@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AbstractAmazonGuardDuty extends Object implements AmazonGuardDuty
AmazonGuardDuty. Convenient method forms pass through to the corresponding
overload that takes a request object, which throws an UnsupportedOperationException.ENDPOINT_PREFIX| Modifier and Type | Method and Description |
|---|---|
AcceptAdministratorInvitationResult |
acceptAdministratorInvitation(AcceptAdministratorInvitationRequest request)
Accepts the invitation to be a member account and get monitored by a GuardDuty administrator account that sent
the invitation.
|
AcceptInvitationResult |
acceptInvitation(AcceptInvitationRequest request)
Deprecated.
|
ArchiveFindingsResult |
archiveFindings(ArchiveFindingsRequest request)
Archives GuardDuty findings that are specified by the list of finding IDs.
|
CreateDetectorResult |
createDetector(CreateDetectorRequest request)
Creates a single GuardDuty detector.
|
CreateFilterResult |
createFilter(CreateFilterRequest request)
Creates a filter using the specified finding criteria.
|
CreateIPSetResult |
createIPSet(CreateIPSetRequest request)
Creates a new IPSet, which is called a trusted IP list in the console user interface.
|
CreateMalwareProtectionPlanResult |
createMalwareProtectionPlan(CreateMalwareProtectionPlanRequest request)
Creates a new Malware Protection plan for the protected resource.
|
CreateMembersResult |
createMembers(CreateMembersRequest request)
Creates member accounts of the current Amazon Web Services account by specifying a list of Amazon Web Services
account IDs.
|
CreatePublishingDestinationResult |
createPublishingDestination(CreatePublishingDestinationRequest request)
Creates a publishing destination to export findings to.
|
CreateSampleFindingsResult |
createSampleFindings(CreateSampleFindingsRequest request)
Generates sample findings of types specified by the list of finding types.
|
CreateThreatIntelSetResult |
createThreatIntelSet(CreateThreatIntelSetRequest request)
Creates a new ThreatIntelSet.
|
DeclineInvitationsResult |
declineInvitations(DeclineInvitationsRequest request)
Declines invitations sent to the current member account by Amazon Web Services accounts specified by their
account IDs.
|
DeleteDetectorResult |
deleteDetector(DeleteDetectorRequest request)
Deletes an Amazon GuardDuty detector that is specified by the detector ID.
|
DeleteFilterResult |
deleteFilter(DeleteFilterRequest request)
Deletes the filter specified by the filter name.
|
DeleteInvitationsResult |
deleteInvitations(DeleteInvitationsRequest request)
Deletes invitations sent to the current member account by Amazon Web Services accounts specified by their account
IDs.
|
DeleteIPSetResult |
deleteIPSet(DeleteIPSetRequest request)
Deletes the IPSet specified by the
ipSetId. |
DeleteMalwareProtectionPlanResult |
deleteMalwareProtectionPlan(DeleteMalwareProtectionPlanRequest request)
Deletes the Malware Protection plan ID associated with the Malware Protection plan resource.
|
DeleteMembersResult |
deleteMembers(DeleteMembersRequest request)
Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
|
DeletePublishingDestinationResult |
deletePublishingDestination(DeletePublishingDestinationRequest request)
Deletes the publishing definition with the specified
destinationId. |
DeleteThreatIntelSetResult |
deleteThreatIntelSet(DeleteThreatIntelSetRequest request)
Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.
|
DescribeMalwareScansResult |
describeMalwareScans(DescribeMalwareScansRequest request)
Returns a list of malware scans.
|
DescribeOrganizationConfigurationResult |
describeOrganizationConfiguration(DescribeOrganizationConfigurationRequest request)
Returns information about the account selected as the delegated administrator for GuardDuty.
|
DescribePublishingDestinationResult |
describePublishingDestination(DescribePublishingDestinationRequest request)
Returns information about the publishing destination specified by the provided
destinationId. |
DisableOrganizationAdminAccountResult |
disableOrganizationAdminAccount(DisableOrganizationAdminAccountRequest request)
Removes the existing GuardDuty delegated administrator of the organization.
|
DisassociateFromAdministratorAccountResult |
disassociateFromAdministratorAccount(DisassociateFromAdministratorAccountRequest request)
Disassociates the current GuardDuty member account from its administrator account.
|
DisassociateFromMasterAccountResult |
disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
Deprecated.
|
DisassociateMembersResult |
disassociateMembers(DisassociateMembersRequest request)
Disassociates GuardDuty member accounts (from the current administrator account) specified by the account IDs.
|
EnableOrganizationAdminAccountResult |
enableOrganizationAdminAccount(EnableOrganizationAdminAccountRequest request)
Designates an Amazon Web Services account within the organization as your GuardDuty delegated administrator.
|
GetAdministratorAccountResult |
getAdministratorAccount(GetAdministratorAccountRequest request)
Provides the details of the GuardDuty administrator account associated with the current GuardDuty member account.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful request, typically used for debugging issues
where a service isn't acting as expected.
|
GetCoverageStatisticsResult |
getCoverageStatistics(GetCoverageStatisticsRequest request)
Retrieves aggregated statistics for your account.
|
GetDetectorResult |
getDetector(GetDetectorRequest request)
Retrieves an Amazon GuardDuty detector specified by the detectorId.
|
GetFilterResult |
getFilter(GetFilterRequest request)
Returns the details of the filter specified by the filter name.
|
GetFindingsResult |
getFindings(GetFindingsRequest request)
Describes Amazon GuardDuty findings specified by finding IDs.
|
GetFindingsStatisticsResult |
getFindingsStatistics(GetFindingsStatisticsRequest request)
Lists Amazon GuardDuty findings statistics for the specified detector ID.
|
GetInvitationsCountResult |
getInvitationsCount(GetInvitationsCountRequest request)
Returns the count of all GuardDuty membership invitations that were sent to the current member account except the
currently accepted invitation.
|
GetIPSetResult |
getIPSet(GetIPSetRequest request)
Retrieves the IPSet specified by the
ipSetId. |
GetMalwareProtectionPlanResult |
getMalwareProtectionPlan(GetMalwareProtectionPlanRequest request)
Retrieves the Malware Protection plan details associated with a Malware Protection plan ID.
|
GetMalwareScanSettingsResult |
getMalwareScanSettings(GetMalwareScanSettingsRequest request)
Returns the details of the malware scan settings.
|
GetMasterAccountResult |
getMasterAccount(GetMasterAccountRequest request)
Deprecated.
|
GetMemberDetectorsResult |
getMemberDetectors(GetMemberDetectorsRequest request)
Describes which data sources are enabled for the member account's detector.
|
GetMembersResult |
getMembers(GetMembersRequest request)
Retrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the account
IDs.
|
GetOrganizationStatisticsResult |
getOrganizationStatistics(GetOrganizationStatisticsRequest request)
Retrieves how many active member accounts have each feature enabled within GuardDuty.
|
GetRemainingFreeTrialDaysResult |
getRemainingFreeTrialDays(GetRemainingFreeTrialDaysRequest request)
Provides the number of days left for each data source used in the free trial period.
|
GetThreatIntelSetResult |
getThreatIntelSet(GetThreatIntelSetRequest request)
Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
|
GetUsageStatisticsResult |
getUsageStatistics(GetUsageStatisticsRequest request)
Lists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID.
|
InviteMembersResult |
inviteMembers(InviteMembersRequest request)
Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services
account that invokes this API.
|
ListCoverageResult |
listCoverage(ListCoverageRequest request)
Lists coverage details for your GuardDuty account.
|
ListDetectorsResult |
listDetectors(ListDetectorsRequest request)
Lists detectorIds of all the existing Amazon GuardDuty detector resources.
|
ListFiltersResult |
listFilters(ListFiltersRequest request)
Returns a paginated list of the current filters.
|
ListFindingsResult |
listFindings(ListFindingsRequest request)
Lists GuardDuty findings for the specified detector ID.
|
ListInvitationsResult |
listInvitations(ListInvitationsRequest request)
Lists all GuardDuty membership invitations that were sent to the current Amazon Web Services account.
|
ListIPSetsResult |
listIPSets(ListIPSetsRequest request)
Lists the IPSets of the GuardDuty service specified by the detector ID.
|
ListMalwareProtectionPlansResult |
listMalwareProtectionPlans(ListMalwareProtectionPlansRequest request)
Lists the Malware Protection plan IDs associated with the protected resources in your Amazon Web Services
account.
|
ListMembersResult |
listMembers(ListMembersRequest request)
Lists details about all member accounts for the current GuardDuty administrator account.
|
ListOrganizationAdminAccountsResult |
listOrganizationAdminAccounts(ListOrganizationAdminAccountsRequest request)
Lists the accounts designated as GuardDuty delegated administrators.
|
ListPublishingDestinationsResult |
listPublishingDestinations(ListPublishingDestinationsRequest request)
Returns a list of publishing destinations associated with the specified
detectorId. |
ListTagsForResourceResult |
listTagsForResource(ListTagsForResourceRequest request)
Lists tags for a resource.
|
ListThreatIntelSetsResult |
listThreatIntelSets(ListThreatIntelSetsRequest request)
Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID.
|
void |
shutdown()
Shuts down this client object, releasing any resources that might be held open.
|
StartMalwareScanResult |
startMalwareScan(StartMalwareScanRequest request)
Initiates the malware scan.
|
StartMonitoringMembersResult |
startMonitoringMembers(StartMonitoringMembersRequest request)
Turns on GuardDuty monitoring of the specified member accounts.
|
StopMonitoringMembersResult |
stopMonitoringMembers(StopMonitoringMembersRequest request)
Stops GuardDuty monitoring for the specified member accounts.
|
TagResourceResult |
tagResource(TagResourceRequest request)
Adds tags to a resource.
|
UnarchiveFindingsResult |
unarchiveFindings(UnarchiveFindingsRequest request)
Unarchives GuardDuty findings specified by the
findingIds. |
UntagResourceResult |
untagResource(UntagResourceRequest request)
Removes tags from a resource.
|
UpdateDetectorResult |
updateDetector(UpdateDetectorRequest request)
Updates the GuardDuty detector specified by the detector ID.
|
UpdateFilterResult |
updateFilter(UpdateFilterRequest request)
Updates the filter specified by the filter name.
|
UpdateFindingsFeedbackResult |
updateFindingsFeedback(UpdateFindingsFeedbackRequest request)
Marks the specified GuardDuty findings as useful or not useful.
|
UpdateIPSetResult |
updateIPSet(UpdateIPSetRequest request)
Updates the IPSet specified by the IPSet ID.
|
UpdateMalwareProtectionPlanResult |
updateMalwareProtectionPlan(UpdateMalwareProtectionPlanRequest request)
Updates an existing Malware Protection plan resource.
|
UpdateMalwareScanSettingsResult |
updateMalwareScanSettings(UpdateMalwareScanSettingsRequest request)
Updates the malware scan settings.
|
UpdateMemberDetectorsResult |
updateMemberDetectors(UpdateMemberDetectorsRequest request)
Contains information on member accounts to be updated.
|
UpdateOrganizationConfigurationResult |
updateOrganizationConfiguration(UpdateOrganizationConfigurationRequest request)
Configures the delegated administrator account with the provided values.
|
UpdatePublishingDestinationResult |
updatePublishingDestination(UpdatePublishingDestinationRequest request)
Updates information about the publishing destination specified by the
destinationId. |
UpdateThreatIntelSetResult |
updateThreatIntelSet(UpdateThreatIntelSetRequest request)
Updates the ThreatIntelSet specified by the ThreatIntelSet ID.
|
public AcceptAdministratorInvitationResult acceptAdministratorInvitation(AcceptAdministratorInvitationRequest request)
AmazonGuardDutyAccepts the invitation to be a member account and get monitored by a GuardDuty administrator account that sent the invitation.
acceptAdministratorInvitation in interface AmazonGuardDuty@Deprecated public AcceptInvitationResult acceptInvitation(AcceptInvitationRequest request)
AmazonGuardDutyAccepts the invitation to be monitored by a GuardDuty administrator account.
acceptInvitation in interface AmazonGuardDutypublic ArchiveFindingsResult archiveFindings(ArchiveFindingsRequest request)
AmazonGuardDutyArchives GuardDuty findings that are specified by the list of finding IDs.
Only the administrator account can archive findings. Member accounts don't have permission to archive findings from their accounts.
archiveFindings in interface AmazonGuardDutypublic CreateDetectorResult createDetector(CreateDetectorRequest request)
AmazonGuardDutyCreates a single GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each Region where you enable the service. You can have only one detector per account per Region. All data sources are enabled in a new detector by default.
When you don't specify any features, with an exception to RUNTIME_MONITORING, all the
optional features are enabled by default.
When you specify some of the features, any feature that is not specified in the API call gets
enabled by default, with an exception to RUNTIME_MONITORING.
Specifying both EKS Runtime Monitoring (EKS_RUNTIME_MONITORING) and Runtime Monitoring (
RUNTIME_MONITORING) will cause an error. You can add only one of these two features because Runtime
Monitoring already includes the threat detection for Amazon EKS resources. For more information, see Runtime Monitoring.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
createDetector in interface AmazonGuardDutypublic CreateFilterResult createFilter(CreateFilterRequest request)
AmazonGuardDutyCreates a filter using the specified finding criteria. The maximum number of saved filters per Amazon Web Services account per Region is 100. For more information, see Quotas for GuardDuty.
createFilter in interface AmazonGuardDutypublic CreateIPSetResult createIPSet(CreateIPSetRequest request)
AmazonGuardDutyCreates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of IP addresses that are trusted for secure communication with Amazon Web Services infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are included in IPSets. Only users from the administrator account can use this operation.
createIPSet in interface AmazonGuardDutypublic CreateMalwareProtectionPlanResult createMalwareProtectionPlan(CreateMalwareProtectionPlanRequest request)
AmazonGuardDutyCreates a new Malware Protection plan for the protected resource.
When you create a Malware Protection plan, the Amazon Web Services service terms for GuardDuty Malware Protection apply. For more information, see Amazon Web Services service terms for GuardDuty Malware Protection.
createMalwareProtectionPlan in interface AmazonGuardDutypublic CreateMembersResult createMembers(CreateMembersRequest request)
AmazonGuardDutyCreates member accounts of the current Amazon Web Services account by specifying a list of Amazon Web Services account IDs. This step is a prerequisite for managing the associated member accounts either by invitation or through an organization.
As a delegated administrator, using CreateMembers will enable GuardDuty in the added member
accounts, with the exception of the organization delegated administrator account. A delegated administrator must
enable GuardDuty prior to being added as a member.
When you use CreateMembers as an Organizations delegated administrator, GuardDuty applies your organization's auto-enable settings to the member accounts in this request, irrespective of the accounts being new or existing members. For more information about the existing auto-enable settings for your organization, see DescribeOrganizationConfiguration.
If you disassociate a member account that was added by invitation, the member account details obtained from this API, including the associated email addresses, will be retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
When the member accounts added through Organizations are later disassociated, you (administrator) can't invite them by calling the InviteMembers API. You can create an association with these member accounts again only by calling the CreateMembers API.
createMembers in interface AmazonGuardDutypublic CreatePublishingDestinationResult createPublishingDestination(CreatePublishingDestinationRequest request)
AmazonGuardDutyCreates a publishing destination to export findings to. The resource to export findings to must exist before you use this operation.
createPublishingDestination in interface AmazonGuardDutypublic CreateSampleFindingsResult createSampleFindings(CreateSampleFindingsRequest request)
AmazonGuardDuty
Generates sample findings of types specified by the list of finding types. If 'NULL' is specified for
findingTypes, the API generates sample findings of all supported finding types.
createSampleFindings in interface AmazonGuardDutypublic CreateThreatIntelSetResult createThreatIntelSet(CreateThreatIntelSetRequest request)
AmazonGuardDutyCreates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can use this operation.
createThreatIntelSet in interface AmazonGuardDutypublic DeclineInvitationsResult declineInvitations(DeclineInvitationsRequest request)
AmazonGuardDutyDeclines invitations sent to the current member account by Amazon Web Services accounts specified by their account IDs.
declineInvitations in interface AmazonGuardDutypublic DeleteDetectorResult deleteDetector(DeleteDetectorRequest request)
AmazonGuardDutyDeletes an Amazon GuardDuty detector that is specified by the detector ID.
deleteDetector in interface AmazonGuardDutypublic DeleteFilterResult deleteFilter(DeleteFilterRequest request)
AmazonGuardDutyDeletes the filter specified by the filter name.
deleteFilter in interface AmazonGuardDutypublic DeleteIPSetResult deleteIPSet(DeleteIPSetRequest request)
AmazonGuardDuty
Deletes the IPSet specified by the ipSetId. IPSets are called trusted IP lists in the console user
interface.
deleteIPSet in interface AmazonGuardDutypublic DeleteInvitationsResult deleteInvitations(DeleteInvitationsRequest request)
AmazonGuardDutyDeletes invitations sent to the current member account by Amazon Web Services accounts specified by their account IDs.
deleteInvitations in interface AmazonGuardDutypublic DeleteMalwareProtectionPlanResult deleteMalwareProtectionPlan(DeleteMalwareProtectionPlanRequest request)
AmazonGuardDutyDeletes the Malware Protection plan ID associated with the Malware Protection plan resource. Use this API only when you no longer want to protect the resource associated with this Malware Protection plan ID.
deleteMalwareProtectionPlan in interface AmazonGuardDutypublic DeleteMembersResult deleteMembers(DeleteMembersRequest request)
AmazonGuardDutyDeletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
With autoEnableOrganizationMembers configuration for your organization set to ALL,
you'll receive an error if you attempt to disable GuardDuty for a member account in your organization.
deleteMembers in interface AmazonGuardDutypublic DeletePublishingDestinationResult deletePublishingDestination(DeletePublishingDestinationRequest request)
AmazonGuardDuty
Deletes the publishing definition with the specified destinationId.
deletePublishingDestination in interface AmazonGuardDutypublic DeleteThreatIntelSetResult deleteThreatIntelSet(DeleteThreatIntelSetRequest request)
AmazonGuardDutyDeletes the ThreatIntelSet specified by the ThreatIntelSet ID.
deleteThreatIntelSet in interface AmazonGuardDutypublic DescribeMalwareScansResult describeMalwareScans(DescribeMalwareScansRequest request)
AmazonGuardDutyReturns a list of malware scans. Each member account can view the malware scans for their own accounts. An administrator can view the malware scans for all the member accounts.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
describeMalwareScans in interface AmazonGuardDutypublic DescribeOrganizationConfigurationResult describeOrganizationConfiguration(DescribeOrganizationConfigurationRequest request)
AmazonGuardDutyReturns information about the account selected as the delegated administrator for GuardDuty.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
describeOrganizationConfiguration in interface AmazonGuardDutypublic DescribePublishingDestinationResult describePublishingDestination(DescribePublishingDestinationRequest request)
AmazonGuardDuty
Returns information about the publishing destination specified by the provided destinationId.
describePublishingDestination in interface AmazonGuardDutypublic DisableOrganizationAdminAccountResult disableOrganizationAdminAccount(DisableOrganizationAdminAccountRequest request)
AmazonGuardDutyRemoves the existing GuardDuty delegated administrator of the organization. Only the organization's management account can run this API operation.
disableOrganizationAdminAccount in interface AmazonGuardDutypublic DisassociateFromAdministratorAccountResult disassociateFromAdministratorAccount(DisassociateFromAdministratorAccountRequest request)
AmazonGuardDutyDisassociates the current GuardDuty member account from its administrator account.
When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the CreateMembers API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
With autoEnableOrganizationMembers configuration for your organization set to ALL,
you'll receive an error if you attempt to disable GuardDuty in a member account.
disassociateFromAdministratorAccount in interface AmazonGuardDuty@Deprecated public DisassociateFromMasterAccountResult disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
AmazonGuardDutyDisassociates the current GuardDuty member account from its administrator account.
When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the CreateMembers API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
disassociateFromMasterAccount in interface AmazonGuardDutypublic DisassociateMembersResult disassociateMembers(DisassociateMembersRequest request)
AmazonGuardDutyDisassociates GuardDuty member accounts (from the current administrator account) specified by the account IDs.
When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the CreateMembers API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
With autoEnableOrganizationMembers configuration for your organization set to ALL,
you'll receive an error if you attempt to disassociate a member account before removing them from your
organization.
If you disassociate a member account that was added by invitation, the member account details obtained from this API, including the associated email addresses, will be retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
When the member accounts added through Organizations are later disassociated, you (administrator) can't invite them by calling the InviteMembers API. You can create an association with these member accounts again only by calling the CreateMembers API.
disassociateMembers in interface AmazonGuardDutypublic EnableOrganizationAdminAccountResult enableOrganizationAdminAccount(EnableOrganizationAdminAccountRequest request)
AmazonGuardDutyDesignates an Amazon Web Services account within the organization as your GuardDuty delegated administrator. Only the organization's management account can run this API operation.
enableOrganizationAdminAccount in interface AmazonGuardDutypublic GetAdministratorAccountResult getAdministratorAccount(GetAdministratorAccountRequest request)
AmazonGuardDutyProvides the details of the GuardDuty administrator account associated with the current GuardDuty member account.
If the organization's management account or a delegated administrator runs this API, it will return success (
HTTP 200) but no content.
getAdministratorAccount in interface AmazonGuardDutypublic GetCoverageStatisticsResult getCoverageStatistics(GetCoverageStatisticsRequest request)
AmazonGuardDutyRetrieves aggregated statistics for your account. If you are a GuardDuty administrator, you can retrieve the statistics for all the resources associated with the active member accounts in your organization who have enabled Runtime Monitoring and have the GuardDuty security agent running on their resources.
getCoverageStatistics in interface AmazonGuardDutypublic GetDetectorResult getDetector(GetDetectorRequest request)
AmazonGuardDutyRetrieves an Amazon GuardDuty detector specified by the detectorId.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
getDetector in interface AmazonGuardDutypublic GetFilterResult getFilter(GetFilterRequest request)
AmazonGuardDutyReturns the details of the filter specified by the filter name.
getFilter in interface AmazonGuardDutypublic GetFindingsResult getFindings(GetFindingsRequest request)
AmazonGuardDutyDescribes Amazon GuardDuty findings specified by finding IDs.
getFindings in interface AmazonGuardDutypublic GetFindingsStatisticsResult getFindingsStatistics(GetFindingsStatisticsRequest request)
AmazonGuardDutyLists Amazon GuardDuty findings statistics for the specified detector ID.
There might be regional differences because some flags might not be available in all the Regions where GuardDuty is currently supported. For more information, see Regions and endpoints.
getFindingsStatistics in interface AmazonGuardDutypublic GetIPSetResult getIPSet(GetIPSetRequest request)
AmazonGuardDuty
Retrieves the IPSet specified by the ipSetId.
getIPSet in interface AmazonGuardDutypublic GetInvitationsCountResult getInvitationsCount(GetInvitationsCountRequest request)
AmazonGuardDutyReturns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
getInvitationsCount in interface AmazonGuardDutypublic GetMalwareProtectionPlanResult getMalwareProtectionPlan(GetMalwareProtectionPlanRequest request)
AmazonGuardDutyRetrieves the Malware Protection plan details associated with a Malware Protection plan ID.
getMalwareProtectionPlan in interface AmazonGuardDutypublic GetMalwareScanSettingsResult getMalwareScanSettings(GetMalwareScanSettingsRequest request)
AmazonGuardDutyReturns the details of the malware scan settings.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
getMalwareScanSettings in interface AmazonGuardDuty@Deprecated public GetMasterAccountResult getMasterAccount(GetMasterAccountRequest request)
AmazonGuardDutyProvides the details for the GuardDuty administrator account associated with the current GuardDuty member account.
getMasterAccount in interface AmazonGuardDutypublic GetMemberDetectorsResult getMemberDetectors(GetMemberDetectorsRequest request)
AmazonGuardDutyDescribes which data sources are enabled for the member account's detector.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
getMemberDetectors in interface AmazonGuardDutypublic GetMembersResult getMembers(GetMembersRequest request)
AmazonGuardDutyRetrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the account IDs.
getMembers in interface AmazonGuardDutypublic GetOrganizationStatisticsResult getOrganizationStatistics(GetOrganizationStatisticsRequest request)
AmazonGuardDutyRetrieves how many active member accounts have each feature enabled within GuardDuty. Only a delegated GuardDuty administrator of an organization can run this API.
When you create a new organization, it might take up to 24 hours to generate the statistics for the entire organization.
getOrganizationStatistics in interface AmazonGuardDutypublic GetRemainingFreeTrialDaysResult getRemainingFreeTrialDays(GetRemainingFreeTrialDaysRequest request)
AmazonGuardDutyProvides the number of days left for each data source used in the free trial period.
getRemainingFreeTrialDays in interface AmazonGuardDutypublic GetThreatIntelSetResult getThreatIntelSet(GetThreatIntelSetRequest request)
AmazonGuardDutyRetrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
getThreatIntelSet in interface AmazonGuardDutypublic GetUsageStatisticsResult getUsageStatistics(GetUsageStatisticsRequest request)
AmazonGuardDutyLists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID. For newly enabled detectors or data sources, the cost returned will include only the usage so far under 30 days. This may differ from the cost metrics in the console, which project usage over 30 days to provide a monthly cost estimate. For more information, see Understanding How Usage Costs are Calculated.
getUsageStatistics in interface AmazonGuardDutypublic InviteMembersResult inviteMembers(InviteMembersRequest request)
AmazonGuardDutyInvites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services account that invokes this API. If you are using Amazon Web Services Organizations to manage your GuardDuty environment, this step is not needed. For more information, see Managing accounts with organizations.
To invite Amazon Web Services accounts, the first step is to ensure that GuardDuty has been enabled in the potential member accounts. You can now invoke this API to add accounts by invitation. The invited accounts can either accept or decline the invitation from their GuardDuty accounts. Each invited Amazon Web Services account can choose to accept the invitation from only one Amazon Web Services account. For more information, see Managing GuardDuty accounts by invitation.
After the invite has been accepted and you choose to disassociate a member account (by using DisassociateMembers) from your account, the details of the member account obtained by invoking CreateMembers, including the associated email addresses, will be retained. This is done so that you can invoke InviteMembers without the need to invoke CreateMembers again. To remove the details associated with a member account, you must also invoke DeleteMembers.
If you disassociate a member account that was added by invitation, the member account details obtained from this API, including the associated email addresses, will be retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
When the member accounts added through Organizations are later disassociated, you (administrator) can't invite them by calling the InviteMembers API. You can create an association with these member accounts again only by calling the CreateMembers API.
inviteMembers in interface AmazonGuardDutypublic ListCoverageResult listCoverage(ListCoverageRequest request)
AmazonGuardDutyLists coverage details for your GuardDuty account. If you're a GuardDuty administrator, you can retrieve all resources associated with the active member accounts in your organization.
Make sure the accounts have Runtime Monitoring enabled and GuardDuty agent running on their resources.
listCoverage in interface AmazonGuardDutypublic ListDetectorsResult listDetectors(ListDetectorsRequest request)
AmazonGuardDutyLists detectorIds of all the existing Amazon GuardDuty detector resources.
listDetectors in interface AmazonGuardDutypublic ListFiltersResult listFilters(ListFiltersRequest request)
AmazonGuardDutyReturns a paginated list of the current filters.
listFilters in interface AmazonGuardDutypublic ListFindingsResult listFindings(ListFindingsRequest request)
AmazonGuardDutyLists GuardDuty findings for the specified detector ID.
There might be regional differences because some flags might not be available in all the Regions where GuardDuty is currently supported. For more information, see Regions and endpoints.
listFindings in interface AmazonGuardDutypublic ListIPSetsResult listIPSets(ListIPSetsRequest request)
AmazonGuardDutyLists the IPSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the IPSets returned are the IPSets from the associated administrator account.
listIPSets in interface AmazonGuardDutypublic ListInvitationsResult listInvitations(ListInvitationsRequest request)
AmazonGuardDutyLists all GuardDuty membership invitations that were sent to the current Amazon Web Services account.
listInvitations in interface AmazonGuardDutypublic ListMalwareProtectionPlansResult listMalwareProtectionPlans(ListMalwareProtectionPlansRequest request)
AmazonGuardDutyLists the Malware Protection plan IDs associated with the protected resources in your Amazon Web Services account.
listMalwareProtectionPlans in interface AmazonGuardDutypublic ListMembersResult listMembers(ListMembersRequest request)
AmazonGuardDutyLists details about all member accounts for the current GuardDuty administrator account.
listMembers in interface AmazonGuardDutypublic ListOrganizationAdminAccountsResult listOrganizationAdminAccounts(ListOrganizationAdminAccountsRequest request)
AmazonGuardDutyLists the accounts designated as GuardDuty delegated administrators. Only the organization's management account can run this API operation.
listOrganizationAdminAccounts in interface AmazonGuardDutypublic ListPublishingDestinationsResult listPublishingDestinations(ListPublishingDestinationsRequest request)
AmazonGuardDuty
Returns a list of publishing destinations associated with the specified detectorId.
listPublishingDestinations in interface AmazonGuardDutypublic ListTagsForResourceResult listTagsForResource(ListTagsForResourceRequest request)
AmazonGuardDutyLists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, threat intel sets, and publishing destination, with a limit of 50 tags per resource. When invoked, this operation returns all assigned tags for a given resource.
listTagsForResource in interface AmazonGuardDutypublic ListThreatIntelSetsResult listThreatIntelSets(ListThreatIntelSetsRequest request)
AmazonGuardDutyLists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the ThreatIntelSets associated with the administrator account are returned.
listThreatIntelSets in interface AmazonGuardDutypublic StartMalwareScanResult startMalwareScan(StartMalwareScanRequest request)
AmazonGuardDutyInitiates the malware scan. Invoking this API will automatically create the Service-linked role in the corresponding account.
When the malware scan starts, you can use the associated scan ID to track the status of the scan. For more information, see DescribeMalwareScans.
startMalwareScan in interface AmazonGuardDutypublic StartMonitoringMembersResult startMonitoringMembers(StartMonitoringMembersRequest request)
AmazonGuardDutyTurns on GuardDuty monitoring of the specified member accounts. Use this operation to restart monitoring of accounts that you stopped monitoring with the StopMonitoringMembers operation.
startMonitoringMembers in interface AmazonGuardDutypublic StopMonitoringMembersResult stopMonitoringMembers(StopMonitoringMembersRequest request)
AmazonGuardDuty
Stops GuardDuty monitoring for the specified member accounts. Use the StartMonitoringMembers
operation to restart monitoring for those accounts.
With autoEnableOrganizationMembers configuration for your organization set to ALL,
you'll receive an error if you attempt to stop monitoring the member accounts in your organization.
stopMonitoringMembers in interface AmazonGuardDutypublic TagResourceResult tagResource(TagResourceRequest request)
AmazonGuardDutyAdds tags to a resource.
tagResource in interface AmazonGuardDutypublic UnarchiveFindingsResult unarchiveFindings(UnarchiveFindingsRequest request)
AmazonGuardDuty
Unarchives GuardDuty findings specified by the findingIds.
unarchiveFindings in interface AmazonGuardDutypublic UntagResourceResult untagResource(UntagResourceRequest request)
AmazonGuardDutyRemoves tags from a resource.
untagResource in interface AmazonGuardDutypublic UpdateDetectorResult updateDetector(UpdateDetectorRequest request)
AmazonGuardDutyUpdates the GuardDuty detector specified by the detector ID.
Specifying both EKS Runtime Monitoring (EKS_RUNTIME_MONITORING) and Runtime Monitoring (
RUNTIME_MONITORING) will cause an error. You can add only one of these two features because Runtime
Monitoring already includes the threat detection for Amazon EKS resources. For more information, see Runtime Monitoring.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
updateDetector in interface AmazonGuardDutypublic UpdateFilterResult updateFilter(UpdateFilterRequest request)
AmazonGuardDutyUpdates the filter specified by the filter name.
updateFilter in interface AmazonGuardDutypublic UpdateFindingsFeedbackResult updateFindingsFeedback(UpdateFindingsFeedbackRequest request)
AmazonGuardDutyMarks the specified GuardDuty findings as useful or not useful.
updateFindingsFeedback in interface AmazonGuardDutypublic UpdateIPSetResult updateIPSet(UpdateIPSetRequest request)
AmazonGuardDutyUpdates the IPSet specified by the IPSet ID.
updateIPSet in interface AmazonGuardDutypublic UpdateMalwareProtectionPlanResult updateMalwareProtectionPlan(UpdateMalwareProtectionPlanRequest request)
AmazonGuardDutyUpdates an existing Malware Protection plan resource.
updateMalwareProtectionPlan in interface AmazonGuardDutypublic UpdateMalwareScanSettingsResult updateMalwareScanSettings(UpdateMalwareScanSettingsRequest request)
AmazonGuardDutyUpdates the malware scan settings.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
updateMalwareScanSettings in interface AmazonGuardDutypublic UpdateMemberDetectorsResult updateMemberDetectors(UpdateMemberDetectorsRequest request)
AmazonGuardDutyContains information on member accounts to be updated.
Specifying both EKS Runtime Monitoring (EKS_RUNTIME_MONITORING) and Runtime Monitoring (
RUNTIME_MONITORING) will cause an error. You can add only one of these two features because Runtime
Monitoring already includes the threat detection for Amazon EKS resources. For more information, see Runtime Monitoring.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
updateMemberDetectors in interface AmazonGuardDutypublic UpdateOrganizationConfigurationResult updateOrganizationConfiguration(UpdateOrganizationConfigurationRequest request)
AmazonGuardDuty
Configures the delegated administrator account with the provided values. You must provide a value for either
autoEnableOrganizationMembers or autoEnable, but not both.
Specifying both EKS Runtime Monitoring (EKS_RUNTIME_MONITORING) and Runtime Monitoring (
RUNTIME_MONITORING) will cause an error. You can add only one of these two features because Runtime
Monitoring already includes the threat detection for Amazon EKS resources. For more information, see Runtime Monitoring.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
updateOrganizationConfiguration in interface AmazonGuardDutypublic UpdatePublishingDestinationResult updatePublishingDestination(UpdatePublishingDestinationRequest request)
AmazonGuardDuty
Updates information about the publishing destination specified by the destinationId.
updatePublishingDestination in interface AmazonGuardDutypublic UpdateThreatIntelSetResult updateThreatIntelSet(UpdateThreatIntelSetRequest request)
AmazonGuardDutyUpdates the ThreatIntelSet specified by the ThreatIntelSet ID.
updateThreatIntelSet in interface AmazonGuardDutypublic void shutdown()
AmazonGuardDutyshutdown in interface AmazonGuardDutypublic ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
AmazonGuardDutyResponse metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing a request.
getCachedResponseMetadata in interface AmazonGuardDutyrequest - The originally executed request.