capo-securityhub 0.1.0__py3-none-any.whl

capo_securityhub/types/aws_security_finding_filters.py

@@ -0,0 +1,1974 @@
+"""Generated from Smithy shape ``com.amazonaws.securityhub#AwsSecurityFindingFilters``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+if TYPE_CHECKING:
+    import capo_securityhub.types.boolean_filter_list
+    import capo_securityhub.types.date_filter_list
+    import capo_securityhub.types.ip_filter_list
+    import capo_securityhub.types.keyword_filter_list
+    import capo_securityhub.types.map_filter_list
+    import capo_securityhub.types.number_filter_list
+    import capo_securityhub.types.string_filter_list
+
+
+class AwsSecurityFindingFilters(TypedDict, closed=True):
+    product_arn: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The ARN generated by Security Hub CSPM that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub CSPM.</p>"""
+    aws_account_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The Amazon Web Services account ID in which a finding is generated.</p>"""
+    id: NotRequired["capo_securityhub.types.string_filter_list.StringFilterList"]
+    """<p>The security findings provider-specific identifier for a finding.</p>"""
+    generator_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. In various security findings providers' solutions, this generator can be called a rule, a check, a detector, a plugin, etc.</p>"""
+    region: NotRequired["capo_securityhub.types.string_filter_list.StringFilterList"]
+    """<p>The Region from which the finding was generated.</p>"""
+    type: NotRequired["capo_securityhub.types.string_filter_list.StringFilterList"]
+    """<p>A finding type in the format of <code>namespace/category/classifier</code> that classifies a finding.</p>"""
+    first_observed_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    r"""<p>A timestamp that indicates when the security findings provider first observed the potential security issue that a finding captured.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    last_observed_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    r"""<p>A timestamp that indicates when the security findings provider most recently observed a change in the resource that is involved in the finding.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    created_at: NotRequired["capo_securityhub.types.date_filter_list.DateFilterList"]
+    r"""<p>A timestamp that indicates when the security findings provider created the potential security issue that a finding reflects.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    updated_at: NotRequired["capo_securityhub.types.date_filter_list.DateFilterList"]
+    r"""<p>A timestamp that indicates when the security findings provider last updated the finding record.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    severity_product: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The native severity as defined by the security findings provider's solution that generated the finding.</p>"""
+    severity_normalized: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The normalized severity of a finding.</p>"""
+    severity_label: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The label of a finding's severity.</p>"""
+    confidence: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify.</p> <p>Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence.</p>"""
+    criticality: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The level of importance assigned to the resources associated with the finding.</p> <p>A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources.</p>"""
+    title: NotRequired["capo_securityhub.types.string_filter_list.StringFilterList"]
+    """<p>A finding's title.</p>"""
+    description: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>A finding's description.</p>"""
+    recommendation_text: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The recommendation of what to do about the issue described in a finding.</p>"""
+    source_url: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>A URL that links to a page about the current finding in the security findings provider's solution.</p>"""
+    product_fields: NotRequired["capo_securityhub.types.map_filter_list.MapFilterList"]
+    """<p>A data type where security findings providers can include additional solution-specific details that aren't part of the defined <code>AwsSecurityFinding</code> format.</p>"""
+    product_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of the solution (product) that generates findings.</p>"""
+    company_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of the findings provider (company) that owns the solution (product) that generates findings.</p>"""
+    user_defined_fields: NotRequired[
+        "capo_securityhub.types.map_filter_list.MapFilterList"
+    ]
+    """<p>A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. </p>"""
+    malware_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of the malware that was observed.</p>"""
+    malware_type: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The type of the malware that was observed.</p>"""
+    malware_path: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The filesystem path of the malware that was observed.</p>"""
+    malware_state: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The state of the malware that was observed.</p>"""
+    network_direction: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>Indicates the direction of network traffic associated with a finding.</p>"""
+    network_protocol: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The protocol of network-related information about a finding.</p>"""
+    network_source_ip_v4: NotRequired[
+        "capo_securityhub.types.ip_filter_list.IpFilterList"
+    ]
+    """<p>The source IPv4 address of network-related information about a finding.</p>"""
+    network_source_ip_v6: NotRequired[
+        "capo_securityhub.types.ip_filter_list.IpFilterList"
+    ]
+    """<p>The source IPv6 address of network-related information about a finding.</p>"""
+    network_source_port: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The source port of network-related information about a finding.</p>"""
+    network_source_domain: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The source domain of network-related information about a finding.</p>"""
+    network_source_mac: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The source media access control (MAC) address of network-related information about a finding.</p>"""
+    network_destination_ip_v4: NotRequired[
+        "capo_securityhub.types.ip_filter_list.IpFilterList"
+    ]
+    """<p>The destination IPv4 address of network-related information about a finding.</p>"""
+    network_destination_ip_v6: NotRequired[
+        "capo_securityhub.types.ip_filter_list.IpFilterList"
+    ]
+    """<p>The destination IPv6 address of network-related information about a finding.</p>"""
+    network_destination_port: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The destination port of network-related information about a finding.</p>"""
+    network_destination_domain: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The destination domain of network-related information about a finding.</p>"""
+    process_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of the process.</p>"""
+    process_path: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The path to the process executable.</p>"""
+    process_pid: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The process ID.</p>"""
+    process_parent_pid: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The parent process ID. This field accepts positive integers between <code>O</code> and <code>2147483647</code>.</p>"""
+    process_launched_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    r"""<p>A timestamp that identifies when the process was launched.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    process_terminated_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    r"""<p>A timestamp that identifies when the process was terminated.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    threat_intel_indicator_type: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The type of a threat intelligence indicator.</p>"""
+    threat_intel_indicator_value: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The value of a threat intelligence indicator.</p>"""
+    threat_intel_indicator_category: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The category of a threat intelligence indicator.</p>"""
+    threat_intel_indicator_last_observed_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    r"""<p>A timestamp that identifies the last observation of a threat intelligence indicator.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    threat_intel_indicator_source: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The source of the threat intelligence.</p>"""
+    threat_intel_indicator_source_url: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The URL for more details from the source of the threat intelligence.</p>"""
+    resource_type: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>Specifies the type of the resource that details are provided for.</p>"""
+    resource_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The canonical identifier for the given resource type.</p>"""
+    resource_partition: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The canonical Amazon Web Services partition name that the Region is assigned to.</p>"""
+    resource_region: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The canonical Amazon Web Services external Region name where this resource is located.</p>"""
+    resource_tags: NotRequired["capo_securityhub.types.map_filter_list.MapFilterList"]
+    """<p>A list of Amazon Web Services tags associated with a resource at the time the finding was processed.</p>"""
+    resource_aws_ec2_instance_type: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The instance type of the instance.</p>"""
+    resource_aws_ec2_instance_image_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The Amazon Machine Image (AMI) ID of the instance.</p>"""
+    resource_aws_ec2_instance_ip_v4_addresses: NotRequired[
+        "capo_securityhub.types.ip_filter_list.IpFilterList"
+    ]
+    """<p>The IPv4 addresses associated with the instance.</p>"""
+    resource_aws_ec2_instance_ip_v6_addresses: NotRequired[
+        "capo_securityhub.types.ip_filter_list.IpFilterList"
+    ]
+    """<p>The IPv6 addresses associated with the instance.</p>"""
+    resource_aws_ec2_instance_key_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The key name associated with the instance.</p>"""
+    resource_aws_ec2_instance_iam_instance_profile_arn: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The IAM profile ARN of the instance.</p>"""
+    resource_aws_ec2_instance_vpc_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The identifier of the VPC that the instance was launched in.</p>"""
+    resource_aws_ec2_instance_subnet_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The identifier of the subnet that the instance was launched in.</p>"""
+    resource_aws_ec2_instance_launched_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    """<p>The date and time the instance was launched.</p>"""
+    resource_aws_s3_bucket_owner_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The canonical user ID of the owner of the S3 bucket.</p>"""
+    resource_aws_s3_bucket_owner_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The display name of the owner of the S3 bucket.</p>"""
+    resource_aws_iam_access_key_user_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The user associated with the IAM access key related to a finding.</p>"""
+    resource_aws_iam_access_key_principal_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of the principal that is associated with an IAM access key.</p>"""
+    resource_aws_iam_access_key_status: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The status of the IAM access key related to a finding.</p>"""
+    resource_aws_iam_access_key_created_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    """<p>The creation date/time of the IAM access key related to a finding.</p>"""
+    resource_aws_iam_user_user_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of an IAM user.</p>"""
+    resource_container_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of the container related to a finding.</p>"""
+    resource_container_image_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The identifier of the image related to a finding.</p>"""
+    resource_container_image_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of the image related to a finding.</p>"""
+    resource_container_launched_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    r"""<p>A timestamp that identifies when the container was started.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    resource_details_other: NotRequired[
+        "capo_securityhub.types.map_filter_list.MapFilterList"
+    ]
+    """<p>The details of a resource that doesn't have a specific subfield for the resource type defined.</p>"""
+    compliance_status: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS Amazon Web Services Foundations. Contains security standard-related finding details.</p>"""
+    verification_state: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The veracity of a finding.</p>"""
+    workflow_state: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The workflow state of a finding.</p> <p>Note that this field is deprecated. To search for a finding based on its workflow status, use <code>WorkflowStatus</code>.</p>"""
+    workflow_status: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The status of the investigation into a finding. Allowed values are the following.</p> <ul> <li> <p> <code>NEW</code> - The initial state of a finding, before it is reviewed.</p> <p>Security Hub CSPM also resets the workflow status from <code>NOTIFIED</code> or <code>RESOLVED</code> to <code>NEW</code> in the following cases:</p> <ul> <li> <p> <code>RecordState</code> changes from <code>ARCHIVED</code> to <code>ACTIVE</code>.</p> </li> <li> <p> <code>Compliance.Status</code> changes from <code>PASSED</code> to either <code>WARNING</code>, <code>FAILED</code>, or <code>NOT_AVAILABLE</code>.</p> </li> </ul> </li> <li> <p> <code>NOTIFIED</code> - Indicates that the resource owner has been notified about the security issue. Used when the initial reviewer is not the resource owner, and needs intervention from the resource owner.</p> <p>If one of the following occurs, the workflow status is changed automatically from <code>NOTIFIED</code> to <code>NEW</code>:</p> <ul> <li> <p> <code>RecordState</code> changes from <code>ARCHIVED</code> to <code>ACTIVE</code>.</p> </li> <li> <p> <code>Compliance.Status</code> changes from <code>PASSED</code> to <code>FAILED</code>, <code>WARNING</code>, or <code>NOT_AVAILABLE</code>.</p> </li> </ul> </li> <li> <p> <code>SUPPRESSED</code> - Indicates that you reviewed the finding and don't believe that any action is needed.</p> <p>The workflow status of a <code>SUPPRESSED</code> finding does not change if <code>RecordState</code> changes from <code>ARCHIVED</code> to <code>ACTIVE</code>.</p> </li> <li> <p> <code>RESOLVED</code> - The finding was reviewed and remediated and is now considered resolved. </p> <p>The finding remains <code>RESOLVED</code> unless one of the following occurs:</p> <ul> <li> <p> <code>RecordState</code> changes from <code>ARCHIVED</code> to <code>ACTIVE</code>.</p> </li> <li> <p> <code>Compliance.Status</code> changes from <code>PASSED</code> to <code>FAILED</code>, <code>WARNING</code>, or <code>NOT_AVAILABLE</code>.</p> </li> </ul> <p>In those cases, the workflow status is automatically reset to <code>NEW</code>.</p> <p>For findings from controls, if <code>Compliance.Status</code> is <code>PASSED</code>, then Security Hub CSPM automatically sets the workflow status to <code>RESOLVED</code>.</p> </li> </ul>"""
+    record_state: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The updated record state for the finding.</p>"""
+    related_findings_product_arn: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The ARN of the solution that generated a related finding.</p>"""
+    related_findings_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The solution-generated identifier for a related finding.</p>"""
+    note_text: NotRequired["capo_securityhub.types.string_filter_list.StringFilterList"]
+    """<p>The text of a note.</p>"""
+    note_updated_at: NotRequired[
+        "capo_securityhub.types.date_filter_list.DateFilterList"
+    ]
+    """<p>The timestamp of when the note was updated.</p>"""
+    note_updated_by: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The principal that created a note.</p>"""
+    keyword: NotRequired["capo_securityhub.types.keyword_filter_list.KeywordFilterList"]
+    """<p>A keyword for a finding.</p>"""
+    finding_provider_fields_confidence: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify.</p> <p>Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence.</p>"""
+    finding_provider_fields_criticality: NotRequired[
+        "capo_securityhub.types.number_filter_list.NumberFilterList"
+    ]
+    """<p>The finding provider value for the level of importance assigned to the resources associated with the findings.</p> <p>A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. </p>"""
+    finding_provider_fields_related_findings_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The finding identifier of a related finding that is identified by the finding provider.</p>"""
+    finding_provider_fields_related_findings_product_arn: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The ARN of the solution that generated a related finding that is identified by the finding provider.</p>"""
+    finding_provider_fields_severity_label: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The finding provider value for the severity label.</p>"""
+    finding_provider_fields_severity_original: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The finding provider's original value for the severity.</p>"""
+    finding_provider_fields_types: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>One or more finding types that the finding provider assigned to the finding. Uses the format of <code>namespace/category/classifier</code> that classify a finding.</p> <p>Valid namespace values are: Software and Configuration Checks | TTPs | Effects | Unusual Behaviors | Sensitive Data Identifications</p>"""
+    sample: NotRequired["capo_securityhub.types.boolean_filter_list.BooleanFilterList"]
+    """<p>Indicates whether or not sample findings are included in the filter results.</p>"""
+    compliance_security_control_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p> The unique identifier of a control across standards. Values for this field typically consist of an Amazon Web Services service and a number, such as APIGateway.5. </p>"""
+    compliance_associated_standards_id: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    r"""<p> The unique identifier of a standard in which a control is enabled. This field consists of the resource portion of the Amazon Resource Name (ARN) returned for a standard in the <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_DescribeStandards.html\">DescribeStandards</a> API response. </p>"""
+    vulnerabilities_exploit_available: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p> Indicates whether a software vulnerability in your environment has a known exploit. You can filter findings by this field only if you use Security Hub CSPM and Amazon Inspector. </p>"""
+    vulnerabilities_fix_available: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p> Indicates whether a vulnerability is fixed in a newer version of the affected software packages. You can filter findings by this field only if you use Security Hub CSPM and Amazon Inspector. </p>"""
+    compliance_security_control_parameters_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p> The name of a security control parameter. </p>"""
+    compliance_security_control_parameters_value: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p> The current value of a security control parameter. </p>"""
+    aws_account_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p>The name of the Amazon Web Services account in which a finding is generated.</p>"""
+    resource_application_name: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p> The name of the application that is related to a finding. </p>"""
+    resource_application_arn: NotRequired[
+        "capo_securityhub.types.string_filter_list.StringFilterList"
+    ]
+    """<p> The ARN of the application that is related to a finding. </p>"""
+
+
+# --- restJson1 ser/de ---
+def serialize_json(value: AwsSecurityFindingFilters) -> dict:
+    out: dict = {}
+    if "product_arn" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ProductArn"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["product_arn"]
+        )
+    if "aws_account_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["AwsAccountId"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["aws_account_id"]
+        )
+    if "id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["Id"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["id"]
+        )
+    if "generator_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["GeneratorId"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["generator_id"]
+        )
+    if "region" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["Region"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["region"]
+        )
+    if "type" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["Type"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["type"]
+        )
+    if "first_observed_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["FirstObservedAt"] = capo_securityhub.types.date_filter_list.serialize_json(
+            value["first_observed_at"]
+        )
+    if "last_observed_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["LastObservedAt"] = capo_securityhub.types.date_filter_list.serialize_json(
+            value["last_observed_at"]
+        )
+    if "created_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["CreatedAt"] = capo_securityhub.types.date_filter_list.serialize_json(
+            value["created_at"]
+        )
+    if "updated_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["UpdatedAt"] = capo_securityhub.types.date_filter_list.serialize_json(
+            value["updated_at"]
+        )
+    if "severity_product" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["SeverityProduct"] = (
+            capo_securityhub.types.number_filter_list.serialize_json(
+                value["severity_product"]
+            )
+        )
+    if "severity_normalized" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["SeverityNormalized"] = (
+            capo_securityhub.types.number_filter_list.serialize_json(
+                value["severity_normalized"]
+            )
+        )
+    if "severity_label" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["SeverityLabel"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["severity_label"]
+        )
+    if "confidence" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["Confidence"] = capo_securityhub.types.number_filter_list.serialize_json(
+            value["confidence"]
+        )
+    if "criticality" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["Criticality"] = capo_securityhub.types.number_filter_list.serialize_json(
+            value["criticality"]
+        )
+    if "title" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["Title"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["title"]
+        )
+    if "description" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["Description"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["description"]
+        )
+    if "recommendation_text" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["RecommendationText"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["recommendation_text"]
+            )
+        )
+    if "source_url" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["SourceUrl"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["source_url"]
+        )
+    if "product_fields" in value:
+        import capo_securityhub.types.map_filter_list
+
+        out["ProductFields"] = capo_securityhub.types.map_filter_list.serialize_json(
+            value["product_fields"]
+        )
+    if "product_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ProductName"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["product_name"]
+        )
+    if "company_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["CompanyName"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["company_name"]
+        )
+    if "user_defined_fields" in value:
+        import capo_securityhub.types.map_filter_list
+
+        out["UserDefinedFields"] = (
+            capo_securityhub.types.map_filter_list.serialize_json(
+                value["user_defined_fields"]
+            )
+        )
+    if "malware_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["MalwareName"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["malware_name"]
+        )
+    if "malware_type" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["MalwareType"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["malware_type"]
+        )
+    if "malware_path" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["MalwarePath"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["malware_path"]
+        )
+    if "malware_state" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["MalwareState"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["malware_state"]
+        )
+    if "network_direction" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["NetworkDirection"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["network_direction"]
+            )
+        )
+    if "network_protocol" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["NetworkProtocol"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["network_protocol"]
+            )
+        )
+    if "network_source_ip_v4" in value:
+        import capo_securityhub.types.ip_filter_list
+
+        out["NetworkSourceIpV4"] = capo_securityhub.types.ip_filter_list.serialize_json(
+            value["network_source_ip_v4"]
+        )
+    if "network_source_ip_v6" in value:
+        import capo_securityhub.types.ip_filter_list
+
+        out["NetworkSourceIpV6"] = capo_securityhub.types.ip_filter_list.serialize_json(
+            value["network_source_ip_v6"]
+        )
+    if "network_source_port" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["NetworkSourcePort"] = (
+            capo_securityhub.types.number_filter_list.serialize_json(
+                value["network_source_port"]
+            )
+        )
+    if "network_source_domain" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["NetworkSourceDomain"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["network_source_domain"]
+            )
+        )
+    if "network_source_mac" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["NetworkSourceMac"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["network_source_mac"]
+            )
+        )
+    if "network_destination_ip_v4" in value:
+        import capo_securityhub.types.ip_filter_list
+
+        out["NetworkDestinationIpV4"] = (
+            capo_securityhub.types.ip_filter_list.serialize_json(
+                value["network_destination_ip_v4"]
+            )
+        )
+    if "network_destination_ip_v6" in value:
+        import capo_securityhub.types.ip_filter_list
+
+        out["NetworkDestinationIpV6"] = (
+            capo_securityhub.types.ip_filter_list.serialize_json(
+                value["network_destination_ip_v6"]
+            )
+        )
+    if "network_destination_port" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["NetworkDestinationPort"] = (
+            capo_securityhub.types.number_filter_list.serialize_json(
+                value["network_destination_port"]
+            )
+        )
+    if "network_destination_domain" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["NetworkDestinationDomain"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["network_destination_domain"]
+            )
+        )
+    if "process_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ProcessName"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["process_name"]
+        )
+    if "process_path" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ProcessPath"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["process_path"]
+        )
+    if "process_pid" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["ProcessPid"] = capo_securityhub.types.number_filter_list.serialize_json(
+            value["process_pid"]
+        )
+    if "process_parent_pid" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["ProcessParentPid"] = (
+            capo_securityhub.types.number_filter_list.serialize_json(
+                value["process_parent_pid"]
+            )
+        )
+    if "process_launched_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["ProcessLaunchedAt"] = (
+            capo_securityhub.types.date_filter_list.serialize_json(
+                value["process_launched_at"]
+            )
+        )
+    if "process_terminated_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["ProcessTerminatedAt"] = (
+            capo_securityhub.types.date_filter_list.serialize_json(
+                value["process_terminated_at"]
+            )
+        )
+    if "threat_intel_indicator_type" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ThreatIntelIndicatorType"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["threat_intel_indicator_type"]
+            )
+        )
+    if "threat_intel_indicator_value" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ThreatIntelIndicatorValue"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["threat_intel_indicator_value"]
+            )
+        )
+    if "threat_intel_indicator_category" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ThreatIntelIndicatorCategory"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["threat_intel_indicator_category"]
+            )
+        )
+    if "threat_intel_indicator_last_observed_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["ThreatIntelIndicatorLastObservedAt"] = (
+            capo_securityhub.types.date_filter_list.serialize_json(
+                value["threat_intel_indicator_last_observed_at"]
+            )
+        )
+    if "threat_intel_indicator_source" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ThreatIntelIndicatorSource"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["threat_intel_indicator_source"]
+            )
+        )
+    if "threat_intel_indicator_source_url" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ThreatIntelIndicatorSourceUrl"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["threat_intel_indicator_source_url"]
+            )
+        )
+    if "resource_type" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceType"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["resource_type"]
+        )
+    if "resource_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceId"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["resource_id"]
+        )
+    if "resource_partition" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourcePartition"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_partition"]
+            )
+        )
+    if "resource_region" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceRegion"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_region"]
+            )
+        )
+    if "resource_tags" in value:
+        import capo_securityhub.types.map_filter_list
+
+        out["ResourceTags"] = capo_securityhub.types.map_filter_list.serialize_json(
+            value["resource_tags"]
+        )
+    if "resource_aws_ec2_instance_type" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsEc2InstanceType"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_type"]
+            )
+        )
+    if "resource_aws_ec2_instance_image_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsEc2InstanceImageId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_image_id"]
+            )
+        )
+    if "resource_aws_ec2_instance_ip_v4_addresses" in value:
+        import capo_securityhub.types.ip_filter_list
+
+        out["ResourceAwsEc2InstanceIpV4Addresses"] = (
+            capo_securityhub.types.ip_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_ip_v4_addresses"]
+            )
+        )
+    if "resource_aws_ec2_instance_ip_v6_addresses" in value:
+        import capo_securityhub.types.ip_filter_list
+
+        out["ResourceAwsEc2InstanceIpV6Addresses"] = (
+            capo_securityhub.types.ip_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_ip_v6_addresses"]
+            )
+        )
+    if "resource_aws_ec2_instance_key_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsEc2InstanceKeyName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_key_name"]
+            )
+        )
+    if "resource_aws_ec2_instance_iam_instance_profile_arn" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsEc2InstanceIamInstanceProfileArn"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_iam_instance_profile_arn"]
+            )
+        )
+    if "resource_aws_ec2_instance_vpc_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsEc2InstanceVpcId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_vpc_id"]
+            )
+        )
+    if "resource_aws_ec2_instance_subnet_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsEc2InstanceSubnetId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_subnet_id"]
+            )
+        )
+    if "resource_aws_ec2_instance_launched_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["ResourceAwsEc2InstanceLaunchedAt"] = (
+            capo_securityhub.types.date_filter_list.serialize_json(
+                value["resource_aws_ec2_instance_launched_at"]
+            )
+        )
+    if "resource_aws_s3_bucket_owner_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsS3BucketOwnerId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_s3_bucket_owner_id"]
+            )
+        )
+    if "resource_aws_s3_bucket_owner_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsS3BucketOwnerName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_s3_bucket_owner_name"]
+            )
+        )
+    if "resource_aws_iam_access_key_user_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsIamAccessKeyUserName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_iam_access_key_user_name"]
+            )
+        )
+    if "resource_aws_iam_access_key_principal_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsIamAccessKeyPrincipalName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_iam_access_key_principal_name"]
+            )
+        )
+    if "resource_aws_iam_access_key_status" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsIamAccessKeyStatus"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_iam_access_key_status"]
+            )
+        )
+    if "resource_aws_iam_access_key_created_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["ResourceAwsIamAccessKeyCreatedAt"] = (
+            capo_securityhub.types.date_filter_list.serialize_json(
+                value["resource_aws_iam_access_key_created_at"]
+            )
+        )
+    if "resource_aws_iam_user_user_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceAwsIamUserUserName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_aws_iam_user_user_name"]
+            )
+        )
+    if "resource_container_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceContainerName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_container_name"]
+            )
+        )
+    if "resource_container_image_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceContainerImageId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_container_image_id"]
+            )
+        )
+    if "resource_container_image_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceContainerImageName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_container_image_name"]
+            )
+        )
+    if "resource_container_launched_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["ResourceContainerLaunchedAt"] = (
+            capo_securityhub.types.date_filter_list.serialize_json(
+                value["resource_container_launched_at"]
+            )
+        )
+    if "resource_details_other" in value:
+        import capo_securityhub.types.map_filter_list
+
+        out["ResourceDetailsOther"] = (
+            capo_securityhub.types.map_filter_list.serialize_json(
+                value["resource_details_other"]
+            )
+        )
+    if "compliance_status" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ComplianceStatus"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["compliance_status"]
+            )
+        )
+    if "verification_state" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["VerificationState"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["verification_state"]
+            )
+        )
+    if "workflow_state" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["WorkflowState"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["workflow_state"]
+        )
+    if "workflow_status" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["WorkflowStatus"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["workflow_status"]
+            )
+        )
+    if "record_state" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["RecordState"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["record_state"]
+        )
+    if "related_findings_product_arn" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["RelatedFindingsProductArn"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["related_findings_product_arn"]
+            )
+        )
+    if "related_findings_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["RelatedFindingsId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["related_findings_id"]
+            )
+        )
+    if "note_text" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["NoteText"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["note_text"]
+        )
+    if "note_updated_at" in value:
+        import capo_securityhub.types.date_filter_list
+
+        out["NoteUpdatedAt"] = capo_securityhub.types.date_filter_list.serialize_json(
+            value["note_updated_at"]
+        )
+    if "note_updated_by" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["NoteUpdatedBy"] = capo_securityhub.types.string_filter_list.serialize_json(
+            value["note_updated_by"]
+        )
+    if "keyword" in value:
+        import capo_securityhub.types.keyword_filter_list
+
+        out["Keyword"] = capo_securityhub.types.keyword_filter_list.serialize_json(
+            value["keyword"]
+        )
+    if "finding_provider_fields_confidence" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["FindingProviderFieldsConfidence"] = (
+            capo_securityhub.types.number_filter_list.serialize_json(
+                value["finding_provider_fields_confidence"]
+            )
+        )
+    if "finding_provider_fields_criticality" in value:
+        import capo_securityhub.types.number_filter_list
+
+        out["FindingProviderFieldsCriticality"] = (
+            capo_securityhub.types.number_filter_list.serialize_json(
+                value["finding_provider_fields_criticality"]
+            )
+        )
+    if "finding_provider_fields_related_findings_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["FindingProviderFieldsRelatedFindingsId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["finding_provider_fields_related_findings_id"]
+            )
+        )
+    if "finding_provider_fields_related_findings_product_arn" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["FindingProviderFieldsRelatedFindingsProductArn"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["finding_provider_fields_related_findings_product_arn"]
+            )
+        )
+    if "finding_provider_fields_severity_label" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["FindingProviderFieldsSeverityLabel"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["finding_provider_fields_severity_label"]
+            )
+        )
+    if "finding_provider_fields_severity_original" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["FindingProviderFieldsSeverityOriginal"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["finding_provider_fields_severity_original"]
+            )
+        )
+    if "finding_provider_fields_types" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["FindingProviderFieldsTypes"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["finding_provider_fields_types"]
+            )
+        )
+    if "sample" in value:
+        import capo_securityhub.types.boolean_filter_list
+
+        out["Sample"] = capo_securityhub.types.boolean_filter_list.serialize_json(
+            value["sample"]
+        )
+    if "compliance_security_control_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ComplianceSecurityControlId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["compliance_security_control_id"]
+            )
+        )
+    if "compliance_associated_standards_id" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ComplianceAssociatedStandardsId"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["compliance_associated_standards_id"]
+            )
+        )
+    if "vulnerabilities_exploit_available" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["VulnerabilitiesExploitAvailable"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["vulnerabilities_exploit_available"]
+            )
+        )
+    if "vulnerabilities_fix_available" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["VulnerabilitiesFixAvailable"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["vulnerabilities_fix_available"]
+            )
+        )
+    if "compliance_security_control_parameters_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ComplianceSecurityControlParametersName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["compliance_security_control_parameters_name"]
+            )
+        )
+    if "compliance_security_control_parameters_value" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ComplianceSecurityControlParametersValue"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["compliance_security_control_parameters_value"]
+            )
+        )
+    if "aws_account_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["AwsAccountName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["aws_account_name"]
+            )
+        )
+    if "resource_application_name" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceApplicationName"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_application_name"]
+            )
+        )
+    if "resource_application_arn" in value:
+        import capo_securityhub.types.string_filter_list
+
+        out["ResourceApplicationArn"] = (
+            capo_securityhub.types.string_filter_list.serialize_json(
+                value["resource_application_arn"]
+            )
+        )
+    return out
+
+
+def deserialize_json(data: dict) -> AwsSecurityFindingFilters:
+    out: AwsSecurityFindingFilters = {}  # type: ignore[typeddict-item]
+    if data.get("ProductArn") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["product_arn"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["ProductArn"]
+        )
+    if data.get("AwsAccountId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["aws_account_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["AwsAccountId"]
+            )
+        )
+    if data.get("Id") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["id"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["Id"]
+        )
+    if data.get("GeneratorId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["generator_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["GeneratorId"]
+            )
+        )
+    if data.get("Region") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["region"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["Region"]
+        )
+    if data.get("Type") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["type"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["Type"]
+        )
+    if data.get("FirstObservedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["first_observed_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["FirstObservedAt"]
+            )
+        )
+    if data.get("LastObservedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["last_observed_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["LastObservedAt"]
+            )
+        )
+    if data.get("CreatedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["created_at"] = capo_securityhub.types.date_filter_list.deserialize_json(
+            data["CreatedAt"]
+        )
+    if data.get("UpdatedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["updated_at"] = capo_securityhub.types.date_filter_list.deserialize_json(
+            data["UpdatedAt"]
+        )
+    if data.get("SeverityProduct") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["severity_product"] = (
+            capo_securityhub.types.number_filter_list.deserialize_json(
+                data["SeverityProduct"]
+            )
+        )
+    if data.get("SeverityNormalized") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["severity_normalized"] = (
+            capo_securityhub.types.number_filter_list.deserialize_json(
+                data["SeverityNormalized"]
+            )
+        )
+    if data.get("SeverityLabel") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["severity_label"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["SeverityLabel"]
+            )
+        )
+    if data.get("Confidence") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["confidence"] = capo_securityhub.types.number_filter_list.deserialize_json(
+            data["Confidence"]
+        )
+    if data.get("Criticality") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["criticality"] = capo_securityhub.types.number_filter_list.deserialize_json(
+            data["Criticality"]
+        )
+    if data.get("Title") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["title"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["Title"]
+        )
+    if data.get("Description") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["description"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["Description"]
+        )
+    if data.get("RecommendationText") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["recommendation_text"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["RecommendationText"]
+            )
+        )
+    if data.get("SourceUrl") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["source_url"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["SourceUrl"]
+        )
+    if data.get("ProductFields") is not None:
+        import capo_securityhub.types.map_filter_list
+
+        out["product_fields"] = capo_securityhub.types.map_filter_list.deserialize_json(
+            data["ProductFields"]
+        )
+    if data.get("ProductName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["product_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ProductName"]
+            )
+        )
+    if data.get("CompanyName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["company_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["CompanyName"]
+            )
+        )
+    if data.get("UserDefinedFields") is not None:
+        import capo_securityhub.types.map_filter_list
+
+        out["user_defined_fields"] = (
+            capo_securityhub.types.map_filter_list.deserialize_json(
+                data["UserDefinedFields"]
+            )
+        )
+    if data.get("MalwareName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["malware_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["MalwareName"]
+            )
+        )
+    if data.get("MalwareType") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["malware_type"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["MalwareType"]
+            )
+        )
+    if data.get("MalwarePath") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["malware_path"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["MalwarePath"]
+            )
+        )
+    if data.get("MalwareState") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["malware_state"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["MalwareState"]
+            )
+        )
+    if data.get("NetworkDirection") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["network_direction"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["NetworkDirection"]
+            )
+        )
+    if data.get("NetworkProtocol") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["network_protocol"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["NetworkProtocol"]
+            )
+        )
+    if data.get("NetworkSourceIpV4") is not None:
+        import capo_securityhub.types.ip_filter_list
+
+        out["network_source_ip_v4"] = (
+            capo_securityhub.types.ip_filter_list.deserialize_json(
+                data["NetworkSourceIpV4"]
+            )
+        )
+    if data.get("NetworkSourceIpV6") is not None:
+        import capo_securityhub.types.ip_filter_list
+
+        out["network_source_ip_v6"] = (
+            capo_securityhub.types.ip_filter_list.deserialize_json(
+                data["NetworkSourceIpV6"]
+            )
+        )
+    if data.get("NetworkSourcePort") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["network_source_port"] = (
+            capo_securityhub.types.number_filter_list.deserialize_json(
+                data["NetworkSourcePort"]
+            )
+        )
+    if data.get("NetworkSourceDomain") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["network_source_domain"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["NetworkSourceDomain"]
+            )
+        )
+    if data.get("NetworkSourceMac") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["network_source_mac"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["NetworkSourceMac"]
+            )
+        )
+    if data.get("NetworkDestinationIpV4") is not None:
+        import capo_securityhub.types.ip_filter_list
+
+        out["network_destination_ip_v4"] = (
+            capo_securityhub.types.ip_filter_list.deserialize_json(
+                data["NetworkDestinationIpV4"]
+            )
+        )
+    if data.get("NetworkDestinationIpV6") is not None:
+        import capo_securityhub.types.ip_filter_list
+
+        out["network_destination_ip_v6"] = (
+            capo_securityhub.types.ip_filter_list.deserialize_json(
+                data["NetworkDestinationIpV6"]
+            )
+        )
+    if data.get("NetworkDestinationPort") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["network_destination_port"] = (
+            capo_securityhub.types.number_filter_list.deserialize_json(
+                data["NetworkDestinationPort"]
+            )
+        )
+    if data.get("NetworkDestinationDomain") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["network_destination_domain"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["NetworkDestinationDomain"]
+            )
+        )
+    if data.get("ProcessName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["process_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ProcessName"]
+            )
+        )
+    if data.get("ProcessPath") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["process_path"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ProcessPath"]
+            )
+        )
+    if data.get("ProcessPid") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["process_pid"] = capo_securityhub.types.number_filter_list.deserialize_json(
+            data["ProcessPid"]
+        )
+    if data.get("ProcessParentPid") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["process_parent_pid"] = (
+            capo_securityhub.types.number_filter_list.deserialize_json(
+                data["ProcessParentPid"]
+            )
+        )
+    if data.get("ProcessLaunchedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["process_launched_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["ProcessLaunchedAt"]
+            )
+        )
+    if data.get("ProcessTerminatedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["process_terminated_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["ProcessTerminatedAt"]
+            )
+        )
+    if data.get("ThreatIntelIndicatorType") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["threat_intel_indicator_type"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ThreatIntelIndicatorType"]
+            )
+        )
+    if data.get("ThreatIntelIndicatorValue") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["threat_intel_indicator_value"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ThreatIntelIndicatorValue"]
+            )
+        )
+    if data.get("ThreatIntelIndicatorCategory") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["threat_intel_indicator_category"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ThreatIntelIndicatorCategory"]
+            )
+        )
+    if data.get("ThreatIntelIndicatorLastObservedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["threat_intel_indicator_last_observed_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["ThreatIntelIndicatorLastObservedAt"]
+            )
+        )
+    if data.get("ThreatIntelIndicatorSource") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["threat_intel_indicator_source"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ThreatIntelIndicatorSource"]
+            )
+        )
+    if data.get("ThreatIntelIndicatorSourceUrl") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["threat_intel_indicator_source_url"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ThreatIntelIndicatorSourceUrl"]
+            )
+        )
+    if data.get("ResourceType") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_type"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceType"]
+            )
+        )
+    if data.get("ResourceId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_id"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["ResourceId"]
+        )
+    if data.get("ResourcePartition") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_partition"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourcePartition"]
+            )
+        )
+    if data.get("ResourceRegion") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_region"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceRegion"]
+            )
+        )
+    if data.get("ResourceTags") is not None:
+        import capo_securityhub.types.map_filter_list
+
+        out["resource_tags"] = capo_securityhub.types.map_filter_list.deserialize_json(
+            data["ResourceTags"]
+        )
+    if data.get("ResourceAwsEc2InstanceType") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_ec2_instance_type"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceType"]
+            )
+        )
+    if data.get("ResourceAwsEc2InstanceImageId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_ec2_instance_image_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceImageId"]
+            )
+        )
+    if data.get("ResourceAwsEc2InstanceIpV4Addresses") is not None:
+        import capo_securityhub.types.ip_filter_list
+
+        out["resource_aws_ec2_instance_ip_v4_addresses"] = (
+            capo_securityhub.types.ip_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceIpV4Addresses"]
+            )
+        )
+    if data.get("ResourceAwsEc2InstanceIpV6Addresses") is not None:
+        import capo_securityhub.types.ip_filter_list
+
+        out["resource_aws_ec2_instance_ip_v6_addresses"] = (
+            capo_securityhub.types.ip_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceIpV6Addresses"]
+            )
+        )
+    if data.get("ResourceAwsEc2InstanceKeyName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_ec2_instance_key_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceKeyName"]
+            )
+        )
+    if data.get("ResourceAwsEc2InstanceIamInstanceProfileArn") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_ec2_instance_iam_instance_profile_arn"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceIamInstanceProfileArn"]
+            )
+        )
+    if data.get("ResourceAwsEc2InstanceVpcId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_ec2_instance_vpc_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceVpcId"]
+            )
+        )
+    if data.get("ResourceAwsEc2InstanceSubnetId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_ec2_instance_subnet_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceSubnetId"]
+            )
+        )
+    if data.get("ResourceAwsEc2InstanceLaunchedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["resource_aws_ec2_instance_launched_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["ResourceAwsEc2InstanceLaunchedAt"]
+            )
+        )
+    if data.get("ResourceAwsS3BucketOwnerId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_s3_bucket_owner_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsS3BucketOwnerId"]
+            )
+        )
+    if data.get("ResourceAwsS3BucketOwnerName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_s3_bucket_owner_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsS3BucketOwnerName"]
+            )
+        )
+    if data.get("ResourceAwsIamAccessKeyUserName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_iam_access_key_user_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsIamAccessKeyUserName"]
+            )
+        )
+    if data.get("ResourceAwsIamAccessKeyPrincipalName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_iam_access_key_principal_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsIamAccessKeyPrincipalName"]
+            )
+        )
+    if data.get("ResourceAwsIamAccessKeyStatus") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_iam_access_key_status"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsIamAccessKeyStatus"]
+            )
+        )
+    if data.get("ResourceAwsIamAccessKeyCreatedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["resource_aws_iam_access_key_created_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["ResourceAwsIamAccessKeyCreatedAt"]
+            )
+        )
+    if data.get("ResourceAwsIamUserUserName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_aws_iam_user_user_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceAwsIamUserUserName"]
+            )
+        )
+    if data.get("ResourceContainerName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_container_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceContainerName"]
+            )
+        )
+    if data.get("ResourceContainerImageId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_container_image_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceContainerImageId"]
+            )
+        )
+    if data.get("ResourceContainerImageName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_container_image_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceContainerImageName"]
+            )
+        )
+    if data.get("ResourceContainerLaunchedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["resource_container_launched_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["ResourceContainerLaunchedAt"]
+            )
+        )
+    if data.get("ResourceDetailsOther") is not None:
+        import capo_securityhub.types.map_filter_list
+
+        out["resource_details_other"] = (
+            capo_securityhub.types.map_filter_list.deserialize_json(
+                data["ResourceDetailsOther"]
+            )
+        )
+    if data.get("ComplianceStatus") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["compliance_status"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ComplianceStatus"]
+            )
+        )
+    if data.get("VerificationState") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["verification_state"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["VerificationState"]
+            )
+        )
+    if data.get("WorkflowState") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["workflow_state"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["WorkflowState"]
+            )
+        )
+    if data.get("WorkflowStatus") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["workflow_status"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["WorkflowStatus"]
+            )
+        )
+    if data.get("RecordState") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["record_state"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["RecordState"]
+            )
+        )
+    if data.get("RelatedFindingsProductArn") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["related_findings_product_arn"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["RelatedFindingsProductArn"]
+            )
+        )
+    if data.get("RelatedFindingsId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["related_findings_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["RelatedFindingsId"]
+            )
+        )
+    if data.get("NoteText") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["note_text"] = capo_securityhub.types.string_filter_list.deserialize_json(
+            data["NoteText"]
+        )
+    if data.get("NoteUpdatedAt") is not None:
+        import capo_securityhub.types.date_filter_list
+
+        out["note_updated_at"] = (
+            capo_securityhub.types.date_filter_list.deserialize_json(
+                data["NoteUpdatedAt"]
+            )
+        )
+    if data.get("NoteUpdatedBy") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["note_updated_by"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["NoteUpdatedBy"]
+            )
+        )
+    if data.get("Keyword") is not None:
+        import capo_securityhub.types.keyword_filter_list
+
+        out["keyword"] = capo_securityhub.types.keyword_filter_list.deserialize_json(
+            data["Keyword"]
+        )
+    if data.get("FindingProviderFieldsConfidence") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["finding_provider_fields_confidence"] = (
+            capo_securityhub.types.number_filter_list.deserialize_json(
+                data["FindingProviderFieldsConfidence"]
+            )
+        )
+    if data.get("FindingProviderFieldsCriticality") is not None:
+        import capo_securityhub.types.number_filter_list
+
+        out["finding_provider_fields_criticality"] = (
+            capo_securityhub.types.number_filter_list.deserialize_json(
+                data["FindingProviderFieldsCriticality"]
+            )
+        )
+    if data.get("FindingProviderFieldsRelatedFindingsId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["finding_provider_fields_related_findings_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["FindingProviderFieldsRelatedFindingsId"]
+            )
+        )
+    if data.get("FindingProviderFieldsRelatedFindingsProductArn") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["finding_provider_fields_related_findings_product_arn"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["FindingProviderFieldsRelatedFindingsProductArn"]
+            )
+        )
+    if data.get("FindingProviderFieldsSeverityLabel") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["finding_provider_fields_severity_label"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["FindingProviderFieldsSeverityLabel"]
+            )
+        )
+    if data.get("FindingProviderFieldsSeverityOriginal") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["finding_provider_fields_severity_original"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["FindingProviderFieldsSeverityOriginal"]
+            )
+        )
+    if data.get("FindingProviderFieldsTypes") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["finding_provider_fields_types"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["FindingProviderFieldsTypes"]
+            )
+        )
+    if data.get("Sample") is not None:
+        import capo_securityhub.types.boolean_filter_list
+
+        out["sample"] = capo_securityhub.types.boolean_filter_list.deserialize_json(
+            data["Sample"]
+        )
+    if data.get("ComplianceSecurityControlId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["compliance_security_control_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ComplianceSecurityControlId"]
+            )
+        )
+    if data.get("ComplianceAssociatedStandardsId") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["compliance_associated_standards_id"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ComplianceAssociatedStandardsId"]
+            )
+        )
+    if data.get("VulnerabilitiesExploitAvailable") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["vulnerabilities_exploit_available"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["VulnerabilitiesExploitAvailable"]
+            )
+        )
+    if data.get("VulnerabilitiesFixAvailable") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["vulnerabilities_fix_available"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["VulnerabilitiesFixAvailable"]
+            )
+        )
+    if data.get("ComplianceSecurityControlParametersName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["compliance_security_control_parameters_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ComplianceSecurityControlParametersName"]
+            )
+        )
+    if data.get("ComplianceSecurityControlParametersValue") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["compliance_security_control_parameters_value"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ComplianceSecurityControlParametersValue"]
+            )
+        )
+    if data.get("AwsAccountName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["aws_account_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["AwsAccountName"]
+            )
+        )
+    if data.get("ResourceApplicationName") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_application_name"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceApplicationName"]
+            )
+        )
+    if data.get("ResourceApplicationArn") is not None:
+        import capo_securityhub.types.string_filter_list
+
+        out["resource_application_arn"] = (
+            capo_securityhub.types.string_filter_list.deserialize_json(
+                data["ResourceApplicationArn"]
+            )
+        )
+    return out