cdk-lambda-subminute 2.0.359 → 2.0.361

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (32) hide show
  1. package/.jsii +16 -3
  2. package/lib/cdk-lambda-subminute.js +3 -3
  3. package/node_modules/aws-sdk/README.md +1 -1
  4. package/node_modules/aws-sdk/apis/ec2-2016-11-15.min.json +12 -0
  5. package/node_modules/aws-sdk/apis/inspector2-2020-06-08.min.json +1129 -167
  6. package/node_modules/aws-sdk/apis/inspector2-2020-06-08.paginators.json +30 -0
  7. package/node_modules/aws-sdk/apis/outposts-2019-12-03.min.json +0 -1
  8. package/node_modules/aws-sdk/apis/rds-2014-10-31.min.json +334 -196
  9. package/node_modules/aws-sdk/apis/s3-2006-03-01.min.json +59 -49
  10. package/node_modules/aws-sdk/apis/storagegateway-2013-06-30.min.json +3 -1
  11. package/node_modules/aws-sdk/clients/ec2.d.ts +20 -4
  12. package/node_modules/aws-sdk/clients/ecs.d.ts +9 -6
  13. package/node_modules/aws-sdk/clients/inspector2.d.ts +1169 -28
  14. package/node_modules/aws-sdk/clients/outposts.d.ts +1 -1
  15. package/node_modules/aws-sdk/clients/rds.d.ts +175 -5
  16. package/node_modules/aws-sdk/clients/s3.d.ts +11 -2
  17. package/node_modules/aws-sdk/clients/storagegateway.d.ts +16 -8
  18. package/node_modules/aws-sdk/dist/aws-sdk-core-react-native.js +1 -1
  19. package/node_modules/aws-sdk/dist/aws-sdk-react-native.js +55 -20
  20. package/node_modules/aws-sdk/dist/aws-sdk.js +436 -249
  21. package/node_modules/aws-sdk/dist/aws-sdk.min.js +76 -76
  22. package/node_modules/aws-sdk/dist/xml2js.js +22 -12
  23. package/node_modules/aws-sdk/lib/core.js +1 -1
  24. package/node_modules/aws-sdk/lib/services/s3.js +25 -0
  25. package/node_modules/aws-sdk/package.json +2 -2
  26. package/node_modules/aws-sdk/scripts/lib/set-s3-expires-string.js +53 -0
  27. package/node_modules/aws-sdk/scripts/region-checker/allowlist.js +9 -9
  28. package/node_modules/aws-sdk/scripts/translate-api +2 -1
  29. package/node_modules/xml2js/lib/parser.js +22 -12
  30. package/node_modules/xml2js/lib/xml2js.bc.js +28337 -0
  31. package/node_modules/xml2js/package.json +3 -3
  32. package/package.json +3 -3
@@ -83,6 +83,14 @@ declare class Inspector2 extends Service {
83
83
  * Cancels a software bill of materials (SBOM) report.
84
84
  */
85
85
  cancelSbomExport(callback?: (err: AWSError, data: Inspector2.Types.CancelSbomExportResponse) => void): Request<Inspector2.Types.CancelSbomExportResponse, AWSError>;
86
+ /**
87
+ * Creates a CIS scan configuration.
88
+ */
89
+ createCisScanConfiguration(params: Inspector2.Types.CreateCisScanConfigurationRequest, callback?: (err: AWSError, data: Inspector2.Types.CreateCisScanConfigurationResponse) => void): Request<Inspector2.Types.CreateCisScanConfigurationResponse, AWSError>;
90
+ /**
91
+ * Creates a CIS scan configuration.
92
+ */
93
+ createCisScanConfiguration(callback?: (err: AWSError, data: Inspector2.Types.CreateCisScanConfigurationResponse) => void): Request<Inspector2.Types.CreateCisScanConfigurationResponse, AWSError>;
86
94
  /**
87
95
  * Creates a filter resource using specified filter criteria. When the filter action is set to SUPPRESS this action creates a suppression rule.
88
96
  */
@@ -107,6 +115,14 @@ declare class Inspector2 extends Service {
107
115
  * Creates a software bill of materials (SBOM) report.
108
116
  */
109
117
  createSbomExport(callback?: (err: AWSError, data: Inspector2.Types.CreateSbomExportResponse) => void): Request<Inspector2.Types.CreateSbomExportResponse, AWSError>;
118
+ /**
119
+ * Deletes a CIS scan configuration.
120
+ */
121
+ deleteCisScanConfiguration(params: Inspector2.Types.DeleteCisScanConfigurationRequest, callback?: (err: AWSError, data: Inspector2.Types.DeleteCisScanConfigurationResponse) => void): Request<Inspector2.Types.DeleteCisScanConfigurationResponse, AWSError>;
122
+ /**
123
+ * Deletes a CIS scan configuration.
124
+ */
125
+ deleteCisScanConfiguration(callback?: (err: AWSError, data: Inspector2.Types.DeleteCisScanConfigurationResponse) => void): Request<Inspector2.Types.DeleteCisScanConfigurationResponse, AWSError>;
110
126
  /**
111
127
  * Deletes a filter resource.
112
128
  */
@@ -163,6 +179,22 @@ declare class Inspector2 extends Service {
163
179
  * Enables the Amazon Inspector delegated administrator for your Organizations organization.
164
180
  */
165
181
  enableDelegatedAdminAccount(callback?: (err: AWSError, data: Inspector2.Types.EnableDelegatedAdminAccountResponse) => void): Request<Inspector2.Types.EnableDelegatedAdminAccountResponse, AWSError>;
182
+ /**
183
+ * Retrieves a CIS scan report.
184
+ */
185
+ getCisScanReport(params: Inspector2.Types.GetCisScanReportRequest, callback?: (err: AWSError, data: Inspector2.Types.GetCisScanReportResponse) => void): Request<Inspector2.Types.GetCisScanReportResponse, AWSError>;
186
+ /**
187
+ * Retrieves a CIS scan report.
188
+ */
189
+ getCisScanReport(callback?: (err: AWSError, data: Inspector2.Types.GetCisScanReportResponse) => void): Request<Inspector2.Types.GetCisScanReportResponse, AWSError>;
190
+ /**
191
+ * Retrieves CIS scan result details.
192
+ */
193
+ getCisScanResultDetails(params: Inspector2.Types.GetCisScanResultDetailsRequest, callback?: (err: AWSError, data: Inspector2.Types.GetCisScanResultDetailsResponse) => void): Request<Inspector2.Types.GetCisScanResultDetailsResponse, AWSError>;
194
+ /**
195
+ * Retrieves CIS scan result details.
196
+ */
197
+ getCisScanResultDetails(callback?: (err: AWSError, data: Inspector2.Types.GetCisScanResultDetailsResponse) => void): Request<Inspector2.Types.GetCisScanResultDetailsResponse, AWSError>;
166
198
  /**
167
199
  * Retrieves setting configurations for Inspector scans.
168
200
  */
@@ -227,6 +259,38 @@ declare class Inspector2 extends Service {
227
259
  * Lists the permissions an account has to configure Amazon Inspector.
228
260
  */
229
261
  listAccountPermissions(callback?: (err: AWSError, data: Inspector2.Types.ListAccountPermissionsResponse) => void): Request<Inspector2.Types.ListAccountPermissionsResponse, AWSError>;
262
+ /**
263
+ * Lists CIS scan configurations.
264
+ */
265
+ listCisScanConfigurations(params: Inspector2.Types.ListCisScanConfigurationsRequest, callback?: (err: AWSError, data: Inspector2.Types.ListCisScanConfigurationsResponse) => void): Request<Inspector2.Types.ListCisScanConfigurationsResponse, AWSError>;
266
+ /**
267
+ * Lists CIS scan configurations.
268
+ */
269
+ listCisScanConfigurations(callback?: (err: AWSError, data: Inspector2.Types.ListCisScanConfigurationsResponse) => void): Request<Inspector2.Types.ListCisScanConfigurationsResponse, AWSError>;
270
+ /**
271
+ * Lists scan results aggregated by checks.
272
+ */
273
+ listCisScanResultsAggregatedByChecks(params: Inspector2.Types.ListCisScanResultsAggregatedByChecksRequest, callback?: (err: AWSError, data: Inspector2.Types.ListCisScanResultsAggregatedByChecksResponse) => void): Request<Inspector2.Types.ListCisScanResultsAggregatedByChecksResponse, AWSError>;
274
+ /**
275
+ * Lists scan results aggregated by checks.
276
+ */
277
+ listCisScanResultsAggregatedByChecks(callback?: (err: AWSError, data: Inspector2.Types.ListCisScanResultsAggregatedByChecksResponse) => void): Request<Inspector2.Types.ListCisScanResultsAggregatedByChecksResponse, AWSError>;
278
+ /**
279
+ * Lists scan results aggregated by a target resource.
280
+ */
281
+ listCisScanResultsAggregatedByTargetResource(params: Inspector2.Types.ListCisScanResultsAggregatedByTargetResourceRequest, callback?: (err: AWSError, data: Inspector2.Types.ListCisScanResultsAggregatedByTargetResourceResponse) => void): Request<Inspector2.Types.ListCisScanResultsAggregatedByTargetResourceResponse, AWSError>;
282
+ /**
283
+ * Lists scan results aggregated by a target resource.
284
+ */
285
+ listCisScanResultsAggregatedByTargetResource(callback?: (err: AWSError, data: Inspector2.Types.ListCisScanResultsAggregatedByTargetResourceResponse) => void): Request<Inspector2.Types.ListCisScanResultsAggregatedByTargetResourceResponse, AWSError>;
286
+ /**
287
+ * Returns a CIS scan list.
288
+ */
289
+ listCisScans(params: Inspector2.Types.ListCisScansRequest, callback?: (err: AWSError, data: Inspector2.Types.ListCisScansResponse) => void): Request<Inspector2.Types.ListCisScansResponse, AWSError>;
290
+ /**
291
+ * Returns a CIS scan list.
292
+ */
293
+ listCisScans(callback?: (err: AWSError, data: Inspector2.Types.ListCisScansResponse) => void): Request<Inspector2.Types.ListCisScansResponse, AWSError>;
230
294
  /**
231
295
  * Lists coverage details for you environment.
232
296
  */
@@ -315,6 +379,38 @@ declare class Inspector2 extends Service {
315
379
  * Lists Amazon Inspector coverage details for a specific vulnerability.
316
380
  */
317
381
  searchVulnerabilities(callback?: (err: AWSError, data: Inspector2.Types.SearchVulnerabilitiesResponse) => void): Request<Inspector2.Types.SearchVulnerabilitiesResponse, AWSError>;
382
+ /**
383
+ * Sends a CIS session health. This API is used by the Amazon Inspector SSM plugin to communicate with the Amazon Inspector service. The Amazon Inspector SSM plugin calls this API to start a CIS scan session for the scan ID supplied by the service.
384
+ */
385
+ sendCisSessionHealth(params: Inspector2.Types.SendCisSessionHealthRequest, callback?: (err: AWSError, data: Inspector2.Types.SendCisSessionHealthResponse) => void): Request<Inspector2.Types.SendCisSessionHealthResponse, AWSError>;
386
+ /**
387
+ * Sends a CIS session health. This API is used by the Amazon Inspector SSM plugin to communicate with the Amazon Inspector service. The Amazon Inspector SSM plugin calls this API to start a CIS scan session for the scan ID supplied by the service.
388
+ */
389
+ sendCisSessionHealth(callback?: (err: AWSError, data: Inspector2.Types.SendCisSessionHealthResponse) => void): Request<Inspector2.Types.SendCisSessionHealthResponse, AWSError>;
390
+ /**
391
+ * Sends a CIS session telemetry. This API is used by the Amazon Inspector SSM plugin to communicate with the Amazon Inspector service. The Amazon Inspector SSM plugin calls this API to start a CIS scan session for the scan ID supplied by the service.
392
+ */
393
+ sendCisSessionTelemetry(params: Inspector2.Types.SendCisSessionTelemetryRequest, callback?: (err: AWSError, data: Inspector2.Types.SendCisSessionTelemetryResponse) => void): Request<Inspector2.Types.SendCisSessionTelemetryResponse, AWSError>;
394
+ /**
395
+ * Sends a CIS session telemetry. This API is used by the Amazon Inspector SSM plugin to communicate with the Amazon Inspector service. The Amazon Inspector SSM plugin calls this API to start a CIS scan session for the scan ID supplied by the service.
396
+ */
397
+ sendCisSessionTelemetry(callback?: (err: AWSError, data: Inspector2.Types.SendCisSessionTelemetryResponse) => void): Request<Inspector2.Types.SendCisSessionTelemetryResponse, AWSError>;
398
+ /**
399
+ * Starts a CIS session. This API is used by the Amazon Inspector SSM plugin to communicate with the Amazon Inspector service. The Amazon Inspector SSM plugin calls this API to start a CIS scan session for the scan ID supplied by the service.
400
+ */
401
+ startCisSession(params: Inspector2.Types.StartCisSessionRequest, callback?: (err: AWSError, data: Inspector2.Types.StartCisSessionResponse) => void): Request<Inspector2.Types.StartCisSessionResponse, AWSError>;
402
+ /**
403
+ * Starts a CIS session. This API is used by the Amazon Inspector SSM plugin to communicate with the Amazon Inspector service. The Amazon Inspector SSM plugin calls this API to start a CIS scan session for the scan ID supplied by the service.
404
+ */
405
+ startCisSession(callback?: (err: AWSError, data: Inspector2.Types.StartCisSessionResponse) => void): Request<Inspector2.Types.StartCisSessionResponse, AWSError>;
406
+ /**
407
+ * Stops a CIS session. This API is used by the Amazon Inspector SSM plugin to communicate with the Amazon Inspector service. The Amazon Inspector SSM plugin calls this API to start a CIS scan session for the scan ID supplied by the service.
408
+ */
409
+ stopCisSession(params: Inspector2.Types.StopCisSessionRequest, callback?: (err: AWSError, data: Inspector2.Types.StopCisSessionResponse) => void): Request<Inspector2.Types.StopCisSessionResponse, AWSError>;
410
+ /**
411
+ * Stops a CIS session. This API is used by the Amazon Inspector SSM plugin to communicate with the Amazon Inspector service. The Amazon Inspector SSM plugin calls this API to start a CIS scan session for the scan ID supplied by the service.
412
+ */
413
+ stopCisSession(callback?: (err: AWSError, data: Inspector2.Types.StopCisSessionResponse) => void): Request<Inspector2.Types.StopCisSessionResponse, AWSError>;
318
414
  /**
319
415
  * Adds tags to a resource.
320
416
  */
@@ -331,6 +427,14 @@ declare class Inspector2 extends Service {
331
427
  * Removes tags from a resource.
332
428
  */
333
429
  untagResource(callback?: (err: AWSError, data: Inspector2.Types.UntagResourceResponse) => void): Request<Inspector2.Types.UntagResourceResponse, AWSError>;
430
+ /**
431
+ * Updates a CIS scan configuration.
432
+ */
433
+ updateCisScanConfiguration(params: Inspector2.Types.UpdateCisScanConfigurationRequest, callback?: (err: AWSError, data: Inspector2.Types.UpdateCisScanConfigurationResponse) => void): Request<Inspector2.Types.UpdateCisScanConfigurationResponse, AWSError>;
434
+ /**
435
+ * Updates a CIS scan configuration.
436
+ */
437
+ updateCisScanConfiguration(callback?: (err: AWSError, data: Inspector2.Types.UpdateCisScanConfigurationResponse) => void): Request<Inspector2.Types.UpdateCisScanConfigurationResponse, AWSError>;
334
438
  /**
335
439
  * Updates setting configurations for your Amazon Inspector account. When you use this API as an Amazon Inspector delegated administrator this updates the setting for all accounts you manage. Member accounts in an organization cannot update this setting.
336
440
  */
@@ -424,6 +528,7 @@ declare namespace Inspector2 {
424
528
  severityCounts?: SeverityCounts;
425
529
  }
426
530
  export type AccountId = string;
531
+ export type AccountIdFilterList = CisStringFilter[];
427
532
  export type AccountIdSet = AccountId[];
428
533
  export type AccountList = Account[];
429
534
  export type AccountSortBy = "CRITICAL"|"HIGH"|"ALL"|string;
@@ -901,6 +1006,8 @@ declare namespace Inspector2 {
901
1006
  */
902
1007
  failedAccountIds?: FailedMemberAccountEc2DeepInspectionStatusStateList;
903
1008
  }
1009
+ export type BenchmarkProfile = string;
1010
+ export type BenchmarkVersion = string;
904
1011
  export type Boolean = boolean;
905
1012
  export interface CancelFindingsReportRequest {
906
1013
  /**
@@ -926,6 +1033,443 @@ declare namespace Inspector2 {
926
1033
  */
927
1034
  reportId?: ReportId;
928
1035
  }
1036
+ export type CheckCount = number;
1037
+ export type CheckIdFilterList = CisStringFilter[];
1038
+ export type CisAccountIdList = AccountId[];
1039
+ export interface CisCheckAggregation {
1040
+ /**
1041
+ * The account ID for the CIS check.
1042
+ */
1043
+ accountId?: AccountId;
1044
+ /**
1045
+ * The description for the CIS check.
1046
+ */
1047
+ checkDescription?: String;
1048
+ /**
1049
+ * The check ID for the CIS check.
1050
+ */
1051
+ checkId?: String;
1052
+ /**
1053
+ * The CIS check level.
1054
+ */
1055
+ level?: CisSecurityLevel;
1056
+ /**
1057
+ * The CIS check platform.
1058
+ */
1059
+ platform?: String;
1060
+ /**
1061
+ * The scan ARN for the CIS check scan ARN.
1062
+ */
1063
+ scanArn: CisScanArn;
1064
+ /**
1065
+ * The CIS check status counts.
1066
+ */
1067
+ statusCounts?: StatusCounts;
1068
+ /**
1069
+ * The CIS check title.
1070
+ */
1071
+ title?: String;
1072
+ }
1073
+ export type CisCheckAggregationList = CisCheckAggregation[];
1074
+ export interface CisDateFilter {
1075
+ /**
1076
+ * The CIS date filter's earliest scan start time.
1077
+ */
1078
+ earliestScanStartTime?: Timestamp;
1079
+ /**
1080
+ * The CIS date filter's latest scan start time.
1081
+ */
1082
+ latestScanStartTime?: Timestamp;
1083
+ }
1084
+ export type CisFindingArn = string;
1085
+ export type CisFindingArnFilterList = CisStringFilter[];
1086
+ export type CisFindingStatus = "PASSED"|"FAILED"|"SKIPPED"|string;
1087
+ export type CisFindingStatusComparison = "EQUALS"|string;
1088
+ export interface CisFindingStatusFilter {
1089
+ /**
1090
+ * The comparison value of the CIS finding status filter.
1091
+ */
1092
+ comparison: CisFindingStatusComparison;
1093
+ /**
1094
+ * The value of the CIS finding status filter.
1095
+ */
1096
+ value: CisFindingStatus;
1097
+ }
1098
+ export type CisFindingStatusFilterList = CisFindingStatusFilter[];
1099
+ export interface CisNumberFilter {
1100
+ /**
1101
+ * The CIS number filter's lower inclusive.
1102
+ */
1103
+ lowerInclusive?: Integer;
1104
+ /**
1105
+ * The CIS number filter's upper inclusive.
1106
+ */
1107
+ upperInclusive?: Integer;
1108
+ }
1109
+ export type CisNumberFilterList = CisNumberFilter[];
1110
+ export type CisOwnerId = string;
1111
+ export type CisReportStatus = "SUCCEEDED"|"FAILED"|"IN_PROGRESS"|string;
1112
+ export type CisResultStatus = "PASSED"|"FAILED"|"SKIPPED"|string;
1113
+ export type CisResultStatusComparison = "EQUALS"|string;
1114
+ export interface CisResultStatusFilter {
1115
+ /**
1116
+ * The comparison value of the CIS result status filter.
1117
+ */
1118
+ comparison: CisResultStatusComparison;
1119
+ /**
1120
+ * The value of the CIS result status filter.
1121
+ */
1122
+ value: CisResultStatus;
1123
+ }
1124
+ export type CisResultStatusFilterList = CisResultStatusFilter[];
1125
+ export type CisRuleDetails = Buffer|Uint8Array|Blob|string;
1126
+ export type CisRuleStatus = "FAILED"|"PASSED"|"NOT_EVALUATED"|"INFORMATIONAL"|"UNKNOWN"|"NOT_APPLICABLE"|"ERROR"|string;
1127
+ export interface CisScan {
1128
+ /**
1129
+ * The CIS scan's failed checks.
1130
+ */
1131
+ failedChecks?: Integer;
1132
+ /**
1133
+ * The CIS scan's ARN.
1134
+ */
1135
+ scanArn: CisScanArn;
1136
+ /**
1137
+ * The CIS scan's configuration ARN.
1138
+ */
1139
+ scanConfigurationArn: CisScanConfigurationArn;
1140
+ /**
1141
+ * The CIS scan's date.
1142
+ */
1143
+ scanDate?: Timestamp;
1144
+ /**
1145
+ * The the name of the scan configuration that's associated with this scan.
1146
+ */
1147
+ scanName?: CisScanName;
1148
+ /**
1149
+ * The account or organization that schedules the CIS scan.
1150
+ */
1151
+ scheduledBy?: String;
1152
+ /**
1153
+ * The security level for the CIS scan. Security level refers to the Benchmark levels that CIS assigns to a profile.
1154
+ */
1155
+ securityLevel?: CisSecurityLevel;
1156
+ /**
1157
+ * The CIS scan's status.
1158
+ */
1159
+ status?: CisScanStatus;
1160
+ /**
1161
+ * The CIS scan's targets.
1162
+ */
1163
+ targets?: CisTargets;
1164
+ /**
1165
+ * The CIS scan's total checks.
1166
+ */
1167
+ totalChecks?: Integer;
1168
+ }
1169
+ export type CisScanArn = string;
1170
+ export type CisScanArnFilterList = CisStringFilter[];
1171
+ export interface CisScanConfiguration {
1172
+ /**
1173
+ * The CIS scan configuration's owner ID.
1174
+ */
1175
+ ownerId?: CisOwnerId;
1176
+ /**
1177
+ * The CIS scan configuration's scan configuration ARN.
1178
+ */
1179
+ scanConfigurationArn: CisScanConfigurationArn;
1180
+ /**
1181
+ * The name of the CIS scan configuration.
1182
+ */
1183
+ scanName?: CisScanName;
1184
+ /**
1185
+ * The CIS scan configuration's schedule.
1186
+ */
1187
+ schedule?: Schedule;
1188
+ /**
1189
+ * The CIS scan configuration's security level.
1190
+ */
1191
+ securityLevel?: CisSecurityLevel;
1192
+ /**
1193
+ * The CIS scan configuration's tags.
1194
+ */
1195
+ tags?: CisTagMap;
1196
+ /**
1197
+ * The CIS scan configuration's targets.
1198
+ */
1199
+ targets?: CisTargets;
1200
+ }
1201
+ export type CisScanConfigurationArn = string;
1202
+ export type CisScanConfigurationArnFilterList = CisStringFilter[];
1203
+ export type CisScanConfigurationList = CisScanConfiguration[];
1204
+ export type CisScanConfigurationsSortBy = "SCAN_NAME"|"SCAN_CONFIGURATION_ARN"|string;
1205
+ export type CisScanDateFilterList = CisDateFilter[];
1206
+ export type CisScanList = CisScan[];
1207
+ export type CisScanName = string;
1208
+ export type CisScanNameFilterList = CisStringFilter[];
1209
+ export interface CisScanResultDetails {
1210
+ /**
1211
+ * The CIS scan result details' account ID.
1212
+ */
1213
+ accountId?: AccountId;
1214
+ /**
1215
+ * The account ID that's associated with the CIS scan result details.
1216
+ */
1217
+ checkDescription?: String;
1218
+ /**
1219
+ * The CIS scan result details' check ID.
1220
+ */
1221
+ checkId?: String;
1222
+ /**
1223
+ * The CIS scan result details' finding ARN.
1224
+ */
1225
+ findingArn?: CisFindingArn;
1226
+ /**
1227
+ * The CIS scan result details' level.
1228
+ */
1229
+ level?: CisSecurityLevel;
1230
+ /**
1231
+ * The CIS scan result details' platform.
1232
+ */
1233
+ platform?: String;
1234
+ /**
1235
+ * The CIS scan result details' remediation.
1236
+ */
1237
+ remediation?: String;
1238
+ /**
1239
+ * The CIS scan result details' scan ARN.
1240
+ */
1241
+ scanArn: CisScanArn;
1242
+ /**
1243
+ * The CIS scan result details' status.
1244
+ */
1245
+ status?: CisFindingStatus;
1246
+ /**
1247
+ * The CIS scan result details' status reason.
1248
+ */
1249
+ statusReason?: String;
1250
+ /**
1251
+ * The CIS scan result details' target resource ID.
1252
+ */
1253
+ targetResourceId?: ResourceId;
1254
+ /**
1255
+ * The CIS scan result details' title.
1256
+ */
1257
+ title?: String;
1258
+ }
1259
+ export interface CisScanResultDetailsFilterCriteria {
1260
+ /**
1261
+ * The criteria's check ID filters.
1262
+ */
1263
+ checkIdFilters?: CheckIdFilterList;
1264
+ /**
1265
+ * The criteria's finding ARN filters.
1266
+ */
1267
+ findingArnFilters?: CisFindingArnFilterList;
1268
+ /**
1269
+ * The criteria's finding status filters.
1270
+ */
1271
+ findingStatusFilters?: CisFindingStatusFilterList;
1272
+ /**
1273
+ * The criteria's security level filters. . Security level refers to the Benchmark levels that CIS assigns to a profile.
1274
+ */
1275
+ securityLevelFilters?: CisSecurityLevelFilterList;
1276
+ /**
1277
+ * The criteria's title filters.
1278
+ */
1279
+ titleFilters?: TitleFilterList;
1280
+ }
1281
+ export type CisScanResultDetailsList = CisScanResultDetails[];
1282
+ export type CisScanResultDetailsSortBy = "CHECK_ID"|"STATUS"|string;
1283
+ export interface CisScanResultsAggregatedByChecksFilterCriteria {
1284
+ /**
1285
+ * The criteria's account ID filters.
1286
+ */
1287
+ accountIdFilters?: OneAccountIdFilterList;
1288
+ /**
1289
+ * The criteria's check ID filters.
1290
+ */
1291
+ checkIdFilters?: CheckIdFilterList;
1292
+ /**
1293
+ * The criteria's failed resources filters.
1294
+ */
1295
+ failedResourcesFilters?: CisNumberFilterList;
1296
+ /**
1297
+ * The criteria's platform filters.
1298
+ */
1299
+ platformFilters?: PlatformFilterList;
1300
+ /**
1301
+ * The criteria's security level filters.
1302
+ */
1303
+ securityLevelFilters?: CisSecurityLevelFilterList;
1304
+ /**
1305
+ * The criteria's title filters.
1306
+ */
1307
+ titleFilters?: TitleFilterList;
1308
+ }
1309
+ export type CisScanResultsAggregatedByChecksSortBy = "CHECK_ID"|"TITLE"|"PLATFORM"|"FAILED_COUNTS"|"SECURITY_LEVEL"|string;
1310
+ export interface CisScanResultsAggregatedByTargetResourceFilterCriteria {
1311
+ /**
1312
+ * The criteria's account ID filters.
1313
+ */
1314
+ accountIdFilters?: AccountIdFilterList;
1315
+ /**
1316
+ * The criteria's check ID filters.
1317
+ */
1318
+ checkIdFilters?: CheckIdFilterList;
1319
+ /**
1320
+ * The criteria's failed checks filters.
1321
+ */
1322
+ failedChecksFilters?: CisNumberFilterList;
1323
+ /**
1324
+ * The criteria's platform filters.
1325
+ */
1326
+ platformFilters?: PlatformFilterList;
1327
+ /**
1328
+ * The criteria's status filter.
1329
+ */
1330
+ statusFilters?: CisResultStatusFilterList;
1331
+ /**
1332
+ * The criteria's target resource ID filters.
1333
+ */
1334
+ targetResourceIdFilters?: ResourceIdFilterList;
1335
+ /**
1336
+ * The criteria's target resource tag filters.
1337
+ */
1338
+ targetResourceTagFilters?: ResourceTagFilterList;
1339
+ /**
1340
+ * The criteria's target status filters.
1341
+ */
1342
+ targetStatusFilters?: TargetStatusFilterList;
1343
+ /**
1344
+ * The criteria's target status reason filters.
1345
+ */
1346
+ targetStatusReasonFilters?: TargetStatusReasonFilterList;
1347
+ }
1348
+ export type CisScanResultsAggregatedByTargetResourceSortBy = "RESOURCE_ID"|"FAILED_COUNTS"|"ACCOUNT_ID"|"PLATFORM"|"TARGET_STATUS"|"TARGET_STATUS_REASON"|string;
1349
+ export type CisScanResultsMaxResults = number;
1350
+ export type CisScanStatus = "FAILED"|"COMPLETED"|"CANCELLED"|"IN_PROGRESS"|string;
1351
+ export type CisScanStatusComparison = "EQUALS"|string;
1352
+ export interface CisScanStatusFilter {
1353
+ /**
1354
+ * The filter comparison value.
1355
+ */
1356
+ comparison: CisScanStatusComparison;
1357
+ /**
1358
+ * The filter value.
1359
+ */
1360
+ value: CisScanStatus;
1361
+ }
1362
+ export type CisScanStatusFilterList = CisScanStatusFilter[];
1363
+ export type CisScheduledByFilterList = CisStringFilter[];
1364
+ export type CisSecurityLevel = "LEVEL_1"|"LEVEL_2"|string;
1365
+ export type CisSecurityLevelComparison = "EQUALS"|string;
1366
+ export interface CisSecurityLevelFilter {
1367
+ /**
1368
+ * The CIS security filter comparison value.
1369
+ */
1370
+ comparison: CisSecurityLevelComparison;
1371
+ /**
1372
+ * The CIS security filter value.
1373
+ */
1374
+ value: CisSecurityLevel;
1375
+ }
1376
+ export type CisSecurityLevelFilterList = CisSecurityLevelFilter[];
1377
+ export interface CisSessionMessage {
1378
+ /**
1379
+ * The CIS rule details for the CIS session message.
1380
+ */
1381
+ cisRuleDetails: CisRuleDetails;
1382
+ /**
1383
+ * The rule ID for the CIS session message.
1384
+ */
1385
+ ruleId: RuleId;
1386
+ /**
1387
+ * The status of the CIS session message.
1388
+ */
1389
+ status: CisRuleStatus;
1390
+ }
1391
+ export type CisSessionMessages = CisSessionMessage[];
1392
+ export type CisSortOrder = "ASC"|"DESC"|string;
1393
+ export type CisStringComparison = "EQUALS"|"PREFIX"|"NOT_EQUALS"|string;
1394
+ export interface CisStringFilter {
1395
+ /**
1396
+ * The comparison value of the CIS string filter.
1397
+ */
1398
+ comparison: CisStringComparison;
1399
+ /**
1400
+ * The value of the CIS string filter.
1401
+ */
1402
+ value: String;
1403
+ }
1404
+ export type CisTagMap = {[key: string]: MapValue};
1405
+ export interface CisTargetResourceAggregation {
1406
+ /**
1407
+ * The account ID for the CIS target resource.
1408
+ */
1409
+ accountId?: AccountId;
1410
+ /**
1411
+ * The platform for the CIS target resource.
1412
+ */
1413
+ platform?: String;
1414
+ /**
1415
+ * The scan ARN for the CIS target resource.
1416
+ */
1417
+ scanArn: CisScanArn;
1418
+ /**
1419
+ * The target resource status counts.
1420
+ */
1421
+ statusCounts?: StatusCounts;
1422
+ /**
1423
+ * The ID of the target resource.
1424
+ */
1425
+ targetResourceId?: ResourceId;
1426
+ /**
1427
+ * The tag for the target resource.
1428
+ */
1429
+ targetResourceTags?: TargetResourceTags;
1430
+ /**
1431
+ * The status of the target resource.
1432
+ */
1433
+ targetStatus?: CisTargetStatus;
1434
+ /**
1435
+ * The reason for the target resource.
1436
+ */
1437
+ targetStatusReason?: CisTargetStatusReason;
1438
+ }
1439
+ export type CisTargetResourceAggregationList = CisTargetResourceAggregation[];
1440
+ export type CisTargetStatus = "TIMED_OUT"|"CANCELLED"|"COMPLETED"|string;
1441
+ export type CisTargetStatusComparison = "EQUALS"|string;
1442
+ export interface CisTargetStatusFilter {
1443
+ /**
1444
+ * The comparison value of the CIS target status filter.
1445
+ */
1446
+ comparison: CisTargetStatusComparison;
1447
+ /**
1448
+ * The value of the CIS target status filter.
1449
+ */
1450
+ value: CisTargetStatus;
1451
+ }
1452
+ export type CisTargetStatusReason = "SCAN_IN_PROGRESS"|"UNSUPPORTED_OS"|"SSM_UNMANAGED"|string;
1453
+ export interface CisTargetStatusReasonFilter {
1454
+ /**
1455
+ * The comparison value of the CIS target status reason filter.
1456
+ */
1457
+ comparison: CisTargetStatusComparison;
1458
+ /**
1459
+ * The value of the CIS target status reason filter.
1460
+ */
1461
+ value: CisTargetStatusReason;
1462
+ }
1463
+ export interface CisTargets {
1464
+ /**
1465
+ * The CIS target account ids.
1466
+ */
1467
+ accountIds?: CisAccountIdList;
1468
+ /**
1469
+ * The CIS target resource tags.
1470
+ */
1471
+ targetResourceTags?: TargetResourceTags;
1472
+ }
929
1473
  export type CisaAction = string;
930
1474
  export interface CisaData {
931
1475
  /**
@@ -1049,6 +1593,20 @@ declare namespace Inspector2 {
1049
1593
  }
1050
1594
  export type Component = string;
1051
1595
  export type ComponentType = string;
1596
+ export interface ComputePlatform {
1597
+ /**
1598
+ * The compute platform product.
1599
+ */
1600
+ product?: Product;
1601
+ /**
1602
+ * The compute platform vendor.
1603
+ */
1604
+ vendor?: Vendor;
1605
+ /**
1606
+ * The compute platform version.
1607
+ */
1608
+ version?: PlatformVersion;
1609
+ }
1052
1610
  export interface Counts {
1053
1611
  /**
1054
1612
  * The number of resources.
@@ -1109,7 +1667,7 @@ declare namespace Inspector2 {
1109
1667
  */
1110
1668
  resourceId?: CoverageStringFilterList;
1111
1669
  /**
1112
- * An array of Amazon Web Services resource types to return coverage statistics for. The values can be AWS_EC2_INSTANCE, AWS_LAMBDA_FUNCTION or AWS_ECR_REPOSITORY.
1670
+ * An array of Amazon Web Services resource types to return coverage statistics for. The values can be AWS_EC2_INSTANCE, AWS_LAMBDA_FUNCTION, AWS_ECR_CONTAINER_IMAGE, AWS_ECR_REPOSITORY or AWS_ACCOUNT.
1113
1671
  */
1114
1672
  resourceType?: CoverageStringFilterList;
1115
1673
  /**
@@ -1186,6 +1744,44 @@ declare namespace Inspector2 {
1186
1744
  scanType: ScanType;
1187
1745
  }
1188
1746
  export type CoveredResources = CoveredResource[];
1747
+ export interface CreateCisScanConfigurationRequest {
1748
+ /**
1749
+ * The scan name for the CIS scan configuration.
1750
+ */
1751
+ scanName: CisScanName;
1752
+ /**
1753
+ * The schedule for the CIS scan configuration.
1754
+ */
1755
+ schedule: Schedule;
1756
+ /**
1757
+ * The security level for the CIS scan configuration. Security level refers to the Benchmark levels that CIS assigns to a profile.
1758
+ */
1759
+ securityLevel: CisSecurityLevel;
1760
+ /**
1761
+ * The tags for the CIS scan configuration.
1762
+ */
1763
+ tags?: CisTagMap;
1764
+ /**
1765
+ * The targets for the CIS scan configuration.
1766
+ */
1767
+ targets: CreateCisTargets;
1768
+ }
1769
+ export interface CreateCisScanConfigurationResponse {
1770
+ /**
1771
+ * The scan configuration ARN for the CIS scan configuration.
1772
+ */
1773
+ scanConfigurationArn?: CisScanConfigurationArn;
1774
+ }
1775
+ export interface CreateCisTargets {
1776
+ /**
1777
+ * The CIS target account ids.
1778
+ */
1779
+ accountIds: TargetAccountList;
1780
+ /**
1781
+ * The CIS target resource tags.
1782
+ */
1783
+ targetResourceTags: TargetResourceTags;
1784
+ }
1189
1785
  export interface CreateFilterRequest {
1190
1786
  /**
1191
1787
  * Defines the action that is to be applied to the findings that match the filter.
@@ -1339,6 +1935,12 @@ declare namespace Inspector2 {
1339
1935
  export type Cwe = string;
1340
1936
  export type CweList = NonEmptyString[];
1341
1937
  export type Cwes = Cwe[];
1938
+ export interface DailySchedule {
1939
+ /**
1940
+ * The schedule start time.
1941
+ */
1942
+ startTime: Time;
1943
+ }
1342
1944
  export interface DateFilter {
1343
1945
  /**
1344
1946
  * A timestamp representing the end of the time period filtered on.
@@ -1351,6 +1953,8 @@ declare namespace Inspector2 {
1351
1953
  }
1352
1954
  export type DateFilterList = DateFilter[];
1353
1955
  export type DateTimeTimestamp = Date;
1956
+ export type Day = "SUN"|"MON"|"TUE"|"WED"|"THU"|"FRI"|"SAT"|string;
1957
+ export type DaysList = Day[];
1354
1958
  export interface DelegatedAdmin {
1355
1959
  /**
1356
1960
  * The Amazon Web Services account ID of the Amazon Inspector delegated administrator for your organization.
@@ -1373,6 +1977,18 @@ declare namespace Inspector2 {
1373
1977
  }
1374
1978
  export type DelegatedAdminAccountList = DelegatedAdminAccount[];
1375
1979
  export type DelegatedAdminStatus = "ENABLED"|"DISABLE_IN_PROGRESS"|string;
1980
+ export interface DeleteCisScanConfigurationRequest {
1981
+ /**
1982
+ * The ARN of the CIS scan configuration.
1983
+ */
1984
+ scanConfigurationArn: CisScanConfigurationArn;
1985
+ }
1986
+ export interface DeleteCisScanConfigurationResponse {
1987
+ /**
1988
+ * The ARN of the CIS scan configuration.
1989
+ */
1990
+ scanConfigurationArn: CisScanConfigurationArn;
1991
+ }
1376
1992
  export interface DeleteFilterRequest {
1377
1993
  /**
1378
1994
  * The Amazon Resource Number (ARN) of the filter to be deleted.
@@ -2112,49 +2728,114 @@ declare namespace Inspector2 {
2112
2728
  */
2113
2729
  accountId: MeteringAccountId;
2114
2730
  /**
2115
- * Contains information about the Amazon Inspector free trial for an account.
2731
+ * Contains information about the Amazon Inspector free trial for an account.
2732
+ */
2733
+ freeTrialInfo: FreeTrialInfoList;
2734
+ }
2735
+ export type FreeTrialAccountInfoList = FreeTrialAccountInfo[];
2736
+ export interface FreeTrialInfo {
2737
+ /**
2738
+ * The date and time that the Amazon Inspector free trail ends for a given account.
2739
+ */
2740
+ end: Timestamp;
2741
+ /**
2742
+ * The date and time that the Amazon Inspector free trail started for a given account.
2743
+ */
2744
+ start: Timestamp;
2745
+ /**
2746
+ * The order to sort results by.
2747
+ */
2748
+ status: FreeTrialStatus;
2749
+ /**
2750
+ * The type of scan covered by the Amazon Inspector free trail.
2751
+ */
2752
+ type: FreeTrialType;
2753
+ }
2754
+ export interface FreeTrialInfoError {
2755
+ /**
2756
+ * The account associated with the Amazon Inspector free trial information.
2757
+ */
2758
+ accountId: MeteringAccountId;
2759
+ /**
2760
+ * The error code.
2761
+ */
2762
+ code: FreeTrialInfoErrorCode;
2763
+ /**
2764
+ * The error message returned.
2765
+ */
2766
+ message: String;
2767
+ }
2768
+ export type FreeTrialInfoErrorCode = "ACCESS_DENIED"|"INTERNAL_ERROR"|string;
2769
+ export type FreeTrialInfoErrorList = FreeTrialInfoError[];
2770
+ export type FreeTrialInfoList = FreeTrialInfo[];
2771
+ export type FreeTrialStatus = "ACTIVE"|"INACTIVE"|string;
2772
+ export type FreeTrialType = "EC2"|"ECR"|"LAMBDA"|"LAMBDA_CODE"|string;
2773
+ export type FunctionName = string;
2774
+ export interface GetCisScanReportRequest {
2775
+ /**
2776
+ * The scan ARN.
2777
+ */
2778
+ scanArn: CisScanArn;
2779
+ /**
2780
+ * The target accounts.
2781
+ */
2782
+ targetAccounts?: ReportTargetAccounts;
2783
+ }
2784
+ export interface GetCisScanReportResponse {
2785
+ /**
2786
+ * The status.
2787
+ */
2788
+ status?: CisReportStatus;
2789
+ /**
2790
+ * The URL where the CIS scan report PDF can be downloaded.
2791
+ */
2792
+ url?: String;
2793
+ }
2794
+ export type GetCisScanResultDetailsMaxResults = number;
2795
+ export interface GetCisScanResultDetailsRequest {
2796
+ /**
2797
+ * The account ID.
2798
+ */
2799
+ accountId: AccountId;
2800
+ /**
2801
+ * The filter criteria.
2802
+ */
2803
+ filterCriteria?: CisScanResultDetailsFilterCriteria;
2804
+ /**
2805
+ * The maximum number of CIS scan result details to be returned in a single page of results.
2116
2806
  */
2117
- freeTrialInfo: FreeTrialInfoList;
2118
- }
2119
- export type FreeTrialAccountInfoList = FreeTrialAccountInfo[];
2120
- export interface FreeTrialInfo {
2807
+ maxResults?: GetCisScanResultDetailsMaxResults;
2121
2808
  /**
2122
- * The date and time that the Amazon Inspector free trail ends for a given account.
2809
+ * The pagination token from a previous request that's used to retrieve the next page of results.
2123
2810
  */
2124
- end: Timestamp;
2811
+ nextToken?: NextToken;
2125
2812
  /**
2126
- * The date and time that the Amazon Inspector free trail started for a given account.
2813
+ * The scan ARN.
2127
2814
  */
2128
- start: Timestamp;
2815
+ scanArn: CisScanArn;
2129
2816
  /**
2130
- * The order to sort results by.
2817
+ * The sort by order.
2131
2818
  */
2132
- status: FreeTrialStatus;
2819
+ sortBy?: CisScanResultDetailsSortBy;
2133
2820
  /**
2134
- * The type of scan covered by the Amazon Inspector free trail.
2821
+ * The sort order.
2135
2822
  */
2136
- type: FreeTrialType;
2137
- }
2138
- export interface FreeTrialInfoError {
2823
+ sortOrder?: CisSortOrder;
2139
2824
  /**
2140
- * The account associated with the Amazon Inspector free trial information.
2825
+ * The target resource ID.
2141
2826
  */
2142
- accountId: MeteringAccountId;
2827
+ targetResourceId: ResourceId;
2828
+ }
2829
+ export interface GetCisScanResultDetailsResponse {
2143
2830
  /**
2144
- * The error code.
2831
+ * The pagination token from a previous request that's used to retrieve the next page of results.
2145
2832
  */
2146
- code: FreeTrialInfoErrorCode;
2833
+ nextToken?: NextToken;
2147
2834
  /**
2148
- * The error message returned.
2835
+ * The scan result details.
2149
2836
  */
2150
- message: String;
2837
+ scanResultDetails?: CisScanResultDetailsList;
2151
2838
  }
2152
- export type FreeTrialInfoErrorCode = "ACCESS_DENIED"|"INTERNAL_ERROR"|string;
2153
- export type FreeTrialInfoErrorList = FreeTrialInfoError[];
2154
- export type FreeTrialInfoList = FreeTrialInfo[];
2155
- export type FreeTrialStatus = "ACTIVE"|"INACTIVE"|string;
2156
- export type FreeTrialType = "EC2"|"ECR"|"LAMBDA"|"LAMBDA_CODE"|string;
2157
- export type FunctionName = string;
2158
2839
  export interface GetConfigurationRequest {
2159
2840
  }
2160
2841
  export interface GetConfigurationResponse {
@@ -2501,6 +3182,206 @@ declare namespace Inspector2 {
2501
3182
  */
2502
3183
  permissions: Permissions;
2503
3184
  }
3185
+ export interface ListCisScanConfigurationsFilterCriteria {
3186
+ /**
3187
+ * The list of scan configuration ARN filters.
3188
+ */
3189
+ scanConfigurationArnFilters?: CisScanConfigurationArnFilterList;
3190
+ /**
3191
+ * The list of scan name filters.
3192
+ */
3193
+ scanNameFilters?: CisScanNameFilterList;
3194
+ /**
3195
+ * The list of target resource tag filters.
3196
+ */
3197
+ targetResourceTagFilters?: ResourceTagFilterList;
3198
+ }
3199
+ export type ListCisScanConfigurationsMaxResults = number;
3200
+ export interface ListCisScanConfigurationsRequest {
3201
+ /**
3202
+ * The CIS scan configuration filter criteria.
3203
+ */
3204
+ filterCriteria?: ListCisScanConfigurationsFilterCriteria;
3205
+ /**
3206
+ * The maximum number of CIS scan configurations to be returned in a single page of results.
3207
+ */
3208
+ maxResults?: ListCisScanConfigurationsMaxResults;
3209
+ /**
3210
+ * The pagination token from a previous request that's used to retrieve the next page of results.
3211
+ */
3212
+ nextToken?: NextToken;
3213
+ /**
3214
+ * The CIS scan configuration sort by order.
3215
+ */
3216
+ sortBy?: CisScanConfigurationsSortBy;
3217
+ /**
3218
+ * The CIS scan configuration sort order order.
3219
+ */
3220
+ sortOrder?: CisSortOrder;
3221
+ }
3222
+ export interface ListCisScanConfigurationsResponse {
3223
+ /**
3224
+ * The pagination token from a previous request that's used to retrieve the next page of results.
3225
+ */
3226
+ nextToken?: NextToken;
3227
+ /**
3228
+ * The CIS scan configuration scan configurations.
3229
+ */
3230
+ scanConfigurations?: CisScanConfigurationList;
3231
+ }
3232
+ export interface ListCisScanResultsAggregatedByChecksRequest {
3233
+ /**
3234
+ * The filter criteria.
3235
+ */
3236
+ filterCriteria?: CisScanResultsAggregatedByChecksFilterCriteria;
3237
+ /**
3238
+ * The maximum number of scan results aggregated by checks to be returned in a single page of results.
3239
+ */
3240
+ maxResults?: CisScanResultsMaxResults;
3241
+ /**
3242
+ * The pagination token from a previous request that's used to retrieve the next page of results.
3243
+ */
3244
+ nextToken?: NextToken;
3245
+ /**
3246
+ * The scan ARN.
3247
+ */
3248
+ scanArn: CisScanArn;
3249
+ /**
3250
+ * The sort by order.
3251
+ */
3252
+ sortBy?: CisScanResultsAggregatedByChecksSortBy;
3253
+ /**
3254
+ * The sort order.
3255
+ */
3256
+ sortOrder?: CisSortOrder;
3257
+ }
3258
+ export interface ListCisScanResultsAggregatedByChecksResponse {
3259
+ /**
3260
+ * The check aggregations.
3261
+ */
3262
+ checkAggregations?: CisCheckAggregationList;
3263
+ /**
3264
+ * The pagination token from a previous request that's used to retrieve the next page of results.
3265
+ */
3266
+ nextToken?: NextToken;
3267
+ }
3268
+ export interface ListCisScanResultsAggregatedByTargetResourceRequest {
3269
+ /**
3270
+ * The filter criteria.
3271
+ */
3272
+ filterCriteria?: CisScanResultsAggregatedByTargetResourceFilterCriteria;
3273
+ /**
3274
+ * The maximum number of scan results aggregated by a target resource to be returned in a single page of results.
3275
+ */
3276
+ maxResults?: CisScanResultsMaxResults;
3277
+ /**
3278
+ * The pagination token from a previous request that's used to retrieve the next page of results.
3279
+ */
3280
+ nextToken?: NextToken;
3281
+ /**
3282
+ * The scan ARN.
3283
+ */
3284
+ scanArn: CisScanArn;
3285
+ /**
3286
+ * The sort by order.
3287
+ */
3288
+ sortBy?: CisScanResultsAggregatedByTargetResourceSortBy;
3289
+ /**
3290
+ * The sort order.
3291
+ */
3292
+ sortOrder?: CisSortOrder;
3293
+ }
3294
+ export interface ListCisScanResultsAggregatedByTargetResourceResponse {
3295
+ /**
3296
+ * The pagination token from a previous request that's used to retrieve the next page of results.
3297
+ */
3298
+ nextToken?: NextToken;
3299
+ /**
3300
+ * The resource aggregations.
3301
+ */
3302
+ targetResourceAggregations?: CisTargetResourceAggregationList;
3303
+ }
3304
+ export type ListCisScansDetailLevel = "ORGANIZATION"|"MEMBER"|string;
3305
+ export interface ListCisScansFilterCriteria {
3306
+ /**
3307
+ * The list of failed checks filters.
3308
+ */
3309
+ failedChecksFilters?: CisNumberFilterList;
3310
+ /**
3311
+ * The list of scan ARN filters.
3312
+ */
3313
+ scanArnFilters?: CisScanArnFilterList;
3314
+ /**
3315
+ * The list of scan at filters.
3316
+ */
3317
+ scanAtFilters?: CisScanDateFilterList;
3318
+ /**
3319
+ * The list of scan configuration ARN filters.
3320
+ */
3321
+ scanConfigurationArnFilters?: CisScanConfigurationArnFilterList;
3322
+ /**
3323
+ * The list of scan name filters.
3324
+ */
3325
+ scanNameFilters?: CisScanNameFilterList;
3326
+ /**
3327
+ * The list of scan status filters.
3328
+ */
3329
+ scanStatusFilters?: CisScanStatusFilterList;
3330
+ /**
3331
+ * The list of scheduled by filters.
3332
+ */
3333
+ scheduledByFilters?: CisScheduledByFilterList;
3334
+ /**
3335
+ * The list of target account ID filters.
3336
+ */
3337
+ targetAccountIdFilters?: AccountIdFilterList;
3338
+ /**
3339
+ * The list of target resource ID filters.
3340
+ */
3341
+ targetResourceIdFilters?: ResourceIdFilterList;
3342
+ /**
3343
+ * The list of target resource tag filters.
3344
+ */
3345
+ targetResourceTagFilters?: ResourceTagFilterList;
3346
+ }
3347
+ export type ListCisScansMaxResults = number;
3348
+ export interface ListCisScansRequest {
3349
+ /**
3350
+ * The detail applied to the CIS scan.
3351
+ */
3352
+ detailLevel?: ListCisScansDetailLevel;
3353
+ /**
3354
+ * The CIS scan filter criteria.
3355
+ */
3356
+ filterCriteria?: ListCisScansFilterCriteria;
3357
+ /**
3358
+ * The maximum number of results to be returned.
3359
+ */
3360
+ maxResults?: ListCisScansMaxResults;
3361
+ /**
3362
+ * The pagination token from a previous request that's used to retrieve the next page of results.
3363
+ */
3364
+ nextToken?: NextToken;
3365
+ /**
3366
+ * The CIS scans sort by order.
3367
+ */
3368
+ sortBy?: ListCisScansSortBy;
3369
+ /**
3370
+ * The CIS scans sort order.
3371
+ */
3372
+ sortOrder?: CisSortOrder;
3373
+ }
3374
+ export interface ListCisScansResponse {
3375
+ /**
3376
+ * The pagination token from a previous request that's used to retrieve the next page of results.
3377
+ */
3378
+ nextToken?: NextToken;
3379
+ /**
3380
+ * The CIS scans.
3381
+ */
3382
+ scans?: CisScanList;
3383
+ }
3384
+ export type ListCisScansSortBy = "STATUS"|"SCHEDULED_BY"|"SCAN_START_DATE"|"FAILED_CHECKS"|string;
2504
3385
  export type ListCoverageMaxResults = number;
2505
3386
  export interface ListCoverageRequest {
2506
3387
  /**
@@ -2799,6 +3680,16 @@ declare namespace Inspector2 {
2799
3680
  export type MemberList = Member[];
2800
3681
  export type MeteringAccountId = string;
2801
3682
  export type MonthlyCostEstimate = number;
3683
+ export interface MonthlySchedule {
3684
+ /**
3685
+ * The monthly schedule's day.
3686
+ */
3687
+ day: Day;
3688
+ /**
3689
+ * The monthly schedule's start time.
3690
+ */
3691
+ startTime: Time;
3692
+ }
2802
3693
  export interface NetworkPath {
2803
3694
  /**
2804
3695
  * The details on the steps in the network path.
@@ -2834,6 +3725,9 @@ declare namespace Inspector2 {
2834
3725
  upperInclusive?: Double;
2835
3726
  }
2836
3727
  export type NumberFilterList = NumberFilter[];
3728
+ export type OneAccountIdFilterList = CisStringFilter[];
3729
+ export interface OneTimeSchedule {
3730
+ }
2837
3731
  export type Operation = "ENABLE_SCANNING"|"DISABLE_SCANNING"|"ENABLE_REPOSITORY"|"DISABLE_REPOSITORY"|string;
2838
3732
  export type OwnerId = string;
2839
3733
  export interface PackageAggregation {
@@ -2956,6 +3850,8 @@ declare namespace Inspector2 {
2956
3850
  }
2957
3851
  export type Permissions = Permission[];
2958
3852
  export type Platform = string;
3853
+ export type PlatformFilterList = CisStringFilter[];
3854
+ export type PlatformVersion = string;
2959
3855
  export type Port = number;
2960
3856
  export interface PortRange {
2961
3857
  /**
@@ -2978,6 +3874,8 @@ declare namespace Inspector2 {
2978
3874
  endInclusive?: Port;
2979
3875
  }
2980
3876
  export type PortRangeFilterList = PortRangeFilter[];
3877
+ export type Product = string;
3878
+ export type Reason = string;
2981
3879
  export interface Recommendation {
2982
3880
  /**
2983
3881
  * The URL address to the CVE remediation recommendations.
@@ -3000,6 +3898,7 @@ declare namespace Inspector2 {
3000
3898
  }
3001
3899
  export type ReportFormat = "CSV"|"JSON"|string;
3002
3900
  export type ReportId = string;
3901
+ export type ReportTargetAccounts = AccountId[];
3003
3902
  export type ReportingErrorCode = "INTERNAL_ERROR"|"INVALID_PERMISSIONS"|"NO_FINDINGS_FOUND"|"BUCKET_NOT_FOUND"|"INCOMPATIBLE_BUCKET_REGION"|"MALFORMED_KMS_KEY"|string;
3004
3903
  export interface RepositoryAggregation {
3005
3904
  /**
@@ -3121,6 +4020,7 @@ declare namespace Inspector2 {
3121
4020
  resourceType?: ResourceStringFilterList;
3122
4021
  }
3123
4022
  export type ResourceId = string;
4023
+ export type ResourceIdFilterList = CisStringFilter[];
3124
4024
  export type ResourceList = Resource[];
3125
4025
  export type ResourceMapComparison = "EQUALS"|string;
3126
4026
  export interface ResourceMapFilter {
@@ -3200,8 +4100,10 @@ declare namespace Inspector2 {
3200
4100
  }
3201
4101
  export type ResourceStringFilterList = ResourceStringFilter[];
3202
4102
  export type ResourceStringInput = string;
4103
+ export type ResourceTagFilterList = TagFilter[];
3203
4104
  export type ResourceType = "AWS_EC2_INSTANCE"|"AWS_ECR_CONTAINER_IMAGE"|"AWS_ECR_REPOSITORY"|"AWS_LAMBDA_FUNCTION"|string;
3204
4105
  export type RiskScore = number;
4106
+ export type RuleId = string;
3205
4107
  export type Runtime = "NODEJS"|"NODEJS_12_X"|"NODEJS_14_X"|"NODEJS_16_X"|"JAVA_8"|"JAVA_8_AL2"|"JAVA_11"|"PYTHON_3_7"|"PYTHON_3_8"|"PYTHON_3_9"|"UNSUPPORTED"|"NODEJS_18_X"|"GO_1_X"|"JAVA_17"|"PYTHON_3_10"|string;
3206
4108
  export type SbomReportFormat = "CYCLONEDX_1_4"|"SPDX_2_3"|string;
3207
4109
  export interface ScanStatus {
@@ -3217,6 +4119,24 @@ declare namespace Inspector2 {
3217
4119
  export type ScanStatusCode = "ACTIVE"|"INACTIVE"|string;
3218
4120
  export type ScanStatusReason = "PENDING_INITIAL_SCAN"|"ACCESS_DENIED"|"INTERNAL_ERROR"|"UNMANAGED_EC2_INSTANCE"|"UNSUPPORTED_OS"|"SCAN_ELIGIBILITY_EXPIRED"|"RESOURCE_TERMINATED"|"SUCCESSFUL"|"NO_RESOURCES_FOUND"|"IMAGE_SIZE_EXCEEDED"|"SCAN_FREQUENCY_MANUAL"|"SCAN_FREQUENCY_SCAN_ON_PUSH"|"EC2_INSTANCE_STOPPED"|"PENDING_DISABLE"|"NO_INVENTORY"|"STALE_INVENTORY"|"EXCLUDED_BY_TAG"|"UNSUPPORTED_RUNTIME"|"UNSUPPORTED_MEDIA_TYPE"|"UNSUPPORTED_CONFIG_FILE"|"DEEP_INSPECTION_PACKAGE_COLLECTION_LIMIT_EXCEEDED"|"DEEP_INSPECTION_DAILY_SSM_INVENTORY_LIMIT_EXCEEDED"|"DEEP_INSPECTION_COLLECTION_TIME_LIMIT_EXCEEDED"|"DEEP_INSPECTION_NO_INVENTORY"|string;
3219
4121
  export type ScanType = "NETWORK"|"PACKAGE"|"CODE"|string;
4122
+ export interface Schedule {
4123
+ /**
4124
+ * The schedule's daily.
4125
+ */
4126
+ daily?: DailySchedule;
4127
+ /**
4128
+ * The schedule's monthly.
4129
+ */
4130
+ monthly?: MonthlySchedule;
4131
+ /**
4132
+ * The schedule's one time.
4133
+ */
4134
+ oneTime?: OneTimeSchedule;
4135
+ /**
4136
+ * The schedule's weekly.
4137
+ */
4138
+ weekly?: WeeklySchedule;
4139
+ }
3220
4140
  export interface SearchVulnerabilitiesFilterCriteria {
3221
4141
  /**
3222
4142
  * The IDs for specific vulnerabilities.
@@ -3245,6 +4165,34 @@ declare namespace Inspector2 {
3245
4165
  }
3246
4166
  export type SecurityGroupId = string;
3247
4167
  export type SecurityGroupIdList = SecurityGroupId[];
4168
+ export interface SendCisSessionHealthRequest {
4169
+ /**
4170
+ * A unique identifier for the scan job.
4171
+ */
4172
+ scanJobId: UUID;
4173
+ /**
4174
+ * The unique token that identifies the CIS session.
4175
+ */
4176
+ sessionToken: UUID;
4177
+ }
4178
+ export interface SendCisSessionHealthResponse {
4179
+ }
4180
+ export interface SendCisSessionTelemetryRequest {
4181
+ /**
4182
+ * The CIS session telemetry messages.
4183
+ */
4184
+ messages: CisSessionMessages;
4185
+ /**
4186
+ * A unique identifier for the scan job.
4187
+ */
4188
+ scanJobId: UUID;
4189
+ /**
4190
+ * The unique token that identifies the CIS session.
4191
+ */
4192
+ sessionToken: UUID;
4193
+ }
4194
+ export interface SendCisSessionTelemetryResponse {
4195
+ }
3248
4196
  export type Service = "EC2"|"ECR"|"LAMBDA"|string;
3249
4197
  export type Severity = "INFORMATIONAL"|"LOW"|"MEDIUM"|"HIGH"|"CRITICAL"|"UNTRIAGED"|string;
3250
4198
  export interface SeverityCounts {
@@ -3278,6 +4226,24 @@ declare namespace Inspector2 {
3278
4226
  export type SortField = "AWS_ACCOUNT_ID"|"FINDING_TYPE"|"SEVERITY"|"FIRST_OBSERVED_AT"|"LAST_OBSERVED_AT"|"FINDING_STATUS"|"RESOURCE_TYPE"|"ECR_IMAGE_PUSHED_AT"|"ECR_IMAGE_REPOSITORY_NAME"|"ECR_IMAGE_REGISTRY"|"NETWORK_PROTOCOL"|"COMPONENT_TYPE"|"VULNERABILITY_ID"|"VULNERABILITY_SOURCE"|"INSPECTOR_SCORE"|"VENDOR_SEVERITY"|"EPSS_SCORE"|string;
3279
4227
  export type SortOrder = "ASC"|"DESC"|string;
3280
4228
  export type SourceLayerHash = string;
4229
+ export interface StartCisSessionMessage {
4230
+ /**
4231
+ * The unique token that identifies the CIS session.
4232
+ */
4233
+ sessionToken: UUID;
4234
+ }
4235
+ export interface StartCisSessionRequest {
4236
+ /**
4237
+ * The start CIS session message.
4238
+ */
4239
+ message: StartCisSessionMessage;
4240
+ /**
4241
+ * A unique identifier for the scan job.
4242
+ */
4243
+ scanJobId: UUID;
4244
+ }
4245
+ export interface StartCisSessionResponse {
4246
+ }
3281
4247
  export interface State {
3282
4248
  /**
3283
4249
  * The error code explaining why the account failed to enable Amazon Inspector.
@@ -3293,6 +4259,20 @@ declare namespace Inspector2 {
3293
4259
  status: Status;
3294
4260
  }
3295
4261
  export type Status = "ENABLING"|"ENABLED"|"DISABLING"|"DISABLED"|"SUSPENDING"|"SUSPENDED"|string;
4262
+ export interface StatusCounts {
4263
+ /**
4264
+ * The number of checks that failed.
4265
+ */
4266
+ failed?: Integer;
4267
+ /**
4268
+ * The number of checks that passed.
4269
+ */
4270
+ passed?: Integer;
4271
+ /**
4272
+ * The number of checks that were skipped.
4273
+ */
4274
+ skipped?: Integer;
4275
+ }
3296
4276
  export interface Step {
3297
4277
  /**
3298
4278
  * The component ID.
@@ -3304,6 +4284,83 @@ declare namespace Inspector2 {
3304
4284
  componentType: ComponentType;
3305
4285
  }
3306
4286
  export type StepList = Step[];
4287
+ export interface StopCisMessageProgress {
4288
+ /**
4289
+ * The progress' error checks.
4290
+ */
4291
+ errorChecks?: CheckCount;
4292
+ /**
4293
+ * The progress' failed checks.
4294
+ */
4295
+ failedChecks?: CheckCount;
4296
+ /**
4297
+ * The progress' informational checks.
4298
+ */
4299
+ informationalChecks?: CheckCount;
4300
+ /**
4301
+ * The progress' not applicable checks.
4302
+ */
4303
+ notApplicableChecks?: CheckCount;
4304
+ /**
4305
+ * The progress' not evaluated checks.
4306
+ */
4307
+ notEvaluatedChecks?: CheckCount;
4308
+ /**
4309
+ * The progress' successful checks.
4310
+ */
4311
+ successfulChecks?: CheckCount;
4312
+ /**
4313
+ * The progress' total checks.
4314
+ */
4315
+ totalChecks?: CheckCount;
4316
+ /**
4317
+ * The progress' unknown checks.
4318
+ */
4319
+ unknownChecks?: CheckCount;
4320
+ }
4321
+ export interface StopCisSessionMessage {
4322
+ /**
4323
+ * The message benchmark profile.
4324
+ */
4325
+ benchmarkProfile?: BenchmarkProfile;
4326
+ /**
4327
+ * The message benchmark version.
4328
+ */
4329
+ benchmarkVersion?: BenchmarkVersion;
4330
+ /**
4331
+ * The message compute platform.
4332
+ */
4333
+ computePlatform?: ComputePlatform;
4334
+ /**
4335
+ * The progress of the message.
4336
+ */
4337
+ progress: StopCisMessageProgress;
4338
+ /**
4339
+ * The reason for the message.
4340
+ */
4341
+ reason?: Reason;
4342
+ /**
4343
+ * The status of the message.
4344
+ */
4345
+ status: StopCisSessionStatus;
4346
+ }
4347
+ export interface StopCisSessionRequest {
4348
+ /**
4349
+ * The stop CIS session message.
4350
+ */
4351
+ message: StopCisSessionMessage;
4352
+ /**
4353
+ * A unique identifier for the scan job.
4354
+ */
4355
+ scanJobId: UUID;
4356
+ /**
4357
+ * The unique token that identifies the CIS session.
4358
+ */
4359
+ sessionToken: UUID;
4360
+ }
4361
+ export interface StopCisSessionResponse {
4362
+ }
4363
+ export type StopCisSessionStatus = "SUCCESS"|"FAILED"|"INTERRUPTED"|"UNSUPPORTED_OS"|string;
3307
4364
  export type String = string;
3308
4365
  export type StringComparison = "EQUALS"|"PREFIX"|"NOT_EQUALS"|string;
3309
4366
  export interface StringFilter {
@@ -3334,6 +4391,21 @@ declare namespace Inspector2 {
3334
4391
  export type SuggestedFixCodeString = string;
3335
4392
  export type SuggestedFixDescriptionString = string;
3336
4393
  export type SuggestedFixes = SuggestedFix[];
4394
+ export type TagComparison = "EQUALS"|string;
4395
+ export interface TagFilter {
4396
+ /**
4397
+ * The tag filter comparison value.
4398
+ */
4399
+ comparison: TagComparison;
4400
+ /**
4401
+ * The tag filter key.
4402
+ */
4403
+ key: NonEmptyString;
4404
+ /**
4405
+ * The tag filter value.
4406
+ */
4407
+ value: NonEmptyString;
4408
+ }
3337
4409
  export type TagKey = string;
3338
4410
  export type TagKeyList = TagKey[];
3339
4411
  export type TagList = String[];
@@ -3350,9 +4422,27 @@ declare namespace Inspector2 {
3350
4422
  }
3351
4423
  export interface TagResourceResponse {
3352
4424
  }
4425
+ export type TagValueList = String[];
3353
4426
  export type Target = string;
4427
+ export type TargetAccount = string;
4428
+ export type TargetAccountList = TargetAccount[];
4429
+ export type TargetResourceTags = {[key: string]: TagValueList};
4430
+ export type TargetStatusFilterList = CisTargetStatusFilter[];
4431
+ export type TargetStatusReasonFilterList = CisTargetStatusReasonFilter[];
3354
4432
  export type Targets = Target[];
4433
+ export interface Time {
4434
+ /**
4435
+ * The time of day in 24-hour format (00:00).
4436
+ */
4437
+ timeOfDay: TimeOfDay;
4438
+ /**
4439
+ * The timezone.
4440
+ */
4441
+ timezone: Timezone;
4442
+ }
4443
+ export type TimeOfDay = string;
3355
4444
  export type Timestamp = Date;
4445
+ export type Timezone = string;
3356
4446
  export interface TitleAggregation {
3357
4447
  /**
3358
4448
  * The type of finding to aggregate on.
@@ -3397,11 +4487,13 @@ declare namespace Inspector2 {
3397
4487
  */
3398
4488
  vulnerabilityId?: String;
3399
4489
  }
4490
+ export type TitleFilterList = CisStringFilter[];
3400
4491
  export type TitleSortBy = "CRITICAL"|"HIGH"|"ALL"|string;
3401
4492
  export type Tool = string;
3402
4493
  export type Tools = Tool[];
3403
4494
  export type Ttp = string;
3404
4495
  export type Ttps = Ttp[];
4496
+ export type UUID = string;
3405
4497
  export interface UntagResourceRequest {
3406
4498
  /**
3407
4499
  * The Amazon Resource Name (ARN) for the resource to remove tags from.
@@ -3414,6 +4506,44 @@ declare namespace Inspector2 {
3414
4506
  }
3415
4507
  export interface UntagResourceResponse {
3416
4508
  }
4509
+ export interface UpdateCisScanConfigurationRequest {
4510
+ /**
4511
+ * The CIS scan configuration ARN.
4512
+ */
4513
+ scanConfigurationArn: CisScanConfigurationArn;
4514
+ /**
4515
+ * The scan name for the CIS scan configuration.
4516
+ */
4517
+ scanName?: CisScanName;
4518
+ /**
4519
+ * The schedule for the CIS scan configuration.
4520
+ */
4521
+ schedule?: Schedule;
4522
+ /**
4523
+ * The security level for the CIS scan configuration. Security level refers to the Benchmark levels that CIS assigns to a profile.
4524
+ */
4525
+ securityLevel?: CisSecurityLevel;
4526
+ /**
4527
+ * The targets for the CIS scan configuration.
4528
+ */
4529
+ targets?: UpdateCisTargets;
4530
+ }
4531
+ export interface UpdateCisScanConfigurationResponse {
4532
+ /**
4533
+ * The CIS scan configuration ARN.
4534
+ */
4535
+ scanConfigurationArn: CisScanConfigurationArn;
4536
+ }
4537
+ export interface UpdateCisTargets {
4538
+ /**
4539
+ * The target account ids.
4540
+ */
4541
+ accountIds?: TargetAccountList;
4542
+ /**
4543
+ * The target resource tags.
4544
+ */
4545
+ targetResourceTags?: TargetResourceTags;
4546
+ }
3417
4547
  export interface UpdateConfigurationRequest {
3418
4548
  /**
3419
4549
  * Specifies how the ECR automated re-scan will be updated for your environment.
@@ -3552,6 +4682,7 @@ declare namespace Inspector2 {
3552
4682
  export type UsageTotalList = UsageTotal[];
3553
4683
  export type UsageType = "EC2_INSTANCE_HOURS"|"ECR_INITIAL_SCAN"|"ECR_RESCAN"|"LAMBDA_FUNCTION_HOURS"|"LAMBDA_FUNCTION_CODE_HOURS"|string;
3554
4684
  export type UsageValue = number;
4685
+ export type Vendor = string;
3555
4686
  export type VendorCreatedAt = Date;
3556
4687
  export type VendorSeverity = string;
3557
4688
  export type VendorUpdatedAt = Date;
@@ -3685,6 +4816,16 @@ declare namespace Inspector2 {
3685
4816
  }
3686
4817
  export type VulnerablePackageList = VulnerablePackage[];
3687
4818
  export type VulnerablePackageRemediation = string;
4819
+ export interface WeeklySchedule {
4820
+ /**
4821
+ * The weekly schedule's days.
4822
+ */
4823
+ days: DaysList;
4824
+ /**
4825
+ * The weekly schedule's start time.
4826
+ */
4827
+ startTime: Time;
4828
+ }
3688
4829
  /**
3689
4830
  * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
3690
4831
  */