@aws-sdk/client-securityhub 3.775.0 → 3.782.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-types/commands/AcceptAdministratorInvitationCommand.d.ts +8 -5
- package/dist-types/commands/AcceptInvitationCommand.d.ts +1 -0
- package/dist-types/commands/BatchDeleteAutomationRulesCommand.d.ts +9 -9
- package/dist-types/commands/BatchDisableStandardsCommand.d.ts +9 -9
- package/dist-types/commands/BatchEnableStandardsCommand.d.ts +10 -10
- package/dist-types/commands/BatchGetAutomationRulesCommand.d.ts +49 -49
- package/dist-types/commands/BatchGetConfigurationPolicyAssociationsCommand.d.ts +22 -22
- package/dist-types/commands/BatchGetSecurityControlsCommand.d.ts +33 -33
- package/dist-types/commands/BatchGetStandardsControlAssociationsCommand.d.ts +1 -50
- package/dist-types/commands/BatchImportFindingsCommand.d.ts +26 -26
- package/dist-types/commands/BatchUpdateAutomationRulesCommand.d.ts +10 -10
- package/dist-types/commands/BatchUpdateFindingsCommand.d.ts +30 -30
- package/dist-types/commands/BatchUpdateStandardsControlAssociationsCommand.d.ts +20 -20
- package/dist-types/commands/CreateActionTargetCommand.d.ts +7 -7
- package/dist-types/commands/CreateAutomationRuleCommand.d.ts +35 -35
- package/dist-types/commands/CreateConfigurationPolicyCommand.d.ts +37 -37
- package/dist-types/commands/CreateFindingAggregatorCommand.d.ts +9 -9
- package/dist-types/commands/CreateInsightCommand.d.ts +13 -13
- package/dist-types/commands/CreateMembersCommand.d.ts +7 -7
- package/dist-types/commands/DeclineInvitationsCommand.d.ts +5 -5
- package/dist-types/commands/DeleteActionTargetCommand.d.ts +5 -5
- package/dist-types/commands/DeleteConfigurationPolicyCommand.d.ts +7 -4
- package/dist-types/commands/DeleteFindingAggregatorCommand.d.ts +7 -4
- package/dist-types/commands/DeleteInsightCommand.d.ts +5 -5
- package/dist-types/commands/DeleteInvitationsCommand.d.ts +5 -5
- package/dist-types/commands/DeleteMembersCommand.d.ts +5 -5
- package/dist-types/commands/DescribeActionTargetsCommand.d.ts +8 -8
- package/dist-types/commands/DescribeHubCommand.d.ts +8 -8
- package/dist-types/commands/DescribeOrganizationConfigurationCommand.d.ts +10 -10
- package/dist-types/commands/DescribeProductsCommand.d.ts +17 -17
- package/dist-types/commands/DescribeStandardsCommand.d.ts +21 -21
- package/dist-types/commands/DescribeStandardsControlsCommand.d.ts +1 -46
- package/dist-types/commands/DisableImportFindingsForProductCommand.d.ts +7 -4
- package/dist-types/commands/DisableOrganizationAdminAccountCommand.d.ts +7 -4
- package/dist-types/commands/DisableSecurityHubCommand.d.ts +7 -4
- package/dist-types/commands/DisassociateFromAdministratorAccountCommand.d.ts +7 -4
- package/dist-types/commands/DisassociateFromMasterAccountCommand.d.ts +1 -0
- package/dist-types/commands/DisassociateMembersCommand.d.ts +7 -4
- package/dist-types/commands/EnableImportFindingsForProductCommand.d.ts +5 -5
- package/dist-types/commands/EnableOrganizationAdminAccountCommand.d.ts +7 -4
- package/dist-types/commands/EnableSecurityHubCommand.d.ts +9 -6
- package/dist-types/commands/GetAdministratorAccountCommand.d.ts +1 -19
- package/dist-types/commands/GetConfigurationPolicyAssociationCommand.d.ts +12 -12
- package/dist-types/commands/GetConfigurationPolicyCommand.d.ts +23 -23
- package/dist-types/commands/GetEnabledStandardsCommand.d.ts +9 -9
- package/dist-types/commands/GetFindingAggregatorCommand.d.ts +8 -8
- package/dist-types/commands/GetFindingHistoryCommand.d.ts +1 -42
- package/dist-types/commands/GetFindingsCommand.d.ts +63 -63
- package/dist-types/commands/GetInsightResultsCommand.d.ts +12 -12
- package/dist-types/commands/GetInsightsCommand.d.ts +15 -15
- package/dist-types/commands/GetInvitationsCountCommand.d.ts +7 -7
- package/dist-types/commands/GetMasterAccountCommand.d.ts +1 -0
- package/dist-types/commands/GetMembersCommand.d.ts +1 -37
- package/dist-types/commands/GetSecurityControlDefinitionCommand.d.ts +19 -19
- package/dist-types/commands/InviteMembersCommand.d.ts +5 -5
- package/dist-types/commands/ListAutomationRulesCommand.d.ts +23 -23
- package/dist-types/commands/ListConfigurationPoliciesCommand.d.ts +13 -13
- package/dist-types/commands/ListConfigurationPolicyAssociationsCommand.d.ts +15 -15
- package/dist-types/commands/ListEnabledProductsForImportCommand.d.ts +5 -5
- package/dist-types/commands/ListFindingAggregatorsCommand.d.ts +6 -6
- package/dist-types/commands/ListInvitationsCommand.d.ts +1 -21
- package/dist-types/commands/ListMembersCommand.d.ts +1 -31
- package/dist-types/commands/ListOrganizationAdminAccountsCommand.d.ts +7 -7
- package/dist-types/commands/ListSecurityControlDefinitionsCommand.d.ts +28 -28
- package/dist-types/commands/ListStandardsControlAssociationsCommand.d.ts +1 -44
- package/dist-types/commands/ListTagsForResourceCommand.d.ts +7 -7
- package/dist-types/commands/StartConfigurationPolicyAssociationCommand.d.ts +13 -13
- package/dist-types/commands/StartConfigurationPolicyDisassociationCommand.d.ts +9 -6
- package/dist-types/commands/TagResourceCommand.d.ts +10 -7
- package/dist-types/commands/UntagResourceCommand.d.ts +8 -5
- package/dist-types/commands/UpdateActionTargetCommand.d.ts +9 -6
- package/dist-types/commands/UpdateConfigurationPolicyCommand.d.ts +39 -39
- package/dist-types/commands/UpdateFindingAggregatorCommand.d.ts +10 -10
- package/dist-types/commands/UpdateFindingsCommand.d.ts +1 -0
- package/dist-types/commands/UpdateInsightCommand.d.ts +15 -12
- package/dist-types/commands/UpdateOrganizationConfigurationCommand.d.ts +10 -7
- package/dist-types/commands/UpdateSecurityControlCommand.d.ts +13 -10
- package/dist-types/commands/UpdateSecurityHubConfigurationCommand.d.ts +8 -5
- package/dist-types/commands/UpdateStandardsControlCommand.d.ts +9 -6
- package/package.json +5 -5
|
@@ -69,23 +69,23 @@ declare const DeleteActionTargetCommand_base: {
|
|
|
69
69
|
* @throws {@link SecurityHubServiceException}
|
|
70
70
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
71
71
|
*
|
|
72
|
-
*
|
|
72
|
+
*
|
|
73
73
|
* @example To delete a custom action target
|
|
74
74
|
* ```javascript
|
|
75
75
|
* // The following example deletes a custom action target that triggers target actions in Amazon CloudWatch Events. Deleting a custom action target doesn't affect findings or insights that were already sent to CloudWatch Events based on the custom action.
|
|
76
76
|
* const input = {
|
|
77
|
-
*
|
|
77
|
+
* ActionTargetArn: "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
|
|
78
78
|
* };
|
|
79
79
|
* const command = new DeleteActionTargetCommand(input);
|
|
80
80
|
* const response = await client.send(command);
|
|
81
|
-
* /* response
|
|
81
|
+
* /* response is
|
|
82
82
|
* {
|
|
83
|
-
*
|
|
83
|
+
* ActionTargetArn: "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
|
|
84
84
|
* }
|
|
85
85
|
* *\/
|
|
86
|
-
* // example id: to-delete-a-custom-action-target-1675449272793
|
|
87
86
|
* ```
|
|
88
87
|
*
|
|
88
|
+
* @public
|
|
89
89
|
*/
|
|
90
90
|
export declare class DeleteActionTargetCommand extends DeleteActionTargetCommand_base {
|
|
91
91
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -79,18 +79,21 @@ declare const DeleteConfigurationPolicyCommand_base: {
|
|
|
79
79
|
* @throws {@link SecurityHubServiceException}
|
|
80
80
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
81
81
|
*
|
|
82
|
-
*
|
|
82
|
+
*
|
|
83
83
|
* @example To delete a configuration policy
|
|
84
84
|
* ```javascript
|
|
85
85
|
* // This operation deletes the specified configuration policy.
|
|
86
86
|
* const input = {
|
|
87
|
-
*
|
|
87
|
+
* Identifier: "arn:aws:securityhub:us-east-1:123456789012:configuration-policy/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
88
88
|
* };
|
|
89
89
|
* const command = new DeleteConfigurationPolicyCommand(input);
|
|
90
|
-
* await client.send(command);
|
|
91
|
-
*
|
|
90
|
+
* const response = await client.send(command);
|
|
91
|
+
* /* response is
|
|
92
|
+
* { /* metadata only *\/ }
|
|
93
|
+
* *\/
|
|
92
94
|
* ```
|
|
93
95
|
*
|
|
96
|
+
* @public
|
|
94
97
|
*/
|
|
95
98
|
export declare class DeleteConfigurationPolicyCommand extends DeleteConfigurationPolicyCommand_base {
|
|
96
99
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -79,18 +79,21 @@ declare const DeleteFindingAggregatorCommand_base: {
|
|
|
79
79
|
* @throws {@link SecurityHubServiceException}
|
|
80
80
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
81
81
|
*
|
|
82
|
-
*
|
|
82
|
+
*
|
|
83
83
|
* @example To delete a finding aggregator
|
|
84
84
|
* ```javascript
|
|
85
85
|
* // The following example deletes a finding aggregator in Security Hub. Deleting the finding aggregator stops cross-Region aggregation. This operation produces no output.
|
|
86
86
|
* const input = {
|
|
87
|
-
*
|
|
87
|
+
* FindingAggregatorArn: "arn:aws:securityhub:us-east-1:123456789012:finding-aggregator/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
88
88
|
* };
|
|
89
89
|
* const command = new DeleteFindingAggregatorCommand(input);
|
|
90
|
-
* await client.send(command);
|
|
91
|
-
*
|
|
90
|
+
* const response = await client.send(command);
|
|
91
|
+
* /* response is
|
|
92
|
+
* { /* metadata only *\/ }
|
|
93
|
+
* *\/
|
|
92
94
|
* ```
|
|
93
95
|
*
|
|
96
|
+
* @public
|
|
94
97
|
*/
|
|
95
98
|
export declare class DeleteFindingAggregatorCommand extends DeleteFindingAggregatorCommand_base {
|
|
96
99
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -71,23 +71,23 @@ declare const DeleteInsightCommand_base: {
|
|
|
71
71
|
* @throws {@link SecurityHubServiceException}
|
|
72
72
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
73
73
|
*
|
|
74
|
-
*
|
|
74
|
+
*
|
|
75
75
|
* @example To delete a custom insight
|
|
76
76
|
* ```javascript
|
|
77
77
|
* // The following example deletes a custom insight in Security Hub.
|
|
78
78
|
* const input = {
|
|
79
|
-
*
|
|
79
|
+
* InsightArn: "arn:aws:securityhub:us-west-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
80
80
|
* };
|
|
81
81
|
* const command = new DeleteInsightCommand(input);
|
|
82
82
|
* const response = await client.send(command);
|
|
83
|
-
* /* response
|
|
83
|
+
* /* response is
|
|
84
84
|
* {
|
|
85
|
-
*
|
|
85
|
+
* InsightArn: "arn:aws:securityhub:eu-central-1:123456789012:insight/123456789012/custom/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111"
|
|
86
86
|
* }
|
|
87
87
|
* *\/
|
|
88
|
-
* // example id: to-delete-a-custom-insight-1675702697204
|
|
89
88
|
* ```
|
|
90
89
|
*
|
|
90
|
+
* @public
|
|
91
91
|
*/
|
|
92
92
|
export declare class DeleteInsightCommand extends DeleteInsightCommand_base {
|
|
93
93
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -86,25 +86,25 @@ declare const DeleteInvitationsCommand_base: {
|
|
|
86
86
|
* @throws {@link SecurityHubServiceException}
|
|
87
87
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
88
88
|
*
|
|
89
|
-
*
|
|
89
|
+
*
|
|
90
90
|
* @example To delete a custom insight
|
|
91
91
|
* ```javascript
|
|
92
92
|
* // The following example deletes an invitation sent by the Security Hub administrator account to a prospective member account. This operation is used only for invitations sent to accounts that aren't part of an organization. Organization accounts don't receive invitations.
|
|
93
93
|
* const input = {
|
|
94
|
-
*
|
|
94
|
+
* AccountIds: [
|
|
95
95
|
* "123456789012"
|
|
96
96
|
* ]
|
|
97
97
|
* };
|
|
98
98
|
* const command = new DeleteInvitationsCommand(input);
|
|
99
99
|
* const response = await client.send(command);
|
|
100
|
-
* /* response
|
|
100
|
+
* /* response is
|
|
101
101
|
* {
|
|
102
|
-
*
|
|
102
|
+
* UnprocessedAccounts: []
|
|
103
103
|
* }
|
|
104
104
|
* *\/
|
|
105
|
-
* // example id: to-delete-a-custom-insight-1675702697204
|
|
106
105
|
* ```
|
|
107
106
|
*
|
|
107
|
+
* @public
|
|
108
108
|
*/
|
|
109
109
|
export declare class DeleteInvitationsCommand extends DeleteInvitationsCommand_base {
|
|
110
110
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -80,26 +80,26 @@ declare const DeleteMembersCommand_base: {
|
|
|
80
80
|
* @throws {@link SecurityHubServiceException}
|
|
81
81
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
82
82
|
*
|
|
83
|
-
*
|
|
83
|
+
*
|
|
84
84
|
* @example To delete a member account
|
|
85
85
|
* ```javascript
|
|
86
86
|
* // The following example deletes the specified member account from Security Hub. This operation can be used to delete member accounts that are part of an organization or that were invited manually.
|
|
87
87
|
* const input = {
|
|
88
|
-
*
|
|
88
|
+
* AccountIds: [
|
|
89
89
|
* "123456789111",
|
|
90
90
|
* "123456789222"
|
|
91
91
|
* ]
|
|
92
92
|
* };
|
|
93
93
|
* const command = new DeleteMembersCommand(input);
|
|
94
94
|
* const response = await client.send(command);
|
|
95
|
-
* /* response
|
|
95
|
+
* /* response is
|
|
96
96
|
* {
|
|
97
|
-
*
|
|
97
|
+
* UnprocessedAccounts: []
|
|
98
98
|
* }
|
|
99
99
|
* *\/
|
|
100
|
-
* // example id: to-delete-a-member-account-1675883040513
|
|
101
100
|
* ```
|
|
102
101
|
*
|
|
102
|
+
* @public
|
|
103
103
|
*/
|
|
104
104
|
export declare class DeleteMembersCommand extends DeleteMembersCommand_base {
|
|
105
105
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -78,31 +78,31 @@ declare const DescribeActionTargetsCommand_base: {
|
|
|
78
78
|
* @throws {@link SecurityHubServiceException}
|
|
79
79
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
80
80
|
*
|
|
81
|
-
*
|
|
81
|
+
*
|
|
82
82
|
* @example To return custom action targets
|
|
83
83
|
* ```javascript
|
|
84
84
|
* // The following example returns a list of custom action targets. You use custom actions on findings and insights in Security Hub to trigger target actions in Amazon CloudWatch Events.
|
|
85
85
|
* const input = {
|
|
86
|
-
*
|
|
86
|
+
* ActionTargetArns: [
|
|
87
87
|
* "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation"
|
|
88
88
|
* ]
|
|
89
89
|
* };
|
|
90
90
|
* const command = new DescribeActionTargetsCommand(input);
|
|
91
91
|
* const response = await client.send(command);
|
|
92
|
-
* /* response
|
|
92
|
+
* /* response is
|
|
93
93
|
* {
|
|
94
|
-
*
|
|
94
|
+
* ActionTargets: [
|
|
95
95
|
* {
|
|
96
|
-
*
|
|
97
|
-
*
|
|
98
|
-
*
|
|
96
|
+
* ActionTargetArn: "arn:aws:securityhub:us-west-1:123456789012:action/custom/Remediation",
|
|
97
|
+
* Description: "Action to send the finding for remediation tracking",
|
|
98
|
+
* Name: "Send to remediation"
|
|
99
99
|
* }
|
|
100
100
|
* ]
|
|
101
101
|
* }
|
|
102
102
|
* *\/
|
|
103
|
-
* // example id: to-return-custom-action-targets-1675883682038
|
|
104
103
|
* ```
|
|
105
104
|
*
|
|
105
|
+
* @public
|
|
106
106
|
*/
|
|
107
107
|
export declare class DescribeActionTargetsCommand extends DescribeActionTargetsCommand_base {
|
|
108
108
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -75,26 +75,26 @@ declare const DescribeHubCommand_base: {
|
|
|
75
75
|
* @throws {@link SecurityHubServiceException}
|
|
76
76
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
77
77
|
*
|
|
78
|
-
*
|
|
78
|
+
*
|
|
79
79
|
* @example To return details about Hub resource
|
|
80
80
|
* ```javascript
|
|
81
81
|
* // The following example returns details about the Hub resource in the calling account. The Hub resource represents the implementation of the AWS Security Hub service in the calling account.
|
|
82
82
|
* const input = {
|
|
83
|
-
*
|
|
83
|
+
* HubArn: "arn:aws:securityhub:us-west-1:123456789012:hub/default"
|
|
84
84
|
* };
|
|
85
85
|
* const command = new DescribeHubCommand(input);
|
|
86
86
|
* const response = await client.send(command);
|
|
87
|
-
* /* response
|
|
87
|
+
* /* response is
|
|
88
88
|
* {
|
|
89
|
-
*
|
|
90
|
-
*
|
|
91
|
-
*
|
|
92
|
-
*
|
|
89
|
+
* AutoEnableControls: true,
|
|
90
|
+
* ControlFindingGenerator: "SECURITY_CONTROL",
|
|
91
|
+
* HubArn: "arn:aws:securityhub:us-west-1:123456789012:hub/default",
|
|
92
|
+
* SubscribedAt: "2019-11-19T23:15:10.046Z"
|
|
93
93
|
* }
|
|
94
94
|
* *\/
|
|
95
|
-
* // example id: to-return-details-about-hub-resource-1675884542597
|
|
96
95
|
* ```
|
|
97
96
|
*
|
|
97
|
+
* @public
|
|
98
98
|
*/
|
|
99
99
|
export declare class DescribeHubCommand extends DescribeHubCommand_base {
|
|
100
100
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -74,27 +74,27 @@ declare const DescribeOrganizationConfigurationCommand_base: {
|
|
|
74
74
|
* @throws {@link SecurityHubServiceException}
|
|
75
75
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
76
76
|
*
|
|
77
|
-
*
|
|
77
|
+
*
|
|
78
78
|
* @example To get information about organization configuration
|
|
79
79
|
* ```javascript
|
|
80
80
|
* // This operation provides information about the way your organization is configured in Security Hub. Only a Security Hub administrator account can invoke this operation.
|
|
81
|
-
* const input = {};
|
|
81
|
+
* const input = { /* empty *\/ };
|
|
82
82
|
* const command = new DescribeOrganizationConfigurationCommand(input);
|
|
83
83
|
* const response = await client.send(command);
|
|
84
|
-
* /* response
|
|
84
|
+
* /* response is
|
|
85
85
|
* {
|
|
86
|
-
*
|
|
87
|
-
*
|
|
88
|
-
*
|
|
89
|
-
*
|
|
90
|
-
*
|
|
91
|
-
*
|
|
86
|
+
* AutoEnable: false,
|
|
87
|
+
* AutoEnableStandards: "NONE",
|
|
88
|
+
* MemberAccountLimitReached: false,
|
|
89
|
+
* OrganizationConfiguration: {
|
|
90
|
+
* ConfigurationType: "CENTRAL",
|
|
91
|
+
* Status: "ENABLED"
|
|
92
92
|
* }
|
|
93
93
|
* }
|
|
94
94
|
* *\/
|
|
95
|
-
* // example id: to-get-information-about-organization-configuration-1676059786304
|
|
96
95
|
* ```
|
|
97
96
|
*
|
|
97
|
+
* @public
|
|
98
98
|
*/
|
|
99
99
|
export declare class DescribeOrganizationConfigurationCommand extends DescribeOrganizationConfigurationCommand_base {
|
|
100
100
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -91,46 +91,46 @@ declare const DescribeProductsCommand_base: {
|
|
|
91
91
|
* @throws {@link SecurityHubServiceException}
|
|
92
92
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
93
93
|
*
|
|
94
|
-
*
|
|
94
|
+
*
|
|
95
95
|
* @example To get information about Security Hub integrations
|
|
96
96
|
* ```javascript
|
|
97
97
|
* // The following example returns details about AWS services and third-party products that Security Hub integrates with.
|
|
98
98
|
* const input = {
|
|
99
|
-
*
|
|
100
|
-
*
|
|
101
|
-
*
|
|
99
|
+
* MaxResults: 1,
|
|
100
|
+
* NextToken: "NULL",
|
|
101
|
+
* ProductArn: "arn:aws:securityhub:us-east-1:517716713836:product/crowdstrike/crowdstrike-falcon"
|
|
102
102
|
* };
|
|
103
103
|
* const command = new DescribeProductsCommand(input);
|
|
104
104
|
* const response = await client.send(command);
|
|
105
|
-
* /* response
|
|
105
|
+
* /* response is
|
|
106
106
|
* {
|
|
107
|
-
*
|
|
108
|
-
*
|
|
107
|
+
* NextToken: "U2FsdGVkX18vvPlOqb7RDrWRWVFBJI46MOIAb+nZmRJmR15NoRi2gm13sdQEn3O/pq/78dGs+bKpgA+7HMPHO0qX33/zoRI+uIG/F9yLNhcOrOWzFUdy36JcXLQji3Rpnn/cD1SVkGA98qI3zPOSDg==",
|
|
108
|
+
* Products: [
|
|
109
109
|
* {
|
|
110
|
-
*
|
|
111
|
-
*
|
|
110
|
+
* ActivationUrl: "https://falcon.crowdstrike.com/support/documentation",
|
|
111
|
+
* Categories: [
|
|
112
112
|
* "Endpoint Detection and Response (EDR)",
|
|
113
113
|
* "AV Scanning and Sandboxing",
|
|
114
114
|
* "Threat Intelligence Feeds and Reports",
|
|
115
115
|
* "Endpoint Forensics",
|
|
116
116
|
* "Network Forensics"
|
|
117
117
|
* ],
|
|
118
|
-
*
|
|
119
|
-
*
|
|
120
|
-
*
|
|
118
|
+
* CompanyName: "CrowdStrike",
|
|
119
|
+
* Description: "CrowdStrike Falcon's single lightweight sensor unifies next-gen antivirus, endpoint detection and response, and 24/7 managed hunting, via the cloud.",
|
|
120
|
+
* IntegrationTypes: [
|
|
121
121
|
* "SEND_FINDINGS_TO_SECURITY_HUB"
|
|
122
122
|
* ],
|
|
123
|
-
*
|
|
124
|
-
*
|
|
125
|
-
*
|
|
126
|
-
*
|
|
123
|
+
* MarketplaceUrl: "https://aws.amazon.com/marketplace/seller-profile?id=a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
|
|
124
|
+
* ProductArn: "arn:aws:securityhub:us-east-1:517716713836:product/crowdstrike/crowdstrike-falcon",
|
|
125
|
+
* ProductName: "CrowdStrike Falcon",
|
|
126
|
+
* ProductSubscriptionResourcePolicy: `{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"123456789333"},"Action":["securityhub:BatchImportFindings"],"Resource":"arn:aws:securityhub:us-west-1:123456789012:product-subscription/crowdstrike/crowdstrike-falcon","Condition":{"StringEquals":{"securityhub:TargetAccount":"123456789012"}}},{"Effect":"Allow","Principal":{"AWS":"123456789012"},"Action":["securityhub:BatchImportFindings"],"Resource":"arn:aws:securityhub:us-west-1:123456789333:product/crowdstrike/crowdstrike-falcon","Condition":{"StringEquals":{"securityhub:TargetAccount":"123456789012"}}}]}`
|
|
127
127
|
* }
|
|
128
128
|
* ]
|
|
129
129
|
* }
|
|
130
130
|
* *\/
|
|
131
|
-
* // example id: to-get-information-about-security-hub-integrations-1676061228533
|
|
132
131
|
* ```
|
|
133
132
|
*
|
|
133
|
+
* @public
|
|
134
134
|
*/
|
|
135
135
|
export declare class DescribeProductsCommand extends DescribeProductsCommand_base {
|
|
136
136
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -78,46 +78,46 @@ declare const DescribeStandardsCommand_base: {
|
|
|
78
78
|
* @throws {@link SecurityHubServiceException}
|
|
79
79
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
80
80
|
*
|
|
81
|
-
*
|
|
81
|
+
*
|
|
82
82
|
* @example To get available Security Hub standards
|
|
83
83
|
* ```javascript
|
|
84
84
|
* // The following example returns a list of available security standards in Security Hub.
|
|
85
|
-
* const input = {};
|
|
85
|
+
* const input = { /* empty *\/ };
|
|
86
86
|
* const command = new DescribeStandardsCommand(input);
|
|
87
87
|
* const response = await client.send(command);
|
|
88
|
-
* /* response
|
|
88
|
+
* /* response is
|
|
89
89
|
* {
|
|
90
|
-
*
|
|
90
|
+
* Standards: [
|
|
91
91
|
* {
|
|
92
|
-
*
|
|
93
|
-
*
|
|
94
|
-
*
|
|
95
|
-
*
|
|
92
|
+
* Description: "The AWS Foundational Security Best Practices standard is a set of automated security checks that detect when AWS accounts and deployed resources do not align to security best practices. The standard is defined by AWS security experts. This curated set of controls helps improve your security posture in AWS, and cover AWS's most popular and foundational services.",
|
|
93
|
+
* EnabledByDefault: true,
|
|
94
|
+
* Name: "AWS Foundational Security Best Practices v1.0.0",
|
|
95
|
+
* StandardsArn: "arn:aws:securityhub:us-west-1::standards/aws-foundational-security-best-practices/v/1.0.0"
|
|
96
96
|
* },
|
|
97
97
|
* {
|
|
98
|
-
*
|
|
99
|
-
*
|
|
100
|
-
*
|
|
101
|
-
*
|
|
98
|
+
* Description: "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.",
|
|
99
|
+
* EnabledByDefault: true,
|
|
100
|
+
* Name: "CIS AWS Foundations Benchmark v1.2.0",
|
|
101
|
+
* StandardsArn: "arn:aws:securityhub:us-west-1::ruleset/cis-aws-foundations-benchmark/v/1.2.0"
|
|
102
102
|
* },
|
|
103
103
|
* {
|
|
104
|
-
*
|
|
105
|
-
*
|
|
106
|
-
*
|
|
107
|
-
*
|
|
104
|
+
* Description: "The Center for Internet Security (CIS) AWS Foundations Benchmark v1.4.0 is a set of security configuration best practices for AWS. This Security Hub standard automatically checks for your compliance readiness against a subset of CIS requirements.",
|
|
105
|
+
* EnabledByDefault: false,
|
|
106
|
+
* Name: "CIS AWS Foundations Benchmark v1.4.0",
|
|
107
|
+
* StandardsArn: "arn:aws::securityhub:us-west-1::standards/cis-aws-foundations-benchmark/v/1.4.0"
|
|
108
108
|
* },
|
|
109
109
|
* {
|
|
110
|
-
*
|
|
111
|
-
*
|
|
112
|
-
*
|
|
113
|
-
*
|
|
110
|
+
* Description: "The Payment Card Industry Data Security Standard (PCI DSS) v3.2.1 is an information security standard for entities that store, process, and/or transmit cardholder data. This Security Hub standard automatically checks for your compliance readiness against a subset of PCI DSS requirements.",
|
|
111
|
+
* EnabledByDefault: false,
|
|
112
|
+
* Name: "PCI DSS v3.2.1",
|
|
113
|
+
* StandardsArn: "arn:aws:securityhub:us-west-1::standards/pci-dss/v/3.2.1"
|
|
114
114
|
* }
|
|
115
115
|
* ]
|
|
116
116
|
* }
|
|
117
117
|
* *\/
|
|
118
|
-
* // example id: to-get-available-security-hub-standards-1676307464661
|
|
119
118
|
* ```
|
|
120
119
|
*
|
|
120
|
+
* @public
|
|
121
121
|
*/
|
|
122
122
|
export declare class DescribeStandardsCommand extends DescribeStandardsCommand_base {
|
|
123
123
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -88,53 +88,8 @@ declare const DescribeStandardsControlsCommand_base: {
|
|
|
88
88
|
* @throws {@link SecurityHubServiceException}
|
|
89
89
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
90
90
|
*
|
|
91
|
-
* @public
|
|
92
|
-
* @example To get a list of controls for a security standard
|
|
93
|
-
* ```javascript
|
|
94
|
-
* // The following example returns a list of security controls and control details that apply to a specified security standard. The list includes controls that are enabled and disabled in the standard.
|
|
95
|
-
* const input = {
|
|
96
|
-
* "MaxResults": 2,
|
|
97
|
-
* "NextToken": "NULL",
|
|
98
|
-
* "StandardsSubscriptionArn": "arn:aws:securityhub:us-west-1:123456789012:subscription/pci-dss/v/3.2.1"
|
|
99
|
-
* };
|
|
100
|
-
* const command = new DescribeStandardsControlsCommand(input);
|
|
101
|
-
* const response = await client.send(command);
|
|
102
|
-
* /* response ==
|
|
103
|
-
* {
|
|
104
|
-
* "Controls": [
|
|
105
|
-
* {
|
|
106
|
-
* "ControlId": "PCI.AutoScaling.1",
|
|
107
|
-
* "ControlStatus": "ENABLED",
|
|
108
|
-
* "ControlStatusUpdatedAt": "2020-05-15T18:49:04.473000+00:00",
|
|
109
|
-
* "Description": "This AWS control checks whether your Auto Scaling groups that are associated with a load balancer are using Elastic Load Balancing health checks.",
|
|
110
|
-
* "RelatedRequirements": [
|
|
111
|
-
* "PCI DSS 2.2"
|
|
112
|
-
* ],
|
|
113
|
-
* "RemediationUrl": "https://docs.aws.amazon.com/console/securityhub/PCI.AutoScaling.1/remediation",
|
|
114
|
-
* "SeverityRating": "LOW",
|
|
115
|
-
* "StandardsControlArn": "arn:aws:securityhub:us-west-1:123456789012:control/pci-dss/v/3.2.1/PCI.AutoScaling.1",
|
|
116
|
-
* "Title": "Auto scaling groups associated with a load balancer should use health checks"
|
|
117
|
-
* },
|
|
118
|
-
* {
|
|
119
|
-
* "ControlId": "PCI.CW.1",
|
|
120
|
-
* "ControlStatus": "ENABLED",
|
|
121
|
-
* "ControlStatusUpdatedAt": "2020-05-15T18:49:04.498000+00:00",
|
|
122
|
-
* "Description": "This control checks for the CloudWatch metric filters using the following pattern { $.userIdentity.type = \"Root\" && $.userIdentity.invokedBy NOT EXISTS && $.eventType != \"AwsServiceEvent\" } It checks that the log group name is configured for use with active multi-region CloudTrail, that there is at least one Event Selector for a Trail with IncludeManagementEvents set to true and ReadWriteType set to All, and that there is at least one active subscriber to an SNS topic associated with the alarm.",
|
|
123
|
-
* "RelatedRequirements": [
|
|
124
|
-
* "PCI DSS 7.2.1"
|
|
125
|
-
* ],
|
|
126
|
-
* "RemediationUrl": "https://docs.aws.amazon.com/console/securityhub/PCI.CW.1/remediation",
|
|
127
|
-
* "SeverityRating": "MEDIUM",
|
|
128
|
-
* "StandardsControlArn": "arn:aws:securityhub:us-west-1:123456789012:control/pci-dss/v/3.2.1/PCI.CW.1",
|
|
129
|
-
* "Title": "A log metric filter and alarm should exist for usage of the \"root\" user"
|
|
130
|
-
* }
|
|
131
|
-
* ],
|
|
132
|
-
* "NextToken": "U2FsdGVkX1+eNkPoZHVl11ip5HUYQPWSWZGmftcmJiHL8JoKEsCDuaKayiPDyLK+LiTkShveoOdvfxXCkOBaGhohIXhsIedN+LSjQV/l7kfCfJcq4PziNC1N9xe9aq2pjlLVZnznTfSImrodT5bRNHe4fELCQq/z+5ka+5Lzmc11axcwTd5lKgQyQqmUVoeriHZhyIiBgWKf7oNYdBVG8OEortVWvSkoUTt+B2ThcnC7l43kI0UNxlkZ6sc64AsW"
|
|
133
|
-
* }
|
|
134
|
-
* *\/
|
|
135
|
-
* // example id: to-get-a-list-of-controls-for-a-security-standard-1676308027759
|
|
136
|
-
* ```
|
|
137
91
|
*
|
|
92
|
+
* @public
|
|
138
93
|
*/
|
|
139
94
|
export declare class DescribeStandardsControlsCommand extends DescribeStandardsControlsCommand_base {
|
|
140
95
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -70,18 +70,21 @@ declare const DisableImportFindingsForProductCommand_base: {
|
|
|
70
70
|
* @throws {@link SecurityHubServiceException}
|
|
71
71
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
72
72
|
*
|
|
73
|
-
*
|
|
73
|
+
*
|
|
74
74
|
* @example To end a Security Hub integration
|
|
75
75
|
* ```javascript
|
|
76
76
|
* // The following example ends an integration between Security Hub and the specified product that sends findings to Security Hub. After the integration ends, the product no longer sends findings to Security Hub.
|
|
77
77
|
* const input = {
|
|
78
|
-
*
|
|
78
|
+
* ProductSubscriptionArn: "arn:aws:securityhub:us-east-1:517716713836:product/crowdstrike/crowdstrike-falcon"
|
|
79
79
|
* };
|
|
80
80
|
* const command = new DisableImportFindingsForProductCommand(input);
|
|
81
|
-
* await client.send(command);
|
|
82
|
-
*
|
|
81
|
+
* const response = await client.send(command);
|
|
82
|
+
* /* response is
|
|
83
|
+
* { /* metadata only *\/ }
|
|
84
|
+
* *\/
|
|
83
85
|
* ```
|
|
84
86
|
*
|
|
87
|
+
* @public
|
|
85
88
|
*/
|
|
86
89
|
export declare class DisableImportFindingsForProductCommand extends DisableImportFindingsForProductCommand_base {
|
|
87
90
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -70,18 +70,21 @@ declare const DisableOrganizationAdminAccountCommand_base: {
|
|
|
70
70
|
* @throws {@link SecurityHubServiceException}
|
|
71
71
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
72
72
|
*
|
|
73
|
-
*
|
|
73
|
+
*
|
|
74
74
|
* @example To remove a Security Hub administrator account
|
|
75
75
|
* ```javascript
|
|
76
76
|
* // The following example removes the Security Hub administrator account in the Region from which the operation was executed. This operation doesn't remove the delegated administrator account in AWS Organizations.
|
|
77
77
|
* const input = {
|
|
78
|
-
*
|
|
78
|
+
* AdminAccountId: "123456789012"
|
|
79
79
|
* };
|
|
80
80
|
* const command = new DisableOrganizationAdminAccountCommand(input);
|
|
81
|
-
* await client.send(command);
|
|
82
|
-
*
|
|
81
|
+
* const response = await client.send(command);
|
|
82
|
+
* /* response is
|
|
83
|
+
* { /* metadata only *\/ }
|
|
84
|
+
* *\/
|
|
83
85
|
* ```
|
|
84
86
|
*
|
|
87
|
+
* @public
|
|
85
88
|
*/
|
|
86
89
|
export declare class DisableOrganizationAdminAccountCommand extends DisableOrganizationAdminAccountCommand_base {
|
|
87
90
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -73,16 +73,19 @@ declare const DisableSecurityHubCommand_base: {
|
|
|
73
73
|
* @throws {@link SecurityHubServiceException}
|
|
74
74
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
75
75
|
*
|
|
76
|
-
*
|
|
76
|
+
*
|
|
77
77
|
* @example To deactivate Security Hub
|
|
78
78
|
* ```javascript
|
|
79
79
|
* // The following example deactivates Security Hub for the current account and Region.
|
|
80
|
-
* const input = {};
|
|
80
|
+
* const input = { /* empty *\/ };
|
|
81
81
|
* const command = new DisableSecurityHubCommand(input);
|
|
82
|
-
* await client.send(command);
|
|
83
|
-
*
|
|
82
|
+
* const response = await client.send(command);
|
|
83
|
+
* /* response is
|
|
84
|
+
* { /* metadata only *\/ }
|
|
85
|
+
* *\/
|
|
84
86
|
* ```
|
|
85
87
|
*
|
|
88
|
+
* @public
|
|
86
89
|
*/
|
|
87
90
|
export declare class DisableSecurityHubCommand extends DisableSecurityHubCommand_base {
|
|
88
91
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -71,16 +71,19 @@ declare const DisassociateFromAdministratorAccountCommand_base: {
|
|
|
71
71
|
* @throws {@link SecurityHubServiceException}
|
|
72
72
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
73
73
|
*
|
|
74
|
-
*
|
|
74
|
+
*
|
|
75
75
|
* @example To disassociate requesting account from administrator account
|
|
76
76
|
* ```javascript
|
|
77
77
|
* // The following example dissociates the requesting account from its associated administrator account.
|
|
78
|
-
* const input = {};
|
|
78
|
+
* const input = { /* empty *\/ };
|
|
79
79
|
* const command = new DisassociateFromAdministratorAccountCommand(input);
|
|
80
|
-
* await client.send(command);
|
|
81
|
-
*
|
|
80
|
+
* const response = await client.send(command);
|
|
81
|
+
* /* response is
|
|
82
|
+
* { /* metadata only *\/ }
|
|
83
|
+
* *\/
|
|
82
84
|
* ```
|
|
83
85
|
*
|
|
86
|
+
* @public
|
|
84
87
|
*/
|
|
85
88
|
export declare class DisassociateFromAdministratorAccountCommand extends DisassociateFromAdministratorAccountCommand_base {
|
|
86
89
|
/** @internal type navigation helper, not in runtime. */
|
|
@@ -75,6 +75,7 @@ declare const DisassociateFromMasterAccountCommand_base: {
|
|
|
75
75
|
* @throws {@link SecurityHubServiceException}
|
|
76
76
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
77
77
|
*
|
|
78
|
+
*
|
|
78
79
|
* @public
|
|
79
80
|
*/
|
|
80
81
|
export declare class DisassociateFromMasterAccountCommand extends DisassociateFromMasterAccountCommand_base {
|
|
@@ -76,21 +76,24 @@ declare const DisassociateMembersCommand_base: {
|
|
|
76
76
|
* @throws {@link SecurityHubServiceException}
|
|
77
77
|
* <p>Base exception class for all service exceptions from SecurityHub service.</p>
|
|
78
78
|
*
|
|
79
|
-
*
|
|
79
|
+
*
|
|
80
80
|
* @example To disassociate member accounts from administrator account
|
|
81
81
|
* ```javascript
|
|
82
82
|
* // The following example dissociates the specified member accounts from the associated administrator account.
|
|
83
83
|
* const input = {
|
|
84
|
-
*
|
|
84
|
+
* AccountIds: [
|
|
85
85
|
* "123456789012",
|
|
86
86
|
* "111122223333"
|
|
87
87
|
* ]
|
|
88
88
|
* };
|
|
89
89
|
* const command = new DisassociateMembersCommand(input);
|
|
90
|
-
* await client.send(command);
|
|
91
|
-
*
|
|
90
|
+
* const response = await client.send(command);
|
|
91
|
+
* /* response is
|
|
92
|
+
* { /* metadata only *\/ }
|
|
93
|
+
* *\/
|
|
92
94
|
* ```
|
|
93
95
|
*
|
|
96
|
+
* @public
|
|
94
97
|
*/
|
|
95
98
|
export declare class DisassociateMembersCommand extends DisassociateMembersCommand_base {
|
|
96
99
|
/** @internal type navigation helper, not in runtime. */
|