# WARNING ABOUT GENERATED CODE # # This file is generated. See the contributing guide for more information: # https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md # # WARNING ABOUT GENERATED CODE require 'seahorse/client/plugins/content_length.rb' require 'aws-sdk-core/plugins/credentials_configuration.rb' require 'aws-sdk-core/plugins/logging.rb' require 'aws-sdk-core/plugins/param_converter.rb' require 'aws-sdk-core/plugins/param_validator.rb' require 'aws-sdk-core/plugins/user_agent.rb' require 'aws-sdk-core/plugins/helpful_socket_errors.rb' require 'aws-sdk-core/plugins/retry_errors.rb' require 'aws-sdk-core/plugins/global_configuration.rb' require 'aws-sdk-core/plugins/regional_endpoint.rb' require 'aws-sdk-core/plugins/endpoint_discovery.rb' require 'aws-sdk-core/plugins/endpoint_pattern.rb' require 'aws-sdk-core/plugins/response_paging.rb' require 'aws-sdk-core/plugins/stub_responses.rb' require 'aws-sdk-core/plugins/idempotency_token.rb' require 'aws-sdk-core/plugins/jsonvalue_converter.rb' require 'aws-sdk-core/plugins/client_metrics_plugin.rb' require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb' require 'aws-sdk-core/plugins/transfer_encoding.rb' require 'aws-sdk-core/plugins/signature_v4.rb' require 'aws-sdk-core/plugins/protocols/rest_json.rb' Aws::Plugins::GlobalConfiguration.add_identifier(:securityhub) module Aws::SecurityHub class Client < Seahorse::Client::Base include Aws::ClientStubs @identifier = :securityhub set_api(ClientApi::API) add_plugin(Seahorse::Client::Plugins::ContentLength) add_plugin(Aws::Plugins::CredentialsConfiguration) add_plugin(Aws::Plugins::Logging) add_plugin(Aws::Plugins::ParamConverter) add_plugin(Aws::Plugins::ParamValidator) add_plugin(Aws::Plugins::UserAgent) add_plugin(Aws::Plugins::HelpfulSocketErrors) add_plugin(Aws::Plugins::RetryErrors) add_plugin(Aws::Plugins::GlobalConfiguration) add_plugin(Aws::Plugins::RegionalEndpoint) add_plugin(Aws::Plugins::EndpointDiscovery) add_plugin(Aws::Plugins::EndpointPattern) add_plugin(Aws::Plugins::ResponsePaging) add_plugin(Aws::Plugins::StubResponses) add_plugin(Aws::Plugins::IdempotencyToken) add_plugin(Aws::Plugins::JsonvalueConverter) add_plugin(Aws::Plugins::ClientMetricsPlugin) add_plugin(Aws::Plugins::ClientMetricsSendPlugin) add_plugin(Aws::Plugins::TransferEncoding) add_plugin(Aws::Plugins::SignatureV4) add_plugin(Aws::Plugins::Protocols::RestJson) # @overload initialize(options) # @param [Hash] options # @option options [required, Aws::CredentialProvider] :credentials # Your AWS credentials. This can be an instance of any one of the # following classes: # # * `Aws::Credentials` - Used for configuring static, non-refreshing # credentials. # # * `Aws::InstanceProfileCredentials` - Used for loading credentials # from an EC2 IMDS on an EC2 instance. # # * `Aws::SharedCredentials` - Used for loading credentials from a # shared file, such as `~/.aws/config`. # # * `Aws::AssumeRoleCredentials` - Used when you need to assume a role. # # When `:credentials` are not configured directly, the following # locations will be searched for credentials: # # * `Aws.config[:credentials]` # * The `:access_key_id`, `:secret_access_key`, and `:session_token` options. # * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'] # * `~/.aws/credentials` # * `~/.aws/config` # * EC2 IMDS instance profile - When used by default, the timeouts are # very aggressive. Construct and pass an instance of # `Aws::InstanceProfileCredentails` to enable retries and extended # timeouts. # # @option options [required, String] :region # The AWS region to connect to. The configured `:region` is # used to determine the service `:endpoint`. When not passed, # a default `:region` is search for in the following locations: # # * `Aws.config[:region]` # * `ENV['AWS_REGION']` # * `ENV['AMAZON_REGION']` # * `ENV['AWS_DEFAULT_REGION']` # * `~/.aws/credentials` # * `~/.aws/config` # # @option options [String] :access_key_id # # @option options [Boolean] :active_endpoint_cache (false) # When set to `true`, a thread polling for endpoints will be running in # the background every 60 secs (default). Defaults to `false`. # # @option options [Boolean] :client_side_monitoring (false) # When `true`, client-side metrics will be collected for all API requests from # this client. # # @option options [String] :client_side_monitoring_client_id ("") # Allows you to provide an identifier for this client which will be attached to # all generated client side metrics. Defaults to an empty string. # # @option options [Integer] :client_side_monitoring_port (31000) # Required for publishing client metrics. The port that the client side monitoring # agent is running on, where client metrics will be published via UDP. # # @option options [Aws::ClientSideMonitoring::Publisher] :client_side_monitoring_publisher (Aws::ClientSideMonitoring::Publisher) # Allows you to provide a custom client-side monitoring publisher class. By default, # will use the Client Side Monitoring Agent Publisher. # # @option options [Boolean] :convert_params (true) # When `true`, an attempt is made to coerce request parameters into # the required types. # # @option options [Boolean] :disable_host_prefix_injection (false) # Set to true to disable SDK automatically adding host prefix # to default service endpoint when available. # # @option options [String] :endpoint # The client endpoint is normally constructed from the `:region` # option. You should only configure an `:endpoint` when connecting # to test endpoints. This should be avalid HTTP(S) URI. # # @option options [Integer] :endpoint_cache_max_entries (1000) # Used for the maximum size limit of the LRU cache storing endpoints data # for endpoint discovery enabled operations. Defaults to 1000. # # @option options [Integer] :endpoint_cache_max_threads (10) # Used for the maximum threads in use for polling endpoints to be cached, defaults to 10. # # @option options [Integer] :endpoint_cache_poll_interval (60) # When :endpoint_discovery and :active_endpoint_cache is enabled, # Use this option to config the time interval in seconds for making # requests fetching endpoints information. Defaults to 60 sec. # # @option options [Boolean] :endpoint_discovery (false) # When set to `true`, endpoint discovery will be enabled for operations when available. Defaults to `false`. # # @option options [Aws::Log::Formatter] :log_formatter (Aws::Log::Formatter.default) # The log formatter. # # @option options [Symbol] :log_level (:info) # The log level to send messages to the `:logger` at. # # @option options [Logger] :logger # The Logger instance to send log messages to. If this option # is not set, logging will be disabled. # # @option options [String] :profile ("default") # Used when loading credentials from the shared credentials file # at HOME/.aws/credentials. When not specified, 'default' is used. # # @option options [Float] :retry_base_delay (0.3) # The base delay in seconds used by the default backoff function. # # @option options [Symbol] :retry_jitter (:none) # A delay randomiser function used by the default backoff function. Some predefined functions can be referenced by name - :none, :equal, :full, otherwise a Proc that takes and returns a number. # # @see https://www.awsarchitectureblog.com/2015/03/backoff.html # # @option options [Integer] :retry_limit (3) # The maximum number of times to retry failed requests. Only # ~ 500 level server errors and certain ~ 400 level client errors # are retried. Generally, these are throttling errors, data # checksum errors, networking errors, timeout errors and auth # errors from expired credentials. # # @option options [Integer] :retry_max_delay (0) # The maximum number of seconds to delay between retries (0 for no limit) used by the default backoff function. # # @option options [String] :secret_access_key # # @option options [String] :session_token # # @option options [Boolean] :stub_responses (false) # Causes the client to return stubbed responses. By default # fake responses are generated and returned. You can specify # the response data to return or errors to raise by calling # {ClientStubs#stub_responses}. See {ClientStubs} for more information. # # ** Please note ** When response stubbing is enabled, no HTTP # requests are made, and retries are disabled. # # @option options [Boolean] :validate_params (true) # When `true`, request parameters are validated before # sending the request. # # @option options [URI::HTTP,String] :http_proxy A proxy to send # requests through. Formatted like 'http://proxy.com:123'. # # @option options [Float] :http_open_timeout (15) The number of # seconds to wait when opening a HTTP session before rasing a # `Timeout::Error`. # # @option options [Integer] :http_read_timeout (60) The default # number of seconds to wait for response data. This value can # safely be set # per-request on the session yeidled by {#session_for}. # # @option options [Float] :http_idle_timeout (5) The number of # seconds a connection is allowed to sit idble before it is # considered stale. Stale connections are closed and removed # from the pool before making a request. # # @option options [Float] :http_continue_timeout (1) The number of # seconds to wait for a 100-continue response before sending the # request body. This option has no effect unless the request has # "Expect" header set to "100-continue". Defaults to `nil` which # disables this behaviour. This value can safely be set per # request on the session yeidled by {#session_for}. # # @option options [Boolean] :http_wire_trace (false) When `true`, # HTTP debug output will be sent to the `:logger`. # # @option options [Boolean] :ssl_verify_peer (true) When `true`, # SSL peer certificates are verified when establishing a # connection. # # @option options [String] :ssl_ca_bundle Full path to the SSL # certificate authority bundle file that should be used when # verifying peer certificates. If you do not pass # `:ssl_ca_bundle` or `:ssl_ca_directory` the the system default # will be used if available. # # @option options [String] :ssl_ca_directory Full path of the # directory that contains the unbundled SSL certificate # authority files for verifying peer certificates. If you do # not pass `:ssl_ca_bundle` or `:ssl_ca_directory` the the # system default will be used if available. # def initialize(*args) super end # @!group API Operations # Accepts the invitation to be monitored by a master SecurityHub # account. # # @option params [String] :master_id # The account ID of the master Security Hub account whose invitation # you're accepting. # # @option params [String] :invitation_id # The ID of the invitation that is sent to the AWS account by the # Security Hub master account. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.accept_invitation({ # master_id: "NonEmptyString", # invitation_id: "NonEmptyString", # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/AcceptInvitation AWS API Documentation # # @overload accept_invitation(params = {}) # @param [Hash] params ({}) def accept_invitation(params = {}, options = {}) req = build_request(:accept_invitation, params) req.send_request(options) end # Disables the standards specified by the standards subscription ARNs. # In the context of Security Hub, supported standards (for example, CIS # AWS Foundations) are automated and continuous checks that help # determine your compliance status against security industry (including # AWS) best practices. # # @option params [required, Array] :standards_subscription_arns # The ARNS of the standards subscriptions that you want to disable. # # @return [Types::BatchDisableStandardsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::BatchDisableStandardsResponse#standards_subscriptions #standards_subscriptions} => Array<Types::StandardsSubscription> # # @example Request syntax with placeholder values # # resp = client.batch_disable_standards({ # standards_subscription_arns: ["NonEmptyString"], # required # }) # # @example Response structure # # resp.standards_subscriptions #=> Array # resp.standards_subscriptions[0].standards_subscription_arn #=> String # resp.standards_subscriptions[0].standards_arn #=> String # resp.standards_subscriptions[0].standards_input #=> Hash # resp.standards_subscriptions[0].standards_input["NonEmptyString"] #=> String # resp.standards_subscriptions[0].standards_status #=> String, one of "PENDING", "READY", "FAILED", "DELETING" # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/BatchDisableStandards AWS API Documentation # # @overload batch_disable_standards(params = {}) # @param [Hash] params ({}) def batch_disable_standards(params = {}, options = {}) req = build_request(:batch_disable_standards, params) req.send_request(options) end # Enables the standards specified by the standards ARNs. In the context # of Security Hub, supported standards (for example, CIS AWS # Foundations) are automated and continuous checks that help determine # your compliance status against security industry (including AWS) best # practices. # # @option params [required, Array] :standards_subscription_requests # The list of standards that you want to enable. # # In this release, Security Hub only supports the CIS AWS Foundations # standard. # # Its ARN is # arn:aws:securityhub:::ruleset/cis-aws-foundations-benchmark/v/1.2.0. # # @return [Types::BatchEnableStandardsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::BatchEnableStandardsResponse#standards_subscriptions #standards_subscriptions} => Array<Types::StandardsSubscription> # # @example Request syntax with placeholder values # # resp = client.batch_enable_standards({ # standards_subscription_requests: [ # required # { # standards_arn: "NonEmptyString", # required # standards_input: { # "NonEmptyString" => "NonEmptyString", # }, # }, # ], # }) # # @example Response structure # # resp.standards_subscriptions #=> Array # resp.standards_subscriptions[0].standards_subscription_arn #=> String # resp.standards_subscriptions[0].standards_arn #=> String # resp.standards_subscriptions[0].standards_input #=> Hash # resp.standards_subscriptions[0].standards_input["NonEmptyString"] #=> String # resp.standards_subscriptions[0].standards_status #=> String, one of "PENDING", "READY", "FAILED", "DELETING" # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/BatchEnableStandards AWS API Documentation # # @overload batch_enable_standards(params = {}) # @param [Hash] params ({}) def batch_enable_standards(params = {}, options = {}) req = build_request(:batch_enable_standards, params) req.send_request(options) end # Imports security findings that are generated by the integrated # third-party products into Security Hub. # # @option params [required, Array] :findings # A list of findings that you want to import. Must be submitted in the # AWSSecurityFinding format. # # @return [Types::BatchImportFindingsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::BatchImportFindingsResponse#failed_count #failed_count} => Integer # * {Types::BatchImportFindingsResponse#success_count #success_count} => Integer # * {Types::BatchImportFindingsResponse#failed_findings #failed_findings} => Array<Types::ImportFindingsError> # # @example Request syntax with placeholder values # # resp = client.batch_import_findings({ # findings: [ # required # { # schema_version: "NonEmptyString", # required # id: "NonEmptyString", # required # product_arn: "NonEmptyString", # required # generator_id: "NonEmptyString", # required # aws_account_id: "NonEmptyString", # required # types: ["NonEmptyString"], # required # first_observed_at: "NonEmptyString", # last_observed_at: "NonEmptyString", # created_at: "NonEmptyString", # required # updated_at: "NonEmptyString", # required # severity: { # required # product: 1.0, # normalized: 1, # required # }, # confidence: 1, # criticality: 1, # title: "NonEmptyString", # description: "NonEmptyString", # remediation: { # recommendation: { # text: "NonEmptyString", # url: "NonEmptyString", # }, # }, # source_url: "NonEmptyString", # product_fields: { # "NonEmptyString" => "NonEmptyString", # }, # user_defined_fields: { # "NonEmptyString" => "NonEmptyString", # }, # malware: [ # { # name: "NonEmptyString", # required # type: "ADWARE", # accepts ADWARE, BLENDED_THREAT, BOTNET_AGENT, COIN_MINER, EXPLOIT_KIT, KEYLOGGER, MACRO, POTENTIALLY_UNWANTED, SPYWARE, RANSOMWARE, REMOTE_ACCESS, ROOTKIT, TROJAN, VIRUS, WORM # path: "NonEmptyString", # state: "OBSERVED", # accepts OBSERVED, REMOVAL_FAILED, REMOVED # }, # ], # network: { # direction: "IN", # accepts IN, OUT # protocol: "NonEmptyString", # source_ip_v4: "NonEmptyString", # source_ip_v6: "NonEmptyString", # source_port: 1, # source_domain: "NonEmptyString", # source_mac: "NonEmptyString", # destination_ip_v4: "NonEmptyString", # destination_ip_v6: "NonEmptyString", # destination_port: 1, # destination_domain: "NonEmptyString", # }, # process: { # name: "NonEmptyString", # path: "NonEmptyString", # pid: 1, # parent_pid: 1, # launched_at: "NonEmptyString", # terminated_at: "NonEmptyString", # }, # threat_intel_indicators: [ # { # type: "DOMAIN", # accepts DOMAIN, EMAIL_ADDRESS, HASH_MD5, HASH_SHA1, HASH_SHA256, HASH_SHA512, IPV4_ADDRESS, IPV6_ADDRESS, MUTEX, PROCESS, URL # value: "NonEmptyString", # category: "BACKDOOR", # accepts BACKDOOR, CARD_STEALER, COMMAND_AND_CONTROL, DROP_SITE, EXPLOIT_SITE, KEYLOGGER # last_observed_at: "NonEmptyString", # source: "NonEmptyString", # source_url: "NonEmptyString", # }, # ], # resources: [ # required # { # type: "NonEmptyString", # required # id: "NonEmptyString", # required # partition: "aws", # accepts aws, aws-cn, aws-us-gov # region: "NonEmptyString", # tags: { # "NonEmptyString" => "NonEmptyString", # }, # details: { # aws_ec2_instance: { # type: "NonEmptyString", # image_id: "NonEmptyString", # ip_v4_addresses: ["NonEmptyString"], # ip_v6_addresses: ["NonEmptyString"], # key_name: "NonEmptyString", # iam_instance_profile_arn: "NonEmptyString", # vpc_id: "NonEmptyString", # subnet_id: "NonEmptyString", # launched_at: "NonEmptyString", # }, # aws_s3_bucket: { # owner_id: "NonEmptyString", # owner_name: "NonEmptyString", # }, # aws_iam_access_key: { # user_name: "NonEmptyString", # status: "Active", # accepts Active, Inactive # created_at: "NonEmptyString", # }, # container: { # name: "NonEmptyString", # image_id: "NonEmptyString", # image_name: "NonEmptyString", # launched_at: "NonEmptyString", # }, # other: { # "NonEmptyString" => "NonEmptyString", # }, # }, # }, # ], # compliance: { # status: "PASSED", # accepts PASSED, WARNING, FAILED, NOT_AVAILABLE # }, # verification_state: "UNKNOWN", # accepts UNKNOWN, TRUE_POSITIVE, FALSE_POSITIVE, BENIGN_POSITIVE # workflow_state: "NEW", # accepts NEW, ASSIGNED, IN_PROGRESS, DEFERRED, RESOLVED # record_state: "ACTIVE", # accepts ACTIVE, ARCHIVED # related_findings: [ # { # product_arn: "NonEmptyString", # required # id: "NonEmptyString", # required # }, # ], # note: { # text: "NonEmptyString", # required # updated_by: "NonEmptyString", # required # updated_at: "NonEmptyString", # required # }, # }, # ], # }) # # @example Response structure # # resp.failed_count #=> Integer # resp.success_count #=> Integer # resp.failed_findings #=> Array # resp.failed_findings[0].id #=> String # resp.failed_findings[0].error_code #=> String # resp.failed_findings[0].error_message #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/BatchImportFindings AWS API Documentation # # @overload batch_import_findings(params = {}) # @param [Hash] params ({}) def batch_import_findings(params = {}, options = {}) req = build_request(:batch_import_findings, params) req.send_request(options) end # Creates an insight, which is a consolidation of findings that # identifies a security area that requires attention or intervention. # # @option params [required, String] :name # The user-defined name that identifies the insight that you want to # create. # # @option params [required, Types::AwsSecurityFindingFilters] :filters # A collection of attributes that are applied to all active Security # Hub-aggregated findings and that result in a subset of findings that # are included in this insight. # # @option params [required, String] :group_by_attribute # The attribute by which the insight's findings are grouped. This # attribute is used as a findings aggregator for the purposes of viewing # and managing multiple related findings under a single operand. # # @return [Types::CreateInsightResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::CreateInsightResponse#insight_arn #insight_arn} => String # # @example Request syntax with placeholder values # # resp = client.create_insight({ # name: "NonEmptyString", # required # filters: { # required # product_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # aws_account_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # generator_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # first_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # last_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # created_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # updated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # severity_product: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # severity_normalized: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # severity_label: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # confidence: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # criticality: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # title: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # description: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # recommendation_text: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # source_url: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # product_fields: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # product_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # company_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # user_defined_fields: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # malware_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_path: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_direction: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_protocol: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_source_ip_v4: [ # { # cidr: "NonEmptyString", # }, # ], # network_source_ip_v6: [ # { # cidr: "NonEmptyString", # }, # ], # network_source_port: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # network_source_domain: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_source_mac: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_destination_ip_v4: [ # { # cidr: "NonEmptyString", # }, # ], # network_destination_ip_v6: [ # { # cidr: "NonEmptyString", # }, # ], # network_destination_port: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # network_destination_domain: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_path: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_pid: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # process_parent_pid: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # process_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # process_terminated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # threat_intel_indicator_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_value: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_category: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_last_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # threat_intel_indicator_source: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_source_url: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_partition: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_region: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_tags: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # resource_aws_ec2_instance_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_image_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_ip_v4_addresses: [ # { # cidr: "NonEmptyString", # }, # ], # resource_aws_ec2_instance_ip_v6_addresses: [ # { # cidr: "NonEmptyString", # }, # ], # resource_aws_ec2_instance_key_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_iam_instance_profile_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_vpc_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_subnet_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_aws_s3_bucket_owner_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_s3_bucket_owner_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_user_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_status: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_created_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_container_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_image_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_image_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_details_other: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # compliance_status: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # verification_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # workflow_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # record_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # related_findings_product_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # related_findings_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # note_text: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # note_updated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # note_updated_by: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # keyword: [ # { # value: "NonEmptyString", # }, # ], # }, # group_by_attribute: "NonEmptyString", # required # }) # # @example Response structure # # resp.insight_arn #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CreateInsight AWS API Documentation # # @overload create_insight(params = {}) # @param [Hash] params ({}) def create_insight(params = {}, options = {}) req = build_request(:create_insight, params) req.send_request(options) end # Creates member Security Hub accounts in the current AWS account (which # becomes the master Security Hub account) that has Security Hub # enabled. # # @option params [Array] :account_details # A list of account ID and email address pairs of the accounts that you # want to associate with the master Security Hub account. # # @return [Types::CreateMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::CreateMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::Result> # # @example Request syntax with placeholder values # # resp = client.create_members({ # account_details: [ # { # account_id: "AccountId", # email: "NonEmptyString", # }, # ], # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].processing_result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/CreateMembers AWS API Documentation # # @overload create_members(params = {}) # @param [Hash] params ({}) def create_members(params = {}, options = {}) req = build_request(:create_members, params) req.send_request(options) end # Declines invitations that are sent to this AWS account (invitee) by # the AWS accounts (inviters) that are specified by the account IDs. # # @option params [Array] :account_ids # A list of account IDs specifying accounts whose invitations to # Security Hub you want to decline. # # @return [Types::DeclineInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::DeclineInvitationsResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::Result> # # @example Request syntax with placeholder values # # resp = client.decline_invitations({ # account_ids: ["NonEmptyString"], # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].processing_result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DeclineInvitations AWS API Documentation # # @overload decline_invitations(params = {}) # @param [Hash] params ({}) def decline_invitations(params = {}, options = {}) req = build_request(:decline_invitations, params) req.send_request(options) end # Deletes an insight that is specified by the insight ARN. # # @option params [required, String] :insight_arn # The ARN of the insight that you want to delete. # # @return [Types::DeleteInsightResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::DeleteInsightResponse#insight_arn #insight_arn} => String # # @example Request syntax with placeholder values # # resp = client.delete_insight({ # insight_arn: "NonEmptyString", # required # }) # # @example Response structure # # resp.insight_arn #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DeleteInsight AWS API Documentation # # @overload delete_insight(params = {}) # @param [Hash] params ({}) def delete_insight(params = {}, options = {}) req = build_request(:delete_insight, params) req.send_request(options) end # Deletes invitations that are sent to this AWS account (invitee) by the # AWS accounts (inviters) that are specified by their account IDs. # # @option params [Array] :account_ids # A list of account IDs specifying accounts whose invitations to # Security Hub you want to delete. # # @return [Types::DeleteInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::DeleteInvitationsResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::Result> # # @example Request syntax with placeholder values # # resp = client.delete_invitations({ # account_ids: ["NonEmptyString"], # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].processing_result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DeleteInvitations AWS API Documentation # # @overload delete_invitations(params = {}) # @param [Hash] params ({}) def delete_invitations(params = {}, options = {}) req = build_request(:delete_invitations, params) req.send_request(options) end # Deletes the Security Hub member accounts that are specified by the # account IDs. # # @option params [Array] :account_ids # A list of account IDs of the Security Hub member accounts that you # want to delete. # # @return [Types::DeleteMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::DeleteMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::Result> # # @example Request syntax with placeholder values # # resp = client.delete_members({ # account_ids: ["NonEmptyString"], # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].processing_result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DeleteMembers AWS API Documentation # # @overload delete_members(params = {}) # @param [Hash] params ({}) def delete_members(params = {}, options = {}) req = build_request(:delete_members, params) req.send_request(options) end # Cancels the subscription that allows a findings-generating solution # (product) to import its findings into Security Hub. # # @option params [required, String] :product_subscription_arn # The ARN of a resource that represents your subscription to a supported # product. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.disable_import_findings_for_product({ # product_subscription_arn: "NonEmptyString", # required # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DisableImportFindingsForProduct AWS API Documentation # # @overload disable_import_findings_for_product(params = {}) # @param [Hash] params ({}) def disable_import_findings_for_product(params = {}, options = {}) req = build_request(:disable_import_findings_for_product, params) req.send_request(options) end # Disables the AWS Security Hub Service. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DisableSecurityHub AWS API Documentation # # @overload disable_security_hub(params = {}) # @param [Hash] params ({}) def disable_security_hub(params = {}, options = {}) req = build_request(:disable_security_hub, params) req.send_request(options) end # Disassociates the current Security Hub member account from its master # account. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DisassociateFromMasterAccount AWS API Documentation # # @overload disassociate_from_master_account(params = {}) # @param [Hash] params ({}) def disassociate_from_master_account(params = {}, options = {}) req = build_request(:disassociate_from_master_account, params) req.send_request(options) end # Disassociates the Security Hub member accounts that are specified by # the account IDs from their master account. # # @option params [Array] :account_ids # The account IDs of the member accounts that you want to disassociate # from the master account. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.disassociate_members({ # account_ids: ["NonEmptyString"], # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/DisassociateMembers AWS API Documentation # # @overload disassociate_members(params = {}) # @param [Hash] params ({}) def disassociate_members(params = {}, options = {}) req = build_request(:disassociate_members, params) req.send_request(options) end # Sets up the subscription that enables a findings-generating solution # (product) to import its findings into Security Hub. # # @option params [required, String] :product_arn # The ARN of the product that generates findings that you want to import # into Security Hub. # # @return [Types::EnableImportFindingsForProductResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::EnableImportFindingsForProductResponse#product_subscription_arn #product_subscription_arn} => String # # @example Request syntax with placeholder values # # resp = client.enable_import_findings_for_product({ # product_arn: "NonEmptyString", # required # }) # # @example Response structure # # resp.product_subscription_arn #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/EnableImportFindingsForProduct AWS API Documentation # # @overload enable_import_findings_for_product(params = {}) # @param [Hash] params ({}) def enable_import_findings_for_product(params = {}, options = {}) req = build_request(:enable_import_findings_for_product, params) req.send_request(options) end # Enables the AWS Security Hub service. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/EnableSecurityHub AWS API Documentation # # @overload enable_security_hub(params = {}) # @param [Hash] params ({}) def enable_security_hub(params = {}, options = {}) req = build_request(:enable_security_hub, params) req.send_request(options) end # Lists and describes enabled standards. # # @option params [Array] :standards_subscription_arns # The list of standards subscription ARNS that you want to list and # describe. # # @option params [String] :next_token # Paginates results. Set the value of this parameter to NULL on your # first call to the GetEnabledStandards operation. For subsequent calls # to the operation, fill nextToken in the request with the value of # nextToken from the previous response to continue listing data. # # @option params [Integer] :max_results # Indicates the maximum number of items that you want in the response. # # @return [Types::GetEnabledStandardsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetEnabledStandardsResponse#standards_subscriptions #standards_subscriptions} => Array<Types::StandardsSubscription> # * {Types::GetEnabledStandardsResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.get_enabled_standards({ # standards_subscription_arns: ["NonEmptyString"], # next_token: "NextToken", # max_results: 1, # }) # # @example Response structure # # resp.standards_subscriptions #=> Array # resp.standards_subscriptions[0].standards_subscription_arn #=> String # resp.standards_subscriptions[0].standards_arn #=> String # resp.standards_subscriptions[0].standards_input #=> Hash # resp.standards_subscriptions[0].standards_input["NonEmptyString"] #=> String # resp.standards_subscriptions[0].standards_status #=> String, one of "PENDING", "READY", "FAILED", "DELETING" # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetEnabledStandards AWS API Documentation # # @overload get_enabled_standards(params = {}) # @param [Hash] params ({}) def get_enabled_standards(params = {}, options = {}) req = build_request(:get_enabled_standards, params) req.send_request(options) end # Lists and describes Security Hub-aggregated findings that are # specified by filter attributes. # # @option params [Types::AwsSecurityFindingFilters] :filters # A collection of attributes that is use for querying findings. # # @option params [Array] :sort_criteria # A collection of attributes used for sorting findings. # # @option params [String] :next_token # Paginates results. Set the value of this parameter to NULL on your # first call to the GetFindings operation. For subsequent calls to the # operation, fill nextToken in the request with the value of nextToken # from the previous response to continue listing data. # # @option params [Integer] :max_results # Indicates the maximum number of items that you want in the response. # # @return [Types::GetFindingsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetFindingsResponse#findings #findings} => Array<Types::AwsSecurityFinding> # * {Types::GetFindingsResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.get_findings({ # filters: { # product_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # aws_account_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # generator_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # first_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # last_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # created_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # updated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # severity_product: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # severity_normalized: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # severity_label: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # confidence: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # criticality: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # title: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # description: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # recommendation_text: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # source_url: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # product_fields: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # product_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # company_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # user_defined_fields: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # malware_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_path: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_direction: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_protocol: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_source_ip_v4: [ # { # cidr: "NonEmptyString", # }, # ], # network_source_ip_v6: [ # { # cidr: "NonEmptyString", # }, # ], # network_source_port: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # network_source_domain: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_source_mac: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_destination_ip_v4: [ # { # cidr: "NonEmptyString", # }, # ], # network_destination_ip_v6: [ # { # cidr: "NonEmptyString", # }, # ], # network_destination_port: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # network_destination_domain: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_path: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_pid: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # process_parent_pid: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # process_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # process_terminated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # threat_intel_indicator_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_value: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_category: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_last_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # threat_intel_indicator_source: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_source_url: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_partition: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_region: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_tags: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # resource_aws_ec2_instance_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_image_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_ip_v4_addresses: [ # { # cidr: "NonEmptyString", # }, # ], # resource_aws_ec2_instance_ip_v6_addresses: [ # { # cidr: "NonEmptyString", # }, # ], # resource_aws_ec2_instance_key_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_iam_instance_profile_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_vpc_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_subnet_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_aws_s3_bucket_owner_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_s3_bucket_owner_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_user_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_status: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_created_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_container_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_image_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_image_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_details_other: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # compliance_status: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # verification_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # workflow_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # record_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # related_findings_product_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # related_findings_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # note_text: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # note_updated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # note_updated_by: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # keyword: [ # { # value: "NonEmptyString", # }, # ], # }, # sort_criteria: [ # { # field: "NonEmptyString", # sort_order: "asc", # accepts asc, desc # }, # ], # next_token: "NextToken", # max_results: 1, # }) # # @example Response structure # # resp.findings #=> Array # resp.findings[0].schema_version #=> String # resp.findings[0].id #=> String # resp.findings[0].product_arn #=> String # resp.findings[0].generator_id #=> String # resp.findings[0].aws_account_id #=> String # resp.findings[0].types #=> Array # resp.findings[0].types[0] #=> String # resp.findings[0].first_observed_at #=> String # resp.findings[0].last_observed_at #=> String # resp.findings[0].created_at #=> String # resp.findings[0].updated_at #=> String # resp.findings[0].severity.product #=> Float # resp.findings[0].severity.normalized #=> Integer # resp.findings[0].confidence #=> Integer # resp.findings[0].criticality #=> Integer # resp.findings[0].title #=> String # resp.findings[0].description #=> String # resp.findings[0].remediation.recommendation.text #=> String # resp.findings[0].remediation.recommendation.url #=> String # resp.findings[0].source_url #=> String # resp.findings[0].product_fields #=> Hash # resp.findings[0].product_fields["NonEmptyString"] #=> String # resp.findings[0].user_defined_fields #=> Hash # resp.findings[0].user_defined_fields["NonEmptyString"] #=> String # resp.findings[0].malware #=> Array # resp.findings[0].malware[0].name #=> String # resp.findings[0].malware[0].type #=> String, one of "ADWARE", "BLENDED_THREAT", "BOTNET_AGENT", "COIN_MINER", "EXPLOIT_KIT", "KEYLOGGER", "MACRO", "POTENTIALLY_UNWANTED", "SPYWARE", "RANSOMWARE", "REMOTE_ACCESS", "ROOTKIT", "TROJAN", "VIRUS", "WORM" # resp.findings[0].malware[0].path #=> String # resp.findings[0].malware[0].state #=> String, one of "OBSERVED", "REMOVAL_FAILED", "REMOVED" # resp.findings[0].network.direction #=> String, one of "IN", "OUT" # resp.findings[0].network.protocol #=> String # resp.findings[0].network.source_ip_v4 #=> String # resp.findings[0].network.source_ip_v6 #=> String # resp.findings[0].network.source_port #=> Integer # resp.findings[0].network.source_domain #=> String # resp.findings[0].network.source_mac #=> String # resp.findings[0].network.destination_ip_v4 #=> String # resp.findings[0].network.destination_ip_v6 #=> String # resp.findings[0].network.destination_port #=> Integer # resp.findings[0].network.destination_domain #=> String # resp.findings[0].process.name #=> String # resp.findings[0].process.path #=> String # resp.findings[0].process.pid #=> Integer # resp.findings[0].process.parent_pid #=> Integer # resp.findings[0].process.launched_at #=> String # resp.findings[0].process.terminated_at #=> String # resp.findings[0].threat_intel_indicators #=> Array # resp.findings[0].threat_intel_indicators[0].type #=> String, one of "DOMAIN", "EMAIL_ADDRESS", "HASH_MD5", "HASH_SHA1", "HASH_SHA256", "HASH_SHA512", "IPV4_ADDRESS", "IPV6_ADDRESS", "MUTEX", "PROCESS", "URL" # resp.findings[0].threat_intel_indicators[0].value #=> String # resp.findings[0].threat_intel_indicators[0].category #=> String, one of "BACKDOOR", "CARD_STEALER", "COMMAND_AND_CONTROL", "DROP_SITE", "EXPLOIT_SITE", "KEYLOGGER" # resp.findings[0].threat_intel_indicators[0].last_observed_at #=> String # resp.findings[0].threat_intel_indicators[0].source #=> String # resp.findings[0].threat_intel_indicators[0].source_url #=> String # resp.findings[0].resources #=> Array # resp.findings[0].resources[0].type #=> String # resp.findings[0].resources[0].id #=> String # resp.findings[0].resources[0].partition #=> String, one of "aws", "aws-cn", "aws-us-gov" # resp.findings[0].resources[0].region #=> String # resp.findings[0].resources[0].tags #=> Hash # resp.findings[0].resources[0].tags["NonEmptyString"] #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.type #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.image_id #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.ip_v4_addresses #=> Array # resp.findings[0].resources[0].details.aws_ec2_instance.ip_v4_addresses[0] #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.ip_v6_addresses #=> Array # resp.findings[0].resources[0].details.aws_ec2_instance.ip_v6_addresses[0] #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.key_name #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.iam_instance_profile_arn #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.vpc_id #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.subnet_id #=> String # resp.findings[0].resources[0].details.aws_ec2_instance.launched_at #=> String # resp.findings[0].resources[0].details.aws_s3_bucket.owner_id #=> String # resp.findings[0].resources[0].details.aws_s3_bucket.owner_name #=> String # resp.findings[0].resources[0].details.aws_iam_access_key.user_name #=> String # resp.findings[0].resources[0].details.aws_iam_access_key.status #=> String, one of "Active", "Inactive" # resp.findings[0].resources[0].details.aws_iam_access_key.created_at #=> String # resp.findings[0].resources[0].details.container.name #=> String # resp.findings[0].resources[0].details.container.image_id #=> String # resp.findings[0].resources[0].details.container.image_name #=> String # resp.findings[0].resources[0].details.container.launched_at #=> String # resp.findings[0].resources[0].details.other #=> Hash # resp.findings[0].resources[0].details.other["NonEmptyString"] #=> String # resp.findings[0].compliance.status #=> String, one of "PASSED", "WARNING", "FAILED", "NOT_AVAILABLE" # resp.findings[0].verification_state #=> String, one of "UNKNOWN", "TRUE_POSITIVE", "FALSE_POSITIVE", "BENIGN_POSITIVE" # resp.findings[0].workflow_state #=> String, one of "NEW", "ASSIGNED", "IN_PROGRESS", "DEFERRED", "RESOLVED" # resp.findings[0].record_state #=> String, one of "ACTIVE", "ARCHIVED" # resp.findings[0].related_findings #=> Array # resp.findings[0].related_findings[0].product_arn #=> String # resp.findings[0].related_findings[0].id #=> String # resp.findings[0].note.text #=> String # resp.findings[0].note.updated_by #=> String # resp.findings[0].note.updated_at #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetFindings AWS API Documentation # # @overload get_findings(params = {}) # @param [Hash] params ({}) def get_findings(params = {}, options = {}) req = build_request(:get_findings, params) req.send_request(options) end # Lists the results of the Security Hub insight specified by the insight # ARN. # # @option params [required, String] :insight_arn # The ARN of the insight whose results you want to see. # # @return [Types::GetInsightResultsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetInsightResultsResponse#insight_results #insight_results} => Types::InsightResults # # @example Request syntax with placeholder values # # resp = client.get_insight_results({ # insight_arn: "NonEmptyString", # required # }) # # @example Response structure # # resp.insight_results.insight_arn #=> String # resp.insight_results.group_by_attribute #=> String # resp.insight_results.result_values #=> Array # resp.insight_results.result_values[0].group_by_attribute_value #=> String # resp.insight_results.result_values[0].count #=> Integer # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetInsightResults AWS API Documentation # # @overload get_insight_results(params = {}) # @param [Hash] params ({}) def get_insight_results(params = {}, options = {}) req = build_request(:get_insight_results, params) req.send_request(options) end # Lists and describes insights that are specified by insight ARNs. # # @option params [Array] :insight_arns # The ARNS of the insights that you want to describe. # # @option params [String] :next_token # Paginates results. Set the value of this parameter to NULL on your # first call to the GetInsights operation. For subsequent calls to the # operation, fill nextToken in the request with the value of nextToken # from the previous response to continue listing data. # # @option params [Integer] :max_results # Indicates the maximum number of items that you want in the response. # # @return [Types::GetInsightsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetInsightsResponse#insights #insights} => Array<Types::Insight> # * {Types::GetInsightsResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.get_insights({ # insight_arns: ["NonEmptyString"], # next_token: "NextToken", # max_results: 1, # }) # # @example Response structure # # resp.insights #=> Array # resp.insights[0].insight_arn #=> String # resp.insights[0].name #=> String # resp.insights[0].filters.product_arn #=> Array # resp.insights[0].filters.product_arn[0].value #=> String # resp.insights[0].filters.product_arn[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.aws_account_id #=> Array # resp.insights[0].filters.aws_account_id[0].value #=> String # resp.insights[0].filters.aws_account_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.id #=> Array # resp.insights[0].filters.id[0].value #=> String # resp.insights[0].filters.id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.generator_id #=> Array # resp.insights[0].filters.generator_id[0].value #=> String # resp.insights[0].filters.generator_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.type #=> Array # resp.insights[0].filters.type[0].value #=> String # resp.insights[0].filters.type[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.first_observed_at #=> Array # resp.insights[0].filters.first_observed_at[0].start #=> String # resp.insights[0].filters.first_observed_at[0].end #=> String # resp.insights[0].filters.first_observed_at[0].date_range.value #=> Integer # resp.insights[0].filters.first_observed_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.last_observed_at #=> Array # resp.insights[0].filters.last_observed_at[0].start #=> String # resp.insights[0].filters.last_observed_at[0].end #=> String # resp.insights[0].filters.last_observed_at[0].date_range.value #=> Integer # resp.insights[0].filters.last_observed_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.created_at #=> Array # resp.insights[0].filters.created_at[0].start #=> String # resp.insights[0].filters.created_at[0].end #=> String # resp.insights[0].filters.created_at[0].date_range.value #=> Integer # resp.insights[0].filters.created_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.updated_at #=> Array # resp.insights[0].filters.updated_at[0].start #=> String # resp.insights[0].filters.updated_at[0].end #=> String # resp.insights[0].filters.updated_at[0].date_range.value #=> Integer # resp.insights[0].filters.updated_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.severity_product #=> Array # resp.insights[0].filters.severity_product[0].gte #=> Float # resp.insights[0].filters.severity_product[0].lte #=> Float # resp.insights[0].filters.severity_product[0].eq #=> Float # resp.insights[0].filters.severity_normalized #=> Array # resp.insights[0].filters.severity_normalized[0].gte #=> Float # resp.insights[0].filters.severity_normalized[0].lte #=> Float # resp.insights[0].filters.severity_normalized[0].eq #=> Float # resp.insights[0].filters.severity_label #=> Array # resp.insights[0].filters.severity_label[0].value #=> String # resp.insights[0].filters.severity_label[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.confidence #=> Array # resp.insights[0].filters.confidence[0].gte #=> Float # resp.insights[0].filters.confidence[0].lte #=> Float # resp.insights[0].filters.confidence[0].eq #=> Float # resp.insights[0].filters.criticality #=> Array # resp.insights[0].filters.criticality[0].gte #=> Float # resp.insights[0].filters.criticality[0].lte #=> Float # resp.insights[0].filters.criticality[0].eq #=> Float # resp.insights[0].filters.title #=> Array # resp.insights[0].filters.title[0].value #=> String # resp.insights[0].filters.title[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.description #=> Array # resp.insights[0].filters.description[0].value #=> String # resp.insights[0].filters.description[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.recommendation_text #=> Array # resp.insights[0].filters.recommendation_text[0].value #=> String # resp.insights[0].filters.recommendation_text[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.source_url #=> Array # resp.insights[0].filters.source_url[0].value #=> String # resp.insights[0].filters.source_url[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.product_fields #=> Array # resp.insights[0].filters.product_fields[0].key #=> String # resp.insights[0].filters.product_fields[0].value #=> String # resp.insights[0].filters.product_fields[0].comparison #=> String, one of "CONTAINS" # resp.insights[0].filters.product_name #=> Array # resp.insights[0].filters.product_name[0].value #=> String # resp.insights[0].filters.product_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.company_name #=> Array # resp.insights[0].filters.company_name[0].value #=> String # resp.insights[0].filters.company_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.user_defined_fields #=> Array # resp.insights[0].filters.user_defined_fields[0].key #=> String # resp.insights[0].filters.user_defined_fields[0].value #=> String # resp.insights[0].filters.user_defined_fields[0].comparison #=> String, one of "CONTAINS" # resp.insights[0].filters.malware_name #=> Array # resp.insights[0].filters.malware_name[0].value #=> String # resp.insights[0].filters.malware_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.malware_type #=> Array # resp.insights[0].filters.malware_type[0].value #=> String # resp.insights[0].filters.malware_type[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.malware_path #=> Array # resp.insights[0].filters.malware_path[0].value #=> String # resp.insights[0].filters.malware_path[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.malware_state #=> Array # resp.insights[0].filters.malware_state[0].value #=> String # resp.insights[0].filters.malware_state[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.network_direction #=> Array # resp.insights[0].filters.network_direction[0].value #=> String # resp.insights[0].filters.network_direction[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.network_protocol #=> Array # resp.insights[0].filters.network_protocol[0].value #=> String # resp.insights[0].filters.network_protocol[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.network_source_ip_v4 #=> Array # resp.insights[0].filters.network_source_ip_v4[0].cidr #=> String # resp.insights[0].filters.network_source_ip_v6 #=> Array # resp.insights[0].filters.network_source_ip_v6[0].cidr #=> String # resp.insights[0].filters.network_source_port #=> Array # resp.insights[0].filters.network_source_port[0].gte #=> Float # resp.insights[0].filters.network_source_port[0].lte #=> Float # resp.insights[0].filters.network_source_port[0].eq #=> Float # resp.insights[0].filters.network_source_domain #=> Array # resp.insights[0].filters.network_source_domain[0].value #=> String # resp.insights[0].filters.network_source_domain[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.network_source_mac #=> Array # resp.insights[0].filters.network_source_mac[0].value #=> String # resp.insights[0].filters.network_source_mac[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.network_destination_ip_v4 #=> Array # resp.insights[0].filters.network_destination_ip_v4[0].cidr #=> String # resp.insights[0].filters.network_destination_ip_v6 #=> Array # resp.insights[0].filters.network_destination_ip_v6[0].cidr #=> String # resp.insights[0].filters.network_destination_port #=> Array # resp.insights[0].filters.network_destination_port[0].gte #=> Float # resp.insights[0].filters.network_destination_port[0].lte #=> Float # resp.insights[0].filters.network_destination_port[0].eq #=> Float # resp.insights[0].filters.network_destination_domain #=> Array # resp.insights[0].filters.network_destination_domain[0].value #=> String # resp.insights[0].filters.network_destination_domain[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.process_name #=> Array # resp.insights[0].filters.process_name[0].value #=> String # resp.insights[0].filters.process_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.process_path #=> Array # resp.insights[0].filters.process_path[0].value #=> String # resp.insights[0].filters.process_path[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.process_pid #=> Array # resp.insights[0].filters.process_pid[0].gte #=> Float # resp.insights[0].filters.process_pid[0].lte #=> Float # resp.insights[0].filters.process_pid[0].eq #=> Float # resp.insights[0].filters.process_parent_pid #=> Array # resp.insights[0].filters.process_parent_pid[0].gte #=> Float # resp.insights[0].filters.process_parent_pid[0].lte #=> Float # resp.insights[0].filters.process_parent_pid[0].eq #=> Float # resp.insights[0].filters.process_launched_at #=> Array # resp.insights[0].filters.process_launched_at[0].start #=> String # resp.insights[0].filters.process_launched_at[0].end #=> String # resp.insights[0].filters.process_launched_at[0].date_range.value #=> Integer # resp.insights[0].filters.process_launched_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.process_terminated_at #=> Array # resp.insights[0].filters.process_terminated_at[0].start #=> String # resp.insights[0].filters.process_terminated_at[0].end #=> String # resp.insights[0].filters.process_terminated_at[0].date_range.value #=> Integer # resp.insights[0].filters.process_terminated_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.threat_intel_indicator_type #=> Array # resp.insights[0].filters.threat_intel_indicator_type[0].value #=> String # resp.insights[0].filters.threat_intel_indicator_type[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.threat_intel_indicator_value #=> Array # resp.insights[0].filters.threat_intel_indicator_value[0].value #=> String # resp.insights[0].filters.threat_intel_indicator_value[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.threat_intel_indicator_category #=> Array # resp.insights[0].filters.threat_intel_indicator_category[0].value #=> String # resp.insights[0].filters.threat_intel_indicator_category[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.threat_intel_indicator_last_observed_at #=> Array # resp.insights[0].filters.threat_intel_indicator_last_observed_at[0].start #=> String # resp.insights[0].filters.threat_intel_indicator_last_observed_at[0].end #=> String # resp.insights[0].filters.threat_intel_indicator_last_observed_at[0].date_range.value #=> Integer # resp.insights[0].filters.threat_intel_indicator_last_observed_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.threat_intel_indicator_source #=> Array # resp.insights[0].filters.threat_intel_indicator_source[0].value #=> String # resp.insights[0].filters.threat_intel_indicator_source[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.threat_intel_indicator_source_url #=> Array # resp.insights[0].filters.threat_intel_indicator_source_url[0].value #=> String # resp.insights[0].filters.threat_intel_indicator_source_url[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_type #=> Array # resp.insights[0].filters.resource_type[0].value #=> String # resp.insights[0].filters.resource_type[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_id #=> Array # resp.insights[0].filters.resource_id[0].value #=> String # resp.insights[0].filters.resource_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_partition #=> Array # resp.insights[0].filters.resource_partition[0].value #=> String # resp.insights[0].filters.resource_partition[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_region #=> Array # resp.insights[0].filters.resource_region[0].value #=> String # resp.insights[0].filters.resource_region[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_tags #=> Array # resp.insights[0].filters.resource_tags[0].key #=> String # resp.insights[0].filters.resource_tags[0].value #=> String # resp.insights[0].filters.resource_tags[0].comparison #=> String, one of "CONTAINS" # resp.insights[0].filters.resource_aws_ec2_instance_type #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_type[0].value #=> String # resp.insights[0].filters.resource_aws_ec2_instance_type[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_ec2_instance_image_id #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_image_id[0].value #=> String # resp.insights[0].filters.resource_aws_ec2_instance_image_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_ec2_instance_ip_v4_addresses #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_ip_v4_addresses[0].cidr #=> String # resp.insights[0].filters.resource_aws_ec2_instance_ip_v6_addresses #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_ip_v6_addresses[0].cidr #=> String # resp.insights[0].filters.resource_aws_ec2_instance_key_name #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_key_name[0].value #=> String # resp.insights[0].filters.resource_aws_ec2_instance_key_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_ec2_instance_iam_instance_profile_arn #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_iam_instance_profile_arn[0].value #=> String # resp.insights[0].filters.resource_aws_ec2_instance_iam_instance_profile_arn[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_ec2_instance_vpc_id #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_vpc_id[0].value #=> String # resp.insights[0].filters.resource_aws_ec2_instance_vpc_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_ec2_instance_subnet_id #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_subnet_id[0].value #=> String # resp.insights[0].filters.resource_aws_ec2_instance_subnet_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_ec2_instance_launched_at #=> Array # resp.insights[0].filters.resource_aws_ec2_instance_launched_at[0].start #=> String # resp.insights[0].filters.resource_aws_ec2_instance_launched_at[0].end #=> String # resp.insights[0].filters.resource_aws_ec2_instance_launched_at[0].date_range.value #=> Integer # resp.insights[0].filters.resource_aws_ec2_instance_launched_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.resource_aws_s3_bucket_owner_id #=> Array # resp.insights[0].filters.resource_aws_s3_bucket_owner_id[0].value #=> String # resp.insights[0].filters.resource_aws_s3_bucket_owner_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_s3_bucket_owner_name #=> Array # resp.insights[0].filters.resource_aws_s3_bucket_owner_name[0].value #=> String # resp.insights[0].filters.resource_aws_s3_bucket_owner_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_iam_access_key_user_name #=> Array # resp.insights[0].filters.resource_aws_iam_access_key_user_name[0].value #=> String # resp.insights[0].filters.resource_aws_iam_access_key_user_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_iam_access_key_status #=> Array # resp.insights[0].filters.resource_aws_iam_access_key_status[0].value #=> String # resp.insights[0].filters.resource_aws_iam_access_key_status[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_aws_iam_access_key_created_at #=> Array # resp.insights[0].filters.resource_aws_iam_access_key_created_at[0].start #=> String # resp.insights[0].filters.resource_aws_iam_access_key_created_at[0].end #=> String # resp.insights[0].filters.resource_aws_iam_access_key_created_at[0].date_range.value #=> Integer # resp.insights[0].filters.resource_aws_iam_access_key_created_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.resource_container_name #=> Array # resp.insights[0].filters.resource_container_name[0].value #=> String # resp.insights[0].filters.resource_container_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_container_image_id #=> Array # resp.insights[0].filters.resource_container_image_id[0].value #=> String # resp.insights[0].filters.resource_container_image_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_container_image_name #=> Array # resp.insights[0].filters.resource_container_image_name[0].value #=> String # resp.insights[0].filters.resource_container_image_name[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.resource_container_launched_at #=> Array # resp.insights[0].filters.resource_container_launched_at[0].start #=> String # resp.insights[0].filters.resource_container_launched_at[0].end #=> String # resp.insights[0].filters.resource_container_launched_at[0].date_range.value #=> Integer # resp.insights[0].filters.resource_container_launched_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.resource_details_other #=> Array # resp.insights[0].filters.resource_details_other[0].key #=> String # resp.insights[0].filters.resource_details_other[0].value #=> String # resp.insights[0].filters.resource_details_other[0].comparison #=> String, one of "CONTAINS" # resp.insights[0].filters.compliance_status #=> Array # resp.insights[0].filters.compliance_status[0].value #=> String # resp.insights[0].filters.compliance_status[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.verification_state #=> Array # resp.insights[0].filters.verification_state[0].value #=> String # resp.insights[0].filters.verification_state[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.workflow_state #=> Array # resp.insights[0].filters.workflow_state[0].value #=> String # resp.insights[0].filters.workflow_state[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.record_state #=> Array # resp.insights[0].filters.record_state[0].value #=> String # resp.insights[0].filters.record_state[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.related_findings_product_arn #=> Array # resp.insights[0].filters.related_findings_product_arn[0].value #=> String # resp.insights[0].filters.related_findings_product_arn[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.related_findings_id #=> Array # resp.insights[0].filters.related_findings_id[0].value #=> String # resp.insights[0].filters.related_findings_id[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.note_text #=> Array # resp.insights[0].filters.note_text[0].value #=> String # resp.insights[0].filters.note_text[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.note_updated_at #=> Array # resp.insights[0].filters.note_updated_at[0].start #=> String # resp.insights[0].filters.note_updated_at[0].end #=> String # resp.insights[0].filters.note_updated_at[0].date_range.value #=> Integer # resp.insights[0].filters.note_updated_at[0].date_range.unit #=> String, one of "DAYS" # resp.insights[0].filters.note_updated_by #=> Array # resp.insights[0].filters.note_updated_by[0].value #=> String # resp.insights[0].filters.note_updated_by[0].comparison #=> String, one of "EQUALS", "CONTAINS", "PREFIX" # resp.insights[0].filters.keyword #=> Array # resp.insights[0].filters.keyword[0].value #=> String # resp.insights[0].group_by_attribute #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetInsights AWS API Documentation # # @overload get_insights(params = {}) # @param [Hash] params ({}) def get_insights(params = {}, options = {}) req = build_request(:get_insights, params) req.send_request(options) end # Returns the count of all Security Hub membership invitations that were # sent to the current member account, not including the currently # accepted invitation. # # @return [Types::GetInvitationsCountResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetInvitationsCountResponse#invitations_count #invitations_count} => Integer # # @example Response structure # # resp.invitations_count #=> Integer # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetInvitationsCount AWS API Documentation # # @overload get_invitations_count(params = {}) # @param [Hash] params ({}) def get_invitations_count(params = {}, options = {}) req = build_request(:get_invitations_count, params) req.send_request(options) end # Provides the details for the Security Hub master account to the # current member account. # # @return [Types::GetMasterAccountResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetMasterAccountResponse#master #master} => Types::Invitation # # @example Response structure # # resp.master.account_id #=> String # resp.master.invitation_id #=> String # resp.master.invited_at #=> Time # resp.master.member_status #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetMasterAccount AWS API Documentation # # @overload get_master_account(params = {}) # @param [Hash] params ({}) def get_master_account(params = {}, options = {}) req = build_request(:get_master_account, params) req.send_request(options) end # Returns the details on the Security Hub member accounts that are # specified by the account IDs. # # @option params [required, Array] :account_ids # A list of account IDs for the Security Hub member accounts on which # you want to return the details. # # @return [Types::GetMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::GetMembersResponse#members #members} => Array<Types::Member> # * {Types::GetMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::Result> # # @example Request syntax with placeholder values # # resp = client.get_members({ # account_ids: ["NonEmptyString"], # required # }) # # @example Response structure # # resp.members #=> Array # resp.members[0].account_id #=> String # resp.members[0].email #=> String # resp.members[0].master_id #=> String # resp.members[0].member_status #=> String # resp.members[0].invited_at #=> Time # resp.members[0].updated_at #=> Time # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].processing_result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/GetMembers AWS API Documentation # # @overload get_members(params = {}) # @param [Hash] params ({}) def get_members(params = {}, options = {}) req = build_request(:get_members, params) req.send_request(options) end # Invites other AWS accounts to enable Security Hub and become Security # Hub member accounts. When an account accepts the invitation and # becomes a member account, the master account can view Security Hub # findings of the member account. # # @option params [Array] :account_ids # A list of IDs of the AWS accounts that you want to invite to Security # Hub as members. # # @return [Types::InviteMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::InviteMembersResponse#unprocessed_accounts #unprocessed_accounts} => Array<Types::Result> # # @example Request syntax with placeholder values # # resp = client.invite_members({ # account_ids: ["NonEmptyString"], # }) # # @example Response structure # # resp.unprocessed_accounts #=> Array # resp.unprocessed_accounts[0].account_id #=> String # resp.unprocessed_accounts[0].processing_result #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/InviteMembers AWS API Documentation # # @overload invite_members(params = {}) # @param [Hash] params ({}) def invite_members(params = {}, options = {}) req = build_request(:invite_members, params) req.send_request(options) end # Lists all findings-generating solutions (products) whose findings # you've subscribed to receive in Security Hub. # # @option params [String] :next_token # Paginates results. Set the value of this parameter to NULL on your # first call to the ListEnabledProductsForImport operation. For # subsequent calls to the operation, fill nextToken in the request with # the value of NextToken from the previous response to continue listing # data. # # @option params [Integer] :max_results # Indicates the maximum number of items that you want in the response. # # @return [Types::ListEnabledProductsForImportResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListEnabledProductsForImportResponse#product_subscriptions #product_subscriptions} => Array<String> # * {Types::ListEnabledProductsForImportResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.list_enabled_products_for_import({ # next_token: "NextToken", # max_results: 1, # }) # # @example Response structure # # resp.product_subscriptions #=> Array # resp.product_subscriptions[0] #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ListEnabledProductsForImport AWS API Documentation # # @overload list_enabled_products_for_import(params = {}) # @param [Hash] params ({}) def list_enabled_products_for_import(params = {}, options = {}) req = build_request(:list_enabled_products_for_import, params) req.send_request(options) end # Lists all Security Hub membership invitations that were sent to the # current AWS account. # # @option params [Integer] :max_results # Indicates the maximum number of items that you want in the response. # # @option params [String] :next_token # Paginates results. Set the value of this parameter to NULL on your # first call to the ListInvitations operation. For subsequent calls to # the operation, fill nextToken in the request with the value of # NextToken from the previous response to continue listing data. # # @return [Types::ListInvitationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListInvitationsResponse#invitations #invitations} => Array<Types::Invitation> # * {Types::ListInvitationsResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.list_invitations({ # max_results: 1, # next_token: "NextToken", # }) # # @example Response structure # # resp.invitations #=> Array # resp.invitations[0].account_id #=> String # resp.invitations[0].invitation_id #=> String # resp.invitations[0].invited_at #=> Time # resp.invitations[0].member_status #=> String # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ListInvitations AWS API Documentation # # @overload list_invitations(params = {}) # @param [Hash] params ({}) def list_invitations(params = {}, options = {}) req = build_request(:list_invitations, params) req.send_request(options) end # Lists details about all member accounts for the current Security Hub # master account. # # @option params [Boolean] :only_associated # Specifies what member accounts the response includes based on their # relationship status with the master account. The default value is # TRUE. If onlyAssociated is set to TRUE, the response includes member # accounts whose relationship status with the master is set to ENABLED # or DISABLED. If onlyAssociated is set to FALSE, the response includes # all existing member accounts. # # @option params [Integer] :max_results # Indicates the maximum number of items that you want in the response. # # @option params [String] :next_token # Paginates results. Set the value of this parameter to NULL on your # first call to the ListMembers operation. For subsequent calls to the # operation, fill nextToken in the request with the value of NextToken # from the previous response to continue listing data. # # @return [Types::ListMembersResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods: # # * {Types::ListMembersResponse#members #members} => Array<Types::Member> # * {Types::ListMembersResponse#next_token #next_token} => String # # @example Request syntax with placeholder values # # resp = client.list_members({ # only_associated: false, # max_results: 1, # next_token: "NextToken", # }) # # @example Response structure # # resp.members #=> Array # resp.members[0].account_id #=> String # resp.members[0].email #=> String # resp.members[0].master_id #=> String # resp.members[0].member_status #=> String # resp.members[0].invited_at #=> Time # resp.members[0].updated_at #=> Time # resp.next_token #=> String # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/ListMembers AWS API Documentation # # @overload list_members(params = {}) # @param [Hash] params ({}) def list_members(params = {}, options = {}) req = build_request(:list_members, params) req.send_request(options) end # Updates the AWS Security Hub-aggregated findings specified by the # filter attributes. # # @option params [required, Types::AwsSecurityFindingFilters] :filters # A collection of attributes that specify what findings you want to # update. # # @option params [Types::NoteUpdate] :note # The updated note for the finding. # # @option params [String] :record_state # The updated record state for the finding. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.update_findings({ # filters: { # required # product_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # aws_account_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # generator_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # first_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # last_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # created_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # updated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # severity_product: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # severity_normalized: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # severity_label: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # confidence: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # criticality: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # title: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # description: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # recommendation_text: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # source_url: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # product_fields: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # product_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # company_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # user_defined_fields: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # malware_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_path: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_direction: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_protocol: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_source_ip_v4: [ # { # cidr: "NonEmptyString", # }, # ], # network_source_ip_v6: [ # { # cidr: "NonEmptyString", # }, # ], # network_source_port: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # network_source_domain: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_source_mac: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_destination_ip_v4: [ # { # cidr: "NonEmptyString", # }, # ], # network_destination_ip_v6: [ # { # cidr: "NonEmptyString", # }, # ], # network_destination_port: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # network_destination_domain: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_path: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_pid: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # process_parent_pid: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # process_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # process_terminated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # threat_intel_indicator_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_value: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_category: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_last_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # threat_intel_indicator_source: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_source_url: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_partition: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_region: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_tags: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # resource_aws_ec2_instance_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_image_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_ip_v4_addresses: [ # { # cidr: "NonEmptyString", # }, # ], # resource_aws_ec2_instance_ip_v6_addresses: [ # { # cidr: "NonEmptyString", # }, # ], # resource_aws_ec2_instance_key_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_iam_instance_profile_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_vpc_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_subnet_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_aws_s3_bucket_owner_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_s3_bucket_owner_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_user_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_status: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_created_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_container_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_image_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_image_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_details_other: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # compliance_status: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # verification_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # workflow_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # record_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # related_findings_product_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # related_findings_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # note_text: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # note_updated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # note_updated_by: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # keyword: [ # { # value: "NonEmptyString", # }, # ], # }, # note: { # text: "NonEmptyString", # required # updated_by: "NonEmptyString", # required # }, # record_state: "ACTIVE", # accepts ACTIVE, ARCHIVED # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/UpdateFindings AWS API Documentation # # @overload update_findings(params = {}) # @param [Hash] params ({}) def update_findings(params = {}, options = {}) req = build_request(:update_findings, params) req.send_request(options) end # Updates the AWS Security Hub insight specified by the insight ARN. # # @option params [required, String] :insight_arn # The ARN of the insight that you want to update. # # @option params [String] :name # The updated name for the insight. # # @option params [Types::AwsSecurityFindingFilters] :filters # The updated filters that define this insight. # # @option params [String] :group_by_attribute # The updated GroupBy attribute that defines this insight. # # @return [Struct] Returns an empty {Seahorse::Client::Response response}. # # @example Request syntax with placeholder values # # resp = client.update_insight({ # insight_arn: "NonEmptyString", # required # name: "NonEmptyString", # filters: { # product_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # aws_account_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # generator_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # first_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # last_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # created_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # updated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # severity_product: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # severity_normalized: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # severity_label: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # confidence: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # criticality: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # title: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # description: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # recommendation_text: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # source_url: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # product_fields: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # product_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # company_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # user_defined_fields: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # malware_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_path: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # malware_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_direction: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_protocol: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_source_ip_v4: [ # { # cidr: "NonEmptyString", # }, # ], # network_source_ip_v6: [ # { # cidr: "NonEmptyString", # }, # ], # network_source_port: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # network_source_domain: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_source_mac: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # network_destination_ip_v4: [ # { # cidr: "NonEmptyString", # }, # ], # network_destination_ip_v6: [ # { # cidr: "NonEmptyString", # }, # ], # network_destination_port: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # network_destination_domain: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_path: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # process_pid: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # process_parent_pid: [ # { # gte: 1.0, # lte: 1.0, # eq: 1.0, # }, # ], # process_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # process_terminated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # threat_intel_indicator_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_value: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_category: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_last_observed_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # threat_intel_indicator_source: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # threat_intel_indicator_source_url: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_partition: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_region: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_tags: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # resource_aws_ec2_instance_type: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_image_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_ip_v4_addresses: [ # { # cidr: "NonEmptyString", # }, # ], # resource_aws_ec2_instance_ip_v6_addresses: [ # { # cidr: "NonEmptyString", # }, # ], # resource_aws_ec2_instance_key_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_iam_instance_profile_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_vpc_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_subnet_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_ec2_instance_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_aws_s3_bucket_owner_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_s3_bucket_owner_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_user_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_status: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_aws_iam_access_key_created_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_container_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_image_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_image_name: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # resource_container_launched_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # resource_details_other: [ # { # key: "NonEmptyString", # value: "NonEmptyString", # comparison: "CONTAINS", # accepts CONTAINS # }, # ], # compliance_status: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # verification_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # workflow_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # record_state: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # related_findings_product_arn: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # related_findings_id: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # note_text: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # note_updated_at: [ # { # start: "NonEmptyString", # end: "NonEmptyString", # date_range: { # value: 1, # unit: "DAYS", # accepts DAYS # }, # }, # ], # note_updated_by: [ # { # value: "NonEmptyString", # comparison: "EQUALS", # accepts EQUALS, CONTAINS, PREFIX # }, # ], # keyword: [ # { # value: "NonEmptyString", # }, # ], # }, # group_by_attribute: "NonEmptyString", # }) # # @see http://docs.aws.amazon.com/goto/WebAPI/securityhub-2018-10-26/UpdateInsight AWS API Documentation # # @overload update_insight(params = {}) # @param [Hash] params ({}) def update_insight(params = {}, options = {}) req = build_request(:update_insight, params) req.send_request(options) end # @!endgroup # @param params ({}) # @api private def build_request(operation_name, params = {}) handlers = @handlers.for(operation_name) context = Seahorse::Client::RequestContext.new( operation_name: operation_name, operation: config.api.operation(operation_name), client: self, params: params, config: config) context[:gem_name] = 'aws-sdk-securityhub' context[:gem_version] = '1.5.0' Seahorse::Client::Request.new(handlers, context) end # @api private # @deprecated def waiter_names [] end class << self # @api private attr_reader :identifier # @api private def errors_module Errors end end end end