securityhub

type AcceptAdministratorInvitationInput struct {

	// The account ID of the Security Hub administrator account that sent the
	// invitation.
	//
	// This member is required.
	AdministratorId *string

	// The identifier of the invitation sent from the Security Hub administrator
	// account.
	//
	// This member is required.
	InvitationId *string
	// contains filtered or unexported fields
}

type AcceptAdministratorInvitationOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type AcceptInvitationInput struct {

	// The identifier of the invitation sent from the Security Hub administrator
	// account.
	//
	// This member is required.
	InvitationId *string

	// The account ID of the Security Hub administrator account that sent the
	// invitation.
	//
	// This member is required.
	MasterId *string
	// contains filtered or unexported fields
}

type AcceptInvitationOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type AuthResolverParameters struct {
	// The name of the operation being invoked.
	Operation string

	// The region in which the operation is being invoked.
	Region string
}

type AuthSchemeResolver interface {
	ResolveAuthSchemes(context.Context, *AuthResolverParameters) ([]*smithyauth.Option, error)
}

type BatchDeleteAutomationRulesInput struct {

	// A list of Amazon Resource Names (ARNs) for the rules that are to be deleted.
	//
	// This member is required.
	AutomationRulesArns []string
	// contains filtered or unexported fields
}

type BatchDeleteAutomationRulesOutput struct {

	// A list of properly processed rule ARNs.
	ProcessedAutomationRules []string

	// A list of objects containing RuleArn , ErrorCode , and ErrorMessage . This
	// parameter tells you which automation rules the request didn't delete and why.
	UnprocessedAutomationRules []types.UnprocessedAutomationRule

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchDisableStandardsInput struct {

	// The ARNs of the standards subscriptions to disable.
	//
	// This member is required.
	StandardsSubscriptionArns []string
	// contains filtered or unexported fields
}

type BatchDisableStandardsOutput struct {

	// The details of the standards subscriptions that were disabled.
	StandardsSubscriptions []types.StandardsSubscription

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchEnableStandardsInput struct {

	// The list of standards checks to enable.
	//
	// This member is required.
	StandardsSubscriptionRequests []types.StandardsSubscriptionRequest
	// contains filtered or unexported fields
}

type BatchEnableStandardsOutput struct {

	// The details of the standards subscriptions that were enabled.
	StandardsSubscriptions []types.StandardsSubscription

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchGetAutomationRulesInput struct {

	// A list of rule ARNs to get details for.
	//
	// This member is required.
	AutomationRulesArns []string
	// contains filtered or unexported fields
}

type BatchGetAutomationRulesOutput struct {

	// A list of rule details for the provided rule ARNs.
	Rules []types.AutomationRulesConfig

	// A list of objects containing RuleArn , ErrorCode , and ErrorMessage . This
	// parameter tells you which automation rules the request didn't retrieve and why.
	UnprocessedAutomationRules []types.UnprocessedAutomationRule

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchGetConfigurationPolicyAssociationsInput struct {

	// Specifies one or more target account IDs, organizational unit (OU) IDs, or the
	// root ID to retrieve associations for.
	//
	// This member is required.
	ConfigurationPolicyAssociationIdentifiers []types.ConfigurationPolicyAssociation
	// contains filtered or unexported fields
}

type BatchGetConfigurationPolicyAssociationsOutput struct {

	// Describes associations for the target accounts, OUs, or the root.
	ConfigurationPolicyAssociations []types.ConfigurationPolicyAssociationSummary

	// An array of configuration policy associations, one for each configuration
	// policy association identifier, that was specified in the request but couldn’t be
	// processed due to an error.
	UnprocessedConfigurationPolicyAssociations []types.UnprocessedConfigurationPolicyAssociation

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchGetSecurityControlsInput struct {

	// A list of security controls (identified with SecurityControlId ,
	// SecurityControlArn , or a mix of both parameters). The security control ID or
	// Amazon Resource Name (ARN) is the same across standards.
	//
	// This member is required.
	SecurityControlIds []string
	// contains filtered or unexported fields
}

type BatchGetSecurityControlsOutput struct {

	// An array that returns the identifier, Amazon Resource Name (ARN), and other
	// details about a security control. The same information is returned whether the
	// request includes SecurityControlId or SecurityControlArn .
	//
	// This member is required.
	SecurityControls []types.SecurityControl

	// A security control (identified with SecurityControlId , SecurityControlArn , or
	// a mix of both parameters) for which details cannot be returned.
	UnprocessedIds []types.UnprocessedSecurityControl

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchGetStandardsControlAssociationsInput struct {

	// An array with one or more objects that includes a security control (identified
	// with SecurityControlId , SecurityControlArn , or a mix of both parameters) and
	// the Amazon Resource Name (ARN) of a standard. This field is used to query the
	// enablement status of a control in a specified standard. The security control ID
	// or ARN is the same across standards.
	//
	// This member is required.
	StandardsControlAssociationIds []types.StandardsControlAssociationId
	// contains filtered or unexported fields
}

type BatchGetStandardsControlAssociationsOutput struct {

	// Provides the enablement status of a security control in a specified standard
	// and other details for the control in relation to the specified standard.
	//
	// This member is required.
	StandardsControlAssociationDetails []types.StandardsControlAssociationDetail

	// A security control (identified with SecurityControlId , SecurityControlArn , or
	// a mix of both parameters) whose enablement status in a specified standard cannot
	// be returned.
	UnprocessedAssociations []types.UnprocessedStandardsControlAssociation

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchImportFindingsInput struct {

	// A list of findings to import. To successfully import a finding, it must follow
	// the Amazon Web Services Security Finding Format (https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-findings-format.html)
	// . Maximum of 100 findings per request.
	//
	// This member is required.
	Findings []types.AwsSecurityFinding
	// contains filtered or unexported fields
}

type BatchImportFindingsOutput struct {

	// The number of findings that failed to import.
	//
	// This member is required.
	FailedCount *int32

	// The number of findings that were successfully imported.
	//
	// This member is required.
	SuccessCount *int32

	// The list of findings that failed to import.
	FailedFindings []types.ImportFindingsError

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchUpdateAutomationRulesInput struct {

	// An array of ARNs for the rules that are to be updated. Optionally, you can also
	// include RuleStatus and RuleOrder .
	//
	// This member is required.
	UpdateAutomationRulesRequestItems []types.UpdateAutomationRulesRequestItem
	// contains filtered or unexported fields
}

type BatchUpdateAutomationRulesOutput struct {

	// A list of properly processed rule ARNs.
	ProcessedAutomationRules []string

	// A list of objects containing RuleArn , ErrorCode , and ErrorMessage . This
	// parameter tells you which automation rules the request didn't update and why.
	UnprocessedAutomationRules []types.UnprocessedAutomationRule

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchUpdateFindingsInput struct {

	// The list of findings to update. BatchUpdateFindings can be used to update up to
	// 100 findings at a time. For each finding, the list provides the finding
	// identifier and the ARN of the finding provider.
	//
	// This member is required.
	FindingIdentifiers []types.AwsSecurityFindingIdentifier

	// The updated value for the finding confidence. Confidence is defined as the
	// likelihood that a finding accurately identifies the behavior or issue that it
	// was intended to identify. Confidence is scored on a 0-100 basis using a ratio
	// scale, where 0 means zero percent confidence and 100 means 100 percent
	// confidence.
	Confidence *int32

	// The updated value for the level of importance assigned to the resources
	// associated with the findings. A score of 0 means that the underlying resources
	// have no criticality, and a score of 100 is reserved for the most critical
	// resources.
	Criticality *int32

	// The updated note.
	Note *types.NoteUpdate

	// A list of findings that are related to the updated findings.
	RelatedFindings []types.RelatedFinding

	// Used to update the finding severity.
	Severity *types.SeverityUpdate

	// One or more finding types in the format of namespace/category/classifier that
	// classify a finding. Valid namespace values are as follows.
	//   - Software and Configuration Checks
	//   - TTPs
	//   - Effects
	//   - Unusual Behaviors
	//   - Sensitive Data Identifications
	Types []string

	// A list of name/value string pairs associated with the finding. These are
	// custom, user-defined fields added to a finding.
	UserDefinedFields map[string]string

	// Indicates the veracity of a finding. The available values for VerificationState
	// are as follows.
	//   - UNKNOWN – The default disposition of a security finding
	//   - TRUE_POSITIVE – The security finding is confirmed
	//   - FALSE_POSITIVE – The security finding was determined to be a false alarm
	//   - BENIGN_POSITIVE – A special case of TRUE_POSITIVE where the finding doesn't
	//   pose any threat, is expected, or both
	VerificationState types.VerificationState

	// Used to update the workflow status of a finding. The workflow status indicates
	// the progress of the investigation into the finding.
	Workflow *types.WorkflowUpdate
	// contains filtered or unexported fields
}

type BatchUpdateFindingsOutput struct {

	// The list of findings that were updated successfully.
	//
	// This member is required.
	ProcessedFindings []types.AwsSecurityFindingIdentifier

	// The list of findings that were not updated.
	//
	// This member is required.
	UnprocessedFindings []types.BatchUpdateFindingsUnprocessedFinding

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type BatchUpdateStandardsControlAssociationsInput struct {

	// Updates the enablement status of a security control in a specified standard.
	//
	// This member is required.
	StandardsControlAssociationUpdates []types.StandardsControlAssociationUpdate
	// contains filtered or unexported fields
}

type BatchUpdateStandardsControlAssociationsOutput struct {

	// A security control (identified with SecurityControlId , SecurityControlArn , or
	// a mix of both parameters) whose enablement status in a specified standard
	// couldn't be updated.
	UnprocessedAssociationUpdates []types.UnprocessedStandardsControlAssociationUpdate

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type Client struct {
	// contains filtered or unexported fields
}

type CreateActionTargetInput struct {

	// The description for the custom action target.
	//
	// This member is required.
	Description *string

	// The ID for the custom action target. Can contain up to 20 alphanumeric
	// characters.
	//
	// This member is required.
	Id *string

	// The name of the custom action target. Can contain up to 20 characters.
	//
	// This member is required.
	Name *string
	// contains filtered or unexported fields
}

type CreateActionTargetOutput struct {

	// The Amazon Resource Name (ARN) for the custom action target.
	//
	// This member is required.
	ActionTargetArn *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type CreateAutomationRuleInput struct {

	// One or more actions to update finding fields if a finding matches the
	// conditions specified in Criteria .
	//
	// This member is required.
	Actions []types.AutomationRulesAction

	// A set of ASFF finding field attributes and corresponding expected values that
	// Security Hub uses to filter findings. If a rule is enabled and a finding matches
	// the conditions specified in this parameter, Security Hub applies the rule action
	// to the finding.
	//
	// This member is required.
	Criteria *types.AutomationRulesFindingFilters

	// A description of the rule.
	//
	// This member is required.
	Description *string

	// The name of the rule.
	//
	// This member is required.
	RuleName *string

	// An integer ranging from 1 to 1000 that represents the order in which the rule
	// action is applied to findings. Security Hub applies rules with lower values for
	// this parameter first.
	//
	// This member is required.
	RuleOrder *int32

	// Specifies whether a rule is the last to be applied with respect to a finding
	// that matches the rule criteria. This is useful when a finding matches the
	// criteria for multiple rules, and each rule has different actions. If a rule is
	// terminal, Security Hub applies the rule action to a finding that matches the
	// rule criteria and doesn't evaluate other rules for the finding. By default, a
	// rule isn't terminal.
	IsTerminal *bool

	// Whether the rule is active after it is created. If this parameter is equal to
	// ENABLED , Security Hub starts applying the rule to findings and finding updates
	// after the rule is created. To change the value of this parameter after creating
	// a rule, use BatchUpdateAutomationRules (https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_BatchUpdateAutomationRules.html)
	// .
	RuleStatus types.RuleStatus

	// User-defined tags associated with an automation rule.
	Tags map[string]string
	// contains filtered or unexported fields
}

type CreateAutomationRuleOutput struct {

	// The Amazon Resource Name (ARN) of the automation rule that you created.
	RuleArn *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type CreateConfigurationPolicyInput struct {

	// An object that defines how Security Hub is configured. It includes whether
	// Security Hub is enabled or disabled, a list of enabled security standards, a
	// list of enabled or disabled security controls, and a list of custom parameter
	// values for specified controls. If you provide a list of security controls that
	// are enabled in the configuration policy, Security Hub disables all other
	// controls (including newly released controls). If you provide a list of security
	// controls that are disabled in the configuration policy, Security Hub enables all
	// other controls (including newly released controls).
	//
	// This member is required.
	ConfigurationPolicy types.Policy

	// The name of the configuration policy. Alphanumeric characters and the following
	// ASCII characters are permitted: -, ., !, *, / .
	//
	// This member is required.
	Name *string

	// The description of the configuration policy.
	Description *string

	// User-defined tags associated with a configuration policy. For more information,
	// see Tagging Security Hub resources (https://docs.aws.amazon.com/securityhub/latest/userguide/tagging-resources.html)
	// in the Security Hub user guide.
	Tags map[string]string
	// contains filtered or unexported fields
}

type CreateConfigurationPolicyOutput struct {

	// The Amazon Resource Name (ARN) of the configuration policy.
	Arn *string

	// An object that defines how Security Hub is configured. It includes whether
	// Security Hub is enabled or disabled, a list of enabled security standards, a
	// list of enabled or disabled security controls, and a list of custom parameter
	// values for specified controls. If the request included a list of security
	// controls that are enabled in the configuration policy, Security Hub disables all
	// other controls (including newly released controls). If the request included a
	// list of security controls that are disabled in the configuration policy,
	// Security Hub enables all other controls (including newly released controls).
	ConfigurationPolicy types.Policy

	// The date and time, in UTC and ISO 8601 format, that the configuration policy
	// was created.
	CreatedAt *time.Time

	// The description of the configuration policy.
	Description *string

	// The universally unique identifier (UUID) of the configuration policy.
	Id *string

	// The name of the configuration policy.
	Name *string

	// The date and time, in UTC and ISO 8601 format, that the configuration policy
	// was last updated.
	UpdatedAt *time.Time

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type CreateFindingAggregatorInput struct {

	// Indicates whether to aggregate findings from all of the available Regions in
	// the current partition. Also determines whether to automatically aggregate
	// findings from new Regions as Security Hub supports them and you opt into them.
	// The selected option also determines how to use the Regions provided in the
	// Regions list. The options are as follows:
	//   - ALL_REGIONS - Indicates to aggregate findings from all of the Regions where
	//   Security Hub is enabled. When you choose this option, Security Hub also
	//   automatically aggregates findings from new Regions as Security Hub supports them
	//   and you opt into them.
	//   - ALL_REGIONS_EXCEPT_SPECIFIED - Indicates to aggregate findings from all of
	//   the Regions where Security Hub is enabled, except for the Regions listed in the
	//   Regions parameter. When you choose this option, Security Hub also
	//   automatically aggregates findings from new Regions as Security Hub supports them
	//   and you opt into them.
	//   - SPECIFIED_REGIONS - Indicates to aggregate findings only from the Regions
	//   listed in the Regions parameter. Security Hub does not automatically aggregate
	//   findings from new Regions.
	//
	// This member is required.
	RegionLinkingMode *string

	// If RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED , then this is a
	// space-separated list of Regions that do not aggregate findings to the
	// aggregation Region. If RegionLinkingMode is SPECIFIED_REGIONS , then this is a
	// space-separated list of Regions that do aggregate findings to the aggregation
	// Region.
	Regions []string
	// contains filtered or unexported fields
}

type CreateFindingAggregatorOutput struct {

	// The aggregation Region.
	FindingAggregationRegion *string

	// The ARN of the finding aggregator. You use the finding aggregator ARN to
	// retrieve details for, update, and stop finding aggregation.
	FindingAggregatorArn *string

	// Indicates whether to link all Regions, all Regions except for a list of
	// excluded Regions, or a list of included Regions.
	RegionLinkingMode *string

	// The list of excluded Regions or included Regions.
	Regions []string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type CreateInsightInput struct {

	// One or more attributes used to filter the findings included in the insight. The
	// insight only includes findings that match the criteria defined in the filters.
	//
	// This member is required.
	Filters *types.AwsSecurityFindingFilters

	// The attribute used to group the findings for the insight. The grouping
	// attribute identifies the type of item that the insight applies to. For example,
	// if an insight is grouped by resource identifier, then the insight produces a
	// list of resource identifiers.
	//
	// This member is required.
	GroupByAttribute *string

	// The name of the custom insight to create.
	//
	// This member is required.
	Name *string
	// contains filtered or unexported fields
}

type CreateInsightOutput struct {

	// The ARN of the insight created.
	//
	// This member is required.
	InsightArn *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type CreateMembersInput struct {

	// The list of accounts to associate with the Security Hub administrator account.
	// For each account, the list includes the account ID and optionally the email
	// address.
	//
	// This member is required.
	AccountDetails []types.AccountDetails
	// contains filtered or unexported fields
}

type CreateMembersOutput struct {

	// The list of Amazon Web Services accounts that were not processed. For each
	// account, the list includes the account ID and the email address.
	UnprocessedAccounts []types.Result

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DeclineInvitationsInput struct {

	// The list of prospective member account IDs for which to decline an invitation.
	//
	// This member is required.
	AccountIds []string
	// contains filtered or unexported fields
}

type DeclineInvitationsOutput struct {

	// The list of Amazon Web Services accounts that were not processed. For each
	// account, the list includes the account ID and the email address.
	UnprocessedAccounts []types.Result

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DeleteActionTargetInput struct {

	// The Amazon Resource Name (ARN) of the custom action target to delete.
	//
	// This member is required.
	ActionTargetArn *string
	// contains filtered or unexported fields
}

type DeleteActionTargetOutput struct {

	// The ARN of the custom action target that was deleted.
	//
	// This member is required.
	ActionTargetArn *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DeleteConfigurationPolicyInput struct {

	// The Amazon Resource Name (ARN) or universally unique identifier (UUID) of the
	// configuration policy.
	//
	// This member is required.
	Identifier *string
	// contains filtered or unexported fields
}

type DeleteConfigurationPolicyOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DeleteFindingAggregatorInput struct {

	// The ARN of the finding aggregator to delete. To obtain the ARN, use
	// ListFindingAggregators .
	//
	// This member is required.
	FindingAggregatorArn *string
	// contains filtered or unexported fields
}

type DeleteFindingAggregatorOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DeleteInsightInput struct {

	// The ARN of the insight to delete.
	//
	// This member is required.
	InsightArn *string
	// contains filtered or unexported fields
}

type DeleteInsightOutput struct {

	// The ARN of the insight that was deleted.
	//
	// This member is required.
	InsightArn *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DeleteInvitationsInput struct {

	// The list of member account IDs that received the invitations you want to delete.
	//
	// This member is required.
	AccountIds []string
	// contains filtered or unexported fields
}

type DeleteInvitationsOutput struct {

	// The list of Amazon Web Services accounts for which the invitations were not
	// deleted. For each account, the list includes the account ID and the email
	// address.
	UnprocessedAccounts []types.Result

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DeleteMembersInput struct {

	// The list of account IDs for the member accounts to delete.
	//
	// This member is required.
	AccountIds []string
	// contains filtered or unexported fields
}

type DeleteMembersOutput struct {

	// The list of Amazon Web Services accounts that were not deleted. For each
	// account, the list includes the account ID and the email address.
	UnprocessedAccounts []types.Result

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DescribeActionTargetsAPIClient interface {
	DescribeActionTargets(context.Context, *DescribeActionTargetsInput, ...func(*Options)) (*DescribeActionTargetsOutput, error)
}

type DescribeActionTargetsInput struct {

	// A list of custom action target ARNs for the custom action targets to retrieve.
	ActionTargetArns []string

	// The maximum number of results to return.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the
	// DescribeActionTargets operation, set the value of this parameter to NULL . For
	// subsequent calls to the operation, to continue listing data, set the value of
	// this parameter to the value returned from the previous response.
	NextToken *string
	// contains filtered or unexported fields
}

type DescribeActionTargetsOutput struct {

	// A list of ActionTarget objects. Each object includes the ActionTargetArn ,
	// Description , and Name of a custom action target available in Security Hub.
	//
	// This member is required.
	ActionTargets []types.ActionTarget

	// The pagination token to use to request the next page of results.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DescribeActionTargetsPaginator struct {
	// contains filtered or unexported fields
}

type DescribeActionTargetsPaginatorOptions struct {
	// The maximum number of results to return.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type DescribeHubInput struct {

	// The ARN of the Hub resource to retrieve.
	HubArn *string
	// contains filtered or unexported fields
}

type DescribeHubOutput struct {

	// Whether to automatically enable new controls when they are added to standards
	// that are enabled. If set to true , then new controls for enabled standards are
	// enabled automatically. If set to false , then new controls are not enabled.
	AutoEnableControls *bool

	// Specifies whether the calling account has consolidated control findings turned
	// on. If the value for this field is set to SECURITY_CONTROL , Security Hub
	// generates a single finding for a control check even when the check applies to
	// multiple enabled standards. If the value for this field is set to
	// STANDARD_CONTROL , Security Hub generates separate findings for a control check
	// when the check applies to multiple enabled standards. The value for this field
	// in a member account matches the value in the administrator account. For accounts
	// that aren't part of an organization, the default value of this field is
	// SECURITY_CONTROL if you enabled Security Hub on or after February 23, 2023.
	ControlFindingGenerator types.ControlFindingGenerator

	// The ARN of the Hub resource that was retrieved.
	HubArn *string

	// The date and time when Security Hub was enabled in the account.
	SubscribedAt *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DescribeOrganizationConfigurationInput struct {
	// contains filtered or unexported fields
}

type DescribeOrganizationConfigurationOutput struct {

	// Whether to automatically enable Security Hub in new member accounts when they
	// join the organization. If set to true , then Security Hub is automatically
	// enabled in new accounts. If set to false , then Security Hub isn't enabled in
	// new accounts automatically. The default value is false . If the
	// ConfigurationType of your organization is set to CENTRAL , then this field is
	// set to false and can't be changed in the home Region and linked Regions.
	// However, in that case, the delegated administrator can create a configuration
	// policy in which Security Hub is enabled and associate the policy with new
	// organization accounts.
	AutoEnable *bool

	// Whether to automatically enable Security Hub default standards (https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-enable-disable.html)
	// in new member accounts when they join the organization. If equal to DEFAULT ,
	// then Security Hub default standards are automatically enabled for new member
	// accounts. If equal to NONE , then default standards are not automatically
	// enabled for new member accounts. The default value of this parameter is equal to
	// DEFAULT . If the ConfigurationType of your organization is set to CENTRAL , then
	// this field is set to NONE and can't be changed in the home Region and linked
	// Regions. However, in that case, the delegated administrator can create a
	// configuration policy in which specific security standards are enabled and
	// associate the policy with new organization accounts.
	AutoEnableStandards types.AutoEnableStandards

	// Whether the maximum number of allowed member accounts are already associated
	// with the Security Hub administrator account.
	MemberAccountLimitReached *bool

	// Provides information about the way an organization is configured in Security
	// Hub.
	OrganizationConfiguration *types.OrganizationConfiguration

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DescribeProductsAPIClient interface {
	DescribeProducts(context.Context, *DescribeProductsInput, ...func(*Options)) (*DescribeProductsOutput, error)
}

type DescribeProductsInput struct {

	// The maximum number of results to return.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the
	// DescribeProducts operation, set the value of this parameter to NULL . For
	// subsequent calls to the operation, to continue listing data, set the value of
	// this parameter to the value returned from the previous response.
	NextToken *string

	// The ARN of the integration to return.
	ProductArn *string
	// contains filtered or unexported fields
}

type DescribeProductsOutput struct {

	// A list of products, including details for each product.
	//
	// This member is required.
	Products []types.Product

	// The pagination token to use to request the next page of results.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DescribeProductsPaginator struct {
	// contains filtered or unexported fields
}

type DescribeProductsPaginatorOptions struct {
	// The maximum number of results to return.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type DescribeStandardsAPIClient interface {
	DescribeStandards(context.Context, *DescribeStandardsInput, ...func(*Options)) (*DescribeStandardsOutput, error)
}

type DescribeStandardsControlsAPIClient interface {
	DescribeStandardsControls(context.Context, *DescribeStandardsControlsInput, ...func(*Options)) (*DescribeStandardsControlsOutput, error)
}

type DescribeStandardsControlsInput struct {

	// The ARN of a resource that represents your subscription to a supported
	// standard. To get the subscription ARNs of the standards you have enabled, use
	// the GetEnabledStandards operation.
	//
	// This member is required.
	StandardsSubscriptionArn *string

	// The maximum number of security standard controls to return.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the
	// DescribeStandardsControls operation, set the value of this parameter to NULL .
	// For subsequent calls to the operation, to continue listing data, set the value
	// of this parameter to the value returned from the previous response.
	NextToken *string
	// contains filtered or unexported fields
}

type DescribeStandardsControlsOutput struct {

	// A list of security standards controls.
	Controls []types.StandardsControl

	// The pagination token to use to request the next page of results.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DescribeStandardsControlsPaginator struct {
	// contains filtered or unexported fields
}

type DescribeStandardsControlsPaginatorOptions struct {
	// The maximum number of security standard controls to return.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type DescribeStandardsInput struct {

	// The maximum number of standards to return.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the
	// DescribeStandards operation, set the value of this parameter to NULL . For
	// subsequent calls to the operation, to continue listing data, set the value of
	// this parameter to the value returned from the previous response.
	NextToken *string
	// contains filtered or unexported fields
}

type DescribeStandardsOutput struct {

	// The pagination token to use to request the next page of results.
	NextToken *string

	// A list of available standards.
	Standards []types.Standard

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DescribeStandardsPaginator struct {
	// contains filtered or unexported fields
}

type DescribeStandardsPaginatorOptions struct {
	// The maximum number of standards to return.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type DisableImportFindingsForProductInput struct {

	// The ARN of the integrated product to disable the integration for.
	//
	// This member is required.
	ProductSubscriptionArn *string
	// contains filtered or unexported fields
}

type DisableImportFindingsForProductOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DisableOrganizationAdminAccountInput struct {

	// The Amazon Web Services account identifier of the Security Hub administrator
	// account.
	//
	// This member is required.
	AdminAccountId *string
	// contains filtered or unexported fields
}

type DisableOrganizationAdminAccountOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DisableSecurityHubInput struct {
	// contains filtered or unexported fields
}

type DisableSecurityHubOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DisassociateFromAdministratorAccountInput struct {
	// contains filtered or unexported fields
}

type DisassociateFromAdministratorAccountOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DisassociateFromMasterAccountInput struct {
	// contains filtered or unexported fields
}

type DisassociateFromMasterAccountOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type DisassociateMembersInput struct {

	// The account IDs of the member accounts to disassociate from the administrator
	// account.
	//
	// This member is required.
	AccountIds []string
	// contains filtered or unexported fields
}

type DisassociateMembersOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type EnableImportFindingsForProductInput struct {

	// The ARN of the product to enable the integration for.
	//
	// This member is required.
	ProductArn *string
	// contains filtered or unexported fields
}

type EnableImportFindingsForProductOutput struct {

	// The ARN of your subscription to the product to enable integrations for.
	ProductSubscriptionArn *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type EnableOrganizationAdminAccountInput struct {

	// The Amazon Web Services account identifier of the account to designate as the
	// Security Hub administrator account.
	//
	// This member is required.
	AdminAccountId *string
	// contains filtered or unexported fields
}

type EnableOrganizationAdminAccountOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type EnableSecurityHubInput struct {

	// This field, used when enabling Security Hub, specifies whether the calling
	// account has consolidated control findings turned on. If the value for this field
	// is set to SECURITY_CONTROL , Security Hub generates a single finding for a
	// control check even when the check applies to multiple enabled standards. If the
	// value for this field is set to STANDARD_CONTROL , Security Hub generates
	// separate findings for a control check when the check applies to multiple enabled
	// standards. The value for this field in a member account matches the value in the
	// administrator account. For accounts that aren't part of an organization, the
	// default value of this field is SECURITY_CONTROL if you enabled Security Hub on
	// or after February 23, 2023.
	ControlFindingGenerator types.ControlFindingGenerator

	// Whether to enable the security standards that Security Hub has designated as
	// automatically enabled. If you do not provide a value for EnableDefaultStandards
	// , it is set to true . To not enable the automatically enabled standards, set
	// EnableDefaultStandards to false .
	EnableDefaultStandards *bool

	// The tags to add to the hub resource when you enable Security Hub.
	Tags map[string]string
	// contains filtered or unexported fields
}

type EnableSecurityHubOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type EndpointParameters struct {
	// The AWS region used to dispatch the request.
	//
	// Parameter is
	// required.
	//
	// AWS::Region
	Region *string

	// When true, use the dual-stack endpoint. If the configured endpoint does not
	// support dual-stack, dispatching the request MAY return an error.
	//
	// Defaults to
	// false if no value is provided.
	//
	// AWS::UseDualStack
	UseDualStack *bool

	// When true, send this request to the FIPS-compliant regional endpoint. If the
	// configured endpoint does not have a FIPS compliant endpoint, dispatching the
	// request will return an error.
	//
	// Defaults to false if no value is
	// provided.
	//
	// AWS::UseFIPS
	UseFIPS *bool

	// Override the endpoint used to send this request
	//
	// Parameter is
	// required.
	//
	// SDK::Endpoint
	Endpoint *string
}

type EndpointResolver interface {
	ResolveEndpoint(region string, options EndpointResolverOptions) (aws.Endpoint, error)
}

type EndpointResolverFunc func(region string, options EndpointResolverOptions) (aws.Endpoint, error)

type EndpointResolverOptions = internalendpoints.Options

type EndpointResolverV2 interface {
	// ResolveEndpoint attempts to resolve the endpoint with the provided options,
	// returning the endpoint if found. Otherwise an error is returned.
	ResolveEndpoint(ctx context.Context, params EndpointParameters) (
		smithyendpoints.Endpoint, error,
	)
}

type GetAdministratorAccountInput struct {
	// contains filtered or unexported fields
}

type GetAdministratorAccountOutput struct {

	// Details about an invitation.
	Administrator *types.Invitation

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetConfigurationPolicyAssociationInput struct {

	// The target account ID, organizational unit ID, or the root ID to retrieve the
	// association for.
	//
	// This member is required.
	Target types.Target
	// contains filtered or unexported fields
}

type GetConfigurationPolicyAssociationOutput struct {

	// The current status of the association between the specified target and the
	// configuration.
	AssociationStatus types.ConfigurationPolicyAssociationStatus

	// The explanation for a FAILED value for AssociationStatus .
	AssociationStatusMessage *string

	// Indicates whether the association between the specified target and the
	// configuration was directly applied by the Security Hub delegated administrator
	// or inherited from a parent.
	AssociationType types.AssociationType

	// The universally unique identifier (UUID) of a configuration policy. For
	// self-managed behavior, the value is SELF_MANAGED_SECURITY_HUB .
	ConfigurationPolicyId *string

	// The target account ID, organizational unit ID, or the root ID for which the
	// association is retrieved.
	TargetId *string

	// Specifies whether the target is an Amazon Web Services account, organizational
	// unit, or the organization root.
	TargetType types.TargetType

	// The date and time, in UTC and ISO 8601 format, that the configuration policy
	// association was last updated.
	UpdatedAt *time.Time

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetConfigurationPolicyInput struct {

	// The Amazon Resource Name (ARN) or universally unique identifier (UUID) of the
	// configuration policy.
	//
	// This member is required.
	Identifier *string
	// contains filtered or unexported fields
}

type GetConfigurationPolicyOutput struct {

	// The ARN of the configuration policy.
	Arn *string

	// An object that defines how Security Hub is configured. It includes whether
	// Security Hub is enabled or disabled, a list of enabled security standards, a
	// list of enabled or disabled security controls, and a list of custom parameter
	// values for specified controls. If the policy includes a list of security
	// controls that are enabled, Security Hub disables all other controls (including
	// newly released controls). If the policy includes a list of security controls
	// that are disabled, Security Hub enables all other controls (including newly
	// released controls).
	ConfigurationPolicy types.Policy

	// The date and time, in UTC and ISO 8601 format, that the configuration policy
	// was created.
	CreatedAt *time.Time

	// The description of the configuration policy.
	Description *string

	// The UUID of the configuration policy.
	Id *string

	// The name of the configuration policy.
	Name *string

	// The date and time, in UTC and ISO 8601 format, that the configuration policy
	// was last updated.
	UpdatedAt *time.Time

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetEnabledStandardsAPIClient interface {
	GetEnabledStandards(context.Context, *GetEnabledStandardsInput, ...func(*Options)) (*GetEnabledStandardsOutput, error)
}

type GetEnabledStandardsInput struct {

	// The maximum number of results to return in the response.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the
	// GetEnabledStandards operation, set the value of this parameter to NULL . For
	// subsequent calls to the operation, to continue listing data, set the value of
	// this parameter to the value returned from the previous response.
	NextToken *string

	// The list of the standards subscription ARNs for the standards to retrieve.
	StandardsSubscriptionArns []string
	// contains filtered or unexported fields
}

type GetEnabledStandardsOutput struct {

	// The pagination token to use to request the next page of results.
	NextToken *string

	// The list of StandardsSubscriptions objects that include information about the
	// enabled standards.
	StandardsSubscriptions []types.StandardsSubscription

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetEnabledStandardsPaginator struct {
	// contains filtered or unexported fields
}

type GetEnabledStandardsPaginatorOptions struct {
	// The maximum number of results to return in the response.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type GetFindingAggregatorInput struct {

	// The ARN of the finding aggregator to return details for. To obtain the ARN, use
	// ListFindingAggregators .
	//
	// This member is required.
	FindingAggregatorArn *string
	// contains filtered or unexported fields
}

type GetFindingAggregatorOutput struct {

	// The aggregation Region.
	FindingAggregationRegion *string

	// The ARN of the finding aggregator.
	FindingAggregatorArn *string

	// Indicates whether to link all Regions, all Regions except for a list of
	// excluded Regions, or a list of included Regions.
	RegionLinkingMode *string

	// The list of excluded Regions or included Regions.
	Regions []string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetFindingHistoryAPIClient interface {
	GetFindingHistory(context.Context, *GetFindingHistoryInput, ...func(*Options)) (*GetFindingHistoryOutput, error)
}

type GetFindingHistoryInput struct {

	// Identifies which finding to get the finding history for.
	//
	// This member is required.
	FindingIdentifier *types.AwsSecurityFindingIdentifier

	// An ISO 8601-formatted timestamp that indicates the end time of the requested
	// finding history. If you provide values for both StartTime and EndTime , Security
	// Hub returns finding history for the specified time period. If you provide a
	// value for StartTime but not for EndTime , Security Hub returns finding history
	// from the StartTime to the time at which the API is called. If you provide a
	// value for EndTime but not for StartTime , Security Hub returns finding history
	// from the CreatedAt (https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AwsSecurityFindingFilters.html#securityhub-Type-AwsSecurityFindingFilters-CreatedAt)
	// timestamp of the finding to the EndTime . If you provide neither StartTime nor
	// EndTime , Security Hub returns finding history from the CreatedAt timestamp of
	// the finding to the time at which the API is called. In all of these scenarios,
	// the response is limited to 100 results, and the maximum time period is limited
	// to 90 days. This field accepts only the specified formats. Timestamps can end
	// with Z or ("+" / "-") time-hour [":" time-minute] . The time-secfrac after
	// seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00.
	// Here are valid timestamp formats with examples:
	//   - YYYY-MM-DDTHH:MM:SSZ (for example, 2019-01-31T23:00:00Z )
	//   - YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ (for example, 2019-01-31T23:00:00.123456789Z
	//   )
	//   - YYYY-MM-DDTHH:MM:SS+HH:MM (for example, 2024-01-04T15:25:10+17:59 )
	//   - YYYY-MM-DDTHH:MM:SS-HHMM (for example, 2024-01-04T15:25:10-1759 )
	//   - YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM (for example,
	//   2024-01-04T15:25:10.123456789+17:59 )
	EndTime *time.Time

	// The maximum number of results to be returned. If you don’t provide it, Security
	// Hub returns up to 100 results of finding history.
	MaxResults *int32

	// A token for pagination purposes. Provide NULL as the initial value. In
	// subsequent requests, provide the token included in the response to get up to an
	// additional 100 results of finding history. If you don’t provide NextToken ,
	// Security Hub returns up to 100 results of finding history for each request.
	NextToken *string

	// A timestamp that indicates the start time of the requested finding history. If
	// you provide values for both StartTime and EndTime , Security Hub returns finding
	// history for the specified time period. If you provide a value for StartTime but
	// not for EndTime , Security Hub returns finding history from the StartTime to
	// the time at which the API is called. If you provide a value for EndTime but not
	// for StartTime , Security Hub returns finding history from the CreatedAt (https://docs.aws.amazon.com/securityhub/1.0/APIReference/API_AwsSecurityFindingFilters.html#securityhub-Type-AwsSecurityFindingFilters-CreatedAt)
	// timestamp of the finding to the EndTime . If you provide neither StartTime nor
	// EndTime , Security Hub returns finding history from the CreatedAt timestamp of
	// the finding to the time at which the API is called. In all of these scenarios,
	// the response is limited to 100 results, and the maximum time period is limited
	// to 90 days. This field accepts only the specified formats. Timestamps can end
	// with Z or ("+" / "-") time-hour [":" time-minute] . The time-secfrac after
	// seconds is limited to a maximum of 9 digits. The offset is bounded by +/-18:00.
	// Here are valid timestamp formats with examples:
	//   - YYYY-MM-DDTHH:MM:SSZ (for example, 2019-01-31T23:00:00Z )
	//   - YYYY-MM-DDTHH:MM:SS.mmmmmmmmmZ (for example, 2019-01-31T23:00:00.123456789Z
	//   )
	//   - YYYY-MM-DDTHH:MM:SS+HH:MM (for example, 2024-01-04T15:25:10+17:59 )
	//   - YYYY-MM-DDTHH:MM:SS-HHMM (for example, 2024-01-04T15:25:10-1759 )
	//   - YYYY-MM-DDTHH:MM:SS.mmmmmmmmm+HH:MM (for example,
	//   2024-01-04T15:25:10.123456789+17:59 )
	StartTime *time.Time
	// contains filtered or unexported fields
}

type GetFindingHistoryOutput struct {

	// A token for pagination purposes. Provide this token in the subsequent request
	// to GetFindingsHistory to get up to an additional 100 results of history for the
	// same finding that you specified in your initial request.
	NextToken *string

	// A list of events that altered the specified finding during the specified time
	// period.
	Records []types.FindingHistoryRecord

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetFindingHistoryPaginator struct {
	// contains filtered or unexported fields
}

type GetFindingHistoryPaginatorOptions struct {
	// The maximum number of results to be returned. If you don’t provide it, Security
	// Hub returns up to 100 results of finding history.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type GetFindingsAPIClient interface {
	GetFindings(context.Context, *GetFindingsInput, ...func(*Options)) (*GetFindingsOutput, error)
}

type GetFindingsInput struct {

	// The finding attributes used to define a condition to filter the returned
	// findings. You can filter by up to 10 finding attributes. For each attribute, you
	// can provide up to 20 filter values. Note that in the available filter fields,
	// WorkflowState is deprecated. To search for a finding based on its workflow
	// status, use WorkflowStatus .
	Filters *types.AwsSecurityFindingFilters

	// The maximum number of findings to return.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the GetFindings
	// operation, set the value of this parameter to NULL . For subsequent calls to the
	// operation, to continue listing data, set the value of this parameter to the
	// value returned from the previous response.
	NextToken *string

	// The finding attributes used to sort the list of returned findings.
	SortCriteria []types.SortCriterion
	// contains filtered or unexported fields
}

type GetFindingsOutput struct {

	// The findings that matched the filters specified in the request.
	//
	// This member is required.
	Findings []types.AwsSecurityFinding

	// The pagination token to use to request the next page of results.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetFindingsPaginator struct {
	// contains filtered or unexported fields
}

type GetFindingsPaginatorOptions struct {
	// The maximum number of findings to return.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type GetInsightResultsInput struct {

	// The ARN of the insight for which to return results.
	//
	// This member is required.
	InsightArn *string
	// contains filtered or unexported fields
}

type GetInsightResultsOutput struct {

	// The insight results returned by the operation.
	//
	// This member is required.
	InsightResults *types.InsightResults

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetInsightsAPIClient interface {
	GetInsights(context.Context, *GetInsightsInput, ...func(*Options)) (*GetInsightsOutput, error)
}

type GetInsightsInput struct {

	// The ARNs of the insights to describe. If you do not provide any insight ARNs,
	// then GetInsights returns all of your custom insights. It does not return any
	// managed insights.
	InsightArns []string

	// The maximum number of items to return in the response.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the GetInsights
	// operation, set the value of this parameter to NULL . For subsequent calls to the
	// operation, to continue listing data, set the value of this parameter to the
	// value returned from the previous response.
	NextToken *string
	// contains filtered or unexported fields
}

type GetInsightsOutput struct {

	// The insights returned by the operation.
	//
	// This member is required.
	Insights []types.Insight

	// The pagination token to use to request the next page of results.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetInsightsPaginator struct {
	// contains filtered or unexported fields
}

type GetInsightsPaginatorOptions struct {
	// The maximum number of items to return in the response.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type GetInvitationsCountInput struct {
	// contains filtered or unexported fields
}

type GetInvitationsCountOutput struct {

	// The number of all membership invitations sent to this Security Hub member
	// account, not including the currently accepted invitation.
	InvitationsCount *int32

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetMasterAccountInput struct {
	// contains filtered or unexported fields
}

type GetMasterAccountOutput struct {

	// A list of details about the Security Hub administrator account for the current
	// member account.
	Master *types.Invitation

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetMembersInput struct {

	// The list of account IDs for the Security Hub member accounts to return the
	// details for.
	//
	// This member is required.
	AccountIds []string
	// contains filtered or unexported fields
}

type GetMembersOutput struct {

	// The list of details about the Security Hub member accounts.
	Members []types.Member

	// The list of Amazon Web Services accounts that could not be processed. For each
	// account, the list includes the account ID and the email address.
	UnprocessedAccounts []types.Result

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type GetSecurityControlDefinitionInput struct {

	// The ID of the security control to retrieve the definition for. This field
	// doesn’t accept an Amazon Resource Name (ARN).
	//
	// This member is required.
	SecurityControlId *string
	// contains filtered or unexported fields
}

type GetSecurityControlDefinitionOutput struct {

	// Provides metadata for a security control, including its unique
	// standard-agnostic identifier, title, description, severity, availability in
	// Amazon Web Services Regions, and a link to remediation steps.
	//
	// This member is required.
	SecurityControlDefinition *types.SecurityControlDefinition

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type HTTPClient interface {
	Do(*http.Request) (*http.Response, error)
}

type HTTPSignerV4 interface {
	SignHTTP(ctx context.Context, credentials aws.Credentials, r *http.Request, payloadHash string, service string, region string, signingTime time.Time, optFns ...func(*v4.SignerOptions)) error
}

type InviteMembersInput struct {

	// The list of account IDs of the Amazon Web Services accounts to invite to
	// Security Hub as members.
	//
	// This member is required.
	AccountIds []string
	// contains filtered or unexported fields
}

type InviteMembersOutput struct {

	// The list of Amazon Web Services accounts that could not be processed. For each
	// account, the list includes the account ID and the email address.
	UnprocessedAccounts []types.Result

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListAutomationRulesInput struct {

	// The maximum number of rules to return in the response. This currently ranges
	// from 1 to 100.
	MaxResults *int32

	// A token to specify where to start paginating the response. This is the NextToken
	// from a previously truncated response. On your first call to the
	// ListAutomationRules API, set the value of this parameter to NULL .
	NextToken *string
	// contains filtered or unexported fields
}

type ListAutomationRulesOutput struct {

	// Metadata for rules in the calling account. The response includes rules with a
	// RuleStatus of ENABLED and DISABLED .
	AutomationRulesMetadata []types.AutomationRulesMetadata

	// A pagination token for the response.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListConfigurationPoliciesAPIClient interface {
	ListConfigurationPolicies(context.Context, *ListConfigurationPoliciesInput, ...func(*Options)) (*ListConfigurationPoliciesOutput, error)
}

type ListConfigurationPoliciesInput struct {

	// The maximum number of results that's returned by ListConfigurationPolicies in
	// each page of the response. When this parameter is used,
	// ListConfigurationPolicies returns the specified number of results in a single
	// page and a NextToken response element. You can see the remaining results of the
	// initial request by sending another ListConfigurationPolicies request with the
	// returned NextToken value. A valid range for MaxResults is between 1 and 100.
	MaxResults *int32

	// The NextToken value that's returned from a previous paginated
	// ListConfigurationPolicies request where MaxResults was used but the results
	// exceeded the value of that parameter. Pagination continues from the MaxResults
	// was used but the results exceeded the value of that parameter. Pagination
	// continues from the end of the previous response that returned the NextToken
	// value. This value is null when there are no more results to return.
	NextToken *string
	// contains filtered or unexported fields
}

type ListConfigurationPoliciesOutput struct {

	// Provides metadata for each of your configuration policies.
	ConfigurationPolicySummaries []types.ConfigurationPolicySummary

	// The NextToken value to include in the next ListConfigurationPolicies request.
	// When the results of a ListConfigurationPolicies request exceed MaxResults , this
	// value can be used to retrieve the next page of results. This value is null when
	// there are no more results to return.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListConfigurationPoliciesPaginator struct {
	// contains filtered or unexported fields
}

type ListConfigurationPoliciesPaginatorOptions struct {
	// The maximum number of results that's returned by ListConfigurationPolicies in
	// each page of the response. When this parameter is used,
	// ListConfigurationPolicies returns the specified number of results in a single
	// page and a NextToken response element. You can see the remaining results of the
	// initial request by sending another ListConfigurationPolicies request with the
	// returned NextToken value. A valid range for MaxResults is between 1 and 100.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListConfigurationPolicyAssociationsAPIClient interface {
	ListConfigurationPolicyAssociations(context.Context, *ListConfigurationPolicyAssociationsInput, ...func(*Options)) (*ListConfigurationPolicyAssociationsOutput, error)
}

type ListConfigurationPolicyAssociationsInput struct {

	// Options for filtering the ListConfigurationPolicyAssociations response. You can
	// filter by the Amazon Resource Name (ARN) or universally unique identifier (UUID)
	// of a configuration, AssociationType , or AssociationStatus .
	Filters *types.AssociationFilters

	// The maximum number of results that's returned by ListConfigurationPolicies in
	// each page of the response. When this parameter is used,
	// ListConfigurationPolicyAssociations returns the specified number of results in a
	// single page and a NextToken response element. You can see the remaining results
	// of the initial request by sending another ListConfigurationPolicyAssociations
	// request with the returned NextToken value. A valid range for MaxResults is
	// between 1 and 100.
	MaxResults *int32

	// The NextToken value that's returned from a previous paginated
	// ListConfigurationPolicyAssociations request where MaxResults was used but the
	// results exceeded the value of that parameter. Pagination continues from the end
	// of the previous response that returned the NextToken value. This value is null
	// when there are no more results to return.
	NextToken *string
	// contains filtered or unexported fields
}

type ListConfigurationPolicyAssociationsOutput struct {

	// An object that contains the details of each configuration policy association
	// that’s returned in a ListConfigurationPolicyAssociations request.
	ConfigurationPolicyAssociationSummaries []types.ConfigurationPolicyAssociationSummary

	// The NextToken value to include in the next ListConfigurationPolicyAssociations
	// request. When the results of a ListConfigurationPolicyAssociations request
	// exceed MaxResults , this value can be used to retrieve the next page of results.
	// This value is null when there are no more results to return.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListConfigurationPolicyAssociationsPaginator struct {
	// contains filtered or unexported fields
}

type ListConfigurationPolicyAssociationsPaginatorOptions struct {
	// The maximum number of results that's returned by ListConfigurationPolicies in
	// each page of the response. When this parameter is used,
	// ListConfigurationPolicyAssociations returns the specified number of results in a
	// single page and a NextToken response element. You can see the remaining results
	// of the initial request by sending another ListConfigurationPolicyAssociations
	// request with the returned NextToken value. A valid range for MaxResults is
	// between 1 and 100.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListEnabledProductsForImportAPIClient interface {
	ListEnabledProductsForImport(context.Context, *ListEnabledProductsForImportInput, ...func(*Options)) (*ListEnabledProductsForImportOutput, error)
}

type ListEnabledProductsForImportInput struct {

	// The maximum number of items to return in the response.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the
	// ListEnabledProductsForImport operation, set the value of this parameter to NULL
	// . For subsequent calls to the operation, to continue listing data, set the value
	// of this parameter to the value returned from the previous response.
	NextToken *string
	// contains filtered or unexported fields
}

type ListEnabledProductsForImportOutput struct {

	// The pagination token to use to request the next page of results.
	NextToken *string

	// The list of ARNs for the resources that represent your subscriptions to
	// products.
	ProductSubscriptions []string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListEnabledProductsForImportPaginator struct {
	// contains filtered or unexported fields
}

type ListEnabledProductsForImportPaginatorOptions struct {
	// The maximum number of items to return in the response.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListFindingAggregatorsAPIClient interface {
	ListFindingAggregators(context.Context, *ListFindingAggregatorsInput, ...func(*Options)) (*ListFindingAggregatorsOutput, error)
}

type ListFindingAggregatorsInput struct {

	// The maximum number of results to return. This operation currently only returns
	// a single result.
	MaxResults *int32

	// The token returned with the previous set of results. Identifies the next set of
	// results to return.
	NextToken *string
	// contains filtered or unexported fields
}

type ListFindingAggregatorsOutput struct {

	// The list of finding aggregators. This operation currently only returns a single
	// result.
	FindingAggregators []types.FindingAggregator

	// If there are more results, this is the token to provide in the next call to
	// ListFindingAggregators . This operation currently only returns a single result.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListFindingAggregatorsPaginator struct {
	// contains filtered or unexported fields
}

type ListFindingAggregatorsPaginatorOptions struct {
	// The maximum number of results to return. This operation currently only returns
	// a single result.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListInvitationsAPIClient interface {
	ListInvitations(context.Context, *ListInvitationsInput, ...func(*Options)) (*ListInvitationsOutput, error)
}

type ListInvitationsInput struct {

	// The maximum number of items to return in the response.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the
	// ListInvitations operation, set the value of this parameter to NULL . For
	// subsequent calls to the operation, to continue listing data, set the value of
	// this parameter to the value returned from the previous response.
	NextToken *string
	// contains filtered or unexported fields
}

type ListInvitationsOutput struct {

	// The details of the invitations returned by the operation.
	Invitations []types.Invitation

	// The pagination token to use to request the next page of results.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListInvitationsPaginator struct {
	// contains filtered or unexported fields
}

type ListInvitationsPaginatorOptions struct {
	// The maximum number of items to return in the response.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListMembersAPIClient interface {
	ListMembers(context.Context, *ListMembersInput, ...func(*Options)) (*ListMembersOutput, error)
}

type ListMembersInput struct {

	// The maximum number of items to return in the response.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the ListMembers
	// operation, set the value of this parameter to NULL . For subsequent calls to the
	// operation, to continue listing data, set the value of this parameter to the
	// value returned from the previous response.
	NextToken *string

	// Specifies which member accounts to include in the response based on their
	// relationship status with the administrator account. The default value is TRUE .
	// If OnlyAssociated is set to TRUE , the response includes member accounts whose
	// relationship status with the administrator account is set to ENABLED . If
	// OnlyAssociated is set to FALSE , the response includes all existing member
	// accounts.
	OnlyAssociated *bool
	// contains filtered or unexported fields
}

type ListMembersOutput struct {

	// Member details returned by the operation.
	Members []types.Member

	// The pagination token to use to request the next page of results.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListMembersPaginator struct {
	// contains filtered or unexported fields
}

type ListMembersPaginatorOptions struct {
	// The maximum number of items to return in the response.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListOrganizationAdminAccountsAPIClient interface {
	ListOrganizationAdminAccounts(context.Context, *ListOrganizationAdminAccountsInput, ...func(*Options)) (*ListOrganizationAdminAccountsOutput, error)
}

type ListOrganizationAdminAccountsInput struct {

	// The maximum number of items to return in the response.
	MaxResults *int32

	// The token that is required for pagination. On your first call to the
	// ListOrganizationAdminAccounts operation, set the value of this parameter to NULL
	// . For subsequent calls to the operation, to continue listing data, set the value
	// of this parameter to the value returned from the previous response.
	NextToken *string
	// contains filtered or unexported fields
}

type ListOrganizationAdminAccountsOutput struct {

	// The list of Security Hub administrator accounts.
	AdminAccounts []types.AdminAccount

	// The pagination token to use to request the next page of results.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListOrganizationAdminAccountsPaginator struct {
	// contains filtered or unexported fields
}

type ListOrganizationAdminAccountsPaginatorOptions struct {
	// The maximum number of items to return in the response.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListSecurityControlDefinitionsAPIClient interface {
	ListSecurityControlDefinitions(context.Context, *ListSecurityControlDefinitionsInput, ...func(*Options)) (*ListSecurityControlDefinitionsOutput, error)
}

type ListSecurityControlDefinitionsInput struct {

	// An optional parameter that limits the total results of the API response to the
	// specified number. If this parameter isn't provided in the request, the results
	// include the first 25 security controls that apply to the specified standard. The
	// results also include a NextToken parameter that you can use in a subsequent API
	// call to get the next 25 controls. This repeats until all controls for the
	// standard are returned.
	MaxResults *int32

	// Optional pagination parameter.
	NextToken *string

	// The Amazon Resource Name (ARN) of the standard that you want to view controls
	// for.
	StandardsArn *string
	// contains filtered or unexported fields
}

type ListSecurityControlDefinitionsOutput struct {

	// An array of controls that apply to the specified standard.
	//
	// This member is required.
	SecurityControlDefinitions []types.SecurityControlDefinition

	// A pagination parameter that's included in the response only if it was included
	// in the request.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListSecurityControlDefinitionsPaginator struct {
	// contains filtered or unexported fields
}

type ListSecurityControlDefinitionsPaginatorOptions struct {
	// An optional parameter that limits the total results of the API response to the
	// specified number. If this parameter isn't provided in the request, the results
	// include the first 25 security controls that apply to the specified standard. The
	// results also include a NextToken parameter that you can use in a subsequent API
	// call to get the next 25 controls. This repeats until all controls for the
	// standard are returned.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListStandardsControlAssociationsAPIClient interface {
	ListStandardsControlAssociations(context.Context, *ListStandardsControlAssociationsInput, ...func(*Options)) (*ListStandardsControlAssociationsOutput, error)
}

type ListStandardsControlAssociationsInput struct {

	// The identifier of the control (identified with SecurityControlId ,
	// SecurityControlArn , or a mix of both parameters) that you want to determine the
	// enablement status of in each enabled standard.
	//
	// This member is required.
	SecurityControlId *string

	// An optional parameter that limits the total results of the API response to the
	// specified number. If this parameter isn't provided in the request, the results
	// include the first 25 standard and control associations. The results also include
	// a NextToken parameter that you can use in a subsequent API call to get the next
	// 25 associations. This repeats until all associations for the specified control
	// are returned. The number of results is limited by the number of supported
	// Security Hub standards that you've enabled in the calling account.
	MaxResults *int32

	// Optional pagination parameter.
	NextToken *string
	// contains filtered or unexported fields
}

type ListStandardsControlAssociationsOutput struct {

	// An array that provides the enablement status and other details for each
	// security control that applies to each enabled standard.
	//
	// This member is required.
	StandardsControlAssociationSummaries []types.StandardsControlAssociationSummary

	// A pagination parameter that's included in the response only if it was included
	// in the request.
	NextToken *string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type ListStandardsControlAssociationsPaginator struct {
	// contains filtered or unexported fields
}

type ListStandardsControlAssociationsPaginatorOptions struct {
	// An optional parameter that limits the total results of the API response to the
	// specified number. If this parameter isn't provided in the request, the results
	// include the first 25 standard and control associations. The results also include
	// a NextToken parameter that you can use in a subsequent API call to get the next
	// 25 associations. This repeats until all associations for the specified control
	// are returned. The number of results is limited by the number of supported
	// Security Hub standards that you've enabled in the calling account.
	Limit int32

	// Set to true if pagination should stop if the service returns a pagination token
	// that matches the most recent token provided to the service.
	StopOnDuplicateToken bool
}

type ListTagsForResourceInput struct {

	// The ARN of the resource to retrieve tags for.
	//
	// This member is required.
	ResourceArn *string
	// contains filtered or unexported fields
}

type ListTagsForResourceOutput struct {

	// The tags associated with a resource.
	Tags map[string]string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type Options struct {
	// Set of options to modify how an operation is invoked. These apply to all
	// operations invoked for this client. Use functional options on operation call to
	// modify this list for per operation behavior.
	APIOptions []func(*middleware.Stack) error

	// The optional application specific identifier appended to the User-Agent header.
	AppID string

	// This endpoint will be given as input to an EndpointResolverV2. It is used for
	// providing a custom base endpoint that is subject to modifications by the
	// processing EndpointResolverV2.
	BaseEndpoint *string

	// Configures the events that will be sent to the configured logger.
	ClientLogMode aws.ClientLogMode

	// The credentials object to use when signing requests.
	Credentials aws.CredentialsProvider

	// The configuration DefaultsMode that the SDK should use when constructing the
	// clients initial default settings.
	DefaultsMode aws.DefaultsMode

	// The endpoint options to be used when attempting to resolve an endpoint.
	EndpointOptions EndpointResolverOptions

	// The service endpoint resolver.
	//
	// Deprecated: Deprecated: EndpointResolver and WithEndpointResolver. Providing a
	// value for this field will likely prevent you from using any endpoint-related
	// service features released after the introduction of EndpointResolverV2 and
	// BaseEndpoint. To migrate an EndpointResolver implementation that uses a custom
	// endpoint, set the client option BaseEndpoint instead.
	EndpointResolver EndpointResolver

	// Resolves the endpoint used for a particular service operation. This should be
	// used over the deprecated EndpointResolver.
	EndpointResolverV2 EndpointResolverV2

	// Signature Version 4 (SigV4) Signer
	HTTPSignerV4 HTTPSignerV4

	// The logger writer interface to write logging messages to.
	Logger logging.Logger

	// The region to send requests to. (Required)
	Region string

	// RetryMaxAttempts specifies the maximum number attempts an API client will call
	// an operation that fails with a retryable error. A value of 0 is ignored, and
	// will not be used to configure the API client created default retryer, or modify
	// per operation call's retry max attempts. If specified in an operation call's
	// functional options with a value that is different than the constructed client's
	// Options, the Client's Retryer will be wrapped to use the operation's specific
	// RetryMaxAttempts value.
	RetryMaxAttempts int

	// RetryMode specifies the retry mode the API client will be created with, if
	// Retryer option is not also specified. When creating a new API Clients this
	// member will only be used if the Retryer Options member is nil. This value will
	// be ignored if Retryer is not nil. Currently does not support per operation call
	// overrides, may in the future.
	RetryMode aws.RetryMode

	// Retryer guides how HTTP requests should be retried in case of recoverable
	// failures. When nil the API client will use a default retryer. The kind of
	// default retry created by the API client can be changed with the RetryMode
	// option.
	Retryer aws.Retryer

	// The RuntimeEnvironment configuration, only populated if the DefaultsMode is set
	// to DefaultsModeAuto and is initialized using config.LoadDefaultConfig . You
	// should not populate this structure programmatically, or rely on the values here
	// within your applications.
	RuntimeEnvironment aws.RuntimeEnvironment

	// The HTTP client to invoke API calls with. Defaults to client's default HTTP
	// implementation if nil.
	HTTPClient HTTPClient

	// The auth scheme resolver which determines how to authenticate for each
	// operation.
	AuthSchemeResolver AuthSchemeResolver

	// The list of auth schemes supported by the client.
	AuthSchemes []smithyhttp.AuthScheme
	// contains filtered or unexported fields
}

type ResolveEndpoint struct {
	Resolver EndpointResolver
	Options  EndpointResolverOptions
}

type StartConfigurationPolicyAssociationInput struct {

	// The Amazon Resource Name (ARN) or universally unique identifier (UUID) of the
	// configuration policy.
	//
	// This member is required.
	ConfigurationPolicyIdentifier *string

	// The identifier of the target account, organizational unit, or the root to
	// associate with the specified configuration.
	//
	// This member is required.
	Target types.Target
	// contains filtered or unexported fields
}

type StartConfigurationPolicyAssociationOutput struct {

	// The current status of the association between the specified target and the
	// configuration.
	AssociationStatus types.ConfigurationPolicyAssociationStatus

	// An explanation for a FAILED value for AssociationStatus .
	AssociationStatusMessage *string

	// Indicates whether the association between the specified target and the
	// configuration was directly applied by the Security Hub delegated administrator
	// or inherited from a parent.
	AssociationType types.AssociationType

	// The UUID of the configuration policy.
	ConfigurationPolicyId *string

	// The identifier of the target account, organizational unit, or the organization
	// root with which the configuration is associated.
	TargetId *string

	// Indicates whether the target is an Amazon Web Services account, organizational
	// unit, or the organization root.
	TargetType types.TargetType

	// The date and time, in UTC and ISO 8601 format, that the configuration policy
	// association was last updated.
	UpdatedAt *time.Time

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type StartConfigurationPolicyDisassociationInput struct {

	// The Amazon Resource Name (ARN) or universally unique identifier (UUID) of the
	// configuration policy.
	//
	// This member is required.
	ConfigurationPolicyIdentifier *string

	// The identifier of the target account, organizational unit, or the root to
	// disassociate from the specified configuration.
	Target types.Target
	// contains filtered or unexported fields
}

type StartConfigurationPolicyDisassociationOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type TagResourceInput struct {

	// The ARN of the resource to apply the tags to.
	//
	// This member is required.
	ResourceArn *string

	// The tags to add to the resource. You can add up to 50 tags at a time. The tag
	// keys can be no longer than 128 characters. The tag values can be no longer than
	// 256 characters.
	//
	// This member is required.
	Tags map[string]string
	// contains filtered or unexported fields
}

type TagResourceOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UntagResourceInput struct {

	// The ARN of the resource to remove the tags from.
	//
	// This member is required.
	ResourceArn *string

	// The tag keys associated with the tags to remove from the resource. You can
	// remove up to 50 tags at a time.
	//
	// This member is required.
	TagKeys []string
	// contains filtered or unexported fields
}

type UntagResourceOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateActionTargetInput struct {

	// The ARN of the custom action target to update.
	//
	// This member is required.
	ActionTargetArn *string

	// The updated description for the custom action target.
	Description *string

	// The updated name of the custom action target.
	Name *string
	// contains filtered or unexported fields
}

type UpdateActionTargetOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateConfigurationPolicyInput struct {

	// The Amazon Resource Name (ARN) or universally unique identifier (UUID) of the
	// configuration policy.
	//
	// This member is required.
	Identifier *string

	// An object that defines how Security Hub is configured. It includes whether
	// Security Hub is enabled or disabled, a list of enabled security standards, a
	// list of enabled or disabled security controls, and a list of custom parameter
	// values for specified controls. If you provide a list of security controls that
	// are enabled in the configuration policy, Security Hub disables all other
	// controls (including newly released controls). If you provide a list of security
	// controls that are disabled in the configuration policy, Security Hub enables all
	// other controls (including newly released controls). When updating a
	// configuration policy, provide a complete list of standards that you want to
	// enable and a complete list of controls that you want to enable or disable. The
	// updated configuration replaces the current configuration.
	ConfigurationPolicy types.Policy

	// The description of the configuration policy.
	Description *string

	// The name of the configuration policy. Alphanumeric characters and the following
	// ASCII characters are permitted: -, ., !, *, / .
	Name *string

	// The reason for updating the configuration policy.
	UpdatedReason *string
	// contains filtered or unexported fields
}

type UpdateConfigurationPolicyOutput struct {

	// The ARN of the configuration policy.
	Arn *string

	// An object that defines how Security Hub is configured. It includes whether
	// Security Hub is enabled or disabled, a list of enabled security standards, a
	// list of enabled or disabled security controls, and a list of custom parameter
	// values for specified controls. If the request included a list of security
	// controls that are enabled in the configuration policy, Security Hub disables all
	// other controls (including newly released controls). If the request included a
	// list of security controls that are disabled in the configuration policy,
	// Security Hub enables all other controls (including newly released controls).
	ConfigurationPolicy types.Policy

	// The date and time, in UTC and ISO 8601 format, that the configuration policy
	// was created.
	CreatedAt *time.Time

	// The description of the configuration policy.
	Description *string

	// The UUID of the configuration policy.
	Id *string

	// The name of the configuration policy.
	Name *string

	// The date and time, in UTC and ISO 8601 format, that the configuration policy
	// was last updated.
	UpdatedAt *time.Time

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateFindingAggregatorInput struct {

	// The ARN of the finding aggregator. To obtain the ARN, use ListFindingAggregators
	// .
	//
	// This member is required.
	FindingAggregatorArn *string

	// Indicates whether to aggregate findings from all of the available Regions in
	// the current partition. Also determines whether to automatically aggregate
	// findings from new Regions as Security Hub supports them and you opt into them.
	// The selected option also determines how to use the Regions provided in the
	// Regions list. The options are as follows:
	//   - ALL_REGIONS - Indicates to aggregate findings from all of the Regions where
	//   Security Hub is enabled. When you choose this option, Security Hub also
	//   automatically aggregates findings from new Regions as Security Hub supports them
	//   and you opt into them.
	//   - ALL_REGIONS_EXCEPT_SPECIFIED - Indicates to aggregate findings from all of
	//   the Regions where Security Hub is enabled, except for the Regions listed in the
	//   Regions parameter. When you choose this option, Security Hub also
	//   automatically aggregates findings from new Regions as Security Hub supports them
	//   and you opt into them.
	//   - SPECIFIED_REGIONS - Indicates to aggregate findings only from the Regions
	//   listed in the Regions parameter. Security Hub does not automatically aggregate
	//   findings from new Regions.
	//
	// This member is required.
	RegionLinkingMode *string

	// If RegionLinkingMode is ALL_REGIONS_EXCEPT_SPECIFIED , then this is a
	// space-separated list of Regions that do not aggregate findings to the
	// aggregation Region. If RegionLinkingMode is SPECIFIED_REGIONS , then this is a
	// space-separated list of Regions that do aggregate findings to the aggregation
	// Region.
	Regions []string
	// contains filtered or unexported fields
}

type UpdateFindingAggregatorOutput struct {

	// The aggregation Region.
	FindingAggregationRegion *string

	// The ARN of the finding aggregator.
	FindingAggregatorArn *string

	// Indicates whether to link all Regions, all Regions except for a list of
	// excluded Regions, or a list of included Regions.
	RegionLinkingMode *string

	// The list of excluded Regions or included Regions.
	Regions []string

	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateFindingsInput struct {

	// A collection of attributes that specify which findings you want to update.
	//
	// This member is required.
	Filters *types.AwsSecurityFindingFilters

	// The updated note for the finding.
	Note *types.NoteUpdate

	// The updated record state for the finding.
	RecordState types.RecordState
	// contains filtered or unexported fields
}

type UpdateFindingsOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateInsightInput struct {

	// The ARN of the insight that you want to update.
	//
	// This member is required.
	InsightArn *string

	// The updated filters that define this insight.
	Filters *types.AwsSecurityFindingFilters

	// The updated GroupBy attribute that defines this insight.
	GroupByAttribute *string

	// The updated name for the insight.
	Name *string
	// contains filtered or unexported fields
}

type UpdateInsightOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateOrganizationConfigurationInput struct {

	// Whether to automatically enable Security Hub in new member accounts when they
	// join the organization. If set to true , then Security Hub is automatically
	// enabled in new accounts. If set to false , then Security Hub isn't enabled in
	// new accounts automatically. The default value is false . If the
	// ConfigurationType of your organization is set to CENTRAL , then this field is
	// set to false and can't be changed in the home Region and linked Regions.
	// However, in that case, the delegated administrator can create a configuration
	// policy in which Security Hub is enabled and associate the policy with new
	// organization accounts.
	//
	// This member is required.
	AutoEnable *bool

	// Whether to automatically enable Security Hub default standards (https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-enable-disable.html)
	// in new member accounts when they join the organization. The default value of
	// this parameter is equal to DEFAULT . If equal to DEFAULT , then Security Hub
	// default standards are automatically enabled for new member accounts. If equal to
	// NONE , then default standards are not automatically enabled for new member
	// accounts. If the ConfigurationType of your organization is set to CENTRAL , then
	// this field is set to NONE and can't be changed in the home Region and linked
	// Regions. However, in that case, the delegated administrator can create a
	// configuration policy in which specific security standards are enabled and
	// associate the policy with new organization accounts.
	AutoEnableStandards types.AutoEnableStandards

	// Provides information about the way an organization is configured in Security
	// Hub.
	OrganizationConfiguration *types.OrganizationConfiguration
	// contains filtered or unexported fields
}

type UpdateOrganizationConfigurationOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateSecurityControlInput struct {

	// An object that specifies which security control parameters to update.
	//
	// This member is required.
	Parameters map[string]types.ParameterConfiguration

	// The Amazon Resource Name (ARN) or ID of the control to update.
	//
	// This member is required.
	SecurityControlId *string

	// The most recent reason for updating the properties of the security control.
	// This field accepts alphanumeric characters in addition to white spaces, dashes,
	// and underscores.
	LastUpdateReason *string
	// contains filtered or unexported fields
}

type UpdateSecurityControlOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateSecurityHubConfigurationInput struct {

	// Whether to automatically enable new controls when they are added to standards
	// that are enabled. By default, this is set to true , and new controls are enabled
	// automatically. To not automatically enable new controls, set this to false .
	AutoEnableControls *bool

	// Updates whether the calling account has consolidated control findings turned
	// on. If the value for this field is set to SECURITY_CONTROL , Security Hub
	// generates a single finding for a control check even when the check applies to
	// multiple enabled standards. If the value for this field is set to
	// STANDARD_CONTROL , Security Hub generates separate findings for a control check
	// when the check applies to multiple enabled standards. For accounts that are part
	// of an organization, this value can only be updated in the administrator account.
	ControlFindingGenerator types.ControlFindingGenerator
	// contains filtered or unexported fields
}

type UpdateSecurityHubConfigurationOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}

type UpdateStandardsControlInput struct {

	// The ARN of the security standard control to enable or disable.
	//
	// This member is required.
	StandardsControlArn *string

	// The updated status of the security standard control.
	ControlStatus types.ControlStatus

	// A description of the reason why you are disabling a security standard control.
	// If you are disabling a control, then this is required.
	DisabledReason *string
	// contains filtered or unexported fields
}

type UpdateStandardsControlOutput struct {
	// Metadata pertaining to the operation's result.
	ResultMetadata middleware.Metadata
	// contains filtered or unexported fields
}