Amazon GuardDuty Guardduty Trustedentityset API

openapi: 3.2.0
info:
  title: Amazon GuardDuty Trustedentityset API
  version: '2017-11-28'
  description: Generated from AWS's published Smithy model for Amazon GuardDuty. 5 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://guardduty.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
tags:
- name: Trustedentityset
paths:
  /detector/{DetectorId}/trustedentityset:
    post:
      operationId: CreateTrustedEntitySet
      summary: Create Trusted Entity Set
      description: Creates a new trusted entity set. In the trusted entity set, you can provide IP addresses and domains that you believe are secure for communication in your Amazon Web Services environment. GuardDuty will not generate findings for the entries that are specified in a trusted entity set. At any given time, you can have only one trusted entity set. Only users of the administrator account can manage the entity sets, which automatically apply to member accounts.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateTrustedEntitySetResponse'
        '400':
          description: BadRequestException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BadRequestException'
        '500':
          description: InternalServerErrorException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerErrorException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateTrustedEntitySetRequest'
      tags:
      - Trustedentityset
    get:
      operationId: ListTrustedEntitySets
      summary: List Trusted Entity Sets
      description: Lists the trusted entity sets associated with the specified GuardDuty detector ID. If you use this operation from a member account, the trusted entity sets that are returned as a response, belong to the administrator account.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListTrustedEntitySetsResponse'
        '400':
          description: BadRequestException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BadRequestException'
        '500':
          description: InternalServerErrorException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerErrorException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ListTrustedEntitySetsRequest'
      tags:
      - Trustedentityset
  /detector/{DetectorId}/trustedentityset/{TrustedEntitySetId}:
    delete:
      operationId: DeleteTrustedEntitySet
      summary: Delete Trusted Entity Set
      description: Deletes the trusted entity set that is associated with the specified trustedEntitySetId.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DeleteTrustedEntitySetResponse'
        '400':
          description: BadRequestException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BadRequestException'
        '500':
          description: InternalServerErrorException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerErrorException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DeleteTrustedEntitySetRequest'
      tags:
      - Trustedentityset
    get:
      operationId: GetTrustedEntitySet
      summary: Get Trusted Entity Set
      description: Retrieves the trusted entity set associated with the specified trustedEntitySetId.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetTrustedEntitySetResponse'
        '400':
          description: BadRequestException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BadRequestException'
        '500':
          description: InternalServerErrorException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerErrorException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/GetTrustedEntitySetRequest'
      tags:
      - Trustedentityset
    post:
      operationId: UpdateTrustedEntitySet
      summary: Update Trusted Entity Set
      description: Updates the trusted entity set associated with the specified trustedEntitySetId.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UpdateTrustedEntitySetResponse'
        '400':
          description: BadRequestException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/BadRequestException'
        '500':
          description: InternalServerErrorException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/InternalServerErrorException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UpdateTrustedEntitySetRequest'
      tags:
      - Trustedentityset
components:
  schemas:
    GetTrustedEntitySetResponse:
      type: object
      properties:
        Name:
          type: string
          description: The name of the threat entity set associated with the specified trustedEntitySetId.
        Format:
          type: string
          enum:
          - TXT
          - STIX
          - OTX_CSV
          - ALIEN_VAULT
          - PROOF_POINT
          - FIRE_EYE
          description: The format of the file that contains the trusted entity set.
        Location:
          type: string
          description: The URI of the file that contains the trusted entity set.
        ExpectedBucketOwner:
          type: string
          description: The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the location parameter.
        Status:
          type: string
          enum:
          - INACTIVE
          - ACTIVATING
          - ACTIVE
          - DEACTIVATING
          - ERROR
          - DELETE_PENDING
          - DELETED
          description: The status of the associated trusted entity set.
        Tags:
          type: object
          additionalProperties:
            type: string
          description: The tags associated with trusted entity set resource.
        CreatedAt:
          type: string
          format: date-time
          description: The timestamp when the associated trusted entity set was created.
        UpdatedAt:
          type: string
          format: date-time
          description: The timestamp when the associated trusted entity set was updated.
        ErrorDetails:
          type: string
          description: The error details when the status is shown as ERROR.
      required:
      - Name
      - Format
      - Location
      - Status
    InternalServerErrorException:
      type: object
      properties:
        Message:
          type: string
          description: The error message.
        Type:
          type: string
          description: The error type.
    CreateTrustedEntitySetRequest:
      type: object
      properties:
        DetectorId:
          type: string
          description: The unique ID of the detector of the GuardDuty account for which you want to create a trusted entity set. To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.
        Name:
          type: string
          description: A user-friendly name to identify the trusted entity set. The name of your list can include lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).
        Format:
          type: string
          enum:
          - TXT
          - STIX
          - OTX_CSV
          - ALIEN_VAULT
          - PROOF_POINT
          - FIRE_EYE
          description: The format of the file that contains the trusted entity set.
        Location:
          type: string
          description: 'The URI of the file that contains the threat entity set. The format of the Location URL must be a valid Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about format of the location URLs, see Format of location URL under Step 2: Adding trusted or threat intelligence data in the Amazon GuardDuty User Guide.'
        ExpectedBucketOwner:
          type: string
          description: The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the location parameter.
        Activate:
          type: boolean
          description: A boolean value that indicates whether GuardDuty is to start using the uploaded trusted entity set.
        ClientToken:
          type: string
          description: The idempotency token for the create request.
        Tags:
          type: object
          additionalProperties:
            type: string
          description: The tags to be added to a new trusted entity set resource.
      required:
      - DetectorId
      - Name
      - Format
      - Location
      - Activate
    ListTrustedEntitySetsRequest:
      type: object
      properties:
        DetectorId:
          type: string
          description: The unique ID of the GuardDuty detector that is associated with this threat entity set. To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.
        MaxResults:
          type: integer
          description: You can use this parameter to indicate the maximum number of items you want in the response. The default value is 50.
        NextToken:
          type: string
          description: You can use this parameter when paginating results. Set the value of this parameter to null on your first call to the list action. For subsequent calls to the action, fill nextToken in the request with the value of NextToken from the previous response to continue listing data.
      required:
      - DetectorId
    UpdateTrustedEntitySetRequest:
      type: object
      properties:
        DetectorId:
          type: string
          description: The unique ID of the GuardDuty detector associated with the threat entity set that you want to update. To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.
        TrustedEntitySetId:
          type: string
          description: The ID returned by GuardDuty after updating the trusted entity set resource.
        Name:
          type: string
          description: A user-friendly name to identify the trusted entity set. The name of your list can include lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).
        Location:
          type: string
          description: The URI of the file that contains the trusted entity set.
        ExpectedBucketOwner:
          type: string
          description: The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the location parameter.
        Activate:
          type: boolean
          description: A boolean value that indicates whether GuardDuty is to start using this updated trusted entity set. After you update an entity set, you will need to activate it again. It might take up to 15 minutes for the updated entity set to be effective.
      required:
      - DetectorId
      - TrustedEntitySetId
    UpdateTrustedEntitySetResponse:
      type: object
      properties: {}
    CreateTrustedEntitySetResponse:
      type: object
      properties:
        TrustedEntitySetId:
          type: string
          description: The ID returned by GuardDuty after creation of the trusted entity set resource.
      required:
      - TrustedEntitySetId
    DeleteTrustedEntitySetRequest:
      type: object
      properties:
        DetectorId:
          type: string
          description: The unique ID of the detector associated with the trusted entity set resource. To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.
        TrustedEntitySetId:
          type: string
          description: The unique ID that helps GuardDuty identify which trusted entity set needs to be deleted.
      required:
      - DetectorId
      - TrustedEntitySetId
    DeleteTrustedEntitySetResponse:
      type: object
      properties: {}
    BadRequestException:
      type: object
      properties:
        Message:
          type: string
          description: The error message.
        Type:
          type: string
          description: The error type.
    GetTrustedEntitySetRequest:
      type: object
      properties:
        DetectorId:
          type: string
          description: The unique ID of the GuardDuty detector associated with this trusted entity set.
        TrustedEntitySetId:
          type: string
          description: The unique ID that helps GuardDuty identify the trusted entity set.
      required:
      - DetectorId
      - TrustedEntitySetId
    ListTrustedEntitySetsResponse:
      type: object
      properties:
        TrustedEntitySetIds:
          type: array
          items:
            type: string
          description: The IDs of the trusted entity set resources.
        NextToken:
          type: string
          description: The pagination parameter to be used on the next list operation to retrieve more items.
      required:
      - TrustedEntitySetIds
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: guardduty
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/582e55931c45b944739742a2c1620b6026dd2d13/models/guardduty/service/2017-11-28/guardduty-2017-11-28.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)