com.amazonaws.services.guardduty

Class AmazonGuardDutyClient

java.lang.Object

com.amazonaws.AmazonWebServiceClient

com.amazonaws.services.guardduty.AmazonGuardDutyClient

All Implemented Interfaces:

AmazonGuardDuty

Direct Known Subclasses:

AmazonGuardDutyAsyncClient

@ThreadSafe
 @Generated(value="com.amazonaws:aws-java-sdk-code-generator")
public class AmazonGuardDutyClient
extends AmazonWebServiceClient
implements AmazonGuardDuty

Client for accessing Amazon GuardDuty. All service calls made using this client are blocking, and will not return until the service call completes.

Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC Flow Logs, AWS CloudTrail event logs, and DNS logs. It uses threat intelligence feeds (such as lists of malicious IPs and domains) and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your AWS environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, URLs, or domains. For example, GuardDuty can detect compromised EC2 instances that serve malware or mine bitcoin.

GuardDuty also monitors AWS account access behavior for signs of compromise. Some examples of this are unauthorized infrastructure deployments such as EC2 instances deployed in a Region that has never been used, or unusual API calls like a password policy change to reduce password strength.

GuardDuty informs you of the status of your AWS environment by producing security findings that you can view in the GuardDuty console or through Amazon CloudWatch events. For more information, see the Amazon GuardDuty User Guide .

Field Summary

Fields inherited from class com.amazonaws.AmazonWebServiceClient

LOGGING_AWS_REQUEST_METRIC

Fields inherited from interface com.amazonaws.services.guardduty.AmazonGuardDuty

ENDPOINT_PREFIX

Method Summary

Modifier and Type	Method and Description
AcceptInvitationResult	acceptInvitation(AcceptInvitationRequest request) Accepts the invitation to be monitored by a GuardDuty administrator account.
ArchiveFindingsResult	archiveFindings(ArchiveFindingsRequest request) Archives GuardDuty findings that are specified by the list of finding IDs.
static AmazonGuardDutyClientBuilder	builder()
CreateDetectorResult	createDetector(CreateDetectorRequest request) Creates a single Amazon GuardDuty detector.
CreateFilterResult	createFilter(CreateFilterRequest request) Creates a filter using the specified finding criteria.
CreateIPSetResult	createIPSet(CreateIPSetRequest request) Creates a new IPSet, which is called a trusted IP list in the console user interface.
CreateMembersResult	createMembers(CreateMembersRequest request) Creates member accounts of the current AWS account by specifying a list of AWS account IDs.
CreatePublishingDestinationResult	createPublishingDestination(CreatePublishingDestinationRequest request) Creates a publishing destination to export findings to.
CreateSampleFindingsResult	createSampleFindings(CreateSampleFindingsRequest request) Generates example findings of types specified by the list of finding types.
CreateThreatIntelSetResult	createThreatIntelSet(CreateThreatIntelSetRequest request) Creates a new ThreatIntelSet.
DeclineInvitationsResult	declineInvitations(DeclineInvitationsRequest request) Declines invitations sent to the current member account by AWS accounts specified by their account IDs.
DeleteDetectorResult	deleteDetector(DeleteDetectorRequest request) Deletes an Amazon GuardDuty detector that is specified by the detector ID.
DeleteFilterResult	deleteFilter(DeleteFilterRequest request) Deletes the filter specified by the filter name.
DeleteInvitationsResult	deleteInvitations(DeleteInvitationsRequest request) Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
DeleteIPSetResult	deleteIPSet(DeleteIPSetRequest request) Deletes the IPSet specified by the ipSetId.
DeleteMembersResult	deleteMembers(DeleteMembersRequest request) Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
DeletePublishingDestinationResult	deletePublishingDestination(DeletePublishingDestinationRequest request) Deletes the publishing definition with the specified destinationId.
DeleteThreatIntelSetResult	deleteThreatIntelSet(DeleteThreatIntelSetRequest request) Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.
DescribeOrganizationConfigurationResult	describeOrganizationConfiguration(DescribeOrganizationConfigurationRequest request) Returns information about the account selected as the delegated administrator for GuardDuty.
DescribePublishingDestinationResult	describePublishingDestination(DescribePublishingDestinationRequest request) Returns information about the publishing destination specified by the provided destinationId.
DisableOrganizationAdminAccountResult	disableOrganizationAdminAccount(DisableOrganizationAdminAccountRequest request) Disables an AWS account within the Organization as the GuardDuty delegated administrator.
DisassociateFromMasterAccountResult	disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request) Disassociates the current GuardDuty member account from its administrator account.
DisassociateMembersResult	disassociateMembers(DisassociateMembersRequest request) Disassociates GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
EnableOrganizationAdminAccountResult	enableOrganizationAdminAccount(EnableOrganizationAdminAccountRequest request) Enables an AWS account within the organization as the GuardDuty delegated administrator.
ResponseMetadata	getCachedResponseMetadata(AmazonWebServiceRequest request) Returns additional metadata for a previously executed successful, request, typically used for debugging issues where a service isn't acting as expected.
GetDetectorResult	getDetector(GetDetectorRequest request) Retrieves an Amazon GuardDuty detector specified by the detectorId.
GetFilterResult	getFilter(GetFilterRequest request) Returns the details of the filter specified by the filter name.
GetFindingsResult	getFindings(GetFindingsRequest request) Describes Amazon GuardDuty findings specified by finding IDs.
GetFindingsStatisticsResult	getFindingsStatistics(GetFindingsStatisticsRequest request) Lists Amazon GuardDuty findings statistics for the specified detector ID.
GetInvitationsCountResult	getInvitationsCount(GetInvitationsCountRequest request) Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
GetIPSetResult	getIPSet(GetIPSetRequest request) Retrieves the IPSet specified by the ipSetId.
GetMasterAccountResult	getMasterAccount(GetMasterAccountRequest request) Provides the details for the GuardDuty administrator account associated with the current GuardDuty member account.
GetMemberDetectorsResult	getMemberDetectors(GetMemberDetectorsRequest request) Describes which data sources are enabled for the member account's detector.
GetMembersResult	getMembers(GetMembersRequest request) Retrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the account IDs.
GetThreatIntelSetResult	getThreatIntelSet(GetThreatIntelSetRequest request) Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
GetUsageStatisticsResult	getUsageStatistics(GetUsageStatisticsRequest request) Lists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID.
InviteMembersResult	inviteMembers(InviteMembersRequest request) Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty, and allow the current AWS account to view and manage these accounts' findings on their behalf as the GuardDuty administrator account.
ListDetectorsResult	listDetectors(ListDetectorsRequest request) Lists detectorIds of all the existing Amazon GuardDuty detector resources.
ListFiltersResult	listFilters(ListFiltersRequest request) Returns a paginated list of the current filters.
ListFindingsResult	listFindings(ListFindingsRequest request) Lists Amazon GuardDuty findings for the specified detector ID.
ListInvitationsResult	listInvitations(ListInvitationsRequest request) Lists all GuardDuty membership invitations that were sent to the current AWS account.
ListIPSetsResult	listIPSets(ListIPSetsRequest request) Lists the IPSets of the GuardDuty service specified by the detector ID.
ListMembersResult	listMembers(ListMembersRequest request) Lists details about all member accounts for the current GuardDuty administrator account.
ListOrganizationAdminAccountsResult	listOrganizationAdminAccounts(ListOrganizationAdminAccountsRequest request) Lists the accounts configured as GuardDuty delegated administrators.
ListPublishingDestinationsResult	listPublishingDestinations(ListPublishingDestinationsRequest request) Returns a list of publishing destinations associated with the specified dectectorId.
ListTagsForResourceResult	listTagsForResource(ListTagsForResourceRequest request) Lists tags for a resource.
ListThreatIntelSetsResult	listThreatIntelSets(ListThreatIntelSetsRequest request) Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID.
void	shutdown() Shuts down this client object, releasing any resources that might be held open.
StartMonitoringMembersResult	startMonitoringMembers(StartMonitoringMembersRequest request) Turns on GuardDuty monitoring of the specified member accounts.
StopMonitoringMembersResult	stopMonitoringMembers(StopMonitoringMembersRequest request) Stops GuardDuty monitoring for the specified member accounts.
TagResourceResult	tagResource(TagResourceRequest request) Adds tags to a resource.
UnarchiveFindingsResult	unarchiveFindings(UnarchiveFindingsRequest request) Unarchives GuardDuty findings specified by the findingIds.
UntagResourceResult	untagResource(UntagResourceRequest request) Removes tags from a resource.
UpdateDetectorResult	updateDetector(UpdateDetectorRequest request) Updates the Amazon GuardDuty detector specified by the detectorId.
UpdateFilterResult	updateFilter(UpdateFilterRequest request) Updates the filter specified by the filter name.
UpdateFindingsFeedbackResult	updateFindingsFeedback(UpdateFindingsFeedbackRequest request) Marks the specified GuardDuty findings as useful or not useful.
UpdateIPSetResult	updateIPSet(UpdateIPSetRequest request) Updates the IPSet specified by the IPSet ID.
UpdateMemberDetectorsResult	updateMemberDetectors(UpdateMemberDetectorsRequest request) Contains information on member accounts to be updated.
UpdateOrganizationConfigurationResult	updateOrganizationConfiguration(UpdateOrganizationConfigurationRequest request) Updates the delegated administrator account with the values provided.
UpdatePublishingDestinationResult	updatePublishingDestination(UpdatePublishingDestinationRequest request) Updates information about the publishing destination specified by the destinationId.
UpdateThreatIntelSetResult	updateThreatIntelSet(UpdateThreatIntelSetRequest request) Updates the ThreatIntelSet specified by the ThreatIntelSet ID.

Methods inherited from class com.amazonaws.AmazonWebServiceClient

addRequestHandler, addRequestHandler, configureRegion, getClientConfiguration, getEndpointPrefix, getMonitoringListeners, getRequestMetricsCollector, getServiceName, getSignerByURI, getSignerOverride, getSignerRegionOverride, getTimeOffset, makeImmutable, removeRequestHandler, removeRequestHandler, setEndpoint, setEndpoint, setRegion, setServiceNameIntern, setSignerRegionOverride, setTimeOffset, withEndpoint, withRegion, withRegion, withTimeOffset

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

builder

public static AmazonGuardDutyClientBuilder builder()

acceptInvitation

public AcceptInvitationResult acceptInvitation(AcceptInvitationRequest request)

Accepts the invitation to be monitored by a GuardDuty administrator account.

Specified by:

acceptInvitation in interface AmazonGuardDuty

Parameters:

acceptInvitationRequest -

Returns:

Result of the AcceptInvitation operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

archiveFindings

public ArchiveFindingsResult archiveFindings(ArchiveFindingsRequest request)

Archives GuardDuty findings that are specified by the list of finding IDs.

Only the administrator account can archive findings. Member accounts don't have permission to archive findings from their accounts.

Specified by:

archiveFindings in interface AmazonGuardDuty

Parameters:

archiveFindingsRequest -

Returns:

Result of the ArchiveFindings operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

createDetector

public CreateDetectorResult createDetector(CreateDetectorRequest request)

Creates a single Amazon GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each Region where you enable the service. You can have only one detector per account per Region. All data sources are enabled in a new detector by default.

Specified by:

createDetector in interface AmazonGuardDuty

Parameters:

createDetectorRequest -

Returns:

Result of the CreateDetector operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

createFilter

public CreateFilterResult createFilter(CreateFilterRequest request)

Creates a filter using the specified finding criteria.

Specified by:

createFilter in interface AmazonGuardDuty

Parameters:

createFilterRequest -

Returns:

Result of the CreateFilter operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

createIPSet

public CreateIPSetResult createIPSet(CreateIPSetRequest request)

Creates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of IP addresses that are trusted for secure communication with AWS infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are included in IPSets. Only users from the administrator account can use this operation.

Specified by:

createIPSet in interface AmazonGuardDuty

Parameters:

createIPSetRequest -

Returns:

Result of the CreateIPSet operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

createMembers

public CreateMembersResult createMembers(CreateMembersRequest request)

Creates member accounts of the current AWS account by specifying a list of AWS account IDs. This step is a prerequisite for managing the associated member accounts either by invitation or through an organization.

When using Create Members as an organizations delegated administrator this action will enable GuardDuty in the added member accounts, with the exception of the organization delegated administrator account, which must enable GuardDuty prior to being added as a member.

If you are adding accounts by invitation use this action after GuardDuty has been enabled in potential member accounts and before using Invite Members .

Specified by:

createMembers in interface AmazonGuardDuty

Parameters:

createMembersRequest -

Returns:

Result of the CreateMembers operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

createPublishingDestination

public CreatePublishingDestinationResult createPublishingDestination(CreatePublishingDestinationRequest request)

Creates a publishing destination to export findings to. The resource to export findings to must exist before you use this operation.

Specified by:

createPublishingDestination in interface AmazonGuardDuty

Parameters:

createPublishingDestinationRequest -

Returns:

Result of the CreatePublishingDestination operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

createSampleFindings

public CreateSampleFindingsResult createSampleFindings(CreateSampleFindingsRequest request)

Generates example findings of types specified by the list of finding types. If 'NULL' is specified for findingTypes, the API generates example findings of all supported finding types.

Specified by:

createSampleFindings in interface AmazonGuardDuty

Parameters:

createSampleFindingsRequest -

Returns:

Result of the CreateSampleFindings operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

createThreatIntelSet

public CreateThreatIntelSetResult createThreatIntelSet(CreateThreatIntelSetRequest request)

Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can use this operation.

Specified by:

createThreatIntelSet in interface AmazonGuardDuty

Parameters:

createThreatIntelSetRequest -

Returns:

Result of the CreateThreatIntelSet operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

declineInvitations

public DeclineInvitationsResult declineInvitations(DeclineInvitationsRequest request)

Declines invitations sent to the current member account by AWS accounts specified by their account IDs.

Specified by:

declineInvitations in interface AmazonGuardDuty

Parameters:

declineInvitationsRequest -

Returns:

Result of the DeclineInvitations operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

deleteDetector

public DeleteDetectorResult deleteDetector(DeleteDetectorRequest request)

Deletes an Amazon GuardDuty detector that is specified by the detector ID.

Specified by:

deleteDetector in interface AmazonGuardDuty

Parameters:

deleteDetectorRequest -

Returns:

Result of the DeleteDetector operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

deleteFilter

public DeleteFilterResult deleteFilter(DeleteFilterRequest request)

Deletes the filter specified by the filter name.

Specified by:

deleteFilter in interface AmazonGuardDuty

Parameters:

deleteFilterRequest -

Returns:

Result of the DeleteFilter operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

deleteIPSet

public DeleteIPSetResult deleteIPSet(DeleteIPSetRequest request)

Deletes the IPSet specified by the ipSetId. IPSets are called trusted IP lists in the console user interface.

Specified by:

deleteIPSet in interface AmazonGuardDuty

Parameters:

deleteIPSetRequest -

Returns:

Result of the DeleteIPSet operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

deleteInvitations

public DeleteInvitationsResult deleteInvitations(DeleteInvitationsRequest request)

Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.

Specified by:

deleteInvitations in interface AmazonGuardDuty

Parameters:

deleteInvitationsRequest -

Returns:

Result of the DeleteInvitations operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

deleteMembers

public DeleteMembersResult deleteMembers(DeleteMembersRequest request)

Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.

Specified by:

deleteMembers in interface AmazonGuardDuty

Parameters:

deleteMembersRequest -

Returns:

Result of the DeleteMembers operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

deletePublishingDestination

public DeletePublishingDestinationResult deletePublishingDestination(DeletePublishingDestinationRequest request)

Deletes the publishing definition with the specified destinationId.

Specified by:

deletePublishingDestination in interface AmazonGuardDuty

Parameters:

deletePublishingDestinationRequest -

Returns:

Result of the DeletePublishingDestination operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

deleteThreatIntelSet

public DeleteThreatIntelSetResult deleteThreatIntelSet(DeleteThreatIntelSetRequest request)

Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.

Specified by:

deleteThreatIntelSet in interface AmazonGuardDuty

Parameters:

deleteThreatIntelSetRequest -

Returns:

Result of the DeleteThreatIntelSet operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

describeOrganizationConfiguration

public DescribeOrganizationConfigurationResult describeOrganizationConfiguration(DescribeOrganizationConfigurationRequest request)

Returns information about the account selected as the delegated administrator for GuardDuty.

Specified by:

describeOrganizationConfiguration in interface AmazonGuardDuty

Parameters:

describeOrganizationConfigurationRequest -

Returns:

Result of the DescribeOrganizationConfiguration operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

describePublishingDestination

public DescribePublishingDestinationResult describePublishingDestination(DescribePublishingDestinationRequest request)

Returns information about the publishing destination specified by the provided destinationId.

Specified by:

describePublishingDestination in interface AmazonGuardDuty

Parameters:

describePublishingDestinationRequest -

Returns:

Result of the DescribePublishingDestination operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

disableOrganizationAdminAccount

public DisableOrganizationAdminAccountResult disableOrganizationAdminAccount(DisableOrganizationAdminAccountRequest request)

Disables an AWS account within the Organization as the GuardDuty delegated administrator.

Specified by:

disableOrganizationAdminAccount in interface AmazonGuardDuty

Parameters:

disableOrganizationAdminAccountRequest -

Returns:

Result of the DisableOrganizationAdminAccount operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

disassociateFromMasterAccount

public DisassociateFromMasterAccountResult disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)

Disassociates the current GuardDuty member account from its administrator account.

Specified by:

disassociateFromMasterAccount in interface AmazonGuardDuty

Parameters:

disassociateFromMasterAccountRequest -

Returns:

Result of the DisassociateFromMasterAccount operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

disassociateMembers

public DisassociateMembersResult disassociateMembers(DisassociateMembersRequest request)

Disassociates GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.

Specified by:

disassociateMembers in interface AmazonGuardDuty

Parameters:

disassociateMembersRequest -

Returns:

Result of the DisassociateMembers operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

enableOrganizationAdminAccount

public EnableOrganizationAdminAccountResult enableOrganizationAdminAccount(EnableOrganizationAdminAccountRequest request)

Enables an AWS account within the organization as the GuardDuty delegated administrator.

Specified by:

enableOrganizationAdminAccount in interface AmazonGuardDuty

Parameters:

enableOrganizationAdminAccountRequest -

Returns:

Result of the EnableOrganizationAdminAccount operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getDetector

public GetDetectorResult getDetector(GetDetectorRequest request)

Retrieves an Amazon GuardDuty detector specified by the detectorId.

Specified by:

getDetector in interface AmazonGuardDuty

Parameters:

getDetectorRequest -

Returns:

Result of the GetDetector operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getFilter

public GetFilterResult getFilter(GetFilterRequest request)

Returns the details of the filter specified by the filter name.

Specified by:

getFilter in interface AmazonGuardDuty

Parameters:

getFilterRequest -

Returns:

Result of the GetFilter operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getFindings

public GetFindingsResult getFindings(GetFindingsRequest request)

Describes Amazon GuardDuty findings specified by finding IDs.

Specified by:

getFindings in interface AmazonGuardDuty

Parameters:

getFindingsRequest -

Returns:

Result of the GetFindings operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getFindingsStatistics

public GetFindingsStatisticsResult getFindingsStatistics(GetFindingsStatisticsRequest request)

Lists Amazon GuardDuty findings statistics for the specified detector ID.

Specified by:

getFindingsStatistics in interface AmazonGuardDuty

Parameters:

getFindingsStatisticsRequest -

Returns:

Result of the GetFindingsStatistics operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getIPSet

public GetIPSetResult getIPSet(GetIPSetRequest request)

Retrieves the IPSet specified by the ipSetId.

Specified by:

getIPSet in interface AmazonGuardDuty

Parameters:

getIPSetRequest -

Returns:

Result of the GetIPSet operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getInvitationsCount

public GetInvitationsCountResult getInvitationsCount(GetInvitationsCountRequest request)

Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.

Specified by:

getInvitationsCount in interface AmazonGuardDuty

Parameters:

getInvitationsCountRequest -

Returns:

Result of the GetInvitationsCount operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getMasterAccount

public GetMasterAccountResult getMasterAccount(GetMasterAccountRequest request)

Provides the details for the GuardDuty administrator account associated with the current GuardDuty member account.

Specified by:

getMasterAccount in interface AmazonGuardDuty

Parameters:

getMasterAccountRequest -

Returns:

Result of the GetMasterAccount operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getMemberDetectors

public GetMemberDetectorsResult getMemberDetectors(GetMemberDetectorsRequest request)

Describes which data sources are enabled for the member account's detector.

Specified by:

getMemberDetectors in interface AmazonGuardDuty

Parameters:

getMemberDetectorsRequest -

Returns:

Result of the GetMemberDetectors operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getMembers

public GetMembersResult getMembers(GetMembersRequest request)

Retrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the account IDs.

Specified by:

getMembers in interface AmazonGuardDuty

Parameters:

getMembersRequest -

Returns:

Result of the GetMembers operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getThreatIntelSet

public GetThreatIntelSetResult getThreatIntelSet(GetThreatIntelSetRequest request)

Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.

Specified by:

getThreatIntelSet in interface AmazonGuardDuty

Parameters:

getThreatIntelSetRequest -

Returns:

Result of the GetThreatIntelSet operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getUsageStatistics

public GetUsageStatisticsResult getUsageStatistics(GetUsageStatisticsRequest request)

Lists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID. For newly enabled detectors or data sources the cost returned will include only the usage so far under 30 days, this may differ from the cost metrics in the console, which projects usage over 30 days to provide a monthly cost estimate. For more information see Understanding How Usage Costs are Calculated.

Specified by:

getUsageStatistics in interface AmazonGuardDuty

Parameters:

getUsageStatisticsRequest -

Returns:

Result of the GetUsageStatistics operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

inviteMembers

public InviteMembersResult inviteMembers(InviteMembersRequest request)

Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty, and allow the current AWS account to view and manage these accounts' findings on their behalf as the GuardDuty administrator account.

Specified by:

inviteMembers in interface AmazonGuardDuty

Parameters:

inviteMembersRequest -

Returns:

Result of the InviteMembers operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listDetectors

public ListDetectorsResult listDetectors(ListDetectorsRequest request)

Lists detectorIds of all the existing Amazon GuardDuty detector resources.

Specified by:

listDetectors in interface AmazonGuardDuty

Parameters:

listDetectorsRequest -

Returns:

Result of the ListDetectors operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listFilters

public ListFiltersResult listFilters(ListFiltersRequest request)

Returns a paginated list of the current filters.

Specified by:

listFilters in interface AmazonGuardDuty

Parameters:

listFiltersRequest -

Returns:

Result of the ListFilters operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listFindings

public ListFindingsResult listFindings(ListFindingsRequest request)

Lists Amazon GuardDuty findings for the specified detector ID.

Specified by:

listFindings in interface AmazonGuardDuty

Parameters:

listFindingsRequest -

Returns:

Result of the ListFindings operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listIPSets

public ListIPSetsResult listIPSets(ListIPSetsRequest request)

Lists the IPSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the IPSets returned are the IPSets from the associated administrator account.

Specified by:

listIPSets in interface AmazonGuardDuty

Parameters:

listIPSetsRequest -

Returns:

Result of the ListIPSets operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listInvitations

public ListInvitationsResult listInvitations(ListInvitationsRequest request)

Lists all GuardDuty membership invitations that were sent to the current AWS account.

Specified by:

listInvitations in interface AmazonGuardDuty

Parameters:

listInvitationsRequest -

Returns:

Result of the ListInvitations operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listMembers

public ListMembersResult listMembers(ListMembersRequest request)

Lists details about all member accounts for the current GuardDuty administrator account.

Specified by:

listMembers in interface AmazonGuardDuty

Parameters:

listMembersRequest -

Returns:

Result of the ListMembers operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listOrganizationAdminAccounts

public ListOrganizationAdminAccountsResult listOrganizationAdminAccounts(ListOrganizationAdminAccountsRequest request)

Lists the accounts configured as GuardDuty delegated administrators.

Specified by:

listOrganizationAdminAccounts in interface AmazonGuardDuty

Parameters:

listOrganizationAdminAccountsRequest -

Returns:

Result of the ListOrganizationAdminAccounts operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listPublishingDestinations

public ListPublishingDestinationsResult listPublishingDestinations(ListPublishingDestinationsRequest request)

Returns a list of publishing destinations associated with the specified dectectorId.

Specified by:

listPublishingDestinations in interface AmazonGuardDuty

Parameters:

listPublishingDestinationsRequest -

Returns:

Result of the ListPublishingDestinations operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listTagsForResource

public ListTagsForResourceResult listTagsForResource(ListTagsForResourceRequest request)

Lists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, and threat intel sets, with a limit of 50 tags per resource. When invoked, this operation returns all assigned tags for a given resource.

Specified by:

listTagsForResource in interface AmazonGuardDuty

Parameters:

listTagsForResourceRequest -

Returns:

Result of the ListTagsForResource operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

listThreatIntelSets

public ListThreatIntelSetsResult listThreatIntelSets(ListThreatIntelSetsRequest request)

Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the ThreatIntelSets associated with the administrator account are returned.

Specified by:

listThreatIntelSets in interface AmazonGuardDuty

Parameters:

listThreatIntelSetsRequest -

Returns:

Result of the ListThreatIntelSets operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

startMonitoringMembers

public StartMonitoringMembersResult startMonitoringMembers(StartMonitoringMembersRequest request)

Turns on GuardDuty monitoring of the specified member accounts. Use this operation to restart monitoring of accounts that you stopped monitoring with the StopMonitoringMembers operation.

Specified by:

startMonitoringMembers in interface AmazonGuardDuty

Parameters:

startMonitoringMembersRequest -

Returns:

Result of the StartMonitoringMembers operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

stopMonitoringMembers

public StopMonitoringMembersResult stopMonitoringMembers(StopMonitoringMembersRequest request)

Stops GuardDuty monitoring for the specified member accounts. Use the StartMonitoringMembers operation to restart monitoring for those accounts.

Specified by:

stopMonitoringMembers in interface AmazonGuardDuty

Parameters:

stopMonitoringMembersRequest -

Returns:

Result of the StopMonitoringMembers operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

tagResource

public TagResourceResult tagResource(TagResourceRequest request)

Adds tags to a resource.

Specified by:

tagResource in interface AmazonGuardDuty

Parameters:

tagResourceRequest -

Returns:

Result of the TagResource operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

unarchiveFindings

public UnarchiveFindingsResult unarchiveFindings(UnarchiveFindingsRequest request)

Unarchives GuardDuty findings specified by the findingIds.

Specified by:

unarchiveFindings in interface AmazonGuardDuty

Parameters:

unarchiveFindingsRequest -

Returns:

Result of the UnarchiveFindings operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

untagResource

public UntagResourceResult untagResource(UntagResourceRequest request)

Removes tags from a resource.

Specified by:

untagResource in interface AmazonGuardDuty

Parameters:

untagResourceRequest -

Returns:

Result of the UntagResource operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

updateDetector

public UpdateDetectorResult updateDetector(UpdateDetectorRequest request)

Updates the Amazon GuardDuty detector specified by the detectorId.

Specified by:

updateDetector in interface AmazonGuardDuty

Parameters:

updateDetectorRequest -

Returns:

Result of the UpdateDetector operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

updateFilter

public UpdateFilterResult updateFilter(UpdateFilterRequest request)

Updates the filter specified by the filter name.

Specified by:

updateFilter in interface AmazonGuardDuty

Parameters:

updateFilterRequest -

Returns:

Result of the UpdateFilter operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

updateFindingsFeedback

public UpdateFindingsFeedbackResult updateFindingsFeedback(UpdateFindingsFeedbackRequest request)

Marks the specified GuardDuty findings as useful or not useful.

Specified by:

updateFindingsFeedback in interface AmazonGuardDuty

Parameters:

updateFindingsFeedbackRequest -

Returns:

Result of the UpdateFindingsFeedback operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

updateIPSet

public UpdateIPSetResult updateIPSet(UpdateIPSetRequest request)

Updates the IPSet specified by the IPSet ID.

Specified by:

updateIPSet in interface AmazonGuardDuty

Parameters:

updateIPSetRequest -

Returns:

Result of the UpdateIPSet operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

updateMemberDetectors

public UpdateMemberDetectorsResult updateMemberDetectors(UpdateMemberDetectorsRequest request)

Contains information on member accounts to be updated.

Specified by:

updateMemberDetectors in interface AmazonGuardDuty

Parameters:

updateMemberDetectorsRequest -

Returns:

Result of the UpdateMemberDetectors operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

updateOrganizationConfiguration

public UpdateOrganizationConfigurationResult updateOrganizationConfiguration(UpdateOrganizationConfigurationRequest request)

Updates the delegated administrator account with the values provided.

Specified by:

updateOrganizationConfiguration in interface AmazonGuardDuty

Parameters:

updateOrganizationConfigurationRequest -

Returns:

Result of the UpdateOrganizationConfiguration operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

updatePublishingDestination

public UpdatePublishingDestinationResult updatePublishingDestination(UpdatePublishingDestinationRequest request)

Updates information about the publishing destination specified by the destinationId.

Specified by:

updatePublishingDestination in interface AmazonGuardDuty

Parameters:

updatePublishingDestinationRequest -

Returns:

Result of the UpdatePublishingDestination operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

updateThreatIntelSet

public UpdateThreatIntelSetResult updateThreatIntelSet(UpdateThreatIntelSetRequest request)

Updates the ThreatIntelSet specified by the ThreatIntelSet ID.

Specified by:

updateThreatIntelSet in interface AmazonGuardDuty

Parameters:

updateThreatIntelSetRequest -

Returns:

Result of the UpdateThreatIntelSet operation returned by the service.

Throws:

BadRequestException - A bad request exception object.

InternalServerErrorException - An internal server error exception object.

See Also:

AWS API Documentation

getCachedResponseMetadata

public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)

Returns additional metadata for a previously executed successful, request, typically used for debugging issues where a service isn't acting as expected. This data isn't considered part of the result data returned by an operation, so it's available through this separate, diagnostic interface.

Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing the request.

Specified by:

getCachedResponseMetadata in interface AmazonGuardDuty

Parameters:

request - The originally executed request

Returns:

The response metadata for the specified request, or null if none is available.

shutdown

public void shutdown()

Description copied from class: AmazonWebServiceClient

Shuts down this client object, releasing any resources that might be held open. If this method is not invoked, resources may be leaked. Once a client has been shutdown, it should not be used to make any more requests.

Specified by:

shutdown in interface AmazonGuardDuty

Overrides:

shutdown in class AmazonWebServiceClient