{ "version": "2.0", "metadata": { "apiVersion": "2016-02-16", "endpointPrefix": "inspector", "jsonVersion": "1.1", "protocol": "json", "serviceFullName": "Amazon Inspector", "serviceId": "Inspector", "signatureVersion": "v4", "targetPrefix": "InspectorService", "uid": "inspector-2016-02-16" }, "operations": { "AddAttributesToFindings": { "name": "AddAttributesToFindings", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "AddAttributesToFindingsRequest" }, "output": { "shape": "AddAttributesToFindingsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Assigns attributes (key and value pairs) to the findings that are specified by the ARNs of the findings.

" }, "CreateAssessmentTarget": { "name": "CreateAssessmentTarget", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "CreateAssessmentTargetRequest" }, "output": { "shape": "CreateAssessmentTargetResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "LimitExceededException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "InvalidCrossAccountRoleException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Creates a new assessment target using the ARN of the resource group that is generated by CreateResourceGroup. If resourceGroupArn is not specified, all EC2 instances in the current AWS account and region are included in the assessment target. If the service-linked role isn’t already registered, this action also creates and registers a service-linked role to grant Amazon Inspector access to AWS Services needed to perform security assessments. You can create up to 50 assessment targets per AWS account. You can run up to 500 concurrent agents per AWS account. For more information, see Amazon Inspector Assessment Targets.

" }, "CreateAssessmentTemplate": { "name": "CreateAssessmentTemplate", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "CreateAssessmentTemplateRequest" }, "output": { "shape": "CreateAssessmentTemplateResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "LimitExceededException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Creates an assessment template for the assessment target that is specified by the ARN of the assessment target. If the service-linked role isn’t already registered, this action also creates and registers a service-linked role to grant Amazon Inspector access to AWS Services needed to perform security assessments.

" }, "CreateExclusionsPreview": { "name": "CreateExclusionsPreview", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "CreateExclusionsPreviewRequest" }, "output": { "shape": "CreateExclusionsPreviewResponse" }, "errors": [ { "shape": "InvalidInputException" }, { "shape": "PreviewGenerationInProgressException" }, { "shape": "InternalException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Starts the generation of an exclusions preview for the specified assessment template. The exclusions preview lists the potential exclusions (ExclusionPreview) that Inspector can detect before it runs the assessment.

" }, "CreateResourceGroup": { "name": "CreateResourceGroup", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "CreateResourceGroupRequest" }, "output": { "shape": "CreateResourceGroupResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "LimitExceededException" }, { "shape": "AccessDeniedException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Creates a resource group using the specified set of tags (key and value pairs) that are used to select the EC2 instances to be included in an Amazon Inspector assessment target. The created resource group is then used to create an Amazon Inspector assessment target. For more information, see CreateAssessmentTarget.

" }, "DeleteAssessmentRun": { "name": "DeleteAssessmentRun", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DeleteAssessmentRunRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AssessmentRunInProgressException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Deletes the assessment run that is specified by the ARN of the assessment run.

" }, "DeleteAssessmentTarget": { "name": "DeleteAssessmentTarget", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DeleteAssessmentTargetRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AssessmentRunInProgressException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Deletes the assessment target that is specified by the ARN of the assessment target.

" }, "DeleteAssessmentTemplate": { "name": "DeleteAssessmentTemplate", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DeleteAssessmentTemplateRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AssessmentRunInProgressException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Deletes the assessment template that is specified by the ARN of the assessment template.

" }, "DescribeAssessmentRuns": { "name": "DescribeAssessmentRuns", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DescribeAssessmentRunsRequest" }, "output": { "shape": "DescribeAssessmentRunsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" } ], "documentation": "

Describes the assessment runs that are specified by the ARNs of the assessment runs.

" }, "DescribeAssessmentTargets": { "name": "DescribeAssessmentTargets", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DescribeAssessmentTargetsRequest" }, "output": { "shape": "DescribeAssessmentTargetsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" } ], "documentation": "

Describes the assessment targets that are specified by the ARNs of the assessment targets.

" }, "DescribeAssessmentTemplates": { "name": "DescribeAssessmentTemplates", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DescribeAssessmentTemplatesRequest" }, "output": { "shape": "DescribeAssessmentTemplatesResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" } ], "documentation": "

Describes the assessment templates that are specified by the ARNs of the assessment templates.

" }, "DescribeCrossAccountAccessRole": { "name": "DescribeCrossAccountAccessRole", "http": { "method": "POST", "requestUri": "/" }, "output": { "shape": "DescribeCrossAccountAccessRoleResponse" }, "errors": [ { "shape": "InternalException" } ], "documentation": "

Describes the IAM role that enables Amazon Inspector to access your AWS account.

" }, "DescribeExclusions": { "name": "DescribeExclusions", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DescribeExclusionsRequest" }, "output": { "shape": "DescribeExclusionsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" } ], "documentation": "

Describes the exclusions that are specified by the exclusions' ARNs.

" }, "DescribeFindings": { "name": "DescribeFindings", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DescribeFindingsRequest" }, "output": { "shape": "DescribeFindingsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" } ], "documentation": "

Describes the findings that are specified by the ARNs of the findings.

" }, "DescribeResourceGroups": { "name": "DescribeResourceGroups", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DescribeResourceGroupsRequest" }, "output": { "shape": "DescribeResourceGroupsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" } ], "documentation": "

Describes the resource groups that are specified by the ARNs of the resource groups.

" }, "DescribeRulesPackages": { "name": "DescribeRulesPackages", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "DescribeRulesPackagesRequest" }, "output": { "shape": "DescribeRulesPackagesResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" } ], "documentation": "

Describes the rules packages that are specified by the ARNs of the rules packages.

" }, "GetAssessmentReport": { "name": "GetAssessmentReport", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "GetAssessmentReportRequest" }, "output": { "shape": "GetAssessmentReportResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "AssessmentRunInProgressException" }, { "shape": "UnsupportedFeatureException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Produces an assessment report that includes detailed and comprehensive results of a specified assessment run.

" }, "GetExclusionsPreview": { "name": "GetExclusionsPreview", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "GetExclusionsPreviewRequest" }, "output": { "shape": "GetExclusionsPreviewResponse" }, "errors": [ { "shape": "InvalidInputException" }, { "shape": "InternalException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

Retrieves the exclusions preview (a list of ExclusionPreview objects) specified by the preview token. You can obtain the preview token by running the CreateExclusionsPreview API.

" }, "GetTelemetryMetadata": { "name": "GetTelemetryMetadata", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "GetTelemetryMetadataRequest" }, "output": { "shape": "GetTelemetryMetadataResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

Information about the data that is collected for the specified assessment run.

" }, "ListAssessmentRunAgents": { "name": "ListAssessmentRunAgents", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListAssessmentRunAgentsRequest" }, "output": { "shape": "ListAssessmentRunAgentsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

Lists the agents of the assessment runs that are specified by the ARNs of the assessment runs.

" }, "ListAssessmentRuns": { "name": "ListAssessmentRuns", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListAssessmentRunsRequest" }, "output": { "shape": "ListAssessmentRunsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

Lists the assessment runs that correspond to the assessment templates that are specified by the ARNs of the assessment templates.

" }, "ListAssessmentTargets": { "name": "ListAssessmentTargets", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListAssessmentTargetsRequest" }, "output": { "shape": "ListAssessmentTargetsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" } ], "documentation": "

Lists the ARNs of the assessment targets within this AWS account. For more information about assessment targets, see Amazon Inspector Assessment Targets.

" }, "ListAssessmentTemplates": { "name": "ListAssessmentTemplates", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListAssessmentTemplatesRequest" }, "output": { "shape": "ListAssessmentTemplatesResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

Lists the assessment templates that correspond to the assessment targets that are specified by the ARNs of the assessment targets.

" }, "ListEventSubscriptions": { "name": "ListEventSubscriptions", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListEventSubscriptionsRequest" }, "output": { "shape": "ListEventSubscriptionsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

Lists all the event subscriptions for the assessment template that is specified by the ARN of the assessment template. For more information, see SubscribeToEvent and UnsubscribeFromEvent.

" }, "ListExclusions": { "name": "ListExclusions", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListExclusionsRequest" }, "output": { "shape": "ListExclusionsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

List exclusions that are generated by the assessment run.

" }, "ListFindings": { "name": "ListFindings", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListFindingsRequest" }, "output": { "shape": "ListFindingsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

Lists findings that are generated by the assessment runs that are specified by the ARNs of the assessment runs.

" }, "ListRulesPackages": { "name": "ListRulesPackages", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListRulesPackagesRequest" }, "output": { "shape": "ListRulesPackagesResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" } ], "documentation": "

Lists all available Amazon Inspector rules packages.

" }, "ListTagsForResource": { "name": "ListTagsForResource", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "ListTagsForResourceRequest" }, "output": { "shape": "ListTagsForResourceResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" } ], "documentation": "

Lists all tags associated with an assessment template.

" }, "PreviewAgents": { "name": "PreviewAgents", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "PreviewAgentsRequest" }, "output": { "shape": "PreviewAgentsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "InvalidCrossAccountRoleException" } ], "documentation": "

Previews the agents installed on the EC2 instances that are part of the specified assessment target.

" }, "RegisterCrossAccountAccessRole": { "name": "RegisterCrossAccountAccessRole", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "RegisterCrossAccountAccessRoleRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "InvalidCrossAccountRoleException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Registers the IAM role that grants Amazon Inspector access to AWS Services needed to perform security assessments.

" }, "RemoveAttributesFromFindings": { "name": "RemoveAttributesFromFindings", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "RemoveAttributesFromFindingsRequest" }, "output": { "shape": "RemoveAttributesFromFindingsResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Removes entire attributes (key and value pairs) from the findings that are specified by the ARNs of the findings where an attribute with the specified key exists.

" }, "SetTagsForResource": { "name": "SetTagsForResource", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "SetTagsForResourceRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Sets tags (key and value pairs) to the assessment template that is specified by the ARN of the assessment template.

" }, "StartAssessmentRun": { "name": "StartAssessmentRun", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "StartAssessmentRunRequest" }, "output": { "shape": "StartAssessmentRunResponse" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "LimitExceededException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "InvalidCrossAccountRoleException" }, { "shape": "AgentsAlreadyRunningAssessmentException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Starts the assessment run specified by the ARN of the assessment template. For this API to function properly, you must not exceed the limit of running up to 500 concurrent agents per AWS account.

" }, "StopAssessmentRun": { "name": "StopAssessmentRun", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "StopAssessmentRunRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Stops the assessment run that is specified by the ARN of the assessment run.

" }, "SubscribeToEvent": { "name": "SubscribeToEvent", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "SubscribeToEventRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "LimitExceededException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Enables the process of sending Amazon Simple Notification Service (SNS) notifications about a specified event to a specified SNS topic.

" }, "UnsubscribeFromEvent": { "name": "UnsubscribeFromEvent", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "UnsubscribeFromEventRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Disables the process of sending Amazon Simple Notification Service (SNS) notifications about a specified event to a specified SNS topic.

" }, "UpdateAssessmentTarget": { "name": "UpdateAssessmentTarget", "http": { "method": "POST", "requestUri": "/" }, "input": { "shape": "UpdateAssessmentTargetRequest" }, "errors": [ { "shape": "InternalException" }, { "shape": "InvalidInputException" }, { "shape": "AccessDeniedException" }, { "shape": "NoSuchEntityException" }, { "shape": "ServiceTemporarilyUnavailableException" } ], "documentation": "

Updates the assessment target that is specified by the ARN of the assessment target.

If resourceGroupArn is not specified, all EC2 instances in the current AWS account and region are included in the assessment target.

" } }, "shapes": { "AddAttributesToFindingsRequest": { "type": "structure", "required": [ "findingArns", "attributes" ], "members": { "findingArns": { "shape": "AddRemoveAttributesFindingArnList", "documentation": "

The ARNs that specify the findings that you want to assign attributes to.

" }, "attributes": { "shape": "UserAttributeList", "documentation": "

The array of attributes that you want to assign to specified findings.

" } } }, "AddAttributesToFindingsResponse": { "type": "structure", "required": [ "failedItems" ], "members": { "failedItems": { "shape": "FailedItems", "documentation": "

Attribute details that cannot be described. An error code is provided for each failed item.

" } } }, "AddRemoveAttributesFindingArnList": { "type": "list", "member": { "shape": "Arn" }, "max": 10, "min": 1 }, "AgentFilter": { "type": "structure", "required": [ "agentHealths", "agentHealthCodes" ], "members": { "agentHealths": { "shape": "AgentHealthList", "documentation": "

The current health state of the agent. Values can be set to HEALTHY or UNHEALTHY.

" }, "agentHealthCodes": { "shape": "AgentHealthCodeList", "documentation": "

The detailed health state of the agent. Values can be set to IDLE, RUNNING, SHUTDOWN, UNHEALTHY, THROTTLED, and UNKNOWN.

" } }, "documentation": "

Contains information about an Amazon Inspector agent. This data type is used as a request parameter in the ListAssessmentRunAgents action.

" }, "AgentHealth": { "type": "string", "enum": [ "HEALTHY", "UNHEALTHY", "UNKNOWN" ] }, "AgentHealthCode": { "type": "string", "enum": [ "IDLE", "RUNNING", "SHUTDOWN", "UNHEALTHY", "THROTTLED", "UNKNOWN" ] }, "AgentHealthCodeList": { "type": "list", "member": { "shape": "AgentHealthCode" }, "max": 10, "min": 0 }, "AgentHealthList": { "type": "list", "member": { "shape": "AgentHealth" }, "max": 10, "min": 0 }, "AgentId": { "type": "string", "max": 128, "min": 1 }, "AgentIdList": { "type": "list", "member": { "shape": "AgentId" }, "max": 99, "min": 0 }, "AgentPreview": { "type": "structure", "required": [ "agentId" ], "members": { "hostname": { "shape": "Hostname", "documentation": "

The hostname of the EC2 instance on which the Amazon Inspector Agent is installed.

" }, "agentId": { "shape": "AgentId", "documentation": "

The ID of the EC2 instance where the agent is installed.

" }, "autoScalingGroup": { "shape": "AutoScalingGroup", "documentation": "

The Auto Scaling group for the EC2 instance where the agent is installed.

" }, "agentHealth": { "shape": "AgentHealth", "documentation": "

The health status of the Amazon Inspector Agent.

" }, "agentVersion": { "shape": "AgentVersion", "documentation": "

The version of the Amazon Inspector Agent.

" }, "operatingSystem": { "shape": "OperatingSystem", "documentation": "

The operating system running on the EC2 instance on which the Amazon Inspector Agent is installed.

" }, "kernelVersion": { "shape": "KernelVersion", "documentation": "

The kernel version of the operating system running on the EC2 instance on which the Amazon Inspector Agent is installed.

" }, "ipv4Address": { "shape": "Ipv4Address", "documentation": "

The IP address of the EC2 instance on which the Amazon Inspector Agent is installed.

" } }, "documentation": "

Used as a response element in the PreviewAgents action.

" }, "AgentPreviewList": { "type": "list", "member": { "shape": "AgentPreview" }, "max": 100, "min": 0 }, "AgentVersion": { "type": "string", "max": 128, "min": 1 }, "AmiId": { "type": "string", "max": 256, "min": 0 }, "Arn": { "type": "string", "max": 300, "min": 1 }, "ArnCount": { "type": "integer" }, "AssessmentRulesPackageArnList": { "type": "list", "member": { "shape": "Arn" }, "max": 50, "min": 1 }, "AssessmentRun": { "type": "structure", "required": [ "arn", "name", "assessmentTemplateArn", "state", "durationInSeconds", "rulesPackageArns", "userAttributesForFindings", "createdAt", "stateChangedAt", "dataCollected", "stateChanges", "notifications", "findingCounts" ], "members": { "arn": { "shape": "Arn", "documentation": "

The ARN of the assessment run.

" }, "name": { "shape": "AssessmentRunName", "documentation": "

The auto-generated name for the assessment run.

" }, "assessmentTemplateArn": { "shape": "Arn", "documentation": "

The ARN of the assessment template that is associated with the assessment run.

" }, "state": { "shape": "AssessmentRunState", "documentation": "

The state of the assessment run.

" }, "durationInSeconds": { "shape": "AssessmentRunDuration", "documentation": "

The duration of the assessment run.

" }, "rulesPackageArns": { "shape": "AssessmentRulesPackageArnList", "documentation": "

The rules packages selected for the assessment run.

" }, "userAttributesForFindings": { "shape": "UserAttributeList", "documentation": "

The user-defined attributes that are assigned to every generated finding.

" }, "createdAt": { "shape": "Timestamp", "documentation": "

The time when StartAssessmentRun was called.

" }, "startedAt": { "shape": "Timestamp", "documentation": "

The time when StartAssessmentRun was called.

" }, "completedAt": { "shape": "Timestamp", "documentation": "

The assessment run completion time that corresponds to the rules packages evaluation completion time or failure.

" }, "stateChangedAt": { "shape": "Timestamp", "documentation": "

The last time when the assessment run's state changed.

" }, "dataCollected": { "shape": "Bool", "documentation": "

A Boolean value (true or false) that specifies whether the process of collecting data from the agents is completed.

" }, "stateChanges": { "shape": "AssessmentRunStateChangeList", "documentation": "

A list of the assessment run state changes.

" }, "notifications": { "shape": "AssessmentRunNotificationList", "documentation": "

A list of notifications for the event subscriptions. A notification about a particular generated finding is added to this list only once.

" }, "findingCounts": { "shape": "AssessmentRunFindingCounts", "documentation": "

Provides a total count of generated findings per severity.

" } }, "documentation": "

A snapshot of an Amazon Inspector assessment run that contains the findings of the assessment run .

Used as the response element in the DescribeAssessmentRuns action.

" }, "AssessmentRunAgent": { "type": "structure", "required": [ "agentId", "assessmentRunArn", "agentHealth", "agentHealthCode", "telemetryMetadata" ], "members": { "agentId": { "shape": "AgentId", "documentation": "

The AWS account of the EC2 instance where the agent is installed.

" }, "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN of the assessment run that is associated with the agent.

" }, "agentHealth": { "shape": "AgentHealth", "documentation": "

The current health state of the agent.

" }, "agentHealthCode": { "shape": "AgentHealthCode", "documentation": "

The detailed health state of the agent.

" }, "agentHealthDetails": { "shape": "Message", "documentation": "

The description for the agent health code.

" }, "autoScalingGroup": { "shape": "AutoScalingGroup", "documentation": "

The Auto Scaling group of the EC2 instance that is specified by the agent ID.

" }, "telemetryMetadata": { "shape": "TelemetryMetadataList", "documentation": "

The Amazon Inspector application data metrics that are collected by the agent.

" } }, "documentation": "

Contains information about an Amazon Inspector agent. This data type is used as a response element in the ListAssessmentRunAgents action.

" }, "AssessmentRunAgentList": { "type": "list", "member": { "shape": "AssessmentRunAgent" }, "max": 500, "min": 0 }, "AssessmentRunDuration": { "type": "integer", "max": 86400, "min": 180 }, "AssessmentRunFilter": { "type": "structure", "members": { "namePattern": { "shape": "NamePattern", "documentation": "

For a record to match a filter, an explicit value or a string containing a wildcard that is specified for this data type property must match the value of the assessmentRunName property of the AssessmentRun data type.

" }, "states": { "shape": "AssessmentRunStateList", "documentation": "

For a record to match a filter, one of the values specified for this data type property must be the exact match of the value of the assessmentRunState property of the AssessmentRun data type.

" }, "durationRange": { "shape": "DurationRange", "documentation": "

For a record to match a filter, the value that is specified for this data type property must inclusively match any value between the specified minimum and maximum values of the durationInSeconds property of the AssessmentRun data type.

" }, "rulesPackageArns": { "shape": "FilterRulesPackageArnList", "documentation": "

For a record to match a filter, the value that is specified for this data type property must be contained in the list of values of the rulesPackages property of the AssessmentRun data type.

" }, "startTimeRange": { "shape": "TimestampRange", "documentation": "

For a record to match a filter, the value that is specified for this data type property must inclusively match any value between the specified minimum and maximum values of the startTime property of the AssessmentRun data type.

" }, "completionTimeRange": { "shape": "TimestampRange", "documentation": "

For a record to match a filter, the value that is specified for this data type property must inclusively match any value between the specified minimum and maximum values of the completedAt property of the AssessmentRun data type.

" }, "stateChangeTimeRange": { "shape": "TimestampRange", "documentation": "

For a record to match a filter, the value that is specified for this data type property must match the stateChangedAt property of the AssessmentRun data type.

" } }, "documentation": "

Used as the request parameter in the ListAssessmentRuns action.

" }, "AssessmentRunFindingCounts": { "type": "map", "key": { "shape": "Severity" }, "value": { "shape": "FindingCount" } }, "AssessmentRunList": { "type": "list", "member": { "shape": "AssessmentRun" }, "max": 10, "min": 0 }, "AssessmentRunName": { "type": "string", "max": 140, "min": 1 }, "AssessmentRunNotification": { "type": "structure", "required": [ "date", "event", "error" ], "members": { "date": { "shape": "Timestamp", "documentation": "

The date of the notification.

" }, "event": { "shape": "InspectorEvent", "documentation": "

The event for which a notification is sent.

" }, "message": { "shape": "Message", "documentation": "

The message included in the notification.

" }, "error": { "shape": "Bool", "documentation": "

The Boolean value that specifies whether the notification represents an error.

" }, "snsTopicArn": { "shape": "Arn", "documentation": "

The SNS topic to which the SNS notification is sent.

" }, "snsPublishStatusCode": { "shape": "AssessmentRunNotificationSnsStatusCode", "documentation": "

The status code of the SNS notification.

" } }, "documentation": "

Used as one of the elements of the AssessmentRun data type.

" }, "AssessmentRunNotificationList": { "type": "list", "member": { "shape": "AssessmentRunNotification" }, "max": 50, "min": 0 }, "AssessmentRunNotificationSnsStatusCode": { "type": "string", "enum": [ "SUCCESS", "TOPIC_DOES_NOT_EXIST", "ACCESS_DENIED", "INTERNAL_ERROR" ] }, "AssessmentRunState": { "type": "string", "enum": [ "CREATED", "START_DATA_COLLECTION_PENDING", "START_DATA_COLLECTION_IN_PROGRESS", "COLLECTING_DATA", "STOP_DATA_COLLECTION_PENDING", "DATA_COLLECTED", "START_EVALUATING_RULES_PENDING", "EVALUATING_RULES", "FAILED", "ERROR", "COMPLETED", "COMPLETED_WITH_ERRORS", "CANCELED" ] }, "AssessmentRunStateChange": { "type": "structure", "required": [ "stateChangedAt", "state" ], "members": { "stateChangedAt": { "shape": "Timestamp", "documentation": "

The last time the assessment run state changed.

" }, "state": { "shape": "AssessmentRunState", "documentation": "

The assessment run state.

" } }, "documentation": "

Used as one of the elements of the AssessmentRun data type.

" }, "AssessmentRunStateChangeList": { "type": "list", "member": { "shape": "AssessmentRunStateChange" }, "max": 50, "min": 0 }, "AssessmentRunStateList": { "type": "list", "member": { "shape": "AssessmentRunState" }, "max": 50, "min": 0 }, "AssessmentTarget": { "type": "structure", "required": [ "arn", "name", "createdAt", "updatedAt" ], "members": { "arn": { "shape": "Arn", "documentation": "

The ARN that specifies the Amazon Inspector assessment target.

" }, "name": { "shape": "AssessmentTargetName", "documentation": "

The name of the Amazon Inspector assessment target.

" }, "resourceGroupArn": { "shape": "Arn", "documentation": "

The ARN that specifies the resource group that is associated with the assessment target.

" }, "createdAt": { "shape": "Timestamp", "documentation": "

The time at which the assessment target is created.

" }, "updatedAt": { "shape": "Timestamp", "documentation": "

The time at which UpdateAssessmentTarget is called.

" } }, "documentation": "

Contains information about an Amazon Inspector application. This data type is used as the response element in the DescribeAssessmentTargets action.

" }, "AssessmentTargetFilter": { "type": "structure", "members": { "assessmentTargetNamePattern": { "shape": "NamePattern", "documentation": "

For a record to match a filter, an explicit value or a string that contains a wildcard that is specified for this data type property must match the value of the assessmentTargetName property of the AssessmentTarget data type.

" } }, "documentation": "

Used as the request parameter in the ListAssessmentTargets action.

" }, "AssessmentTargetList": { "type": "list", "member": { "shape": "AssessmentTarget" }, "max": 10, "min": 0 }, "AssessmentTargetName": { "type": "string", "max": 140, "min": 1 }, "AssessmentTemplate": { "type": "structure", "required": [ "arn", "name", "assessmentTargetArn", "durationInSeconds", "rulesPackageArns", "userAttributesForFindings", "assessmentRunCount", "createdAt" ], "members": { "arn": { "shape": "Arn", "documentation": "

The ARN of the assessment template.

" }, "name": { "shape": "AssessmentTemplateName", "documentation": "

The name of the assessment template.

" }, "assessmentTargetArn": { "shape": "Arn", "documentation": "

The ARN of the assessment target that corresponds to this assessment template.

" }, "durationInSeconds": { "shape": "AssessmentRunDuration", "documentation": "

The duration in seconds specified for this assessment template. The default value is 3600 seconds (one hour). The maximum value is 86400 seconds (one day).

" }, "rulesPackageArns": { "shape": "AssessmentTemplateRulesPackageArnList", "documentation": "

The rules packages that are specified for this assessment template.

" }, "userAttributesForFindings": { "shape": "UserAttributeList", "documentation": "

The user-defined attributes that are assigned to every generated finding from the assessment run that uses this assessment template.

" }, "lastAssessmentRunArn": { "shape": "Arn", "documentation": "

The Amazon Resource Name (ARN) of the most recent assessment run associated with this assessment template. This value exists only when the value of assessmentRunCount is greaterpa than zero.

" }, "assessmentRunCount": { "shape": "ArnCount", "documentation": "

The number of existing assessment runs associated with this assessment template. This value can be zero or a positive integer.

" }, "createdAt": { "shape": "Timestamp", "documentation": "

The time at which the assessment template is created.

" } }, "documentation": "

Contains information about an Amazon Inspector assessment template. This data type is used as the response element in the DescribeAssessmentTemplates action.

" }, "AssessmentTemplateFilter": { "type": "structure", "members": { "namePattern": { "shape": "NamePattern", "documentation": "

For a record to match a filter, an explicit value or a string that contains a wildcard that is specified for this data type property must match the value of the assessmentTemplateName property of the AssessmentTemplate data type.

" }, "durationRange": { "shape": "DurationRange", "documentation": "

For a record to match a filter, the value specified for this data type property must inclusively match any value between the specified minimum and maximum values of the durationInSeconds property of the AssessmentTemplate data type.

" }, "rulesPackageArns": { "shape": "FilterRulesPackageArnList", "documentation": "

For a record to match a filter, the values that are specified for this data type property must be contained in the list of values of the rulesPackageArns property of the AssessmentTemplate data type.

" } }, "documentation": "

Used as the request parameter in the ListAssessmentTemplates action.

" }, "AssessmentTemplateList": { "type": "list", "member": { "shape": "AssessmentTemplate" }, "max": 10, "min": 0 }, "AssessmentTemplateName": { "type": "string", "max": 140, "min": 1 }, "AssessmentTemplateRulesPackageArnList": { "type": "list", "member": { "shape": "Arn" }, "max": 50, "min": 0 }, "AssetAttributes": { "type": "structure", "required": [ "schemaVersion" ], "members": { "schemaVersion": { "shape": "NumericVersion", "documentation": "

The schema version of this data type.

" }, "agentId": { "shape": "AgentId", "documentation": "

The ID of the agent that is installed on the EC2 instance where the finding is generated.

" }, "autoScalingGroup": { "shape": "AutoScalingGroup", "documentation": "

The Auto Scaling group of the EC2 instance where the finding is generated.

" }, "amiId": { "shape": "AmiId", "documentation": "

The ID of the Amazon Machine Image (AMI) that is installed on the EC2 instance where the finding is generated.

" }, "hostname": { "shape": "Hostname", "documentation": "

The hostname of the EC2 instance where the finding is generated.

" }, "ipv4Addresses": { "shape": "Ipv4AddressList", "documentation": "

The list of IP v4 addresses of the EC2 instance where the finding is generated.

" }, "tags": { "shape": "Tags", "documentation": "

The tags related to the EC2 instance where the finding is generated.

" }, "networkInterfaces": { "shape": "NetworkInterfaces", "documentation": "

An array of the network interfaces interacting with the EC2 instance where the finding is generated.

" } }, "documentation": "

A collection of attributes of the host from which the finding is generated.

" }, "AssetType": { "type": "string", "enum": [ "ec2-instance" ] }, "Attribute": { "type": "structure", "required": [ "key" ], "members": { "key": { "shape": "AttributeKey", "documentation": "

The attribute key.

" }, "value": { "shape": "AttributeValue", "documentation": "

The value assigned to the attribute key.

" } }, "documentation": "

This data type is used as a request parameter in the AddAttributesToFindings and CreateAssessmentTemplate actions.

" }, "AttributeKey": { "type": "string", "max": 128, "min": 1 }, "AttributeList": { "type": "list", "member": { "shape": "Attribute" }, "max": 50, "min": 0 }, "AttributeValue": { "type": "string", "max": 256, "min": 1 }, "AutoScalingGroup": { "type": "string", "max": 256, "min": 1 }, "AutoScalingGroupList": { "type": "list", "member": { "shape": "AutoScalingGroup" }, "max": 20, "min": 0 }, "BatchDescribeArnList": { "type": "list", "member": { "shape": "Arn" }, "max": 10, "min": 1 }, "BatchDescribeExclusionsArnList": { "type": "list", "member": { "shape": "Arn" }, "max": 100, "min": 1 }, "Bool": { "type": "boolean" }, "CreateAssessmentTargetRequest": { "type": "structure", "required": [ "assessmentTargetName" ], "members": { "assessmentTargetName": { "shape": "AssessmentTargetName", "documentation": "

The user-defined name that identifies the assessment target that you want to create. The name must be unique within the AWS account.

" }, "resourceGroupArn": { "shape": "Arn", "documentation": "

The ARN that specifies the resource group that is used to create the assessment target. If resourceGroupArn is not specified, all EC2 instances in the current AWS account and region are included in the assessment target.

" } } }, "CreateAssessmentTargetResponse": { "type": "structure", "required": [ "assessmentTargetArn" ], "members": { "assessmentTargetArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment target that is created.

" } } }, "CreateAssessmentTemplateRequest": { "type": "structure", "required": [ "assessmentTargetArn", "assessmentTemplateName", "durationInSeconds", "rulesPackageArns" ], "members": { "assessmentTargetArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment target for which you want to create the assessment template.

" }, "assessmentTemplateName": { "shape": "AssessmentTemplateName", "documentation": "

The user-defined name that identifies the assessment template that you want to create. You can create several assessment templates for an assessment target. The names of the assessment templates that correspond to a particular assessment target must be unique.

" }, "durationInSeconds": { "shape": "AssessmentRunDuration", "documentation": "

The duration of the assessment run in seconds.

" }, "rulesPackageArns": { "shape": "AssessmentTemplateRulesPackageArnList", "documentation": "

The ARNs that specify the rules packages that you want to attach to the assessment template.

" }, "userAttributesForFindings": { "shape": "UserAttributeList", "documentation": "

The user-defined attributes that are assigned to every finding that is generated by the assessment run that uses this assessment template. An attribute is a key and value pair (an Attribute object). Within an assessment template, each key must be unique.

" } } }, "CreateAssessmentTemplateResponse": { "type": "structure", "required": [ "assessmentTemplateArn" ], "members": { "assessmentTemplateArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment template that is created.

" } } }, "CreateExclusionsPreviewRequest": { "type": "structure", "required": [ "assessmentTemplateArn" ], "members": { "assessmentTemplateArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment template for which you want to create an exclusions preview.

" } } }, "CreateExclusionsPreviewResponse": { "type": "structure", "required": [ "previewToken" ], "members": { "previewToken": { "shape": "UUID", "documentation": "

Specifies the unique identifier of the requested exclusions preview. You can use the unique identifier to retrieve the exclusions preview when running the GetExclusionsPreview API.

" } } }, "CreateResourceGroupRequest": { "type": "structure", "required": [ "resourceGroupTags" ], "members": { "resourceGroupTags": { "shape": "ResourceGroupTags", "documentation": "

A collection of keys and an array of possible values, '[{\"key\":\"key1\",\"values\":[\"Value1\",\"Value2\"]},{\"key\":\"Key2\",\"values\":[\"Value3\"]}]'.

For example,'[{\"key\":\"Name\",\"values\":[\"TestEC2Instance\"]}]'.

" } } }, "CreateResourceGroupResponse": { "type": "structure", "required": [ "resourceGroupArn" ], "members": { "resourceGroupArn": { "shape": "Arn", "documentation": "

The ARN that specifies the resource group that is created.

" } } }, "DeleteAssessmentRunRequest": { "type": "structure", "required": [ "assessmentRunArn" ], "members": { "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment run that you want to delete.

" } } }, "DeleteAssessmentTargetRequest": { "type": "structure", "required": [ "assessmentTargetArn" ], "members": { "assessmentTargetArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment target that you want to delete.

" } } }, "DeleteAssessmentTemplateRequest": { "type": "structure", "required": [ "assessmentTemplateArn" ], "members": { "assessmentTemplateArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment template that you want to delete.

" } } }, "DescribeAssessmentRunsRequest": { "type": "structure", "required": [ "assessmentRunArns" ], "members": { "assessmentRunArns": { "shape": "BatchDescribeArnList", "documentation": "

The ARN that specifies the assessment run that you want to describe.

" } } }, "DescribeAssessmentRunsResponse": { "type": "structure", "required": [ "assessmentRuns", "failedItems" ], "members": { "assessmentRuns": { "shape": "AssessmentRunList", "documentation": "

Information about the assessment run.

" }, "failedItems": { "shape": "FailedItems", "documentation": "

Assessment run details that cannot be described. An error code is provided for each failed item.

" } } }, "DescribeAssessmentTargetsRequest": { "type": "structure", "required": [ "assessmentTargetArns" ], "members": { "assessmentTargetArns": { "shape": "BatchDescribeArnList", "documentation": "

The ARNs that specifies the assessment targets that you want to describe.

" } } }, "DescribeAssessmentTargetsResponse": { "type": "structure", "required": [ "assessmentTargets", "failedItems" ], "members": { "assessmentTargets": { "shape": "AssessmentTargetList", "documentation": "

Information about the assessment targets.

" }, "failedItems": { "shape": "FailedItems", "documentation": "

Assessment target details that cannot be described. An error code is provided for each failed item.

" } } }, "DescribeAssessmentTemplatesRequest": { "type": "structure", "required": [ "assessmentTemplateArns" ], "members": { "assessmentTemplateArns": { "shape": "BatchDescribeArnList" } } }, "DescribeAssessmentTemplatesResponse": { "type": "structure", "required": [ "assessmentTemplates", "failedItems" ], "members": { "assessmentTemplates": { "shape": "AssessmentTemplateList", "documentation": "

Information about the assessment templates.

" }, "failedItems": { "shape": "FailedItems", "documentation": "

Assessment template details that cannot be described. An error code is provided for each failed item.

" } } }, "DescribeCrossAccountAccessRoleResponse": { "type": "structure", "required": [ "roleArn", "valid", "registeredAt" ], "members": { "roleArn": { "shape": "Arn", "documentation": "

The ARN that specifies the IAM role that Amazon Inspector uses to access your AWS account.

" }, "valid": { "shape": "Bool", "documentation": "

A Boolean value that specifies whether the IAM role has the necessary policies attached to enable Amazon Inspector to access your AWS account.

" }, "registeredAt": { "shape": "Timestamp", "documentation": "

The date when the cross-account access role was registered.

" } } }, "DescribeExclusionsRequest": { "type": "structure", "required": [ "exclusionArns" ], "members": { "exclusionArns": { "shape": "BatchDescribeExclusionsArnList", "documentation": "

The list of ARNs that specify the exclusions that you want to describe.

" }, "locale": { "shape": "Locale", "documentation": "

The locale into which you want to translate the exclusion's title, description, and recommendation.

" } } }, "DescribeExclusionsResponse": { "type": "structure", "required": [ "exclusions", "failedItems" ], "members": { "exclusions": { "shape": "ExclusionMap", "documentation": "

Information about the exclusions.

" }, "failedItems": { "shape": "FailedItems", "documentation": "

Exclusion details that cannot be described. An error code is provided for each failed item.

" } } }, "DescribeFindingsRequest": { "type": "structure", "required": [ "findingArns" ], "members": { "findingArns": { "shape": "BatchDescribeArnList", "documentation": "

The ARN that specifies the finding that you want to describe.

" }, "locale": { "shape": "Locale", "documentation": "

The locale into which you want to translate a finding description, recommendation, and the short description that identifies the finding.

" } } }, "DescribeFindingsResponse": { "type": "structure", "required": [ "findings", "failedItems" ], "members": { "findings": { "shape": "FindingList", "documentation": "

Information about the finding.

" }, "failedItems": { "shape": "FailedItems", "documentation": "

Finding details that cannot be described. An error code is provided for each failed item.

" } } }, "DescribeResourceGroupsRequest": { "type": "structure", "required": [ "resourceGroupArns" ], "members": { "resourceGroupArns": { "shape": "BatchDescribeArnList", "documentation": "

The ARN that specifies the resource group that you want to describe.

" } } }, "DescribeResourceGroupsResponse": { "type": "structure", "required": [ "resourceGroups", "failedItems" ], "members": { "resourceGroups": { "shape": "ResourceGroupList", "documentation": "

Information about a resource group.

" }, "failedItems": { "shape": "FailedItems", "documentation": "

Resource group details that cannot be described. An error code is provided for each failed item.

" } } }, "DescribeRulesPackagesRequest": { "type": "structure", "required": [ "rulesPackageArns" ], "members": { "rulesPackageArns": { "shape": "BatchDescribeArnList", "documentation": "

The ARN that specifies the rules package that you want to describe.

" }, "locale": { "shape": "Locale", "documentation": "

The locale that you want to translate a rules package description into.

" } } }, "DescribeRulesPackagesResponse": { "type": "structure", "required": [ "rulesPackages", "failedItems" ], "members": { "rulesPackages": { "shape": "RulesPackageList", "documentation": "

Information about the rules package.

" }, "failedItems": { "shape": "FailedItems", "documentation": "

Rules package details that cannot be described. An error code is provided for each failed item.

" } } }, "DurationRange": { "type": "structure", "members": { "minSeconds": { "shape": "AssessmentRunDuration", "documentation": "

The minimum value of the duration range. Must be greater than zero.

" }, "maxSeconds": { "shape": "AssessmentRunDuration", "documentation": "

The maximum value of the duration range. Must be less than or equal to 604800 seconds (1 week).

" } }, "documentation": "

This data type is used in the AssessmentTemplateFilter data type.

" }, "EventSubscription": { "type": "structure", "required": [ "event", "subscribedAt" ], "members": { "event": { "shape": "InspectorEvent", "documentation": "

The event for which Amazon Simple Notification Service (SNS) notifications are sent.

" }, "subscribedAt": { "shape": "Timestamp", "documentation": "

The time at which SubscribeToEvent is called.

" } }, "documentation": "

This data type is used in the Subscription data type.

" }, "EventSubscriptionList": { "type": "list", "member": { "shape": "EventSubscription" }, "max": 50, "min": 1 }, "Exclusion": { "type": "structure", "required": [ "arn", "title", "description", "recommendation", "scopes" ], "members": { "arn": { "shape": "Arn", "documentation": "

The ARN that specifies the exclusion.

" }, "title": { "shape": "Text", "documentation": "

The name of the exclusion.

" }, "description": { "shape": "Text", "documentation": "

The description of the exclusion.

" }, "recommendation": { "shape": "Text", "documentation": "

The recommendation for the exclusion.

" }, "scopes": { "shape": "ScopeList", "documentation": "

The AWS resources for which the exclusion pertains.

" }, "attributes": { "shape": "AttributeList", "documentation": "

The system-defined attributes for the exclusion.

" } }, "documentation": "

Contains information about what was excluded from an assessment run.

" }, "ExclusionMap": { "type": "map", "key": { "shape": "Arn" }, "value": { "shape": "Exclusion" }, "max": 100, "min": 1 }, "ExclusionPreview": { "type": "structure", "required": [ "title", "description", "recommendation", "scopes" ], "members": { "title": { "shape": "Text", "documentation": "

The name of the exclusion preview.

" }, "description": { "shape": "Text", "documentation": "

The description of the exclusion preview.

" }, "recommendation": { "shape": "Text", "documentation": "

The recommendation for the exclusion preview.

" }, "scopes": { "shape": "ScopeList", "documentation": "

The AWS resources for which the exclusion preview pertains.

" }, "attributes": { "shape": "AttributeList", "documentation": "

The system-defined attributes for the exclusion preview.

" } }, "documentation": "

Contains information about what is excluded from an assessment run given the current state of the assessment template.

" }, "ExclusionPreviewList": { "type": "list", "member": { "shape": "ExclusionPreview" }, "max": 100, "min": 0 }, "FailedItemDetails": { "type": "structure", "required": [ "failureCode", "retryable" ], "members": { "failureCode": { "shape": "FailedItemErrorCode", "documentation": "

The status code of a failed item.

" }, "retryable": { "shape": "Bool", "documentation": "

Indicates whether you can immediately retry a request for this item for a specified resource.

" } }, "documentation": "

Includes details about the failed items.

" }, "FailedItemErrorCode": { "type": "string", "enum": [ "INVALID_ARN", "DUPLICATE_ARN", "ITEM_DOES_NOT_EXIST", "ACCESS_DENIED", "LIMIT_EXCEEDED", "INTERNAL_ERROR" ] }, "FailedItems": { "type": "map", "key": { "shape": "Arn" }, "value": { "shape": "FailedItemDetails" } }, "FilterRulesPackageArnList": { "type": "list", "member": { "shape": "Arn" }, "max": 50, "min": 0 }, "Finding": { "type": "structure", "required": [ "arn", "attributes", "userAttributes", "createdAt", "updatedAt" ], "members": { "arn": { "shape": "Arn", "documentation": "

The ARN that specifies the finding.

" }, "schemaVersion": { "shape": "NumericVersion", "documentation": "

The schema version of this data type.

" }, "service": { "shape": "ServiceName", "documentation": "

The data element is set to \"Inspector\".

" }, "serviceAttributes": { "shape": "InspectorServiceAttributes", "documentation": "

This data type is used in the Finding data type.

" }, "assetType": { "shape": "AssetType", "documentation": "

The type of the host from which the finding is generated.

" }, "assetAttributes": { "shape": "AssetAttributes", "documentation": "

A collection of attributes of the host from which the finding is generated.

" }, "id": { "shape": "FindingId", "documentation": "

The ID of the finding.

" }, "title": { "shape": "Text", "documentation": "

The name of the finding.

" }, "description": { "shape": "Text", "documentation": "

The description of the finding.

" }, "recommendation": { "shape": "Text", "documentation": "

The recommendation for the finding.

" }, "severity": { "shape": "Severity", "documentation": "

The finding severity. Values can be set to High, Medium, Low, and Informational.

" }, "numericSeverity": { "shape": "NumericSeverity", "documentation": "

The numeric value of the finding severity.

" }, "confidence": { "shape": "IocConfidence", "documentation": "

This data element is currently not used.

" }, "indicatorOfCompromise": { "shape": "Bool", "documentation": "

This data element is currently not used.

" }, "attributes": { "shape": "AttributeList", "documentation": "

The system-defined attributes for the finding.

" }, "userAttributes": { "shape": "UserAttributeList", "documentation": "

The user-defined attributes that are assigned to the finding.

" }, "createdAt": { "shape": "Timestamp", "documentation": "

The time when the finding was generated.

" }, "updatedAt": { "shape": "Timestamp", "documentation": "

The time when AddAttributesToFindings is called.

" } }, "documentation": "

Contains information about an Amazon Inspector finding. This data type is used as the response element in the DescribeFindings action.

" }, "FindingCount": { "type": "integer" }, "FindingFilter": { "type": "structure", "members": { "agentIds": { "shape": "AgentIdList", "documentation": "

For a record to match a filter, one of the values that is specified for this data type property must be the exact match of the value of the agentId property of the Finding data type.

" }, "autoScalingGroups": { "shape": "AutoScalingGroupList", "documentation": "

For a record to match a filter, one of the values that is specified for this data type property must be the exact match of the value of the autoScalingGroup property of the Finding data type.

" }, "ruleNames": { "shape": "RuleNameList", "documentation": "

For a record to match a filter, one of the values that is specified for this data type property must be the exact match of the value of the ruleName property of the Finding data type.

" }, "severities": { "shape": "SeverityList", "documentation": "

For a record to match a filter, one of the values that is specified for this data type property must be the exact match of the value of the severity property of the Finding data type.

" }, "rulesPackageArns": { "shape": "FilterRulesPackageArnList", "documentation": "

For a record to match a filter, one of the values that is specified for this data type property must be the exact match of the value of the rulesPackageArn property of the Finding data type.

" }, "attributes": { "shape": "AttributeList", "documentation": "

For a record to match a filter, the list of values that are specified for this data type property must be contained in the list of values of the attributes property of the Finding data type.

" }, "userAttributes": { "shape": "AttributeList", "documentation": "

For a record to match a filter, the value that is specified for this data type property must be contained in the list of values of the userAttributes property of the Finding data type.

" }, "creationTimeRange": { "shape": "TimestampRange", "documentation": "

The time range during which the finding is generated.

" } }, "documentation": "

This data type is used as a request parameter in the ListFindings action.

" }, "FindingId": { "type": "string", "max": 128, "min": 0 }, "FindingList": { "type": "list", "member": { "shape": "Finding" }, "max": 100, "min": 0 }, "GetAssessmentReportRequest": { "type": "structure", "required": [ "assessmentRunArn", "reportFileFormat", "reportType" ], "members": { "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment run for which you want to generate a report.

" }, "reportFileFormat": { "shape": "ReportFileFormat", "documentation": "

Specifies the file format (html or pdf) of the assessment report that you want to generate.

" }, "reportType": { "shape": "ReportType", "documentation": "

Specifies the type of the assessment report that you want to generate. There are two types of assessment reports: a finding report and a full report. For more information, see Assessment Reports.

" } } }, "GetAssessmentReportResponse": { "type": "structure", "required": [ "status" ], "members": { "status": { "shape": "ReportStatus", "documentation": "

Specifies the status of the request to generate an assessment report.

" }, "url": { "shape": "Url", "documentation": "

Specifies the URL where you can find the generated assessment report. This parameter is only returned if the report is successfully generated.

" } } }, "GetExclusionsPreviewRequest": { "type": "structure", "required": [ "assessmentTemplateArn", "previewToken" ], "members": { "assessmentTemplateArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment template for which the exclusions preview was requested.

" }, "previewToken": { "shape": "UUID", "documentation": "

The unique identifier associated of the exclusions preview.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the GetExclusionsPreviewRequest action. Subsequent calls to the action fill nextToken in the request with the value of nextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items you want in the response. The default value is 100. The maximum value is 500.

" }, "locale": { "shape": "Locale", "documentation": "

The locale into which you want to translate the exclusion's title, description, and recommendation.

" } } }, "GetExclusionsPreviewResponse": { "type": "structure", "required": [ "previewStatus" ], "members": { "previewStatus": { "shape": "PreviewStatus", "documentation": "

Specifies the status of the request to generate an exclusions preview.

" }, "exclusionPreviews": { "shape": "ExclusionPreviewList", "documentation": "

Information about the exclusions included in the preview.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameters is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "GetTelemetryMetadataRequest": { "type": "structure", "required": [ "assessmentRunArn" ], "members": { "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment run that has the telemetry data that you want to obtain.

" } } }, "GetTelemetryMetadataResponse": { "type": "structure", "required": [ "telemetryMetadata" ], "members": { "telemetryMetadata": { "shape": "TelemetryMetadataList", "documentation": "

Telemetry details.

" } } }, "Hostname": { "type": "string", "max": 256, "min": 0 }, "InspectorEvent": { "type": "string", "enum": [ "ASSESSMENT_RUN_STARTED", "ASSESSMENT_RUN_COMPLETED", "ASSESSMENT_RUN_STATE_CHANGED", "FINDING_REPORTED", "OTHER" ] }, "InspectorServiceAttributes": { "type": "structure", "required": [ "schemaVersion" ], "members": { "schemaVersion": { "shape": "NumericVersion", "documentation": "

The schema version of this data type.

" }, "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN of the assessment run during which the finding is generated.

" }, "rulesPackageArn": { "shape": "Arn", "documentation": "

The ARN of the rules package that is used to generate the finding.

" } }, "documentation": "

This data type is used in the Finding data type.

" }, "IocConfidence": { "type": "integer", "max": 10, "min": 0 }, "Ipv4Address": { "type": "string", "max": 15, "min": 7 }, "Ipv4AddressList": { "type": "list", "member": { "shape": "Ipv4Address" }, "max": 50, "min": 0 }, "Ipv6Addresses": { "type": "list", "member": { "shape": "Text" } }, "KernelVersion": { "type": "string", "max": 128, "min": 1 }, "ListAssessmentRunAgentsRequest": { "type": "structure", "required": [ "assessmentRunArn" ], "members": { "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment run whose agents you want to list.

" }, "filter": { "shape": "AgentFilter", "documentation": "

You can use this parameter to specify a subset of data to be included in the action's response.

For a record to match a filter, all specified filter attributes must match. When multiple values are specified for a filter attribute, any of the values can match.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListAssessmentRunAgents action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 10. The maximum value is 500.

" } } }, "ListAssessmentRunAgentsResponse": { "type": "structure", "required": [ "assessmentRunAgents" ], "members": { "assessmentRunAgents": { "shape": "AssessmentRunAgentList", "documentation": "

A list of ARNs that specifies the agents returned by the action.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameter is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "ListAssessmentRunsRequest": { "type": "structure", "members": { "assessmentTemplateArns": { "shape": "ListParentArnList", "documentation": "

The ARNs that specify the assessment templates whose assessment runs you want to list.

" }, "filter": { "shape": "AssessmentRunFilter", "documentation": "

You can use this parameter to specify a subset of data to be included in the action's response.

For a record to match a filter, all specified filter attributes must match. When multiple values are specified for a filter attribute, any of the values can match.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListAssessmentRuns action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items that you want in the response. The default value is 10. The maximum value is 500.

" } } }, "ListAssessmentRunsResponse": { "type": "structure", "required": [ "assessmentRunArns" ], "members": { "assessmentRunArns": { "shape": "ListReturnedArnList", "documentation": "

A list of ARNs that specifies the assessment runs that are returned by the action.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameter is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "ListAssessmentTargetsRequest": { "type": "structure", "members": { "filter": { "shape": "AssessmentTargetFilter", "documentation": "

You can use this parameter to specify a subset of data to be included in the action's response.

For a record to match a filter, all specified filter attributes must match. When multiple values are specified for a filter attribute, any of the values can match.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListAssessmentTargets action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items you want in the response. The default value is 10. The maximum value is 500.

" } } }, "ListAssessmentTargetsResponse": { "type": "structure", "required": [ "assessmentTargetArns" ], "members": { "assessmentTargetArns": { "shape": "ListReturnedArnList", "documentation": "

A list of ARNs that specifies the assessment targets that are returned by the action.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameter is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "ListAssessmentTemplatesRequest": { "type": "structure", "members": { "assessmentTargetArns": { "shape": "ListParentArnList", "documentation": "

A list of ARNs that specifies the assessment targets whose assessment templates you want to list.

" }, "filter": { "shape": "AssessmentTemplateFilter", "documentation": "

You can use this parameter to specify a subset of data to be included in the action's response.

For a record to match a filter, all specified filter attributes must match. When multiple values are specified for a filter attribute, any of the values can match.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListAssessmentTemplates action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items you want in the response. The default value is 10. The maximum value is 500.

" } } }, "ListAssessmentTemplatesResponse": { "type": "structure", "required": [ "assessmentTemplateArns" ], "members": { "assessmentTemplateArns": { "shape": "ListReturnedArnList", "documentation": "

A list of ARNs that specifies the assessment templates returned by the action.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameter is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "ListEventSubscriptionsMaxResults": { "type": "integer" }, "ListEventSubscriptionsRequest": { "type": "structure", "members": { "resourceArn": { "shape": "Arn", "documentation": "

The ARN of the assessment template for which you want to list the existing event subscriptions.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListEventSubscriptions action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListEventSubscriptionsMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items you want in the response. The default value is 10. The maximum value is 500.

" } } }, "ListEventSubscriptionsResponse": { "type": "structure", "required": [ "subscriptions" ], "members": { "subscriptions": { "shape": "SubscriptionList", "documentation": "

Details of the returned event subscriptions.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameter is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "ListExclusionsRequest": { "type": "structure", "required": [ "assessmentRunArn" ], "members": { "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN of the assessment run that generated the exclusions that you want to list.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListExclusionsRequest action. Subsequent calls to the action fill nextToken in the request with the value of nextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items you want in the response. The default value is 100. The maximum value is 500.

" } } }, "ListExclusionsResponse": { "type": "structure", "required": [ "exclusionArns" ], "members": { "exclusionArns": { "shape": "ListReturnedArnList", "documentation": "

A list of exclusions' ARNs returned by the action.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameters is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "ListFindingsRequest": { "type": "structure", "members": { "assessmentRunArns": { "shape": "ListParentArnList", "documentation": "

The ARNs of the assessment runs that generate the findings that you want to list.

" }, "filter": { "shape": "FindingFilter", "documentation": "

You can use this parameter to specify a subset of data to be included in the action's response.

For a record to match a filter, all specified filter attributes must match. When multiple values are specified for a filter attribute, any of the values can match.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListFindings action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items you want in the response. The default value is 10. The maximum value is 500.

" } } }, "ListFindingsResponse": { "type": "structure", "required": [ "findingArns" ], "members": { "findingArns": { "shape": "ListReturnedArnList", "documentation": "

A list of ARNs that specifies the findings returned by the action.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameter is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "ListMaxResults": { "type": "integer" }, "ListParentArnList": { "type": "list", "member": { "shape": "Arn" }, "max": 50, "min": 0 }, "ListReturnedArnList": { "type": "list", "member": { "shape": "Arn" }, "max": 100, "min": 0 }, "ListRulesPackagesRequest": { "type": "structure", "members": { "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the ListRulesPackages action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "ListMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items you want in the response. The default value is 10. The maximum value is 500.

" } } }, "ListRulesPackagesResponse": { "type": "structure", "required": [ "rulesPackageArns" ], "members": { "rulesPackageArns": { "shape": "ListReturnedArnList", "documentation": "

The list of ARNs that specifies the rules packages returned by the action.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameter is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "ListTagsForResourceRequest": { "type": "structure", "required": [ "resourceArn" ], "members": { "resourceArn": { "shape": "Arn", "documentation": "

The ARN that specifies the assessment template whose tags you want to list.

" } } }, "ListTagsForResourceResponse": { "type": "structure", "required": [ "tags" ], "members": { "tags": { "shape": "TagList", "documentation": "

A collection of key and value pairs.

" } } }, "Locale": { "type": "string", "enum": [ "EN_US" ] }, "Long": { "type": "long" }, "Message": { "type": "string", "max": 1000, "min": 0 }, "MessageType": { "type": "string", "max": 300, "min": 1 }, "NamePattern": { "type": "string", "max": 140, "min": 1 }, "NetworkInterface": { "type": "structure", "members": { "networkInterfaceId": { "shape": "Text", "documentation": "

The ID of the network interface.

" }, "subnetId": { "shape": "Text", "documentation": "

The ID of a subnet associated with the network interface.

" }, "vpcId": { "shape": "Text", "documentation": "

The ID of a VPC associated with the network interface.

" }, "privateDnsName": { "shape": "Text", "documentation": "

The name of a private DNS associated with the network interface.

" }, "privateIpAddress": { "shape": "Text", "documentation": "

The private IP address associated with the network interface.

" }, "privateIpAddresses": { "shape": "PrivateIpAddresses", "documentation": "

A list of the private IP addresses associated with the network interface. Includes the privateDnsName and privateIpAddress.

" }, "publicDnsName": { "shape": "Text", "documentation": "

The name of a public DNS associated with the network interface.

" }, "publicIp": { "shape": "Text", "documentation": "

The public IP address from which the network interface is reachable.

" }, "ipv6Addresses": { "shape": "Ipv6Addresses", "documentation": "

The IP addresses associated with the network interface.

" }, "securityGroups": { "shape": "SecurityGroups", "documentation": "

A list of the security groups associated with the network interface. Includes the groupId and groupName.

" } }, "documentation": "

Contains information about the network interfaces interacting with an EC2 instance. This data type is used as one of the elements of the AssetAttributes data type.

" }, "NetworkInterfaces": { "type": "list", "member": { "shape": "NetworkInterface" } }, "NumericSeverity": { "type": "double", "max": 10, "min": 0 }, "NumericVersion": { "type": "integer", "min": 0 }, "OperatingSystem": { "type": "string", "max": 256, "min": 1 }, "PaginationToken": { "type": "string", "max": 300, "min": 1 }, "PreviewAgentsMaxResults": { "type": "integer" }, "PreviewAgentsRequest": { "type": "structure", "required": [ "previewAgentsArn" ], "members": { "previewAgentsArn": { "shape": "Arn", "documentation": "

The ARN of the assessment target whose agents you want to preview.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the PreviewAgents action. Subsequent calls to the action fill nextToken in the request with the value of NextToken from the previous response to continue listing data.

" }, "maxResults": { "shape": "PreviewAgentsMaxResults", "documentation": "

You can use this parameter to indicate the maximum number of items you want in the response. The default value is 10. The maximum value is 500.

" } } }, "PreviewAgentsResponse": { "type": "structure", "required": [ "agentPreviews" ], "members": { "agentPreviews": { "shape": "AgentPreviewList", "documentation": "

The resulting list of agents.

" }, "nextToken": { "shape": "PaginationToken", "documentation": "

When a response is generated, if there is more data to be listed, this parameter is present in the response and contains the value to use for the nextToken parameter in a subsequent pagination request. If there is no more data to be listed, this parameter is set to null.

" } } }, "PreviewStatus": { "type": "string", "enum": [ "WORK_IN_PROGRESS", "COMPLETED" ] }, "PrivateIp": { "type": "structure", "members": { "privateDnsName": { "shape": "Text", "documentation": "

The DNS name of the private IP address.

" }, "privateIpAddress": { "shape": "Text", "documentation": "

The full IP address of the network inteface.

" } }, "documentation": "

Contains information about a private IP address associated with a network interface. This data type is used as a response element in the DescribeFindings action.

" }, "PrivateIpAddresses": { "type": "list", "member": { "shape": "PrivateIp" } }, "ProviderName": { "type": "string", "max": 1000, "min": 0 }, "RegisterCrossAccountAccessRoleRequest": { "type": "structure", "required": [ "roleArn" ], "members": { "roleArn": { "shape": "Arn", "documentation": "

The ARN of the IAM role that grants Amazon Inspector access to AWS Services needed to perform security assessments.

" } } }, "RemoveAttributesFromFindingsRequest": { "type": "structure", "required": [ "findingArns", "attributeKeys" ], "members": { "findingArns": { "shape": "AddRemoveAttributesFindingArnList", "documentation": "

The ARNs that specify the findings that you want to remove attributes from.

" }, "attributeKeys": { "shape": "UserAttributeKeyList", "documentation": "

The array of attribute keys that you want to remove from specified findings.

" } } }, "RemoveAttributesFromFindingsResponse": { "type": "structure", "required": [ "failedItems" ], "members": { "failedItems": { "shape": "FailedItems", "documentation": "

Attributes details that cannot be described. An error code is provided for each failed item.

" } } }, "ReportFileFormat": { "type": "string", "enum": [ "HTML", "PDF" ] }, "ReportStatus": { "type": "string", "enum": [ "WORK_IN_PROGRESS", "FAILED", "COMPLETED" ] }, "ReportType": { "type": "string", "enum": [ "FINDING", "FULL" ] }, "ResourceGroup": { "type": "structure", "required": [ "arn", "tags", "createdAt" ], "members": { "arn": { "shape": "Arn", "documentation": "

The ARN of the resource group.

" }, "tags": { "shape": "ResourceGroupTags", "documentation": "

The tags (key and value pairs) of the resource group. This data type property is used in the CreateResourceGroup action.

" }, "createdAt": { "shape": "Timestamp", "documentation": "

The time at which resource group is created.

" } }, "documentation": "

Contains information about a resource group. The resource group defines a set of tags that, when queried, identify the AWS resources that make up the assessment target. This data type is used as the response element in the DescribeResourceGroups action.

" }, "ResourceGroupList": { "type": "list", "member": { "shape": "ResourceGroup" }, "max": 10, "min": 0 }, "ResourceGroupTag": { "type": "structure", "required": [ "key" ], "members": { "key": { "shape": "TagKey", "documentation": "

A tag key.

" }, "value": { "shape": "TagValue", "documentation": "

The value assigned to a tag key.

" } }, "documentation": "

This data type is used as one of the elements of the ResourceGroup data type.

" }, "ResourceGroupTags": { "type": "list", "member": { "shape": "ResourceGroupTag" }, "max": 10, "min": 1 }, "RuleName": { "type": "string", "max": 1000 }, "RuleNameList": { "type": "list", "member": { "shape": "RuleName" }, "max": 50, "min": 0 }, "RulesPackage": { "type": "structure", "required": [ "arn", "name", "version", "provider" ], "members": { "arn": { "shape": "Arn", "documentation": "

The ARN of the rules package.

" }, "name": { "shape": "RulesPackageName", "documentation": "

The name of the rules package.

" }, "version": { "shape": "Version", "documentation": "

The version ID of the rules package.

" }, "provider": { "shape": "ProviderName", "documentation": "

The provider of the rules package.

" }, "description": { "shape": "Text", "documentation": "

The description of the rules package.

" } }, "documentation": "

Contains information about an Amazon Inspector rules package. This data type is used as the response element in the DescribeRulesPackages action.

" }, "RulesPackageList": { "type": "list", "member": { "shape": "RulesPackage" }, "max": 10, "min": 0 }, "RulesPackageName": { "type": "string", "max": 1000, "min": 0 }, "Scope": { "type": "structure", "members": { "key": { "shape": "ScopeType", "documentation": "

The type of the scope.

" }, "value": { "shape": "ScopeValue", "documentation": "

The resource identifier for the specified scope type.

" } }, "documentation": "

This data type contains key-value pairs that identify various Amazon resources.

" }, "ScopeList": { "type": "list", "member": { "shape": "Scope" }, "min": 1 }, "ScopeType": { "type": "string", "enum": [ "INSTANCE_ID", "RULES_PACKAGE_ARN" ] }, "ScopeValue": { "type": "string" }, "SecurityGroup": { "type": "structure", "members": { "groupName": { "shape": "Text", "documentation": "

The name of the security group.

" }, "groupId": { "shape": "Text", "documentation": "

The ID of the security group.

" } }, "documentation": "

Contains information about a security group associated with a network interface. This data type is used as one of the elements of the NetworkInterface data type.

" }, "SecurityGroups": { "type": "list", "member": { "shape": "SecurityGroup" } }, "ServiceName": { "type": "string", "max": 128, "min": 0 }, "SetTagsForResourceRequest": { "type": "structure", "required": [ "resourceArn" ], "members": { "resourceArn": { "shape": "Arn", "documentation": "

The ARN of the assessment template that you want to set tags to.

" }, "tags": { "shape": "TagList", "documentation": "

A collection of key and value pairs that you want to set to the assessment template.

" } } }, "Severity": { "type": "string", "enum": [ "Low", "Medium", "High", "Informational", "Undefined" ] }, "SeverityList": { "type": "list", "member": { "shape": "Severity" }, "max": 50, "min": 0 }, "StartAssessmentRunRequest": { "type": "structure", "required": [ "assessmentTemplateArn" ], "members": { "assessmentTemplateArn": { "shape": "Arn", "documentation": "

The ARN of the assessment template of the assessment run that you want to start.

" }, "assessmentRunName": { "shape": "AssessmentRunName", "documentation": "

You can specify the name for the assessment run. The name must be unique for the assessment template whose ARN is used to start the assessment run.

" } } }, "StartAssessmentRunResponse": { "type": "structure", "required": [ "assessmentRunArn" ], "members": { "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN of the assessment run that has been started.

" } } }, "StopAction": { "type": "string", "enum": [ "START_EVALUATION", "SKIP_EVALUATION" ] }, "StopAssessmentRunRequest": { "type": "structure", "required": [ "assessmentRunArn" ], "members": { "assessmentRunArn": { "shape": "Arn", "documentation": "

The ARN of the assessment run that you want to stop.

" }, "stopAction": { "shape": "StopAction", "documentation": "

An input option that can be set to either START_EVALUATION or SKIP_EVALUATION. START_EVALUATION (the default value), stops the AWS agent from collecting data and begins the results evaluation and the findings generation process. SKIP_EVALUATION cancels the assessment run immediately, after which no findings are generated.

" } } }, "SubscribeToEventRequest": { "type": "structure", "required": [ "resourceArn", "event", "topicArn" ], "members": { "resourceArn": { "shape": "Arn", "documentation": "

The ARN of the assessment template that is used during the event for which you want to receive SNS notifications.

" }, "event": { "shape": "InspectorEvent", "documentation": "

The event for which you want to receive SNS notifications.

" }, "topicArn": { "shape": "Arn", "documentation": "

The ARN of the SNS topic to which the SNS notifications are sent.

" } } }, "Subscription": { "type": "structure", "required": [ "resourceArn", "topicArn", "eventSubscriptions" ], "members": { "resourceArn": { "shape": "Arn", "documentation": "

The ARN of the assessment template that is used during the event for which the SNS notification is sent.

" }, "topicArn": { "shape": "Arn", "documentation": "

The ARN of the Amazon Simple Notification Service (SNS) topic to which the SNS notifications are sent.

" }, "eventSubscriptions": { "shape": "EventSubscriptionList", "documentation": "

The list of existing event subscriptions.

" } }, "documentation": "

This data type is used as a response element in the ListEventSubscriptions action.

" }, "SubscriptionList": { "type": "list", "member": { "shape": "Subscription" }, "max": 50, "min": 0 }, "Tag": { "type": "structure", "required": [ "key" ], "members": { "key": { "shape": "TagKey", "documentation": "

A tag key.

" }, "value": { "shape": "TagValue", "documentation": "

A value assigned to a tag key.

" } }, "documentation": "

A key and value pair. This data type is used as a request parameter in the SetTagsForResource action and a response element in the ListTagsForResource action.

" }, "TagKey": { "type": "string", "max": 128, "min": 1 }, "TagList": { "type": "list", "member": { "shape": "Tag" }, "max": 10, "min": 0 }, "TagValue": { "type": "string", "max": 256, "min": 1 }, "Tags": { "type": "list", "member": { "shape": "Tag" } }, "TelemetryMetadata": { "type": "structure", "required": [ "messageType", "count" ], "members": { "messageType": { "shape": "MessageType", "documentation": "

A specific type of behavioral data that is collected by the agent.

" }, "count": { "shape": "Long", "documentation": "

The count of messages that the agent sends to the Amazon Inspector service.

" }, "dataSize": { "shape": "Long", "documentation": "

The data size of messages that the agent sends to the Amazon Inspector service.

" } }, "documentation": "

The metadata about the Amazon Inspector application data metrics collected by the agent. This data type is used as the response element in the GetTelemetryMetadata action.

" }, "TelemetryMetadataList": { "type": "list", "member": { "shape": "TelemetryMetadata" }, "max": 5000, "min": 0 }, "Text": { "type": "string", "max": 20000, "min": 0 }, "Timestamp": { "type": "timestamp" }, "TimestampRange": { "type": "structure", "members": { "beginDate": { "shape": "Timestamp", "documentation": "

The minimum value of the timestamp range.

" }, "endDate": { "shape": "Timestamp", "documentation": "

The maximum value of the timestamp range.

" } }, "documentation": "

This data type is used in the AssessmentRunFilter data type.

" }, "UUID": { "type": "string", "pattern": "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}" }, "UnsubscribeFromEventRequest": { "type": "structure", "required": [ "resourceArn", "event", "topicArn" ], "members": { "resourceArn": { "shape": "Arn", "documentation": "

The ARN of the assessment template that is used during the event for which you want to stop receiving SNS notifications.

" }, "event": { "shape": "InspectorEvent", "documentation": "

The event for which you want to stop receiving SNS notifications.

" }, "topicArn": { "shape": "Arn", "documentation": "

The ARN of the SNS topic to which SNS notifications are sent.

" } } }, "UpdateAssessmentTargetRequest": { "type": "structure", "required": [ "assessmentTargetArn", "assessmentTargetName" ], "members": { "assessmentTargetArn": { "shape": "Arn", "documentation": "

The ARN of the assessment target that you want to update.

" }, "assessmentTargetName": { "shape": "AssessmentTargetName", "documentation": "

The name of the assessment target that you want to update.

" }, "resourceGroupArn": { "shape": "Arn", "documentation": "

The ARN of the resource group that is used to specify the new resource group to associate with the assessment target.

" } } }, "Url": { "type": "string", "max": 2048 }, "UserAttributeKeyList": { "type": "list", "member": { "shape": "AttributeKey" }, "max": 10, "min": 0 }, "UserAttributeList": { "type": "list", "member": { "shape": "Attribute" }, "max": 10, "min": 0 }, "Version": { "type": "string", "max": 1000, "min": 0 } }, "documentation": "Amazon Inspector

Amazon Inspector enables you to analyze the behavior of your AWS resources and to identify potential security issues. For more information, see Amazon Inspector User Guide.

" }