@Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AbstractAmazonGuardDuty extends Object implements AmazonGuardDuty
AmazonGuardDuty
. Convenient method forms pass through to the corresponding
overload that takes a request object, which throws an UnsupportedOperationException
.ENDPOINT_PREFIX
Modifier and Type | Method and Description |
---|---|
AcceptAdministratorInvitationResult |
acceptAdministratorInvitation(AcceptAdministratorInvitationRequest request)
Accepts the invitation to be a member account and get monitored by a GuardDuty administrator account that sent
the invitation.
|
AcceptInvitationResult |
acceptInvitation(AcceptInvitationRequest request)
Deprecated.
|
ArchiveFindingsResult |
archiveFindings(ArchiveFindingsRequest request)
Archives GuardDuty findings that are specified by the list of finding IDs.
|
CreateDetectorResult |
createDetector(CreateDetectorRequest request)
Creates a single GuardDuty detector.
|
CreateFilterResult |
createFilter(CreateFilterRequest request)
Creates a filter using the specified finding criteria.
|
CreateIPSetResult |
createIPSet(CreateIPSetRequest request)
Creates a new IPSet, which is called a trusted IP list in the console user interface.
|
CreateMalwareProtectionPlanResult |
createMalwareProtectionPlan(CreateMalwareProtectionPlanRequest request)
Creates a new Malware Protection plan for the protected resource.
|
CreateMembersResult |
createMembers(CreateMembersRequest request)
Creates member accounts of the current Amazon Web Services account by specifying a list of Amazon Web Services
account IDs.
|
CreatePublishingDestinationResult |
createPublishingDestination(CreatePublishingDestinationRequest request)
Creates a publishing destination to export findings to.
|
CreateSampleFindingsResult |
createSampleFindings(CreateSampleFindingsRequest request)
Generates sample findings of types specified by the list of finding types.
|
CreateThreatIntelSetResult |
createThreatIntelSet(CreateThreatIntelSetRequest request)
Creates a new ThreatIntelSet.
|
DeclineInvitationsResult |
declineInvitations(DeclineInvitationsRequest request)
Declines invitations sent to the current member account by Amazon Web Services accounts specified by their
account IDs.
|
DeleteDetectorResult |
deleteDetector(DeleteDetectorRequest request)
Deletes an Amazon GuardDuty detector that is specified by the detector ID.
|
DeleteFilterResult |
deleteFilter(DeleteFilterRequest request)
Deletes the filter specified by the filter name.
|
DeleteInvitationsResult |
deleteInvitations(DeleteInvitationsRequest request)
Deletes invitations sent to the current member account by Amazon Web Services accounts specified by their account
IDs.
|
DeleteIPSetResult |
deleteIPSet(DeleteIPSetRequest request)
Deletes the IPSet specified by the
ipSetId . |
DeleteMalwareProtectionPlanResult |
deleteMalwareProtectionPlan(DeleteMalwareProtectionPlanRequest request)
Deletes the Malware Protection plan ID associated with the Malware Protection plan resource.
|
DeleteMembersResult |
deleteMembers(DeleteMembersRequest request)
Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
|
DeletePublishingDestinationResult |
deletePublishingDestination(DeletePublishingDestinationRequest request)
Deletes the publishing definition with the specified
destinationId . |
DeleteThreatIntelSetResult |
deleteThreatIntelSet(DeleteThreatIntelSetRequest request)
Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.
|
DescribeMalwareScansResult |
describeMalwareScans(DescribeMalwareScansRequest request)
Returns a list of malware scans.
|
DescribeOrganizationConfigurationResult |
describeOrganizationConfiguration(DescribeOrganizationConfigurationRequest request)
Returns information about the account selected as the delegated administrator for GuardDuty.
|
DescribePublishingDestinationResult |
describePublishingDestination(DescribePublishingDestinationRequest request)
Returns information about the publishing destination specified by the provided
destinationId . |
DisableOrganizationAdminAccountResult |
disableOrganizationAdminAccount(DisableOrganizationAdminAccountRequest request)
Removes the existing GuardDuty delegated administrator of the organization.
|
DisassociateFromAdministratorAccountResult |
disassociateFromAdministratorAccount(DisassociateFromAdministratorAccountRequest request)
Disassociates the current GuardDuty member account from its administrator account.
|
DisassociateFromMasterAccountResult |
disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
Deprecated.
|
DisassociateMembersResult |
disassociateMembers(DisassociateMembersRequest request)
Disassociates GuardDuty member accounts (from the current administrator account) specified by the account IDs.
|
EnableOrganizationAdminAccountResult |
enableOrganizationAdminAccount(EnableOrganizationAdminAccountRequest request)
Designates an Amazon Web Services account within the organization as your GuardDuty delegated administrator.
|
GetAdministratorAccountResult |
getAdministratorAccount(GetAdministratorAccountRequest request)
Provides the details of the GuardDuty administrator account associated with the current GuardDuty member account.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful request, typically used for debugging issues
where a service isn't acting as expected.
|
GetCoverageStatisticsResult |
getCoverageStatistics(GetCoverageStatisticsRequest request)
Retrieves aggregated statistics for your account.
|
GetDetectorResult |
getDetector(GetDetectorRequest request)
Retrieves an Amazon GuardDuty detector specified by the detectorId.
|
GetFilterResult |
getFilter(GetFilterRequest request)
Returns the details of the filter specified by the filter name.
|
GetFindingsResult |
getFindings(GetFindingsRequest request)
Describes Amazon GuardDuty findings specified by finding IDs.
|
GetFindingsStatisticsResult |
getFindingsStatistics(GetFindingsStatisticsRequest request)
Lists Amazon GuardDuty findings statistics for the specified detector ID.
|
GetInvitationsCountResult |
getInvitationsCount(GetInvitationsCountRequest request)
Returns the count of all GuardDuty membership invitations that were sent to the current member account except the
currently accepted invitation.
|
GetIPSetResult |
getIPSet(GetIPSetRequest request)
Retrieves the IPSet specified by the
ipSetId . |
GetMalwareProtectionPlanResult |
getMalwareProtectionPlan(GetMalwareProtectionPlanRequest request)
Retrieves the Malware Protection plan details associated with a Malware Protection plan ID.
|
GetMalwareScanSettingsResult |
getMalwareScanSettings(GetMalwareScanSettingsRequest request)
Returns the details of the malware scan settings.
|
GetMasterAccountResult |
getMasterAccount(GetMasterAccountRequest request)
Deprecated.
|
GetMemberDetectorsResult |
getMemberDetectors(GetMemberDetectorsRequest request)
Describes which data sources are enabled for the member account's detector.
|
GetMembersResult |
getMembers(GetMembersRequest request)
Retrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the account
IDs.
|
GetOrganizationStatisticsResult |
getOrganizationStatistics(GetOrganizationStatisticsRequest request)
Retrieves how many active member accounts have each feature enabled within GuardDuty.
|
GetRemainingFreeTrialDaysResult |
getRemainingFreeTrialDays(GetRemainingFreeTrialDaysRequest request)
Provides the number of days left for each data source used in the free trial period.
|
GetThreatIntelSetResult |
getThreatIntelSet(GetThreatIntelSetRequest request)
Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
|
GetUsageStatisticsResult |
getUsageStatistics(GetUsageStatisticsRequest request)
Lists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID.
|
InviteMembersResult |
inviteMembers(InviteMembersRequest request)
Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services
account that invokes this API.
|
ListCoverageResult |
listCoverage(ListCoverageRequest request)
Lists coverage details for your GuardDuty account.
|
ListDetectorsResult |
listDetectors(ListDetectorsRequest request)
Lists detectorIds of all the existing Amazon GuardDuty detector resources.
|
ListFiltersResult |
listFilters(ListFiltersRequest request)
Returns a paginated list of the current filters.
|
ListFindingsResult |
listFindings(ListFindingsRequest request)
Lists GuardDuty findings for the specified detector ID.
|
ListInvitationsResult |
listInvitations(ListInvitationsRequest request)
Lists all GuardDuty membership invitations that were sent to the current Amazon Web Services account.
|
ListIPSetsResult |
listIPSets(ListIPSetsRequest request)
Lists the IPSets of the GuardDuty service specified by the detector ID.
|
ListMalwareProtectionPlansResult |
listMalwareProtectionPlans(ListMalwareProtectionPlansRequest request)
Lists the Malware Protection plan IDs associated with the protected resources in your Amazon Web Services
account.
|
ListMembersResult |
listMembers(ListMembersRequest request)
Lists details about all member accounts for the current GuardDuty administrator account.
|
ListOrganizationAdminAccountsResult |
listOrganizationAdminAccounts(ListOrganizationAdminAccountsRequest request)
Lists the accounts designated as GuardDuty delegated administrators.
|
ListPublishingDestinationsResult |
listPublishingDestinations(ListPublishingDestinationsRequest request)
Returns a list of publishing destinations associated with the specified
detectorId . |
ListTagsForResourceResult |
listTagsForResource(ListTagsForResourceRequest request)
Lists tags for a resource.
|
ListThreatIntelSetsResult |
listThreatIntelSets(ListThreatIntelSetsRequest request)
Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID.
|
void |
shutdown()
Shuts down this client object, releasing any resources that might be held open.
|
StartMalwareScanResult |
startMalwareScan(StartMalwareScanRequest request)
Initiates the malware scan.
|
StartMonitoringMembersResult |
startMonitoringMembers(StartMonitoringMembersRequest request)
Turns on GuardDuty monitoring of the specified member accounts.
|
StopMonitoringMembersResult |
stopMonitoringMembers(StopMonitoringMembersRequest request)
Stops GuardDuty monitoring for the specified member accounts.
|
TagResourceResult |
tagResource(TagResourceRequest request)
Adds tags to a resource.
|
UnarchiveFindingsResult |
unarchiveFindings(UnarchiveFindingsRequest request)
Unarchives GuardDuty findings specified by the
findingIds . |
UntagResourceResult |
untagResource(UntagResourceRequest request)
Removes tags from a resource.
|
UpdateDetectorResult |
updateDetector(UpdateDetectorRequest request)
Updates the GuardDuty detector specified by the detector ID.
|
UpdateFilterResult |
updateFilter(UpdateFilterRequest request)
Updates the filter specified by the filter name.
|
UpdateFindingsFeedbackResult |
updateFindingsFeedback(UpdateFindingsFeedbackRequest request)
Marks the specified GuardDuty findings as useful or not useful.
|
UpdateIPSetResult |
updateIPSet(UpdateIPSetRequest request)
Updates the IPSet specified by the IPSet ID.
|
UpdateMalwareProtectionPlanResult |
updateMalwareProtectionPlan(UpdateMalwareProtectionPlanRequest request)
Updates an existing Malware Protection plan resource.
|
UpdateMalwareScanSettingsResult |
updateMalwareScanSettings(UpdateMalwareScanSettingsRequest request)
Updates the malware scan settings.
|
UpdateMemberDetectorsResult |
updateMemberDetectors(UpdateMemberDetectorsRequest request)
Contains information on member accounts to be updated.
|
UpdateOrganizationConfigurationResult |
updateOrganizationConfiguration(UpdateOrganizationConfigurationRequest request)
Configures the delegated administrator account with the provided values.
|
UpdatePublishingDestinationResult |
updatePublishingDestination(UpdatePublishingDestinationRequest request)
Updates information about the publishing destination specified by the
destinationId . |
UpdateThreatIntelSetResult |
updateThreatIntelSet(UpdateThreatIntelSetRequest request)
Updates the ThreatIntelSet specified by the ThreatIntelSet ID.
|
public AcceptAdministratorInvitationResult acceptAdministratorInvitation(AcceptAdministratorInvitationRequest request)
AmazonGuardDuty
Accepts the invitation to be a member account and get monitored by a GuardDuty administrator account that sent the invitation.
acceptAdministratorInvitation
in interface AmazonGuardDuty
@Deprecated public AcceptInvitationResult acceptInvitation(AcceptInvitationRequest request)
AmazonGuardDuty
Accepts the invitation to be monitored by a GuardDuty administrator account.
acceptInvitation
in interface AmazonGuardDuty
public ArchiveFindingsResult archiveFindings(ArchiveFindingsRequest request)
AmazonGuardDuty
Archives GuardDuty findings that are specified by the list of finding IDs.
Only the administrator account can archive findings. Member accounts don't have permission to archive findings from their accounts.
archiveFindings
in interface AmazonGuardDuty
public CreateDetectorResult createDetector(CreateDetectorRequest request)
AmazonGuardDuty
Creates a single GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each Region where you enable the service. You can have only one detector per account per Region. All data sources are enabled in a new detector by default.
When you don't specify any features
, with an exception to RUNTIME_MONITORING
, all the
optional features are enabled by default.
When you specify some of the features
, any feature that is not specified in the API call gets
enabled by default, with an exception to RUNTIME_MONITORING
.
Specifying both EKS Runtime Monitoring (EKS_RUNTIME_MONITORING
) and Runtime Monitoring (
RUNTIME_MONITORING
) will cause an error. You can add only one of these two features because Runtime
Monitoring already includes the threat detection for Amazon EKS resources. For more information, see Runtime Monitoring.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
createDetector
in interface AmazonGuardDuty
public CreateFilterResult createFilter(CreateFilterRequest request)
AmazonGuardDuty
Creates a filter using the specified finding criteria. The maximum number of saved filters per Amazon Web Services account per Region is 100. For more information, see Quotas for GuardDuty.
createFilter
in interface AmazonGuardDuty
public CreateIPSetResult createIPSet(CreateIPSetRequest request)
AmazonGuardDuty
Creates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of IP addresses that are trusted for secure communication with Amazon Web Services infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are included in IPSets. Only users from the administrator account can use this operation.
createIPSet
in interface AmazonGuardDuty
public CreateMalwareProtectionPlanResult createMalwareProtectionPlan(CreateMalwareProtectionPlanRequest request)
AmazonGuardDuty
Creates a new Malware Protection plan for the protected resource.
When you create a Malware Protection plan, the Amazon Web Services service terms for GuardDuty Malware Protection apply. For more information, see Amazon Web Services service terms for GuardDuty Malware Protection.
createMalwareProtectionPlan
in interface AmazonGuardDuty
public CreateMembersResult createMembers(CreateMembersRequest request)
AmazonGuardDuty
Creates member accounts of the current Amazon Web Services account by specifying a list of Amazon Web Services account IDs. This step is a prerequisite for managing the associated member accounts either by invitation or through an organization.
As a delegated administrator, using CreateMembers
will enable GuardDuty in the added member
accounts, with the exception of the organization delegated administrator account. A delegated administrator must
enable GuardDuty prior to being added as a member.
When you use CreateMembers as an Organizations delegated administrator, GuardDuty applies your organization's auto-enable settings to the member accounts in this request, irrespective of the accounts being new or existing members. For more information about the existing auto-enable settings for your organization, see DescribeOrganizationConfiguration.
If you disassociate a member account that was added by invitation, the member account details obtained from this API, including the associated email addresses, will be retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
When the member accounts added through Organizations are later disassociated, you (administrator) can't invite them by calling the InviteMembers API. You can create an association with these member accounts again only by calling the CreateMembers API.
createMembers
in interface AmazonGuardDuty
public CreatePublishingDestinationResult createPublishingDestination(CreatePublishingDestinationRequest request)
AmazonGuardDuty
Creates a publishing destination to export findings to. The resource to export findings to must exist before you use this operation.
createPublishingDestination
in interface AmazonGuardDuty
public CreateSampleFindingsResult createSampleFindings(CreateSampleFindingsRequest request)
AmazonGuardDuty
Generates sample findings of types specified by the list of finding types. If 'NULL' is specified for
findingTypes
, the API generates sample findings of all supported finding types.
createSampleFindings
in interface AmazonGuardDuty
public CreateThreatIntelSetResult createThreatIntelSet(CreateThreatIntelSetRequest request)
AmazonGuardDuty
Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can use this operation.
createThreatIntelSet
in interface AmazonGuardDuty
public DeclineInvitationsResult declineInvitations(DeclineInvitationsRequest request)
AmazonGuardDuty
Declines invitations sent to the current member account by Amazon Web Services accounts specified by their account IDs.
declineInvitations
in interface AmazonGuardDuty
public DeleteDetectorResult deleteDetector(DeleteDetectorRequest request)
AmazonGuardDuty
Deletes an Amazon GuardDuty detector that is specified by the detector ID.
deleteDetector
in interface AmazonGuardDuty
public DeleteFilterResult deleteFilter(DeleteFilterRequest request)
AmazonGuardDuty
Deletes the filter specified by the filter name.
deleteFilter
in interface AmazonGuardDuty
public DeleteIPSetResult deleteIPSet(DeleteIPSetRequest request)
AmazonGuardDuty
Deletes the IPSet specified by the ipSetId
. IPSets are called trusted IP lists in the console user
interface.
deleteIPSet
in interface AmazonGuardDuty
public DeleteInvitationsResult deleteInvitations(DeleteInvitationsRequest request)
AmazonGuardDuty
Deletes invitations sent to the current member account by Amazon Web Services accounts specified by their account IDs.
deleteInvitations
in interface AmazonGuardDuty
public DeleteMalwareProtectionPlanResult deleteMalwareProtectionPlan(DeleteMalwareProtectionPlanRequest request)
AmazonGuardDuty
Deletes the Malware Protection plan ID associated with the Malware Protection plan resource. Use this API only when you no longer want to protect the resource associated with this Malware Protection plan ID.
deleteMalwareProtectionPlan
in interface AmazonGuardDuty
public DeleteMembersResult deleteMembers(DeleteMembersRequest request)
AmazonGuardDuty
Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
With autoEnableOrganizationMembers
configuration for your organization set to ALL
,
you'll receive an error if you attempt to disable GuardDuty for a member account in your organization.
deleteMembers
in interface AmazonGuardDuty
public DeletePublishingDestinationResult deletePublishingDestination(DeletePublishingDestinationRequest request)
AmazonGuardDuty
Deletes the publishing definition with the specified destinationId
.
deletePublishingDestination
in interface AmazonGuardDuty
public DeleteThreatIntelSetResult deleteThreatIntelSet(DeleteThreatIntelSetRequest request)
AmazonGuardDuty
Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.
deleteThreatIntelSet
in interface AmazonGuardDuty
public DescribeMalwareScansResult describeMalwareScans(DescribeMalwareScansRequest request)
AmazonGuardDuty
Returns a list of malware scans. Each member account can view the malware scans for their own accounts. An administrator can view the malware scans for all the member accounts.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
describeMalwareScans
in interface AmazonGuardDuty
public DescribeOrganizationConfigurationResult describeOrganizationConfiguration(DescribeOrganizationConfigurationRequest request)
AmazonGuardDuty
Returns information about the account selected as the delegated administrator for GuardDuty.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
describeOrganizationConfiguration
in interface AmazonGuardDuty
public DescribePublishingDestinationResult describePublishingDestination(DescribePublishingDestinationRequest request)
AmazonGuardDuty
Returns information about the publishing destination specified by the provided destinationId
.
describePublishingDestination
in interface AmazonGuardDuty
public DisableOrganizationAdminAccountResult disableOrganizationAdminAccount(DisableOrganizationAdminAccountRequest request)
AmazonGuardDuty
Removes the existing GuardDuty delegated administrator of the organization. Only the organization's management account can run this API operation.
disableOrganizationAdminAccount
in interface AmazonGuardDuty
public DisassociateFromAdministratorAccountResult disassociateFromAdministratorAccount(DisassociateFromAdministratorAccountRequest request)
AmazonGuardDuty
Disassociates the current GuardDuty member account from its administrator account.
When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the CreateMembers API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
With autoEnableOrganizationMembers
configuration for your organization set to ALL
,
you'll receive an error if you attempt to disable GuardDuty in a member account.
disassociateFromAdministratorAccount
in interface AmazonGuardDuty
@Deprecated public DisassociateFromMasterAccountResult disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
AmazonGuardDuty
Disassociates the current GuardDuty member account from its administrator account.
When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the CreateMembers API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
disassociateFromMasterAccount
in interface AmazonGuardDuty
public DisassociateMembersResult disassociateMembers(DisassociateMembersRequest request)
AmazonGuardDuty
Disassociates GuardDuty member accounts (from the current administrator account) specified by the account IDs.
When you disassociate an invited member from a GuardDuty delegated administrator, the member account details obtained from the CreateMembers API, including the associated email addresses, are retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
With autoEnableOrganizationMembers
configuration for your organization set to ALL
,
you'll receive an error if you attempt to disassociate a member account before removing them from your
organization.
If you disassociate a member account that was added by invitation, the member account details obtained from this API, including the associated email addresses, will be retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
When the member accounts added through Organizations are later disassociated, you (administrator) can't invite them by calling the InviteMembers API. You can create an association with these member accounts again only by calling the CreateMembers API.
disassociateMembers
in interface AmazonGuardDuty
public EnableOrganizationAdminAccountResult enableOrganizationAdminAccount(EnableOrganizationAdminAccountRequest request)
AmazonGuardDuty
Designates an Amazon Web Services account within the organization as your GuardDuty delegated administrator. Only the organization's management account can run this API operation.
enableOrganizationAdminAccount
in interface AmazonGuardDuty
public GetAdministratorAccountResult getAdministratorAccount(GetAdministratorAccountRequest request)
AmazonGuardDuty
Provides the details of the GuardDuty administrator account associated with the current GuardDuty member account.
If the organization's management account or a delegated administrator runs this API, it will return success (
HTTP 200
) but no content.
getAdministratorAccount
in interface AmazonGuardDuty
public GetCoverageStatisticsResult getCoverageStatistics(GetCoverageStatisticsRequest request)
AmazonGuardDuty
Retrieves aggregated statistics for your account. If you are a GuardDuty administrator, you can retrieve the statistics for all the resources associated with the active member accounts in your organization who have enabled Runtime Monitoring and have the GuardDuty security agent running on their resources.
getCoverageStatistics
in interface AmazonGuardDuty
public GetDetectorResult getDetector(GetDetectorRequest request)
AmazonGuardDuty
Retrieves an Amazon GuardDuty detector specified by the detectorId.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
getDetector
in interface AmazonGuardDuty
public GetFilterResult getFilter(GetFilterRequest request)
AmazonGuardDuty
Returns the details of the filter specified by the filter name.
getFilter
in interface AmazonGuardDuty
public GetFindingsResult getFindings(GetFindingsRequest request)
AmazonGuardDuty
Describes Amazon GuardDuty findings specified by finding IDs.
getFindings
in interface AmazonGuardDuty
public GetFindingsStatisticsResult getFindingsStatistics(GetFindingsStatisticsRequest request)
AmazonGuardDuty
Lists Amazon GuardDuty findings statistics for the specified detector ID.
There might be regional differences because some flags might not be available in all the Regions where GuardDuty is currently supported. For more information, see Regions and endpoints.
getFindingsStatistics
in interface AmazonGuardDuty
public GetIPSetResult getIPSet(GetIPSetRequest request)
AmazonGuardDuty
Retrieves the IPSet specified by the ipSetId
.
getIPSet
in interface AmazonGuardDuty
public GetInvitationsCountResult getInvitationsCount(GetInvitationsCountRequest request)
AmazonGuardDuty
Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
getInvitationsCount
in interface AmazonGuardDuty
public GetMalwareProtectionPlanResult getMalwareProtectionPlan(GetMalwareProtectionPlanRequest request)
AmazonGuardDuty
Retrieves the Malware Protection plan details associated with a Malware Protection plan ID.
getMalwareProtectionPlan
in interface AmazonGuardDuty
public GetMalwareScanSettingsResult getMalwareScanSettings(GetMalwareScanSettingsRequest request)
AmazonGuardDuty
Returns the details of the malware scan settings.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
getMalwareScanSettings
in interface AmazonGuardDuty
@Deprecated public GetMasterAccountResult getMasterAccount(GetMasterAccountRequest request)
AmazonGuardDuty
Provides the details for the GuardDuty administrator account associated with the current GuardDuty member account.
getMasterAccount
in interface AmazonGuardDuty
public GetMemberDetectorsResult getMemberDetectors(GetMemberDetectorsRequest request)
AmazonGuardDuty
Describes which data sources are enabled for the member account's detector.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
getMemberDetectors
in interface AmazonGuardDuty
public GetMembersResult getMembers(GetMembersRequest request)
AmazonGuardDuty
Retrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the account IDs.
getMembers
in interface AmazonGuardDuty
public GetOrganizationStatisticsResult getOrganizationStatistics(GetOrganizationStatisticsRequest request)
AmazonGuardDuty
Retrieves how many active member accounts have each feature enabled within GuardDuty. Only a delegated GuardDuty administrator of an organization can run this API.
When you create a new organization, it might take up to 24 hours to generate the statistics for the entire organization.
getOrganizationStatistics
in interface AmazonGuardDuty
public GetRemainingFreeTrialDaysResult getRemainingFreeTrialDays(GetRemainingFreeTrialDaysRequest request)
AmazonGuardDuty
Provides the number of days left for each data source used in the free trial period.
getRemainingFreeTrialDays
in interface AmazonGuardDuty
public GetThreatIntelSetResult getThreatIntelSet(GetThreatIntelSetRequest request)
AmazonGuardDuty
Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
getThreatIntelSet
in interface AmazonGuardDuty
public GetUsageStatisticsResult getUsageStatistics(GetUsageStatisticsRequest request)
AmazonGuardDuty
Lists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID. For newly enabled detectors or data sources, the cost returned will include only the usage so far under 30 days. This may differ from the cost metrics in the console, which project usage over 30 days to provide a monthly cost estimate. For more information, see Understanding How Usage Costs are Calculated.
getUsageStatistics
in interface AmazonGuardDuty
public InviteMembersResult inviteMembers(InviteMembersRequest request)
AmazonGuardDuty
Invites Amazon Web Services accounts to become members of an organization administered by the Amazon Web Services account that invokes this API. If you are using Amazon Web Services Organizations to manage your GuardDuty environment, this step is not needed. For more information, see Managing accounts with organizations.
To invite Amazon Web Services accounts, the first step is to ensure that GuardDuty has been enabled in the potential member accounts. You can now invoke this API to add accounts by invitation. The invited accounts can either accept or decline the invitation from their GuardDuty accounts. Each invited Amazon Web Services account can choose to accept the invitation from only one Amazon Web Services account. For more information, see Managing GuardDuty accounts by invitation.
After the invite has been accepted and you choose to disassociate a member account (by using DisassociateMembers) from your account, the details of the member account obtained by invoking CreateMembers, including the associated email addresses, will be retained. This is done so that you can invoke InviteMembers without the need to invoke CreateMembers again. To remove the details associated with a member account, you must also invoke DeleteMembers.
If you disassociate a member account that was added by invitation, the member account details obtained from this API, including the associated email addresses, will be retained. This is done so that the delegated administrator can invoke the InviteMembers API without the need to invoke the CreateMembers API again. To remove the details associated with a member account, the delegated administrator must invoke the DeleteMembers API.
When the member accounts added through Organizations are later disassociated, you (administrator) can't invite them by calling the InviteMembers API. You can create an association with these member accounts again only by calling the CreateMembers API.
inviteMembers
in interface AmazonGuardDuty
public ListCoverageResult listCoverage(ListCoverageRequest request)
AmazonGuardDuty
Lists coverage details for your GuardDuty account. If you're a GuardDuty administrator, you can retrieve all resources associated with the active member accounts in your organization.
Make sure the accounts have Runtime Monitoring enabled and GuardDuty agent running on their resources.
listCoverage
in interface AmazonGuardDuty
public ListDetectorsResult listDetectors(ListDetectorsRequest request)
AmazonGuardDuty
Lists detectorIds of all the existing Amazon GuardDuty detector resources.
listDetectors
in interface AmazonGuardDuty
public ListFiltersResult listFilters(ListFiltersRequest request)
AmazonGuardDuty
Returns a paginated list of the current filters.
listFilters
in interface AmazonGuardDuty
public ListFindingsResult listFindings(ListFindingsRequest request)
AmazonGuardDuty
Lists GuardDuty findings for the specified detector ID.
There might be regional differences because some flags might not be available in all the Regions where GuardDuty is currently supported. For more information, see Regions and endpoints.
listFindings
in interface AmazonGuardDuty
public ListIPSetsResult listIPSets(ListIPSetsRequest request)
AmazonGuardDuty
Lists the IPSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the IPSets returned are the IPSets from the associated administrator account.
listIPSets
in interface AmazonGuardDuty
public ListInvitationsResult listInvitations(ListInvitationsRequest request)
AmazonGuardDuty
Lists all GuardDuty membership invitations that were sent to the current Amazon Web Services account.
listInvitations
in interface AmazonGuardDuty
public ListMalwareProtectionPlansResult listMalwareProtectionPlans(ListMalwareProtectionPlansRequest request)
AmazonGuardDuty
Lists the Malware Protection plan IDs associated with the protected resources in your Amazon Web Services account.
listMalwareProtectionPlans
in interface AmazonGuardDuty
public ListMembersResult listMembers(ListMembersRequest request)
AmazonGuardDuty
Lists details about all member accounts for the current GuardDuty administrator account.
listMembers
in interface AmazonGuardDuty
public ListOrganizationAdminAccountsResult listOrganizationAdminAccounts(ListOrganizationAdminAccountsRequest request)
AmazonGuardDuty
Lists the accounts designated as GuardDuty delegated administrators. Only the organization's management account can run this API operation.
listOrganizationAdminAccounts
in interface AmazonGuardDuty
public ListPublishingDestinationsResult listPublishingDestinations(ListPublishingDestinationsRequest request)
AmazonGuardDuty
Returns a list of publishing destinations associated with the specified detectorId
.
listPublishingDestinations
in interface AmazonGuardDuty
public ListTagsForResourceResult listTagsForResource(ListTagsForResourceRequest request)
AmazonGuardDuty
Lists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, threat intel sets, and publishing destination, with a limit of 50 tags per resource. When invoked, this operation returns all assigned tags for a given resource.
listTagsForResource
in interface AmazonGuardDuty
public ListThreatIntelSetsResult listThreatIntelSets(ListThreatIntelSetsRequest request)
AmazonGuardDuty
Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the ThreatIntelSets associated with the administrator account are returned.
listThreatIntelSets
in interface AmazonGuardDuty
public StartMalwareScanResult startMalwareScan(StartMalwareScanRequest request)
AmazonGuardDuty
Initiates the malware scan. Invoking this API will automatically create the Service-linked role in the corresponding account.
When the malware scan starts, you can use the associated scan ID to track the status of the scan. For more information, see DescribeMalwareScans.
startMalwareScan
in interface AmazonGuardDuty
public StartMonitoringMembersResult startMonitoringMembers(StartMonitoringMembersRequest request)
AmazonGuardDuty
Turns on GuardDuty monitoring of the specified member accounts. Use this operation to restart monitoring of accounts that you stopped monitoring with the StopMonitoringMembers operation.
startMonitoringMembers
in interface AmazonGuardDuty
public StopMonitoringMembersResult stopMonitoringMembers(StopMonitoringMembersRequest request)
AmazonGuardDuty
Stops GuardDuty monitoring for the specified member accounts. Use the StartMonitoringMembers
operation to restart monitoring for those accounts.
With autoEnableOrganizationMembers
configuration for your organization set to ALL
,
you'll receive an error if you attempt to stop monitoring the member accounts in your organization.
stopMonitoringMembers
in interface AmazonGuardDuty
public TagResourceResult tagResource(TagResourceRequest request)
AmazonGuardDuty
Adds tags to a resource.
tagResource
in interface AmazonGuardDuty
public UnarchiveFindingsResult unarchiveFindings(UnarchiveFindingsRequest request)
AmazonGuardDuty
Unarchives GuardDuty findings specified by the findingIds
.
unarchiveFindings
in interface AmazonGuardDuty
public UntagResourceResult untagResource(UntagResourceRequest request)
AmazonGuardDuty
Removes tags from a resource.
untagResource
in interface AmazonGuardDuty
public UpdateDetectorResult updateDetector(UpdateDetectorRequest request)
AmazonGuardDuty
Updates the GuardDuty detector specified by the detector ID.
Specifying both EKS Runtime Monitoring (EKS_RUNTIME_MONITORING
) and Runtime Monitoring (
RUNTIME_MONITORING
) will cause an error. You can add only one of these two features because Runtime
Monitoring already includes the threat detection for Amazon EKS resources. For more information, see Runtime Monitoring.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
updateDetector
in interface AmazonGuardDuty
public UpdateFilterResult updateFilter(UpdateFilterRequest request)
AmazonGuardDuty
Updates the filter specified by the filter name.
updateFilter
in interface AmazonGuardDuty
public UpdateFindingsFeedbackResult updateFindingsFeedback(UpdateFindingsFeedbackRequest request)
AmazonGuardDuty
Marks the specified GuardDuty findings as useful or not useful.
updateFindingsFeedback
in interface AmazonGuardDuty
public UpdateIPSetResult updateIPSet(UpdateIPSetRequest request)
AmazonGuardDuty
Updates the IPSet specified by the IPSet ID.
updateIPSet
in interface AmazonGuardDuty
public UpdateMalwareProtectionPlanResult updateMalwareProtectionPlan(UpdateMalwareProtectionPlanRequest request)
AmazonGuardDuty
Updates an existing Malware Protection plan resource.
updateMalwareProtectionPlan
in interface AmazonGuardDuty
public UpdateMalwareScanSettingsResult updateMalwareScanSettings(UpdateMalwareScanSettingsRequest request)
AmazonGuardDuty
Updates the malware scan settings.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
updateMalwareScanSettings
in interface AmazonGuardDuty
public UpdateMemberDetectorsResult updateMemberDetectors(UpdateMemberDetectorsRequest request)
AmazonGuardDuty
Contains information on member accounts to be updated.
Specifying both EKS Runtime Monitoring (EKS_RUNTIME_MONITORING
) and Runtime Monitoring (
RUNTIME_MONITORING
) will cause an error. You can add only one of these two features because Runtime
Monitoring already includes the threat detection for Amazon EKS resources. For more information, see Runtime Monitoring.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
updateMemberDetectors
in interface AmazonGuardDuty
public UpdateOrganizationConfigurationResult updateOrganizationConfiguration(UpdateOrganizationConfigurationRequest request)
AmazonGuardDuty
Configures the delegated administrator account with the provided values. You must provide a value for either
autoEnableOrganizationMembers
or autoEnable
, but not both.
Specifying both EKS Runtime Monitoring (EKS_RUNTIME_MONITORING
) and Runtime Monitoring (
RUNTIME_MONITORING
) will cause an error. You can add only one of these two features because Runtime
Monitoring already includes the threat detection for Amazon EKS resources. For more information, see Runtime Monitoring.
There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.
updateOrganizationConfiguration
in interface AmazonGuardDuty
public UpdatePublishingDestinationResult updatePublishingDestination(UpdatePublishingDestinationRequest request)
AmazonGuardDuty
Updates information about the publishing destination specified by the destinationId
.
updatePublishingDestination
in interface AmazonGuardDuty
public UpdateThreatIntelSetResult updateThreatIntelSet(UpdateThreatIntelSetRequest request)
AmazonGuardDuty
Updates the ThreatIntelSet specified by the ThreatIntelSet ID.
updateThreatIntelSet
in interface AmazonGuardDuty
public void shutdown()
AmazonGuardDuty
shutdown
in interface AmazonGuardDuty
public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
AmazonGuardDuty
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing a request.
getCachedResponseMetadata
in interface AmazonGuardDuty
request
- The originally executed request.