@ThreadSafe @Generated(value="com.amazonaws:aws-java-sdk-code-generator") public class AmazonGuardDutyClient extends AmazonWebServiceClient implements AmazonGuardDuty
Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC Flow Logs, AWS CloudTrail event logs, and DNS logs. It uses threat intelligence feeds, such as lists of malicious IPs and domains, and machine learning to identify unexpected and potentially unauthorized and malicious activity within your AWS environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, URLs, or domains. For example, GuardDuty can detect compromised EC2 instances serving malware or mining bitcoin. It also monitors AWS account access behavior for signs of compromise, such as unauthorized infrastructure deployments, like instances deployed in a region that has never been used, or unusual API calls, like a password policy change to reduce password strength. GuardDuty informs you of the status of your AWS environment by producing security findings that you can view in the GuardDuty console or through Amazon CloudWatch events. For more information, see Amazon GuardDuty User Guide.
| Modifier and Type | Field and Description |
|---|---|
protected static ClientConfigurationFactory |
configFactory
Client configuration factory providing ClientConfigurations tailored to this client
|
client, clientConfiguration, endpoint, isEndpointOverridden, LOGGING_AWS_REQUEST_METRIC, requestHandler2s, timeOffsetENDPOINT_PREFIX| Modifier and Type | Method and Description |
|---|---|
AcceptInvitationResult |
acceptInvitation(AcceptInvitationRequest request)
Accepts the invitation to be monitored by a master GuardDuty account.
|
ArchiveFindingsResult |
archiveFindings(ArchiveFindingsRequest request)
Archives GuardDuty findings specified by the list of finding IDs.
|
static AmazonGuardDutyClientBuilder |
builder() |
CreateDetectorResult |
createDetector(CreateDetectorRequest request)
Creates a single Amazon GuardDuty detector.
|
CreateFilterResult |
createFilter(CreateFilterRequest request)
Creates a filter using the specified finding criteria.
|
CreateIPSetResult |
createIPSet(CreateIPSetRequest request)
Creates a new IPSet - a list of trusted IP addresses that have been whitelisted for secure communication with AWS
infrastructure and applications.
|
CreateMembersResult |
createMembers(CreateMembersRequest request)
Creates member accounts of the current AWS account by specifying a list of AWS account IDs.
|
CreateSampleFindingsResult |
createSampleFindings(CreateSampleFindingsRequest request)
Generates example findings of types specified by the list of finding types.
|
CreateThreatIntelSetResult |
createThreatIntelSet(CreateThreatIntelSetRequest request)
Create a new ThreatIntelSet.
|
DeclineInvitationsResult |
declineInvitations(DeclineInvitationsRequest request)
Declines invitations sent to the current member account by AWS account specified by their account IDs.
|
DeleteDetectorResult |
deleteDetector(DeleteDetectorRequest request)
Deletes a Amazon GuardDuty detector specified by the detector ID.
|
DeleteFilterResult |
deleteFilter(DeleteFilterRequest request)
Deletes the filter specified by the filter name.
|
DeleteInvitationsResult |
deleteInvitations(DeleteInvitationsRequest request)
Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
|
DeleteIPSetResult |
deleteIPSet(DeleteIPSetRequest request)
Deletes the IPSet specified by the IPSet ID.
|
DeleteMembersResult |
deleteMembers(DeleteMembersRequest request)
Deletes GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
|
DeleteThreatIntelSetResult |
deleteThreatIntelSet(DeleteThreatIntelSetRequest request)
Deletes ThreatIntelSet specified by the ThreatIntelSet ID.
|
DisassociateFromMasterAccountResult |
disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
Disassociates the current GuardDuty member account from its master account.
|
DisassociateMembersResult |
disassociateMembers(DisassociateMembersRequest request)
Disassociates GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
|
ResponseMetadata |
getCachedResponseMetadata(AmazonWebServiceRequest request)
Returns additional metadata for a previously executed successful, request, typically used for debugging issues
where a service isn't acting as expected.
|
GetDetectorResult |
getDetector(GetDetectorRequest request)
Retrieves an Amazon GuardDuty detector specified by the detectorId.
|
GetFilterResult |
getFilter(GetFilterRequest request)
Returns the details of the filter specified by the filter name.
|
GetFindingsResult |
getFindings(GetFindingsRequest request)
Describes Amazon GuardDuty findings specified by finding IDs.
|
GetFindingsStatisticsResult |
getFindingsStatistics(GetFindingsStatisticsRequest request)
Lists Amazon GuardDuty findings' statistics for the specified detector ID.
|
GetInvitationsCountResult |
getInvitationsCount(GetInvitationsCountRequest request)
Returns the count of all GuardDuty membership invitations that were sent to the current member account except the
currently accepted invitation.
|
GetIPSetResult |
getIPSet(GetIPSetRequest request)
Retrieves the IPSet specified by the IPSet ID.
|
GetMasterAccountResult |
getMasterAccount(GetMasterAccountRequest request)
Provides the details for the GuardDuty master account associated with the current GuardDuty member account.
|
GetMembersResult |
getMembers(GetMembersRequest request)
Retrieves GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
|
GetThreatIntelSetResult |
getThreatIntelSet(GetThreatIntelSetRequest request)
Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
|
InviteMembersResult |
inviteMembers(InviteMembersRequest request)
Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty
and allow the current AWS account to view and manage these accounts' GuardDuty findings on their behalf as the
master account.
|
ListDetectorsResult |
listDetectors(ListDetectorsRequest request)
Lists detectorIds of all the existing Amazon GuardDuty detector resources.
|
ListFiltersResult |
listFilters(ListFiltersRequest request)
Returns a paginated list of the current filters.
|
ListFindingsResult |
listFindings(ListFindingsRequest request)
Lists Amazon GuardDuty findings for the specified detector ID.
|
ListInvitationsResult |
listInvitations(ListInvitationsRequest request)
Lists all GuardDuty membership invitations that were sent to the current AWS account.
|
ListIPSetsResult |
listIPSets(ListIPSetsRequest request)
Lists the IPSets of the GuardDuty service specified by the detector ID.
|
ListMembersResult |
listMembers(ListMembersRequest request)
Lists details about all member accounts for the current GuardDuty master account.
|
ListTagsForResourceResult |
listTagsForResource(ListTagsForResourceRequest request)
Lists tags for a resource.
|
ListThreatIntelSetsResult |
listThreatIntelSets(ListThreatIntelSetsRequest request)
Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID.
|
StartMonitoringMembersResult |
startMonitoringMembers(StartMonitoringMembersRequest request)
Re-enables GuardDuty to monitor findings of the member accounts specified by the account IDs.
|
StopMonitoringMembersResult |
stopMonitoringMembers(StopMonitoringMembersRequest request)
Disables GuardDuty from monitoring findings of the member accounts specified by the account IDs.
|
TagResourceResult |
tagResource(TagResourceRequest request)
Adds tags to a resource.
|
UnarchiveFindingsResult |
unarchiveFindings(UnarchiveFindingsRequest request)
Unarchives Amazon GuardDuty findings specified by the list of finding IDs.
|
UntagResourceResult |
untagResource(UntagResourceRequest request)
Removes tags from a resource.
|
UpdateDetectorResult |
updateDetector(UpdateDetectorRequest request)
Updates an Amazon GuardDuty detector specified by the detectorId.
|
UpdateFilterResult |
updateFilter(UpdateFilterRequest request)
Updates the filter specified by the filter name.
|
UpdateFindingsFeedbackResult |
updateFindingsFeedback(UpdateFindingsFeedbackRequest request)
Marks specified Amazon GuardDuty findings as useful or not useful.
|
UpdateIPSetResult |
updateIPSet(UpdateIPSetRequest request)
Updates the IPSet specified by the IPSet ID.
|
UpdateThreatIntelSetResult |
updateThreatIntelSet(UpdateThreatIntelSetRequest request)
Updates the ThreatIntelSet specified by ThreatIntelSet ID.
|
addRequestHandler, addRequestHandler, beforeClientExecution, beforeMarshalling, calculateCRC32FromCompressedData, checkMutability, configureRegion, createExecutionContext, createExecutionContext, createExecutionContext, createSignerProvider, endClientExecution, endClientExecution, getClientConfiguration, getClientId, getEndpointPrefix, getMonitoringListeners, getRequestMetricsCollector, getServiceAbbreviation, getServiceName, getServiceNameIntern, getSigner, getSignerByURI, getSignerOverride, getSignerProvider, getSignerRegionOverride, getSigningRegion, getTimeOffset, isCsmEnabled, isEndpointOverridden, isProfilingEnabled, isRequestMetricsEnabled, makeImmutable, removeRequestHandler, removeRequestHandler, requestMetricCollector, setEndpoint, setEndpoint, setEndpointPrefix, setRegion, setServiceNameIntern, setSignerRegionOverride, setTimeOffset, shouldGenerateClientSideMonitoringEvents, shutdown, useStrictHostNameVerification, withEndpoint, withRegion, withRegion, withTimeOffsetclone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, waitshutdownprotected static final ClientConfigurationFactory configFactory
public static AmazonGuardDutyClientBuilder builder()
public AcceptInvitationResult acceptInvitation(AcceptInvitationRequest request)
Accepts the invitation to be monitored by a master GuardDuty account.
acceptInvitation in interface AmazonGuardDutyacceptInvitationRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ArchiveFindingsResult archiveFindings(ArchiveFindingsRequest request)
Archives GuardDuty findings specified by the list of finding IDs.
Only the master account can archive findings. Member accounts do not have permission to archive findings from their accounts.
archiveFindings in interface AmazonGuardDutyarchiveFindingsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public CreateDetectorResult createDetector(CreateDetectorRequest request)
Creates a single Amazon GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each region that you enable the service. You can have only one detector per account per region.
createDetector in interface AmazonGuardDutycreateDetectorRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public CreateFilterResult createFilter(CreateFilterRequest request)
Creates a filter using the specified finding criteria.
createFilter in interface AmazonGuardDutycreateFilterRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public CreateIPSetResult createIPSet(CreateIPSetRequest request)
Creates a new IPSet - a list of trusted IP addresses that have been whitelisted for secure communication with AWS infrastructure and applications.
createIPSet in interface AmazonGuardDutycreateIPSetRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public CreateMembersResult createMembers(CreateMembersRequest request)
Creates member accounts of the current AWS account by specifying a list of AWS account IDs. The current AWS account can then invite these members to manage GuardDuty in their accounts.
createMembers in interface AmazonGuardDutycreateMembersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public CreateSampleFindingsResult createSampleFindings(CreateSampleFindingsRequest request)
Generates example findings of types specified by the list of finding types. If 'NULL' is specified for findingTypes, the API generates example findings of all supported finding types.
createSampleFindings in interface AmazonGuardDutycreateSampleFindingsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public CreateThreatIntelSetResult createThreatIntelSet(CreateThreatIntelSetRequest request)
Create a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets.
createThreatIntelSet in interface AmazonGuardDutycreateThreatIntelSetRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DeclineInvitationsResult declineInvitations(DeclineInvitationsRequest request)
Declines invitations sent to the current member account by AWS account specified by their account IDs.
declineInvitations in interface AmazonGuardDutydeclineInvitationsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DeleteDetectorResult deleteDetector(DeleteDetectorRequest request)
Deletes a Amazon GuardDuty detector specified by the detector ID.
deleteDetector in interface AmazonGuardDutydeleteDetectorRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DeleteFilterResult deleteFilter(DeleteFilterRequest request)
Deletes the filter specified by the filter name.
deleteFilter in interface AmazonGuardDutydeleteFilterRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DeleteIPSetResult deleteIPSet(DeleteIPSetRequest request)
Deletes the IPSet specified by the IPSet ID.
deleteIPSet in interface AmazonGuardDutydeleteIPSetRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DeleteInvitationsResult deleteInvitations(DeleteInvitationsRequest request)
Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
deleteInvitations in interface AmazonGuardDutydeleteInvitationsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DeleteMembersResult deleteMembers(DeleteMembersRequest request)
Deletes GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
deleteMembers in interface AmazonGuardDutydeleteMembersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DeleteThreatIntelSetResult deleteThreatIntelSet(DeleteThreatIntelSetRequest request)
Deletes ThreatIntelSet specified by the ThreatIntelSet ID.
deleteThreatIntelSet in interface AmazonGuardDutydeleteThreatIntelSetRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DisassociateFromMasterAccountResult disassociateFromMasterAccount(DisassociateFromMasterAccountRequest request)
Disassociates the current GuardDuty member account from its master account.
disassociateFromMasterAccount in interface AmazonGuardDutydisassociateFromMasterAccountRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public DisassociateMembersResult disassociateMembers(DisassociateMembersRequest request)
Disassociates GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
disassociateMembers in interface AmazonGuardDutydisassociateMembersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetDetectorResult getDetector(GetDetectorRequest request)
Retrieves an Amazon GuardDuty detector specified by the detectorId.
getDetector in interface AmazonGuardDutygetDetectorRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetFilterResult getFilter(GetFilterRequest request)
Returns the details of the filter specified by the filter name.
getFilter in interface AmazonGuardDutygetFilterRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetFindingsResult getFindings(GetFindingsRequest request)
Describes Amazon GuardDuty findings specified by finding IDs.
getFindings in interface AmazonGuardDutygetFindingsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetFindingsStatisticsResult getFindingsStatistics(GetFindingsStatisticsRequest request)
Lists Amazon GuardDuty findings' statistics for the specified detector ID.
getFindingsStatistics in interface AmazonGuardDutygetFindingsStatisticsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetIPSetResult getIPSet(GetIPSetRequest request)
Retrieves the IPSet specified by the IPSet ID.
getIPSet in interface AmazonGuardDutygetIPSetRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetInvitationsCountResult getInvitationsCount(GetInvitationsCountRequest request)
Returns the count of all GuardDuty membership invitations that were sent to the current member account except the currently accepted invitation.
getInvitationsCount in interface AmazonGuardDutygetInvitationsCountRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetMasterAccountResult getMasterAccount(GetMasterAccountRequest request)
Provides the details for the GuardDuty master account associated with the current GuardDuty member account.
getMasterAccount in interface AmazonGuardDutygetMasterAccountRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetMembersResult getMembers(GetMembersRequest request)
Retrieves GuardDuty member accounts (to the current GuardDuty master account) specified by the account IDs.
getMembers in interface AmazonGuardDutygetMembersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public GetThreatIntelSetResult getThreatIntelSet(GetThreatIntelSetRequest request)
Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
getThreatIntelSet in interface AmazonGuardDutygetThreatIntelSetRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public InviteMembersResult inviteMembers(InviteMembersRequest request)
Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty and allow the current AWS account to view and manage these accounts' GuardDuty findings on their behalf as the master account.
inviteMembers in interface AmazonGuardDutyinviteMembersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ListDetectorsResult listDetectors(ListDetectorsRequest request)
Lists detectorIds of all the existing Amazon GuardDuty detector resources.
listDetectors in interface AmazonGuardDutylistDetectorsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ListFiltersResult listFilters(ListFiltersRequest request)
Returns a paginated list of the current filters.
listFilters in interface AmazonGuardDutylistFiltersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ListFindingsResult listFindings(ListFindingsRequest request)
Lists Amazon GuardDuty findings for the specified detector ID.
listFindings in interface AmazonGuardDutylistFindingsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ListIPSetsResult listIPSets(ListIPSetsRequest request)
Lists the IPSets of the GuardDuty service specified by the detector ID.
listIPSets in interface AmazonGuardDutylistIPSetsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ListInvitationsResult listInvitations(ListInvitationsRequest request)
Lists all GuardDuty membership invitations that were sent to the current AWS account.
listInvitations in interface AmazonGuardDutylistInvitationsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ListMembersResult listMembers(ListMembersRequest request)
Lists details about all member accounts for the current GuardDuty master account.
listMembers in interface AmazonGuardDutylistMembersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ListTagsForResourceResult listTagsForResource(ListTagsForResourceRequest request)
Lists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, and Threat Intel sets, with a limit of 50 tags per resource. When invoked, this operation returns all assigned tags for a given resource..
listTagsForResource in interface AmazonGuardDutylistTagsForResourceRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ListThreatIntelSetsResult listThreatIntelSets(ListThreatIntelSetsRequest request)
Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID.
listThreatIntelSets in interface AmazonGuardDutylistThreatIntelSetsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public StartMonitoringMembersResult startMonitoringMembers(StartMonitoringMembersRequest request)
Re-enables GuardDuty to monitor findings of the member accounts specified by the account IDs. A master GuardDuty account can run this command after disabling GuardDuty from monitoring these members' findings by running StopMonitoringMembers.
startMonitoringMembers in interface AmazonGuardDutystartMonitoringMembersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public StopMonitoringMembersResult stopMonitoringMembers(StopMonitoringMembersRequest request)
Disables GuardDuty from monitoring findings of the member accounts specified by the account IDs. After running this command, a master GuardDuty account can run StartMonitoringMembers to re-enable GuardDuty to monitor these members’ findings.
stopMonitoringMembers in interface AmazonGuardDutystopMonitoringMembersRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public TagResourceResult tagResource(TagResourceRequest request)
Adds tags to a resource.
tagResource in interface AmazonGuardDutytagResourceRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public UnarchiveFindingsResult unarchiveFindings(UnarchiveFindingsRequest request)
Unarchives Amazon GuardDuty findings specified by the list of finding IDs.
unarchiveFindings in interface AmazonGuardDutyunarchiveFindingsRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public UntagResourceResult untagResource(UntagResourceRequest request)
Removes tags from a resource.
untagResource in interface AmazonGuardDutyuntagResourceRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public UpdateDetectorResult updateDetector(UpdateDetectorRequest request)
Updates an Amazon GuardDuty detector specified by the detectorId.
updateDetector in interface AmazonGuardDutyupdateDetectorRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public UpdateFilterResult updateFilter(UpdateFilterRequest request)
Updates the filter specified by the filter name.
updateFilter in interface AmazonGuardDutyupdateFilterRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public UpdateFindingsFeedbackResult updateFindingsFeedback(UpdateFindingsFeedbackRequest request)
Marks specified Amazon GuardDuty findings as useful or not useful.
updateFindingsFeedback in interface AmazonGuardDutyupdateFindingsFeedbackRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public UpdateIPSetResult updateIPSet(UpdateIPSetRequest request)
Updates the IPSet specified by the IPSet ID.
updateIPSet in interface AmazonGuardDutyupdateIPSetRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public UpdateThreatIntelSetResult updateThreatIntelSet(UpdateThreatIntelSetRequest request)
Updates the ThreatIntelSet specified by ThreatIntelSet ID.
updateThreatIntelSet in interface AmazonGuardDutyupdateThreatIntelSetRequest - BadRequestException - Bad request exception object.InternalServerErrorException - Internal server error exception object.public ResponseMetadata getCachedResponseMetadata(AmazonWebServiceRequest request)
Response metadata is only cached for a limited period of time, so if you need to access this extra diagnostic information for an executed request, you should use this method to retrieve it as soon as possible after executing the request.
getCachedResponseMetadata in interface AmazonGuardDutyrequest - The originally executed requestCopyright © 2019. All rights reserved.