@aws-sdk/client-securitylake 3.379.1 → 3.385.0

package/dist-types/models/models_0.d.ts

@@ -11,6 +11,7 @@ export declare class AccessDeniedException extends __BaseException {
     readonly name: "AccessDeniedException";
     readonly $fault: "client";
     /**
+     * @public
      * <p>A coded string to provide more information about the access denied exception. You can use the error code to check the exception type.</p>
      */
     errorCode?: string;
@@ -37,10 +38,12 @@ export type AccessType = (typeof AccessType)[keyof typeof AccessType];
  */
 export interface AwsIdentity {
     /**
+     * @public
      * <p>The AWS identity principal.</p>
      */
     principal: string | undefined;
     /**
+     * @public
      * <p>The external ID used to estalish trust relationship with the AWS identity.</p>
      */
     externalId: string | undefined;
@@ -67,18 +70,22 @@ export type AwsLogSourceName = (typeof AwsLogSourceName)[keyof typeof AwsLogSour
  */
 export interface AwsLogSourceConfiguration {
     /**
+     * @public
      * <p>Specify the Amazon Web Services account information where you want to enable Security Lake.</p>
      */
     accounts?: string[];
     /**
+     * @public
      * <p>Specify the Regions where you want to enable Security Lake.</p>
      */
     regions: string[] | undefined;
     /**
+     * @public
      * <p>The name for a Amazon Web Services source. This must be a Regionally unique value.</p>
      */
     sourceName: AwsLogSourceName | string | undefined;
     /**
+     * @public
      * <p>The version for a Amazon Web Services source. This must be a Regionally unique value.</p>
      */
     sourceVersion?: string;
@@ -89,10 +96,12 @@ export interface AwsLogSourceConfiguration {
  */
 export interface AwsLogSourceResource {
     /**
+     * @public
      * <p>The name for a Amazon Web Services source. This must be a Regionally unique value.</p>
      */
     sourceName?: AwsLogSourceName | string;
     /**
+     * @public
      * <p>The version for a Amazon Web Services source. This must be a Regionally unique value.</p>
      */
     sourceVersion?: string;
@@ -120,10 +129,12 @@ export declare class ConflictException extends __BaseException {
     readonly name: "ConflictException";
     readonly $fault: "client";
     /**
+     * @public
      * <p>The resource name.</p>
      */
     resourceName?: string;
     /**
+     * @public
      * <p>The resource type.</p>
      */
     resourceType?: string;
@@ -137,6 +148,7 @@ export declare class ConflictException extends __BaseException {
  */
 export interface CreateAwsLogSourceRequest {
     /**
+     * @public
      * <p>Specify the natively-supported Amazon Web Services service to add as a source in Security Lake.</p>
      */
     sources: AwsLogSourceConfiguration[] | undefined;
@@ -146,6 +158,7 @@ export interface CreateAwsLogSourceRequest {
  */
 export interface CreateAwsLogSourceResponse {
     /**
+     * @public
      * <p>Lists all accounts in which enabling a natively supported Amazon Web Service as
      *          a Security Lake source failed. The failure occurred as these accounts are not part of an
      *          organization.</p>
@@ -174,10 +187,12 @@ export declare class ResourceNotFoundException extends __BaseException {
     readonly name: "ResourceNotFoundException";
     readonly $fault: "client";
     /**
+     * @public
      * <p>The name of the resource that could not be found.</p>
      */
     resourceName?: string;
     /**
+     * @public
      * <p>The type of the resource that could not be found.</p>
      */
     resourceType?: string;
@@ -197,14 +212,17 @@ export declare class ThrottlingException extends __BaseException {
         throttling: boolean;
     };
     /**
+     * @public
      * <p>The code for the service in Service Quotas.</p>
      */
     serviceCode?: string;
     /**
+     * @public
      * <p>That the rate of requests to Security Lake is exceeding the request quotas for your Amazon Web Services account.</p>
      */
     quotaCode?: string;
     /**
+     * @public
      * <p>Retry the request after the specified time.</p>
      */
     retryAfterSeconds?: number;
@@ -219,6 +237,7 @@ export declare class ThrottlingException extends __BaseException {
  */
 export interface CustomLogSourceCrawlerConfiguration {
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) of the Identity and Access Management (IAM) role
      *          to be used by the Glue crawler. The recommended IAM policies
      *          are:</p>
@@ -240,10 +259,12 @@ export interface CustomLogSourceCrawlerConfiguration {
  */
 export interface CustomLogSourceConfiguration {
     /**
+     * @public
      * <p>The configuration for the Glue Crawler for the third-party custom source.</p>
      */
     crawlerConfiguration: CustomLogSourceCrawlerConfiguration | undefined;
     /**
+     * @public
      * <p>The identity of the log provider for the third-party custom source.</p>
      */
     providerIdentity: AwsIdentity | undefined;
@@ -253,16 +274,19 @@ export interface CustomLogSourceConfiguration {
  */
 export interface CreateCustomLogSourceRequest {
     /**
+     * @public
      * <p>Specify the name for a third-party custom source. This must be a Regionally unique
      *          value.</p>
      */
     sourceName: string | undefined;
     /**
+     * @public
      * <p>Specify the source version for the third-party custom source, to limit log collection to
      *          a specific version of custom data source.</p>
      */
     sourceVersion?: string;
     /**
+     * @public
      * <p>The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of
      *          data that the custom source will send to Security Lake. The supported event classes are:</p>
      *          <ul>
@@ -415,6 +439,7 @@ export interface CreateCustomLogSourceRequest {
      */
     eventClasses?: string[];
     /**
+     * @public
      * <p>The configuration for the third-party custom source.</p>
      */
     configuration?: CustomLogSourceConfiguration;
@@ -425,15 +450,18 @@ export interface CreateCustomLogSourceRequest {
  */
 export interface CustomLogSourceAttributes {
     /**
+     * @public
      * <p>The ARN of the Glue crawler.</p>
      */
     crawlerArn?: string;
     /**
+     * @public
      * <p>The ARN of the Glue database where results are written, such as:
      *          <code>arn:aws:daylight:us-east-1::database/sometable/*</code>.</p>
      */
     databaseArn?: string;
     /**
+     * @public
      * <p>The ARN of the Glue table.</p>
      */
     tableArn?: string;
@@ -444,6 +472,7 @@ export interface CustomLogSourceAttributes {
  */
 export interface CustomLogSourceProvider {
     /**
+     * @public
      * <p>The ARN of the IAM role to be used by the entity putting logs into your
      *          custom source partition. Security Lake will apply the correct access policies to this role, but
      *          you must first manually create the trust policy for this role. The IAM role
@@ -452,6 +481,7 @@ export interface CustomLogSourceProvider {
      */
     roleArn?: string;
     /**
+     * @public
      * <p>The location of the partition in the Amazon S3 bucket for Security Lake.</p>
      */
     location?: string;
@@ -462,18 +492,22 @@ export interface CustomLogSourceProvider {
  */
 export interface CustomLogSourceResource {
     /**
+     * @public
      * <p>The name for a third-party custom source. This must be a Regionally unique value.</p>
      */
     sourceName?: string;
     /**
+     * @public
      * <p>The version for a third-party custom source. This must be a Regionally unique value.</p>
      */
     sourceVersion?: string;
     /**
+     * @public
      * <p>The details of the log provider for a third-party custom source.</p>
      */
     provider?: CustomLogSourceProvider;
     /**
+     * @public
      * <p>The attributes of a third-party custom source.</p>
      */
     attributes?: CustomLogSourceAttributes;
@@ -483,6 +517,7 @@ export interface CustomLogSourceResource {
  */
 export interface CreateCustomLogSourceResponse {
     /**
+     * @public
      * <p>The created third-party custom source.</p>
      */
     source?: CustomLogSourceResource;
@@ -493,6 +528,7 @@ export interface CreateCustomLogSourceResponse {
  */
 export interface DataLakeEncryptionConfiguration {
     /**
+     * @public
      * <p>The id of KMS encryption key used by Amazon Security Lake to encrypt the Security Lake
      *          object.</p>
      */
@@ -504,6 +540,7 @@ export interface DataLakeEncryptionConfiguration {
  */
 export interface DataLakeLifecycleExpiration {
     /**
+     * @public
      * <p>Number of days before data expires in the Amazon Security Lake object.</p>
      */
     days?: number;
@@ -514,11 +551,13 @@ export interface DataLakeLifecycleExpiration {
  */
 export interface DataLakeLifecycleTransition {
     /**
+     * @public
      * <p>The range of storage classes that you can choose from based on the data access,
      *          resiliency, and cost requirements of your workloads.</p>
      */
     storageClass?: string;
     /**
+     * @public
      * <p>Number of days before data transitions to a different S3 Storage Class in the Amazon Security Lake object.</p>
      */
     days?: number;
@@ -529,10 +568,12 @@ export interface DataLakeLifecycleTransition {
  */
 export interface DataLakeLifecycleConfiguration {
     /**
+     * @public
      * <p>Provides data expiration details of Amazon Security Lake object.</p>
      */
     expiration?: DataLakeLifecycleExpiration;
     /**
+     * @public
      * <p>Provides data storage transition details of Amazon Security Lake object.</p>
      */
     transitions?: DataLakeLifecycleTransition[];
@@ -543,6 +584,7 @@ export interface DataLakeLifecycleConfiguration {
  */
 export interface DataLakeReplicationConfiguration {
     /**
+     * @public
      * <p>Replication enables automatic, asynchronous copying of objects across Amazon S3
      *          buckets. Amazon S3 buckets that are configured for object replication can be owned
      *          by the same Amazon Web Services account or by different accounts. You can replicate objects
@@ -554,6 +596,7 @@ export interface DataLakeReplicationConfiguration {
      */
     regions?: string[];
     /**
+     * @public
      * <p>Replication settings for the Amazon S3 buckets. This parameter uses the Identity and Access Management (IAM) role you created that is managed by Security Lake, to
      *          ensure the replication setting is correct.</p>
      */
@@ -565,18 +608,22 @@ export interface DataLakeReplicationConfiguration {
  */
 export interface DataLakeConfiguration {
     /**
+     * @public
      * <p>The Amazon Web Services Regions where Security Lake is automatically enabled.</p>
      */
     region: string | undefined;
     /**
+     * @public
      * <p>Provides encryption details of Amazon Security Lake object.</p>
      */
     encryptionConfiguration?: DataLakeEncryptionConfiguration;
     /**
+     * @public
      * <p>Provides lifecycle details of Amazon Security Lake object.</p>
      */
     lifecycleConfiguration?: DataLakeLifecycleConfiguration;
     /**
+     * @public
      * <p>Provides replication details of Amazon Security Lake object.</p>
      */
     replicationConfiguration?: DataLakeReplicationConfiguration;
@@ -595,10 +642,12 @@ export interface DataLakeConfiguration {
  */
 export interface Tag {
     /**
+     * @public
      * <p>The  name of the tag. This is a general label that acts as a category for a more specific tag value (<code>value</code>).</p>
      */
     key: string | undefined;
     /**
+     * @public
      * <p>The value that’s associated with the specified tag key (<code>key</code>). This value acts as a descriptor for the tag key. A tag value cannot be
      *          null, but it can be an empty string.</p>
      */
@@ -609,16 +658,19 @@ export interface Tag {
  */
 export interface CreateDataLakeRequest {
     /**
+     * @public
      * <p>Specify the Region or Regions that will contribute data to the rollup region.</p>
      */
     configurations: DataLakeConfiguration[] | undefined;
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) used to create and update the Glue table.
      *          This table contains partitions generated by the ingestion and normalization of
      *           Amazon Web Services log sources and custom sources.</p>
      */
     metaStoreManagerRoleArn: string | undefined;
     /**
+     * @public
      * <p>An array of objects, one for each tag to associate with the data lake configuration. For each tag, you must specify both a tag key and a tag value. A tag
      *          value cannot be null, but it can be an empty string.</p>
      */
@@ -645,11 +697,13 @@ export type DataLakeStatus = (typeof DataLakeStatus)[keyof typeof DataLakeStatus
  */
 export interface DataLakeUpdateException {
     /**
+     * @public
      * <p>The reason for the exception of the last <code>UpdateDataLake</code>or
      *          <code>DeleteDataLake</code> API request.</p>
      */
     reason?: string;
     /**
+     * @public
      * <p>The reason code for the exception of the last <code>UpdateDataLake</code> or
      *          <code>DeleteDataLake</code> API request.</p>
      */
@@ -663,16 +717,19 @@ export interface DataLakeUpdateException {
  */
 export interface DataLakeUpdateStatus {
     /**
+     * @public
      * <p>The unique ID for the last <code>UpdateDataLake</code> or <code>DeleteDataLake</code> API
      *          request.</p>
      */
     requestId?: string;
     /**
+     * @public
      * <p>The status of the last <code>UpdateDataLake</code> or <code>DeleteDataLake</code> API
      *          request that was requested.</p>
      */
     status?: DataLakeStatus | string;
     /**
+     * @public
      * <p>The details of the last <code>UpdateDataLake</code>or <code>DeleteDataLake</code> API
      *          request which failed.</p>
      */
@@ -684,34 +741,42 @@ export interface DataLakeUpdateStatus {
  */
 export interface DataLakeResource {
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) created by you to provide to the subscriber. For more information about ARNs and how to use them in policies, see the <a href="https://docs.aws.amazon.com/security-lake/latest/userguide/subscriber-management.html">Amazon Security Lake User Guide</a>.</p>
      */
     dataLakeArn: string | undefined;
     /**
+     * @public
      * <p>The Amazon Web Services Regions where Security Lake is enabled.</p>
      */
     region: string | undefined;
     /**
+     * @public
      * <p>The ARN for the Amazon Security Lake Amazon S3 bucket.</p>
      */
     s3BucketArn?: string;
     /**
+     * @public
      * <p>Provides encryption details of Amazon Security Lake object.</p>
      */
     encryptionConfiguration?: DataLakeEncryptionConfiguration;
     /**
+     * @public
      * <p>Provides lifecycle details of Amazon Security Lake object.</p>
      */
     lifecycleConfiguration?: DataLakeLifecycleConfiguration;
     /**
+     * @public
      * <p>Provides replication details of Amazon Security Lake object.</p>
      */
     replicationConfiguration?: DataLakeReplicationConfiguration;
     /**
+     * @public
      * <p>Retrieves the status of the configuration operation for an account in Amazon Security Lake.</p>
      */
     createStatus?: DataLakeStatus | string;
     /**
+     * @public
      * <p>The status of the last <code>UpdateDataLake </code>or <code>DeleteDataLake</code> API
      *          request.</p>
      */
@@ -722,6 +787,7 @@ export interface DataLakeResource {
  */
 export interface CreateDataLakeResponse {
     /**
+     * @public
      * <p>The created Security Lake configuration object.</p>
      */
     dataLakes?: DataLakeResource[];
@@ -731,14 +797,17 @@ export interface CreateDataLakeResponse {
  */
 export interface CreateDataLakeExceptionSubscriptionRequest {
     /**
+     * @public
      * <p>The subscription protocol to which exception notifications are posted.</p>
      */
     subscriptionProtocol: string | undefined;
     /**
+     * @public
      * <p>The Amazon Web Services account where you want to receive exception notifications.</p>
      */
     notificationEndpoint: string | undefined;
     /**
+     * @public
      * <p>The expiration period and time-to-live (TTL).</p>
      */
     exceptionTimeToLive?: number;
@@ -755,10 +824,12 @@ export interface CreateDataLakeExceptionSubscriptionResponse {
  */
 export interface DataLakeAutoEnableNewAccountConfiguration {
     /**
+     * @public
      * <p>The Amazon Web Services Regions where Security Lake is automatically enabled.</p>
      */
     region: string | undefined;
     /**
+     * @public
      * <p>The Amazon Web Services sources that are automatically enabled in Security Lake.</p>
      */
     sources: AwsLogSourceResource[] | undefined;
@@ -768,6 +839,7 @@ export interface DataLakeAutoEnableNewAccountConfiguration {
  */
 export interface CreateDataLakeOrganizationConfigurationRequest {
     /**
+     * @public
      * <p>Enable Security Lake with the specified configuration settings, to begin collecting security
      *          data for new accounts in your organization.</p>
      */
@@ -789,6 +861,7 @@ export type LogSourceResource = LogSourceResource.AwsLogSourceMember | LogSource
  */
 export declare namespace LogSourceResource {
     /**
+     * @public
      * <p>Amazon Security Lake supports log and event collection for natively supported Amazon Web Services. For more information, see the <a href="https://docs.aws.amazon.com/security-lake/latest/userguide/internal-sources.html">Amazon Security Lake User Guide</a>.</p>
      */
     interface AwsLogSourceMember {
@@ -797,6 +870,7 @@ export declare namespace LogSourceResource {
         $unknown?: never;
     }
     /**
+     * @public
      * <p>Amazon Security Lake supports custom source types. For more information, see the <a href="https://docs.aws.amazon.com/security-lake/latest/userguide/custom-sources.html">Amazon Security Lake User Guide</a>.</p>
      */
     interface CustomLogSourceMember {
@@ -804,6 +878,9 @@ export declare namespace LogSourceResource {
         customLogSource: CustomLogSourceResource;
         $unknown?: never;
     }
+    /**
+     * @public
+     */
     interface $UnknownMember {
         awsLogSource?: never;
         customLogSource?: never;
@@ -821,27 +898,33 @@ export declare namespace LogSourceResource {
  */
 export interface CreateSubscriberRequest {
     /**
+     * @public
      * <p>The AWS identity used to access your data.</p>
      */
     subscriberIdentity: AwsIdentity | undefined;
     /**
+     * @public
      * <p>The name of your Security Lake subscriber account.</p>
      */
     subscriberName: string | undefined;
     /**
+     * @public
      * <p>The description for your subscriber account in Security Lake.</p>
      */
     subscriberDescription?: string;
     /**
+     * @public
      * <p>The supported Amazon Web Services from which logs and events are collected.
      *          Security Lake supports log and event collection for natively supported Amazon Web Services.</p>
      */
     sources: LogSourceResource[] | undefined;
     /**
+     * @public
      * <p>The Amazon S3 or Lake Formation access type.</p>
      */
     accessTypes?: (AccessType | string)[];
     /**
+     * @public
      * <p>An array of objects, one for each tag to associate with the subscriber. For each tag, you must specify both a tag key and a tag value. A tag
      *          value cannot be null, but it can be an empty string.</p>
      */
@@ -869,32 +952,39 @@ export type SubscriberStatus = (typeof SubscriberStatus)[keyof typeof Subscriber
  */
 export interface SubscriberResource {
     /**
+     * @public
      * <p>The subscriber ID of the Amazon Security Lake subscriber account.</p>
      */
     subscriberId: string | undefined;
     /**
+     * @public
      * <p>The subscriber ARN of the Amazon Security Lake subscriber account.</p>
      */
     subscriberArn: string | undefined;
     /**
+     * @public
      * <p>The AWS identity used to access your data.</p>
      */
     subscriberIdentity: AwsIdentity | undefined;
     /**
+     * @public
      * <p>The name of your Amazon Security Lake subscriber account.</p>
      */
     subscriberName: string | undefined;
     /**
+     * @public
      * <p>The subscriber descriptions for a subscriber account. The description for a subscriber
      *          includes <code>subscriberName</code>, <code>accountID</code>, <code>externalID</code>, and
      *          <code>subscriberId</code>.</p>
      */
     subscriberDescription?: string;
     /**
+     * @public
      * <p>Amazon Security Lake supports log and event collection for natively supported Amazon Web Services. For more information, see the <a href="https://docs.aws.amazon.com/security-lake/latest/userguide/source-management.html">Amazon Security Lake User Guide</a>.</p>
      */
     sources: LogSourceResource[] | undefined;
     /**
+     * @public
      * <p>You can choose to notify subscribers of new objects with an Amazon Simple Queue Service
      *             (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the
      *          subscriber.</p>
@@ -904,22 +994,27 @@ export interface SubscriberResource {
      */
     accessTypes?: (AccessType | string)[];
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) specifying the role of the subscriber.</p>
      */
     roleArn?: string;
     /**
+     * @public
      * <p>The ARN for the Amazon S3 bucket.</p>
      */
     s3BucketArn?: string;
     /**
+     * @public
      * <p>The subscriber endpoint to which exception messages are posted.</p>
      */
     subscriberEndpoint?: string;
     /**
+     * @public
      * <p>The subscriber status of the Amazon Security Lake subscriber account.</p>
      */
     subscriberStatus?: SubscriberStatus | string;
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) which uniquely defines the AWS RAM resource share. Before
      *          accepting the RAM resource share invitation, you can view details related to the RAM
      *          resource share.</p>
@@ -927,14 +1022,17 @@ export interface SubscriberResource {
      */
     resourceShareArn?: string;
     /**
+     * @public
      * <p>The name of the resource share.</p>
      */
     resourceShareName?: string;
     /**
+     * @public
      * <p>The date and time when the subscriber was created.</p>
      */
     createdAt?: Date;
     /**
+     * @public
      * <p>The date and time when the subscriber was last updated.</p>
      */
     updatedAt?: Date;
@@ -944,6 +1042,7 @@ export interface SubscriberResource {
  */
 export interface CreateSubscriberResponse {
     /**
+     * @public
      * <p>Retrieve information about the subscriber created using the
      *             <code>CreateSubscriber</code> API.</p>
      */
@@ -967,23 +1066,28 @@ export type HttpMethod = (typeof HttpMethod)[keyof typeof HttpMethod];
  */
 export interface HttpsNotificationConfiguration {
     /**
+     * @public
      * <p>The subscription endpoint in Security Lake. If you prefer notification with an HTTPs
      *          endpoint, populate this field.</p>
      */
     endpoint: string | undefined;
     /**
+     * @public
      * <p>The key name for the notification subscription.</p>
      */
     authorizationApiKeyName?: string;
     /**
+     * @public
      * <p>The key value for the notification subscription.</p>
      */
     authorizationApiKeyValue?: string;
     /**
+     * @public
      * <p>The HTTPS method used for the notification subscription.</p>
      */
     httpMethod?: HttpMethod | string;
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) of the EventBridge API destinations IAM role that you
      *          created. For more information about ARNs and how to use them in policies, see <a href="https://docs.aws.amazon.com//security-lake/latest/userguide/subscriber-data-access.html">Managing data access</a> and <a href="https://docs.aws.amazon.com/security-lake/latest/userguide/security-iam-awsmanpol.html">Amazon Web Services
      *             Managed Policies</a> in the <i>Amazon Security Lake User Guide</i>.</p>
@@ -1008,6 +1112,7 @@ export type NotificationConfiguration = NotificationConfiguration.HttpsNotificat
  */
 export declare namespace NotificationConfiguration {
     /**
+     * @public
      * <p>The configurations for SQS subscriber notification.</p>
      */
     interface SqsNotificationConfigurationMember {
@@ -1016,6 +1121,7 @@ export declare namespace NotificationConfiguration {
         $unknown?: never;
     }
     /**
+     * @public
      * <p>The configurations for HTTPS subscriber notification.</p>
      */
     interface HttpsNotificationConfigurationMember {
@@ -1023,6 +1129,9 @@ export declare namespace NotificationConfiguration {
         httpsNotificationConfiguration: HttpsNotificationConfiguration;
         $unknown?: never;
     }
+    /**
+     * @public
+     */
     interface $UnknownMember {
         sqsNotificationConfiguration?: never;
         httpsNotificationConfiguration?: never;
@@ -1040,10 +1149,12 @@ export declare namespace NotificationConfiguration {
  */
 export interface CreateSubscriberNotificationRequest {
     /**
+     * @public
      * <p>The subscriber ID for the notification subscription.</p>
      */
     subscriberId: string | undefined;
     /**
+     * @public
      * <p>Specify the configuration using which you want to create the subscriber
      *          notification.</p>
      */
@@ -1054,6 +1165,7 @@ export interface CreateSubscriberNotificationRequest {
  */
 export interface CreateSubscriberNotificationResponse {
     /**
+     * @public
      * <p>The subscriber endpoint to which exception messages are posted.</p>
      */
     subscriberEndpoint?: string;
@@ -1063,6 +1175,7 @@ export interface CreateSubscriberNotificationResponse {
  */
 export interface DeleteAwsLogSourceRequest {
     /**
+     * @public
      * <p>Specify the natively-supported Amazon Web Services service to remove as a source in
      *          Security Lake.</p>
      */
@@ -1073,6 +1186,7 @@ export interface DeleteAwsLogSourceRequest {
  */
 export interface DeleteAwsLogSourceResponse {
     /**
+     * @public
      * <p>Deletion of the Amazon Web Services sources failed as the account is not a part of the organization.</p>
      */
     failed?: string[];
@@ -1082,10 +1196,12 @@ export interface DeleteAwsLogSourceResponse {
  */
 export interface DeleteCustomLogSourceRequest {
     /**
+     * @public
      * <p>The source name of custom log source that you want to delete.</p>
      */
     sourceName: string | undefined;
     /**
+     * @public
      * <p>The source version for the third-party custom source. You can limit the custom source
      *          removal to the specified source version.</p>
      */
@@ -1101,6 +1217,7 @@ export interface DeleteCustomLogSourceResponse {
  */
 export interface DeleteDataLakeRequest {
     /**
+     * @public
      * <p>The list of Regions where Security Lake is enabled.</p>
      */
     regions: string[] | undefined;
@@ -1115,6 +1232,7 @@ export interface DeleteDataLakeResponse {
  */
 export interface DeleteDataLakeOrganizationConfigurationRequest {
     /**
+     * @public
      * <p>Turns off automatic enablement of Security Lake for member accounts that are added to an organization.</p>
      */
     autoEnableNewAccount: DataLakeAutoEnableNewAccountConfiguration[] | undefined;
@@ -1134,6 +1252,7 @@ export interface GetDataLakeOrganizationConfigurationRequest {
  */
 export interface GetDataLakeOrganizationConfigurationResponse {
     /**
+     * @public
      * <p>The configuration for new accounts.</p>
      */
     autoEnableNewAccount?: DataLakeAutoEnableNewAccountConfiguration[];
@@ -1143,15 +1262,18 @@ export interface GetDataLakeOrganizationConfigurationResponse {
  */
 export interface GetDataLakeSourcesRequest {
     /**
+     * @public
      * <p>The Amazon Web Services account ID for which a static snapshot of the current Amazon Web Services Region, including enabled accounts and log sources, is retrieved.</p>
      */
     accounts?: string[];
     /**
+     * @public
      * <p>The maximum limit of accounts for which the static snapshot of the current Region,
      *          including enabled accounts and log sources, is retrieved.</p>
      */
     maxResults?: number;
     /**
+     * @public
      * <p>Lists if there are more results available. The value of nextToken is a unique pagination
      *          token for each page. Repeat the call using the returned token to retrieve the next page.
      *          Keep all other arguments unchanged.</p>
@@ -1179,11 +1301,13 @@ export type SourceCollectionStatus = (typeof SourceCollectionStatus)[keyof typeo
  */
 export interface DataLakeSourceStatus {
     /**
+     * @public
      * <p>Defines path the stored logs are available which has information on your systems,
      *          applications, and services.</p>
      */
     resource?: string;
     /**
+     * @public
      * <p>The health status of services, including error codes and patterns.</p>
      */
     status?: SourceCollectionStatus | string;
@@ -1195,15 +1319,18 @@ export interface DataLakeSourceStatus {
  */
 export interface DataLakeSource {
     /**
+     * @public
      * <p>The ID of the Security Lake account for which logs are collected.</p>
      */
     account?: string;
     /**
+     * @public
      * <p>The supported Amazon Web Services from which logs and events are collected.
      *          Amazon Security Lake supports log and event collection for natively supported Amazon Web Services.</p>
      */
     sourceName?: string;
     /**
+     * @public
      * <p>The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of
      *          data that the custom source will send to Security Lake. The supported event classes are:</p>
      *          <ul>
@@ -1356,6 +1483,7 @@ export interface DataLakeSource {
      */
     eventClasses?: string[];
     /**
+     * @public
      * <p>The log status for the Security Lake account.</p>
      */
     sourceStatuses?: DataLakeSourceStatus[];
@@ -1365,14 +1493,17 @@ export interface DataLakeSource {
  */
 export interface GetDataLakeSourcesResponse {
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) created by you to provide to the subscriber. For more information about ARNs and how to use them in policies, see the <a href="https://docs.aws.amazon.com/security-lake/latest/userguide/subscriber-management.html">Amazon Security Lake User Guide</a>.</p>
      */
     dataLakeArn?: string;
     /**
+     * @public
      * <p>The list of enabled accounts and enabled sources.</p>
      */
     dataLakeSources?: DataLakeSource[];
     /**
+     * @public
      * <p>Lists if there are more results available. The value of nextToken is a unique pagination
      *          token for each page. Repeat the call using the returned token to retrieve the next page.
      *          Keep all other arguments unchanged.</p>
@@ -1386,6 +1517,7 @@ export interface GetDataLakeSourcesResponse {
  */
 export interface ListDataLakesRequest {
     /**
+     * @public
      * <p>The list of regions where Security Lake is enabled.</p>
      */
     regions?: string[];
@@ -1395,6 +1527,7 @@ export interface ListDataLakesRequest {
  */
 export interface ListDataLakesResponse {
     /**
+     * @public
      * <p>Retrieves the Security Lake configuration object.</p>
      */
     dataLakes?: DataLakeResource[];
@@ -1404,22 +1537,27 @@ export interface ListDataLakesResponse {
  */
 export interface ListLogSourcesRequest {
     /**
+     * @public
      * <p>The list of Amazon Web Services accounts for which log sources are displayed.</p>
      */
     accounts?: string[];
     /**
+     * @public
      * <p>The list of regions for which log sources are displayed.</p>
      */
     regions?: string[];
     /**
+     * @public
      * <p>The list of sources for which log sources are displayed.</p>
      */
     sources?: LogSourceResource[];
     /**
+     * @public
      * <p>The maximum number of accounts for which the log sources are displayed.</p>
      */
     maxResults?: number;
     /**
+     * @public
      * <p>If nextToken is returned, there are more results available. You can repeat the call
      *          using the returned token to retrieve the next page.</p>
      */
@@ -1431,14 +1569,17 @@ export interface ListLogSourcesRequest {
  */
 export interface LogSource {
     /**
+     * @public
      * <p>Specify the account from which you want to collect logs.</p>
      */
     account?: string;
     /**
+     * @public
      * <p>Specify the Regions from which you want to collect logs.</p>
      */
     region?: string;
     /**
+     * @public
      * <p>Specify the sources from which you want to collect logs.</p>
      */
     sources?: LogSourceResource[];
@@ -1448,10 +1589,12 @@ export interface LogSource {
  */
 export interface ListLogSourcesResponse {
     /**
+     * @public
      * <p>The list of log sources in your organization that send data to the data lake.</p>
      */
     sources?: LogSource[];
     /**
+     * @public
      * <p>If nextToken is returned, there are more results available. You can repeat the call
      *       using the returned token to retrieve the next page.</p>
      */
@@ -1462,6 +1605,7 @@ export interface ListLogSourcesResponse {
  */
 export interface UpdateDataLakeRequest {
     /**
+     * @public
      * <p>Specify the Region or Regions that will contribute data to the rollup region.</p>
      */
     configurations: DataLakeConfiguration[] | undefined;
@@ -1471,6 +1615,7 @@ export interface UpdateDataLakeRequest {
  */
 export interface UpdateDataLakeResponse {
     /**
+     * @public
      * <p>The created Security Lake configuration object.</p>
      */
     dataLakes?: DataLakeResource[];
@@ -1481,18 +1626,22 @@ export interface UpdateDataLakeResponse {
  */
 export interface DataLakeException {
     /**
+     * @public
      * <p>The Amazon Web Services Regions where the exception occurred.</p>
      */
     region?: string;
     /**
+     * @public
      * <p>The underlying exception of a Security Lake exception.</p>
      */
     exception?: string;
     /**
+     * @public
      * <p>List of all remediation steps for a Security Lake exception.</p>
      */
     remediation?: string;
     /**
+     * @public
      * <p>This error can occur if you configure the wrong timestamp format, or if the subset of entries used for validation had errors or missing values.</p>
      */
     timestamp?: Date;
@@ -1512,6 +1661,7 @@ export interface DeleteDataLakeExceptionSubscriptionResponse {
  */
 export interface DeleteSubscriberRequest {
     /**
+     * @public
      * <p>A value created by Security Lake that uniquely identifies your <code>DeleteSubscriber</code> API request.</p>
      */
     subscriberId: string | undefined;
@@ -1526,6 +1676,7 @@ export interface DeleteSubscriberResponse {
  */
 export interface DeleteSubscriberNotificationRequest {
     /**
+     * @public
      * <p>The ID of the Security Lake subscriber account.</p>
      */
     subscriberId: string | undefined;
@@ -1555,14 +1706,17 @@ export interface GetDataLakeExceptionSubscriptionRequest {
  */
 export interface GetDataLakeExceptionSubscriptionResponse {
     /**
+     * @public
      * <p>The subscription protocol to which exception notifications are posted.</p>
      */
     subscriptionProtocol?: string;
     /**
+     * @public
      * <p>The Amazon Web Services account where you receive exception notifications.</p>
      */
     notificationEndpoint?: string;
     /**
+     * @public
      * <p>The expiration period and time-to-live (TTL).</p>
      */
     exceptionTimeToLive?: number;
@@ -1572,6 +1726,7 @@ export interface GetDataLakeExceptionSubscriptionResponse {
  */
 export interface GetSubscriberRequest {
     /**
+     * @public
      * <p>A value created by Amazon Security Lake that uniquely identifies your
      *             <code>GetSubscriber</code> API request.</p>
      */
@@ -1582,6 +1737,7 @@ export interface GetSubscriberRequest {
  */
 export interface GetSubscriberResponse {
     /**
+     * @public
      * <p>The subscriber information for the specified subscriber ID.</p>
      */
     subscriber?: SubscriberResource;
@@ -1591,14 +1747,17 @@ export interface GetSubscriberResponse {
  */
 export interface ListDataLakeExceptionsRequest {
     /**
+     * @public
      * <p>List the Amazon Web Services Regions from which exceptions are retrieved.</p>
      */
     regions?: string[];
     /**
+     * @public
      * <p>List the maximum number of failures in Security Lake.</p>
      */
     maxResults?: number;
     /**
+     * @public
      * <p>List if there are more results available. The value of nextToken is a unique pagination
      *          token for each page. Repeat the call using the returned token to retrieve the next page.
      *          Keep all other arguments unchanged.</p>
@@ -1612,10 +1771,12 @@ export interface ListDataLakeExceptionsRequest {
  */
 export interface ListDataLakeExceptionsResponse {
     /**
+     * @public
      * <p>Lists the failures that cannot be retried in the current Region.</p>
      */
     exceptions?: DataLakeException[];
     /**
+     * @public
      * <p>List if there are more results available. The value of nextToken is a unique pagination
      *          token for each page. Repeat the call using the returned token to retrieve the next page.
      *          Keep all other arguments unchanged.</p>
@@ -1629,11 +1790,13 @@ export interface ListDataLakeExceptionsResponse {
  */
 export interface ListSubscribersRequest {
     /**
+     * @public
      * <p>If nextToken is returned, there are more results available. You can repeat the call
      *          using the returned token to retrieve the next page.</p>
      */
     nextToken?: string;
     /**
+     * @public
      * <p>The maximum number of accounts for which the configuration is displayed.</p>
      */
     maxResults?: number;
@@ -1643,10 +1806,12 @@ export interface ListSubscribersRequest {
  */
 export interface ListSubscribersResponse {
     /**
+     * @public
      * <p>The subscribers available for the specified Security Lake account ID.</p>
      */
     subscribers?: SubscriberResource[];
     /**
+     * @public
      * <p>If nextToken is returned, there are more results available. You can repeat the call
      *          using the returned token to retrieve the next page.</p>
      */
@@ -1657,6 +1822,7 @@ export interface ListSubscribersResponse {
  */
 export interface ListTagsForResourceRequest {
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) of the Amazon Security Lake resource to retrieve the tags for.</p>
      */
     resourceArn: string | undefined;
@@ -1666,6 +1832,7 @@ export interface ListTagsForResourceRequest {
  */
 export interface ListTagsForResourceResponse {
     /**
+     * @public
      * <p>An array of objects, one for each tag (key and value) that’s associated with the Amazon Security Lake resource.</p>
      */
     tags?: Tag[];
@@ -1675,6 +1842,7 @@ export interface ListTagsForResourceResponse {
  */
 export interface RegisterDataLakeDelegatedAdministratorRequest {
     /**
+     * @public
      * <p>The Amazon Web Services account ID of the Security Lake delegated administrator.</p>
      */
     accountId: string | undefined;
@@ -1689,22 +1857,27 @@ export interface RegisterDataLakeDelegatedAdministratorResponse {
  */
 export interface UpdateSubscriberRequest {
     /**
+     * @public
      * <p>A value created by Security Lake that uniquely identifies your subscription.</p>
      */
     subscriberId: string | undefined;
     /**
+     * @public
      * <p>The AWS identity used to access your data.</p>
      */
     subscriberIdentity?: AwsIdentity;
     /**
+     * @public
      * <p>The name of the Security Lake account subscriber.</p>
      */
     subscriberName?: string;
     /**
+     * @public
      * <p>The description of the Security Lake account subscriber.</p>
      */
     subscriberDescription?: string;
     /**
+     * @public
      * <p>The supported Amazon Web Services from which logs and events are collected. For
      *          the list of supported Amazon Web Services, see the <a href="https://docs.aws.amazon.com/security-lake/latest/userguide/internal-sources.html">Amazon Security Lake User Guide</a>.</p>
      */
@@ -1715,6 +1888,7 @@ export interface UpdateSubscriberRequest {
  */
 export interface UpdateSubscriberResponse {
     /**
+     * @public
      * <p>The updated subscriber information.</p>
      */
     subscriber?: SubscriberResource;
@@ -1724,10 +1898,12 @@ export interface UpdateSubscriberResponse {
  */
 export interface UpdateSubscriberNotificationRequest {
     /**
+     * @public
      * <p>The subscription ID for which the subscription notification is specified.</p>
      */
     subscriberId: string | undefined;
     /**
+     * @public
      * <p>The configuration for subscriber notification.</p>
      */
     configuration: NotificationConfiguration | undefined;
@@ -1737,6 +1913,7 @@ export interface UpdateSubscriberNotificationRequest {
  */
 export interface UpdateSubscriberNotificationResponse {
     /**
+     * @public
      * <p>The subscriber endpoint to which exception messages are posted.</p>
      */
     subscriberEndpoint?: string;
@@ -1746,10 +1923,12 @@ export interface UpdateSubscriberNotificationResponse {
  */
 export interface TagResourceRequest {
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) of the Amazon Security Lake resource to add or update the tags for.</p>
      */
     resourceArn: string | undefined;
     /**
+     * @public
      * <p>An array of objects, one for each tag (key and value) to associate with the Amazon Security Lake resource. For each tag, you must
      *          specify both a tag key and a tag value. A tag value cannot be null, but it can be an empty string.</p>
      */
@@ -1765,10 +1944,12 @@ export interface TagResourceResponse {
  */
 export interface UntagResourceRequest {
     /**
+     * @public
      * <p>The Amazon Resource Name (ARN) of the Amazon Security Lake resource to remove one or more tags from.</p>
      */
     resourceArn: string | undefined;
     /**
+     * @public
      * <p>A list of one or more tag keys. For each value in the list, specify the tag key for a tag to remove from the Amazon Security Lake resource.</p>
      */
     tagKeys: string[] | undefined;
@@ -1783,14 +1964,17 @@ export interface UntagResourceResponse {
  */
 export interface UpdateDataLakeExceptionSubscriptionRequest {
     /**
+     * @public
      * <p>The subscription protocol to which exception messages are posted.</p>
      */
     subscriptionProtocol: string | undefined;
     /**
+     * @public
      * <p>The account that is subscribed to receive exception notifications.</p>
      */
     notificationEndpoint: string | undefined;
     /**
+     * @public
      * <p>The time-to-live (TTL) for the exception message to remain.</p>
      */
     exceptionTimeToLive?: number;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-securitylake",
   "description": "AWS SDK for JavaScript Securitylake Client for Node.js, Browser and React Native",
-  "version": "3.379.1",
+  "version": "3.385.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -21,15 +21,15 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.379.1",
-    "@aws-sdk/credential-provider-node": "3.379.1",
+    "@aws-sdk/client-sts": "3.385.0",
+    "@aws-sdk/credential-provider-node": "3.385.0",
     "@aws-sdk/middleware-host-header": "3.379.1",
     "@aws-sdk/middleware-logger": "3.378.0",
     "@aws-sdk/middleware-recursion-detection": "3.378.0",
     "@aws-sdk/middleware-signing": "3.379.1",
-    "@aws-sdk/middleware-user-agent": "3.379.1",
+    "@aws-sdk/middleware-user-agent": "3.382.0",
     "@aws-sdk/types": "3.378.0",
-    "@aws-sdk/util-endpoints": "3.378.0",
+    "@aws-sdk/util-endpoints": "3.382.0",
     "@aws-sdk/util-user-agent-browser": "3.378.0",
     "@aws-sdk/util-user-agent-node": "3.378.0",
     "@smithy/config-resolver": "^2.0.1",