Package software.amazon.awssdk.services.continuum.model
package software.amazon.awssdk.services.continuum.model
-
ClassDescriptionThe request is not authorized.A software package implicated by a finding.HTTP method recorded on an exploit artifact.Specifies the Collector ARN and data-access role to associate with this Environment.Contains the Environment and the Collector associated by this request.One Collector associated with an Environment.A summary of one Environment associated with a Collector.Code-specific environment properties.Complete customer-visible data for one environment scan.Customer-visible summary of one environment scan.Collector data access configuration returned for an environment.The lifecycle status of a Collector.A summary of a Collector returned in list responses.The source collected by a Collector.The request could not be completed due to a conflict with the current state of the resource.Source and operating-policy settings for a new code environment.Specifies the environment and the finding document to ingest.Contains the identifier, ARN, title, and initial status of the newly ingested finding.Creates a Collector for the authenticated caller.Contains the identifier and ARN of the newly created Collector.Type-specific configuration for a new environment.Specifies the name and type-specific configuration of the new environment.Contains the identifier and ARN of the newly created environment.Specifies the provider configuration and name for the new integration.Contains the original identifier, ARN, and creation time of the new or replayed integration.Specifies the Collector to delete.Specifies the environment to delete.Specifies the integration to delete.Cause of a PATCH delivery's current state; used only by DeliveryState.reason.Identity only.Specifies the Collector to disassociate from this Environment.Environment-level operating policy.Type-specific configuration and state returned by GetEnvironment and UpdateEnvironment.Summary of an environment returned in list responses.Network policy for agent execution.One repository selected from a previously-created integration.An S3 source for one environment, backed by a previously-created S3 integration.GA source configuration for code and customer-authored context.The operational status of an environment.Whether validation confirmed the vulnerability is exploitable.The effect validation observed from an exploit payload.Why a validator rejected a finding.One compliance check behind a posture finding.Why a finding was not escalated into an issue.A code citation supporting a validation verdict.A code location a finding points at.The OCSF Finding class a submitted document declared.The compliance posture a finding reports, for the Application Security Posture Finding class.A cloud or application resource a finding concerns.A validator's severity conclusion.A finding's severity, on the canonical numeric scale OCSF defines (UNKNOWN=0, INFORMATIONAL=1, LOW=2, MEDIUM=3, HIGH=4, CRITICAL=5, FATAL=6, OTHER=99).The lifecycle status of a finding as it moves through Continuum's processing pipeline.A summary of a finding returned in list responses.What kind of finding this is, and who produced it.A validator's assessment of a finding.A validator's conclusion about whether a finding is real.One vulnerability reported by a finding.Validation's verdict for one attack flow.Outcome recorded for one attack flow.Specifies the finding to retrieve.Contains the current state and details of the requested finding.Specifies the artifact to retrieve.Contains the requested artifact and its content.Specifies the issue to retrieve.Contains the current state and details of the requested issue.Identifies the Collector whose inventory is requested.Empty response returned when the authenticated caller is authorized to access the Collector's data.Specifies the Collector to retrieve.Contains the current state of the Collector.Specifies the environment to retrieve.Contains the current state and configuration of the requested environment.Specifies the integration to retrieve.Contains metadata for the requested integration.Specifies the resource.Contains the resource policy.Write-only OAuth credentials used to authorize a GitHub.com integration.Configuration for a GitHub.com integration using the OAuth authorization code flow.Details for a GitHub.com integration.The GitHub repository a patch is delivered to, and the pull request that carries it once opened.Configuration for a GitLab integration using a pasted access token.Details for a GitLab integration.Whether the GitLab integration targets an entire group or a single project.How a GitLab integration's access token is rotated.A provider whose OAuth authorization can be started with StartIntegrationAuthorization.A summary of an integration returned in list responses.The immutable provider type for an integration.The request couldn't be processed because of an internal server issue.The projected body of an artifact.A summary of an artifact returned in list responses.The agent that produced an artifact.The category of an artifact attached to an issue, such as evidence, validation evidence, a remediation proposal, a decision, or a patch.Whether this issue has any evidence (formerly 'artifacts') attached.Customer delivery of the patches Continuum produced for an issue, summarized across the issue's PATCH artifacts when the issue is read.Overall customer delivery result of an issue's patches.The part of Continuum's workflow an issue is in (IN_PROGRESS) or failed in (FAILED, when known).Scanner-derived severity assigned to an issue.The customer-facing lifecycle status of an issue.Why an issue is FAILED.A summary of an issue returned in list responses.Complete configuration for the IAM role Continuum assumes to collect Kubernetes cluster metadata.One complete mutation of the Collector's Kubernetes IAM role configuration.Specifies the Environment whose Collector associations to list.Contains one page of the Collectors associated with the requested Environment.Specifies the Collector whose Environment associations to list.Contains one page of Environment summaries associated with the requested Collector.Specifies the environment and pagination parameters for listing findings.Contains the list of finding summaries and an optional pagination token.Specifies the issue, optional filter, and pagination parameters for listing artifacts.Contains the list of artifact summaries and an optional pagination token.Specifies the environment and pagination parameters for listing issues.Contains the list of issue summaries and an optional pagination token.Specifies no request parameters.Contains summaries of the caller account's Collectors.Specifies pagination parameters for listing environments.Contains environment metadata and an optional pagination token.Specifies pagination parameters for listing integrations.Contains the list of integration summaries and an optional pagination token.The PKCE code challenge method (RFC 7636).Projected content for a PATCH artifact: the remediation patch for one repository, with the descriptors needed to verify and apply it and the state of its delivery to the customer's own bucket or repository.Policy governing whether Continuum creates a patch for a proposed remediation.Delivery of a patch to a destination the customer owns: an object in the environment's source bucket or a pull request in the source repository.How a patch is encoded, which determines the command that applies it.Validation's result for one finding within a multi-finding bundle.One producer's conclusion about one subject on one scoring dimension.Projected content for an EVIDENCE artifact carrying prioritization's prevalidation signals.Provider-specific configuration for creating an integration.Provider-specific details for an integration.Specifies the resource and its new policy.Contains the stored resource policy.One step in the validation agent's reasoning chain.Projected content for a REMEDIATION_PROPOSAL artifact: the patch the remediation agent produced, with the descriptors needed to apply and verify it.Empty marker selecting removal in KubernetesClusterRoleUpdate.The specified resource was not found.Configuration for a customer-managed S3 integration.Public details for a customer-managed S3 integration.The S3 object a patch is delivered to.The phase a failed scan was in when it failed.Identifies why a scan run was created.The phase of a scan.The request would exceed a service quota.The level of access exploitation requires.The assessed access-level precondition with the basis behind it.What an attacker gains from exploitation, strongest capability first.The assessed attacker-gains dimension with the basis behind it.A likelihood or impact band on prioritization's shared four-value scale.Where an assessed value came from, strongest evidence first.How far the consequences of exploitation reach, widest first.The assessed blast-radius dimension with the basis behind it.Deterministic values the producer computed from its assessment, as distinct from the assessment itself.A producer's structured rationale for a signal's confidence.The scoring axis a signal speaks to.What validation established about exploitability, as summarized onto the scoring signal derived from it.The three impact dimensions an impact signal assessed.One assessed precondition with the basis behind it.The four preconditions a likelihood signal assessed.A signal's own rating, an input to scoring rather than a finding severity.How valuable the exploited target is.The assessed target-value dimension with the basis behind it.Specifies the provider to authorize and, optionally, the name the new integration will use.Contains the values to send to the provider's authorization endpoint.The request was denied due to request throttling.Mutable source and operating-policy settings for a code environment.Specifies the mutable Collector properties.Contains the current state of the updated Collector.Type-specific changes to an environment.Specifies the mutable environment properties.Contains the current state of the updated environment.Specifies the S3 integration and the credentials to validate and save.Contains the current state of the updated S3 integration.Provider-specific changes for updating an integration.Replacement credentials for a customer-managed S3 integration.How strong the evidence behind an exploitability verdict is, weakest first.Projected content for a VALIDATION_EVIDENCE artifact: the validation agent's durable proof of exploitability.Proof of exploitability the validation agent produced by executing code against the repository under test, with the output that execution produced.A concrete exploit payload and the effect validation observed from it.The executed proof's program.One proof program file.Retained run output.Proof of exploitability the validation agent produced by reading the repository's source, with nothing built or run.How a validation run ended.