5.0.0 • Published 5 years ago
@datafire/amazonaws_securityhub v5.0.0
@datafire/amazonaws_securityhub
Client library for AWS SecurityHub
Installation and Usage
npm install --save @datafire/amazonaws_securityhub
let amazonaws_securityhub = require('@datafire/amazonaws_securityhub').create({
accessKeyId: "",
secretAccessKey: "",
region: ""
});
.then(data => {
console.log(data);
});
Description
Actions
DisableSecurityHub
amazonaws_securityhub.DisableSecurityHub({}, context)
Input
- input
object
Output
- output DisableSecurityHubResponse
DescribeHub
amazonaws_securityhub.DescribeHub({}, context)
Input
- input
object
- HubArn
string
- HubArn
Output
- output DescribeHubResponse
UpdateSecurityHubConfiguration
amazonaws_securityhub.UpdateSecurityHubConfiguration({}, context)
Input
- input
object
- AutoEnableControls
boolean
: Whether to automatically enable new controls when they are added to standards that are enabled. By default, this is set to true, and new controls are enabled automatically. To not automatically enable new controls, set this to false.
- AutoEnableControls
Output
EnableSecurityHub
amazonaws_securityhub.EnableSecurityHub({}, context)
Input
- input
object
- EnableDefaultStandards
boolean
: Whether to enable the security standards that Security Hub has designated as automatically enabled. If you do not provide a value for EnableDefaultStandards, it is set to true. To not enable the automatically enabled standards, set EnableDefaultStandards to false. - Tags
object
: The tags to add to the hub resource when you enable Security Hub.
- EnableDefaultStandards
Output
- output EnableSecurityHubResponse
CreateActionTarget
amazonaws_securityhub.CreateActionTarget({
"Name": "",
"Description": "",
"Id": ""
}, context)
Input
- input
object
- Description required
string
: The description for the custom action target. - Id required
string
: The ID for the custom action target. - Name required
string
: The name of the custom action target.
- Description required
Output
- output CreateActionTargetResponse
DescribeActionTargets
amazonaws_securityhub.DescribeActionTargets({}, context)
Input
- input
object
- MaxResults
string
- NextToken
string
- ActionTargetArns
array
: A list of custom action target ARNs for the custom action targets to retrieve.- items NonEmptyString
- MaxResults
integer
: The maximum number of results to return. - NextToken
string
: The token that is required for pagination. On your first call to the DescribeActionTargets operation, set the value of this parameter to NULL. For subsequent calls to the operation, to continue listing data, set the value of this parameter to the value returned from the previous response.
- MaxResults
Output
DeleteActionTarget
amazonaws_securityhub.DeleteActionTarget({
"ActionTargetArn": ""
}, context)
Input
- input
object
- ActionTargetArn required
string
- ActionTargetArn required
Output
- output DeleteActionTargetResponse
UpdateActionTarget
amazonaws_securityhub.UpdateActionTarget({
"ActionTargetArn": ""
}, context)
Input
- input
object
- ActionTargetArn required
string
- Description
string
: The updated description for the custom action target. - Name
string
: The updated name of the custom action target.
- ActionTargetArn required
Output
- output UpdateActionTargetResponse
UpdateFindings
amazonaws_securityhub.UpdateFindings({
"Filters": {}
}, context)
Input
- input
object
- Filters required
object
: A collection of attributes that are applied to all active Security Hub-aggregated findings and that result in a subset of findings that are included in this insight. You can filter by up to 10 finding attributes. For each attribute, you can provide up to 20 filter values.- AwsAccountId
- items StringFilter
- CompanyName
- items StringFilter
- ComplianceStatus
- items StringFilter
- Confidence
- items NumberFilter
- CreatedAt
- items DateFilter
- Criticality
- items NumberFilter
- Description
- items StringFilter
- FirstObservedAt
- items DateFilter
- GeneratorId
- items StringFilter
- Id
- items StringFilter
- Keyword
- items KeywordFilter
- LastObservedAt
- items DateFilter
- MalwareName
- items StringFilter
- MalwarePath
- items StringFilter
- MalwareState
- items StringFilter
- MalwareType
- items StringFilter
- NetworkDestinationDomain
- items StringFilter
- NetworkDestinationIpV4
- items IpFilter
- NetworkDestinationIpV6
- items IpFilter
- NetworkDestinationPort
- items NumberFilter
- NetworkDirection
- items StringFilter
- NetworkProtocol
- items StringFilter
- NetworkSourceDomain
- items StringFilter
- NetworkSourceIpV4
- items IpFilter
- NetworkSourceIpV6
- items IpFilter
- NetworkSourceMac
- items StringFilter
- NetworkSourcePort
- items NumberFilter
- NoteText
- items StringFilter
- NoteUpdatedAt
- items DateFilter
- NoteUpdatedBy
- items StringFilter
- ProcessLaunchedAt
- items DateFilter
- ProcessName
- items StringFilter
- ProcessParentPid
- items NumberFilter
- ProcessPath
- items StringFilter
- ProcessPid
- items NumberFilter
- ProcessTerminatedAt
- items DateFilter
- ProductArn
- items StringFilter
- ProductFields
- items MapFilter
- ProductName
- items StringFilter
- RecommendationText
- items StringFilter
- RecordState
- items StringFilter
- RelatedFindingsId
- items StringFilter
- RelatedFindingsProductArn
- items StringFilter
- ResourceAwsEc2InstanceIamInstanceProfileArn
- items StringFilter
- ResourceAwsEc2InstanceImageId
- items StringFilter
- ResourceAwsEc2InstanceIpV4Addresses
- items IpFilter
- ResourceAwsEc2InstanceIpV6Addresses
- items IpFilter
- ResourceAwsEc2InstanceKeyName
- items StringFilter
- ResourceAwsEc2InstanceLaunchedAt
- items DateFilter
- ResourceAwsEc2InstanceSubnetId
- items StringFilter
- ResourceAwsEc2InstanceType
- items StringFilter
- ResourceAwsEc2InstanceVpcId
- items StringFilter
- ResourceAwsIamAccessKeyCreatedAt
- items DateFilter
- ResourceAwsIamAccessKeyStatus
- items StringFilter
- ResourceAwsIamAccessKeyUserName
- items StringFilter
- ResourceAwsS3BucketOwnerId
- items StringFilter
- ResourceAwsS3BucketOwnerName
- items StringFilter
- ResourceContainerImageId
- items StringFilter
- ResourceContainerImageName
- items StringFilter
- ResourceContainerLaunchedAt
- items DateFilter
- ResourceContainerName
- items StringFilter
- ResourceDetailsOther
- items MapFilter
- ResourceId
- items StringFilter
- ResourcePartition
- items StringFilter
- ResourceRegion
- items StringFilter
- ResourceTags
- items MapFilter
- ResourceType
- items StringFilter
- SeverityLabel
- items StringFilter
- SeverityNormalized
- items NumberFilter
- SeverityProduct
- items NumberFilter
- SourceUrl
- items StringFilter
- ThreatIntelIndicatorCategory
- items StringFilter
- ThreatIntelIndicatorLastObservedAt
- items DateFilter
- ThreatIntelIndicatorSource
- items StringFilter
- ThreatIntelIndicatorSourceUrl
- items StringFilter
- ThreatIntelIndicatorType
- items StringFilter
- ThreatIntelIndicatorValue
- items StringFilter
- Title
- items StringFilter
- Type
- items StringFilter
- UpdatedAt
- items DateFilter
- UserDefinedFields
- items MapFilter
- VerificationState
- items StringFilter
- WorkflowState
- items StringFilter
- WorkflowStatus
- items StringFilter
- AwsAccountId
- Note
object
: The updated note.- Text
- UpdatedBy
- RecordState
string
(values: ACTIVE, ARCHIVED): The updated record state for the finding.
- Filters required
Output
- output UpdateFindingsResponse
GetFindings
amazonaws_securityhub.GetFindings({}, context)
Input
- input
object
- MaxResults
string
- NextToken
string
- Filters
object
: A collection of attributes that are applied to all active Security Hub-aggregated findings and that result in a subset of findings that are included in this insight. You can filter by up to 10 finding attributes. For each attribute, you can provide up to 20 filter values.- AwsAccountId
- items StringFilter
- CompanyName
- items StringFilter
- ComplianceStatus
- items StringFilter
- Confidence
- items NumberFilter
- CreatedAt
- items DateFilter
- Criticality
- items NumberFilter
- Description
- items StringFilter
- FirstObservedAt
- items DateFilter
- GeneratorId
- items StringFilter
- Id
- items StringFilter
- Keyword
- items KeywordFilter
- LastObservedAt
- items DateFilter
- MalwareName
- items StringFilter
- MalwarePath
- items StringFilter
- MalwareState
- items StringFilter
- MalwareType
- items StringFilter
- NetworkDestinationDomain
- items StringFilter
- NetworkDestinationIpV4
- items IpFilter
- NetworkDestinationIpV6
- items IpFilter
- NetworkDestinationPort
- items NumberFilter
- NetworkDirection
- items StringFilter
- NetworkProtocol
- items StringFilter
- NetworkSourceDomain
- items StringFilter
- NetworkSourceIpV4
- items IpFilter
- NetworkSourceIpV6
- items IpFilter
- NetworkSourceMac
- items StringFilter
- NetworkSourcePort
- items NumberFilter
- NoteText
- items StringFilter
- NoteUpdatedAt
- items DateFilter
- NoteUpdatedBy
- items StringFilter
- ProcessLaunchedAt
- items DateFilter
- ProcessName
- items StringFilter
- ProcessParentPid
- items NumberFilter
- ProcessPath
- items StringFilter
- ProcessPid
- items NumberFilter
- ProcessTerminatedAt
- items DateFilter
- ProductArn
- items StringFilter
- ProductFields
- items MapFilter
- ProductName
- items StringFilter
- RecommendationText
- items StringFilter
- RecordState
- items StringFilter
- RelatedFindingsId
- items StringFilter
- RelatedFindingsProductArn
- items StringFilter
- ResourceAwsEc2InstanceIamInstanceProfileArn
- items StringFilter
- ResourceAwsEc2InstanceImageId
- items StringFilter
- ResourceAwsEc2InstanceIpV4Addresses
- items IpFilter
- ResourceAwsEc2InstanceIpV6Addresses
- items IpFilter
- ResourceAwsEc2InstanceKeyName
- items StringFilter
- ResourceAwsEc2InstanceLaunchedAt
- items DateFilter
- ResourceAwsEc2InstanceSubnetId
- items StringFilter
- ResourceAwsEc2InstanceType
- items StringFilter
- ResourceAwsEc2InstanceVpcId
- items StringFilter
- ResourceAwsIamAccessKeyCreatedAt
- items DateFilter
- ResourceAwsIamAccessKeyStatus
- items StringFilter
- ResourceAwsIamAccessKeyUserName
- items StringFilter
- ResourceAwsS3BucketOwnerId
- items StringFilter
- ResourceAwsS3BucketOwnerName
- items StringFilter
- ResourceContainerImageId
- items StringFilter
- ResourceContainerImageName
- items StringFilter
- ResourceContainerLaunchedAt
- items DateFilter
- ResourceContainerName
- items StringFilter
- ResourceDetailsOther
- items MapFilter
- ResourceId
- items StringFilter
- ResourcePartition
- items StringFilter
- ResourceRegion
- items StringFilter
- ResourceTags
- items MapFilter
- ResourceType
- items StringFilter
- SeverityLabel
- items StringFilter
- SeverityNormalized
- items NumberFilter
- SeverityProduct
- items NumberFilter
- SourceUrl
- items StringFilter
- ThreatIntelIndicatorCategory
- items StringFilter
- ThreatIntelIndicatorLastObservedAt
- items DateFilter
- ThreatIntelIndicatorSource
- items StringFilter
- ThreatIntelIndicatorSourceUrl
- items StringFilter
- ThreatIntelIndicatorType
- items StringFilter
- ThreatIntelIndicatorValue
- items StringFilter
- Title
- items StringFilter
- Type
- items StringFilter
- UpdatedAt
- items DateFilter
- UserDefinedFields
- items MapFilter
- VerificationState
- items StringFilter
- WorkflowState
- items StringFilter
- WorkflowStatus
- items StringFilter
- AwsAccountId
- MaxResults
integer
: The maximum number of findings to return. - NextToken
string
: The token that is required for pagination. On your first call to the GetFindings operation, set the value of this parameter to NULL. For subsequent calls to the operation, to continue listing data, set the value of this parameter to the value returned from the previous response. - SortCriteria
array
: The finding attributes used to sort the list of returned findings.- items SortCriterion
- MaxResults
Output
- output GetFindingsResponse
BatchUpdateFindings
amazonaws_securityhub.BatchUpdateFindings({
"FindingIdentifiers": []
}, context)
Input
- input
object
- Confidence
integer
: The updated value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. - Criticality
integer
: The updated value for the level of importance assigned to the resources associated with the findings. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. - FindingIdentifiers required
array
: The list of findings to update. BatchUpdateFindings can be used to update up to 100 findings at a time. For each finding, the list provides the finding identifier and the ARN of the finding provider. - Note
object
: The updated note.- Text
- UpdatedBy
- RelatedFindings
array
: A list of findings that are related to the updated findings.- items RelatedFinding
- Severity
object
: Updates to the severity information for a finding.- Label
- Normalized
- Product
- Types
array
: One or more finding types in the format of namespace/category/classifier that classify a finding. Valid namespace values are as follows. Software and Configuration Checks TTPs Effects Unusual Behaviors Sensitive Data Identifications- items NonEmptyString
- UserDefinedFields
object
: A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. - VerificationState
string
(values: UNKNOWN, TRUE_POSITIVE, FALSE_POSITIVE, BENIGN_POSITIVE): Indicates the veracity of a finding. The available values for VerificationState are as follows. UNKNOWN – The default disposition of a security finding TRUE_POSITIVE – The security finding is confirmed FALSE_POSITIVE – The security finding was determined to be a false alarm BENIGN_POSITIVE – A special case of TRUE_POSITIVE where the finding doesn't pose any threat, is expected, or both - Workflow
object
: Used to update information about the investigation into the finding.- Status
- Confidence
Output
- output BatchUpdateFindingsResponse
BatchImportFindings
amazonaws_securityhub.BatchImportFindings({
"Findings": []
}, context)
Input
- input
object
- Findings required
array
: A list of findings to import. To successfully import a finding, it must follow the AWS Security Finding Format. Maximum of 100 findings per request.- items AwsSecurityFinding
- Findings required
Output
- output BatchImportFindingsResponse
CreateInsight
amazonaws_securityhub.CreateInsight({
"Name": "",
"Filters": {},
"GroupByAttribute": ""
}, context)
Input
- input
object
- Filters required
object
: A collection of attributes that are applied to all active Security Hub-aggregated findings and that result in a subset of findings that are included in this insight. You can filter by up to 10 finding attributes. For each attribute, you can provide up to 20 filter values.- AwsAccountId
- items StringFilter
- CompanyName
- items StringFilter
- ComplianceStatus
- items StringFilter
- Confidence
- items NumberFilter
- CreatedAt
- items DateFilter
- Criticality
- items NumberFilter
- Description
- items StringFilter
- FirstObservedAt
- items DateFilter
- GeneratorId
- items StringFilter
- Id
- items StringFilter
- Keyword
- items KeywordFilter
- LastObservedAt
- items DateFilter
- MalwareName
- items StringFilter
- MalwarePath
- items StringFilter
- MalwareState
- items StringFilter
- MalwareType
- items StringFilter
- NetworkDestinationDomain
- items StringFilter
- NetworkDestinationIpV4
- items IpFilter
- NetworkDestinationIpV6
- items IpFilter
- NetworkDestinationPort
- items NumberFilter
- NetworkDirection
- items StringFilter
- NetworkProtocol
- items StringFilter
- NetworkSourceDomain
- items StringFilter
- NetworkSourceIpV4
- items IpFilter
- NetworkSourceIpV6
- items IpFilter
- NetworkSourceMac
- items StringFilter
- NetworkSourcePort
- items NumberFilter
- NoteText
- items StringFilter
- NoteUpdatedAt
- items DateFilter
- NoteUpdatedBy
- items StringFilter
- ProcessLaunchedAt
- items DateFilter
- ProcessName
- items StringFilter
- ProcessParentPid
- items NumberFilter
- ProcessPath
- items StringFilter
- ProcessPid
- items NumberFilter
- ProcessTerminatedAt
- items DateFilter
- ProductArn
- items StringFilter
- ProductFields
- items MapFilter
- ProductName
- items StringFilter
- RecommendationText
- items StringFilter
- RecordState
- items StringFilter
- RelatedFindingsId
- items StringFilter
- RelatedFindingsProductArn
- items StringFilter
- ResourceAwsEc2InstanceIamInstanceProfileArn
- items StringFilter
- ResourceAwsEc2InstanceImageId
- items StringFilter
- ResourceAwsEc2InstanceIpV4Addresses
- items IpFilter
- ResourceAwsEc2InstanceIpV6Addresses
- items IpFilter
- ResourceAwsEc2InstanceKeyName
- items StringFilter
- ResourceAwsEc2InstanceLaunchedAt
- items DateFilter
- ResourceAwsEc2InstanceSubnetId
- items StringFilter
- ResourceAwsEc2InstanceType
- items StringFilter
- ResourceAwsEc2InstanceVpcId
- items StringFilter
- ResourceAwsIamAccessKeyCreatedAt
- items DateFilter
- ResourceAwsIamAccessKeyStatus
- items StringFilter
- ResourceAwsIamAccessKeyUserName
- items StringFilter
- ResourceAwsS3BucketOwnerId
- items StringFilter
- ResourceAwsS3BucketOwnerName
- items StringFilter
- ResourceContainerImageId
- items StringFilter
- ResourceContainerImageName
- items StringFilter
- ResourceContainerLaunchedAt
- items DateFilter
- ResourceContainerName
- items StringFilter
- ResourceDetailsOther
- items MapFilter
- ResourceId
- items StringFilter
- ResourcePartition
- items StringFilter
- ResourceRegion
- items StringFilter
- ResourceTags
- items MapFilter
- ResourceType
- items StringFilter
- SeverityLabel
- items StringFilter
- SeverityNormalized
- items NumberFilter
- SeverityProduct
- items NumberFilter
- SourceUrl
- items StringFilter
- ThreatIntelIndicatorCategory
- items StringFilter
- ThreatIntelIndicatorLastObservedAt
- items DateFilter
- ThreatIntelIndicatorSource
- items StringFilter
- ThreatIntelIndicatorSourceUrl
- items StringFilter
- ThreatIntelIndicatorType
- items StringFilter
- ThreatIntelIndicatorValue
- items StringFilter
- Title
- items StringFilter
- Type
- items StringFilter
- UpdatedAt
- items DateFilter
- UserDefinedFields
- items MapFilter
- VerificationState
- items StringFilter
- WorkflowState
- items StringFilter
- WorkflowStatus
- items StringFilter
- AwsAccountId
- GroupByAttribute required
string
: The attribute used to group the findings for the insight. The grouping attribute identifies the type of item that the insight applies to. For example, if an insight is grouped by resource identifier, then the insight produces a list of resource identifiers. - Name required
string
: The name of the custom insight to create.
- Filters required
Output
- output CreateInsightResponse
GetInsights
amazonaws_securityhub.GetInsights({}, context)
Input
- input
object
- MaxResults
string
- NextToken
string
- InsightArns
array
: The ARNs of the insights to describe. If you do not provide any insight ARNs, then GetInsights returns all of your custom insights. It does not return any managed insights.- items NonEmptyString
- MaxResults
integer
: The maximum number of items to return in the response. - NextToken
string
: The token that is required for pagination. On your first call to the GetInsights operation, set the value of this parameter to NULL. For subsequent calls to the operation, to continue listing data, set the value of this parameter to the value returned from the previous response.
- MaxResults
Output
- output GetInsightsResponse
GetInsightResults
amazonaws_securityhub.GetInsightResults({
"InsightArn": ""
}, context)
Input
- input
object
- InsightArn required
string
- InsightArn required
Output
- output GetInsightResultsResponse
DeleteInsight
amazonaws_securityhub.DeleteInsight({
"InsightArn": ""
}, context)
Input
- input
object
- InsightArn required
string
- InsightArn required
Output
- output DeleteInsightResponse
UpdateInsight
amazonaws_securityhub.UpdateInsight({
"InsightArn": ""
}, context)
Input
- input
object
- InsightArn required
string
- Filters
object
: A collection of attributes that are applied to all active Security Hub-aggregated findings and that result in a subset of findings that are included in this insight. You can filter by up to 10 finding attributes. For each attribute, you can provide up to 20 filter values.- AwsAccountId
- items StringFilter
- CompanyName
- items StringFilter
- ComplianceStatus
- items StringFilter
- Confidence
- items NumberFilter
- CreatedAt
- items DateFilter
- Criticality
- items NumberFilter
- Description
- items StringFilter
- FirstObservedAt
- items DateFilter
- GeneratorId
- items StringFilter
- Id
- items StringFilter
- Keyword
- items KeywordFilter
- LastObservedAt
- items DateFilter
- MalwareName
- items StringFilter
- MalwarePath
- items StringFilter
- MalwareState
- items StringFilter
- MalwareType
- items StringFilter
- NetworkDestinationDomain
- items StringFilter
- NetworkDestinationIpV4
- items IpFilter
- NetworkDestinationIpV6
- items IpFilter
- NetworkDestinationPort
- items NumberFilter
- NetworkDirection
- items StringFilter
- NetworkProtocol
- items StringFilter
- NetworkSourceDomain
- items StringFilter
- NetworkSourceIpV4
- items IpFilter
- NetworkSourceIpV6
- items IpFilter
- NetworkSourceMac
- items StringFilter
- NetworkSourcePort
- items NumberFilter
- NoteText
- items StringFilter
- NoteUpdatedAt
- items DateFilter
- NoteUpdatedBy
- items StringFilter
- ProcessLaunchedAt
- items DateFilter
- ProcessName
- items StringFilter
- ProcessParentPid
- items NumberFilter
- ProcessPath
- items StringFilter
- ProcessPid
- items NumberFilter
- ProcessTerminatedAt
- items DateFilter
- ProductArn
- items StringFilter
- ProductFields
- items MapFilter
- ProductName
- items StringFilter
- RecommendationText
- items StringFilter
- RecordState
- items StringFilter
- RelatedFindingsId
- items StringFilter
- RelatedFindingsProductArn
- items StringFilter
- ResourceAwsEc2InstanceIamInstanceProfileArn
- items StringFilter
- ResourceAwsEc2InstanceImageId
- items StringFilter
- ResourceAwsEc2InstanceIpV4Addresses
- items IpFilter
- ResourceAwsEc2InstanceIpV6Addresses
- items IpFilter
- ResourceAwsEc2InstanceKeyName
- items StringFilter
- ResourceAwsEc2InstanceLaunchedAt
- items DateFilter
- ResourceAwsEc2InstanceSubnetId
- items StringFilter
- ResourceAwsEc2InstanceType
- items StringFilter
- ResourceAwsEc2InstanceVpcId
- items StringFilter
- ResourceAwsIamAccessKeyCreatedAt
- items DateFilter
- ResourceAwsIamAccessKeyStatus
- items StringFilter
- ResourceAwsIamAccessKeyUserName
- items StringFilter
- ResourceAwsS3BucketOwnerId
- items StringFilter
- ResourceAwsS3BucketOwnerName
- items StringFilter
- ResourceContainerImageId
- items StringFilter
- ResourceContainerImageName
- items StringFilter
- ResourceContainerLaunchedAt
- items DateFilter
- ResourceContainerName
- items StringFilter
- ResourceDetailsOther
- items MapFilter
- ResourceId
- items StringFilter
- ResourcePartition
- items StringFilter
- ResourceRegion
- items StringFilter
- ResourceTags
- items MapFilter
- ResourceType
- items StringFilter
- SeverityLabel
- items StringFilter
- SeverityNormalized
- items NumberFilter
- SeverityProduct
- items NumberFilter
- SourceUrl
- items StringFilter
- ThreatIntelIndicatorCategory
- items StringFilter
- ThreatIntelIndicatorLastObservedAt
- items DateFilter
- ThreatIntelIndicatorSource
- items StringFilter
- ThreatIntelIndicatorSourceUrl
- items StringFilter
- ThreatIntelIndicatorType
- items StringFilter
- ThreatIntelIndicatorValue
- items StringFilter
- Title
- items StringFilter
- Type
- items StringFilter
- UpdatedAt
- items DateFilter
- UserDefinedFields
- items MapFilter
- VerificationState
- items StringFilter
- WorkflowState
- items StringFilter
- WorkflowStatus
- items StringFilter
- AwsAccountId
- GroupByAttribute
string
: The updated GroupBy attribute that defines this insight. - Name
string
: The updated name for the insight.
- InsightArn required
Output
- output UpdateInsightResponse
ListInvitations
amazonaws_securityhub.ListInvitations({}, context)
Input
- input
object
- MaxResults
integer
- NextToken
string
- MaxResults
Output
- output ListInvitationsResponse
GetInvitationsCount
amazonaws_securityhub.GetInvitationsCount({}, context)
Input
- input
object
Output
- output GetInvitationsCountResponse
DeclineInvitations
amazonaws_securityhub.DeclineInvitations({
"AccountIds": []
}, context)
Input
- input
object
- AccountIds required
array
: The list of account IDs for the accounts from which to decline the invitations to Security Hub.- items NonEmptyString
- AccountIds required
Output
- output DeclineInvitationsResponse
DeleteInvitations
amazonaws_securityhub.DeleteInvitations({
"AccountIds": []
}, context)
Input
- input
object
- AccountIds required
array
: The list of the account IDs that sent the invitations to delete.- items NonEmptyString
- AccountIds required
Output
- output DeleteInvitationsResponse
GetMasterAccount
amazonaws_securityhub.GetMasterAccount({}, context)
Input
- input
object
Output
- output GetMasterAccountResponse
AcceptInvitation
amazonaws_securityhub.AcceptInvitation({
"MasterId": "",
"InvitationId": ""
}, context)
Input
- input
object
- InvitationId required
string
: The ID of the invitation sent from the Security Hub master account. - MasterId required
string
: The account ID of the Security Hub master account that sent the invitation.
- InvitationId required
Output
- output AcceptInvitationResponse
DisassociateFromMasterAccount
amazonaws_securityhub.DisassociateFromMasterAccount({}, context)
Input
- input
object
Output
ListMembers
amazonaws_securityhub.ListMembers({}, context)
Input
- input
object
- OnlyAssociated
boolean
- MaxResults
integer
- NextToken
string
- OnlyAssociated
Output
- output ListMembersResponse
CreateMembers
amazonaws_securityhub.CreateMembers({
"AccountDetails": []
}, context)
Input
- input
object
- AccountDetails required
array
: The list of accounts to associate with the Security Hub master account. For each account, the list includes the account ID and optionally the email address.- items AccountDetails
- AccountDetails required
Output
- output CreateMembersResponse
DeleteMembers
amazonaws_securityhub.DeleteMembers({
"AccountIds": []
}, context)
Input
- input
object
- AccountIds required
array
: The list of account IDs for the member accounts to delete.- items NonEmptyString
- AccountIds required
Output
- output DeleteMembersResponse
DisassociateMembers
amazonaws_securityhub.DisassociateMembers({
"AccountIds": []
}, context)
Input
- input
object
- AccountIds required
array
: The account IDs of the member accounts to disassociate from the master account.- items NonEmptyString
- AccountIds required
Output
- output DisassociateMembersResponse
GetMembers
amazonaws_securityhub.GetMembers({
"AccountIds": []
}, context)
Input
- input
object
- AccountIds required
array
: The list of account IDs for the Security Hub member accounts to return the details for.- items NonEmptyString
- AccountIds required
Output
- output GetMembersResponse
InviteMembers
amazonaws_securityhub.InviteMembers({
"AccountIds": []
}, context)
Input
- input
object
- AccountIds required
array
: The list of account IDs of the AWS accounts to invite to Security Hub as members.- items NonEmptyString
- AccountIds required
Output
- output InviteMembersResponse
ListOrganizationAdminAccounts
amazonaws_securityhub.ListOrganizationAdminAccounts({}, context)
Input
- input
object
- MaxResults
integer
- NextToken
string
- MaxResults
Output
DisableOrganizationAdminAccount
amazonaws_securityhub.DisableOrganizationAdminAccount({
"AdminAccountId": ""
}, context)
Input
- input
object
- AdminAccountId required
string
: The AWS account identifier of the Security Hub administrator account.
- AdminAccountId required
Output
EnableOrganizationAdminAccount
amazonaws_securityhub.EnableOrganizationAdminAccount({
"AdminAccountId": ""
}, context)
Input
- input
object
- AdminAccountId required
string
: The AWS account identifier of the account to designate as the Security Hub administrator account.
- AdminAccountId required
Output
DescribeOrganizationConfiguration
amazonaws_securityhub.DescribeOrganizationConfiguration({}, context)
Input
- input
object
Output
UpdateOrganizationConfiguration
amazonaws_securityhub.UpdateOrganizationConfiguration({
"AutoEnable": true
}, context)
Input
- input
object
- AutoEnable required
boolean
: Whether to automatically enable Security Hub for new accounts in the organization. By default, this is false, and new accounts are not added automatically. To automatically enable Security Hub for new accounts, set this to true.
- AutoEnable required
Output
ListEnabledProductsForImport
amazonaws_securityhub.ListEnabledProductsForImport({}, context)
Input
- input
object
- NextToken
string
- MaxResults
integer
- NextToken
Output
EnableImportFindingsForProduct
amazonaws_securityhub.EnableImportFindingsForProduct({
"ProductArn": ""
}, context)
Input
- input
object
- ProductArn required
string
: The ARN of the product to enable the integration for.
- ProductArn required
Output
DisableImportFindingsForProduct
amazonaws_securityhub.DisableImportFindingsForProduct({
"ProductSubscriptionArn": ""
}, context)
Input
- input
object
- ProductSubscriptionArn required
string
- ProductSubscriptionArn required
Output
DescribeProducts
amazonaws_securityhub.DescribeProducts({}, context)
Input
- input
object
- NextToken
string
- MaxResults
integer
- NextToken
Output
- output DescribeProductsResponse
DescribeStandards
amazonaws_securityhub.DescribeStandards({}, context)
Input
- input
object
- NextToken
string
- MaxResults
integer
- NextToken
Output
- output DescribeStandardsResponse
UpdateStandardsControl
amazonaws_securityhub.UpdateStandardsControl({
"StandardsControlArn": ""
}, context)
Input
- input
object
- StandardsControlArn required
string
- ControlStatus
string
(values: ENABLED, DISABLED): The updated status of the security standard control. - DisabledReason
string
: A description of the reason why you are disabling a security standard control. If you are disabling a control, then this is required.
- StandardsControlArn required
Output
DescribeStandardsControls
amazonaws_securityhub.DescribeStandardsControls({
"StandardsSubscriptionArn": ""
}, context)
Input
- input
object
- StandardsSubscriptionArn required
string
- NextToken
string
- MaxResults
integer
- StandardsSubscriptionArn required
Output
BatchDisableStandards
amazonaws_securityhub.BatchDisableStandards({
"StandardsSubscriptionArns": []
}, context)
Input
- input
object
- StandardsSubscriptionArns required
array
: The ARNs of the standards subscriptions to disable.- items NonEmptyString
- StandardsSubscriptionArns required
Output
GetEnabledStandards
amazonaws_securityhub.GetEnabledStandards({}, context)
Input
- input
object
- MaxResults
string
- NextToken
string
- MaxResults
integer
: The maximum number of results to return in the response. - NextToken
string
: The token that is required for pagination. On your first call to the GetEnabledStandards operation, set the value of this parameter to NULL. For subsequent calls to the operation, to continue listing data, set the value of this parameter to the value returned from the previous response. - StandardsSubscriptionArns
array
: The list of the standards subscription ARNs for the standards to retrieve.- items NonEmptyString
- MaxResults
Output
- output GetEnabledStandardsResponse
BatchEnableStandards
amazonaws_securityhub.BatchEnableStandards({
"StandardsSubscriptionRequests": []
}, context)
Input
- input
object
- StandardsSubscriptionRequests required
array
: The list of standards checks to enable.
- StandardsSubscriptionRequests required
Output
- output BatchEnableStandardsResponse
ListTagsForResource
amazonaws_securityhub.ListTagsForResource({
"ResourceArn": ""
}, context)
Input
- input
object
- ResourceArn required
string
- ResourceArn required
Output
- output ListTagsForResourceResponse
TagResource
amazonaws_securityhub.TagResource({
"ResourceArn": "",
"Tags": {}
}, context)
Input
- input
object
- ResourceArn required
string
- Tags required
object
: The tags to add to the resource.
- ResourceArn required
Output
- output TagResourceResponse
UntagResource
amazonaws_securityhub.UntagResource({
"ResourceArn": "",
"tagKeys": []
}, context)
Input
- input
object
- ResourceArn required
string
- tagKeys required
array
- ResourceArn required
Output
- output UntagResourceResponse
Definitions
AcceptInvitationRequest
- AcceptInvitationRequest
object
- InvitationId required
- MasterId required
AcceptInvitationResponse
- AcceptInvitationResponse
object
AccessDeniedException
AccountDetails
- AccountDetails
object
: The details of an AWS account.- AccountId required
AccountDetailsList
- AccountDetailsList
array
- items AccountDetails
AccountId
- AccountId
string
AccountIdList
- AccountIdList
array
- items NonEmptyString
ActionTarget
- ActionTarget
object
: An ActionTarget object.- ActionTargetArn required
- Description required
- Name required
ActionTargetList
- ActionTargetList
array
- items ActionTarget
AdminAccount
- AdminAccount
object
: Represents a Security Hub administrator account designated by an organization management account.- AccountId
- Status
AdminAccounts
- AdminAccounts
array
- items AdminAccount
AdminStatus
- AdminStatus
string
(values: ENABLED, DISABLE_IN_PROGRESS)
AdminsMaxResults
- AdminsMaxResults
integer
ArnList
- ArnList
array
- items NonEmptyString
AvailabilityZone
- AvailabilityZone
object
: Information about an Availability Zone.- SubnetId
- ZoneName
AvailabilityZones
- AvailabilityZones
array
- items AvailabilityZone
AwsApiGatewayAccessLogSettings
- AwsApiGatewayAccessLogSettings
object
: Contains information about settings for logging access for the stage.- DestinationArn
- Format
AwsApiGatewayCanarySettings
- AwsApiGatewayCanarySettings
object
: Contains information about settings for canary deployment in the stage.- DeploymentId
- PercentTraffic
- StageVariableOverrides
- UseStageCache
AwsApiGatewayEndpointConfiguration
- AwsApiGatewayEndpointConfiguration
object
: Contains information about the endpoints for the API.- Types
- items NonEmptyString
- Types
AwsApiGatewayMethodSettings
- AwsApiGatewayMethodSettings
object
: Defines settings for a method for the stage.- CacheDataEncrypted
- CacheTtlInSeconds
- CachingEnabled
- DataTraceEnabled
- HttpMethod
- LoggingLevel
- MetricsEnabled
- RequireAuthorizationForCacheControl
- ResourcePath
- ThrottlingBurstLimit
- ThrottlingRateLimit
- UnauthorizedCacheControlHeaderStrategy
AwsApiGatewayMethodSettingsList
- AwsApiGatewayMethodSettingsList
array
AwsApiGatewayRestApiDetails
- AwsApiGatewayRestApiDetails
object
: contains information about a REST API in version 1 of Amazon API Gateway.- ApiKeySource
- BinaryMediaTypes
- items NonEmptyString
- CreatedDate
- Description
- EndpointConfiguration
- Types
- items NonEmptyString
- Types
- Id
- MinimumCompressionSize
- Name
- Version
AwsApiGatewayStageDetails
- AwsApiGatewayStageDetails
object
: Provides information about a version 1 Amazon API Gateway stage.- AccessLogSettings
- DestinationArn
- Format
- CacheClusterEnabled
- CacheClusterSize
- CacheClusterStatus
- CanarySettings
- DeploymentId
- PercentTraffic
- StageVariableOverrides
- UseStageCache
- ClientCertificateId
- CreatedDate
- DeploymentId
- Description
- DocumentationVersion
- LastUpdatedDate
- MethodSettings
- StageName
- TracingEnabled
- Variables
- WebAclArn
- AccessLogSettings
AwsApiGatewayV2ApiDetails
- AwsApiGatewayV2ApiDetails
object
: Contains information about a version 2 API in Amazon API Gateway.- ApiEndpoint
- ApiId
- ApiKeySelectionExpression
- CorsConfiguration
- AllowCredentials
- AllowHeaders
- items NonEmptyString
- AllowMethods
- items NonEmptyString
- AllowOrigins
- items NonEmptyString
- ExposeHeaders
- items NonEmptyString
- MaxAge
- CreatedDate
- Description
- Name
- ProtocolType
- RouteSelectionExpression
- Version
AwsApiGatewayV2RouteSettings
- AwsApiGatewayV2RouteSettings
object
: Contains route settings for a stage.- DataTraceEnabled
- DetailedMetricsEnabled
- LoggingLevel
- ThrottlingBurstLimit
- ThrottlingRateLimit
AwsApiGatewayV2StageDetails
- AwsApiGatewayV2StageDetails
object
: Contains information about a version 2 stage for Amazon API Gateway.- AccessLogSettings
- DestinationArn
- Format
- ApiGatewayManaged
- AutoDeploy
- CreatedDate
- DefaultRouteSettings
- DataTraceEnabled
- DetailedMetricsEnabled
- LoggingLevel
- ThrottlingBurstLimit
- ThrottlingRateLimit
- DeploymentId
- Description
- LastDeploymentStatusMessage
- LastUpdatedDate
- RouteSettings
- DataTraceEnabled
- DetailedMetricsEnabled
- LoggingLevel
- ThrottlingBurstLimit
- ThrottlingRateLimit
- StageName
- StageVariables
- AccessLogSettings
AwsAutoScalingAutoScalingGroupDetails
- AwsAutoScalingAutoScalingGroupDetails
object
: Provides details about an auto scaling group.- CreatedTime
- HealthCheckGracePeriod
- HealthCheckType
- LaunchConfigurationName
- LoadBalancerNames
- items NonEmptyString
AwsCertificateManagerCertificateDetails
- AwsCertificateManagerCertificateDetails
object
: Provides details about an AWS Certificate Manager certificate.- CertificateAuthorityArn
- CreatedAt
- DomainName
- DomainValidationOptions
- ExtendedKeyUsages
- FailureReason
- ImportedAt
- InUseBy
- items NonEmptyString
- IssuedAt
- Issuer
- KeyAlgorithm
- KeyUsages
- NotAfter
- NotBefore
- Options
- CertificateTransparencyLoggingPreference
- RenewalEligibility
- RenewalSummary
- DomainValidationOptions
- RenewalStatus
- RenewalStatusReason
- UpdatedAt
- Serial
- SignatureAlgorithm
- Status
- Subject
- SubjectAlternativeNames
- items NonEmptyString
- Type
AwsCertificateManagerCertificateDomainValidationOption
- AwsCertificateManagerCertificateDomainValidationOption
object
: Contains information about one of the following: The initial validation of each domain name that occurs as a result of the RequestCertificate request The validation of each domain name in the certificate, as it pertains to AWS Certificate Manager managed renewal- DomainName
- ResourceRecord
- Name
- Type
- Value
- ValidationDomain
- ValidationEmails
- items NonEmptyString
- ValidationMethod
- ValidationStatus
AwsCertificateManagerCertificateDomainValidationOptions
- AwsCertificateManagerCertificateDomainValidationOptions
array
AwsCertificateManagerCertificateExtendedKeyUsage
- AwsCertificateManagerCertificateExtendedKeyUsage
object
: Contains information about an extended key usage X.509 v3 extension object.- Name
- OId
AwsCertificateManagerCertificateExtendedKeyUsages
- AwsCertificateManagerCertificateExtendedKeyUsages
array
AwsCertificateManagerCertificateKeyUsage
- AwsCertificateManagerCertificateKeyUsage
object
: Contains information about a key usage X.509 v3 extension object.- Name
AwsCertificateManagerCertificateKeyUsages
- AwsCertificateManagerCertificateKeyUsages
array
AwsCertificateManagerCertificateOptions
- AwsCertificateManagerCertificateOptions
object
: Contains other options for the certificate.- CertificateTransparencyLoggingPreference
AwsCertificateManagerCertificateRenewalSummary
- AwsCertificateManagerCertificateRenewalSummary
object
: Contains information about the AWS Certificate Manager managed renewal for an AMAZON_ISSUED certificate.- DomainValidationOptions
- RenewalStatus
- RenewalStatusReason
- UpdatedAt
AwsCertificateManagerCertificateResourceRecord
- AwsCertificateManagerCertificateResourceRecord
object
: Provides details about the CNAME record that is added to the DNS database for domain validation.- Name
- Type
- Value
AwsCloudFrontDistributionCacheBehavior
- AwsCloudFrontDistributionCacheBehavior
object
: Information about a cache behavior for the distribution.- ViewerProtocolPolicy
AwsCloudFrontDistributionCacheBehaviors
- AwsCloudFrontDistributionCacheBehaviors
object
: Provides information about caching for the distribution.- Items
AwsCloudFrontDistributionCacheBehaviorsItemList
- AwsCloudFrontDistributionCacheBehaviorsItemList
array
AwsCloudFrontDistributionDefaultCacheBehavior
- AwsCloudFrontDistributionDefaultCacheBehavior
object
: Contains information about the default cache configuration for the distribution.- ViewerProtocolPolicy
AwsCloudFrontDistributionDetails
- AwsCloudFrontDistributionDetails
object
: A distribution configuration.- CacheBehaviors
- Items
- DefaultCacheBehavior
- ViewerProtocolPolicy
- DefaultRootObject
- DomainName
- ETag
- LastModifiedTime
- Logging
- Bucket
- Enabled
- IncludeCookies
- Prefix
- OriginGroups
- Items
- Origins
- Items
- Status
- WebAclId
- CacheBehaviors
AwsCloudFrontDistributionLogging
- AwsCloudFrontDistributionLogging
object
: A complex type that controls whether access logs are written for the distribution.- Bucket
- Enabled
- IncludeCookies
- Prefix
AwsCloudFrontDistributionOriginGroup
- AwsCloudFrontDistributionOriginGroup
object
: Information about an origin group for the distribution.- FailoverCriteria
- StatusCodes
- Items
- items Integer
- Quantity
- Items
- StatusCodes
- FailoverCriteria
AwsCloudFrontDistributionOriginGroupFailover
- AwsCloudFrontDistributionOriginGroupFailover
object
: Provides information about when an origin group fails over.- StatusCodes
- Items
- items Integer
- Quantity
- Items
- StatusCodes
AwsCloudFrontDistributionOriginGroupFailoverStatusCodes
- AwsCloudFrontDistributionOriginGroupFailoverStatusCodes
object
: The status codes that cause an origin group to fail over.- Items
- items Integer
- Quantity
- Items
AwsCloudFrontDistributionOriginGroupFailoverStatusCodesItemList
- AwsCloudFrontDistributionOriginGroupFailoverStatusCodesItemList
array
- items Integer
AwsCloudFrontDistributionOriginGroups
- AwsCloudFrontDistributionOriginGroups
object
: Provides information about origin groups that are associated with the distribution.- Items
AwsCloudFrontDistributionOriginGroupsItemList
- AwsCloudFrontDistributionOriginGroupsItemList
array
AwsCloudFrontDistributionOriginItem
- AwsCloudFrontDistributionOriginItem
object
: A complex type that describes the Amazon S3 bucket, HTTP server (for example, a web server), Amazon Elemental MediaStore, or other server from which CloudFront gets your files.- DomainName
- Id
- OriginPath
- S3OriginConfig
- OriginAccessIdentity
AwsCloudFrontDistributionOriginItemList
- AwsCloudFrontDistributionOriginItemList
array
AwsCloudFrontDistributionOriginS3OriginConfig
- AwsCloudFrontDistributionOriginS3OriginConfig
object
: Information about an origin that is an S3 bucket that is not configured with static website hosting.- OriginAccessIdentity
AwsCloudFrontDistributionOrigins
- AwsCloudFrontDistributionOrigins
object
: A complex type that contains information about origins and origin groups for this distribution.- Items
AwsCloudTrailTrailDetails
- AwsCloudTrailTrailDetails
object
: Provides details about a CloudTrail trail.- CloudWatchLogsLogGroupArn
- CloudWatchLogsRoleArn
- HasCustomEventSelectors
- HomeRegion
- IncludeGlobalServiceEvents
- IsMultiRegionTrail
- IsOrganizationTrail
- KmsKeyId
- LogFileValidationEnabled
- Name
- S3BucketName
- S3KeyPrefix
- SnsTopicArn
- SnsTopicName
- TrailArn
AwsCodeBuildProjectDetails
- AwsCodeBuildProjectDetails
object
: Information about an AWS CodeBuild project.- EncryptionKey
- Environment
- Certificate
- ImagePullCredentialsType
- RegistryCredential
- Credential
- CredentialProvider
- Type
- Name
- ServiceRole
- Source
- GitCloneDepth
- InsecureSsl
- Location
- Type
- VpcConfig
- SecurityGroupIds
- items NonEmptyString
- Subnets
- items NonEmptyString
- VpcId
- SecurityGroupIds
AwsCodeBuildProjectEnvironment
- AwsCodeBuildProjectEnvironment
object
: Information about the build environment for this build project.- Certificate
- ImagePullCredentialsType
- RegistryCredential
- Credential
- CredentialProvider
- Type
AwsCodeBuildProjectEnvironmentRegistryCredential
- AwsCodeBuildProjectEnvironmentRegistryCredential
object
: The credentials for access to a private registry.- Credential
- CredentialProvider
AwsCodeBuildProjectSource
- AwsCodeBuildProjectSource
object
: Information about the build input source code for this build project.- GitCloneDepth
- InsecureSsl
- Location
- Type
AwsCodeBuildProjectVpcConfig
- AwsCodeBuildProjectVpcConfig
object
: Information about the VPC configuration that AWS CodeBuild accesses.- SecurityGroupIds
- items NonEmptyString
- Subnets
- items NonEmptyString
- VpcId
- SecurityGroupIds
AwsCorsConfiguration
- AwsCorsConfiguration
object
: Contains the cross-origin resource sharing (CORS) configuration for the API. CORS is only supported for HTTP APIs.- AllowCredentials
- AllowHeaders
- items NonEmptyString
- AllowMethods
- items NonEmptyString
- AllowOrigins
- items NonEmptyString
- ExposeHeaders
- items NonEmptyString
- MaxAge
AwsDynamoDbTableAttributeDefinition
- AwsDynamoDbTableAttributeDefinition
object
: Contains a definition of an attribute for the table.- AttributeName
- AttributeType
AwsDynamoDbTableAttributeDefinitionList
- AwsDynamoDbTableAttributeDefinitionList
array
AwsDynamoDbTableBillingModeSummary
- AwsDynamoDbTableBillingModeSummary
object
: Provides information about the billing for read/write capacity on the table.- BillingMode
- LastUpdateToPayPerRequestDateTime
AwsDynamoDbTableDetails
- AwsDynamoDbTableDetails
object
: Provides details about a DynamoDB table.- AttributeDefinitions
- BillingModeSummary
- BillingMode
- LastUpdateToPayPerRequestDateTime
- CreationDateTime
- GlobalSecondaryIndexes
- GlobalTableVersion
- ItemCount
- KeySchema
- LatestStreamArn
- LatestStreamLabel
- LocalSecondaryIndexes
- ProvisionedThroughput
- LastDecreaseDateTime
- LastIncreaseDateTime
- NumberOfDecreasesToda
5.0.0
5 years ago