Skip to content

Commit 2cdf852

Browse files
author
awstools
committed
feat(client-securityhub): Added Inspector Lambda code Vulnerability section to ASFF, including GeneratorDetails, EpssScore, ExploitAvailable, and CodeVulnerabilities.
1 parent 015cd79 commit 2cdf852

File tree

13 files changed

+1964
-436
lines changed

13 files changed

+1964
-436
lines changed

‎clients/client-securityhub/README.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,8 +10,10 @@ AWS SDK for JavaScript SecurityHub Client for Node.js, Browser and React Native.
1010
your Amazon Web Services environment and resources. It also provides you with the readiness
1111
status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
1212
integrated third-party products and helps you analyze security trends in your environment
13-
to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
14-
Guide</a>.</p>
13+
to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">
14+
<i>Security Hub User
15+
Guide</i>
16+
</a>.</p>
1517
<p>When you use operations in the Security Hub API, the requests are executed only in
1618
the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
1719
that results from the operation is applied only to that Region. To make the same change in

‎clients/client-securityhub/src/SecurityHub.ts

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1448,8 +1448,10 @@ export interface SecurityHub {
14481448
* your Amazon Web Services environment and resources. It also provides you with the readiness
14491449
* status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
14501450
* integrated third-party products and helps you analyze security trends in your environment
1451-
* to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
1452-
* Guide</a>.</p>
1451+
* to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">
1452+
* <i>Security Hub User
1453+
* Guide</i>
1454+
* </a>.</p>
14531455
* <p>When you use operations in the Security Hub API, the requests are executed only in
14541456
* the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
14551457
* that results from the operation is applied only to that Region. To make the same change in

‎clients/client-securityhub/src/SecurityHubClient.ts

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -563,8 +563,10 @@ export interface SecurityHubClientResolvedConfig extends SecurityHubClientResolv
563563
* your Amazon Web Services environment and resources. It also provides you with the readiness
564564
* status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
565565
* integrated third-party products and helps you analyze security trends in your environment
566-
* to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
567-
* Guide</a>.</p>
566+
* to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">
567+
* <i>Security Hub User
568+
* Guide</i>
569+
* </a>.</p>
568570
* <p>When you use operations in the Security Hub API, the requests are executed only in
569571
* the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
570572
* that results from the operation is applied only to that Region. To make the same change in

‎clients/client-securityhub/src/commands/BatchImportFindingsCommand.ts

Lines changed: 22 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -3921,6 +3921,22 @@ export interface BatchImportFindingsCommandOutput extends BatchImportFindingsRes
39213921
* },
39223922
* ReferenceUrls: "<StringList>",
39233923
* FixAvailable: "YES" || "NO" || "PARTIAL",
3924+
* EpssScore: Number("double"),
3925+
* ExploitAvailable: "YES" || "NO",
3926+
* CodeVulnerabilities: [ // VulnerabilityCodeVulnerabilitiesList
3927+
* { // VulnerabilityCodeVulnerabilities
3928+
* Cwes: [
3929+
* "STRING_VALUE",
3930+
* ],
3931+
* FilePath: { // CodeVulnerabilitiesFilePath
3932+
* EndLine: Number("int"),
3933+
* FileName: "STRING_VALUE",
3934+
* FilePath: "STRING_VALUE",
3935+
* StartLine: Number("int"),
3936+
* },
3937+
* SourceArn: "STRING_VALUE",
3938+
* },
3939+
* ],
39243940
* },
39253941
* ],
39263942
* PatchSummary: { // PatchSummary
@@ -4055,11 +4071,14 @@ export interface BatchImportFindingsCommandOutput extends BatchImportFindingsRes
40554071
* Label: "INFORMATIONAL" || "LOW" || "MEDIUM" || "HIGH" || "CRITICAL",
40564072
* Original: "STRING_VALUE",
40574073
* },
4058-
* Types: [
4059-
* "STRING_VALUE",
4060-
* ],
4074+
* Types: "<TypeList>",
40614075
* },
40624076
* Sample: true || false,
4077+
* GeneratorDetails: { // GeneratorDetails
4078+
* Name: "STRING_VALUE",
4079+
* Description: "STRING_VALUE",
4080+
* Labels: "<TypeList>",
4081+
* },
40634082
* },
40644083
* ],
40654084
* };

‎clients/client-securityhub/src/commands/DeleteMembersCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,8 +37,8 @@ export interface DeleteMembersCommandOutput extends DeleteMembersResponse, __Met
3737
/**
3838
* @public
3939
* <p>Deletes the specified member accounts from Security Hub.</p>
40-
* <p>Can be used to delete member accounts that belong to an organization as well as member
41-
* accounts that were invited manually.</p>
40+
* <p>You can invoke this API only to delete accounts that became members through invitation. You can't invoke this
41+
* API to delete accounts that belong to an Organizations organization.</p>
4242
* @example
4343
* Use a bare-bones client and the command you need to make an API call.
4444
* ```javascript

‎clients/client-securityhub/src/commands/DisableSecurityHubCommand.ts

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,10 +36,9 @@ export interface DisableSecurityHubCommandOutput extends DisableSecurityHubRespo
3636

3737
/**
3838
* @public
39-
* <p>Disables Security Hub in your account only in the current Region. To disable Security Hub in all
39+
* <p>Disables Security Hub in your account only in the current Amazon Web Services Region. To disable Security Hub in all
4040
* Regions, you must submit one request per Region where you have enabled Security Hub.</p>
41-
* <p>When you disable Security Hub for an administrator account, it doesn't disable Security Hub for any associated
42-
* member accounts.</p>
41+
* <p>You can't disable Security Hub in an account that is currently the Security Hub administrator.</p>
4342
* <p>When you disable Security Hub, your existing findings and insights and any Security Hub configuration
4443
* settings are deleted after 90 days and cannot be recovered. Any standards that were enabled
4544
* are disabled, and your administrator and member account associations are removed.</p>

‎clients/client-securityhub/src/commands/GetFindingsCommand.ts

Lines changed: 22 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4111,6 +4111,22 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
41114111
* // },
41124112
* // ReferenceUrls: "<StringList>",
41134113
* // FixAvailable: "YES" || "NO" || "PARTIAL",
4114+
* // EpssScore: Number("double"),
4115+
* // ExploitAvailable: "YES" || "NO",
4116+
* // CodeVulnerabilities: [ // VulnerabilityCodeVulnerabilitiesList
4117+
* // { // VulnerabilityCodeVulnerabilities
4118+
* // Cwes: [
4119+
* // "STRING_VALUE",
4120+
* // ],
4121+
* // FilePath: { // CodeVulnerabilitiesFilePath
4122+
* // EndLine: Number("int"),
4123+
* // FileName: "STRING_VALUE",
4124+
* // FilePath: "STRING_VALUE",
4125+
* // StartLine: Number("int"),
4126+
* // },
4127+
* // SourceArn: "STRING_VALUE",
4128+
* // },
4129+
* // ],
41144130
* // },
41154131
* // ],
41164132
* // PatchSummary: { // PatchSummary
@@ -4245,11 +4261,14 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
42454261
* // Label: "INFORMATIONAL" || "LOW" || "MEDIUM" || "HIGH" || "CRITICAL",
42464262
* // Original: "STRING_VALUE",
42474263
* // },
4248-
* // Types: [
4249-
* // "STRING_VALUE",
4250-
* // ],
4264+
* // Types: "<TypeList>",
42514265
* // },
42524266
* // Sample: true || false,
4267+
* // GeneratorDetails: { // GeneratorDetails
4268+
* // Name: "STRING_VALUE",
4269+
* // Description: "STRING_VALUE",
4270+
* // Labels: "<TypeList>",
4271+
* // },
42534272
* // },
42544273
* // ],
42554274
* // NextToken: "STRING_VALUE",

‎clients/client-securityhub/src/endpoint/ruleset.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,5 +26,5 @@ m={[r]:"booleanEquals",[s]:[true,{[r]:"getAttr",[s]:[{[t]:e},"supportsDualStack"
2626
n=[i],
2727
o=[j],
2828
p=[{[t]:"Region"}];
29-
const _data={version:"1.0",parameters:{Region:f,UseDualStack:g,UseFIPS:g,Endpoint:f},rules:[{conditions:[{[r]:a,[s]:[h]}],type:b,rules:[{conditions:n,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:c},{type:b,rules:[{conditions:o,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:c},{endpoint:{url:h,properties:k,headers:k},type:d}]}]},{type:b,rules:[{conditions:[{[r]:a,[s]:p}],type:b,rules:[{conditions:[{[r]:"aws.partition",[s]:p,assign:e}],type:b,rules:[{conditions:[i,j],type:b,rules:[{conditions:[l,m],type:b,rules:[{type:b,rules:[{endpoint:{url:"https://securityhub-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:k,headers:k},type:d}]}]},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:c}]},{conditions:n,type:b,rules:[{conditions:[l],type:b,rules:[{type:b,rules:[{endpoint:{url:"https://securityhub-fips.{Region}.{PartitionResult#dnsSuffix}",properties:k,headers:k},type:d}]}]},{error:"FIPS is enabled but this partition does not support FIPS",type:c}]},{conditions:o,type:b,rules:[{conditions:[m],type:b,rules:[{type:b,rules:[{endpoint:{url:"https://securityhub.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:k,headers:k},type:d}]}]},{error:"DualStack is enabled but this partition does not support DualStack",type:c}]},{type:b,rules:[{endpoint:{url:"https://securityhub.{Region}.{PartitionResult#dnsSuffix}",properties:k,headers:k},type:d}]}]}]},{error:"Invalid Configuration: Missing Region",type:c}]}]};
29+
const _data={version:"1.0",parameters:{Region:f,UseDualStack:g,UseFIPS:g,Endpoint:f},rules:[{conditions:[{[r]:a,[s]:[h]}],type:b,rules:[{conditions:n,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:c},{conditions:o,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:c},{endpoint:{url:h,properties:k,headers:k},type:d}]},{conditions:[{[r]:a,[s]:p}],type:b,rules:[{conditions:[{[r]:"aws.partition",[s]:p,assign:e}],type:b,rules:[{conditions:[i,j],type:b,rules:[{conditions:[l,m],type:b,rules:[{endpoint:{url:"https://securityhub-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:k,headers:k},type:d}]},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:c}]},{conditions:n,type:b,rules:[{conditions:[l],type:b,rules:[{endpoint:{url:"https://securityhub-fips.{Region}.{PartitionResult#dnsSuffix}",properties:k,headers:k},type:d}]},{error:"FIPS is enabled but this partition does not support FIPS",type:c}]},{conditions:o,type:b,rules:[{conditions:[m],type:b,rules:[{endpoint:{url:"https://securityhub.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:k,headers:k},type:d}]},{error:"DualStack is enabled but this partition does not support DualStack",type:c}]},{endpoint:{url:"https://securityhub.{Region}.{PartitionResult#dnsSuffix}",properties:k,headers:k},type:d}]}]},{error:"Invalid Configuration: Missing Region",type:c}]};
3030
export const ruleSet: RuleSetObject = _data;

‎clients/client-securityhub/src/index.ts

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,10 @@
55
* your Amazon Web Services environment and resources. It also provides you with the readiness
66
* status of your environment based on controls from supported security standards. Security Hub collects security data from Amazon Web Services accounts, services, and
77
* integrated third-party products and helps you analyze security trends in your environment
8-
* to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">Security HubUser
9-
* Guide</a>.</p>
8+
* to identify the highest priority security issues. For more information about Security Hub, see the <a href="https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html">
9+
* <i>Security Hub User
10+
* Guide</i>
11+
* </a>.</p>
1012
* <p>When you use operations in the Security Hub API, the requests are executed only in
1113
* the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change
1214
* that results from the operation is applied only to that Region. To make the same change in

0 commit comments

Comments
 (0)