cdk-lambda-subminute 2.0.477 → 2.0.478

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -596,11 +596,11 @@ declare class SecurityHub extends Service {
596
596
  */
597
597
  updateFindingAggregator(callback?: (err: AWSError, data: SecurityHub.Types.UpdateFindingAggregatorResponse) => void): Request<SecurityHub.Types.UpdateFindingAggregatorResponse, AWSError>;
598
598
  /**
599
- * UpdateFindings is a deprecated operation. Instead of UpdateFindings, use the BatchUpdateFindings operation. Updates the Note and RecordState of the Security Hub-aggregated findings that the filter attributes specify. Any member account that can view the finding also sees the update to the finding. Finding updates made with UpdateFindings might not be persisted if the same finding is later updated by the finding provider through the BatchImportFindings operation.
599
+ * UpdateFindings is a deprecated operation. Instead of UpdateFindings, use the BatchUpdateFindings operation. The UpdateFindings operation updates the Note and RecordState of the Security Hub aggregated findings that the filter attributes specify. Any member account that can view the finding can also see the update to the finding. Finding updates made with UpdateFindings aren't persisted if the same finding is later updated by the finding provider through the BatchImportFindings operation. In addition, Security Hub doesn't record updates made with UpdateFindings in the finding history.
600
600
  */
601
601
  updateFindings(params: SecurityHub.Types.UpdateFindingsRequest, callback?: (err: AWSError, data: SecurityHub.Types.UpdateFindingsResponse) => void): Request<SecurityHub.Types.UpdateFindingsResponse, AWSError>;
602
602
  /**
603
- * UpdateFindings is a deprecated operation. Instead of UpdateFindings, use the BatchUpdateFindings operation. Updates the Note and RecordState of the Security Hub-aggregated findings that the filter attributes specify. Any member account that can view the finding also sees the update to the finding. Finding updates made with UpdateFindings might not be persisted if the same finding is later updated by the finding provider through the BatchImportFindings operation.
603
+ * UpdateFindings is a deprecated operation. Instead of UpdateFindings, use the BatchUpdateFindings operation. The UpdateFindings operation updates the Note and RecordState of the Security Hub aggregated findings that the filter attributes specify. Any member account that can view the finding can also see the update to the finding. Finding updates made with UpdateFindings aren't persisted if the same finding is later updated by the finding provider through the BatchImportFindings operation. In addition, Security Hub doesn't record updates made with UpdateFindings in the finding history.
604
604
  */
605
605
  updateFindings(callback?: (err: AWSError, data: SecurityHub.Types.UpdateFindingsResponse) => void): Request<SecurityHub.Types.UpdateFindingsResponse, AWSError>;
606
606
  /**
@@ -1017,7 +1017,7 @@ declare namespace SecurityHub {
1017
1017
  */
1018
1018
  ResourceType?: StringFilterList;
1019
1019
  /**
1020
- * The identifier for the given resource type. For Amazon Web Services resources that are identified by Amazon Resource Names (ARNs), this is the ARN. For Amazon Web Services resources that lack ARNs, this is the identifier as defined by the Amazon Web Service that created the resource. For non-Amazon Web Services resources, this is a unique identifier that is associated with the resource. Array Members: Minimum number of 1 item. Maximum number of 100 items.
1020
+ * The identifier for the given resource type. For Amazon Web Services resources that are identified by Amazon Resource Names (ARNs), this is the ARN. For Amazon Web Services resources that lack ARNs, this is the identifier as defined by the Amazon Web Servicesservice that created the resource. For non-Amazon Web Services resources, this is a unique identifier that is associated with the resource. Array Members: Minimum number of 1 item. Maximum number of 100 items.
1021
1021
  */
1022
1022
  ResourceId?: StringFilterList;
1023
1023
  /**
@@ -11134,7 +11134,7 @@ declare namespace SecurityHub {
11134
11134
  */
11135
11135
  Sample?: BooleanFilterList;
11136
11136
  /**
11137
- * The unique identifier of a control across standards. Values for this field typically consist of an Amazon Web Service and a number, such as APIGateway.5.
11137
+ * The unique identifier of a control across standards. Values for this field typically consist of an Amazon Web Servicesservice and a number, such as APIGateway.5.
11138
11138
  */
11139
11139
  ComplianceSecurityControlId?: StringFilterList;
11140
11140
  /**
@@ -12322,7 +12322,7 @@ declare namespace SecurityHub {
12322
12322
  */
12323
12323
  StatusReasons?: StatusReasonsList;
12324
12324
  /**
12325
- * The unique identifier of a control across standards. Values for this field typically consist of an Amazon Web Service and a number, such as APIGateway.5.
12325
+ * The unique identifier of a control across standards. Values for this field typically consist of an Amazon Web Servicesservice and a number, such as APIGateway.5.
12326
12326
  */
12327
12327
  SecurityControlId?: NonEmptyString;
12328
12328
  /**
@@ -12588,11 +12588,11 @@ declare namespace SecurityHub {
12588
12588
  }
12589
12589
  export interface CreateFindingAggregatorRequest {
12590
12590
  /**
12591
- * Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them. The selected option also determines how to use the Regions provided in the Regions list. The options are as follows: ALL_REGIONS - Indicates to aggregate findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. ALL_REGIONS_EXCEPT_SPECIFIED - Indicates to aggregate findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the Regions parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. SPECIFIED_REGIONS - Indicates to aggregate findings only from the Regions listed in the Regions parameter. Security Hub does not automatically aggregate findings from new Regions.
12591
+ * Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them. The selected option also determines how to use the Regions provided in the Regions list. The options are as follows: ALL_REGIONS - Aggregates findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. ALL_REGIONS_EXCEPT_SPECIFIED - Aggregates findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the Regions parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. SPECIFIED_REGIONS - Aggregates findings only from the Regions listed in the Regions parameter. Security Hub does not automatically aggregate findings from new Regions. NO_REGIONS - Aggregates no data because no Regions are selected as linked Regions.
12592
12592
  */
12593
12593
  RegionLinkingMode: NonEmptyString;
12594
12594
  /**
12595
- * If RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region. If RegionLinkingMode is SPECIFIED_REGIONS, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region.
12595
+ * If RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region. If RegionLinkingMode is SPECIFIED_REGIONS, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region. An InvalidInputException error results if you populate this field while RegionLinkingMode is NO_REGIONS.
12596
12596
  */
12597
12597
  Regions?: StringList;
12598
12598
  }
@@ -13111,7 +13111,7 @@ declare namespace SecurityHub {
13111
13111
  */
13112
13112
  FindingCreated?: Boolean;
13113
13113
  /**
13114
- * Identifies the source of the event that changed the finding. For example, an integrated Amazon Web Service or third-party partner integration may call BatchImportFindings , or an Security Hub customer may call BatchUpdateFindings .
13114
+ * Identifies the source of the event that changed the finding. For example, an integrated Amazon Web Servicesservice or third-party partner integration may call BatchImportFindings , or an Security Hub customer may call BatchUpdateFindings .
13115
13115
  */
13116
13116
  UpdateSource?: FindingHistoryUpdateSource;
13117
13117
  /**
@@ -13140,7 +13140,7 @@ declare namespace SecurityHub {
13140
13140
  }
13141
13141
  export interface FindingHistoryUpdateSource {
13142
13142
  /**
13143
- * Describes the type of finding change event, such as a call to BatchImportFindings (by an integrated Amazon Web Service or third party partner integration) or BatchUpdateFindings (by a Security Hub customer).
13143
+ * Describes the type of finding change event, such as a call to BatchImportFindings (by an integrated Amazon Web Servicesservice or third party partner integration) or BatchUpdateFindings (by a Security Hub customer).
13144
13144
  */
13145
13145
  Type?: FindingHistoryUpdateSourceType;
13146
13146
  /**
@@ -14163,6 +14163,10 @@ declare namespace SecurityHub {
14163
14163
  * The less-than-equal condition to be applied to a single field when querying for findings.
14164
14164
  */
14165
14165
  Lte?: Double;
14166
+ /**
14167
+ * The equal-to condition to be applied to a single field when querying for findings.
14168
+ */
14169
+ Eq?: Double;
14166
14170
  /**
14167
14171
  * The greater-than condition to be applied to a single field when querying for findings.
14168
14172
  */
@@ -14171,10 +14175,6 @@ declare namespace SecurityHub {
14171
14175
  * The less-than condition to be applied to a single field when querying for findings.
14172
14176
  */
14173
14177
  Lt?: Double;
14174
- /**
14175
- * The equal-to condition to be applied to a single field when querying for findings.
14176
- */
14177
- Eq?: Double;
14178
14178
  }
14179
14179
  export type NumberFilterList = NumberFilter[];
14180
14180
  export interface Occurrences {
@@ -14336,7 +14336,7 @@ declare namespace SecurityHub {
14336
14336
  }
14337
14337
  export interface Policy {
14338
14338
  /**
14339
- * The Amazon Web Service that the configuration policy applies to.
14339
+ * The Amazon Web Servicesservice that the configuration policy applies to.
14340
14340
  */
14341
14341
  SecurityHub?: SecurityHubPolicy;
14342
14342
  }
@@ -14975,7 +14975,7 @@ declare namespace SecurityHub {
14975
14975
  */
14976
14976
  DestinationIpv6CidrBlock?: NonEmptyString;
14977
14977
  /**
14978
- * The prefix of the destination Amazon Web Service.
14978
+ * The prefix of the destination Amazon Web Servicesservice.
14979
14979
  */
14980
14980
  DestinationPrefixListId?: NonEmptyString;
14981
14981
  /**
@@ -15261,7 +15261,7 @@ declare namespace SecurityHub {
15261
15261
  export type RuleStatus = "ENABLED"|"DISABLED"|string;
15262
15262
  export interface SecurityControl {
15263
15263
  /**
15264
- * The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Service name and a number, such as APIGateway.3.
15264
+ * The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Servicesservice name and a number, such as APIGateway.3.
15265
15265
  */
15266
15266
  SecurityControlId: NonEmptyString;
15267
15267
  /**
@@ -15289,7 +15289,7 @@ declare namespace SecurityHub {
15289
15289
  */
15290
15290
  SecurityControlStatus: ControlStatus;
15291
15291
  /**
15292
- * Identifies whether customizable properties of a security control are reflected in Security Hub findings. A status of READY indicates findings include the current parameter values. A status of UPDATING indicates that all findings may not include the current parameter values.
15292
+ * Identifies whether customizable properties of a security control are reflected in Security Hub findings. A status of READY indicates that Security Hub uses the current control parameter values when running security checks of the control. A status of UPDATING indicates that all security checks might not use the current parameter values.
15293
15293
  */
15294
15294
  UpdateStatus?: UpdateStatus;
15295
15295
  /**
@@ -15314,7 +15314,7 @@ declare namespace SecurityHub {
15314
15314
  export type SecurityControlCustomParametersList = SecurityControlCustomParameter[];
15315
15315
  export interface SecurityControlDefinition {
15316
15316
  /**
15317
- * The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Service name and a number (for example, APIGateway.3). This parameter differs from SecurityControlArn, which is a unique Amazon Resource Name (ARN) assigned to a control. The ARN references the security control ID (for example, arn:aws:securityhub:eu-central-1:123456789012:security-control/APIGateway.3).
15317
+ * The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Servicesservice name and a number (for example, APIGateway.3). This parameter differs from SecurityControlArn, which is a unique Amazon Resource Name (ARN) assigned to a control. The ARN references the security control ID (for example, arn:aws:securityhub:eu-central-1:123456789012:security-control/APIGateway.3).
15318
15318
  */
15319
15319
  SecurityControlId: NonEmptyString;
15320
15320
  /**
@@ -15585,7 +15585,7 @@ declare namespace SecurityHub {
15585
15585
  */
15586
15586
  StandardsArn: NonEmptyString;
15587
15587
  /**
15588
- * The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Service name and a number, such as APIGateway.3.
15588
+ * The unique identifier of a security control across standards. Values for this field typically consist of an Amazon Web Servicesservice name and a number, such as APIGateway.3.
15589
15589
  */
15590
15590
  SecurityControlId: NonEmptyString;
15591
15591
  /**
@@ -15640,7 +15640,7 @@ declare namespace SecurityHub {
15640
15640
  */
15641
15641
  StandardsArn: NonEmptyString;
15642
15642
  /**
15643
- * A unique standard-agnostic identifier for a control. Values for this field typically consist of an Amazon Web Service and a number, such as APIGateway.5. This field doesn't reference a specific standard.
15643
+ * A unique standard-agnostic identifier for a control. Values for this field typically consist of an Amazon Web Servicesservice and a number, such as APIGateway.5. This field doesn't reference a specific standard.
15644
15644
  */
15645
15645
  SecurityControlId: NonEmptyString;
15646
15646
  /**
@@ -16151,11 +16151,11 @@ declare namespace SecurityHub {
16151
16151
  */
16152
16152
  FindingAggregatorArn: NonEmptyString;
16153
16153
  /**
16154
- * Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them. The selected option also determines how to use the Regions provided in the Regions list. The options are as follows: ALL_REGIONS - Indicates to aggregate findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. ALL_REGIONS_EXCEPT_SPECIFIED - Indicates to aggregate findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the Regions parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. SPECIFIED_REGIONS - Indicates to aggregate findings only from the Regions listed in the Regions parameter. Security Hub does not automatically aggregate findings from new Regions.
16154
+ * Indicates whether to aggregate findings from all of the available Regions in the current partition. Also determines whether to automatically aggregate findings from new Regions as Security Hub supports them and you opt into them. The selected option also determines how to use the Regions provided in the Regions list. The options are as follows: ALL_REGIONS - Aggregates findings from all of the Regions where Security Hub is enabled. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. ALL_REGIONS_EXCEPT_SPECIFIED - Aggregates findings from all of the Regions where Security Hub is enabled, except for the Regions listed in the Regions parameter. When you choose this option, Security Hub also automatically aggregates findings from new Regions as Security Hub supports them and you opt into them. SPECIFIED_REGIONS - Aggregates findings only from the Regions listed in the Regions parameter. Security Hub does not automatically aggregate findings from new Regions. NO_REGIONS - Aggregates no data because no Regions are selected as linked Regions.
16155
16155
  */
16156
16156
  RegionLinkingMode: NonEmptyString;
16157
16157
  /**
16158
- * If RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region. If RegionLinkingMode is SPECIFIED_REGIONS, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region.
16158
+ * If RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED, then this is a space-separated list of Regions that do not aggregate findings to the aggregation Region. If RegionLinkingMode is SPECIFIED_REGIONS, then this is a space-separated list of Regions that do aggregate findings to the aggregation Region. An InvalidInputException error results if you populate this field while RegionLinkingMode is NO_REGIONS.
16159
16159
  */
16160
16160
  Regions?: StringList;
16161
16161
  }
@@ -1227,6 +1227,7 @@ declare namespace SES {
1227
1227
  export type HeaderName = string;
1228
1228
  export type HeaderValue = string;
1229
1229
  export type HtmlPart = string;
1230
+ export type IAMRoleARN = string;
1230
1231
  export type Identity = string;
1231
1232
  export interface IdentityDkimAttributes {
1232
1233
  /**
@@ -1709,9 +1710,13 @@ declare namespace SES {
1709
1710
  */
1710
1711
  ObjectKeyPrefix?: S3KeyPrefix;
1711
1712
  /**
1712
- * The customer master key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket. You can use the default master key or a custom master key that you created in Amazon Web Services KMS as follows: To use the default master key, provide an ARN in the form of arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses. For example, if your Amazon Web Services account ID is 123456789012 and you want to use the default master key in the US West (Oregon) Region, the ARN of the default master key would be arn:aws:kms:us-west-2:123456789012:alias/aws/ses. If you use the default master key, you don't need to perform any extra steps to give Amazon SES permission to use the key. To use a custom master key that you created in Amazon Web Services KMS, provide the ARN of the master key and ensure that you add a statement to your key's policy to give Amazon SES permission to use it. For more information about giving permissions, see the Amazon SES Developer Guide. For more information about key policies, see the Amazon Web Services KMS Developer Guide. If you do not specify a master key, Amazon SES does not encrypt your emails. Your mail is encrypted by Amazon SES using the Amazon S3 encryption client before the mail is submitted to Amazon S3 for storage. It is not encrypted using Amazon S3 server-side encryption. This means that you must use the Amazon S3 encryption client to decrypt the email after retrieving it from Amazon S3, as the service has no access to use your Amazon Web Services KMS keys for decryption. This encryption client is currently available with the Amazon Web Services SDK for Java and Amazon Web Services SDK for Ruby only. For more information about client-side encryption using Amazon Web Services KMS master keys, see the Amazon S3 Developer Guide.
1713
+ * The customer managed key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket. You can use the default managed key or a custom managed key that you created in Amazon Web Services KMS as follows: To use the default managed key, provide an ARN in the form of arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses. For example, if your Amazon Web Services account ID is 123456789012 and you want to use the default managed key in the US West (Oregon) Region, the ARN of the default master key would be arn:aws:kms:us-west-2:123456789012:alias/aws/ses. If you use the default managed key, you don't need to perform any extra steps to give Amazon SES permission to use the key. To use a custom managed key that you created in Amazon Web Services KMS, provide the ARN of the managed key and ensure that you add a statement to your key's policy to give Amazon SES permission to use it. For more information about giving permissions, see the Amazon SES Developer Guide. For more information about key policies, see the Amazon Web Services KMS Developer Guide. If you do not specify a managed key, Amazon SES does not encrypt your emails. Your mail is encrypted by Amazon SES using the Amazon S3 encryption client before the mail is submitted to Amazon S3 for storage. It is not encrypted using Amazon S3 server-side encryption. This means that you must use the Amazon S3 encryption client to decrypt the email after retrieving it from Amazon S3, as the service has no access to use your Amazon Web Services KMS keys for decryption. This encryption client is currently available with the Amazon Web Services SDK for Java and Amazon Web Services SDK for Ruby only. For more information about client-side encryption using Amazon Web Services KMS managed keys, see the Amazon S3 Developer Guide.
1713
1714
  */
1714
1715
  KmsKeyArn?: AmazonResourceName;
1716
+ /**
1717
+ * The ARN of the IAM role to be used by Amazon Simple Email Service while writing to the Amazon S3 bucket, optionally encrypting your mail via the provided customer managed key, and publishing to the Amazon SNS topic. This role should have access to the following APIs: s3:PutObject, kms:Encrypt and kms:GenerateDataKey for the given Amazon S3 bucket. kms:GenerateDataKey for the given Amazon Web Services KMS customer managed key. sns:Publish for the given Amazon SNS topic. If an IAM role ARN is provided, the role (and only the role) is used to access all the given resources (Amazon S3 bucket, Amazon Web Services KMS customer managed key and Amazon SNS topic). Therefore, setting up individual resource access permissions is not required.
1718
+ */
1719
+ IamRoleArn?: IAMRoleARN;
1715
1720
  }
1716
1721
  export type S3BucketName = string;
1717
1722
  export type S3KeyPrefix = string;
@@ -1804,7 +1809,7 @@ declare namespace SES {
1804
1809
  /**
1805
1810
  * A list of replacement values to apply to the template when replacement data is not specified in a Destination object. These values act as a default or fallback option when no other data is available. The template data is a JSON object, typically consisting of key-value pairs in which the keys correspond to replacement tags in the email template.
1806
1811
  */
1807
- DefaultTemplateData?: TemplateData;
1812
+ DefaultTemplateData: TemplateData;
1808
1813
  /**
1809
1814
  * One or more Destination objects. All of the recipients in a Destination receive the same version of the email. You can specify up to 50 Destination objects within a Destinations array.
1810
1815
  */
@@ -83,7 +83,7 @@ return /******/ (function(modules) { // webpackBootstrap
83
83
  /**
84
84
  * @constant
85
85
  */
86
- VERSION: '2.1679.0',
86
+ VERSION: '2.1680.0',
87
87
 
88
88
  /**
89
89
  * @api private