aws-sdk 2.1439.0 → 2.1441.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/clients/rds.d.ts CHANGED
@@ -742,11 +742,11 @@ declare class RDS extends Service {
742
742
  */
743
743
  failoverDBCluster(callback?: (err: AWSError, data: RDS.Types.FailoverDBClusterResult) => void): Request<RDS.Types.FailoverDBClusterResult, AWSError>;
744
744
  /**
745
- * Initiates the failover process for an Aurora global database (GlobalCluster). A failover for an Aurora global database promotes one of secondary read-only DB clusters to be the primary DB cluster and demotes the primary DB cluster to being a secondary (read-only) DB cluster. In other words, the role of the current primary DB cluster and the selected (target) DB cluster are switched. The selected secondary DB cluster assumes full read/write capabilities for the Aurora global database. For more information about failing over an Amazon Aurora global database, see Managed planned failover for Amazon Aurora global databases in the Amazon Aurora User Guide. This action applies to GlobalCluster (Aurora global databases) only. Use this action only on healthy Aurora global databases with running Aurora DB clusters and no Region-wide outages, to test disaster recovery scenarios or to reconfigure your Aurora global database topology.
745
+ * Promotes the specified secondary DB cluster to be the primary DB cluster in the global database cluster to fail over or switch over a global database. Switchover operations were previously called "managed planned failovers." Although this operation can be used either to fail over or to switch over a global database cluster, its intended use is for global database failover. To switch over a global database cluster, we recommend that you use the SwitchoverGlobalCluster operation instead. How you use this operation depends on whether you are failing over or switching over your global database cluster: Failing over - Specify the AllowDataLoss parameter and don't specify the Switchover parameter. Switching over - Specify the Switchover parameter or omit it, but don't specify the AllowDataLoss parameter. About failing over and switching over While failing over and switching over a global database cluster both change the primary DB cluster, you use these operations for different reasons: Failing over - Use this operation to respond to an unplanned event, such as a Regional disaster in the primary Region. Failing over can result in a loss of write transaction data that wasn't replicated to the chosen secondary before the failover event occurred. However, the recovery process that promotes a DB instance on the chosen seconday DB cluster to be the primary writer DB instance guarantees that the data is in a transactionally consistent state. For more information about failing over an Amazon Aurora global database, see Performing managed failovers for Aurora global databases in the Amazon Aurora User Guide. Switching over - Use this operation on a healthy global database cluster for planned events, such as Regional rotation or to fail back to the original primary DB cluster after a failover operation. With this operation, there is no data loss. For more information about switching over an Amazon Aurora global database, see Performing switchovers for Aurora global databases in the Amazon Aurora User Guide.
746
746
  */
747
747
  failoverGlobalCluster(params: RDS.Types.FailoverGlobalClusterMessage, callback?: (err: AWSError, data: RDS.Types.FailoverGlobalClusterResult) => void): Request<RDS.Types.FailoverGlobalClusterResult, AWSError>;
748
748
  /**
749
- * Initiates the failover process for an Aurora global database (GlobalCluster). A failover for an Aurora global database promotes one of secondary read-only DB clusters to be the primary DB cluster and demotes the primary DB cluster to being a secondary (read-only) DB cluster. In other words, the role of the current primary DB cluster and the selected (target) DB cluster are switched. The selected secondary DB cluster assumes full read/write capabilities for the Aurora global database. For more information about failing over an Amazon Aurora global database, see Managed planned failover for Amazon Aurora global databases in the Amazon Aurora User Guide. This action applies to GlobalCluster (Aurora global databases) only. Use this action only on healthy Aurora global databases with running Aurora DB clusters and no Region-wide outages, to test disaster recovery scenarios or to reconfigure your Aurora global database topology.
749
+ * Promotes the specified secondary DB cluster to be the primary DB cluster in the global database cluster to fail over or switch over a global database. Switchover operations were previously called "managed planned failovers." Although this operation can be used either to fail over or to switch over a global database cluster, its intended use is for global database failover. To switch over a global database cluster, we recommend that you use the SwitchoverGlobalCluster operation instead. How you use this operation depends on whether you are failing over or switching over your global database cluster: Failing over - Specify the AllowDataLoss parameter and don't specify the Switchover parameter. Switching over - Specify the Switchover parameter or omit it, but don't specify the AllowDataLoss parameter. About failing over and switching over While failing over and switching over a global database cluster both change the primary DB cluster, you use these operations for different reasons: Failing over - Use this operation to respond to an unplanned event, such as a Regional disaster in the primary Region. Failing over can result in a loss of write transaction data that wasn't replicated to the chosen secondary before the failover event occurred. However, the recovery process that promotes a DB instance on the chosen seconday DB cluster to be the primary writer DB instance guarantees that the data is in a transactionally consistent state. For more information about failing over an Amazon Aurora global database, see Performing managed failovers for Aurora global databases in the Amazon Aurora User Guide. Switching over - Use this operation on a healthy global database cluster for planned events, such as Regional rotation or to fail back to the original primary DB cluster after a failover operation. With this operation, there is no data loss. For more information about switching over an Amazon Aurora global database, see Performing switchovers for Aurora global databases in the Amazon Aurora User Guide.
750
750
  */
751
751
  failoverGlobalCluster(callback?: (err: AWSError, data: RDS.Types.FailoverGlobalClusterResult) => void): Request<RDS.Types.FailoverGlobalClusterResult, AWSError>;
752
752
  /**
@@ -894,11 +894,11 @@ declare class RDS extends Service {
894
894
  */
895
895
  modifyEventSubscription(callback?: (err: AWSError, data: RDS.Types.ModifyEventSubscriptionResult) => void): Request<RDS.Types.ModifyEventSubscriptionResult, AWSError>;
896
896
  /**
897
- * Modifies a setting for an Amazon Aurora global cluster. You can change one or more database configuration parameters by specifying these parameters and the new values in the request. For more information on Amazon Aurora, see What is Amazon Aurora? in the Amazon Aurora User Guide. This operation only applies to Aurora global database clusters.
897
+ * Modifies a setting for an Amazon Aurora global database cluster. You can change one or more database configuration parameters by specifying these parameters and the new values in the request. For more information on Amazon Aurora, see What is Amazon Aurora? in the Amazon Aurora User Guide. This operation only applies to Aurora global database clusters.
898
898
  */
899
899
  modifyGlobalCluster(params: RDS.Types.ModifyGlobalClusterMessage, callback?: (err: AWSError, data: RDS.Types.ModifyGlobalClusterResult) => void): Request<RDS.Types.ModifyGlobalClusterResult, AWSError>;
900
900
  /**
901
- * Modifies a setting for an Amazon Aurora global cluster. You can change one or more database configuration parameters by specifying these parameters and the new values in the request. For more information on Amazon Aurora, see What is Amazon Aurora? in the Amazon Aurora User Guide. This operation only applies to Aurora global database clusters.
901
+ * Modifies a setting for an Amazon Aurora global database cluster. You can change one or more database configuration parameters by specifying these parameters and the new values in the request. For more information on Amazon Aurora, see What is Amazon Aurora? in the Amazon Aurora User Guide. This operation only applies to Aurora global database clusters.
902
902
  */
903
903
  modifyGlobalCluster(callback?: (err: AWSError, data: RDS.Types.ModifyGlobalClusterResult) => void): Request<RDS.Types.ModifyGlobalClusterResult, AWSError>;
904
904
  /**
@@ -1149,6 +1149,14 @@ declare class RDS extends Service {
1149
1149
  * Switches over a blue/green deployment. Before you switch over, production traffic is routed to the databases in the blue environment. After you switch over, production traffic is routed to the databases in the green environment. For more information, see Using Amazon RDS Blue/Green Deployments for database updates in the Amazon RDS User Guide and Using Amazon RDS Blue/Green Deployments for database updates in the Amazon Aurora User Guide.
1150
1150
  */
1151
1151
  switchoverBlueGreenDeployment(callback?: (err: AWSError, data: RDS.Types.SwitchoverBlueGreenDeploymentResponse) => void): Request<RDS.Types.SwitchoverBlueGreenDeploymentResponse, AWSError>;
1152
+ /**
1153
+ * Switches over the specified secondary DB cluster to be the new primary DB cluster in the global database cluster. Switchover operations were previously called "managed planned failovers." Aurora promotes the specified secondary cluster to assume full read/write capabilities and demotes the current primary cluster to a secondary (read-only) cluster, maintaining the orginal replication topology. All secondary clusters are synchronized with the primary at the beginning of the process so the new primary continues operations for the Aurora global database without losing any data. Your database is unavailable for a short time while the primary and selected secondary clusters are assuming their new roles. For more information about switching over an Aurora global database, see Performing switchovers for Amazon Aurora global databases in the Amazon Aurora User Guide. This operation is intended for controlled environments, for operations such as "regional rotation" or to fall back to the original primary after a global database failover.
1154
+ */
1155
+ switchoverGlobalCluster(params: RDS.Types.SwitchoverGlobalClusterMessage, callback?: (err: AWSError, data: RDS.Types.SwitchoverGlobalClusterResult) => void): Request<RDS.Types.SwitchoverGlobalClusterResult, AWSError>;
1156
+ /**
1157
+ * Switches over the specified secondary DB cluster to be the new primary DB cluster in the global database cluster. Switchover operations were previously called "managed planned failovers." Aurora promotes the specified secondary cluster to assume full read/write capabilities and demotes the current primary cluster to a secondary (read-only) cluster, maintaining the orginal replication topology. All secondary clusters are synchronized with the primary at the beginning of the process so the new primary continues operations for the Aurora global database without losing any data. Your database is unavailable for a short time while the primary and selected secondary clusters are assuming their new roles. For more information about switching over an Aurora global database, see Performing switchovers for Amazon Aurora global databases in the Amazon Aurora User Guide. This operation is intended for controlled environments, for operations such as "regional rotation" or to fall back to the original primary after a global database failover.
1158
+ */
1159
+ switchoverGlobalCluster(callback?: (err: AWSError, data: RDS.Types.SwitchoverGlobalClusterResult) => void): Request<RDS.Types.SwitchoverGlobalClusterResult, AWSError>;
1152
1160
  /**
1153
1161
  * Switches over an Oracle standby database in an Oracle Data Guard environment, making it the new primary database. Issue this command in the Region that hosts the current standby database.
1154
1162
  */
@@ -1975,7 +1983,7 @@ declare namespace RDS {
1975
1983
  */
1976
1984
  AllocatedStorage?: IntegerOptional;
1977
1985
  /**
1978
- * The storage type to associate with the DB cluster. For information on storage types for Aurora DB clusters, see Storage configurations for Amazon Aurora DB clusters. For information on storage types for Multi-AZ DB clusters, see Settings for creating Multi-AZ DB clusters. This setting is required to create a Multi-AZ DB cluster. When specified for a Multi-AZ DB cluster, a value for the Iops parameter is required. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters Valid Values: Aurora DB clusters - aurora | aurora-iopt1 Multi-AZ DB clusters - io1 Default: Aurora DB clusters - aurora Multi-AZ DB clusters - io1
1986
+ * The storage type to associate with the DB cluster. For information on storage types for Aurora DB clusters, see Storage configurations for Amazon Aurora DB clusters. For information on storage types for Multi-AZ DB clusters, see Settings for creating Multi-AZ DB clusters. This setting is required to create a Multi-AZ DB cluster. When specified for a Multi-AZ DB cluster, a value for the Iops parameter is required. Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters Valid Values: Aurora DB clusters - aurora | aurora-iopt1 Multi-AZ DB clusters - io1 Default: Aurora DB clusters - aurora Multi-AZ DB clusters - io1 When you create an Aurora DB cluster with the storage type set to aurora-iopt1, the storage type is returned in the response. The storage type isn't returned when you set it to aurora.
1979
1987
  */
1980
1988
  StorageType?: String;
1981
1989
  /**
@@ -6131,20 +6139,28 @@ declare namespace RDS {
6131
6139
  }
6132
6140
  export interface FailoverGlobalClusterMessage {
6133
6141
  /**
6134
- * Identifier of the Aurora global database (GlobalCluster) that should be failed over. The identifier is the unique key assigned by the user when the Aurora global database was created. In other words, it's the name of the Aurora global database that you want to fail over. Constraints: Must match the identifier of an existing GlobalCluster (Aurora global database).
6142
+ * The identifier of the global database cluster (Aurora global database) this operation should apply to. The identifier is the unique key assigned by the user when the Aurora global database is created. In other words, it's the name of the Aurora global database. Constraints: Must match the identifier of an existing global database cluster.
6135
6143
  */
6136
6144
  GlobalClusterIdentifier: GlobalClusterIdentifier;
6137
6145
  /**
6138
- * Identifier of the secondary Aurora DB cluster that you want to promote to primary for the Aurora global database (GlobalCluster.) Use the Amazon Resource Name (ARN) for the identifier so that Aurora can locate the cluster in its Amazon Web Services Region.
6146
+ * The identifier of the secondary Aurora DB cluster that you want to promote to the primary for the global database cluster. Use the Amazon Resource Name (ARN) for the identifier so that Aurora can locate the cluster in its Amazon Web Services Region.
6139
6147
  */
6140
6148
  TargetDbClusterIdentifier: DBClusterIdentifier;
6149
+ /**
6150
+ * Specifies whether to allow data loss for this global database cluster operation. Allowing data loss triggers a global failover operation. If you don't specify AllowDataLoss, the global database cluster operation defaults to a switchover. Constraints: Can't be specified together with the Switchover parameter.
6151
+ */
6152
+ AllowDataLoss?: BooleanOptional;
6153
+ /**
6154
+ * Specifies whether to switch over this global database cluster. Constraints: Can't be specified together with the AllowDataLoss parameter.
6155
+ */
6156
+ Switchover?: BooleanOptional;
6141
6157
  }
6142
6158
  export interface FailoverGlobalClusterResult {
6143
6159
  GlobalCluster?: GlobalCluster;
6144
6160
  }
6145
6161
  export interface FailoverState {
6146
6162
  /**
6147
- * The current status of the Aurora global database (GlobalCluster). Possible values are as follows: pending &#x96; A request to fail over the Aurora global database (GlobalCluster) has been received by the service. The GlobalCluster's primary DB cluster and the specified secondary DB cluster are being verified before the failover process can start. failing-over &#x96; This status covers the range of Aurora internal operations that take place during the failover process, such as demoting the primary Aurora DB cluster, promoting the secondary Aurora DB, and synchronizing replicas. cancelling &#x96; The request to fail over the Aurora global database (GlobalCluster) was cancelled and the primary Aurora DB cluster and the selected secondary Aurora DB cluster are returning to their previous states.
6163
+ * The current status of the global cluster. Possible values are as follows: pending &#x96; The service received a request to switch over or fail over the global cluster. The global cluster's primary DB cluster and the specified secondary DB cluster are being verified before the operation starts. failing-over &#x96; This status covers the range of Aurora internal operations that take place during the switchover or failover process, such as demoting the primary Aurora DB cluster, promoting the secondary Aurora DB cluster, and synchronizing replicas. cancelling &#x96; The request to switch over or fail over the global cluster was cancelled and the primary Aurora DB cluster and the selected secondary Aurora DB cluster are returning to their previous states.
6148
6164
  */
6149
6165
  Status?: FailoverStatus;
6150
6166
  /**
@@ -6155,6 +6171,10 @@ declare namespace RDS {
6155
6171
  * The Amazon Resource Name (ARN) of the Aurora DB cluster that is currently being promoted, and which is associated with this state.
6156
6172
  */
6157
6173
  ToDbClusterArn?: String;
6174
+ /**
6175
+ * Indicates whether the operation is a global switchover or a global failover. If data loss is allowed, then the operation is a global failover. Otherwise, it's a switchover.
6176
+ */
6177
+ IsDataLossAllowed?: Boolean;
6158
6178
  }
6159
6179
  export type FailoverStatus = "pending"|"failing-over"|"cancelling"|string;
6160
6180
  export type FeatureNameList = String[];
@@ -6212,7 +6232,7 @@ declare namespace RDS {
6212
6232
  */
6213
6233
  GlobalClusterMembers?: GlobalClusterMemberList;
6214
6234
  /**
6215
- * A data object containing all properties for the current state of an in-process or pending failover process for this Aurora global database. This object is empty unless the FailoverGlobalCluster API operation has been called on this Aurora global database (GlobalCluster).
6235
+ * A data object containing all properties for the current state of an in-process or pending switchover or failover process for this global cluster (Aurora global database). This object is empty unless the SwitchoverGlobalCluster or FailoverGlobalCluster operation was called on this global cluster.
6216
6236
  */
6217
6237
  FailoverState?: FailoverState;
6218
6238
  }
@@ -6220,23 +6240,28 @@ declare namespace RDS {
6220
6240
  export type GlobalClusterList = GlobalCluster[];
6221
6241
  export interface GlobalClusterMember {
6222
6242
  /**
6223
- * The Amazon Resource Name (ARN) for each Aurora cluster.
6243
+ * The Amazon Resource Name (ARN) for each Aurora DB cluster in the global cluster.
6224
6244
  */
6225
6245
  DBClusterArn?: String;
6226
6246
  /**
6227
- * The Amazon Resource Name (ARN) for each read-only secondary cluster associated with the Aurora global database.
6247
+ * The Amazon Resource Name (ARN) for each read-only secondary cluster associated with the global cluster.
6228
6248
  */
6229
6249
  Readers?: ReadersArnList;
6230
6250
  /**
6231
- * Specifies whether the Aurora cluster is the primary cluster (that is, has read-write capability) for the Aurora global database with which it is associated.
6251
+ * Specifies whether the Aurora DB cluster is the primary cluster (that is, has read-write capability) for the global cluster with which it is associated.
6232
6252
  */
6233
6253
  IsWriter?: Boolean;
6234
6254
  /**
6235
- * Specifies whether a secondary cluster in an Aurora global database has write forwarding enabled, not enabled, or is in the process of enabling it.
6255
+ * Specifies whether a secondary cluster in the global cluster has write forwarding enabled, not enabled, or is in the process of enabling it.
6236
6256
  */
6237
6257
  GlobalWriteForwardingStatus?: WriteForwardingStatus;
6258
+ /**
6259
+ * The status of synchronization of each Aurora DB cluster in the global cluster.
6260
+ */
6261
+ SynchronizationStatus?: GlobalClusterMemberSynchronizationStatus;
6238
6262
  }
6239
6263
  export type GlobalClusterMemberList = GlobalClusterMember[];
6264
+ export type GlobalClusterMemberSynchronizationStatus = "connected"|"pending-resync"|string;
6240
6265
  export interface GlobalClustersMessage {
6241
6266
  /**
6242
6267
  * An optional pagination token provided by a previous DescribeGlobalClusters request. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords.
@@ -9320,6 +9345,19 @@ declare namespace RDS {
9320
9345
  }
9321
9346
  export type SwitchoverDetailList = SwitchoverDetail[];
9322
9347
  export type SwitchoverDetailStatus = string;
9348
+ export interface SwitchoverGlobalClusterMessage {
9349
+ /**
9350
+ * The identifier of the global database cluster to switch over. This parameter isn't case-sensitive. Constraints: Must match the identifier of an existing global database cluster (Aurora global database).
9351
+ */
9352
+ GlobalClusterIdentifier: GlobalClusterIdentifier;
9353
+ /**
9354
+ * The identifier of the secondary Aurora DB cluster to promote to the new primary for the global database cluster. Use the Amazon Resource Name (ARN) for the identifier so that Aurora can locate the cluster in its Amazon Web Services Region.
9355
+ */
9356
+ TargetDbClusterIdentifier: DBClusterIdentifier;
9357
+ }
9358
+ export interface SwitchoverGlobalClusterResult {
9359
+ GlobalCluster?: GlobalCluster;
9360
+ }
9323
9361
  export interface SwitchoverReadReplicaMessage {
9324
9362
  /**
9325
9363
  * The DB instance identifier of the current standby database. This value is stored as a lowercase string. Constraints: Must match the identifier of an existing Oracle read replica DB instance.
@@ -925,7 +925,7 @@ declare namespace Route53Domains {
925
925
  */
926
926
  SortBy?: ListOperationsSortAttributeName;
927
927
  /**
928
- * The sort order ofr returned values, either ascending or descending.
928
+ * The sort order for returned values, either ascending or descending.
929
929
  */
930
930
  SortOrder?: SortOrder;
931
931
  }
@@ -188,11 +188,11 @@ declare class SecurityHub extends Service {
188
188
  */
189
189
  deleteInvitations(callback?: (err: AWSError, data: SecurityHub.Types.DeleteInvitationsResponse) => void): Request<SecurityHub.Types.DeleteInvitationsResponse, AWSError>;
190
190
  /**
191
- * Deletes the specified member accounts from Security Hub. Can be used to delete member accounts that belong to an organization as well as member accounts that were invited manually.
191
+ * Deletes the specified member accounts from Security Hub. You can invoke this API only to delete accounts that became members through invitation. You can't invoke this API to delete accounts that belong to an Organizations organization.
192
192
  */
193
193
  deleteMembers(params: SecurityHub.Types.DeleteMembersRequest, callback?: (err: AWSError, data: SecurityHub.Types.DeleteMembersResponse) => void): Request<SecurityHub.Types.DeleteMembersResponse, AWSError>;
194
194
  /**
195
- * Deletes the specified member accounts from Security Hub. Can be used to delete member accounts that belong to an organization as well as member accounts that were invited manually.
195
+ * Deletes the specified member accounts from Security Hub. You can invoke this API only to delete accounts that became members through invitation. You can't invoke this API to delete accounts that belong to an Organizations organization.
196
196
  */
197
197
  deleteMembers(callback?: (err: AWSError, data: SecurityHub.Types.DeleteMembersResponse) => void): Request<SecurityHub.Types.DeleteMembersResponse, AWSError>;
198
198
  /**
@@ -260,11 +260,11 @@ declare class SecurityHub extends Service {
260
260
  */
261
261
  disableOrganizationAdminAccount(callback?: (err: AWSError, data: SecurityHub.Types.DisableOrganizationAdminAccountResponse) => void): Request<SecurityHub.Types.DisableOrganizationAdminAccountResponse, AWSError>;
262
262
  /**
263
- * Disables Security Hub in your account only in the current Region. To disable Security Hub in all Regions, you must submit one request per Region where you have enabled Security Hub. When you disable Security Hub for an administrator account, it doesn't disable Security Hub for any associated member accounts. When you disable Security Hub, your existing findings and insights and any Security Hub configuration settings are deleted after 90 days and cannot be recovered. Any standards that were enabled are disabled, and your administrator and member account associations are removed. If you want to save your existing findings, you must export them before you disable Security Hub.
263
+ * Disables Security Hub in your account only in the current Amazon Web Services Region. To disable Security Hub in all Regions, you must submit one request per Region where you have enabled Security Hub. You can't disable Security Hub in an account that is currently the Security Hub administrator. When you disable Security Hub, your existing findings and insights and any Security Hub configuration settings are deleted after 90 days and cannot be recovered. Any standards that were enabled are disabled, and your administrator and member account associations are removed. If you want to save your existing findings, you must export them before you disable Security Hub.
264
264
  */
265
265
  disableSecurityHub(params: SecurityHub.Types.DisableSecurityHubRequest, callback?: (err: AWSError, data: SecurityHub.Types.DisableSecurityHubResponse) => void): Request<SecurityHub.Types.DisableSecurityHubResponse, AWSError>;
266
266
  /**
267
- * Disables Security Hub in your account only in the current Region. To disable Security Hub in all Regions, you must submit one request per Region where you have enabled Security Hub. When you disable Security Hub for an administrator account, it doesn't disable Security Hub for any associated member accounts. When you disable Security Hub, your existing findings and insights and any Security Hub configuration settings are deleted after 90 days and cannot be recovered. Any standards that were enabled are disabled, and your administrator and member account associations are removed. If you want to save your existing findings, you must export them before you disable Security Hub.
267
+ * Disables Security Hub in your account only in the current Amazon Web Services Region. To disable Security Hub in all Regions, you must submit one request per Region where you have enabled Security Hub. You can't disable Security Hub in an account that is currently the Security Hub administrator. When you disable Security Hub, your existing findings and insights and any Security Hub configuration settings are deleted after 90 days and cannot be recovered. Any standards that were enabled are disabled, and your administrator and member account associations are removed. If you want to save your existing findings, you must export them before you disable Security Hub.
268
268
  */
269
269
  disableSecurityHub(callback?: (err: AWSError, data: SecurityHub.Types.DisableSecurityHubResponse) => void): Request<SecurityHub.Types.DisableSecurityHubResponse, AWSError>;
270
270
  /**
@@ -9969,6 +9969,10 @@ declare namespace SecurityHub {
9969
9969
  * Indicates whether the finding is a sample finding.
9970
9970
  */
9971
9971
  Sample?: Boolean;
9972
+ /**
9973
+ * Provides metadata for the Amazon CodeGuru detector associated with a finding. This field pertains to findings that relate to Lambda functions. Amazon Inspector identifies policy violations and vulnerabilities in Lambda function code based on internal detectors developed in collaboration with Amazon CodeGuru. Security Hub receives those findings.
9974
+ */
9975
+ GeneratorDetails?: GeneratorDetails;
9972
9976
  }
9973
9977
  export interface AwsSecurityFindingFilters {
9974
9978
  /**
@@ -11444,6 +11448,24 @@ declare namespace SecurityHub {
11444
11448
  */
11445
11449
  Reason?: NonEmptyString;
11446
11450
  }
11451
+ export interface CodeVulnerabilitiesFilePath {
11452
+ /**
11453
+ * The line number of the last line of code in which the vulnerability is located.
11454
+ */
11455
+ EndLine?: Integer;
11456
+ /**
11457
+ * The name of the file in which the code vulnerability is located.
11458
+ */
11459
+ FileName?: NonEmptyString;
11460
+ /**
11461
+ * The file path to the code in which the vulnerability is located.
11462
+ */
11463
+ FilePath?: NonEmptyString;
11464
+ /**
11465
+ * The line number of the first line of code in which the vulnerability is located.
11466
+ */
11467
+ StartLine?: Integer;
11468
+ }
11447
11469
  export interface Compliance {
11448
11470
  /**
11449
11471
  * The result of a standards check. The valid values for Status are as follows. PASSED - Standards check passed for all evaluated resources. WARNING - Some information is missing or this check is not supported for your configuration. FAILED - Standards check failed for at least one evaluated resource. NOT_AVAILABLE - Check could not be performed due to a service outage, API error, or because the result of the Config evaluation was NOT_APPLICABLE. If the Config evaluation result was NOT_APPLICABLE, then after 3 days, Security Hub automatically archives the finding.
@@ -12165,6 +12187,20 @@ declare namespace SecurityHub {
12165
12187
  ResourceArn?: NonEmptyString;
12166
12188
  }
12167
12189
  export type FirewallPolicyStatelessRuleGroupReferencesList = FirewallPolicyStatelessRuleGroupReferencesDetails[];
12190
+ export interface GeneratorDetails {
12191
+ /**
12192
+ * The name of the detector used to identify the code vulnerability.
12193
+ */
12194
+ Name?: NonEmptyString;
12195
+ /**
12196
+ * The description of the detector used to identify the code vulnerability.
12197
+ */
12198
+ Description?: NonEmptyString;
12199
+ /**
12200
+ * An array of tags used to identify the detector associated with the finding.
12201
+ */
12202
+ Labels?: TypeList;
12203
+ }
12168
12204
  export interface GeoLocation {
12169
12205
  /**
12170
12206
  * The longitude of the location.
@@ -14715,7 +14751,35 @@ declare namespace SecurityHub {
14715
14751
  * Specifies if all vulnerable packages in a finding have a value for FixedInVersion and Remediation. This field is evaluated for each vulnerability Id based on the number of vulnerable packages that have a value for both FixedInVersion and Remediation. Valid values are as follows: YES if all vulnerable packages have a value for both FixedInVersion and Remediation NO if no vulnerable packages have a value for FixedInVersion and Remediation PARTIAL otherwise
14716
14752
  */
14717
14753
  FixAvailable?: VulnerabilityFixAvailable;
14754
+ /**
14755
+ * The Exploit Prediction Scoring System (EPSS) score for a finding.
14756
+ */
14757
+ EpssScore?: Double;
14758
+ /**
14759
+ * Whether an exploit is available for a finding.
14760
+ */
14761
+ ExploitAvailable?: VulnerabilityExploitAvailable;
14762
+ /**
14763
+ * The vulnerabilities found in your Lambda function code. This field pertains to findings that Security Hub receives from Amazon Inspector.
14764
+ */
14765
+ CodeVulnerabilities?: VulnerabilityCodeVulnerabilitiesList;
14766
+ }
14767
+ export interface VulnerabilityCodeVulnerabilities {
14768
+ /**
14769
+ * The Common Weakness Enumeration (CWE) item associated with the detected code vulnerability.
14770
+ */
14771
+ Cwes?: TypeList;
14772
+ /**
14773
+ * Provides details about where a code vulnerability is located in your Lambda function.
14774
+ */
14775
+ FilePath?: CodeVulnerabilitiesFilePath;
14776
+ /**
14777
+ * The Amazon Resource Name (ARN) of the Lambda layer in which the code vulnerability is located.
14778
+ */
14779
+ SourceArn?: NonEmptyString;
14718
14780
  }
14781
+ export type VulnerabilityCodeVulnerabilitiesList = VulnerabilityCodeVulnerabilities[];
14782
+ export type VulnerabilityExploitAvailable = "YES"|"NO"|string;
14719
14783
  export type VulnerabilityFixAvailable = "YES"|"NO"|"PARTIAL"|string;
14720
14784
  export type VulnerabilityList = Vulnerability[];
14721
14785
  export interface VulnerabilityVendor {
@@ -83,7 +83,7 @@ return /******/ (function(modules) { // webpackBootstrap
83
83
  /**
84
84
  * @constant
85
85
  */
86
- VERSION: '2.1439.0',
86
+ VERSION: '2.1441.0',
87
87
 
88
88
  /**
89
89
  * @api private