Class: Aws::SecurityIR::Types::GetCaseResponse

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb

Overview

Constant Summary collapse

SENSITIVE =
[:title, :description]

Instance Attribute Summary collapse

Instance Attribute Details

#actual_incident_start_dateTime

Response element for GetCase that provides the actual incident start date as identified by data analysis during the investigation.

Returns:

  • (Time)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#case_arnString

Response element for GetCase that provides the case ARN

Returns:

  • (String)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#case_attachmentsArray<Types::CaseAttachmentAttributes>

Response element for GetCase that provides a list of current case attachments.



567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#case_statusString

Response element for GetCase that provides the case status. Options for statuses include Submitted | Detection and Analysis | Eradication, Containment and Recovery | Post-Incident Activities | Closed

Returns:

  • (String)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#closed_dateTime

Response element for GetCase that provides the date a specified case was closed.

Returns:

  • (Time)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#closure_codeString

Response element for GetCase that provides the summary code for why a case was closed.

Returns:

  • (String)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#created_dateTime

Response element for GetCase that provides the date the case was created.

Returns:

  • (Time)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#descriptionString

Response element for GetCase that provides contents of the case description.

Returns:

  • (String)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#engagement_typeString

Response element for GetCase that provides the engagement type. Options for engagement type include Active Security Event | Investigations

Returns:

  • (String)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#impacted_accountsArray<String>

Response element for GetCase that provides a list of impacted accounts.

Returns:

  • (Array<String>)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#impacted_aws_regionsArray<Types::ImpactedAwsRegion>

Response element for GetCase that provides the impacted regions.

Returns:



567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#impacted_servicesArray<String>

Response element for GetCase that provides a list of impacted services.

Returns:

  • (Array<String>)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#last_updated_dateTime

Response element for GetCase that provides the date a case was last modified.

Returns:

  • (Time)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#pending_actionString

Response element for GetCase that provides identifies the case is waiting on customer input.

Returns:

  • (String)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#reported_incident_start_dateTime

Response element for GetCase that provides the customer provided incident start date.

Returns:

  • (Time)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#resolver_typeString

Response element for GetCase that provides the current resolver types. Options include self-supported | AWS-supported.

Returns:

  • (String)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#threat_actor_ip_addressesArray<Types::ThreatActorIp>

Response element for GetCase that provides a list of suspicious IP addresses associated with unauthorized activity.

Returns:



567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#titleString

Response element for GetCase that provides the case title.

Returns:

  • (String)


567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end

#watchersArray<Types::Watcher>

Response element for GetCase that provides a list of Watchers added to the case.

Returns:



567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
# File 'gems/aws-sdk-securityir/lib/aws-sdk-securityir/types.rb', line 567

class GetCaseResponse < Struct.new(
  :title,
  :case_arn,
  :description,
  :case_status,
  :engagement_type,
  :reported_incident_start_date,
  :actual_incident_start_date,
  :impacted_aws_regions,
  :threat_actor_ip_addresses,
  :pending_action,
  :impacted_accounts,
  :watchers,
  :created_date,
  :last_updated_date,
  :closure_code,
  :resolver_type,
  :impacted_services,
  :case_attachments,
  :closed_date)
  SENSITIVE = [:title, :description]
  include Aws::Structure
end