@propulsionworks/cloudformation 0.1.37 → 0.1.39
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/out/exports/resources.generated/aws-arcregionswitch-plan.d.ts +3 -3
- package/out/exports/resources.generated/aws-backup-backupplan.d.ts +1 -0
- package/out/exports/resources.generated/aws-backup-logicallyairgappedbackupvault.d.ts +3 -0
- package/out/exports/resources.generated/aws-bedrock-dataautomationproject.d.ts +78 -0
- package/out/exports/resources.generated/aws-bedrock-knowledgebase.d.ts +57 -3
- package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +11 -5
- package/out/exports/resources.generated/aws-ce-costcategory.d.ts +1 -1
- package/out/exports/resources.generated/aws-cleanrooms-analysistemplate.d.ts +71 -0
- package/out/exports/resources.generated/aws-cleanrooms-collaboration.d.ts +16 -0
- package/out/exports/resources.generated/aws-cleanrooms-membership.d.ts +16 -0
- package/out/exports/resources.generated/aws-cloudfront-anycastiplist.d.ts +20 -0
- package/out/exports/resources.generated/aws-config-configurationrecorder.d.ts +1 -1
- package/out/exports/resources.generated/aws-connect-datatable.d.ts +82 -0
- package/out/exports/resources.generated/aws-connect-datatableattribute.d.ts +94 -0
- package/out/exports/resources.generated/aws-connect-datatablerecord.d.ts +59 -0
- package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +132 -1
- package/out/exports/resources.generated/aws-connect-securityprofile.d.ts +10 -9
- package/out/exports/resources.generated/aws-connect-workspace.d.ts +348 -0
- package/out/exports/resources.generated/aws-connectcampaignsv2-campaign.d.ts +107 -1
- package/out/exports/resources.generated/aws-customerprofiles-segmentdefinition.d.ts +5 -1
- package/out/exports/resources.generated/aws-datazone-connection.d.ts +19 -1
- package/out/exports/resources.generated/aws-devopsagent-agentspace.d.ts +56 -0
- package/out/exports/resources.generated/aws-devopsagent-association.d.ts +453 -0
- package/out/exports/resources.generated/aws-dsql-cluster.d.ts +5 -0
- package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +7 -0
- package/out/exports/resources.generated/aws-ec2-networkinterface.d.ts +5 -0
- package/out/exports/resources.generated/aws-ec2-spotfleet.d.ts +12 -0
- package/out/exports/resources.generated/aws-ecs-expressgatewayservice.d.ts +48 -0
- package/out/exports/resources.generated/aws-eks-capability.d.ts +27 -15
- package/out/exports/resources.generated/aws-eks-nodegroup.d.ts +58 -0
- package/out/exports/resources.generated/aws-entityresolution-matchingworkflow.d.ts +18 -1
- package/out/exports/resources.generated/aws-fsx-s3accesspointattachment.d.ts +115 -1
- package/out/exports/resources.generated/aws-gamelift-script.d.ts +1 -1
- package/out/exports/resources.generated/aws-glue-connection.d.ts +0 -23
- package/out/exports/resources.generated/aws-glue-identitycenterconfiguration.d.ts +49 -0
- package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +11 -5
- package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +5 -13
- package/out/exports/resources.generated/aws-imagebuilder-image.d.ts +17 -21
- package/out/exports/resources.generated/aws-imagebuilder-imagepipeline.d.ts +1 -1
- package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +11 -5
- package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +4 -4
- package/out/exports/resources.generated/aws-iotfleethub-application.d.ts +0 -15
- package/out/exports/resources.generated/aws-lambda-capacityprovider.d.ts +22 -18
- package/out/exports/resources.generated/aws-lambda-function.d.ts +33 -1
- package/out/exports/resources.generated/aws-lambda-permission.d.ts +1 -1
- package/out/exports/resources.generated/aws-lambda-version.d.ts +1 -1
- package/out/exports/resources.generated/aws-macie-session.d.ts +1 -1
- package/out/exports/resources.generated/aws-medialive-channel.d.ts +12 -0
- package/out/exports/resources.generated/aws-medialive-input.d.ts +30 -0
- package/out/exports/resources.generated/aws-msk-cluster.d.ts +8 -0
- package/out/exports/resources.generated/aws-networkmanager-connectattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-corenetworkprefixlistassociation.d.ts +29 -0
- package/out/exports/resources.generated/aws-networkmanager-directconnectgatewayattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-sitetositevpnattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-transitgatewayroutetableattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-networkmanager-vpcattachment.d.ts +5 -0
- package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +271 -3
- package/out/exports/resources.generated/aws-observabilityadmin-s3tableintegration.d.ts +88 -0
- package/out/exports/resources.generated/aws-observabilityadmin-telemetrypipelines.d.ts +68 -0
- package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +282 -4
- package/out/exports/resources.generated/aws-opensearchservice-application.d.ts +1 -1
- package/out/exports/resources.generated/aws-organizations-policy.d.ts +1 -1
- package/out/exports/resources.generated/aws-paymentcryptography-key.d.ts +7 -0
- package/out/exports/resources.generated/aws-ram-resourceshare.d.ts +27 -0
- package/out/exports/resources.generated/aws-route53-hostedzone.d.ts +16 -0
- package/out/exports/resources.generated/aws-route53profiles-profile.d.ts +5 -0
- package/out/exports/resources.generated/aws-s3-accessgrantslocation.d.ts +2 -2
- package/out/exports/resources.generated/aws-s3-storagelens.d.ts +68 -0
- package/out/exports/resources.generated/aws-s3tables-table.d.ts +16 -0
- package/out/exports/resources.generated/aws-s3tables-tablebucket.d.ts +16 -0
- package/out/exports/resources.generated/aws-s3vectors-index.d.ts +28 -0
- package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +8 -2
- package/out/exports/resources.generated/aws-securityhub-aggregatorv2.d.ts +2 -2
- package/out/exports/resources.generated/aws-securityhub-automationrule.d.ts +32 -32
- package/out/exports/resources.generated/aws-securityhub-automationrulev2.d.ts +14 -14
- package/out/exports/resources.generated/aws-securityhub-configurationpolicy.d.ts +12 -12
- package/out/exports/resources.generated/aws-securityhub-connectorv2.d.ts +143 -0
- package/out/exports/resources.generated/aws-securityhub-delegatedadmin.d.ts +5 -5
- package/out/exports/resources.generated/aws-securityhub-findingaggregator.d.ts +4 -4
- package/out/exports/resources.generated/aws-securityhub-hub.d.ts +14 -14
- package/out/exports/resources.generated/aws-securityhub-hubv2.d.ts +3 -3
- package/out/exports/resources.generated/aws-securityhub-insight.d.ts +29 -29
- package/out/exports/resources.generated/aws-securityhub-organizationconfiguration.d.ts +10 -10
- package/out/exports/resources.generated/aws-securityhub-policyassociation.d.ts +3 -3
- package/out/exports/resources.generated/aws-securityhub-productsubscription.d.ts +2 -2
- package/out/exports/resources.generated/aws-securityhub-securitycontrol.d.ts +0 -0
- package/out/exports/resources.generated/aws-securityhub-standard.d.ts +6 -6
- package/out/exports/resources.generated/aws-transfer-connector.d.ts +6 -0
- package/out/exports/resources.generated/aws-wisdom-aiagent.d.ts +15 -0
- package/out/exports/resources.generated/aws-wisdom-aiguardrail.d.ts +118 -1
- package/out/exports/resources.generated/aws-workspacesweb-usersettings.d.ts +86 -0
- package/package.json +1 -1
|
@@ -33,6 +33,11 @@ export type S3TablesTableBucketProps = {
|
|
|
33
33
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.html#cfn-s3tables-tablebucket-metricsconfiguration}
|
|
34
34
|
*/
|
|
35
35
|
MetricsConfiguration?: MetricsConfiguration | undefined;
|
|
36
|
+
/**
|
|
37
|
+
* The configuration details for the storage class of tables or table buckets. This allows you to optimize storage costs by selecting the appropriate storage class based on your access patterns and performance requirements.
|
|
38
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.html#cfn-s3tables-tablebucket-storageclassconfiguration}
|
|
39
|
+
*/
|
|
40
|
+
StorageClassConfiguration?: StorageClassConfiguration | undefined;
|
|
36
41
|
/**
|
|
37
42
|
* The name for the table bucket.
|
|
38
43
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3tables-tablebucket.html#cfn-s3tables-tablebucket-tablebucketname}
|
|
@@ -87,6 +92,17 @@ export type MetricsConfiguration = {
|
|
|
87
92
|
*/
|
|
88
93
|
Status?: "Enabled" | "Disabled" | undefined;
|
|
89
94
|
};
|
|
95
|
+
/**
|
|
96
|
+
* The configuration details for the storage class of tables or table buckets. This allows you to optimize storage costs by selecting the appropriate storage class based on your access patterns and performance requirements.
|
|
97
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3tables-tablebucket-storageclassconfiguration.html}
|
|
98
|
+
*/
|
|
99
|
+
export type StorageClassConfiguration = {
|
|
100
|
+
/**
|
|
101
|
+
* The storage class for the table or table bucket. Valid values include storage classes optimized for different access patterns and cost profiles.
|
|
102
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3tables-tablebucket-storageclassconfiguration.html#cfn-s3tables-tablebucket-storageclassconfiguration-storageclass}
|
|
103
|
+
*/
|
|
104
|
+
StorageClass?: "STANDARD" | "INTELLIGENT_TIERING" | undefined;
|
|
105
|
+
};
|
|
90
106
|
/**
|
|
91
107
|
* The unreferenced file removal settings for your table bucket. Unreferenced file removal identifies and deletes all objects that are not referenced by any table snapshots. For more information, see the [*Amazon S3 User Guide*](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-table-buckets-maintenance.html) .
|
|
92
108
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3tables-tablebucket-unreferencedfileremoval.html}
|
|
@@ -71,6 +71,11 @@ export type S3VectorsIndexProps = {
|
|
|
71
71
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3vectors-index.html#cfn-s3vectors-index-distancemetric}
|
|
72
72
|
*/
|
|
73
73
|
DistanceMetric: DistanceMetric;
|
|
74
|
+
/**
|
|
75
|
+
* The encryption configuration for a vector index. By default, if you don't specify, all new vectors in the vector index will use the encryption configuration of the vector bucket.
|
|
76
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3vectors-index.html#cfn-s3vectors-index-encryptionconfiguration}
|
|
77
|
+
*/
|
|
78
|
+
EncryptionConfiguration?: EncryptionConfiguration | undefined;
|
|
74
79
|
/**
|
|
75
80
|
* The name of the vector index to create. The index name must be between 3 and 63 characters long and can contain only lowercase letters, numbers, hyphens (-), and dots (.). The index name must be unique within the vector bucket.
|
|
76
81
|
*
|
|
@@ -125,6 +130,29 @@ export type DataType = "float32";
|
|
|
125
130
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3vectors-index-distancemetric.html}
|
|
126
131
|
*/
|
|
127
132
|
export type DistanceMetric = "cosine" | "euclidean";
|
|
133
|
+
/**
|
|
134
|
+
* The encryption configuration for a vector bucket or index. By default, if you don't specify, all new vectors in Amazon S3 vector buckets use server-side encryption with Amazon S3 managed keys (SSE-S3), specifically `AES256` . You can optionally override bucket level encryption settings, and set a specific encryption configuration for a vector index at the time of index creation.
|
|
135
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3vectors-index-encryptionconfiguration.html}
|
|
136
|
+
*/
|
|
137
|
+
export type EncryptionConfiguration = {
|
|
138
|
+
/**
|
|
139
|
+
* AWS Key Management Service (KMS) customer managed key ID to use for the encryption configuration. This parameter is allowed if and only if `sseType` is set to `aws:kms` .
|
|
140
|
+
*
|
|
141
|
+
* To specify the KMS key, you must use the format of the KMS key Amazon Resource Name (ARN).
|
|
142
|
+
*
|
|
143
|
+
* For example, specify Key ARN in the following format: `arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`
|
|
144
|
+
* @minLength 1
|
|
145
|
+
* @maxLength 2048
|
|
146
|
+
* @pattern ^(arn:aws[-a-z0-9]*:kms:[-a-z0-9]*:[0-9]{12}:key/.+)$
|
|
147
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3vectors-index-encryptionconfiguration.html#cfn-s3vectors-index-encryptionconfiguration-kmskeyarn}
|
|
148
|
+
*/
|
|
149
|
+
KmsKeyArn?: string | undefined;
|
|
150
|
+
/**
|
|
151
|
+
* The server-side encryption type to use for the encryption configuration of the vector bucket. By default, if you don't specify, all new vectors in Amazon S3 vector buckets use server-side encryption with Amazon S3 managed keys (SSE-S3), specifically `AES256` .
|
|
152
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3vectors-index-encryptionconfiguration.html#cfn-s3vectors-index-encryptionconfiguration-ssetype}
|
|
153
|
+
*/
|
|
154
|
+
SseType?: "AES256" | "aws:kms" | undefined;
|
|
155
|
+
};
|
|
128
156
|
/**
|
|
129
157
|
* The metadata configuration for the vector index. This configuration allows you to specify which metadata keys should be treated as non-filterable.
|
|
130
158
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3vectors-index-metadataconfiguration.html}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes, Tag } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Creates
|
|
3
|
+
* Creates an Amazon SageMaker HyperPod cluster. SageMaker HyperPod is a capability of SageMaker for creating and managing persistent clusters for developing large machine learning models, such as large language models (LLMs) and diffusion models. To learn more, see [Amazon SageMaker HyperPod](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod.html) in the *Amazon SageMaker Developer Guide* .
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-cluster.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SageMakerCluster = ResourceDefinitionWithAttributes<"AWS::SageMaker::Cluster", SageMakerClusterProps, SageMakerClusterAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Creates
|
|
8
|
+
* Creates an Amazon SageMaker HyperPod cluster. SageMaker HyperPod is a capability of SageMaker for creating and managing persistent clusters for developing large machine learning models, such as large language models (LLMs) and diffusion models. To learn more, see [Amazon SageMaker HyperPod](https://docs.aws.amazon.com/sagemaker/latest/dg/sagemaker-hyperpod.html) in the *Amazon SageMaker Developer Guide* .
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-sagemaker-cluster.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SageMakerClusterProps = {
|
|
@@ -254,6 +254,12 @@ export type ClusterInstanceGroup = {
|
|
|
254
254
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterinstancegroup.html#cfn-sagemaker-cluster-clusterinstancegroup-lifecycleconfig}
|
|
255
255
|
*/
|
|
256
256
|
LifeCycleConfig: ClusterLifeCycleConfig;
|
|
257
|
+
/**
|
|
258
|
+
* The minimum number of instances required for the instance group to be InService. MinInstanceCount must be less than or equal to InstanceCount.
|
|
259
|
+
* @min 0
|
|
260
|
+
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterinstancegroup.html#cfn-sagemaker-cluster-clusterinstancegroup-mininstancecount}
|
|
261
|
+
*/
|
|
262
|
+
MinInstanceCount?: number | undefined;
|
|
257
263
|
/**
|
|
258
264
|
* A flag indicating whether deep health checks should be performed when the HyperPod cluster instance group is created or updated. Deep health checks are comprehensive, invasive tests that validate the health of the underlying hardware and infrastructure components.
|
|
259
265
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-sagemaker-cluster-clusterinstancegroup.html#cfn-sagemaker-cluster-clusterinstancegroup-onstartdeephealthchecks}
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Enables aggregation across AWS Regions .
|
|
3
|
+
* Enables aggregation across AWS Regions .
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SecurityHubAggregatorV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::AggregatorV2", SecurityHubAggregatorV2Props, SecurityHubAggregatorV2Attribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Enables aggregation across AWS Regions .
|
|
8
|
+
* Enables aggregation across AWS Regions .
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-aggregatorv2.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SecurityHubAggregatorV2Props = {
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::AutomationRule` resource specifies an automation rule based on input parameters. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::AutomationRule` resource specifies an automation rule based on input parameters. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrule.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SecurityHubAutomationRule = ResourceDefinitionWithAttributes<"AWS::SecurityHub::AutomationRule", SecurityHubAutomationRuleProps, SecurityHubAutomationRuleAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* The `AWS::SecurityHub::AutomationRule` resource specifies an automation rule based on input parameters. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
8
|
+
* The `AWS::SecurityHub::AutomationRule` resource specifies an automation rule based on input parameters. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrule.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SecurityHubAutomationRuleProps = {
|
|
@@ -15,7 +15,7 @@ export type SecurityHubAutomationRuleProps = {
|
|
|
15
15
|
*/
|
|
16
16
|
Actions: AutomationRulesAction[];
|
|
17
17
|
/**
|
|
18
|
-
* A set of [AWS Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html) finding field attributes and corresponding expected values that Security Hub uses to filter findings. If a rule is enabled and a finding matches the criteria specified in this parameter, Security Hub applies the rule action to the finding.
|
|
18
|
+
* A set of [AWS Security Finding Format (ASFF)](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html) finding field attributes and corresponding expected values that Security Hub CSPM uses to filter findings. If a rule is enabled and a finding matches the criteria specified in this parameter, Security Hub CSPM applies the rule action to the finding.
|
|
19
19
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrule.html#cfn-securityhub-automationrule-criteria}
|
|
20
20
|
*/
|
|
21
21
|
Criteria: AutomationRulesFindingFilters;
|
|
@@ -27,7 +27,7 @@ export type SecurityHubAutomationRuleProps = {
|
|
|
27
27
|
*/
|
|
28
28
|
Description: string;
|
|
29
29
|
/**
|
|
30
|
-
* Specifies whether a rule is the last to be applied with respect to a finding that matches the rule criteria. This is useful when a finding matches the criteria for multiple rules, and each rule has different actions. If a rule is terminal, Security Hub applies the rule action to a finding that matches the rule criteria and doesn't evaluate other rules for the finding. By default, a rule isn't terminal.
|
|
30
|
+
* Specifies whether a rule is the last to be applied with respect to a finding that matches the rule criteria. This is useful when a finding matches the criteria for multiple rules, and each rule has different actions. If a rule is terminal, Security Hub CSPM applies the rule action to a finding that matches the rule criteria and doesn't evaluate other rules for the finding. By default, a rule isn't terminal.
|
|
31
31
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrule.html#cfn-securityhub-automationrule-isterminal}
|
|
32
32
|
*/
|
|
33
33
|
IsTerminal?: boolean | undefined;
|
|
@@ -39,14 +39,14 @@ export type SecurityHubAutomationRuleProps = {
|
|
|
39
39
|
*/
|
|
40
40
|
RuleName: string;
|
|
41
41
|
/**
|
|
42
|
-
* An integer ranging from 1 to 1000 that represents the order in which the rule action is applied to findings. Security Hub applies rules with lower values for this parameter first.
|
|
42
|
+
* An integer ranging from 1 to 1000 that represents the order in which the rule action is applied to findings. Security Hub CSPM applies rules with lower values for this parameter first.
|
|
43
43
|
* @min 1
|
|
44
44
|
* @max 1000
|
|
45
45
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrule.html#cfn-securityhub-automationrule-ruleorder}
|
|
46
46
|
*/
|
|
47
47
|
RuleOrder: number;
|
|
48
48
|
/**
|
|
49
|
-
* Whether the rule is active after it is created. If this parameter is equal to `ENABLED` , Security Hub applies the rule to findings and finding updates after the rule is created.
|
|
49
|
+
* Whether the rule is active after it is created. If this parameter is equal to `ENABLED` , Security Hub CSPM applies the rule to findings and finding updates after the rule is created.
|
|
50
50
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrule.html#cfn-securityhub-automationrule-rulestatus}
|
|
51
51
|
*/
|
|
52
52
|
RuleStatus?: "ENABLED" | "DISABLED" | undefined;
|
|
@@ -89,7 +89,7 @@ export type SecurityHubAutomationRuleAttribs = {
|
|
|
89
89
|
UpdatedAt: string;
|
|
90
90
|
};
|
|
91
91
|
/**
|
|
92
|
-
* One or more actions that Security Hub takes when a finding matches the defined criteria of a rule.
|
|
92
|
+
* One or more actions that AWS Security Hub CSPM takes when a finding matches the defined criteria of a rule.
|
|
93
93
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesaction.html}
|
|
94
94
|
*/
|
|
95
95
|
export type AutomationRulesAction = {
|
|
@@ -99,7 +99,7 @@ export type AutomationRulesAction = {
|
|
|
99
99
|
*/
|
|
100
100
|
FindingFieldsUpdate: AutomationRulesFindingFieldsUpdate;
|
|
101
101
|
/**
|
|
102
|
-
* Specifies the type of action that Security Hub takes when a finding matches the defined criteria of a rule.
|
|
102
|
+
* Specifies the type of action that Security Hub CSPM takes when a finding matches the defined criteria of a rule.
|
|
103
103
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesaction.html#cfn-securityhub-automationrule-automationrulesaction-type}
|
|
104
104
|
*/
|
|
105
105
|
Type: "FINDING_FIELDS_UPDATE";
|
|
@@ -196,7 +196,7 @@ export type AutomationRulesFindingFilters = {
|
|
|
196
196
|
*/
|
|
197
197
|
ComplianceStatus?: StringFilter[] | undefined;
|
|
198
198
|
/**
|
|
199
|
-
* The likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. `Confidence` is scored on a 0–100 basis using a ratio scale. A value of `0` means 0 percent confidence, and a value of `100` means 100 percent confidence. For example, a data exfiltration detection based on a statistical deviation of network traffic has low confidence because an actual exfiltration hasn't been verified. For more information, see [Confidence](https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-confidence) in the *Security Hub User Guide* .
|
|
199
|
+
* The likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. `Confidence` is scored on a 0–100 basis using a ratio scale. A value of `0` means 0 percent confidence, and a value of `100` means 100 percent confidence. For example, a data exfiltration detection based on a statistical deviation of network traffic has low confidence because an actual exfiltration hasn't been verified. For more information, see [Confidence](https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-confidence) in the *AWS Security Hub CSPM User Guide* .
|
|
200
200
|
*
|
|
201
201
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
202
202
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-confidence}
|
|
@@ -205,14 +205,14 @@ export type AutomationRulesFindingFilters = {
|
|
|
205
205
|
/**
|
|
206
206
|
* A timestamp that indicates when this finding record was created.
|
|
207
207
|
*
|
|
208
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
208
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
209
209
|
*
|
|
210
210
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
211
211
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-createdat}
|
|
212
212
|
*/
|
|
213
213
|
CreatedAt?: DateFilter[] | undefined;
|
|
214
214
|
/**
|
|
215
|
-
* The level of importance that is assigned to the resources that are associated with a finding. `Criticality` is scored on a 0–100 basis, using a ratio scale that supports only full integers. A score of `0` means that the underlying resources have no criticality, and a score of `100` is reserved for the most critical resources. For more information, see [Criticality](https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-criticality) in the *Security Hub User Guide* .
|
|
215
|
+
* The level of importance that is assigned to the resources that are associated with a finding. `Criticality` is scored on a 0–100 basis, using a ratio scale that supports only full integers. A score of `0` means that the underlying resources have no criticality, and a score of `100` is reserved for the most critical resources. For more information, see [Criticality](https://docs.aws.amazon.com/securityhub/latest/userguide/asff-top-level-attributes.html#asff-criticality) in the *AWS Security Hub CSPM User Guide* .
|
|
216
216
|
*
|
|
217
217
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
218
218
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-criticality}
|
|
@@ -228,7 +228,7 @@ export type AutomationRulesFindingFilters = {
|
|
|
228
228
|
/**
|
|
229
229
|
* A timestamp that indicates when the potential security issue captured by a finding was first observed by the security findings product.
|
|
230
230
|
*
|
|
231
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
231
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
232
232
|
*
|
|
233
233
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
234
234
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-firstobservedat}
|
|
@@ -251,7 +251,7 @@ export type AutomationRulesFindingFilters = {
|
|
|
251
251
|
/**
|
|
252
252
|
* A timestamp that indicates when the security findings provider most recently observed a change in the resource that is involved in the finding.
|
|
253
253
|
*
|
|
254
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
254
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
255
255
|
*
|
|
256
256
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
257
257
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-lastobservedat}
|
|
@@ -267,7 +267,7 @@ export type AutomationRulesFindingFilters = {
|
|
|
267
267
|
/**
|
|
268
268
|
* The timestamp of when the note was updated.
|
|
269
269
|
*
|
|
270
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
270
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
271
271
|
*
|
|
272
272
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
273
273
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-noteupdatedat}
|
|
@@ -281,14 +281,14 @@ export type AutomationRulesFindingFilters = {
|
|
|
281
281
|
*/
|
|
282
282
|
NoteUpdatedBy?: StringFilter[] | undefined;
|
|
283
283
|
/**
|
|
284
|
-
* The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub.
|
|
284
|
+
* The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub CSPM.
|
|
285
285
|
*
|
|
286
286
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
287
287
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-productarn}
|
|
288
288
|
*/
|
|
289
289
|
ProductArn?: StringFilter[] | undefined;
|
|
290
290
|
/**
|
|
291
|
-
* Provides the name of the product that generated the finding. For control-based findings, the product name is Security Hub.
|
|
291
|
+
* Provides the name of the product that generated the finding. For control-based findings, the product name is Security Hub CSPM.
|
|
292
292
|
*
|
|
293
293
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
294
294
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-productname}
|
|
@@ -379,7 +379,7 @@ export type AutomationRulesFindingFilters = {
|
|
|
379
379
|
*/
|
|
380
380
|
Title?: StringFilter[] | undefined;
|
|
381
381
|
/**
|
|
382
|
-
* One or more finding types in the format of namespace/category/classifier that classify a finding. For a list of namespaces, classifiers, and categories, see [Types taxonomy for ASFF](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html) in the *Security Hub User Guide* .
|
|
382
|
+
* One or more finding types in the format of namespace/category/classifier that classify a finding. For a list of namespaces, classifiers, and categories, see [Types taxonomy for ASFF](https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format-type-taxonomy.html) in the *AWS Security Hub CSPM User Guide* .
|
|
383
383
|
*
|
|
384
384
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
385
385
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-type}
|
|
@@ -388,7 +388,7 @@ export type AutomationRulesFindingFilters = {
|
|
|
388
388
|
/**
|
|
389
389
|
* A timestamp that indicates when the finding record was most recently updated.
|
|
390
390
|
*
|
|
391
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
391
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
392
392
|
*
|
|
393
393
|
* Array Members: Minimum number of 1 item. Maximum number of 20 items.
|
|
394
394
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-automationrulesfindingfilters.html#cfn-securityhub-automationrule-automationrulesfindingfilters-updatedat}
|
|
@@ -429,14 +429,14 @@ export type DateFilter = {
|
|
|
429
429
|
/**
|
|
430
430
|
* A timestamp that provides the end date for the date filter.
|
|
431
431
|
*
|
|
432
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
432
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
433
433
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-datefilter.html#cfn-securityhub-automationrule-datefilter-end}
|
|
434
434
|
*/
|
|
435
435
|
End?: string | undefined;
|
|
436
436
|
/**
|
|
437
437
|
* A timestamp that provides the start date for the date filter.
|
|
438
438
|
*
|
|
439
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
439
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
440
440
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-datefilter.html#cfn-securityhub-automationrule-datefilter-start}
|
|
441
441
|
*/
|
|
442
442
|
Start?: string | undefined;
|
|
@@ -449,14 +449,14 @@ export type DateFilter = {
|
|
|
449
449
|
/**
|
|
450
450
|
* A timestamp that provides the end date for the date filter.
|
|
451
451
|
*
|
|
452
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
452
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
453
453
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-datefilter.html#cfn-securityhub-automationrule-datefilter-end}
|
|
454
454
|
*/
|
|
455
455
|
End: string;
|
|
456
456
|
/**
|
|
457
457
|
* A timestamp that provides the start date for the date filter.
|
|
458
458
|
*
|
|
459
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
459
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
460
460
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-datefilter.html#cfn-securityhub-automationrule-datefilter-start}
|
|
461
461
|
*/
|
|
462
462
|
Start: string;
|
|
@@ -478,12 +478,12 @@ export type DateRange = {
|
|
|
478
478
|
Value: number;
|
|
479
479
|
};
|
|
480
480
|
/**
|
|
481
|
-
* A map filter for filtering Security Hub findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
|
|
481
|
+
* A map filter for filtering AWS Security Hub CSPM findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
|
|
482
482
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-mapfilter.html}
|
|
483
483
|
*/
|
|
484
484
|
export type MapFilter = {
|
|
485
485
|
/**
|
|
486
|
-
* The condition to apply to the key value when filtering Security Hub findings with a map filter.
|
|
486
|
+
* The condition to apply to the key value when filtering Security Hub CSPM findings with a map filter.
|
|
487
487
|
*
|
|
488
488
|
* To search for values that have the filter value, use one of the following comparison operators:
|
|
489
489
|
*
|
|
@@ -503,7 +503,7 @@ export type MapFilter = {
|
|
|
503
503
|
*
|
|
504
504
|
* You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can’t have both an `EQUALS` filter and a `NOT_EQUALS` filter on the same field. Combining filters in this way returns an error.
|
|
505
505
|
*
|
|
506
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
506
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
507
507
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-mapfilter.html#cfn-securityhub-automationrule-mapfilter-comparison}
|
|
508
508
|
*/
|
|
509
509
|
Comparison: "EQUALS" | "NOT_EQUALS" | "CONTAINS" | "NOT_CONTAINS";
|
|
@@ -643,12 +643,12 @@ export type SeverityUpdate = {
|
|
|
643
643
|
Product?: number | undefined;
|
|
644
644
|
};
|
|
645
645
|
/**
|
|
646
|
-
* A string filter for filtering Security Hub findings.
|
|
646
|
+
* A string filter for filtering AWS Security Hub CSPM findings.
|
|
647
647
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-stringfilter.html}
|
|
648
648
|
*/
|
|
649
649
|
export type StringFilter = {
|
|
650
650
|
/**
|
|
651
|
-
* The condition to apply to a string value when filtering Security Hub findings.
|
|
651
|
+
* The condition to apply to a string value when filtering Security Hub CSPM findings.
|
|
652
652
|
*
|
|
653
653
|
* To search for values that have the filter value, use one of the following comparison operators:
|
|
654
654
|
*
|
|
@@ -668,21 +668,21 @@ export type StringFilter = {
|
|
|
668
668
|
*
|
|
669
669
|
* You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can't provide both an `EQUALS` filter and a `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filter on the same field. Combining filters in this way returns an error. `CONTAINS` filters can only be used with other `CONTAINS` filters. `NOT_CONTAINS` filters can only be used with other `NOT_CONTAINS` filters.
|
|
670
670
|
*
|
|
671
|
-
* You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
|
|
671
|
+
* You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub CSPM first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
|
|
672
672
|
*
|
|
673
|
-
* For example, for the following filters, Security Hub first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
|
|
673
|
+
* For example, for the following filters, Security Hub CSPM first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
|
|
674
674
|
*
|
|
675
675
|
* - `ResourceType PREFIX AwsIam`
|
|
676
676
|
* - `ResourceType PREFIX AwsEc2`
|
|
677
677
|
* - `ResourceType NOT_EQUALS AwsIamPolicy`
|
|
678
678
|
* - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
|
|
679
679
|
*
|
|
680
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
680
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
681
681
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-stringfilter.html#cfn-securityhub-automationrule-stringfilter-comparison}
|
|
682
682
|
*/
|
|
683
683
|
Comparison: StringFilterComparison;
|
|
684
684
|
/**
|
|
685
|
-
* The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub` . If you provide `security hub` as the filter value, there's no match.
|
|
685
|
+
* The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub CSPM` . If you provide `security hub` as the filter value, there's no match.
|
|
686
686
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrule-stringfilter.html#cfn-securityhub-automationrule-stringfilter-value}
|
|
687
687
|
*/
|
|
688
688
|
Value: string;
|
|
@@ -704,7 +704,7 @@ export type WorkflowUpdate = {
|
|
|
704
704
|
*
|
|
705
705
|
* - `NEW` - The initial state of a finding, before it is reviewed.
|
|
706
706
|
*
|
|
707
|
-
* Security Hub also resets `WorkFlowStatus` from `NOTIFIED` or `RESOLVED` to `NEW` in the following cases:
|
|
707
|
+
* Security Hub CSPM also resets `WorkFlowStatus` from `NOTIFIED` or `RESOLVED` to `NEW` in the following cases:
|
|
708
708
|
*
|
|
709
709
|
* - The record state changes from `ARCHIVED` to `ACTIVE` .
|
|
710
710
|
* - The compliance status changes from `PASSED` to either `WARNING` , `FAILED` , or `NOT_AVAILABLE` .
|
|
@@ -1,11 +1,11 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* Creates a V2 automation rule.
|
|
3
|
+
* Creates a V2 automation rule.
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SecurityHubAutomationRuleV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::AutomationRuleV2", SecurityHubAutomationRuleV2Props, SecurityHubAutomationRuleV2Attribs>;
|
|
7
7
|
/**
|
|
8
|
-
* Creates a V2 automation rule.
|
|
8
|
+
* Creates a V2 automation rule.
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SecurityHubAutomationRuleV2Props = {
|
|
@@ -101,7 +101,7 @@ export type AutomationRulesActionV2 = {
|
|
|
101
101
|
*/
|
|
102
102
|
FindingFieldsUpdate?: AutomationRulesFindingFieldsUpdateV2 | undefined;
|
|
103
103
|
/**
|
|
104
|
-
* Specifies the type of action that Security Hub takes when a finding matches the defined criteria of a rule.
|
|
104
|
+
* Specifies the type of action that Security Hub CSPM takes when a finding matches the defined criteria of a rule.
|
|
105
105
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html#cfn-securityhub-automationrulev2-automationrulesactionv2-type}
|
|
106
106
|
*/
|
|
107
107
|
Type: "FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION";
|
|
@@ -199,14 +199,14 @@ export type DateFilter = {
|
|
|
199
199
|
/**
|
|
200
200
|
* A timestamp that provides the end date for the date filter.
|
|
201
201
|
*
|
|
202
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
202
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
203
203
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-end}
|
|
204
204
|
*/
|
|
205
205
|
End?: string | undefined;
|
|
206
206
|
/**
|
|
207
207
|
* A timestamp that provides the start date for the date filter.
|
|
208
208
|
*
|
|
209
|
-
* For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
209
|
+
* For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
|
|
210
210
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-start}
|
|
211
211
|
*/
|
|
212
212
|
Start?: string | undefined;
|
|
@@ -240,12 +240,12 @@ export type ExternalIntegrationConfiguration = {
|
|
|
240
240
|
ConnectorArn?: string | undefined;
|
|
241
241
|
};
|
|
242
242
|
/**
|
|
243
|
-
* A map filter for filtering Security Hub findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
|
|
243
|
+
* A map filter for filtering AWS Security Hub CSPM findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
|
|
244
244
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html}
|
|
245
245
|
*/
|
|
246
246
|
export type MapFilter = {
|
|
247
247
|
/**
|
|
248
|
-
* The condition to apply to the key value when filtering Security Hub findings with a map filter.
|
|
248
|
+
* The condition to apply to the key value when filtering Security Hub CSPM findings with a map filter.
|
|
249
249
|
*
|
|
250
250
|
* To search for values that have the filter value, use one of the following comparison operators:
|
|
251
251
|
*
|
|
@@ -265,7 +265,7 @@ export type MapFilter = {
|
|
|
265
265
|
*
|
|
266
266
|
* You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can’t have both an `EQUALS` filter and a `NOT_EQUALS` filter on the same field. Combining filters in this way returns an error.
|
|
267
267
|
*
|
|
268
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
268
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
269
269
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html#cfn-securityhub-automationrulev2-mapfilter-comparison}
|
|
270
270
|
*/
|
|
271
271
|
Comparison: "EQUALS" | "NOT_EQUALS";
|
|
@@ -407,12 +407,12 @@ export type OcsfStringFilter = {
|
|
|
407
407
|
Filter: StringFilter;
|
|
408
408
|
};
|
|
409
409
|
/**
|
|
410
|
-
* A string filter for filtering Security Hub findings.
|
|
410
|
+
* A string filter for filtering AWS Security Hub CSPM findings.
|
|
411
411
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html}
|
|
412
412
|
*/
|
|
413
413
|
export type StringFilter = {
|
|
414
414
|
/**
|
|
415
|
-
* The condition to apply to a string value when filtering Security Hub findings.
|
|
415
|
+
* The condition to apply to a string value when filtering Security Hub CSPM findings.
|
|
416
416
|
*
|
|
417
417
|
* To search for values that have the filter value, use one of the following comparison operators:
|
|
418
418
|
*
|
|
@@ -432,21 +432,21 @@ export type StringFilter = {
|
|
|
432
432
|
*
|
|
433
433
|
* You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can't provide both an `EQUALS` filter and a `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filter on the same field. Combining filters in this way returns an error. `CONTAINS` filters can only be used with other `CONTAINS` filters. `NOT_CONTAINS` filters can only be used with other `NOT_CONTAINS` filters.
|
|
434
434
|
*
|
|
435
|
-
* You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
|
|
435
|
+
* You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub CSPM first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
|
|
436
436
|
*
|
|
437
|
-
* For example, for the following filters, Security Hub first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
|
|
437
|
+
* For example, for the following filters, Security Hub CSPM first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
|
|
438
438
|
*
|
|
439
439
|
* - `ResourceType PREFIX AwsIam`
|
|
440
440
|
* - `ResourceType PREFIX AwsEc2`
|
|
441
441
|
* - `ResourceType NOT_EQUALS AwsIamPolicy`
|
|
442
442
|
* - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
|
|
443
443
|
*
|
|
444
|
-
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
|
|
444
|
+
* `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
|
|
445
445
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html#cfn-securityhub-automationrulev2-stringfilter-comparison}
|
|
446
446
|
*/
|
|
447
447
|
Comparison: "EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS";
|
|
448
448
|
/**
|
|
449
|
-
* The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub` . If you provide `security hub` as the filter value, there's no match.
|
|
449
|
+
* The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub CSPM` . If you provide `security hub` as the filter value, there's no match.
|
|
450
450
|
* @minLength 1
|
|
451
451
|
* @maxLength 4096
|
|
452
452
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html#cfn-securityhub-automationrulev2-stringfilter-value}
|
|
@@ -1,16 +1,16 @@
|
|
|
1
1
|
import type { ResourceDefinitionWithAttributes } from "../main.ts";
|
|
2
2
|
/**
|
|
3
|
-
* The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. Only the Security Hub delegated administrator can create this resource in the home Region. For more information, see [Central configuration in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in the *Security Hub User Guide* .
|
|
3
|
+
* The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. Only the AWS Security Hub CSPM delegated administrator can create this resource in the home Region. For more information, see [Central configuration in Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in the *AWS Security Hub CSPM User Guide* .
|
|
4
4
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html}
|
|
5
5
|
*/
|
|
6
6
|
export type SecurityHubConfigurationPolicy = ResourceDefinitionWithAttributes<"AWS::SecurityHub::ConfigurationPolicy", SecurityHubConfigurationPolicyProps, SecurityHubConfigurationPolicyAttribs>;
|
|
7
7
|
/**
|
|
8
|
-
* The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. Only the Security Hub delegated administrator can create this resource in the home Region. For more information, see [Central configuration in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in the *Security Hub User Guide* .
|
|
8
|
+
* The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. Only the AWS Security Hub CSPM delegated administrator can create this resource in the home Region. For more information, see [Central configuration in Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in the *AWS Security Hub CSPM User Guide* .
|
|
9
9
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html}
|
|
10
10
|
*/
|
|
11
11
|
export type SecurityHubConfigurationPolicyProps = {
|
|
12
12
|
/**
|
|
13
|
-
* An object that defines how Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).
|
|
13
|
+
* An object that defines how AWS Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).
|
|
14
14
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html#cfn-securityhub-configurationpolicy-configurationpolicy}
|
|
15
15
|
*/
|
|
16
16
|
ConfigurationPolicy: Policy;
|
|
@@ -29,7 +29,7 @@ export type SecurityHubConfigurationPolicyProps = {
|
|
|
29
29
|
*/
|
|
30
30
|
Name: string;
|
|
31
31
|
/**
|
|
32
|
-
* User-defined tags associated with a configuration policy. For more information, see [Tagging Security Hub resources](https://docs.aws.amazon.com/securityhub/latest/userguide/tagging-resources.html) in the *Security Hub user guide* .
|
|
32
|
+
* User-defined tags associated with a configuration policy. For more information, see [Tagging AWS Security Hub CSPM resources](https://docs.aws.amazon.com/securityhub/latest/userguide/tagging-resources.html) in the *Security Hub CSPM user guide* .
|
|
33
33
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html#cfn-securityhub-configurationpolicy-tags}
|
|
34
34
|
*/
|
|
35
35
|
Tags?: Record<string, string> | undefined;
|
|
@@ -77,9 +77,9 @@ export type ParameterConfiguration = {
|
|
|
77
77
|
*/
|
|
78
78
|
Value?: ParameterValue | undefined;
|
|
79
79
|
/**
|
|
80
|
-
* Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub behavior.
|
|
80
|
+
* Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub CSPM behavior.
|
|
81
81
|
*
|
|
82
|
-
* When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub ignores user-provided input for the `Value` field.
|
|
82
|
+
* When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub CSPM default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub CSPM ignores user-provided input for the `Value` field.
|
|
83
83
|
*
|
|
84
84
|
* When `ValueType` is set equal to `CUSTOM` , the `Value` field can't be empty.
|
|
85
85
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-parameterconfiguration.html#cfn-securityhub-configurationpolicy-parameterconfiguration-valuetype}
|
|
@@ -135,7 +135,7 @@ export type ParameterValue = {
|
|
|
135
135
|
StringList?: string[] | undefined;
|
|
136
136
|
};
|
|
137
137
|
/**
|
|
138
|
-
* An object that defines how Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).
|
|
138
|
+
* An object that defines how AWS Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).
|
|
139
139
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-policy.html}
|
|
140
140
|
*/
|
|
141
141
|
export type Policy = {
|
|
@@ -163,7 +163,7 @@ export type SecurityControlCustomParameter = {
|
|
|
163
163
|
SecurityControlId?: string | undefined;
|
|
164
164
|
};
|
|
165
165
|
/**
|
|
166
|
-
* An object that defines which security controls are enabled in an Security Hub configuration policy. The enablement status of a control is aligned across all of the enabled standards in an account.
|
|
166
|
+
* An object that defines which security controls are enabled in an AWS Security Hub CSPM configuration policy. The enablement status of a control is aligned across all of the enabled standards in an account.
|
|
167
167
|
*
|
|
168
168
|
* This property is required only if `ServiceEnabled` is set to `true` in your configuration policy.
|
|
169
169
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html}
|
|
@@ -174,7 +174,7 @@ export type SecurityControlsConfiguration = {
|
|
|
174
174
|
*
|
|
175
175
|
* Provide only one of `EnabledSecurityControlIdentifiers` or `DisabledSecurityControlIdentifiers` .
|
|
176
176
|
*
|
|
177
|
-
* If you provide `DisabledSecurityControlIdentifiers` , Security Hub enables all other controls not in the list, and enables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .
|
|
177
|
+
* If you provide `DisabledSecurityControlIdentifiers` , Security Hub CSPM enables all other controls not in the list, and enables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .
|
|
178
178
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html#cfn-securityhub-configurationpolicy-securitycontrolsconfiguration-disabledsecuritycontrolidentifiers}
|
|
179
179
|
*/
|
|
180
180
|
DisabledSecurityControlIdentifiers?: string[] | undefined;
|
|
@@ -183,7 +183,7 @@ export type SecurityControlsConfiguration = {
|
|
|
183
183
|
*
|
|
184
184
|
* Provide only one of `EnabledSecurityControlIdentifiers` or `DisabledSecurityControlIdentifiers` .
|
|
185
185
|
*
|
|
186
|
-
* If you provide `EnabledSecurityControlIdentifiers` , Security Hub disables all other controls not in the list, and disables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .
|
|
186
|
+
* If you provide `EnabledSecurityControlIdentifiers` , Security Hub CSPM disables all other controls not in the list, and disables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .
|
|
187
187
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html#cfn-securityhub-configurationpolicy-securitycontrolsconfiguration-enabledsecuritycontrolidentifiers}
|
|
188
188
|
*/
|
|
189
189
|
EnabledSecurityControlIdentifiers?: string[] | undefined;
|
|
@@ -194,7 +194,7 @@ export type SecurityControlsConfiguration = {
|
|
|
194
194
|
SecurityControlCustomParameters?: SecurityControlCustomParameter[] | undefined;
|
|
195
195
|
};
|
|
196
196
|
/**
|
|
197
|
-
* An object that defines how Security Hub is configured. The configuration policy includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).
|
|
197
|
+
* An object that defines how AWS Security Hub CSPM is configured. The configuration policy includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).
|
|
198
198
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securityhubpolicy.html}
|
|
199
199
|
*/
|
|
200
200
|
export type SecurityHubPolicy = {
|
|
@@ -213,7 +213,7 @@ export type SecurityHubPolicy = {
|
|
|
213
213
|
*/
|
|
214
214
|
SecurityControlsConfiguration?: SecurityControlsConfiguration | undefined;
|
|
215
215
|
/**
|
|
216
|
-
* Indicates whether Security Hub is enabled in the policy.
|
|
216
|
+
* Indicates whether Security Hub CSPM is enabled in the policy.
|
|
217
217
|
* @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securityhubpolicy.html#cfn-securityhub-configurationpolicy-securityhubpolicy-serviceenabled}
|
|
218
218
|
*/
|
|
219
219
|
ServiceEnabled?: boolean | undefined;
|