@propulsionworks/cloudformation 0.1.38 → 0.1.40

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (136) hide show
  1. package/out/exports/resources.generated/aws-arcregionswitch-plan.d.ts +3 -3
  2. package/out/exports/resources.generated/aws-autoscaling-autoscalinggroup.d.ts +29 -3
  3. package/out/exports/resources.generated/aws-backup-backupplan.d.ts +1 -0
  4. package/out/exports/resources.generated/aws-backup-logicallyairgappedbackupvault.d.ts +3 -0
  5. package/out/exports/resources.generated/aws-bedrock-dataautomationproject.d.ts +78 -0
  6. package/out/exports/resources.generated/aws-bedrock-knowledgebase.d.ts +57 -3
  7. package/out/exports/resources.generated/aws-bedrockagentcore-gateway.d.ts +53 -1
  8. package/out/exports/resources.generated/aws-bedrockagentcore-gatewaytarget.d.ts +16 -0
  9. package/out/exports/resources.generated/aws-billingconductor-customlineitem.d.ts +11 -5
  10. package/out/exports/resources.generated/aws-cases-caserule.d.ts +182 -0
  11. package/out/exports/resources.generated/aws-cases-domain.d.ts +61 -0
  12. package/out/exports/resources.generated/aws-cases-field.d.ts +85 -0
  13. package/out/exports/resources.generated/aws-cases-layout.d.ts +140 -0
  14. package/out/exports/resources.generated/aws-cases-template.d.ts +141 -0
  15. package/out/exports/resources.generated/aws-ce-costcategory.d.ts +1 -1
  16. package/out/exports/resources.generated/aws-cleanrooms-analysistemplate.d.ts +71 -0
  17. package/out/exports/resources.generated/aws-cleanrooms-collaboration.d.ts +16 -0
  18. package/out/exports/resources.generated/aws-cleanrooms-membership.d.ts +16 -0
  19. package/out/exports/resources.generated/aws-cloudformation-waitcondition.d.ts +2 -2
  20. package/out/exports/resources.generated/aws-cloudfront-anycastiplist.d.ts +21 -0
  21. package/out/exports/resources.generated/aws-codedeploy-deploymentgroup.d.ts +3 -3
  22. package/out/exports/resources.generated/aws-config-configurationrecorder.d.ts +1 -1
  23. package/out/exports/resources.generated/aws-connect-contactflowmodule.d.ts +13 -0
  24. package/out/exports/resources.generated/aws-connect-datatable.d.ts +13 -13
  25. package/out/exports/resources.generated/aws-connect-datatableattribute.d.ts +12 -2
  26. package/out/exports/resources.generated/aws-connect-datatablerecord.d.ts +4 -0
  27. package/out/exports/resources.generated/aws-connect-evaluationform.d.ts +23 -11
  28. package/out/exports/resources.generated/aws-connect-hoursofoperation.d.ts +90 -0
  29. package/out/exports/resources.generated/aws-connect-securityprofile.d.ts +10 -9
  30. package/out/exports/resources.generated/aws-connect-workspace.d.ts +348 -0
  31. package/out/exports/resources.generated/aws-connectcampaignsv2-campaign.d.ts +107 -1
  32. package/out/exports/resources.generated/aws-customerprofiles-segmentdefinition.d.ts +5 -1
  33. package/out/exports/resources.generated/aws-datasync-agent.d.ts +1 -1
  34. package/out/exports/resources.generated/aws-datasync-locationazureblob.d.ts +9 -9
  35. package/out/exports/resources.generated/aws-datasync-locationefs.d.ts +5 -5
  36. package/out/exports/resources.generated/aws-datasync-locationfsxlustre.d.ts +2 -2
  37. package/out/exports/resources.generated/aws-datasync-locationfsxontap.d.ts +3 -3
  38. package/out/exports/resources.generated/aws-datasync-locationfsxopenzfs.d.ts +2 -2
  39. package/out/exports/resources.generated/aws-datasync-locationfsxwindows.d.ts +2 -2
  40. package/out/exports/resources.generated/aws-datasync-locationhdfs.d.ts +1 -1
  41. package/out/exports/resources.generated/aws-datasync-locationnfs.d.ts +1 -1
  42. package/out/exports/resources.generated/aws-datasync-locationobjectstorage.d.ts +10 -10
  43. package/out/exports/resources.generated/aws-datasync-locations3.d.ts +3 -3
  44. package/out/exports/resources.generated/aws-datasync-locationsmb.d.ts +9 -9
  45. package/out/exports/resources.generated/aws-datasync-task.d.ts +8 -8
  46. package/out/exports/resources.generated/aws-datazone-connection.d.ts +19 -1
  47. package/out/exports/resources.generated/aws-deadline-fleet.d.ts +25 -7
  48. package/out/exports/resources.generated/aws-devopsagent-agentspace.d.ts +6 -6
  49. package/out/exports/resources.generated/aws-devopsagent-association.d.ts +82 -73
  50. package/out/exports/resources.generated/aws-dsql-cluster.d.ts +5 -0
  51. package/out/exports/resources.generated/aws-ec2-clientvpnendpoint.d.ts +8 -0
  52. package/out/exports/resources.generated/aws-ec2-ec2fleet.d.ts +7 -0
  53. package/out/exports/resources.generated/aws-ec2-networkinterface.d.ts +5 -0
  54. package/out/exports/resources.generated/aws-ec2-spotfleet.d.ts +12 -0
  55. package/out/exports/resources.generated/aws-ec2-vpnconcentrator.d.ts +1 -1
  56. package/out/exports/resources.generated/aws-ec2-vpnconnection.d.ts +2 -0
  57. package/out/exports/resources.generated/aws-ecr-repositorycreationtemplate.d.ts +1 -1
  58. package/out/exports/resources.generated/aws-ecs-capacityprovider.d.ts +4 -0
  59. package/out/exports/resources.generated/aws-ecs-expressgatewayservice.d.ts +48 -0
  60. package/out/exports/resources.generated/aws-eks-capability.d.ts +27 -15
  61. package/out/exports/resources.generated/aws-eks-nodegroup.d.ts +61 -3
  62. package/out/exports/resources.generated/aws-emr-step.d.ts +10 -0
  63. package/out/exports/resources.generated/aws-entityresolution-matchingworkflow.d.ts +18 -1
  64. package/out/exports/resources.generated/aws-fsx-s3accesspointattachment.d.ts +119 -1
  65. package/out/exports/resources.generated/aws-glue-connection.d.ts +0 -23
  66. package/out/exports/resources.generated/aws-glue-identitycenterconfiguration.d.ts +6 -6
  67. package/out/exports/resources.generated/aws-groundstation-dataflowendpointgroupv2.d.ts +244 -0
  68. package/out/exports/resources.generated/aws-imagebuilder-component.d.ts +11 -5
  69. package/out/exports/resources.generated/aws-imagebuilder-containerrecipe.d.ts +5 -13
  70. package/out/exports/resources.generated/aws-imagebuilder-image.d.ts +17 -21
  71. package/out/exports/resources.generated/aws-imagebuilder-imagepipeline.d.ts +1 -1
  72. package/out/exports/resources.generated/aws-imagebuilder-imagerecipe.d.ts +11 -5
  73. package/out/exports/resources.generated/aws-imagebuilder-workflow.d.ts +4 -4
  74. package/out/exports/resources.generated/aws-iotanalytics-channel.d.ts +4 -4
  75. package/out/exports/resources.generated/aws-iotanalytics-dataset.d.ts +7 -7
  76. package/out/exports/resources.generated/aws-iotanalytics-datastore.d.ts +6 -6
  77. package/out/exports/resources.generated/aws-iotanalytics-pipeline.d.ts +2 -2
  78. package/out/exports/resources.generated/aws-kafkaconnect-connector.d.ts +5 -0
  79. package/out/exports/resources.generated/aws-lambda-capacityprovider.d.ts +23 -23
  80. package/out/exports/resources.generated/aws-lambda-function.d.ts +11 -3
  81. package/out/exports/resources.generated/aws-lambda-permission.d.ts +1 -1
  82. package/out/exports/resources.generated/aws-lex-bot.d.ts +92 -0
  83. package/out/exports/resources.generated/aws-logs-loggroup.d.ts +5 -0
  84. package/out/exports/resources.generated/aws-logs-transformer.d.ts +6 -1
  85. package/out/exports/resources.generated/aws-macie-session.d.ts +1 -1
  86. package/out/exports/resources.generated/aws-msk-cluster.d.ts +8 -0
  87. package/out/exports/resources.generated/aws-networkmanager-connectattachment.d.ts +5 -0
  88. package/out/exports/resources.generated/aws-networkmanager-corenetworkprefixlistassociation.d.ts +29 -0
  89. package/out/exports/resources.generated/aws-networkmanager-directconnectgatewayattachment.d.ts +5 -0
  90. package/out/exports/resources.generated/aws-networkmanager-sitetositevpnattachment.d.ts +5 -0
  91. package/out/exports/resources.generated/aws-networkmanager-transitgatewayroutetableattachment.d.ts +5 -0
  92. package/out/exports/resources.generated/aws-networkmanager-vpcattachment.d.ts +5 -0
  93. package/out/exports/resources.generated/aws-observabilityadmin-organizationtelemetryrule.d.ts +272 -3
  94. package/out/exports/resources.generated/aws-observabilityadmin-s3tableintegration.d.ts +3 -3
  95. package/out/exports/resources.generated/aws-observabilityadmin-telemetrypipelines.d.ts +2 -0
  96. package/out/exports/resources.generated/aws-observabilityadmin-telemetryrule.d.ts +283 -4
  97. package/out/exports/resources.generated/aws-odb-odbpeeringconnection.d.ts +10 -0
  98. package/out/exports/resources.generated/aws-opensearchservice-application.d.ts +1 -1
  99. package/out/exports/resources.generated/aws-organizations-policy.d.ts +1 -1
  100. package/out/exports/resources.generated/aws-paymentcryptography-key.d.ts +8 -1
  101. package/out/exports/resources.generated/aws-quicksight-dashboard.d.ts +82 -0
  102. package/out/exports/resources.generated/aws-ram-resourceshare.d.ts +31 -0
  103. package/out/exports/resources.generated/aws-resiliencehub-app.d.ts +2 -2
  104. package/out/exports/resources.generated/aws-resourcegroups-group.d.ts +10 -10
  105. package/out/exports/resources.generated/aws-route53-hostedzone.d.ts +16 -0
  106. package/out/exports/resources.generated/aws-route53profiles-profile.d.ts +5 -0
  107. package/out/exports/resources.generated/aws-route53resolver-resolverendpoint.d.ts +10 -0
  108. package/out/exports/resources.generated/aws-s3-bucket.d.ts +1 -1
  109. package/out/exports/resources.generated/aws-s3tables-table.d.ts +3 -3
  110. package/out/exports/resources.generated/aws-s3tables-tablebucket.d.ts +3 -3
  111. package/out/exports/resources.generated/aws-s3vectors-index.d.ts +28 -0
  112. package/out/exports/resources.generated/aws-sagemaker-cluster.d.ts +8 -2
  113. package/out/exports/resources.generated/aws-securityhub-aggregatorv2.d.ts +2 -2
  114. package/out/exports/resources.generated/aws-securityhub-automationrule.d.ts +32 -32
  115. package/out/exports/resources.generated/aws-securityhub-automationrulev2.d.ts +14 -14
  116. package/out/exports/resources.generated/aws-securityhub-configurationpolicy.d.ts +12 -12
  117. package/out/exports/resources.generated/aws-securityhub-connectorv2.d.ts +49 -54
  118. package/out/exports/resources.generated/aws-securityhub-delegatedadmin.d.ts +5 -5
  119. package/out/exports/resources.generated/aws-securityhub-findingaggregator.d.ts +4 -4
  120. package/out/exports/resources.generated/aws-securityhub-hub.d.ts +14 -14
  121. package/out/exports/resources.generated/aws-securityhub-hubv2.d.ts +3 -3
  122. package/out/exports/resources.generated/aws-securityhub-insight.d.ts +29 -29
  123. package/out/exports/resources.generated/aws-securityhub-organizationconfiguration.d.ts +10 -10
  124. package/out/exports/resources.generated/aws-securityhub-policyassociation.d.ts +3 -3
  125. package/out/exports/resources.generated/aws-securityhub-productsubscription.d.ts +2 -2
  126. package/out/exports/resources.generated/aws-securityhub-securitycontrol.d.ts +0 -0
  127. package/out/exports/resources.generated/aws-securityhub-standard.d.ts +6 -6
  128. package/out/exports/resources.generated/aws-ses-tenant.d.ts +54 -0
  129. package/out/exports/resources.generated/aws-ssm-association.d.ts +2 -2
  130. package/out/exports/resources.generated/aws-ssm-maintenancewindowtarget.d.ts +3 -2
  131. package/out/exports/resources.generated/aws-ssm-maintenancewindowtask.d.ts +3 -2
  132. package/out/exports/resources.generated/aws-transfer-connector.d.ts +6 -0
  133. package/out/exports/resources.generated/aws-wisdom-aiagent.d.ts +15 -0
  134. package/out/exports/resources.generated/aws-wisdom-aiguardrail.d.ts +118 -1
  135. package/out/exports/resources.generated/aws-workspacesweb-usersettings.d.ts +109 -0
  136. package/package.json +1 -1
@@ -1,11 +1,11 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * Creates a V2 automation rule. This API is in public preview and subject to change.
3
+ * Creates a V2 automation rule.
4
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
5
5
  */
6
6
  export type SecurityHubAutomationRuleV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::AutomationRuleV2", SecurityHubAutomationRuleV2Props, SecurityHubAutomationRuleV2Attribs>;
7
7
  /**
8
- * Creates a V2 automation rule. This API is in public preview and subject to change.
8
+ * Creates a V2 automation rule.
9
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-automationrulev2.html}
10
10
  */
11
11
  export type SecurityHubAutomationRuleV2Props = {
@@ -101,7 +101,7 @@ export type AutomationRulesActionV2 = {
101
101
  */
102
102
  FindingFieldsUpdate?: AutomationRulesFindingFieldsUpdateV2 | undefined;
103
103
  /**
104
- * Specifies the type of action that Security Hub takes when a finding matches the defined criteria of a rule.
104
+ * Specifies the type of action that Security Hub CSPM takes when a finding matches the defined criteria of a rule.
105
105
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-automationrulesactionv2.html#cfn-securityhub-automationrulev2-automationrulesactionv2-type}
106
106
  */
107
107
  Type: "FINDING_FIELDS_UPDATE" | "EXTERNAL_INTEGRATION";
@@ -199,14 +199,14 @@ export type DateFilter = {
199
199
  /**
200
200
  * A timestamp that provides the end date for the date filter.
201
201
  *
202
- * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
202
+ * For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
203
203
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-end}
204
204
  */
205
205
  End?: string | undefined;
206
206
  /**
207
207
  * A timestamp that provides the start date for the date filter.
208
208
  *
209
- * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
209
+ * For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
210
210
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-datefilter.html#cfn-securityhub-automationrulev2-datefilter-start}
211
211
  */
212
212
  Start?: string | undefined;
@@ -240,12 +240,12 @@ export type ExternalIntegrationConfiguration = {
240
240
  ConnectorArn?: string | undefined;
241
241
  };
242
242
  /**
243
- * A map filter for filtering Security Hub findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
243
+ * A map filter for filtering AWS Security Hub CSPM findings. Each map filter provides the field to check for, the value to check for, and the comparison operator.
244
244
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html}
245
245
  */
246
246
  export type MapFilter = {
247
247
  /**
248
- * The condition to apply to the key value when filtering Security Hub findings with a map filter.
248
+ * The condition to apply to the key value when filtering Security Hub CSPM findings with a map filter.
249
249
  *
250
250
  * To search for values that have the filter value, use one of the following comparison operators:
251
251
  *
@@ -265,7 +265,7 @@ export type MapFilter = {
265
265
  *
266
266
  * You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can’t have both an `EQUALS` filter and a `NOT_EQUALS` filter on the same field. Combining filters in this way returns an error.
267
267
  *
268
- * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
268
+ * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
269
269
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-mapfilter.html#cfn-securityhub-automationrulev2-mapfilter-comparison}
270
270
  */
271
271
  Comparison: "EQUALS" | "NOT_EQUALS";
@@ -407,12 +407,12 @@ export type OcsfStringFilter = {
407
407
  Filter: StringFilter;
408
408
  };
409
409
  /**
410
- * A string filter for filtering Security Hub findings.
410
+ * A string filter for filtering AWS Security Hub CSPM findings.
411
411
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html}
412
412
  */
413
413
  export type StringFilter = {
414
414
  /**
415
- * The condition to apply to a string value when filtering Security Hub findings.
415
+ * The condition to apply to a string value when filtering Security Hub CSPM findings.
416
416
  *
417
417
  * To search for values that have the filter value, use one of the following comparison operators:
418
418
  *
@@ -432,21 +432,21 @@ export type StringFilter = {
432
432
  *
433
433
  * You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can't provide both an `EQUALS` filter and a `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filter on the same field. Combining filters in this way returns an error. `CONTAINS` filters can only be used with other `CONTAINS` filters. `NOT_CONTAINS` filters can only be used with other `NOT_CONTAINS` filters.
434
434
  *
435
- * You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
435
+ * You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub CSPM first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
436
436
  *
437
- * For example, for the following filters, Security Hub first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
437
+ * For example, for the following filters, Security Hub CSPM first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
438
438
  *
439
439
  * - `ResourceType PREFIX AwsIam`
440
440
  * - `ResourceType PREFIX AwsEc2`
441
441
  * - `ResourceType NOT_EQUALS AwsIamPolicy`
442
442
  * - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
443
443
  *
444
- * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
444
+ * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
445
445
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html#cfn-securityhub-automationrulev2-stringfilter-comparison}
446
446
  */
447
447
  Comparison: "EQUALS" | "PREFIX" | "NOT_EQUALS" | "PREFIX_NOT_EQUALS" | "CONTAINS";
448
448
  /**
449
- * The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub` . If you provide `security hub` as the filter value, there's no match.
449
+ * The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub CSPM` . If you provide `security hub` as the filter value, there's no match.
450
450
  * @minLength 1
451
451
  * @maxLength 4096
452
452
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-automationrulev2-stringfilter.html#cfn-securityhub-automationrulev2-stringfilter-value}
@@ -1,16 +1,16 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. Only the Security Hub delegated administrator can create this resource in the home Region. For more information, see [Central configuration in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in the *Security Hub User Guide* .
3
+ * The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. Only the AWS Security Hub CSPM delegated administrator can create this resource in the home Region. For more information, see [Central configuration in Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in the *AWS Security Hub CSPM User Guide* .
4
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html}
5
5
  */
6
6
  export type SecurityHubConfigurationPolicy = ResourceDefinitionWithAttributes<"AWS::SecurityHub::ConfigurationPolicy", SecurityHubConfigurationPolicyProps, SecurityHubConfigurationPolicyAttribs>;
7
7
  /**
8
- * The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. Only the Security Hub delegated administrator can create this resource in the home Region. For more information, see [Central configuration in Security Hub](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in the *Security Hub User Guide* .
8
+ * The `AWS::SecurityHub::ConfigurationPolicy` resource creates a central configuration policy with the defined settings. Only the AWS Security Hub CSPM delegated administrator can create this resource in the home Region. For more information, see [Central configuration in Security Hub CSPM](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in the *AWS Security Hub CSPM User Guide* .
9
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html}
10
10
  */
11
11
  export type SecurityHubConfigurationPolicyProps = {
12
12
  /**
13
- * An object that defines how Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).
13
+ * An object that defines how AWS Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).
14
14
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html#cfn-securityhub-configurationpolicy-configurationpolicy}
15
15
  */
16
16
  ConfigurationPolicy: Policy;
@@ -29,7 +29,7 @@ export type SecurityHubConfigurationPolicyProps = {
29
29
  */
30
30
  Name: string;
31
31
  /**
32
- * User-defined tags associated with a configuration policy. For more information, see [Tagging Security Hub resources](https://docs.aws.amazon.com/securityhub/latest/userguide/tagging-resources.html) in the *Security Hub user guide* .
32
+ * User-defined tags associated with a configuration policy. For more information, see [Tagging AWS Security Hub CSPM resources](https://docs.aws.amazon.com/securityhub/latest/userguide/tagging-resources.html) in the *Security Hub CSPM user guide* .
33
33
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-configurationpolicy.html#cfn-securityhub-configurationpolicy-tags}
34
34
  */
35
35
  Tags?: Record<string, string> | undefined;
@@ -77,9 +77,9 @@ export type ParameterConfiguration = {
77
77
  */
78
78
  Value?: ParameterValue | undefined;
79
79
  /**
80
- * Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub behavior.
80
+ * Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub CSPM behavior.
81
81
  *
82
- * When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub ignores user-provided input for the `Value` field.
82
+ * When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub CSPM default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub CSPM ignores user-provided input for the `Value` field.
83
83
  *
84
84
  * When `ValueType` is set equal to `CUSTOM` , the `Value` field can't be empty.
85
85
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-parameterconfiguration.html#cfn-securityhub-configurationpolicy-parameterconfiguration-valuetype}
@@ -135,7 +135,7 @@ export type ParameterValue = {
135
135
  StringList?: string[] | undefined;
136
136
  };
137
137
  /**
138
- * An object that defines how Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).
138
+ * An object that defines how AWS Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).
139
139
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-policy.html}
140
140
  */
141
141
  export type Policy = {
@@ -163,7 +163,7 @@ export type SecurityControlCustomParameter = {
163
163
  SecurityControlId?: string | undefined;
164
164
  };
165
165
  /**
166
- * An object that defines which security controls are enabled in an Security Hub configuration policy. The enablement status of a control is aligned across all of the enabled standards in an account.
166
+ * An object that defines which security controls are enabled in an AWS Security Hub CSPM configuration policy. The enablement status of a control is aligned across all of the enabled standards in an account.
167
167
  *
168
168
  * This property is required only if `ServiceEnabled` is set to `true` in your configuration policy.
169
169
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html}
@@ -174,7 +174,7 @@ export type SecurityControlsConfiguration = {
174
174
  *
175
175
  * Provide only one of `EnabledSecurityControlIdentifiers` or `DisabledSecurityControlIdentifiers` .
176
176
  *
177
- * If you provide `DisabledSecurityControlIdentifiers` , Security Hub enables all other controls not in the list, and enables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .
177
+ * If you provide `DisabledSecurityControlIdentifiers` , Security Hub CSPM enables all other controls not in the list, and enables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .
178
178
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html#cfn-securityhub-configurationpolicy-securitycontrolsconfiguration-disabledsecuritycontrolidentifiers}
179
179
  */
180
180
  DisabledSecurityControlIdentifiers?: string[] | undefined;
@@ -183,7 +183,7 @@ export type SecurityControlsConfiguration = {
183
183
  *
184
184
  * Provide only one of `EnabledSecurityControlIdentifiers` or `DisabledSecurityControlIdentifiers` .
185
185
  *
186
- * If you provide `EnabledSecurityControlIdentifiers` , Security Hub disables all other controls not in the list, and disables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .
186
+ * If you provide `EnabledSecurityControlIdentifiers` , Security Hub CSPM disables all other controls not in the list, and disables [AutoEnableControls](https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_UpdateSecurityHubConfiguration.html#securityhub-UpdateSecurityHubConfiguration-request-AutoEnableControls) .
187
187
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securitycontrolsconfiguration.html#cfn-securityhub-configurationpolicy-securitycontrolsconfiguration-enabledsecuritycontrolidentifiers}
188
188
  */
189
189
  EnabledSecurityControlIdentifiers?: string[] | undefined;
@@ -194,7 +194,7 @@ export type SecurityControlsConfiguration = {
194
194
  SecurityControlCustomParameters?: SecurityControlCustomParameter[] | undefined;
195
195
  };
196
196
  /**
197
- * An object that defines how Security Hub is configured. The configuration policy includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls).
197
+ * An object that defines how AWS Security Hub CSPM is configured. The configuration policy includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls).
198
198
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securityhubpolicy.html}
199
199
  */
200
200
  export type SecurityHubPolicy = {
@@ -213,7 +213,7 @@ export type SecurityHubPolicy = {
213
213
  */
214
214
  SecurityControlsConfiguration?: SecurityControlsConfiguration | undefined;
215
215
  /**
216
- * Indicates whether Security Hub is enabled in the policy.
216
+ * Indicates whether Security Hub CSPM is enabled in the policy.
217
217
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-configurationpolicy-securityhubpolicy.html#cfn-securityhub-configurationpolicy-securityhubpolicy-serviceenabled}
218
218
  */
219
219
  ServiceEnabled?: boolean | undefined;
@@ -1,16 +1,16 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * Resource schema for AWS::SecurityHub::ConnectorV2
3
+ * Grants permission to create a connectorV2 based on input parameters.
4
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html}
5
5
  */
6
6
  export type SecurityHubConnectorV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::ConnectorV2", SecurityHubConnectorV2Props, SecurityHubConnectorV2Attribs>;
7
7
  /**
8
- * Resource schema for AWS::SecurityHub::ConnectorV2
8
+ * Grants permission to create a connectorV2 based on input parameters.
9
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html}
10
10
  */
11
11
  export type SecurityHubConnectorV2Props = {
12
12
  /**
13
- * A description of the connector
13
+ * The description of the connectorV2.
14
14
  * @minLength 0
15
15
  * @maxLength 256
16
16
  * @pattern .*\S.*
@@ -18,7 +18,7 @@ export type SecurityHubConnectorV2Props = {
18
18
  */
19
19
  Description?: string | undefined;
20
20
  /**
21
- * The ARN of KMS key used for the connector
21
+ * The Amazon Resource Name (ARN) of KMS key used to encrypt secrets for the connectorV2.
22
22
  * @minLength 20
23
23
  * @maxLength 2048
24
24
  * @pattern .*\S.*
@@ -26,7 +26,7 @@ export type SecurityHubConnectorV2Props = {
26
26
  */
27
27
  KmsKeyArn?: string | undefined;
28
28
  /**
29
- * The name of the connector
29
+ * The unique name of the connectorV2.
30
30
  * @minLength 1
31
31
  * @maxLength 64
32
32
  * @pattern .*\S.*
@@ -34,12 +34,12 @@ export type SecurityHubConnectorV2Props = {
34
34
  */
35
35
  Name: string;
36
36
  /**
37
- * The provider configuration of the connector
37
+ * The third-party provider detail for a service configuration.
38
38
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-provider}
39
39
  */
40
40
  Provider: Provider;
41
41
  /**
42
- * A key-value pair to associate with a resource.
42
+ * The tags to add to the connectorV2 when you create.
43
43
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-tags}
44
44
  */
45
45
  Tags?: Record<string, string> | undefined;
@@ -49,89 +49,84 @@ export type SecurityHubConnectorV2Props = {
49
49
  */
50
50
  export type SecurityHubConnectorV2Attribs = {
51
51
  /**
52
- * The ARN of the connector
52
+ * The ARN of the V2 connector.
53
53
  * @pattern ^arn:aws\S*:securityhub:[a-z0-9-]+:[0-9]{12}:connectorv2/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
54
54
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-connectorarn}
55
55
  */
56
56
  ConnectorArn: string;
57
57
  /**
58
- * The ID of the connector
58
+ * The unique identifier of the V2 connector.
59
59
  * @pattern ^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$
60
60
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-connectorid}
61
61
  */
62
62
  ConnectorId: string;
63
63
  /**
64
- * The status of the connector
64
+ * The status of the V2 connector.
65
65
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-connectorstatus}
66
66
  */
67
67
  ConnectorStatus: "CONNECTED" | "FAILED_TO_CONNECT" | "PENDING_AUTHORIZATION" | "PENDING_CONFIGURATION";
68
68
  /**
69
- * The timestamp formatted in ISO8601
69
+ * The timestamp when the V2 connector was created.
70
70
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-createdat}
71
71
  */
72
72
  CreatedAt: string;
73
73
  /**
74
- * The timestamp formatted in ISO8601
74
+ * The most recent timestamp when the V2 connector was checked on health status.
75
75
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-lastcheckedat}
76
76
  */
77
77
  LastCheckedAt: string;
78
78
  /**
79
- * The timestamp formatted in ISO8601
79
+ * The most recent timestamp when the V2 connector was updated.
80
80
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-lastupdatedat}
81
81
  */
82
82
  LastUpdatedAt: string;
83
83
  /**
84
- * The message of the connector status change
84
+ * The message of the V2 connector when connector status is FAILED_TO_CONNECT.
85
85
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-connectorv2.html#cfn-securityhub-connectorv2-message}
86
86
  */
87
87
  Message: string;
88
- /**
89
- * The auth status of the connector
90
- */
91
- "Provider.JiraCloud.AuthStatus": AuthStatus;
92
- /**
93
- * The authUrl of the JiraCloud connector
94
- * @pattern .*\S.*
95
- */
96
- "Provider.JiraCloud.AuthUrl": string;
97
- "Provider.JiraCloud.CloudId": string;
98
- "Provider.JiraCloud.Domain": string;
99
- /**
100
- * The auth status of the connector
101
- */
102
- "Provider.ServiceNow.AuthStatus": AuthStatus;
103
88
  };
104
89
  /**
105
- * The auth status of the connector
106
- * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-authstatus.html}
90
+ * The initial configuration settings required to establish an integration between Security Hub and Jira Cloud
91
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-jiracloudproviderconfiguration.html}
107
92
  */
108
- export type AuthStatus = "ACTIVE" | "FAILED";
93
+ export type JiraCloudProviderConfiguration = {
94
+ /**
95
+ * The project key for a Jira Cloud instance
96
+ * @minLength 2
97
+ * @maxLength 10
98
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-jiracloudproviderconfiguration.html#cfn-securityhub-connectorv2-jiracloudproviderconfiguration-projectkey}
99
+ */
100
+ ProjectKey: string;
101
+ };
109
102
  /**
110
- * The provider configuration of the connector
103
+ * The third-party provider detail for a service configuration.
111
104
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-provider.html}
112
105
  */
113
106
  export type Provider = {
114
- JiraCloud: {
115
- /**
116
- * @minLength 2
117
- * @maxLength 10
118
- */
119
- ProjectKey: string;
120
- };
107
+ JiraCloud: JiraCloudProviderConfiguration;
121
108
  } | {
122
- ServiceNow: {
123
- /**
124
- * @minLength 1
125
- * @maxLength 128
126
- */
127
- InstanceName: string;
128
- /**
129
- * The ARN of secrets manager containing ClientId and ClientSecret
130
- * @minLength 20
131
- * @maxLength 2048
132
- * @pattern .*\S.*
133
- */
134
- SecretArn: string;
135
- };
109
+ ServiceNow: ServiceNowProviderConfiguration;
110
+ };
111
+ /**
112
+ * The initial configuration settings required to establish an integration between Security Hub and ServiceNow ITSM
113
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-servicenowproviderconfiguration.html}
114
+ */
115
+ export type ServiceNowProviderConfiguration = {
116
+ /**
117
+ * The instance name of ServiceNow ITSM
118
+ * @minLength 1
119
+ * @maxLength 128
120
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-servicenowproviderconfiguration.html#cfn-securityhub-connectorv2-servicenowproviderconfiguration-instancename}
121
+ */
122
+ InstanceName: string;
123
+ /**
124
+ * The Amazon Resource Name (ARN) of the AWS Secrets Manager secret that contains the ServiceNow credentials
125
+ * @minLength 20
126
+ * @maxLength 2048
127
+ * @pattern .*\S.*
128
+ * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-securityhub-connectorv2-servicenowproviderconfiguration.html#cfn-securityhub-connectorv2-servicenowproviderconfiguration-secretarn}
129
+ */
130
+ SecretArn: string;
136
131
  };
137
132
  //# sourceMappingURL=aws-securityhub-connectorv2.d.ts.map
@@ -1,6 +1,6 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated Security Hub administrator account for an organization. You must enable the integration between Security Hub and AWS Organizations before you can designate a delegated Security Hub administrator. Only the management account for an organization can designate the delegated Security Hub administrator account. For more information, see [Designating the delegated Security Hub administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *Security Hub User Guide* .
3
+ * The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated AWS Security Hub CSPM administrator account for an organization. You must enable the integration between Security Hub CSPM and AWS Organizations before you can designate a delegated Security Hub CSPM administrator. Only the management account for an organization can designate the delegated Security Hub CSPM administrator account. For more information, see [Designating the delegated Security Hub CSPM administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *AWS Security Hub CSPM User Guide* .
4
4
  *
5
5
  * To change the delegated administrator account, remove the current delegated administrator account, and then designate the new account.
6
6
  *
@@ -11,7 +11,7 @@ import type { ResourceDefinitionWithAttributes } from "../main.ts";
11
11
  */
12
12
  export type SecurityHubDelegatedAdmin = ResourceDefinitionWithAttributes<"AWS::SecurityHub::DelegatedAdmin", SecurityHubDelegatedAdminProps, SecurityHubDelegatedAdminAttribs>;
13
13
  /**
14
- * The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated Security Hub administrator account for an organization. You must enable the integration between Security Hub and AWS Organizations before you can designate a delegated Security Hub administrator. Only the management account for an organization can designate the delegated Security Hub administrator account. For more information, see [Designating the delegated Security Hub administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *Security Hub User Guide* .
14
+ * The `AWS::SecurityHub::DelegatedAdmin` resource designates the delegated AWS Security Hub CSPM administrator account for an organization. You must enable the integration between Security Hub CSPM and AWS Organizations before you can designate a delegated Security Hub CSPM administrator. Only the management account for an organization can designate the delegated Security Hub CSPM administrator account. For more information, see [Designating the delegated Security Hub CSPM administrator](https://docs.aws.amazon.com/securityhub/latest/userguide/designate-orgs-admin-account.html#designate-admin-instructions) in the *AWS Security Hub CSPM User Guide* .
15
15
  *
16
16
  * To change the delegated administrator account, remove the current delegated administrator account, and then designate the new account.
17
17
  *
@@ -22,7 +22,7 @@ export type SecurityHubDelegatedAdmin = ResourceDefinitionWithAttributes<"AWS::S
22
22
  */
23
23
  export type SecurityHubDelegatedAdminProps = {
24
24
  /**
25
- * The AWS account identifier of the account to designate as the Security Hub administrator account.
25
+ * The AWS account identifier of the account to designate as the Security Hub CSPM administrator account.
26
26
  * @pattern ^[0-9]{12}$
27
27
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-adminaccountid}
28
28
  */
@@ -33,13 +33,13 @@ export type SecurityHubDelegatedAdminProps = {
33
33
  */
34
34
  export type SecurityHubDelegatedAdminAttribs = {
35
35
  /**
36
- * The ID of the delegated Security Hub administrator account, in the format of `accountID/Region` .
36
+ * The ID of the delegated Security Hub CSPM administrator account, in the format of `accountID/Region` .
37
37
  * @pattern ^[0-9]{12}/[a-zA-Z0-9-]{1,32}$
38
38
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-delegatedadminidentifier}
39
39
  */
40
40
  DelegatedAdminIdentifier: string;
41
41
  /**
42
- * Whether the delegated Security Hub administrator is set for the organization.
42
+ * Whether the delegated Security Hub CSPM administrator is set for the organization.
43
43
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-delegatedadmin.html#cfn-securityhub-delegatedadmin-status}
44
44
  */
45
45
  Status: "ENABLED" | "DISABLE_IN_PROGRESS";
@@ -1,19 +1,19 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *Security Hub User Guide*
3
+ * The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *AWS Security Hub CSPM User Guide*
4
4
  *
5
5
  * This resource must be created in the Region that you want to designate as your aggregation Region.
6
6
  *
7
- * Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub .
7
+ * Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub CSPM .
8
8
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-findingaggregator.html}
9
9
  */
10
10
  export type SecurityHubFindingAggregator = ResourceDefinitionWithAttributes<"AWS::SecurityHub::FindingAggregator", SecurityHubFindingAggregatorProps, SecurityHubFindingAggregatorAttribs>;
11
11
  /**
12
- * The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *Security Hub User Guide*
12
+ * The `AWS::SecurityHub::FindingAggregator` resource enables cross-Region aggregation. When cross-Region aggregation is enabled, you can aggregate findings, finding updates, insights, control compliance statuses, and security scores from one or more linked Regions to a single aggregation Region. You can then view and manage all of this data from the aggregation Region. For more details about cross-Region aggregation, see [Cross-Region aggregation](https://docs.aws.amazon.com/securityhub/latest/userguide/finding-aggregation.html) in the *AWS Security Hub CSPM User Guide*
13
13
  *
14
14
  * This resource must be created in the Region that you want to designate as your aggregation Region.
15
15
  *
16
- * Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub .
16
+ * Cross-Region aggregation is also a prerequisite for using [central configuration](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html) in Security Hub CSPM .
17
17
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-findingaggregator.html}
18
18
  */
19
19
  export type SecurityHubFindingAggregatorProps = {
@@ -1,23 +1,23 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * The `AWS::SecurityHub::Hub` resource specifies the enablement of the Security Hub service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub .
3
+ * The `AWS::SecurityHub::Hub` resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub CSPM .
4
4
  *
5
- * When you use this resource to enable Security Hub , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
5
+ * When you use this resource to enable Security Hub CSPM , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
6
6
  *
7
- * When you use this resource to enable Security Hub , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
7
+ * When you use this resource to enable Security Hub CSPM , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
8
8
  *
9
- * You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub resources for an account.
9
+ * You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub CSPM resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub CSPM resources for an account.
10
10
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html}
11
11
  */
12
12
  export type SecurityHubHub = ResourceDefinitionWithAttributes<"AWS::SecurityHub::Hub", SecurityHubHubProps, SecurityHubHubAttribs>;
13
13
  /**
14
- * The `AWS::SecurityHub::Hub` resource specifies the enablement of the Security Hub service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub .
14
+ * The `AWS::SecurityHub::Hub` resource specifies the enablement of the AWS Security Hub CSPM service in your AWS account . The service is enabled in the current AWS Region or the specified Region. You create a separate `Hub` resource in each Region in which you want to enable Security Hub CSPM .
15
15
  *
16
- * When you use this resource to enable Security Hub , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
16
+ * When you use this resource to enable Security Hub CSPM , default security standards are enabled. To disable default standards, set the `EnableDefaultStandards` property to `false` . You can use the [`AWS::SecurityHub::Standard`](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-standard.html) resource to enable additional standards.
17
17
  *
18
- * When you use this resource to enable Security Hub , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
18
+ * When you use this resource to enable Security Hub CSPM , new controls are automatically enabled for your enabled standards. To disable automatic enablement of new controls, set the `AutoEnableControls` property to `false` .
19
19
  *
20
- * You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub resources for an account.
20
+ * You must create an `AWS::SecurityHub::Hub` resource for an account before you can create other types of Security Hub CSPM resources for the account through CloudFormation . Use a [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) , such as `"DependsOn": "Hub"` , to ensure that you've created an `AWS::SecurityHub::Hub` resource before creating other Security Hub CSPM resources for an account.
21
21
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html}
22
22
  */
23
23
  export type SecurityHubHubProps = {
@@ -26,22 +26,22 @@ export type SecurityHubHubProps = {
26
26
  *
27
27
  * By default, this is set to `true` , and new controls are enabled automatically. To not automatically enable new controls, set this to `false` .
28
28
  *
29
- * When you automatically enable new controls, you can interact with the controls in the console and programmatically immediately after release. However, automatically enabled controls have a temporary default status of `DISABLED` . It can take up to several days for Security Hub to process the control release and designate the control as `ENABLED` in your account. During the processing period, you can manually enable or disable a control, and Security Hub will maintain that designation regardless of whether you have `AutoEnableControls` set to `true` .
29
+ * When you automatically enable new controls, you can interact with the controls in the console and programmatically immediately after release. However, automatically enabled controls have a temporary default status of `DISABLED` . It can take up to several days for Security Hub CSPM to process the control release and designate the control as `ENABLED` in your account. During the processing period, you can manually enable or disable a control, and Security Hub CSPM will maintain that designation regardless of whether you have `AutoEnableControls` set to `true` .
30
30
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-autoenablecontrols}
31
31
  */
32
32
  AutoEnableControls?: boolean | undefined;
33
33
  /**
34
- * Specifies whether an account has consolidated control findings turned on or off. If the value for this field is set to `SECURITY_CONTROL` , Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards.
34
+ * Specifies whether an account has consolidated control findings turned on or off. If the value for this field is set to `SECURITY_CONTROL` , Security Hub CSPM generates a single finding for a control check even when the check applies to multiple enabled standards.
35
35
  *
36
- * If the value for this field is set to `STANDARD_CONTROL` , Security Hub generates separate findings for a control check when the check applies to multiple enabled standards.
36
+ * If the value for this field is set to `STANDARD_CONTROL` , Security Hub CSPM generates separate findings for a control check when the check applies to multiple enabled standards.
37
37
  *
38
- * The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is `SECURITY_CONTROL` if you enabled Security Hub on or after February 23, 2023.
38
+ * The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is `SECURITY_CONTROL` if you enabled Security Hub CSPM on or after February 23, 2023.
39
39
  * @pattern ^(SECURITY_CONTROL|STANDARD_CONTROL)$
40
40
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-controlfindinggenerator}
41
41
  */
42
42
  ControlFindingGenerator?: string | undefined;
43
43
  /**
44
- * Whether to enable the security standards that Security Hub has designated as automatically enabled. If you don't provide a value for `EnableDefaultStandards` , it is set to `true` , and the designated standards are automatically enabled in each AWS Region where you enable Security Hub . If you don't want to enable the designated standards, set `EnableDefaultStandards` to `false` .
44
+ * Whether to enable the security standards that Security Hub CSPM has designated as automatically enabled. If you don't provide a value for `EnableDefaultStandards` , it is set to `true` , and the designated standards are automatically enabled in each AWS Region where you enable Security Hub CSPM . If you don't want to enable the designated standards, set `EnableDefaultStandards` to `false` .
45
45
  *
46
46
  * Currently, the automatically enabled standards are the Center for Internet Security (CIS) AWS Foundations Benchmark v1.2.0 and AWS Foundational Security Best Practices (FSBP).
47
47
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-enabledefaultstandards}
@@ -66,7 +66,7 @@ export type SecurityHubHubAttribs = {
66
66
  */
67
67
  ARN: string;
68
68
  /**
69
- * The date and time when Security Hub was enabled in your account.
69
+ * The date and time when Security Hub CSPM was enabled in your account.
70
70
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hub.html#cfn-securityhub-hub-subscribedat}
71
71
  */
72
72
  SubscribedAt: string;
@@ -1,16 +1,16 @@
1
1
  import type { ResourceDefinitionWithAttributes } from "../main.ts";
2
2
  /**
3
- * Returns details about the service resource in your account. This API is in public preview and subject to change.
3
+ * Returns details about the service resource in your account.
4
4
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
5
5
  */
6
6
  export type SecurityHubHubV2 = ResourceDefinitionWithAttributes<"AWS::SecurityHub::HubV2", SecurityHubHubV2Props, SecurityHubHubV2Attribs>;
7
7
  /**
8
- * Returns details about the service resource in your account. This API is in public preview and subject to change.
8
+ * Returns details about the service resource in your account.
9
9
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html}
10
10
  */
11
11
  export type SecurityHubHubV2Props = {
12
12
  /**
13
- * The tags to add to the hub V2 resource when you enable Security Hub.
13
+ * The tags to add to the hub V2 resource when you enable Security Hub CSPM.
14
14
  * @see {@link https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securityhub-hubv2.html#cfn-securityhub-hubv2-tags}
15
15
  */
16
16
  Tags?: Record<string, string> | undefined;