/* * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. * * Licensed under the Apache License, Version 2.0 (the "License"). * You may not use this file except in compliance with the License. * A copy of the License is located at * * http://aws.amazon.com/apache2.0 * * or in the "license" file accompanying this file. This file is distributed * on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either * express or implied. See the License for the specific language governing * permissions and limitations under the License. */ /* * Do not modify this file. This file is generated from the detective-2018-10-26.normal.json service model. */ using System; using System.Threading; using System.Threading.Tasks; using System.Collections.Generic; using Amazon.Runtime; using Amazon.Detective.Model; namespace Amazon.Detective { /// /// Interface for accessing Detective /// /// Detective uses machine learning and purpose-built visualizations to help you to analyze /// and investigate security issues across your Amazon Web Services (Amazon Web Services) /// workloads. Detective automatically extracts time-based events such as login attempts, /// API calls, and network traffic from CloudTrail and Amazon Virtual Private Cloud (Amazon /// VPC) flow logs. It also extracts findings detected by Amazon GuardDuty. /// /// /// /// The Detective API primarily supports the creation and management of behavior graphs. /// A behavior graph contains the extracted data from a set of member accounts, and is /// created and managed by an administrator account. /// /// /// /// To add a member account to the behavior graph, the administrator account sends an /// invitation to the account. When the account accepts the invitation, it becomes a member /// account in the behavior graph. /// /// /// /// Detective is also integrated with Organizations. The organization management account /// designates the Detective administrator account for the organization. That account /// becomes the administrator account for the organization behavior graph. The Detective /// administrator account is also the delegated administrator account for Detective in /// Organizations. /// /// /// /// The Detective administrator account can enable any organization account as a member /// account in the organization behavior graph. The organization accounts do not receive /// invitations. The Detective administrator account can also invite other accounts to /// the organization behavior graph. /// /// /// /// Every behavior graph is specific to a Region. You can only use the API to manage behavior /// graphs that belong to the Region that is associated with the currently selected endpoint. /// /// /// /// The administrator account for a behavior graph can use the Detective API to do the /// following: /// /// /// /// The organization management account can use the Detective API to select the delegated /// administrator for Detective. /// /// /// /// The Detective administrator account for an organization can use the Detective API /// to do the following: /// /// /// /// An invited member account can use the Detective API to do the following: /// /// /// /// All API actions are logged as CloudTrail events. See Logging /// Detective API Calls with CloudTrail. /// /// /// /// We replaced the term "master account" with the term "administrator account." An administrator /// account is used to centrally manage multiple accounts. In the case of Detective, the /// administrator account manages the accounts in their behavior graph. /// /// /// public partial interface IAmazonDetective : IAmazonService, IDisposable { /// /// Paginators for the service /// IDetectivePaginatorFactory Paginators { get; } #region AcceptInvitation /// /// Accepts an invitation for the member account to contribute data to a behavior graph. /// This operation can only be called by an invited member account. /// /// /// /// The request provides the ARN of behavior graph. /// /// /// /// The member account status in the graph must be INVITED. /// /// /// Container for the necessary parameters to execute the AcceptInvitation service method. /// /// The response from the AcceptInvitation service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for AcceptInvitation Operation AcceptInvitationResponse AcceptInvitation(AcceptInvitationRequest request); /// /// Accepts an invitation for the member account to contribute data to a behavior graph. /// This operation can only be called by an invited member account. /// /// /// /// The request provides the ARN of behavior graph. /// /// /// /// The member account status in the graph must be INVITED. /// /// /// Container for the necessary parameters to execute the AcceptInvitation service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the AcceptInvitation service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for AcceptInvitation Operation Task AcceptInvitationAsync(AcceptInvitationRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region BatchGetGraphMemberDatasources /// /// Gets data source package information for the behavior graph. /// /// Container for the necessary parameters to execute the BatchGetGraphMemberDatasources service method. /// /// The response from the BatchGetGraphMemberDatasources service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for BatchGetGraphMemberDatasources Operation BatchGetGraphMemberDatasourcesResponse BatchGetGraphMemberDatasources(BatchGetGraphMemberDatasourcesRequest request); /// /// Gets data source package information for the behavior graph. /// /// Container for the necessary parameters to execute the BatchGetGraphMemberDatasources service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the BatchGetGraphMemberDatasources service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for BatchGetGraphMemberDatasources Operation Task BatchGetGraphMemberDatasourcesAsync(BatchGetGraphMemberDatasourcesRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region BatchGetMembershipDatasources /// /// Gets information on the data source package history for an account. /// /// Container for the necessary parameters to execute the BatchGetMembershipDatasources service method. /// /// The response from the BatchGetMembershipDatasources service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for BatchGetMembershipDatasources Operation BatchGetMembershipDatasourcesResponse BatchGetMembershipDatasources(BatchGetMembershipDatasourcesRequest request); /// /// Gets information on the data source package history for an account. /// /// Container for the necessary parameters to execute the BatchGetMembershipDatasources service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the BatchGetMembershipDatasources service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for BatchGetMembershipDatasources Operation Task BatchGetMembershipDatasourcesAsync(BatchGetMembershipDatasourcesRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region CreateGraph /// /// Creates a new behavior graph for the calling account, and sets that account as the /// administrator account. This operation is called by the account that is enabling Detective. /// /// /// /// Before you try to enable Detective, make sure that your account has been enrolled /// in Amazon GuardDuty for at least 48 hours. If you do not meet this requirement, you /// cannot enable Detective. If you do meet the GuardDuty prerequisite, then when you /// make the request to enable Detective, it checks whether your data volume is within /// the Detective quota. If it exceeds the quota, then you cannot enable Detective. /// /// /// /// The operation also enables Detective for the calling account in the currently selected /// Region. It returns the ARN of the new behavior graph. /// /// /// /// CreateGraph triggers a process to create the corresponding data tables /// for the new behavior graph. /// /// /// /// An account can only be the administrator account for one behavior graph within a Region. /// If the same account calls CreateGraph with the same administrator account, /// it always returns the same behavior graph ARN. It does not create a new behavior graph. /// /// /// Container for the necessary parameters to execute the CreateGraph service method. /// /// The response from the CreateGraph service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// This request cannot be completed for one of the following reasons. /// ///
  • /// /// The request would cause the number of member accounts in the behavior graph to exceed /// the maximum allowed. A behavior graph cannot have more than 1200 member accounts. /// ///
  • /// /// The request would cause the data rate for the behavior graph to exceed the maximum /// allowed. /// ///
  • /// /// Detective is unable to verify the data rate for the member account. This is usually /// because the member account is not enrolled in Amazon GuardDuty. /// ///
/// /// REST API Reference for CreateGraph Operation CreateGraphResponse CreateGraph(CreateGraphRequest request); /// /// Creates a new behavior graph for the calling account, and sets that account as the /// administrator account. This operation is called by the account that is enabling Detective. /// /// /// /// Before you try to enable Detective, make sure that your account has been enrolled /// in Amazon GuardDuty for at least 48 hours. If you do not meet this requirement, you /// cannot enable Detective. If you do meet the GuardDuty prerequisite, then when you /// make the request to enable Detective, it checks whether your data volume is within /// the Detective quota. If it exceeds the quota, then you cannot enable Detective. /// /// /// /// The operation also enables Detective for the calling account in the currently selected /// Region. It returns the ARN of the new behavior graph. /// /// /// /// CreateGraph triggers a process to create the corresponding data tables /// for the new behavior graph. /// /// /// /// An account can only be the administrator account for one behavior graph within a Region. /// If the same account calls CreateGraph with the same administrator account, /// it always returns the same behavior graph ARN. It does not create a new behavior graph. /// /// /// Container for the necessary parameters to execute the CreateGraph service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the CreateGraph service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// This request cannot be completed for one of the following reasons. /// ///
  • /// /// The request would cause the number of member accounts in the behavior graph to exceed /// the maximum allowed. A behavior graph cannot have more than 1200 member accounts. /// ///
  • /// /// The request would cause the data rate for the behavior graph to exceed the maximum /// allowed. /// ///
  • /// /// Detective is unable to verify the data rate for the member account. This is usually /// because the member account is not enrolled in Amazon GuardDuty. /// ///
/// /// REST API Reference for CreateGraph Operation Task CreateGraphAsync(CreateGraphRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region CreateMembers /// /// CreateMembers is used to send invitations to accounts. For the organization /// behavior graph, the Detective administrator account uses CreateMembers /// to enable organization accounts as member accounts. /// /// /// /// For invited accounts, CreateMembers sends a request to invite the specified /// Amazon Web Services accounts to be member accounts in the behavior graph. This operation /// can only be called by the administrator account for a behavior graph. /// /// /// /// CreateMembers verifies the accounts and then invites the verified accounts. /// The administrator can optionally specify to not send invitation emails to the member /// accounts. This would be used when the administrator manages their member accounts /// centrally. /// /// /// /// For organization accounts in the organization behavior graph, CreateMembers /// attempts to enable the accounts. The organization accounts do not receive invitations. /// /// /// /// The request provides the behavior graph ARN and the list of accounts to invite or /// to enable. /// /// /// /// The response separates the requested accounts into two lists: /// ///
  • /// /// The accounts that CreateMembers was able to process. For invited accounts, /// includes member accounts that are being verified, that have passed verification and /// are to be invited, and that have failed verification. For organization accounts in /// the organization behavior graph, includes accounts that can be enabled and that cannot /// be enabled. /// ///
  • /// /// The accounts that CreateMembers was unable to process. This list includes /// accounts that were already invited to be member accounts in the behavior graph. /// ///
/// /// Container for the necessary parameters to execute the CreateMembers service method. /// /// The response from the CreateMembers service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// This request cannot be completed for one of the following reasons. /// ///
  • /// /// The request would cause the number of member accounts in the behavior graph to exceed /// the maximum allowed. A behavior graph cannot have more than 1200 member accounts. /// ///
  • /// /// The request would cause the data rate for the behavior graph to exceed the maximum /// allowed. /// ///
  • /// /// Detective is unable to verify the data rate for the member account. This is usually /// because the member account is not enrolled in Amazon GuardDuty. /// ///
/// /// /// The request parameters are invalid. /// /// REST API Reference for CreateMembers Operation CreateMembersResponse CreateMembers(CreateMembersRequest request); /// /// CreateMembers is used to send invitations to accounts. For the organization /// behavior graph, the Detective administrator account uses CreateMembers /// to enable organization accounts as member accounts. /// /// /// /// For invited accounts, CreateMembers sends a request to invite the specified /// Amazon Web Services accounts to be member accounts in the behavior graph. This operation /// can only be called by the administrator account for a behavior graph. /// /// /// /// CreateMembers verifies the accounts and then invites the verified accounts. /// The administrator can optionally specify to not send invitation emails to the member /// accounts. This would be used when the administrator manages their member accounts /// centrally. /// /// /// /// For organization accounts in the organization behavior graph, CreateMembers /// attempts to enable the accounts. The organization accounts do not receive invitations. /// /// /// /// The request provides the behavior graph ARN and the list of accounts to invite or /// to enable. /// /// /// /// The response separates the requested accounts into two lists: /// ///
  • /// /// The accounts that CreateMembers was able to process. For invited accounts, /// includes member accounts that are being verified, that have passed verification and /// are to be invited, and that have failed verification. For organization accounts in /// the organization behavior graph, includes accounts that can be enabled and that cannot /// be enabled. /// ///
  • /// /// The accounts that CreateMembers was unable to process. This list includes /// accounts that were already invited to be member accounts in the behavior graph. /// ///
/// /// Container for the necessary parameters to execute the CreateMembers service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the CreateMembers service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// This request cannot be completed for one of the following reasons. /// ///
  • /// /// The request would cause the number of member accounts in the behavior graph to exceed /// the maximum allowed. A behavior graph cannot have more than 1200 member accounts. /// ///
  • /// /// The request would cause the data rate for the behavior graph to exceed the maximum /// allowed. /// ///
  • /// /// Detective is unable to verify the data rate for the member account. This is usually /// because the member account is not enrolled in Amazon GuardDuty. /// ///
/// /// /// The request parameters are invalid. /// /// REST API Reference for CreateMembers Operation Task CreateMembersAsync(CreateMembersRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region DeleteGraph /// /// Disables the specified behavior graph and queues it to be deleted. This operation /// removes the behavior graph from each member account's list of behavior graphs. /// /// /// /// DeleteGraph can only be called by the administrator account for a behavior /// graph. /// /// /// Container for the necessary parameters to execute the DeleteGraph service method. /// /// The response from the DeleteGraph service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for DeleteGraph Operation DeleteGraphResponse DeleteGraph(DeleteGraphRequest request); /// /// Disables the specified behavior graph and queues it to be deleted. This operation /// removes the behavior graph from each member account's list of behavior graphs. /// /// /// /// DeleteGraph can only be called by the administrator account for a behavior /// graph. /// /// /// Container for the necessary parameters to execute the DeleteGraph service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the DeleteGraph service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for DeleteGraph Operation Task DeleteGraphAsync(DeleteGraphRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region DeleteMembers /// /// Removes the specified member accounts from the behavior graph. The removed accounts /// no longer contribute data to the behavior graph. This operation can only be called /// by the administrator account for the behavior graph. /// /// /// /// For invited accounts, the removed accounts are deleted from the list of accounts in /// the behavior graph. To restore the account, the administrator account must send another /// invitation. /// /// /// /// For organization accounts in the organization behavior graph, the Detective administrator /// account can always enable the organization account again. Organization accounts that /// are not enabled as member accounts are not included in the ListMembers /// results for the organization behavior graph. /// /// /// /// An administrator account cannot use DeleteMembers to remove their own /// account from the behavior graph. To disable a behavior graph, the administrator account /// uses the DeleteGraph API method. /// /// /// Container for the necessary parameters to execute the DeleteMembers service method. /// /// The response from the DeleteMembers service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for DeleteMembers Operation DeleteMembersResponse DeleteMembers(DeleteMembersRequest request); /// /// Removes the specified member accounts from the behavior graph. The removed accounts /// no longer contribute data to the behavior graph. This operation can only be called /// by the administrator account for the behavior graph. /// /// /// /// For invited accounts, the removed accounts are deleted from the list of accounts in /// the behavior graph. To restore the account, the administrator account must send another /// invitation. /// /// /// /// For organization accounts in the organization behavior graph, the Detective administrator /// account can always enable the organization account again. Organization accounts that /// are not enabled as member accounts are not included in the ListMembers /// results for the organization behavior graph. /// /// /// /// An administrator account cannot use DeleteMembers to remove their own /// account from the behavior graph. To disable a behavior graph, the administrator account /// uses the DeleteGraph API method. /// /// /// Container for the necessary parameters to execute the DeleteMembers service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the DeleteMembers service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for DeleteMembers Operation Task DeleteMembersAsync(DeleteMembersRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region DescribeOrganizationConfiguration /// /// Returns information about the configuration for the organization behavior graph. Currently /// indicates whether to automatically enable new organization accounts as member accounts. /// /// /// /// Can only be called by the Detective administrator account for the organization. /// /// /// Container for the necessary parameters to execute the DescribeOrganizationConfiguration service method. /// /// The response from the DescribeOrganizationConfiguration service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for DescribeOrganizationConfiguration Operation DescribeOrganizationConfigurationResponse DescribeOrganizationConfiguration(DescribeOrganizationConfigurationRequest request); /// /// Returns information about the configuration for the organization behavior graph. Currently /// indicates whether to automatically enable new organization accounts as member accounts. /// /// /// /// Can only be called by the Detective administrator account for the organization. /// /// /// Container for the necessary parameters to execute the DescribeOrganizationConfiguration service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the DescribeOrganizationConfiguration service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for DescribeOrganizationConfiguration Operation Task DescribeOrganizationConfigurationAsync(DescribeOrganizationConfigurationRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region DisableOrganizationAdminAccount /// /// Removes the Detective administrator account in the current Region. Deletes the organization /// behavior graph. /// /// /// /// Can only be called by the organization management account. /// /// /// /// Removing the Detective administrator account does not affect the delegated administrator /// account for Detective in Organizations. /// /// /// /// To remove the delegated administrator account in Organizations, use the Organizations /// API. Removing the delegated administrator account also removes the Detective administrator /// account in all Regions, except for Regions where the Detective administrator account /// is the organization management account. /// /// /// Container for the necessary parameters to execute the DisableOrganizationAdminAccount service method. /// /// The response from the DisableOrganizationAdminAccount service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for DisableOrganizationAdminAccount Operation DisableOrganizationAdminAccountResponse DisableOrganizationAdminAccount(DisableOrganizationAdminAccountRequest request); /// /// Removes the Detective administrator account in the current Region. Deletes the organization /// behavior graph. /// /// /// /// Can only be called by the organization management account. /// /// /// /// Removing the Detective administrator account does not affect the delegated administrator /// account for Detective in Organizations. /// /// /// /// To remove the delegated administrator account in Organizations, use the Organizations /// API. Removing the delegated administrator account also removes the Detective administrator /// account in all Regions, except for Regions where the Detective administrator account /// is the organization management account. /// /// /// Container for the necessary parameters to execute the DisableOrganizationAdminAccount service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the DisableOrganizationAdminAccount service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for DisableOrganizationAdminAccount Operation Task DisableOrganizationAdminAccountAsync(DisableOrganizationAdminAccountRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region DisassociateMembership /// /// Removes the member account from the specified behavior graph. This operation can only /// be called by an invited member account that has the ENABLED status. /// /// /// /// DisassociateMembership cannot be called by an organization account in /// the organization behavior graph. For the organization behavior graph, the Detective /// administrator account determines which organization accounts to enable or disable /// as member accounts. /// /// /// Container for the necessary parameters to execute the DisassociateMembership service method. /// /// The response from the DisassociateMembership service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for DisassociateMembership Operation DisassociateMembershipResponse DisassociateMembership(DisassociateMembershipRequest request); /// /// Removes the member account from the specified behavior graph. This operation can only /// be called by an invited member account that has the ENABLED status. /// /// /// /// DisassociateMembership cannot be called by an organization account in /// the organization behavior graph. For the organization behavior graph, the Detective /// administrator account determines which organization accounts to enable or disable /// as member accounts. /// /// /// Container for the necessary parameters to execute the DisassociateMembership service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the DisassociateMembership service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for DisassociateMembership Operation Task DisassociateMembershipAsync(DisassociateMembershipRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region EnableOrganizationAdminAccount /// /// Designates the Detective administrator account for the organization in the current /// Region. /// /// /// /// If the account does not have Detective enabled, then enables Detective for that account /// and creates a new behavior graph. /// /// /// /// Can only be called by the organization management account. /// /// /// /// If the organization has a delegated administrator account in Organizations, then the /// Detective administrator account must be either the delegated administrator account /// or the organization management account. /// /// /// /// If the organization does not have a delegated administrator account in Organizations, /// then you can choose any account in the organization. If you choose an account other /// than the organization management account, Detective calls Organizations to make that /// account the delegated administrator account for Detective. The organization management /// account cannot be the delegated administrator account. /// /// /// Container for the necessary parameters to execute the EnableOrganizationAdminAccount service method. /// /// The response from the EnableOrganizationAdminAccount service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for EnableOrganizationAdminAccount Operation EnableOrganizationAdminAccountResponse EnableOrganizationAdminAccount(EnableOrganizationAdminAccountRequest request); /// /// Designates the Detective administrator account for the organization in the current /// Region. /// /// /// /// If the account does not have Detective enabled, then enables Detective for that account /// and creates a new behavior graph. /// /// /// /// Can only be called by the organization management account. /// /// /// /// If the organization has a delegated administrator account in Organizations, then the /// Detective administrator account must be either the delegated administrator account /// or the organization management account. /// /// /// /// If the organization does not have a delegated administrator account in Organizations, /// then you can choose any account in the organization. If you choose an account other /// than the organization management account, Detective calls Organizations to make that /// account the delegated administrator account for Detective. The organization management /// account cannot be the delegated administrator account. /// /// /// Container for the necessary parameters to execute the EnableOrganizationAdminAccount service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the EnableOrganizationAdminAccount service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for EnableOrganizationAdminAccount Operation Task EnableOrganizationAdminAccountAsync(EnableOrganizationAdminAccountRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region GetMembers /// /// Returns the membership details for specified member accounts for a behavior graph. /// /// Container for the necessary parameters to execute the GetMembers service method. /// /// The response from the GetMembers service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for GetMembers Operation GetMembersResponse GetMembers(GetMembersRequest request); /// /// Returns the membership details for specified member accounts for a behavior graph. /// /// Container for the necessary parameters to execute the GetMembers service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the GetMembers service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for GetMembers Operation Task GetMembersAsync(GetMembersRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region ListDatasourcePackages /// /// Lists data source packages in the behavior graph. /// /// Container for the necessary parameters to execute the ListDatasourcePackages service method. /// /// The response from the ListDatasourcePackages service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListDatasourcePackages Operation ListDatasourcePackagesResponse ListDatasourcePackages(ListDatasourcePackagesRequest request); /// /// Lists data source packages in the behavior graph. /// /// Container for the necessary parameters to execute the ListDatasourcePackages service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the ListDatasourcePackages service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListDatasourcePackages Operation Task ListDatasourcePackagesAsync(ListDatasourcePackagesRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region ListGraphs /// /// Returns the list of behavior graphs that the calling account is an administrator account /// of. This operation can only be called by an administrator account. /// /// /// /// Because an account can currently only be the administrator of one behavior graph within /// a Region, the results always contain a single behavior graph. /// /// /// Container for the necessary parameters to execute the ListGraphs service method. /// /// The response from the ListGraphs service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListGraphs Operation ListGraphsResponse ListGraphs(ListGraphsRequest request); /// /// Returns the list of behavior graphs that the calling account is an administrator account /// of. This operation can only be called by an administrator account. /// /// /// /// Because an account can currently only be the administrator of one behavior graph within /// a Region, the results always contain a single behavior graph. /// /// /// Container for the necessary parameters to execute the ListGraphs service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the ListGraphs service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListGraphs Operation Task ListGraphsAsync(ListGraphsRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region ListInvitations /// /// Retrieves the list of open and accepted behavior graph invitations for the member /// account. This operation can only be called by an invited member account. /// /// /// /// Open invitations are invitations that the member account has not responded to. /// /// /// /// The results do not include behavior graphs for which the member account declined the /// invitation. The results also do not include behavior graphs that the member account /// resigned from or was removed from. /// /// /// Container for the necessary parameters to execute the ListInvitations service method. /// /// The response from the ListInvitations service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListInvitations Operation ListInvitationsResponse ListInvitations(ListInvitationsRequest request); /// /// Retrieves the list of open and accepted behavior graph invitations for the member /// account. This operation can only be called by an invited member account. /// /// /// /// Open invitations are invitations that the member account has not responded to. /// /// /// /// The results do not include behavior graphs for which the member account declined the /// invitation. The results also do not include behavior graphs that the member account /// resigned from or was removed from. /// /// /// Container for the necessary parameters to execute the ListInvitations service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the ListInvitations service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListInvitations Operation Task ListInvitationsAsync(ListInvitationsRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region ListMembers /// /// Retrieves the list of member accounts for a behavior graph. /// /// /// /// For invited accounts, the results do not include member accounts that were removed /// from the behavior graph. /// /// /// /// For the organization behavior graph, the results do not include organization accounts /// that the Detective administrator account has not enabled as member accounts. /// /// /// Container for the necessary parameters to execute the ListMembers service method. /// /// The response from the ListMembers service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListMembers Operation ListMembersResponse ListMembers(ListMembersRequest request); /// /// Retrieves the list of member accounts for a behavior graph. /// /// /// /// For invited accounts, the results do not include member accounts that were removed /// from the behavior graph. /// /// /// /// For the organization behavior graph, the results do not include organization accounts /// that the Detective administrator account has not enabled as member accounts. /// /// /// Container for the necessary parameters to execute the ListMembers service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the ListMembers service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListMembers Operation Task ListMembersAsync(ListMembersRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region ListOrganizationAdminAccounts /// /// Returns information about the Detective administrator account for an organization. /// Can only be called by the organization management account. /// /// Container for the necessary parameters to execute the ListOrganizationAdminAccounts service method. /// /// The response from the ListOrganizationAdminAccounts service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListOrganizationAdminAccounts Operation ListOrganizationAdminAccountsResponse ListOrganizationAdminAccounts(ListOrganizationAdminAccountsRequest request); /// /// Returns information about the Detective administrator account for an organization. /// Can only be called by the organization management account. /// /// Container for the necessary parameters to execute the ListOrganizationAdminAccounts service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the ListOrganizationAdminAccounts service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListOrganizationAdminAccounts Operation Task ListOrganizationAdminAccountsAsync(ListOrganizationAdminAccountsRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region ListTagsForResource /// /// Returns the tag values that are assigned to a behavior graph. /// /// Container for the necessary parameters to execute the ListTagsForResource service method. /// /// The response from the ListTagsForResource service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListTagsForResource Operation ListTagsForResourceResponse ListTagsForResource(ListTagsForResourceRequest request); /// /// Returns the tag values that are assigned to a behavior graph. /// /// Container for the necessary parameters to execute the ListTagsForResource service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the ListTagsForResource service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for ListTagsForResource Operation Task ListTagsForResourceAsync(ListTagsForResourceRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region RejectInvitation /// /// Rejects an invitation to contribute the account data to a behavior graph. This operation /// must be called by an invited member account that has the INVITED status. /// /// /// /// RejectInvitation cannot be called by an organization account in the /// organization behavior graph. In the organization behavior graph, organization accounts /// do not receive an invitation. /// /// /// Container for the necessary parameters to execute the RejectInvitation service method. /// /// The response from the RejectInvitation service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for RejectInvitation Operation RejectInvitationResponse RejectInvitation(RejectInvitationRequest request); /// /// Rejects an invitation to contribute the account data to a behavior graph. This operation /// must be called by an invited member account that has the INVITED status. /// /// /// /// RejectInvitation cannot be called by an organization account in the /// organization behavior graph. In the organization behavior graph, organization accounts /// do not receive an invitation. /// /// /// Container for the necessary parameters to execute the RejectInvitation service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the RejectInvitation service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for RejectInvitation Operation Task RejectInvitationAsync(RejectInvitationRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region StartMonitoringMember /// /// Sends a request to enable data ingest for a member account that has a status of ACCEPTED_BUT_DISABLED. /// /// /// /// For valid member accounts, the status is updated as follows. /// ///
  • /// /// If Detective enabled the member account, then the new status is ENABLED. /// ///
  • /// /// If Detective cannot enable the member account, the status remains ACCEPTED_BUT_DISABLED. /// /// ///
/// /// Container for the necessary parameters to execute the StartMonitoringMember service method. /// /// The response from the StartMonitoringMember service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// This request cannot be completed for one of the following reasons. /// ///
  • /// /// The request would cause the number of member accounts in the behavior graph to exceed /// the maximum allowed. A behavior graph cannot have more than 1200 member accounts. /// ///
  • /// /// The request would cause the data rate for the behavior graph to exceed the maximum /// allowed. /// ///
  • /// /// Detective is unable to verify the data rate for the member account. This is usually /// because the member account is not enrolled in Amazon GuardDuty. /// ///
/// /// /// The request parameters are invalid. /// /// REST API Reference for StartMonitoringMember Operation StartMonitoringMemberResponse StartMonitoringMember(StartMonitoringMemberRequest request); /// /// Sends a request to enable data ingest for a member account that has a status of ACCEPTED_BUT_DISABLED. /// /// /// /// For valid member accounts, the status is updated as follows. /// ///
  • /// /// If Detective enabled the member account, then the new status is ENABLED. /// ///
  • /// /// If Detective cannot enable the member account, the status remains ACCEPTED_BUT_DISABLED. /// /// ///
/// /// Container for the necessary parameters to execute the StartMonitoringMember service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the StartMonitoringMember service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request attempted an invalid action. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// This request cannot be completed for one of the following reasons. /// ///
  • /// /// The request would cause the number of member accounts in the behavior graph to exceed /// the maximum allowed. A behavior graph cannot have more than 1200 member accounts. /// ///
  • /// /// The request would cause the data rate for the behavior graph to exceed the maximum /// allowed. /// ///
  • /// /// Detective is unable to verify the data rate for the member account. This is usually /// because the member account is not enrolled in Amazon GuardDuty. /// ///
/// /// /// The request parameters are invalid. /// /// REST API Reference for StartMonitoringMember Operation Task StartMonitoringMemberAsync(StartMonitoringMemberRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region TagResource /// /// Applies tag values to a behavior graph. /// /// Container for the necessary parameters to execute the TagResource service method. /// /// The response from the TagResource service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for TagResource Operation TagResourceResponse TagResource(TagResourceRequest request); /// /// Applies tag values to a behavior graph. /// /// Container for the necessary parameters to execute the TagResource service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the TagResource service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for TagResource Operation Task TagResourceAsync(TagResourceRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region UntagResource /// /// Removes tags from a behavior graph. /// /// Container for the necessary parameters to execute the UntagResource service method. /// /// The response from the UntagResource service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for UntagResource Operation UntagResourceResponse UntagResource(UntagResourceRequest request); /// /// Removes tags from a behavior graph. /// /// Container for the necessary parameters to execute the UntagResource service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the UntagResource service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// The request parameters are invalid. /// /// REST API Reference for UntagResource Operation Task UntagResourceAsync(UntagResourceRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region UpdateDatasourcePackages /// /// Starts a data source packages for the behavior graph. /// /// Container for the necessary parameters to execute the UpdateDatasourcePackages service method. /// /// The response from the UpdateDatasourcePackages service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// This request cannot be completed for one of the following reasons. /// ///
  • /// /// The request would cause the number of member accounts in the behavior graph to exceed /// the maximum allowed. A behavior graph cannot have more than 1200 member accounts. /// ///
  • /// /// The request would cause the data rate for the behavior graph to exceed the maximum /// allowed. /// ///
  • /// /// Detective is unable to verify the data rate for the member account. This is usually /// because the member account is not enrolled in Amazon GuardDuty. /// ///
/// /// /// The request parameters are invalid. /// /// REST API Reference for UpdateDatasourcePackages Operation UpdateDatasourcePackagesResponse UpdateDatasourcePackages(UpdateDatasourcePackagesRequest request); /// /// Starts a data source packages for the behavior graph. /// /// Container for the necessary parameters to execute the UpdateDatasourcePackages service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the UpdateDatasourcePackages service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request refers to a nonexistent resource. /// /// /// This request cannot be completed for one of the following reasons. /// ///
  • /// /// The request would cause the number of member accounts in the behavior graph to exceed /// the maximum allowed. A behavior graph cannot have more than 1200 member accounts. /// ///
  • /// /// The request would cause the data rate for the behavior graph to exceed the maximum /// allowed. /// ///
  • /// /// Detective is unable to verify the data rate for the member account. This is usually /// because the member account is not enrolled in Amazon GuardDuty. /// ///
/// /// /// The request parameters are invalid. /// /// REST API Reference for UpdateDatasourcePackages Operation Task UpdateDatasourcePackagesAsync(UpdateDatasourcePackagesRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion #region UpdateOrganizationConfiguration /// /// Updates the configuration for the Organizations integration in the current Region. /// Can only be called by the Detective administrator account for the organization. /// /// Container for the necessary parameters to execute the UpdateOrganizationConfiguration service method. /// /// The response from the UpdateOrganizationConfiguration service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for UpdateOrganizationConfiguration Operation UpdateOrganizationConfigurationResponse UpdateOrganizationConfiguration(UpdateOrganizationConfigurationRequest request); /// /// Updates the configuration for the Organizations integration in the current Region. /// Can only be called by the Detective administrator account for the organization. /// /// Container for the necessary parameters to execute the UpdateOrganizationConfiguration service method. /// /// A cancellation token that can be used by other objects or threads to receive notice of cancellation. /// /// /// The response from the UpdateOrganizationConfiguration service method, as returned by Detective. /// /// The request issuer does not have permission to access this resource or perform this /// operation. /// /// /// The request was valid but failed because of a problem with the service. /// /// /// The request cannot be completed because too many other requests are occurring at the /// same time. /// /// /// The request parameters are invalid. /// /// REST API Reference for UpdateOrganizationConfiguration Operation Task UpdateOrganizationConfigurationAsync(UpdateOrganizationConfigurationRequest request, CancellationToken cancellationToken = default(CancellationToken)); #endregion } }