustomParameters: [
|
|
192
192
|
* {
|
|
193
|
-
*
|
|
194
|
-
*
|
|
195
|
-
*
|
|
196
|
-
*
|
|
193
|
+
* Parameters: {
|
|
194
|
+
* daysToExpiration: {
|
|
195
|
+
* Value: {
|
|
196
|
+
* Integer: 21
|
|
197
197
|
* },
|
|
198
|
-
*
|
|
198
|
+
* ValueType: "CUSTOM"
|
|
199
199
|
* }
|
|
200
200
|
* },
|
|
201
|
-
*
|
|
201
|
+
* SecurityControlId: "ACM.1"
|
|
202
202
|
* }
|
|
203
203
|
* ]
|
|
204
204
|
* },
|
|
205
|
-
*
|
|
205
|
+
* ServiceEnabled: true
|
|
206
206
|
* }
|
|
207
207
|
* },
|
|
208
|
-
*
|
|
209
|
-
*
|
|
210
|
-
*
|
|
211
|
-
*
|
|
208
|
+
* Description: "Updated configuration policy for testing FSBP and CIS",
|
|
209
|
+
* Identifier: "arn:aws:securityhub:us-east-1:123456789012:configuration-policy/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
210
|
+
* Name: "TestConfigurationPolicy",
|
|
211
|
+
* UpdatedReason: "Enabling ACM.2"
|
|
212
212
|
* };
|
|
213
213
|
* const command = new UpdateConfigurationPolicyCommand(input);
|
|
214
214
|
* const response = await client.send(command);
|
|
215
|
-
* /* response
|
|
215
|
+
* /* response is
|
|
216
216
|
* {
|
|
217
|
-
*
|
|
218
|
-
*
|
|
219
|
-
*
|
|
220
|
-
*
|
|
217
|
+
* Arn: "arn:aws:securityhub:us-east-1:123456789012:configuration-policy/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
218
|
+
* ConfigurationPolicy: {
|
|
219
|
+
* SecurityHub: {
|
|
220
|
+
* EnabledStandardIdentifiers: [
|
|
221
221
|
* "arn:aws:securityhub:us-east-1::standards/aws-foundational-security-best-practices/v/1.0.0",
|
|
222
222
|
* "arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0"
|
|
223
223
|
* ],
|
|
224
|
-
*
|
|
225
|
-
*
|
|
224
|
+
* SecurityControlsConfiguration: {
|
|
225
|
+
* DisabledSecurityControlIdentifiers: [
|
|
226
226
|
* "CloudWatch.1",
|
|
227
227
|
* "CloudWatch.2"
|
|
228
228
|
* ],
|
|
229
|
-
*
|
|
229
|
+
* SecurityControlCustomParameters: [
|
|
230
230
|
* {
|
|
231
|
-
*
|
|
232
|
-
*
|
|
233
|
-
*
|
|
234
|
-
*
|
|
231
|
+
* Parameters: {
|
|
232
|
+
* daysToExpiration: {
|
|
233
|
+
* Value: {
|
|
234
|
+
* Integer: 21
|
|
235
235
|
* },
|
|
236
|
-
*
|
|
236
|
+
* ValueType: "CUSTOM"
|
|
237
237
|
* }
|
|
238
238
|
* },
|
|
239
|
-
*
|
|
239
|
+
* SecurityControlId: "ACM.1"
|
|
240
240
|
* }
|
|
241
241
|
* ]
|
|
242
242
|
* },
|
|
243
|
-
*
|
|
243
|
+
* ServiceEnabled: true
|
|
244
244
|
* }
|
|
245
245
|
* },
|
|
246
|
-
*
|
|
247
|
-
*
|
|
248
|
-
*
|
|
249
|
-
*
|
|
250
|
-
*
|
|
246
|
+
* CreatedAt: "2023-01-11T06:17:17.154Z",
|
|
247
|
+
* Description: "Updated configuration policy for testing FSBP and CIS",
|
|
248
|
+
* Id: "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
249
|
+
* Name: "TestConfigurationPolicy",
|
|
250
|
+
* UpdatedAt: "2023-01-12T06:17:17.154Z"
|
|
251
251
|
* }
|
|
252
252
|
* *\/
|
|
253
|
-
* // example id: to-update-a-configuration-policy-1695174120555
|
|
254
253
|
* ```
|
|
255
254
|
*
|
|
255
|
+
* @public
|
|
256
256
|
*/
|
|
257
257
|
export declare class UpdateConfigurationPolicyCommand extends UpdateConfigurationPolicyCommand_base {
|
|
258
258
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -89,34 +89,34 @@ declare const UpdateFindingAggregatorCommand_base: {
|
|
|
89
89
|
* @throws {@link SecurityHubServiceException}
|
|
90
90
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
91
91
|
*
|
|
92
|
-
*
|
|
92
|
+
*
|
|
93
93
|
* @example To update cross-Region aggregation settings
|
|
94
94
|
* ```javascript
|
|
95
95
|
* // The following example updates the cross-Region aggregation configuration. You use this operation to change the list of linked Regions and the treatment of new Regions. However, you cannot use this operation to change the aggregation Region.
|
|
96
96
|
* const input = {
|
|
97
|
-
*
|
|
98
|
-
*
|
|
99
|
-
*
|
|
97
|
+
* FindingAggregatorArn: "arn:aws:securityhub:us-east-1:123456789012:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
98
|
+
* RegionLinkingMode: "SPECIFIED_REGIONS",
|
|
99
|
+
* Regions: [
|
|
100
100
|
* "us-west-1",
|
|
101
101
|
* "us-west-2"
|
|
102
102
|
* ]
|
|
103
103
|
* };
|
|
104
104
|
* const command = new UpdateFindingAggregatorCommand(input);
|
|
105
105
|
* const response = await client.send(command);
|
|
106
|
-
* /* response
|
|
106
|
+
* /* response is
|
|
107
107
|
* {
|
|
108
|
-
*
|
|
109
|
-
*
|
|
110
|
-
*
|
|
111
|
-
*
|
|
108
|
+
* FindingAggregationRegion: "us-east-1",
|
|
109
|
+
* FindingAggregatorArn: "arn:aws:securityhub:us-east-1:123456789012:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
110
|
+
* RegionLinkingMode: "SPECIFIED_REGIONS",
|
|
111
|
+
* Regions: [
|
|
112
112
|
* "us-west-1",
|
|
113
113
|
* "us-west-2"
|
|
114
114
|
* ]
|
|
115
115
|
* }
|
|
116
116
|
* *\/
|
|
117
|
-
* // example id: to-update-cross-region-aggregation-settings-1678815536396
|
|
118
117
|
* ```
|
|
119
118
|
*
|
|
119
|
+
* @public
|
|
120
120
|
*/
|
|
121
121
|
export declare class UpdateFindingAggregatorCommand extends UpdateFindingAggregatorCommand_base {
|
|
122
122
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -349,6 +349,7 @@ declare const UpdateFindingsCommand_base: {
|
|
|
349
349
|
* @throws {@link SecurityHubServiceException}
|
|
350
350
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
351
351
|
*
|
|
352
|
+
*
|
|
352
353
|
* @public
|
|
353
354
|
*/
|
|
354
355
|
export declare class UpdateFindingsCommand extends UpdateFindingsCommand_base {
|
|
@@ -339,33 +339,36 @@ declare const UpdateInsightCommand_base: {
|
|
|
339
339
|
* @throws {@link SecurityHubServiceException}
|
|
340
340
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
341
341
|
*
|
|
342
|
-
*
|
|
342
|
+
*
|
|
343
343
|
* @example To update an insight
|
|
344
344
|
* ```javascript
|
|
345
345
|
* // The following example updates the specified Security Hub insight.
|
|
346
346
|
* const input = {
|
|
347
|
-
*
|
|
348
|
-
*
|
|
347
|
+
* Filters: {
|
|
348
|
+
* ResourceType: [
|
|
349
349
|
* {
|
|
350
|
-
*
|
|
351
|
-
*
|
|
350
|
+
* Comparison: "EQUALS",
|
|
351
|
+
* Value: "AwsIamRole"
|
|
352
352
|
* }
|
|
353
353
|
* ],
|
|
354
|
-
*
|
|
354
|
+
* SeverityLabel: [
|
|
355
355
|
* {
|
|
356
|
-
*
|
|
357
|
-
*
|
|
356
|
+
* Comparison: "EQUALS",
|
|
357
|
+
* Value: "HIGH"
|
|
358
358
|
* }
|
|
359
359
|
* ]
|
|
360
360
|
* },
|
|
361
|
-
*
|
|
362
|
-
*
|
|
361
|
+
* InsightArn: "arn:aws:securityhub:us-west-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
362
|
+
* Name: "High severity role findings"
|
|
363
363
|
* };
|
|
364
364
|
* const command = new UpdateInsightCommand(input);
|
|
365
|
-
* await client.send(command);
|
|
366
|
-
*
|
|
365
|
+
* const response = await client.send(command);
|
|
366
|
+
* /* response is
|
|
367
|
+
* { /* metadata only *\/ }
|
|
368
|
+
* *\/
|
|
367
369
|
* ```
|
|
368
370
|
*
|
|
371
|
+
* @public
|
|
369
372
|
*/
|
|
370
373
|
export declare class UpdateInsightCommand extends UpdateInsightCommand_base {
|
|
371
374
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -82,22 +82,25 @@ declare const UpdateOrganizationConfigurationCommand_base: {
|
|
|
82
82
|
* @throws {@link SecurityHubServiceException}
|
|
83
83
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
84
84
|
*
|
|
85
|
-
*
|
|
85
|
+
*
|
|
86
86
|
* @example To update organization configuration
|
|
87
87
|
* ```javascript
|
|
88
88
|
* // This operation updates the way your organization is configured in Security Hub. Only a Security Hub administrator account can invoke this operation.
|
|
89
89
|
* const input = {
|
|
90
|
-
*
|
|
91
|
-
*
|
|
92
|
-
*
|
|
93
|
-
*
|
|
90
|
+
* AutoEnable: false,
|
|
91
|
+
* AutoEnableStandards: "NONE",
|
|
92
|
+
* OrganizationConfiguration: {
|
|
93
|
+
* ConfigurationType: "CENTRAL"
|
|
94
94
|
* }
|
|
95
95
|
* };
|
|
96
96
|
* const command = new UpdateOrganizationConfigurationCommand(input);
|
|
97
|
-
* await client.send(command);
|
|
98
|
-
*
|
|
97
|
+
* const response = await client.send(command);
|
|
98
|
+
* /* response is
|
|
99
|
+
* { /* metadata only *\/ }
|
|
100
|
+
* *\/
|
|
99
101
|
* ```
|
|
100
102
|
*
|
|
103
|
+
* @public
|
|
101
104
|
*/
|
|
102
105
|
export declare class UpdateOrganizationConfigurationCommand extends UpdateOrganizationConfigurationCommand_base {
|
|
103
106
|
/** @internal type navigation helper, not in runtime. */
|