capo-securityhub 0.1.0__py3-none-any.whl

capo_securityhub/types/aws_api_gateway_v2_stage_details.py

@@ -0,0 +1,160 @@
+"""Generated from Smithy shape ``com.amazonaws.securityhub#AwsApiGatewayV2StageDetails``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+if TYPE_CHECKING:
+    import capo_securityhub.types.aws_api_gateway_access_log_settings
+    import capo_securityhub.types.aws_api_gateway_v2_route_settings
+    import capo_securityhub.types.boolean
+    import capo_securityhub.types.field_map
+    import capo_securityhub.types.non_empty_string
+
+
+class AwsApiGatewayV2StageDetails(TypedDict, closed=True):
+    client_certificate_id: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p>The identifier of a client certificate for a stage. Supported only for WebSocket API calls.</p>"""
+    created_date: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    r"""<p>Indicates when the stage was created.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    description: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p>The description of the stage.</p>"""
+    default_route_settings: NotRequired[
+        "capo_securityhub.types.aws_api_gateway_v2_route_settings.AwsApiGatewayV2RouteSettings"
+    ]
+    """<p>Default route settings for the stage.</p>"""
+    deployment_id: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p>The identifier of the deployment that the stage is associated with. </p>"""
+    last_updated_date: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    r"""<p>Indicates when the stage was most recently updated.</p> <p>For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see <a href=\"https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps\">Timestamps</a>.</p>"""
+    route_settings: NotRequired[
+        "capo_securityhub.types.aws_api_gateway_v2_route_settings.AwsApiGatewayV2RouteSettings"
+    ]
+    """<p>The route settings for the stage.</p>"""
+    stage_name: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p>The name of the stage.</p>"""
+    stage_variables: NotRequired["capo_securityhub.types.field_map.FieldMap"]
+    """<p>A map that defines the stage variables for the stage.</p> <p>Variable names can have alphanumeric and underscore characters.</p> <p>Variable values can contain the following characters:</p> <ul> <li> <p>Uppercase and lowercase letters</p> </li> <li> <p>Numbers</p> </li> <li> <p>Special characters -._~:/?#&=,</p> </li> </ul>"""
+    access_log_settings: NotRequired[
+        "capo_securityhub.types.aws_api_gateway_access_log_settings.AwsApiGatewayAccessLogSettings"
+    ]
+    """<p>Information about settings for logging access for the stage.</p>"""
+    auto_deploy: NotRequired["capo_securityhub.types.boolean.Boolean"]
+    """<p>Indicates whether updates to an API automatically trigger a new deployment.</p>"""
+    last_deployment_status_message: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p>The status of the last deployment of a stage. Supported only if the stage has automatic deployment enabled.</p>"""
+    api_gateway_managed: NotRequired["capo_securityhub.types.boolean.Boolean"]
+    """<p>Indicates whether the stage is managed by API Gateway.</p>"""
+
+
+# --- restJson1 ser/de ---
+def serialize_json(value: AwsApiGatewayV2StageDetails) -> dict:
+    out: dict = {}
+    if "client_certificate_id" in value:
+        out["ClientCertificateId"] = value["client_certificate_id"]
+    if "created_date" in value:
+        out["CreatedDate"] = value["created_date"]
+    if "description" in value:
+        out["Description"] = value["description"]
+    if "default_route_settings" in value:
+        import capo_securityhub.types.aws_api_gateway_v2_route_settings
+
+        out["DefaultRouteSettings"] = (
+            capo_securityhub.types.aws_api_gateway_v2_route_settings.serialize_json(
+                value["default_route_settings"]
+            )
+        )
+    if "deployment_id" in value:
+        out["DeploymentId"] = value["deployment_id"]
+    if "last_updated_date" in value:
+        out["LastUpdatedDate"] = value["last_updated_date"]
+    if "route_settings" in value:
+        import capo_securityhub.types.aws_api_gateway_v2_route_settings
+
+        out["RouteSettings"] = (
+            capo_securityhub.types.aws_api_gateway_v2_route_settings.serialize_json(
+                value["route_settings"]
+            )
+        )
+    if "stage_name" in value:
+        out["StageName"] = value["stage_name"]
+    if "stage_variables" in value:
+        import capo_securityhub.types.field_map
+
+        out["StageVariables"] = capo_securityhub.types.field_map.serialize_json(
+            value["stage_variables"]
+        )
+    if "access_log_settings" in value:
+        import capo_securityhub.types.aws_api_gateway_access_log_settings
+
+        out["AccessLogSettings"] = (
+            capo_securityhub.types.aws_api_gateway_access_log_settings.serialize_json(
+                value["access_log_settings"]
+            )
+        )
+    if "auto_deploy" in value:
+        out["AutoDeploy"] = value["auto_deploy"]
+    if "last_deployment_status_message" in value:
+        out["LastDeploymentStatusMessage"] = value["last_deployment_status_message"]
+    if "api_gateway_managed" in value:
+        out["ApiGatewayManaged"] = value["api_gateway_managed"]
+    return out
+
+
+def deserialize_json(data: dict) -> AwsApiGatewayV2StageDetails:
+    out: AwsApiGatewayV2StageDetails = {}  # type: ignore[typeddict-item]
+    if data.get("ClientCertificateId") is not None:
+        out["client_certificate_id"] = data["ClientCertificateId"]
+    if data.get("CreatedDate") is not None:
+        out["created_date"] = data["CreatedDate"]
+    if data.get("Description") is not None:
+        out["description"] = data["Description"]
+    if data.get("DefaultRouteSettings") is not None:
+        import capo_securityhub.types.aws_api_gateway_v2_route_settings
+
+        out["default_route_settings"] = (
+            capo_securityhub.types.aws_api_gateway_v2_route_settings.deserialize_json(
+                data["DefaultRouteSettings"]
+            )
+        )
+    if data.get("DeploymentId") is not None:
+        out["deployment_id"] = data["DeploymentId"]
+    if data.get("LastUpdatedDate") is not None:
+        out["last_updated_date"] = data["LastUpdatedDate"]
+    if data.get("RouteSettings") is not None:
+        import capo_securityhub.types.aws_api_gateway_v2_route_settings
+
+        out["route_settings"] = (
+            capo_securityhub.types.aws_api_gateway_v2_route_settings.deserialize_json(
+                data["RouteSettings"]
+            )
+        )
+    if data.get("StageName") is not None:
+        out["stage_name"] = data["StageName"]
+    if data.get("StageVariables") is not None:
+        import capo_securityhub.types.field_map
+
+        out["stage_variables"] = capo_securityhub.types.field_map.deserialize_json(
+            data["StageVariables"]
+        )
+    if data.get("AccessLogSettings") is not None:
+        import capo_securityhub.types.aws_api_gateway_access_log_settings
+
+        out["access_log_settings"] = (
+            capo_securityhub.types.aws_api_gateway_access_log_settings.deserialize_json(
+                data["AccessLogSettings"]
+            )
+        )
+    if data.get("AutoDeploy") is not None:
+        out["auto_deploy"] = data["AutoDeploy"]
+    if data.get("LastDeploymentStatusMessage") is not None:
+        out["last_deployment_status_message"] = data["LastDeploymentStatusMessage"]
+    if data.get("ApiGatewayManaged") is not None:
+        out["api_gateway_managed"] = data["ApiGatewayManaged"]
+    return out

capo_securityhub/types/aws_app_sync_graph_ql_api_additional_authentication_providers_details.py

@@ -0,0 +1,99 @@
+"""Generated from Smithy shape ``com.amazonaws.securityhub#AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersDetails``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+if TYPE_CHECKING:
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details
+    import capo_securityhub.types.non_empty_string
+
+
+class AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersDetails(
+    TypedDict, closed=True
+):
+    authentication_type: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p> The type of security configuration for your GraphQL API: API key, Identity and Access Management (IAM), OpenID Connect (OIDC), Amazon Cognito user pools, or Lambda. </p>"""
+    lambda_authorizer_config: NotRequired[
+        "capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details.AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails"
+    ]
+    """<p> The configuration for Lambda function authorization. </p>"""
+    open_id_connect_config: NotRequired[
+        "capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details.AwsAppSyncGraphQlApiOpenIdConnectConfigDetails"
+    ]
+    """<p> The OpenID Connect configuration. </p>"""
+    user_pool_config: NotRequired[
+        "capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details.AwsAppSyncGraphQlApiUserPoolConfigDetails"
+    ]
+    """<p> The Amazon Cognito user pools configuration. </p>"""
+
+
+# --- restJson1 ser/de ---
+def serialize_json(
+    value: AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersDetails,
+) -> dict:
+    out: dict = {}
+    if "authentication_type" in value:
+        out["AuthenticationType"] = value["authentication_type"]
+    if "lambda_authorizer_config" in value:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details
+
+        out["LambdaAuthorizerConfig"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details.serialize_json(
+                value["lambda_authorizer_config"]
+            )
+        )
+    if "open_id_connect_config" in value:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details
+
+        out["OpenIdConnectConfig"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details.serialize_json(
+                value["open_id_connect_config"]
+            )
+        )
+    if "user_pool_config" in value:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details
+
+        out["UserPoolConfig"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details.serialize_json(
+                value["user_pool_config"]
+            )
+        )
+    return out
+
+
+def deserialize_json(
+    data: dict,
+) -> AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersDetails:
+    out: AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersDetails = {}  # type: ignore[typeddict-item]
+    if data.get("AuthenticationType") is not None:
+        out["authentication_type"] = data["AuthenticationType"]
+    if data.get("LambdaAuthorizerConfig") is not None:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details
+
+        out["lambda_authorizer_config"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details.deserialize_json(
+                data["LambdaAuthorizerConfig"]
+            )
+        )
+    if data.get("OpenIdConnectConfig") is not None:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details
+
+        out["open_id_connect_config"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details.deserialize_json(
+                data["OpenIdConnectConfig"]
+            )
+        )
+    if data.get("UserPoolConfig") is not None:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details
+
+        out["user_pool_config"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details.deserialize_json(
+                data["UserPoolConfig"]
+            )
+        )
+    return out

capo_securityhub/types/aws_app_sync_graph_ql_api_additional_authentication_providers_list.py

@@ -0,0 +1,43 @@
+"""Generated from Smithy shape ``com.amazonaws.securityhub#AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersList``."""
+
+from typing import TYPE_CHECKING, TypeAlias
+
+if TYPE_CHECKING:
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_details
+
+AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersList: TypeAlias = list[
+    "capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_details.AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersDetails"
+]
+
+
+# --- restJson1 ser/de ---
+def serialize_json(
+    value: AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersList,
+) -> list:
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_details
+
+    out: list = []
+    for item in value:
+        out.append(
+            capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_details.serialize_json(
+                item
+            )
+        )
+    return out
+
+
+def deserialize_json(
+    data: list,
+) -> AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersList:
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_details
+
+    out: AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersList = []
+    for item in data:
+        if item is None:
+            continue
+        out.append(
+            capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_details.deserialize_json(
+                item
+            )
+        )
+    return out

capo_securityhub/types/aws_app_sync_graph_ql_api_details.py

@@ -0,0 +1,174 @@
+"""Generated from Smithy shape ``com.amazonaws.securityhub#AwsAppSyncGraphQlApiDetails``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+if TYPE_CHECKING:
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_list
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_log_config_details
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details
+    import capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details
+    import capo_securityhub.types.boolean
+    import capo_securityhub.types.non_empty_string
+
+
+class AwsAppSyncGraphQlApiDetails(TypedDict, closed=True):
+    api_id: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p> The unique identifier for the API. </p>"""
+    id: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p>The unique identifier for the API.</p>"""
+    open_id_connect_config: NotRequired[
+        "capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details.AwsAppSyncGraphQlApiOpenIdConnectConfigDetails"
+    ]
+    """<p> Specifies the authorization configuration for using an OpenID Connect compliant service with an AppSync GraphQL API endpoint. </p>"""
+    name: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p> The API name. </p>"""
+    lambda_authorizer_config: NotRequired[
+        "capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details.AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails"
+    ]
+    """<p> Specifies the configuration for Lambda function authorization. </p>"""
+    xray_enabled: NotRequired["capo_securityhub.types.boolean.Boolean"]
+    """<p> Indicates whether to use X-Ray tracing for the GraphQL API. </p>"""
+    arn: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p> The Amazon Resource Name (ARN) of the API. </p>"""
+    user_pool_config: NotRequired[
+        "capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details.AwsAppSyncGraphQlApiUserPoolConfigDetails"
+    ]
+    """<p> The Amazon Cognito user pools configuration. </p>"""
+    authentication_type: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p> The type of security configuration for your GraphQL API: API key, Identity and Access Management (IAM), OpenID Connect (OIDC), Amazon Cognito user pools, or Lambda. </p>"""
+    log_config: NotRequired[
+        "capo_securityhub.types.aws_app_sync_graph_ql_api_log_config_details.AwsAppSyncGraphQlApiLogConfigDetails"
+    ]
+    """<p> The Amazon CloudWatch Logs configuration. </p>"""
+    additional_authentication_providers: NotRequired[
+        "capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_list.AwsAppSyncGraphQlApiAdditionalAuthenticationProvidersList"
+    ]
+    """<p> A list of additional authentication providers for the GraphQL API. </p>"""
+    waf_web_acl_arn: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p> The Amazon Resource Name (ARN) of the WAF web access control list (web ACL) associated with this GraphQL API, if one exists. </p>"""
+
+
+# --- restJson1 ser/de ---
+def serialize_json(value: AwsAppSyncGraphQlApiDetails) -> dict:
+    out: dict = {}
+    if "api_id" in value:
+        out["ApiId"] = value["api_id"]
+    if "id" in value:
+        out["Id"] = value["id"]
+    if "open_id_connect_config" in value:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details
+
+        out["OpenIdConnectConfig"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details.serialize_json(
+                value["open_id_connect_config"]
+            )
+        )
+    if "name" in value:
+        out["Name"] = value["name"]
+    if "lambda_authorizer_config" in value:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details
+
+        out["LambdaAuthorizerConfig"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details.serialize_json(
+                value["lambda_authorizer_config"]
+            )
+        )
+    if "xray_enabled" in value:
+        out["XrayEnabled"] = value["xray_enabled"]
+    if "arn" in value:
+        out["Arn"] = value["arn"]
+    if "user_pool_config" in value:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details
+
+        out["UserPoolConfig"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details.serialize_json(
+                value["user_pool_config"]
+            )
+        )
+    if "authentication_type" in value:
+        out["AuthenticationType"] = value["authentication_type"]
+    if "log_config" in value:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_log_config_details
+
+        out["LogConfig"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_log_config_details.serialize_json(
+                value["log_config"]
+            )
+        )
+    if "additional_authentication_providers" in value:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_list
+
+        out["AdditionalAuthenticationProviders"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_list.serialize_json(
+                value["additional_authentication_providers"]
+            )
+        )
+    if "waf_web_acl_arn" in value:
+        out["WafWebAclArn"] = value["waf_web_acl_arn"]
+    return out
+
+
+def deserialize_json(data: dict) -> AwsAppSyncGraphQlApiDetails:
+    out: AwsAppSyncGraphQlApiDetails = {}  # type: ignore[typeddict-item]
+    if data.get("ApiId") is not None:
+        out["api_id"] = data["ApiId"]
+    if data.get("Id") is not None:
+        out["id"] = data["Id"]
+    if data.get("OpenIdConnectConfig") is not None:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details
+
+        out["open_id_connect_config"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_open_id_connect_config_details.deserialize_json(
+                data["OpenIdConnectConfig"]
+            )
+        )
+    if data.get("Name") is not None:
+        out["name"] = data["Name"]
+    if data.get("LambdaAuthorizerConfig") is not None:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details
+
+        out["lambda_authorizer_config"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_lambda_authorizer_config_details.deserialize_json(
+                data["LambdaAuthorizerConfig"]
+            )
+        )
+    if data.get("XrayEnabled") is not None:
+        out["xray_enabled"] = data["XrayEnabled"]
+    if data.get("Arn") is not None:
+        out["arn"] = data["Arn"]
+    if data.get("UserPoolConfig") is not None:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details
+
+        out["user_pool_config"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_user_pool_config_details.deserialize_json(
+                data["UserPoolConfig"]
+            )
+        )
+    if data.get("AuthenticationType") is not None:
+        out["authentication_type"] = data["AuthenticationType"]
+    if data.get("LogConfig") is not None:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_log_config_details
+
+        out["log_config"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_log_config_details.deserialize_json(
+                data["LogConfig"]
+            )
+        )
+    if data.get("AdditionalAuthenticationProviders") is not None:
+        import capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_list
+
+        out["additional_authentication_providers"] = (
+            capo_securityhub.types.aws_app_sync_graph_ql_api_additional_authentication_providers_list.deserialize_json(
+                data["AdditionalAuthenticationProviders"]
+            )
+        )
+    if data.get("WafWebAclArn") is not None:
+        out["waf_web_acl_arn"] = data["WafWebAclArn"]
+    return out

capo_securityhub/types/aws_app_sync_graph_ql_api_lambda_authorizer_config_details.py

@@ -0,0 +1,47 @@
+"""Generated from Smithy shape ``com.amazonaws.securityhub#AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+if TYPE_CHECKING:
+    import capo_securityhub.types.integer
+    import capo_securityhub.types.non_empty_string
+
+
+class AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails(TypedDict, closed=True):
+    authorizer_result_ttl_in_seconds: NotRequired[
+        "capo_securityhub.types.integer.Integer"
+    ]
+    """<p> The number of seconds a response should be cached for. The default is 5 minutes (300 seconds). </p>"""
+    authorizer_uri: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p> The Amazon Resource Name (ARN) of the Lambda function to be called for authorization. This can be a standard Lambda ARN, a version ARN (.../v3), or an alias ARN. </p>"""
+    identity_validation_expression: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p> A regular expression for validation of tokens before the Lambda function is called. </p>"""
+
+
+# --- restJson1 ser/de ---
+def serialize_json(value: AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails) -> dict:
+    out: dict = {}
+    if "authorizer_result_ttl_in_seconds" in value:
+        out["AuthorizerResultTtlInSeconds"] = value["authorizer_result_ttl_in_seconds"]
+    if "authorizer_uri" in value:
+        out["AuthorizerUri"] = value["authorizer_uri"]
+    if "identity_validation_expression" in value:
+        out["IdentityValidationExpression"] = value["identity_validation_expression"]
+    return out
+
+
+def deserialize_json(data: dict) -> AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails:
+    out: AwsAppSyncGraphQlApiLambdaAuthorizerConfigDetails = {}  # type: ignore[typeddict-item]
+    if data.get("AuthorizerResultTtlInSeconds") is not None:
+        out["authorizer_result_ttl_in_seconds"] = data["AuthorizerResultTtlInSeconds"]
+    if data.get("AuthorizerUri") is not None:
+        out["authorizer_uri"] = data["AuthorizerUri"]
+    if data.get("IdentityValidationExpression") is not None:
+        out["identity_validation_expression"] = data["IdentityValidationExpression"]
+    return out

capo_securityhub/types/aws_app_sync_graph_ql_api_log_config_details.py

@@ -0,0 +1,45 @@
+"""Generated from Smithy shape ``com.amazonaws.securityhub#AwsAppSyncGraphQlApiLogConfigDetails``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+if TYPE_CHECKING:
+    import capo_securityhub.types.boolean
+    import capo_securityhub.types.non_empty_string
+
+
+class AwsAppSyncGraphQlApiLogConfigDetails(TypedDict, closed=True):
+    cloud_watch_logs_role_arn: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p> The Amazon Resource Name (ARN) of the service role that AppSync assumes to publish to CloudWatch Logs in your account. </p>"""
+    exclude_verbose_content: NotRequired["capo_securityhub.types.boolean.Boolean"]
+    """<p> Set to <code>TRUE</code> to exclude sections that contain information such as headers, context, and evaluated mapping templates, regardless of logging level. </p>"""
+    field_log_level: NotRequired[
+        "capo_securityhub.types.non_empty_string.NonEmptyString"
+    ]
+    """<p> The field logging level. </p>"""
+
+
+# --- restJson1 ser/de ---
+def serialize_json(value: AwsAppSyncGraphQlApiLogConfigDetails) -> dict:
+    out: dict = {}
+    if "cloud_watch_logs_role_arn" in value:
+        out["CloudWatchLogsRoleArn"] = value["cloud_watch_logs_role_arn"]
+    if "exclude_verbose_content" in value:
+        out["ExcludeVerboseContent"] = value["exclude_verbose_content"]
+    if "field_log_level" in value:
+        out["FieldLogLevel"] = value["field_log_level"]
+    return out
+
+
+def deserialize_json(data: dict) -> AwsAppSyncGraphQlApiLogConfigDetails:
+    out: AwsAppSyncGraphQlApiLogConfigDetails = {}  # type: ignore[typeddict-item]
+    if data.get("CloudWatchLogsRoleArn") is not None:
+        out["cloud_watch_logs_role_arn"] = data["CloudWatchLogsRoleArn"]
+    if data.get("ExcludeVerboseContent") is not None:
+        out["exclude_verbose_content"] = data["ExcludeVerboseContent"]
+    if data.get("FieldLogLevel") is not None:
+        out["field_log_level"] = data["FieldLogLevel"]
+    return out

capo_securityhub/types/aws_app_sync_graph_ql_api_open_id_connect_config_details.py

@@ -0,0 +1,47 @@
+"""Generated from Smithy shape ``com.amazonaws.securityhub#AwsAppSyncGraphQlApiOpenIdConnectConfigDetails``."""
+
+from typing import TYPE_CHECKING
+
+from typing_extensions import NotRequired, TypedDict
+
+if TYPE_CHECKING:
+    import capo_securityhub.types.long
+    import capo_securityhub.types.non_empty_string
+
+
+class AwsAppSyncGraphQlApiOpenIdConnectConfigDetails(TypedDict, closed=True):
+    auth_tt_l: NotRequired["capo_securityhub.types.long.Long"]
+    """<p> The number of milliseconds that a token is valid after being authenticated. </p>"""
+    client_id: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p> The client identifier of the relying party at the OpenID identity provider. This identifier is typically obtained when the relying party is registered with the OpenID identity provider. You can specify a regular expression so that AppSync can validate against multiple client identifiers at a time. </p>"""
+    iat_tt_l: NotRequired["capo_securityhub.types.long.Long"]
+    """<p> The number of milliseconds that a token is valid after it's issued to a user. </p>"""
+    issuer: NotRequired["capo_securityhub.types.non_empty_string.NonEmptyString"]
+    """<p> The issuer for the OIDC configuration. The issuer returned by discovery must exactly match the value of <code>iss</code> in the ID token. </p>"""
+
+
+# --- restJson1 ser/de ---
+def serialize_json(value: AwsAppSyncGraphQlApiOpenIdConnectConfigDetails) -> dict:
+    out: dict = {}
+    if "auth_tt_l" in value:
+        out["AuthTtL"] = value["auth_tt_l"]
+    if "client_id" in value:
+        out["ClientId"] = value["client_id"]
+    if "iat_tt_l" in value:
+        out["IatTtL"] = value["iat_tt_l"]
+    if "issuer" in value:
+        out["Issuer"] = value["issuer"]
+    return out
+
+
+def deserialize_json(data: dict) -> AwsAppSyncGraphQlApiOpenIdConnectConfigDetails:
+    out: AwsAppSyncGraphQlApiOpenIdConnectConfigDetails = {}  # type: ignore[typeddict-item]
+    if data.get("AuthTtL") is not None:
+        out["auth_tt_l"] = data["AuthTtL"]
+    if data.get("ClientId") is not None:
+        out["client_id"] = data["ClientId"]
+    if data.get("IatTtL") is not None:
+        out["iat_tt_l"] = data["IatTtL"]
+    if data.get("Issuer") is not None:
+        out["issuer"] = data["Issuer"]
+    return out