Class CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty.Jsii$Proxy
- All Implemented Interfaces:
CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
,software.amazon.jsii.JsiiSerializable
- Enclosing interface:
CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
-
Nested Class Summary
Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject
software.amazon.jsii.JsiiObject.InitializationMode
Nested classes/interfaces inherited from interface software.amazon.awscdk.services.iot.CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty.Builder, CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty.Jsii$Proxy
-
Constructor Summary
ModifierConstructorDescriptionprotected
Constructor that initializes the object based on literal property values passed by theCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty.Builder
.protected
Jsii$Proxy
(software.amazon.jsii.JsiiObjectRef objRef) Constructor that initializes the object based on values retrieved from the JsiiObject. -
Method Summary
Modifier and TypeMethodDescriptioncom.fasterxml.jackson.databind.JsonNode
final boolean
final Object
Checks the permissiveness of an authenticated Amazon Cognito identity pool role.final Object
Checks if a CA certificate is expiring.final Object
Checks the quality of the CA certificate key.final Object
Checks if multiple devices connect using the same client ID.final Object
Checks if a device certificate is expiring.final Object
Checks the quality of the device certificate key.final Object
Checks if multiple concurrent connections use the same X.509 certificate to authenticate with AWS IoT .final Object
Checks if device certificates are still active despite being revoked by an intermediate CA.final Object
Checks the permissiveness of a policy attached to an authenticated Amazon Cognito identity pool role.final Object
Checks if an AWS IoT policy is potentially misconfigured.final Object
Checks if a role alias has access to services that haven't been used for the AWS IoT device in the last year.final Object
Checks if the temporary credentials provided by AWS IoT role aliases are overly permissive.final Object
Checks if AWS IoT logs are disabled.final Object
Checks if a revoked CA certificate is still active.final Object
Checks if a revoked device certificate is still active.final Object
Checks if policy attached to an unauthenticated Amazon Cognito identity pool role is too permissive.final int
hashCode()
Methods inherited from class software.amazon.jsii.JsiiObject
jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet
-
Constructor Details
-
Jsii$Proxy
protected Jsii$Proxy(software.amazon.jsii.JsiiObjectRef objRef) Constructor that initializes the object based on values retrieved from the JsiiObject.- Parameters:
objRef
- Reference to the JSII managed object.
-
Jsii$Proxy
Constructor that initializes the object based on literal property values passed by theCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty.Builder
.
-
-
Method Details
-
getAuthenticatedCognitoRoleOverlyPermissiveCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks the permissiveness of an authenticated Amazon Cognito identity pool role.For this check, AWS IoT Device Defender audits all Amazon Cognito identity pools that have been used to connect to the AWS IoT message broker during the 31 days before the audit is performed.
- Specified by:
getAuthenticatedCognitoRoleOverlyPermissiveCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getCaCertificateExpiringCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if a CA certificate is expiring.This check applies to CA certificates expiring within 30 days or that have expired.
- Specified by:
getCaCertificateExpiringCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getCaCertificateKeyQualityCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks the quality of the CA certificate key.The quality checks if the key is in a valid format, not expired, and if the key meets a minimum required size. This check applies to CA certificates that are
ACTIVE
orPENDING_TRANSFER
.- Specified by:
getCaCertificateKeyQualityCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getConflictingClientIdsCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if multiple devices connect using the same client ID.- Specified by:
getConflictingClientIdsCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getDeviceCertificateExpiringCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if a device certificate is expiring.This check applies to device certificates expiring within 30 days or that have expired.
- Specified by:
getDeviceCertificateExpiringCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getDeviceCertificateKeyQualityCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks the quality of the device certificate key.The quality checks if the key is in a valid format, not expired, signed by a registered certificate authority, and if the key meets a minimum required size.
- Specified by:
getDeviceCertificateKeyQualityCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getIntermediateCaRevokedForActiveDeviceCertificatesCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if device certificates are still active despite being revoked by an intermediate CA.- Specified by:
getIntermediateCaRevokedForActiveDeviceCertificatesCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getIotPolicyOverlyPermissiveCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks the permissiveness of a policy attached to an authenticated Amazon Cognito identity pool role.- Specified by:
getIotPolicyOverlyPermissiveCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getIoTPolicyPotentialMisConfigurationCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if an AWS IoT policy is potentially misconfigured.Misconfigured policies, including overly permissive policies, can cause security incidents like allowing devices access to unintended resources. This check is a warning for you to make sure that only intended actions are allowed before updating the policy.
- Specified by:
getIoTPolicyPotentialMisConfigurationCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getIotRoleAliasAllowsAccessToUnusedServicesCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if a role alias has access to services that haven't been used for the AWS IoT device in the last year.- Specified by:
getIotRoleAliasAllowsAccessToUnusedServicesCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getIotRoleAliasOverlyPermissiveCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if the temporary credentials provided by AWS IoT role aliases are overly permissive.- Specified by:
getIotRoleAliasOverlyPermissiveCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getLoggingDisabledCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if AWS IoT logs are disabled.- Specified by:
getLoggingDisabledCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getRevokedCaCertificateStillActiveCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if a revoked CA certificate is still active.- Specified by:
getRevokedCaCertificateStillActiveCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getRevokedDeviceCertificateStillActiveCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if a revoked device certificate is still active.- Specified by:
getRevokedDeviceCertificateStillActiveCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
getUnauthenticatedCognitoRoleOverlyPermissiveCheck
Description copied from interface:CfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
Checks if policy attached to an unauthenticated Amazon Cognito identity pool role is too permissive.- Specified by:
getUnauthenticatedCognitoRoleOverlyPermissiveCheck
in interfaceCfnAccountAuditConfiguration.AuditCheckConfigurationsProperty
- See Also:
-
$jsii$toJson
@Internal public com.fasterxml.jackson.databind.JsonNode $jsii$toJson()- Specified by:
$jsii$toJson
in interfacesoftware.amazon.jsii.JsiiSerializable
-
equals
-
hashCode
public final int hashCode()
-