Skip to content

Commit 0f16674

Browse files
author
awstools
committed
feat(client-guardduty): Added EKS Runtime Monitoring feature support to existing detector, finding APIs and introducing new Coverage APIs
1 parent 3f4037e commit 0f16674

40 files changed

+4149
-905
lines changed

‎clients/client-guardduty/README.md

Lines changed: 25 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -16,16 +16,15 @@ It uses threat intelligence
1616
feeds, such as lists of malicious IPs and domains, and machine learning to identify
1717
unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment.
1818
This can include issues like escalations of privileges, uses of exposed credentials, or
19-
communication with malicious IPs, domains, or presence of malware on your
20-
Amazon EC2 instances and container workloads. For example, GuardDuty can detect
21-
compromised EC2 instances and container workloads serving malware, or mining bitcoin. </p>
22-
<p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such
23-
as unauthorized infrastructure deployments like EC2 instances deployed in a Region
24-
that has never been used, or unusual API calls like a password policy change to reduce
25-
password strength. </p>
26-
<p>GuardDuty informs you about the status of your Amazon Web Services environment by producing
27-
security findings that you can view in the GuardDuty console or through Amazon EventBridge.
28-
For more information, see the <i>
19+
communication with malicious IPs, domains, or presence of malware on your Amazon EC2 instances
20+
and container workloads. For example, GuardDuty can detect compromised EC2 instances and
21+
container workloads serving malware, or mining bitcoin. </p>
22+
<p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such as
23+
unauthorized infrastructure deployments like EC2 instances deployed in a Region that has never
24+
been used, or unusual API calls like a password policy change to reduce password strength. </p>
25+
<p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
26+
findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
27+
information, see the <i>
2928
<a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
3029
GuardDuty User Guide</a>
3130
</i>. </p>
@@ -440,6 +439,14 @@ GetAdministratorAccount
440439

441440
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/classes/getadministratoraccountcommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/interfaces/getadministratoraccountcommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/interfaces/getadministratoraccountcommandoutput.html)
442441

442+
</details>
443+
<details>
444+
<summary>
445+
GetCoverageStatistics
446+
</summary>
447+
448+
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/classes/getcoveragestatisticscommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/interfaces/getcoveragestatisticscommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/interfaces/getcoveragestatisticscommandoutput.html)
449+
443450
</details>
444451
<details>
445452
<summary>
@@ -552,6 +559,14 @@ InviteMembers
552559

553560
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/classes/invitememberscommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/interfaces/invitememberscommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/interfaces/invitememberscommandoutput.html)
554561

562+
</details>
563+
<details>
564+
<summary>
565+
ListCoverage
566+
</summary>
567+
568+
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/classes/listcoveragecommand.html) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/interfaces/listcoveragecommandinput.html) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/clients/client-guardduty/interfaces/listcoveragecommandoutput.html)
569+
555570
</details>
556571
<details>
557572
<summary>

‎clients/client-guardduty/src/GuardDuty.ts

Lines changed: 132 additions & 47 deletions
Large diffs are not rendered by default.

‎clients/client-guardduty/src/GuardDutyClient.ts

Lines changed: 18 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -121,6 +121,10 @@ import {
121121
GetAdministratorAccountCommandInput,
122122
GetAdministratorAccountCommandOutput,
123123
} from "./commands/GetAdministratorAccountCommand";
124+
import {
125+
GetCoverageStatisticsCommandInput,
126+
GetCoverageStatisticsCommandOutput,
127+
} from "./commands/GetCoverageStatisticsCommand";
124128
import { GetDetectorCommandInput, GetDetectorCommandOutput } from "./commands/GetDetectorCommand";
125129
import { GetFilterCommandInput, GetFilterCommandOutput } from "./commands/GetFilterCommand";
126130
import { GetFindingsCommandInput, GetFindingsCommandOutput } from "./commands/GetFindingsCommand";
@@ -147,6 +151,7 @@ import {
147151
import { GetThreatIntelSetCommandInput, GetThreatIntelSetCommandOutput } from "./commands/GetThreatIntelSetCommand";
148152
import { GetUsageStatisticsCommandInput, GetUsageStatisticsCommandOutput } from "./commands/GetUsageStatisticsCommand";
149153
import { InviteMembersCommandInput, InviteMembersCommandOutput } from "./commands/InviteMembersCommand";
154+
import { ListCoverageCommandInput, ListCoverageCommandOutput } from "./commands/ListCoverageCommand";
150155
import { ListDetectorsCommandInput, ListDetectorsCommandOutput } from "./commands/ListDetectorsCommand";
151156
import { ListFiltersCommandInput, ListFiltersCommandOutput } from "./commands/ListFiltersCommand";
152157
import { ListFindingsCommandInput, ListFindingsCommandOutput } from "./commands/ListFindingsCommand";
@@ -246,6 +251,7 @@ export type ServiceInputTypes =
246251
| DisassociateMembersCommandInput
247252
| EnableOrganizationAdminAccountCommandInput
248253
| GetAdministratorAccountCommandInput
254+
| GetCoverageStatisticsCommandInput
249255
| GetDetectorCommandInput
250256
| GetFilterCommandInput
251257
| GetFindingsCommandInput
@@ -260,6 +266,7 @@ export type ServiceInputTypes =
260266
| GetThreatIntelSetCommandInput
261267
| GetUsageStatisticsCommandInput
262268
| InviteMembersCommandInput
269+
| ListCoverageCommandInput
263270
| ListDetectorsCommandInput
264271
| ListFiltersCommandInput
265272
| ListFindingsCommandInput
@@ -316,6 +323,7 @@ export type ServiceOutputTypes =
316323
| DisassociateMembersCommandOutput
317324
| EnableOrganizationAdminAccountCommandOutput
318325
| GetAdministratorAccountCommandOutput
326+
| GetCoverageStatisticsCommandOutput
319327
| GetDetectorCommandOutput
320328
| GetFilterCommandOutput
321329
| GetFindingsCommandOutput
@@ -330,6 +338,7 @@ export type ServiceOutputTypes =
330338
| GetThreatIntelSetCommandOutput
331339
| GetUsageStatisticsCommandOutput
332340
| InviteMembersCommandOutput
341+
| ListCoverageCommandOutput
333342
| ListDetectorsCommandOutput
334343
| ListFiltersCommandOutput
335344
| ListFindingsCommandOutput
@@ -526,16 +535,15 @@ export interface GuardDutyClientResolvedConfig extends GuardDutyClientResolvedCo
526535
* feeds, such as lists of malicious IPs and domains, and machine learning to identify
527536
* unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment.
528537
* This can include issues like escalations of privileges, uses of exposed credentials, or
529-
* communication with malicious IPs, domains, or presence of malware on your
530-
* Amazon EC2 instances and container workloads. For example, GuardDuty can detect
531-
* compromised EC2 instances and container workloads serving malware, or mining bitcoin. </p>
532-
* <p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such
533-
* as unauthorized infrastructure deployments like EC2 instances deployed in a Region
534-
* that has never been used, or unusual API calls like a password policy change to reduce
535-
* password strength. </p>
536-
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing
537-
* security findings that you can view in the GuardDuty console or through Amazon EventBridge.
538-
* For more information, see the <i>
538+
* communication with malicious IPs, domains, or presence of malware on your Amazon EC2 instances
539+
* and container workloads. For example, GuardDuty can detect compromised EC2 instances and
540+
* container workloads serving malware, or mining bitcoin. </p>
541+
* <p>GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such as
542+
* unauthorized infrastructure deployments like EC2 instances deployed in a Region that has never
543+
* been used, or unusual API calls like a password policy change to reduce password strength. </p>
544+
* <p>GuardDuty informs you about the status of your Amazon Web Services environment by producing security
545+
* findings that you can view in the GuardDuty console or through Amazon EventBridge. For more
546+
* information, see the <i>
539547
* <a href="https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html">Amazon
540548
* GuardDuty User Guide</a>
541549
* </i>. </p>

‎clients/client-guardduty/src/commands/AcceptAdministratorInvitationCommand.ts

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,8 @@ export interface AcceptAdministratorInvitationCommandOutput
3737

3838
/**
3939
* @public
40-
* <p>Accepts the invitation to be a member account and get monitored by a GuardDuty administrator account that sent the invitation.</p>
40+
* <p>Accepts the invitation to be a member account and get monitored by a GuardDuty
41+
* administrator account that sent the invitation.</p>
4142
* @example
4243
* Use a bare-bones client and the command you need to make an API call.
4344
* ```javascript

‎clients/client-guardduty/src/commands/ArchiveFindingsCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,8 +37,8 @@ export interface ArchiveFindingsCommandOutput extends ArchiveFindingsResponse, _
3737
* @public
3838
* <p>Archives GuardDuty findings that are specified by the list of finding IDs.</p>
3939
* <note>
40-
* <p>Only the administrator account can archive findings. Member accounts don't have permission to
41-
* archive findings from their accounts.</p>
40+
* <p>Only the administrator account can archive findings. Member accounts don't have
41+
* permission to archive findings from their accounts.</p>
4242
* </note>
4343
* @example
4444
* Use a bare-bones client and the command you need to make an API call.

‎clients/client-guardduty/src/commands/CreateDetectorCommand.ts

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,8 +72,14 @@ export interface CreateDetectorCommandOutput extends CreateDetectorResponse, __M
7272
* },
7373
* Features: [ // DetectorFeatureConfigurations
7474
* { // DetectorFeatureConfiguration
75-
* Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS",
75+
* Name: "S3_DATA_EVENTS" || "EKS_AUDIT_LOGS" || "EBS_MALWARE_PROTECTION" || "RDS_LOGIN_EVENTS" || "EKS_RUNTIME_MONITORING",
7676
* Status: "ENABLED" || "DISABLED",
77+
* AdditionalConfiguration: [ // DetectorAdditionalConfigurations
78+
* { // DetectorAdditionalConfiguration
79+
* Name: "EKS_ADDON_MANAGEMENT",
80+
* Status: "ENABLED" || "DISABLED",
81+
* },
82+
* ],
7783
* },
7884
* ],
7985
* };

‎clients/client-guardduty/src/commands/CreateMembersCommand.ts

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -40,10 +40,10 @@ export interface CreateMembersCommandOutput extends CreateMembersResponse, __Met
4040
* invitation or through an organization.</p>
4141
* <p>When using <code>Create Members</code> as an organizations delegated administrator this
4242
* action will enable GuardDuty in the added member accounts, with the exception of the
43-
* organization delegated administrator account, which must enable GuardDuty prior to being added as a
44-
* member.</p>
43+
* organization delegated administrator account, which must enable GuardDuty prior to being added
44+
* as a member.</p>
4545
* <p>If you are adding accounts by invitation, use this action after GuardDuty has bee enabled in
46-
* potential member accounts and before using <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a>.</p>
46+
* potential member accounts and before using <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_InviteMembers.html">InviteMembers</a>.</p>
4747
* @example
4848
* Use a bare-bones client and the command you need to make an API call.
4949
* ```javascript

‎clients/client-guardduty/src/commands/CreateThreatIntelSetCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,8 +36,8 @@ export interface CreateThreatIntelSetCommandOutput extends CreateThreatIntelSetR
3636
/**
3737
* @public
3838
* <p>Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses.
39-
* GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can
40-
* use this operation.</p>
39+
* GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator
40+
* account can use this operation.</p>
4141
* @example
4242
* Use a bare-bones client and the command you need to make an API call.
4343
* ```javascript

‎clients/client-guardduty/src/commands/DeclineInvitationsCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,8 +35,8 @@ export interface DeclineInvitationsCommandOutput extends DeclineInvitationsRespo
3535

3636
/**
3737
* @public
38-
* <p>Declines invitations sent to the current member account by Amazon Web Services accounts specified by their
39-
* account IDs.</p>
38+
* <p>Declines invitations sent to the current member account by Amazon Web Services accounts specified by
39+
* their account IDs.</p>
4040
* @example
4141
* Use a bare-bones client and the command you need to make an API call.
4242
* ```javascript

‎clients/client-guardduty/src/commands/DeleteInvitationsCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,8 +35,8 @@ export interface DeleteInvitationsCommandOutput extends DeleteInvitationsRespons
3535

3636
/**
3737
* @public
38-
* <p>Deletes invitations sent to the current member account by Amazon Web Services accounts specified by their
39-
* account IDs.</p>
38+
* <p>Deletes invitations sent to the current member account by Amazon Web Services accounts specified by
39+
* their account IDs.</p>
4040
* @example
4141
* Use a bare-bones client and the command you need to make an API call.
4242
* ```javascript

0 commit comments

Comments
 (0)