@propulsionworks/cloudformation 0.1.37 → 0.1.39
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-arcregionswitch-plan.d.ts +3 -3
- package/out/exports/resources.generated/aws-backup-backupplan.d.ts +1 -0
- package/out/exports/resources.generated/aws-backup-logicallyairgappedbackupvault.d.ts +3 -0
- package/out/exports/resources.generated/aws-bedrock-dataautomationproject.d.ts +78 -0
- package/out/exports/resources.generated/aws-bedrock-knowledgebase.d.ts +57 -3
- package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +11 -5
- package/out/exports/resources.generated/aws-ce-costcategory.d.ts +1 -1
- package/out/exports/resources.generated/aws-cleanrooms-analysistemplate.d.ts +71 -0
- package/out/exports/resources.generated/aws-cleanrooms-collaboration.d.ts +16 -0
- package/out/exports/resources.generated/aws-cleanrooms-membership.d.ts +16 -0
- package/out/exports/resources.generated/aws-cloudfront-anycastiplist.d.ts +20 -0
- package/out/exports/resources.generated/aws-config-configurationrecorder.d.ts +1 -1
- package/out/exports/resources.generated/aws-connect-datatable.d.ts +82 -0
- package/out/exports/resources.generated/aws-connect-datatableattribute.d.ts +94 -0
- package/out/exports/resources.generated/aws-connect-datatablerecord.d.ts +59 -0
- package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +132 -1
- package/out/exports/resources.generated/aws-connect-securityprofile.d.ts +10 -9
- package/out/exports/resources.generated/aws-connect-workspace.d.ts +348 -0
- package/out/exports/resources.generated/aws-connectcampaignsv2-campaign.d.ts +107 -1
- package/out/exports/resources.generated/aws-customerprofiles-segmentdefinition.d.ts +5 -1
- package/out/exports/resources.generated/aws-datazone-connection.d.ts +19 -1
- package/out/exports/resources.generated/aws-devopsagent-agentspace.d.ts +56 -0
- package/out/exports/resources.generated/aws-devopsagent-association.d.ts +453 -0
- package/out/exports/resources.generated/aws-dsql-cluster.d.ts +5 -0
- package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +7 -0
- package/out/exports/resources.generated/aws-ec2-networkinterface.d.ts +5 -0
- package/out/exports/resources.generated/aws-ec2-spotfleet.d.ts +12 -0
- package/out/exports/resources.generated/aws-ecs-expressgatewayservice.d.ts +48 -0
- package/out/exports/resources.generated/aws-eks-capability.d.ts +27 -15
- package/out/exports/resources.generated/aws-eks-nodegroup.d.ts +58 -0
- package/out/exports/resources.generated/aws-entityresolution-matchingworkflow.d.ts +18 -1
- package/out/exports/resources.generated/aws-fsx-s3accesspointattachment.d.ts +115 -1
- package/out/exports/resources.generated/aws-gamelift-script.d.ts +1 -1
- package/out/exports/resources.generated/aws-glue-connection.d.ts +0 -23
- package/out/exports/resources.generated/aws-glue-identitycenterconfiguration.d.ts +49 -0
- package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +11 -5
- package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +5 -13
- package/out/exports/resources.generated/aws-imagebuilder-image.d.ts +17 -21
- package/out/exports/resources.generated/aws-imagebuilder-imagepipeline.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +11 -5
- package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +4 -4
- package/out/exports/resources.generated/aws-iotfleethub-application.d.ts +0 -15
- package/out/exports/resources.generated/aws-lambda-capacityprovider.d.ts +22 -18
- package/out/exports/resources.generated/aws-lambda-function.d.ts +33 -1
- package/out/exports/resources.generated/aws-lambda-permission.d.ts +1 -1
- package/out/exports/resources.generated/aws-lambda-version.d.ts +1 -1
- package/out/exports/resources.generated/aws-macie-session.d.ts +1 -1
- package/out/exports/resources.generated/aws-medialive-channel.d.ts +12 -0
- package/out/exports/resources.generated/aws-medialive-input.d.ts +30 -0
- package/out/exports/resources.generated/aws-msk-cluster.d.ts +8 -0
- package/out/exports/resources.generated/aws-networkmanager-connectattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-corenetworkprefixlistassociation.d.ts +29 -0
- package/out/exports/resources.generated/aws-networkmanager-directconnectgatewayattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-sitetositevpnattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-transitgatewayroutetableattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-vpcattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +271 -3
- package/out/exports/resources.generated/aws-observabilityadmin-s3tableintegration.d.ts +88 -0
- package/out/exports/resources.generated/aws-observabilityadmin-telemetrypipelines.d.ts +68 -0
- package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +282 -4
- package/out/exports/resources.generated/aws-opensearchservice-application.d.ts +1 -1
- package/out/exports/resources.generated/aws-organizations-policy.d.ts +1 -1
- package/out/exports/resources.generated/aws-paymentcryptography-key.d.ts +7 -0
- package/out/exports/resources.generated/aws-ram-resourceshare.d.ts +27 -0
- package/out/exports/resources.generated/aws-route53-hostedzone.d.ts +16 -0
- package/out/exports/resources.generated/aws-route53profiles-profile.d.ts +5 -0
- package/out/exports/resources.generated/aws-s3-accessgrantslocation.d.ts +2 -2
- package/out/exports/resources.generated/aws-s3-storagelens.d.ts +68 -0
- package/out/exports/resources.generated/aws-s3tables-table.d.ts +16 -0
- package/out/exports/resources.generated/aws-s3tables-tablebucket.d.ts +16 -0
- package/out/exports/resources.generated/aws-s3vectors-index.d.ts +28 -0
- package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +8 -2
- package/out/exports/resources.generated/aws-securityhub-aggregatorv2.d.ts +2 -2
- package/out/exports/resources.generated/aws-securityhub-automationrule.d.ts +32 -32
- package/out/exports/resources.generated/aws-securityhub-automationrulev2.d.ts +14 -14
- package/out/exports/resources.generated/aws-securityhub-configurationpolicy.d.ts +12 -12
- package/out/exports/resources.generated/aws-securityhub-connectorv2.d.ts +143 -0
- package/out/exports/resources.generated/aws-securityhub-delegatedadmin.d.ts +5 -5
- package/out/exports/resources.generated/aws-securityhub-findingaggregator.d.ts +4 -4
- package/out/exports/resources.generated/aws-securityhub-hub.d.ts +14 -14
- package/out/exports/resources.generated/aws-securityhub-hubv2.d.ts +3 -3
- package/out/exports/resources.generated/aws-securityhub-insight.d.ts +29 -29
- package/out/exports/resources.generated/aws-securityhub-organizationconfiguration.d.ts +10 -10
- package/out/exports/resources.generated/aws-securityhub-policyassociation.d.ts +3 -3
- package/out/exports/resources.generated/aws-securityhub-productsubscription.d.ts +2 -2
- package/out/exports/resources.generated/aws-securityhub-securitycontrol.d.ts +0 -0
- package/out/exports/resources.generated/aws-securityhub-standard.d.ts +6 -6
- package/out/exports/resources.generated/aws-transfer-connector.d.ts +6 -0
- package/out/exports/resources.generated/aws-wisdom-aiagent.d.ts +15 -0
- package/out/exports/resources.generated/aws-wisdom-aiguardrail.d.ts +118 -1
- package/out/exports/resources.generated/aws-workspacesweb-usersettings.d.ts +86 -0
- package/package.json +1 -1
|
@@ -0,0 +1,143 @@
|
|
|
1
|
+
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
|
+
/**
|
|
3
|
+
* Grants permission to create a connectorV2 based on input parameters.
|
|
4
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html}
|
|
5
|
+
*/
|
|
6
|
+
export type SecurityHubConnectorV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::ConnectorV2", SecurityHubConnectorV2Props, SecurityHubConnectorV2Attribs>;
|
|
7
|
+
/**
|
|
8
|
+
* Grants permission to create a connectorV2 based on input parameters.
|
|
9
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html}
|
|
10
|
+
*/
|
|
11
|
+
export type SecurityHubConnectorV2Props = {
|
|
12
|
+
/**
|
|
13
|
+
* The description of the connectorV2.
|
|
14
|
+
* @minLength 0
|
|
15
|
+
* @maxLength 256
|
|
16
|
+
* @pattern .*\S.*
|
|
17
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-description}
|
|
18
|
+
*/
|
|
19
|
+
Description?: string | undefined;
|
|
20
|
+
/**
|
|
21
|
+
* The Amazon Resource Name (ARN) of KMS key used to encrypt secrets for the connectorV2.
|
|
22
|
+
* @minLength 20
|
|
23
|
+
* @maxLength 2048
|
|
24
|
+
* @pattern .*\S.*
|
|
25
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-kmskeyarn}
|
|
26
|
+
*/
|
|
27
|
+
KmsKeyArn?: string | undefined;
|
|
28
|
+
/**
|
|
29
|
+
* The unique name of the connectorV2.
|
|
30
|
+
* @minLength 1
|
|
31
|
+
* @maxLength 64
|
|
32
|
+
* @pattern .*\S.*
|
|
33
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-name}
|
|
34
|
+
*/
|
|
35
|
+
Name: string;
|
|
36
|
+
/**
|
|
37
|
+
* The third-party provider detail for a service configuration.
|
|
38
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-provider}
|
|
39
|
+
*/
|
|
40
|
+
Provider: Provider;
|
|
41
|
+
/**
|
|
42
|
+
* The tags to add to the connectorV2 when you create.
|
|
43
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-tags}
|
|
44
|
+
*/
|
|
45
|
+
Tags?: Record<string, string> | undefined;
|
|
46
|
+
};
|
|
47
|
+
/**
|
|
48
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#aws-resource-securityhub-connectorv2-return-values}
|
|
49
|
+
*/
|
|
50
|
+
export type SecurityHubConnectorV2Attribs = {
|
|
51
|
+
/**
|
|
52
|
+
* The ARN of the V2 connector.
|
|
53
|
+
* @pattern ^arn:aws\S*:securityhub:[a-z0-9-]+:[0-9]{12}:connectorv2/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
|
|
54
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-connectorarn}
|
|
55
|
+
*/
|
|
56
|
+
ConnectorArn: string;
|
|
57
|
+
/**
|
|
58
|
+
* The unique identifier of the V2 connector.
|
|
59
|
+
* @pattern ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
|
|
60
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-connectorid}
|
|
61
|
+
*/
|
|
62
|
+
ConnectorId: string;
|
|
63
|
+
/**
|
|
64
|
+
* The status of the V2 connector.
|
|
65
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-connectorstatus}
|
|
66
|
+
*/
|
|
67
|
+
ConnectorStatus: "CONNECTED" | "FAILED_TO_CONNECT" | "PENDING_AUTHORIZATION" | "PENDING_CONFIGURATION";
|
|
68
|
+
/**
|
|
69
|
+
* The timestamp when the V2 connector was created.
|
|
70
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-createdat}
|
|
71
|
+
*/
|
|
72
|
+
CreatedAt: string;
|
|
73
|
+
/**
|
|
74
|
+
* The most recent timestamp when the V2 connector was checked on health status.
|
|
75
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-lastcheckedat}
|
|
76
|
+
*/
|
|
77
|
+
LastCheckedAt: string;
|
|
78
|
+
/**
|
|
79
|
+
* The most recent timestamp when the V2 connector was updated.
|
|
80
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-lastupdatedat}
|
|
81
|
+
*/
|
|
82
|
+
LastUpdatedAt: string;
|
|
83
|
+
/**
|
|
84
|
+
* The message of the V2 connector when connector status is FAILED_TO_CONNECT.
|
|
85
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-message}
|
|
86
|
+
*/
|
|
87
|
+
Message: string;
|
|
88
|
+
/**
|
|
89
|
+
* The status of the authorization between Jira Cloud and the service.
|
|
90
|
+
*/
|
|
91
|
+
"Provider.JiraCloud.AuthStatus": AuthStatus;
|
|
92
|
+
/**
|
|
93
|
+
* The URL to provide to customers for OAuth auth code flow.
|
|
94
|
+
* @pattern .*\S.*
|
|
95
|
+
*/
|
|
96
|
+
"Provider.JiraCloud.AuthUrl": string;
|
|
97
|
+
/**
|
|
98
|
+
* The cloud id of the Jira Cloud.
|
|
99
|
+
*/
|
|
100
|
+
"Provider.JiraCloud.CloudId": string;
|
|
101
|
+
/**
|
|
102
|
+
* The URL domain of your Jira Cloud instance.
|
|
103
|
+
*/
|
|
104
|
+
"Provider.JiraCloud.Domain": string;
|
|
105
|
+
/**
|
|
106
|
+
* The status of the authorization between ServiceNow and the service.
|
|
107
|
+
*/
|
|
108
|
+
"Provider.ServiceNow.AuthStatus": AuthStatus;
|
|
109
|
+
};
|
|
110
|
+
/**
|
|
111
|
+
* The auth status of the connector
|
|
112
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-authstatus.html}
|
|
113
|
+
*/
|
|
114
|
+
export type AuthStatus = "ACTIVE" | "FAILED";
|
|
115
|
+
/**
|
|
116
|
+
* The third-party provider detail for a service configuration.
|
|
117
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-provider.html}
|
|
118
|
+
*/
|
|
119
|
+
export type Provider = {
|
|
120
|
+
JiraCloud: {
|
|
121
|
+
/**
|
|
122
|
+
* @minLength 2
|
|
123
|
+
* @maxLength 10
|
|
124
|
+
*/
|
|
125
|
+
ProjectKey: string;
|
|
126
|
+
};
|
|
127
|
+
} | {
|
|
128
|
+
ServiceNow: {
|
|
129
|
+
/**
|
|
130
|
+
* @minLength 1
|
|
131
|
+
* @maxLength 128
|
|
132
|
+
*/
|
|
133
|
+
InstanceName: string;
|
|
134
|
+
/**
|
|
135
|
+
* The ARN of secrets manager containing ClientId and ClientSecret
|
|
136
|
+
* @minLength 20
|
|
137
|
+
* @maxLength 2048
|
|
138
|
+
* @pattern .*\S.*
|
|
139
|
+
*/
|
|
140
|
+
SecretArn: string;
|
|
141
|
+
};
|
|
142
|
+
};
|
|
143
|
+
//# sourceMappingURL=aws-securityhub-connectorv2.d.ts.map
|
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated Security Hub administrator account for an organization. You must enable the integration between Security Hub and AWS Organizations before you can designate a delegated Security Hub administrator. Only the management account for an organization can designate the delegated Security Hub administrator account. For more information, see [Designating the delegated Security Hub administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated AWS Security Hub CSPM administrator account for an organization. You must enable the integration between Security Hub CSPM and AWS Organizations before you can designate a delegated Security Hub CSPM administrator. Only the management account for an organization can designate the delegated Security Hub CSPM administrator account. For more information, see [Designating the delegated Security Hub CSPM administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
*
|
|
5
5
|
* To change the delegated administrator account, remove the current delegated administrator account, and then designate the new account.
|
|
6
6
|
*
|
|
@@ -11,7 +11,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
|
11
11
|
*/
|
|
12
12
|
export type SecurityHubDelegatedAdmin = ResourceDefinitionWithAttributes<"AWS::SecurityHub::DelegatedAdmin", SecurityHubDelegatedAdminProps, SecurityHubDelegatedAdminAttribs>;
|
|
13
13
|
/**
|
|
14
|
-
* The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated Security Hub administrator account for an organization. You must enable the integration between Security Hub and AWS Organizations before you can designate a delegated Security Hub administrator. Only the management account for an organization can designate the delegated Security Hub administrator account. For more information, see [Designating the delegated Security Hub administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *Security Hub User Guide* .
|
|
14
|
+
* The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated AWS Security Hub CSPM administrator account for an organization. You must enable the integration between Security Hub CSPM and AWS Organizations before you can designate a delegated Security Hub CSPM administrator. Only the management account for an organization can designate the delegated Security Hub CSPM administrator account. For more information, see [Designating the delegated Security Hub CSPM administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *AWS Security Hub CSPM User Guide* .
|
|
15
15
|
*
|
|
16
16
|
* To change the delegated administrator account, remove the current delegated administrator account, and then designate the new account.
|
|
17
17
|
*
|
|
@@ -22,7 +22,7 @@ export type SecurityHubDelegatedAdmin = ResourceDefinitionWithAttributes<"AWS::S
|
|
|
22
22
|
*/
|
|
23
23
|
export type SecurityHubDelegatedAdminProps = {
|
|
24
24
|
/**
|
|
25
|
-
* The AWS account identifier of the account to designate as the Security Hub administrator account.
|
|
25
|
+
* The AWS account identifier of the account to designate as the Security Hub CSPM administrator account.
|
|
26
26
|
* @pattern ^[0-9]{12}$
|
|
27
27
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-adminaccountid}
|
|
28
28
|
*/
|
|
@@ -33,13 +33,13 @@ export type SecurityHubDelegatedAdminProps = {
|
|
|
33
33
|
*/
|
|
34
34
|
export type SecurityHubDelegatedAdminAttribs = {
|
|
35
35
|
/**
|
|
36
|
-
* The ID of the delegated Security Hub administrator account, in the format of `accountID/Region` .
|
|
36
|
+
* The ID of the delegated Security Hub CSPM administrator account, in the format of `accountID/Region` .
|
|
37
37
|
* @pattern ^[0-9]{12}/[a-zA-Z0-9-]{1,32}$
|
|
38
38
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-delegatedadminidentifier}
|
|
39
39
|
*/
|
|
40
40
|
DelegatedAdminIdentifier: string;
|
|
41
41
|
/**
|
|
42
|
-
* Whether the delegated Security Hub administrator is set for the organization.
|
|
42
|
+
* Whether the delegated Security Hub CSPM administrator is set for the organization.
|
|
43
43
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-status}
|
|
44
44
|
*/
|
|
45
45
|
Status: "ENABLED" | "DISABLE_IN_PROGRESS";
|
|
@@ -1,19 +1,19 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *Security Hub User Guide*
|
|
3
|
+
* The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *AWS Security Hub CSPM User Guide*
|
|
4
4
|
*
|
|
5
5
|
* This resource must be created in the Region that you want to designate as your aggregation Region.
|
|
6
6
|
*
|
|
7
|
-
* Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub .
|
|
7
|
+
* Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub CSPM .
|
|
8
8
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-findingaggregator.html}
|
|
9
9
|
*/
|
|
10
10
|
export type SecurityHubFindingAggregator = ResourceDefinitionWithAttributes<"AWS::SecurityHub::FindingAggregator", SecurityHubFindingAggregatorProps, SecurityHubFindingAggregatorAttribs>;
|
|
11
11
|
/**
|
|
12
|
-
* The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *Security Hub User Guide*
|
|
12
|
+
* The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *AWS Security Hub CSPM User Guide*
|
|
13
13
|
*
|
|
14
14
|
* This resource must be created in the Region that you want to designate as your aggregation Region.
|
|
15
15
|
*
|
|
16
|
-
* Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub .
|
|
16
|
+
* Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub CSPM .
|
|
17
17
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-findingaggregator.html}
|
|
18
18
|
*/
|
|
19
19
|
export type SecurityHubFindingAggregatorProps = {
|
|
@@ -1,23 +1,23 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::Hub` resource specifies the enablement of the Security Hub service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub .
|
|
3
|
+
* The `AWS::SecurityHub::Hub` resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub CSPM .
|
|
4
4
|
*
|
|
5
|
-
* When you use this resource to enable Security Hub , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
|
|
5
|
+
* When you use this resource to enable Security Hub CSPM , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
|
|
6
6
|
*
|
|
7
|
-
* When you use this resource to enable Security Hub , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
|
|
7
|
+
* When you use this resource to enable Security Hub CSPM , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
|
|
8
8
|
*
|
|
9
|
-
* You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub resources for an account.
|
|
9
|
+
* You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub CSPM resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub CSPM resources for an account.
|
|
10
10
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html}
|
|
11
11
|
*/
|
|
12
12
|
export type SecurityHubHub = ResourceDefinitionWithAttributes<"AWS::SecurityHub::Hub", SecurityHubHubProps, SecurityHubHubAttribs>;
|
|
13
13
|
/**
|
|
14
|
-
* The `AWS::SecurityHub::Hub` resource specifies the enablement of the Security Hub service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub .
|
|
14
|
+
* The `AWS::SecurityHub::Hub` resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub CSPM .
|
|
15
15
|
*
|
|
16
|
-
* When you use this resource to enable Security Hub , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
|
|
16
|
+
* When you use this resource to enable Security Hub CSPM , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
|
|
17
17
|
*
|
|
18
|
-
* When you use this resource to enable Security Hub , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
|
|
18
|
+
* When you use this resource to enable Security Hub CSPM , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
|
|
19
19
|
*
|
|
20
|
-
* You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub resources for an account.
|
|
20
|
+
* You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub CSPM resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub CSPM resources for an account.
|
|
21
21
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html}
|
|
22
22
|
*/
|
|
23
23
|
export type SecurityHubHubProps = {
|
|
@@ -26,22 +26,22 @@ export type SecurityHubHubProps = {
|
|
|
26
26
|
*
|
|
27
27
|
* By default, this is set to `true` , and new controls are enabled automatically. To not automatically enable new controls, set this to `false` .
|
|
28
28
|
*
|
|
29
|
-
* When you automatically enable new controls, you can interact with the controls in the console and programmatically immediately after release. However, automatically enabled controls have a temporary default status of `DISABLED` . It can take up to several days for Security Hub to process the control release and designate the control as `ENABLED` in your account. During the processing period, you can manually enable or disable a control, and Security Hub will maintain that designation regardless of whether you have `AutoEnableControls` set to `true` .
|
|
29
|
+
* When you automatically enable new controls, you can interact with the controls in the console and programmatically immediately after release. However, automatically enabled controls have a temporary default status of `DISABLED` . It can take up to several days for Security Hub CSPM to process the control release and designate the control as `ENABLED` in your account. During the processing period, you can manually enable or disable a control, and Security Hub CSPM will maintain that designation regardless of whether you have `AutoEnableControls` set to `true` .
|
|
30
30
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-autoenablecontrols}
|
|
31
31
|
*/
|
|
32
32
|
AutoEnableControls?: boolean | undefined;
|
|
33
33
|
/**
|
|
34
|
-
* Specifies whether an account has consolidated control findings turned on or off. If the value for this field is set to `SECURITY_CONTROL` , Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.
|
|
34
|
+
* Specifies whether an account has consolidated control findings turned on or off. If the value for this field is set to `SECURITY_CONTROL` , Security Hub CSPM generates a single finding for a control check even when the check applies to multiple enabled standards.
|
|
35
35
|
*
|
|
36
|
-
* If the value for this field is set to `STANDARD_CONTROL` , Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.
|
|
36
|
+
* If the value for this field is set to `STANDARD_CONTROL` , Security Hub CSPM generates separate findings for a control check when the check applies to multiple enabled standards.
|
|
37
37
|
*
|
|
38
|
-
* The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is `SECURITY_CONTROL` if you enabled Security Hub on or after February 23, 2023.
|
|
38
|
+
* The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is `SECURITY_CONTROL` if you enabled Security Hub CSPM on or after February 23, 2023.
|
|
39
39
|
* @pattern ^(SECURITY_CONTROL|STANDARD_CONTROL)$
|
|
40
40
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-controlfindinggenerator}
|
|
41
41
|
*/
|
|
42
42
|
ControlFindingGenerator?: string | undefined;
|
|
43
43
|
/**
|
|
44
|
-
* Whether to enable the security standards that Security Hub has designated as automatically enabled. If you don't provide a value for `EnableDefaultStandards` , it is set to `true` , and the designated standards are automatically enabled in each AWS Region where you enable Security Hub . If you don't want to enable the designated standards, set `EnableDefaultStandards` to `false` .
|
|
44
|
+
* Whether to enable the security standards that Security Hub CSPM has designated as automatically enabled. If you don't provide a value for `EnableDefaultStandards` , it is set to `true` , and the designated standards are automatically enabled in each AWS Region where you enable Security Hub CSPM . If you don't want to enable the designated standards, set `EnableDefaultStandards` to `false` .
|
|
45
45
|
*
|
|
46
46
|
* Currently, the automatically enabled standards are the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 and AWS Foundational Security Best Practices (FSBP).
|
|
47
47
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-enabledefaultstandards}
|
|
@@ -66,7 +66,7 @@ export type SecurityHubHubAttribs = {
|
|
|
66
66
|
*/
|
|
67
67
|
ARN: string;
|
|
68
68
|
/**
|
|
69
|
-
* The date and time when Security Hub was enabled in your account.
|
|
69
|
+
* The date and time when Security Hub CSPM was enabled in your account.
|
|
70
70
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-subscribedat}
|
|
71
71
|
*/
|
|
72
72
|
SubscribedAt: string;
|
|
@@ -1,16 +1,16 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Returns details about the service resource in your account.
|
|
3
|
+
* Returns details about the service resource in your account.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SecurityHubHubV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::HubV2", SecurityHubHubV2Props, SecurityHubHubV2Attribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Returns details about the service resource in your account.
|
|
8
|
+
* Returns details about the service resource in your account.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SecurityHubHubV2Props = {
|
|
12
12
|
/**
|
|
13
|
-
* The tags to add to the hub V2 resource when you enable Security Hub.
|
|
13
|
+
* The tags to add to the hub V2 resource when you enable Security Hub CSPM.
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-tags}
|
|
15
15
|
*/
|
|
16
16
|
Tags?: Record<string, string> | undefined;
|
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::Insight` resource creates a custom insight in Security Hub . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::Insight` resource creates a custom insight in AWS Security Hub CSPM . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
*
|
|
5
5
|
* Tags aren't supported for this resource.
|
|
6
6
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html}
|
|
7
7
|
*/
|
|
8
8
|
export type SecurityHubInsight = ResourceDefinitionWithAttributes<"AWS::SecurityHub::Insight", SecurityHubInsightProps, SecurityHubInsightAttribs>;
|
|
9
9
|
/**
|
|
10
|
-
* The `AWS::SecurityHub::Insight` resource creates a custom insight in Security Hub . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *Security Hub User Guide* .
|
|
10
|
+
* The `AWS::SecurityHub::Insight` resource creates a custom insight in AWS Security Hub CSPM . An insight is a collection of findings that relate to a security issue that requires attention or remediation. For more information, see [Insights in AWS Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-insights.html) in the *AWS Security Hub CSPM User Guide* .
|
|
11
11
|
*
|
|
12
12
|
* Tags aren't supported for this resource.
|
|
13
13
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html}
|
|
@@ -24,7 +24,7 @@ export type SecurityHubInsightProps = {
|
|
|
24
24
|
*/
|
|
25
25
|
GroupByAttribute: string;
|
|
26
26
|
/**
|
|
27
|
-
* The name of a Security Hub insight.
|
|
27
|
+
* The name of a Security Hub CSPM insight.
|
|
28
28
|
* @minLength 1
|
|
29
29
|
* @maxLength 128
|
|
30
30
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html#cfn-securityhub-insight-name}
|
|
@@ -36,14 +36,14 @@ export type SecurityHubInsightProps = {
|
|
|
36
36
|
*/
|
|
37
37
|
export type SecurityHubInsightAttribs = {
|
|
38
38
|
/**
|
|
39
|
-
* The ARN of a Security Hub insight.
|
|
39
|
+
* The ARN of a Security Hub CSPM insight.
|
|
40
40
|
* @pattern arn:aws\S*:securityhub:\S*
|
|
41
41
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-insight.html#cfn-securityhub-insight-insightarn}
|
|
42
42
|
*/
|
|
43
43
|
InsightArn: string;
|
|
44
44
|
};
|
|
45
45
|
/**
|
|
46
|
-
* A collection of filters that are applied to all active findings aggregated by Security Hub .
|
|
46
|
+
* A collection of filters that are applied to all active findings aggregated by AWS Security Hub CSPM .
|
|
47
47
|
*
|
|
48
48
|
* You can filter by up to ten finding attributes. For each attribute, you can provide up to 20 filter values.
|
|
49
49
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html}
|
|
@@ -99,7 +99,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
99
99
|
/**
|
|
100
100
|
* A timestamp that indicates when the security findings provider created the potential security issue that a finding reflects.
|
|
101
101
|
*
|
|
102
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
102
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
103
103
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-createdat}
|
|
104
104
|
*/
|
|
105
105
|
CreatedAt?: DateFilter[] | undefined;
|
|
@@ -159,7 +159,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
159
159
|
/**
|
|
160
160
|
* A timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.
|
|
161
161
|
*
|
|
162
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
162
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
163
163
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-firstobservedat}
|
|
164
164
|
*/
|
|
165
165
|
FirstObservedAt?: DateFilter[] | undefined;
|
|
@@ -181,7 +181,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
181
181
|
/**
|
|
182
182
|
* A timestamp that indicates when the security findings provider most recently observed a change in the resource that is involved in the finding.
|
|
183
183
|
*
|
|
184
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
184
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
185
185
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-lastobservedat}
|
|
186
186
|
*/
|
|
187
187
|
LastObservedAt?: DateFilter[] | undefined;
|
|
@@ -278,7 +278,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
278
278
|
/**
|
|
279
279
|
* A timestamp that identifies when the process was launched.
|
|
280
280
|
*
|
|
281
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
281
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
282
282
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-processlaunchedat}
|
|
283
283
|
*/
|
|
284
284
|
ProcessLaunchedAt?: DateFilter[] | undefined;
|
|
@@ -305,12 +305,12 @@ export type AwsSecurityFindingFilters = {
|
|
|
305
305
|
/**
|
|
306
306
|
* A timestamp that identifies when the process was terminated.
|
|
307
307
|
*
|
|
308
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
308
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
309
309
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-processterminatedat}
|
|
310
310
|
*/
|
|
311
311
|
ProcessTerminatedAt?: DateFilter[] | undefined;
|
|
312
312
|
/**
|
|
313
|
-
* The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
|
|
313
|
+
* The ARN generated by Security Hub CSPM that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub CSPM.
|
|
314
314
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-productarn}
|
|
315
315
|
*/
|
|
316
316
|
ProductArn?: StringFilter[] | undefined;
|
|
@@ -452,7 +452,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
452
452
|
/**
|
|
453
453
|
* A timestamp that identifies when the container was started.
|
|
454
454
|
*
|
|
455
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
455
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
456
456
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-resourcecontainerlaunchedat}
|
|
457
457
|
*/
|
|
458
458
|
ResourceContainerLaunchedAt?: DateFilter[] | undefined;
|
|
@@ -536,7 +536,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
536
536
|
/**
|
|
537
537
|
* A timestamp that identifies the last observation of a threat intelligence indicator.
|
|
538
538
|
*
|
|
539
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
539
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
540
540
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-threatintelindicatorlastobservedat}
|
|
541
541
|
*/
|
|
542
542
|
ThreatIntelIndicatorLastObservedAt?: DateFilter[] | undefined;
|
|
@@ -573,7 +573,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
573
573
|
/**
|
|
574
574
|
* A timestamp that indicates when the security findings provider last updated the finding record.
|
|
575
575
|
*
|
|
576
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
576
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
577
577
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-updatedat}
|
|
578
578
|
*/
|
|
579
579
|
UpdatedAt?: DateFilter[] | undefined;
|
|
@@ -588,12 +588,12 @@ export type AwsSecurityFindingFilters = {
|
|
|
588
588
|
*/
|
|
589
589
|
VerificationState?: StringFilter[] | undefined;
|
|
590
590
|
/**
|
|
591
|
-
* Indicates whether a software vulnerability in your environment has a known exploit. You can filter findings by this field only if you use Security Hub and Amazon Inspector.
|
|
591
|
+
* Indicates whether a software vulnerability in your environment has a known exploit. You can filter findings by this field only if you use Security Hub CSPM and Amazon Inspector.
|
|
592
592
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-vulnerabilitiesexploitavailable}
|
|
593
593
|
*/
|
|
594
594
|
VulnerabilitiesExploitAvailable?: StringFilter[] | undefined;
|
|
595
595
|
/**
|
|
596
|
-
* Indicates whether a vulnerability is fixed in a newer version of the affected software packages. You can filter findings by this field only if you use Security Hub and Amazon Inspector.
|
|
596
|
+
* Indicates whether a vulnerability is fixed in a newer version of the affected software packages. You can filter findings by this field only if you use Security Hub CSPM and Amazon Inspector.
|
|
597
597
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-vulnerabilitiesfixavailable}
|
|
598
598
|
*/
|
|
599
599
|
VulnerabilitiesFixAvailable?: StringFilter[] | undefined;
|
|
@@ -609,7 +609,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
609
609
|
*
|
|
610
610
|
* - `NEW` - The initial state of a finding, before it is reviewed.
|
|
611
611
|
*
|
|
612
|
-
* Security Hub also resets the workflow status from `NOTIFIED` or `RESOLVED` to `NEW` in the following cases:
|
|
612
|
+
* Security Hub CSPM also resets the workflow status from `NOTIFIED` or `RESOLVED` to `NEW` in the following cases:
|
|
613
613
|
*
|
|
614
614
|
* - `RecordState` changes from `ARCHIVED` to `ACTIVE` .
|
|
615
615
|
* - `Compliance.Status` changes from `PASSED` to either `WARNING` , `FAILED` , or `NOT_AVAILABLE` .
|
|
@@ -631,7 +631,7 @@ export type AwsSecurityFindingFilters = {
|
|
|
631
631
|
*
|
|
632
632
|
* In those cases, the workflow status is automatically reset to `NEW` .
|
|
633
633
|
*
|
|
634
|
-
* For findings from controls, if `Compliance.Status` is `PASSED` , then Security Hub automatically sets the workflow status to `RESOLVED` .
|
|
634
|
+
* For findings from controls, if `Compliance.Status` is `PASSED` , then Security Hub CSPM automatically sets the workflow status to `RESOLVED` .
|
|
635
635
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-awssecurityfindingfilters.html#cfn-securityhub-insight-awssecurityfindingfilters-workflowstatus}
|
|
636
636
|
*/
|
|
637
637
|
WorkflowStatus?: StringFilter[] | undefined;
|
|
@@ -660,14 +660,14 @@ export type DateFilter = {
|
|
|
660
660
|
/**
|
|
661
661
|
* A timestamp that provides the end date for the date filter.
|
|
662
662
|
*
|
|
663
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
663
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
664
664
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-datefilter.html#cfn-securityhub-insight-datefilter-end}
|
|
665
665
|
*/
|
|
666
666
|
End?: string | undefined;
|
|
667
667
|
/**
|
|
668
668
|
* A timestamp that provides the start date for the date filter.
|
|
669
669
|
*
|
|
670
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
670
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
671
671
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-datefilter.html#cfn-securityhub-insight-datefilter-start}
|
|
672
672
|
*/
|
|
673
673
|
Start?: string | undefined;
|
|
@@ -711,12 +711,12 @@ export type KeywordFilter = {
|
|
|
711
711
|
Value: string;
|
|
712
712
|
};
|
|
713
713
|
/**
|
|
714
|
-
* A map filter for filtering Security Hub findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
|
|
714
|
+
* A map filter for filtering AWS Security Hub CSPM findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
|
|
715
715
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-mapfilter.html}
|
|
716
716
|
*/
|
|
717
717
|
export type MapFilter = {
|
|
718
718
|
/**
|
|
719
|
-
* The condition to apply to the key value when filtering Security Hub findings with a map filter.
|
|
719
|
+
* The condition to apply to the key value when filtering Security Hub CSPM findings with a map filter.
|
|
720
720
|
*
|
|
721
721
|
* To search for values that have the filter value, use one of the following comparison operators:
|
|
722
722
|
*
|
|
@@ -736,7 +736,7 @@ export type MapFilter = {
|
|
|
736
736
|
*
|
|
737
737
|
* You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can’t have both an `EQUALS` filter and a `NOT_EQUALS` filter on the same field. Combining filters in this way returns an error.
|
|
738
738
|
*
|
|
739
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
739
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
740
740
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-mapfilter.html#cfn-securityhub-insight-mapfilter-comparison}
|
|
741
741
|
*/
|
|
742
742
|
Comparison: "EQUALS" | "NOT_EQUALS";
|
|
@@ -773,12 +773,12 @@ export type NumberFilter = {
|
|
|
773
773
|
Lte?: number | undefined;
|
|
774
774
|
};
|
|
775
775
|
/**
|
|
776
|
-
* A string filter for filtering Security Hub findings.
|
|
776
|
+
* A string filter for filtering AWS Security Hub CSPM findings.
|
|
777
777
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-stringfilter.html}
|
|
778
778
|
*/
|
|
779
779
|
export type StringFilter = {
|
|
780
780
|
/**
|
|
781
|
-
* The condition to apply to a string value when filtering Security Hub findings.
|
|
781
|
+
* The condition to apply to a string value when filtering Security Hub CSPM findings.
|
|
782
782
|
*
|
|
783
783
|
* To search for values that have the filter value, use one of the following comparison operators:
|
|
784
784
|
*
|
|
@@ -798,21 +798,21 @@ export type StringFilter = {
|
|
|
798
798
|
*
|
|
799
799
|
* You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can't provide both an `EQUALS` filter and a `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filter on the same field. Combining filters in this way returns an error. `CONTAINS` filters can only be used with other `CONTAINS` filters. `NOT_CONTAINS` filters can only be used with other `NOT_CONTAINS` filters.
|
|
800
800
|
*
|
|
801
|
-
* You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
|
|
801
|
+
* You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub CSPM first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
|
|
802
802
|
*
|
|
803
|
-
* For example, for the following filters, Security Hub first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
|
|
803
|
+
* For example, for the following filters, Security Hub CSPM first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
|
|
804
804
|
*
|
|
805
805
|
* - `ResourceType PREFIX AwsIam`
|
|
806
806
|
* - `ResourceType PREFIX AwsEc2`
|
|
807
807
|
* - `ResourceType NOT_EQUALS AwsIamPolicy`
|
|
808
808
|
* - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
|
|
809
809
|
*
|
|
810
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
810
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
811
811
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-stringfilter.html#cfn-securityhub-insight-stringfilter-comparison}
|
|
812
812
|
*/
|
|
813
813
|
Comparison: StringFilterComparison;
|
|
814
814
|
/**
|
|
815
|
-
* The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub` . If you provide `security hub` as the filter value, there's no match.
|
|
815
|
+
* The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub CSPM` . If you provide `security hub` as the filter value, there's no match.
|
|
816
816
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-insight-stringfilter.html#cfn-securityhub-insight-stringfilter-value}
|
|
817
817
|
*/
|
|
818
818
|
Value: string;
|