View a markdown version of this page

ResourceResult - AWS Security Hub CSPM

ResourceResult

Provides comprehensive details about an AWS resource and its associated security findings.

Contents

AccountId

The AWS account that recorded the resource data in Security Hub.

Type: String

Pattern: .*\S.*

Required: Yes

Region

The AWS Region that recorded the resource data in Security Hub.

Type: String

Pattern: .*\S.*

Required: Yes

ResourceConfig

The configuration details of a resource.

Type: JSON value

Required: Yes

ResourceDetailCaptureTimeDt

The timestamp when information about the resource was captured.

Type: String

Pattern: .*\S.*

Required: Yes

ResourceId

The unique identifier for a resource.

Type: String

Pattern: .*\S.*

Required: Yes

ResourceType

The type of resource.

Type: String

Pattern: .*\S.*

Required: Yes

AccountName

The name of the AWS account that's associated with the resource.

Type: String

Pattern: .*\S.*

Required: No

FindingsSummary

An aggregated view of security findings associated with a resource.

Type: Array of ResourceFindingsSummary objects

Required: No

ResourceCategory

The grouping where the resource belongs.

Type: String

Valid Values: Compute | Database | Storage | Code | AI/ML | Identity | Network | Messaging | Other

Required: No

ResourceCloudPartition

The cloud partition where the resource exists. For AWS, valid values include aws, aws-cn, and aws-us-gov. This field isn't returned for cloud providers that don't use partitions.

Type: String

Pattern: .*\S.*

Required: No

ResourceCreationTimeDt

The time when the resource was created.

Type: String

Pattern: .*\S.*

Required: No

ResourceGuid

The global identifier used to identify a resource.

Type: String

Pattern: .*\S.*

Required: No

ResourceName

The name of the resource.

Type: String

Pattern: .*\S.*

Required: No

ResourceOwnerAccountId

The identifier of the cloud account that owns the resource. For AWS resources, this is the AWS account ID. For Azure resources, this is the Azure subscription ID.

Type: String

Pattern: .*\S.*

Required: No

ResourceOwnerOrgId

The identifier of the cloud organization that owns the resource. For AWS resources, this is the AWS Organizations ID. For Azure resources, this is the Azure tenant ID.

Type: String

Pattern: .*\S.*

Required: No

ResourceProvider

The cloud provider where the resource exists. Valid values are AWS and Azure. This field is always included.

Type: String

Pattern: .*\S.*

Required: No

ResourceRegion

The native cloud region where the resource is located. For AWS, this is an AWS Region (for example, us-east-1). For Azure resources, this is the Azure region (for example, westus2). This field is always included.

Type: String

Pattern: .*\S.*

Required: No

ResourceTags

The key-value pairs associated with a resource.

Type: Array of ResourceTag objects

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: