feat(client-guardduty): Add domainWithSuffix finding field to dnsRequestAction

Author: awstools

clients/client-guardduty/src/commands/GetFindingsCommand.ts

@@ -414,6 +414,7 @@ export interface GetFindingsCommandOutput extends GetFindingsResponse, __Metadat
  * //             Domain: "STRING_VALUE",
  * //             Protocol: "STRING_VALUE",
  * //             Blocked: true || false,
+ * //             DomainWithSuffix: "STRING_VALUE",
  * //           },
  * //           NetworkConnectionAction: { // NetworkConnectionAction
  * //             Blocked: true || false,

clients/client-guardduty/src/endpoint/ruleset.ts

@@ -6,27 +6,29 @@ import { RuleSetObject } from "@smithy/types";
    or see "smithy.rules#endpointRuleSet"
    in codegen/sdk-codegen/aws-models/guardduty.json */
 
-const s="required",
-t="fn",
-u="argv",
-v="ref";
-const a="isSet",
-b="tree",
-c="error",
-d="endpoint",
-e="PartitionResult",
-f="getAttr",
-g={[s]:false,"type":"String"},
-h={[s]:true,"default":false,"type":"Boolean"},
-i={[v]:"Endpoint"},
-j={[t]:"booleanEquals",[u]:[{[v]:"UseFIPS"},true]},
-k={[t]:"booleanEquals",[u]:[{[v]:"UseDualStack"},true]},
-l={},
-m={[t]:"booleanEquals",[u]:[true,{[t]:f,[u]:[{[v]:e},"supportsFIPS"]}]},
-n={[v]:e},
-o={[t]:"booleanEquals",[u]:[true,{[t]:f,[u]:[n,"supportsDualStack"]}]},
-p=[j],
-q=[k],
-r=[{[v]:"Region"}];
-const _data={version:"1.0",parameters:{Region:g,UseDualStack:h,UseFIPS:h,Endpoint:g},rules:[{conditions:[{[t]:a,[u]:[i]}],type:b,rules:[{conditions:p,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:c},{conditions:q,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:c},{endpoint:{url:i,properties:l,headers:l},type:d}]},{conditions:[{[t]:a,[u]:r}],type:b,rules:[{conditions:[{[t]:"aws.partition",[u]:r,assign:e}],type:b,rules:[{conditions:[j,k],type:b,rules:[{conditions:[m,o],type:b,rules:[{endpoint:{url:"https://guardduty-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:l,headers:l},type:d}]},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:c}]},{conditions:p,type:b,rules:[{conditions:[m],type:b,rules:[{conditions:[{[t]:"stringEquals",[u]:["aws-us-gov",{[t]:f,[u]:[n,"name"]}]}],endpoint:{url:"https://guardduty.{Region}.amazonaws.com",properties:l,headers:l},type:d},{endpoint:{url:"https://guardduty-fips.{Region}.{PartitionResult#dnsSuffix}",properties:l,headers:l},type:d}]},{error:"FIPS is enabled but this partition does not support FIPS",type:c}]},{conditions:q,type:b,rules:[{conditions:[o],type:b,rules:[{endpoint:{url:"https://guardduty.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:l,headers:l},type:d}]},{error:"DualStack is enabled but this partition does not support DualStack",type:c}]},{endpoint:{url:"https://guardduty.{Region}.{PartitionResult#dnsSuffix}",properties:l,headers:l},type:d}]}]},{error:"Invalid Configuration: Missing Region",type:c}]};
+const u="required",
+v="fn",
+w="argv",
+x="ref";
+const a=true,
+b="isSet",
+c="booleanEquals",
+d="error",
+e="endpoint",
+f="tree",
+g="PartitionResult",
+h="getAttr",
+i={[u]:false,"type":"String"},
+j={[u]:true,"default":false,"type":"Boolean"},
+k={[x]:"Endpoint"},
+l={[v]:c,[w]:[{[x]:"UseFIPS"},true]},
+m={[v]:c,[w]:[{[x]:"UseDualStack"},true]},
+n={},
+o={[v]:h,[w]:[{[x]:g},"supportsFIPS"]},
+p={[x]:g},
+q={[v]:c,[w]:[true,{[v]:h,[w]:[p,"supportsDualStack"]}]},
+r=[l],
+s=[m],
+t=[{[x]:"Region"}];
+const _data={version:"1.0",parameters:{Region:i,UseDualStack:j,UseFIPS:j,Endpoint:i},rules:[{conditions:[{[v]:b,[w]:[k]}],rules:[{conditions:r,error:"Invalid Configuration: FIPS and custom endpoint are not supported",type:d},{conditions:s,error:"Invalid Configuration: Dualstack and custom endpoint are not supported",type:d},{endpoint:{url:k,properties:n,headers:n},type:e}],type:f},{conditions:[{[v]:b,[w]:t}],rules:[{conditions:[{[v]:"aws.partition",[w]:t,assign:g}],rules:[{conditions:[l,m],rules:[{conditions:[{[v]:c,[w]:[a,o]},q],rules:[{endpoint:{url:"https://guardduty-fips.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:n,headers:n},type:e}],type:f},{error:"FIPS and DualStack are enabled, but this partition does not support one or both",type:d}],type:f},{conditions:r,rules:[{conditions:[{[v]:c,[w]:[o,a]}],rules:[{conditions:[{[v]:"stringEquals",[w]:[{[v]:h,[w]:[p,"name"]},"aws-us-gov"]}],endpoint:{url:"https://guardduty.{Region}.amazonaws.com",properties:n,headers:n},type:e},{endpoint:{url:"https://guardduty-fips.{Region}.{PartitionResult#dnsSuffix}",properties:n,headers:n},type:e}],type:f},{error:"FIPS is enabled but this partition does not support FIPS",type:d}],type:f},{conditions:s,rules:[{conditions:[q],rules:[{endpoint:{url:"https://guardduty.{Region}.{PartitionResult#dualStackDnsSuffix}",properties:n,headers:n},type:e}],type:f},{error:"DualStack is enabled but this partition does not support DualStack",type:d}],type:f},{endpoint:{url:"https://guardduty.{Region}.{PartitionResult#dnsSuffix}",properties:n,headers:n},type:e}],type:f}],type:f},{error:"Invalid Configuration: Missing Region",type:d}]};
 export const ruleSet: RuleSetObject = _data;

clients/client-guardduty/src/models/models_0.ts

@@ -654,6 +654,13 @@ export interface DnsRequestAction {
    * <p>Indicates whether the targeted port is blocked.</p>
    */
   Blocked?: boolean;
+
+  /**
+   * @public
+   * <p>The second and top level domain involved in the
+   *       activity that prompted GuardDuty to generate this finding.</p>
+   */
+  DomainWithSuffix?: string;
 }
 
 /**
@@ -7123,6 +7130,9 @@ export interface ListFindingsRequest {
    *                <p>service.action.dnsRequestAction.domain</p>
    *             </li>
    *             <li>
+   *                <p>service.action.dnsRequestAction.domainWithSuffix</p>
+   *             </li>
+   *             <li>
    *                <p>service.action.networkConnectionAction.blocked</p>
    *             </li>
    *             <li>

clients/client-guardduty/src/protocols/Aws_restJson1.ts

@@ -6922,6 +6922,7 @@ const de_DnsRequestAction = (output: any, context: __SerdeContext): DnsRequestAc
   return take(output, {
     Blocked: [, __expectBoolean, `blocked`],
     Domain: [, __expectString, `domain`],
+    DomainWithSuffix: [, __expectString, `domainWithSuffix`],
     Protocol: [, __expectString, `protocol`],
   }) as any;
 };