aws_sdk_securityhub/lib.rs
1#![allow(deprecated)]
2#![allow(unknown_lints)]
3#![allow(clippy::module_inception)]
4#![allow(clippy::upper_case_acronyms)]
5#![allow(clippy::large_enum_variant)]
6#![allow(clippy::wrong_self_convention)]
7#![allow(clippy::should_implement_trait)]
8#![allow(clippy::disallowed_names)]
9#![allow(clippy::vec_init_then_push)]
10#![allow(clippy::type_complexity)]
11#![allow(clippy::needless_return)]
12#![allow(clippy::derive_partial_eq_without_eq)]
13#![allow(clippy::result_large_err)]
14#![allow(clippy::unnecessary_map_on_constructor)]
15#![allow(clippy::useless_conversion)]
16#![allow(clippy::deprecated_semver)]
17#![allow(rustdoc::bare_urls)]
18#![allow(rustdoc::redundant_explicit_links)]
19#![allow(rustdoc::broken_intra_doc_links)]
20#![allow(rustdoc::invalid_html_tags)]
21#![forbid(unsafe_code)]
22#![warn(missing_docs)]
23#![cfg_attr(docsrs, feature(doc_cfg))]
24//! Security Hub provides you with a comprehensive view of your security state in Amazon Web Services and helps you assess your Amazon Web Services environment against security industry standards and best practices.
25//!
26//! Security Hub collects security data across Amazon Web Services accounts, Amazon Web Services services, and supported third-party products and helps you analyze your security trends and identify the highest priority security issues.
27//!
28//! To help you manage the security state of your organization, Security Hub supports multiple security standards. These include the Amazon Web Services Foundational Security Best Practices (FSBP) standard developed by Amazon Web Services, and external compliance frameworks such as the Center for Internet Security (CIS), the Payment Card Industry Data Security Standard (PCI DSS), and the National Institute of Standards and Technology (NIST). Each standard includes several security controls, each of which represents a security best practice. Security Hub runs checks against security controls and generates control findings to help you assess your compliance against security best practices.
29//!
30//! In addition to generating control findings, Security Hub also receives findings from other Amazon Web Services services, such as Amazon GuardDuty and Amazon Inspector, and supported third-party products. This gives you a single pane of glass into a variety of security-related issues. You can also send Security Hub findings to other Amazon Web Services services and supported third-party products.
31//!
32//! Security Hub offers automation features that help you triage and remediate security issues. For example, you can use automation rules to automatically update critical findings when a security check fails. You can also leverage the integration with Amazon EventBridge to trigger automatic responses to specific findings.
33//!
34//! This guide, the _Security Hub API Reference_, provides information about the Security Hub API. This includes supported resources, HTTP methods, parameters, and schemas. If you're new to Security Hub, you might find it helpful to also review the [_Security Hub User Guide_](https://docs.aws.amazon.com/securityhub/latest/userguide/what-is-securityhub.html). The user guide explains key concepts and provides procedures that demonstrate how to use Security Hub features. It also provides information about topics such as integrating Security Hub with other Amazon Web Services services.
35//!
36//! In addition to interacting with Security Hub by making calls to the Security Hub API, you can use a current version of an Amazon Web Services command line tool or SDK. Amazon Web Services provides tools and SDKs that consist of libraries and sample code for various languages and platforms, such as PowerShell, Java, Go, Python, C++, and .NET. These tools and SDKs provide convenient, programmatic access to Security Hub and other Amazon Web Services services . They also handle tasks such as signing requests, managing errors, and retrying requests automatically. For information about installing and using the Amazon Web Services tools and SDKs, see [Tools to Build on Amazon Web Services](http://aws.amazon.com/developer/tools/).
37//!
38//! With the exception of operations that are related to central configuration, Security Hub API requests are executed only in the Amazon Web Services Region that is currently active or in the specific Amazon Web Services Region that you specify in your request. Any configuration or settings change that results from the operation is applied only to that Region. To make the same change in other Regions, call the same API operation in each Region in which you want to apply the change. When you use central configuration, API requests for enabling Security Hub, standards, and controls are executed in the home Region and all linked Regions. For a list of central configuration operations, see the [Central configuration terms and concepts](https://docs.aws.amazon.com/securityhub/latest/userguide/central-configuration-intro.html#central-configuration-concepts) section of the _Security Hub User Guide_.
39//!
40//! The following throttling limits apply to Security Hub API operations.
41//! - BatchEnableStandards - RateLimit of 1 request per second. BurstLimit of 1 request per second.
42//! - GetFindings - RateLimit of 3 requests per second. BurstLimit of 6 requests per second.
43//! - BatchImportFindings - RateLimit of 10 requests per second. BurstLimit of 30 requests per second.
44//! - BatchUpdateFindings - RateLimit of 10 requests per second. BurstLimit of 30 requests per second.
45//! - UpdateStandardsControl - RateLimit of 1 request per second. BurstLimit of 5 requests per second.
46//! - All other operations - RateLimit of 10 requests per second. BurstLimit of 30 requests per second.
47//!
48//! ## Getting Started
49//!
50//! > Examples are available for many services and operations, check out the
51//! > [usage examples](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/rustv1).
52//!
53//! The SDK provides one crate per AWS service. You must add [Tokio](https://crates.io/crates/tokio)
54//! as a dependency within your Rust project to execute asynchronous code. To add `aws-sdk-securityhub` to
55//! your project, add the following to your **Cargo.toml** file:
56//!
57//! ```toml
58//! [dependencies]
59//! aws-config = { version = "1.1.7", features = ["behavior-version-latest"] }
60//! aws-sdk-securityhub = "1.105.0"
61//! tokio = { version = "1", features = ["full"] }
62//! ```
63//!
64//! Then in code, a client can be created with the following:
65//!
66//! ```rust,no_run
67//! use aws_sdk_securityhub as securityhub;
68//!
69//! #[::tokio::main]
70//! async fn main() -> Result<(), securityhub::Error> {
71//! let config = aws_config::load_from_env().await;
72//! let client = aws_sdk_securityhub::Client::new(&config);
73//!
74//! // ... make some calls with the client
75//!
76//! Ok(())
77//! }
78//! ```
79//!
80//! See the [client documentation](https://docs.rs/aws-sdk-securityhub/latest/aws_sdk_securityhub/client/struct.Client.html)
81//! for information on what calls can be made, and the inputs and outputs for each of those calls.
82//!
83//! ## Using the SDK
84//!
85//! Until the SDK is released, we will be adding information about using the SDK to the
86//! [Developer Guide](https://docs.aws.amazon.com/sdk-for-rust/latest/dg/welcome.html). Feel free to suggest
87//! additional sections for the guide by opening an issue and describing what you are trying to do.
88//!
89//! ## Getting Help
90//!
91//! * [GitHub discussions](https://github.com/awslabs/aws-sdk-rust/discussions) - For ideas, RFCs & general questions
92//! * [GitHub issues](https://github.com/awslabs/aws-sdk-rust/issues/new/choose) - For bug reports & feature requests
93//! * [Generated Docs (latest version)](https://awslabs.github.io/aws-sdk-rust/)
94//! * [Usage examples](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/rustv1)
95//!
96//!
97//! # Crate Organization
98//!
99//! The entry point for most customers will be [`Client`], which exposes one method for each API
100//! offered by AWS SecurityHub. The return value of each of these methods is a "fluent builder",
101//! where the different inputs for that API are added by builder-style function call chaining,
102//! followed by calling `send()` to get a [`Future`](std::future::Future) that will result in
103//! either a successful output or a [`SdkError`](crate::error::SdkError).
104//!
105//! Some of these API inputs may be structs or enums to provide more complex structured information.
106//! These structs and enums live in [`types`](crate::types). There are some simpler types for
107//! representing data such as date times or binary blobs that live in [`primitives`](crate::primitives).
108//!
109//! All types required to configure a client via the [`Config`](crate::Config) struct live
110//! in [`config`](crate::config).
111//!
112//! The [`operation`](crate::operation) module has a submodule for every API, and in each submodule
113//! is the input, output, and error type for that API, as well as builders to construct each of those.
114//!
115//! There is a top-level [`Error`](crate::Error) type that encompasses all the errors that the
116//! client can return. Any other error type can be converted to this `Error` type via the
117//! [`From`](std::convert::From) trait.
118//!
119//! The other modules within this crate are not required for normal usage.
120
121// Code generated by software.amazon.smithy.rust.codegen.smithy-rs. DO NOT EDIT.
122pub use error_meta::Error;
123
124#[doc(inline)]
125pub use config::Config;
126
127/// Client for calling AWS SecurityHub.
128/// ## Constructing a `Client`
129///
130/// A [`Config`] is required to construct a client. For most use cases, the [`aws-config`]
131/// crate should be used to automatically resolve this config using
132/// [`aws_config::load_from_env()`], since this will resolve an [`SdkConfig`] which can be shared
133/// across multiple different AWS SDK clients. This config resolution process can be customized
134/// by calling [`aws_config::from_env()`] instead, which returns a [`ConfigLoader`] that uses
135/// the [builder pattern] to customize the default config.
136///
137/// In the simplest case, creating a client looks as follows:
138/// ```rust,no_run
139/// # async fn wrapper() {
140/// let config = aws_config::load_from_env().await;
141/// let client = aws_sdk_securityhub::Client::new(&config);
142/// # }
143/// ```
144///
145/// Occasionally, SDKs may have additional service-specific values that can be set on the [`Config`] that
146/// is absent from [`SdkConfig`], or slightly different settings for a specific client may be desired.
147/// The [`Builder`](crate::config::Builder) struct implements `From<&SdkConfig>`, so setting these specific settings can be
148/// done as follows:
149///
150/// ```rust,no_run
151/// # async fn wrapper() {
152/// let sdk_config = ::aws_config::load_from_env().await;
153/// let config = aws_sdk_securityhub::config::Builder::from(&sdk_config)
154/// # /*
155/// .some_service_specific_setting("value")
156/// # */
157/// .build();
158/// # }
159/// ```
160///
161/// See the [`aws-config` docs] and [`Config`] for more information on customizing configuration.
162///
163/// _Note:_ Client construction is expensive due to connection thread pool initialization, and should
164/// be done once at application start-up.
165///
166/// [`Config`]: crate::Config
167/// [`ConfigLoader`]: https://docs.rs/aws-config/*/aws_config/struct.ConfigLoader.html
168/// [`SdkConfig`]: https://docs.rs/aws-config/*/aws_config/struct.SdkConfig.html
169/// [`aws-config` docs]: https://docs.rs/aws-config/*
170/// [`aws-config`]: https://crates.io/crates/aws-config
171/// [`aws_config::from_env()`]: https://docs.rs/aws-config/*/aws_config/fn.from_env.html
172/// [`aws_config::load_from_env()`]: https://docs.rs/aws-config/*/aws_config/fn.load_from_env.html
173/// [builder pattern]: https://rust-lang.github.io/api-guidelines/type-safety.html#builders-enable-construction-of-complex-values-c-builder
174/// # Using the `Client`
175///
176/// A client has a function for every operation that can be performed by the service.
177/// For example, the [`AcceptAdministratorInvitation`](crate::operation::accept_administrator_invitation) operation has
178/// a [`Client::accept_administrator_invitation`], function which returns a builder for that operation.
179/// The fluent builder ultimately has a `send()` function that returns an async future that
180/// returns a result, as illustrated below:
181///
182/// ```rust,ignore
183/// let result = client.accept_administrator_invitation()
184/// .administrator_id("example")
185/// .send()
186/// .await;
187/// ```
188///
189/// The underlying HTTP requests that get made by this can be modified with the `customize_operation`
190/// function on the fluent builder. See the [`customize`](crate::client::customize) module for more
191/// information.
192pub mod client;
193
194/// Configuration for AWS SecurityHub.
195pub mod config;
196
197/// Common errors and error handling utilities.
198pub mod error;
199
200mod error_meta;
201
202/// Information about this crate.
203pub mod meta;
204
205/// All operations that this crate can perform.
206pub mod operation;
207
208/// Primitives such as `Blob` or `DateTime` used by other types.
209pub mod primitives;
210
211/// Data structures used by operation inputs/outputs.
212pub mod types;
213
214pub(crate) mod client_idempotency_token;
215
216mod idempotency_token;
217
218mod observability_feature;
219
220pub(crate) mod protocol_serde;
221
222mod sdk_feature_tracker;
223
224mod serialization_settings;
225
226mod endpoint_lib;
227
228mod lens;
229
230mod serde_util;
231
232mod json_errors;
233
234#[doc(inline)]
235pub use client::Client;