cdk-comprehend-s3olap 2.0.48 → 2.0.49
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.jsii +4 -4
- package/lib/cdk-comprehend-s3olap.js +2 -2
- package/lib/comprehend-lambdas.js +2 -2
- package/lib/iam-roles.js +4 -4
- package/node_modules/aws-sdk/CHANGELOG.md +10 -1
- package/node_modules/aws-sdk/README.md +1 -1
- package/node_modules/aws-sdk/apis/appsync-2017-07-25.min.json +34 -3
- package/node_modules/aws-sdk/apis/detective-2018-10-26.min.json +213 -39
- package/node_modules/aws-sdk/apis/detective-2018-10-26.paginators.json +5 -0
- package/node_modules/aws-sdk/apis/guardduty-2017-11-28.min.json +776 -162
- package/node_modules/aws-sdk/apis/guardduty-2017-11-28.paginators.json +6 -0
- package/node_modules/aws-sdk/apis/lookoutvision-2020-11-20.min.json +13 -4
- package/node_modules/aws-sdk/apis/macie2-2020-01-01.min.json +149 -6
- package/node_modules/aws-sdk/apis/macie2-2020-01-01.waiters2.json +25 -0
- package/node_modules/aws-sdk/apis/rekognition-2016-06-27.min.json +7 -1
- package/node_modules/aws-sdk/apis/transfer-2018-11-05.min.json +717 -67
- package/node_modules/aws-sdk/apis/transfer-2018-11-05.paginators.json +24 -0
- package/node_modules/aws-sdk/clients/appsync.d.ts +41 -3
- package/node_modules/aws-sdk/clients/autoscaling.d.ts +118 -118
- package/node_modules/aws-sdk/clients/detective.d.ts +176 -4
- package/node_modules/aws-sdk/clients/guardduty.d.ts +604 -1
- package/node_modules/aws-sdk/clients/lookoutvision.d.ts +14 -2
- package/node_modules/aws-sdk/clients/macie2.d.ts +131 -9
- package/node_modules/aws-sdk/clients/macie2.js +1 -0
- package/node_modules/aws-sdk/clients/rds.d.ts +2 -2
- package/node_modules/aws-sdk/clients/rekognition.d.ts +12 -4
- package/node_modules/aws-sdk/clients/securityhub.d.ts +3 -3
- package/node_modules/aws-sdk/clients/transfer.d.ts +1000 -86
- package/node_modules/aws-sdk/dist/aws-sdk-core-react-native.js +1 -1
- package/node_modules/aws-sdk/dist/aws-sdk-react-native.js +567 -560
- package/node_modules/aws-sdk/dist/aws-sdk.js +10 -4
- package/node_modules/aws-sdk/dist/aws-sdk.min.js +22 -22
- package/node_modules/aws-sdk/lib/core.js +1 -1
- package/node_modules/aws-sdk/package.json +1 -1
- package/package.json +6 -6
@@ -155,6 +155,14 @@ declare class GuardDuty extends Service {
|
|
155
155
|
* Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.
|
156
156
|
*/
|
157
157
|
deleteThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.DeleteThreatIntelSetResponse) => void): Request<GuardDuty.Types.DeleteThreatIntelSetResponse, AWSError>;
|
158
|
+
/**
|
159
|
+
* Returns a list of malware scans.
|
160
|
+
*/
|
161
|
+
describeMalwareScans(params: GuardDuty.Types.DescribeMalwareScansRequest, callback?: (err: AWSError, data: GuardDuty.Types.DescribeMalwareScansResponse) => void): Request<GuardDuty.Types.DescribeMalwareScansResponse, AWSError>;
|
162
|
+
/**
|
163
|
+
* Returns a list of malware scans.
|
164
|
+
*/
|
165
|
+
describeMalwareScans(callback?: (err: AWSError, data: GuardDuty.Types.DescribeMalwareScansResponse) => void): Request<GuardDuty.Types.DescribeMalwareScansResponse, AWSError>;
|
158
166
|
/**
|
159
167
|
* Returns information about the account selected as the delegated administrator for GuardDuty.
|
160
168
|
*/
|
@@ -267,6 +275,14 @@ declare class GuardDuty extends Service {
|
|
267
275
|
* Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
|
268
276
|
*/
|
269
277
|
getInvitationsCount(callback?: (err: AWSError, data: GuardDuty.Types.GetInvitationsCountResponse) => void): Request<GuardDuty.Types.GetInvitationsCountResponse, AWSError>;
|
278
|
+
/**
|
279
|
+
* Returns the details of the malware scan settings.
|
280
|
+
*/
|
281
|
+
getMalwareScanSettings(params: GuardDuty.Types.GetMalwareScanSettingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetMalwareScanSettingsResponse) => void): Request<GuardDuty.Types.GetMalwareScanSettingsResponse, AWSError>;
|
282
|
+
/**
|
283
|
+
* Returns the details of the malware scan settings.
|
284
|
+
*/
|
285
|
+
getMalwareScanSettings(callback?: (err: AWSError, data: GuardDuty.Types.GetMalwareScanSettingsResponse) => void): Request<GuardDuty.Types.GetMalwareScanSettingsResponse, AWSError>;
|
270
286
|
/**
|
271
287
|
* Provides the details for the GuardDuty administrator account associated with the current GuardDuty member account.
|
272
288
|
*/
|
@@ -475,6 +491,14 @@ declare class GuardDuty extends Service {
|
|
475
491
|
* Updates the IPSet specified by the IPSet ID.
|
476
492
|
*/
|
477
493
|
updateIPSet(callback?: (err: AWSError, data: GuardDuty.Types.UpdateIPSetResponse) => void): Request<GuardDuty.Types.UpdateIPSetResponse, AWSError>;
|
494
|
+
/**
|
495
|
+
* Updates the malware scan settings.
|
496
|
+
*/
|
497
|
+
updateMalwareScanSettings(params: GuardDuty.Types.UpdateMalwareScanSettingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateMalwareScanSettingsResponse) => void): Request<GuardDuty.Types.UpdateMalwareScanSettingsResponse, AWSError>;
|
498
|
+
/**
|
499
|
+
* Updates the malware scan settings.
|
500
|
+
*/
|
501
|
+
updateMalwareScanSettings(callback?: (err: AWSError, data: GuardDuty.Types.UpdateMalwareScanSettingsResponse) => void): Request<GuardDuty.Types.UpdateMalwareScanSettingsResponse, AWSError>;
|
478
502
|
/**
|
479
503
|
* Contains information on member accounts to be updated.
|
480
504
|
*/
|
@@ -1047,13 +1071,14 @@ declare namespace GuardDuty {
|
|
1047
1071
|
ThreatIntelSetId: String;
|
1048
1072
|
}
|
1049
1073
|
export type Criterion = {[key: string]: Condition};
|
1074
|
+
export type CriterionKey = "EC2_INSTANCE_ARN"|"SCAN_ID"|"ACCOUNT_ID"|"GUARDDUTY_FINDING_ID"|"SCAN_START_TIME"|"SCAN_STATUS"|string;
|
1050
1075
|
export interface DNSLogsConfigurationResult {
|
1051
1076
|
/**
|
1052
1077
|
* Denotes whether DNS logs is enabled as a data source.
|
1053
1078
|
*/
|
1054
1079
|
Status: DataSourceStatus;
|
1055
1080
|
}
|
1056
|
-
export type DataSource = "FLOW_LOGS"|"CLOUD_TRAIL"|"DNS_LOGS"|"S3_LOGS"|"KUBERNETES_AUDIT_LOGS"|string;
|
1081
|
+
export type DataSource = "FLOW_LOGS"|"CLOUD_TRAIL"|"DNS_LOGS"|"S3_LOGS"|"KUBERNETES_AUDIT_LOGS"|"EC2_MALWARE_SCAN"|string;
|
1057
1082
|
export interface DataSourceConfigurations {
|
1058
1083
|
/**
|
1059
1084
|
* Describes whether S3 data event logs are enabled as a data source.
|
@@ -1063,6 +1088,10 @@ declare namespace GuardDuty {
|
|
1063
1088
|
* Describes whether any Kubernetes logs are enabled as data sources.
|
1064
1089
|
*/
|
1065
1090
|
Kubernetes?: KubernetesConfiguration;
|
1091
|
+
/**
|
1092
|
+
* Describes whether Malware Protection is enabled as a data source.
|
1093
|
+
*/
|
1094
|
+
MalwareProtection?: MalwareProtectionConfiguration;
|
1066
1095
|
}
|
1067
1096
|
export interface DataSourceConfigurationsResult {
|
1068
1097
|
/**
|
@@ -1085,6 +1114,10 @@ declare namespace GuardDuty {
|
|
1085
1114
|
* An object that contains information on the status of all Kubernetes data sources.
|
1086
1115
|
*/
|
1087
1116
|
Kubernetes?: KubernetesConfigurationResult;
|
1117
|
+
/**
|
1118
|
+
* Describes the configuration of Malware Protection data sources.
|
1119
|
+
*/
|
1120
|
+
MalwareProtection?: MalwareProtectionConfigurationResult;
|
1088
1121
|
}
|
1089
1122
|
export interface DataSourceFreeTrial {
|
1090
1123
|
/**
|
@@ -1115,6 +1148,10 @@ declare namespace GuardDuty {
|
|
1115
1148
|
* Describes whether any Kubernetes logs are enabled as data sources.
|
1116
1149
|
*/
|
1117
1150
|
Kubernetes?: KubernetesDataSourceFreeTrial;
|
1151
|
+
/**
|
1152
|
+
* Describes whether Malware Protection is enabled as a data source.
|
1153
|
+
*/
|
1154
|
+
MalwareProtection?: MalwareProtectionDataSourceFreeTrial;
|
1118
1155
|
}
|
1119
1156
|
export interface DeclineInvitationsRequest {
|
1120
1157
|
/**
|
@@ -1222,6 +1259,38 @@ declare namespace GuardDuty {
|
|
1222
1259
|
}
|
1223
1260
|
export interface DeleteThreatIntelSetResponse {
|
1224
1261
|
}
|
1262
|
+
export interface DescribeMalwareScansRequest {
|
1263
|
+
/**
|
1264
|
+
* The unique ID of the detector that the request is associated with.
|
1265
|
+
*/
|
1266
|
+
DetectorId: DetectorId;
|
1267
|
+
/**
|
1268
|
+
* You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action, fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
|
1269
|
+
*/
|
1270
|
+
NextToken?: String;
|
1271
|
+
/**
|
1272
|
+
* You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 50. The maximum value is 50.
|
1273
|
+
*/
|
1274
|
+
MaxResults?: IntegerValueWithMax;
|
1275
|
+
/**
|
1276
|
+
* Represents the criteria to be used in the filter for describing scan entries.
|
1277
|
+
*/
|
1278
|
+
FilterCriteria?: FilterCriteria;
|
1279
|
+
/**
|
1280
|
+
* Represents the criteria used for sorting scan entries.
|
1281
|
+
*/
|
1282
|
+
SortCriteria?: SortCriteria;
|
1283
|
+
}
|
1284
|
+
export interface DescribeMalwareScansResponse {
|
1285
|
+
/**
|
1286
|
+
* Contains information about malware scans.
|
1287
|
+
*/
|
1288
|
+
Scans: Scans;
|
1289
|
+
/**
|
1290
|
+
* The pagination parameter to be used on the next list operation to retrieve more items.
|
1291
|
+
*/
|
1292
|
+
NextToken?: String;
|
1293
|
+
}
|
1225
1294
|
export interface DescribeOrganizationConfigurationRequest {
|
1226
1295
|
/**
|
1227
1296
|
* The ID of the detector to retrieve information about the delegated administrator from.
|
@@ -1364,6 +1433,125 @@ declare namespace GuardDuty {
|
|
1364
1433
|
Domain?: String;
|
1365
1434
|
}
|
1366
1435
|
export type Double = number;
|
1436
|
+
export type EbsSnapshotPreservation = "NO_RETENTION"|"RETENTION_WITH_FINDING"|string;
|
1437
|
+
export interface EbsVolumeDetails {
|
1438
|
+
/**
|
1439
|
+
* List of EBS volumes that were scanned.
|
1440
|
+
*/
|
1441
|
+
ScannedVolumeDetails?: VolumeDetails;
|
1442
|
+
/**
|
1443
|
+
* List of EBS volumes that were skipped from the malware scan.
|
1444
|
+
*/
|
1445
|
+
SkippedVolumeDetails?: VolumeDetails;
|
1446
|
+
}
|
1447
|
+
export interface EbsVolumeScanDetails {
|
1448
|
+
/**
|
1449
|
+
* Unique Id of the malware scan that generated the finding.
|
1450
|
+
*/
|
1451
|
+
ScanId?: String;
|
1452
|
+
/**
|
1453
|
+
* Returns the start date and time of the malware scan.
|
1454
|
+
*/
|
1455
|
+
ScanStartedAt?: Timestamp;
|
1456
|
+
/**
|
1457
|
+
* Returns the completion date and time of the malware scan.
|
1458
|
+
*/
|
1459
|
+
ScanCompletedAt?: Timestamp;
|
1460
|
+
/**
|
1461
|
+
* GuardDuty finding ID that triggered a malware scan.
|
1462
|
+
*/
|
1463
|
+
TriggerFindingId?: String;
|
1464
|
+
/**
|
1465
|
+
* Contains list of threat intelligence sources used to detect threats.
|
1466
|
+
*/
|
1467
|
+
Sources?: Sources;
|
1468
|
+
/**
|
1469
|
+
* Contains a complete view providing malware scan result details.
|
1470
|
+
*/
|
1471
|
+
ScanDetections?: ScanDetections;
|
1472
|
+
}
|
1473
|
+
export interface EbsVolumesResult {
|
1474
|
+
/**
|
1475
|
+
* Describes whether scanning EBS volumes is enabled as a data source.
|
1476
|
+
*/
|
1477
|
+
Status?: DataSourceStatus;
|
1478
|
+
}
|
1479
|
+
export interface EcsClusterDetails {
|
1480
|
+
/**
|
1481
|
+
* The name of the ECS Cluster.
|
1482
|
+
*/
|
1483
|
+
Name?: String;
|
1484
|
+
/**
|
1485
|
+
* The Amazon Resource Name (ARN) that identifies the cluster.
|
1486
|
+
*/
|
1487
|
+
Arn?: String;
|
1488
|
+
/**
|
1489
|
+
* The status of the ECS cluster.
|
1490
|
+
*/
|
1491
|
+
Status?: String;
|
1492
|
+
/**
|
1493
|
+
* The number of services that are running on the cluster in an ACTIVE state.
|
1494
|
+
*/
|
1495
|
+
ActiveServicesCount?: Integer;
|
1496
|
+
/**
|
1497
|
+
* The number of container instances registered into the cluster.
|
1498
|
+
*/
|
1499
|
+
RegisteredContainerInstancesCount?: Integer;
|
1500
|
+
/**
|
1501
|
+
* The number of tasks in the cluster that are in the RUNNING state.
|
1502
|
+
*/
|
1503
|
+
RunningTasksCount?: Integer;
|
1504
|
+
/**
|
1505
|
+
* The tags of the ECS Cluster.
|
1506
|
+
*/
|
1507
|
+
Tags?: Tags;
|
1508
|
+
/**
|
1509
|
+
* Contains information about the details of the ECS Task.
|
1510
|
+
*/
|
1511
|
+
TaskDetails?: EcsTaskDetails;
|
1512
|
+
}
|
1513
|
+
export interface EcsTaskDetails {
|
1514
|
+
/**
|
1515
|
+
* The Amazon Resource Name (ARN) of the task.
|
1516
|
+
*/
|
1517
|
+
Arn?: String;
|
1518
|
+
/**
|
1519
|
+
* The ARN of the task definition that creates the task.
|
1520
|
+
*/
|
1521
|
+
DefinitionArn?: String;
|
1522
|
+
/**
|
1523
|
+
* The version counter for the task.
|
1524
|
+
*/
|
1525
|
+
Version?: String;
|
1526
|
+
/**
|
1527
|
+
* The Unix timestamp for the time when the task was created.
|
1528
|
+
*/
|
1529
|
+
TaskCreatedAt?: Timestamp;
|
1530
|
+
/**
|
1531
|
+
* The Unix timestamp for the time when the task started.
|
1532
|
+
*/
|
1533
|
+
StartedAt?: Timestamp;
|
1534
|
+
/**
|
1535
|
+
* Contains the tag specified when a task is started.
|
1536
|
+
*/
|
1537
|
+
StartedBy?: String;
|
1538
|
+
/**
|
1539
|
+
* The tags of the ECS Task.
|
1540
|
+
*/
|
1541
|
+
Tags?: Tags;
|
1542
|
+
/**
|
1543
|
+
* The list of data volume definitions for the task.
|
1544
|
+
*/
|
1545
|
+
Volumes?: Volumes;
|
1546
|
+
/**
|
1547
|
+
* The containers that's associated with the task.
|
1548
|
+
*/
|
1549
|
+
Containers?: Containers;
|
1550
|
+
/**
|
1551
|
+
* The name of the task group that's associated with the task.
|
1552
|
+
*/
|
1553
|
+
Group?: String;
|
1554
|
+
}
|
1367
1555
|
export interface EksClusterDetails {
|
1368
1556
|
/**
|
1369
1557
|
* EKS cluster name.
|
@@ -1408,7 +1596,39 @@ declare namespace GuardDuty {
|
|
1408
1596
|
ThreatIntelligenceDetails?: ThreatIntelligenceDetails;
|
1409
1597
|
}
|
1410
1598
|
export type Feedback = "USEFUL"|"NOT_USEFUL"|string;
|
1599
|
+
export type FilePaths = ScanFilePath[];
|
1411
1600
|
export type FilterAction = "NOOP"|"ARCHIVE"|string;
|
1601
|
+
export interface FilterCondition {
|
1602
|
+
/**
|
1603
|
+
* Represents an equal condition to be applied to a single field when querying for scan entries.
|
1604
|
+
*/
|
1605
|
+
EqualsValue?: NonEmptyString;
|
1606
|
+
/**
|
1607
|
+
* Represents a greater than condition to be applied to a single field when querying for scan entries.
|
1608
|
+
*/
|
1609
|
+
GreaterThan?: LongValue;
|
1610
|
+
/**
|
1611
|
+
* Represents a less than condition to be applied to a single field when querying for scan entries.
|
1612
|
+
*/
|
1613
|
+
LessThan?: LongValue;
|
1614
|
+
}
|
1615
|
+
export interface FilterCriteria {
|
1616
|
+
/**
|
1617
|
+
* Represents a condition that when matched will be added to the response of the operation.
|
1618
|
+
*/
|
1619
|
+
FilterCriterion?: FilterCriterionList;
|
1620
|
+
}
|
1621
|
+
export interface FilterCriterion {
|
1622
|
+
/**
|
1623
|
+
* An enum value representing possible scan properties to match with given scan entries.
|
1624
|
+
*/
|
1625
|
+
CriterionKey?: CriterionKey;
|
1626
|
+
/**
|
1627
|
+
* Contains information about the condition.
|
1628
|
+
*/
|
1629
|
+
FilterCondition?: FilterCondition;
|
1630
|
+
}
|
1631
|
+
export type FilterCriterionList = FilterCriterion[];
|
1412
1632
|
export type FilterDescription = string;
|
1413
1633
|
export type FilterName = string;
|
1414
1634
|
export type FilterNames = FilterName[];
|
@@ -1669,6 +1889,22 @@ declare namespace GuardDuty {
|
|
1669
1889
|
*/
|
1670
1890
|
InvitationsCount?: Integer;
|
1671
1891
|
}
|
1892
|
+
export interface GetMalwareScanSettingsRequest {
|
1893
|
+
/**
|
1894
|
+
* The unique ID of the detector that the scan setting is associated with.
|
1895
|
+
*/
|
1896
|
+
DetectorId: DetectorId;
|
1897
|
+
}
|
1898
|
+
export interface GetMalwareScanSettingsResponse {
|
1899
|
+
/**
|
1900
|
+
* Represents the criteria to be used in the filter for scanning resources.
|
1901
|
+
*/
|
1902
|
+
ScanResourceCriteria?: ScanResourceCriteria;
|
1903
|
+
/**
|
1904
|
+
* An enum value representing possible snapshot preservations.
|
1905
|
+
*/
|
1906
|
+
EbsSnapshotPreservation?: EbsSnapshotPreservation;
|
1907
|
+
}
|
1672
1908
|
export interface GetMasterAccountRequest {
|
1673
1909
|
/**
|
1674
1910
|
* The unique ID of the detector of the GuardDuty member account.
|
@@ -1811,6 +2047,20 @@ declare namespace GuardDuty {
|
|
1811
2047
|
}
|
1812
2048
|
export type Groups = String[];
|
1813
2049
|
export type GuardDutyArn = string;
|
2050
|
+
export interface HighestSeverityThreatDetails {
|
2051
|
+
/**
|
2052
|
+
* Severity level of the highest severity threat detected.
|
2053
|
+
*/
|
2054
|
+
Severity?: String;
|
2055
|
+
/**
|
2056
|
+
* Threat name of the highest severity threat detected as part of the malware scan.
|
2057
|
+
*/
|
2058
|
+
ThreatName?: String;
|
2059
|
+
/**
|
2060
|
+
* Total number of infected files with the highest severity threat detected.
|
2061
|
+
*/
|
2062
|
+
Count?: Integer;
|
2063
|
+
}
|
1814
2064
|
export interface HostPath {
|
1815
2065
|
/**
|
1816
2066
|
* Path of the file or directory on the host that the volume maps to.
|
@@ -1827,6 +2077,7 @@ declare namespace GuardDuty {
|
|
1827
2077
|
*/
|
1828
2078
|
Id?: String;
|
1829
2079
|
}
|
2080
|
+
export type InstanceArn = string;
|
1830
2081
|
export interface InstanceDetails {
|
1831
2082
|
/**
|
1832
2083
|
* The Availability Zone of the EC2 instance.
|
@@ -1882,6 +2133,7 @@ declare namespace GuardDuty {
|
|
1882
2133
|
Tags?: Tags;
|
1883
2134
|
}
|
1884
2135
|
export type Integer = number;
|
2136
|
+
export type IntegerValueWithMax = number;
|
1885
2137
|
export interface Invitation {
|
1886
2138
|
/**
|
1887
2139
|
* The ID of the account that the invitation was sent from.
|
@@ -2286,6 +2538,30 @@ declare namespace GuardDuty {
|
|
2286
2538
|
}
|
2287
2539
|
export type Location = string;
|
2288
2540
|
export type Long = number;
|
2541
|
+
export type LongValue = number;
|
2542
|
+
export interface MalwareProtectionConfiguration {
|
2543
|
+
/**
|
2544
|
+
* Describes the configuration of Malware Protection for EC2 instances with findings.
|
2545
|
+
*/
|
2546
|
+
ScanEc2InstanceWithFindings?: ScanEc2InstanceWithFindings;
|
2547
|
+
}
|
2548
|
+
export interface MalwareProtectionConfigurationResult {
|
2549
|
+
/**
|
2550
|
+
* Describes the configuration of Malware Protection for EC2 instances with findings.
|
2551
|
+
*/
|
2552
|
+
ScanEc2InstanceWithFindings?: ScanEc2InstanceWithFindingsResult;
|
2553
|
+
/**
|
2554
|
+
* The GuardDuty Malware Protection service role.
|
2555
|
+
*/
|
2556
|
+
ServiceRole?: String;
|
2557
|
+
}
|
2558
|
+
export interface MalwareProtectionDataSourceFreeTrial {
|
2559
|
+
/**
|
2560
|
+
* Describes whether Malware Protection for EC2 instances with findings is enabled as a data source.
|
2561
|
+
*/
|
2562
|
+
ScanEc2InstanceWithFindings?: DataSourceFreeTrial;
|
2563
|
+
}
|
2564
|
+
export type MapEquals = ScanConditionPair[];
|
2289
2565
|
export interface Master {
|
2290
2566
|
/**
|
2291
2567
|
* The ID of the account used as the administrator account.
|
@@ -2426,6 +2702,7 @@ declare namespace GuardDuty {
|
|
2426
2702
|
VpcId?: String;
|
2427
2703
|
}
|
2428
2704
|
export type NetworkInterfaces = NetworkInterface[];
|
2705
|
+
export type NonEmptyString = string;
|
2429
2706
|
export type NotEquals = String[];
|
2430
2707
|
export type OrderBy = "ASC"|"DESC"|string;
|
2431
2708
|
export interface Organization {
|
@@ -2455,6 +2732,10 @@ declare namespace GuardDuty {
|
|
2455
2732
|
* Describes the configuration of Kubernetes data sources for new members of the organization.
|
2456
2733
|
*/
|
2457
2734
|
Kubernetes?: OrganizationKubernetesConfiguration;
|
2735
|
+
/**
|
2736
|
+
* Describes the configuration of Malware Protection for new members of the organization.
|
2737
|
+
*/
|
2738
|
+
MalwareProtection?: OrganizationMalwareProtectionConfiguration;
|
2458
2739
|
}
|
2459
2740
|
export interface OrganizationDataSourceConfigurationsResult {
|
2460
2741
|
/**
|
@@ -2465,6 +2746,22 @@ declare namespace GuardDuty {
|
|
2465
2746
|
* Describes the configuration of Kubernetes data sources.
|
2466
2747
|
*/
|
2467
2748
|
Kubernetes?: OrganizationKubernetesConfigurationResult;
|
2749
|
+
/**
|
2750
|
+
* Describes the configuration of Malware Protection data source for an organization.
|
2751
|
+
*/
|
2752
|
+
MalwareProtection?: OrganizationMalwareProtectionConfigurationResult;
|
2753
|
+
}
|
2754
|
+
export interface OrganizationEbsVolumes {
|
2755
|
+
/**
|
2756
|
+
* Whether scanning EBS volumes should be auto-enabled for new members joining the organization.
|
2757
|
+
*/
|
2758
|
+
AutoEnable?: Boolean;
|
2759
|
+
}
|
2760
|
+
export interface OrganizationEbsVolumesResult {
|
2761
|
+
/**
|
2762
|
+
* An object that contains the status of whether scanning EBS volumes should be auto-enabled for new members joining the organization.
|
2763
|
+
*/
|
2764
|
+
AutoEnable?: Boolean;
|
2468
2765
|
}
|
2469
2766
|
export interface OrganizationKubernetesAuditLogsConfiguration {
|
2470
2767
|
/**
|
@@ -2490,6 +2787,18 @@ declare namespace GuardDuty {
|
|
2490
2787
|
*/
|
2491
2788
|
AuditLogs: OrganizationKubernetesAuditLogsConfigurationResult;
|
2492
2789
|
}
|
2790
|
+
export interface OrganizationMalwareProtectionConfiguration {
|
2791
|
+
/**
|
2792
|
+
* Whether Malware Protection for EC2 instances with findings should be auto-enabled for new members joining the organization.
|
2793
|
+
*/
|
2794
|
+
ScanEc2InstanceWithFindings?: OrganizationScanEc2InstanceWithFindings;
|
2795
|
+
}
|
2796
|
+
export interface OrganizationMalwareProtectionConfigurationResult {
|
2797
|
+
/**
|
2798
|
+
* Describes the configuration for scanning EC2 instances with findings for an organization.
|
2799
|
+
*/
|
2800
|
+
ScanEc2InstanceWithFindings?: OrganizationScanEc2InstanceWithFindingsResult;
|
2801
|
+
}
|
2493
2802
|
export interface OrganizationS3LogsConfiguration {
|
2494
2803
|
/**
|
2495
2804
|
* A value that contains information on whether S3 data event logs will be enabled automatically as a data source for the organization.
|
@@ -2502,6 +2811,18 @@ declare namespace GuardDuty {
|
|
2502
2811
|
*/
|
2503
2812
|
AutoEnable: Boolean;
|
2504
2813
|
}
|
2814
|
+
export interface OrganizationScanEc2InstanceWithFindings {
|
2815
|
+
/**
|
2816
|
+
* Whether scanning EBS volumes should be auto-enabled for new members joining the organization.
|
2817
|
+
*/
|
2818
|
+
EbsVolumes?: OrganizationEbsVolumes;
|
2819
|
+
}
|
2820
|
+
export interface OrganizationScanEc2InstanceWithFindingsResult {
|
2821
|
+
/**
|
2822
|
+
* Describes the configuration for scanning EBS volumes for an organization.
|
2823
|
+
*/
|
2824
|
+
EbsVolumes?: OrganizationEbsVolumesResult;
|
2825
|
+
}
|
2505
2826
|
export interface Owner {
|
2506
2827
|
/**
|
2507
2828
|
* The canonical user ID of the bucket owner. For information about locating your canonical user ID see Finding Your Account Canonical User ID.
|
@@ -2543,6 +2864,7 @@ declare namespace GuardDuty {
|
|
2543
2864
|
RemoteIpDetails?: RemoteIpDetails;
|
2544
2865
|
}
|
2545
2866
|
export type PortProbeDetails = PortProbeDetail[];
|
2867
|
+
export type PositiveLong = number;
|
2546
2868
|
export interface PrivateIpAddressDetails {
|
2547
2869
|
/**
|
2548
2870
|
* The private DNS name of the EC2 instance.
|
@@ -2643,6 +2965,21 @@ declare namespace GuardDuty {
|
|
2643
2965
|
* The type of Amazon Web Services resource.
|
2644
2966
|
*/
|
2645
2967
|
ResourceType?: String;
|
2968
|
+
/**
|
2969
|
+
* Contains list of scanned and skipped EBS volumes with details.
|
2970
|
+
*/
|
2971
|
+
EbsVolumeDetails?: EbsVolumeDetails;
|
2972
|
+
/**
|
2973
|
+
* Contains information about the details of the ECS Cluster.
|
2974
|
+
*/
|
2975
|
+
EcsClusterDetails?: EcsClusterDetails;
|
2976
|
+
ContainerDetails?: Container;
|
2977
|
+
}
|
2978
|
+
export interface ResourceDetails {
|
2979
|
+
/**
|
2980
|
+
* InstanceArn that was scanned in the scan entry.
|
2981
|
+
*/
|
2982
|
+
InstanceArn?: InstanceArn;
|
2646
2983
|
}
|
2647
2984
|
export type ResourceList = String[];
|
2648
2985
|
export interface S3BucketDetail {
|
@@ -2692,6 +3029,182 @@ declare namespace GuardDuty {
|
|
2692
3029
|
*/
|
2693
3030
|
Status: DataSourceStatus;
|
2694
3031
|
}
|
3032
|
+
export interface Scan {
|
3033
|
+
/**
|
3034
|
+
* The unique ID of the detector that the request is associated with.
|
3035
|
+
*/
|
3036
|
+
DetectorId?: DetectorId;
|
3037
|
+
/**
|
3038
|
+
* The unique detector ID of the administrator account that the request is associated with. Note that this value will be the same as the one used for DetectorId if the account is an administrator.
|
3039
|
+
*/
|
3040
|
+
AdminDetectorId?: DetectorId;
|
3041
|
+
/**
|
3042
|
+
* The unique scan ID associated with a scan entry.
|
3043
|
+
*/
|
3044
|
+
ScanId?: NonEmptyString;
|
3045
|
+
/**
|
3046
|
+
* An enum value representing possible scan statuses.
|
3047
|
+
*/
|
3048
|
+
ScanStatus?: ScanStatus;
|
3049
|
+
/**
|
3050
|
+
* Represents the reason for FAILED scan status.
|
3051
|
+
*/
|
3052
|
+
FailureReason?: NonEmptyString;
|
3053
|
+
/**
|
3054
|
+
* The timestamp of when the scan was triggered.
|
3055
|
+
*/
|
3056
|
+
ScanStartTime?: Timestamp;
|
3057
|
+
/**
|
3058
|
+
* The timestamp of when the scan was finished.
|
3059
|
+
*/
|
3060
|
+
ScanEndTime?: Timestamp;
|
3061
|
+
/**
|
3062
|
+
* Represents the reason the scan was triggered.
|
3063
|
+
*/
|
3064
|
+
TriggerDetails?: TriggerDetails;
|
3065
|
+
/**
|
3066
|
+
* Represents the resources that were scanned in the scan entry.
|
3067
|
+
*/
|
3068
|
+
ResourceDetails?: ResourceDetails;
|
3069
|
+
/**
|
3070
|
+
* Represents the result of the scan.
|
3071
|
+
*/
|
3072
|
+
ScanResultDetails?: ScanResultDetails;
|
3073
|
+
/**
|
3074
|
+
* The ID for the account that belongs to the scan.
|
3075
|
+
*/
|
3076
|
+
AccountId?: AccountId;
|
3077
|
+
/**
|
3078
|
+
* Represents total bytes that were scanned.
|
3079
|
+
*/
|
3080
|
+
TotalBytes?: PositiveLong;
|
3081
|
+
/**
|
3082
|
+
* Represents the number of files that were scanned.
|
3083
|
+
*/
|
3084
|
+
FileCount?: PositiveLong;
|
3085
|
+
/**
|
3086
|
+
* List of volumes that were attached to the original instance to be scanned.
|
3087
|
+
*/
|
3088
|
+
AttachedVolumes?: VolumeDetails;
|
3089
|
+
}
|
3090
|
+
export interface ScanCondition {
|
3091
|
+
/**
|
3092
|
+
* Represents an mapEqual condition to be applied to a single field when triggering for malware scan.
|
3093
|
+
*/
|
3094
|
+
MapEquals: MapEquals;
|
3095
|
+
}
|
3096
|
+
export interface ScanConditionPair {
|
3097
|
+
/**
|
3098
|
+
* Represents key in the map condition.
|
3099
|
+
*/
|
3100
|
+
Key: TagKey;
|
3101
|
+
/**
|
3102
|
+
* Represents optional value in the map condition. If not specified, only key will be matched.
|
3103
|
+
*/
|
3104
|
+
Value?: TagValue;
|
3105
|
+
}
|
3106
|
+
export type ScanCriterion = {[key: string]: ScanCondition};
|
3107
|
+
export type ScanCriterionKey = "EC2_INSTANCE_TAG"|string;
|
3108
|
+
export interface ScanDetections {
|
3109
|
+
/**
|
3110
|
+
* Total number of scanned files.
|
3111
|
+
*/
|
3112
|
+
ScannedItemCount?: ScannedItemCount;
|
3113
|
+
/**
|
3114
|
+
* Total number of infected files.
|
3115
|
+
*/
|
3116
|
+
ThreatsDetectedItemCount?: ThreatsDetectedItemCount;
|
3117
|
+
/**
|
3118
|
+
* Details of the highest severity threat detected during malware scan and number of infected files.
|
3119
|
+
*/
|
3120
|
+
HighestSeverityThreatDetails?: HighestSeverityThreatDetails;
|
3121
|
+
/**
|
3122
|
+
* Contains details about identified threats organized by threat name.
|
3123
|
+
*/
|
3124
|
+
ThreatDetectedByName?: ThreatDetectedByName;
|
3125
|
+
}
|
3126
|
+
export interface ScanEc2InstanceWithFindings {
|
3127
|
+
/**
|
3128
|
+
* Describes the configuration for scanning EBS volumes as data source.
|
3129
|
+
*/
|
3130
|
+
EbsVolumes?: Boolean;
|
3131
|
+
}
|
3132
|
+
export interface ScanEc2InstanceWithFindingsResult {
|
3133
|
+
/**
|
3134
|
+
* Describes the configuration of scanning EBS volumes as a data source.
|
3135
|
+
*/
|
3136
|
+
EbsVolumes?: EbsVolumesResult;
|
3137
|
+
}
|
3138
|
+
export interface ScanFilePath {
|
3139
|
+
/**
|
3140
|
+
* The file path of the infected file.
|
3141
|
+
*/
|
3142
|
+
FilePath?: String;
|
3143
|
+
/**
|
3144
|
+
* EBS volume Arn details of the infected file.
|
3145
|
+
*/
|
3146
|
+
VolumeArn?: String;
|
3147
|
+
/**
|
3148
|
+
* The hash value of the infected file.
|
3149
|
+
*/
|
3150
|
+
Hash?: String;
|
3151
|
+
/**
|
3152
|
+
* File name of the infected file.
|
3153
|
+
*/
|
3154
|
+
FileName?: String;
|
3155
|
+
}
|
3156
|
+
export interface ScanResourceCriteria {
|
3157
|
+
/**
|
3158
|
+
* Represents condition that when matched will allow a malware scan for a certain resource.
|
3159
|
+
*/
|
3160
|
+
Include?: ScanCriterion;
|
3161
|
+
/**
|
3162
|
+
* Represents condition that when matched will prevent a malware scan for a certain resource.
|
3163
|
+
*/
|
3164
|
+
Exclude?: ScanCriterion;
|
3165
|
+
}
|
3166
|
+
export type ScanResult = "CLEAN"|"INFECTED"|string;
|
3167
|
+
export interface ScanResultDetails {
|
3168
|
+
/**
|
3169
|
+
* An enum value representing possible scan results.
|
3170
|
+
*/
|
3171
|
+
ScanResult?: ScanResult;
|
3172
|
+
}
|
3173
|
+
export type ScanStatus = "RUNNING"|"COMPLETED"|"FAILED"|string;
|
3174
|
+
export interface ScanThreatName {
|
3175
|
+
/**
|
3176
|
+
* The name of the identified threat.
|
3177
|
+
*/
|
3178
|
+
Name?: String;
|
3179
|
+
/**
|
3180
|
+
* Severity of threat identified as part of the malware scan.
|
3181
|
+
*/
|
3182
|
+
Severity?: String;
|
3183
|
+
/**
|
3184
|
+
* Total number of files infected with given threat.
|
3185
|
+
*/
|
3186
|
+
ItemCount?: Integer;
|
3187
|
+
/**
|
3188
|
+
* List of infected files in EBS volume with details.
|
3189
|
+
*/
|
3190
|
+
FilePaths?: FilePaths;
|
3191
|
+
}
|
3192
|
+
export type ScanThreatNames = ScanThreatName[];
|
3193
|
+
export interface ScannedItemCount {
|
3194
|
+
/**
|
3195
|
+
* Total GB of files scanned for malware.
|
3196
|
+
*/
|
3197
|
+
TotalGb?: Integer;
|
3198
|
+
/**
|
3199
|
+
* Number of files scanned.
|
3200
|
+
*/
|
3201
|
+
Files?: Integer;
|
3202
|
+
/**
|
3203
|
+
* Total number of scanned volumes.
|
3204
|
+
*/
|
3205
|
+
Volumes?: Integer;
|
3206
|
+
}
|
3207
|
+
export type Scans = Scan[];
|
2695
3208
|
export interface SecurityContext {
|
2696
3209
|
/**
|
2697
3210
|
* Whether the container is privileged.
|
@@ -2754,6 +3267,14 @@ declare namespace GuardDuty {
|
|
2754
3267
|
* Contains additional information about the generated finding.
|
2755
3268
|
*/
|
2756
3269
|
AdditionalInfo?: ServiceAdditionalInfo;
|
3270
|
+
/**
|
3271
|
+
* The name of the feature that generated a finding.
|
3272
|
+
*/
|
3273
|
+
FeatureName?: String;
|
3274
|
+
/**
|
3275
|
+
* Returns details from the malware scan that created a finding.
|
3276
|
+
*/
|
3277
|
+
EbsVolumeScanDetails?: EbsVolumeScanDetails;
|
2757
3278
|
}
|
2758
3279
|
export interface ServiceAdditionalInfo {
|
2759
3280
|
/**
|
@@ -2776,6 +3297,7 @@ declare namespace GuardDuty {
|
|
2776
3297
|
OrderBy?: OrderBy;
|
2777
3298
|
}
|
2778
3299
|
export type SourceIps = String[];
|
3300
|
+
export type Sources = String[];
|
2779
3301
|
export interface StartMonitoringMembersRequest {
|
2780
3302
|
/**
|
2781
3303
|
* The unique ID of the detector of the GuardDuty administrator account associated with the member accounts to monitor.
|
@@ -2836,6 +3358,24 @@ declare namespace GuardDuty {
|
|
2836
3358
|
}
|
2837
3359
|
export type TagValue = string;
|
2838
3360
|
export type Tags = Tag[];
|
3361
|
+
export interface ThreatDetectedByName {
|
3362
|
+
/**
|
3363
|
+
* Total number of infected files identified.
|
3364
|
+
*/
|
3365
|
+
ItemCount?: Integer;
|
3366
|
+
/**
|
3367
|
+
* Total number of unique threats by name identified, as part of the malware scan.
|
3368
|
+
*/
|
3369
|
+
UniqueThreatNameCount?: Integer;
|
3370
|
+
/**
|
3371
|
+
* Flag to determine if the finding contains every single infected file-path and/or every threat.
|
3372
|
+
*/
|
3373
|
+
Shortened?: Boolean;
|
3374
|
+
/**
|
3375
|
+
* List of identified threats with details, organized by threat name.
|
3376
|
+
*/
|
3377
|
+
ThreatNames?: ScanThreatNames;
|
3378
|
+
}
|
2839
3379
|
export type ThreatIntelSetFormat = "TXT"|"STIX"|"OTX_CSV"|"ALIEN_VAULT"|"PROOF_POINT"|"FIRE_EYE"|string;
|
2840
3380
|
export type ThreatIntelSetIds = String[];
|
2841
3381
|
export type ThreatIntelSetStatus = "INACTIVE"|"ACTIVATING"|"ACTIVE"|"DEACTIVATING"|"ERROR"|"DELETE_PENDING"|"DELETED"|string;
|
@@ -2851,6 +3391,12 @@ declare namespace GuardDuty {
|
|
2851
3391
|
}
|
2852
3392
|
export type ThreatIntelligenceDetails = ThreatIntelligenceDetail[];
|
2853
3393
|
export type ThreatNames = String[];
|
3394
|
+
export interface ThreatsDetectedItemCount {
|
3395
|
+
/**
|
3396
|
+
* Total number of infected files.
|
3397
|
+
*/
|
3398
|
+
Files?: Integer;
|
3399
|
+
}
|
2854
3400
|
export type Timestamp = Date;
|
2855
3401
|
export interface Total {
|
2856
3402
|
/**
|
@@ -2862,6 +3408,16 @@ declare namespace GuardDuty {
|
|
2862
3408
|
*/
|
2863
3409
|
Unit?: String;
|
2864
3410
|
}
|
3411
|
+
export interface TriggerDetails {
|
3412
|
+
/**
|
3413
|
+
* The ID of the GuardDuty finding that triggered the BirdDog scan.
|
3414
|
+
*/
|
3415
|
+
GuardDutyFindingId?: NonEmptyString;
|
3416
|
+
/**
|
3417
|
+
* The description of the scan trigger.
|
3418
|
+
*/
|
3419
|
+
Description?: NonEmptyString;
|
3420
|
+
}
|
2865
3421
|
export interface UnarchiveFindingsRequest {
|
2866
3422
|
/**
|
2867
3423
|
* The ID of the detector associated with the findings to unarchive.
|
@@ -2993,6 +3549,22 @@ declare namespace GuardDuty {
|
|
2993
3549
|
}
|
2994
3550
|
export interface UpdateIPSetResponse {
|
2995
3551
|
}
|
3552
|
+
export interface UpdateMalwareScanSettingsRequest {
|
3553
|
+
/**
|
3554
|
+
* The unique ID of the detector that specifies the GuardDuty service where you want to update scan settings.
|
3555
|
+
*/
|
3556
|
+
DetectorId: DetectorId;
|
3557
|
+
/**
|
3558
|
+
* Represents the criteria to be used in the filter for selecting resources to scan.
|
3559
|
+
*/
|
3560
|
+
ScanResourceCriteria?: ScanResourceCriteria;
|
3561
|
+
/**
|
3562
|
+
* An enum value representing possible snapshot preservations.
|
3563
|
+
*/
|
3564
|
+
EbsSnapshotPreservation?: EbsSnapshotPreservation;
|
3565
|
+
}
|
3566
|
+
export interface UpdateMalwareScanSettingsResponse {
|
3567
|
+
}
|
2996
3568
|
export interface UpdateMemberDetectorsRequest {
|
2997
3569
|
/**
|
2998
3570
|
* The detector ID of the administrator account.
|
@@ -3145,6 +3717,37 @@ declare namespace GuardDuty {
|
|
3145
3717
|
*/
|
3146
3718
|
HostPath?: HostPath;
|
3147
3719
|
}
|
3720
|
+
export interface VolumeDetail {
|
3721
|
+
/**
|
3722
|
+
* EBS volume Arn information.
|
3723
|
+
*/
|
3724
|
+
VolumeArn?: String;
|
3725
|
+
/**
|
3726
|
+
* The EBS volume type.
|
3727
|
+
*/
|
3728
|
+
VolumeType?: String;
|
3729
|
+
/**
|
3730
|
+
* The device name for the EBS volume.
|
3731
|
+
*/
|
3732
|
+
DeviceName?: String;
|
3733
|
+
/**
|
3734
|
+
* EBS volume size in GB.
|
3735
|
+
*/
|
3736
|
+
VolumeSizeInGB?: Integer;
|
3737
|
+
/**
|
3738
|
+
* EBS volume encryption type.
|
3739
|
+
*/
|
3740
|
+
EncryptionType?: String;
|
3741
|
+
/**
|
3742
|
+
* Snapshot Arn of the EBS volume.
|
3743
|
+
*/
|
3744
|
+
SnapshotArn?: String;
|
3745
|
+
/**
|
3746
|
+
* KMS key Arn used to encrypt the EBS volume.
|
3747
|
+
*/
|
3748
|
+
KmsKeyArn?: String;
|
3749
|
+
}
|
3750
|
+
export type VolumeDetails = VolumeDetail[];
|
3148
3751
|
export interface VolumeMount {
|
3149
3752
|
/**
|
3150
3753
|
* Volume mount name.
|