From 511c677be3b02d3055323c1cbfccb410fb1e2154 Mon Sep 17 00:00:00 2001
From: awstools The name of the DNS domain that issued the API call. Length Constraints: 128. The name of the API method that was issued. Length Constraints: 128. The name of the Amazon Web Services service that the API method belongs to. Length Constraints: 128. The DNS domain that is associated with the DNS request. Length Constraints: 128. The protocol that was used for the DNS request. Length Constraints: Minimum length of 1. Maximum length of 64. The port name of the local connection. Length Constraints: 128. The port name of the remote connection. Length Constraints: 128. The protocol used to make the network connection request. Length Constraints: Minimum length of 1. Maximum length of 64.NOT_AVAILABLE
- Check could not be performed due to a service
* outage, API error, or because the result of the Config evaluation was
* NOT_APPLICABLE
. If the Config evaluation result was
- * NOT_APPLICABLE
, then after 3 days, Security Hub automatically archives
- * the finding.
NOT_APPLICABLE
for a Security Hub control, Security Hub automatically archives
+ * the finding after 3 days.
*
*
*
@@ -10029,6 +10029,7 @@ export interface Compliance {
/**
* For a control, the industry or regulatory framework requirements that are related to the * control. The check for that control is aligned with these requirements.
+ *Array Members: Maximum number of 32 items.
* @public */ RelatedRequirements?: string[]; @@ -10079,6 +10080,7 @@ export interface FindingProviderSeverity { /** *The finding provider's original value for the severity.
+ *Length Constraints: Minimum length of 1. Maximum length of 64.
* @public */ Original?: string; @@ -10158,6 +10160,7 @@ export interface GeneratorDetails { ** An array of tags used to identify the detector associated with the finding. *
+ *Array Members: Minimum number of 0 items. Maximum number of 10 items.
* @public */ Labels?: string[]; @@ -10212,6 +10215,7 @@ export type MalwareType = (typeof MalwareType)[keyof typeof MalwareType]; export interface Malware { /** *The name of the malware that was observed.
+ *Length Constraints: Minimum of 1. Maximum of 64.
* @public */ Name: string | undefined; @@ -10224,6 +10228,7 @@ export interface Malware { /** *The file system path of the malware that was observed.
+ *Length Constraints: Minimum of 1. Maximum of 512.
* @public */ Path?: string; @@ -10280,6 +10285,7 @@ export interface Network { /** *The protocol of network-related information about a finding.
+ *Length Constraints: Minimum of 1. Maximum of 16.
* @public */ Protocol?: string; @@ -10310,6 +10316,7 @@ export interface Network { /** *The source domain of network-related information about a finding.
+ *Length Constraints: Minimum of 1. Maximum of 128.
* @public */ SourceDomain?: string; @@ -10341,6 +10348,7 @@ export interface Network { /** *The destination domain of network-related information about a finding.
+ *Length Constraints: Minimum of 1. Maximum of 128.
* @public */ DestinationDomain?: string; @@ -10372,6 +10380,7 @@ export interface NetworkPathComponentDetails { export interface NetworkHeader { /** *The protocol used for the component.
+ *Length Constraints: Minimum of 1. Maximum of 16.
* @public */ Protocol?: string; @@ -10396,12 +10405,14 @@ export interface NetworkHeader { export interface NetworkPathComponent { /** *The identifier of a component in the network path.
+ *Length Constraints: Minimum of 1. Maximum of 32.
* @public */ ComponentId?: string; /** *The type of component.
+ *Length Constraints: Minimum of 1. Maximum of 32.
* @public */ ComponentType?: string; @@ -10428,6 +10439,7 @@ export interface NetworkPathComponent { export interface Note { /** *The text of a note.
+ *Length Constraints: Minimum of 1. Maximum of 512.
* @public */ Text: string | undefined; @@ -10479,6 +10491,7 @@ export interface PatchSummary { /** *The identifier of the compliance standard that was used to determine the patch * compliance status.
+ *Length Constraints: Minimum length of 1. Maximum length of 256.
* @public */ Id: string | undefined; @@ -10486,6 +10499,7 @@ export interface PatchSummary { /** *The number of patches from the compliance standard that were installed * successfully.
+ *The value can be an integer from 0
to 100000
.
The number of patches that are part of the compliance standard but are not installed. * The count includes patches that failed to install.
+ *The value can be an integer from 0
to 100000
.
The number of patches from the compliance standard that failed to install.
+ *The value can be an integer from 0
to 100000
.
The number of installed patches that are not part of the compliance standard.
+ *The value can be an integer from 0
to 100000
.
The number of patches that are installed but are also on a list of patches that the * customer rejected.
+ *The value can be an integer from 0
to 100000
.
The number of patches that were applied, but that require the instance to be rebooted in * order to be marked as installed.
+ *The value can be an integer from 0
to 100000
.
The reboot option specified for the instance.
+ *Length Constraints: Minimum length of 1. Maximum length of 256.
* @public */ RebootOption?: string; /** *The type of patch operation performed. For Patch Manager, the values are
- * SCAN
and INSTALL
.
SCAN
and INSTALL
.
+ * Length Constraints: Minimum length of 1. Maximum length of 256.
* @public */ Operation?: string; @@ -10606,12 +10627,14 @@ export interface PatchSummary { export interface ProcessDetails { /** *The name of the process.
+ *Length Constraints: Minimum of 1. Maximum of 64.
* @public */ Name?: string; /** *The path to the process executable.
+ *Length Constraints: Minimum of 1. Maximum of 512.
* @public */ Path?: string; @@ -10712,6 +10735,7 @@ export type RecordState = (typeof RecordState)[keyof typeof RecordState]; export interface Recommendation { /** *Describes the recommended steps to take to remediate an issue identified in a finding.
+ *Length Constraints: Minimum of 1 length. Maximum of 512 length.
* @public */ Text?: string; diff --git a/clients/client-securityhub/src/models/models_2.ts b/clients/client-securityhub/src/models/models_2.ts index 0e29f28d9d885..7fa544de0c9a9 100644 --- a/clients/client-securityhub/src/models/models_2.ts +++ b/clients/client-securityhub/src/models/models_2.ts @@ -1851,6 +1851,7 @@ export interface Resource { * is an EC2 instance, then setType
to AwsEc2Instance
.
* If the resource does not match any of the provided types, then set Type
to
* Other
.
Length Constraints: Minimum length of 1. Maximum length of 256.
* @public */ Type: string | undefined; @@ -1869,6 +1870,7 @@ export interface Resource { /** *The canonical Amazon Web Services external Region name where this resource is located.
+ *Length Constraints: Minimum length of 1. Maximum length of 16.
* @public */ Region?: string; @@ -1881,7 +1883,7 @@ export interface Resource { /** *A list of Amazon Web Services tags associated with a resource at the time the finding was - * processed.
+ * processed. Tags must follow Amazon Web Services tag naming limits and requirements. * @public */ Tags?: RecordDeprecated. The normalized severity of a finding.
* Instead of providing Normalized
, provide Label
.
The value of Normalized
can be an integer between 0
and 100
.
If you provide Label
and do not provide Normalized
, then
* Normalized
is set automatically as follows.
The native severity from the finding product that generated the finding.
+ *Length Constraints: Minimum length of 1. Maximum length of 64.
* @public */ Original?: string; @@ -2082,6 +2086,7 @@ export interface ThreatIntelIndicator { /** *The value of a threat intelligence indicator.
+ *Length Constraints: Minimum of 1 length. Maximum of 512 length.
* @public */ Value?: string; @@ -2126,6 +2131,7 @@ export interface ThreatIntelIndicator { /** *The source of the threat intelligence indicator.
+ *Length Constraints: Minimum of 1 length. Maximum of 64 length.
* @public */ Source?: string; @@ -2147,6 +2153,7 @@ export interface FilePaths { /** *Path to the infected or suspicious file on the resource it was detected on. *
+ *Length Constraints: Minimum of 1 length. Maximum of 128 length.
* @public */ FilePath?: string; @@ -2154,6 +2161,7 @@ export interface FilePaths { /** *The name of the infected or suspicious file corresponding to the hash. *
+ *Length Constraints: Minimum of 1 length. Maximum of 128 length.
* @public */ FileName?: string; @@ -2161,6 +2169,7 @@ export interface FilePaths { /** *The Amazon Resource Name (ARN) of the resource on which the threat was detected. *
+ *Length Constraints: Minimum of 1 length. Maximum of 128 length.
* @public */ ResourceId?: string; @@ -2168,6 +2177,7 @@ export interface FilePaths { /** *The hash value for the infected or suspicious file. *
+ *Length Constraints: Minimum of 1 length. Maximum of 128 length.
* @public */ Hash?: string; @@ -2182,6 +2192,7 @@ export interface Threat { /** *The name of the threat. *
+ *Length Constraints: Minimum of 1 length. Maximum of 128 length.
* @public */ Name?: string; @@ -2189,6 +2200,7 @@ export interface Threat { /** *The severity of the threat. *
+ *Length Constraints: Minimum of 1 length. Maximum of 128 length.
* @public */ Severity?: string; @@ -2203,6 +2215,7 @@ export interface Threat { /** *Provides information about the file paths that were affected by the threat. *
+ *Array Members: Minimum number of 1 item. Maximum number of 5 items.
* @public */ FilePaths?: FilePaths[]; @@ -2683,13 +2696,14 @@ export type WorkflowState = (typeof WorkflowState)[keyof typeof WorkflowState]; */ export interface AwsSecurityFinding { /** - *The schema version that a finding is formatted for.
+ *The schema version that a finding is formatted for. The value is 2018-10-08
.
The security findings provider-specific identifier for a finding.
+ *Length Constraints: Minimum length of 1. Maximum length of 512.
* @public */ Id: string | undefined; @@ -2698,6 +2712,7 @@ export interface AwsSecurityFinding { *The ARN generated by Security Hub that uniquely identifies a product that generates findings. * This can be the ARN for a third-party product that is integrated with Security Hub, or the ARN for * a custom integration.
+ *Length Constraints: Minimum length of 12. Maximum length of 2048.
* @public */ ProductArn: string | undefined; @@ -2706,6 +2721,7 @@ export interface AwsSecurityFinding { *The name of the product that generated the finding.
*Security Hub populates this attribute automatically for each finding. You cannot update this attribute with BatchImportFindings
or BatchUpdateFindings
. The exception to this is a custom integration.
When you use the Security Hub console or API to filter findings by product name, you use this attribute.
+ *Length Constraints: Minimum length of 1. Maximum length of 128.
* @public */ ProductName?: string; @@ -2714,6 +2730,8 @@ export interface AwsSecurityFinding { *The name of the company for the product that generated the finding.
*Security Hub populates this attribute automatically for each finding. You cannot update this attribute with BatchImportFindings
or BatchUpdateFindings
. The exception to this is a custom integration.
When you use the Security Hub console or API to filter findings by company name, you use this attribute.
+ *Length Constraints: Minimum length of 1. Maximum length of 128. + *
* @public */ CompanyName?: string; @@ -2721,6 +2739,8 @@ export interface AwsSecurityFinding { /** *The Region from which the finding was generated.
*Security Hub populates this attribute automatically for each finding. You cannot update it using BatchImportFindings
or BatchUpdateFindings
.
Length Constraints: Minimum length of 1. Maximum length of 16. + *
* @public */ Region?: string; @@ -2728,13 +2748,15 @@ export interface AwsSecurityFinding { /** *The identifier for the solution-specific component (a discrete unit of logic) that * generated a finding. In various security findings providers' solutions, this generator can - * be called a rule, a check, a detector, a plugin, etc.
+ * be called a rule, a check, a detector, a plugin, or something else. + *Length Constraints: Minimum length of 1. Maximum length of 512.
* @public */ GeneratorId: string | undefined; /** *The Amazon Web Services account ID that a finding is generated in.
+ *Length Constraints: 12.
* @public */ AwsAccountId: string | undefined; @@ -2744,6 +2766,7 @@ export interface AwsSecurityFinding { * that classify a finding. *Valid namespace values are: Software and Configuration Checks | TTPs | Effects | Unusual * Behaviors | Sensitive Data Identifications
+ *Array Members: Maximum number of 50 items.
* @public */ Types?: string[]; @@ -2899,19 +2922,15 @@ export interface AwsSecurityFinding { Criticality?: number; /** - *A finding's title.
- *In this release, Title
is a required property.
A finding's title. Title
is a required property.
Length Constraints: Minimum length of 1. Maximum length of 256.
* @public */ Title: string | undefined; /** - *A finding's description.
- *In this release, Description
is a required property.
A finding's description. Description
is a required property.
Length Constraints: Minimum length of 1. Maximum length of 1024.
* @public */ Description: string | undefined; @@ -2939,13 +2958,15 @@ export interface AwsSecurityFinding { /** *A list of name/value string pairs associated with the finding. These are custom, - * user-defined fields added to a finding.
+ * user-defined fields added to a finding. + *Can contain up to 50 key-value pairs. For each key-value pair, the key can contain up to 128 characters, and the value can contain up to 1024 characters.
* @public */ UserDefinedFields?: RecordA list of malware related to a finding.
+ *Array Members: Maximum number of 5 items.
* @public */ Malware?: Malware[]; @@ -2972,12 +2993,14 @@ export interface AwsSecurityFinding { /** *Details about the threat detected in a security finding and the file paths that were affected by the threat. *
+ *Array Members: Minimum number of 1 item. Maximum number of 32 items.
* @public */ Threats?: Threat[]; /** *Threat intelligence details related to a finding.
+ *Array Members: Minimum number of 1 item. Maximum number of 5 items.
* @public */ ThreatIntelIndicators?: ThreatIntelIndicator[]; @@ -2985,6 +3008,7 @@ export interface AwsSecurityFinding { /** *A set of resource data types that describe the resources that the finding refers * to.
+ *Array Members: Minimum number of 1 item. Maximum number of 32 items.
* @public */ Resources: Resource[] | undefined; @@ -3025,6 +3049,7 @@ export interface AwsSecurityFinding { /** *A list of related findings.
+ *Array Members: Minimum number of 1 item. Maximum number of 10 items.
* @public */ RelatedFindings?: RelatedFinding[]; @@ -3077,7 +3102,7 @@ export interface AwsSecurityFinding { GeneratorDetails?: GeneratorDetails; /** - *A imestamp that indicates when Security Hub received a finding and begins to process it.
+ *A timestamp that indicates when Security Hub received a finding and begins to process it.
*This field accepts only the specified formats. Timestamps
* can end with Z
or ("+" / "-") time-hour [":" time-minute]
. The time-secfrac after seconds is limited
* to a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
The name of the Amazon Web Services account from which a finding was generated. *
+ *Length Constraints: Minimum length of 1. Maximum length of 50. + *
* @public */ AwsAccountName?: string; diff --git a/codegen/sdk-codegen/aws-models/securityhub.json b/codegen/sdk-codegen/aws-models/securityhub.json index cb3ad20afa42b..1fdb08347ec55 100644 --- a/codegen/sdk-codegen/aws-models/securityhub.json +++ b/codegen/sdk-codegen/aws-models/securityhub.json @@ -307,7 +307,7 @@ "PortName": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The port name of the local connection.
" + "smithy.api#documentation": "The port name of the local connection.
\nLength Constraints: 128.
" } } }, @@ -365,7 +365,7 @@ "PortName": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The port name of the remote connection.
" + "smithy.api#documentation": "The port name of the remote connection.
\nLength Constraints: 128.
" } } }, @@ -1494,13 +1494,13 @@ "Api": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The name of the API method that was issued.
" + "smithy.api#documentation": "The name of the API method that was issued.
\nLength Constraints: 128.
" } }, "ServiceName": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The name of the Amazon Web Services service that the API method belongs to.
" + "smithy.api#documentation": "The name of the Amazon Web Services service that the API method belongs to.
\nLength Constraints: 128.
" } }, "CallerType": { @@ -1550,7 +1550,7 @@ "Domain": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The name of the DNS domain that issued the API call.
" + "smithy.api#documentation": "The name of the DNS domain that issued the API call.
\nLength Constraints: 128.
" } } }, @@ -18209,7 +18209,7 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "The schema version that a finding is formatted for.
", + "smithy.api#documentation": "The schema version that a finding is formatted for. The value is 2018-10-08
.
The security findings provider-specific identifier for a finding.
", + "smithy.api#documentation": "The security findings provider-specific identifier for a finding.
\nLength Constraints: Minimum length of 1. Maximum length of 512.
", "smithy.api#required": {} } }, @@ -18225,33 +18225,33 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "The ARN generated by Security Hub that uniquely identifies a product that generates findings.\n This can be the ARN for a third-party product that is integrated with Security Hub, or the ARN for\n a custom integration.
", + "smithy.api#documentation": "The ARN generated by Security Hub that uniquely identifies a product that generates findings.\n This can be the ARN for a third-party product that is integrated with Security Hub, or the ARN for\n a custom integration.
\nLength Constraints: Minimum length of 12. Maximum length of 2048.
", "smithy.api#required": {} } }, "ProductName": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The name of the product that generated the finding.
\nSecurity Hub populates this attribute automatically for each finding. You cannot update this attribute with BatchImportFindings
or BatchUpdateFindings
. The exception to this is a custom integration.
When you use the Security Hub console or API to filter findings by product name, you use this attribute.
" + "smithy.api#documentation": "The name of the product that generated the finding.
\nSecurity Hub populates this attribute automatically for each finding. You cannot update this attribute with BatchImportFindings
or BatchUpdateFindings
. The exception to this is a custom integration.
When you use the Security Hub console or API to filter findings by product name, you use this attribute.
\nLength Constraints: Minimum length of 1. Maximum length of 128.
" } }, "CompanyName": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The name of the company for the product that generated the finding.
\nSecurity Hub populates this attribute automatically for each finding. You cannot update this attribute with BatchImportFindings
or BatchUpdateFindings
. The exception to this is a custom integration.
When you use the Security Hub console or API to filter findings by company name, you use this attribute.
" + "smithy.api#documentation": "The name of the company for the product that generated the finding.
\nSecurity Hub populates this attribute automatically for each finding. You cannot update this attribute with BatchImportFindings
or BatchUpdateFindings
. The exception to this is a custom integration.
When you use the Security Hub console or API to filter findings by company name, you use this attribute.
\nLength Constraints: Minimum length of 1. Maximum length of 128.\n
" } }, "Region": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The Region from which the finding was generated.
\nSecurity Hub populates this attribute automatically for each finding. You cannot update it using BatchImportFindings
or BatchUpdateFindings
.
The Region from which the finding was generated.
\nSecurity Hub populates this attribute automatically for each finding. You cannot update it using BatchImportFindings
or BatchUpdateFindings
.
Length Constraints: Minimum length of 1. Maximum length of 16.\n
" } }, "GeneratorId": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "The identifier for the solution-specific component (a discrete unit of logic) that\n generated a finding. In various security findings providers' solutions, this generator can\n be called a rule, a check, a detector, a plugin, etc.
", + "smithy.api#documentation": "The identifier for the solution-specific component (a discrete unit of logic) that\n generated a finding. In various security findings providers' solutions, this generator can\n be called a rule, a check, a detector, a plugin, or something else.
\nLength Constraints: Minimum length of 1. Maximum length of 512.
", "smithy.api#required": {} } }, @@ -18259,14 +18259,14 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "The Amazon Web Services account ID that a finding is generated in.
", + "smithy.api#documentation": "The Amazon Web Services account ID that a finding is generated in.
\nLength Constraints: 12.
", "smithy.api#required": {} } }, "Types": { "target": "com.amazonaws.securityhub#TypeList", "traits": { - "smithy.api#documentation": "One or more finding types in the format of namespace/category/classifier
\n that classify a finding.
Valid namespace values are: Software and Configuration Checks | TTPs | Effects | Unusual\n Behaviors | Sensitive Data Identifications
" + "smithy.api#documentation": "One or more finding types in the format of namespace/category/classifier
\n that classify a finding.
Valid namespace values are: Software and Configuration Checks | TTPs | Effects | Unusual\n Behaviors | Sensitive Data Identifications
\nArray Members: Maximum number of 50 items.
" } }, "FirstObservedAt": { @@ -18319,7 +18319,7 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "A finding's title.
\nIn this release, Title
is a required property.
A finding's title. Title
is a required property.
Length Constraints: Minimum length of 1. Maximum length of 256.
", "smithy.api#required": {} } }, @@ -18327,7 +18327,7 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "A finding's description.
\nIn this release, Description
is a required property.
A finding's description. Description
is a required property.
Length Constraints: Minimum length of 1. Maximum length of 1024.
", "smithy.api#required": {} } }, @@ -18352,13 +18352,13 @@ "UserDefinedFields": { "target": "com.amazonaws.securityhub#FieldMap", "traits": { - "smithy.api#documentation": "A list of name/value string pairs associated with the finding. These are custom,\n user-defined fields added to a finding.
" + "smithy.api#documentation": "A list of name/value string pairs associated with the finding. These are custom,\n user-defined fields added to a finding.
\nCan contain up to 50 key-value pairs. For each key-value pair, the key can contain up to 128 characters, and the value can contain up to 1024 characters.
" } }, "Malware": { "target": "com.amazonaws.securityhub#MalwareList", "traits": { - "smithy.api#documentation": "A list of malware related to a finding.
" + "smithy.api#documentation": "A list of malware related to a finding.
\nArray Members: Maximum number of 5 items.
" } }, "Network": { @@ -18382,20 +18382,20 @@ "Threats": { "target": "com.amazonaws.securityhub#ThreatList", "traits": { - "smithy.api#documentation": "Details about the threat detected in a security finding and the file paths that were affected by the threat.\n
" + "smithy.api#documentation": "Details about the threat detected in a security finding and the file paths that were affected by the threat.\n
\nArray Members: Minimum number of 1 item. Maximum number of 32 items.
" } }, "ThreatIntelIndicators": { "target": "com.amazonaws.securityhub#ThreatIntelIndicatorList", "traits": { - "smithy.api#documentation": "Threat intelligence details related to a finding.
" + "smithy.api#documentation": "Threat intelligence details related to a finding.
\nArray Members: Minimum number of 1 item. Maximum number of 5 items.
" } }, "Resources": { "target": "com.amazonaws.securityhub#ResourceList", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "A set of resource data types that describe the resources that the finding refers\n to.
", + "smithy.api#documentation": "A set of resource data types that describe the resources that the finding refers\n to.
\nArray Members: Minimum number of 1 item. Maximum number of 32 items.
", "smithy.api#required": {} } }, @@ -18432,7 +18432,7 @@ "RelatedFindings": { "target": "com.amazonaws.securityhub#RelatedFindingList", "traits": { - "smithy.api#documentation": "A list of related findings.
" + "smithy.api#documentation": "A list of related findings.
\nArray Members: Minimum number of 1 item. Maximum number of 10 items.
" } }, "Note": { @@ -18480,13 +18480,13 @@ "ProcessedAt": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "A imestamp that indicates when Security Hub received a finding and begins to process it.
\nThis field accepts only the specified formats. Timestamps \ncan end with Z
or (\"+\" / \"-\") time-hour [\":\" time-minute]
. The time-secfrac after seconds is limited \nto a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
\n YYYY-MM-DDTHH:MM:SSZ
(for example, 2019-01-31T23:00:00Z
)
\n YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ
(for example, 2019-01-31T23:00:00.123456789Z
)
\n YYYY-MM-DDTHH:MM:SS+HH:MM
(for example, 2024-01-04T15:25:10+17:59
)
\n YYYY-MM-DDTHH:MM:SS-HHMM
(for example, 2024-01-04T15:25:10-1759
)
\n YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM
(for example, 2024-01-04T15:25:10.123456789+17:59
)
A timestamp that indicates when Security Hub received a finding and begins to process it.
\nThis field accepts only the specified formats. Timestamps \ncan end with Z
or (\"+\" / \"-\") time-hour [\":\" time-minute]
. The time-secfrac after seconds is limited \nto a maximum of 9 digits. The offset is bounded by +/-18:00. Here are valid timestamp formats with examples:
\n YYYY-MM-DDTHH:MM:SSZ
(for example, 2019-01-31T23:00:00Z
)
\n YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ
(for example, 2019-01-31T23:00:00.123456789Z
)
\n YYYY-MM-DDTHH:MM:SS+HH:MM
(for example, 2024-01-04T15:25:10+17:59
)
\n YYYY-MM-DDTHH:MM:SS-HHMM
(for example, 2024-01-04T15:25:10-1759
)
\n YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM
(for example, 2024-01-04T15:25:10.123456789+17:59
)
The name of the Amazon Web Services account from which a finding was generated.\n
" + "smithy.api#documentation": "The name of the Amazon Web Services account from which a finding was generated.\n
\nLength Constraints: Minimum length of 1. Maximum length of 50.\n
" } } }, @@ -22171,13 +22171,13 @@ "Status": { "target": "com.amazonaws.securityhub#ComplianceStatus", "traits": { - "smithy.api#documentation": "The result of a standards check.
\nThe valid values for Status
are as follows.
\n PASSED
- Standards check passed for all evaluated\n resources.
\n WARNING
- Some information is missing or this check is not\n supported for your configuration.
\n FAILED
- Standards check failed for at least one evaluated\n resource.
\n NOT_AVAILABLE
- Check could not be performed due to a service\n outage, API error, or because the result of the Config evaluation was\n NOT_APPLICABLE
. If the Config evaluation result was\n NOT_APPLICABLE
, then after 3 days, Security Hub automatically archives\n the finding.
The result of a standards check.
\nThe valid values for Status
are as follows.
\n PASSED
- Standards check passed for all evaluated\n resources.
\n WARNING
- Some information is missing or this check is not\n supported for your configuration.
\n FAILED
- Standards check failed for at least one evaluated\n resource.
\n NOT_AVAILABLE
- Check could not be performed due to a service\n outage, API error, or because the result of the Config evaluation was\n NOT_APPLICABLE
. If the Config evaluation result was\n NOT_APPLICABLE
for a Security Hub control, Security Hub automatically archives\n the finding after 3 days.
For a control, the industry or regulatory framework requirements that are related to the\n control. The check for that control is aligned with these requirements.
" + "smithy.api#documentation": "For a control, the industry or regulatory framework requirements that are related to the\n control. The check for that control is aligned with these requirements.
\nArray Members: Maximum number of 32 items.
" } }, "StatusReasons": { @@ -25008,13 +25008,13 @@ "Domain": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The DNS domain that is associated with the DNS request.
" + "smithy.api#documentation": "The DNS domain that is associated with the DNS request.
\nLength Constraints: 128.
" } }, "Protocol": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The protocol that was used for the DNS request.
" + "smithy.api#documentation": "The protocol that was used for the DNS request.
\nLength Constraints: Minimum length of 1. Maximum length of 64.
" } }, "Blocked": { @@ -25357,25 +25357,25 @@ "FilePath": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "Path to the infected or suspicious file on the resource it was detected on.\n\t\t
" + "smithy.api#documentation": "Path to the infected or suspicious file on the resource it was detected on.\n\t\t
\nLength Constraints: Minimum of 1 length. Maximum of 128 length.
" } }, "FileName": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The name of the infected or suspicious file corresponding to the hash.\n\t\t
" + "smithy.api#documentation": "The name of the infected or suspicious file corresponding to the hash.\n\t\t
\nLength Constraints: Minimum of 1 length. Maximum of 128 length.
" } }, "ResourceId": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The Amazon Resource Name (ARN) of the resource on which the threat was detected.\n\t\t
" + "smithy.api#documentation": "The Amazon Resource Name (ARN) of the resource on which the threat was detected.\n\t\t
\nLength Constraints: Minimum of 1 length. Maximum of 128 length.
" } }, "Hash": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The hash value for the infected or suspicious file.\n\t\t
" + "smithy.api#documentation": "The hash value for the infected or suspicious file.\n\t\t
\nLength Constraints: Minimum of 1 length. Maximum of 128 length.
" } } }, @@ -25569,7 +25569,7 @@ "Original": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The finding provider's original value for the severity.
" + "smithy.api#documentation": "The finding provider's original value for the severity.
\nLength Constraints: Minimum length of 1. Maximum length of 64.
" } } }, @@ -25705,7 +25705,7 @@ "Labels": { "target": "com.amazonaws.securityhub#TypeList", "traits": { - "smithy.api#documentation": "\n An array of tags used to identify the detector associated with the finding.\n
" + "smithy.api#documentation": "\n An array of tags used to identify the detector associated with the finding.\n
\nArray Members: Minimum number of 0 items. Maximum number of 10 items.
" } } }, @@ -28682,7 +28682,7 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "The name of the malware that was observed.
", + "smithy.api#documentation": "The name of the malware that was observed.
\nLength Constraints: Minimum of 1. Maximum of 64.
", "smithy.api#required": {} } }, @@ -28695,7 +28695,7 @@ "Path": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The file system path of the malware that was observed.
" + "smithy.api#documentation": "The file system path of the malware that was observed.
\nLength Constraints: Minimum of 1. Maximum of 512.
" } }, "State": { @@ -28974,7 +28974,7 @@ "Protocol": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The protocol of network-related information about a finding.
" + "smithy.api#documentation": "The protocol of network-related information about a finding.
\nLength Constraints: Minimum of 1. Maximum of 16.
" } }, "OpenPortRange": { @@ -29004,7 +29004,7 @@ "SourceDomain": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The source domain of network-related information about a finding.
" + "smithy.api#documentation": "The source domain of network-related information about a finding.
\nLength Constraints: Minimum of 1. Maximum of 128.
" } }, "SourceMac": { @@ -29034,7 +29034,7 @@ "DestinationDomain": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The destination domain of network-related information about a finding.
" + "smithy.api#documentation": "The destination domain of network-related information about a finding.
\nLength Constraints: Minimum of 1. Maximum of 128.
" } } }, @@ -29072,7 +29072,7 @@ "Protocol": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The protocol used to make the network connection request.
" + "smithy.api#documentation": "The protocol used to make the network connection request.
\nLength Constraints: Minimum length of 1. Maximum length of 64.
" } }, "Blocked": { @@ -29109,7 +29109,7 @@ "Protocol": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The protocol used for the component.
" + "smithy.api#documentation": "The protocol used for the component.
\nLength Constraints: Minimum of 1. Maximum of 16.
" } }, "Destination": { @@ -29135,13 +29135,13 @@ "ComponentId": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The identifier of a component in the network path.
" + "smithy.api#documentation": "The identifier of a component in the network path.
\nLength Constraints: Minimum of 1. Maximum of 32.
" } }, "ComponentType": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The type of component.
" + "smithy.api#documentation": "The type of component.
\nLength Constraints: Minimum of 1. Maximum of 32.
" } }, "Egress": { @@ -29209,7 +29209,7 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "The text of a note.
", + "smithy.api#documentation": "The text of a note.
\nLength Constraints: Minimum of 1. Maximum of 512.
", "smithy.api#required": {} } }, @@ -29605,44 +29605,44 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "The identifier of the compliance standard that was used to determine the patch\n compliance status.
", + "smithy.api#documentation": "The identifier of the compliance standard that was used to determine the patch\n compliance status.
\nLength Constraints: Minimum length of 1. Maximum length of 256.
", "smithy.api#required": {} } }, "InstalledCount": { "target": "com.amazonaws.securityhub#Integer", "traits": { - "smithy.api#documentation": "The number of patches from the compliance standard that were installed\n successfully.
" + "smithy.api#documentation": "The number of patches from the compliance standard that were installed\n successfully.
\nThe value can be an integer from 0
to 100000
.
The number of patches that are part of the compliance standard but are not installed.\n The count includes patches that failed to install.
" + "smithy.api#documentation": "The number of patches that are part of the compliance standard but are not installed.\n The count includes patches that failed to install.
\nThe value can be an integer from 0
to 100000
.
The number of patches from the compliance standard that failed to install.
" + "smithy.api#documentation": "The number of patches from the compliance standard that failed to install.
\nThe value can be an integer from 0
to 100000
.
The number of installed patches that are not part of the compliance standard.
" + "smithy.api#documentation": "The number of installed patches that are not part of the compliance standard.
\nThe value can be an integer from 0
to 100000
.
The number of patches that are installed but are also on a list of patches that the\n customer rejected.
" + "smithy.api#documentation": "The number of patches that are installed but are also on a list of patches that the\n customer rejected.
\nThe value can be an integer from 0
to 100000
.
The number of patches that were applied, but that require the instance to be rebooted in\n order to be marked as installed.
" + "smithy.api#documentation": "The number of patches that were applied, but that require the instance to be rebooted in\n order to be marked as installed.
\nThe value can be an integer from 0
to 100000
.
The reboot option specified for the instance.
" + "smithy.api#documentation": "The reboot option specified for the instance.
\nLength Constraints: Minimum length of 1. Maximum length of 256.
" } }, "Operation": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The type of patch operation performed. For Patch Manager, the values are\n SCAN
and INSTALL
.
The type of patch operation performed. For Patch Manager, the values are\n SCAN
and INSTALL
.
Length Constraints: Minimum length of 1. Maximum length of 256.
" } } }, @@ -29792,13 +29792,13 @@ "Name": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The name of the process.
" + "smithy.api#documentation": "The name of the process.
\nLength Constraints: Minimum of 1. Maximum of 64.
" } }, "Path": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The path to the process executable.
" + "smithy.api#documentation": "The path to the process executable.
\nLength Constraints: Minimum of 1. Maximum of 512.
" } }, "Pid": { @@ -29973,7 +29973,7 @@ "Text": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "Describes the recommended steps to take to remediate an issue identified in a finding.
" + "smithy.api#documentation": "Describes the recommended steps to take to remediate an issue identified in a finding.
\nLength Constraints: Minimum of 1 length. Maximum of 512 length.
" } }, "Url": { @@ -30104,7 +30104,7 @@ "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { "smithy.api#clientOptional": {}, - "smithy.api#documentation": "The type of the resource that details are provided for. If possible, set\n Type
to one of the supported resource types. For example, if the resource\n is an EC2 instance, then set Type
to AwsEc2Instance
.
If the resource does not match any of the provided types, then set Type
to\n Other
.
The type of the resource that details are provided for. If possible, set\n Type
to one of the supported resource types. For example, if the resource\n is an EC2 instance, then set Type
to AwsEc2Instance
.
If the resource does not match any of the provided types, then set Type
to\n Other
.
Length Constraints: Minimum length of 1. Maximum length of 256.
", "smithy.api#required": {} } }, @@ -30125,7 +30125,7 @@ "Region": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The canonical Amazon Web Services external Region name where this resource is located.
" + "smithy.api#documentation": "The canonical Amazon Web Services external Region name where this resource is located.
\nLength Constraints: Minimum length of 1. Maximum length of 16.
" } }, "ResourceRole": { @@ -30137,7 +30137,7 @@ "Tags": { "target": "com.amazonaws.securityhub#FieldMap", "traits": { - "smithy.api#documentation": "A list of Amazon Web Services tags associated with a resource at the time the finding was\n processed.
" + "smithy.api#documentation": "A list of Amazon Web Services tags associated with a resource at the time the finding was\n processed. Tags must follow Amazon Web Services tag naming limits and requirements.
" } }, "DataClassification": { @@ -33077,13 +33077,13 @@ "Normalized": { "target": "com.amazonaws.securityhub#Integer", "traits": { - "smithy.api#documentation": "Deprecated. The normalized severity of a finding.\n Instead of providing Normalized
, provide Label
.
If you provide Label
and do not provide Normalized
, then\n Normalized
is set automatically as follows.
\n INFORMATIONAL
- 0
\n LOW
- 1
\n MEDIUM
- 40
\n HIGH
- 70
\n CRITICAL
- 90
Deprecated. The normalized severity of a finding.\n Instead of providing Normalized
, provide Label
.
The value of Normalized
can be an integer between 0
and 100
.
If you provide Label
and do not provide Normalized
, then\n Normalized
is set automatically as follows.
\n INFORMATIONAL
- 0
\n LOW
- 1
\n MEDIUM
- 40
\n HIGH
- 70
\n CRITICAL
- 90
The native severity from the finding product that generated the finding.
" + "smithy.api#documentation": "The native severity from the finding product that generated the finding.
\nLength Constraints: Minimum length of 1. Maximum length of 64.
" } } }, @@ -34442,13 +34442,13 @@ "Name": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The name of the threat.\n\t\t
" + "smithy.api#documentation": "The name of the threat.\n\t\t
\nLength Constraints: Minimum of 1 length. Maximum of 128 length.
" } }, "Severity": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The severity of the threat. \n\t\t
" + "smithy.api#documentation": "The severity of the threat. \n\t\t
\nLength Constraints: Minimum of 1 length. Maximum of 128 length.
" } }, "ItemCount": { @@ -34460,7 +34460,7 @@ "FilePaths": { "target": "com.amazonaws.securityhub#FilePathList", "traits": { - "smithy.api#documentation": "Provides information about the file paths that were affected by the threat.\n\t\t
" + "smithy.api#documentation": "Provides information about the file paths that were affected by the threat.\n\t\t
\nArray Members: Minimum number of 1 item. Maximum number of 5 items.
" } } }, @@ -34480,7 +34480,7 @@ "Value": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The value of a threat intelligence indicator.
" + "smithy.api#documentation": "The value of a threat intelligence indicator.
\nLength Constraints: Minimum of 1 length. Maximum of 512 length.
" } }, "Category": { @@ -34498,7 +34498,7 @@ "Source": { "target": "com.amazonaws.securityhub#NonEmptyString", "traits": { - "smithy.api#documentation": "The source of the threat intelligence indicator.
" + "smithy.api#documentation": "The source of the threat intelligence indicator.
\nLength Constraints: Minimum of 1 length. Maximum of 64 length.
" } }, "SourceUrl": {