Contains information on how the bucker owner's S3 Block Public Access settings are being applied to the S3 bucket. See S3 Block Public Access for more information.

BucketLevelPermissions

class BucketLevelPermissions

Contains information about the bucket level permissions for the S3 bucket.

BucketPolicy

class BucketPolicy

Contains information on the current bucket policies for the S3 bucket.

City

class City

Contains information about the city associated with the IP address.

CloudTrailConfigurationResult

class CloudTrailConfigurationResult

Contains information on the status of CloudTrail as a data source for the detector.

ClusterStatus

sealed class ClusterStatus

Condition

class Condition

Contains information about the condition.

ConflictException

class ConflictException : GuardDutyException

A request conflict exception object.

Container

class Container

Details of a container.

ContainerFindingResource

class ContainerFindingResource

Contains information about container resources involved in a GuardDuty finding. This structure provides details about containers that were identified as part of suspicious or malicious activity.

ContainerInstanceDetails

class ContainerInstanceDetails

Contains information about the Amazon EC2 instance that is running the Amazon ECS container.

Country

class Country

Contains information about the country where the remote IP address is located.

CoverageEc2InstanceDetails

class CoverageEc2InstanceDetails

Contains information about the Amazon EC2 instance runtime coverage details.

CoverageEcsClusterDetails

class CoverageEcsClusterDetails

Contains information about Amazon ECS cluster runtime coverage details.

CoverageEksClusterDetails

class CoverageEksClusterDetails

Information about the EKS cluster that has a coverage status.

CoverageFilterCondition

class CoverageFilterCondition

Represents a condition that when matched will be added to the response of the operation.

CoverageFilterCriteria

class CoverageFilterCriteria

Represents the criteria used in the filter.

CoverageFilterCriterion

class CoverageFilterCriterion

Represents a condition that when matched will be added to the response of the operation.

CoverageFilterCriterionKey

sealed class CoverageFilterCriterionKey

CoverageResource

class CoverageResource

Information about the resource of the GuardDuty account.

CoverageResourceDetails

class CoverageResourceDetails

Information about the resource for each individual EKS cluster.

CoverageSortCriteria

class CoverageSortCriteria

Information about the sorting criteria used in the coverage statistics.

CoverageSortKey

sealed class CoverageSortKey

CoverageStatistics

class CoverageStatistics

Information about the coverage statistics for a resource.

CoverageStatisticsType

sealed class CoverageStatisticsType

CoverageStatus

sealed class CoverageStatus

CreateDetectorRequest

class CreateDetectorRequest

CreateDetectorResponse

class CreateDetectorResponse

CreateFilterRequest

class CreateFilterRequest

CreateFilterResponse

class CreateFilterResponse

CreateIpSetRequest

class CreateIpSetRequest

CreateIpSetResponse

class CreateIpSetResponse

CreateMalwareProtectionPlanRequest

class CreateMalwareProtectionPlanRequest

CreateMalwareProtectionPlanResponse

class CreateMalwareProtectionPlanResponse

CreateMembersRequest

class CreateMembersRequest

CreateMembersResponse

class CreateMembersResponse

CreateProtectedResource

class CreateProtectedResource

Information about the protected resource that is associated with the created Malware Protection plan. Presently, S3Bucket is the only supported protected resource.

CreatePublishingDestinationRequest

class CreatePublishingDestinationRequest

CreatePublishingDestinationResponse

class CreatePublishingDestinationResponse

CreateS3BucketResource

class CreateS3BucketResource

Information about the protected S3 bucket resource.

CreateSampleFindingsRequest

class CreateSampleFindingsRequest

CreateSampleFindingsResponse

class CreateSampleFindingsResponse

CreateThreatIntelSetRequest

class CreateThreatIntelSetRequest

CreateThreatIntelSetResponse

class CreateThreatIntelSetResponse

CriterionKey

sealed class CriterionKey

DataSource

sealed class DataSource

DataSourceConfigurations

class DataSourceConfigurations

Contains information about which data sources are enabled.

DataSourceConfigurationsResult

class DataSourceConfigurationsResult

Contains information on the status of data sources for the detector.

DataSourceFreeTrial

class DataSourceFreeTrial

Contains information about which data sources are enabled for the GuardDuty member account.

DataSourcesFreeTrial

class DataSourcesFreeTrial

Contains information about which data sources are enabled for the GuardDuty member account.

DataSourceStatus

sealed class DataSourceStatus

DateStatistics

class DateStatistics

Represents list a map of dates with a count of total findings generated on each date.

DeclineInvitationsRequest

class DeclineInvitationsRequest

DeclineInvitationsResponse

class DeclineInvitationsResponse

DefaultServerSideEncryption

class DefaultServerSideEncryption

Contains information on the server side encryption method used in the S3 bucket. See S3 Server-Side Encryption for more information.

DeleteDetectorRequest

class DeleteDetectorRequest

DeleteDetectorResponse

class DeleteDetectorResponse

DeleteFilterRequest

class DeleteFilterRequest

DeleteFilterResponse

class DeleteFilterResponse

DeleteInvitationsRequest

class DeleteInvitationsRequest

DeleteInvitationsResponse

class DeleteInvitationsResponse

DeleteIpSetRequest

class DeleteIpSetRequest

DeleteIpSetResponse

class DeleteIpSetResponse

DeleteMalwareProtectionPlanRequest

class DeleteMalwareProtectionPlanRequest

DeleteMalwareProtectionPlanResponse

class DeleteMalwareProtectionPlanResponse

DeleteMembersRequest

class DeleteMembersRequest

DeleteMembersResponse

class DeleteMembersResponse

DeletePublishingDestinationRequest

class DeletePublishingDestinationRequest

DeletePublishingDestinationResponse

class DeletePublishingDestinationResponse

DeleteThreatIntelSetRequest

class DeleteThreatIntelSetRequest

DeleteThreatIntelSetResponse

class DeleteThreatIntelSetResponse

DescribeMalwareScansRequest

class DescribeMalwareScansRequest

DescribeMalwareScansResponse

class DescribeMalwareScansResponse

DescribeOrganizationConfigurationRequest

class DescribeOrganizationConfigurationRequest

DescribeOrganizationConfigurationResponse

class DescribeOrganizationConfigurationResponse

DescribePublishingDestinationRequest

class DescribePublishingDestinationRequest

DescribePublishingDestinationResponse

class DescribePublishingDestinationResponse

Destination

class Destination

Contains information about the publishing destination, including the ID, type, and status.

DestinationProperties

class DestinationProperties

Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.

DestinationType

sealed class DestinationType

Detection

class Detection

Contains information about the detected behavior.

DetectorAdditionalConfiguration

class DetectorAdditionalConfiguration

Information about the additional configuration for a feature in your GuardDuty account.

DetectorAdditionalConfigurationResult

class DetectorAdditionalConfigurationResult

Information about the additional configuration.

DetectorFeature

sealed class DetectorFeature

DetectorFeatureConfiguration

class DetectorFeatureConfiguration

Contains information about a GuardDuty feature.

DetectorFeatureConfigurationResult

class DetectorFeatureConfigurationResult

Contains information about a GuardDuty feature.

DetectorFeatureResult

sealed class DetectorFeatureResult

DetectorStatus

sealed class DetectorStatus

DisableOrganizationAdminAccountRequest

class DisableOrganizationAdminAccountRequest

DisableOrganizationAdminAccountResponse

class DisableOrganizationAdminAccountResponse

DisassociateFromAdministratorAccountRequest

class DisassociateFromAdministratorAccountRequest

DisassociateFromAdministratorAccountResponse

class DisassociateFromAdministratorAccountResponse

DisassociateFromMasterAccountRequest

class ~~DisassociateFromMasterAccountRequest~~

DisassociateFromMasterAccountResponse

class ~~DisassociateFromMasterAccountResponse~~

DisassociateMembersRequest

class DisassociateMembersRequest

DisassociateMembersResponse

class DisassociateMembersResponse

DnsLogsConfigurationResult

class DnsLogsConfigurationResult

Contains information on the status of DNS logs as a data source.

DnsRequestAction

class DnsRequestAction

Contains information about the DNS_REQUEST action described in this finding.

DomainDetails

class DomainDetails

Contains information about the domain.

EbsSnapshotPreservation

sealed class EbsSnapshotPreservation

EbsVolumeDetails

class EbsVolumeDetails

Contains list of scanned and skipped EBS volumes with details.

EbsVolumeScanDetails

class EbsVolumeScanDetails

Contains details from the malware scan that created a finding.

EbsVolumesResult

class EbsVolumesResult

Describes the configuration of scanning EBS volumes as a data source.

Ec2Instance

class Ec2Instance

Details about the potentially impacted Amazon EC2 instance resource.

Ec2NetworkInterface

class Ec2NetworkInterface

Contains information about the elastic network interface of the Amazon EC2 instance.

EcsClusterDetails

class EcsClusterDetails

Contains information about the details of the ECS Cluster.

EcsTaskDetails

class EcsTaskDetails

Contains information about the task in an ECS cluster.

EksCluster

class EksCluster

Contains information about the Amazon EKS cluster involved in a GuardDuty finding, including cluster identification, status, and network configuration.

EksClusterDetails

class EksClusterDetails

Details about the EKS cluster involved in a Kubernetes finding.

EnableOrganizationAdminAccountRequest

class EnableOrganizationAdminAccountRequest

EnableOrganizationAdminAccountResponse

class EnableOrganizationAdminAccountResponse

Evidence

class Evidence

Contains information about the reason that the finding was generated.

FargateDetails

class FargateDetails

Contains information about Amazon Web Services Fargate details associated with an Amazon ECS cluster.

FeatureAdditionalConfiguration

sealed class FeatureAdditionalConfiguration

FeatureStatus

sealed class FeatureStatus

Feedback

sealed class Feedback

FilterAction

sealed class FilterAction

FilterCondition

class FilterCondition

Contains information about the condition.

FilterCriteria

class FilterCriteria

Represents the criteria to be used in the filter for describing scan entries.

FilterCriterion

class FilterCriterion

Represents a condition that when matched will be added to the response of the operation. Irrespective of using any filter criteria, an administrator account can view the scan entries for all of its member accounts. However, each member account can view the scan entries only for their own account.

Finding

class Finding

Contains information about the finding that is generated when abnormal or suspicious activity is detected.

FindingCriteria

class FindingCriteria

Contains information about the criteria used for querying findings.

FindingPublishingFrequency

sealed class FindingPublishingFrequency

FindingResourceType

sealed class FindingResourceType

FindingStatistics

class FindingStatistics

Contains information about finding statistics.

FindingStatisticType

sealed class FindingStatisticType

FindingTypeStatistics

class FindingTypeStatistics

Information about each finding type associated with the groupedByFindingType statistics.

FlowLogsConfigurationResult

class FlowLogsConfigurationResult

Contains information on the status of VPC flow logs as a data source.

FreeTrialFeatureConfigurationResult

class FreeTrialFeatureConfigurationResult

Contains information about the free trial period for a feature.

FreeTrialFeatureResult

sealed class FreeTrialFeatureResult

GeoLocation

class GeoLocation

Contains information about the location of the remote IP address. By default, GuardDuty returns Geolocation with Lat and Lon as 0.0.

GetAdministratorAccountRequest

class GetAdministratorAccountRequest

GetAdministratorAccountResponse

class GetAdministratorAccountResponse

GetCoverageStatisticsRequest

class GetCoverageStatisticsRequest

GetCoverageStatisticsResponse

class GetCoverageStatisticsResponse

GetDetectorRequest

class GetDetectorRequest

GetDetectorResponse

class GetDetectorResponse

GetFilterRequest

class GetFilterRequest

GetFilterResponse

class GetFilterResponse

GetFindingsRequest

class GetFindingsRequest

GetFindingsResponse

class GetFindingsResponse

GetFindingsStatisticsRequest

class GetFindingsStatisticsRequest

GetFindingsStatisticsResponse

class GetFindingsStatisticsResponse

GetInvitationsCountRequest

class GetInvitationsCountRequest

GetInvitationsCountResponse

class GetInvitationsCountResponse

GetIpSetRequest

class GetIpSetRequest

GetIpSetResponse

class GetIpSetResponse

GetMalwareProtectionPlanRequest

class GetMalwareProtectionPlanRequest

GetMalwareProtectionPlanResponse

class GetMalwareProtectionPlanResponse

GetMalwareScanSettingsRequest

class GetMalwareScanSettingsRequest

GetMalwareScanSettingsResponse

class GetMalwareScanSettingsResponse

GetMasterAccountRequest

class ~~GetMasterAccountRequest~~

GetMasterAccountResponse

class ~~GetMasterAccountResponse~~

GetMemberDetectorsRequest

class GetMemberDetectorsRequest

GetMemberDetectorsResponse

class GetMemberDetectorsResponse

GetMembersRequest

class GetMembersRequest

GetMembersResponse

class GetMembersResponse

GetOrganizationStatisticsRequest

class GetOrganizationStatisticsRequest

GetOrganizationStatisticsResponse

class GetOrganizationStatisticsResponse

GetRemainingFreeTrialDaysRequest

class GetRemainingFreeTrialDaysRequest

GetRemainingFreeTrialDaysResponse

class GetRemainingFreeTrialDaysResponse

GetThreatIntelSetRequest

class GetThreatIntelSetRequest

GetThreatIntelSetResponse

class GetThreatIntelSetResponse

GetUsageStatisticsRequest

class GetUsageStatisticsRequest

GetUsageStatisticsResponse

class GetUsageStatisticsResponse

GroupByType

sealed class GroupByType

GuardDutyException

open class GuardDutyException : AwsServiceException

Base class for all service related exceptions thrown by the GuardDuty client

HighestSeverityThreatDetails

class HighestSeverityThreatDetails

Contains details of the highest severity threat detected during scan and number of infected files.

HostPath

class HostPath

Represents a pre-existing file or directory on the host machine that the volume maps to.

IamInstanceProfile

class IamInstanceProfile

Contains information about the EC2 instance profile.

ImpersonatedUser

class ImpersonatedUser

Contains information about the impersonated user.

Indicator

class Indicator

Contains information about the indicators that include a set of signals observed in an attack sequence.

IndicatorType

sealed class IndicatorType

InstanceDetails

class InstanceDetails

Contains information about the details of an instance.

InternalServerErrorException

class InternalServerErrorException : GuardDutyException

An internal server error exception object.

Invitation

class Invitation

Contains information about the invitation to become a member account.

InviteMembersRequest

class InviteMembersRequest

InviteMembersResponse

class InviteMembersResponse

IpSetFormat

sealed class IpSetFormat

IpSetStatus

sealed class IpSetStatus

ItemPath

class ItemPath

Information about the nested item path and hash of the protected resource.

KubernetesApiCallAction

class KubernetesApiCallAction

Information about the Kubernetes API call action described in this finding.

KubernetesAuditLogsConfiguration

class KubernetesAuditLogsConfiguration

Describes whether Kubernetes audit logs are enabled as a data source.

KubernetesAuditLogsConfigurationResult

class KubernetesAuditLogsConfigurationResult

Describes whether Kubernetes audit logs are enabled as a data source.

KubernetesConfiguration

class KubernetesConfiguration

Describes whether any Kubernetes data sources are enabled.

KubernetesConfigurationResult

class KubernetesConfigurationResult

Describes whether any Kubernetes logs will be enabled as a data source.

KubernetesDataSourceFreeTrial

class KubernetesDataSourceFreeTrial

Provides details about the Kubernetes resources when it is enabled as a data source.

KubernetesDetails

class KubernetesDetails

Details about Kubernetes resources such as a Kubernetes user or workload resource involved in a Kubernetes finding.

KubernetesPermissionCheckedDetails

class KubernetesPermissionCheckedDetails

Information about the Kubernetes API for which you check if you have permission to call.

KubernetesResourcesTypes

sealed class KubernetesResourcesTypes

KubernetesRoleBindingDetails

class KubernetesRoleBindingDetails

Contains information about the role binding that grants the permission defined in a Kubernetes role.

KubernetesRoleDetails

class KubernetesRoleDetails

Information about the Kubernetes role name and role type.

KubernetesUserDetails

class KubernetesUserDetails

Details about the Kubernetes user involved in a Kubernetes finding.

KubernetesWorkload

class KubernetesWorkload

Contains information about Kubernetes workloads involved in a GuardDuty finding, including pods, deployments, and other Kubernetes resources.

KubernetesWorkloadDetails

class KubernetesWorkloadDetails

Details about the Kubernetes workload involved in a Kubernetes finding.

LambdaDetails

class LambdaDetails

Information about the Lambda function involved in the finding.

LineageObject

class LineageObject

Information about the runtime process details.

ListCoverageRequest

class ListCoverageRequest

ListCoverageResponse

class ListCoverageResponse

ListDetectorsRequest

class ListDetectorsRequest

ListDetectorsResponse

class ListDetectorsResponse

ListFiltersRequest

class ListFiltersRequest

ListFiltersResponse

class ListFiltersResponse

ListFindingsRequest

class ListFindingsRequest

ListFindingsResponse

class ListFindingsResponse

ListInvitationsRequest

class ListInvitationsRequest

ListInvitationsResponse

class ListInvitationsResponse

ListIpSetsRequest

class ListIpSetsRequest

ListIpSetsResponse

class ListIpSetsResponse

ListMalwareProtectionPlansRequest

class ListMalwareProtectionPlansRequest

ListMalwareProtectionPlansResponse

class ListMalwareProtectionPlansResponse

ListMembersRequest

class ListMembersRequest

ListMembersResponse

class ListMembersResponse

ListOrganizationAdminAccountsRequest

class ListOrganizationAdminAccountsRequest

ListOrganizationAdminAccountsResponse

class ListOrganizationAdminAccountsResponse

ListPublishingDestinationsRequest

class ListPublishingDestinationsRequest

ListPublishingDestinationsResponse

class ListPublishingDestinationsResponse

ListTagsForResourceRequest

class ListTagsForResourceRequest

ListTagsForResourceResponse

class ListTagsForResourceResponse

ListThreatIntelSetsRequest

class ListThreatIntelSetsRequest

ListThreatIntelSetsResponse

class ListThreatIntelSetsResponse

LocalIpDetails

class LocalIpDetails

Contains information about the local IP address of the connection.

LocalPortDetails

class LocalPortDetails

Contains information about the port for the local connection.

LoginAttribute

class LoginAttribute

Information about the login attempts.

MalwareProtectionConfiguration

class MalwareProtectionConfiguration

Describes whether Malware Protection will be enabled as a data source.

MalwareProtectionConfigurationResult

class MalwareProtectionConfigurationResult

An object that contains information on the status of all Malware Protection data sources.

MalwareProtectionDataSourceFreeTrial

class MalwareProtectionDataSourceFreeTrial

Provides details about Malware Protection when it is enabled as a data source.

MalwareProtectionPlanActions

class MalwareProtectionPlanActions

Information about whether the tags will be added to the S3 object after scanning.

MalwareProtectionPlanStatus

sealed class MalwareProtectionPlanStatus

MalwareProtectionPlanStatusReason

class MalwareProtectionPlanStatusReason

Information about the issue code and message associated to the status of your Malware Protection plan.

MalwareProtectionPlanSummary

class MalwareProtectionPlanSummary

Information about the Malware Protection plan resource.

MalwareProtectionPlanTaggingAction

class MalwareProtectionPlanTaggingAction

Information about adding tags to the scanned S3 object after the scan result.

MalwareProtectionPlanTaggingActionStatus

sealed class MalwareProtectionPlanTaggingActionStatus

MalwareScanDetails

class MalwareScanDetails

Information about the malware scan that generated a GuardDuty finding.

ManagementType

sealed class ManagementType

Master

class Master

Contains information about the administrator account and invitation.

Member

class Member

Contains information about the member account.

MemberAdditionalConfiguration

class MemberAdditionalConfiguration

Information about the additional configuration for the member account.

MemberAdditionalConfigurationResult

class MemberAdditionalConfigurationResult

Information about the additional configuration for the member account.

MemberDataSourceConfiguration

class MemberDataSourceConfiguration

Contains information on which data sources are enabled for a member account.

MemberFeaturesConfiguration

class MemberFeaturesConfiguration

Contains information about the features for the member account.

MemberFeaturesConfigurationResult

class MemberFeaturesConfigurationResult

Contains information about the features for the member account.

MfaStatus

sealed class MfaStatus

NetworkConnection

class NetworkConnection

Contains information about the network connection.

NetworkConnectionAction

class NetworkConnectionAction

Contains information about the NETWORK_CONNECTION action described in the finding.

NetworkDirection

sealed class NetworkDirection

NetworkEndpoint

class NetworkEndpoint

Contains information about network endpoints that were observed in the attack sequence.

NetworkGeoLocation

class NetworkGeoLocation

Contains information about network endpoint location.

NetworkInterface

class NetworkInterface

Contains information about the elastic network interface of the EC2 instance.

Observations

class Observations

Contains information about the observed behavior.

OrderBy

sealed class OrderBy

Organization

class Organization

Contains information about the ISP organization of the remote IP address.

OrganizationAdditionalConfiguration

class OrganizationAdditionalConfiguration

A list of additional configurations which will be configured for the organization.

OrganizationAdditionalConfigurationResult

class OrganizationAdditionalConfigurationResult

A list of additional configuration which will be configured for the organization.

OrganizationDataSourceConfigurations

class OrganizationDataSourceConfigurations

An object that contains information on which data sources will be configured to be automatically enabled for new members within the organization.

OrganizationDataSourceConfigurationsResult

class OrganizationDataSourceConfigurationsResult

An object that contains information on which data sources are automatically enabled for new members within the organization.

OrganizationDetails

class OrganizationDetails

Information about GuardDuty coverage statistics for members in your Amazon Web Services organization.

OrganizationEbsVolumes

class OrganizationEbsVolumes

Organization-wide EBS volumes scan configuration.

OrganizationEbsVolumesResult

class OrganizationEbsVolumesResult

An object that contains information on the status of whether EBS volumes scanning will be enabled as a data source for an organization.

OrganizationFeatureConfiguration

class OrganizationFeatureConfiguration

A list of features which will be configured for the organization.

OrganizationFeatureConfigurationResult

class OrganizationFeatureConfigurationResult

A list of features which will be configured for the organization.

OrganizationFeatureStatistics

class OrganizationFeatureStatistics

Information about the number of accounts that have enabled a specific feature.

OrganizationFeatureStatisticsAdditionalConfiguration

class OrganizationFeatureStatisticsAdditionalConfiguration

Information about the coverage statistic for the additional configuration of the feature.

OrganizationKubernetesAuditLogsConfiguration

class OrganizationKubernetesAuditLogsConfiguration

Organization-wide Kubernetes audit logs configuration.

OrganizationKubernetesAuditLogsConfigurationResult

class OrganizationKubernetesAuditLogsConfigurationResult

The current configuration of Kubernetes audit logs as a data source for the organization.

OrganizationKubernetesConfiguration

class OrganizationKubernetesConfiguration

Organization-wide Kubernetes data sources configurations.

OrganizationKubernetesConfigurationResult

class OrganizationKubernetesConfigurationResult

The current configuration of all Kubernetes data sources for the organization.

OrganizationMalwareProtectionConfiguration

class OrganizationMalwareProtectionConfiguration

Organization-wide Malware Protection configurations.

OrganizationMalwareProtectionConfigurationResult

class OrganizationMalwareProtectionConfigurationResult

An object that contains information on the status of all Malware Protection data source for an organization.

OrganizationS3LogsConfiguration

class OrganizationS3LogsConfiguration

Describes whether S3 data event logs will be automatically enabled for new members of the organization.

OrganizationS3LogsConfigurationResult

class OrganizationS3LogsConfigurationResult

The current configuration of S3 data event logs as a data source for the organization.

OrganizationScanEc2InstanceWithFindings

class OrganizationScanEc2InstanceWithFindings

Organization-wide EC2 instances with findings scan configuration.

OrganizationScanEc2InstanceWithFindingsResult

class OrganizationScanEc2InstanceWithFindingsResult

An object that contains information on the status of scanning EC2 instances with findings for an organization.

OrganizationStatistics

class OrganizationStatistics

Information about the coverage statistics of the features for the entire Amazon Web Services organization.

OrgFeature

sealed class OrgFeature

OrgFeatureAdditionalConfiguration

sealed class OrgFeatureAdditionalConfiguration

OrgFeatureStatus

sealed class OrgFeatureStatus

Owner

class Owner

Contains information on the owner of the bucket.

PermissionConfiguration

class PermissionConfiguration

Contains information about how permissions are configured for the S3 bucket.

PortProbeAction

class PortProbeAction

Contains information about the PORT_PROBE action described in the finding.

PortProbeDetail

class PortProbeDetail

Contains information about the port probe details.

PrivateIpAddressDetails

class PrivateIpAddressDetails

Contains other private IP address information of the EC2 instance.

ProcessDetails

class ProcessDetails

Information about the observed process.

ProductCode

class ProductCode

Contains information about the product code for the EC2 instance.

ProfileSubtype

sealed class ProfileSubtype

ProfileType

sealed class ProfileType

PublicAccess

class PublicAccess

Describes the public access policies that apply to the S3 bucket.

PublicAccessConfiguration

class PublicAccessConfiguration

Describes public access policies that apply to the Amazon S3 bucket.

PublicAccessStatus

sealed class PublicAccessStatus

PublicAclIgnoreBehavior

sealed class PublicAclIgnoreBehavior

PublicBucketRestrictBehavior

sealed class PublicBucketRestrictBehavior

PublishingStatus

sealed class PublishingStatus

RdsDbInstanceDetails

class RdsDbInstanceDetails

Contains information about the resource type RDSDBInstance involved in a GuardDuty finding.

RdsDbUserDetails

class RdsDbUserDetails

Contains information about the user and authentication details for a database instance involved in the finding.

RdsLimitlessDbDetails

class RdsLimitlessDbDetails

Contains information about the resource type RDSLimitlessDB that is involved in a GuardDuty finding.

RdsLoginAttemptAction

class RdsLoginAttemptAction

Indicates that a login attempt was made to the potentially compromised database from a remote IP address.

RemoteAccountDetails

class RemoteAccountDetails

Contains details about the remote Amazon Web Services account that made the API call.

RemoteIpDetails

class RemoteIpDetails

Contains information about the remote IP address of the connection.

RemotePortDetails

class RemotePortDetails

Contains information about the remote port.

Resource

class Resource

Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.

ResourceData

class ResourceData

Contains information about the Amazon Web Services resource that is associated with the activity that prompted GuardDuty to generate a finding.

ResourceDetails

class ResourceDetails

Represents the resources that were scanned in the scan entry.

ResourceNotFoundException

class ResourceNotFoundException : GuardDutyException

The requested resource can't be found.

ResourceStatistics

class ResourceStatistics

Information about each resource type associated with the groupedByResource statistics.

ResourceType

sealed class ResourceType

ResourceV2

class ResourceV2

Contains information about the Amazon Web Services resource that is associated with the GuardDuty finding.

RuntimeContext

class RuntimeContext

Additional information about the suspicious activity.

RuntimeDetails

class RuntimeDetails

Information about the process and any required context values for a specific finding.

S3Bucket

class S3Bucket

Contains information about the Amazon S3 bucket policies and encryption.

S3BucketDetail

class S3BucketDetail

Contains information on the S3 bucket.

S3LogsConfiguration

class S3LogsConfiguration

Describes whether S3 data event logs will be enabled as a data source.

S3LogsConfigurationResult

class S3LogsConfigurationResult

Describes whether S3 data event logs will be enabled as a data source.

S3Object

class S3Object

Contains information about the Amazon S3 object.

S3ObjectDetail

class S3ObjectDetail

Information about the S3 object that was scanned

Scan

class Scan

Contains information about malware scans associated with GuardDuty Malware Protection for EC2.

ScanCondition

class ScanCondition

Contains information about the condition.

ScanConditionPair

class ScanConditionPair

Represents the key:value pair to be matched against given resource property.

ScanCriterionKey

sealed class ScanCriterionKey

An enum value representing possible resource properties to match with given scan condition.

ScanDetections

class ScanDetections

Contains a complete view providing malware scan result details.

ScanEc2InstanceWithFindings

class ScanEc2InstanceWithFindings

Describes whether Malware Protection for EC2 instances with findings will be enabled as a data source.

ScanEc2InstanceWithFindingsResult

class ScanEc2InstanceWithFindingsResult

An object that contains information on the status of whether Malware Protection for EC2 instances with findings will be enabled as a data source.

ScanFilePath

class ScanFilePath

Contains details of infected file including name, file path and hash.

ScannedItemCount

class ScannedItemCount

Total number of scanned files.

ScanResourceCriteria

class ScanResourceCriteria

Contains information about criteria used to filter resources before triggering malware scan.

ScanResult

sealed class ScanResult

ScanResultDetails

class ScanResultDetails

Represents the result of the scan.

ScanStatus

sealed class ScanStatus

ScanThreatName

class ScanThreatName

Contains files infected with the given threat providing details of malware name and severity.

ScanType

sealed class ScanType

SecurityContext

class SecurityContext

Container security context.

SecurityGroup

class SecurityGroup

Contains information about the security groups associated with the EC2 instance.

Sequence

class Sequence

Contains information about the GuardDuty attack sequence finding.

Service

class Service

Contains additional information about the generated finding.

ServiceAdditionalInfo

class ServiceAdditionalInfo

Additional information about the generated finding.

Session

class Session

Contains information about the authenticated session.

SeverityStatistics

class SeverityStatistics

Information about severity level for each finding type.

Signal

class Signal

Contains information about the signals involved in the attack sequence.

SignalType

sealed class SignalType

SortCriteria

class SortCriteria

Contains information about the criteria used for sorting findings.

StartMalwareScanRequest

class StartMalwareScanRequest

StartMalwareScanResponse

class StartMalwareScanResponse

StartMonitoringMembersRequest

class StartMonitoringMembersRequest

StartMonitoringMembersResponse

class StartMonitoringMembersResponse

StopMonitoringMembersRequest

class StopMonitoringMembersRequest

StopMonitoringMembersResponse

class StopMonitoringMembersResponse

Tag

class Tag

Contains information about a tag key-value pair.

TagResourceRequest

class TagResourceRequest

TagResourceResponse

class TagResourceResponse

Threat

class Threat

Information about the detected threats associated with the generated finding.

ThreatDetectedByName

class ThreatDetectedByName

Contains details about identified threats organized by threat name.

ThreatIntelligenceDetail

class ThreatIntelligenceDetail

An instance of a threat intelligence detail that constitutes evidence for the finding.

ThreatIntelSetFormat

sealed class ThreatIntelSetFormat

ThreatIntelSetStatus

sealed class ThreatIntelSetStatus

ThreatsDetectedItemCount

class ThreatsDetectedItemCount

Contains total number of infected files.

Total

class Total

Contains the total usage with the corresponding currency unit for that value.

TriggerDetails

class TriggerDetails

Represents the reason the scan was triggered.

UnarchiveFindingsRequest

class UnarchiveFindingsRequest

UnarchiveFindingsResponse

class UnarchiveFindingsResponse

UnprocessedAccount

class UnprocessedAccount

Contains information about the accounts that weren't processed.

UnprocessedDataSourcesResult

class UnprocessedDataSourcesResult

Specifies the names of the data sources that couldn't be enabled.

UntagResourceRequest

class UntagResourceRequest

UntagResourceResponse

class UntagResourceResponse

UpdateDetectorRequest

class UpdateDetectorRequest

UpdateDetectorResponse

class UpdateDetectorResponse

UpdateFilterRequest

class UpdateFilterRequest

UpdateFilterResponse

class UpdateFilterResponse

UpdateFindingsFeedbackRequest

class UpdateFindingsFeedbackRequest

UpdateFindingsFeedbackResponse

class UpdateFindingsFeedbackResponse

UpdateIpSetRequest

class UpdateIpSetRequest

UpdateIpSetResponse

class UpdateIpSetResponse

UpdateMalwareProtectionPlanRequest

class UpdateMalwareProtectionPlanRequest

UpdateMalwareProtectionPlanResponse

class UpdateMalwareProtectionPlanResponse

UpdateMalwareScanSettingsRequest

class UpdateMalwareScanSettingsRequest

UpdateMalwareScanSettingsResponse

class UpdateMalwareScanSettingsResponse

UpdateMemberDetectorsRequest

class UpdateMemberDetectorsRequest

UpdateMemberDetectorsResponse

class UpdateMemberDetectorsResponse

UpdateOrganizationConfigurationRequest

class UpdateOrganizationConfigurationRequest

UpdateOrganizationConfigurationResponse

class UpdateOrganizationConfigurationResponse

UpdateProtectedResource

class UpdateProtectedResource

Information about the protected resource that is associated with the created Malware Protection plan. Presently, S3Bucket is the only supported protected resource.

UpdatePublishingDestinationRequest

class UpdatePublishingDestinationRequest

UpdatePublishingDestinationResponse

class UpdatePublishingDestinationResponse

UpdateS3BucketResource

class UpdateS3BucketResource

Information about the protected S3 bucket resource.

UpdateThreatIntelSetRequest

class UpdateThreatIntelSetRequest

UpdateThreatIntelSetResponse

class UpdateThreatIntelSetResponse

UsageAccountResult