Resource - Amazon GuardDuty

Resource

Contains information about the AWS resource associated with the activity that prompted GuardDuty to generate a finding.

Contents

accessKeyDetails

The IAM access key details (user information) of a user that engaged in the activity that prompted GuardDuty to generate a finding.

Type: AccessKeyDetails object

Required: No

containerDetails

Details of a container.

Type: Container object

Required: No

ebsVolumeDetails

Contains list of scanned and skipped EBS volumes with details.

Type: EbsVolumeDetails object

Required: No

ecsClusterDetails

Contains information about the details of the ECS Cluster.

Type: EcsClusterDetails object

Required: No

eksClusterDetails

Details about the EKS cluster involved in a Kubernetes finding.

Type: EksClusterDetails object

Required: No

instanceDetails

The information about the EC2 instance associated with the activity that prompted GuardDuty to generate a finding.

Type: InstanceDetails object

Required: No

kubernetesDetails

Details about the Kubernetes user and workload involved in a Kubernetes finding.

Type: KubernetesDetails object

Required: No

lambdaDetails

Contains information about the Lambda function that was involved in a finding.

Type: LambdaDetails object

Required: No

rdsDbInstanceDetails

Contains information about the database instance to which an anomalous login attempt was made.

Type: RdsDbInstanceDetails object

Required: No

rdsDbUserDetails

Contains information about the user details through which anomalous login attempt was made.

Type: RdsDbUserDetails object

Required: No

rdsLimitlessDbDetails

Contains information about the RDS Limitless database that was involved in a GuardDuty finding.

Type: RdsLimitlessDbDetails object

Required: No

resourceType

The type of AWS resource.

Type: String

Required: No

s3BucketDetails

Contains information on the S3 bucket.

Type: Array of S3BucketDetail objects

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: