View a markdown version of this page

ResourceResult - Amazon Security Hub CSPM
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

ResourceResult

Provides comprehensive details about an Amazon resource and its associated security findings.

Contents

AccountId

The Amazon account that recorded the resource data in Security Hub.

Type: String

Pattern: .*\S.*

Required: Yes

Region

The Amazon Web Services Region that recorded the resource data in Security Hub.

Type: String

Pattern: .*\S.*

Required: Yes

ResourceConfig

The configuration details of a resource.

Type: JSON value

Required: Yes

ResourceDetailCaptureTimeDt

The timestamp when information about the resource was captured.

Type: String

Pattern: .*\S.*

Required: Yes

ResourceId

The unique identifier for a resource.

Type: String

Pattern: .*\S.*

Required: Yes

ResourceType

The type of resource.

Type: String

Pattern: .*\S.*

Required: Yes

AccountName

The name of the Amazon account that's associated with the resource.

Type: String

Pattern: .*\S.*

Required: No

DiscoveryType

Specifies how the resource was discovered. If the value is Managed, the resource is natively provided by a cloud service provider. If the value is SelfHosted, the resource is hosted on customer-managed infrastructure, such as a compute instance or container image.

Type: String

Valid Values: Managed | SelfHosted

Required: No

FindingsSummary

An aggregated view of security findings associated with a resource.

Type: Array of ResourceFindingsSummary objects

Required: No

ResourceCategory

The grouping where the resource belongs.

Type: String

Valid Values: Compute | Database | Storage | Code | AI/ML | Identity | Network | Messaging | Other

Required: No

ResourceCloudPartition

The cloud partition where the resource exists. For Amazon, valid values include aws, aws-cn, and aws-us-gov. This field isn't returned for cloud providers that don't use partitions.

Type: String

Pattern: .*\S.*

Required: No

ResourceCreationTimeDt

The time when the resource was created.

Type: String

Pattern: .*\S.*

Required: No

ResourceGuid

The global identifier used to identify a resource.

Type: String

Pattern: .*\S.*

Required: No

ResourceInfo

Additional resource-type-specific details. For self-hosted AI resources and their host resources, contains an AIDetails structure.

Type: ResourceInfo object

Required: No

ResourceName

The name of the resource.

Type: String

Pattern: .*\S.*

Required: No

ResourceOwnerAccountId

The identifier of the cloud account that owns the resource. For Amazon resources, this is the Amazon account ID. For Azure resources, this is the Azure subscription ID.

Type: String

Pattern: .*\S.*

Required: No

ResourceOwnerOrgId

The identifier of the cloud organization that owns the resource. For Amazon resources, this is the Amazon Organizations ID. For Azure resources, this is the Azure tenant ID.

Type: String

Pattern: .*\S.*

Required: No

ResourceProvider

The cloud provider where the resource exists. Valid values are AWS and Azure. This field is always included.

Type: String

Pattern: .*\S.*

Required: No

ResourceRegion

The native cloud region where the resource is located. For Amazon, this is an Amazon Web Services Region (for example, us-east-1). For Azure resources, this is the Azure region (for example, westus2). This field is always included.

Type: String

Pattern: .*\S.*

Required: No

ResourceSubCategory

The AI/ML sub-grouping of the resource. Present only when ResourceCategory is AI/ML.

Type: String

Valid Values: Model | ModelServing | Agent | AgentFramework | AgentToolsAndIdentity | SafetyAndGuardrail | KnowledgeAndData | OrchestrationAndPipeline | ExternalEndpoint | Development | Other

Required: No

ResourceTags

The key-value pairs associated with a resource.

Type: Array of ResourceTag objects

Required: No

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: