Skip to content

Commit 60477da

Browse files
author
awstools
committed
feat(client-guardduty): Adding support for extended threat detection for EKS Audit Logs and EKS Runtime Monitoring.
1 parent e82957b commit 60477da

File tree

8 files changed

+883
-140
lines changed

8 files changed

+883
-140
lines changed

‎clients/client-guardduty/src/commands/GetAdministratorAccountCommand.ts

Lines changed: 14 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,10 +30,20 @@ export interface GetAdministratorAccountCommandOutput extends GetAdministratorAc
3030
/**
3131
* <p>Provides the details of the GuardDuty administrator account associated with the current
3232
* GuardDuty member account.</p>
33-
* <note>
34-
* <p>If the organization's management account or a delegated administrator runs this API,
35-
* it will return success (<code>HTTP 200</code>) but no content.</p>
36-
* </note>
33+
* <p>Based on the type of account that runs this API, the following list shows how the API behavior varies:</p>
34+
* <ul>
35+
* <li>
36+
* <p>When the GuardDuty administrator account runs this API, it will return success (<code>HTTP 200</code>) but no content.</p>
37+
* </li>
38+
* <li>
39+
* <p>When a member account runs this API, it will return the details of the GuardDuty administrator account that is associated
40+
* with this calling member account.</p>
41+
* </li>
42+
* <li>
43+
* <p>When an individual account (not associated with an organization) runs this API, it will return success (<code>HTTP 200</code>)
44+
* but no content.</p>
45+
* </li>
46+
* </ul>
3747
* @example
3848
* Use a bare-bones client and the command you need to make an API call.
3949
* ```javascript

‎clients/client-guardduty/src/commands/GetFindingsCommand.ts

Lines changed: 34 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,8 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
66

77
import { commonParams } from "../endpoint/EndpointParameters";
88
import { GuardDutyClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../GuardDutyClient";
9-
import { GetFindingsRequest, GetFindingsResponse, GetFindingsResponseFilterSensitiveLog } from "../models/models_0";
9+
import { GetFindingsRequest } from "../models/models_0";
10+
import { GetFindingsResponse, GetFindingsResponseFilterSensitiveLog } from "../models/models_1";
1011
import { de_GetFindingsCommand, se_GetFindingsCommand } from "../protocols/Aws_restJson1";
1112

1213
/**
@@ -835,14 +836,19 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
835836
* // CreatedTime: new Date("TIMESTAMP"),
836837
* // Issuer: "STRING_VALUE",
837838
* // },
839+
* // Process: { // ActorProcess
840+
* // Name: "STRING_VALUE", // required
841+
* // Path: "STRING_VALUE", // required
842+
* // Sha256: "STRING_VALUE",
843+
* // },
838844
* // },
839845
* // ],
840846
* // Resources: [ // Resources
841847
* // { // ResourceV2
842848
* // Uid: "STRING_VALUE", // required
843849
* // Name: "STRING_VALUE",
844850
* // AccountId: "STRING_VALUE",
845-
* // ResourceType: "EC2_INSTANCE" || "EC2_NETWORK_INTERFACE" || "S3_BUCKET" || "S3_OBJECT" || "ACCESS_KEY", // required
851+
* // ResourceType: "EC2_INSTANCE" || "EC2_NETWORK_INTERFACE" || "S3_BUCKET" || "S3_OBJECT" || "ACCESS_KEY" || "EKS_CLUSTER" || "KUBERNETES_WORKLOAD" || "CONTAINER", // required
846852
* // Region: "STRING_VALUE",
847853
* // Service: "STRING_VALUE",
848854
* // CloudPartition: "STRING_VALUE",
@@ -918,6 +924,26 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
918924
* // Key: "STRING_VALUE",
919925
* // VersionId: "STRING_VALUE",
920926
* // },
927+
* // EksCluster: { // EksCluster
928+
* // Arn: "STRING_VALUE",
929+
* // CreatedAt: new Date("TIMESTAMP"),
930+
* // Status: "CREATING" || "ACTIVE" || "DELETING" || "FAILED" || "UPDATING" || "PENDING",
931+
* // VpcId: "STRING_VALUE",
932+
* // Ec2InstanceUids: [ // Ec2InstanceUids
933+
* // "STRING_VALUE",
934+
* // ],
935+
* // },
936+
* // KubernetesWorkload: { // KubernetesWorkload
937+
* // ContainerUids: [ // ContainerUids
938+
* // "STRING_VALUE",
939+
* // ],
940+
* // Namespace: "STRING_VALUE",
941+
* // KubernetesResourcesTypes: "PODS" || "JOBS" || "CRONJOBS" || "DEPLOYMENTS" || "DAEMONSETS" || "STATEFULSETS" || "REPLICASETS" || "REPLICATIONCONTROLLERS",
942+
* // },
943+
* // Container: { // ContainerFindingResource
944+
* // Image: "STRING_VALUE", // required
945+
* // ImageUid: "STRING_VALUE",
946+
* // },
921947
* // },
922948
* // },
923949
* // ],
@@ -945,7 +971,7 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
945971
* // Signals: [ // Signals // required
946972
* // { // Signal
947973
* // Uid: "STRING_VALUE", // required
948-
* // Type: "FINDING" || "CLOUD_TRAIL" || "S3_DATA_EVENTS", // required
974+
* // Type: "FINDING" || "CLOUD_TRAIL" || "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "FLOW_LOGS" || "DNS_LOGS" || "RUNTIME_MONITORING", // required
949975
* // Description: "STRING_VALUE",
950976
* // Name: "STRING_VALUE", // required
951977
* // CreatedAt: new Date("TIMESTAMP"), // required
@@ -965,7 +991,7 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
965991
* // ],
966992
* // SignalIndicators: [ // Indicators
967993
* // { // Indicator
968-
* // Key: "SUSPICIOUS_USER_AGENT" || "SUSPICIOUS_NETWORK" || "MALICIOUS_IP" || "TOR_IP" || "ATTACK_TACTIC" || "HIGH_RISK_API" || "ATTACK_TECHNIQUE" || "UNUSUAL_API_FOR_ACCOUNT" || "UNUSUAL_ASN_FOR_ACCOUNT" || "UNUSUAL_ASN_FOR_USER", // required
994+
* // Key: "SUSPICIOUS_USER_AGENT" || "SUSPICIOUS_NETWORK" || "MALICIOUS_IP" || "TOR_IP" || "ATTACK_TACTIC" || "HIGH_RISK_API" || "ATTACK_TECHNIQUE" || "UNUSUAL_API_FOR_ACCOUNT" || "UNUSUAL_ASN_FOR_ACCOUNT" || "UNUSUAL_ASN_FOR_USER" || "SUSPICIOUS_PROCESS" || "MALICIOUS_DOMAIN" || "MALICIOUS_PROCESS" || "CRYPTOMINING_IP" || "CRYPTOMINING_DOMAIN" || "CRYPTOMINING_PROCESS", // required
969995
* // Values: [ // IndicatorValues
970996
* // "STRING_VALUE",
971997
* // ],
@@ -976,13 +1002,16 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
9761002
* // ],
9771003
* // SequenceIndicators: [
9781004
* // {
979-
* // Key: "SUSPICIOUS_USER_AGENT" || "SUSPICIOUS_NETWORK" || "MALICIOUS_IP" || "TOR_IP" || "ATTACK_TACTIC" || "HIGH_RISK_API" || "ATTACK_TECHNIQUE" || "UNUSUAL_API_FOR_ACCOUNT" || "UNUSUAL_ASN_FOR_ACCOUNT" || "UNUSUAL_ASN_FOR_USER", // required
1005+
* // Key: "SUSPICIOUS_USER_AGENT" || "SUSPICIOUS_NETWORK" || "MALICIOUS_IP" || "TOR_IP" || "ATTACK_TACTIC" || "HIGH_RISK_API" || "ATTACK_TECHNIQUE" || "UNUSUAL_API_FOR_ACCOUNT" || "UNUSUAL_ASN_FOR_ACCOUNT" || "UNUSUAL_ASN_FOR_USER" || "SUSPICIOUS_PROCESS" || "MALICIOUS_DOMAIN" || "MALICIOUS_PROCESS" || "CRYPTOMINING_IP" || "CRYPTOMINING_DOMAIN" || "CRYPTOMINING_PROCESS", // required
9801006
* // Values: [
9811007
* // "STRING_VALUE",
9821008
* // ],
9831009
* // Title: "STRING_VALUE",
9841010
* // },
9851011
* // ],
1012+
* // AdditionalSequenceTypes: [ // AdditionalSequenceTypes
1013+
* // "STRING_VALUE",
1014+
* // ],
9861015
* // },
9871016
* // },
9881017
* // MalwareScanDetails: { // MalwareScanDetails

‎clients/client-guardduty/src/commands/GetFindingsStatisticsCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
66

77
import { commonParams } from "../endpoint/EndpointParameters";
88
import { GuardDutyClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../GuardDutyClient";
9-
import { GetFindingsStatisticsRequest, GetFindingsStatisticsResponse } from "../models/models_0";
9+
import { GetFindingsStatisticsRequest, GetFindingsStatisticsResponse } from "../models/models_1";
1010
import { de_GetFindingsStatisticsCommand, se_GetFindingsStatisticsCommand } from "../protocols/Aws_restJson1";
1111

1212
/**

‎clients/client-guardduty/src/commands/GetInvitationsCountCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
66

77
import { commonParams } from "../endpoint/EndpointParameters";
88
import { GuardDutyClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../GuardDutyClient";
9-
import { GetInvitationsCountRequest, GetInvitationsCountResponse } from "../models/models_0";
9+
import { GetInvitationsCountRequest, GetInvitationsCountResponse } from "../models/models_1";
1010
import { de_GetInvitationsCountCommand, se_GetInvitationsCountCommand } from "../protocols/Aws_restJson1";
1111

1212
/**

0 commit comments

Comments
 (0)