Service - Amazon GuardDuty
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Service

Contains additional information about the generated finding.

Contents

action

Information about the activity that is described in a finding.

Type: Action object

Required: No

additionalInfo

Contains additional information about the generated finding.

Type: ServiceAdditionalInfo object

Required: No

archived

Indicates whether this finding is archived.

Type: Boolean

Required: No

count

The total count of the occurrences of this finding type.

Type: Integer

Required: No

detection

Contains information about the detected unusual behavior.

Type: Detection object

Required: No

detectorId

The detector ID for the GuardDuty service.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 300.

Required: No

ebsVolumeScanDetails

Returns details from the malware scan that created a finding.

Type: EbsVolumeScanDetails object

Required: No

eventFirstSeen

The first-seen timestamp of the activity that prompted GuardDuty to generate this finding.

Type: String

Required: No

eventLastSeen

The last-seen timestamp of the activity that prompted GuardDuty to generate this finding.

Type: String

Required: No

evidence

An evidence object associated with the service.

Type: Evidence object

Required: No

featureName

The name of the feature that generated a finding.

Type: String

Required: No

resourceRole

The resource role information for this finding.

Type: String

Required: No

runtimeDetails

Information about the process and any required context values for a specific finding

Type: RuntimeDetails object

Required: No

serviceName

The name of the Amazon service (GuardDuty) that generated a finding.

Type: String

Required: No

userFeedback

Feedback that was submitted about the finding.

Type: String

Required: No

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: