UNPKG

69.1 kBTypeScriptView Raw
1import {Request} from '../lib/request';
2import {Response} from '../lib/response';
3import {AWSError} from '../lib/error';
4import {Service} from '../lib/service';
5import {ServiceConfigurationOptions} from '../lib/service';
6import {ConfigBase as Config} from '../lib/config';
7interface Blob {}
8declare class GuardDuty extends Service {
9 /**
10 * Constructs a service object. This object has one method for each API operation.
11 */
12 constructor(options?: GuardDuty.Types.ClientConfiguration)
13 config: Config & GuardDuty.Types.ClientConfiguration;
14 /**
15 * Accepts the invitation to be monitored by a master GuardDuty account.
16 */
17 acceptInvitation(params: GuardDuty.Types.AcceptInvitationRequest, callback?: (err: AWSError, data: GuardDuty.Types.AcceptInvitationResponse) => void): Request<GuardDuty.Types.AcceptInvitationResponse, AWSError>;
18 /**
19 * Accepts the invitation to be monitored by a master GuardDuty account.
20 */
21 acceptInvitation(callback?: (err: AWSError, data: GuardDuty.Types.AcceptInvitationResponse) => void): Request<GuardDuty.Types.AcceptInvitationResponse, AWSError>;
22 /**
23 * Archives Amazon GuardDuty findings specified by the list of finding IDs.
24 */
25 archiveFindings(params: GuardDuty.Types.ArchiveFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ArchiveFindingsResponse) => void): Request<GuardDuty.Types.ArchiveFindingsResponse, AWSError>;
26 /**
27 * Archives Amazon GuardDuty findings specified by the list of finding IDs.
28 */
29 archiveFindings(callback?: (err: AWSError, data: GuardDuty.Types.ArchiveFindingsResponse) => void): Request<GuardDuty.Types.ArchiveFindingsResponse, AWSError>;
30 /**
31 * Creates a single Amazon GuardDuty detector. A detector is an object that represents the GuardDuty service. A detector must be created in order for GuardDuty to become operational.
32 */
33 createDetector(params: GuardDuty.Types.CreateDetectorRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateDetectorResponse) => void): Request<GuardDuty.Types.CreateDetectorResponse, AWSError>;
34 /**
35 * Creates a single Amazon GuardDuty detector. A detector is an object that represents the GuardDuty service. A detector must be created in order for GuardDuty to become operational.
36 */
37 createDetector(callback?: (err: AWSError, data: GuardDuty.Types.CreateDetectorResponse) => void): Request<GuardDuty.Types.CreateDetectorResponse, AWSError>;
38 /**
39 * Creates a filter using the specified finding criteria.
40 */
41 createFilter(params: GuardDuty.Types.CreateFilterRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateFilterResponse) => void): Request<GuardDuty.Types.CreateFilterResponse, AWSError>;
42 /**
43 * Creates a filter using the specified finding criteria.
44 */
45 createFilter(callback?: (err: AWSError, data: GuardDuty.Types.CreateFilterResponse) => void): Request<GuardDuty.Types.CreateFilterResponse, AWSError>;
46 /**
47 * Creates a new IPSet - a list of trusted IP addresses that have been whitelisted for secure communication with AWS infrastructure and applications.
48 */
49 createIPSet(params: GuardDuty.Types.CreateIPSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateIPSetResponse) => void): Request<GuardDuty.Types.CreateIPSetResponse, AWSError>;
50 /**
51 * Creates a new IPSet - a list of trusted IP addresses that have been whitelisted for secure communication with AWS infrastructure and applications.
52 */
53 createIPSet(callback?: (err: AWSError, data: GuardDuty.Types.CreateIPSetResponse) => void): Request<GuardDuty.Types.CreateIPSetResponse, AWSError>;
54 /**
55 * Creates member accounts of the current AWS account by specifying a list of AWS account IDs. The current AWS account can then invite these members to manage GuardDuty in their accounts.
56 */
57 createMembers(params: GuardDuty.Types.CreateMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateMembersResponse) => void): Request<GuardDuty.Types.CreateMembersResponse, AWSError>;
58 /**
59 * Creates member accounts of the current AWS account by specifying a list of AWS account IDs. The current AWS account can then invite these members to manage GuardDuty in their accounts.
60 */
61 createMembers(callback?: (err: AWSError, data: GuardDuty.Types.CreateMembersResponse) => void): Request<GuardDuty.Types.CreateMembersResponse, AWSError>;
62 /**
63 * Generates example findings of types specified by the list of finding types. If 'NULL' is specified for findingTypes, the API generates example findings of all supported finding types.
64 */
65 createSampleFindings(params: GuardDuty.Types.CreateSampleFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateSampleFindingsResponse) => void): Request<GuardDuty.Types.CreateSampleFindingsResponse, AWSError>;
66 /**
67 * Generates example findings of types specified by the list of finding types. If 'NULL' is specified for findingTypes, the API generates example findings of all supported finding types.
68 */
69 createSampleFindings(callback?: (err: AWSError, data: GuardDuty.Types.CreateSampleFindingsResponse) => void): Request<GuardDuty.Types.CreateSampleFindingsResponse, AWSError>;
70 /**
71 * Create a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets.
72 */
73 createThreatIntelSet(params: GuardDuty.Types.CreateThreatIntelSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateThreatIntelSetResponse) => void): Request<GuardDuty.Types.CreateThreatIntelSetResponse, AWSError>;
74 /**
75 * Create a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets.
76 */
77 createThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.CreateThreatIntelSetResponse) => void): Request<GuardDuty.Types.CreateThreatIntelSetResponse, AWSError>;
78 /**
79 * Declines invitations sent to the current member account by AWS account specified by their account IDs.
80 */
81 declineInvitations(params: GuardDuty.Types.DeclineInvitationsRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeclineInvitationsResponse) => void): Request<GuardDuty.Types.DeclineInvitationsResponse, AWSError>;
82 /**
83 * Declines invitations sent to the current member account by AWS account specified by their account IDs.
84 */
85 declineInvitations(callback?: (err: AWSError, data: GuardDuty.Types.DeclineInvitationsResponse) => void): Request<GuardDuty.Types.DeclineInvitationsResponse, AWSError>;
86 /**
87 * Deletes a Amazon GuardDuty detector specified by the detector ID.
88 */
89 deleteDetector(params: GuardDuty.Types.DeleteDetectorRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteDetectorResponse) => void): Request<GuardDuty.Types.DeleteDetectorResponse, AWSError>;
90 /**
91 * Deletes a Amazon GuardDuty detector specified by the detector ID.
92 */
93 deleteDetector(callback?: (err: AWSError, data: GuardDuty.Types.DeleteDetectorResponse) => void): Request<GuardDuty.Types.DeleteDetectorResponse, AWSError>;
94 /**
95 * Deletes the filter specified by the filter name.
96 */
97 deleteFilter(params: GuardDuty.Types.DeleteFilterRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteFilterResponse) => void): Request<GuardDuty.Types.DeleteFilterResponse, AWSError>;
98 /**
99 * Deletes the filter specified by the filter name.
100 */
101 deleteFilter(callback?: (err: AWSError, data: GuardDuty.Types.DeleteFilterResponse) => void): Request<GuardDuty.Types.DeleteFilterResponse, AWSError>;
102 /**
103 * Deletes the IPSet specified by the IPSet ID.
104 */
105 deleteIPSet(params: GuardDuty.Types.DeleteIPSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteIPSetResponse) => void): Request<GuardDuty.Types.DeleteIPSetResponse, AWSError>;
106 /**
107 * Deletes the IPSet specified by the IPSet ID.
108 */
109 deleteIPSet(callback?: (err: AWSError, data: GuardDuty.Types.DeleteIPSetResponse) => void): Request<GuardDuty.Types.DeleteIPSetResponse, AWSError>;
110 /**
111 * Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
112 */
113 deleteInvitations(params: GuardDuty.Types.DeleteInvitationsRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteInvitationsResponse) => void): Request<GuardDuty.Types.DeleteInvitationsResponse, AWSError>;
114 /**
115 * Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
116 */
117 deleteInvitations(callback?: (err: AWSError, data: GuardDuty.Types.DeleteInvitationsResponse) => void): Request<GuardDuty.Types.DeleteInvitationsResponse, AWSError>;
118 /**
119 * Deletes GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
120 */
121 deleteMembers(params: GuardDuty.Types.DeleteMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteMembersResponse) => void): Request<GuardDuty.Types.DeleteMembersResponse, AWSError>;
122 /**
123 * Deletes GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
124 */
125 deleteMembers(callback?: (err: AWSError, data: GuardDuty.Types.DeleteMembersResponse) => void): Request<GuardDuty.Types.DeleteMembersResponse, AWSError>;
126 /**
127 * Deletes ThreatIntelSet specified by the ThreatIntelSet ID.
128 */
129 deleteThreatIntelSet(params: GuardDuty.Types.DeleteThreatIntelSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteThreatIntelSetResponse) => void): Request<GuardDuty.Types.DeleteThreatIntelSetResponse, AWSError>;
130 /**
131 * Deletes ThreatIntelSet specified by the ThreatIntelSet ID.
132 */
133 deleteThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.DeleteThreatIntelSetResponse) => void): Request<GuardDuty.Types.DeleteThreatIntelSetResponse, AWSError>;
134 /**
135 * Disassociates the current GuardDuty member account from its master account.
136 */
137 disassociateFromMasterAccount(params: GuardDuty.Types.DisassociateFromMasterAccountRequest, callback?: (err: AWSError, data: GuardDuty.Types.DisassociateFromMasterAccountResponse) => void): Request<GuardDuty.Types.DisassociateFromMasterAccountResponse, AWSError>;
138 /**
139 * Disassociates the current GuardDuty member account from its master account.
140 */
141 disassociateFromMasterAccount(callback?: (err: AWSError, data: GuardDuty.Types.DisassociateFromMasterAccountResponse) => void): Request<GuardDuty.Types.DisassociateFromMasterAccountResponse, AWSError>;
142 /**
143 * Disassociates GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
144 */
145 disassociateMembers(params: GuardDuty.Types.DisassociateMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.DisassociateMembersResponse) => void): Request<GuardDuty.Types.DisassociateMembersResponse, AWSError>;
146 /**
147 * Disassociates GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
148 */
149 disassociateMembers(callback?: (err: AWSError, data: GuardDuty.Types.DisassociateMembersResponse) => void): Request<GuardDuty.Types.DisassociateMembersResponse, AWSError>;
150 /**
151 * Retrieves an Amazon GuardDuty detector specified by the detectorId.
152 */
153 getDetector(params: GuardDuty.Types.GetDetectorRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetDetectorResponse) => void): Request<GuardDuty.Types.GetDetectorResponse, AWSError>;
154 /**
155 * Retrieves an Amazon GuardDuty detector specified by the detectorId.
156 */
157 getDetector(callback?: (err: AWSError, data: GuardDuty.Types.GetDetectorResponse) => void): Request<GuardDuty.Types.GetDetectorResponse, AWSError>;
158 /**
159 * Returns the details of the filter specified by the filter name.
160 */
161 getFilter(params: GuardDuty.Types.GetFilterRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetFilterResponse) => void): Request<GuardDuty.Types.GetFilterResponse, AWSError>;
162 /**
163 * Returns the details of the filter specified by the filter name.
164 */
165 getFilter(callback?: (err: AWSError, data: GuardDuty.Types.GetFilterResponse) => void): Request<GuardDuty.Types.GetFilterResponse, AWSError>;
166 /**
167 * Describes Amazon GuardDuty findings specified by finding IDs.
168 */
169 getFindings(params: GuardDuty.Types.GetFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetFindingsResponse) => void): Request<GuardDuty.Types.GetFindingsResponse, AWSError>;
170 /**
171 * Describes Amazon GuardDuty findings specified by finding IDs.
172 */
173 getFindings(callback?: (err: AWSError, data: GuardDuty.Types.GetFindingsResponse) => void): Request<GuardDuty.Types.GetFindingsResponse, AWSError>;
174 /**
175 * Lists Amazon GuardDuty findings' statistics for the specified detector ID.
176 */
177 getFindingsStatistics(params: GuardDuty.Types.GetFindingsStatisticsRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetFindingsStatisticsResponse) => void): Request<GuardDuty.Types.GetFindingsStatisticsResponse, AWSError>;
178 /**
179 * Lists Amazon GuardDuty findings' statistics for the specified detector ID.
180 */
181 getFindingsStatistics(callback?: (err: AWSError, data: GuardDuty.Types.GetFindingsStatisticsResponse) => void): Request<GuardDuty.Types.GetFindingsStatisticsResponse, AWSError>;
182 /**
183 * Retrieves the IPSet specified by the IPSet ID.
184 */
185 getIPSet(params: GuardDuty.Types.GetIPSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetIPSetResponse) => void): Request<GuardDuty.Types.GetIPSetResponse, AWSError>;
186 /**
187 * Retrieves the IPSet specified by the IPSet ID.
188 */
189 getIPSet(callback?: (err: AWSError, data: GuardDuty.Types.GetIPSetResponse) => void): Request<GuardDuty.Types.GetIPSetResponse, AWSError>;
190 /**
191 * Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
192 */
193 getInvitationsCount(params: GuardDuty.Types.GetInvitationsCountRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetInvitationsCountResponse) => void): Request<GuardDuty.Types.GetInvitationsCountResponse, AWSError>;
194 /**
195 * Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
196 */
197 getInvitationsCount(callback?: (err: AWSError, data: GuardDuty.Types.GetInvitationsCountResponse) => void): Request<GuardDuty.Types.GetInvitationsCountResponse, AWSError>;
198 /**
199 * Provides the details for the GuardDuty master account to the current GuardDuty member account.
200 */
201 getMasterAccount(params: GuardDuty.Types.GetMasterAccountRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetMasterAccountResponse) => void): Request<GuardDuty.Types.GetMasterAccountResponse, AWSError>;
202 /**
203 * Provides the details for the GuardDuty master account to the current GuardDuty member account.
204 */
205 getMasterAccount(callback?: (err: AWSError, data: GuardDuty.Types.GetMasterAccountResponse) => void): Request<GuardDuty.Types.GetMasterAccountResponse, AWSError>;
206 /**
207 * Retrieves GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
208 */
209 getMembers(params: GuardDuty.Types.GetMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetMembersResponse) => void): Request<GuardDuty.Types.GetMembersResponse, AWSError>;
210 /**
211 * Retrieves GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
212 */
213 getMembers(callback?: (err: AWSError, data: GuardDuty.Types.GetMembersResponse) => void): Request<GuardDuty.Types.GetMembersResponse, AWSError>;
214 /**
215 * Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
216 */
217 getThreatIntelSet(params: GuardDuty.Types.GetThreatIntelSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetThreatIntelSetResponse) => void): Request<GuardDuty.Types.GetThreatIntelSetResponse, AWSError>;
218 /**
219 * Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
220 */
221 getThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.GetThreatIntelSetResponse) => void): Request<GuardDuty.Types.GetThreatIntelSetResponse, AWSError>;
222 /**
223 * Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty and allow the current AWS account to view and manage these accounts' GuardDuty findings on their behalf as the master account.
224 */
225 inviteMembers(params: GuardDuty.Types.InviteMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.InviteMembersResponse) => void): Request<GuardDuty.Types.InviteMembersResponse, AWSError>;
226 /**
227 * Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty and allow the current AWS account to view and manage these accounts' GuardDuty findings on their behalf as the master account.
228 */
229 inviteMembers(callback?: (err: AWSError, data: GuardDuty.Types.InviteMembersResponse) => void): Request<GuardDuty.Types.InviteMembersResponse, AWSError>;
230 /**
231 * Lists detectorIds of all the existing Amazon GuardDuty detector resources.
232 */
233 listDetectors(params: GuardDuty.Types.ListDetectorsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListDetectorsResponse) => void): Request<GuardDuty.Types.ListDetectorsResponse, AWSError>;
234 /**
235 * Lists detectorIds of all the existing Amazon GuardDuty detector resources.
236 */
237 listDetectors(callback?: (err: AWSError, data: GuardDuty.Types.ListDetectorsResponse) => void): Request<GuardDuty.Types.ListDetectorsResponse, AWSError>;
238 /**
239 * Returns a paginated list of the current filters.
240 */
241 listFilters(params: GuardDuty.Types.ListFiltersRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListFiltersResponse) => void): Request<GuardDuty.Types.ListFiltersResponse, AWSError>;
242 /**
243 * Returns a paginated list of the current filters.
244 */
245 listFilters(callback?: (err: AWSError, data: GuardDuty.Types.ListFiltersResponse) => void): Request<GuardDuty.Types.ListFiltersResponse, AWSError>;
246 /**
247 * Lists Amazon GuardDuty findings for the specified detector ID.
248 */
249 listFindings(params: GuardDuty.Types.ListFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListFindingsResponse) => void): Request<GuardDuty.Types.ListFindingsResponse, AWSError>;
250 /**
251 * Lists Amazon GuardDuty findings for the specified detector ID.
252 */
253 listFindings(callback?: (err: AWSError, data: GuardDuty.Types.ListFindingsResponse) => void): Request<GuardDuty.Types.ListFindingsResponse, AWSError>;
254 /**
255 * Lists the IPSets of the GuardDuty service specified by the detector ID.
256 */
257 listIPSets(params: GuardDuty.Types.ListIPSetsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListIPSetsResponse) => void): Request<GuardDuty.Types.ListIPSetsResponse, AWSError>;
258 /**
259 * Lists the IPSets of the GuardDuty service specified by the detector ID.
260 */
261 listIPSets(callback?: (err: AWSError, data: GuardDuty.Types.ListIPSetsResponse) => void): Request<GuardDuty.Types.ListIPSetsResponse, AWSError>;
262 /**
263 * Lists all GuardDuty membership invitations that were sent to the current AWS account.
264 */
265 listInvitations(params: GuardDuty.Types.ListInvitationsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListInvitationsResponse) => void): Request<GuardDuty.Types.ListInvitationsResponse, AWSError>;
266 /**
267 * Lists all GuardDuty membership invitations that were sent to the current AWS account.
268 */
269 listInvitations(callback?: (err: AWSError, data: GuardDuty.Types.ListInvitationsResponse) => void): Request<GuardDuty.Types.ListInvitationsResponse, AWSError>;
270 /**
271 * Lists details about all member accounts for the current GuardDuty master account.
272 */
273 listMembers(params: GuardDuty.Types.ListMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListMembersResponse) => void): Request<GuardDuty.Types.ListMembersResponse, AWSError>;
274 /**
275 * Lists details about all member accounts for the current GuardDuty master account.
276 */
277 listMembers(callback?: (err: AWSError, data: GuardDuty.Types.ListMembersResponse) => void): Request<GuardDuty.Types.ListMembersResponse, AWSError>;
278 /**
279 * Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID.
280 */
281 listThreatIntelSets(params: GuardDuty.Types.ListThreatIntelSetsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListThreatIntelSetsResponse) => void): Request<GuardDuty.Types.ListThreatIntelSetsResponse, AWSError>;
282 /**
283 * Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID.
284 */
285 listThreatIntelSets(callback?: (err: AWSError, data: GuardDuty.Types.ListThreatIntelSetsResponse) => void): Request<GuardDuty.Types.ListThreatIntelSetsResponse, AWSError>;
286 /**
287 * Re-enables GuardDuty to monitor findings of the member accounts specified by the account IDs. A master GuardDuty account can run this command after disabling GuardDuty from monitoring these members' findings by running StopMonitoringMembers.
288 */
289 startMonitoringMembers(params: GuardDuty.Types.StartMonitoringMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.StartMonitoringMembersResponse) => void): Request<GuardDuty.Types.StartMonitoringMembersResponse, AWSError>;
290 /**
291 * Re-enables GuardDuty to monitor findings of the member accounts specified by the account IDs. A master GuardDuty account can run this command after disabling GuardDuty from monitoring these members' findings by running StopMonitoringMembers.
292 */
293 startMonitoringMembers(callback?: (err: AWSError, data: GuardDuty.Types.StartMonitoringMembersResponse) => void): Request<GuardDuty.Types.StartMonitoringMembersResponse, AWSError>;
294 /**
295 * Disables GuardDuty from monitoring findings of the member accounts specified by the account IDs. After running this command, a master GuardDuty account can run StartMonitoringMembers to re-enable GuardDuty to monitor these members’ findings.
296 */
297 stopMonitoringMembers(params: GuardDuty.Types.StopMonitoringMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.StopMonitoringMembersResponse) => void): Request<GuardDuty.Types.StopMonitoringMembersResponse, AWSError>;
298 /**
299 * Disables GuardDuty from monitoring findings of the member accounts specified by the account IDs. After running this command, a master GuardDuty account can run StartMonitoringMembers to re-enable GuardDuty to monitor these members’ findings.
300 */
301 stopMonitoringMembers(callback?: (err: AWSError, data: GuardDuty.Types.StopMonitoringMembersResponse) => void): Request<GuardDuty.Types.StopMonitoringMembersResponse, AWSError>;
302 /**
303 * Unarchives Amazon GuardDuty findings specified by the list of finding IDs.
304 */
305 unarchiveFindings(params: GuardDuty.Types.UnarchiveFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.UnarchiveFindingsResponse) => void): Request<GuardDuty.Types.UnarchiveFindingsResponse, AWSError>;
306 /**
307 * Unarchives Amazon GuardDuty findings specified by the list of finding IDs.
308 */
309 unarchiveFindings(callback?: (err: AWSError, data: GuardDuty.Types.UnarchiveFindingsResponse) => void): Request<GuardDuty.Types.UnarchiveFindingsResponse, AWSError>;
310 /**
311 * Updates an Amazon GuardDuty detector specified by the detectorId.
312 */
313 updateDetector(params: GuardDuty.Types.UpdateDetectorRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateDetectorResponse) => void): Request<GuardDuty.Types.UpdateDetectorResponse, AWSError>;
314 /**
315 * Updates an Amazon GuardDuty detector specified by the detectorId.
316 */
317 updateDetector(callback?: (err: AWSError, data: GuardDuty.Types.UpdateDetectorResponse) => void): Request<GuardDuty.Types.UpdateDetectorResponse, AWSError>;
318 /**
319 * Updates the filter specified by the filter name.
320 */
321 updateFilter(params: GuardDuty.Types.UpdateFilterRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateFilterResponse) => void): Request<GuardDuty.Types.UpdateFilterResponse, AWSError>;
322 /**
323 * Updates the filter specified by the filter name.
324 */
325 updateFilter(callback?: (err: AWSError, data: GuardDuty.Types.UpdateFilterResponse) => void): Request<GuardDuty.Types.UpdateFilterResponse, AWSError>;
326 /**
327 * Marks specified Amazon GuardDuty findings as useful or not useful.
328 */
329 updateFindingsFeedback(params: GuardDuty.Types.UpdateFindingsFeedbackRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateFindingsFeedbackResponse) => void): Request<GuardDuty.Types.UpdateFindingsFeedbackResponse, AWSError>;
330 /**
331 * Marks specified Amazon GuardDuty findings as useful or not useful.
332 */
333 updateFindingsFeedback(callback?: (err: AWSError, data: GuardDuty.Types.UpdateFindingsFeedbackResponse) => void): Request<GuardDuty.Types.UpdateFindingsFeedbackResponse, AWSError>;
334 /**
335 * Updates the IPSet specified by the IPSet ID.
336 */
337 updateIPSet(params: GuardDuty.Types.UpdateIPSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateIPSetResponse) => void): Request<GuardDuty.Types.UpdateIPSetResponse, AWSError>;
338 /**
339 * Updates the IPSet specified by the IPSet ID.
340 */
341 updateIPSet(callback?: (err: AWSError, data: GuardDuty.Types.UpdateIPSetResponse) => void): Request<GuardDuty.Types.UpdateIPSetResponse, AWSError>;
342 /**
343 * Updates the ThreatIntelSet specified by ThreatIntelSet ID.
344 */
345 updateThreatIntelSet(params: GuardDuty.Types.UpdateThreatIntelSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateThreatIntelSetResponse) => void): Request<GuardDuty.Types.UpdateThreatIntelSetResponse, AWSError>;
346 /**
347 * Updates the ThreatIntelSet specified by ThreatIntelSet ID.
348 */
349 updateThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.UpdateThreatIntelSetResponse) => void): Request<GuardDuty.Types.UpdateThreatIntelSetResponse, AWSError>;
350}
351declare namespace GuardDuty {
352 export interface AcceptInvitationRequest {
353 /**
354 * The unique ID of the detector of the GuardDuty member account.
355 */
356 DetectorId: __string;
357 /**
358 * This value is used to validate the master account to the member account.
359 */
360 InvitationId: InvitationId;
361 /**
362 * The account ID of the master GuardDuty account whose invitation you're accepting.
363 */
364 MasterId: MasterId;
365 }
366 export interface AcceptInvitationResponse {
367 }
368 export interface AccessKeyDetails {
369 /**
370 * Access key ID of the user.
371 */
372 AccessKeyId?: __string;
373 /**
374 * The principal ID of the user.
375 */
376 PrincipalId?: __string;
377 /**
378 * The name of the user.
379 */
380 UserName?: __string;
381 /**
382 * The type of the user.
383 */
384 UserType?: __string;
385 }
386 export interface AccountDetail {
387 /**
388 * Member account ID.
389 */
390 AccountId: AccountId;
391 /**
392 * Member account's email address.
393 */
394 Email: Email;
395 }
396 export type AccountDetails = AccountDetail[];
397 export type AccountId = string;
398 export type AccountIds = __string[];
399 export interface Action {
400 /**
401 * GuardDuty Finding activity type.
402 */
403 ActionType?: __string;
404 /**
405 * Information about the AWS_API_CALL action described in this finding.
406 */
407 AwsApiCallAction?: AwsApiCallAction;
408 /**
409 * Information about the DNS_REQUEST action described in this finding.
410 */
411 DnsRequestAction?: DnsRequestAction;
412 /**
413 * Information about the NETWORK_CONNECTION action described in this finding.
414 */
415 NetworkConnectionAction?: NetworkConnectionAction;
416 /**
417 * Information about the PORT_PROBE action described in this finding.
418 */
419 PortProbeAction?: PortProbeAction;
420 }
421 export type Activate = boolean;
422 export interface ArchiveFindingsRequest {
423 /**
424 * The ID of the detector that specifies the GuardDuty service whose findings you want to archive.
425 */
426 DetectorId: __string;
427 /**
428 * IDs of the findings that you want to archive.
429 */
430 FindingIds: FindingIds;
431 }
432 export interface ArchiveFindingsResponse {
433 }
434 export interface AwsApiCallAction {
435 /**
436 * AWS API name.
437 */
438 Api?: __string;
439 /**
440 * AWS API caller type.
441 */
442 CallerType?: __string;
443 /**
444 * Domain information for the AWS API call.
445 */
446 DomainDetails?: DomainDetails;
447 /**
448 * Remote IP information of the connection.
449 */
450 RemoteIpDetails?: RemoteIpDetails;
451 /**
452 * AWS service name whose API was invoked.
453 */
454 ServiceName?: __string;
455 }
456 export interface City {
457 /**
458 * City name of the remote IP address.
459 */
460 CityName?: __string;
461 }
462 export type Comments = string;
463 export interface Condition {
464 /**
465 * Represents the equal condition to be applied to a single field when querying for findings.
466 */
467 Eq?: Eq;
468 /**
469 * Represents the greater than condition to be applied to a single field when querying for findings.
470 */
471 Gt?: __integer;
472 /**
473 * Represents the greater than equal condition to be applied to a single field when querying for findings.
474 */
475 Gte?: __integer;
476 /**
477 * Represents the less than condition to be applied to a single field when querying for findings.
478 */
479 Lt?: __integer;
480 /**
481 * Represents the less than equal condition to be applied to a single field when querying for findings.
482 */
483 Lte?: __integer;
484 /**
485 * Represents the not equal condition to be applied to a single field when querying for findings.
486 */
487 Neq?: Neq;
488 }
489 export type CountBySeverityFindingStatistic = number;
490 export interface Country {
491 /**
492 * Country code of the remote IP address.
493 */
494 CountryCode?: __string;
495 /**
496 * Country name of the remote IP address.
497 */
498 CountryName?: __string;
499 }
500 export interface CreateDetectorRequest {
501 /**
502 * The idempotency token for the create request.
503 */
504 ClientToken?: __stringMin0Max64;
505 /**
506 * A boolean value that specifies whether the detector is to be enabled.
507 */
508 Enable: Enable;
509 /**
510 * A enum value that specifies how frequently customer got Finding updates published.
511 */
512 FindingPublishingFrequency?: FindingPublishingFrequency;
513 }
514 export interface CreateDetectorResponse {
515 /**
516 * The unique ID of the created detector.
517 */
518 DetectorId?: DetectorId;
519 }
520 export interface CreateFilterRequest {
521 /**
522 * Specifies the action that is to be applied to the findings that match the filter.
523 */
524 Action?: FilterAction;
525 /**
526 * The idempotency token for the create request.
527 */
528 ClientToken?: __stringMin0Max64;
529 /**
530 * The description of the filter.
531 */
532 Description?: FilterDescription;
533 /**
534 * The unique ID of the detector that you want to update.
535 */
536 DetectorId: __string;
537 /**
538 * Represents the criteria to be used in the filter for querying findings.
539 */
540 FindingCriteria: FindingCriteria;
541 /**
542 * The name of the filter.
543 */
544 Name: FilterName;
545 /**
546 * Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
547 */
548 Rank?: FilterRank;
549 }
550 export interface CreateFilterResponse {
551 /**
552 * The name of the successfully created filter.
553 */
554 Name?: FilterName;
555 }
556 export interface CreateIPSetRequest {
557 /**
558 * A boolean value that indicates whether GuardDuty is to start using the uploaded IPSet.
559 */
560 Activate: Activate;
561 /**
562 * The idempotency token for the create request.
563 */
564 ClientToken?: __stringMin0Max64;
565 /**
566 * The unique ID of the detector that you want to update.
567 */
568 DetectorId: __string;
569 /**
570 * The format of the file that contains the IPSet.
571 */
572 Format: IpSetFormat;
573 /**
574 * The URI of the file that contains the IPSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
575 */
576 Location: Location;
577 /**
578 * The user friendly name to identify the IPSet. This name is displayed in all findings that are triggered by activity that involves IP addresses included in this IPSet.
579 */
580 Name: Name;
581 }
582 export interface CreateIPSetResponse {
583 IpSetId?: IpSetId;
584 }
585 export interface CreateMembersRequest {
586 /**
587 * A list of account ID and email address pairs of the accounts that you want to associate with the master GuardDuty account.
588 */
589 AccountDetails: AccountDetails;
590 /**
591 * The unique ID of the detector of the GuardDuty account with which you want to associate member accounts.
592 */
593 DetectorId: __string;
594 }
595 export interface CreateMembersResponse {
596 /**
597 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
598 */
599 UnprocessedAccounts?: UnprocessedAccounts;
600 }
601 export interface CreateSampleFindingsRequest {
602 /**
603 * The ID of the detector to create sample findings for.
604 */
605 DetectorId: __string;
606 /**
607 * Types of sample findings that you want to generate.
608 */
609 FindingTypes?: FindingTypes;
610 }
611 export interface CreateSampleFindingsResponse {
612 }
613 export interface CreateThreatIntelSetRequest {
614 /**
615 * A boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.
616 */
617 Activate: Activate;
618 /**
619 * The idempotency token for the create request.
620 */
621 ClientToken?: __stringMin0Max64;
622 /**
623 * The unique ID of the detector that you want to update.
624 */
625 DetectorId: __string;
626 /**
627 * The format of the file that contains the ThreatIntelSet.
628 */
629 Format: ThreatIntelSetFormat;
630 /**
631 * The URI of the file that contains the ThreatIntelSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
632 */
633 Location: Location;
634 /**
635 * A user-friendly ThreatIntelSet name that is displayed in all finding generated by activity that involves IP addresses included in this ThreatIntelSet.
636 */
637 Name: Name;
638 }
639 export interface CreateThreatIntelSetResponse {
640 ThreatIntelSetId?: ThreatIntelSetId;
641 }
642 export type CreatedAt = string;
643 export interface DeclineInvitationsRequest {
644 /**
645 * A list of account IDs of the AWS accounts that sent invitations to the current member account that you want to decline invitations from.
646 */
647 AccountIds: AccountIds;
648 }
649 export interface DeclineInvitationsResponse {
650 /**
651 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
652 */
653 UnprocessedAccounts?: UnprocessedAccounts;
654 }
655 export interface DeleteDetectorRequest {
656 /**
657 * The unique ID that specifies the detector that you want to delete.
658 */
659 DetectorId: __string;
660 }
661 export interface DeleteDetectorResponse {
662 }
663 export interface DeleteFilterRequest {
664 /**
665 * The unique ID that specifies the detector where you want to delete a filter.
666 */
667 DetectorId: __string;
668 /**
669 * The name of the filter.
670 */
671 FilterName: __string;
672 }
673 export interface DeleteFilterResponse {
674 }
675 export interface DeleteIPSetRequest {
676 /**
677 * The detectorID that specifies the GuardDuty service whose IPSet you want to delete.
678 */
679 DetectorId: __string;
680 /**
681 * The unique ID that specifies the IPSet that you want to delete.
682 */
683 IpSetId: __string;
684 }
685 export interface DeleteIPSetResponse {
686 }
687 export interface DeleteInvitationsRequest {
688 /**
689 * A list of account IDs of the AWS accounts that sent invitations to the current member account that you want to delete invitations from.
690 */
691 AccountIds: AccountIds;
692 }
693 export interface DeleteInvitationsResponse {
694 /**
695 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
696 */
697 UnprocessedAccounts?: UnprocessedAccounts;
698 }
699 export interface DeleteMembersRequest {
700 /**
701 * A list of account IDs of the GuardDuty member accounts that you want to delete.
702 */
703 AccountIds: AccountIds;
704 /**
705 * The unique ID of the detector of the GuardDuty account whose members you want to delete.
706 */
707 DetectorId: __string;
708 }
709 export interface DeleteMembersResponse {
710 /**
711 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
712 */
713 UnprocessedAccounts?: UnprocessedAccounts;
714 }
715 export interface DeleteThreatIntelSetRequest {
716 /**
717 * The detectorID that specifies the GuardDuty service whose ThreatIntelSet you want to delete.
718 */
719 DetectorId: __string;
720 /**
721 * The unique ID that specifies the ThreatIntelSet that you want to delete.
722 */
723 ThreatIntelSetId: __string;
724 }
725 export interface DeleteThreatIntelSetResponse {
726 }
727 export type DetectorId = string;
728 export type DetectorIds = DetectorId[];
729 export type DetectorStatus = "ENABLED"|"DISABLED"|string;
730 export interface DisassociateFromMasterAccountRequest {
731 /**
732 * The unique ID of the detector of the GuardDuty member account.
733 */
734 DetectorId: __string;
735 }
736 export interface DisassociateFromMasterAccountResponse {
737 }
738 export interface DisassociateMembersRequest {
739 /**
740 * A list of account IDs of the GuardDuty member accounts that you want to disassociate from master.
741 */
742 AccountIds: AccountIds;
743 /**
744 * The unique ID of the detector of the GuardDuty account whose members you want to disassociate from master.
745 */
746 DetectorId: __string;
747 }
748 export interface DisassociateMembersResponse {
749 /**
750 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
751 */
752 UnprocessedAccounts?: UnprocessedAccounts;
753 }
754 export interface DnsRequestAction {
755 /**
756 * Domain information for the DNS request.
757 */
758 Domain?: Domain;
759 }
760 export type Domain = string;
761 export interface DomainDetails {
762 }
763 export type Email = string;
764 export type Enable = boolean;
765 export type Eq = __string[];
766 export type Feedback = "USEFUL"|"NOT_USEFUL"|string;
767 export type FilterAction = "NOOP"|"ARCHIVE"|string;
768 export type FilterDescription = string;
769 export type FilterName = string;
770 export type FilterNames = FilterName[];
771 export type FilterRank = number;
772 export interface Finding {
773 /**
774 * AWS account ID where the activity occurred that prompted GuardDuty to generate a finding.
775 */
776 AccountId: __string;
777 /**
778 * The ARN of a finding described by the action.
779 */
780 Arn: __string;
781 /**
782 * The confidence level of a finding.
783 */
784 Confidence?: __double;
785 /**
786 * The time stamp at which a finding was generated.
787 */
788 CreatedAt: CreatedAt;
789 /**
790 * The description of a finding.
791 */
792 Description?: __string;
793 /**
794 * The identifier that corresponds to a finding described by the action.
795 */
796 Id: __string;
797 /**
798 * The AWS resource partition.
799 */
800 Partition?: __string;
801 /**
802 * The AWS region where the activity occurred that prompted GuardDuty to generate a finding.
803 */
804 Region: __string;
805 /**
806 * The AWS resource associated with the activity that prompted GuardDuty to generate a finding.
807 */
808 Resource: Resource;
809 /**
810 * Findings' schema version.
811 */
812 SchemaVersion: __string;
813 /**
814 * Additional information assigned to the generated finding by GuardDuty.
815 */
816 Service?: Service;
817 /**
818 * The severity of a finding.
819 */
820 Severity: __double;
821 /**
822 * The title of a finding.
823 */
824 Title?: __string;
825 /**
826 * The type of a finding described by the action.
827 */
828 Type: __string;
829 /**
830 * The time stamp at which a finding was last updated.
831 */
832 UpdatedAt: UpdatedAt;
833 }
834 export interface FindingCriteria {
835 /**
836 * Represents a map of finding properties that match specified conditions and values when querying findings.
837 */
838 Criterion?: __mapOfCondition;
839 }
840 export type FindingId = string;
841 export type FindingIds = FindingId[];
842 export type FindingPublishingFrequency = "FIFTEEN_MINUTES"|"ONE_HOUR"|"SIX_HOURS"|string;
843 export type FindingStatisticType = "COUNT_BY_SEVERITY"|string;
844 export type FindingStatisticTypes = FindingStatisticType[];
845 export interface FindingStatistics {
846 /**
847 * Represents a map of severity to count statistic for a set of findings
848 */
849 CountBySeverity?: __mapOfCountBySeverityFindingStatistic;
850 }
851 export type FindingType = string;
852 export type FindingTypes = FindingType[];
853 export type Findings = Finding[];
854 export interface GeoLocation {
855 /**
856 * Latitude information of remote IP address.
857 */
858 Lat?: __double;
859 /**
860 * Longitude information of remote IP address.
861 */
862 Lon?: __double;
863 }
864 export interface GetDetectorRequest {
865 /**
866 * The unique ID of the detector that you want to retrieve.
867 */
868 DetectorId: __string;
869 }
870 export interface GetDetectorResponse {
871 CreatedAt?: CreatedAt;
872 FindingPublishingFrequency?: FindingPublishingFrequency;
873 ServiceRole?: ServiceRole;
874 Status?: DetectorStatus;
875 UpdatedAt?: UpdatedAt;
876 }
877 export interface GetFilterRequest {
878 /**
879 * The detector ID that specifies the GuardDuty service where you want to list the details of the specified filter.
880 */
881 DetectorId: __string;
882 /**
883 * The name of the filter whose details you want to get.
884 */
885 FilterName: __string;
886 }
887 export interface GetFilterResponse {
888 /**
889 * Specifies the action that is to be applied to the findings that match the filter.
890 */
891 Action?: FilterAction;
892 /**
893 * The description of the filter.
894 */
895 Description?: FilterDescription;
896 /**
897 * Represents the criteria to be used in the filter for querying findings.
898 */
899 FindingCriteria?: FindingCriteria;
900 /**
901 * The name of the filter.
902 */
903 Name?: FilterName;
904 /**
905 * Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
906 */
907 Rank?: FilterRank;
908 }
909 export interface GetFindingsRequest {
910 /**
911 * The ID of the detector that specifies the GuardDuty service whose findings you want to retrieve.
912 */
913 DetectorId: __string;
914 /**
915 * IDs of the findings that you want to retrieve.
916 */
917 FindingIds: FindingIds;
918 /**
919 * Represents the criteria used for sorting findings.
920 */
921 SortCriteria?: SortCriteria;
922 }
923 export interface GetFindingsResponse {
924 Findings?: Findings;
925 }
926 export interface GetFindingsStatisticsRequest {
927 /**
928 * The ID of the detector that specifies the GuardDuty service whose findings' statistics you want to retrieve.
929 */
930 DetectorId: __string;
931 /**
932 * Represents the criteria used for querying findings.
933 */
934 FindingCriteria?: FindingCriteria;
935 /**
936 * Types of finding statistics to retrieve.
937 */
938 FindingStatisticTypes: FindingStatisticTypes;
939 }
940 export interface GetFindingsStatisticsResponse {
941 /**
942 * Finding statistics object.
943 */
944 FindingStatistics?: FindingStatistics;
945 }
946 export interface GetIPSetRequest {
947 /**
948 * The detectorID that specifies the GuardDuty service whose IPSet you want to retrieve.
949 */
950 DetectorId: __string;
951 /**
952 * The unique ID that specifies the IPSet that you want to describe.
953 */
954 IpSetId: __string;
955 }
956 export interface GetIPSetResponse {
957 /**
958 * The format of the file that contains the IPSet.
959 */
960 Format?: IpSetFormat;
961 /**
962 * The URI of the file that contains the IPSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
963 */
964 Location?: Location;
965 /**
966 * The user friendly name to identify the IPSet. This name is displayed in all findings that are triggered by activity that involves IP addresses included in this IPSet.
967 */
968 Name?: Name;
969 /**
970 * The status of ipSet file uploaded.
971 */
972 Status?: IpSetStatus;
973 }
974 export interface GetInvitationsCountRequest {
975 }
976 export interface GetInvitationsCountResponse {
977 /**
978 * The number of received invitations.
979 */
980 InvitationsCount?: __integer;
981 }
982 export interface GetMasterAccountRequest {
983 /**
984 * The unique ID of the detector of the GuardDuty member account.
985 */
986 DetectorId: __string;
987 }
988 export interface GetMasterAccountResponse {
989 Master?: Master;
990 }
991 export interface GetMembersRequest {
992 /**
993 * A list of account IDs of the GuardDuty member accounts that you want to describe.
994 */
995 AccountIds: AccountIds;
996 /**
997 * The unique ID of the detector of the GuardDuty account whose members you want to retrieve.
998 */
999 DetectorId: __string;
1000 }
1001 export interface GetMembersResponse {
1002 Members?: Members;
1003 /**
1004 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
1005 */
1006 UnprocessedAccounts?: UnprocessedAccounts;
1007 }
1008 export interface GetThreatIntelSetRequest {
1009 /**
1010 * The detectorID that specifies the GuardDuty service whose ThreatIntelSet you want to describe.
1011 */
1012 DetectorId: __string;
1013 /**
1014 * The unique ID that specifies the ThreatIntelSet that you want to describe.
1015 */
1016 ThreatIntelSetId: __string;
1017 }
1018 export interface GetThreatIntelSetResponse {
1019 /**
1020 * The format of the threatIntelSet.
1021 */
1022 Format?: ThreatIntelSetFormat;
1023 /**
1024 * The URI of the file that contains the ThreatIntelSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
1025 */
1026 Location?: Location;
1027 /**
1028 * A user-friendly ThreatIntelSet name that is displayed in all finding generated by activity that involves IP addresses included in this ThreatIntelSet.
1029 */
1030 Name?: Name;
1031 /**
1032 * The status of threatIntelSet file uploaded.
1033 */
1034 Status?: ThreatIntelSetStatus;
1035 }
1036 export interface IamInstanceProfile {
1037 /**
1038 * AWS EC2 instance profile ARN.
1039 */
1040 Arn?: __string;
1041 /**
1042 * AWS EC2 instance profile ID.
1043 */
1044 Id?: __string;
1045 }
1046 export interface InstanceDetails {
1047 /**
1048 * The availability zone of the EC2 instance.
1049 */
1050 AvailabilityZone?: __string;
1051 IamInstanceProfile?: IamInstanceProfile;
1052 /**
1053 * The image description of the EC2 instance.
1054 */
1055 ImageDescription?: __string;
1056 /**
1057 * The image ID of the EC2 instance.
1058 */
1059 ImageId?: __string;
1060 /**
1061 * The ID of the EC2 instance.
1062 */
1063 InstanceId?: __string;
1064 /**
1065 * The state of the EC2 instance.
1066 */
1067 InstanceState?: __string;
1068 /**
1069 * The type of the EC2 instance.
1070 */
1071 InstanceType?: __string;
1072 /**
1073 * The launch time of the EC2 instance.
1074 */
1075 LaunchTime?: __string;
1076 /**
1077 * The network interface information of the EC2 instance.
1078 */
1079 NetworkInterfaces?: NetworkInterfaces;
1080 /**
1081 * The platform of the EC2 instance.
1082 */
1083 Platform?: __string;
1084 /**
1085 * The product code of the EC2 instance.
1086 */
1087 ProductCodes?: ProductCodes;
1088 /**
1089 * The tags of the EC2 instance.
1090 */
1091 Tags?: Tags;
1092 }
1093 export interface Invitation {
1094 /**
1095 * Inviter account ID
1096 */
1097 AccountId?: __string;
1098 /**
1099 * This value is used to validate the inviter account to the member account.
1100 */
1101 InvitationId?: InvitationId;
1102 /**
1103 * Timestamp at which the invitation was sent
1104 */
1105 InvitedAt?: InvitedAt;
1106 /**
1107 * The status of the relationship between the inviter and invitee accounts.
1108 */
1109 RelationshipStatus?: __string;
1110 }
1111 export type InvitationId = string;
1112 export type Invitations = Invitation[];
1113 export interface InviteMembersRequest {
1114 /**
1115 * A list of account IDs of the accounts that you want to invite to GuardDuty as members.
1116 */
1117 AccountIds: AccountIds;
1118 /**
1119 * The unique ID of the detector of the GuardDuty account with which you want to invite members.
1120 */
1121 DetectorId: __string;
1122 /**
1123 * A boolean value that specifies whether you want to disable email notification to the accounts that you’re inviting to GuardDuty as members.
1124 */
1125 DisableEmailNotification?: __boolean;
1126 /**
1127 * The invitation message that you want to send to the accounts that you’re inviting to GuardDuty as members.
1128 */
1129 Message?: Message;
1130 }
1131 export interface InviteMembersResponse {
1132 /**
1133 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
1134 */
1135 UnprocessedAccounts?: UnprocessedAccounts;
1136 }
1137 export type InvitedAt = string;
1138 export type IpSetFormat = "TXT"|"STIX"|"OTX_CSV"|"ALIEN_VAULT"|"PROOF_POINT"|"FIRE_EYE"|string;
1139 export type IpSetId = string;
1140 export type IpSetIds = IpSetId[];
1141 export type IpSetStatus = "INACTIVE"|"ACTIVATING"|"ACTIVE"|"DEACTIVATING"|"ERROR"|"DELETE_PENDING"|"DELETED"|string;
1142 export type Ipv6Address = string;
1143 export type Ipv6Addresses = Ipv6Address[];
1144 export interface ListDetectorsRequest {
1145 /**
1146 * You can use this parameter to indicate the maximum number of detectors that you want in the response.
1147 */
1148 MaxResults?: MaxResults;
1149 /**
1150 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListDetectors action. For subsequent calls to the action fill nextToken in the request with the value of nextToken from the previous response to continue listing data.
1151 */
1152 NextToken?: __string;
1153 }
1154 export interface ListDetectorsResponse {
1155 DetectorIds?: DetectorIds;
1156 NextToken?: NextToken;
1157 }
1158 export interface ListFiltersRequest {
1159 /**
1160 * The ID of the detector that specifies the GuardDuty service where you want to list filters.
1161 */
1162 DetectorId: __string;
1163 /**
1164 * Indicates the maximum number of items that you want in the response. The maximum value is 50.
1165 */
1166 MaxResults?: MaxResults;
1167 /**
1168 * Paginates results. Set the value of this parameter to NULL on your first call to the ListFilters operation.For subsequent calls to the operation, fill nextToken in the request with the value of nextToken from the previous response to continue listing data.
1169 */
1170 NextToken?: __string;
1171 }
1172 export interface ListFiltersResponse {
1173 FilterNames?: FilterNames;
1174 NextToken?: NextToken;
1175 }
1176 export interface ListFindingsRequest {
1177 /**
1178 * The ID of the detector that specifies the GuardDuty service whose findings you want to list.
1179 */
1180 DetectorId: __string;
1181 /**
1182 * Represents the criteria used for querying findings.
1183 */
1184 FindingCriteria?: FindingCriteria;
1185 /**
1186 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is 50.
1187 */
1188 MaxResults?: MaxResults;
1189 /**
1190 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListFindings action. For subsequent calls to the action fill nextToken in the request with the value of nextToken from the previous response to continue listing data.
1191 */
1192 NextToken?: NextToken;
1193 /**
1194 * Represents the criteria used for sorting findings.
1195 */
1196 SortCriteria?: SortCriteria;
1197 }
1198 export interface ListFindingsResponse {
1199 FindingIds?: FindingIds;
1200 NextToken?: NextToken;
1201 }
1202 export interface ListIPSetsRequest {
1203 /**
1204 * The unique ID of the detector that you want to retrieve.
1205 */
1206 DetectorId: __string;
1207 /**
1208 * You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 7. The maximum value is 7.
1209 */
1210 MaxResults?: MaxResults;
1211 /**
1212 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListIPSet action. For subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1213 */
1214 NextToken?: __string;
1215 }
1216 export interface ListIPSetsResponse {
1217 IpSetIds?: IpSetIds;
1218 NextToken?: NextToken;
1219 }
1220 export interface ListInvitationsRequest {
1221 /**
1222 * You can use this parameter to indicate the maximum number of invitations you want in the response. The default value is 50. The maximum value is 50.
1223 */
1224 MaxResults?: MaxResults;
1225 /**
1226 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListInvitations action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1227 */
1228 NextToken?: __string;
1229 }
1230 export interface ListInvitationsResponse {
1231 Invitations?: Invitations;
1232 NextToken?: NextToken;
1233 }
1234 export interface ListMembersRequest {
1235 /**
1236 * The unique ID of the detector of the GuardDuty account whose members you want to list.
1237 */
1238 DetectorId: __string;
1239 /**
1240 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 1. The maximum value is 50.
1241 */
1242 MaxResults?: MaxResults;
1243 /**
1244 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListMembers action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1245 */
1246 NextToken?: __string;
1247 /**
1248 * Specifies what member accounts the response is to include based on their relationship status with the master account. The default value is TRUE. If onlyAssociated is set to TRUE, the response will include member accounts whose relationship status with the master is set to Enabled, Disabled. If onlyAssociated is set to FALSE, the response will include all existing member accounts.
1249 */
1250 OnlyAssociated?: __string;
1251 }
1252 export interface ListMembersResponse {
1253 Members?: Members;
1254 NextToken?: NextToken;
1255 }
1256 export interface ListThreatIntelSetsRequest {
1257 /**
1258 * The detectorID that specifies the GuardDuty service whose ThreatIntelSets you want to list.
1259 */
1260 DetectorId: __string;
1261 /**
1262 * You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 7. The maximum value is 7.
1263 */
1264 MaxResults?: MaxResults;
1265 /**
1266 * Pagination token to start retrieving threat intel sets from.
1267 */
1268 NextToken?: __string;
1269 }
1270 export interface ListThreatIntelSetsResponse {
1271 NextToken?: NextToken;
1272 ThreatIntelSetIds?: ThreatIntelSetIds;
1273 }
1274 export interface LocalPortDetails {
1275 /**
1276 * Port number of the local connection.
1277 */
1278 Port?: __integer;
1279 /**
1280 * Port name of the local connection.
1281 */
1282 PortName?: __string;
1283 }
1284 export type Location = string;
1285 export interface Master {
1286 /**
1287 * Master account ID
1288 */
1289 AccountId?: __string;
1290 /**
1291 * This value is used to validate the master account to the member account.
1292 */
1293 InvitationId?: InvitationId;
1294 /**
1295 * Timestamp at which the invitation was sent
1296 */
1297 InvitedAt?: InvitedAt;
1298 /**
1299 * The status of the relationship between the master and member accounts.
1300 */
1301 RelationshipStatus?: __string;
1302 }
1303 export type MasterId = string;
1304 export type MaxResults = number;
1305 export interface Member {
1306 AccountId: AccountId;
1307 DetectorId?: DetectorId;
1308 /**
1309 * Member account's email address.
1310 */
1311 Email: Email;
1312 /**
1313 * Timestamp at which the invitation was sent
1314 */
1315 InvitedAt?: InvitedAt;
1316 MasterId: MasterId;
1317 /**
1318 * The status of the relationship between the member and the master.
1319 */
1320 RelationshipStatus: __string;
1321 UpdatedAt: UpdatedAt;
1322 }
1323 export type Members = Member[];
1324 export type Message = string;
1325 export type Name = string;
1326 export type Neq = __string[];
1327 export interface NetworkConnectionAction {
1328 /**
1329 * Network connection blocked information.
1330 */
1331 Blocked?: __boolean;
1332 /**
1333 * Network connection direction.
1334 */
1335 ConnectionDirection?: __string;
1336 /**
1337 * Local port information of the connection.
1338 */
1339 LocalPortDetails?: LocalPortDetails;
1340 /**
1341 * Network connection protocol.
1342 */
1343 Protocol?: __string;
1344 /**
1345 * Remote IP information of the connection.
1346 */
1347 RemoteIpDetails?: RemoteIpDetails;
1348 /**
1349 * Remote port information of the connection.
1350 */
1351 RemotePortDetails?: RemotePortDetails;
1352 }
1353 export interface NetworkInterface {
1354 /**
1355 * A list of EC2 instance IPv6 address information.
1356 */
1357 Ipv6Addresses?: Ipv6Addresses;
1358 /**
1359 * The ID of the network interface
1360 */
1361 NetworkInterfaceId?: NetworkInterfaceId;
1362 /**
1363 * Private DNS name of the EC2 instance.
1364 */
1365 PrivateDnsName?: PrivateDnsName;
1366 /**
1367 * Private IP address of the EC2 instance.
1368 */
1369 PrivateIpAddress?: PrivateIpAddress;
1370 /**
1371 * Other private IP address information of the EC2 instance.
1372 */
1373 PrivateIpAddresses?: PrivateIpAddresses;
1374 /**
1375 * Public DNS name of the EC2 instance.
1376 */
1377 PublicDnsName?: __string;
1378 /**
1379 * Public IP address of the EC2 instance.
1380 */
1381 PublicIp?: __string;
1382 /**
1383 * Security groups associated with the EC2 instance.
1384 */
1385 SecurityGroups?: SecurityGroups;
1386 /**
1387 * The subnet ID of the EC2 instance.
1388 */
1389 SubnetId?: __string;
1390 /**
1391 * The VPC ID of the EC2 instance.
1392 */
1393 VpcId?: __string;
1394 }
1395 export type NetworkInterfaceId = string;
1396 export type NetworkInterfaces = NetworkInterface[];
1397 export type NextToken = string;
1398 export type OrderBy = "ASC"|"DESC"|string;
1399 export interface Organization {
1400 /**
1401 * Autonomous system number of the internet provider of the remote IP address.
1402 */
1403 Asn?: __string;
1404 /**
1405 * Organization that registered this ASN.
1406 */
1407 AsnOrg?: __string;
1408 /**
1409 * ISP information for the internet provider.
1410 */
1411 Isp?: __string;
1412 /**
1413 * Name of the internet provider.
1414 */
1415 Org?: __string;
1416 }
1417 export interface PortProbeAction {
1418 /**
1419 * Port probe blocked information.
1420 */
1421 Blocked?: __boolean;
1422 /**
1423 * A list of port probe details objects.
1424 */
1425 PortProbeDetails?: __listOfPortProbeDetail;
1426 }
1427 export interface PortProbeDetail {
1428 /**
1429 * Local port information of the connection.
1430 */
1431 LocalPortDetails?: LocalPortDetails;
1432 /**
1433 * Remote IP information of the connection.
1434 */
1435 RemoteIpDetails?: RemoteIpDetails;
1436 }
1437 export type PrivateDnsName = string;
1438 export type PrivateIpAddress = string;
1439 export interface PrivateIpAddressDetails {
1440 /**
1441 * Private DNS name of the EC2 instance.
1442 */
1443 PrivateDnsName?: PrivateDnsName;
1444 /**
1445 * Private IP address of the EC2 instance.
1446 */
1447 PrivateIpAddress?: PrivateIpAddress;
1448 }
1449 export type PrivateIpAddresses = PrivateIpAddressDetails[];
1450 export interface ProductCode {
1451 /**
1452 * Product code information.
1453 */
1454 Code?: __string;
1455 /**
1456 * Product code type.
1457 */
1458 ProductType?: __string;
1459 }
1460 export type ProductCodes = ProductCode[];
1461 export interface RemoteIpDetails {
1462 /**
1463 * City information of the remote IP address.
1464 */
1465 City?: City;
1466 /**
1467 * Country code of the remote IP address.
1468 */
1469 Country?: Country;
1470 /**
1471 * Location information of the remote IP address.
1472 */
1473 GeoLocation?: GeoLocation;
1474 /**
1475 * IPV4 remote address of the connection.
1476 */
1477 IpAddressV4?: __string;
1478 /**
1479 * ISP Organization information of the remote IP address.
1480 */
1481 Organization?: Organization;
1482 }
1483 export interface RemotePortDetails {
1484 /**
1485 * Port number of the remote connection.
1486 */
1487 Port?: __integer;
1488 /**
1489 * Port name of the remote connection.
1490 */
1491 PortName?: __string;
1492 }
1493 export interface Resource {
1494 AccessKeyDetails?: AccessKeyDetails;
1495 InstanceDetails?: InstanceDetails;
1496 /**
1497 * The type of the AWS resource.
1498 */
1499 ResourceType?: __string;
1500 }
1501 export interface SecurityGroup {
1502 /**
1503 * EC2 instance's security group ID.
1504 */
1505 GroupId?: __string;
1506 /**
1507 * EC2 instance's security group name.
1508 */
1509 GroupName?: __string;
1510 }
1511 export type SecurityGroups = SecurityGroup[];
1512 export interface Service {
1513 /**
1514 * Information about the activity described in a finding.
1515 */
1516 Action?: Action;
1517 /**
1518 * Indicates whether this finding is archived.
1519 */
1520 Archived?: __boolean;
1521 /**
1522 * Total count of the occurrences of this finding type.
1523 */
1524 Count?: __integer;
1525 /**
1526 * Detector ID for the GuardDuty service.
1527 */
1528 DetectorId?: DetectorId;
1529 /**
1530 * First seen timestamp of the activity that prompted GuardDuty to generate this finding.
1531 */
1532 EventFirstSeen?: __string;
1533 /**
1534 * Last seen timestamp of the activity that prompted GuardDuty to generate this finding.
1535 */
1536 EventLastSeen?: __string;
1537 /**
1538 * Resource role information for this finding.
1539 */
1540 ResourceRole?: __string;
1541 /**
1542 * The name of the AWS service (GuardDuty) that generated a finding.
1543 */
1544 ServiceName?: __string;
1545 /**
1546 * Feedback left about the finding.
1547 */
1548 UserFeedback?: __string;
1549 }
1550 export type ServiceRole = string;
1551 export interface SortCriteria {
1552 /**
1553 * Represents the finding attribute (for example, accountId) by which to sort findings.
1554 */
1555 AttributeName?: __string;
1556 /**
1557 * Order by which the sorted findings are to be displayed.
1558 */
1559 OrderBy?: OrderBy;
1560 }
1561 export interface StartMonitoringMembersRequest {
1562 /**
1563 * A list of account IDs of the GuardDuty member accounts whose findings you want the master account to monitor.
1564 */
1565 AccountIds: AccountIds;
1566 /**
1567 * The unique ID of the detector of the GuardDuty account whom you want to re-enable to monitor members' findings.
1568 */
1569 DetectorId: __string;
1570 }
1571 export interface StartMonitoringMembersResponse {
1572 /**
1573 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
1574 */
1575 UnprocessedAccounts?: UnprocessedAccounts;
1576 }
1577 export interface StopMonitoringMembersRequest {
1578 /**
1579 * A list of account IDs of the GuardDuty member accounts whose findings you want the master account to stop monitoring.
1580 */
1581 AccountIds: AccountIds;
1582 /**
1583 * The unique ID of the detector of the GuardDuty account that you want to stop from monitor members' findings.
1584 */
1585 DetectorId: __string;
1586 }
1587 export interface StopMonitoringMembersResponse {
1588 /**
1589 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
1590 */
1591 UnprocessedAccounts?: UnprocessedAccounts;
1592 }
1593 export interface Tag {
1594 /**
1595 * EC2 instance tag key.
1596 */
1597 Key?: __string;
1598 /**
1599 * EC2 instance tag value.
1600 */
1601 Value?: __string;
1602 }
1603 export type Tags = Tag[];
1604 export type ThreatIntelSetFormat = "TXT"|"STIX"|"OTX_CSV"|"ALIEN_VAULT"|"PROOF_POINT"|"FIRE_EYE"|string;
1605 export type ThreatIntelSetId = string;
1606 export type ThreatIntelSetIds = ThreatIntelSetId[];
1607 export type ThreatIntelSetStatus = "INACTIVE"|"ACTIVATING"|"ACTIVE"|"DEACTIVATING"|"ERROR"|"DELETE_PENDING"|"DELETED"|string;
1608 export interface UnarchiveFindingsRequest {
1609 /**
1610 * The ID of the detector that specifies the GuardDuty service whose findings you want to unarchive.
1611 */
1612 DetectorId: __string;
1613 /**
1614 * IDs of the findings that you want to unarchive.
1615 */
1616 FindingIds: FindingIds;
1617 }
1618 export interface UnarchiveFindingsResponse {
1619 }
1620 export interface UnprocessedAccount {
1621 /**
1622 * AWS Account ID.
1623 */
1624 AccountId: __string;
1625 /**
1626 * A reason why the account hasn't been processed.
1627 */
1628 Result: __string;
1629 }
1630 export type UnprocessedAccounts = UnprocessedAccount[];
1631 export interface UpdateDetectorRequest {
1632 /**
1633 * The unique ID of the detector that you want to update.
1634 */
1635 DetectorId: __string;
1636 /**
1637 * Updated boolean value for the detector that specifies whether the detector is enabled.
1638 */
1639 Enable?: Enable;
1640 /**
1641 * A enum value that specifies how frequently customer got Finding updates published.
1642 */
1643 FindingPublishingFrequency?: FindingPublishingFrequency;
1644 }
1645 export interface UpdateDetectorResponse {
1646 }
1647 export interface UpdateFilterRequest {
1648 /**
1649 * Specifies the action that is to be applied to the findings that match the filter.
1650 */
1651 Action?: FilterAction;
1652 /**
1653 * The description of the filter.
1654 */
1655 Description?: FilterDescription;
1656 /**
1657 * The unique ID of the detector that specifies the GuardDuty service where you want to update a filter.
1658 */
1659 DetectorId: __string;
1660 /**
1661 * The name of the filter.
1662 */
1663 FilterName: __string;
1664 /**
1665 * Represents the criteria to be used in the filter for querying findings.
1666 */
1667 FindingCriteria?: FindingCriteria;
1668 /**
1669 * Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
1670 */
1671 Rank?: FilterRank;
1672 }
1673 export interface UpdateFilterResponse {
1674 /**
1675 * The name of the filter.
1676 */
1677 Name?: FilterName;
1678 }
1679 export interface UpdateFindingsFeedbackRequest {
1680 /**
1681 * Additional feedback about the GuardDuty findings.
1682 */
1683 Comments?: Comments;
1684 /**
1685 * The ID of the detector that specifies the GuardDuty service whose findings you want to mark as useful or not useful.
1686 */
1687 DetectorId: __string;
1688 /**
1689 * Valid values: USEFUL | NOT_USEFUL
1690 */
1691 Feedback: Feedback;
1692 /**
1693 * IDs of the findings that you want to mark as useful or not useful.
1694 */
1695 FindingIds: FindingIds;
1696 }
1697 export interface UpdateFindingsFeedbackResponse {
1698 }
1699 export interface UpdateIPSetRequest {
1700 /**
1701 * The updated boolean value that specifies whether the IPSet is active or not.
1702 */
1703 Activate?: Activate;
1704 /**
1705 * The detectorID that specifies the GuardDuty service whose IPSet you want to update.
1706 */
1707 DetectorId: __string;
1708 /**
1709 * The unique ID that specifies the IPSet that you want to update.
1710 */
1711 IpSetId: __string;
1712 /**
1713 * The updated URI of the file that contains the IPSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
1714 */
1715 Location?: Location;
1716 /**
1717 * The unique ID that specifies the IPSet that you want to update.
1718 */
1719 Name?: Name;
1720 }
1721 export interface UpdateIPSetResponse {
1722 }
1723 export interface UpdateThreatIntelSetRequest {
1724 /**
1725 * The updated boolean value that specifies whether the ThreateIntelSet is active or not.
1726 */
1727 Activate?: Activate;
1728 /**
1729 * The detectorID that specifies the GuardDuty service whose ThreatIntelSet you want to update.
1730 */
1731 DetectorId: __string;
1732 /**
1733 * The updated URI of the file that contains the ThreateIntelSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
1734 */
1735 Location?: Location;
1736 /**
1737 * The unique ID that specifies the ThreatIntelSet that you want to update.
1738 */
1739 Name?: Name;
1740 /**
1741 * The unique ID that specifies the ThreatIntelSet that you want to update.
1742 */
1743 ThreatIntelSetId: __string;
1744 }
1745 export interface UpdateThreatIntelSetResponse {
1746 }
1747 export type UpdatedAt = string;
1748 export type __boolean = boolean;
1749 export type __double = number;
1750 export type __integer = number;
1751 export type __listOfPortProbeDetail = PortProbeDetail[];
1752 export type __mapOfCondition = {[key: string]: Condition};
1753 export type __mapOfCountBySeverityFindingStatistic = {[key: string]: CountBySeverityFindingStatistic};
1754 export type __string = string;
1755 export type __stringMin0Max64 = string;
1756 /**
1757 * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
1758 */
1759 export type apiVersion = "2017-11-28"|"latest"|string;
1760 export interface ClientApiVersions {
1761 /**
1762 * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
1763 */
1764 apiVersion?: apiVersion;
1765 }
1766 export type ClientConfiguration = ServiceConfigurationOptions & ClientApiVersions;
1767 /**
1768 * Contains interfaces for use with the GuardDuty client.
1769 */
1770 export import Types = GuardDuty;
1771}
1772export = GuardDuty;