Skip to content

Commit dc038ef

Browse files
author
awstools
committed
feat(client-securityhub): Adds and updates APIs to support customizable security controls. This feature allows Security Hub customers to provide custom parameters for security controls. With this release, findings for controls that support custom parameters will include the parameters used to generate the findings.
1 parent 0176799 commit dc038ef

22 files changed

+3082
-194
lines changed

‎clients/client-securityhub/README.md

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -633,6 +633,14 @@ GetMembers
633633

634634
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/securityhub/command/GetMembersCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-securityhub/Interface/GetMembersCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-securityhub/Interface/GetMembersCommandOutput/)
635635

636+
</details>
637+
<details>
638+
<summary>
639+
GetSecurityControlDefinition
640+
</summary>
641+
642+
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/securityhub/command/GetSecurityControlDefinitionCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-securityhub/Interface/GetSecurityControlDefinitionCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-securityhub/Interface/GetSecurityControlDefinitionCommandOutput/)
643+
636644
</details>
637645
<details>
638646
<summary>
@@ -769,6 +777,14 @@ UpdateOrganizationConfiguration
769777

770778
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/securityhub/command/UpdateOrganizationConfigurationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-securityhub/Interface/UpdateOrganizationConfigurationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-securityhub/Interface/UpdateOrganizationConfigurationCommandOutput/)
771779

780+
</details>
781+
<details>
782+
<summary>
783+
UpdateSecurityControl
784+
</summary>
785+
786+
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/securityhub/command/UpdateSecurityControlCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-securityhub/Interface/UpdateSecurityControlCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-securityhub/Interface/UpdateSecurityControlCommandOutput/)
787+
772788
</details>
773789
<details>
774790
<summary>

‎clients/client-securityhub/src/SecurityHub.ts

Lines changed: 46 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -226,6 +226,11 @@ import {
226226
GetMasterAccountCommandOutput,
227227
} from "./commands/GetMasterAccountCommand";
228228
import { GetMembersCommand, GetMembersCommandInput, GetMembersCommandOutput } from "./commands/GetMembersCommand";
229+
import {
230+
GetSecurityControlDefinitionCommand,
231+
GetSecurityControlDefinitionCommandInput,
232+
GetSecurityControlDefinitionCommandOutput,
233+
} from "./commands/GetSecurityControlDefinitionCommand";
229234
import {
230235
InviteMembersCommand,
231236
InviteMembersCommandInput,
@@ -303,6 +308,11 @@ import {
303308
UpdateOrganizationConfigurationCommandInput,
304309
UpdateOrganizationConfigurationCommandOutput,
305310
} from "./commands/UpdateOrganizationConfigurationCommand";
311+
import {
312+
UpdateSecurityControlCommand,
313+
UpdateSecurityControlCommandInput,
314+
UpdateSecurityControlCommandOutput,
315+
} from "./commands/UpdateSecurityControlCommand";
306316
import {
307317
UpdateSecurityHubConfigurationCommand,
308318
UpdateSecurityHubConfigurationCommandInput,
@@ -364,6 +374,7 @@ const commands = {
364374
GetInvitationsCountCommand,
365375
GetMasterAccountCommand,
366376
GetMembersCommand,
377+
GetSecurityControlDefinitionCommand,
367378
InviteMembersCommand,
368379
ListAutomationRulesCommand,
369380
ListEnabledProductsForImportCommand,
@@ -381,6 +392,7 @@ const commands = {
381392
UpdateFindingsCommand,
382393
UpdateInsightCommand,
383394
UpdateOrganizationConfigurationCommand,
395+
UpdateSecurityControlCommand,
384396
UpdateSecurityHubConfigurationCommand,
385397
UpdateStandardsControlCommand,
386398
};
@@ -1154,6 +1166,23 @@ export interface SecurityHub {
11541166
cb: (err: any, data?: GetMembersCommandOutput) => void
11551167
): void;
11561168

1169+
/**
1170+
* @see {@link GetSecurityControlDefinitionCommand}
1171+
*/
1172+
getSecurityControlDefinition(
1173+
args: GetSecurityControlDefinitionCommandInput,
1174+
options?: __HttpHandlerOptions
1175+
): Promise<GetSecurityControlDefinitionCommandOutput>;
1176+
getSecurityControlDefinition(
1177+
args: GetSecurityControlDefinitionCommandInput,
1178+
cb: (err: any, data?: GetSecurityControlDefinitionCommandOutput) => void
1179+
): void;
1180+
getSecurityControlDefinition(
1181+
args: GetSecurityControlDefinitionCommandInput,
1182+
options: __HttpHandlerOptions,
1183+
cb: (err: any, data?: GetSecurityControlDefinitionCommandOutput) => void
1184+
): void;
1185+
11571186
/**
11581187
* @see {@link InviteMembersCommand}
11591188
*/
@@ -1407,6 +1436,23 @@ export interface SecurityHub {
14071436
cb: (err: any, data?: UpdateOrganizationConfigurationCommandOutput) => void
14081437
): void;
14091438

1439+
/**
1440+
* @see {@link UpdateSecurityControlCommand}
1441+
*/
1442+
updateSecurityControl(
1443+
args: UpdateSecurityControlCommandInput,
1444+
options?: __HttpHandlerOptions
1445+
): Promise<UpdateSecurityControlCommandOutput>;
1446+
updateSecurityControl(
1447+
args: UpdateSecurityControlCommandInput,
1448+
cb: (err: any, data?: UpdateSecurityControlCommandOutput) => void
1449+
): void;
1450+
updateSecurityControl(
1451+
args: UpdateSecurityControlCommandInput,
1452+
options: __HttpHandlerOptions,
1453+
cb: (err: any, data?: UpdateSecurityControlCommandOutput) => void
1454+
): void;
1455+
14101456
/**
14111457
* @see {@link UpdateSecurityHubConfigurationCommand}
14121458
*/

‎clients/client-securityhub/src/SecurityHubClient.ts

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -182,6 +182,10 @@ import {
182182
} from "./commands/GetInvitationsCountCommand";
183183
import { GetMasterAccountCommandInput, GetMasterAccountCommandOutput } from "./commands/GetMasterAccountCommand";
184184
import { GetMembersCommandInput, GetMembersCommandOutput } from "./commands/GetMembersCommand";
185+
import {
186+
GetSecurityControlDefinitionCommandInput,
187+
GetSecurityControlDefinitionCommandOutput,
188+
} from "./commands/GetSecurityControlDefinitionCommand";
185189
import { InviteMembersCommandInput, InviteMembersCommandOutput } from "./commands/InviteMembersCommand";
186190
import {
187191
ListAutomationRulesCommandInput,
@@ -226,6 +230,10 @@ import {
226230
UpdateOrganizationConfigurationCommandInput,
227231
UpdateOrganizationConfigurationCommandOutput,
228232
} from "./commands/UpdateOrganizationConfigurationCommand";
233+
import {
234+
UpdateSecurityControlCommandInput,
235+
UpdateSecurityControlCommandOutput,
236+
} from "./commands/UpdateSecurityControlCommand";
229237
import {
230238
UpdateSecurityHubConfigurationCommandInput,
231239
UpdateSecurityHubConfigurationCommandOutput,
@@ -297,6 +305,7 @@ export type ServiceInputTypes =
297305
| GetInvitationsCountCommandInput
298306
| GetMasterAccountCommandInput
299307
| GetMembersCommandInput
308+
| GetSecurityControlDefinitionCommandInput
300309
| InviteMembersCommandInput
301310
| ListAutomationRulesCommandInput
302311
| ListEnabledProductsForImportCommandInput
@@ -314,6 +323,7 @@ export type ServiceInputTypes =
314323
| UpdateFindingsCommandInput
315324
| UpdateInsightCommandInput
316325
| UpdateOrganizationConfigurationCommandInput
326+
| UpdateSecurityControlCommandInput
317327
| UpdateSecurityHubConfigurationCommandInput
318328
| UpdateStandardsControlCommandInput;
319329

@@ -369,6 +379,7 @@ export type ServiceOutputTypes =
369379
| GetInvitationsCountCommandOutput
370380
| GetMasterAccountCommandOutput
371381
| GetMembersCommandOutput
382+
| GetSecurityControlDefinitionCommandOutput
372383
| InviteMembersCommandOutput
373384
| ListAutomationRulesCommandOutput
374385
| ListEnabledProductsForImportCommandOutput
@@ -386,6 +397,7 @@ export type ServiceOutputTypes =
386397
| UpdateFindingsCommandOutput
387398
| UpdateInsightCommandOutput
388399
| UpdateOrganizationConfigurationCommandOutput
400+
| UpdateSecurityControlCommandOutput
389401
| UpdateSecurityHubConfigurationCommandOutput
390402
| UpdateStandardsControlCommandOutput;
391403

‎clients/client-securityhub/src/commands/BatchGetAutomationRulesCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -138,13 +138,17 @@ export interface BatchGetAutomationRulesCommandOutput extends BatchGetAutomation
138138
* // { // NumberFilter
139139
* // Gte: Number("double"),
140140
* // Lte: Number("double"),
141+
* // Gt: Number("double"),
142+
* // Lt: Number("double"),
141143
* // Eq: Number("double"),
142144
* // },
143145
* // ],
144146
* // Criticality: [
145147
* // {
146148
* // Gte: Number("double"),
147149
* // Lte: Number("double"),
150+
* // Gt: Number("double"),
151+
* // Lt: Number("double"),
148152
* // Eq: Number("double"),
149153
* // },
150154
* // ],

‎clients/client-securityhub/src/commands/BatchGetSecurityControlsCommand.ts

Lines changed: 23 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63,6 +63,29 @@ export interface BatchGetSecurityControlsCommandOutput extends BatchGetSecurityC
6363
* // RemediationUrl: "STRING_VALUE", // required
6464
* // SeverityRating: "LOW" || "MEDIUM" || "HIGH" || "CRITICAL", // required
6565
* // SecurityControlStatus: "ENABLED" || "DISABLED", // required
66+
* // UpdateStatus: "READY" || "UPDATING",
67+
* // Parameters: { // Parameters
68+
* // "<keys>": { // ParameterConfiguration
69+
* // ValueType: "DEFAULT" || "CUSTOM", // required
70+
* // Value: { // ParameterValue Union: only one key present
71+
* // Integer: Number("int"),
72+
* // IntegerList: [ // IntegerList
73+
* // Number("int"),
74+
* // ],
75+
* // Double: Number("double"),
76+
* // String: "STRING_VALUE",
77+
* // StringList: [ // StringList
78+
* // "STRING_VALUE",
79+
* // ],
80+
* // Boolean: true || false,
81+
* // Enum: "STRING_VALUE",
82+
* // EnumList: [
83+
* // "STRING_VALUE",
84+
* // ],
85+
* // },
86+
* // },
87+
* // },
88+
* // LastUpdateReason: "STRING_VALUE",
6689
* // },
6790
* // ],
6891
* // UnprocessedIds: [ // UnprocessedSecurityControls

‎clients/client-securityhub/src/commands/BatchImportFindingsCommand.ts

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4005,6 +4005,14 @@ export interface BatchImportFindingsCommandOutput extends BatchImportFindingsRes
40054005
* StandardsId: "STRING_VALUE",
40064006
* },
40074007
* ],
4008+
* SecurityControlParameters: [ // SecurityControlParametersList
4009+
* { // SecurityControlParameter
4010+
* Name: "STRING_VALUE",
4011+
* Value: [
4012+
* "STRING_VALUE",
4013+
* ],
4014+
* },
4015+
* ],
40084016
* },
40094017
* VerificationState: "UNKNOWN" || "TRUE_POSITIVE" || "FALSE_POSITIVE" || "BENIGN_POSITIVE",
40104018
* WorkflowState: "NEW" || "ASSIGNED" || "IN_PROGRESS" || "DEFERRED" || "RESOLVED",
@@ -4069,9 +4077,7 @@ export interface BatchImportFindingsCommandOutput extends BatchImportFindingsRes
40694077
* ExploitAvailable: "YES" || "NO",
40704078
* CodeVulnerabilities: [ // VulnerabilityCodeVulnerabilitiesList
40714079
* { // VulnerabilityCodeVulnerabilities
4072-
* Cwes: [
4073-
* "STRING_VALUE",
4074-
* ],
4080+
* Cwes: "<TypeList>",
40754081
* FilePath: { // CodeVulnerabilitiesFilePath
40764082
* EndLine: Number("int"),
40774083
* FileName: "STRING_VALUE",

‎clients/client-securityhub/src/commands/BatchUpdateAutomationRulesCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -131,13 +131,17 @@ export interface BatchUpdateAutomationRulesCommandOutput extends BatchUpdateAuto
131131
* { // NumberFilter
132132
* Gte: Number("double"),
133133
* Lte: Number("double"),
134+
* Gt: Number("double"),
135+
* Lt: Number("double"),
134136
* Eq: Number("double"),
135137
* },
136138
* ],
137139
* Criticality: [
138140
* {
139141
* Gte: Number("double"),
140142
* Lte: Number("double"),
143+
* Gt: Number("double"),
144+
* Lt: Number("double"),
141145
* Eq: Number("double"),
142146
* },
143147
* ],

‎clients/client-securityhub/src/commands/CreateAutomationRuleCommand.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -130,13 +130,17 @@ export interface CreateAutomationRuleCommandOutput extends CreateAutomationRuleR
130130
* { // NumberFilter
131131
* Gte: Number("double"),
132132
* Lte: Number("double"),
133+
* Gt: Number("double"),
134+
* Lt: Number("double"),
133135
* Eq: Number("double"),
134136
* },
135137
* ],
136138
* Criticality: [
137139
* {
138140
* Gte: Number("double"),
139141
* Lte: Number("double"),
142+
* Gt: Number("double"),
143+
* Lt: Number("double"),
140144
* Eq: Number("double"),
141145
* },
142146
* ],

‎clients/client-securityhub/src/commands/CreateInsightCommand.ts

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -125,13 +125,17 @@ export interface CreateInsightCommandOutput extends CreateInsightResponse, __Met
125125
* { // NumberFilter
126126
* Gte: Number("double"),
127127
* Lte: Number("double"),
128+
* Gt: Number("double"),
129+
* Lt: Number("double"),
128130
* Eq: Number("double"),
129131
* },
130132
* ],
131133
* SeverityNormalized: [
132134
* {
133135
* Gte: Number("double"),
134136
* Lte: Number("double"),
137+
* Gt: Number("double"),
138+
* Lt: Number("double"),
135139
* Eq: Number("double"),
136140
* },
137141
* ],
@@ -140,13 +144,17 @@ export interface CreateInsightCommandOutput extends CreateInsightResponse, __Met
140144
* {
141145
* Gte: Number("double"),
142146
* Lte: Number("double"),
147+
* Gt: Number("double"),
148+
* Lt: Number("double"),
143149
* Eq: Number("double"),
144150
* },
145151
* ],
146152
* Criticality: [
147153
* {
148154
* Gte: Number("double"),
149155
* Lte: Number("double"),
156+
* Gt: Number("double"),
157+
* Lt: Number("double"),
150158
* Eq: Number("double"),
151159
* },
152160
* ],
@@ -190,6 +198,8 @@ export interface CreateInsightCommandOutput extends CreateInsightResponse, __Met
190198
* {
191199
* Gte: Number("double"),
192200
* Lte: Number("double"),
201+
* Gt: Number("double"),
202+
* Lt: Number("double"),
193203
* Eq: Number("double"),
194204
* },
195205
* ],
@@ -299,6 +309,10 @@ export interface CreateInsightCommandOutput extends CreateInsightResponse, __Met
299309
* ],
300310
* ComplianceSecurityControlId: "<StringFilterList>",
301311
* ComplianceAssociatedStandardsId: "<StringFilterList>",
312+
* VulnerabilitiesExploitAvailable: "<StringFilterList>",
313+
* VulnerabilitiesFixAvailable: "<StringFilterList>",
314+
* ComplianceSecurityControlParametersName: "<StringFilterList>",
315+
* ComplianceSecurityControlParametersValue: "<StringFilterList>",
302316
* },
303317
* GroupByAttribute: "STRING_VALUE", // required
304318
* };

0 commit comments

Comments
 (0)