# WARNING ABOUT GENERATED CODE # # This file is generated. See the contributing guide for more information: # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md # # WARNING ABOUT GENERATED CODE require 'seahorse/client/plugins/content_length.rb' require 'aws-sdk-core/plugins/credentials_configuration.rb' require 'aws-sdk-core/plugins/logging.rb' require 'aws-sdk-core/plugins/param_converter.rb' require 'aws-sdk-core/plugins/param_validator.rb' require 'aws-sdk-core/plugins/user_agent.rb' require 'aws-sdk-core/plugins/helpful_socket_errors.rb' require 'aws-sdk-core/plugins/retry_errors.rb' require 'aws-sdk-core/plugins/global_configuration.rb' require 'aws-sdk-core/plugins/regional_endpoint.rb' require 'aws-sdk-core/plugins/response_paging.rb' require 'aws-sdk-core/plugins/stub_responses.rb' require 'aws-sdk-core/plugins/idempotency_token.rb' require 'aws-sdk-core/plugins/jsonvalue_converter.rb' require 'aws-sdk-core/plugins/signature_v4.rb' require 'aws-sdk-core/plugins/protocols/rest_json.rb' Aws::Plugins::GlobalConfiguration.add_identifier(:guardduty) module Aws::GuardDuty class Client < Seahorse::Client::Base include Aws::ClientStubs @identifier = :guardduty set_api(ClientApi::API) add_plugin(Seahorse::Client::Plugins::ContentLength) add_plugin(Aws::Plugins::CredentialsConfiguration) add_plugin(Aws::Plugins::Logging) add_plugin(Aws::Plugins::ParamConverter) add_plugin(Aws::Plugins::ParamValidator) add_plugin(Aws::Plugins::UserAgent) add_plugin(Aws::Plugins::HelpfulSocketErrors) add_plugin(Aws::Plugins::RetryErrors) add_plugin(Aws::Plugins::GlobalConfiguration) add_plugin(Aws::Plugins::RegionalEndpoint) add_plugin(Aws::Plugins::ResponsePaging) add_plugin(Aws::Plugins::StubResponses) add_plugin(Aws::Plugins::IdempotencyToken) add_plugin(Aws::Plugins::JsonvalueConverter) add_plugin(Aws::Plugins::SignatureV4) add_plugin(Aws::Plugins::Protocols::RestJson) # @option options [required, Aws::CredentialProvider] :credentials # Your AWS credentials. This can be an instance of any one of the # following classes: # # * `Aws::Credentials` - Used for configuring static, non-refreshing # credentials. # # * `Aws::InstanceProfileCredentials` - Used for loading credentials # from an EC2 IMDS on an EC2 instance. # # * `Aws::SharedCredentials` - Used for loading credentials from a # shared file, such as `~/.aws/config`. # # * `Aws::AssumeRoleCredentials` - Used when you need to assume a role. # # When `:credentials` are not configured directly, the following # locations will be searched for credentials: # # * `Aws.config[:credentials]` # * The `:access_key_id`, `:secret_access_key`, and `:session_token` options. # * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'] # * `~/.aws/credentials` # * `~/.aws/config` # * EC2 IMDS instance profile - When used by default, the timeouts are # very aggressive. Construct and pass an instance of # `Aws::InstanceProfileCredentails` to enable retries and extended # timeouts. # # @option options [required, String] :region # The AWS region to connect to. The configured `:region` is # used to determine the service `:endpoint`. When not passed, # a default `:region` is search for in the following locations: # # * `Aws.config[:region]` # * `ENV['AWS_REGION']` # * `ENV['AMAZON_REGION']` # * `ENV['AWS_DEFAULT_REGION']` # * `~/.aws/credentials` # * `~/.aws/config` # # @option options [String] :access_key_id # # @option options [Boolean] :convert_params (true) # When `true`, an attempt is made to coerce request parameters into # the required types. # # @option options [String] :endpoint # The client endpoint is normally constructed from the `:region` # option. You should only configure an `:endpoint` when connecting # to test endpoints. This should be avalid HTTP(S) URI. # # @option options [Aws::Log::Formatter] :log_formatter (Aws::Log::Formatter.default) # The log formatter. # # @option options [Symbol] :log_level (:info) # The log level to send messages to the `:logger` at. # # @option options [Logger] :logger # The Logger instance to send log messages to. If this option # is not set, logging will be disabled. # # @option options [String] :profile ("default") # Used when loading credentials from the shared credentials file # at HOME/.aws/credentials. When not specified, 'default' is used. # # @option options [Integer] :retry_limit (3) # The maximum number of times to retry failed requests. Only # ~ 500 level server errors and certain ~ 400 level client errors # are retried. Generally, these are throttling errors, data # checksum errors, networking errors, timeout errors and auth # errors from expired credentials. # # @option options [String] :secret_access_key # # @option options [String] :session_token # # @option options [Boolean] :stub_responses (false) # Causes the client to return stubbed responses. By default # fake responses are generated and returned. You can specify # the response data to return or errors to raise by calling # {ClientStubs#stub_responses}. See {ClientStubs} for more information. # # ** Please note ** When response stubbing is enabled, no HTTP # requests are made, and retries are disabled. # # @option options [Boolean] :validate_params (true) # When `true`, request parameters are validated before # sending the request. # def initialize(*args) super end # @!group API Operations # Accepts the invitation to be monitored by a master GuardDuty account. # # @option params [required, String] :detector_id # # @option params [String] :invitation_id # This value is used to validate the master account to the member # account. # # @option params [String] :master_id # The account ID of the master GuardDuty account whose invitation # you're accepting. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.accept_invitation({ # detector_id: "__string", # required # invitation_id: "InvitationId", # master_id: "MasterId", # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/AcceptInvitation AWS API Documentation # # @overload accept_invitation(params = {}) # @param [Hash] params ({}) def accept_invitation(params = {}, options = {}) req = build_request(:accept_invitation, params) req.send_request(options) end # Archives Amazon GuardDuty findings specified by the list of finding # IDs. # # @option params [required, String] :detector_id # # @option params [Array] :finding_ids # IDs of the findings that you want to archive. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.archive_findings({ # detector_id: "__string", # required # finding_ids: ["FindingId"], # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ArchiveFindings AWS API Documentation # # @overload archive_findings(params = {}) # @param [Hash] params ({}) def archive_findings(params = {}, options = {}) req = build_request(:archive_findings, params) req.send_request(options) end # Creates a single Amazon GuardDuty detector. A detector is an object # that represents the GuardDuty service. A detector must be created in # order for GuardDuty to become operational. # # @option params [Boolean] :enable # A boolean value that specifies whether the detector is to be enabled. # # @return [Types::CreateDetectorResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::CreateDetectorResponse#detector_id #detector_id} => String # # @example Request syntax with placeholder values # # resp = client.create_detector({ # enable: false, # }) # # @example Response structure # # resp.detector_id #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreateDetector AWS API Documentation # # @overload create_detector(params = {}) # @param [Hash] params ({}) def create_detector(params = {}, options = {}) req = build_request(:create_detector, params) req.send_request(options) end # Creates a new IPSet - a list of trusted IP addresses that have been # whitelisted for secure communication with AWS infrastructure and # applications. # # @option params [Boolean] :activate # A boolean value that indicates whether GuardDuty is to start using the # uploaded IPSet. # # @option params [required, String] :detector_id # # @option params [String] :format # The format of the file that contains the IPSet. # # @option params [String] :location # The URI of the file that contains the IPSet. For example # (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key) # # @option params [String] :name # The user friendly name to identify the IPSet. This name is displayed # in all findings that are triggered by activity that involves IP # addresses included in this IPSet. # # @return [Types::CreateIPSetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::CreateIPSetResponse#ip_set_id #ip_set_id} => String # # @example Request syntax with placeholder values # # resp = client.create_ip_set({ # activate: false, # detector_id: "__string", # required # format: "TXT", # accepts TXT, STIX, OTX_CSV, ALIEN_VAULT, PROOF_POINT, FIRE_EYE # location: "Location", # name: "Name", # }) # # @example Response structure # # resp.ip_set_id #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreateIPSet AWS API Documentation # # @overload create_ip_set(params = {}) # @param [Hash] params ({}) def create_ip_set(params = {}, options = {}) req = build_request(:create_ip_set, params) req.send_request(options) end # Creates member accounts of the current AWS account by specifying a # list of AWS account IDs. The current AWS account can then invite these # members to manage GuardDuty in their accounts. # # @option params [Array] :account_details # A list of account ID and email address pairs of the accounts that you # want to associate with the master GuardDuty account. # # @option params [required, String] :detector_id # # @return [Types::CreateMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::CreateMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.create_members({ # account_details: [ # { # account_id: "AccountId", # required # email: "Email", # required # }, # ], # detector_id: "__string", # required # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreateMembers AWS API Documentation # # @overload create_members(params = {}) # @param [Hash] params ({}) def create_members(params = {}, options = {}) req = build_request(:create_members, params) req.send_request(options) end # Generates example findings of types specified by the list of finding # types. If 'NULL' is specified for findingTypes, the API generates # example findings of all supported finding types. # # @option params [required, String] :detector_id # # @option params [Array] :finding_types # Types of sample findings that you want to generate. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.create_sample_findings({ # detector_id: "__string", # required # finding_types: ["FindingType"], # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreateSampleFindings AWS API Documentation # # @overload create_sample_findings(params = {}) # @param [Hash] params ({}) def create_sample_findings(params = {}, options = {}) req = build_request(:create_sample_findings, params) req.send_request(options) end # Create a new ThreatIntelSet. ThreatIntelSets consist of known # malicious IP addresses. GuardDuty generates findings based on # ThreatIntelSets. # # @option params [Boolean] :activate # A boolean value that indicates whether GuardDuty is to start using the # uploaded ThreatIntelSet. # # @option params [required, String] :detector_id # # @option params [String] :format # The format of the file that contains the ThreatIntelSet. # # @option params [String] :location # The URI of the file that contains the ThreatIntelSet. For example # (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key). # # @option params [String] :name # A user-friendly ThreatIntelSet name that is displayed in all finding # generated by activity that involves IP addresses included in this # ThreatIntelSet. # # @return [Types::CreateThreatIntelSetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::CreateThreatIntelSetResponse#threat_intel_set_id #threat_intel_set_id} => String # # @example Request syntax with placeholder values # # resp = client.create_threat_intel_set({ # activate: false, # detector_id: "__string", # required # format: "TXT", # accepts TXT, STIX, OTX_CSV, ALIEN_VAULT, PROOF_POINT, FIRE_EYE # location: "Location", # name: "Name", # }) # # @example Response structure # # resp.threat_intel_set_id #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/CreateThreatIntelSet AWS API Documentation # # @overload create_threat_intel_set(params = {}) # @param [Hash] params ({}) def create_threat_intel_set(params = {}, options = {}) req = build_request(:create_threat_intel_set, params) req.send_request(options) end # Declines invitations sent to the current member account by AWS account # specified by their account IDs. # # @option params [Array] :account_ids # A list of account IDs of the AWS accounts that sent invitations to the # current member account that you want to decline invitations from. # # @return [Types::DeclineInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::DeclineInvitationsResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.decline_invitations({ # account_ids: ["__string"], # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeclineInvitations AWS API Documentation # # @overload decline_invitations(params = {}) # @param [Hash] params ({}) def decline_invitations(params = {}, options = {}) req = build_request(:decline_invitations, params) req.send_request(options) end # Deletes a Amazon GuardDuty detector specified by the detector ID. # # @option params [required, String] :detector_id # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.delete_detector({ # detector_id: "__string", # required # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteDetector AWS API Documentation # # @overload delete_detector(params = {}) # @param [Hash] params ({}) def delete_detector(params = {}, options = {}) req = build_request(:delete_detector, params) req.send_request(options) end # Deletes the IPSet specified by the IPSet ID. # # @option params [required, String] :detector_id # # @option params [required, String] :ip_set_id # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.delete_ip_set({ # detector_id: "__string", # required # ip_set_id: "__string", # required # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteIPSet AWS API Documentation # # @overload delete_ip_set(params = {}) # @param [Hash] params ({}) def delete_ip_set(params = {}, options = {}) req = build_request(:delete_ip_set, params) req.send_request(options) end # Deletes invitations sent to the current member account by AWS accounts # specified by their account IDs. # # @option params [Array] :account_ids # A list of account IDs of the AWS accounts that sent invitations to the # current member account that you want to delete invitations from. # # @return [Types::DeleteInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::DeleteInvitationsResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.delete_invitations({ # account_ids: ["__string"], # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteInvitations AWS API Documentation # # @overload delete_invitations(params = {}) # @param [Hash] params ({}) def delete_invitations(params = {}, options = {}) req = build_request(:delete_invitations, params) req.send_request(options) end # Deletes GuardDuty member accounts (to the current GuardDuty master # account) specified by the account IDs. # # @option params [Array] :account_ids # A list of account IDs of the GuardDuty member accounts that you want # to delete. # # @option params [required, String] :detector_id # # @return [Types::DeleteMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::DeleteMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.delete_members({ # account_ids: ["__string"], # detector_id: "__string", # required # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteMembers AWS API Documentation # # @overload delete_members(params = {}) # @param [Hash] params ({}) def delete_members(params = {}, options = {}) req = build_request(:delete_members, params) req.send_request(options) end # Deletes ThreatIntelSet specified by the ThreatIntelSet ID. # # @option params [required, String] :detector_id # # @option params [required, String] :threat_intel_set_id # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.delete_threat_intel_set({ # detector_id: "__string", # required # threat_intel_set_id: "__string", # required # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DeleteThreatIntelSet AWS API Documentation # # @overload delete_threat_intel_set(params = {}) # @param [Hash] params ({}) def delete_threat_intel_set(params = {}, options = {}) req = build_request(:delete_threat_intel_set, params) req.send_request(options) end # Disassociates the current GuardDuty member account from its master # account. # # @option params [required, String] :detector_id # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.disassociate_from_master_account({ # detector_id: "__string", # required # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisassociateFromMasterAccount AWS API Documentation # # @overload disassociate_from_master_account(params = {}) # @param [Hash] params ({}) def disassociate_from_master_account(params = {}, options = {}) req = build_request(:disassociate_from_master_account, params) req.send_request(options) end # Disassociates GuardDuty member accounts (to the current GuardDuty # master account) specified by the account IDs. # # @option params [Array] :account_ids # A list of account IDs of the GuardDuty member accounts that you want # to disassociate from master. # # @option params [required, String] :detector_id # # @return [Types::DisassociateMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::DisassociateMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.disassociate_members({ # account_ids: ["__string"], # detector_id: "__string", # required # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/DisassociateMembers AWS API Documentation # # @overload disassociate_members(params = {}) # @param [Hash] params ({}) def disassociate_members(params = {}, options = {}) req = build_request(:disassociate_members, params) req.send_request(options) end # Retrieves an Amazon GuardDuty detector specified by the detectorId. # # @option params [required, String] :detector_id # # @return [Types::GetDetectorResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetDetectorResponse#created_at #created_at} => String # * {Types::GetDetectorResponse#service_role #service_role} => String # * {Types::GetDetectorResponse#status #status} => String # * {Types::GetDetectorResponse#updated_at #updated_at} => String # # @example Request syntax with placeholder values # # resp = client.get_detector({ # detector_id: "__string", # required # }) # # @example Response structure # # resp.created_at #=> String # resp.service_role #=> String # resp.status #=> String, one of "ENABLED", "DISABLED" # resp.updated_at #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetDetector AWS API Documentation # # @overload get_detector(params = {}) # @param [Hash] params ({}) def get_detector(params = {}, options = {}) req = build_request(:get_detector, params) req.send_request(options) end # Describes Amazon GuardDuty findings specified by finding IDs. # # @option params [required, String] :detector_id # # @option params [Array] :finding_ids # IDs of the findings that you want to retrieve. # # @option params [Types::SortCriteria] :sort_criteria # Represents the criteria used for sorting findings. # # @return [Types::GetFindingsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetFindingsResponse#findings #findings} => Array<Types::Finding> # # @example Request syntax with placeholder values # # resp = client.get_findings({ # detector_id: "__string", # required # finding_ids: ["FindingId"], # sort_criteria: { # attribute_name: "__string", # order_by: "ASC", # accepts ASC, DESC # }, # }) # # @example Response structure # # resp.findings #=> Array # resp.findings[0].account_id #=> String # resp.findings[0].arn #=> String # resp.findings[0].confidence #=> Float # resp.findings[0].created_at #=> String # resp.findings[0].description #=> String # resp.findings[0].id #=> String # resp.findings[0].partition #=> String # resp.findings[0].region #=> String # resp.findings[0].resource.access_key_details.access_key_id #=> String # resp.findings[0].resource.access_key_details.principal_id #=> String # resp.findings[0].resource.access_key_details.user_name #=> String # resp.findings[0].resource.access_key_details.user_type #=> String # resp.findings[0].resource.instance_details.availability_zone #=> String # resp.findings[0].resource.instance_details.iam_instance_profile.arn #=> String # resp.findings[0].resource.instance_details.iam_instance_profile.id #=> String # resp.findings[0].resource.instance_details.image_id #=> String # resp.findings[0].resource.instance_details.instance_id #=> String # resp.findings[0].resource.instance_details.instance_state #=> String # resp.findings[0].resource.instance_details.instance_type #=> String # resp.findings[0].resource.instance_details.launch_time #=> String # resp.findings[0].resource.instance_details.network_interfaces #=> Array # resp.findings[0].resource.instance_details.network_interfaces[0].ipv_6_addresses #=> Array # resp.findings[0].resource.instance_details.network_interfaces[0].ipv_6_addresses[0] #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].private_dns_name #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].private_ip_address #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].private_ip_addresses #=> Array # resp.findings[0].resource.instance_details.network_interfaces[0].private_ip_addresses[0].private_dns_name #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].private_ip_addresses[0].private_ip_address #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].public_dns_name #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].public_ip #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].security_groups #=> Array # resp.findings[0].resource.instance_details.network_interfaces[0].security_groups[0].group_id #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].security_groups[0].group_name #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].subnet_id #=> String # resp.findings[0].resource.instance_details.network_interfaces[0].vpc_id #=> String # resp.findings[0].resource.instance_details.platform #=> String # resp.findings[0].resource.instance_details.product_codes #=> Array # resp.findings[0].resource.instance_details.product_codes[0].code #=> String # resp.findings[0].resource.instance_details.product_codes[0].product_type #=> String # resp.findings[0].resource.instance_details.tags #=> Array # resp.findings[0].resource.instance_details.tags[0].key #=> String # resp.findings[0].resource.instance_details.tags[0].value #=> String # resp.findings[0].resource.resource_type #=> String # resp.findings[0].schema_version #=> String # resp.findings[0].service.action.action_type #=> String # resp.findings[0].service.action.aws_api_call_action.api #=> String # resp.findings[0].service.action.aws_api_call_action.caller_type #=> String # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.city.city_name #=> String # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.country.country_code #=> String # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.country.country_name #=> String # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.geo_location.lat #=> Float # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.geo_location.lon #=> Float # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.ip_address_v4 #=> String # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.asn #=> String # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.asn_org #=> String # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.isp #=> String # resp.findings[0].service.action.aws_api_call_action.remote_ip_details.organization.org #=> String # resp.findings[0].service.action.aws_api_call_action.service_name #=> String # resp.findings[0].service.action.dns_request_action.domain #=> String # resp.findings[0].service.action.network_connection_action.blocked #=> Boolean # resp.findings[0].service.action.network_connection_action.connection_direction #=> String # resp.findings[0].service.action.network_connection_action.local_port_details.port #=> Integer # resp.findings[0].service.action.network_connection_action.local_port_details.port_name #=> String # resp.findings[0].service.action.network_connection_action.protocol #=> String # resp.findings[0].service.action.network_connection_action.remote_ip_details.city.city_name #=> String # resp.findings[0].service.action.network_connection_action.remote_ip_details.country.country_code #=> String # resp.findings[0].service.action.network_connection_action.remote_ip_details.country.country_name #=> String # resp.findings[0].service.action.network_connection_action.remote_ip_details.geo_location.lat #=> Float # resp.findings[0].service.action.network_connection_action.remote_ip_details.geo_location.lon #=> Float # resp.findings[0].service.action.network_connection_action.remote_ip_details.ip_address_v4 #=> String # resp.findings[0].service.action.network_connection_action.remote_ip_details.organization.asn #=> String # resp.findings[0].service.action.network_connection_action.remote_ip_details.organization.asn_org #=> String # resp.findings[0].service.action.network_connection_action.remote_ip_details.organization.isp #=> String # resp.findings[0].service.action.network_connection_action.remote_ip_details.organization.org #=> String # resp.findings[0].service.action.network_connection_action.remote_port_details.port #=> Integer # resp.findings[0].service.action.network_connection_action.remote_port_details.port_name #=> String # resp.findings[0].service.action.port_probe_action.blocked #=> Boolean # resp.findings[0].service.action.port_probe_action.port_probe_details #=> Array # resp.findings[0].service.action.port_probe_action.port_probe_details[0].local_port_details.port #=> Integer # resp.findings[0].service.action.port_probe_action.port_probe_details[0].local_port_details.port_name #=> String # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.city.city_name #=> String # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.country.country_code #=> String # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.country.country_name #=> String # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.geo_location.lat #=> Float # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.geo_location.lon #=> Float # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.ip_address_v4 #=> String # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.asn #=> String # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.asn_org #=> String # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.isp #=> String # resp.findings[0].service.action.port_probe_action.port_probe_details[0].remote_ip_details.organization.org #=> String # resp.findings[0].service.archived #=> Boolean # resp.findings[0].service.count #=> Integer # resp.findings[0].service.detector_id #=> String # resp.findings[0].service.event_first_seen #=> String # resp.findings[0].service.event_last_seen #=> String # resp.findings[0].service.resource_role #=> String # resp.findings[0].service.service_name #=> String # resp.findings[0].service.user_feedback #=> String # resp.findings[0].severity #=> Float # resp.findings[0].title #=> String # resp.findings[0].type #=> String # resp.findings[0].updated_at #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetFindings AWS API Documentation # # @overload get_findings(params = {}) # @param [Hash] params ({}) def get_findings(params = {}, options = {}) req = build_request(:get_findings, params) req.send_request(options) end # Lists Amazon GuardDuty findings' statistics for the specified # detector ID. # # @option params [required, String] :detector_id # # @option params [Types::FindingCriteria] :finding_criteria # Represents the criteria used for querying findings. # # @option params [Array] :finding_statistic_types # Types of finding statistics to retrieve. # # @return [Types::GetFindingsStatisticsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetFindingsStatisticsResponse#finding_statistics #finding_statistics} => Types::FindingStatistics # # @example Request syntax with placeholder values # # resp = client.get_findings_statistics({ # detector_id: "__string", # required # finding_criteria: { # criterion: { # "__string" => { # eq: ["__string"], # gt: 1, # gte: 1, # lt: 1, # lte: 1, # neq: ["__string"], # }, # }, # }, # finding_statistic_types: ["COUNT_BY_SEVERITY"], # accepts COUNT_BY_SEVERITY # }) # # @example Response structure # # resp.finding_statistics.count_by_severity #=> Hash # resp.finding_statistics.count_by_severity["__string"] #=> Integer # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetFindingsStatistics AWS API Documentation # # @overload get_findings_statistics(params = {}) # @param [Hash] params ({}) def get_findings_statistics(params = {}, options = {}) req = build_request(:get_findings_statistics, params) req.send_request(options) end # Retrieves the IPSet specified by the IPSet ID. # # @option params [required, String] :detector_id # # @option params [required, String] :ip_set_id # # @return [Types::GetIPSetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetIPSetResponse#format #format} => String # * {Types::GetIPSetResponse#location #location} => String # * {Types::GetIPSetResponse#name #name} => String # * {Types::GetIPSetResponse#status #status} => String # # @example Request syntax with placeholder values # # resp = client.get_ip_set({ # detector_id: "__string", # required # ip_set_id: "__string", # required # }) # # @example Response structure # # resp.format #=> String, one of "TXT", "STIX", "OTX_CSV", "ALIEN_VAULT", "PROOF_POINT", "FIRE_EYE" # resp.location #=> String # resp.name #=> String # resp.status #=> String, one of "INACTIVE", "ACTIVATING", "ACTIVE", "DEACTIVATING", "ERROR", "DELETE_PENDING", "DELETED" # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetIPSet AWS API Documentation # # @overload get_ip_set(params = {}) # @param [Hash] params ({}) def get_ip_set(params = {}, options = {}) req = build_request(:get_ip_set, params) req.send_request(options) end # Returns the count of all GuardDuty membership invitations that were # sent to the current member account except the currently accepted # invitation. # # @return [Types::GetInvitationsCountResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetInvitationsCountResponse#invitations_count #invitations_count} => Integer # # @example Response structure # # resp.invitations_count #=> Integer # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetInvitationsCount AWS API Documentation # # @overload get_invitations_count(params = {}) # @param [Hash] params ({}) def get_invitations_count(params = {}, options = {}) req = build_request(:get_invitations_count, params) req.send_request(options) end # Provides the details for the GuardDuty master account to the current # GuardDuty member account. # # @option params [required, String] :detector_id # # @return [Types::GetMasterAccountResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetMasterAccountResponse#master #master} => Types::Master # # @example Request syntax with placeholder values # # resp = client.get_master_account({ # detector_id: "__string", # required # }) # # @example Response structure # # resp.master.account_id #=> String # resp.master.invitation_id #=> String # resp.master.invited_at #=> String # resp.master.relationship_status #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetMasterAccount AWS API Documentation # # @overload get_master_account(params = {}) # @param [Hash] params ({}) def get_master_account(params = {}, options = {}) req = build_request(:get_master_account, params) req.send_request(options) end # Retrieves GuardDuty member accounts (to the current GuardDuty master # account) specified by the account IDs. # # @option params [Array] :account_ids # A list of account IDs of the GuardDuty member accounts that you want # to describe. # # @option params [required, String] :detector_id # # @return [Types::GetMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetMembersResponse#members #members} => Array<Types::Member> # * {Types::GetMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.get_members({ # account_ids: ["__string"], # detector_id: "__string", # required # }) # # @example Response structure # # resp.members #=> Array # resp.members[0].account_id #=> String # resp.members[0].detector_id #=> String # resp.members[0].email #=> String # resp.members[0].invited_at #=> String # resp.members[0].master_id #=> String # resp.members[0].relationship_status #=> String # resp.members[0].updated_at #=> String # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetMembers AWS API Documentation # # @overload get_members(params = {}) # @param [Hash] params ({}) def get_members(params = {}, options = {}) req = build_request(:get_members, params) req.send_request(options) end # Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet # ID. # # @option params [required, String] :detector_id # # @option params [required, String] :threat_intel_set_id # # @return [Types::GetThreatIntelSetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetThreatIntelSetResponse#format #format} => String # * {Types::GetThreatIntelSetResponse#location #location} => String # * {Types::GetThreatIntelSetResponse#name #name} => String # * {Types::GetThreatIntelSetResponse#status #status} => String # # @example Request syntax with placeholder values # # resp = client.get_threat_intel_set({ # detector_id: "__string", # required # threat_intel_set_id: "__string", # required # }) # # @example Response structure # # resp.format #=> String, one of "TXT", "STIX", "OTX_CSV", "ALIEN_VAULT", "PROOF_POINT", "FIRE_EYE" # resp.location #=> String # resp.name #=> String # resp.status #=> String, one of "INACTIVE", "ACTIVATING", "ACTIVE", "DEACTIVATING", "ERROR", "DELETE_PENDING", "DELETED" # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/GetThreatIntelSet AWS API Documentation # # @overload get_threat_intel_set(params = {}) # @param [Hash] params ({}) def get_threat_intel_set(params = {}, options = {}) req = build_request(:get_threat_intel_set, params) req.send_request(options) end # Invites other AWS accounts (created as members of the current AWS # account by CreateMembers) to enable GuardDuty and allow the current # AWS account to view and manage these accounts' GuardDuty findings on # their behalf as the master account. # # @option params [Array] :account_ids # A list of account IDs of the accounts that you want to invite to # GuardDuty as members. # # @option params [required, String] :detector_id # # @option params [Boolean] :disable_email_notification # Indicates whether invite member email notification is disabled # # @option params [String] :message # The invitation message that you want to send to the accounts that # you’re inviting to GuardDuty as members. # # @return [Types::InviteMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::InviteMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.invite_members({ # account_ids: ["__string"], # detector_id: "__string", # required # disable_email_notification: false, # message: "Message", # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/InviteMembers AWS API Documentation # # @overload invite_members(params = {}) # @param [Hash] params ({}) def invite_members(params = {}, options = {}) req = build_request(:invite_members, params) req.send_request(options) end # Lists detectorIds of all the existing Amazon GuardDuty detector # resources. # # @option params [Integer] :max_results # You can use this parameter to indicate the maximum number of items # that you want in the response. # # @option params [String] :next_token # # @return [Types::ListDetectorsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListDetectorsResponse#detector_ids #detector_ids} => Array<String> # * {Types::ListDetectorsResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.list_detectors({ # max_results: 1, # next_token: "__string", # }) # # @example Response structure # # resp.detector_ids #=> Array # resp.detector_ids[0] #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListDetectors AWS API Documentation # # @overload list_detectors(params = {}) # @param [Hash] params ({}) def list_detectors(params = {}, options = {}) req = build_request(:list_detectors, params) req.send_request(options) end # Lists Amazon GuardDuty findings for the specified detector ID. # # @option params [required, String] :detector_id # # @option params [Types::FindingCriteria] :finding_criteria # Represents the criteria used for querying findings. # # @option params [Integer] :max_results # You can use this parameter to indicate the maximum number of items you # want in the response. The default value is 50. The maximum value is # 50. # # @option params [String] :next_token # You can use this parameter when paginating results. Set the value of # this parameter to null on your first call to the ListFindings action. # For subsequent calls to the action fill nextToken in the request with # the value of nextToken from the previous response to continue listing # data. # # @option params [Types::SortCriteria] :sort_criteria # Represents the criteria used for sorting findings. # # @return [Types::ListFindingsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListFindingsResponse#finding_ids #finding_ids} => Array<String> # * {Types::ListFindingsResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.list_findings({ # detector_id: "__string", # required # finding_criteria: { # criterion: { # "__string" => { # eq: ["__string"], # gt: 1, # gte: 1, # lt: 1, # lte: 1, # neq: ["__string"], # }, # }, # }, # max_results: 1, # next_token: "NextToken", # sort_criteria: { # attribute_name: "__string", # order_by: "ASC", # accepts ASC, DESC # }, # }) # # @example Response structure # # resp.finding_ids #=> Array # resp.finding_ids[0] #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListFindings AWS API Documentation # # @overload list_findings(params = {}) # @param [Hash] params ({}) def list_findings(params = {}, options = {}) req = build_request(:list_findings, params) req.send_request(options) end # Lists the IPSets of the GuardDuty service specified by the detector # ID. # # @option params [required, String] :detector_id # # @option params [Integer] :max_results # You can use this parameter to indicate the maximum number of items # that you want in the response. # # @option params [String] :next_token # # @return [Types::ListIPSetsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListIPSetsResponse#ip_set_ids #ip_set_ids} => Array<String> # * {Types::ListIPSetsResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.list_ip_sets({ # detector_id: "__string", # required # max_results: 1, # next_token: "__string", # }) # # @example Response structure # # resp.ip_set_ids #=> Array # resp.ip_set_ids[0] #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListIPSets AWS API Documentation # # @overload list_ip_sets(params = {}) # @param [Hash] params ({}) def list_ip_sets(params = {}, options = {}) req = build_request(:list_ip_sets, params) req.send_request(options) end # Lists all GuardDuty membership invitations that were sent to the # current AWS account. # # @option params [Integer] :max_results # You can use this parameter to indicate the maximum number of items # that you want in the response. # # @option params [String] :next_token # # @return [Types::ListInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListInvitationsResponse#invitations #invitations} => Array<Types::Invitation> # * {Types::ListInvitationsResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.list_invitations({ # max_results: 1, # next_token: "__string", # }) # # @example Response structure # # resp.invitations #=> Array # resp.invitations[0].account_id #=> String # resp.invitations[0].invitation_id #=> String # resp.invitations[0].invited_at #=> String # resp.invitations[0].relationship_status #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListInvitations AWS API Documentation # # @overload list_invitations(params = {}) # @param [Hash] params ({}) def list_invitations(params = {}, options = {}) req = build_request(:list_invitations, params) req.send_request(options) end # Lists details about all member accounts for the current GuardDuty # master account. # # @option params [required, String] :detector_id # # @option params [Integer] :max_results # You can use this parameter to indicate the maximum number of items # that you want in the response. # # @option params [String] :next_token # # @option params [String] :only_associated # # @return [Types::ListMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListMembersResponse#members #members} => Array<Types::Member> # * {Types::ListMembersResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.list_members({ # detector_id: "__string", # required # max_results: 1, # next_token: "__string", # only_associated: "__string", # }) # # @example Response structure # # resp.members #=> Array # resp.members[0].account_id #=> String # resp.members[0].detector_id #=> String # resp.members[0].email #=> String # resp.members[0].invited_at #=> String # resp.members[0].master_id #=> String # resp.members[0].relationship_status #=> String # resp.members[0].updated_at #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListMembers AWS API Documentation # # @overload list_members(params = {}) # @param [Hash] params ({}) def list_members(params = {}, options = {}) req = build_request(:list_members, params) req.send_request(options) end # Lists the ThreatIntelSets of the GuardDuty service specified by the # detector ID. # # @option params [required, String] :detector_id # # @option params [Integer] :max_results # You can use this parameter to indicate the maximum number of items # that you want in the response. # # @option params [String] :next_token # # @return [Types::ListThreatIntelSetsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListThreatIntelSetsResponse#next_token #next_token} => String # * {Types::ListThreatIntelSetsResponse#threat_intel_set_ids #threat_intel_set_ids} => Array<String> # # @example Request syntax with placeholder values # # resp = client.list_threat_intel_sets({ # detector_id: "__string", # required # max_results: 1, # next_token: "__string", # }) # # @example Response structure # # resp.next_token #=> String # resp.threat_intel_set_ids #=> Array # resp.threat_intel_set_ids[0] #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/ListThreatIntelSets AWS API Documentation # # @overload list_threat_intel_sets(params = {}) # @param [Hash] params ({}) def list_threat_intel_sets(params = {}, options = {}) req = build_request(:list_threat_intel_sets, params) req.send_request(options) end # Re-enables GuardDuty to monitor findings of the member accounts # specified by the account IDs. A master GuardDuty account can run this # command after disabling GuardDuty from monitoring these members' # findings by running StopMonitoringMembers. # # @option params [Array] :account_ids # A list of account IDs of the GuardDuty member accounts whose findings # you want the master account to monitor. # # @option params [required, String] :detector_id # # @return [Types::StartMonitoringMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::StartMonitoringMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.start_monitoring_members({ # account_ids: ["__string"], # detector_id: "__string", # required # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/StartMonitoringMembers AWS API Documentation # # @overload start_monitoring_members(params = {}) # @param [Hash] params ({}) def start_monitoring_members(params = {}, options = {}) req = build_request(:start_monitoring_members, params) req.send_request(options) end # Disables GuardDuty from monitoring findings of the member accounts # specified by the account IDs. After running this command, a master # GuardDuty account can run StartMonitoringMembers to re-enable # GuardDuty to monitor these members’ findings. # # @option params [Array] :account_ids # A list of account IDs of the GuardDuty member accounts whose findings # you want the master account to stop monitoring. # # @option params [required, String] :detector_id # # @return [Types::StopMonitoringMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::StopMonitoringMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::UnprocessedAccount> # # @example Request syntax with placeholder values # # resp = client.stop_monitoring_members({ # account_ids: ["__string"], # detector_id: "__string", # required # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/StopMonitoringMembers AWS API Documentation # # @overload stop_monitoring_members(params = {}) # @param [Hash] params ({}) def stop_monitoring_members(params = {}, options = {}) req = build_request(:stop_monitoring_members, params) req.send_request(options) end # Unarchives Amazon GuardDuty findings specified by the list of finding # IDs. # # @option params [required, String] :detector_id # # @option params [Array] :finding_ids # IDs of the findings that you want to unarchive. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.unarchive_findings({ # detector_id: "__string", # required # finding_ids: ["FindingId"], # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/UnarchiveFindings AWS API Documentation # # @overload unarchive_findings(params = {}) # @param [Hash] params ({}) def unarchive_findings(params = {}, options = {}) req = build_request(:unarchive_findings, params) req.send_request(options) end # Updates an Amazon GuardDuty detector specified by the detectorId. # # @option params [required, String] :detector_id # # @option params [Boolean] :enable # Updated boolean value for the detector that specifies whether the # detector is enabled. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.update_detector({ # detector_id: "__string", # required # enable: false, # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/UpdateDetector AWS API Documentation # # @overload update_detector(params = {}) # @param [Hash] params ({}) def update_detector(params = {}, options = {}) req = build_request(:update_detector, params) req.send_request(options) end # Marks specified Amazon GuardDuty findings as useful or not useful. # # @option params [String] :comments # Additional feedback about the GuardDuty findings. # # @option params [required, String] :detector_id # # @option params [String] :feedback # Valid values: USEFUL \| NOT\_USEFUL # # @option params [Array] :finding_ids # IDs of the findings that you want to mark as useful or not useful. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.update_findings_feedback({ # comments: "Comments", # detector_id: "__string", # required # feedback: "USEFUL", # accepts USEFUL, NOT_USEFUL # finding_ids: ["FindingId"], # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/UpdateFindingsFeedback AWS API Documentation # # @overload update_findings_feedback(params = {}) # @param [Hash] params ({}) def update_findings_feedback(params = {}, options = {}) req = build_request(:update_findings_feedback, params) req.send_request(options) end # Updates the IPSet specified by the IPSet ID. # # @option params [Boolean] :activate # The updated boolean value that specifies whether the IPSet is active # or not. # # @option params [required, String] :detector_id # # @option params [required, String] :ip_set_id # # @option params [String] :location # The updated URI of the file that contains the IPSet. For example # (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key). # # @option params [String] :name # The unique ID that specifies the IPSet that you want to update. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.update_ip_set({ # activate: false, # detector_id: "__string", # required # ip_set_id: "__string", # required # location: "Location", # name: "Name", # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/UpdateIPSet AWS API Documentation # # @overload update_ip_set(params = {}) # @param [Hash] params ({}) def update_ip_set(params = {}, options = {}) req = build_request(:update_ip_set, params) req.send_request(options) end # Updates the ThreatIntelSet specified by ThreatIntelSet ID. # # @option params [Boolean] :activate # The updated boolean value that specifies whether the ThreateIntelSet # is active or not. # # @option params [required, String] :detector_id # # @option params [String] :location # The updated URI of the file that contains the ThreateIntelSet. For # example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key) # # @option params [String] :name # The unique ID that specifies the ThreatIntelSet that you want to # update. # # @option params [required, String] :threat_intel_set_id # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.update_threat_intel_set({ # activate: false, # detector_id: "__string", # required # location: "Location", # name: "Name", # threat_intel_set_id: "__string", # required # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28/UpdateThreatIntelSet AWS API Documentation # # @overload update_threat_intel_set(params = {}) # @param [Hash] params ({}) def update_threat_intel_set(params = {}, options = {}) req = build_request(:update_threat_intel_set, params) req.send_request(options) end # @!endgroup # @param params ({}) # @api private def build_request(operation_name, params = {}) handlers = @handlers.for(operation_name) context = Seahorse::Client::RequestContext.new( operation_name: operation_name, operation: config.api.operation(operation_name), client: self, params: params, config: config) context[:gem_name] = 'aws-sdk-guardduty' context[:gem_version] = '1.3.0' Seahorse::Client::Request.new(handlers, context) end # @api private # @deprecated def waiter_names [] end class << self # @api private attr_reader :identifier # @api private def errors_module Errors end end end end