aws-sdk 2.1343.0 → 2.1344.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -2088,6 +2088,10 @@ one destination per packager.
2088
2088
  * Settings that describe an input device that is type UHD.
2089
2089
  */
2090
2090
  UhdDeviceSettings?: InputDeviceUhdSettings;
2091
+ /**
2092
+ * A collection of key-value pairs.
2093
+ */
2094
+ Tags?: Tags;
2091
2095
  }
2092
2096
  export interface DescribeInputDeviceThumbnailRequest {
2093
2097
  /**
@@ -3677,7 +3681,11 @@ SINGLE_FILE: Applies only if Mode field is VOD. Emit the program as a single .ts
3677
3681
  /**
3678
3682
  * ID3 tag to insert into each segment. Supports special keyword identifiers to substitute in segment-related values.\nSupported keyword identifiers: https://docs.aws.amazon.com/medialive/latest/ug/variable-data-identifiers.html
3679
3683
  */
3680
- Tag: __string;
3684
+ Tag?: __string;
3685
+ /**
3686
+ * Base64 string formatted according to the ID3 specification: http://id3.org/id3v2.4.0-structure
3687
+ */
3688
+ Id3?: __string;
3681
3689
  }
3682
3690
  export type HlsId3SegmentTaggingState = "DISABLED"|"ENABLED"|string;
3683
3691
  export type HlsIncompleteSegmentBehavior = "AUTO"|"SUPPRESS"|string;
@@ -4095,6 +4103,10 @@ to.
4095
4103
  * Settings that describe an input device that is type UHD.
4096
4104
  */
4097
4105
  UhdDeviceSettings?: InputDeviceUhdSettings;
4106
+ /**
4107
+ * A collection of key-value pairs.
4108
+ */
4109
+ Tags?: Tags;
4098
4110
  }
4099
4111
  export type InputDeviceTransferType = "OUTGOING"|"INCOMING"|string;
4100
4112
  export type InputDeviceType = "HD"|"UHD"|string;
@@ -6823,6 +6835,10 @@ one destination per packager.
6823
6835
  * Settings that describe an input device that is type UHD.
6824
6836
  */
6825
6837
  UhdDeviceSettings?: InputDeviceUhdSettings;
6838
+ /**
6839
+ * A collection of key-value pairs.
6840
+ */
6841
+ Tags?: Tags;
6826
6842
  }
6827
6843
  export interface UpdateInputRequest {
6828
6844
  /**
@@ -85,19 +85,19 @@ declare class SageMaker extends Service {
85
85
  */
86
86
  createArtifact(callback?: (err: AWSError, data: SageMaker.Types.CreateArtifactResponse) => void): Request<SageMaker.Types.CreateArtifactResponse, AWSError>;
87
87
  /**
88
- * Creates an Autopilot job. Find the best-performing model after you run an Autopilot job by calling . For information about how to use Autopilot, see Automate Model Development with Amazon SageMaker Autopilot.
88
+ * Creates an Autopilot job. Find the best-performing model after you run an Autopilot job by calling DescribeAutoMLJob . For information about how to use Autopilot, see Automate Model Development with Amazon SageMaker Autopilot.
89
89
  */
90
90
  createAutoMLJob(params: SageMaker.Types.CreateAutoMLJobRequest, callback?: (err: AWSError, data: SageMaker.Types.CreateAutoMLJobResponse) => void): Request<SageMaker.Types.CreateAutoMLJobResponse, AWSError>;
91
91
  /**
92
- * Creates an Autopilot job. Find the best-performing model after you run an Autopilot job by calling . For information about how to use Autopilot, see Automate Model Development with Amazon SageMaker Autopilot.
92
+ * Creates an Autopilot job. Find the best-performing model after you run an Autopilot job by calling DescribeAutoMLJob . For information about how to use Autopilot, see Automate Model Development with Amazon SageMaker Autopilot.
93
93
  */
94
94
  createAutoMLJob(callback?: (err: AWSError, data: SageMaker.Types.CreateAutoMLJobResponse) => void): Request<SageMaker.Types.CreateAutoMLJobResponse, AWSError>;
95
95
  /**
96
- * Creates an Amazon SageMaker AutoML job that uses non-tabular data such as images or text for Computer Vision or Natural Language Processing problems. Find the resulting model after you run an AutoML job V2 by calling . To create an AutoMLJob using tabular data, see . This API action is callable through SageMaker Canvas only. Calling it directly from the CLI or an SDK results in an error.
96
+ * Creates an Amazon SageMaker AutoML job that uses non-tabular data such as images or text for Computer Vision or Natural Language Processing problems. Find the resulting model after you run an AutoML job V2 by calling DescribeAutoMLJobV2 . To create an AutoMLJob using tabular data, see CreateAutoMLJob . This API action is callable through SageMaker Canvas only. Calling it directly from the CLI or an SDK results in an error.
97
97
  */
98
98
  createAutoMLJobV2(params: SageMaker.Types.CreateAutoMLJobV2Request, callback?: (err: AWSError, data: SageMaker.Types.CreateAutoMLJobV2Response) => void): Request<SageMaker.Types.CreateAutoMLJobV2Response, AWSError>;
99
99
  /**
100
- * Creates an Amazon SageMaker AutoML job that uses non-tabular data such as images or text for Computer Vision or Natural Language Processing problems. Find the resulting model after you run an AutoML job V2 by calling . To create an AutoMLJob using tabular data, see . This API action is callable through SageMaker Canvas only. Calling it directly from the CLI or an SDK results in an error.
100
+ * Creates an Amazon SageMaker AutoML job that uses non-tabular data such as images or text for Computer Vision or Natural Language Processing problems. Find the resulting model after you run an AutoML job V2 by calling DescribeAutoMLJobV2 . To create an AutoMLJob using tabular data, see CreateAutoMLJob . This API action is callable through SageMaker Canvas only. Calling it directly from the CLI or an SDK results in an error.
101
101
  */
102
102
  createAutoMLJobV2(callback?: (err: AWSError, data: SageMaker.Types.CreateAutoMLJobV2Response) => void): Request<SageMaker.Types.CreateAutoMLJobV2Response, AWSError>;
103
103
  /**
@@ -3108,7 +3108,7 @@ declare namespace SageMaker {
3108
3108
  */
3109
3109
  FeatureSpecificationS3Uri?: S3Uri;
3110
3110
  /**
3111
- * Stores the configuration information for the selection of algorithms used to train the model candidates. The list of available algorithms to choose from depends on the training mode set in AutoMLJobConfig.Mode . AlgorithmsConfig should not be set in AUTO training mode. When AlgorithmsConfig is provided, one AutoMLAlgorithms attribute must be set and one only. If the list of algorithms provided as values for AutoMLAlgorithms is empty, AutoMLCandidateGenerationConfig uses the full set of algorithms for the given training mode. When AlgorithmsConfig is not provided, AutoMLCandidateGenerationConfig uses the full set of algorithms for the given training mode. For the list of all algorithms per training mode, see . For more information on each algorithm, see the Algorithm support section in Autopilot developer guide.
3111
+ * Stores the configuration information for the selection of algorithms used to train the model candidates. The list of available algorithms to choose from depends on the training mode set in AutoMLJobConfig.Mode . AlgorithmsConfig should not be set in AUTO training mode. When AlgorithmsConfig is provided, one AutoMLAlgorithms attribute must be set and one only. If the list of algorithms provided as values for AutoMLAlgorithms is empty, AutoMLCandidateGenerationConfig uses the full set of algorithms for the given training mode. When AlgorithmsConfig is not provided, AutoMLCandidateGenerationConfig uses the full set of algorithms for the given training mode. For the list of all algorithms per training mode, see AutoMLAlgorithmConfig . For more information on each algorithm, see the Algorithm support section in Autopilot developer guide.
3112
3112
  */
3113
3113
  AlgorithmsConfig?: AutoMLAlgorithmsConfig;
3114
3114
  }
@@ -3152,15 +3152,15 @@ declare namespace SageMaker {
3152
3152
  export type AutoMLChannelType = "training"|"validation"|string;
3153
3153
  export interface AutoMLContainerDefinition {
3154
3154
  /**
3155
- * The Amazon Elastic Container Registry (Amazon ECR) path of the container. For more information, see .
3155
+ * The Amazon Elastic Container Registry (Amazon ECR) path of the container. For more information, see ContainerDefinition .
3156
3156
  */
3157
3157
  Image: ContainerImage;
3158
3158
  /**
3159
- * The location of the model artifacts. For more information, see .
3159
+ * The location of the model artifacts. For more information, see ContainerDefinition .
3160
3160
  */
3161
3161
  ModelDataUrl: Url;
3162
3162
  /**
3163
- * The environment variables to set in the container. For more information, see .
3163
+ * The environment variables to set in the container. For more information, see ContainerDefinition .
3164
3164
  */
3165
3165
  Environment?: EnvironmentMap;
3166
3166
  }
@@ -3215,7 +3215,7 @@ declare namespace SageMaker {
3215
3215
  */
3216
3216
  MaxCandidates?: MaxCandidates;
3217
3217
  /**
3218
- * The maximum time, in seconds, that each training job executed inside hyperparameter tuning is allowed to run as part of a hyperparameter tuning job. For more information, see the used by the action. For V2 jobs (jobs created by calling CreateAutoMLJobV2), this field controls the runtime of the job candidate.
3218
+ * The maximum time, in seconds, that each training job executed inside hyperparameter tuning is allowed to run as part of a hyperparameter tuning job. For more information, see the StoppingCondition used by the CreateHyperParameterTuningJob action. For V2 jobs (jobs created by calling CreateAutoMLJobV2), this field controls the runtime of the job candidate.
3219
3219
  */
3220
3220
  MaxRuntimePerTrainingJobInSeconds?: MaxRuntimePerTrainingJobInSeconds;
3221
3221
  /**
@@ -4309,7 +4309,7 @@ declare namespace SageMaker {
4309
4309
  */
4310
4310
  AutoMLJobName: AutoMLJobName;
4311
4311
  /**
4312
- * An array of channel objects that describes the input data and its location. Each channel is a named input source. Similar to InputDataConfig supported by . Format(s) supported: CSV, Parquet. A minimum of 500 rows is required for the training dataset. There is not a minimum number of rows required for the validation dataset.
4312
+ * An array of channel objects that describes the input data and its location. Each channel is a named input source. Similar to InputDataConfig supported by HyperParameterTrainingJobDefinition . Format(s) supported: CSV, Parquet. A minimum of 500 rows is required for the training dataset. There is not a minimum number of rows required for the validation dataset.
4313
4313
  */
4314
4314
  InputDataConfig: AutoMLInputDataConfig;
4315
4315
  /**
@@ -4317,11 +4317,11 @@ declare namespace SageMaker {
4317
4317
  */
4318
4318
  OutputDataConfig: AutoMLOutputDataConfig;
4319
4319
  /**
4320
- * Defines the type of supervised learning problem available for the candidates. For more information, see Amazon SageMaker Autopilot problem types and algorithm support.
4320
+ * Defines the type of supervised learning problem available for the candidates. For more information, see Amazon SageMaker Autopilot problem types.
4321
4321
  */
4322
4322
  ProblemType?: ProblemType;
4323
4323
  /**
4324
- * Defines the objective metric used to measure the predictive quality of an AutoML job. You provide an AutoMLJobObjective$MetricName and Autopilot infers whether to minimize or maximize it. For , only Accuracy is supported.
4324
+ * Defines the objective metric used to measure the predictive quality of an AutoML job. You provide an AutoMLJobObjective$MetricName and Autopilot infers whether to minimize or maximize it. For CreateAutoMLJobV2 , only Accuracy is supported.
4325
4325
  */
4326
4326
  AutoMLJobObjective?: AutoMLJobObjective;
4327
4327
  /**
@@ -4357,7 +4357,7 @@ declare namespace SageMaker {
4357
4357
  */
4358
4358
  AutoMLJobName: AutoMLJobName;
4359
4359
  /**
4360
- * An array of channel objects describing the input data and their location. Each channel is a named input source. Similar to InputDataConfig supported by CreateAutoMLJob. The supported formats depend on the problem type: ImageClassification: S3Prefix, ManifestFile, AugmentedManifestFile TextClassification: S3Prefix
4360
+ * An array of channel objects describing the input data and their location. Each channel is a named input source. Similar to InputDataConfig supported by CreateAutoMLJob. The supported formats depend on the problem type: ImageClassification: S3Prefix, ManifestFile, AugmentedManifestFile TextClassification: S3Prefix
4361
4361
  */
4362
4362
  AutoMLJobInputDataConfig: AutoMLJobInputDataConfig;
4363
4363
  /**
@@ -4381,7 +4381,7 @@ declare namespace SageMaker {
4381
4381
  */
4382
4382
  SecurityConfig?: AutoMLSecurityConfig;
4383
4383
  /**
4384
- * Specifies a metric to minimize or maximize as the objective of a job. For , only Accuracy is supported.
4384
+ * Specifies a metric to minimize or maximize as the objective of a job. For CreateAutoMLJobV2 , only Accuracy is supported.
4385
4385
  */
4386
4386
  AutoMLJobObjective?: AutoMLJobObjective;
4387
4387
  /**
@@ -11213,7 +11213,7 @@ declare namespace SageMaker {
11213
11213
  */
11214
11214
  Type?: AutoMLJobObjectiveType;
11215
11215
  /**
11216
- * The name of the metric with the best result. For a description of the possible objective metrics, see AutoMLJobObjective$MetricName.
11216
+ * The name of the metric with the best result. For a description of the possible objective metrics, see AutoMLJobObjective$MetricName .
11217
11217
  */
11218
11218
  MetricName: AutoMLMetricEnum;
11219
11219
  /**
@@ -12040,7 +12040,7 @@ declare namespace SageMaker {
12040
12040
  */
12041
12041
  MinResource?: HyperbandStrategyMinResource;
12042
12042
  /**
12043
- * The maximum number of resources (such as epochs) that can be used by a training job launched by a hyperparameter tuning job. Once a job reaches the MaxResource value, it is stopped. If a value for MaxResource is not provided, and Hyperband is selected as the hyperparameter tuning strategy, HyperbandTrainingJ attempts to infer MaxResource from the following keys (if present) in StaticsHyperParameters: epochs numepochs n-epochs n_epochs num_epochs If HyperbandStrategyConfig is unable to infer a value for MaxResource, it generates a validation error. The maximum value is 20,000 epochs. All metrics that correspond to an objective metric are used to derive early stopping decisions. For distributive training jobs, ensure that duplicate metrics are not printed in the logs across the individual nodes in a training job. If multiple nodes are publishing duplicate or incorrect metrics, training jobs may make an incorrect stopping decision and stop the job prematurely.
12043
+ * The maximum number of resources (such as epochs) that can be used by a training job launched by a hyperparameter tuning job. Once a job reaches the MaxResource value, it is stopped. If a value for MaxResource is not provided, and Hyperband is selected as the hyperparameter tuning strategy, HyperbandTrainingJ attempts to infer MaxResource from the following keys (if present) in StaticsHyperParameters : epochs numepochs n-epochs n_epochs num_epochs If HyperbandStrategyConfig is unable to infer a value for MaxResource, it generates a validation error. The maximum value is 20,000 epochs. All metrics that correspond to an objective metric are used to derive early stopping decisions. For distributive training jobs, ensure that duplicate metrics are not printed in the logs across the individual nodes in a training job. If multiple nodes are publishing duplicate or incorrect metrics, training jobs may make an incorrect stopping decision and stop the job prematurely.
12044
12044
  */
12045
12045
  MaxResource?: HyperbandStrategyMaxResource;
12046
12046
  }
@@ -16006,7 +16006,7 @@ declare namespace SageMaker {
16006
16006
  */
16007
16007
  Name: MetricName;
16008
16008
  /**
16009
- * A regular expression that searches the output of a training job and gets the value of the metric. For more information about using regular expressions to define metrics, see Defining Objective Metrics.
16009
+ * A regular expression that searches the output of a training job and gets the value of the metric. For more information about using regular expressions to define metrics, see Defining metrics and environment variables.
16010
16010
  */
16011
16011
  Regex: MetricRegex;
16012
16012
  }
@@ -116,11 +116,11 @@ declare class SecurityHub extends Service {
116
116
  */
117
117
  createMembers(callback?: (err: AWSError, data: SecurityHub.Types.CreateMembersResponse) => void): Request<SecurityHub.Types.CreateMembersResponse, AWSError>;
118
118
  /**
119
- * Declines invitations to become a member account. This operation is only used by accounts that are not part of an organization. Organization accounts do not receive invitations.
119
+ * Declines invitations to become a member account. A prospective member account uses this operation to decline an invitation to become a member. This operation is only called by member accounts that aren't part of an organization. Organization accounts don't receive invitations.
120
120
  */
121
121
  declineInvitations(params: SecurityHub.Types.DeclineInvitationsRequest, callback?: (err: AWSError, data: SecurityHub.Types.DeclineInvitationsResponse) => void): Request<SecurityHub.Types.DeclineInvitationsResponse, AWSError>;
122
122
  /**
123
- * Declines invitations to become a member account. This operation is only used by accounts that are not part of an organization. Organization accounts do not receive invitations.
123
+ * Declines invitations to become a member account. A prospective member account uses this operation to decline an invitation to become a member. This operation is only called by member accounts that aren't part of an organization. Organization accounts don't receive invitations.
124
124
  */
125
125
  declineInvitations(callback?: (err: AWSError, data: SecurityHub.Types.DeclineInvitationsResponse) => void): Request<SecurityHub.Types.DeclineInvitationsResponse, AWSError>;
126
126
  /**
@@ -148,11 +148,11 @@ declare class SecurityHub extends Service {
148
148
  */
149
149
  deleteInsight(callback?: (err: AWSError, data: SecurityHub.Types.DeleteInsightResponse) => void): Request<SecurityHub.Types.DeleteInsightResponse, AWSError>;
150
150
  /**
151
- * Deletes invitations received by the Amazon Web Services account to become a member account. This operation is only used by accounts that are not part of an organization. Organization accounts do not receive invitations.
151
+ * Deletes invitations received by the Amazon Web Services account to become a member account. A Security Hub administrator account can use this operation to delete invitations sent to one or more member accounts. This operation is only used to delete invitations that are sent to member accounts that aren't part of an organization. Organization accounts don't receive invitations.
152
152
  */
153
153
  deleteInvitations(params: SecurityHub.Types.DeleteInvitationsRequest, callback?: (err: AWSError, data: SecurityHub.Types.DeleteInvitationsResponse) => void): Request<SecurityHub.Types.DeleteInvitationsResponse, AWSError>;
154
154
  /**
155
- * Deletes invitations received by the Amazon Web Services account to become a member account. This operation is only used by accounts that are not part of an organization. Organization accounts do not receive invitations.
155
+ * Deletes invitations received by the Amazon Web Services account to become a member account. A Security Hub administrator account can use this operation to delete invitations sent to one or more member accounts. This operation is only used to delete invitations that are sent to member accounts that aren't part of an organization. Organization accounts don't receive invitations.
156
156
  */
157
157
  deleteInvitations(callback?: (err: AWSError, data: SecurityHub.Types.DeleteInvitationsResponse) => void): Request<SecurityHub.Types.DeleteInvitationsResponse, AWSError>;
158
158
  /**
@@ -655,6 +655,43 @@ declare namespace SecurityHub {
655
655
  StandardsId?: NonEmptyString;
656
656
  }
657
657
  export type AssociatedStandardsList = AssociatedStandard[];
658
+ export interface AssociationSetDetails {
659
+ /**
660
+ * The state of the association between a route table and a subnet or gateway.
661
+ */
662
+ AssociationState?: AssociationStateDetails;
663
+ /**
664
+ * The ID of the internet gateway or virtual private gateway.
665
+ */
666
+ GatewayId?: NonEmptyString;
667
+ /**
668
+ * Indicates whether this is the main route table.
669
+ */
670
+ Main?: Boolean;
671
+ /**
672
+ * The ID of the association.
673
+ */
674
+ RouteTableAssociationId?: NonEmptyString;
675
+ /**
676
+ * The ID of the route table.
677
+ */
678
+ RouteTableId?: NonEmptyString;
679
+ /**
680
+ * The ID of the subnet. A subnet ID is not returned for an implicit association.
681
+ */
682
+ SubnetId?: NonEmptyString;
683
+ }
684
+ export type AssociationSetList = AssociationSetDetails[];
685
+ export interface AssociationStateDetails {
686
+ /**
687
+ * The state of the association.
688
+ */
689
+ State?: NonEmptyString;
690
+ /**
691
+ * The status message, if applicable.
692
+ */
693
+ StatusMessage?: NonEmptyString;
694
+ }
658
695
  export type AssociationStatus = "ENABLED"|"DISABLED"|string;
659
696
  export type AutoEnableStandards = "NONE"|"DEFAULT"|string;
660
697
  export interface AvailabilityZone {
@@ -2785,6 +2822,10 @@ declare namespace SecurityHub {
2785
2822
  * Details about the metadata options for the Amazon EC2 instance.
2786
2823
  */
2787
2824
  MetadataOptions?: AwsEc2InstanceMetadataOptions;
2825
+ /**
2826
+ * Describes the type of monitoring that’s turned on for an instance.
2827
+ */
2828
+ Monitoring?: AwsEc2InstanceMonitoringDetails;
2788
2829
  }
2789
2830
  export interface AwsEc2InstanceMetadataOptions {
2790
2831
  /**
@@ -2808,6 +2849,12 @@ declare namespace SecurityHub {
2808
2849
  */
2809
2850
  InstanceMetadataTags?: NonEmptyString;
2810
2851
  }
2852
+ export interface AwsEc2InstanceMonitoringDetails {
2853
+ /**
2854
+ * Indicates whether detailed monitoring is turned on. Otherwise, basic monitoring is turned on.
2855
+ */
2856
+ State?: NonEmptyString;
2857
+ }
2811
2858
  export interface AwsEc2InstanceNetworkInterfacesDetails {
2812
2859
  /**
2813
2860
  * The identifier of the network interface. The details are in a corresponding AwsEc2NetworkInterfacesDetails object.
@@ -3655,6 +3702,32 @@ declare namespace SecurityHub {
3655
3702
  GroupId?: NonEmptyString;
3656
3703
  }
3657
3704
  export type AwsEc2NetworkInterfaceSecurityGroupList = AwsEc2NetworkInterfaceSecurityGroup[];
3705
+ export interface AwsEc2RouteTableDetails {
3706
+ /**
3707
+ * The associations between a route table and one or more subnets or a gateway.
3708
+ */
3709
+ AssociationSet?: AssociationSetList;
3710
+ /**
3711
+ * The ID of the Amazon Web Services account that owns the route table.
3712
+ */
3713
+ OwnerId?: NonEmptyString;
3714
+ /**
3715
+ * Describes a virtual private gateway propagating route.
3716
+ */
3717
+ PropagatingVgwSet?: PropagatingVgwSetList;
3718
+ /**
3719
+ * The ID of the route table.
3720
+ */
3721
+ RouteTableId?: NonEmptyString;
3722
+ /**
3723
+ * The routes in the route table.
3724
+ */
3725
+ RouteSet?: RouteSetList;
3726
+ /**
3727
+ * The ID of the virtual private cloud (VPC).
3728
+ */
3729
+ VpcId?: NonEmptyString;
3730
+ }
3658
3731
  export interface AwsEc2SecurityGroupDetails {
3659
3732
  /**
3660
3733
  * The name of the security group.
@@ -5427,6 +5500,10 @@ declare namespace SecurityHub {
5427
5500
  * The subnets that are associated with the cluster.
5428
5501
  */
5429
5502
  SubnetIds?: NonEmptyStringList;
5503
+ /**
5504
+ * Indicates whether the Amazon EKS public API server endpoint is turned on. If the Amazon EKS public API server endpoint is turned off, your cluster's Kubernetes API server can only receive requests that originate from within the cluster VPC.
5505
+ */
5506
+ EndpointPublicAccess?: Boolean;
5430
5507
  }
5431
5508
  export interface AwsElasticBeanstalkEnvironmentDetails {
5432
5509
  /**
@@ -8560,6 +8637,10 @@ declare namespace SecurityHub {
8560
8637
  * The versioning state of an S3 bucket.
8561
8638
  */
8562
8639
  BucketVersioningConfiguration?: AwsS3BucketBucketVersioningConfiguration;
8640
+ /**
8641
+ * Specifies which rule Amazon S3 applies by default to every new object placed in the specified bucket.
8642
+ */
8643
+ ObjectLockConfiguration?: AwsS3BucketObjectLockConfiguration;
8563
8644
  }
8564
8645
  export interface AwsS3BucketLoggingConfiguration {
8565
8646
  /**
@@ -8621,6 +8702,36 @@ declare namespace SecurityHub {
8621
8702
  }
8622
8703
  export type AwsS3BucketNotificationConfigurationS3KeyFilterRuleName = "Prefix"|"Suffix"|string;
8623
8704
  export type AwsS3BucketNotificationConfigurationS3KeyFilterRules = AwsS3BucketNotificationConfigurationS3KeyFilterRule[];
8705
+ export interface AwsS3BucketObjectLockConfiguration {
8706
+ /**
8707
+ * Indicates whether the bucket has an Object Lock configuration enabled.
8708
+ */
8709
+ ObjectLockEnabled?: NonEmptyString;
8710
+ /**
8711
+ * Specifies the Object Lock rule for the specified object.
8712
+ */
8713
+ Rule?: AwsS3BucketObjectLockConfigurationRuleDetails;
8714
+ }
8715
+ export interface AwsS3BucketObjectLockConfigurationRuleDefaultRetentionDetails {
8716
+ /**
8717
+ * The number of days that you want to specify for the default retention period.
8718
+ */
8719
+ Days?: Integer;
8720
+ /**
8721
+ * The default Object Lock retention mode you want to apply to new objects placed in the specified bucket.
8722
+ */
8723
+ Mode?: NonEmptyString;
8724
+ /**
8725
+ * The number of years that you want to specify for the default retention period.
8726
+ */
8727
+ Years?: Integer;
8728
+ }
8729
+ export interface AwsS3BucketObjectLockConfigurationRuleDetails {
8730
+ /**
8731
+ * The default Object Lock retention mode and period that you want to apply to new objects placed in the specified bucket.
8732
+ */
8733
+ DefaultRetention?: AwsS3BucketObjectLockConfigurationRuleDefaultRetentionDetails;
8734
+ }
8624
8735
  export interface AwsS3BucketServerSideEncryptionByDefault {
8625
8736
  /**
8626
8737
  * Server-side encryption algorithm to use for the default encryption. Valid values are aws: kms or AES256.
@@ -9201,7 +9312,7 @@ declare namespace SecurityHub {
9201
9312
  */
9202
9313
  ProcessPid?: NumberFilterList;
9203
9314
  /**
9204
- * The parent process ID.
9315
+ * The parent process ID. This field accepts positive integers between O and 2147483647.
9205
9316
  */
9206
9317
  ProcessParentPid?: NumberFilterList;
9207
9318
  /**
@@ -10630,7 +10741,7 @@ declare namespace SecurityHub {
10630
10741
  export type DateRangeUnit = "DAYS"|string;
10631
10742
  export interface DeclineInvitationsRequest {
10632
10743
  /**
10633
- * The list of account IDs for the accounts from which to decline the invitations to Security Hub.
10744
+ * The list of prospective member account IDs for which to decline an invitation.
10634
10745
  */
10635
10746
  AccountIds: AccountIdList;
10636
10747
  }
@@ -10674,7 +10785,7 @@ declare namespace SecurityHub {
10674
10785
  }
10675
10786
  export interface DeleteInvitationsRequest {
10676
10787
  /**
10677
- * The list of the account IDs that sent the invitations to delete.
10788
+ * The list of member account IDs that received the invitations you want to delete.
10678
10789
  */
10679
10790
  AccountIds: AccountIdList;
10680
10791
  }
@@ -10740,7 +10851,7 @@ declare namespace SecurityHub {
10740
10851
  */
10741
10852
  AutoEnableControls?: Boolean;
10742
10853
  /**
10743
- * Specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards. If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards. The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is SECURITY_CONTROL if you enabled Security Hub on or after February 9, 2023.
10854
+ * Specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards. If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards. The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is SECURITY_CONTROL if you enabled Security Hub on or after February 23, 2023.
10744
10855
  */
10745
10856
  ControlFindingGenerator?: ControlFindingGenerator;
10746
10857
  }
@@ -10909,7 +11020,7 @@ declare namespace SecurityHub {
10909
11020
  */
10910
11021
  EnableDefaultStandards?: Boolean;
10911
11022
  /**
10912
- * This field, used when enabling Security Hub, specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards. If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards. The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is SECURITY_CONTROL if you enabled Security Hub on or after February 9, 2023.
11023
+ * This field, used when enabling Security Hub, specifies whether the calling account has consolidated control findings turned on. If the value for this field is set to SECURITY_CONTROL, Security Hub generates a single finding for a control check even when the check applies to multiple enabled standards. If the value for this field is set to STANDARD_CONTROL, Security Hub generates separate findings for a control check when the check applies to multiple enabled standards. The value for this field in a member account matches the value in the administrator account. For accounts that aren't part of an organization, the default value of this field is SECURITY_CONTROL if you enabled Security Hub on or after February 23, 2023.
10913
11024
  */
10914
11025
  ControlFindingGenerator?: ControlFindingGenerator;
10915
11026
  }
@@ -11885,7 +11996,7 @@ declare namespace SecurityHub {
11885
11996
  */
11886
11997
  Pid?: Integer;
11887
11998
  /**
11888
- * The parent process ID.
11999
+ * The parent process ID. This field accepts positive integers between O and 2147483647.
11889
12000
  */
11890
12001
  ParentPid?: Integer;
11891
12002
  /**
@@ -11937,6 +12048,13 @@ declare namespace SecurityHub {
11937
12048
  }
11938
12049
  export type ProductSubscriptionArnList = NonEmptyString[];
11939
12050
  export type ProductsList = Product[];
12051
+ export interface PropagatingVgwSetDetails {
12052
+ /**
12053
+ * The ID of the virtual private gateway.
12054
+ */
12055
+ GatewayId?: NonEmptyString;
12056
+ }
12057
+ export type PropagatingVgwSetList = PropagatingVgwSetDetails[];
11940
12058
  export interface Range {
11941
12059
  /**
11942
12060
  * The number of lines (for a line range) or characters (for an offset range) from the beginning of the file to the end of the sensitive data.
@@ -12350,6 +12468,10 @@ declare namespace SecurityHub {
12350
12468
  AwsSageMakerNotebookInstance?: AwsSageMakerNotebookInstanceDetails;
12351
12469
  AwsWafv2WebAcl?: AwsWafv2WebAclDetails;
12352
12470
  AwsWafv2RuleGroup?: AwsWafv2RuleGroupDetails;
12471
+ /**
12472
+ * Provides details about a route table. A route table contains a set of rules, called routes, that determine where to direct network traffic from your subnet or gateway.
12473
+ */
12474
+ AwsEc2RouteTable?: AwsEc2RouteTableDetails;
12353
12475
  }
12354
12476
  export type ResourceList = Resource[];
12355
12477
  export interface Result {
@@ -12363,6 +12485,73 @@ declare namespace SecurityHub {
12363
12485
  ProcessingResult?: NonEmptyString;
12364
12486
  }
12365
12487
  export type ResultList = Result[];
12488
+ export interface RouteSetDetails {
12489
+ /**
12490
+ * The ID of the carrier gateway.
12491
+ */
12492
+ CarrierGatewayId?: NonEmptyString;
12493
+ /**
12494
+ * The Amazon Resource Name (ARN) of the core network.
12495
+ */
12496
+ CoreNetworkArn?: NonEmptyString;
12497
+ /**
12498
+ * The IPv4 CIDR block used for the destination match.
12499
+ */
12500
+ DestinationCidrBlock?: NonEmptyString;
12501
+ /**
12502
+ * The IPv6 CIDR block used for the destination match.
12503
+ */
12504
+ DestinationIpv6CidrBlock?: NonEmptyString;
12505
+ /**
12506
+ * The prefix of the destination Amazon Web Service.
12507
+ */
12508
+ DestinationPrefixListId?: NonEmptyString;
12509
+ /**
12510
+ * The ID of the egress-only internet gateway.
12511
+ */
12512
+ EgressOnlyInternetGatewayId?: NonEmptyString;
12513
+ /**
12514
+ * The ID of a gateway attached to your VPC.
12515
+ */
12516
+ GatewayId?: NonEmptyString;
12517
+ /**
12518
+ * The ID of a NAT instance in your VPC.
12519
+ */
12520
+ InstanceId?: NonEmptyString;
12521
+ /**
12522
+ * The ID of the Amazon Web Services account that owns the instance.
12523
+ */
12524
+ InstanceOwnerId?: NonEmptyString;
12525
+ /**
12526
+ * The ID of the local gateway.
12527
+ */
12528
+ LocalGatewayId?: NonEmptyString;
12529
+ /**
12530
+ * The ID of a NAT gateway.
12531
+ */
12532
+ NatGatewayId?: NonEmptyString;
12533
+ /**
12534
+ * The ID of the network interface.
12535
+ */
12536
+ NetworkInterfaceId?: NonEmptyString;
12537
+ /**
12538
+ * Describes how the route was created.
12539
+ */
12540
+ Origin?: NonEmptyString;
12541
+ /**
12542
+ * The state of the route.
12543
+ */
12544
+ State?: NonEmptyString;
12545
+ /**
12546
+ * The ID of a transit gateway.
12547
+ */
12548
+ TransitGatewayId?: NonEmptyString;
12549
+ /**
12550
+ * The ID of a VPC peering connection.
12551
+ */
12552
+ VpcPeeringConnectionId?: NonEmptyString;
12553
+ }
12554
+ export type RouteSetList = RouteSetDetails[];
12366
12555
  export interface RuleGroupDetails {
12367
12556
  /**
12368
12557
  * Additional settings to use in the specified rules.