UNPKG

87 kBTypeScriptView Raw
1import {Request} from '../lib/request';
2import {Response} from '../lib/response';
3import {AWSError} from '../lib/error';
4import {Service} from '../lib/service';
5import {ServiceConfigurationOptions} from '../lib/service';
6import {ConfigBase as Config} from '../lib/config';
7interface Blob {}
8declare class GuardDuty extends Service {
9 /**
10 * Constructs a service object. This object has one method for each API operation.
11 */
12 constructor(options?: GuardDuty.Types.ClientConfiguration)
13 config: Config & GuardDuty.Types.ClientConfiguration;
14 /**
15 * Accepts the invitation to be monitored by a master GuardDuty account.
16 */
17 acceptInvitation(params: GuardDuty.Types.AcceptInvitationRequest, callback?: (err: AWSError, data: GuardDuty.Types.AcceptInvitationResponse) => void): Request<GuardDuty.Types.AcceptInvitationResponse, AWSError>;
18 /**
19 * Accepts the invitation to be monitored by a master GuardDuty account.
20 */
21 acceptInvitation(callback?: (err: AWSError, data: GuardDuty.Types.AcceptInvitationResponse) => void): Request<GuardDuty.Types.AcceptInvitationResponse, AWSError>;
22 /**
23 * Archives GuardDuty findings specified by the list of finding IDs. Only the master account can archive findings. Member accounts do not have permission to archive findings from their accounts.
24 */
25 archiveFindings(params: GuardDuty.Types.ArchiveFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ArchiveFindingsResponse) => void): Request<GuardDuty.Types.ArchiveFindingsResponse, AWSError>;
26 /**
27 * Archives GuardDuty findings specified by the list of finding IDs. Only the master account can archive findings. Member accounts do not have permission to archive findings from their accounts.
28 */
29 archiveFindings(callback?: (err: AWSError, data: GuardDuty.Types.ArchiveFindingsResponse) => void): Request<GuardDuty.Types.ArchiveFindingsResponse, AWSError>;
30 /**
31 * Creates a single Amazon GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each region that you enable the service. You can have only one detector per account per region.
32 */
33 createDetector(params: GuardDuty.Types.CreateDetectorRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateDetectorResponse) => void): Request<GuardDuty.Types.CreateDetectorResponse, AWSError>;
34 /**
35 * Creates a single Amazon GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each region that you enable the service. You can have only one detector per account per region.
36 */
37 createDetector(callback?: (err: AWSError, data: GuardDuty.Types.CreateDetectorResponse) => void): Request<GuardDuty.Types.CreateDetectorResponse, AWSError>;
38 /**
39 * Creates a filter using the specified finding criteria.
40 */
41 createFilter(params: GuardDuty.Types.CreateFilterRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateFilterResponse) => void): Request<GuardDuty.Types.CreateFilterResponse, AWSError>;
42 /**
43 * Creates a filter using the specified finding criteria.
44 */
45 createFilter(callback?: (err: AWSError, data: GuardDuty.Types.CreateFilterResponse) => void): Request<GuardDuty.Types.CreateFilterResponse, AWSError>;
46 /**
47 * Creates a new IPSet, called Trusted IP list in the consoler user interface. An IPSet is a list IP addresses trusted for secure communication with AWS infrastructure and applications. GuardDuty does not generate findings for IP addresses included in IPSets. Only users from the master account can use this operation.
48 */
49 createIPSet(params: GuardDuty.Types.CreateIPSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateIPSetResponse) => void): Request<GuardDuty.Types.CreateIPSetResponse, AWSError>;
50 /**
51 * Creates a new IPSet, called Trusted IP list in the consoler user interface. An IPSet is a list IP addresses trusted for secure communication with AWS infrastructure and applications. GuardDuty does not generate findings for IP addresses included in IPSets. Only users from the master account can use this operation.
52 */
53 createIPSet(callback?: (err: AWSError, data: GuardDuty.Types.CreateIPSetResponse) => void): Request<GuardDuty.Types.CreateIPSetResponse, AWSError>;
54 /**
55 * Creates member accounts of the current AWS account by specifying a list of AWS account IDs. The current AWS account can then invite these members to manage GuardDuty in their accounts.
56 */
57 createMembers(params: GuardDuty.Types.CreateMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateMembersResponse) => void): Request<GuardDuty.Types.CreateMembersResponse, AWSError>;
58 /**
59 * Creates member accounts of the current AWS account by specifying a list of AWS account IDs. The current AWS account can then invite these members to manage GuardDuty in their accounts.
60 */
61 createMembers(callback?: (err: AWSError, data: GuardDuty.Types.CreateMembersResponse) => void): Request<GuardDuty.Types.CreateMembersResponse, AWSError>;
62 /**
63 * Creates a publishing destination to send findings to. The resource to send findings to must exist before you use this operation.
64 */
65 createPublishingDestination(params: GuardDuty.Types.CreatePublishingDestinationRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreatePublishingDestinationResponse) => void): Request<GuardDuty.Types.CreatePublishingDestinationResponse, AWSError>;
66 /**
67 * Creates a publishing destination to send findings to. The resource to send findings to must exist before you use this operation.
68 */
69 createPublishingDestination(callback?: (err: AWSError, data: GuardDuty.Types.CreatePublishingDestinationResponse) => void): Request<GuardDuty.Types.CreatePublishingDestinationResponse, AWSError>;
70 /**
71 * Generates example findings of types specified by the list of finding types. If 'NULL' is specified for findingTypes, the API generates example findings of all supported finding types.
72 */
73 createSampleFindings(params: GuardDuty.Types.CreateSampleFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateSampleFindingsResponse) => void): Request<GuardDuty.Types.CreateSampleFindingsResponse, AWSError>;
74 /**
75 * Generates example findings of types specified by the list of finding types. If 'NULL' is specified for findingTypes, the API generates example findings of all supported finding types.
76 */
77 createSampleFindings(callback?: (err: AWSError, data: GuardDuty.Types.CreateSampleFindingsResponse) => void): Request<GuardDuty.Types.CreateSampleFindingsResponse, AWSError>;
78 /**
79 * Create a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the master account can use this operation.
80 */
81 createThreatIntelSet(params: GuardDuty.Types.CreateThreatIntelSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.CreateThreatIntelSetResponse) => void): Request<GuardDuty.Types.CreateThreatIntelSetResponse, AWSError>;
82 /**
83 * Create a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the master account can use this operation.
84 */
85 createThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.CreateThreatIntelSetResponse) => void): Request<GuardDuty.Types.CreateThreatIntelSetResponse, AWSError>;
86 /**
87 * Declines invitations sent to the current member account by AWS account specified by their account IDs.
88 */
89 declineInvitations(params: GuardDuty.Types.DeclineInvitationsRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeclineInvitationsResponse) => void): Request<GuardDuty.Types.DeclineInvitationsResponse, AWSError>;
90 /**
91 * Declines invitations sent to the current member account by AWS account specified by their account IDs.
92 */
93 declineInvitations(callback?: (err: AWSError, data: GuardDuty.Types.DeclineInvitationsResponse) => void): Request<GuardDuty.Types.DeclineInvitationsResponse, AWSError>;
94 /**
95 * Deletes a Amazon GuardDuty detector specified by the detector ID.
96 */
97 deleteDetector(params: GuardDuty.Types.DeleteDetectorRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteDetectorResponse) => void): Request<GuardDuty.Types.DeleteDetectorResponse, AWSError>;
98 /**
99 * Deletes a Amazon GuardDuty detector specified by the detector ID.
100 */
101 deleteDetector(callback?: (err: AWSError, data: GuardDuty.Types.DeleteDetectorResponse) => void): Request<GuardDuty.Types.DeleteDetectorResponse, AWSError>;
102 /**
103 * Deletes the filter specified by the filter name.
104 */
105 deleteFilter(params: GuardDuty.Types.DeleteFilterRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteFilterResponse) => void): Request<GuardDuty.Types.DeleteFilterResponse, AWSError>;
106 /**
107 * Deletes the filter specified by the filter name.
108 */
109 deleteFilter(callback?: (err: AWSError, data: GuardDuty.Types.DeleteFilterResponse) => void): Request<GuardDuty.Types.DeleteFilterResponse, AWSError>;
110 /**
111 * Deletes the IPSet specified by the ipSetId. IPSets are called Trusted IP lists in the console user interface.
112 */
113 deleteIPSet(params: GuardDuty.Types.DeleteIPSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteIPSetResponse) => void): Request<GuardDuty.Types.DeleteIPSetResponse, AWSError>;
114 /**
115 * Deletes the IPSet specified by the ipSetId. IPSets are called Trusted IP lists in the console user interface.
116 */
117 deleteIPSet(callback?: (err: AWSError, data: GuardDuty.Types.DeleteIPSetResponse) => void): Request<GuardDuty.Types.DeleteIPSetResponse, AWSError>;
118 /**
119 * Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
120 */
121 deleteInvitations(params: GuardDuty.Types.DeleteInvitationsRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteInvitationsResponse) => void): Request<GuardDuty.Types.DeleteInvitationsResponse, AWSError>;
122 /**
123 * Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
124 */
125 deleteInvitations(callback?: (err: AWSError, data: GuardDuty.Types.DeleteInvitationsResponse) => void): Request<GuardDuty.Types.DeleteInvitationsResponse, AWSError>;
126 /**
127 * Deletes GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
128 */
129 deleteMembers(params: GuardDuty.Types.DeleteMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteMembersResponse) => void): Request<GuardDuty.Types.DeleteMembersResponse, AWSError>;
130 /**
131 * Deletes GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
132 */
133 deleteMembers(callback?: (err: AWSError, data: GuardDuty.Types.DeleteMembersResponse) => void): Request<GuardDuty.Types.DeleteMembersResponse, AWSError>;
134 /**
135 * Deletes the publishing definition with the specified destinationId.
136 */
137 deletePublishingDestination(params: GuardDuty.Types.DeletePublishingDestinationRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeletePublishingDestinationResponse) => void): Request<GuardDuty.Types.DeletePublishingDestinationResponse, AWSError>;
138 /**
139 * Deletes the publishing definition with the specified destinationId.
140 */
141 deletePublishingDestination(callback?: (err: AWSError, data: GuardDuty.Types.DeletePublishingDestinationResponse) => void): Request<GuardDuty.Types.DeletePublishingDestinationResponse, AWSError>;
142 /**
143 * Deletes ThreatIntelSet specified by the ThreatIntelSet ID.
144 */
145 deleteThreatIntelSet(params: GuardDuty.Types.DeleteThreatIntelSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.DeleteThreatIntelSetResponse) => void): Request<GuardDuty.Types.DeleteThreatIntelSetResponse, AWSError>;
146 /**
147 * Deletes ThreatIntelSet specified by the ThreatIntelSet ID.
148 */
149 deleteThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.DeleteThreatIntelSetResponse) => void): Request<GuardDuty.Types.DeleteThreatIntelSetResponse, AWSError>;
150 /**
151 * Returns information about the publishing destination specified by the provided destinationId.
152 */
153 describePublishingDestination(params: GuardDuty.Types.DescribePublishingDestinationRequest, callback?: (err: AWSError, data: GuardDuty.Types.DescribePublishingDestinationResponse) => void): Request<GuardDuty.Types.DescribePublishingDestinationResponse, AWSError>;
154 /**
155 * Returns information about the publishing destination specified by the provided destinationId.
156 */
157 describePublishingDestination(callback?: (err: AWSError, data: GuardDuty.Types.DescribePublishingDestinationResponse) => void): Request<GuardDuty.Types.DescribePublishingDestinationResponse, AWSError>;
158 /**
159 * Disassociates the current GuardDuty member account from its master account.
160 */
161 disassociateFromMasterAccount(params: GuardDuty.Types.DisassociateFromMasterAccountRequest, callback?: (err: AWSError, data: GuardDuty.Types.DisassociateFromMasterAccountResponse) => void): Request<GuardDuty.Types.DisassociateFromMasterAccountResponse, AWSError>;
162 /**
163 * Disassociates the current GuardDuty member account from its master account.
164 */
165 disassociateFromMasterAccount(callback?: (err: AWSError, data: GuardDuty.Types.DisassociateFromMasterAccountResponse) => void): Request<GuardDuty.Types.DisassociateFromMasterAccountResponse, AWSError>;
166 /**
167 * Disassociates GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
168 */
169 disassociateMembers(params: GuardDuty.Types.DisassociateMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.DisassociateMembersResponse) => void): Request<GuardDuty.Types.DisassociateMembersResponse, AWSError>;
170 /**
171 * Disassociates GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
172 */
173 disassociateMembers(callback?: (err: AWSError, data: GuardDuty.Types.DisassociateMembersResponse) => void): Request<GuardDuty.Types.DisassociateMembersResponse, AWSError>;
174 /**
175 * Retrieves an Amazon GuardDuty detector specified by the detectorId.
176 */
177 getDetector(params: GuardDuty.Types.GetDetectorRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetDetectorResponse) => void): Request<GuardDuty.Types.GetDetectorResponse, AWSError>;
178 /**
179 * Retrieves an Amazon GuardDuty detector specified by the detectorId.
180 */
181 getDetector(callback?: (err: AWSError, data: GuardDuty.Types.GetDetectorResponse) => void): Request<GuardDuty.Types.GetDetectorResponse, AWSError>;
182 /**
183 * Returns the details of the filter specified by the filter name.
184 */
185 getFilter(params: GuardDuty.Types.GetFilterRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetFilterResponse) => void): Request<GuardDuty.Types.GetFilterResponse, AWSError>;
186 /**
187 * Returns the details of the filter specified by the filter name.
188 */
189 getFilter(callback?: (err: AWSError, data: GuardDuty.Types.GetFilterResponse) => void): Request<GuardDuty.Types.GetFilterResponse, AWSError>;
190 /**
191 * Describes Amazon GuardDuty findings specified by finding IDs.
192 */
193 getFindings(params: GuardDuty.Types.GetFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetFindingsResponse) => void): Request<GuardDuty.Types.GetFindingsResponse, AWSError>;
194 /**
195 * Describes Amazon GuardDuty findings specified by finding IDs.
196 */
197 getFindings(callback?: (err: AWSError, data: GuardDuty.Types.GetFindingsResponse) => void): Request<GuardDuty.Types.GetFindingsResponse, AWSError>;
198 /**
199 * Lists Amazon GuardDuty findings' statistics for the specified detector ID.
200 */
201 getFindingsStatistics(params: GuardDuty.Types.GetFindingsStatisticsRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetFindingsStatisticsResponse) => void): Request<GuardDuty.Types.GetFindingsStatisticsResponse, AWSError>;
202 /**
203 * Lists Amazon GuardDuty findings' statistics for the specified detector ID.
204 */
205 getFindingsStatistics(callback?: (err: AWSError, data: GuardDuty.Types.GetFindingsStatisticsResponse) => void): Request<GuardDuty.Types.GetFindingsStatisticsResponse, AWSError>;
206 /**
207 * Retrieves the IPSet specified by the ipSetId.
208 */
209 getIPSet(params: GuardDuty.Types.GetIPSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetIPSetResponse) => void): Request<GuardDuty.Types.GetIPSetResponse, AWSError>;
210 /**
211 * Retrieves the IPSet specified by the ipSetId.
212 */
213 getIPSet(callback?: (err: AWSError, data: GuardDuty.Types.GetIPSetResponse) => void): Request<GuardDuty.Types.GetIPSetResponse, AWSError>;
214 /**
215 * Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
216 */
217 getInvitationsCount(params: GuardDuty.Types.GetInvitationsCountRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetInvitationsCountResponse) => void): Request<GuardDuty.Types.GetInvitationsCountResponse, AWSError>;
218 /**
219 * Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
220 */
221 getInvitationsCount(callback?: (err: AWSError, data: GuardDuty.Types.GetInvitationsCountResponse) => void): Request<GuardDuty.Types.GetInvitationsCountResponse, AWSError>;
222 /**
223 * Provides the details for the GuardDuty master account associated with the current GuardDuty member account.
224 */
225 getMasterAccount(params: GuardDuty.Types.GetMasterAccountRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetMasterAccountResponse) => void): Request<GuardDuty.Types.GetMasterAccountResponse, AWSError>;
226 /**
227 * Provides the details for the GuardDuty master account associated with the current GuardDuty member account.
228 */
229 getMasterAccount(callback?: (err: AWSError, data: GuardDuty.Types.GetMasterAccountResponse) => void): Request<GuardDuty.Types.GetMasterAccountResponse, AWSError>;
230 /**
231 * Retrieves GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
232 */
233 getMembers(params: GuardDuty.Types.GetMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetMembersResponse) => void): Request<GuardDuty.Types.GetMembersResponse, AWSError>;
234 /**
235 * Retrieves GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
236 */
237 getMembers(callback?: (err: AWSError, data: GuardDuty.Types.GetMembersResponse) => void): Request<GuardDuty.Types.GetMembersResponse, AWSError>;
238 /**
239 * Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
240 */
241 getThreatIntelSet(params: GuardDuty.Types.GetThreatIntelSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.GetThreatIntelSetResponse) => void): Request<GuardDuty.Types.GetThreatIntelSetResponse, AWSError>;
242 /**
243 * Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
244 */
245 getThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.GetThreatIntelSetResponse) => void): Request<GuardDuty.Types.GetThreatIntelSetResponse, AWSError>;
246 /**
247 * Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty and allow the current AWS account to view and manage these accounts' GuardDuty findings on their behalf as the master account.
248 */
249 inviteMembers(params: GuardDuty.Types.InviteMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.InviteMembersResponse) => void): Request<GuardDuty.Types.InviteMembersResponse, AWSError>;
250 /**
251 * Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty and allow the current AWS account to view and manage these accounts' GuardDuty findings on their behalf as the master account.
252 */
253 inviteMembers(callback?: (err: AWSError, data: GuardDuty.Types.InviteMembersResponse) => void): Request<GuardDuty.Types.InviteMembersResponse, AWSError>;
254 /**
255 * Lists detectorIds of all the existing Amazon GuardDuty detector resources.
256 */
257 listDetectors(params: GuardDuty.Types.ListDetectorsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListDetectorsResponse) => void): Request<GuardDuty.Types.ListDetectorsResponse, AWSError>;
258 /**
259 * Lists detectorIds of all the existing Amazon GuardDuty detector resources.
260 */
261 listDetectors(callback?: (err: AWSError, data: GuardDuty.Types.ListDetectorsResponse) => void): Request<GuardDuty.Types.ListDetectorsResponse, AWSError>;
262 /**
263 * Returns a paginated list of the current filters.
264 */
265 listFilters(params: GuardDuty.Types.ListFiltersRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListFiltersResponse) => void): Request<GuardDuty.Types.ListFiltersResponse, AWSError>;
266 /**
267 * Returns a paginated list of the current filters.
268 */
269 listFilters(callback?: (err: AWSError, data: GuardDuty.Types.ListFiltersResponse) => void): Request<GuardDuty.Types.ListFiltersResponse, AWSError>;
270 /**
271 * Lists Amazon GuardDuty findings for the specified detector ID.
272 */
273 listFindings(params: GuardDuty.Types.ListFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListFindingsResponse) => void): Request<GuardDuty.Types.ListFindingsResponse, AWSError>;
274 /**
275 * Lists Amazon GuardDuty findings for the specified detector ID.
276 */
277 listFindings(callback?: (err: AWSError, data: GuardDuty.Types.ListFindingsResponse) => void): Request<GuardDuty.Types.ListFindingsResponse, AWSError>;
278 /**
279 * Lists the IPSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the IPSets returned are the IPSets from the associated master account.
280 */
281 listIPSets(params: GuardDuty.Types.ListIPSetsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListIPSetsResponse) => void): Request<GuardDuty.Types.ListIPSetsResponse, AWSError>;
282 /**
283 * Lists the IPSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the IPSets returned are the IPSets from the associated master account.
284 */
285 listIPSets(callback?: (err: AWSError, data: GuardDuty.Types.ListIPSetsResponse) => void): Request<GuardDuty.Types.ListIPSetsResponse, AWSError>;
286 /**
287 * Lists all GuardDuty membership invitations that were sent to the current AWS account.
288 */
289 listInvitations(params: GuardDuty.Types.ListInvitationsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListInvitationsResponse) => void): Request<GuardDuty.Types.ListInvitationsResponse, AWSError>;
290 /**
291 * Lists all GuardDuty membership invitations that were sent to the current AWS account.
292 */
293 listInvitations(callback?: (err: AWSError, data: GuardDuty.Types.ListInvitationsResponse) => void): Request<GuardDuty.Types.ListInvitationsResponse, AWSError>;
294 /**
295 * Lists details about all member accounts for the current GuardDuty master account.
296 */
297 listMembers(params: GuardDuty.Types.ListMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListMembersResponse) => void): Request<GuardDuty.Types.ListMembersResponse, AWSError>;
298 /**
299 * Lists details about all member accounts for the current GuardDuty master account.
300 */
301 listMembers(callback?: (err: AWSError, data: GuardDuty.Types.ListMembersResponse) => void): Request<GuardDuty.Types.ListMembersResponse, AWSError>;
302 /**
303 * Returns a list of publishing destinations associated with the specified dectectorId.
304 */
305 listPublishingDestinations(params: GuardDuty.Types.ListPublishingDestinationsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListPublishingDestinationsResponse) => void): Request<GuardDuty.Types.ListPublishingDestinationsResponse, AWSError>;
306 /**
307 * Returns a list of publishing destinations associated with the specified dectectorId.
308 */
309 listPublishingDestinations(callback?: (err: AWSError, data: GuardDuty.Types.ListPublishingDestinationsResponse) => void): Request<GuardDuty.Types.ListPublishingDestinationsResponse, AWSError>;
310 /**
311 * Lists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, and Threat Intel sets, with a limit of 50 tags per resource. When invoked, this operation returns all assigned tags for a given resource..
312 */
313 listTagsForResource(params: GuardDuty.Types.ListTagsForResourceRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListTagsForResourceResponse) => void): Request<GuardDuty.Types.ListTagsForResourceResponse, AWSError>;
314 /**
315 * Lists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, and Threat Intel sets, with a limit of 50 tags per resource. When invoked, this operation returns all assigned tags for a given resource..
316 */
317 listTagsForResource(callback?: (err: AWSError, data: GuardDuty.Types.ListTagsForResourceResponse) => void): Request<GuardDuty.Types.ListTagsForResourceResponse, AWSError>;
318 /**
319 * Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the ThreatIntelSets associated with the master account are returned.
320 */
321 listThreatIntelSets(params: GuardDuty.Types.ListThreatIntelSetsRequest, callback?: (err: AWSError, data: GuardDuty.Types.ListThreatIntelSetsResponse) => void): Request<GuardDuty.Types.ListThreatIntelSetsResponse, AWSError>;
322 /**
323 * Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the ThreatIntelSets associated with the master account are returned.
324 */
325 listThreatIntelSets(callback?: (err: AWSError, data: GuardDuty.Types.ListThreatIntelSetsResponse) => void): Request<GuardDuty.Types.ListThreatIntelSetsResponse, AWSError>;
326 /**
327 * Turns on GuardDuty monitoring of the specified member accounts. Use this operation to restart monitoring of accounts that you stopped monitoring with the StopMonitoringMembers operation.
328 */
329 startMonitoringMembers(params: GuardDuty.Types.StartMonitoringMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.StartMonitoringMembersResponse) => void): Request<GuardDuty.Types.StartMonitoringMembersResponse, AWSError>;
330 /**
331 * Turns on GuardDuty monitoring of the specified member accounts. Use this operation to restart monitoring of accounts that you stopped monitoring with the StopMonitoringMembers operation.
332 */
333 startMonitoringMembers(callback?: (err: AWSError, data: GuardDuty.Types.StartMonitoringMembersResponse) => void): Request<GuardDuty.Types.StartMonitoringMembersResponse, AWSError>;
334 /**
335 * Stops GuardDuty monitoring for the specified member accounnts. Use the StartMonitoringMembers to restart monitoring for those accounts.
336 */
337 stopMonitoringMembers(params: GuardDuty.Types.StopMonitoringMembersRequest, callback?: (err: AWSError, data: GuardDuty.Types.StopMonitoringMembersResponse) => void): Request<GuardDuty.Types.StopMonitoringMembersResponse, AWSError>;
338 /**
339 * Stops GuardDuty monitoring for the specified member accounnts. Use the StartMonitoringMembers to restart monitoring for those accounts.
340 */
341 stopMonitoringMembers(callback?: (err: AWSError, data: GuardDuty.Types.StopMonitoringMembersResponse) => void): Request<GuardDuty.Types.StopMonitoringMembersResponse, AWSError>;
342 /**
343 * Adds tags to a resource.
344 */
345 tagResource(params: GuardDuty.Types.TagResourceRequest, callback?: (err: AWSError, data: GuardDuty.Types.TagResourceResponse) => void): Request<GuardDuty.Types.TagResourceResponse, AWSError>;
346 /**
347 * Adds tags to a resource.
348 */
349 tagResource(callback?: (err: AWSError, data: GuardDuty.Types.TagResourceResponse) => void): Request<GuardDuty.Types.TagResourceResponse, AWSError>;
350 /**
351 * Unarchives GuardDuty findings specified by the findingIds.
352 */
353 unarchiveFindings(params: GuardDuty.Types.UnarchiveFindingsRequest, callback?: (err: AWSError, data: GuardDuty.Types.UnarchiveFindingsResponse) => void): Request<GuardDuty.Types.UnarchiveFindingsResponse, AWSError>;
354 /**
355 * Unarchives GuardDuty findings specified by the findingIds.
356 */
357 unarchiveFindings(callback?: (err: AWSError, data: GuardDuty.Types.UnarchiveFindingsResponse) => void): Request<GuardDuty.Types.UnarchiveFindingsResponse, AWSError>;
358 /**
359 * Removes tags from a resource.
360 */
361 untagResource(params: GuardDuty.Types.UntagResourceRequest, callback?: (err: AWSError, data: GuardDuty.Types.UntagResourceResponse) => void): Request<GuardDuty.Types.UntagResourceResponse, AWSError>;
362 /**
363 * Removes tags from a resource.
364 */
365 untagResource(callback?: (err: AWSError, data: GuardDuty.Types.UntagResourceResponse) => void): Request<GuardDuty.Types.UntagResourceResponse, AWSError>;
366 /**
367 * Updates the Amazon GuardDuty detector specified by the detectorId.
368 */
369 updateDetector(params: GuardDuty.Types.UpdateDetectorRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateDetectorResponse) => void): Request<GuardDuty.Types.UpdateDetectorResponse, AWSError>;
370 /**
371 * Updates the Amazon GuardDuty detector specified by the detectorId.
372 */
373 updateDetector(callback?: (err: AWSError, data: GuardDuty.Types.UpdateDetectorResponse) => void): Request<GuardDuty.Types.UpdateDetectorResponse, AWSError>;
374 /**
375 * Updates the filter specified by the filter name.
376 */
377 updateFilter(params: GuardDuty.Types.UpdateFilterRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateFilterResponse) => void): Request<GuardDuty.Types.UpdateFilterResponse, AWSError>;
378 /**
379 * Updates the filter specified by the filter name.
380 */
381 updateFilter(callback?: (err: AWSError, data: GuardDuty.Types.UpdateFilterResponse) => void): Request<GuardDuty.Types.UpdateFilterResponse, AWSError>;
382 /**
383 * Marks the specified GuardDuty findings as useful or not useful.
384 */
385 updateFindingsFeedback(params: GuardDuty.Types.UpdateFindingsFeedbackRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateFindingsFeedbackResponse) => void): Request<GuardDuty.Types.UpdateFindingsFeedbackResponse, AWSError>;
386 /**
387 * Marks the specified GuardDuty findings as useful or not useful.
388 */
389 updateFindingsFeedback(callback?: (err: AWSError, data: GuardDuty.Types.UpdateFindingsFeedbackResponse) => void): Request<GuardDuty.Types.UpdateFindingsFeedbackResponse, AWSError>;
390 /**
391 * Updates the IPSet specified by the IPSet ID.
392 */
393 updateIPSet(params: GuardDuty.Types.UpdateIPSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateIPSetResponse) => void): Request<GuardDuty.Types.UpdateIPSetResponse, AWSError>;
394 /**
395 * Updates the IPSet specified by the IPSet ID.
396 */
397 updateIPSet(callback?: (err: AWSError, data: GuardDuty.Types.UpdateIPSetResponse) => void): Request<GuardDuty.Types.UpdateIPSetResponse, AWSError>;
398 /**
399 * Updates information about the publishing destination specified by the destinationId.
400 */
401 updatePublishingDestination(params: GuardDuty.Types.UpdatePublishingDestinationRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdatePublishingDestinationResponse) => void): Request<GuardDuty.Types.UpdatePublishingDestinationResponse, AWSError>;
402 /**
403 * Updates information about the publishing destination specified by the destinationId.
404 */
405 updatePublishingDestination(callback?: (err: AWSError, data: GuardDuty.Types.UpdatePublishingDestinationResponse) => void): Request<GuardDuty.Types.UpdatePublishingDestinationResponse, AWSError>;
406 /**
407 * Updates the ThreatIntelSet specified by ThreatIntelSet ID.
408 */
409 updateThreatIntelSet(params: GuardDuty.Types.UpdateThreatIntelSetRequest, callback?: (err: AWSError, data: GuardDuty.Types.UpdateThreatIntelSetResponse) => void): Request<GuardDuty.Types.UpdateThreatIntelSetResponse, AWSError>;
410 /**
411 * Updates the ThreatIntelSet specified by ThreatIntelSet ID.
412 */
413 updateThreatIntelSet(callback?: (err: AWSError, data: GuardDuty.Types.UpdateThreatIntelSetResponse) => void): Request<GuardDuty.Types.UpdateThreatIntelSetResponse, AWSError>;
414}
415declare namespace GuardDuty {
416 export interface AcceptInvitationRequest {
417 /**
418 * The unique ID of the detector of the GuardDuty member account.
419 */
420 DetectorId: DetectorId;
421 /**
422 * The account ID of the master GuardDuty account whose invitation you're accepting.
423 */
424 MasterId: String;
425 /**
426 * This value is used to validate the master account to the member account.
427 */
428 InvitationId: String;
429 }
430 export interface AcceptInvitationResponse {
431 }
432 export interface AccessKeyDetails {
433 /**
434 * Access key ID of the user.
435 */
436 AccessKeyId?: String;
437 /**
438 * The principal ID of the user.
439 */
440 PrincipalId?: String;
441 /**
442 * The name of the user.
443 */
444 UserName?: String;
445 /**
446 * The type of the user.
447 */
448 UserType?: String;
449 }
450 export interface AccountDetail {
451 /**
452 * Member account ID.
453 */
454 AccountId: AccountId;
455 /**
456 * Member account's email address.
457 */
458 Email: Email;
459 }
460 export type AccountDetails = AccountDetail[];
461 export type AccountId = string;
462 export type AccountIds = AccountId[];
463 export interface Action {
464 /**
465 * GuardDuty Finding activity type.
466 */
467 ActionType?: String;
468 /**
469 * Information about the AWS_API_CALL action described in this finding.
470 */
471 AwsApiCallAction?: AwsApiCallAction;
472 /**
473 * Information about the DNS_REQUEST action described in this finding.
474 */
475 DnsRequestAction?: DnsRequestAction;
476 /**
477 * Information about the NETWORK_CONNECTION action described in this finding.
478 */
479 NetworkConnectionAction?: NetworkConnectionAction;
480 /**
481 * Information about the PORT_PROBE action described in this finding.
482 */
483 PortProbeAction?: PortProbeAction;
484 }
485 export interface ArchiveFindingsRequest {
486 /**
487 * The ID of the detector that specifies the GuardDuty service whose findings you want to archive.
488 */
489 DetectorId: DetectorId;
490 /**
491 * IDs of the findings that you want to archive.
492 */
493 FindingIds: FindingIds;
494 }
495 export interface ArchiveFindingsResponse {
496 }
497 export interface AwsApiCallAction {
498 /**
499 * AWS API name.
500 */
501 Api?: String;
502 /**
503 * AWS API caller type.
504 */
505 CallerType?: String;
506 /**
507 * Domain information for the AWS API call.
508 */
509 DomainDetails?: DomainDetails;
510 /**
511 * Remote IP information of the connection.
512 */
513 RemoteIpDetails?: RemoteIpDetails;
514 /**
515 * AWS service name whose API was invoked.
516 */
517 ServiceName?: String;
518 }
519 export type Boolean = boolean;
520 export interface City {
521 /**
522 * City name of the remote IP address.
523 */
524 CityName?: String;
525 }
526 export type ClientToken = string;
527 export interface Condition {
528 /**
529 * Represents the equal condition to be applied to a single field when querying for findings.
530 */
531 Eq?: Eq;
532 /**
533 * Represents the not equal condition to be applied to a single field when querying for findings.
534 */
535 Neq?: Neq;
536 /**
537 * Represents a greater than condition to be applied to a single field when querying for findings.
538 */
539 Gt?: Integer;
540 /**
541 * Represents a greater than equal condition to be applied to a single field when querying for findings.
542 */
543 Gte?: Integer;
544 /**
545 * Represents a less than condition to be applied to a single field when querying for findings.
546 */
547 Lt?: Integer;
548 /**
549 * Represents a less than equal condition to be applied to a single field when querying for findings.
550 */
551 Lte?: Integer;
552 /**
553 * Represents an equal condition to be applied to a single field when querying for findings.
554 */
555 Equals?: Equals;
556 /**
557 * Represents an not equal condition to be applied to a single field when querying for findings.
558 */
559 NotEquals?: NotEquals;
560 /**
561 * Represents a greater than condition to be applied to a single field when querying for findings.
562 */
563 GreaterThan?: Long;
564 /**
565 * Represents a greater than equal condition to be applied to a single field when querying for findings.
566 */
567 GreaterThanOrEqual?: Long;
568 /**
569 * Represents a less than condition to be applied to a single field when querying for findings.
570 */
571 LessThan?: Long;
572 /**
573 * Represents a less than equal condition to be applied to a single field when querying for findings.
574 */
575 LessThanOrEqual?: Long;
576 }
577 export type CountBySeverity = {[key: string]: Integer};
578 export interface Country {
579 /**
580 * Country code of the remote IP address.
581 */
582 CountryCode?: String;
583 /**
584 * Country name of the remote IP address.
585 */
586 CountryName?: String;
587 }
588 export interface CreateDetectorRequest {
589 /**
590 * A boolean value that specifies whether the detector is to be enabled.
591 */
592 Enable: Boolean;
593 /**
594 * The idempotency token for the create request.
595 */
596 ClientToken?: ClientToken;
597 /**
598 * A enum value that specifies how frequently customer got Finding updates published.
599 */
600 FindingPublishingFrequency?: FindingPublishingFrequency;
601 /**
602 * The tags to be added to a new detector resource.
603 */
604 Tags?: TagMap;
605 }
606 export interface CreateDetectorResponse {
607 /**
608 * The unique ID of the created detector.
609 */
610 DetectorId?: DetectorId;
611 }
612 export interface CreateFilterRequest {
613 /**
614 * The unique ID of the detector of the GuardDuty account for which you want to create a filter.
615 */
616 DetectorId: DetectorId;
617 /**
618 * The name of the filter.
619 */
620 Name: FilterName;
621 /**
622 * The description of the filter.
623 */
624 Description?: FilterDescription;
625 /**
626 * Specifies the action that is to be applied to the findings that match the filter.
627 */
628 Action?: FilterAction;
629 /**
630 * Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
631 */
632 Rank?: FilterRank;
633 /**
634 * Represents the criteria to be used in the filter for querying findings.
635 */
636 FindingCriteria: FindingCriteria;
637 /**
638 * The idempotency token for the create request.
639 */
640 ClientToken?: ClientToken;
641 /**
642 * The tags to be added to a new filter resource.
643 */
644 Tags?: TagMap;
645 }
646 export interface CreateFilterResponse {
647 /**
648 * The name of the successfully created filter.
649 */
650 Name: FilterName;
651 }
652 export interface CreateIPSetRequest {
653 /**
654 * The unique ID of the detector of the GuardDuty account for which you want to create an IPSet.
655 */
656 DetectorId: DetectorId;
657 /**
658 * The user friendly name to identify the IPSet. This name is displayed in all findings that are triggered by activity that involves IP addresses included in this IPSet.
659 */
660 Name: Name;
661 /**
662 * The format of the file that contains the IPSet.
663 */
664 Format: IpSetFormat;
665 /**
666 * The URI of the file that contains the IPSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
667 */
668 Location: Location;
669 /**
670 * A boolean value that indicates whether GuardDuty is to start using the uploaded IPSet.
671 */
672 Activate: Boolean;
673 /**
674 * The idempotency token for the create request.
675 */
676 ClientToken?: ClientToken;
677 /**
678 * The tags to be added to a new IP set resource.
679 */
680 Tags?: TagMap;
681 }
682 export interface CreateIPSetResponse {
683 /**
684 * The ID of the IPSet resource.
685 */
686 IpSetId: String;
687 }
688 export interface CreateMembersRequest {
689 /**
690 * The unique ID of the detector of the GuardDuty account with which you want to associate member accounts.
691 */
692 DetectorId: DetectorId;
693 /**
694 * A list of account ID and email address pairs of the accounts that you want to associate with the master GuardDuty account.
695 */
696 AccountDetails: AccountDetails;
697 }
698 export interface CreateMembersResponse {
699 /**
700 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
701 */
702 UnprocessedAccounts: UnprocessedAccounts;
703 }
704 export interface CreatePublishingDestinationRequest {
705 /**
706 * The ID of the GuardDuty detector associated with the publishing destination.
707 */
708 DetectorId: DetectorId;
709 /**
710 * The type of resource for the publishing destination. Currently only S3 is supported.
711 */
712 DestinationType: DestinationType;
713 /**
714 * Properties of the publishing destination, including the ARNs for the destination and the KMS key used for encryption.
715 */
716 DestinationProperties: DestinationProperties;
717 /**
718 * The idempotency token for the request.
719 */
720 ClientToken?: ClientToken;
721 }
722 export interface CreatePublishingDestinationResponse {
723 /**
724 * The ID of the publishing destination created.
725 */
726 DestinationId: String;
727 }
728 export interface CreateSampleFindingsRequest {
729 /**
730 * The ID of the detector to create sample findings for.
731 */
732 DetectorId: DetectorId;
733 /**
734 * Types of sample findings to generate.
735 */
736 FindingTypes?: FindingTypes;
737 }
738 export interface CreateSampleFindingsResponse {
739 }
740 export interface CreateThreatIntelSetRequest {
741 /**
742 * The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet.
743 */
744 DetectorId: DetectorId;
745 /**
746 * A user-friendly ThreatIntelSet name that is displayed in all finding generated by activity that involves IP addresses included in this ThreatIntelSet.
747 */
748 Name: Name;
749 /**
750 * The format of the file that contains the ThreatIntelSet.
751 */
752 Format: ThreatIntelSetFormat;
753 /**
754 * The URI of the file that contains the ThreatIntelSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
755 */
756 Location: Location;
757 /**
758 * A boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.
759 */
760 Activate: Boolean;
761 /**
762 * The idempotency token for the create request.
763 */
764 ClientToken?: ClientToken;
765 /**
766 * The tags to be added to a new Threat List resource.
767 */
768 Tags?: TagMap;
769 }
770 export interface CreateThreatIntelSetResponse {
771 /**
772 * The ID of the ThreatIntelSet resource.
773 */
774 ThreatIntelSetId: String;
775 }
776 export type Criterion = {[key: string]: Condition};
777 export interface DeclineInvitationsRequest {
778 /**
779 * A list of account IDs of the AWS accounts that sent invitations to the current member account that you want to decline invitations from.
780 */
781 AccountIds: AccountIds;
782 }
783 export interface DeclineInvitationsResponse {
784 /**
785 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
786 */
787 UnprocessedAccounts: UnprocessedAccounts;
788 }
789 export interface DeleteDetectorRequest {
790 /**
791 * The unique ID of the detector that you want to delete.
792 */
793 DetectorId: DetectorId;
794 }
795 export interface DeleteDetectorResponse {
796 }
797 export interface DeleteFilterRequest {
798 /**
799 * The unique ID of the detector the filter is associated with.
800 */
801 DetectorId: DetectorId;
802 /**
803 * The name of the filter you want to delete.
804 */
805 FilterName: String;
806 }
807 export interface DeleteFilterResponse {
808 }
809 export interface DeleteIPSetRequest {
810 /**
811 * The unique ID of the detector associated with the IPSet.
812 */
813 DetectorId: DetectorId;
814 /**
815 * The unique ID of the IPSet to delete.
816 */
817 IpSetId: String;
818 }
819 export interface DeleteIPSetResponse {
820 }
821 export interface DeleteInvitationsRequest {
822 /**
823 * A list of account IDs of the AWS accounts that sent invitations to the current member account that you want to delete invitations from.
824 */
825 AccountIds: AccountIds;
826 }
827 export interface DeleteInvitationsResponse {
828 /**
829 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
830 */
831 UnprocessedAccounts: UnprocessedAccounts;
832 }
833 export interface DeleteMembersRequest {
834 /**
835 * The unique ID of the detector of the GuardDuty account whose members you want to delete.
836 */
837 DetectorId: DetectorId;
838 /**
839 * A list of account IDs of the GuardDuty member accounts that you want to delete.
840 */
841 AccountIds: AccountIds;
842 }
843 export interface DeleteMembersResponse {
844 /**
845 * The accounts that could not be processed.
846 */
847 UnprocessedAccounts: UnprocessedAccounts;
848 }
849 export interface DeletePublishingDestinationRequest {
850 /**
851 * The unique ID of the detector associated with the publishing destination to delete.
852 */
853 DetectorId: DetectorId;
854 /**
855 * The ID of the publishing destination to delete.
856 */
857 DestinationId: String;
858 }
859 export interface DeletePublishingDestinationResponse {
860 }
861 export interface DeleteThreatIntelSetRequest {
862 /**
863 * The unique ID of the detector the threatIntelSet is associated with.
864 */
865 DetectorId: DetectorId;
866 /**
867 * The unique ID of the threatIntelSet you want to delete.
868 */
869 ThreatIntelSetId: String;
870 }
871 export interface DeleteThreatIntelSetResponse {
872 }
873 export interface DescribePublishingDestinationRequest {
874 /**
875 * The unique ID of the detector associated with the publishing destination to retrieve.
876 */
877 DetectorId: DetectorId;
878 /**
879 * The ID of the publishing destination to retrieve.
880 */
881 DestinationId: String;
882 }
883 export interface DescribePublishingDestinationResponse {
884 /**
885 * The ID of the publishing destination.
886 */
887 DestinationId: String;
888 /**
889 * The type of the publishing destination. Currently, only S3 is supported.
890 */
891 DestinationType: DestinationType;
892 /**
893 * The status of the publishing destination.
894 */
895 Status: PublishingStatus;
896 /**
897 * The time, in epoch millisecond format, at which GuardDuty was first unable to publish findings to the destination.
898 */
899 PublishingFailureStartTimestamp: Long;
900 /**
901 * A DestinationProperties object that includes the DestinationArn and KmsKeyArn of the publishing destination.
902 */
903 DestinationProperties: DestinationProperties;
904 }
905 export interface Destination {
906 /**
907 * The unique ID of the publishing destination.
908 */
909 DestinationId: String;
910 /**
911 * The type of resource used for the publishing destination. Currently, only S3 is supported.
912 */
913 DestinationType: DestinationType;
914 /**
915 * The status of the publishing destination.
916 */
917 Status: PublishingStatus;
918 }
919 export interface DestinationProperties {
920 /**
921 * The ARN of the resource to publish to.
922 */
923 DestinationArn?: String;
924 /**
925 * The ARN of the KMS key to use for encryption.
926 */
927 KmsKeyArn?: String;
928 }
929 export type DestinationType = "S3"|string;
930 export type Destinations = Destination[];
931 export type DetectorId = string;
932 export type DetectorIds = DetectorId[];
933 export type DetectorStatus = "ENABLED"|"DISABLED"|string;
934 export interface DisassociateFromMasterAccountRequest {
935 /**
936 * The unique ID of the detector of the GuardDuty member account.
937 */
938 DetectorId: DetectorId;
939 }
940 export interface DisassociateFromMasterAccountResponse {
941 }
942 export interface DisassociateMembersRequest {
943 /**
944 * The unique ID of the detector of the GuardDuty account whose members you want to disassociate from master.
945 */
946 DetectorId: DetectorId;
947 /**
948 * A list of account IDs of the GuardDuty member accounts that you want to disassociate from master.
949 */
950 AccountIds: AccountIds;
951 }
952 export interface DisassociateMembersResponse {
953 /**
954 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
955 */
956 UnprocessedAccounts: UnprocessedAccounts;
957 }
958 export interface DnsRequestAction {
959 /**
960 * Domain information for the API request.
961 */
962 Domain?: String;
963 }
964 export interface DomainDetails {
965 /**
966 * Domain information for the AWS API call.
967 */
968 Domain?: String;
969 }
970 export type Double = number;
971 export type Email = string;
972 export type Eq = String[];
973 export type Equals = String[];
974 export interface Evidence {
975 /**
976 * A list of threat intelligence details related to the evidence.
977 */
978 ThreatIntelligenceDetails?: ThreatIntelligenceDetails;
979 }
980 export type Feedback = "USEFUL"|"NOT_USEFUL"|string;
981 export type FilterAction = "NOOP"|"ARCHIVE"|string;
982 export type FilterDescription = string;
983 export type FilterName = string;
984 export type FilterNames = FilterName[];
985 export type FilterRank = number;
986 export interface Finding {
987 /**
988 * The ID of the account in which the finding was generated.
989 */
990 AccountId: String;
991 /**
992 * The ARN for the finding.
993 */
994 Arn: String;
995 /**
996 * The confidence score for the finding.
997 */
998 Confidence?: Double;
999 /**
1000 * The time and date at which the finding was created.
1001 */
1002 CreatedAt: String;
1003 /**
1004 * The description of the finding.
1005 */
1006 Description?: String;
1007 /**
1008 * The ID of the finding.
1009 */
1010 Id: String;
1011 /**
1012 * The partition associated with the finding.
1013 */
1014 Partition?: String;
1015 /**
1016 * The Region in which the finding was generated.
1017 */
1018 Region: String;
1019 Resource: Resource;
1020 /**
1021 * The version of the schema used for the finding.
1022 */
1023 SchemaVersion: String;
1024 Service?: Service;
1025 /**
1026 * The severity of the finding.
1027 */
1028 Severity: Double;
1029 /**
1030 * The title for the finding.
1031 */
1032 Title?: String;
1033 /**
1034 * The type of the finding.
1035 */
1036 Type: FindingType;
1037 /**
1038 * The time and date at which the finding was laste updated.
1039 */
1040 UpdatedAt: String;
1041 }
1042 export interface FindingCriteria {
1043 /**
1044 * Represents a map of finding properties that match specified conditions and values when querying findings.
1045 */
1046 Criterion?: Criterion;
1047 }
1048 export type FindingId = string;
1049 export type FindingIds = FindingId[];
1050 export type FindingPublishingFrequency = "FIFTEEN_MINUTES"|"ONE_HOUR"|"SIX_HOURS"|string;
1051 export type FindingStatisticType = "COUNT_BY_SEVERITY"|string;
1052 export type FindingStatisticTypes = FindingStatisticType[];
1053 export interface FindingStatistics {
1054 /**
1055 * Represents a map of severity to count statistic for a set of findings
1056 */
1057 CountBySeverity?: CountBySeverity;
1058 }
1059 export type FindingType = string;
1060 export type FindingTypes = FindingType[];
1061 export type Findings = Finding[];
1062 export interface GeoLocation {
1063 /**
1064 * Latitude information of remote IP address.
1065 */
1066 Lat?: Double;
1067 /**
1068 * Longitude information of remote IP address.
1069 */
1070 Lon?: Double;
1071 }
1072 export interface GetDetectorRequest {
1073 /**
1074 * The unique ID of the detector that you want to get.
1075 */
1076 DetectorId: DetectorId;
1077 }
1078 export interface GetDetectorResponse {
1079 /**
1080 * Detector creation timestamp.
1081 */
1082 CreatedAt?: String;
1083 /**
1084 * Finding publishing frequency.
1085 */
1086 FindingPublishingFrequency?: FindingPublishingFrequency;
1087 /**
1088 * The GuardDuty service role.
1089 */
1090 ServiceRole: String;
1091 /**
1092 * The detector status.
1093 */
1094 Status: DetectorStatus;
1095 /**
1096 * Detector last update timestamp.
1097 */
1098 UpdatedAt?: String;
1099 /**
1100 * The tags of the detector resource.
1101 */
1102 Tags?: TagMap;
1103 }
1104 export interface GetFilterRequest {
1105 /**
1106 * The unique ID of the detector the filter is associated with.
1107 */
1108 DetectorId: DetectorId;
1109 /**
1110 * The name of the filter you want to get.
1111 */
1112 FilterName: String;
1113 }
1114 export interface GetFilterResponse {
1115 /**
1116 * The name of the filter.
1117 */
1118 Name: FilterName;
1119 /**
1120 * The description of the filter.
1121 */
1122 Description?: FilterDescription;
1123 /**
1124 * Specifies the action that is to be applied to the findings that match the filter.
1125 */
1126 Action: FilterAction;
1127 /**
1128 * Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
1129 */
1130 Rank?: FilterRank;
1131 /**
1132 * Represents the criteria to be used in the filter for querying findings.
1133 */
1134 FindingCriteria: FindingCriteria;
1135 /**
1136 * The tags of the filter resource.
1137 */
1138 Tags?: TagMap;
1139 }
1140 export interface GetFindingsRequest {
1141 /**
1142 * The ID of the detector that specifies the GuardDuty service whose findings you want to retrieve.
1143 */
1144 DetectorId: DetectorId;
1145 /**
1146 * IDs of the findings that you want to retrieve.
1147 */
1148 FindingIds: FindingIds;
1149 /**
1150 * Represents the criteria used for sorting findings.
1151 */
1152 SortCriteria?: SortCriteria;
1153 }
1154 export interface GetFindingsResponse {
1155 /**
1156 * A list of findings.
1157 */
1158 Findings: Findings;
1159 }
1160 export interface GetFindingsStatisticsRequest {
1161 /**
1162 * The ID of the detector that specifies the GuardDuty service whose findings' statistics you want to retrieve.
1163 */
1164 DetectorId: DetectorId;
1165 /**
1166 * Types of finding statistics to retrieve.
1167 */
1168 FindingStatisticTypes: FindingStatisticTypes;
1169 /**
1170 * Represents the criteria used for querying findings.
1171 */
1172 FindingCriteria?: FindingCriteria;
1173 }
1174 export interface GetFindingsStatisticsResponse {
1175 /**
1176 * Finding statistics object.
1177 */
1178 FindingStatistics: FindingStatistics;
1179 }
1180 export interface GetIPSetRequest {
1181 /**
1182 * The unique ID of the detector the ipSet is associated with.
1183 */
1184 DetectorId: DetectorId;
1185 /**
1186 * The unique ID of the IPSet to retrieve.
1187 */
1188 IpSetId: String;
1189 }
1190 export interface GetIPSetResponse {
1191 /**
1192 * The user friendly name for the IPSet.
1193 */
1194 Name: Name;
1195 /**
1196 * The format of the file that contains the IPSet.
1197 */
1198 Format: IpSetFormat;
1199 /**
1200 * The URI of the file that contains the IPSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
1201 */
1202 Location: Location;
1203 /**
1204 * The status of ipSet file uploaded.
1205 */
1206 Status: IpSetStatus;
1207 /**
1208 * The tags of the IP set resource.
1209 */
1210 Tags?: TagMap;
1211 }
1212 export interface GetInvitationsCountRequest {
1213 }
1214 export interface GetInvitationsCountResponse {
1215 /**
1216 * The number of received invitations.
1217 */
1218 InvitationsCount?: Integer;
1219 }
1220 export interface GetMasterAccountRequest {
1221 /**
1222 * The unique ID of the detector of the GuardDuty member account.
1223 */
1224 DetectorId: DetectorId;
1225 }
1226 export interface GetMasterAccountResponse {
1227 /**
1228 * Master account details.
1229 */
1230 Master: Master;
1231 }
1232 export interface GetMembersRequest {
1233 /**
1234 * The unique ID of the detector of the GuardDuty account whose members you want to retrieve.
1235 */
1236 DetectorId: DetectorId;
1237 /**
1238 * A list of account IDs of the GuardDuty member accounts that you want to describe.
1239 */
1240 AccountIds: AccountIds;
1241 }
1242 export interface GetMembersResponse {
1243 /**
1244 * A list of members.
1245 */
1246 Members: Members;
1247 /**
1248 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
1249 */
1250 UnprocessedAccounts: UnprocessedAccounts;
1251 }
1252 export interface GetThreatIntelSetRequest {
1253 /**
1254 * The unique ID of the detector the threatIntelSet is associated with.
1255 */
1256 DetectorId: DetectorId;
1257 /**
1258 * The unique ID of the threatIntelSet you want to get.
1259 */
1260 ThreatIntelSetId: String;
1261 }
1262 export interface GetThreatIntelSetResponse {
1263 /**
1264 * A user-friendly ThreatIntelSet name that is displayed in all finding generated by activity that involves IP addresses included in this ThreatIntelSet.
1265 */
1266 Name: Name;
1267 /**
1268 * The format of the threatIntelSet.
1269 */
1270 Format: ThreatIntelSetFormat;
1271 /**
1272 * The URI of the file that contains the ThreatIntelSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
1273 */
1274 Location: Location;
1275 /**
1276 * The status of threatIntelSet file uploaded.
1277 */
1278 Status: ThreatIntelSetStatus;
1279 /**
1280 * The tags of the Threat List resource.
1281 */
1282 Tags?: TagMap;
1283 }
1284 export type GuardDutyArn = string;
1285 export interface IamInstanceProfile {
1286 /**
1287 * AWS EC2 instance profile ARN.
1288 */
1289 Arn?: String;
1290 /**
1291 * AWS EC2 instance profile ID.
1292 */
1293 Id?: String;
1294 }
1295 export interface InstanceDetails {
1296 /**
1297 * The availability zone of the EC2 instance.
1298 */
1299 AvailabilityZone?: String;
1300 /**
1301 * The profile information of the EC2 instance.
1302 */
1303 IamInstanceProfile?: IamInstanceProfile;
1304 /**
1305 * The image description of the EC2 instance.
1306 */
1307 ImageDescription?: String;
1308 /**
1309 * The image ID of the EC2 instance.
1310 */
1311 ImageId?: String;
1312 /**
1313 * The ID of the EC2 instance.
1314 */
1315 InstanceId?: String;
1316 /**
1317 * The state of the EC2 instance.
1318 */
1319 InstanceState?: String;
1320 /**
1321 * The type of the EC2 instance.
1322 */
1323 InstanceType?: String;
1324 /**
1325 * The Amazon Resource Name (ARN) of the AWS Outpost. Only applicable to AWS Outposts instances.
1326 */
1327 OutpostArn?: String;
1328 /**
1329 * The launch time of the EC2 instance.
1330 */
1331 LaunchTime?: String;
1332 /**
1333 * The network interface information of the EC2 instance.
1334 */
1335 NetworkInterfaces?: NetworkInterfaces;
1336 /**
1337 * The platform of the EC2 instance.
1338 */
1339 Platform?: String;
1340 /**
1341 * The product code of the EC2 instance.
1342 */
1343 ProductCodes?: ProductCodes;
1344 /**
1345 * The tags of the EC2 instance.
1346 */
1347 Tags?: Tags;
1348 }
1349 export type Integer = number;
1350 export interface Invitation {
1351 /**
1352 * The ID of the account from which the invitations was sent.
1353 */
1354 AccountId?: AccountId;
1355 /**
1356 * The ID of the invitation. This value is used to validate the inviter account to the member account.
1357 */
1358 InvitationId?: String;
1359 /**
1360 * The status of the relationship between the inviter and invitee accounts.
1361 */
1362 RelationshipStatus?: String;
1363 /**
1364 * Timestamp at which the invitation was sent.
1365 */
1366 InvitedAt?: String;
1367 }
1368 export type Invitations = Invitation[];
1369 export interface InviteMembersRequest {
1370 /**
1371 * The unique ID of the detector of the GuardDuty account with which you want to invite members.
1372 */
1373 DetectorId: DetectorId;
1374 /**
1375 * A list of account IDs of the accounts that you want to invite to GuardDuty as members.
1376 */
1377 AccountIds: AccountIds;
1378 /**
1379 * A boolean value that specifies whether you want to disable email notification to the accounts that you’re inviting to GuardDuty as members.
1380 */
1381 DisableEmailNotification?: Boolean;
1382 /**
1383 * The invitation message that you want to send to the accounts that you’re inviting to GuardDuty as members.
1384 */
1385 Message?: String;
1386 }
1387 export interface InviteMembersResponse {
1388 /**
1389 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
1390 */
1391 UnprocessedAccounts: UnprocessedAccounts;
1392 }
1393 export type IpSetFormat = "TXT"|"STIX"|"OTX_CSV"|"ALIEN_VAULT"|"PROOF_POINT"|"FIRE_EYE"|string;
1394 export type IpSetIds = String[];
1395 export type IpSetStatus = "INACTIVE"|"ACTIVATING"|"ACTIVE"|"DEACTIVATING"|"ERROR"|"DELETE_PENDING"|"DELETED"|string;
1396 export type Ipv6Addresses = String[];
1397 export interface ListDetectorsRequest {
1398 /**
1399 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is 50.
1400 */
1401 MaxResults?: MaxResults;
1402 /**
1403 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1404 */
1405 NextToken?: String;
1406 }
1407 export interface ListDetectorsResponse {
1408 /**
1409 * A list of detector Ids.
1410 */
1411 DetectorIds: DetectorIds;
1412 /**
1413 * Pagination parameter to be used on the next list operation to retrieve more items.
1414 */
1415 NextToken?: String;
1416 }
1417 export interface ListFiltersRequest {
1418 /**
1419 * The unique ID of the detector the filter is associated with.
1420 */
1421 DetectorId: DetectorId;
1422 /**
1423 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is 50.
1424 */
1425 MaxResults?: MaxResults;
1426 /**
1427 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1428 */
1429 NextToken?: String;
1430 }
1431 export interface ListFiltersResponse {
1432 /**
1433 * A list of filter names
1434 */
1435 FilterNames: FilterNames;
1436 /**
1437 * Pagination parameter to be used on the next list operation to retrieve more items.
1438 */
1439 NextToken?: String;
1440 }
1441 export interface ListFindingsRequest {
1442 /**
1443 * The ID of the detector that specifies the GuardDuty service whose findings you want to list.
1444 */
1445 DetectorId: DetectorId;
1446 /**
1447 * Represents the criteria used for querying findings. Valid values include: JSON field name accountId region confidence id resource.accessKeyDetails.accessKeyId resource.accessKeyDetails.principalId resource.accessKeyDetails.userName resource.accessKeyDetails.userType resource.instanceDetails.iamInstanceProfile.id resource.instanceDetails.imageId resource.instanceDetails.instanceId resource.instanceDetails.outpostArn resource.instanceDetails.networkInterfaces.ipv6Addresses resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress resource.instanceDetails.networkInterfaces.publicDnsName resource.instanceDetails.networkInterfaces.publicIp resource.instanceDetails.networkInterfaces.securityGroups.groupId resource.instanceDetails.networkInterfaces.securityGroups.groupName resource.instanceDetails.networkInterfaces.subnetId resource.instanceDetails.networkInterfaces.vpcId resource.instanceDetails.tags.key resource.instanceDetails.tags.value resource.resourceType service.action.actionType service.action.awsApiCallAction.api service.action.awsApiCallAction.callerType service.action.awsApiCallAction.remoteIpDetails.city.cityName service.action.awsApiCallAction.remoteIpDetails.country.countryName service.action.awsApiCallAction.remoteIpDetails.ipAddressV4 service.action.awsApiCallAction.remoteIpDetails.organization.asn service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg service.action.awsApiCallAction.serviceName service.action.dnsRequestAction.domain service.action.networkConnectionAction.blocked service.action.networkConnectionAction.connectionDirection service.action.networkConnectionAction.localPortDetails.port service.action.networkConnectionAction.protocol service.action.networkConnectionAction.localIpDetails.ipAddressV4 service.action.networkConnectionAction.remoteIpDetails.city.cityName service.action.networkConnectionAction.remoteIpDetails.country.countryName service.action.networkConnectionAction.remoteIpDetails.ipAddressV4 service.action.networkConnectionAction.remoteIpDetails.organization.asn service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg service.action.networkConnectionAction.remotePortDetails.port service.additionalInfo.threatListName service.archived When this attribute is set to 'true', only archived findings are listed. When it's set to 'false', only unarchived findings are listed. When this attribute is not set, all existing findings are listed. service.resourceRole severity type updatedAt Type: Timestamp in Unix Epoch millisecond format: 1486685375000
1448 */
1449 FindingCriteria?: FindingCriteria;
1450 /**
1451 * Represents the criteria used for sorting findings.
1452 */
1453 SortCriteria?: SortCriteria;
1454 /**
1455 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is 50.
1456 */
1457 MaxResults?: MaxResults;
1458 /**
1459 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1460 */
1461 NextToken?: String;
1462 }
1463 export interface ListFindingsResponse {
1464 /**
1465 * The IDs of the findings you are listing.
1466 */
1467 FindingIds: FindingIds;
1468 /**
1469 * Pagination parameter to be used on the next list operation to retrieve more items.
1470 */
1471 NextToken?: String;
1472 }
1473 export interface ListIPSetsRequest {
1474 /**
1475 * The unique ID of the detector the ipSet is associated with.
1476 */
1477 DetectorId: DetectorId;
1478 /**
1479 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is 50.
1480 */
1481 MaxResults?: MaxResults;
1482 /**
1483 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1484 */
1485 NextToken?: String;
1486 }
1487 export interface ListIPSetsResponse {
1488 /**
1489 * The IDs of the IPSet resources.
1490 */
1491 IpSetIds: IpSetIds;
1492 /**
1493 * Pagination parameter to be used on the next list operation to retrieve more items.
1494 */
1495 NextToken?: String;
1496 }
1497 export interface ListInvitationsRequest {
1498 /**
1499 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is 50.
1500 */
1501 MaxResults?: MaxResults;
1502 /**
1503 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1504 */
1505 NextToken?: String;
1506 }
1507 export interface ListInvitationsResponse {
1508 /**
1509 * A list of invitation descriptions.
1510 */
1511 Invitations?: Invitations;
1512 /**
1513 * Pagination parameter to be used on the next list operation to retrieve more items.
1514 */
1515 NextToken?: String;
1516 }
1517 export interface ListMembersRequest {
1518 /**
1519 * The unique ID of the detector the member is associated with.
1520 */
1521 DetectorId: DetectorId;
1522 /**
1523 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is 50.
1524 */
1525 MaxResults?: MaxResults;
1526 /**
1527 * You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1528 */
1529 NextToken?: String;
1530 /**
1531 * Specifies whether to only return associated members or to return all members (including members which haven't been invited yet or have been disassociated).
1532 */
1533 OnlyAssociated?: String;
1534 }
1535 export interface ListMembersResponse {
1536 /**
1537 * A list of members.
1538 */
1539 Members?: Members;
1540 /**
1541 * Pagination parameter to be used on the next list operation to retrieve more items.
1542 */
1543 NextToken?: String;
1544 }
1545 export interface ListPublishingDestinationsRequest {
1546 /**
1547 * The ID of the detector to retrieve publishing destinations for.
1548 */
1549 DetectorId: DetectorId;
1550 /**
1551 * The maximum number of results to return in the response.
1552 */
1553 MaxResults?: MaxResults;
1554 /**
1555 * A token to use for paginating results returned in the repsonse. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.
1556 */
1557 NextToken?: String;
1558 }
1559 export interface ListPublishingDestinationsResponse {
1560 /**
1561 * A Destinations obect that includes information about each publishing destination returned.
1562 */
1563 Destinations: Destinations;
1564 /**
1565 * A token to use for paginating results returned in the repsonse. Set the value of this parameter to null for the first request to a list action. For subsequent calls, use the NextToken value returned from the previous request to continue listing results after the first page.
1566 */
1567 NextToken?: String;
1568 }
1569 export interface ListTagsForResourceRequest {
1570 /**
1571 * The Amazon Resource Name (ARN) for the given GuardDuty resource
1572 */
1573 ResourceArn: GuardDutyArn;
1574 }
1575 export interface ListTagsForResourceResponse {
1576 /**
1577 * The tags associated with the resource.
1578 */
1579 Tags?: TagMap;
1580 }
1581 export interface ListThreatIntelSetsRequest {
1582 /**
1583 * The unique ID of the detector the threatIntelSet is associated with.
1584 */
1585 DetectorId: DetectorId;
1586 /**
1587 * You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50. The maximum value is 50.
1588 */
1589 MaxResults?: MaxResults;
1590 /**
1591 * You can use this parameter to paginate results in the response. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
1592 */
1593 NextToken?: String;
1594 }
1595 export interface ListThreatIntelSetsResponse {
1596 /**
1597 * The IDs of the ThreatIntelSet resources.
1598 */
1599 ThreatIntelSetIds: ThreatIntelSetIds;
1600 /**
1601 * Pagination parameter to be used on the next list operation to retrieve more items.
1602 */
1603 NextToken?: String;
1604 }
1605 export interface LocalIpDetails {
1606 /**
1607 * IPV4 remote address of the connection.
1608 */
1609 IpAddressV4?: String;
1610 }
1611 export interface LocalPortDetails {
1612 /**
1613 * Port number of the local connection.
1614 */
1615 Port?: Integer;
1616 /**
1617 * Port name of the local connection.
1618 */
1619 PortName?: String;
1620 }
1621 export type Location = string;
1622 export type Long = number;
1623 export interface Master {
1624 /**
1625 * The ID of the account used as the Master account.
1626 */
1627 AccountId?: AccountId;
1628 /**
1629 * This value is used to validate the master account to the member account.
1630 */
1631 InvitationId?: String;
1632 /**
1633 * The status of the relationship between the master and member accounts.
1634 */
1635 RelationshipStatus?: String;
1636 /**
1637 * Timestamp at which the invitation was sent.
1638 */
1639 InvitedAt?: String;
1640 }
1641 export type MaxResults = number;
1642 export interface Member {
1643 /**
1644 * Member account ID.
1645 */
1646 AccountId: AccountId;
1647 /**
1648 * Member account's detector ID.
1649 */
1650 DetectorId?: DetectorId;
1651 /**
1652 * Master account ID.
1653 */
1654 MasterId: String;
1655 /**
1656 * Member account's email address.
1657 */
1658 Email: Email;
1659 /**
1660 * The status of the relationship between the member and the master.
1661 */
1662 RelationshipStatus: String;
1663 /**
1664 * Timestamp at which the invitation was sent
1665 */
1666 InvitedAt?: String;
1667 /**
1668 * Member last updated timestamp.
1669 */
1670 UpdatedAt: String;
1671 }
1672 export type Members = Member[];
1673 export type Name = string;
1674 export type Neq = String[];
1675 export interface NetworkConnectionAction {
1676 /**
1677 * Network connection blocked information.
1678 */
1679 Blocked?: Boolean;
1680 /**
1681 * Network connection direction.
1682 */
1683 ConnectionDirection?: String;
1684 /**
1685 * Local port information of the connection.
1686 */
1687 LocalPortDetails?: LocalPortDetails;
1688 /**
1689 * Network connection protocol.
1690 */
1691 Protocol?: String;
1692 /**
1693 * Local IP information of the connection.
1694 */
1695 LocalIpDetails?: LocalIpDetails;
1696 /**
1697 * Remote IP information of the connection.
1698 */
1699 RemoteIpDetails?: RemoteIpDetails;
1700 /**
1701 * Remote port information of the connection.
1702 */
1703 RemotePortDetails?: RemotePortDetails;
1704 }
1705 export interface NetworkInterface {
1706 /**
1707 * A list of EC2 instance IPv6 address information.
1708 */
1709 Ipv6Addresses?: Ipv6Addresses;
1710 /**
1711 * The ID of the network interface
1712 */
1713 NetworkInterfaceId?: String;
1714 /**
1715 * Private DNS name of the EC2 instance.
1716 */
1717 PrivateDnsName?: String;
1718 /**
1719 * Private IP address of the EC2 instance.
1720 */
1721 PrivateIpAddress?: String;
1722 /**
1723 * Other private IP address information of the EC2 instance.
1724 */
1725 PrivateIpAddresses?: PrivateIpAddresses;
1726 /**
1727 * Public DNS name of the EC2 instance.
1728 */
1729 PublicDnsName?: String;
1730 /**
1731 * Public IP address of the EC2 instance.
1732 */
1733 PublicIp?: String;
1734 /**
1735 * Security groups associated with the EC2 instance.
1736 */
1737 SecurityGroups?: SecurityGroups;
1738 /**
1739 * The subnet ID of the EC2 instance.
1740 */
1741 SubnetId?: String;
1742 /**
1743 * The VPC ID of the EC2 instance.
1744 */
1745 VpcId?: String;
1746 }
1747 export type NetworkInterfaces = NetworkInterface[];
1748 export type NotEquals = String[];
1749 export type OrderBy = "ASC"|"DESC"|string;
1750 export interface Organization {
1751 /**
1752 * Autonomous system number of the internet provider of the remote IP address.
1753 */
1754 Asn?: String;
1755 /**
1756 * Organization that registered this ASN.
1757 */
1758 AsnOrg?: String;
1759 /**
1760 * ISP information for the internet provider.
1761 */
1762 Isp?: String;
1763 /**
1764 * Name of the internet provider.
1765 */
1766 Org?: String;
1767 }
1768 export interface PortProbeAction {
1769 /**
1770 * Port probe blocked information.
1771 */
1772 Blocked?: Boolean;
1773 /**
1774 * A list of port probe details objects.
1775 */
1776 PortProbeDetails?: PortProbeDetails;
1777 }
1778 export interface PortProbeDetail {
1779 /**
1780 * Local port information of the connection.
1781 */
1782 LocalPortDetails?: LocalPortDetails;
1783 /**
1784 * Local IP information of the connection.
1785 */
1786 LocalIpDetails?: LocalIpDetails;
1787 /**
1788 * Remote IP information of the connection.
1789 */
1790 RemoteIpDetails?: RemoteIpDetails;
1791 }
1792 export type PortProbeDetails = PortProbeDetail[];
1793 export interface PrivateIpAddressDetails {
1794 /**
1795 * Private DNS name of the EC2 instance.
1796 */
1797 PrivateDnsName?: String;
1798 /**
1799 * Private IP address of the EC2 instance.
1800 */
1801 PrivateIpAddress?: String;
1802 }
1803 export type PrivateIpAddresses = PrivateIpAddressDetails[];
1804 export interface ProductCode {
1805 /**
1806 * Product code information.
1807 */
1808 Code?: String;
1809 /**
1810 * Product code type.
1811 */
1812 ProductType?: String;
1813 }
1814 export type ProductCodes = ProductCode[];
1815 export type PublishingStatus = "PENDING_VERIFICATION"|"PUBLISHING"|"UNABLE_TO_PUBLISH_FIX_DESTINATION_PROPERTY"|"STOPPED"|string;
1816 export interface RemoteIpDetails {
1817 /**
1818 * City information of the remote IP address.
1819 */
1820 City?: City;
1821 /**
1822 * Country code of the remote IP address.
1823 */
1824 Country?: Country;
1825 /**
1826 * Location information of the remote IP address.
1827 */
1828 GeoLocation?: GeoLocation;
1829 /**
1830 * IPV4 remote address of the connection.
1831 */
1832 IpAddressV4?: String;
1833 /**
1834 * ISP Organization information of the remote IP address.
1835 */
1836 Organization?: Organization;
1837 }
1838 export interface RemotePortDetails {
1839 /**
1840 * Port number of the remote connection.
1841 */
1842 Port?: Integer;
1843 /**
1844 * Port name of the remote connection.
1845 */
1846 PortName?: String;
1847 }
1848 export interface Resource {
1849 /**
1850 * The IAM access key details (IAM user information) of a user that engaged in the activity that prompted GuardDuty to generate a finding.
1851 */
1852 AccessKeyDetails?: AccessKeyDetails;
1853 /**
1854 * The information about the EC2 instance associated with the activity that prompted GuardDuty to generate a finding.
1855 */
1856 InstanceDetails?: InstanceDetails;
1857 /**
1858 * The type of the AWS resource.
1859 */
1860 ResourceType?: String;
1861 }
1862 export interface SecurityGroup {
1863 /**
1864 * EC2 instance's security group ID.
1865 */
1866 GroupId?: String;
1867 /**
1868 * EC2 instance's security group name.
1869 */
1870 GroupName?: String;
1871 }
1872 export type SecurityGroups = SecurityGroup[];
1873 export interface Service {
1874 /**
1875 * Information about the activity described in a finding.
1876 */
1877 Action?: Action;
1878 /**
1879 * An evidence object associated with the service.
1880 */
1881 Evidence?: Evidence;
1882 /**
1883 * Indicates whether this finding is archived.
1884 */
1885 Archived?: Boolean;
1886 /**
1887 * Total count of the occurrences of this finding type.
1888 */
1889 Count?: Integer;
1890 /**
1891 * Detector ID for the GuardDuty service.
1892 */
1893 DetectorId?: DetectorId;
1894 /**
1895 * First seen timestamp of the activity that prompted GuardDuty to generate this finding.
1896 */
1897 EventFirstSeen?: String;
1898 /**
1899 * Last seen timestamp of the activity that prompted GuardDuty to generate this finding.
1900 */
1901 EventLastSeen?: String;
1902 /**
1903 * Resource role information for this finding.
1904 */
1905 ResourceRole?: String;
1906 /**
1907 * The name of the AWS service (GuardDuty) that generated a finding.
1908 */
1909 ServiceName?: String;
1910 /**
1911 * Feedback left about the finding.
1912 */
1913 UserFeedback?: String;
1914 }
1915 export interface SortCriteria {
1916 /**
1917 * Represents the finding attribute (for example, accountId) by which to sort findings.
1918 */
1919 AttributeName?: String;
1920 /**
1921 * Order by which the sorted findings are to be displayed.
1922 */
1923 OrderBy?: OrderBy;
1924 }
1925 export interface StartMonitoringMembersRequest {
1926 /**
1927 * The unique ID of the detector of the GuardDuty master account associated with the member accounts to monitor.
1928 */
1929 DetectorId: DetectorId;
1930 /**
1931 * A list of account IDs of the GuardDuty member accounts to start monitoring.
1932 */
1933 AccountIds: AccountIds;
1934 }
1935 export interface StartMonitoringMembersResponse {
1936 /**
1937 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
1938 */
1939 UnprocessedAccounts: UnprocessedAccounts;
1940 }
1941 export interface StopMonitoringMembersRequest {
1942 /**
1943 * The unique ID of the detector of the GuardDuty account that you want to stop from monitor members' findings.
1944 */
1945 DetectorId: DetectorId;
1946 /**
1947 * A list of account IDs of the GuardDuty member accounts whose findings you want the master account to stop monitoring.
1948 */
1949 AccountIds: AccountIds;
1950 }
1951 export interface StopMonitoringMembersResponse {
1952 /**
1953 * A list of objects containing the unprocessed account and a result string explaining why it was unprocessed.
1954 */
1955 UnprocessedAccounts: UnprocessedAccounts;
1956 }
1957 export type String = string;
1958 export interface Tag {
1959 /**
1960 * EC2 instance tag key.
1961 */
1962 Key?: String;
1963 /**
1964 * EC2 instance tag value.
1965 */
1966 Value?: String;
1967 }
1968 export type TagKey = string;
1969 export type TagKeyList = TagKey[];
1970 export type TagMap = {[key: string]: TagValue};
1971 export interface TagResourceRequest {
1972 /**
1973 * The Amazon Resource Name (ARN) for the GuardDuty resource to apply a tag to.
1974 */
1975 ResourceArn: GuardDutyArn;
1976 /**
1977 * The tags to be added to a resource.
1978 */
1979 Tags: TagMap;
1980 }
1981 export interface TagResourceResponse {
1982 }
1983 export type TagValue = string;
1984 export type Tags = Tag[];
1985 export type ThreatIntelSetFormat = "TXT"|"STIX"|"OTX_CSV"|"ALIEN_VAULT"|"PROOF_POINT"|"FIRE_EYE"|string;
1986 export type ThreatIntelSetIds = String[];
1987 export type ThreatIntelSetStatus = "INACTIVE"|"ACTIVATING"|"ACTIVE"|"DEACTIVATING"|"ERROR"|"DELETE_PENDING"|"DELETED"|string;
1988 export interface ThreatIntelligenceDetail {
1989 /**
1990 * The name of the threat intelligence list that triggered the finding.
1991 */
1992 ThreatListName?: String;
1993 /**
1994 * A list of names of the threats in the threat intelligence list that triggered the finding.
1995 */
1996 ThreatNames?: ThreatNames;
1997 }
1998 export type ThreatIntelligenceDetails = ThreatIntelligenceDetail[];
1999 export type ThreatNames = String[];
2000 export interface UnarchiveFindingsRequest {
2001 /**
2002 * The ID of the detector associated with the findings to unarchive.
2003 */
2004 DetectorId: DetectorId;
2005 /**
2006 * IDs of the findings to unarchive.
2007 */
2008 FindingIds: FindingIds;
2009 }
2010 export interface UnarchiveFindingsResponse {
2011 }
2012 export interface UnprocessedAccount {
2013 /**
2014 * AWS Account ID.
2015 */
2016 AccountId: AccountId;
2017 /**
2018 * A reason why the account hasn't been processed.
2019 */
2020 Result: String;
2021 }
2022 export type UnprocessedAccounts = UnprocessedAccount[];
2023 export interface UntagResourceRequest {
2024 /**
2025 * The Amazon Resource Name (ARN) for the resource to remove tags from.
2026 */
2027 ResourceArn: GuardDutyArn;
2028 /**
2029 * The tag keys to remove from the resource.
2030 */
2031 TagKeys: TagKeyList;
2032 }
2033 export interface UntagResourceResponse {
2034 }
2035 export interface UpdateDetectorRequest {
2036 /**
2037 * The unique ID of the detector to update.
2038 */
2039 DetectorId: DetectorId;
2040 /**
2041 * Specifies whether the detector is enabled or not enabled.
2042 */
2043 Enable?: Boolean;
2044 /**
2045 * A enum value that specifies how frequently findings are exported, such as to CloudWatch Events.
2046 */
2047 FindingPublishingFrequency?: FindingPublishingFrequency;
2048 }
2049 export interface UpdateDetectorResponse {
2050 }
2051 export interface UpdateFilterRequest {
2052 /**
2053 * The unique ID of the detector that specifies the GuardDuty service where you want to update a filter.
2054 */
2055 DetectorId: DetectorId;
2056 /**
2057 * The name of the filter.
2058 */
2059 FilterName: String;
2060 /**
2061 * The description of the filter.
2062 */
2063 Description?: FilterDescription;
2064 /**
2065 * Specifies the action that is to be applied to the findings that match the filter.
2066 */
2067 Action?: FilterAction;
2068 /**
2069 * Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
2070 */
2071 Rank?: FilterRank;
2072 /**
2073 * Represents the criteria to be used in the filter for querying findings.
2074 */
2075 FindingCriteria?: FindingCriteria;
2076 }
2077 export interface UpdateFilterResponse {
2078 /**
2079 * The name of the filter.
2080 */
2081 Name: FilterName;
2082 }
2083 export interface UpdateFindingsFeedbackRequest {
2084 /**
2085 * The ID of the detector associated with the findings to update feedback for.
2086 */
2087 DetectorId: DetectorId;
2088 /**
2089 * IDs of the findings that you want to mark as useful or not useful.
2090 */
2091 FindingIds: FindingIds;
2092 /**
2093 * The feedback for the finding.
2094 */
2095 Feedback: Feedback;
2096 /**
2097 * Additional feedback about the GuardDuty findings.
2098 */
2099 Comments?: String;
2100 }
2101 export interface UpdateFindingsFeedbackResponse {
2102 }
2103 export interface UpdateIPSetRequest {
2104 /**
2105 * The detectorID that specifies the GuardDuty service whose IPSet you want to update.
2106 */
2107 DetectorId: DetectorId;
2108 /**
2109 * The unique ID that specifies the IPSet that you want to update.
2110 */
2111 IpSetId: String;
2112 /**
2113 * The unique ID that specifies the IPSet that you want to update.
2114 */
2115 Name?: Name;
2116 /**
2117 * The updated URI of the file that contains the IPSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
2118 */
2119 Location?: Location;
2120 /**
2121 * The updated boolean value that specifies whether the IPSet is active or not.
2122 */
2123 Activate?: Boolean;
2124 }
2125 export interface UpdateIPSetResponse {
2126 }
2127 export interface UpdatePublishingDestinationRequest {
2128 /**
2129 * The ID of the
2130 */
2131 DetectorId: DetectorId;
2132 /**
2133 * The ID of the detector associated with the publishing destinations to update.
2134 */
2135 DestinationId: String;
2136 /**
2137 * A DestinationProperties object that includes the DestinationArn and KmsKeyArn of the publishing destination.
2138 */
2139 DestinationProperties?: DestinationProperties;
2140 }
2141 export interface UpdatePublishingDestinationResponse {
2142 }
2143 export interface UpdateThreatIntelSetRequest {
2144 /**
2145 * The detectorID that specifies the GuardDuty service whose ThreatIntelSet you want to update.
2146 */
2147 DetectorId: DetectorId;
2148 /**
2149 * The unique ID that specifies the ThreatIntelSet that you want to update.
2150 */
2151 ThreatIntelSetId: String;
2152 /**
2153 * The unique ID that specifies the ThreatIntelSet that you want to update.
2154 */
2155 Name?: Name;
2156 /**
2157 * The updated URI of the file that contains the ThreateIntelSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key)
2158 */
2159 Location?: Location;
2160 /**
2161 * The updated boolean value that specifies whether the ThreateIntelSet is active or not.
2162 */
2163 Activate?: Boolean;
2164 }
2165 export interface UpdateThreatIntelSetResponse {
2166 }
2167 /**
2168 * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
2169 */
2170 export type apiVersion = "2017-11-28"|"latest"|string;
2171 export interface ClientApiVersions {
2172 /**
2173 * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
2174 */
2175 apiVersion?: apiVersion;
2176 }
2177 export type ClientConfiguration = ServiceConfigurationOptions & ClientApiVersions;
2178 /**
2179 * Contains interfaces for use with the GuardDuty client.
2180 */
2181 export import Types = GuardDuty;
2182}
2183export = GuardDuty;