@propulsionworks/cloudformation 0.1.12 → 0.1.13
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-accessanalyzer-analyzer.d.ts +38 -0
- package/out/exports/resources.generated/aws-amplify-app.d.ts +30 -0
- package/out/exports/resources.generated/aws-cleanrooms-collaboration.d.ts +3 -3
- package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +20 -2
- package/out/exports/resources.generated/aws-customerprofiles-segmentdefinition.d.ts +30 -0
- package/out/exports/resources.generated/aws-datazone-projectprofile.d.ts +101 -0
- package/out/exports/resources.generated/aws-deadline-fleet.d.ts +2 -1
- package/out/exports/resources.generated/aws-ec2-trafficmirrorfilter.d.ts +7 -1
- package/out/exports/resources.generated/aws-ecr-repositorycreationtemplate.d.ts +1 -1
- package/out/exports/resources.generated/aws-ecs-service.d.ts +60 -2
- package/out/exports/resources.generated/aws-inspectorv2-filter.d.ts +56 -0
- package/out/exports/resources.generated/aws-kendra-datasource.d.ts +113 -1
- package/out/exports/resources.generated/aws-kms-key.d.ts +9 -2
- package/out/exports/resources.generated/aws-lambda-eventsourcemapping.d.ts +0 -7
- package/out/exports/resources.generated/aws-mediatailor-playbackconfiguration.d.ts +66 -0
- package/out/exports/resources.generated/aws-mpa-approvalteam.d.ts +2 -0
- package/out/exports/resources.generated/aws-mpa-identitysource.d.ts +2 -0
- package/out/exports/resources.generated/aws-networkfirewall-rulegroup.d.ts +1 -1
- package/out/exports/resources.generated/aws-networkfirewall-tlsinspectionconfiguration.d.ts +1 -1
- package/out/exports/resources.generated/aws-opsworkscm-server.d.ts +1 -0
- package/out/exports/resources.generated/aws-organizations-policy.d.ts +1 -1
- package/out/exports/resources.generated/aws-rum-appmonitor.d.ts +1 -1
- package/out/exports/resources.generated/aws-sagemaker-model.d.ts +2 -0
- package/out/exports/resources.generated/aws-sagemaker-modelpackage.d.ts +2 -0
- package/out/exports/resources.generated/aws-securityhub-aggregatorv2.d.ts +44 -0
- package/out/exports/resources.generated/aws-securityhub-automationrule.d.ts +1 -1
- package/out/exports/resources.generated/aws-securityhub-automationrulev2.d.ts +403 -0
- package/out/exports/resources.generated/aws-securityhub-hubv2.d.ts +30 -0
- package/out/exports/resources.generated/aws-securityhub-insight.d.ts +1 -1
- package/out/exports/resources.generated/aws-synthetics-canary.d.ts +5 -0
- package/out/exports/resources.generated/aws-wafv2-rulegroup.d.ts +9 -1
- package/out/exports/resources.generated/aws-wafv2-webacl.d.ts +73 -9
- package/package.json +1 -1
|
@@ -0,0 +1,403 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* Resource schema for AWS::SecurityHub::AutomationRuleV2
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
5
|
+
*/
|
|
6
|
+
export type SecurityHubAutomationRuleV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::AutomationRuleV2", SecurityHubAutomationRuleV2Props, SecurityHubAutomationRuleV2Attribs>;
|
|
7
|
+
/**
|
|
8
|
+
* Resource schema for AWS::SecurityHub::AutomationRuleV2
|
|
9
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
10
|
+
*/
|
|
11
|
+
export type SecurityHubAutomationRuleV2Props = {
|
|
12
|
+
/**
|
|
13
|
+
* A list of actions to be performed when the rule criteria is met
|
|
14
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-actions}
|
|
15
|
+
*/
|
|
16
|
+
Actions: AutomationRulesActionV2[];
|
|
17
|
+
/**
|
|
18
|
+
* Defines the parameters and conditions used to evaluate and filter security findings
|
|
19
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-criteria}
|
|
20
|
+
*/
|
|
21
|
+
Criteria: Criteria;
|
|
22
|
+
/**
|
|
23
|
+
* A description of the automation rule
|
|
24
|
+
* @minLength 1
|
|
25
|
+
* @maxLength 256
|
|
26
|
+
* @pattern .*\S.*
|
|
27
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-description}
|
|
28
|
+
*/
|
|
29
|
+
Description: string;
|
|
30
|
+
/**
|
|
31
|
+
* The name of the automation rule
|
|
32
|
+
* @minLength 1
|
|
33
|
+
* @maxLength 256
|
|
34
|
+
* @pattern .*\S.*
|
|
35
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-rulename}
|
|
36
|
+
*/
|
|
37
|
+
RuleName: string;
|
|
38
|
+
/**
|
|
39
|
+
* The value for the rule priority
|
|
40
|
+
* @min 1
|
|
41
|
+
* @max 1000
|
|
42
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-ruleorder}
|
|
43
|
+
*/
|
|
44
|
+
RuleOrder: number;
|
|
45
|
+
/**
|
|
46
|
+
* The status of the automation rule
|
|
47
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-rulestatus}
|
|
48
|
+
*/
|
|
49
|
+
RuleStatus?: "ENABLED" | "DISABLED" | undefined;
|
|
50
|
+
/**
|
|
51
|
+
* A key-value pair to associate with a resource.
|
|
52
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-tags}
|
|
53
|
+
*/
|
|
54
|
+
Tags?: Record<string, string> | undefined;
|
|
55
|
+
};
|
|
56
|
+
/**
|
|
57
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#aws-resource-securityhub-automationrulev2-return-values}
|
|
58
|
+
*/
|
|
59
|
+
export type SecurityHubAutomationRuleV2Attribs = {
|
|
60
|
+
/**
|
|
61
|
+
* The timestamp formatted in ISO8601
|
|
62
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-createdat}
|
|
63
|
+
*/
|
|
64
|
+
CreatedAt: string;
|
|
65
|
+
/**
|
|
66
|
+
* The ARN of the automation rule
|
|
67
|
+
* @pattern ^arn:aws\S*:securityhub:[a-z0-9-]+:[0-9]{12}:automation-rulev2/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
|
|
68
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-rulearn}
|
|
69
|
+
*/
|
|
70
|
+
RuleArn: string;
|
|
71
|
+
/**
|
|
72
|
+
* The ID of the automation rule
|
|
73
|
+
* @pattern ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
|
|
74
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-ruleid}
|
|
75
|
+
*/
|
|
76
|
+
RuleId: string;
|
|
77
|
+
/**
|
|
78
|
+
* The timestamp formatted in ISO8601
|
|
79
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html#cfn-securityhub-automationrulev2-updatedat}
|
|
80
|
+
*/
|
|
81
|
+
UpdatedAt: string;
|
|
82
|
+
};
|
|
83
|
+
/**
|
|
84
|
+
* The logical operator used to combine multiple conditions
|
|
85
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-allowedoperators.html}
|
|
86
|
+
*/
|
|
87
|
+
export type AllowedOperators = "AND" | "OR";
|
|
88
|
+
/**
|
|
89
|
+
* Allows you to configure automated responses
|
|
90
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html}
|
|
91
|
+
*/
|
|
92
|
+
export type AutomationRulesActionV2 = {
|
|
93
|
+
/**
|
|
94
|
+
* The settings for integrating automation rule actions with external systems or service
|
|
95
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html#cfn-securityhub-automationrulev2-automationrulesactionv2-externalintegrationconfiguration}
|
|
96
|
+
*/
|
|
97
|
+
ExternalIntegrationConfiguration?: ExternalIntegrationConfiguration | undefined;
|
|
98
|
+
/**
|
|
99
|
+
* The changes to be applied to fields in a security finding when an automation rule is triggered
|
|
100
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html#cfn-securityhub-automationrulev2-automationrulesactionv2-findingfieldsupdate}
|
|
101
|
+
*/
|
|
102
|
+
FindingFieldsUpdate?: AutomationRulesFindingFieldsUpdateV2 | undefined;
|
|
103
|
+
/**
|
|
104
|
+
* The category of action to be executed by the automation rule
|
|
105
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html#cfn-securityhub-automationrulev2-automationrulesactionv2-type}
|
|
106
|
+
*/
|
|
107
|
+
Type: "FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION";
|
|
108
|
+
};
|
|
109
|
+
/**
|
|
110
|
+
* The changes to be applied to fields in a security finding when an automation rule is triggered
|
|
111
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html}
|
|
112
|
+
*/
|
|
113
|
+
export type AutomationRulesFindingFieldsUpdateV2 = {
|
|
114
|
+
/**
|
|
115
|
+
* Notes or contextual information for findings that are modified by the automation rule
|
|
116
|
+
* @pattern .*\S.*
|
|
117
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html#cfn-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2-comment}
|
|
118
|
+
*/
|
|
119
|
+
Comment?: string | undefined;
|
|
120
|
+
/**
|
|
121
|
+
* The severity level to be assigned to findings that match the automation rule criteria
|
|
122
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html#cfn-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2-severityid}
|
|
123
|
+
*/
|
|
124
|
+
SeverityId?: number | undefined;
|
|
125
|
+
/**
|
|
126
|
+
* The status to be applied to findings that match automation rule criteria
|
|
127
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2.html#cfn-securityhub-automationrulev2-automationrulesfindingfieldsupdatev2-statusid}
|
|
128
|
+
*/
|
|
129
|
+
StatusId?: number | undefined;
|
|
130
|
+
};
|
|
131
|
+
/**
|
|
132
|
+
* Boolean filter for querying findings
|
|
133
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-booleanfilter.html}
|
|
134
|
+
*/
|
|
135
|
+
export type BooleanFilter = {
|
|
136
|
+
/**
|
|
137
|
+
* The value of the boolean
|
|
138
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-booleanfilter.html#cfn-securityhub-automationrulev2-booleanfilter-value}
|
|
139
|
+
*/
|
|
140
|
+
Value: boolean;
|
|
141
|
+
};
|
|
142
|
+
/**
|
|
143
|
+
* Enables the creation of filtering criteria for security findings
|
|
144
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html}
|
|
145
|
+
*/
|
|
146
|
+
export type CompositeFilter = {
|
|
147
|
+
/**
|
|
148
|
+
* Enables filtering based on boolean field values
|
|
149
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-booleanfilters}
|
|
150
|
+
*/
|
|
151
|
+
BooleanFilters?: OcsfBooleanFilter[] | undefined;
|
|
152
|
+
/**
|
|
153
|
+
* Enables filtering based on date and timestamp fields
|
|
154
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-datefilters}
|
|
155
|
+
*/
|
|
156
|
+
DateFilters?: OcsfDateFilter[] | undefined;
|
|
157
|
+
/**
|
|
158
|
+
* Enables filtering based on map field value
|
|
159
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-mapfilters}
|
|
160
|
+
*/
|
|
161
|
+
MapFilters?: OcsfMapFilter[] | undefined;
|
|
162
|
+
/**
|
|
163
|
+
* Enables filtering based on numerical field values
|
|
164
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-numberfilters}
|
|
165
|
+
*/
|
|
166
|
+
NumberFilters?: OcsfNumberFilter[] | undefined;
|
|
167
|
+
/**
|
|
168
|
+
* The logical operator used to combine multiple conditions
|
|
169
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-operator}
|
|
170
|
+
*/
|
|
171
|
+
Operator?: AllowedOperators | undefined;
|
|
172
|
+
/**
|
|
173
|
+
* Enables filtering based on string field values
|
|
174
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-compositefilter.html#cfn-securityhub-automationrulev2-compositefilter-stringfilters}
|
|
175
|
+
*/
|
|
176
|
+
StringFilters?: OcsfStringFilter[] | undefined;
|
|
177
|
+
};
|
|
178
|
+
/**
|
|
179
|
+
* Defines the parameters and conditions used to evaluate and filter security findings
|
|
180
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-criteria.html}
|
|
181
|
+
*/
|
|
182
|
+
export type Criteria = {
|
|
183
|
+
/**
|
|
184
|
+
* The filtering conditions that align with OCSF standards
|
|
185
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-criteria.html#cfn-securityhub-automationrulev2-criteria-ocsffindingcriteria}
|
|
186
|
+
*/
|
|
187
|
+
OcsfFindingCriteria?: OcsfFindingFilters | undefined;
|
|
188
|
+
};
|
|
189
|
+
/**
|
|
190
|
+
* A date filter for querying findings
|
|
191
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html}
|
|
192
|
+
*/
|
|
193
|
+
export type DateFilter = {
|
|
194
|
+
/**
|
|
195
|
+
* A date range for the date filter
|
|
196
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-daterange}
|
|
197
|
+
*/
|
|
198
|
+
DateRange?: DateRange | undefined;
|
|
199
|
+
/**
|
|
200
|
+
* The timestamp formatted in ISO8601
|
|
201
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-end}
|
|
202
|
+
*/
|
|
203
|
+
End?: string | undefined;
|
|
204
|
+
/**
|
|
205
|
+
* The timestamp formatted in ISO8601
|
|
206
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-start}
|
|
207
|
+
*/
|
|
208
|
+
Start?: string | undefined;
|
|
209
|
+
};
|
|
210
|
+
/**
|
|
211
|
+
* A date range for the date filter
|
|
212
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-daterange.html}
|
|
213
|
+
*/
|
|
214
|
+
export type DateRange = {
|
|
215
|
+
/**
|
|
216
|
+
* A date range unit for the date filter
|
|
217
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-daterange.html#cfn-securityhub-automationrulev2-daterange-unit}
|
|
218
|
+
*/
|
|
219
|
+
Unit: "DAYS";
|
|
220
|
+
/**
|
|
221
|
+
* A date range value for the date filter
|
|
222
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-daterange.html#cfn-securityhub-automationrulev2-daterange-value}
|
|
223
|
+
*/
|
|
224
|
+
Value: number;
|
|
225
|
+
};
|
|
226
|
+
/**
|
|
227
|
+
* The settings for integrating automation rule actions with external systems or service
|
|
228
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-externalintegrationconfiguration.html}
|
|
229
|
+
*/
|
|
230
|
+
export type ExternalIntegrationConfiguration = {
|
|
231
|
+
/**
|
|
232
|
+
* The ARN of the connector that establishes the integration
|
|
233
|
+
* @pattern .*\S.*
|
|
234
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-externalintegrationconfiguration.html#cfn-securityhub-automationrulev2-externalintegrationconfiguration-connectorarn}
|
|
235
|
+
*/
|
|
236
|
+
ConnectorArn?: string | undefined;
|
|
237
|
+
};
|
|
238
|
+
/**
|
|
239
|
+
* A map filter for filtering findings
|
|
240
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html}
|
|
241
|
+
*/
|
|
242
|
+
export type MapFilter = {
|
|
243
|
+
/**
|
|
244
|
+
* The condition to apply to the key value when filtering findings with a map filter
|
|
245
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html#cfn-securityhub-automationrulev2-mapfilter-comparison}
|
|
246
|
+
*/
|
|
247
|
+
Comparison: "EQUALS" | "NOT_EQUALS";
|
|
248
|
+
/**
|
|
249
|
+
* The key of the map filter
|
|
250
|
+
* @minLength 1
|
|
251
|
+
* @maxLength 4096
|
|
252
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html#cfn-securityhub-automationrulev2-mapfilter-key}
|
|
253
|
+
*/
|
|
254
|
+
Key: string;
|
|
255
|
+
/**
|
|
256
|
+
* The value for the key in the map filter
|
|
257
|
+
* @minLength 1
|
|
258
|
+
* @maxLength 4096
|
|
259
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html#cfn-securityhub-automationrulev2-mapfilter-value}
|
|
260
|
+
*/
|
|
261
|
+
Value: string;
|
|
262
|
+
};
|
|
263
|
+
/**
|
|
264
|
+
* A number filter for querying findings
|
|
265
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html}
|
|
266
|
+
*/
|
|
267
|
+
export type NumberFilter = {
|
|
268
|
+
/**
|
|
269
|
+
* The equal-to condition to be applied to a single field when querying for findings
|
|
270
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html#cfn-securityhub-automationrulev2-numberfilter-eq}
|
|
271
|
+
*/
|
|
272
|
+
Eq?: number | undefined;
|
|
273
|
+
/**
|
|
274
|
+
* The greater-than-equal condition to be applied to a single field when querying for findings
|
|
275
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html#cfn-securityhub-automationrulev2-numberfilter-gte}
|
|
276
|
+
*/
|
|
277
|
+
Gte?: number | undefined;
|
|
278
|
+
/**
|
|
279
|
+
* The less-than-equal condition to be applied to a single field when querying for findings
|
|
280
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-numberfilter.html#cfn-securityhub-automationrulev2-numberfilter-lte}
|
|
281
|
+
*/
|
|
282
|
+
Lte?: number | undefined;
|
|
283
|
+
};
|
|
284
|
+
/**
|
|
285
|
+
* Enables filtering of security findings based on boolean field values in OCSF
|
|
286
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfbooleanfilter.html}
|
|
287
|
+
*/
|
|
288
|
+
export type OcsfBooleanFilter = {
|
|
289
|
+
/**
|
|
290
|
+
* The name of the field
|
|
291
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfbooleanfilter.html#cfn-securityhub-automationrulev2-ocsfbooleanfilter-fieldname}
|
|
292
|
+
*/
|
|
293
|
+
FieldName: "compliance.assessments.meets_criteria" | "vulnerabilities.is_exploit_available" | "vulnerabilities.is_fix_available";
|
|
294
|
+
/**
|
|
295
|
+
* Boolean filter for querying findings
|
|
296
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfbooleanfilter.html#cfn-securityhub-automationrulev2-ocsfbooleanfilter-filter}
|
|
297
|
+
*/
|
|
298
|
+
Filter: BooleanFilter;
|
|
299
|
+
};
|
|
300
|
+
/**
|
|
301
|
+
* Enables filtering of security findings based on date and timestamp fields in OCSF
|
|
302
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfdatefilter.html}
|
|
303
|
+
*/
|
|
304
|
+
export type OcsfDateFilter = {
|
|
305
|
+
/**
|
|
306
|
+
* The name of the field
|
|
307
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfdatefilter.html#cfn-securityhub-automationrulev2-ocsfdatefilter-fieldname}
|
|
308
|
+
*/
|
|
309
|
+
FieldName: "finding_info.created_time_dt" | "finding_info.first_seen_time_dt" | "finding_info.last_seen_time_dt" | "finding_info.modified_time_dt";
|
|
310
|
+
/**
|
|
311
|
+
* A date filter for querying findings
|
|
312
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfdatefilter.html#cfn-securityhub-automationrulev2-ocsfdatefilter-filter}
|
|
313
|
+
*/
|
|
314
|
+
Filter: DateFilter;
|
|
315
|
+
};
|
|
316
|
+
/**
|
|
317
|
+
* The filtering conditions that align with OCSF standards
|
|
318
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsffindingfilters.html}
|
|
319
|
+
*/
|
|
320
|
+
export type OcsfFindingFilters = {
|
|
321
|
+
/**
|
|
322
|
+
* Enables the creation of complex filtering conditions by combining filter
|
|
323
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsffindingfilters.html#cfn-securityhub-automationrulev2-ocsffindingfilters-compositefilters}
|
|
324
|
+
*/
|
|
325
|
+
CompositeFilters?: CompositeFilter[] | undefined;
|
|
326
|
+
/**
|
|
327
|
+
* The logical operator used to combine multiple conditions
|
|
328
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsffindingfilters.html#cfn-securityhub-automationrulev2-ocsffindingfilters-compositeoperator}
|
|
329
|
+
*/
|
|
330
|
+
CompositeOperator?: AllowedOperators | undefined;
|
|
331
|
+
};
|
|
332
|
+
/**
|
|
333
|
+
* Enables filtering of security findings based on map field values in OCSF
|
|
334
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfmapfilter.html}
|
|
335
|
+
*/
|
|
336
|
+
export type OcsfMapFilter = {
|
|
337
|
+
/**
|
|
338
|
+
* The name of the field
|
|
339
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfmapfilter.html#cfn-securityhub-automationrulev2-ocsfmapfilter-fieldname}
|
|
340
|
+
*/
|
|
341
|
+
FieldName: "resources.tags";
|
|
342
|
+
/**
|
|
343
|
+
* A map filter for filtering findings
|
|
344
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfmapfilter.html#cfn-securityhub-automationrulev2-ocsfmapfilter-filter}
|
|
345
|
+
*/
|
|
346
|
+
Filter: MapFilter;
|
|
347
|
+
};
|
|
348
|
+
/**
|
|
349
|
+
* Enables filtering of security findings based on numerical field values in OCSF
|
|
350
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfnumberfilter.html}
|
|
351
|
+
*/
|
|
352
|
+
export type OcsfNumberFilter = {
|
|
353
|
+
/**
|
|
354
|
+
* The name of the field
|
|
355
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfnumberfilter.html#cfn-securityhub-automationrulev2-ocsfnumberfilter-fieldname}
|
|
356
|
+
*/
|
|
357
|
+
FieldName: "activity_id" | "compliance.status_id" | "confidence_score" | "severity_id" | "status_id" | "finding_info.related_events_count";
|
|
358
|
+
/**
|
|
359
|
+
* A number filter for querying findings
|
|
360
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfnumberfilter.html#cfn-securityhub-automationrulev2-ocsfnumberfilter-filter}
|
|
361
|
+
*/
|
|
362
|
+
Filter: NumberFilter;
|
|
363
|
+
};
|
|
364
|
+
/**
|
|
365
|
+
* The name of the field
|
|
366
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfield.html}
|
|
367
|
+
*/
|
|
368
|
+
export type OcsfStringField = "metadata.uid" | "activity_name" | "cloud.account.name" | "cloud.account.uid" | "cloud.provider" | "cloud.region" | "compliance.assessments.category" | "compliance.assessments.name" | "compliance.control" | "compliance.status" | "compliance.standards" | "finding_info.desc" | "finding_info.src_url" | "finding_info.title" | "finding_info.types" | "finding_info.uid" | "finding_info.related_events.uid" | "finding_info.related_events.product.uid" | "finding_info.related_events.title" | "metadata.product.feature.uid" | "metadata.product.name" | "metadata.product.uid" | "metadata.product.vendor_name" | "remediation.desc" | "remediation.references" | "resources.cloud_partition" | "resources.name" | "resources.region" | "resources.type" | "resources.uid" | "severity" | "status" | "comment" | "vulnerabilities.fix_coverage" | "class_name";
|
|
369
|
+
/**
|
|
370
|
+
* Enables filtering of security findings based on string field values in OCSF
|
|
371
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfilter.html}
|
|
372
|
+
*/
|
|
373
|
+
export type OcsfStringFilter = {
|
|
374
|
+
/**
|
|
375
|
+
* The name of the field
|
|
376
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfilter.html#cfn-securityhub-automationrulev2-ocsfstringfilter-fieldname}
|
|
377
|
+
*/
|
|
378
|
+
FieldName: OcsfStringField;
|
|
379
|
+
/**
|
|
380
|
+
* A string filter for filtering findings
|
|
381
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-ocsfstringfilter.html#cfn-securityhub-automationrulev2-ocsfstringfilter-filter}
|
|
382
|
+
*/
|
|
383
|
+
Filter: StringFilter;
|
|
384
|
+
};
|
|
385
|
+
/**
|
|
386
|
+
* A string filter for filtering findings
|
|
387
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html}
|
|
388
|
+
*/
|
|
389
|
+
export type StringFilter = {
|
|
390
|
+
/**
|
|
391
|
+
* The condition to apply to a string value when filtering findings
|
|
392
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html#cfn-securityhub-automationrulev2-stringfilter-comparison}
|
|
393
|
+
*/
|
|
394
|
+
Comparison: "EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS";
|
|
395
|
+
/**
|
|
396
|
+
* The string filter value
|
|
397
|
+
* @minLength 1
|
|
398
|
+
* @maxLength 4096
|
|
399
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html#cfn-securityhub-automationrulev2-stringfilter-value}
|
|
400
|
+
*/
|
|
401
|
+
Value: string;
|
|
402
|
+
};
|
|
403
|
+
//# sourceMappingURL=aws-securityhub-automationrulev2.d.ts.map
|
|
@@ -0,0 +1,30 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
|
|
4
|
+
*/
|
|
5
|
+
export type SecurityHubHubV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::HubV2", SecurityHubHubV2Props, SecurityHubHubV2Attribs>;
|
|
6
|
+
/**
|
|
7
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
|
|
8
|
+
*/
|
|
9
|
+
export type SecurityHubHubV2Props = {
|
|
10
|
+
/**
|
|
11
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-tags}
|
|
12
|
+
*/
|
|
13
|
+
Tags?: Record<string, string> | undefined;
|
|
14
|
+
};
|
|
15
|
+
/**
|
|
16
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#aws-resource-securityhub-hubv2-return-values}
|
|
17
|
+
*/
|
|
18
|
+
export type SecurityHubHubV2Attribs = {
|
|
19
|
+
/**
|
|
20
|
+
* The Amazon Resource Name of the Security Hub V2 resource.
|
|
21
|
+
* @pattern arn:aws(?:-[a-z]+)*:securityhub:[a-z0-9-]+:\d{12}:hubv2/[^/](.{0,1022}[^/:])?$
|
|
22
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-hubv2arn}
|
|
23
|
+
*/
|
|
24
|
+
HubV2Arn: string;
|
|
25
|
+
/**
|
|
26
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-subscribedat}
|
|
27
|
+
*/
|
|
28
|
+
SubscribedAt: string;
|
|
29
|
+
};
|
|
30
|
+
//# sourceMappingURL=aws-securityhub-hubv2.d.ts.map
|
|
@@ -807,7 +807,7 @@ export type StringFilter = {
|
|
|
807
807
|
* - `ResourceType NOT_EQUALS AwsIamPolicy`
|
|
808
808
|
* - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
|
|
809
809
|
*
|
|
810
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub User Guide* .
|
|
810
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub User Guide* .
|
|
811
811
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-stringfilter.html#cfn-securityhub-insight-stringfilter-comparison}
|
|
812
812
|
*/
|
|
813
813
|
Comparison: StringFilterComparison;
|
|
@@ -277,6 +277,11 @@ export type RunConfig = {
|
|
|
277
277
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-runconfig.html#cfn-synthetics-canary-runconfig-environmentvariables}
|
|
278
278
|
*/
|
|
279
279
|
EnvironmentVariables?: Record<string, string> | undefined;
|
|
280
|
+
/**
|
|
281
|
+
* Provide ephemeralStorage available for canary in MB
|
|
282
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-runconfig.html#cfn-synthetics-canary-runconfig-ephemeralstorage}
|
|
283
|
+
*/
|
|
284
|
+
EphemeralStorage?: number | undefined;
|
|
280
285
|
/**
|
|
281
286
|
* The maximum amount of memory that the canary can use while running. This value must be a multiple of 64. The range is 960 to 3008.
|
|
282
287
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-synthetics-canary-runconfig.html#cfn-synthetics-canary-runconfig-memoryinmb}
|
|
@@ -122,14 +122,19 @@ export type AndStatement = {
|
|
|
122
122
|
Statements: Statement[];
|
|
123
123
|
};
|
|
124
124
|
/**
|
|
125
|
+
* A rule statement that inspects web traffic based on the Autonomous System Number (ASN) associated with the request's IP address.
|
|
126
|
+
*
|
|
127
|
+
* For additional details, see [ASN match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-asn-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
|
|
125
128
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-asnmatchstatement.html}
|
|
126
129
|
*/
|
|
127
130
|
export type AsnMatchStatement = {
|
|
128
131
|
/**
|
|
132
|
+
* Contains one or more Autonomous System Numbers (ASNs). ASNs are unique identifiers assigned to large internet networks managed by organizations such as internet service providers, enterprises, universities, or government agencies.
|
|
129
133
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-asnmatchstatement.html#cfn-wafv2-rulegroup-asnmatchstatement-asnlist}
|
|
130
134
|
*/
|
|
131
135
|
AsnList?: number[] | undefined;
|
|
132
136
|
/**
|
|
137
|
+
* The configuration for inspecting IP addresses to match against an ASN in an HTTP header that you specify, instead of using the IP address that's reported by the web request origin. Commonly, this is the X-Forwarded-For (XFF) header, but you can specify any header name.
|
|
133
138
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-asnmatchstatement.html#cfn-wafv2-rulegroup-asnmatchstatement-forwardedipconfig}
|
|
134
139
|
*/
|
|
135
140
|
ForwardedIPConfig?: ForwardedIPConfiguration | undefined;
|
|
@@ -1111,7 +1116,7 @@ export type RateBasedStatement = {
|
|
|
1111
1116
|
*/
|
|
1112
1117
|
export type RateBasedStatementCustomKey = {
|
|
1113
1118
|
/**
|
|
1114
|
-
*
|
|
1119
|
+
* Use an Autonomous System Number (ASN) derived from the request's originating or forwarded IP address as an aggregate key. Each distinct ASN contributes to the aggregation instance.
|
|
1115
1120
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-ratebasedstatementcustomkey.html#cfn-wafv2-rulegroup-ratebasedstatementcustomkey-asn}
|
|
1116
1121
|
*/
|
|
1117
1122
|
ASN?: Record<string, unknown> | undefined;
|
|
@@ -1546,6 +1551,9 @@ export type Statement = {
|
|
|
1546
1551
|
*/
|
|
1547
1552
|
AndStatement?: AndStatement | undefined;
|
|
1548
1553
|
/**
|
|
1554
|
+
* A rule statement that inspects web traffic based on the Autonomous System Number (ASN) associated with the request's IP address.
|
|
1555
|
+
*
|
|
1556
|
+
* For additional details, see [ASN match rule statement](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-type-asn-match.html) in the [AWS WAF Developer Guide](https://docs.aws.amazon.com/waf/latest/developerguide/waf-chapter.html) .
|
|
1549
1557
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-wafv2-rulegroup-statement.html#cfn-wafv2-rulegroup-statement-asnmatchstatement}
|
|
1550
1558
|
*/
|
|
1551
1559
|
AsnMatchStatement?: AsnMatchStatement | undefined;
|