Skip to content

Commit 5571771

Browse files
author
awstools
committed
feat(client-guardduty): Added autoEnable ALL to UpdateOrganizationConfiguration and DescribeOrganizationConfiguration APIs.
1 parent f3db88f commit 5571771

16 files changed

+402
-314
lines changed

clients/client-guardduty/README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,8 +22,8 @@ been used, or unusual API calls like a password policy change to reduce password
2222
<p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
2323
findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
2424
information, see the <i>
25-
<a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
26-
GuardDuty User Guide</a>
25+
<a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User
26+
Guide</a>
2727
</i>. </p>
2828

2929
## Installing

clients/client-guardduty/src/GuardDuty.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1396,8 +1396,8 @@ export interface GuardDuty {
13961396
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
13971397
* findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
13981398
* information, see the <i>
1399-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
1400-
* GuardDuty User Guide</a>
1399+
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User
1400+
* Guide</a>
14011401
* </i>. </p>
14021402
*/
14031403
export class GuardDuty extends GuardDutyClient implements GuardDuty {}

clients/client-guardduty/src/GuardDutyClient.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -550,8 +550,8 @@ export interface GuardDutyClientResolvedConfig extends GuardDutyClientResolvedCo
550550
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
551551
* findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
552552
* information, see the <i>
553-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
554-
* GuardDuty User Guide</a>
553+
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon GuardDuty User
554+
* Guide</a>
555555
* </i>. </p>
556556
*/
557557
export class GuardDutyClient extends __Client<

clients/client-guardduty/src/commands/CreateMembersCommand.ts

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -40,17 +40,17 @@ export interface CreateMembersCommandOutput extends CreateMembersResponse, __Met
4040
* IDs. This step is a prerequisite for managing the associated member accounts either by
4141
* invitation or through an organization.</p>
4242
* <p>As a delegated administrator, using <code>CreateMembers</code> will enable GuardDuty in
43-
* the added member accounts, with the exception of the
44-
* organization delegated administrator account. A delegated administrator must enable GuardDuty
45-
* prior to being added as a member.</p>
43+
* the added member accounts, with the exception of the organization delegated administrator
44+
* account. A delegated administrator must enable GuardDuty prior to being added as a
45+
* member.</p>
4646
* <p>If you are adding accounts by invitation, before using <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a>, use
47-
* <code>CreateMembers</code> after GuardDuty has been enabled in potential member accounts.</p>
48-
* <p>If you disassociate a member from a GuardDuty
49-
* delegated administrator, the member account details
50-
* obtained from this API, including the associated email addresses, will be retained.
51-
* This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
52-
* remove the details associated with a member account, the delegated administrator must invoke the
53-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
47+
* <code>CreateMembers</code> after GuardDuty has been enabled in potential member accounts.</p>
48+
* <p>If you disassociate a member from a GuardDuty delegated administrator, the member account
49+
* details obtained from this API, including the associated email addresses, will be retained.
50+
* This is done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without
51+
* the need to invoke the CreateMembers API again. To remove the details associated with a member
52+
* account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API.
53+
* </p>
5454
* @example
5555
* Use a bare-bones client and the command you need to make an API call.
5656
* ```javascript

clients/client-guardduty/src/commands/DescribeOrganizationConfigurationCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -85,11 +85,11 @@ export interface DescribeOrganizationConfigurationCommandOutput
8585
* // Features: [ // OrganizationFeaturesConfigurationsResults
8686
* // { // OrganizationFeatureConfigurationResult
8787
* // Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "EKS_RUNTIME_MONITORING" || "LAMBDA_NETWORK_LOGS",
88-
* // AutoEnable: "NEW" || "NONE",
88+
* // AutoEnable: "NEW" || "NONE" || "ALL",
8989
* // AdditionalConfiguration: [ // OrganizationAdditionalConfigurationResults
9090
* // { // OrganizationAdditionalConfigurationResult
9191
* // Name: "EKS_ADDON_MANAGEMENT",
92-
* // AutoEnable: "NEW" || "NONE",
92+
* // AutoEnable: "NEW" || "NONE" || "ALL",
9393
* // },
9494
* // ],
9595
* // },

clients/client-guardduty/src/commands/DisassociateFromAdministratorAccountCommand.ts

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -45,12 +45,12 @@ export interface DisassociateFromAdministratorAccountCommandOutput
4545
/**
4646
* @public
4747
* <p>Disassociates the current GuardDuty member account from its administrator account.</p>
48-
* <p>When you
49-
* disassociate an invited member from a GuardDuty delegated administrator, the member account details
50-
* obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is
51-
* done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
52-
* remove the details associated with a member account, the delegated administrator must invoke the
53-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
48+
* <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member
49+
* account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API,
50+
* including the associated email addresses, are retained. This is done so that the delegated
51+
* administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without
52+
* the need to invoke the CreateMembers API again. To remove the details associated with a member
53+
* account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
5454
* <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to
5555
* <code>ALL</code>, you'll receive an error if you attempt to disable GuardDuty in a member
5656
* account.</p>

clients/client-guardduty/src/commands/DisassociateFromMasterAccountCommand.ts

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -44,12 +44,12 @@ export interface DisassociateFromMasterAccountCommandOutput
4444
* @deprecated
4545
*
4646
* <p>Disassociates the current GuardDuty member account from its administrator account.</p>
47-
* <p>When you
48-
* disassociate an invited member from a GuardDuty delegated administrator, the member account details
49-
* obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is
50-
* done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
51-
* remove the details associated with a member account, the delegated administrator must invoke the
52-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API.</p>
47+
* <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member
48+
* account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API,
49+
* including the associated email addresses, are retained. This is done so that the delegated
50+
* administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without
51+
* the need to invoke the CreateMembers API again. To remove the details associated with a member
52+
* account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API.</p>
5353
* @example
5454
* Use a bare-bones client and the command you need to make an API call.
5555
* ```javascript

clients/client-guardduty/src/commands/DisassociateMembersCommand.ts

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -36,14 +36,14 @@ export interface DisassociateMembersCommandOutput extends DisassociateMembersRes
3636

3737
/**
3838
* @public
39-
* <p>Disassociates GuardDuty member accounts (from the current administrator account) specified
40-
* by the account IDs.</p>
41-
* <p>When you
42-
* disassociate an invited member from a GuardDuty delegated administrator, the member account details
43-
* obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API, including the associated email addresses, are retained. This is
44-
* done so that the delegated administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without the need to invoke the CreateMembers API again. To
45-
* remove the details associated with a member account, the delegated administrator must invoke the
46-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
39+
* <p>Disassociates GuardDuty member accounts (from the current administrator account)
40+
* specified by the account IDs.</p>
41+
* <p>When you disassociate an invited member from a GuardDuty delegated administrator, the member
42+
* account details obtained from the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> API,
43+
* including the associated email addresses, are retained. This is done so that the delegated
44+
* administrator can invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a> API without
45+
* the need to invoke the CreateMembers API again. To remove the details associated with a member
46+
* account, the delegated administrator must invoke the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a> API. </p>
4747
* <p>With <code>autoEnableOrganizationMembers</code> configuration for your organization set to
4848
* <code>ALL</code>, you'll receive an error if you attempt to disassociate a member account
4949
* before removing them from your Amazon Web Services organization.</p>

clients/client-guardduty/src/commands/InviteMembersCommand.ts

Lines changed: 16 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -36,24 +36,22 @@ export interface InviteMembersCommandOutput extends InviteMembersResponse, __Met
3636

3737
/**
3838
* @public
39-
* <p>Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services account
40-
* that invokes this API. If you are using Amazon Web Services Organizations to manager your GuardDuty environment, this step is not
41-
* needed. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_organizations.html">Managing accounts with Amazon Web Services Organizations</a>.</p>
42-
* <p>To invite Amazon Web Services accounts, the first step is
43-
* to ensure that GuardDuty has been enabled in the potential member accounts. You can now invoke this API
44-
* to add accounts by invitation. The
45-
* invited accounts can either accept or decline the invitation from their GuardDuty accounts. Each invited Amazon Web Services account can
46-
* choose to accept the invitation from only one Amazon Web Services account. For more information, see
47-
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_invitations.html">Managing GuardDuty accounts
48-
* by invitation</a>.</p>
49-
* <p>After the invite has been accepted and you choose to disassociate a member account
50-
* (by using <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateMembers.html">DisassociateMembers</a>) from your account,
51-
* the details of the member account obtained by invoking <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a>, including the
52-
* associated email addresses, will be retained.
53-
* This is done so that you can invoke InviteMembers without the need to invoke
54-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> again. To
55-
* remove the details associated with a member account, you must also invoke
56-
* <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a>. </p>
39+
* <p>Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services
40+
* account that invokes this API. If you are using Amazon Web Services Organizations to manager your GuardDuty
41+
* environment, this step is not needed. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_organizations.html">Managing accounts with Amazon Web Services
42+
* Organizations</a>.</p>
43+
* <p>To invite Amazon Web Services accounts, the first step is to ensure that GuardDuty has been enabled in the
44+
* potential member accounts. You can now invoke this API to add accounts by invitation. The
45+
* invited accounts can either accept or decline the invitation from their GuardDuty accounts. Each
46+
* invited Amazon Web Services account can choose to accept the invitation from only one Amazon Web Services account. For
47+
* more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_invitations.html">Managing GuardDuty accounts by
48+
* invitation</a>.</p>
49+
* <p>After the invite has been accepted and you choose to disassociate a member account (by
50+
* using <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DisassociateMembers.html">DisassociateMembers</a>) from your account, the details of the member account obtained by
51+
* invoking <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a>, including
52+
* the associated email addresses, will be retained. This is done so that you can invoke
53+
* InviteMembers without the need to invoke <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_CreateMembers.html">CreateMembers</a> again. To
54+
* remove the details associated with a member account, you must also invoke <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DeleteMembers.html">DeleteMembers</a>. </p>
5755
* @example
5856
* Use a bare-bones client and the command you need to make an API call.
5957
* ```javascript

clients/client-guardduty/src/commands/ListTagsForResourceCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,8 +37,8 @@ export interface ListTagsForResourceCommandOutput extends ListTagsForResourceRes
3737
/**
3838
* @public
3939
* <p>Lists tags for a resource. Tagging is currently supported for detectors, finding filters,
40-
* IP sets, threat intel sets, publishing destination, with a limit of 50 tags per resource. When invoked, this
41-
* operation returns all assigned tags for a given resource.</p>
40+
* IP sets, threat intel sets, and publishing destination, with a limit of 50 tags per each
41+
* resource. When invoked, this operation returns all assigned tags for a given resource.</p>
4242
* @example
4343
* Use a bare-bones client and the command you need to make an API call.
4444
* ```javascript

clients/client-guardduty/src/commands/StartMalwareScanCommand.ts

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,8 +36,7 @@ export interface StartMalwareScanCommandOutput extends StartMalwareScanResponse,
3636

3737
/**
3838
* @public
39-
* <p>Initiates the malware scan. Invoking this API will automatically create the <a href="https://docs.aws.amazon.com/guardduty/latest/ug/slr-permissions-malware-protection.html">Service-linked role </a> in
40-
* the corresponding account.</p>
39+
* <p>Initiates the malware scan. Invoking this API will automatically create the <a href="https://docs.aws.amazon.com/guardduty/latest/ug/slr-permissions-malware-protection.html">Service-linked role </a> in the corresponding account.</p>
4140
* @example
4241
* Use a bare-bones client and the command you need to make an API call.
4342
* ```javascript

clients/client-guardduty/src/commands/UpdateOrganizationConfigurationCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -75,11 +75,11 @@ export interface UpdateOrganizationConfigurationCommandOutput
7575
* Features: [ // OrganizationFeaturesConfigurations
7676
* { // OrganizationFeatureConfiguration
7777
* Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "EKS_RUNTIME_MONITORING" || "LAMBDA_NETWORK_LOGS",
78-
* AutoEnable: "NEW" || "NONE",
78+
* AutoEnable: "NEW" || "NONE" || "ALL",
7979
* AdditionalConfiguration: [ // OrganizationAdditionalConfigurations
8080
* { // OrganizationAdditionalConfiguration
8181
* Name: "EKS_ADDON_MANAGEMENT",
82-
* AutoEnable: "NEW" || "NONE",
82+
* AutoEnable: "NEW" || "NONE" || "ALL",
8383
* },
8484
* ],
8585
* },

0 commit comments

Comments
 (0)