mypydantic.models.fms

   1# Model Generated: Thu Mar  2 21:56:19 2023
   2
   3from __future__ import annotations
   4
   5from datetime import datetime
   6from typing import Dict, List, Literal, Optional, Sequence, Union
   7
   8from pydantic import Field
   9
  10from mypydantic.models.base_model import BaseModel
  11
  12
  13class ActionTargetModel(BaseModel):
  14    resource_id: Optional[str] = Field(default=None, alias="ResourceId")
  15    description: Optional[str] = Field(default=None, alias="Description")
  16
  17
  18class AppModel(BaseModel):
  19    app_name: str = Field(alias="AppName")
  20    protocol: str = Field(alias="Protocol")
  21    port: int = Field(alias="Port")
  22
  23
  24class AssociateAdminAccountRequestModel(BaseModel):
  25    admin_account: str = Field(alias="AdminAccount")
  26
  27
  28class AssociateThirdPartyFirewallRequestModel(BaseModel):
  29    third_party_firewall: Literal[
  30        "FORTIGATE_CLOUD_NATIVE_FIREWALL", "PALO_ALTO_NETWORKS_CLOUD_NGFW"
  31    ] = Field(alias="ThirdPartyFirewall")
  32
  33
  34class ResponseMetadataModel(BaseModel):
  35    request_id: str = Field(alias="RequestId")
  36    host_id: str = Field(alias="HostId")
  37    http_status_code: int = Field(alias="HTTPStatusCode")
  38    http_headers: Dict[str, str] = Field(alias="HTTPHeaders")
  39    retry_attempts: int = Field(alias="RetryAttempts")
  40
  41
  42class AwsEc2NetworkInterfaceViolationModel(BaseModel):
  43    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
  44    violating_security_groups: Optional[List[str]] = Field(
  45        default=None, alias="ViolatingSecurityGroups"
  46    )
  47
  48
  49class PartialMatchModel(BaseModel):
  50    reference: Optional[str] = Field(default=None, alias="Reference")
  51    target_violation_reasons: Optional[List[str]] = Field(
  52        default=None, alias="TargetViolationReasons"
  53    )
  54
  55
  56class BatchAssociateResourceRequestModel(BaseModel):
  57    resource_set_identifier: str = Field(alias="ResourceSetIdentifier")
  58    items: Sequence[str] = Field(alias="Items")
  59
  60
  61class FailedItemModel(BaseModel):
  62    uri: Optional[str] = Field(default=None, alias="URI")
  63    reason: Optional[
  64        Literal[
  65            "NOT_VALID_ACCOUNT_ID",
  66            "NOT_VALID_ARN",
  67            "NOT_VALID_PARTITION",
  68            "NOT_VALID_REGION",
  69            "NOT_VALID_RESOURCE_TYPE",
  70            "NOT_VALID_SERVICE",
  71        ]
  72    ] = Field(default=None, alias="Reason")
  73
  74
  75class BatchDisassociateResourceRequestModel(BaseModel):
  76    resource_set_identifier: str = Field(alias="ResourceSetIdentifier")
  77    items: Sequence[str] = Field(alias="Items")
  78
  79
  80class ComplianceViolatorModel(BaseModel):
  81    resource_id: Optional[str] = Field(default=None, alias="ResourceId")
  82    violation_reason: Optional[
  83        Literal[
  84            "BLACK_HOLE_ROUTE_DETECTED",
  85            "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET",
  86            "FIREWALL_SUBNET_IS_OUT_OF_SCOPE",
  87            "FIREWALL_SUBNET_MISSING_EXPECTED_ROUTE",
  88            "FIREWALL_SUBNET_MISSING_VPCE_ENDPOINT",
  89            "FMS_CREATED_SECURITY_GROUP_EDITED",
  90            "INTERNET_GATEWAY_MISSING_EXPECTED_ROUTE",
  91            "INTERNET_TRAFFIC_NOT_INSPECTED",
  92            "INVALID_ROUTE_CONFIGURATION",
  93            "MISSING_EXPECTED_ROUTE_TABLE",
  94            "MISSING_FIREWALL",
  95            "MISSING_FIREWALL_SUBNET_IN_AZ",
  96            "MISSING_TARGET_GATEWAY",
  97            "NETWORK_FIREWALL_POLICY_MODIFIED",
  98            "RESOURCE_INCORRECT_WEB_ACL",
  99            "RESOURCE_MISSING_DNS_FIREWALL",
 100            "RESOURCE_MISSING_SECURITY_GROUP",
 101            "RESOURCE_MISSING_SHIELD_PROTECTION",
 102            "RESOURCE_MISSING_WEB_ACL",
 103            "RESOURCE_MISSING_WEB_ACL_OR_SHIELD_PROTECTION",
 104            "RESOURCE_VIOLATES_AUDIT_SECURITY_GROUP",
 105            "ROUTE_HAS_OUT_OF_SCOPE_ENDPOINT",
 106            "SECURITY_GROUP_REDUNDANT",
 107            "SECURITY_GROUP_UNUSED",
 108            "TRAFFIC_INSPECTION_CROSSES_AZ_BOUNDARY",
 109            "UNEXPECTED_FIREWALL_ROUTES",
 110            "UNEXPECTED_TARGET_GATEWAY_ROUTES",
 111            "WEB_ACL_MISSING_RULE_GROUP",
 112        ]
 113    ] = Field(default=None, alias="ViolationReason")
 114    resource_type: Optional[str] = Field(default=None, alias="ResourceType")
 115    metadata: Optional[Dict[str, str]] = Field(default=None, alias="Metadata")
 116
 117
 118class DeleteAppsListRequestModel(BaseModel):
 119    list_id: str = Field(alias="ListId")
 120
 121
 122class DeletePolicyRequestModel(BaseModel):
 123    policy_id: str = Field(alias="PolicyId")
 124    delete_all_policy_resources: Optional[bool] = Field(
 125        default=None, alias="DeleteAllPolicyResources"
 126    )
 127
 128
 129class DeleteProtocolsListRequestModel(BaseModel):
 130    list_id: str = Field(alias="ListId")
 131
 132
 133class DeleteResourceSetRequestModel(BaseModel):
 134    identifier: str = Field(alias="Identifier")
 135
 136
 137class DisassociateThirdPartyFirewallRequestModel(BaseModel):
 138    third_party_firewall: Literal[
 139        "FORTIGATE_CLOUD_NATIVE_FIREWALL", "PALO_ALTO_NETWORKS_CLOUD_NGFW"
 140    ] = Field(alias="ThirdPartyFirewall")
 141
 142
 143class DiscoveredResourceModel(BaseModel):
 144    uri: Optional[str] = Field(default=None, alias="URI")
 145    account_id: Optional[str] = Field(default=None, alias="AccountId")
 146    type: Optional[str] = Field(default=None, alias="Type")
 147    name: Optional[str] = Field(default=None, alias="Name")
 148
 149
 150class DnsDuplicateRuleGroupViolationModel(BaseModel):
 151    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 152    violation_target_description: Optional[str] = Field(
 153        default=None, alias="ViolationTargetDescription"
 154    )
 155
 156
 157class DnsRuleGroupLimitExceededViolationModel(BaseModel):
 158    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 159    violation_target_description: Optional[str] = Field(
 160        default=None, alias="ViolationTargetDescription"
 161    )
 162    number_of_rule_groups_already_associated: Optional[int] = Field(
 163        default=None, alias="NumberOfRuleGroupsAlreadyAssociated"
 164    )
 165
 166
 167class DnsRuleGroupPriorityConflictViolationModel(BaseModel):
 168    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 169    violation_target_description: Optional[str] = Field(
 170        default=None, alias="ViolationTargetDescription"
 171    )
 172    conflicting_priority: Optional[int] = Field(
 173        default=None, alias="ConflictingPriority"
 174    )
 175    conflicting_policy_id: Optional[str] = Field(
 176        default=None, alias="ConflictingPolicyId"
 177    )
 178    unavailable_priorities: Optional[List[int]] = Field(
 179        default=None, alias="UnavailablePriorities"
 180    )
 181
 182
 183class EvaluationResultModel(BaseModel):
 184    compliance_status: Optional[Literal["COMPLIANT", "NON_COMPLIANT"]] = Field(
 185        default=None, alias="ComplianceStatus"
 186    )
 187    violator_count: Optional[int] = Field(default=None, alias="ViolatorCount")
 188    evaluation_limit_exceeded: Optional[bool] = Field(
 189        default=None, alias="EvaluationLimitExceeded"
 190    )
 191
 192
 193class ExpectedRouteModel(BaseModel):
 194    ip_v4_cidr: Optional[str] = Field(default=None, alias="IpV4Cidr")
 195    prefix_list_id: Optional[str] = Field(default=None, alias="PrefixListId")
 196    ip_v6_cidr: Optional[str] = Field(default=None, alias="IpV6Cidr")
 197    contributing_subnets: Optional[List[str]] = Field(
 198        default=None, alias="ContributingSubnets"
 199    )
 200    allowed_targets: Optional[List[str]] = Field(default=None, alias="AllowedTargets")
 201    route_table_id: Optional[str] = Field(default=None, alias="RouteTableId")
 202
 203
 204class FMSPolicyUpdateFirewallCreationConfigActionModel(BaseModel):
 205    description: Optional[str] = Field(default=None, alias="Description")
 206    firewall_creation_config: Optional[str] = Field(
 207        default=None, alias="FirewallCreationConfig"
 208    )
 209
 210
 211class FirewallSubnetIsOutOfScopeViolationModel(BaseModel):
 212    firewall_subnet_id: Optional[str] = Field(default=None, alias="FirewallSubnetId")
 213    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
 214    subnet_availability_zone: Optional[str] = Field(
 215        default=None, alias="SubnetAvailabilityZone"
 216    )
 217    subnet_availability_zone_id: Optional[str] = Field(
 218        default=None, alias="SubnetAvailabilityZoneId"
 219    )
 220    vpc_endpoint_id: Optional[str] = Field(default=None, alias="VpcEndpointId")
 221
 222
 223class FirewallSubnetMissingVPCEndpointViolationModel(BaseModel):
 224    firewall_subnet_id: Optional[str] = Field(default=None, alias="FirewallSubnetId")
 225    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
 226    subnet_availability_zone: Optional[str] = Field(
 227        default=None, alias="SubnetAvailabilityZone"
 228    )
 229    subnet_availability_zone_id: Optional[str] = Field(
 230        default=None, alias="SubnetAvailabilityZoneId"
 231    )
 232
 233
 234class GetAppsListRequestModel(BaseModel):
 235    list_id: str = Field(alias="ListId")
 236    default_list: Optional[bool] = Field(default=None, alias="DefaultList")
 237
 238
 239class GetComplianceDetailRequestModel(BaseModel):
 240    policy_id: str = Field(alias="PolicyId")
 241    member_account: str = Field(alias="MemberAccount")
 242
 243
 244class GetPolicyRequestModel(BaseModel):
 245    policy_id: str = Field(alias="PolicyId")
 246
 247
 248class GetProtectionStatusRequestModel(BaseModel):
 249    policy_id: str = Field(alias="PolicyId")
 250    member_account_id: Optional[str] = Field(default=None, alias="MemberAccountId")
 251    start_time: Optional[Union[datetime, str]] = Field(default=None, alias="StartTime")
 252    end_time: Optional[Union[datetime, str]] = Field(default=None, alias="EndTime")
 253    next_token: Optional[str] = Field(default=None, alias="NextToken")
 254    max_results: Optional[int] = Field(default=None, alias="MaxResults")
 255
 256
 257class GetProtocolsListRequestModel(BaseModel):
 258    list_id: str = Field(alias="ListId")
 259    default_list: Optional[bool] = Field(default=None, alias="DefaultList")
 260
 261
 262class ProtocolsListDataModel(BaseModel):
 263    list_name: str = Field(alias="ListName")
 264    protocols_list: List[str] = Field(alias="ProtocolsList")
 265    list_id: Optional[str] = Field(default=None, alias="ListId")
 266    list_update_token: Optional[str] = Field(default=None, alias="ListUpdateToken")
 267    create_time: Optional[datetime] = Field(default=None, alias="CreateTime")
 268    last_update_time: Optional[datetime] = Field(default=None, alias="LastUpdateTime")
 269    previous_protocols_list: Optional[Dict[str, List[str]]] = Field(
 270        default=None, alias="PreviousProtocolsList"
 271    )
 272
 273
 274class GetResourceSetRequestModel(BaseModel):
 275    identifier: str = Field(alias="Identifier")
 276
 277
 278class ResourceSetModel(BaseModel):
 279    name: str = Field(alias="Name")
 280    resource_type_list: List[str] = Field(alias="ResourceTypeList")
 281    id: Optional[str] = Field(default=None, alias="Id")
 282    description: Optional[str] = Field(default=None, alias="Description")
 283    update_token: Optional[str] = Field(default=None, alias="UpdateToken")
 284    last_update_time: Optional[datetime] = Field(default=None, alias="LastUpdateTime")
 285
 286
 287class GetThirdPartyFirewallAssociationStatusRequestModel(BaseModel):
 288    third_party_firewall: Literal[
 289        "FORTIGATE_CLOUD_NATIVE_FIREWALL", "PALO_ALTO_NETWORKS_CLOUD_NGFW"
 290    ] = Field(alias="ThirdPartyFirewall")
 291
 292
 293class GetViolationDetailsRequestModel(BaseModel):
 294    policy_id: str = Field(alias="PolicyId")
 295    member_account: str = Field(alias="MemberAccount")
 296    resource_id: str = Field(alias="ResourceId")
 297    resource_type: str = Field(alias="ResourceType")
 298
 299
 300class PaginatorConfigModel(BaseModel):
 301    max_items: Optional[int] = Field(default=None, alias="MaxItems")
 302    page_size: Optional[int] = Field(default=None, alias="PageSize")
 303    starting_token: Optional[str] = Field(default=None, alias="StartingToken")
 304
 305
 306class ListAppsListsRequestModel(BaseModel):
 307    max_results: int = Field(alias="MaxResults")
 308    default_lists: Optional[bool] = Field(default=None, alias="DefaultLists")
 309    next_token: Optional[str] = Field(default=None, alias="NextToken")
 310
 311
 312class ListComplianceStatusRequestModel(BaseModel):
 313    policy_id: str = Field(alias="PolicyId")
 314    next_token: Optional[str] = Field(default=None, alias="NextToken")
 315    max_results: Optional[int] = Field(default=None, alias="MaxResults")
 316
 317
 318class ListDiscoveredResourcesRequestModel(BaseModel):
 319    member_account_ids: Sequence[str] = Field(alias="MemberAccountIds")
 320    resource_type: str = Field(alias="ResourceType")
 321    max_results: Optional[int] = Field(default=None, alias="MaxResults")
 322    next_token: Optional[str] = Field(default=None, alias="NextToken")
 323
 324
 325class ListMemberAccountsRequestModel(BaseModel):
 326    next_token: Optional[str] = Field(default=None, alias="NextToken")
 327    max_results: Optional[int] = Field(default=None, alias="MaxResults")
 328
 329
 330class ListPoliciesRequestModel(BaseModel):
 331    next_token: Optional[str] = Field(default=None, alias="NextToken")
 332    max_results: Optional[int] = Field(default=None, alias="MaxResults")
 333
 334
 335class PolicySummaryModel(BaseModel):
 336    policy_arn: Optional[str] = Field(default=None, alias="PolicyArn")
 337    policy_id: Optional[str] = Field(default=None, alias="PolicyId")
 338    policy_name: Optional[str] = Field(default=None, alias="PolicyName")
 339    resource_type: Optional[str] = Field(default=None, alias="ResourceType")
 340    security_service_type: Optional[
 341        Literal[
 342            "DNS_FIREWALL",
 343            "IMPORT_NETWORK_FIREWALL",
 344            "NETWORK_FIREWALL",
 345            "SECURITY_GROUPS_COMMON",
 346            "SECURITY_GROUPS_CONTENT_AUDIT",
 347            "SECURITY_GROUPS_USAGE_AUDIT",
 348            "SHIELD_ADVANCED",
 349            "THIRD_PARTY_FIREWALL",
 350            "WAF",
 351            "WAFV2",
 352        ]
 353    ] = Field(default=None, alias="SecurityServiceType")
 354    remediation_enabled: Optional[bool] = Field(
 355        default=None, alias="RemediationEnabled"
 356    )
 357    delete_unused_fmmanaged_resources: Optional[bool] = Field(
 358        default=None, alias="DeleteUnusedFMManagedResources"
 359    )
 360
 361
 362class ListProtocolsListsRequestModel(BaseModel):
 363    max_results: int = Field(alias="MaxResults")
 364    default_lists: Optional[bool] = Field(default=None, alias="DefaultLists")
 365    next_token: Optional[str] = Field(default=None, alias="NextToken")
 366
 367
 368class ProtocolsListDataSummaryModel(BaseModel):
 369    list_arn: Optional[str] = Field(default=None, alias="ListArn")
 370    list_id: Optional[str] = Field(default=None, alias="ListId")
 371    list_name: Optional[str] = Field(default=None, alias="ListName")
 372    protocols_list: Optional[List[str]] = Field(default=None, alias="ProtocolsList")
 373
 374
 375class ListResourceSetResourcesRequestModel(BaseModel):
 376    identifier: str = Field(alias="Identifier")
 377    max_results: Optional[int] = Field(default=None, alias="MaxResults")
 378    next_token: Optional[str] = Field(default=None, alias="NextToken")
 379
 380
 381class ResourceModel(BaseModel):
 382    uri: str = Field(alias="URI")
 383    account_id: Optional[str] = Field(default=None, alias="AccountId")
 384
 385
 386class ListResourceSetsRequestModel(BaseModel):
 387    next_token: Optional[str] = Field(default=None, alias="NextToken")
 388    max_results: Optional[int] = Field(default=None, alias="MaxResults")
 389
 390
 391class ResourceSetSummaryModel(BaseModel):
 392    id: Optional[str] = Field(default=None, alias="Id")
 393    name: Optional[str] = Field(default=None, alias="Name")
 394    description: Optional[str] = Field(default=None, alias="Description")
 395    last_update_time: Optional[datetime] = Field(default=None, alias="LastUpdateTime")
 396
 397
 398class ListTagsForResourceRequestModel(BaseModel):
 399    resource_arn: str = Field(alias="ResourceArn")
 400
 401
 402class TagModel(BaseModel):
 403    key: str = Field(alias="Key")
 404    value: str = Field(alias="Value")
 405
 406
 407class ListThirdPartyFirewallFirewallPoliciesRequestModel(BaseModel):
 408    third_party_firewall: Literal[
 409        "FORTIGATE_CLOUD_NATIVE_FIREWALL", "PALO_ALTO_NETWORKS_CLOUD_NGFW"
 410    ] = Field(alias="ThirdPartyFirewall")
 411    max_results: int = Field(alias="MaxResults")
 412    next_token: Optional[str] = Field(default=None, alias="NextToken")
 413
 414
 415class ThirdPartyFirewallFirewallPolicyModel(BaseModel):
 416    firewall_policy_id: Optional[str] = Field(default=None, alias="FirewallPolicyId")
 417    firewall_policy_name: Optional[str] = Field(
 418        default=None, alias="FirewallPolicyName"
 419    )
 420
 421
 422class RouteModel(BaseModel):
 423    destination_type: Optional[Literal["IPV4", "IPV6", "PREFIX_LIST"]] = Field(
 424        default=None, alias="DestinationType"
 425    )
 426    target_type: Optional[
 427        Literal[
 428            "CARRIER_GATEWAY",
 429            "EGRESS_ONLY_INTERNET_GATEWAY",
 430            "GATEWAY",
 431            "INSTANCE",
 432            "LOCAL_GATEWAY",
 433            "NAT_GATEWAY",
 434            "NETWORK_INTERFACE",
 435            "TRANSIT_GATEWAY",
 436            "VPC_ENDPOINT",
 437            "VPC_PEERING_CONNECTION",
 438        ]
 439    ] = Field(default=None, alias="TargetType")
 440    destination: Optional[str] = Field(default=None, alias="Destination")
 441    target: Optional[str] = Field(default=None, alias="Target")
 442
 443
 444class NetworkFirewallMissingExpectedRTViolationModel(BaseModel):
 445    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 446    vp_c: Optional[str] = Field(default=None, alias="VPC")
 447    availability_zone: Optional[str] = Field(default=None, alias="AvailabilityZone")
 448    current_route_table: Optional[str] = Field(default=None, alias="CurrentRouteTable")
 449    expected_route_table: Optional[str] = Field(
 450        default=None, alias="ExpectedRouteTable"
 451    )
 452
 453
 454class NetworkFirewallMissingFirewallViolationModel(BaseModel):
 455    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 456    vp_c: Optional[str] = Field(default=None, alias="VPC")
 457    availability_zone: Optional[str] = Field(default=None, alias="AvailabilityZone")
 458    target_violation_reason: Optional[str] = Field(
 459        default=None, alias="TargetViolationReason"
 460    )
 461
 462
 463class NetworkFirewallMissingSubnetViolationModel(BaseModel):
 464    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 465    vp_c: Optional[str] = Field(default=None, alias="VPC")
 466    availability_zone: Optional[str] = Field(default=None, alias="AvailabilityZone")
 467    target_violation_reason: Optional[str] = Field(
 468        default=None, alias="TargetViolationReason"
 469    )
 470
 471
 472class StatefulEngineOptionsModel(BaseModel):
 473    rule_order: Optional[Literal["DEFAULT_ACTION_ORDER", "STRICT_ORDER"]] = Field(
 474        default=None, alias="RuleOrder"
 475    )
 476
 477
 478class StatelessRuleGroupModel(BaseModel):
 479    rule_group_name: Optional[str] = Field(default=None, alias="RuleGroupName")
 480    resource_id: Optional[str] = Field(default=None, alias="ResourceId")
 481    priority: Optional[int] = Field(default=None, alias="Priority")
 482
 483
 484class NetworkFirewallPolicyModel(BaseModel):
 485    firewall_deployment_model: Optional[Literal["CENTRALIZED", "DISTRIBUTED"]] = Field(
 486        default=None, alias="FirewallDeploymentModel"
 487    )
 488
 489
 490class NetworkFirewallStatefulRuleGroupOverrideModel(BaseModel):
 491    action: Optional[Literal["DROP_TO_ALERT"]] = Field(default=None, alias="Action")
 492
 493
 494class ThirdPartyFirewallPolicyModel(BaseModel):
 495    firewall_deployment_model: Optional[Literal["CENTRALIZED", "DISTRIBUTED"]] = Field(
 496        default=None, alias="FirewallDeploymentModel"
 497    )
 498
 499
 500class ResourceTagModel(BaseModel):
 501    key: str = Field(alias="Key")
 502    value: Optional[str] = Field(default=None, alias="Value")
 503
 504
 505class PutNotificationChannelRequestModel(BaseModel):
 506    sns_topic_arn: str = Field(alias="SnsTopicArn")
 507    sns_role_name: str = Field(alias="SnsRoleName")
 508
 509
 510class ThirdPartyFirewallMissingExpectedRouteTableViolationModel(BaseModel):
 511    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 512    vp_c: Optional[str] = Field(default=None, alias="VPC")
 513    availability_zone: Optional[str] = Field(default=None, alias="AvailabilityZone")
 514    current_route_table: Optional[str] = Field(default=None, alias="CurrentRouteTable")
 515    expected_route_table: Optional[str] = Field(
 516        default=None, alias="ExpectedRouteTable"
 517    )
 518
 519
 520class ThirdPartyFirewallMissingFirewallViolationModel(BaseModel):
 521    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 522    vp_c: Optional[str] = Field(default=None, alias="VPC")
 523    availability_zone: Optional[str] = Field(default=None, alias="AvailabilityZone")
 524    target_violation_reason: Optional[str] = Field(
 525        default=None, alias="TargetViolationReason"
 526    )
 527
 528
 529class ThirdPartyFirewallMissingSubnetViolationModel(BaseModel):
 530    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 531    vp_c: Optional[str] = Field(default=None, alias="VPC")
 532    availability_zone: Optional[str] = Field(default=None, alias="AvailabilityZone")
 533    target_violation_reason: Optional[str] = Field(
 534        default=None, alias="TargetViolationReason"
 535    )
 536
 537
 538class SecurityGroupRuleDescriptionModel(BaseModel):
 539    ip_v4_range: Optional[str] = Field(default=None, alias="IPV4Range")
 540    ip_v6_range: Optional[str] = Field(default=None, alias="IPV6Range")
 541    prefix_list_id: Optional[str] = Field(default=None, alias="PrefixListId")
 542    protocol: Optional[str] = Field(default=None, alias="Protocol")
 543    from_port: Optional[int] = Field(default=None, alias="FromPort")
 544    to_port: Optional[int] = Field(default=None, alias="ToPort")
 545
 546
 547class UntagResourceRequestModel(BaseModel):
 548    resource_arn: str = Field(alias="ResourceArn")
 549    tag_keys: Sequence[str] = Field(alias="TagKeys")
 550
 551
 552class EC2AssociateRouteTableActionModel(BaseModel):
 553    route_table_id: ActionTargetModel = Field(alias="RouteTableId")
 554    description: Optional[str] = Field(default=None, alias="Description")
 555    subnet_id: Optional[ActionTargetModel] = Field(default=None, alias="SubnetId")
 556    gateway_id: Optional[ActionTargetModel] = Field(default=None, alias="GatewayId")
 557
 558
 559class EC2CopyRouteTableActionModel(BaseModel):
 560    vpc_id: ActionTargetModel = Field(alias="VpcId")
 561    route_table_id: ActionTargetModel = Field(alias="RouteTableId")
 562    description: Optional[str] = Field(default=None, alias="Description")
 563
 564
 565class EC2CreateRouteActionModel(BaseModel):
 566    route_table_id: ActionTargetModel = Field(alias="RouteTableId")
 567    description: Optional[str] = Field(default=None, alias="Description")
 568    destination_cidr_block: Optional[str] = Field(
 569        default=None, alias="DestinationCidrBlock"
 570    )
 571    destination_prefix_list_id: Optional[str] = Field(
 572        default=None, alias="DestinationPrefixListId"
 573    )
 574    destination_ipv6_cidr_block: Optional[str] = Field(
 575        default=None, alias="DestinationIpv6CidrBlock"
 576    )
 577    vpc_endpoint_id: Optional[ActionTargetModel] = Field(
 578        default=None, alias="VpcEndpointId"
 579    )
 580    gateway_id: Optional[ActionTargetModel] = Field(default=None, alias="GatewayId")
 581
 582
 583class EC2CreateRouteTableActionModel(BaseModel):
 584    vpc_id: ActionTargetModel = Field(alias="VpcId")
 585    description: Optional[str] = Field(default=None, alias="Description")
 586
 587
 588class EC2DeleteRouteActionModel(BaseModel):
 589    route_table_id: ActionTargetModel = Field(alias="RouteTableId")
 590    description: Optional[str] = Field(default=None, alias="Description")
 591    destination_cidr_block: Optional[str] = Field(
 592        default=None, alias="DestinationCidrBlock"
 593    )
 594    destination_prefix_list_id: Optional[str] = Field(
 595        default=None, alias="DestinationPrefixListId"
 596    )
 597    destination_ipv6_cidr_block: Optional[str] = Field(
 598        default=None, alias="DestinationIpv6CidrBlock"
 599    )
 600
 601
 602class EC2ReplaceRouteActionModel(BaseModel):
 603    route_table_id: ActionTargetModel = Field(alias="RouteTableId")
 604    description: Optional[str] = Field(default=None, alias="Description")
 605    destination_cidr_block: Optional[str] = Field(
 606        default=None, alias="DestinationCidrBlock"
 607    )
 608    destination_prefix_list_id: Optional[str] = Field(
 609        default=None, alias="DestinationPrefixListId"
 610    )
 611    destination_ipv6_cidr_block: Optional[str] = Field(
 612        default=None, alias="DestinationIpv6CidrBlock"
 613    )
 614    gateway_id: Optional[ActionTargetModel] = Field(default=None, alias="GatewayId")
 615
 616
 617class EC2ReplaceRouteTableAssociationActionModel(BaseModel):
 618    association_id: ActionTargetModel = Field(alias="AssociationId")
 619    route_table_id: ActionTargetModel = Field(alias="RouteTableId")
 620    description: Optional[str] = Field(default=None, alias="Description")
 621
 622
 623class AppsListDataSummaryModel(BaseModel):
 624    list_arn: Optional[str] = Field(default=None, alias="ListArn")
 625    list_id: Optional[str] = Field(default=None, alias="ListId")
 626    list_name: Optional[str] = Field(default=None, alias="ListName")
 627    apps_list: Optional[List[AppModel]] = Field(default=None, alias="AppsList")
 628
 629
 630class AppsListDataModel(BaseModel):
 631    list_name: str = Field(alias="ListName")
 632    apps_list: List[AppModel] = Field(alias="AppsList")
 633    list_id: Optional[str] = Field(default=None, alias="ListId")
 634    list_update_token: Optional[str] = Field(default=None, alias="ListUpdateToken")
 635    create_time: Optional[datetime] = Field(default=None, alias="CreateTime")
 636    last_update_time: Optional[datetime] = Field(default=None, alias="LastUpdateTime")
 637    previous_apps_list: Optional[Dict[str, List[AppModel]]] = Field(
 638        default=None, alias="PreviousAppsList"
 639    )
 640
 641
 642class AssociateThirdPartyFirewallResponseModel(BaseModel):
 643    third_party_firewall_status: Literal[
 644        "NOT_EXIST",
 645        "OFFBOARDING",
 646        "OFFBOARD_COMPLETE",
 647        "ONBOARDING",
 648        "ONBOARD_COMPLETE",
 649    ] = Field(alias="ThirdPartyFirewallStatus")
 650    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 651
 652
 653class DisassociateThirdPartyFirewallResponseModel(BaseModel):
 654    third_party_firewall_status: Literal[
 655        "NOT_EXIST",
 656        "OFFBOARDING",
 657        "OFFBOARD_COMPLETE",
 658        "ONBOARDING",
 659        "ONBOARD_COMPLETE",
 660    ] = Field(alias="ThirdPartyFirewallStatus")
 661    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 662
 663
 664class EmptyResponseMetadataModel(BaseModel):
 665    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 666
 667
 668class GetAdminAccountResponseModel(BaseModel):
 669    admin_account: str = Field(alias="AdminAccount")
 670    role_status: Literal[
 671        "CREATING", "DELETED", "DELETING", "PENDING_DELETION", "READY"
 672    ] = Field(alias="RoleStatus")
 673    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 674
 675
 676class GetNotificationChannelResponseModel(BaseModel):
 677    sns_topic_arn: str = Field(alias="SnsTopicArn")
 678    sns_role_name: str = Field(alias="SnsRoleName")
 679    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 680
 681
 682class GetProtectionStatusResponseModel(BaseModel):
 683    admin_account_id: str = Field(alias="AdminAccountId")
 684    service_type: Literal[
 685        "DNS_FIREWALL",
 686        "IMPORT_NETWORK_FIREWALL",
 687        "NETWORK_FIREWALL",
 688        "SECURITY_GROUPS_COMMON",
 689        "SECURITY_GROUPS_CONTENT_AUDIT",
 690        "SECURITY_GROUPS_USAGE_AUDIT",
 691        "SHIELD_ADVANCED",
 692        "THIRD_PARTY_FIREWALL",
 693        "WAF",
 694        "WAFV2",
 695    ] = Field(alias="ServiceType")
 696    data: str = Field(alias="Data")
 697    next_token: str = Field(alias="NextToken")
 698    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 699
 700
 701class GetThirdPartyFirewallAssociationStatusResponseModel(BaseModel):
 702    third_party_firewall_status: Literal[
 703        "NOT_EXIST",
 704        "OFFBOARDING",
 705        "OFFBOARD_COMPLETE",
 706        "ONBOARDING",
 707        "ONBOARD_COMPLETE",
 708    ] = Field(alias="ThirdPartyFirewallStatus")
 709    marketplace_onboarding_status: Literal[
 710        "COMPLETE", "NOT_COMPLETE", "NO_SUBSCRIPTION"
 711    ] = Field(alias="MarketplaceOnboardingStatus")
 712    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 713
 714
 715class ListMemberAccountsResponseModel(BaseModel):
 716    member_accounts: List[str] = Field(alias="MemberAccounts")
 717    next_token: str = Field(alias="NextToken")
 718    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 719
 720
 721class AwsEc2InstanceViolationModel(BaseModel):
 722    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 723    aws_ec2_network_interface_violations: Optional[
 724        List[AwsEc2NetworkInterfaceViolationModel]
 725    ] = Field(default=None, alias="AwsEc2NetworkInterfaceViolations")
 726
 727
 728class BatchAssociateResourceResponseModel(BaseModel):
 729    resource_set_identifier: str = Field(alias="ResourceSetIdentifier")
 730    failed_items: List[FailedItemModel] = Field(alias="FailedItems")
 731    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 732
 733
 734class BatchDisassociateResourceResponseModel(BaseModel):
 735    resource_set_identifier: str = Field(alias="ResourceSetIdentifier")
 736    failed_items: List[FailedItemModel] = Field(alias="FailedItems")
 737    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 738
 739
 740class PolicyComplianceDetailModel(BaseModel):
 741    policy_owner: Optional[str] = Field(default=None, alias="PolicyOwner")
 742    policy_id: Optional[str] = Field(default=None, alias="PolicyId")
 743    member_account: Optional[str] = Field(default=None, alias="MemberAccount")
 744    violators: Optional[List[ComplianceViolatorModel]] = Field(
 745        default=None, alias="Violators"
 746    )
 747    evaluation_limit_exceeded: Optional[bool] = Field(
 748        default=None, alias="EvaluationLimitExceeded"
 749    )
 750    expired_at: Optional[datetime] = Field(default=None, alias="ExpiredAt")
 751    issue_info_map: Optional[
 752        Dict[Literal["AWSCONFIG", "AWSSHIELD_ADVANCED", "AWSVPC", "AWSWAF"], str]
 753    ] = Field(default=None, alias="IssueInfoMap")
 754
 755
 756class ListDiscoveredResourcesResponseModel(BaseModel):
 757    items: List[DiscoveredResourceModel] = Field(alias="Items")
 758    next_token: str = Field(alias="NextToken")
 759    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 760
 761
 762class PolicyComplianceStatusModel(BaseModel):
 763    policy_owner: Optional[str] = Field(default=None, alias="PolicyOwner")
 764    policy_id: Optional[str] = Field(default=None, alias="PolicyId")
 765    policy_name: Optional[str] = Field(default=None, alias="PolicyName")
 766    member_account: Optional[str] = Field(default=None, alias="MemberAccount")
 767    evaluation_results: Optional[List[EvaluationResultModel]] = Field(
 768        default=None, alias="EvaluationResults"
 769    )
 770    last_updated: Optional[datetime] = Field(default=None, alias="LastUpdated")
 771    issue_info_map: Optional[
 772        Dict[Literal["AWSCONFIG", "AWSSHIELD_ADVANCED", "AWSVPC", "AWSWAF"], str]
 773    ] = Field(default=None, alias="IssueInfoMap")
 774
 775
 776class NetworkFirewallMissingExpectedRoutesViolationModel(BaseModel):
 777    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 778    expected_routes: Optional[List[ExpectedRouteModel]] = Field(
 779        default=None, alias="ExpectedRoutes"
 780    )
 781    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
 782
 783
 784class GetProtocolsListResponseModel(BaseModel):
 785    protocols_list: ProtocolsListDataModel = Field(alias="ProtocolsList")
 786    protocols_list_arn: str = Field(alias="ProtocolsListArn")
 787    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 788
 789
 790class PutProtocolsListResponseModel(BaseModel):
 791    protocols_list: ProtocolsListDataModel = Field(alias="ProtocolsList")
 792    protocols_list_arn: str = Field(alias="ProtocolsListArn")
 793    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 794
 795
 796class GetResourceSetResponseModel(BaseModel):
 797    resource_set: ResourceSetModel = Field(alias="ResourceSet")
 798    resource_set_arn: str = Field(alias="ResourceSetArn")
 799    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 800
 801
 802class PutResourceSetResponseModel(BaseModel):
 803    resource_set: ResourceSetModel = Field(alias="ResourceSet")
 804    resource_set_arn: str = Field(alias="ResourceSetArn")
 805    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 806
 807
 808class ListAppsListsRequestListAppsListsPaginateModel(BaseModel):
 809    default_lists: Optional[bool] = Field(default=None, alias="DefaultLists")
 810    pagination_config: Optional[PaginatorConfigModel] = Field(
 811        default=None, alias="PaginationConfig"
 812    )
 813
 814
 815class ListComplianceStatusRequestListComplianceStatusPaginateModel(BaseModel):
 816    policy_id: str = Field(alias="PolicyId")
 817    pagination_config: Optional[PaginatorConfigModel] = Field(
 818        default=None, alias="PaginationConfig"
 819    )
 820
 821
 822class ListMemberAccountsRequestListMemberAccountsPaginateModel(BaseModel):
 823    pagination_config: Optional[PaginatorConfigModel] = Field(
 824        default=None, alias="PaginationConfig"
 825    )
 826
 827
 828class ListPoliciesRequestListPoliciesPaginateModel(BaseModel):
 829    pagination_config: Optional[PaginatorConfigModel] = Field(
 830        default=None, alias="PaginationConfig"
 831    )
 832
 833
 834class ListProtocolsListsRequestListProtocolsListsPaginateModel(BaseModel):
 835    default_lists: Optional[bool] = Field(default=None, alias="DefaultLists")
 836    pagination_config: Optional[PaginatorConfigModel] = Field(
 837        default=None, alias="PaginationConfig"
 838    )
 839
 840
 841class ListThirdPartyFirewallFirewallPoliciesRequestListThirdPartyFirewallFirewallPoliciesPaginateModel(
 842    BaseModel
 843):
 844    third_party_firewall: Literal[
 845        "FORTIGATE_CLOUD_NATIVE_FIREWALL", "PALO_ALTO_NETWORKS_CLOUD_NGFW"
 846    ] = Field(alias="ThirdPartyFirewall")
 847    pagination_config: Optional[PaginatorConfigModel] = Field(
 848        default=None, alias="PaginationConfig"
 849    )
 850
 851
 852class ListPoliciesResponseModel(BaseModel):
 853    policy_list: List[PolicySummaryModel] = Field(alias="PolicyList")
 854    next_token: str = Field(alias="NextToken")
 855    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 856
 857
 858class ListProtocolsListsResponseModel(BaseModel):
 859    protocols_lists: List[ProtocolsListDataSummaryModel] = Field(alias="ProtocolsLists")
 860    next_token: str = Field(alias="NextToken")
 861    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 862
 863
 864class ListResourceSetResourcesResponseModel(BaseModel):
 865    items: List[ResourceModel] = Field(alias="Items")
 866    next_token: str = Field(alias="NextToken")
 867    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 868
 869
 870class ListResourceSetsResponseModel(BaseModel):
 871    resource_sets: List[ResourceSetSummaryModel] = Field(alias="ResourceSets")
 872    next_token: str = Field(alias="NextToken")
 873    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 874
 875
 876class ListTagsForResourceResponseModel(BaseModel):
 877    tag_list: List[TagModel] = Field(alias="TagList")
 878    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 879
 880
 881class PutProtocolsListRequestModel(BaseModel):
 882    protocols_list: ProtocolsListDataModel = Field(alias="ProtocolsList")
 883    tag_list: Optional[Sequence[TagModel]] = Field(default=None, alias="TagList")
 884
 885
 886class PutResourceSetRequestModel(BaseModel):
 887    resource_set: ResourceSetModel = Field(alias="ResourceSet")
 888    tag_list: Optional[Sequence[TagModel]] = Field(default=None, alias="TagList")
 889
 890
 891class TagResourceRequestModel(BaseModel):
 892    resource_arn: str = Field(alias="ResourceArn")
 893    tag_list: Sequence[TagModel] = Field(alias="TagList")
 894
 895
 896class ListThirdPartyFirewallFirewallPoliciesResponseModel(BaseModel):
 897    third_party_firewall_firewall_policies: List[
 898        ThirdPartyFirewallFirewallPolicyModel
 899    ] = Field(alias="ThirdPartyFirewallFirewallPolicies")
 900    next_token: str = Field(alias="NextToken")
 901    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
 902
 903
 904class NetworkFirewallBlackHoleRouteDetectedViolationModel(BaseModel):
 905    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
 906    route_table_id: Optional[str] = Field(default=None, alias="RouteTableId")
 907    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
 908    violating_routes: Optional[List[RouteModel]] = Field(
 909        default=None, alias="ViolatingRoutes"
 910    )
 911
 912
 913class NetworkFirewallInternetTrafficNotInspectedViolationModel(BaseModel):
 914    subnet_id: Optional[str] = Field(default=None, alias="SubnetId")
 915    subnet_availability_zone: Optional[str] = Field(
 916        default=None, alias="SubnetAvailabilityZone"
 917    )
 918    route_table_id: Optional[str] = Field(default=None, alias="RouteTableId")
 919    violating_routes: Optional[List[RouteModel]] = Field(
 920        default=None, alias="ViolatingRoutes"
 921    )
 922    is_route_table_used_in_different_az: Optional[bool] = Field(
 923        default=None, alias="IsRouteTableUsedInDifferentAZ"
 924    )
 925    current_firewall_subnet_route_table: Optional[str] = Field(
 926        default=None, alias="CurrentFirewallSubnetRouteTable"
 927    )
 928    expected_firewall_endpoint: Optional[str] = Field(
 929        default=None, alias="ExpectedFirewallEndpoint"
 930    )
 931    firewall_subnet_id: Optional[str] = Field(default=None, alias="FirewallSubnetId")
 932    expected_firewall_subnet_routes: Optional[List[ExpectedRouteModel]] = Field(
 933        default=None, alias="ExpectedFirewallSubnetRoutes"
 934    )
 935    actual_firewall_subnet_routes: Optional[List[RouteModel]] = Field(
 936        default=None, alias="ActualFirewallSubnetRoutes"
 937    )
 938    internet_gateway_id: Optional[str] = Field(default=None, alias="InternetGatewayId")
 939    current_internet_gateway_route_table: Optional[str] = Field(
 940        default=None, alias="CurrentInternetGatewayRouteTable"
 941    )
 942    expected_internet_gateway_routes: Optional[List[ExpectedRouteModel]] = Field(
 943        default=None, alias="ExpectedInternetGatewayRoutes"
 944    )
 945    actual_internet_gateway_routes: Optional[List[RouteModel]] = Field(
 946        default=None, alias="ActualInternetGatewayRoutes"
 947    )
 948    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
 949
 950
 951class NetworkFirewallInvalidRouteConfigurationViolationModel(BaseModel):
 952    affected_subnets: Optional[List[str]] = Field(default=None, alias="AffectedSubnets")
 953    route_table_id: Optional[str] = Field(default=None, alias="RouteTableId")
 954    is_route_table_used_in_different_az: Optional[bool] = Field(
 955        default=None, alias="IsRouteTableUsedInDifferentAZ"
 956    )
 957    violating_route: Optional[RouteModel] = Field(default=None, alias="ViolatingRoute")
 958    current_firewall_subnet_route_table: Optional[str] = Field(
 959        default=None, alias="CurrentFirewallSubnetRouteTable"
 960    )
 961    expected_firewall_endpoint: Optional[str] = Field(
 962        default=None, alias="ExpectedFirewallEndpoint"
 963    )
 964    actual_firewall_endpoint: Optional[str] = Field(
 965        default=None, alias="ActualFirewallEndpoint"
 966    )
 967    expected_firewall_subnet_id: Optional[str] = Field(
 968        default=None, alias="ExpectedFirewallSubnetId"
 969    )
 970    actual_firewall_subnet_id: Optional[str] = Field(
 971        default=None, alias="ActualFirewallSubnetId"
 972    )
 973    expected_firewall_subnet_routes: Optional[List[ExpectedRouteModel]] = Field(
 974        default=None, alias="ExpectedFirewallSubnetRoutes"
 975    )
 976    actual_firewall_subnet_routes: Optional[List[RouteModel]] = Field(
 977        default=None, alias="ActualFirewallSubnetRoutes"
 978    )
 979    internet_gateway_id: Optional[str] = Field(default=None, alias="InternetGatewayId")
 980    current_internet_gateway_route_table: Optional[str] = Field(
 981        default=None, alias="CurrentInternetGatewayRouteTable"
 982    )
 983    expected_internet_gateway_routes: Optional[List[ExpectedRouteModel]] = Field(
 984        default=None, alias="ExpectedInternetGatewayRoutes"
 985    )
 986    actual_internet_gateway_routes: Optional[List[RouteModel]] = Field(
 987        default=None, alias="ActualInternetGatewayRoutes"
 988    )
 989    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
 990
 991
 992class NetworkFirewallUnexpectedFirewallRoutesViolationModel(BaseModel):
 993    firewall_subnet_id: Optional[str] = Field(default=None, alias="FirewallSubnetId")
 994    violating_routes: Optional[List[RouteModel]] = Field(
 995        default=None, alias="ViolatingRoutes"
 996    )
 997    route_table_id: Optional[str] = Field(default=None, alias="RouteTableId")
 998    firewall_endpoint: Optional[str] = Field(default=None, alias="FirewallEndpoint")
 999    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
1000
1001
1002class NetworkFirewallUnexpectedGatewayRoutesViolationModel(BaseModel):
1003    gateway_id: Optional[str] = Field(default=None, alias="GatewayId")
1004    violating_routes: Optional[List[RouteModel]] = Field(
1005        default=None, alias="ViolatingRoutes"
1006    )
1007    route_table_id: Optional[str] = Field(default=None, alias="RouteTableId")
1008    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
1009
1010
1011class RouteHasOutOfScopeEndpointViolationModel(BaseModel):
1012    subnet_id: Optional[str] = Field(default=None, alias="SubnetId")
1013    vpc_id: Optional[str] = Field(default=None, alias="VpcId")
1014    route_table_id: Optional[str] = Field(default=None, alias="RouteTableId")
1015    violating_routes: Optional[List[RouteModel]] = Field(
1016        default=None, alias="ViolatingRoutes"
1017    )
1018    subnet_availability_zone: Optional[str] = Field(
1019        default=None, alias="SubnetAvailabilityZone"
1020    )
1021    subnet_availability_zone_id: Optional[str] = Field(
1022        default=None, alias="SubnetAvailabilityZoneId"
1023    )
1024    current_firewall_subnet_route_table: Optional[str] = Field(
1025        default=None, alias="CurrentFirewallSubnetRouteTable"
1026    )
1027    firewall_subnet_id: Optional[str] = Field(default=None, alias="FirewallSubnetId")
1028    firewall_subnet_routes: Optional[List[RouteModel]] = Field(
1029        default=None, alias="FirewallSubnetRoutes"
1030    )
1031    internet_gateway_id: Optional[str] = Field(default=None, alias="InternetGatewayId")
1032    current_internet_gateway_route_table: Optional[str] = Field(
1033        default=None, alias="CurrentInternetGatewayRouteTable"
1034    )
1035    internet_gateway_routes: Optional[List[RouteModel]] = Field(
1036        default=None, alias="InternetGatewayRoutes"
1037    )
1038
1039
1040class StatefulRuleGroupModel(BaseModel):
1041    rule_group_name: Optional[str] = Field(default=None, alias="RuleGroupName")
1042    resource_id: Optional[str] = Field(default=None, alias="ResourceId")
1043    priority: Optional[int] = Field(default=None, alias="Priority")
1044    override: Optional[NetworkFirewallStatefulRuleGroupOverrideModel] = Field(
1045        default=None, alias="Override"
1046    )
1047
1048
1049class PolicyOptionModel(BaseModel):
1050    network_firewall_policy: Optional[NetworkFirewallPolicyModel] = Field(
1051        default=None, alias="NetworkFirewallPolicy"
1052    )
1053    third_party_firewall_policy: Optional[ThirdPartyFirewallPolicyModel] = Field(
1054        default=None, alias="ThirdPartyFirewallPolicy"
1055    )
1056
1057
1058class SecurityGroupRemediationActionModel(BaseModel):
1059    remediation_action_type: Optional[Literal["MODIFY", "REMOVE"]] = Field(
1060        default=None, alias="RemediationActionType"
1061    )
1062    description: Optional[str] = Field(default=None, alias="Description")
1063    remediation_result: Optional[SecurityGroupRuleDescriptionModel] = Field(
1064        default=None, alias="RemediationResult"
1065    )
1066    is_default_action: Optional[bool] = Field(default=None, alias="IsDefaultAction")
1067
1068
1069class RemediationActionModel(BaseModel):
1070    description: Optional[str] = Field(default=None, alias="Description")
1071    ec2_create_route_action: Optional[EC2CreateRouteActionModel] = Field(
1072        default=None, alias="EC2CreateRouteAction"
1073    )
1074    ec2_replace_route_action: Optional[EC2ReplaceRouteActionModel] = Field(
1075        default=None, alias="EC2ReplaceRouteAction"
1076    )
1077    ec2_delete_route_action: Optional[EC2DeleteRouteActionModel] = Field(
1078        default=None, alias="EC2DeleteRouteAction"
1079    )
1080    ec2_copy_route_table_action: Optional[EC2CopyRouteTableActionModel] = Field(
1081        default=None, alias="EC2CopyRouteTableAction"
1082    )
1083    ec2_replace_route_table_association_action: Optional[
1084        EC2ReplaceRouteTableAssociationActionModel
1085    ] = Field(default=None, alias="EC2ReplaceRouteTableAssociationAction")
1086    ec2_associate_route_table_action: Optional[
1087        EC2AssociateRouteTableActionModel
1088    ] = Field(default=None, alias="EC2AssociateRouteTableAction")
1089    ec2_create_route_table_action: Optional[EC2CreateRouteTableActionModel] = Field(
1090        default=None, alias="EC2CreateRouteTableAction"
1091    )
1092    fms_policy_update_firewall_creation_config_action: Optional[
1093        FMSPolicyUpdateFirewallCreationConfigActionModel
1094    ] = Field(default=None, alias="FMSPolicyUpdateFirewallCreationConfigAction")
1095
1096
1097class ListAppsListsResponseModel(BaseModel):
1098    apps_lists: List[AppsListDataSummaryModel] = Field(alias="AppsLists")
1099    next_token: str = Field(alias="NextToken")
1100    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
1101
1102
1103class GetAppsListResponseModel(BaseModel):
1104    apps_list: AppsListDataModel = Field(alias="AppsList")
1105    apps_list_arn: str = Field(alias="AppsListArn")
1106    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
1107
1108
1109class PutAppsListRequestModel(BaseModel):
1110    apps_list: AppsListDataModel = Field(alias="AppsList")
1111    tag_list: Optional[Sequence[TagModel]] = Field(default=None, alias="TagList")
1112
1113
1114class PutAppsListResponseModel(BaseModel):
1115    apps_list: AppsListDataModel = Field(alias="AppsList")
1116    apps_list_arn: str = Field(alias="AppsListArn")
1117    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
1118
1119
1120class GetComplianceDetailResponseModel(BaseModel):
1121    policy_compliance_detail: PolicyComplianceDetailModel = Field(
1122        alias="PolicyComplianceDetail"
1123    )
1124    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
1125
1126
1127class ListComplianceStatusResponseModel(BaseModel):
1128    policy_compliance_status_list: List[PolicyComplianceStatusModel] = Field(
1129        alias="PolicyComplianceStatusList"
1130    )
1131    next_token: str = Field(alias="NextToken")
1132    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
1133
1134
1135class NetworkFirewallPolicyDescriptionModel(BaseModel):
1136    stateless_rule_groups: Optional[List[StatelessRuleGroupModel]] = Field(
1137        default=None, alias="StatelessRuleGroups"
1138    )
1139    stateless_default_actions: Optional[List[str]] = Field(
1140        default=None, alias="StatelessDefaultActions"
1141    )
1142    stateless_fragment_default_actions: Optional[List[str]] = Field(
1143        default=None, alias="StatelessFragmentDefaultActions"
1144    )
1145    stateless_custom_actions: Optional[List[str]] = Field(
1146        default=None, alias="StatelessCustomActions"
1147    )
1148    stateful_rule_groups: Optional[List[StatefulRuleGroupModel]] = Field(
1149        default=None, alias="StatefulRuleGroups"
1150    )
1151    stateful_default_actions: Optional[List[str]] = Field(
1152        default=None, alias="StatefulDefaultActions"
1153    )
1154    stateful_engine_options: Optional[StatefulEngineOptionsModel] = Field(
1155        default=None, alias="StatefulEngineOptions"
1156    )
1157
1158
1159class SecurityServicePolicyDataModel(BaseModel):
1160    type: Literal[
1161        "DNS_FIREWALL",
1162        "IMPORT_NETWORK_FIREWALL",
1163        "NETWORK_FIREWALL",
1164        "SECURITY_GROUPS_COMMON",
1165        "SECURITY_GROUPS_CONTENT_AUDIT",
1166        "SECURITY_GROUPS_USAGE_AUDIT",
1167        "SHIELD_ADVANCED",
1168        "THIRD_PARTY_FIREWALL",
1169        "WAF",
1170        "WAFV2",
1171    ] = Field(alias="Type")
1172    managed_service_data: Optional[str] = Field(
1173        default=None, alias="ManagedServiceData"
1174    )
1175    policy_option: Optional[PolicyOptionModel] = Field(
1176        default=None, alias="PolicyOption"
1177    )
1178
1179
1180class AwsVPCSecurityGroupViolationModel(BaseModel):
1181    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
1182    violation_target_description: Optional[str] = Field(
1183        default=None, alias="ViolationTargetDescription"
1184    )
1185    partial_matches: Optional[List[PartialMatchModel]] = Field(
1186        default=None, alias="PartialMatches"
1187    )
1188    possible_security_group_remediation_actions: Optional[
1189        List[SecurityGroupRemediationActionModel]
1190    ] = Field(default=None, alias="PossibleSecurityGroupRemediationActions")
1191
1192
1193class RemediationActionWithOrderModel(BaseModel):
1194    remediation_action: Optional[RemediationActionModel] = Field(
1195        default=None, alias="RemediationAction"
1196    )
1197    order: Optional[int] = Field(default=None, alias="Order")
1198
1199
1200class NetworkFirewallPolicyModifiedViolationModel(BaseModel):
1201    violation_target: Optional[str] = Field(default=None, alias="ViolationTarget")
1202    current_policy_description: Optional[NetworkFirewallPolicyDescriptionModel] = Field(
1203        default=None, alias="CurrentPolicyDescription"
1204    )
1205    expected_policy_description: Optional[
1206        NetworkFirewallPolicyDescriptionModel
1207    ] = Field(default=None, alias="ExpectedPolicyDescription")
1208
1209
1210class PolicyModel(BaseModel):
1211    policy_name: str = Field(alias="PolicyName")
1212    security_service_policy_data: SecurityServicePolicyDataModel = Field(
1213        alias="SecurityServicePolicyData"
1214    )
1215    resource_type: str = Field(alias="ResourceType")
1216    exclude_resource_tags: bool = Field(alias="ExcludeResourceTags")
1217    remediation_enabled: bool = Field(alias="RemediationEnabled")
1218    policy_id: Optional[str] = Field(default=None, alias="PolicyId")
1219    policy_update_token: Optional[str] = Field(default=None, alias="PolicyUpdateToken")
1220    resource_type_list: Optional[List[str]] = Field(
1221        default=None, alias="ResourceTypeList"
1222    )
1223    resource_tags: Optional[List[ResourceTagModel]] = Field(
1224        default=None, alias="ResourceTags"
1225    )
1226    delete_unused_fmmanaged_resources: Optional[bool] = Field(
1227        default=None, alias="DeleteUnusedFMManagedResources"
1228    )
1229    include_map: Optional[Dict[Literal["ACCOUNT", "ORG_UNIT"], List[str]]] = Field(
1230        default=None, alias="IncludeMap"
1231    )
1232    exclude_map: Optional[Dict[Literal["ACCOUNT", "ORG_UNIT"], List[str]]] = Field(
1233        default=None, alias="ExcludeMap"
1234    )
1235    resource_set_ids: Optional[List[str]] = Field(default=None, alias="ResourceSetIds")
1236    policy_description: Optional[str] = Field(default=None, alias="PolicyDescription")
1237
1238
1239class PossibleRemediationActionModel(BaseModel):
1240    ordered_remediation_actions: List[RemediationActionWithOrderModel] = Field(
1241        alias="OrderedRemediationActions"
1242    )
1243    description: Optional[str] = Field(default=None, alias="Description")
1244    is_default_action: Optional[bool] = Field(default=None, alias="IsDefaultAction")
1245
1246
1247class GetPolicyResponseModel(BaseModel):
1248    policy: PolicyModel = Field(alias="Policy")
1249    policy_arn: str = Field(alias="PolicyArn")
1250    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
1251
1252
1253class PutPolicyRequestModel(BaseModel):
1254    policy: PolicyModel = Field(alias="Policy")
1255    tag_list: Optional[Sequence[TagModel]] = Field(default=None, alias="TagList")
1256
1257
1258class PutPolicyResponseModel(BaseModel):
1259    policy: PolicyModel = Field(alias="Policy")
1260    policy_arn: str = Field(alias="PolicyArn")
1261    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")
1262
1263
1264class PossibleRemediationActionsModel(BaseModel):
1265    description: Optional[str] = Field(default=None, alias="Description")
1266    actions: Optional[List[PossibleRemediationActionModel]] = Field(
1267        default=None, alias="Actions"
1268    )
1269
1270
1271class ResourceViolationModel(BaseModel):
1272    aws_vp_csecurity_group_violation: Optional[
1273        AwsVPCSecurityGroupViolationModel
1274    ] = Field(default=None, alias="AwsVPCSecurityGroupViolation")
1275    aws_ec2_network_interface_violation: Optional[
1276        AwsEc2NetworkInterfaceViolationModel
1277    ] = Field(default=None, alias="AwsEc2NetworkInterfaceViolation")
1278    aws_ec2_instance_violation: Optional[AwsEc2InstanceViolationModel] = Field(
1279        default=None, alias="AwsEc2InstanceViolation"
1280    )
1281    network_firewall_missing_firewall_violation: Optional[
1282        NetworkFirewallMissingFirewallViolationModel
1283    ] = Field(default=None, alias="NetworkFirewallMissingFirewallViolation")
1284    network_firewall_missing_subnet_violation: Optional[
1285        NetworkFirewallMissingSubnetViolationModel
1286    ] = Field(default=None, alias="NetworkFirewallMissingSubnetViolation")
1287    network_firewall_missing_expected_rtviolation: Optional[
1288        NetworkFirewallMissingExpectedRTViolationModel
1289    ] = Field(default=None, alias="NetworkFirewallMissingExpectedRTViolation")
1290    network_firewall_policy_modified_violation: Optional[
1291        NetworkFirewallPolicyModifiedViolationModel
1292    ] = Field(default=None, alias="NetworkFirewallPolicyModifiedViolation")
1293    network_firewall_internet_traffic_not_inspected_violation: Optional[
1294        NetworkFirewallInternetTrafficNotInspectedViolationModel
1295    ] = Field(default=None, alias="NetworkFirewallInternetTrafficNotInspectedViolation")
1296    network_firewall_invalid_route_configuration_violation: Optional[
1297        NetworkFirewallInvalidRouteConfigurationViolationModel
1298    ] = Field(default=None, alias="NetworkFirewallInvalidRouteConfigurationViolation")
1299    network_firewall_black_hole_route_detected_violation: Optional[
1300        NetworkFirewallBlackHoleRouteDetectedViolationModel
1301    ] = Field(default=None, alias="NetworkFirewallBlackHoleRouteDetectedViolation")
1302    network_firewall_unexpected_firewall_routes_violation: Optional[
1303        NetworkFirewallUnexpectedFirewallRoutesViolationModel
1304    ] = Field(default=None, alias="NetworkFirewallUnexpectedFirewallRoutesViolation")
1305    network_firewall_unexpected_gateway_routes_violation: Optional[
1306        NetworkFirewallUnexpectedGatewayRoutesViolationModel
1307    ] = Field(default=None, alias="NetworkFirewallUnexpectedGatewayRoutesViolation")
1308    network_firewall_missing_expected_routes_violation: Optional[
1309        NetworkFirewallMissingExpectedRoutesViolationModel
1310    ] = Field(default=None, alias="NetworkFirewallMissingExpectedRoutesViolation")
1311    dns_rule_group_priority_conflict_violation: Optional[
1312        DnsRuleGroupPriorityConflictViolationModel
1313    ] = Field(default=None, alias="DnsRuleGroupPriorityConflictViolation")
1314    dns_duplicate_rule_group_violation: Optional[
1315        DnsDuplicateRuleGroupViolationModel
1316    ] = Field(default=None, alias="DnsDuplicateRuleGroupViolation")
1317    dns_rule_group_limit_exceeded_violation: Optional[
1318        DnsRuleGroupLimitExceededViolationModel
1319    ] = Field(default=None, alias="DnsRuleGroupLimitExceededViolation")
1320    possible_remediation_actions: Optional[PossibleRemediationActionsModel] = Field(
1321        default=None, alias="PossibleRemediationActions"
1322    )
1323    firewall_subnet_is_out_of_scope_violation: Optional[
1324        FirewallSubnetIsOutOfScopeViolationModel
1325    ] = Field(default=None, alias="FirewallSubnetIsOutOfScopeViolation")
1326    route_has_out_of_scope_endpoint_violation: Optional[
1327        RouteHasOutOfScopeEndpointViolationModel
1328    ] = Field(default=None, alias="RouteHasOutOfScopeEndpointViolation")
1329    third_party_firewall_missing_firewall_violation: Optional[
1330        ThirdPartyFirewallMissingFirewallViolationModel
1331    ] = Field(default=None, alias="ThirdPartyFirewallMissingFirewallViolation")
1332    third_party_firewall_missing_subnet_violation: Optional[
1333        ThirdPartyFirewallMissingSubnetViolationModel
1334    ] = Field(default=None, alias="ThirdPartyFirewallMissingSubnetViolation")
1335    third_party_firewall_missing_expected_route_table_violation: Optional[
1336        ThirdPartyFirewallMissingExpectedRouteTableViolationModel
1337    ] = Field(
1338        default=None, alias="ThirdPartyFirewallMissingExpectedRouteTableViolation"
1339    )
1340    firewall_subnet_missing_vp_cendpoint_violation: Optional[
1341        FirewallSubnetMissingVPCEndpointViolationModel
1342    ] = Field(default=None, alias="FirewallSubnetMissingVPCEndpointViolation")
1343
1344
1345class ViolationDetailModel(BaseModel):
1346    policy_id: str = Field(alias="PolicyId")
1347    member_account: str = Field(alias="MemberAccount")
1348    resource_id: str = Field(alias="ResourceId")
1349    resource_type: str = Field(alias="ResourceType")
1350    resource_violations: List[ResourceViolationModel] = Field(
1351        alias="ResourceViolations"
1352    )
1353    resource_tags: Optional[List[TagModel]] = Field(default=None, alias="ResourceTags")
1354    resource_description: Optional[str] = Field(
1355        default=None, alias="ResourceDescription"
1356    )
1357
1358
1359class GetViolationDetailsResponseModel(BaseModel):
1360    violation_detail: ViolationDetailModel = Field(alias="ViolationDetail")
1361    response_metadata: ResponseMetadataModel = Field(alias="ResponseMetadata")