Finding
Contains information about the finding that is generated when abnormal or suspicious activity is detected.
Contents
- accountId
-
The ID of the account in which the finding was generated.
Type: String
Required: Yes
- arn
-
The ARN of the finding.
Type: String
Required: Yes
- createdAt
-
The time and date when the finding was created.
Type: String
Required: Yes
- id
-
The ID of the finding.
Type: String
Required: Yes
- region
-
The Region where the finding was generated.
Type: String
Required: Yes
- resource
-
Contains information about the AWS resource associated with the activity that prompted GuardDuty to generate a finding.
Type: Resource object
Required: Yes
- schemaVersion
-
The version of the schema used for the finding.
Type: String
Required: Yes
- severity
-
The severity of the finding.
Type: Double
Required: Yes
- type
-
The type of finding.
Type: String
Length Constraints: Minimum length of 1. Maximum length of 50.
Required: Yes
- updatedAt
-
The time and date when the finding was last updated.
Type: String
Required: Yes
- associatedAttackSequenceArn
-
Amazon Resource Name (ARN) associated with the attack sequence finding.
Type: String
Required: No
- confidence
-
The confidence score for the finding.
Type: Double
Required: No
- description
-
The description of the finding.
Type: String
Required: No
- partition
-
The partition associated with the finding.
Type: String
Required: No
- service
-
Contains additional information about the generated finding.
Type: Service object
Required: No
- title
-
The title of the finding.
Type: String
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
