@propulsionworks/cloudformation 0.1.11 → 0.1.13

package/out/exports/resources.generated/aws-securityhub-automationrulev2.d.ts

@@ -0,0 +1,403 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+/**
+ * Resource schema for AWS::SecurityHub::AutomationRuleV2
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
+ */
+export type SecurityHubAutomationRuleV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::AutomationRuleV2", SecurityHubAutomationRuleV2Props, SecurityHubAutomationRuleV2Attribs>;
+/**
+ * Resource schema for AWS::SecurityHub::AutomationRuleV2
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
+ */
+export type SecurityHubAutomationRuleV2Props = {
+    /**
+     * A list of actions to be performed when the rule criteria is met
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-actions}
+     */
+    Actions: AutomationRulesActionV2[];
+    /**
+     * Defines the parameters and conditions used to evaluate and filter security findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-criteria}
+     */
+    Criteria: Criteria;
+    /**
+     * A description of the automation rule
+     * @minLength 1
+     * @maxLength 256
+     * @pattern .*\S.*
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-description}
+     */
+    Description: string;
+    /**
+     * The name of the automation rule
+     * @minLength 1
+     * @maxLength 256
+     * @pattern .*\S.*
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-rulename}
+     */
+    RuleName: string;
+    /**
+     * The value for the rule priority
+     * @min 1
+     * @max 1000
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-ruleorder}
+     */
+    RuleOrder: number;
+    /**
+     * The status of the automation rule
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-rulestatus}
+     */
+    RuleStatus?: "ENABLED" | "DISABLED" | undefined;
+    /**
+     * A key-value pair to associate with a resource.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-tags}
+     */
+    Tags?: Record<string, string> | undefined;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#aws-resource-securityhub-automationrulev2-return-values}
+ */
+export type SecurityHubAutomationRuleV2Attribs = {
+    /**
+     * The timestamp formatted in ISO8601
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-createdat}
+     */
+    CreatedAt: string;
+    /**
+     * The ARN of the automation rule
+     * @pattern ^arn:aws\S*:securityhub:[a-z0-9-]+:[0-9]{12}:automation-rulev2/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-rulearn}
+     */
+    RuleArn: string;
+    /**
+     * The ID of the automation rule
+     * @pattern ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-ruleid}
+     */
+    RuleId: string;
+    /**
+     * The timestamp formatted in ISO8601
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-updatedat}
+     */
+    UpdatedAt: string;
+};
+/**
+ * The logical operator used to combine multiple conditions
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-allowedoperators.html}
+ */
+export type AllowedOperators = "AND" | "OR";
+/**
+ * Allows you to configure automated responses
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html}
+ */
+export type AutomationRulesActionV2 = {
+    /**
+     * The settings for integrating automation rule actions with external systems or service
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html#cfn-securityhub-automationrulev2-automationrulesactionv2-externalintegrationconfiguration}
+     */
+    ExternalIntegrationConfiguration?: ExternalIntegrationConfiguration | undefined;
+    /**
+     * The changes to be applied to fields in a security finding when an automation rule is triggered
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html#cfn-securityhub-automationrulev2-automationrulesactionv2-findingfieldsupdate}
+     */
+    FindingFieldsUpdate?: AutomationRulesFindingFieldsUpdateV2 | undefined;
+    /**
+     * The category of action to be executed by the automation rule
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html#cfn-securityhub-automationrulev2-automationrulesactionv2-type}
+     */
+    Type: "FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION";
+};
+/**
+ * The changes to be applied to fields in a security finding when an automation rule is triggered
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html}
+ */
+export type AutomationRulesFindingFieldsUpdateV2 = {
+    /**
+     * Notes or contextual information for findings that are modified by the automation rule
+     * @pattern .*\S.*
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html#cfn-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2-comment}
+     */
+    Comment?: string | undefined;
+    /**
+     * The severity level to be assigned to findings that match the automation rule criteria
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html#cfn-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2-severityid}
+     */
+    SeverityId?: number | undefined;
+    /**
+     * The status to be applied to findings that match automation rule criteria
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html#cfn-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2-statusid}
+     */
+    StatusId?: number | undefined;
+};
+/**
+ * Boolean filter for querying findings
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-booleanfilter.html}
+ */
+export type BooleanFilter = {
+    /**
+     * The value of the boolean
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-booleanfilter.html#cfn-securityhub-automationrulev2-booleanfilter-value}
+     */
+    Value: boolean;
+};
+/**
+ * Enables the creation of filtering criteria for security findings
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html}
+ */
+export type CompositeFilter = {
+    /**
+     * Enables filtering based on boolean field values
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-booleanfilters}
+     */
+    BooleanFilters?: OcsfBooleanFilter[] | undefined;
+    /**
+     * Enables filtering based on date and timestamp fields
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-datefilters}
+     */
+    DateFilters?: OcsfDateFilter[] | undefined;
+    /**
+     * Enables filtering based on map field value
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-mapfilters}
+     */
+    MapFilters?: OcsfMapFilter[] | undefined;
+    /**
+     * Enables filtering based on numerical field values
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-numberfilters}
+     */
+    NumberFilters?: OcsfNumberFilter[] | undefined;
+    /**
+     * The logical operator used to combine multiple conditions
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-operator}
+     */
+    Operator?: AllowedOperators | undefined;
+    /**
+     * Enables filtering based on string field values
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-stringfilters}
+     */
+    StringFilters?: OcsfStringFilter[] | undefined;
+};
+/**
+ * Defines the parameters and conditions used to evaluate and filter security findings
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-criteria.html}
+ */
+export type Criteria = {
+    /**
+     * The filtering conditions that align with OCSF standards
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-criteria.html#cfn-securityhub-automationrulev2-criteria-ocsffindingcriteria}
+     */
+    OcsfFindingCriteria?: OcsfFindingFilters | undefined;
+};
+/**
+ * A date filter for querying findings
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html}
+ */
+export type DateFilter = {
+    /**
+     * A date range for the date filter
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-daterange}
+     */
+    DateRange?: DateRange | undefined;
+    /**
+     * The timestamp formatted in ISO8601
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-end}
+     */
+    End?: string | undefined;
+    /**
+     * The timestamp formatted in ISO8601
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-start}
+     */
+    Start?: string | undefined;
+};
+/**
+ * A date range for the date filter
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-daterange.html}
+ */
+export type DateRange = {
+    /**
+     * A date range unit for the date filter
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-daterange.html#cfn-securityhub-automationrulev2-daterange-unit}
+     */
+    Unit: "DAYS";
+    /**
+     * A date range value for the date filter
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-daterange.html#cfn-securityhub-automationrulev2-daterange-value}
+     */
+    Value: number;
+};
+/**
+ * The settings for integrating automation rule actions with external systems or service
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-externalintegrationconfiguration.html}
+ */
+export type ExternalIntegrationConfiguration = {
+    /**
+     * The ARN of the connector that establishes the integration
+     * @pattern .*\S.*
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-externalintegrationconfiguration.html#cfn-securityhub-automationrulev2-externalintegrationconfiguration-connectorarn}
+     */
+    ConnectorArn?: string | undefined;
+};
+/**
+ * A map filter for filtering findings
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html}
+ */
+export type MapFilter = {
+    /**
+     * The condition to apply to the key value when filtering findings with a map filter
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html#cfn-securityhub-automationrulev2-mapfilter-comparison}
+     */
+    Comparison: "EQUALS" | "NOT_EQUALS";
+    /**
+     * The key of the map filter
+     * @minLength 1
+     * @maxLength 4096
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html#cfn-securityhub-automationrulev2-mapfilter-key}
+     */
+    Key: string;
+    /**
+     * The value for the key in the map filter
+     * @minLength 1
+     * @maxLength 4096
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html#cfn-securityhub-automationrulev2-mapfilter-value}
+     */
+    Value: string;
+};
+/**
+ * A number filter for querying findings
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html}
+ */
+export type NumberFilter = {
+    /**
+     * The equal-to condition to be applied to a single field when querying for findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html#cfn-securityhub-automationrulev2-numberfilter-eq}
+     */
+    Eq?: number | undefined;
+    /**
+     * The greater-than-equal condition to be applied to a single field when querying for findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html#cfn-securityhub-automationrulev2-numberfilter-gte}
+     */
+    Gte?: number | undefined;
+    /**
+     * The less-than-equal condition to be applied to a single field when querying for findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html#cfn-securityhub-automationrulev2-numberfilter-lte}
+     */
+    Lte?: number | undefined;
+};
+/**
+ * Enables filtering of security findings based on boolean field values in OCSF
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfbooleanfilter.html}
+ */
+export type OcsfBooleanFilter = {
+    /**
+     * The name of the field
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfbooleanfilter.html#cfn-securityhub-automationrulev2-ocsfbooleanfilter-fieldname}
+     */
+    FieldName: "compliance.assessments.meets_criteria" | "vulnerabilities.is_exploit_available" | "vulnerabilities.is_fix_available";
+    /**
+     * Boolean filter for querying findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfbooleanfilter.html#cfn-securityhub-automationrulev2-ocsfbooleanfilter-filter}
+     */
+    Filter: BooleanFilter;
+};
+/**
+ * Enables filtering of security findings based on date and timestamp fields in OCSF
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfdatefilter.html}
+ */
+export type OcsfDateFilter = {
+    /**
+     * The name of the field
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfdatefilter.html#cfn-securityhub-automationrulev2-ocsfdatefilter-fieldname}
+     */
+    FieldName: "finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt";
+    /**
+     * A date filter for querying findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfdatefilter.html#cfn-securityhub-automationrulev2-ocsfdatefilter-filter}
+     */
+    Filter: DateFilter;
+};
+/**
+ * The filtering conditions that align with OCSF standards
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsffindingfilters.html}
+ */
+export type OcsfFindingFilters = {
+    /**
+     * Enables the creation of complex filtering conditions by combining filter
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsffindingfilters.html#cfn-securityhub-automationrulev2-ocsffindingfilters-compositefilters}
+     */
+    CompositeFilters?: CompositeFilter[] | undefined;
+    /**
+     * The logical operator used to combine multiple conditions
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsffindingfilters.html#cfn-securityhub-automationrulev2-ocsffindingfilters-compositeoperator}
+     */
+    CompositeOperator?: AllowedOperators | undefined;
+};
+/**
+ * Enables filtering of security findings based on map field values in OCSF
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfmapfilter.html}
+ */
+export type OcsfMapFilter = {
+    /**
+     * The name of the field
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfmapfilter.html#cfn-securityhub-automationrulev2-ocsfmapfilter-fieldname}
+     */
+    FieldName: "resources.tags";
+    /**
+     * A map filter for filtering findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfmapfilter.html#cfn-securityhub-automationrulev2-ocsfmapfilter-filter}
+     */
+    Filter: MapFilter;
+};
+/**
+ * Enables filtering of security findings based on numerical field values in OCSF
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfnumberfilter.html}
+ */
+export type OcsfNumberFilter = {
+    /**
+     * The name of the field
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfnumberfilter.html#cfn-securityhub-automationrulev2-ocsfnumberfilter-fieldname}
+     */
+    FieldName: "activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count";
+    /**
+     * A number filter for querying findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfnumberfilter.html#cfn-securityhub-automationrulev2-ocsfnumberfilter-filter}
+     */
+    Filter: NumberFilter;
+};
+/**
+ * The name of the field
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfield.html}
+ */
+export type OcsfStringField = "metadata.uid" | "activity_name" | "cloud.account.name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.feature.uid" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name";
+/**
+ * Enables filtering of security findings based on string field values in OCSF
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfilter.html}
+ */
+export type OcsfStringFilter = {
+    /**
+     * The name of the field
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfilter.html#cfn-securityhub-automationrulev2-ocsfstringfilter-fieldname}
+     */
+    FieldName: OcsfStringField;
+    /**
+     * A string filter for filtering findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfilter.html#cfn-securityhub-automationrulev2-ocsfstringfilter-filter}
+     */
+    Filter: StringFilter;
+};
+/**
+ * A string filter for filtering findings
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html}
+ */
+export type StringFilter = {
+    /**
+     * The condition to apply to a string value when filtering findings
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html#cfn-securityhub-automationrulev2-stringfilter-comparison}
+     */
+    Comparison: "EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS";
+    /**
+     * The string filter value
+     * @minLength 1
+     * @maxLength 4096
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html#cfn-securityhub-automationrulev2-stringfilter-value}
+     */
+    Value: string;
+};
+//# sourceMappingURL=aws-securityhub-automationrulev2.d.ts.map

package/out/exports/resources.generated/aws-securityhub-hubv2.d.ts

@@ -0,0 +1,30 @@
+import type { ResourceDefinitionWithAttributes } from "../main.ts";
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
+ */
+export type SecurityHubHubV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::HubV2", SecurityHubHubV2Props, SecurityHubHubV2Attribs>;
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
+ */
+export type SecurityHubHubV2Props = {
+    /**
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-tags}
+     */
+    Tags?: Record<string, string> | undefined;
+};
+/**
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#aws-resource-securityhub-hubv2-return-values}
+ */
+export type SecurityHubHubV2Attribs = {
+    /**
+     * The Amazon Resource Name of the Security Hub V2 resource.
+     * @pattern arn:aws(?:-[a-z]+)*:securityhub:[a-z0-9-]+:\d{12}:hubv2/[^/](.{0,1022}[^/:])?$
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-hubv2arn}
+     */
+    HubV2Arn: string;
+    /**
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-subscribedat}
+     */
+    SubscribedAt: string;
+};
+//# sourceMappingURL=aws-securityhub-hubv2.d.ts.map

package/out/exports/resources.generated/aws-securityhub-insight.d.ts

@@ -807,7 +807,7 @@ export type StringFilter = {
      * - `ResourceType NOT_EQUALS AwsIamPolicy`
      * - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
      *
-     * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub User Guide* .
+     * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub User Guide* .
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-stringfilter.html#cfn-securityhub-insight-stringfilter-comparison}
      */
     Comparison: StringFilterComparison;

package/out/exports/resources.generated/aws-synthetics-canary.d.ts

@@ -277,6 +277,11 @@ export type RunConfig = {
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-runconfig.html#cfn-synthetics-canary-runconfig-environmentvariables}
      */
     EnvironmentVariables?: Record<string, string> | undefined;
+    /**
+     * Provide ephemeralStorage available for canary in MB
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-runconfig.html#cfn-synthetics-canary-runconfig-ephemeralstorage}
+     */
+    EphemeralStorage?: number | undefined;
     /**
      * The maximum amount of memory that the canary can use while running. This value must be a multiple of 64. The range is 960 to 3008.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-runconfig.html#cfn-synthetics-canary-runconfig-memoryinmb}

package/out/exports/resources.generated/aws-wafv2-rulegroup.d.ts

@@ -121,6 +121,24 @@ export type AndStatement = {
      */
     Statements: Statement[];
 };
+/**
+ * A rule statement that inspects web traffic based on the Autonomous System Number (ASN) associated with the request's IP address.
+ *
+ * For additional details, see [ASN match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-asn-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-asnmatchstatement.html}
+ */
+export type AsnMatchStatement = {
+    /**
+     * Contains one or more Autonomous System Numbers (ASNs). ASNs are unique identifiers assigned to large internet networks managed by organizations such as internet service providers, enterprises, universities, or government agencies.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-asnmatchstatement.html#cfn-wafv2-rulegroup-asnmatchstatement-asnlist}
+     */
+    AsnList?: number[] | undefined;
+    /**
+     * The configuration for inspecting IP addresses to match against an ASN in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-asnmatchstatement.html#cfn-wafv2-rulegroup-asnmatchstatement-forwardedipconfig}
+     */
+    ForwardedIPConfig?: ForwardedIPConfiguration | undefined;
+};
 /**
  * Block traffic towards application.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-blockaction.html}
@@ -561,7 +579,7 @@ export type FieldToMatch = {
  *
  * > If the specified header isn't present in the request, AWS WAF doesn't apply the rule to the web request at all.
  *
- * This configuration is used for `GeoMatchStatement` and `RateBasedStatement` . For `IPSetReferenceStatement` , use `IPSetForwardedIPConfig` instead.
+ * This configuration is used for `GeoMatchStatement` , `AsnMatchStatement` , and `RateBasedStatement` . For `IPSetReferenceStatement` , use `IPSetForwardedIPConfig` instead.
  *
  * AWS WAF only evaluates the first IP address found in the specified HTTP header.
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-forwardedipconfiguration.html}
@@ -1097,6 +1115,11 @@ export type RateBasedStatement = {
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-ratebasedstatementcustomkey.html}
  */
 export type RateBasedStatementCustomKey = {
+    /**
+     * Use an Autonomous System Number (ASN) derived from the request's originating or forwarded IP address as an aggregate key. Each distinct ASN contributes to the aggregation instance.
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-ratebasedstatementcustomkey.html#cfn-wafv2-rulegroup-ratebasedstatementcustomkey-asn}
+     */
+    ASN?: Record<string, unknown> | undefined;
     /**
      * Use the value of a cookie in the request as an aggregate key. Each distinct value in the cookie contributes to the aggregation instance. If you use a single cookie as your custom key, then each value fully defines an aggregation instance.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-ratebasedstatementcustomkey.html#cfn-wafv2-rulegroup-ratebasedstatementcustomkey-cookie}
@@ -1527,6 +1550,13 @@ export type Statement = {
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-andstatement}
      */
     AndStatement?: AndStatement | undefined;
+    /**
+     * A rule statement that inspects web traffic based on the Autonomous System Number (ASN) associated with the request's IP address.
+     *
+     * For additional details, see [ASN match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-asn-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
+     * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-asnmatchstatement}
+     */
+    AsnMatchStatement?: AsnMatchStatement | undefined;
     /**
      * A rule statement that defines a string match search for AWS WAF to apply to web requests. The byte match statement provides the bytes to search for, the location in requests that you want AWS WAF to search, and other settings. The bytes to search for are typically a string that corresponds with ASCII characters. In the AWS WAF console and the developer guide, this is called a string match statement.
      * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-bytematchstatement}