GuardDuty
import { GuardDuty } from "https://aws-api.deno.dev/v0.2/services/guardduty.ts?docs=full";
§Constructors
§Methods
Archives GuardDuty findings that are specified by the list of finding IDs.
Note: Only the administrator account can archive findings. Member accounts don't have permission to archive findings from their accounts.
Creates a single Amazon GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each Region where you enable the service. You can have only one detector per account per Region. All data sources are enabled in a new detector by default.
Creates a filter using the specified finding criteria.
Creates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of IP addresses that are trusted for secure communication with AWS infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are included in IPSets. Only users from the administrator account can use this operation.
Creates member accounts of the current AWS account by specifying a list of AWS account IDs. This step is a prerequisite for managing the associated member accounts either by invitation or through an organization.
When using Create Members
as an organizations delegated administrator this action will enable GuardDuty in the added member accounts, with the exception of the organization delegated administrator account, which must enable GuardDuty prior to being added as a member.
If you are adding accounts by invitation use this action after GuardDuty has been enabled in potential member accounts and before using Invite Members.
Creates a publishing destination to export findings to. The resource to export findings to must exist before you use this operation.
Generates example findings of types specified by the list of finding types.
If 'NULL' is specified for findingTypes
, the API generates example findings of all supported finding types.
Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can use this operation.
Declines invitations sent to the current member account by AWS accounts specified by their account IDs.
Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
Deletes the IPSet specified by the ipSetId
.
IPSets are called trusted IP lists in the console user interface.
Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
Deletes the publishing definition with the specified destinationId
.
Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.
Returns information about the account selected as the delegated administrator for GuardDuty.
Returns information about the publishing destination specified by the provided destinationId
.
Disables an AWS account within the Organization as the GuardDuty delegated administrator.
Disassociates the current GuardDuty member account from its administrator account.
Disassociates GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
Enables an AWS account within the organization as the GuardDuty delegated administrator.
Lists Amazon GuardDuty findings statistics for the specified detector ID.
Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
Provides the details for the GuardDuty administrator account associated with the current GuardDuty member account.
Describes which data sources are enabled for the member account's detector.
Retrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the account IDs.
Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
Lists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID. For newly enabled detectors or data sources the cost returned will include only the usage so far under 30 days, this may differ from the cost metrics in the console, which projects usage over 30 days to provide a monthly cost estimate. For more information see Understanding How Usage Costs are Calculated.
Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty, and allow the current AWS account to view and manage these accounts' findings on their behalf as the GuardDuty administrator account.
Lists detectorIds of all the existing Amazon GuardDuty detector resources.
Lists Amazon GuardDuty findings for the specified detector ID.
Lists all GuardDuty membership invitations that were sent to the current AWS account.
Lists the IPSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the IPSets returned are the IPSets from the associated administrator account.
Lists the accounts configured as GuardDuty delegated administrators.
Returns a list of publishing destinations associated with the specified dectectorId
.
Lists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, and threat intel sets, with a limit of 50 tags per resource. When invoked, this operation returns all assigned tags for a given resource.
Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the ThreatIntelSets associated with the administrator account are returned.
Turns on GuardDuty monitoring of the specified member accounts.
Use this operation to restart monitoring of accounts that you stopped monitoring with the StopMonitoringMembers
operation.
Stops GuardDuty monitoring for the specified member accounts.
Use the StartMonitoringMembers
operation to restart monitoring for those accounts.
Updates the filter specified by the filter name.
Marks the specified GuardDuty findings as useful or not useful.
Contains information on member accounts to be updated.
Updates the delegated administrator account with the values provided.
Updates information about the publishing destination specified by the destinationId
.
Updates the ThreatIntelSet specified by the ThreatIntelSet ID.