| Copyright | (c) 2013-2023 Brendan Hay |
|---|---|
| License | Mozilla Public License, v. 2.0. |
| Maintainer | Brendan Hay |
| Stability | auto-generated |
| Portability | non-portable (GHC extensions) |
| Safe Haskell | Safe-Inferred |
| Language | Haskell2010 |
Amazonka.GuardDuty
Contents
- Service Configuration
- Errors
- Waiters
- Operations
- AcceptAdministratorInvitation
- ArchiveFindings
- CreateDetector
- CreateFilter
- CreateIPSet
- CreateMembers
- CreatePublishingDestination
- CreateSampleFindings
- CreateThreatIntelSet
- DeclineInvitations
- DeleteDetector
- DeleteFilter
- DeleteIPSet
- DeleteInvitations
- DeleteMembers
- DeletePublishingDestination
- DeleteThreatIntelSet
- DescribeMalwareScans (Paginated)
- DescribeOrganizationConfiguration
- DescribePublishingDestination
- DisableOrganizationAdminAccount
- DisassociateFromAdministratorAccount
- DisassociateMembers
- EnableOrganizationAdminAccount
- GetAdministratorAccount
- GetDetector
- GetFilter
- GetFindings
- GetFindingsStatistics
- GetIPSet
- GetInvitationsCount
- GetMalwareScanSettings
- GetMemberDetectors
- GetMembers
- GetRemainingFreeTrialDays
- GetThreatIntelSet
- GetUsageStatistics
- InviteMembers
- ListDetectors (Paginated)
- ListFilters (Paginated)
- ListFindings (Paginated)
- ListIPSets (Paginated)
- ListInvitations (Paginated)
- ListMembers (Paginated)
- ListOrganizationAdminAccounts (Paginated)
- ListPublishingDestinations
- ListTagsForResource
- ListThreatIntelSets (Paginated)
- StartMonitoringMembers
- StopMonitoringMembers
- TagResource
- UnarchiveFindings
- UntagResource
- UpdateDetector
- UpdateFilter
- UpdateFindingsFeedback
- UpdateIPSet
- UpdateMalwareScanSettings
- UpdateMemberDetectors
- UpdateOrganizationConfiguration
- UpdatePublishingDestination
- UpdateThreatIntelSet
- Types
- AdminStatus
- CriterionKey
- DataSource
- DataSourceStatus
- DestinationType
- DetectorStatus
- EbsSnapshotPreservation
- Feedback
- FilterAction
- FindingPublishingFrequency
- FindingStatisticType
- IpSetFormat
- IpSetStatus
- OrderBy
- PublishingStatus
- ScanCriterionKey
- ScanResult
- ScanStatus
- ThreatIntelSetFormat
- ThreatIntelSetStatus
- UsageStatisticType
- AccessControlList
- AccessKeyDetails
- AccountDetail
- AccountFreeTrialInfo
- AccountLevelPermissions
- Action
- AdminAccount
- Administrator
- AwsApiCallAction
- BlockPublicAccess
- BucketLevelPermissions
- BucketPolicy
- City
- CloudTrailConfigurationResult
- Condition
- Container
- Country
- DNSLogsConfigurationResult
- DataSourceConfigurations
- DataSourceConfigurationsResult
- DataSourceFreeTrial
- DataSourcesFreeTrial
- DefaultServerSideEncryption
- Destination
- DestinationProperties
- DnsRequestAction
- DomainDetails
- EbsVolumeDetails
- EbsVolumeScanDetails
- EbsVolumesResult
- EcsClusterDetails
- EcsTaskDetails
- EksClusterDetails
- Evidence
- FilterCondition
- FilterCriteria
- FilterCriterion
- Finding
- FindingCriteria
- FindingStatistics
- FlowLogsConfigurationResult
- GeoLocation
- HighestSeverityThreatDetails
- HostPath
- IamInstanceProfile
- InstanceDetails
- Invitation
- KubernetesApiCallAction
- KubernetesAuditLogsConfiguration
- KubernetesAuditLogsConfigurationResult
- KubernetesConfiguration
- KubernetesConfigurationResult
- KubernetesDataSourceFreeTrial
- KubernetesDetails
- KubernetesUserDetails
- KubernetesWorkloadDetails
- LocalIpDetails
- LocalPortDetails
- MalwareProtectionConfiguration
- MalwareProtectionConfigurationResult
- MalwareProtectionDataSourceFreeTrial
- Member
- MemberDataSourceConfiguration
- NetworkConnectionAction
- NetworkInterface
- Organization
- OrganizationDataSourceConfigurations
- OrganizationDataSourceConfigurationsResult
- OrganizationEbsVolumes
- OrganizationEbsVolumesResult
- OrganizationKubernetesAuditLogsConfiguration
- OrganizationKubernetesAuditLogsConfigurationResult
- OrganizationKubernetesConfiguration
- OrganizationKubernetesConfigurationResult
- OrganizationMalwareProtectionConfiguration
- OrganizationMalwareProtectionConfigurationResult
- OrganizationS3LogsConfiguration
- OrganizationS3LogsConfigurationResult
- OrganizationScanEc2InstanceWithFindings
- OrganizationScanEc2InstanceWithFindingsResult
- Owner
- PermissionConfiguration
- PortProbeAction
- PortProbeDetail
- PrivateIpAddressDetails
- ProductCode
- PublicAccess
- RemoteAccountDetails
- RemoteIpDetails
- RemotePortDetails
- Resource
- ResourceDetails
- S3BucketDetail
- S3LogsConfiguration
- S3LogsConfigurationResult
- Scan
- ScanCondition
- ScanConditionPair
- ScanDetections
- ScanEc2InstanceWithFindings
- ScanEc2InstanceWithFindingsResult
- ScanFilePath
- ScanResourceCriteria
- ScanResultDetails
- ScanThreatName
- ScannedItemCount
- SecurityContext
- SecurityGroup
- ServiceAdditionalInfo
- ServiceInfo
- SortCriteria
- Tag
- ThreatDetectedByName
- ThreatIntelligenceDetail
- ThreatsDetectedItemCount
- Total
- TriggerDetails
- UnprocessedAccount
- UnprocessedDataSourcesResult
- UsageAccountResult
- UsageCriteria
- UsageDataSourceResult
- UsageResourceResult
- UsageStatistics
- Volume
- VolumeDetail
- VolumeMount
Description
Derived from API version 2017-11-28 of the AWS service descriptions, licensed under Apache 2.0.
Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC flow logs, Amazon Web Services CloudTrail management event logs, CloudTrail S3 data event logs, EKS audit logs, DNS logs, and Amazon EBS volume data. It uses threat intelligence feeds, such as lists of malicious IPs and domains, and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, domains, or presence of malware on your Amazon EC2 instances and container workloads. For example, GuardDuty can detect compromised EC2 instances and container workloads serving malware, or mining bitcoin.
GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise, such as unauthorized infrastructure deployments like EC2 instances deployed in a Region that has never been used, or unusual API calls like a password policy change to reduce password strength.
GuardDuty informs you about the status of your Amazon Web Services environment by producing security findings that you can view in the GuardDuty console or through Amazon EventBridge. For more information, see the <https:docs.aws.amazon.comguarddutylatestugwhat-is-guardduty.html Amazon GuardDuty User Guide> .
Synopsis
- defaultService :: Service
- _BadRequestException :: AsError a => Fold a ServiceError
- _InternalServerErrorException :: AsError a => Fold a ServiceError
- data AcceptAdministratorInvitation = AcceptAdministratorInvitation' Text Text Text
- newAcceptAdministratorInvitation :: Text -> Text -> Text -> AcceptAdministratorInvitation
- data AcceptAdministratorInvitationResponse = AcceptAdministratorInvitationResponse' Int
- newAcceptAdministratorInvitationResponse :: Int -> AcceptAdministratorInvitationResponse
- data ArchiveFindings = ArchiveFindings' Text [Text]
- newArchiveFindings :: Text -> ArchiveFindings
- data ArchiveFindingsResponse = ArchiveFindingsResponse' Int
- newArchiveFindingsResponse :: Int -> ArchiveFindingsResponse
- data CreateDetector = CreateDetector' (Maybe Text) (Maybe DataSourceConfigurations) (Maybe FindingPublishingFrequency) (Maybe (HashMap Text Text)) Bool
- newCreateDetector :: Bool -> CreateDetector
- data CreateDetectorResponse = CreateDetectorResponse' (Maybe Text) (Maybe UnprocessedDataSourcesResult) Int
- newCreateDetectorResponse :: Int -> CreateDetectorResponse
- data CreateFilter = CreateFilter' (Maybe FilterAction) (Maybe Text) (Maybe Text) (Maybe Natural) (Maybe (HashMap Text Text)) Text Text FindingCriteria
- newCreateFilter :: Text -> Text -> FindingCriteria -> CreateFilter
- data CreateFilterResponse = CreateFilterResponse' Int Text
- newCreateFilterResponse :: Int -> Text -> CreateFilterResponse
- data CreateIPSet = CreateIPSet' (Maybe Text) (Maybe (HashMap Text Text)) Text Text IpSetFormat Text Bool
- newCreateIPSet :: Text -> Text -> IpSetFormat -> Text -> Bool -> CreateIPSet
- data CreateIPSetResponse = CreateIPSetResponse' Int Text
- newCreateIPSetResponse :: Int -> Text -> CreateIPSetResponse
- data CreateMembers = CreateMembers' Text (NonEmpty AccountDetail)
- newCreateMembers :: Text -> NonEmpty AccountDetail -> CreateMembers
- data CreateMembersResponse = CreateMembersResponse' Int [UnprocessedAccount]
- newCreateMembersResponse :: Int -> CreateMembersResponse
- data CreatePublishingDestination = CreatePublishingDestination' (Maybe Text) Text DestinationType DestinationProperties
- newCreatePublishingDestination :: Text -> DestinationType -> DestinationProperties -> CreatePublishingDestination
- data CreatePublishingDestinationResponse = CreatePublishingDestinationResponse' Int Text
- newCreatePublishingDestinationResponse :: Int -> Text -> CreatePublishingDestinationResponse
- data CreateSampleFindings = CreateSampleFindings' (Maybe [Text]) Text
- newCreateSampleFindings :: Text -> CreateSampleFindings
- data CreateSampleFindingsResponse = CreateSampleFindingsResponse' Int
- newCreateSampleFindingsResponse :: Int -> CreateSampleFindingsResponse
- data CreateThreatIntelSet = CreateThreatIntelSet' (Maybe Text) (Maybe (HashMap Text Text)) Text Text ThreatIntelSetFormat Text Bool
- newCreateThreatIntelSet :: Text -> Text -> ThreatIntelSetFormat -> Text -> Bool -> CreateThreatIntelSet
- data CreateThreatIntelSetResponse = CreateThreatIntelSetResponse' Int Text
- newCreateThreatIntelSetResponse :: Int -> Text -> CreateThreatIntelSetResponse
- data DeclineInvitations = DeclineInvitations' (NonEmpty Text)
- newDeclineInvitations :: NonEmpty Text -> DeclineInvitations
- data DeclineInvitationsResponse = DeclineInvitationsResponse' Int [UnprocessedAccount]
- newDeclineInvitationsResponse :: Int -> DeclineInvitationsResponse
- data DeleteDetector = DeleteDetector' Text
- newDeleteDetector :: Text -> DeleteDetector
- data DeleteDetectorResponse = DeleteDetectorResponse' Int
- newDeleteDetectorResponse :: Int -> DeleteDetectorResponse
- data DeleteFilter = DeleteFilter' Text Text
- newDeleteFilter :: Text -> Text -> DeleteFilter
- data DeleteFilterResponse = DeleteFilterResponse' Int
- newDeleteFilterResponse :: Int -> DeleteFilterResponse
- data DeleteIPSet = DeleteIPSet' Text Text
- newDeleteIPSet :: Text -> Text -> DeleteIPSet
- data DeleteIPSetResponse = DeleteIPSetResponse' Int
- newDeleteIPSetResponse :: Int -> DeleteIPSetResponse
- data DeleteInvitations = DeleteInvitations' (NonEmpty Text)
- newDeleteInvitations :: NonEmpty Text -> DeleteInvitations
- data DeleteInvitationsResponse = DeleteInvitationsResponse' Int [UnprocessedAccount]
- newDeleteInvitationsResponse :: Int -> DeleteInvitationsResponse
- data DeleteMembers = DeleteMembers' Text (NonEmpty Text)
- newDeleteMembers :: Text -> NonEmpty Text -> DeleteMembers
- data DeleteMembersResponse = DeleteMembersResponse' Int [UnprocessedAccount]
- newDeleteMembersResponse :: Int -> DeleteMembersResponse
- data DeletePublishingDestination = DeletePublishingDestination' Text Text
- newDeletePublishingDestination :: Text -> Text -> DeletePublishingDestination
- data DeletePublishingDestinationResponse = DeletePublishingDestinationResponse' Int
- newDeletePublishingDestinationResponse :: Int -> DeletePublishingDestinationResponse
- data DeleteThreatIntelSet = DeleteThreatIntelSet' Text Text
- newDeleteThreatIntelSet :: Text -> Text -> DeleteThreatIntelSet
- data DeleteThreatIntelSetResponse = DeleteThreatIntelSetResponse' Int
- newDeleteThreatIntelSetResponse :: Int -> DeleteThreatIntelSetResponse
- data DescribeMalwareScans = DescribeMalwareScans' (Maybe FilterCriteria) (Maybe Natural) (Maybe Text) (Maybe SortCriteria) Text
- newDescribeMalwareScans :: Text -> DescribeMalwareScans
- data DescribeMalwareScansResponse = DescribeMalwareScansResponse' (Maybe Text) Int [Scan]
- newDescribeMalwareScansResponse :: Int -> DescribeMalwareScansResponse
- data DescribeOrganizationConfiguration = DescribeOrganizationConfiguration' Text
- newDescribeOrganizationConfiguration :: Text -> DescribeOrganizationConfiguration
- data DescribeOrganizationConfigurationResponse = DescribeOrganizationConfigurationResponse' (Maybe OrganizationDataSourceConfigurationsResult) Int Bool Bool
- newDescribeOrganizationConfigurationResponse :: Int -> Bool -> Bool -> DescribeOrganizationConfigurationResponse
- data DescribePublishingDestination = DescribePublishingDestination' Text Text
- newDescribePublishingDestination :: Text -> Text -> DescribePublishingDestination
- data DescribePublishingDestinationResponse = DescribePublishingDestinationResponse' Int Text DestinationType PublishingStatus Integer DestinationProperties
- newDescribePublishingDestinationResponse :: Int -> Text -> DestinationType -> PublishingStatus -> Integer -> DestinationProperties -> DescribePublishingDestinationResponse
- data DisableOrganizationAdminAccount = DisableOrganizationAdminAccount' Text
- newDisableOrganizationAdminAccount :: Text -> DisableOrganizationAdminAccount
- data DisableOrganizationAdminAccountResponse = DisableOrganizationAdminAccountResponse' Int
- newDisableOrganizationAdminAccountResponse :: Int -> DisableOrganizationAdminAccountResponse
- data DisassociateFromAdministratorAccount = DisassociateFromAdministratorAccount' Text
- newDisassociateFromAdministratorAccount :: Text -> DisassociateFromAdministratorAccount
- data DisassociateFromAdministratorAccountResponse = DisassociateFromAdministratorAccountResponse' Int
- newDisassociateFromAdministratorAccountResponse :: Int -> DisassociateFromAdministratorAccountResponse
- data DisassociateMembers = DisassociateMembers' Text (NonEmpty Text)
- newDisassociateMembers :: Text -> NonEmpty Text -> DisassociateMembers
- data DisassociateMembersResponse = DisassociateMembersResponse' Int [UnprocessedAccount]
- newDisassociateMembersResponse :: Int -> DisassociateMembersResponse
- data EnableOrganizationAdminAccount = EnableOrganizationAdminAccount' Text
- newEnableOrganizationAdminAccount :: Text -> EnableOrganizationAdminAccount
- data EnableOrganizationAdminAccountResponse = EnableOrganizationAdminAccountResponse' Int
- newEnableOrganizationAdminAccountResponse :: Int -> EnableOrganizationAdminAccountResponse
- data GetAdministratorAccount = GetAdministratorAccount' Text
- newGetAdministratorAccount :: Text -> GetAdministratorAccount
- data GetAdministratorAccountResponse = GetAdministratorAccountResponse' Int Administrator
- newGetAdministratorAccountResponse :: Int -> Administrator -> GetAdministratorAccountResponse
- data GetDetector = GetDetector' Text
- newGetDetector :: Text -> GetDetector
- data GetDetectorResponse = GetDetectorResponse' (Maybe Text) (Maybe DataSourceConfigurationsResult) (Maybe FindingPublishingFrequency) (Maybe (HashMap Text Text)) (Maybe Text) Int Text DetectorStatus
- newGetDetectorResponse :: Int -> Text -> DetectorStatus -> GetDetectorResponse
- data GetFilter = GetFilter' Text Text
- newGetFilter :: Text -> Text -> GetFilter
- data GetFilterResponse = GetFilterResponse' (Maybe Text) (Maybe Natural) (Maybe (HashMap Text Text)) Int Text FilterAction FindingCriteria
- newGetFilterResponse :: Int -> Text -> FilterAction -> FindingCriteria -> GetFilterResponse
- data GetFindings = GetFindings' (Maybe SortCriteria) Text [Text]
- newGetFindings :: Text -> GetFindings
- data GetFindingsResponse = GetFindingsResponse' Int [Finding]
- newGetFindingsResponse :: Int -> GetFindingsResponse
- data GetFindingsStatistics = GetFindingsStatistics' (Maybe FindingCriteria) Text [FindingStatisticType]
- newGetFindingsStatistics :: Text -> GetFindingsStatistics
- data GetFindingsStatisticsResponse = GetFindingsStatisticsResponse' Int FindingStatistics
- newGetFindingsStatisticsResponse :: Int -> FindingStatistics -> GetFindingsStatisticsResponse
- data GetIPSet = GetIPSet' Text Text
- newGetIPSet :: Text -> Text -> GetIPSet
- data GetIPSetResponse = GetIPSetResponse' (Maybe (HashMap Text Text)) Int Text IpSetFormat Text IpSetStatus
- newGetIPSetResponse :: Int -> Text -> IpSetFormat -> Text -> IpSetStatus -> GetIPSetResponse
- data GetInvitationsCount = GetInvitationsCount' {
- newGetInvitationsCount :: GetInvitationsCount
- data GetInvitationsCountResponse = GetInvitationsCountResponse' (Maybe Int) Int
- newGetInvitationsCountResponse :: Int -> GetInvitationsCountResponse
- data GetMalwareScanSettings = GetMalwareScanSettings' Text
- newGetMalwareScanSettings :: Text -> GetMalwareScanSettings
- data GetMalwareScanSettingsResponse = GetMalwareScanSettingsResponse' (Maybe EbsSnapshotPreservation) (Maybe ScanResourceCriteria) Int
- newGetMalwareScanSettingsResponse :: Int -> GetMalwareScanSettingsResponse
- data GetMemberDetectors = GetMemberDetectors' Text (NonEmpty Text)
- newGetMemberDetectors :: Text -> NonEmpty Text -> GetMemberDetectors
- data GetMemberDetectorsResponse = GetMemberDetectorsResponse' Int (NonEmpty MemberDataSourceConfiguration) [UnprocessedAccount]
- newGetMemberDetectorsResponse :: Int -> NonEmpty MemberDataSourceConfiguration -> GetMemberDetectorsResponse
- data GetMembers = GetMembers' Text (NonEmpty Text)
- newGetMembers :: Text -> NonEmpty Text -> GetMembers
- data GetMembersResponse = GetMembersResponse' Int [Member] [UnprocessedAccount]
- newGetMembersResponse :: Int -> GetMembersResponse
- data GetRemainingFreeTrialDays = GetRemainingFreeTrialDays' (Maybe (NonEmpty Text)) Text
- newGetRemainingFreeTrialDays :: Text -> GetRemainingFreeTrialDays
- data GetRemainingFreeTrialDaysResponse = GetRemainingFreeTrialDaysResponse' (Maybe [AccountFreeTrialInfo]) (Maybe [UnprocessedAccount]) Int
- newGetRemainingFreeTrialDaysResponse :: Int -> GetRemainingFreeTrialDaysResponse
- data GetThreatIntelSet = GetThreatIntelSet' Text Text
- newGetThreatIntelSet :: Text -> Text -> GetThreatIntelSet
- data GetThreatIntelSetResponse = GetThreatIntelSetResponse' (Maybe (HashMap Text Text)) Int Text ThreatIntelSetFormat Text ThreatIntelSetStatus
- newGetThreatIntelSetResponse :: Int -> Text -> ThreatIntelSetFormat -> Text -> ThreatIntelSetStatus -> GetThreatIntelSetResponse
- data GetUsageStatistics = GetUsageStatistics' (Maybe Natural) (Maybe Text) (Maybe Text) Text UsageStatisticType UsageCriteria
- newGetUsageStatistics :: Text -> UsageStatisticType -> UsageCriteria -> GetUsageStatistics
- data GetUsageStatisticsResponse = GetUsageStatisticsResponse' (Maybe Text) (Maybe UsageStatistics) Int
- newGetUsageStatisticsResponse :: Int -> GetUsageStatisticsResponse
- data InviteMembers = InviteMembers' (Maybe Bool) (Maybe Text) Text (NonEmpty Text)
- newInviteMembers :: Text -> NonEmpty Text -> InviteMembers
- data InviteMembersResponse = InviteMembersResponse' Int [UnprocessedAccount]
- newInviteMembersResponse :: Int -> InviteMembersResponse
- data ListDetectors = ListDetectors' (Maybe Natural) (Maybe Text)
- newListDetectors :: ListDetectors
- data ListDetectorsResponse = ListDetectorsResponse' (Maybe Text) Int [Text]
- newListDetectorsResponse :: Int -> ListDetectorsResponse
- data ListFilters = ListFilters' (Maybe Natural) (Maybe Text) Text
- newListFilters :: Text -> ListFilters
- data ListFiltersResponse = ListFiltersResponse' (Maybe Text) Int [Text]
- newListFiltersResponse :: Int -> ListFiltersResponse
- data ListFindings = ListFindings' (Maybe FindingCriteria) (Maybe Natural) (Maybe Text) (Maybe SortCriteria) Text
- newListFindings :: Text -> ListFindings
- data ListFindingsResponse = ListFindingsResponse' (Maybe Text) Int [Text]
- newListFindingsResponse :: Int -> ListFindingsResponse
- data ListIPSets = ListIPSets' (Maybe Natural) (Maybe Text) Text
- newListIPSets :: Text -> ListIPSets
- data ListIPSetsResponse = ListIPSetsResponse' (Maybe Text) Int [Text]
- newListIPSetsResponse :: Int -> ListIPSetsResponse
- data ListInvitations = ListInvitations' (Maybe Natural) (Maybe Text)
- newListInvitations :: ListInvitations
- data ListInvitationsResponse = ListInvitationsResponse' (Maybe [Invitation]) (Maybe Text) Int
- newListInvitationsResponse :: Int -> ListInvitationsResponse
- data ListMembers = ListMembers' (Maybe Natural) (Maybe Text) (Maybe Text) Text
- newListMembers :: Text -> ListMembers
- data ListMembersResponse = ListMembersResponse' (Maybe [Member]) (Maybe Text) Int
- newListMembersResponse :: Int -> ListMembersResponse
- data ListOrganizationAdminAccounts = ListOrganizationAdminAccounts' (Maybe Natural) (Maybe Text)
- newListOrganizationAdminAccounts :: ListOrganizationAdminAccounts
- data ListOrganizationAdminAccountsResponse = ListOrganizationAdminAccountsResponse' (Maybe [AdminAccount]) (Maybe Text) Int
- newListOrganizationAdminAccountsResponse :: Int -> ListOrganizationAdminAccountsResponse
- data ListPublishingDestinations = ListPublishingDestinations' (Maybe Natural) (Maybe Text) Text
- newListPublishingDestinations :: Text -> ListPublishingDestinations
- data ListPublishingDestinationsResponse = ListPublishingDestinationsResponse' (Maybe Text) Int [Destination]
- newListPublishingDestinationsResponse :: Int -> ListPublishingDestinationsResponse
- data ListTagsForResource = ListTagsForResource' Text
- newListTagsForResource :: Text -> ListTagsForResource
- data ListTagsForResourceResponse = ListTagsForResourceResponse' (Maybe (HashMap Text Text)) Int
- newListTagsForResourceResponse :: Int -> ListTagsForResourceResponse
- data ListThreatIntelSets = ListThreatIntelSets' (Maybe Natural) (Maybe Text) Text
- newListThreatIntelSets :: Text -> ListThreatIntelSets
- data ListThreatIntelSetsResponse = ListThreatIntelSetsResponse' (Maybe Text) Int [Text]
- newListThreatIntelSetsResponse :: Int -> ListThreatIntelSetsResponse
- data StartMonitoringMembers = StartMonitoringMembers' Text (NonEmpty Text)
- newStartMonitoringMembers :: Text -> NonEmpty Text -> StartMonitoringMembers
- data StartMonitoringMembersResponse = StartMonitoringMembersResponse' Int [UnprocessedAccount]
- newStartMonitoringMembersResponse :: Int -> StartMonitoringMembersResponse
- data StopMonitoringMembers = StopMonitoringMembers' Text (NonEmpty Text)
- newStopMonitoringMembers :: Text -> NonEmpty Text -> StopMonitoringMembers
- data StopMonitoringMembersResponse = StopMonitoringMembersResponse' Int [UnprocessedAccount]
- newStopMonitoringMembersResponse :: Int -> StopMonitoringMembersResponse
- data TagResource = TagResource' Text (HashMap Text Text)
- newTagResource :: Text -> TagResource
- data TagResourceResponse = TagResourceResponse' Int
- newTagResourceResponse :: Int -> TagResourceResponse
- data UnarchiveFindings = UnarchiveFindings' Text [Text]
- newUnarchiveFindings :: Text -> UnarchiveFindings
- data UnarchiveFindingsResponse = UnarchiveFindingsResponse' Int
- newUnarchiveFindingsResponse :: Int -> UnarchiveFindingsResponse
- data UntagResource = UntagResource' Text (NonEmpty Text)
- newUntagResource :: Text -> NonEmpty Text -> UntagResource
- data UntagResourceResponse = UntagResourceResponse' Int
- newUntagResourceResponse :: Int -> UntagResourceResponse
- data UpdateDetector = UpdateDetector' (Maybe DataSourceConfigurations) (Maybe Bool) (Maybe FindingPublishingFrequency) Text
- newUpdateDetector :: Text -> UpdateDetector
- data UpdateDetectorResponse = UpdateDetectorResponse' Int
- newUpdateDetectorResponse :: Int -> UpdateDetectorResponse
- data UpdateFilter = UpdateFilter' (Maybe FilterAction) (Maybe Text) (Maybe FindingCriteria) (Maybe Natural) Text Text
- newUpdateFilter :: Text -> Text -> UpdateFilter
- data UpdateFilterResponse = UpdateFilterResponse' Int Text
- newUpdateFilterResponse :: Int -> Text -> UpdateFilterResponse
- data UpdateFindingsFeedback = UpdateFindingsFeedback' (Maybe Text) Text [Text] Feedback
- newUpdateFindingsFeedback :: Text -> Feedback -> UpdateFindingsFeedback
- data UpdateFindingsFeedbackResponse = UpdateFindingsFeedbackResponse' Int
- newUpdateFindingsFeedbackResponse :: Int -> UpdateFindingsFeedbackResponse
- data UpdateIPSet = UpdateIPSet' (Maybe Bool) (Maybe Text) (Maybe Text) Text Text
- newUpdateIPSet :: Text -> Text -> UpdateIPSet
- data UpdateIPSetResponse = UpdateIPSetResponse' Int
- newUpdateIPSetResponse :: Int -> UpdateIPSetResponse
- data UpdateMalwareScanSettings = UpdateMalwareScanSettings' (Maybe EbsSnapshotPreservation) (Maybe ScanResourceCriteria) Text
- newUpdateMalwareScanSettings :: Text -> UpdateMalwareScanSettings
- data UpdateMalwareScanSettingsResponse = UpdateMalwareScanSettingsResponse' Int
- newUpdateMalwareScanSettingsResponse :: Int -> UpdateMalwareScanSettingsResponse
- data UpdateMemberDetectors = UpdateMemberDetectors' (Maybe DataSourceConfigurations) Text (NonEmpty Text)
- newUpdateMemberDetectors :: Text -> NonEmpty Text -> UpdateMemberDetectors
- data UpdateMemberDetectorsResponse = UpdateMemberDetectorsResponse' Int [UnprocessedAccount]
- newUpdateMemberDetectorsResponse :: Int -> UpdateMemberDetectorsResponse
- data UpdateOrganizationConfiguration = UpdateOrganizationConfiguration' (Maybe OrganizationDataSourceConfigurations) Text Bool
- newUpdateOrganizationConfiguration :: Text -> Bool -> UpdateOrganizationConfiguration
- data UpdateOrganizationConfigurationResponse = UpdateOrganizationConfigurationResponse' Int
- newUpdateOrganizationConfigurationResponse :: Int -> UpdateOrganizationConfigurationResponse
- data UpdatePublishingDestination = UpdatePublishingDestination' (Maybe DestinationProperties) Text Text
- newUpdatePublishingDestination :: Text -> Text -> UpdatePublishingDestination
- data UpdatePublishingDestinationResponse = UpdatePublishingDestinationResponse' Int
- newUpdatePublishingDestinationResponse :: Int -> UpdatePublishingDestinationResponse
- data UpdateThreatIntelSet = UpdateThreatIntelSet' (Maybe Bool) (Maybe Text) (Maybe Text) Text Text
- newUpdateThreatIntelSet :: Text -> Text -> UpdateThreatIntelSet
- data UpdateThreatIntelSetResponse = UpdateThreatIntelSetResponse' Int
- newUpdateThreatIntelSetResponse :: Int -> UpdateThreatIntelSetResponse
- newtype AdminStatus where
- AdminStatus' { }
- pattern AdminStatus_DISABLE_IN_PROGRESS :: AdminStatus
- pattern AdminStatus_ENABLED :: AdminStatus
- newtype CriterionKey where
- CriterionKey' { }
- pattern CriterionKey_ACCOUNT_ID :: CriterionKey
- pattern CriterionKey_EC2_INSTANCE_ARN :: CriterionKey
- pattern CriterionKey_GUARDDUTY_FINDING_ID :: CriterionKey
- pattern CriterionKey_SCAN_ID :: CriterionKey
- pattern CriterionKey_SCAN_START_TIME :: CriterionKey
- pattern CriterionKey_SCAN_STATUS :: CriterionKey
- newtype DataSource where
- DataSource' { }
- pattern DataSource_CLOUD_TRAIL :: DataSource
- pattern DataSource_DNS_LOGS :: DataSource
- pattern DataSource_EC2_MALWARE_SCAN :: DataSource
- pattern DataSource_FLOW_LOGS :: DataSource
- pattern DataSource_KUBERNETES_AUDIT_LOGS :: DataSource
- pattern DataSource_S3_LOGS :: DataSource
- newtype DataSourceStatus where
- DataSourceStatus' { }
- pattern DataSourceStatus_DISABLED :: DataSourceStatus
- pattern DataSourceStatus_ENABLED :: DataSourceStatus
- newtype DestinationType where
- DestinationType' { }
- pattern DestinationType_S3 :: DestinationType
- newtype DetectorStatus where
- DetectorStatus' { }
- pattern DetectorStatus_DISABLED :: DetectorStatus
- pattern DetectorStatus_ENABLED :: DetectorStatus
- newtype EbsSnapshotPreservation where
- newtype Feedback where
- Feedback' {
- fromFeedback :: Text
- pattern Feedback_NOT_USEFUL :: Feedback
- pattern Feedback_USEFUL :: Feedback
- Feedback' {
- newtype FilterAction where
- FilterAction' { }
- pattern FilterAction_ARCHIVE :: FilterAction
- pattern FilterAction_NOOP :: FilterAction
- newtype FindingPublishingFrequency where
- newtype FindingStatisticType where
- newtype IpSetFormat where
- IpSetFormat' { }
- pattern IpSetFormat_ALIEN_VAULT :: IpSetFormat
- pattern IpSetFormat_FIRE_EYE :: IpSetFormat
- pattern IpSetFormat_OTX_CSV :: IpSetFormat
- pattern IpSetFormat_PROOF_POINT :: IpSetFormat
- pattern IpSetFormat_STIX :: IpSetFormat
- pattern IpSetFormat_TXT :: IpSetFormat
- newtype IpSetStatus where
- IpSetStatus' { }
- pattern IpSetStatus_ACTIVATING :: IpSetStatus
- pattern IpSetStatus_ACTIVE :: IpSetStatus
- pattern IpSetStatus_DEACTIVATING :: IpSetStatus
- pattern IpSetStatus_DELETED :: IpSetStatus
- pattern IpSetStatus_DELETE_PENDING :: IpSetStatus
- pattern IpSetStatus_ERROR :: IpSetStatus
- pattern IpSetStatus_INACTIVE :: IpSetStatus
- newtype OrderBy where
- OrderBy' {
- fromOrderBy :: Text
- pattern OrderBy_ASC :: OrderBy
- pattern OrderBy_DESC :: OrderBy
- OrderBy' {
- newtype PublishingStatus where
- newtype ScanCriterionKey where
- newtype ScanResult where
- ScanResult' { }
- pattern ScanResult_CLEAN :: ScanResult
- pattern ScanResult_INFECTED :: ScanResult
- newtype ScanStatus where
- ScanStatus' { }
- pattern ScanStatus_COMPLETED :: ScanStatus
- pattern ScanStatus_FAILED :: ScanStatus
- pattern ScanStatus_RUNNING :: ScanStatus
- newtype ThreatIntelSetFormat where
- ThreatIntelSetFormat' { }
- pattern ThreatIntelSetFormat_ALIEN_VAULT :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_FIRE_EYE :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_OTX_CSV :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_PROOF_POINT :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_STIX :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_TXT :: ThreatIntelSetFormat
- newtype ThreatIntelSetStatus where
- ThreatIntelSetStatus' { }
- pattern ThreatIntelSetStatus_ACTIVATING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_ACTIVE :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DEACTIVATING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DELETED :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DELETE_PENDING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_ERROR :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_INACTIVE :: ThreatIntelSetStatus
- newtype UsageStatisticType where
- data AccessControlList = AccessControlList' (Maybe Bool) (Maybe Bool)
- newAccessControlList :: AccessControlList
- data AccessKeyDetails = AccessKeyDetails' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newAccessKeyDetails :: AccessKeyDetails
- data AccountDetail = AccountDetail' Text Text
- newAccountDetail :: Text -> Text -> AccountDetail
- data AccountFreeTrialInfo = AccountFreeTrialInfo' (Maybe Text) (Maybe DataSourcesFreeTrial)
- newAccountFreeTrialInfo :: AccountFreeTrialInfo
- data AccountLevelPermissions = AccountLevelPermissions' (Maybe BlockPublicAccess)
- newAccountLevelPermissions :: AccountLevelPermissions
- data Action = Action' (Maybe Text) (Maybe AwsApiCallAction) (Maybe DnsRequestAction) (Maybe KubernetesApiCallAction) (Maybe NetworkConnectionAction) (Maybe PortProbeAction)
- newAction :: Action
- data AdminAccount = AdminAccount' (Maybe Text) (Maybe AdminStatus)
- newAdminAccount :: AdminAccount
- data Administrator = Administrator' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newAdministrator :: Administrator
- data AwsApiCallAction = AwsApiCallAction' (Maybe (HashMap Text Text)) (Maybe Text) (Maybe Text) (Maybe DomainDetails) (Maybe Text) (Maybe RemoteAccountDetails) (Maybe RemoteIpDetails) (Maybe Text) (Maybe Text)
- newAwsApiCallAction :: AwsApiCallAction
- data BlockPublicAccess = BlockPublicAccess' (Maybe Bool) (Maybe Bool) (Maybe Bool) (Maybe Bool)
- newBlockPublicAccess :: BlockPublicAccess
- data BucketLevelPermissions = BucketLevelPermissions' (Maybe AccessControlList) (Maybe BlockPublicAccess) (Maybe BucketPolicy)
- newBucketLevelPermissions :: BucketLevelPermissions
- data BucketPolicy = BucketPolicy' (Maybe Bool) (Maybe Bool)
- newBucketPolicy :: BucketPolicy
- data City = City' (Maybe Text)
- newCity :: City
- data CloudTrailConfigurationResult = CloudTrailConfigurationResult' DataSourceStatus
- newCloudTrailConfigurationResult :: DataSourceStatus -> CloudTrailConfigurationResult
- data Condition = Condition' (Maybe [Text]) (Maybe [Text]) (Maybe Integer) (Maybe Integer) (Maybe Int) (Maybe Int) (Maybe Integer) (Maybe Integer) (Maybe Int) (Maybe Int) (Maybe [Text]) (Maybe [Text])
- newCondition :: Condition
- data Container = Container' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe SecurityContext) (Maybe [VolumeMount])
- newContainer :: Container
- data Country = Country' (Maybe Text) (Maybe Text)
- newCountry :: Country
- data DNSLogsConfigurationResult = DNSLogsConfigurationResult' DataSourceStatus
- newDNSLogsConfigurationResult :: DataSourceStatus -> DNSLogsConfigurationResult
- data DataSourceConfigurations = DataSourceConfigurations' (Maybe KubernetesConfiguration) (Maybe MalwareProtectionConfiguration) (Maybe S3LogsConfiguration)
- newDataSourceConfigurations :: DataSourceConfigurations
- data DataSourceConfigurationsResult = DataSourceConfigurationsResult' (Maybe KubernetesConfigurationResult) (Maybe MalwareProtectionConfigurationResult) CloudTrailConfigurationResult DNSLogsConfigurationResult FlowLogsConfigurationResult S3LogsConfigurationResult
- newDataSourceConfigurationsResult :: CloudTrailConfigurationResult -> DNSLogsConfigurationResult -> FlowLogsConfigurationResult -> S3LogsConfigurationResult -> DataSourceConfigurationsResult
- data DataSourceFreeTrial = DataSourceFreeTrial' (Maybe Int)
- newDataSourceFreeTrial :: DataSourceFreeTrial
- data DataSourcesFreeTrial = DataSourcesFreeTrial' (Maybe DataSourceFreeTrial) (Maybe DataSourceFreeTrial) (Maybe DataSourceFreeTrial) (Maybe KubernetesDataSourceFreeTrial) (Maybe MalwareProtectionDataSourceFreeTrial) (Maybe DataSourceFreeTrial)
- newDataSourcesFreeTrial :: DataSourcesFreeTrial
- data DefaultServerSideEncryption = DefaultServerSideEncryption' (Maybe Text) (Maybe Text)
- newDefaultServerSideEncryption :: DefaultServerSideEncryption
- data Destination = Destination' Text DestinationType PublishingStatus
- newDestination :: Text -> DestinationType -> PublishingStatus -> Destination
- data DestinationProperties = DestinationProperties' (Maybe Text) (Maybe Text)
- newDestinationProperties :: DestinationProperties
- data DnsRequestAction = DnsRequestAction' (Maybe Bool) (Maybe Text) (Maybe Text)
- newDnsRequestAction :: DnsRequestAction
- data DomainDetails = DomainDetails' (Maybe Text)
- newDomainDetails :: DomainDetails
- data EbsVolumeDetails = EbsVolumeDetails' (Maybe [VolumeDetail]) (Maybe [VolumeDetail])
- newEbsVolumeDetails :: EbsVolumeDetails
- data EbsVolumeScanDetails = EbsVolumeScanDetails' (Maybe POSIX) (Maybe ScanDetections) (Maybe Text) (Maybe POSIX) (Maybe [Text]) (Maybe Text)
- newEbsVolumeScanDetails :: EbsVolumeScanDetails
- data EbsVolumesResult = EbsVolumesResult' (Maybe Text) (Maybe DataSourceStatus)
- newEbsVolumesResult :: EbsVolumesResult
- data EcsClusterDetails = EcsClusterDetails' (Maybe Int) (Maybe Text) (Maybe Text) (Maybe Int) (Maybe Int) (Maybe Text) (Maybe [Tag]) (Maybe EcsTaskDetails)
- newEcsClusterDetails :: EcsClusterDetails
- data EcsTaskDetails = EcsTaskDetails' (Maybe Text) (Maybe [Container]) (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe Text) (Maybe [Tag]) (Maybe POSIX) (Maybe Text) (Maybe [Volume])
- newEcsTaskDetails :: EcsTaskDetails
- data EksClusterDetails = EksClusterDetails' (Maybe Text) (Maybe POSIX) (Maybe Text) (Maybe Text) (Maybe [Tag]) (Maybe Text)
- newEksClusterDetails :: EksClusterDetails
- data Evidence = Evidence' (Maybe [ThreatIntelligenceDetail])
- newEvidence :: Evidence
- data FilterCondition = FilterCondition' (Maybe Text) (Maybe Integer) (Maybe Integer)
- newFilterCondition :: FilterCondition
- data FilterCriteria = FilterCriteria' (Maybe [FilterCriterion])
- newFilterCriteria :: FilterCriteria
- data FilterCriterion = FilterCriterion' (Maybe CriterionKey) (Maybe FilterCondition)
- newFilterCriterion :: FilterCriterion
- data Finding = Finding' (Maybe Double) (Maybe Text) (Maybe Text) (Maybe ServiceInfo) (Maybe Text) Text Text Text Text Text Resource Text Double Text Text
- newFinding :: Text -> Text -> Text -> Text -> Text -> Resource -> Text -> Double -> Text -> Text -> Finding
- data FindingCriteria = FindingCriteria' (Maybe (HashMap Text Condition))
- newFindingCriteria :: FindingCriteria
- data FindingStatistics = FindingStatistics' (Maybe (HashMap Text Int))
- newFindingStatistics :: FindingStatistics
- data FlowLogsConfigurationResult = FlowLogsConfigurationResult' DataSourceStatus
- newFlowLogsConfigurationResult :: DataSourceStatus -> FlowLogsConfigurationResult
- data GeoLocation = GeoLocation' (Maybe Double) (Maybe Double)
- newGeoLocation :: GeoLocation
- data HighestSeverityThreatDetails = HighestSeverityThreatDetails' (Maybe Int) (Maybe Text) (Maybe Text)
- newHighestSeverityThreatDetails :: HighestSeverityThreatDetails
- data HostPath = HostPath' (Maybe Text)
- newHostPath :: HostPath
- data IamInstanceProfile = IamInstanceProfile' (Maybe Text) (Maybe Text)
- newIamInstanceProfile :: IamInstanceProfile
- data InstanceDetails = InstanceDetails' (Maybe Text) (Maybe IamInstanceProfile) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [NetworkInterface]) (Maybe Text) (Maybe Text) (Maybe [ProductCode]) (Maybe [Tag])
- newInstanceDetails :: InstanceDetails
- data Invitation = Invitation' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newInvitation :: Invitation
- data KubernetesApiCallAction = KubernetesApiCallAction' (Maybe Text) (Maybe RemoteIpDetails) (Maybe Text) (Maybe [Text]) (Maybe Int) (Maybe Text) (Maybe Text)
- newKubernetesApiCallAction :: KubernetesApiCallAction
- data KubernetesAuditLogsConfiguration = KubernetesAuditLogsConfiguration' Bool
- newKubernetesAuditLogsConfiguration :: Bool -> KubernetesAuditLogsConfiguration
- data KubernetesAuditLogsConfigurationResult = KubernetesAuditLogsConfigurationResult' DataSourceStatus
- newKubernetesAuditLogsConfigurationResult :: DataSourceStatus -> KubernetesAuditLogsConfigurationResult
- data KubernetesConfiguration = KubernetesConfiguration' KubernetesAuditLogsConfiguration
- newKubernetesConfiguration :: KubernetesAuditLogsConfiguration -> KubernetesConfiguration
- data KubernetesConfigurationResult = KubernetesConfigurationResult' KubernetesAuditLogsConfigurationResult
- newKubernetesConfigurationResult :: KubernetesAuditLogsConfigurationResult -> KubernetesConfigurationResult
- data KubernetesDataSourceFreeTrial = KubernetesDataSourceFreeTrial' (Maybe DataSourceFreeTrial)
- newKubernetesDataSourceFreeTrial :: KubernetesDataSourceFreeTrial
- data KubernetesDetails = KubernetesDetails' (Maybe KubernetesUserDetails) (Maybe KubernetesWorkloadDetails)
- newKubernetesDetails :: KubernetesDetails
- data KubernetesUserDetails = KubernetesUserDetails' (Maybe [Text]) (Maybe Text) (Maybe Text)
- newKubernetesUserDetails :: KubernetesUserDetails
- data KubernetesWorkloadDetails = KubernetesWorkloadDetails' (Maybe [Container]) (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [Volume])
- newKubernetesWorkloadDetails :: KubernetesWorkloadDetails
- data LocalIpDetails = LocalIpDetails' (Maybe Text)
- newLocalIpDetails :: LocalIpDetails
- data LocalPortDetails = LocalPortDetails' (Maybe Int) (Maybe Text)
- newLocalPortDetails :: LocalPortDetails
- data MalwareProtectionConfiguration = MalwareProtectionConfiguration' (Maybe ScanEc2InstanceWithFindings)
- newMalwareProtectionConfiguration :: MalwareProtectionConfiguration
- data MalwareProtectionConfigurationResult = MalwareProtectionConfigurationResult' (Maybe ScanEc2InstanceWithFindingsResult) (Maybe Text)
- newMalwareProtectionConfigurationResult :: MalwareProtectionConfigurationResult
- data MalwareProtectionDataSourceFreeTrial = MalwareProtectionDataSourceFreeTrial' (Maybe DataSourceFreeTrial)
- newMalwareProtectionDataSourceFreeTrial :: MalwareProtectionDataSourceFreeTrial
- data Member = Member' (Maybe Text) (Maybe Text) (Maybe Text) Text Text Text Text Text
- newMember :: Text -> Text -> Text -> Text -> Text -> Member
- data MemberDataSourceConfiguration = MemberDataSourceConfiguration' Text DataSourceConfigurationsResult
- newMemberDataSourceConfiguration :: Text -> DataSourceConfigurationsResult -> MemberDataSourceConfiguration
- data NetworkConnectionAction = NetworkConnectionAction' (Maybe Bool) (Maybe Text) (Maybe LocalIpDetails) (Maybe LocalPortDetails) (Maybe Text) (Maybe RemoteIpDetails) (Maybe RemotePortDetails)
- newNetworkConnectionAction :: NetworkConnectionAction
- data NetworkInterface = NetworkInterface' (Maybe [Text]) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [PrivateIpAddressDetails]) (Maybe Text) (Maybe Text) (Maybe [SecurityGroup]) (Maybe Text) (Maybe Text)
- newNetworkInterface :: NetworkInterface
- data Organization = Organization' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newOrganization :: Organization
- data OrganizationDataSourceConfigurations = OrganizationDataSourceConfigurations' (Maybe OrganizationKubernetesConfiguration) (Maybe OrganizationMalwareProtectionConfiguration) (Maybe OrganizationS3LogsConfiguration)
- newOrganizationDataSourceConfigurations :: OrganizationDataSourceConfigurations
- data OrganizationDataSourceConfigurationsResult = OrganizationDataSourceConfigurationsResult' (Maybe OrganizationKubernetesConfigurationResult) (Maybe OrganizationMalwareProtectionConfigurationResult) OrganizationS3LogsConfigurationResult
- newOrganizationDataSourceConfigurationsResult :: OrganizationS3LogsConfigurationResult -> OrganizationDataSourceConfigurationsResult
- data OrganizationEbsVolumes = OrganizationEbsVolumes' (Maybe Bool)
- newOrganizationEbsVolumes :: OrganizationEbsVolumes
- data OrganizationEbsVolumesResult = OrganizationEbsVolumesResult' (Maybe Bool)
- newOrganizationEbsVolumesResult :: OrganizationEbsVolumesResult
- data OrganizationKubernetesAuditLogsConfiguration = OrganizationKubernetesAuditLogsConfiguration' Bool
- newOrganizationKubernetesAuditLogsConfiguration :: Bool -> OrganizationKubernetesAuditLogsConfiguration
- data OrganizationKubernetesAuditLogsConfigurationResult = OrganizationKubernetesAuditLogsConfigurationResult' Bool
- newOrganizationKubernetesAuditLogsConfigurationResult :: Bool -> OrganizationKubernetesAuditLogsConfigurationResult
- data OrganizationKubernetesConfiguration = OrganizationKubernetesConfiguration' OrganizationKubernetesAuditLogsConfiguration
- newOrganizationKubernetesConfiguration :: OrganizationKubernetesAuditLogsConfiguration -> OrganizationKubernetesConfiguration
- data OrganizationKubernetesConfigurationResult = OrganizationKubernetesConfigurationResult' OrganizationKubernetesAuditLogsConfigurationResult
- newOrganizationKubernetesConfigurationResult :: OrganizationKubernetesAuditLogsConfigurationResult -> OrganizationKubernetesConfigurationResult
- data OrganizationMalwareProtectionConfiguration = OrganizationMalwareProtectionConfiguration' (Maybe OrganizationScanEc2InstanceWithFindings)
- newOrganizationMalwareProtectionConfiguration :: OrganizationMalwareProtectionConfiguration
- data OrganizationMalwareProtectionConfigurationResult = OrganizationMalwareProtectionConfigurationResult' (Maybe OrganizationScanEc2InstanceWithFindingsResult)
- newOrganizationMalwareProtectionConfigurationResult :: OrganizationMalwareProtectionConfigurationResult
- data OrganizationS3LogsConfiguration = OrganizationS3LogsConfiguration' Bool
- newOrganizationS3LogsConfiguration :: Bool -> OrganizationS3LogsConfiguration
- data OrganizationS3LogsConfigurationResult = OrganizationS3LogsConfigurationResult' Bool
- newOrganizationS3LogsConfigurationResult :: Bool -> OrganizationS3LogsConfigurationResult
- data OrganizationScanEc2InstanceWithFindings = OrganizationScanEc2InstanceWithFindings' (Maybe OrganizationEbsVolumes)
- newOrganizationScanEc2InstanceWithFindings :: OrganizationScanEc2InstanceWithFindings
- data OrganizationScanEc2InstanceWithFindingsResult = OrganizationScanEc2InstanceWithFindingsResult' (Maybe OrganizationEbsVolumesResult)
- newOrganizationScanEc2InstanceWithFindingsResult :: OrganizationScanEc2InstanceWithFindingsResult
- data Owner = Owner' (Maybe Text)
- newOwner :: Owner
- data PermissionConfiguration = PermissionConfiguration' (Maybe AccountLevelPermissions) (Maybe BucketLevelPermissions)
- newPermissionConfiguration :: PermissionConfiguration
- data PortProbeAction = PortProbeAction' (Maybe Bool) (Maybe [PortProbeDetail])
- newPortProbeAction :: PortProbeAction
- data PortProbeDetail = PortProbeDetail' (Maybe LocalIpDetails) (Maybe LocalPortDetails) (Maybe RemoteIpDetails)
- newPortProbeDetail :: PortProbeDetail
- data PrivateIpAddressDetails = PrivateIpAddressDetails' (Maybe Text) (Maybe Text)
- newPrivateIpAddressDetails :: PrivateIpAddressDetails
- data ProductCode = ProductCode' (Maybe Text) (Maybe Text)
- newProductCode :: ProductCode
- data PublicAccess = PublicAccess' (Maybe Text) (Maybe PermissionConfiguration)
- newPublicAccess :: PublicAccess
- data RemoteAccountDetails = RemoteAccountDetails' (Maybe Text) (Maybe Bool)
- newRemoteAccountDetails :: RemoteAccountDetails
- data RemoteIpDetails = RemoteIpDetails' (Maybe City) (Maybe Country) (Maybe GeoLocation) (Maybe Text) (Maybe Organization)
- newRemoteIpDetails :: RemoteIpDetails
- data RemotePortDetails = RemotePortDetails' (Maybe Int) (Maybe Text)
- newRemotePortDetails :: RemotePortDetails
- data Resource = Resource' (Maybe AccessKeyDetails) (Maybe Container) (Maybe EbsVolumeDetails) (Maybe EcsClusterDetails) (Maybe EksClusterDetails) (Maybe InstanceDetails) (Maybe KubernetesDetails) (Maybe Text) (Maybe [S3BucketDetail])
- newResource :: Resource
- data ResourceDetails = ResourceDetails' (Maybe Text)
- newResourceDetails :: ResourceDetails
- data S3BucketDetail = S3BucketDetail' (Maybe Text) (Maybe POSIX) (Maybe DefaultServerSideEncryption) (Maybe Text) (Maybe Owner) (Maybe PublicAccess) (Maybe [Tag]) (Maybe Text)
- newS3BucketDetail :: S3BucketDetail
- data S3LogsConfiguration = S3LogsConfiguration' Bool
- newS3LogsConfiguration :: Bool -> S3LogsConfiguration
- data S3LogsConfigurationResult = S3LogsConfigurationResult' DataSourceStatus
- newS3LogsConfigurationResult :: DataSourceStatus -> S3LogsConfigurationResult
- data Scan = Scan' (Maybe Text) (Maybe Text) (Maybe [VolumeDetail]) (Maybe Text) (Maybe Text) (Maybe Natural) (Maybe ResourceDetails) (Maybe POSIX) (Maybe Text) (Maybe ScanResultDetails) (Maybe POSIX) (Maybe ScanStatus) (Maybe Natural) (Maybe TriggerDetails)
- newScan :: Scan
- data ScanCondition = ScanCondition' [ScanConditionPair]
- newScanCondition :: ScanCondition
- data ScanConditionPair = ScanConditionPair' (Maybe Text) Text
- newScanConditionPair :: Text -> ScanConditionPair
- data ScanDetections = ScanDetections' (Maybe HighestSeverityThreatDetails) (Maybe ScannedItemCount) (Maybe ThreatDetectedByName) (Maybe ThreatsDetectedItemCount)
- newScanDetections :: ScanDetections
- data ScanEc2InstanceWithFindings = ScanEc2InstanceWithFindings' (Maybe Bool)
- newScanEc2InstanceWithFindings :: ScanEc2InstanceWithFindings
- data ScanEc2InstanceWithFindingsResult = ScanEc2InstanceWithFindingsResult' (Maybe EbsVolumesResult)
- newScanEc2InstanceWithFindingsResult :: ScanEc2InstanceWithFindingsResult
- data ScanFilePath = ScanFilePath' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newScanFilePath :: ScanFilePath
- data ScanResourceCriteria = ScanResourceCriteria' (Maybe (HashMap ScanCriterionKey ScanCondition)) (Maybe (HashMap ScanCriterionKey ScanCondition))
- newScanResourceCriteria :: ScanResourceCriteria
- data ScanResultDetails = ScanResultDetails' (Maybe ScanResult)
- newScanResultDetails :: ScanResultDetails
- data ScanThreatName = ScanThreatName' (Maybe [ScanFilePath]) (Maybe Int) (Maybe Text) (Maybe Text)
- newScanThreatName :: ScanThreatName
- data ScannedItemCount = ScannedItemCount' (Maybe Int) (Maybe Int) (Maybe Int)
- newScannedItemCount :: ScannedItemCount
- data SecurityContext = SecurityContext' (Maybe Bool)
- newSecurityContext :: SecurityContext
- data SecurityGroup = SecurityGroup' (Maybe Text) (Maybe Text)
- newSecurityGroup :: SecurityGroup
- data ServiceAdditionalInfo = ServiceAdditionalInfo' (Maybe Text) (Maybe Text)
- newServiceAdditionalInfo :: ServiceAdditionalInfo
- data ServiceInfo = ServiceInfo' (Maybe Action) (Maybe ServiceAdditionalInfo) (Maybe Bool) (Maybe Int) (Maybe Text) (Maybe EbsVolumeScanDetails) (Maybe Text) (Maybe Text) (Maybe Evidence) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newServiceInfo :: ServiceInfo
- data SortCriteria = SortCriteria' (Maybe Text) (Maybe OrderBy)
- newSortCriteria :: SortCriteria
- data Tag = Tag' (Maybe Text) (Maybe Text)
- newTag :: Tag
- data ThreatDetectedByName = ThreatDetectedByName' (Maybe Int) (Maybe Bool) (Maybe [ScanThreatName]) (Maybe Int)
- newThreatDetectedByName :: ThreatDetectedByName
- data ThreatIntelligenceDetail = ThreatIntelligenceDetail' (Maybe Text) (Maybe [Text])
- newThreatIntelligenceDetail :: ThreatIntelligenceDetail
- data ThreatsDetectedItemCount = ThreatsDetectedItemCount' (Maybe Int)
- newThreatsDetectedItemCount :: ThreatsDetectedItemCount
- data Total = Total' (Maybe Text) (Maybe Text)
- newTotal :: Total
- data TriggerDetails = TriggerDetails' (Maybe Text) (Maybe Text)
- newTriggerDetails :: TriggerDetails
- data UnprocessedAccount = UnprocessedAccount' Text Text
- newUnprocessedAccount :: Text -> Text -> UnprocessedAccount
- data UnprocessedDataSourcesResult = UnprocessedDataSourcesResult' (Maybe MalwareProtectionConfigurationResult)
- newUnprocessedDataSourcesResult :: UnprocessedDataSourcesResult
- data UsageAccountResult = UsageAccountResult' (Maybe Text) (Maybe Total)
- newUsageAccountResult :: UsageAccountResult
- data UsageCriteria = UsageCriteria' (Maybe (NonEmpty Text)) (Maybe [Text]) [DataSource]
- newUsageCriteria :: UsageCriteria
- data UsageDataSourceResult = UsageDataSourceResult' (Maybe DataSource) (Maybe Total)
- newUsageDataSourceResult :: UsageDataSourceResult
- data UsageResourceResult = UsageResourceResult' (Maybe Text) (Maybe Total)
- newUsageResourceResult :: UsageResourceResult
- data UsageStatistics = UsageStatistics' (Maybe [UsageAccountResult]) (Maybe [UsageDataSourceResult]) (Maybe [UsageResourceResult]) (Maybe [UsageResourceResult])
- newUsageStatistics :: UsageStatistics
- data Volume = Volume' (Maybe HostPath) (Maybe Text)
- newVolume :: Volume
- data VolumeDetail = VolumeDetail' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Int) (Maybe Text)
- newVolumeDetail :: VolumeDetail
- data VolumeMount = VolumeMount' (Maybe Text) (Maybe Text)
- newVolumeMount :: VolumeMount
Service Configuration
defaultService :: Service Source #
API version 2017-11-28 of the Amazon GuardDuty SDK configuration.
Errors
Error matchers are designed for use with the functions provided by
Control.Exception.Lens.
This allows catching (and rethrowing) service specific errors returned
by GuardDuty.
BadRequestException
_BadRequestException :: AsError a => Fold a ServiceError Source #
A bad request exception object.
InternalServerErrorException
_InternalServerErrorException :: AsError a => Fold a ServiceError Source #
An internal server error exception object.
Waiters
Waiters poll by repeatedly sending a request until some remote success condition
configured by the Wait specification is fulfilled. The Wait specification
determines how many attempts should be made, in addition to delay and retry strategies.
Operations
Some AWS operations return results that are incomplete and require subsequent
requests in order to obtain the entire result set. The process of sending
subsequent requests to continue where a previous request left off is called
pagination. For example, the ListObjects operation of Amazon S3 returns up to
1000 objects at a time, and you must send subsequent requests with the
appropriate Marker in order to retrieve the next page of results.
Operations that have an AWSPager instance can transparently perform subsequent
requests, correctly setting Markers and other request facets to iterate through
the entire result set of a truncated API operation. Operations which support
this have an additional note in the documentation.
Many operations have the ability to filter results on the server side. See the individual operation parameters for details.
AcceptAdministratorInvitation
data AcceptAdministratorInvitation Source #
See: newAcceptAdministratorInvitation smart constructor.
Constructors
| AcceptAdministratorInvitation' Text Text Text |
Instances
newAcceptAdministratorInvitation Source #
Arguments
| :: Text | |
| -> Text | |
| -> Text | |
| -> AcceptAdministratorInvitation |
Create a value of AcceptAdministratorInvitation with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
AcceptAdministratorInvitation, acceptAdministratorInvitation_detectorId - The unique ID of the detector of the GuardDuty member account.
AcceptAdministratorInvitation, acceptAdministratorInvitation_administratorId - The account ID of the GuardDuty administrator account whose invitation
you're accepting.
AcceptAdministratorInvitation, acceptAdministratorInvitation_invitationId - The value that is used to validate the administrator account to the
member account.
data AcceptAdministratorInvitationResponse Source #
See: newAcceptAdministratorInvitationResponse smart constructor.
Constructors
| AcceptAdministratorInvitationResponse' Int |
Instances
newAcceptAdministratorInvitationResponse Source #
Arguments
| :: Int | |
| -> AcceptAdministratorInvitationResponse |
Create a value of AcceptAdministratorInvitationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:AcceptAdministratorInvitationResponse', acceptAdministratorInvitationResponse_httpStatus - The response's http status code.
ArchiveFindings
data ArchiveFindings Source #
See: newArchiveFindings smart constructor.
Constructors
| ArchiveFindings' Text [Text] |
Instances
Arguments
| :: Text | |
| -> ArchiveFindings |
Create a value of ArchiveFindings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ArchiveFindings, archiveFindings_detectorId - The ID of the detector that specifies the GuardDuty service whose
findings you want to archive.
$sel:findingIds:ArchiveFindings', archiveFindings_findingIds - The IDs of the findings that you want to archive.
data ArchiveFindingsResponse Source #
See: newArchiveFindingsResponse smart constructor.
Constructors
| ArchiveFindingsResponse' Int |
Instances
newArchiveFindingsResponse Source #
Create a value of ArchiveFindingsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:ArchiveFindingsResponse', archiveFindingsResponse_httpStatus - The response's http status code.
CreateDetector
data CreateDetector Source #
See: newCreateDetector smart constructor.
Constructors
| CreateDetector' (Maybe Text) (Maybe DataSourceConfigurations) (Maybe FindingPublishingFrequency) (Maybe (HashMap Text Text)) Bool |
Instances
Arguments
| :: Bool | |
| -> CreateDetector |
Create a value of CreateDetector with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreateDetector', createDetector_clientToken - The idempotency token for the create request.
CreateDetector, createDetector_dataSources - Describes which data sources will be enabled for the detector.
$sel:findingPublishingFrequency:CreateDetector', createDetector_findingPublishingFrequency - A value that specifies how frequently updated findings are exported.
CreateDetector, createDetector_tags - The tags to be added to a new detector resource.
CreateDetector, createDetector_enable - A Boolean value that specifies whether the detector is to be enabled.
data CreateDetectorResponse Source #
See: newCreateDetectorResponse smart constructor.
Constructors
| CreateDetectorResponse' (Maybe Text) (Maybe UnprocessedDataSourcesResult) Int |
Instances
newCreateDetectorResponse Source #
Create a value of CreateDetectorResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
CreateDetectorResponse, createDetectorResponse_detectorId - The unique ID of the created detector.
$sel:unprocessedDataSources:CreateDetectorResponse', createDetectorResponse_unprocessedDataSources - Specifies the data sources that couldn't be enabled when GuardDuty was
enabled for the first time.
$sel:httpStatus:CreateDetectorResponse', createDetectorResponse_httpStatus - The response's http status code.
CreateFilter
data CreateFilter Source #
See: newCreateFilter smart constructor.
Constructors
| CreateFilter' (Maybe FilterAction) (Maybe Text) (Maybe Text) (Maybe Natural) (Maybe (HashMap Text Text)) Text Text FindingCriteria |
Instances
Arguments
| :: Text | |
| -> Text | |
| -> FindingCriteria | |
| -> CreateFilter |
Create a value of CreateFilter with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
CreateFilter, createFilter_action - Specifies the action that is to be applied to the findings that match
the filter.
$sel:clientToken:CreateFilter', createFilter_clientToken - The idempotency token for the create request.
CreateFilter, createFilter_description - The description of the filter. Valid special characters include period
(.), underscore (_), dash (-), and whitespace. The new line character is
considered to be an invalid input for description.
$sel:rank:CreateFilter', createFilter_rank - Specifies the position of the filter in the list of current filters.
Also specifies the order in which this filter is applied to the
findings.
CreateFilter, createFilter_tags - The tags to be added to a new filter resource.
CreateFilter, createFilter_detectorId - The ID of the detector belonging to the GuardDuty account that you want
to create a filter for.
CreateFilter, createFilter_name - The name of the filter. Valid characters include period (.), underscore
(_), dash (-), and alphanumeric characters. A whitespace is considered
to be an invalid character.
$sel:findingCriteria:CreateFilter', createFilter_findingCriteria - Represents the criteria to be used in the filter for querying findings.
You can only use the following attributes to query findings:
- accountId
- region
- confidence
- id
- resource.accessKeyDetails.accessKeyId
- resource.accessKeyDetails.principalId
- resource.accessKeyDetails.userName
- resource.accessKeyDetails.userType
- resource.instanceDetails.iamInstanceProfile.id
- resource.instanceDetails.imageId
- resource.instanceDetails.instanceId
- resource.instanceDetails.outpostArn
- resource.instanceDetails.networkInterfaces.ipv6Addresses
- resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
- resource.instanceDetails.networkInterfaces.publicDnsName
- resource.instanceDetails.networkInterfaces.publicIp
- resource.instanceDetails.networkInterfaces.securityGroups.groupId
- resource.instanceDetails.networkInterfaces.securityGroups.groupName
- resource.instanceDetails.networkInterfaces.subnetId
- resource.instanceDetails.networkInterfaces.vpcId
- resource.instanceDetails.tags.key
- resource.instanceDetails.tags.value
- resource.resourceType
- service.action.actionType
- service.action.awsApiCallAction.api
- service.action.awsApiCallAction.callerType
- service.action.awsApiCallAction.errorCode
- service.action.awsApiCallAction.userAgent
- service.action.awsApiCallAction.remoteIpDetails.city.cityName
- service.action.awsApiCallAction.remoteIpDetails.country.countryName
- service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
- service.action.awsApiCallAction.remoteIpDetails.organization.asn
- service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
- service.action.awsApiCallAction.serviceName
- service.action.dnsRequestAction.domain
- service.action.networkConnectionAction.blocked
- service.action.networkConnectionAction.connectionDirection
- service.action.networkConnectionAction.localPortDetails.port
- service.action.networkConnectionAction.protocol
- service.action.networkConnectionAction.localIpDetails.ipAddressV4
- service.action.networkConnectionAction.remoteIpDetails.city.cityName
- service.action.networkConnectionAction.remoteIpDetails.country.countryName
- service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
- service.action.networkConnectionAction.remoteIpDetails.organization.asn
- service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
- service.action.networkConnectionAction.remotePortDetails.port
- service.additionalInfo.threatListName
- resource.s3BucketDetails.publicAccess.effectivePermissions
- resource.s3BucketDetails.name
- resource.s3BucketDetails.tags.key
- resource.s3BucketDetails.tags.value
- resource.s3BucketDetails.type
service.archived
When this attribute is set to TRUE, only archived findings are listed. When it's set to FALSE, only unarchived findings are listed. When this attribute is not set, all existing findings are listed.
- service.resourceRole
- severity
- type
updatedAt
Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds.
data CreateFilterResponse Source #
See: newCreateFilterResponse smart constructor.
Constructors
| CreateFilterResponse' Int Text |
Instances
newCreateFilterResponse Source #
Create a value of CreateFilterResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateFilterResponse', createFilterResponse_httpStatus - The response's http status code.
CreateFilter, createFilterResponse_name - The name of the successfully created filter.
CreateIPSet
data CreateIPSet Source #
See: newCreateIPSet smart constructor.
Instances
Arguments
| :: Text | |
| -> Text | |
| -> IpSetFormat | |
| -> Text | |
| -> Bool | |
| -> CreateIPSet |
Create a value of CreateIPSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreateIPSet', createIPSet_clientToken - The idempotency token for the create request.
CreateIPSet, createIPSet_tags - The tags to be added to a new IP set resource.
CreateIPSet, createIPSet_detectorId - The unique ID of the detector of the GuardDuty account that you want to
create an IPSet for.
CreateIPSet, createIPSet_name - The user-friendly name to identify the IPSet.
Allowed characters are alphanumerics, spaces, hyphens (-), and underscores (_).
$sel:format:CreateIPSet', createIPSet_format - The format of the file that contains the IPSet.
$sel:location:CreateIPSet', createIPSet_location - The URI of the file that contains the IPSet.
$sel:activate:CreateIPSet', createIPSet_activate - A Boolean value that indicates whether GuardDuty is to start using the
uploaded IPSet.
data CreateIPSetResponse Source #
See: newCreateIPSetResponse smart constructor.
Constructors
| CreateIPSetResponse' Int Text |
Instances
newCreateIPSetResponse Source #
Arguments
| :: Int | |
| -> Text | |
| -> CreateIPSetResponse |
Create a value of CreateIPSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateIPSetResponse', createIPSetResponse_httpStatus - The response's http status code.
$sel:ipSetId:CreateIPSetResponse', createIPSetResponse_ipSetId - The ID of the IPSet resource.
CreateMembers
data CreateMembers Source #
See: newCreateMembers smart constructor.
Constructors
| CreateMembers' Text (NonEmpty AccountDetail) |
Instances
Arguments
| :: Text | |
| -> NonEmpty AccountDetail | |
| -> CreateMembers |
Create a value of CreateMembers with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
CreateMembers, createMembers_detectorId - The unique ID of the detector of the GuardDuty account that you want to
associate member accounts with.
$sel:accountDetails:CreateMembers', createMembers_accountDetails - A list of account ID and email address pairs of the accounts that you
want to associate with the GuardDuty administrator account.
data CreateMembersResponse Source #
See: newCreateMembersResponse smart constructor.
Constructors
| CreateMembersResponse' Int [UnprocessedAccount] |
Instances
newCreateMembersResponse Source #
Create a value of CreateMembersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateMembersResponse', createMembersResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:CreateMembersResponse', createMembersResponse_unprocessedAccounts - A list of objects that include the accountIds of the unprocessed
accounts and a result string that explains why each was unprocessed.
CreatePublishingDestination
data CreatePublishingDestination Source #
See: newCreatePublishingDestination smart constructor.
Instances
newCreatePublishingDestination Source #
Arguments
| :: Text | |
| -> DestinationType | |
| -> DestinationProperties | |
| -> CreatePublishingDestination |
Create a value of CreatePublishingDestination with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreatePublishingDestination', createPublishingDestination_clientToken - The idempotency token for the request.
CreatePublishingDestination, createPublishingDestination_detectorId - The ID of the GuardDuty detector associated with the publishing
destination.
CreatePublishingDestination, createPublishingDestination_destinationType - The type of resource for the publishing destination. Currently only
Amazon S3 buckets are supported.
$sel:destinationProperties:CreatePublishingDestination', createPublishingDestination_destinationProperties - The properties of the publishing destination, including the ARNs for the
destination and the KMS key used for encryption.
data CreatePublishingDestinationResponse Source #
See: newCreatePublishingDestinationResponse smart constructor.
Constructors
| CreatePublishingDestinationResponse' Int Text |
Instances
newCreatePublishingDestinationResponse Source #
Arguments
| :: Int | |
| -> Text | |
| -> CreatePublishingDestinationResponse |
Create a value of CreatePublishingDestinationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreatePublishingDestinationResponse', createPublishingDestinationResponse_httpStatus - The response's http status code.
CreatePublishingDestinationResponse, createPublishingDestinationResponse_destinationId - The ID of the publishing destination that is created.
CreateSampleFindings
data CreateSampleFindings Source #
See: newCreateSampleFindings smart constructor.
Constructors
| CreateSampleFindings' (Maybe [Text]) Text |
Instances
newCreateSampleFindings Source #
Arguments
| :: Text | |
| -> CreateSampleFindings |
Create a value of CreateSampleFindings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:findingTypes:CreateSampleFindings', createSampleFindings_findingTypes - The types of sample findings to generate.
CreateSampleFindings, createSampleFindings_detectorId - The ID of the detector to create sample findings for.
data CreateSampleFindingsResponse Source #
See: newCreateSampleFindingsResponse smart constructor.
Constructors
| CreateSampleFindingsResponse' Int |
Instances
newCreateSampleFindingsResponse Source #
Create a value of CreateSampleFindingsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateSampleFindingsResponse', createSampleFindingsResponse_httpStatus - The response's http status code.
CreateThreatIntelSet
data CreateThreatIntelSet Source #
See: newCreateThreatIntelSet smart constructor.
Constructors
| CreateThreatIntelSet' (Maybe Text) (Maybe (HashMap Text Text)) Text Text ThreatIntelSetFormat Text Bool |
Instances
newCreateThreatIntelSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> ThreatIntelSetFormat | |
| -> Text | |
| -> Bool | |
| -> CreateThreatIntelSet |
Create a value of CreateThreatIntelSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreateThreatIntelSet', createThreatIntelSet_clientToken - The idempotency token for the create request.
CreateThreatIntelSet, createThreatIntelSet_tags - The tags to be added to a new threat list resource.
CreateThreatIntelSet, createThreatIntelSet_detectorId - The unique ID of the detector of the GuardDuty account that you want to
create a threatIntelSet for.
CreateThreatIntelSet, createThreatIntelSet_name - A user-friendly ThreatIntelSet name displayed in all findings that are
generated by activity that involves IP addresses included in this
ThreatIntelSet.
$sel:format:CreateThreatIntelSet', createThreatIntelSet_format - The format of the file that contains the ThreatIntelSet.
$sel:location:CreateThreatIntelSet', createThreatIntelSet_location - The URI of the file that contains the ThreatIntelSet.
$sel:activate:CreateThreatIntelSet', createThreatIntelSet_activate - A Boolean value that indicates whether GuardDuty is to start using the
uploaded ThreatIntelSet.
data CreateThreatIntelSetResponse Source #
See: newCreateThreatIntelSetResponse smart constructor.
Constructors
| CreateThreatIntelSetResponse' Int Text |
Instances
newCreateThreatIntelSetResponse Source #
Arguments
| :: Int | |
| -> Text | |
| -> CreateThreatIntelSetResponse |
Create a value of CreateThreatIntelSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateThreatIntelSetResponse', createThreatIntelSetResponse_httpStatus - The response's http status code.
$sel:threatIntelSetId:CreateThreatIntelSetResponse', createThreatIntelSetResponse_threatIntelSetId - The ID of the ThreatIntelSet resource.
DeclineInvitations
data DeclineInvitations Source #
See: newDeclineInvitations smart constructor.
Constructors
| DeclineInvitations' (NonEmpty Text) |
Instances
newDeclineInvitations Source #
Arguments
| :: NonEmpty Text | |
| -> DeclineInvitations |
Create a value of DeclineInvitations with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeclineInvitations, declineInvitations_accountIds - A list of account IDs of the Amazon Web Services accounts that sent
invitations to the current member account that you want to decline
invitations from.
data DeclineInvitationsResponse Source #
See: newDeclineInvitationsResponse smart constructor.
Constructors
| DeclineInvitationsResponse' Int [UnprocessedAccount] |
Instances
newDeclineInvitationsResponse Source #
Create a value of DeclineInvitationsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeclineInvitationsResponse', declineInvitationsResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:DeclineInvitationsResponse', declineInvitationsResponse_unprocessedAccounts - A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
DeleteDetector
data DeleteDetector Source #
See: newDeleteDetector smart constructor.
Constructors
| DeleteDetector' Text |
Instances
Arguments
| :: Text | |
| -> DeleteDetector |
Create a value of DeleteDetector with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeleteDetector, deleteDetector_detectorId - The unique ID of the detector that you want to delete.
data DeleteDetectorResponse Source #
See: newDeleteDetectorResponse smart constructor.
Constructors
| DeleteDetectorResponse' Int |
Instances
newDeleteDetectorResponse Source #
Create a value of DeleteDetectorResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteDetectorResponse', deleteDetectorResponse_httpStatus - The response's http status code.
DeleteFilter
data DeleteFilter Source #
See: newDeleteFilter smart constructor.
Constructors
| DeleteFilter' Text Text |
Instances
Arguments
| :: Text | |
| -> Text | |
| -> DeleteFilter |
Create a value of DeleteFilter with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeleteFilter, deleteFilter_detectorId - The unique ID of the detector that the filter is associated with.
$sel:filterName:DeleteFilter', deleteFilter_filterName - The name of the filter that you want to delete.
data DeleteFilterResponse Source #
See: newDeleteFilterResponse smart constructor.
Constructors
| DeleteFilterResponse' Int |
Instances
newDeleteFilterResponse Source #
Arguments
| :: Int | |
| -> DeleteFilterResponse |
Create a value of DeleteFilterResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteFilterResponse', deleteFilterResponse_httpStatus - The response's http status code.
DeleteIPSet
data DeleteIPSet Source #
See: newDeleteIPSet smart constructor.
Constructors
| DeleteIPSet' Text Text |
Instances
Arguments
| :: Text | |
| -> Text | |
| -> DeleteIPSet |
Create a value of DeleteIPSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeleteIPSet, deleteIPSet_detectorId - The unique ID of the detector associated with the IPSet.
$sel:ipSetId:DeleteIPSet', deleteIPSet_ipSetId - The unique ID of the IPSet to delete.
data DeleteIPSetResponse Source #
See: newDeleteIPSetResponse smart constructor.
Constructors
| DeleteIPSetResponse' Int |
Instances
newDeleteIPSetResponse Source #
Arguments
| :: Int | |
| -> DeleteIPSetResponse |
Create a value of DeleteIPSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteIPSetResponse', deleteIPSetResponse_httpStatus - The response's http status code.
DeleteInvitations
data DeleteInvitations Source #
See: newDeleteInvitations smart constructor.
Constructors
| DeleteInvitations' (NonEmpty Text) |
Instances
Arguments
| :: NonEmpty Text | |
| -> DeleteInvitations |
Create a value of DeleteInvitations with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeleteInvitations, deleteInvitations_accountIds - A list of account IDs of the Amazon Web Services accounts that sent
invitations to the current member account that you want to delete
invitations from.
data DeleteInvitationsResponse Source #
See: newDeleteInvitationsResponse smart constructor.
Constructors
| DeleteInvitationsResponse' Int [UnprocessedAccount] |
Instances
newDeleteInvitationsResponse Source #
Create a value of DeleteInvitationsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteInvitationsResponse', deleteInvitationsResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:DeleteInvitationsResponse', deleteInvitationsResponse_unprocessedAccounts - A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
DeleteMembers
data DeleteMembers Source #
See: newDeleteMembers smart constructor.
Constructors
| DeleteMembers' Text (NonEmpty Text) |
Instances
Arguments
| :: Text | |
| -> NonEmpty Text | |
| -> DeleteMembers |
Create a value of DeleteMembers with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeleteMembers, deleteMembers_detectorId - The unique ID of the detector of the GuardDuty account whose members you
want to delete.
DeleteMembers, deleteMembers_accountIds - A list of account IDs of the GuardDuty member accounts that you want to
delete.
data DeleteMembersResponse Source #
See: newDeleteMembersResponse smart constructor.
Constructors
| DeleteMembersResponse' Int [UnprocessedAccount] |
Instances
newDeleteMembersResponse Source #
Create a value of DeleteMembersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteMembersResponse', deleteMembersResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:DeleteMembersResponse', deleteMembersResponse_unprocessedAccounts - The accounts that could not be processed.
DeletePublishingDestination
data DeletePublishingDestination Source #
See: newDeletePublishingDestination smart constructor.
Constructors
| DeletePublishingDestination' Text Text |
Instances
newDeletePublishingDestination Source #
Arguments
| :: Text | |
| -> Text | |
| -> DeletePublishingDestination |
Create a value of DeletePublishingDestination with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeletePublishingDestination, deletePublishingDestination_detectorId - The unique ID of the detector associated with the publishing destination
to delete.
DeletePublishingDestination, deletePublishingDestination_destinationId - The ID of the publishing destination to delete.
data DeletePublishingDestinationResponse Source #
See: newDeletePublishingDestinationResponse smart constructor.
Constructors
| DeletePublishingDestinationResponse' Int |
Instances
newDeletePublishingDestinationResponse Source #
Arguments
| :: Int | |
| -> DeletePublishingDestinationResponse |
Create a value of DeletePublishingDestinationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeletePublishingDestinationResponse', deletePublishingDestinationResponse_httpStatus - The response's http status code.
DeleteThreatIntelSet
data DeleteThreatIntelSet Source #
See: newDeleteThreatIntelSet smart constructor.
Constructors
| DeleteThreatIntelSet' Text Text |
Instances
newDeleteThreatIntelSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> DeleteThreatIntelSet |
Create a value of DeleteThreatIntelSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeleteThreatIntelSet, deleteThreatIntelSet_detectorId - The unique ID of the detector that the threatIntelSet is associated
with.
$sel:threatIntelSetId:DeleteThreatIntelSet', deleteThreatIntelSet_threatIntelSetId - The unique ID of the threatIntelSet that you want to delete.
data DeleteThreatIntelSetResponse Source #
See: newDeleteThreatIntelSetResponse smart constructor.
Constructors
| DeleteThreatIntelSetResponse' Int |
Instances
newDeleteThreatIntelSetResponse Source #
Create a value of DeleteThreatIntelSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteThreatIntelSetResponse', deleteThreatIntelSetResponse_httpStatus - The response's http status code.
DescribeMalwareScans (Paginated)
data DescribeMalwareScans Source #
See: newDescribeMalwareScans smart constructor.
Constructors
| DescribeMalwareScans' (Maybe FilterCriteria) (Maybe Natural) (Maybe Text) (Maybe SortCriteria) Text |
Instances
newDescribeMalwareScans Source #
Arguments
| :: Text | |
| -> DescribeMalwareScans |
Create a value of DescribeMalwareScans with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:filterCriteria:DescribeMalwareScans', describeMalwareScans_filterCriteria - Represents the criteria to be used in the filter for describing scan
entries.
$sel:maxResults:DescribeMalwareScans', describeMalwareScans_maxResults - You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
DescribeMalwareScans, describeMalwareScans_nextToken - You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:sortCriteria:DescribeMalwareScans', describeMalwareScans_sortCriteria - Represents the criteria used for sorting scan entries.
DescribeMalwareScans, describeMalwareScans_detectorId - The unique ID of the detector that the request is associated with.
data DescribeMalwareScansResponse Source #
See: newDescribeMalwareScansResponse smart constructor.
Constructors
| DescribeMalwareScansResponse' (Maybe Text) Int [Scan] |
Instances
newDescribeMalwareScansResponse Source #
Create a value of DescribeMalwareScansResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DescribeMalwareScans, describeMalwareScansResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:DescribeMalwareScansResponse', describeMalwareScansResponse_httpStatus - The response's http status code.
$sel:scans:DescribeMalwareScansResponse', describeMalwareScansResponse_scans - Contains information about malware scans.
DescribeOrganizationConfiguration
data DescribeOrganizationConfiguration Source #
See: newDescribeOrganizationConfiguration smart constructor.
Constructors
| DescribeOrganizationConfiguration' Text |
Instances
newDescribeOrganizationConfiguration Source #
Create a value of DescribeOrganizationConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DescribeOrganizationConfiguration, describeOrganizationConfiguration_detectorId - The ID of the detector to retrieve information about the delegated
administrator from.
data DescribeOrganizationConfigurationResponse Source #
See: newDescribeOrganizationConfigurationResponse smart constructor.
Constructors
| DescribeOrganizationConfigurationResponse' (Maybe OrganizationDataSourceConfigurationsResult) Int Bool Bool |
Instances
newDescribeOrganizationConfigurationResponse Source #
Arguments
| :: Int | |
| -> Bool | |
| -> Bool |
|
| -> DescribeOrganizationConfigurationResponse |
Create a value of DescribeOrganizationConfigurationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DescribeOrganizationConfigurationResponse, describeOrganizationConfigurationResponse_dataSources - Describes which data sources are enabled automatically for member
accounts.
$sel:httpStatus:DescribeOrganizationConfigurationResponse', describeOrganizationConfigurationResponse_httpStatus - The response's http status code.
DescribeOrganizationConfigurationResponse, describeOrganizationConfigurationResponse_autoEnable - Indicates whether GuardDuty is automatically enabled for accounts added
to the organization.
$sel:memberAccountLimitReached:DescribeOrganizationConfigurationResponse', describeOrganizationConfigurationResponse_memberAccountLimitReached - Indicates whether the maximum number of allowed member accounts are
already associated with the delegated administrator account for your
organization.
DescribePublishingDestination
data DescribePublishingDestination Source #
See: newDescribePublishingDestination smart constructor.
Constructors
| DescribePublishingDestination' Text Text |
Instances
newDescribePublishingDestination Source #
Arguments
| :: Text | |
| -> Text | |
| -> DescribePublishingDestination |
Create a value of DescribePublishingDestination with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DescribePublishingDestination, describePublishingDestination_detectorId - The unique ID of the detector associated with the publishing destination
to retrieve.
DescribePublishingDestination, describePublishingDestination_destinationId - The ID of the publishing destination to retrieve.
data DescribePublishingDestinationResponse Source #
See: newDescribePublishingDestinationResponse smart constructor.
Constructors
| DescribePublishingDestinationResponse' Int Text DestinationType PublishingStatus Integer DestinationProperties |
Instances
newDescribePublishingDestinationResponse Source #
Arguments
Create a value of DescribePublishingDestinationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DescribePublishingDestinationResponse', describePublishingDestinationResponse_httpStatus - The response's http status code.
DescribePublishingDestination, describePublishingDestinationResponse_destinationId - The ID of the publishing destination.
DescribePublishingDestinationResponse, describePublishingDestinationResponse_destinationType - The type of publishing destination. Currently, only Amazon S3 buckets
are supported.
DescribePublishingDestinationResponse, describePublishingDestinationResponse_status - The status of the publishing destination.
$sel:publishingFailureStartTimestamp:DescribePublishingDestinationResponse', describePublishingDestinationResponse_publishingFailureStartTimestamp - The time, in epoch millisecond format, at which GuardDuty was first
unable to publish findings to the destination.
$sel:destinationProperties:DescribePublishingDestinationResponse', describePublishingDestinationResponse_destinationProperties - A DestinationProperties object that includes the DestinationArn and
KmsKeyArn of the publishing destination.
DisableOrganizationAdminAccount
data DisableOrganizationAdminAccount Source #
See: newDisableOrganizationAdminAccount smart constructor.
Constructors
| DisableOrganizationAdminAccount' Text |
Instances
newDisableOrganizationAdminAccount Source #
Create a value of DisableOrganizationAdminAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DisableOrganizationAdminAccount, disableOrganizationAdminAccount_adminAccountId - The Amazon Web Services Account ID for the organizations account to be
disabled as a GuardDuty delegated administrator.
data DisableOrganizationAdminAccountResponse Source #
See: newDisableOrganizationAdminAccountResponse smart constructor.
Constructors
| DisableOrganizationAdminAccountResponse' Int |
Instances
newDisableOrganizationAdminAccountResponse Source #
Arguments
| :: Int | |
| -> DisableOrganizationAdminAccountResponse |
Create a value of DisableOrganizationAdminAccountResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DisableOrganizationAdminAccountResponse', disableOrganizationAdminAccountResponse_httpStatus - The response's http status code.
DisassociateFromAdministratorAccount
data DisassociateFromAdministratorAccount Source #
See: newDisassociateFromAdministratorAccount smart constructor.
Constructors
| DisassociateFromAdministratorAccount' Text |
Instances
newDisassociateFromAdministratorAccount Source #
Create a value of DisassociateFromAdministratorAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DisassociateFromAdministratorAccount, disassociateFromAdministratorAccount_detectorId - The unique ID of the detector of the GuardDuty member account.
data DisassociateFromAdministratorAccountResponse Source #
See: newDisassociateFromAdministratorAccountResponse smart constructor.
Constructors
| DisassociateFromAdministratorAccountResponse' Int |
Instances
newDisassociateFromAdministratorAccountResponse Source #
Arguments
| :: Int |
|
| -> DisassociateFromAdministratorAccountResponse |
Create a value of DisassociateFromAdministratorAccountResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DisassociateFromAdministratorAccountResponse', disassociateFromAdministratorAccountResponse_httpStatus - The response's http status code.
DisassociateMembers
data DisassociateMembers Source #
See: newDisassociateMembers smart constructor.
Constructors
| DisassociateMembers' Text (NonEmpty Text) |
Instances
newDisassociateMembers Source #
Arguments
| :: Text | |
| -> NonEmpty Text | |
| -> DisassociateMembers |
Create a value of DisassociateMembers with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DisassociateMembers, disassociateMembers_detectorId - The unique ID of the detector of the GuardDuty account whose members you
want to disassociate from the administrator account.
DisassociateMembers, disassociateMembers_accountIds - A list of account IDs of the GuardDuty member accounts that you want to
disassociate from the administrator account.
data DisassociateMembersResponse Source #
See: newDisassociateMembersResponse smart constructor.
Constructors
| DisassociateMembersResponse' Int [UnprocessedAccount] |
Instances
newDisassociateMembersResponse Source #
Create a value of DisassociateMembersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DisassociateMembersResponse', disassociateMembersResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:DisassociateMembersResponse', disassociateMembersResponse_unprocessedAccounts - A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
EnableOrganizationAdminAccount
data EnableOrganizationAdminAccount Source #
See: newEnableOrganizationAdminAccount smart constructor.
Constructors
| EnableOrganizationAdminAccount' Text |
Instances
newEnableOrganizationAdminAccount Source #
Create a value of EnableOrganizationAdminAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
EnableOrganizationAdminAccount, enableOrganizationAdminAccount_adminAccountId - The Amazon Web Services Account ID for the organization account to be
enabled as a GuardDuty delegated administrator.
data EnableOrganizationAdminAccountResponse Source #
See: newEnableOrganizationAdminAccountResponse smart constructor.
Constructors
| EnableOrganizationAdminAccountResponse' Int |
Instances
newEnableOrganizationAdminAccountResponse Source #
Arguments
| :: Int | |
| -> EnableOrganizationAdminAccountResponse |
Create a value of EnableOrganizationAdminAccountResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:EnableOrganizationAdminAccountResponse', enableOrganizationAdminAccountResponse_httpStatus - The response's http status code.
GetAdministratorAccount
data GetAdministratorAccount Source #
See: newGetAdministratorAccount smart constructor.
Constructors
| GetAdministratorAccount' Text |
Instances
newGetAdministratorAccount Source #
Arguments
| :: Text | |
| -> GetAdministratorAccount |
Create a value of GetAdministratorAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetAdministratorAccount, getAdministratorAccount_detectorId - The unique ID of the detector of the GuardDuty member account.
data GetAdministratorAccountResponse Source #
See: newGetAdministratorAccountResponse smart constructor.
Constructors
| GetAdministratorAccountResponse' Int Administrator |
Instances
newGetAdministratorAccountResponse Source #
Arguments
| :: Int | |
| -> Administrator | |
| -> GetAdministratorAccountResponse |
Create a value of GetAdministratorAccountResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetAdministratorAccountResponse', getAdministratorAccountResponse_httpStatus - The response's http status code.
$sel:administrator:GetAdministratorAccountResponse', getAdministratorAccountResponse_administrator - The administrator account details.
GetDetector
data GetDetector Source #
See: newGetDetector smart constructor.
Constructors
| GetDetector' Text |
Instances
Arguments
| :: Text | |
| -> GetDetector |
Create a value of GetDetector with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetDetector, getDetector_detectorId - The unique ID of the detector that you want to get.
data GetDetectorResponse Source #
See: newGetDetectorResponse smart constructor.
Constructors
| GetDetectorResponse' (Maybe Text) (Maybe DataSourceConfigurationsResult) (Maybe FindingPublishingFrequency) (Maybe (HashMap Text Text)) (Maybe Text) Int Text DetectorStatus |
Instances
newGetDetectorResponse Source #
Arguments
| :: Int | |
| -> Text | |
| -> DetectorStatus | |
| -> GetDetectorResponse |
Create a value of GetDetectorResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetDetectorResponse, getDetectorResponse_createdAt - The timestamp of when the detector was created.
GetDetectorResponse, getDetectorResponse_dataSources - Describes which data sources are enabled for the detector.
$sel:findingPublishingFrequency:GetDetectorResponse', getDetectorResponse_findingPublishingFrequency - The publishing frequency of the finding.
GetDetectorResponse, getDetectorResponse_tags - The tags of the detector resource.
GetDetectorResponse, getDetectorResponse_updatedAt - The last-updated timestamp for the detector.
$sel:httpStatus:GetDetectorResponse', getDetectorResponse_httpStatus - The response's http status code.
GetDetectorResponse, getDetectorResponse_serviceRole - The GuardDuty service role.
GetDetectorResponse, getDetectorResponse_status - The detector status.
GetFilter
See: newGetFilter smart constructor.
Constructors
| GetFilter' Text Text |
Instances
Create a value of GetFilter with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetFilter, getFilter_detectorId - The unique ID of the detector that the filter is associated with.
$sel:filterName:GetFilter', getFilter_filterName - The name of the filter you want to get.
data GetFilterResponse Source #
See: newGetFilterResponse smart constructor.
Constructors
| GetFilterResponse' (Maybe Text) (Maybe Natural) (Maybe (HashMap Text Text)) Int Text FilterAction FindingCriteria |
Instances
Arguments
| :: Int | |
| -> Text | |
| -> FilterAction | |
| -> FindingCriteria | |
| -> GetFilterResponse |
Create a value of GetFilterResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetFilterResponse, getFilterResponse_description - The description of the filter.
$sel:rank:GetFilterResponse', getFilterResponse_rank - Specifies the position of the filter in the list of current filters.
Also specifies the order in which this filter is applied to the
findings.
GetFilterResponse, getFilterResponse_tags - The tags of the filter resource.
$sel:httpStatus:GetFilterResponse', getFilterResponse_httpStatus - The response's http status code.
GetFilterResponse, getFilterResponse_name - The name of the filter.
GetFilterResponse, getFilterResponse_action - Specifies the action that is to be applied to the findings that match
the filter.
$sel:findingCriteria:GetFilterResponse', getFilterResponse_findingCriteria - Represents the criteria to be used in the filter for querying findings.
GetFindings
data GetFindings Source #
See: newGetFindings smart constructor.
Constructors
| GetFindings' (Maybe SortCriteria) Text [Text] |
Instances
Arguments
| :: Text | |
| -> GetFindings |
Create a value of GetFindings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:sortCriteria:GetFindings', getFindings_sortCriteria - Represents the criteria used for sorting findings.
GetFindings, getFindings_detectorId - The ID of the detector that specifies the GuardDuty service whose
findings you want to retrieve.
$sel:findingIds:GetFindings', getFindings_findingIds - The IDs of the findings that you want to retrieve.
data GetFindingsResponse Source #
See: newGetFindingsResponse smart constructor.
Constructors
| GetFindingsResponse' Int [Finding] |
Instances
newGetFindingsResponse Source #
Arguments
| :: Int | |
| -> GetFindingsResponse |
Create a value of GetFindingsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetFindingsResponse', getFindingsResponse_httpStatus - The response's http status code.
$sel:findings:GetFindingsResponse', getFindingsResponse_findings - A list of findings.
GetFindingsStatistics
data GetFindingsStatistics Source #
See: newGetFindingsStatistics smart constructor.
Constructors
| GetFindingsStatistics' (Maybe FindingCriteria) Text [FindingStatisticType] |
Instances
newGetFindingsStatistics Source #
Arguments
| :: Text | |
| -> GetFindingsStatistics |
Create a value of GetFindingsStatistics with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:findingCriteria:GetFindingsStatistics', getFindingsStatistics_findingCriteria - Represents the criteria that is used for querying findings.
GetFindingsStatistics, getFindingsStatistics_detectorId - The ID of the detector that specifies the GuardDuty service whose
findings' statistics you want to retrieve.
$sel:findingStatisticTypes:GetFindingsStatistics', getFindingsStatistics_findingStatisticTypes - The types of finding statistics to retrieve.
data GetFindingsStatisticsResponse Source #
See: newGetFindingsStatisticsResponse smart constructor.
Constructors
| GetFindingsStatisticsResponse' Int FindingStatistics |
Instances
newGetFindingsStatisticsResponse Source #
Arguments
| :: Int | |
| -> FindingStatistics | |
| -> GetFindingsStatisticsResponse |
Create a value of GetFindingsStatisticsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetFindingsStatisticsResponse', getFindingsStatisticsResponse_httpStatus - The response's http status code.
$sel:findingStatistics:GetFindingsStatisticsResponse', getFindingsStatisticsResponse_findingStatistics - The finding statistics object.
GetIPSet
See: newGetIPSet smart constructor.
Instances
Create a value of GetIPSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetIPSet, getIPSet_detectorId - The unique ID of the detector that the IPSet is associated with.
$sel:ipSetId:GetIPSet', getIPSet_ipSetId - The unique ID of the IPSet to retrieve.
data GetIPSetResponse Source #
See: newGetIPSetResponse smart constructor.
Constructors
| GetIPSetResponse' (Maybe (HashMap Text Text)) Int Text IpSetFormat Text IpSetStatus |
Instances
Arguments
| :: Int | |
| -> Text | |
| -> IpSetFormat | |
| -> Text | |
| -> IpSetStatus | |
| -> GetIPSetResponse |
Create a value of GetIPSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetIPSetResponse, getIPSetResponse_tags - The tags of the IPSet resource.
$sel:httpStatus:GetIPSetResponse', getIPSetResponse_httpStatus - The response's http status code.
GetIPSetResponse, getIPSetResponse_name - The user-friendly name for the IPSet.
$sel:format:GetIPSetResponse', getIPSetResponse_format - The format of the file that contains the IPSet.
$sel:location:GetIPSetResponse', getIPSetResponse_location - The URI of the file that contains the IPSet.
GetIPSetResponse, getIPSetResponse_status - The status of IPSet file that was uploaded.
GetInvitationsCount
data GetInvitationsCount Source #
See: newGetInvitationsCount smart constructor.
Constructors
| GetInvitationsCount' | |
Instances
newGetInvitationsCount :: GetInvitationsCount Source #
Create a value of GetInvitationsCount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
data GetInvitationsCountResponse Source #
See: newGetInvitationsCountResponse smart constructor.
Constructors
| GetInvitationsCountResponse' (Maybe Int) Int |
Instances
newGetInvitationsCountResponse Source #
Create a value of GetInvitationsCountResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitationsCount:GetInvitationsCountResponse', getInvitationsCountResponse_invitationsCount - The number of received invitations.
$sel:httpStatus:GetInvitationsCountResponse', getInvitationsCountResponse_httpStatus - The response's http status code.
GetMalwareScanSettings
data GetMalwareScanSettings Source #
See: newGetMalwareScanSettings smart constructor.
Constructors
| GetMalwareScanSettings' Text |
Instances
newGetMalwareScanSettings Source #
Arguments
| :: Text | |
| -> GetMalwareScanSettings |
Create a value of GetMalwareScanSettings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetMalwareScanSettings, getMalwareScanSettings_detectorId - The unique ID of the detector that the scan setting is associated with.
data GetMalwareScanSettingsResponse Source #
See: newGetMalwareScanSettingsResponse smart constructor.
Constructors
| GetMalwareScanSettingsResponse' (Maybe EbsSnapshotPreservation) (Maybe ScanResourceCriteria) Int |
Instances
newGetMalwareScanSettingsResponse Source #
Create a value of GetMalwareScanSettingsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ebsSnapshotPreservation:GetMalwareScanSettingsResponse', getMalwareScanSettingsResponse_ebsSnapshotPreservation - An enum value representing possible snapshot preservation settings.
$sel:scanResourceCriteria:GetMalwareScanSettingsResponse', getMalwareScanSettingsResponse_scanResourceCriteria - Represents the criteria to be used in the filter for scanning resources.
$sel:httpStatus:GetMalwareScanSettingsResponse', getMalwareScanSettingsResponse_httpStatus - The response's http status code.
GetMemberDetectors
data GetMemberDetectors Source #
See: newGetMemberDetectors smart constructor.
Constructors
| GetMemberDetectors' Text (NonEmpty Text) |
Instances
newGetMemberDetectors Source #
Arguments
| :: Text | |
| -> NonEmpty Text | |
| -> GetMemberDetectors |
Create a value of GetMemberDetectors with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetMemberDetectors, getMemberDetectors_detectorId - The detector ID for the administrator account.
GetMemberDetectors, getMemberDetectors_accountIds - The account ID of the member account.
data GetMemberDetectorsResponse Source #
See: newGetMemberDetectorsResponse smart constructor.
Constructors
| GetMemberDetectorsResponse' Int (NonEmpty MemberDataSourceConfiguration) [UnprocessedAccount] |
Instances
newGetMemberDetectorsResponse Source #
Arguments
| :: Int | |
| -> NonEmpty MemberDataSourceConfiguration |
|
| -> GetMemberDetectorsResponse |
Create a value of GetMemberDetectorsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetMemberDetectorsResponse', getMemberDetectorsResponse_httpStatus - The response's http status code.
$sel:memberDataSourceConfigurations:GetMemberDetectorsResponse', getMemberDetectorsResponse_memberDataSourceConfigurations - An object that describes which data sources are enabled for a member
account.
$sel:unprocessedAccounts:GetMemberDetectorsResponse', getMemberDetectorsResponse_unprocessedAccounts - A list of member account IDs that were unable to be processed along with
an explanation for why they were not processed.
GetMembers
data GetMembers Source #
See: newGetMembers smart constructor.
Constructors
| GetMembers' Text (NonEmpty Text) |
Instances
Arguments
| :: Text | |
| -> NonEmpty Text | |
| -> GetMembers |
Create a value of GetMembers with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetMembers, getMembers_detectorId - The unique ID of the detector of the GuardDuty account whose members you
want to retrieve.
GetMembers, getMembers_accountIds - A list of account IDs of the GuardDuty member accounts that you want to
describe.
data GetMembersResponse Source #
See: newGetMembersResponse smart constructor.
Constructors
| GetMembersResponse' Int [Member] [UnprocessedAccount] |
Instances
newGetMembersResponse Source #
Arguments
| :: Int | |
| -> GetMembersResponse |
Create a value of GetMembersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetMembersResponse', getMembersResponse_httpStatus - The response's http status code.
$sel:members:GetMembersResponse', getMembersResponse_members - A list of members.
$sel:unprocessedAccounts:GetMembersResponse', getMembersResponse_unprocessedAccounts - A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
GetRemainingFreeTrialDays
data GetRemainingFreeTrialDays Source #
See: newGetRemainingFreeTrialDays smart constructor.
Constructors
| GetRemainingFreeTrialDays' (Maybe (NonEmpty Text)) Text |
Instances
newGetRemainingFreeTrialDays Source #
Arguments
| :: Text | |
| -> GetRemainingFreeTrialDays |
Create a value of GetRemainingFreeTrialDays with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetRemainingFreeTrialDays, getRemainingFreeTrialDays_accountIds - A list of account identifiers of the GuardDuty member account.
GetRemainingFreeTrialDays, getRemainingFreeTrialDays_detectorId - The unique ID of the detector of the GuardDuty member account.
data GetRemainingFreeTrialDaysResponse Source #
See: newGetRemainingFreeTrialDaysResponse smart constructor.
Constructors
| GetRemainingFreeTrialDaysResponse' (Maybe [AccountFreeTrialInfo]) (Maybe [UnprocessedAccount]) Int |
Instances
newGetRemainingFreeTrialDaysResponse Source #
Arguments
| :: Int | |
| -> GetRemainingFreeTrialDaysResponse |
Create a value of GetRemainingFreeTrialDaysResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accounts:GetRemainingFreeTrialDaysResponse', getRemainingFreeTrialDaysResponse_accounts - The member accounts which were included in a request and were processed
successfully.
$sel:unprocessedAccounts:GetRemainingFreeTrialDaysResponse', getRemainingFreeTrialDaysResponse_unprocessedAccounts - The member account that was included in a request but for which the
request could not be processed.
$sel:httpStatus:GetRemainingFreeTrialDaysResponse', getRemainingFreeTrialDaysResponse_httpStatus - The response's http status code.
GetThreatIntelSet
data GetThreatIntelSet Source #
See: newGetThreatIntelSet smart constructor.
Constructors
| GetThreatIntelSet' Text Text |
Instances
Arguments
| :: Text | |
| -> Text | |
| -> GetThreatIntelSet |
Create a value of GetThreatIntelSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetThreatIntelSet, getThreatIntelSet_detectorId - The unique ID of the detector that the threatIntelSet is associated
with.
$sel:threatIntelSetId:GetThreatIntelSet', getThreatIntelSet_threatIntelSetId - The unique ID of the threatIntelSet that you want to get.
data GetThreatIntelSetResponse Source #
See: newGetThreatIntelSetResponse smart constructor.
Constructors
| GetThreatIntelSetResponse' (Maybe (HashMap Text Text)) Int Text ThreatIntelSetFormat Text ThreatIntelSetStatus |
Instances
newGetThreatIntelSetResponse Source #
Arguments
| :: Int | |
| -> Text | |
| -> ThreatIntelSetFormat | |
| -> Text | |
| -> ThreatIntelSetStatus | |
| -> GetThreatIntelSetResponse |
Create a value of GetThreatIntelSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetThreatIntelSetResponse, getThreatIntelSetResponse_tags - The tags of the threat list resource.
$sel:httpStatus:GetThreatIntelSetResponse', getThreatIntelSetResponse_httpStatus - The response's http status code.
GetThreatIntelSetResponse, getThreatIntelSetResponse_name - A user-friendly ThreatIntelSet name displayed in all findings that are
generated by activity that involves IP addresses included in this
ThreatIntelSet.
$sel:format:GetThreatIntelSetResponse', getThreatIntelSetResponse_format - The format of the threatIntelSet.
$sel:location:GetThreatIntelSetResponse', getThreatIntelSetResponse_location - The URI of the file that contains the ThreatIntelSet.
GetThreatIntelSetResponse, getThreatIntelSetResponse_status - The status of threatIntelSet file uploaded.
GetUsageStatistics
data GetUsageStatistics Source #
See: newGetUsageStatistics smart constructor.
Constructors
| GetUsageStatistics' (Maybe Natural) (Maybe Text) (Maybe Text) Text UsageStatisticType UsageCriteria |
Instances
newGetUsageStatistics Source #
Arguments
| :: Text | |
| -> UsageStatisticType | |
| -> UsageCriteria | |
| -> GetUsageStatistics |
Create a value of GetUsageStatistics with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:GetUsageStatistics', getUsageStatistics_maxResults - The maximum number of results to return in the response.
GetUsageStatistics, getUsageStatistics_nextToken - A token to use for paginating results that are returned in the response.
Set the value of this parameter to null for the first request to a list
action. For subsequent calls, use the NextToken value returned from the
previous request to continue listing results after the first page.
GetUsageStatistics, getUsageStatistics_unit - The currency unit you would like to view your usage statistics in.
Current valid values are USD.
GetUsageStatistics, getUsageStatistics_detectorId - The ID of the detector that specifies the GuardDuty service whose usage
statistics you want to retrieve.
$sel:usageStatisticType:GetUsageStatistics', getUsageStatistics_usageStatisticType - The type of usage statistics to retrieve.
$sel:usageCriteria:GetUsageStatistics', getUsageStatistics_usageCriteria - Represents the criteria used for querying usage.
data GetUsageStatisticsResponse Source #
See: newGetUsageStatisticsResponse smart constructor.
Constructors
| GetUsageStatisticsResponse' (Maybe Text) (Maybe UsageStatistics) Int |
Instances
newGetUsageStatisticsResponse Source #
Create a value of GetUsageStatisticsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetUsageStatistics, getUsageStatisticsResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:usageStatistics:GetUsageStatisticsResponse', getUsageStatisticsResponse_usageStatistics - The usage statistics object. If a UsageStatisticType was provided, the
objects representing other types will be null.
$sel:httpStatus:GetUsageStatisticsResponse', getUsageStatisticsResponse_httpStatus - The response's http status code.
InviteMembers
data InviteMembers Source #
See: newInviteMembers smart constructor.
Instances
Arguments
| :: Text | |
| -> NonEmpty Text | |
| -> InviteMembers |
Create a value of InviteMembers with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:disableEmailNotification:InviteMembers', inviteMembers_disableEmailNotification - A Boolean value that specifies whether you want to disable email
notification to the accounts that you are inviting to GuardDuty as
members.
$sel:message:InviteMembers', inviteMembers_message - The invitation message that you want to send to the accounts that
you're inviting to GuardDuty as members.
InviteMembers, inviteMembers_detectorId - The unique ID of the detector of the GuardDuty account that you want to
invite members with.
InviteMembers, inviteMembers_accountIds - A list of account IDs of the accounts that you want to invite to
GuardDuty as members.
data InviteMembersResponse Source #
See: newInviteMembersResponse smart constructor.
Constructors
| InviteMembersResponse' Int [UnprocessedAccount] |
Instances
newInviteMembersResponse Source #
Create a value of InviteMembersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:InviteMembersResponse', inviteMembersResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:InviteMembersResponse', inviteMembersResponse_unprocessedAccounts - A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
ListDetectors (Paginated)
data ListDetectors Source #
See: newListDetectors smart constructor.
Constructors
| ListDetectors' (Maybe Natural) (Maybe Text) |
Instances
newListDetectors :: ListDetectors Source #
Create a value of ListDetectors with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListDetectors', listDetectors_maxResults - You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
ListDetectors, listDetectors_nextToken - You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
data ListDetectorsResponse Source #
See: newListDetectorsResponse smart constructor.
Constructors
| ListDetectorsResponse' (Maybe Text) Int [Text] |
Instances
newListDetectorsResponse Source #
Create a value of ListDetectorsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListDetectors, listDetectorsResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListDetectorsResponse', listDetectorsResponse_httpStatus - The response's http status code.
$sel:detectorIds:ListDetectorsResponse', listDetectorsResponse_detectorIds - A list of detector IDs.
ListFilters (Paginated)
data ListFilters Source #
See: newListFilters smart constructor.
Instances
Arguments
| :: Text | |
| -> ListFilters |
Create a value of ListFilters with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListFilters', listFilters_maxResults - You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
ListFilters, listFilters_nextToken - You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
ListFilters, listFilters_detectorId - The unique ID of the detector that the filter is associated with.
data ListFiltersResponse Source #
See: newListFiltersResponse smart constructor.
Constructors
| ListFiltersResponse' (Maybe Text) Int [Text] |
Instances
newListFiltersResponse Source #
Arguments
| :: Int | |
| -> ListFiltersResponse |
Create a value of ListFiltersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListFilters, listFiltersResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListFiltersResponse', listFiltersResponse_httpStatus - The response's http status code.
$sel:filterNames:ListFiltersResponse', listFiltersResponse_filterNames - A list of filter names.
ListFindings (Paginated)
data ListFindings Source #
See: newListFindings smart constructor.
Constructors
| ListFindings' (Maybe FindingCriteria) (Maybe Natural) (Maybe Text) (Maybe SortCriteria) Text |
Instances
Arguments
| :: Text | |
| -> ListFindings |
Create a value of ListFindings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:findingCriteria:ListFindings', listFindings_findingCriteria - Represents the criteria used for querying findings. Valid values
include:
- JSON field name
- accountId
- region
- confidence
- id
- resource.accessKeyDetails.accessKeyId
- resource.accessKeyDetails.principalId
- resource.accessKeyDetails.userName
- resource.accessKeyDetails.userType
- resource.instanceDetails.iamInstanceProfile.id
- resource.instanceDetails.imageId
- resource.instanceDetails.instanceId
- resource.instanceDetails.networkInterfaces.ipv6Addresses
- resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
- resource.instanceDetails.networkInterfaces.publicDnsName
- resource.instanceDetails.networkInterfaces.publicIp
- resource.instanceDetails.networkInterfaces.securityGroups.groupId
- resource.instanceDetails.networkInterfaces.securityGroups.groupName
- resource.instanceDetails.networkInterfaces.subnetId
- resource.instanceDetails.networkInterfaces.vpcId
- resource.instanceDetails.tags.key
- resource.instanceDetails.tags.value
- resource.resourceType
- service.action.actionType
- service.action.awsApiCallAction.api
- service.action.awsApiCallAction.callerType
- service.action.awsApiCallAction.remoteIpDetails.city.cityName
- service.action.awsApiCallAction.remoteIpDetails.country.countryName
- service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
- service.action.awsApiCallAction.remoteIpDetails.organization.asn
- service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
- service.action.awsApiCallAction.serviceName
- service.action.dnsRequestAction.domain
- service.action.networkConnectionAction.blocked
- service.action.networkConnectionAction.connectionDirection
- service.action.networkConnectionAction.localPortDetails.port
- service.action.networkConnectionAction.protocol
- service.action.networkConnectionAction.remoteIpDetails.country.countryName
- service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
- service.action.networkConnectionAction.remoteIpDetails.organization.asn
- service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
- service.action.networkConnectionAction.remotePortDetails.port
- service.additionalInfo.threatListName
service.archived
When this attribute is set to 'true', only archived findings are listed. When it's set to 'false', only unarchived findings are listed. When this attribute is not set, all existing findings are listed.
- service.resourceRole
- severity
- type
updatedAt
Type: Timestamp in Unix Epoch millisecond format: 1486685375000
$sel:maxResults:ListFindings', listFindings_maxResults - You can use this parameter to indicate the maximum number of items you
want in the response. The default value is 50. The maximum value is 50.
ListFindings, listFindings_nextToken - You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:sortCriteria:ListFindings', listFindings_sortCriteria - Represents the criteria used for sorting findings.
ListFindings, listFindings_detectorId - The ID of the detector that specifies the GuardDuty service whose
findings you want to list.
data ListFindingsResponse Source #
See: newListFindingsResponse smart constructor.
Constructors
| ListFindingsResponse' (Maybe Text) Int [Text] |
Instances
newListFindingsResponse Source #
Arguments
| :: Int | |
| -> ListFindingsResponse |
Create a value of ListFindingsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListFindings, listFindingsResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListFindingsResponse', listFindingsResponse_httpStatus - The response's http status code.
$sel:findingIds:ListFindingsResponse', listFindingsResponse_findingIds - The IDs of the findings that you're listing.
ListIPSets (Paginated)
data ListIPSets Source #
See: newListIPSets smart constructor.
Instances
Arguments
| :: Text | |
| -> ListIPSets |
Create a value of ListIPSets with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListIPSets', listIPSets_maxResults - You can use this parameter to indicate the maximum number of items you
want in the response. The default value is 50. The maximum value is 50.
ListIPSets, listIPSets_nextToken - You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
ListIPSets, listIPSets_detectorId - The unique ID of the detector that the IPSet is associated with.
data ListIPSetsResponse Source #
See: newListIPSetsResponse smart constructor.
Constructors
| ListIPSetsResponse' (Maybe Text) Int [Text] |
Instances
newListIPSetsResponse Source #
Arguments
| :: Int | |
| -> ListIPSetsResponse |
Create a value of ListIPSetsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListIPSets, listIPSetsResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListIPSetsResponse', listIPSetsResponse_httpStatus - The response's http status code.
$sel:ipSetIds:ListIPSetsResponse', listIPSetsResponse_ipSetIds - The IDs of the IPSet resources.
ListInvitations (Paginated)
data ListInvitations Source #
See: newListInvitations smart constructor.
Constructors
| ListInvitations' (Maybe Natural) (Maybe Text) |
Instances
newListInvitations :: ListInvitations Source #
Create a value of ListInvitations with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListInvitations', listInvitations_maxResults - You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
ListInvitations, listInvitations_nextToken - You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
data ListInvitationsResponse Source #
See: newListInvitationsResponse smart constructor.
Constructors
| ListInvitationsResponse' (Maybe [Invitation]) (Maybe Text) Int |
Instances
newListInvitationsResponse Source #
Create a value of ListInvitationsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitations:ListInvitationsResponse', listInvitationsResponse_invitations - A list of invitation descriptions.
ListInvitations, listInvitationsResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListInvitationsResponse', listInvitationsResponse_httpStatus - The response's http status code.
ListMembers (Paginated)
data ListMembers Source #
See: newListMembers smart constructor.
Instances
Arguments
| :: Text | |
| -> ListMembers |
Create a value of ListMembers with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListMembers', listMembers_maxResults - You can use this parameter to indicate the maximum number of items you
want in the response. The default value is 50. The maximum value is 50.
ListMembers, listMembers_nextToken - You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:onlyAssociated:ListMembers', listMembers_onlyAssociated - Specifies whether to only return associated members or to return all
members (including members who haven't been invited yet or have been
disassociated). Member accounts must have been previously associated
with the GuardDuty administrator account using
Create Members
.
ListMembers, listMembers_detectorId - The unique ID of the detector the member is associated with.
data ListMembersResponse Source #
See: newListMembersResponse smart constructor.
Instances
newListMembersResponse Source #
Arguments
| :: Int | |
| -> ListMembersResponse |
Create a value of ListMembersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:members:ListMembersResponse', listMembersResponse_members - A list of members.
ListMembers, listMembersResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListMembersResponse', listMembersResponse_httpStatus - The response's http status code.
ListOrganizationAdminAccounts (Paginated)
data ListOrganizationAdminAccounts Source #
See: newListOrganizationAdminAccounts smart constructor.
Constructors
| ListOrganizationAdminAccounts' (Maybe Natural) (Maybe Text) |
Instances
newListOrganizationAdminAccounts :: ListOrganizationAdminAccounts Source #
Create a value of ListOrganizationAdminAccounts with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListOrganizationAdminAccounts', listOrganizationAdminAccounts_maxResults - The maximum number of results to return in the response.
ListOrganizationAdminAccounts, listOrganizationAdminAccounts_nextToken - A token to use for paginating results that are returned in the response.
Set the value of this parameter to null for the first request to a list
action. For subsequent calls, use the NextToken value returned from
the previous request to continue listing results after the first page.
data ListOrganizationAdminAccountsResponse Source #
See: newListOrganizationAdminAccountsResponse smart constructor.
Constructors
| ListOrganizationAdminAccountsResponse' (Maybe [AdminAccount]) (Maybe Text) Int |
Instances
newListOrganizationAdminAccountsResponse Source #
Arguments
| :: Int | |
| -> ListOrganizationAdminAccountsResponse |
Create a value of ListOrganizationAdminAccountsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:adminAccounts:ListOrganizationAdminAccountsResponse', listOrganizationAdminAccountsResponse_adminAccounts - A list of accounts configured as GuardDuty delegated administrators.
ListOrganizationAdminAccounts, listOrganizationAdminAccountsResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListOrganizationAdminAccountsResponse', listOrganizationAdminAccountsResponse_httpStatus - The response's http status code.
ListPublishingDestinations
data ListPublishingDestinations Source #
See: newListPublishingDestinations smart constructor.
Instances
newListPublishingDestinations Source #
Arguments
| :: Text | |
| -> ListPublishingDestinations |
Create a value of ListPublishingDestinations with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListPublishingDestinations', listPublishingDestinations_maxResults - The maximum number of results to return in the response.
ListPublishingDestinations, listPublishingDestinations_nextToken - A token to use for paginating results that are returned in the response.
Set the value of this parameter to null for the first request to a list
action. For subsequent calls, use the NextToken value returned from
the previous request to continue listing results after the first page.
ListPublishingDestinations, listPublishingDestinations_detectorId - The ID of the detector to retrieve publishing destinations for.
data ListPublishingDestinationsResponse Source #
See: newListPublishingDestinationsResponse smart constructor.
Constructors
| ListPublishingDestinationsResponse' (Maybe Text) Int [Destination] |
Instances
newListPublishingDestinationsResponse Source #
Arguments
| :: Int | |
| -> ListPublishingDestinationsResponse |
Create a value of ListPublishingDestinationsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListPublishingDestinations, listPublishingDestinationsResponse_nextToken - A token to use for paginating results that are returned in the response.
Set the value of this parameter to null for the first request to a list
action. For subsequent calls, use the NextToken value returned from
the previous request to continue listing results after the first page.
$sel:httpStatus:ListPublishingDestinationsResponse', listPublishingDestinationsResponse_httpStatus - The response's http status code.
$sel:destinations:ListPublishingDestinationsResponse', listPublishingDestinationsResponse_destinations - A Destinations object that includes information about each publishing
destination returned.
ListTagsForResource
data ListTagsForResource Source #
See: newListTagsForResource smart constructor.
Constructors
| ListTagsForResource' Text |
Instances
newListTagsForResource Source #
Arguments
| :: Text | |
| -> ListTagsForResource |
Create a value of ListTagsForResource with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceArn:ListTagsForResource', listTagsForResource_resourceArn - The Amazon Resource Name (ARN) for the given GuardDuty resource.
data ListTagsForResourceResponse Source #
See: newListTagsForResourceResponse smart constructor.
Instances
newListTagsForResourceResponse Source #
Create a value of ListTagsForResourceResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListTagsForResourceResponse, listTagsForResourceResponse_tags - The tags associated with the resource.
$sel:httpStatus:ListTagsForResourceResponse', listTagsForResourceResponse_httpStatus - The response's http status code.
ListThreatIntelSets (Paginated)
data ListThreatIntelSets Source #
See: newListThreatIntelSets smart constructor.
Instances
newListThreatIntelSets Source #
Arguments
| :: Text | |
| -> ListThreatIntelSets |
Create a value of ListThreatIntelSets with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListThreatIntelSets', listThreatIntelSets_maxResults - You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
ListThreatIntelSets, listThreatIntelSets_nextToken - You can use this parameter to paginate results in the response. Set the
value of this parameter to null on your first call to the list action.
For subsequent calls to the action, fill nextToken in the request with
the value of NextToken from the previous response to continue listing
data.
ListThreatIntelSets, listThreatIntelSets_detectorId - The unique ID of the detector that the threatIntelSet is associated
with.
data ListThreatIntelSetsResponse Source #
See: newListThreatIntelSetsResponse smart constructor.
Constructors
| ListThreatIntelSetsResponse' (Maybe Text) Int [Text] |
Instances
newListThreatIntelSetsResponse Source #
Create a value of ListThreatIntelSetsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListThreatIntelSets, listThreatIntelSetsResponse_nextToken - The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListThreatIntelSetsResponse', listThreatIntelSetsResponse_httpStatus - The response's http status code.
$sel:threatIntelSetIds:ListThreatIntelSetsResponse', listThreatIntelSetsResponse_threatIntelSetIds - The IDs of the ThreatIntelSet resources.
StartMonitoringMembers
data StartMonitoringMembers Source #
See: newStartMonitoringMembers smart constructor.
Constructors
| StartMonitoringMembers' Text (NonEmpty Text) |
Instances
newStartMonitoringMembers Source #
Arguments
| :: Text | |
| -> NonEmpty Text | |
| -> StartMonitoringMembers |
Create a value of StartMonitoringMembers with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
StartMonitoringMembers, startMonitoringMembers_detectorId - The unique ID of the detector of the GuardDuty administrator account
associated with the member accounts to monitor.
StartMonitoringMembers, startMonitoringMembers_accountIds - A list of account IDs of the GuardDuty member accounts to start
monitoring.
data StartMonitoringMembersResponse Source #
See: newStartMonitoringMembersResponse smart constructor.
Constructors
| StartMonitoringMembersResponse' Int [UnprocessedAccount] |
Instances
newStartMonitoringMembersResponse Source #
Create a value of StartMonitoringMembersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:StartMonitoringMembersResponse', startMonitoringMembersResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:StartMonitoringMembersResponse', startMonitoringMembersResponse_unprocessedAccounts - A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
StopMonitoringMembers
data StopMonitoringMembers Source #
See: newStopMonitoringMembers smart constructor.
Constructors
| StopMonitoringMembers' Text (NonEmpty Text) |
Instances
newStopMonitoringMembers Source #
Create a value of StopMonitoringMembers with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
StopMonitoringMembers, stopMonitoringMembers_detectorId - The unique ID of the detector associated with the GuardDuty
administrator account that is monitoring member accounts.
StopMonitoringMembers, stopMonitoringMembers_accountIds - A list of account IDs for the member accounts to stop monitoring.
data StopMonitoringMembersResponse Source #
See: newStopMonitoringMembersResponse smart constructor.
Constructors
| StopMonitoringMembersResponse' Int [UnprocessedAccount] |
Instances
newStopMonitoringMembersResponse Source #
Create a value of StopMonitoringMembersResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:StopMonitoringMembersResponse', stopMonitoringMembersResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:StopMonitoringMembersResponse', stopMonitoringMembersResponse_unprocessedAccounts - A list of objects that contain an accountId for each account that could
not be processed, and a result string that indicates why the account was
not processed.
TagResource
data TagResource Source #
See: newTagResource smart constructor.
Constructors
| TagResource' Text (HashMap Text Text) |
Instances
Arguments
| :: Text | |
| -> TagResource |
Create a value of TagResource with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceArn:TagResource', tagResource_resourceArn - The Amazon Resource Name (ARN) for the GuardDuty resource to apply a tag
to.
TagResource, tagResource_tags - The tags to be added to a resource.
data TagResourceResponse Source #
See: newTagResourceResponse smart constructor.
Constructors
| TagResourceResponse' Int |
Instances
newTagResourceResponse Source #
Arguments
| :: Int | |
| -> TagResourceResponse |
Create a value of TagResourceResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:TagResourceResponse', tagResourceResponse_httpStatus - The response's http status code.
UnarchiveFindings
data UnarchiveFindings Source #
See: newUnarchiveFindings smart constructor.
Constructors
| UnarchiveFindings' Text [Text] |
Instances
Arguments
| :: Text | |
| -> UnarchiveFindings |
Create a value of UnarchiveFindings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
UnarchiveFindings, unarchiveFindings_detectorId - The ID of the detector associated with the findings to unarchive.
$sel:findingIds:UnarchiveFindings', unarchiveFindings_findingIds - The IDs of the findings to unarchive.
data UnarchiveFindingsResponse Source #
See: newUnarchiveFindingsResponse smart constructor.
Constructors
| UnarchiveFindingsResponse' Int |
Instances
newUnarchiveFindingsResponse Source #
Create a value of UnarchiveFindingsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UnarchiveFindingsResponse', unarchiveFindingsResponse_httpStatus - The response's http status code.
UntagResource
data UntagResource Source #
See: newUntagResource smart constructor.
Constructors
| UntagResource' Text (NonEmpty Text) |
Instances
Arguments
| :: Text | |
| -> NonEmpty Text | |
| -> UntagResource |
Create a value of UntagResource with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceArn:UntagResource', untagResource_resourceArn - The Amazon Resource Name (ARN) for the resource to remove tags from.
$sel:tagKeys:UntagResource', untagResource_tagKeys - The tag keys to remove from the resource.
data UntagResourceResponse Source #
See: newUntagResourceResponse smart constructor.
Constructors
| UntagResourceResponse' Int |
Instances
newUntagResourceResponse Source #
Create a value of UntagResourceResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UntagResourceResponse', untagResourceResponse_httpStatus - The response's http status code.
UpdateDetector
data UpdateDetector Source #
See: newUpdateDetector smart constructor.
Constructors
| UpdateDetector' (Maybe DataSourceConfigurations) (Maybe Bool) (Maybe FindingPublishingFrequency) Text |
Instances
Arguments
| :: Text | |
| -> UpdateDetector |
Create a value of UpdateDetector with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
UpdateDetector, updateDetector_dataSources - Describes which data sources will be updated.
UpdateDetector, updateDetector_enable - Specifies whether the detector is enabled or not enabled.
$sel:findingPublishingFrequency:UpdateDetector', updateDetector_findingPublishingFrequency - An enum value that specifies how frequently findings are exported, such
as to CloudWatch Events.
UpdateDetector, updateDetector_detectorId - The unique ID of the detector to update.
data UpdateDetectorResponse Source #
See: newUpdateDetectorResponse smart constructor.
Constructors
| UpdateDetectorResponse' Int |
Instances
newUpdateDetectorResponse Source #
Create a value of UpdateDetectorResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateDetectorResponse', updateDetectorResponse_httpStatus - The response's http status code.
UpdateFilter
data UpdateFilter Source #
See: newUpdateFilter smart constructor.
Constructors
| UpdateFilter' (Maybe FilterAction) (Maybe Text) (Maybe FindingCriteria) (Maybe Natural) Text Text |
Instances
Arguments
| :: Text | |
| -> Text | |
| -> UpdateFilter |
Create a value of UpdateFilter with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
UpdateFilter, updateFilter_action - Specifies the action that is to be applied to the findings that match
the filter.
UpdateFilter, updateFilter_description - The description of the filter. Valid special characters include period
(.), underscore (_), dash (-), and whitespace. The new line character is
considered to be an invalid input for description.
$sel:findingCriteria:UpdateFilter', updateFilter_findingCriteria - Represents the criteria to be used in the filter for querying findings.
$sel:rank:UpdateFilter', updateFilter_rank - Specifies the position of the filter in the list of current filters.
Also specifies the order in which this filter is applied to the
findings.
UpdateFilter, updateFilter_detectorId - The unique ID of the detector that specifies the GuardDuty service where
you want to update a filter.
$sel:filterName:UpdateFilter', updateFilter_filterName - The name of the filter.
data UpdateFilterResponse Source #
See: newUpdateFilterResponse smart constructor.
Constructors
| UpdateFilterResponse' Int Text |
Instances
newUpdateFilterResponse Source #
Arguments
| :: Int | |
| -> Text | |
| -> UpdateFilterResponse |
Create a value of UpdateFilterResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateFilterResponse', updateFilterResponse_httpStatus - The response's http status code.
UpdateFilterResponse, updateFilterResponse_name - The name of the filter.
UpdateFindingsFeedback
data UpdateFindingsFeedback Source #
See: newUpdateFindingsFeedback smart constructor.
Instances
newUpdateFindingsFeedback Source #
Arguments
| :: Text | |
| -> Feedback | |
| -> UpdateFindingsFeedback |
Create a value of UpdateFindingsFeedback with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:comments:UpdateFindingsFeedback', updateFindingsFeedback_comments - Additional feedback about the GuardDuty findings.
UpdateFindingsFeedback, updateFindingsFeedback_detectorId - The ID of the detector associated with the findings to update feedback
for.
$sel:findingIds:UpdateFindingsFeedback', updateFindingsFeedback_findingIds - The IDs of the findings that you want to mark as useful or not useful.
$sel:feedback:UpdateFindingsFeedback', updateFindingsFeedback_feedback - The feedback for the finding.
data UpdateFindingsFeedbackResponse Source #
See: newUpdateFindingsFeedbackResponse smart constructor.
Constructors
| UpdateFindingsFeedbackResponse' Int |
Instances
newUpdateFindingsFeedbackResponse Source #
Create a value of UpdateFindingsFeedbackResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateFindingsFeedbackResponse', updateFindingsFeedbackResponse_httpStatus - The response's http status code.
UpdateIPSet
data UpdateIPSet Source #
See: newUpdateIPSet smart constructor.
Instances
Arguments
| :: Text | |
| -> Text | |
| -> UpdateIPSet |
Create a value of UpdateIPSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:activate:UpdateIPSet', updateIPSet_activate - The updated Boolean value that specifies whether the IPSet is active or
not.
$sel:location:UpdateIPSet', updateIPSet_location - The updated URI of the file that contains the IPSet.
UpdateIPSet, updateIPSet_name - The unique ID that specifies the IPSet that you want to update.
UpdateIPSet, updateIPSet_detectorId - The detectorID that specifies the GuardDuty service whose IPSet you want
to update.
$sel:ipSetId:UpdateIPSet', updateIPSet_ipSetId - The unique ID that specifies the IPSet that you want to update.
data UpdateIPSetResponse Source #
See: newUpdateIPSetResponse smart constructor.
Constructors
| UpdateIPSetResponse' Int |
Instances
newUpdateIPSetResponse Source #
Arguments
| :: Int | |
| -> UpdateIPSetResponse |
Create a value of UpdateIPSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateIPSetResponse', updateIPSetResponse_httpStatus - The response's http status code.
UpdateMalwareScanSettings
data UpdateMalwareScanSettings Source #
See: newUpdateMalwareScanSettings smart constructor.
Constructors
| UpdateMalwareScanSettings' (Maybe EbsSnapshotPreservation) (Maybe ScanResourceCriteria) Text |
Instances
newUpdateMalwareScanSettings Source #
Arguments
| :: Text | |
| -> UpdateMalwareScanSettings |
Create a value of UpdateMalwareScanSettings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ebsSnapshotPreservation:UpdateMalwareScanSettings', updateMalwareScanSettings_ebsSnapshotPreservation - An enum value representing possible snapshot preservation settings.
$sel:scanResourceCriteria:UpdateMalwareScanSettings', updateMalwareScanSettings_scanResourceCriteria - Represents the criteria to be used in the filter for selecting resources
to scan.
UpdateMalwareScanSettings, updateMalwareScanSettings_detectorId - The unique ID of the detector that specifies the GuardDuty service where
you want to update scan settings.
data UpdateMalwareScanSettingsResponse Source #
See: newUpdateMalwareScanSettingsResponse smart constructor.
Constructors
| UpdateMalwareScanSettingsResponse' Int |
Instances
newUpdateMalwareScanSettingsResponse Source #
Arguments
| :: Int | |
| -> UpdateMalwareScanSettingsResponse |
Create a value of UpdateMalwareScanSettingsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateMalwareScanSettingsResponse', updateMalwareScanSettingsResponse_httpStatus - The response's http status code.
UpdateMemberDetectors
data UpdateMemberDetectors Source #
See: newUpdateMemberDetectors smart constructor.
Constructors
| UpdateMemberDetectors' (Maybe DataSourceConfigurations) Text (NonEmpty Text) |
Instances
newUpdateMemberDetectors Source #
Create a value of UpdateMemberDetectors with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
UpdateMemberDetectors, updateMemberDetectors_dataSources - Describes which data sources will be updated.
UpdateMemberDetectors, updateMemberDetectors_detectorId - The detector ID of the administrator account.
UpdateMemberDetectors, updateMemberDetectors_accountIds - A list of member account IDs to be updated.
data UpdateMemberDetectorsResponse Source #
See: newUpdateMemberDetectorsResponse smart constructor.
Constructors
| UpdateMemberDetectorsResponse' Int [UnprocessedAccount] |
Instances
newUpdateMemberDetectorsResponse Source #
Create a value of UpdateMemberDetectorsResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateMemberDetectorsResponse', updateMemberDetectorsResponse_httpStatus - The response's http status code.
$sel:unprocessedAccounts:UpdateMemberDetectorsResponse', updateMemberDetectorsResponse_unprocessedAccounts - A list of member account IDs that were unable to be processed along with
an explanation for why they were not processed.
UpdateOrganizationConfiguration
data UpdateOrganizationConfiguration Source #
See: newUpdateOrganizationConfiguration smart constructor.
Instances
newUpdateOrganizationConfiguration Source #
Arguments
| :: Text | |
| -> Bool | |
| -> UpdateOrganizationConfiguration |
Create a value of UpdateOrganizationConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
UpdateOrganizationConfiguration, updateOrganizationConfiguration_dataSources - Describes which data sources will be updated.
UpdateOrganizationConfiguration, updateOrganizationConfiguration_detectorId - The ID of the detector to update the delegated administrator for.
UpdateOrganizationConfiguration, updateOrganizationConfiguration_autoEnable - Indicates whether to automatically enable member accounts in the
organization.
data UpdateOrganizationConfigurationResponse Source #
See: newUpdateOrganizationConfigurationResponse smart constructor.
Constructors
| UpdateOrganizationConfigurationResponse' Int |
Instances
newUpdateOrganizationConfigurationResponse Source #
Arguments
| :: Int | |
| -> UpdateOrganizationConfigurationResponse |
Create a value of UpdateOrganizationConfigurationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateOrganizationConfigurationResponse', updateOrganizationConfigurationResponse_httpStatus - The response's http status code.
UpdatePublishingDestination
data UpdatePublishingDestination Source #
See: newUpdatePublishingDestination smart constructor.
Constructors
| UpdatePublishingDestination' (Maybe DestinationProperties) Text Text |
Instances
newUpdatePublishingDestination Source #
Arguments
| :: Text | |
| -> Text | |
| -> UpdatePublishingDestination |
Create a value of UpdatePublishingDestination with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:destinationProperties:UpdatePublishingDestination', updatePublishingDestination_destinationProperties - A DestinationProperties object that includes the DestinationArn and
KmsKeyArn of the publishing destination.
UpdatePublishingDestination, updatePublishingDestination_detectorId - The ID of the detector associated with the publishing destinations to
update.
UpdatePublishingDestination, updatePublishingDestination_destinationId - The ID of the publishing destination to update.
data UpdatePublishingDestinationResponse Source #
See: newUpdatePublishingDestinationResponse smart constructor.
Constructors
| UpdatePublishingDestinationResponse' Int |
Instances
newUpdatePublishingDestinationResponse Source #
Arguments
| :: Int | |
| -> UpdatePublishingDestinationResponse |
Create a value of UpdatePublishingDestinationResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdatePublishingDestinationResponse', updatePublishingDestinationResponse_httpStatus - The response's http status code.
UpdateThreatIntelSet
data UpdateThreatIntelSet Source #
See: newUpdateThreatIntelSet smart constructor.
Instances
newUpdateThreatIntelSet Source #
Arguments
| :: Text | |
| -> Text | |
| -> UpdateThreatIntelSet |
Create a value of UpdateThreatIntelSet with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:activate:UpdateThreatIntelSet', updateThreatIntelSet_activate - The updated Boolean value that specifies whether the ThreateIntelSet is
active or not.
$sel:location:UpdateThreatIntelSet', updateThreatIntelSet_location - The updated URI of the file that contains the ThreateIntelSet.
UpdateThreatIntelSet, updateThreatIntelSet_name - The unique ID that specifies the ThreatIntelSet that you want to update.
UpdateThreatIntelSet, updateThreatIntelSet_detectorId - The detectorID that specifies the GuardDuty service whose ThreatIntelSet
you want to update.
$sel:threatIntelSetId:UpdateThreatIntelSet', updateThreatIntelSet_threatIntelSetId - The unique ID that specifies the ThreatIntelSet that you want to update.
data UpdateThreatIntelSetResponse Source #
See: newUpdateThreatIntelSetResponse smart constructor.
Constructors
| UpdateThreatIntelSetResponse' Int |
Instances
newUpdateThreatIntelSetResponse Source #
Create a value of UpdateThreatIntelSetResponse with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateThreatIntelSetResponse', updateThreatIntelSetResponse_httpStatus - The response's http status code.
Types
AdminStatus
newtype AdminStatus Source #
Constructors
| AdminStatus' | |
Fields | |
Bundled Patterns
| pattern AdminStatus_DISABLE_IN_PROGRESS :: AdminStatus | |
| pattern AdminStatus_ENABLED :: AdminStatus |
Instances
CriterionKey
newtype CriterionKey Source #
Constructors
| CriterionKey' | |
Fields | |
Bundled Patterns
| pattern CriterionKey_ACCOUNT_ID :: CriterionKey | |
| pattern CriterionKey_EC2_INSTANCE_ARN :: CriterionKey | |
| pattern CriterionKey_GUARDDUTY_FINDING_ID :: CriterionKey | |
| pattern CriterionKey_SCAN_ID :: CriterionKey | |
| pattern CriterionKey_SCAN_START_TIME :: CriterionKey | |
| pattern CriterionKey_SCAN_STATUS :: CriterionKey |
Instances
DataSource
newtype DataSource Source #
Constructors
| DataSource' | |
Fields | |
Bundled Patterns
| pattern DataSource_CLOUD_TRAIL :: DataSource | |
| pattern DataSource_DNS_LOGS :: DataSource | |
| pattern DataSource_EC2_MALWARE_SCAN :: DataSource | |
| pattern DataSource_FLOW_LOGS :: DataSource | |
| pattern DataSource_KUBERNETES_AUDIT_LOGS :: DataSource | |
| pattern DataSource_S3_LOGS :: DataSource |
Instances
DataSourceStatus
newtype DataSourceStatus Source #
Constructors
| DataSourceStatus' | |
Fields | |
Bundled Patterns
| pattern DataSourceStatus_DISABLED :: DataSourceStatus | |
| pattern DataSourceStatus_ENABLED :: DataSourceStatus |
Instances
DestinationType
newtype DestinationType Source #
Constructors
| DestinationType' | |
Fields | |
Bundled Patterns
| pattern DestinationType_S3 :: DestinationType |
Instances
DetectorStatus
newtype DetectorStatus Source #
Constructors
| DetectorStatus' | |
Fields | |
Bundled Patterns
| pattern DetectorStatus_DISABLED :: DetectorStatus | |
| pattern DetectorStatus_ENABLED :: DetectorStatus |
Instances
EbsSnapshotPreservation
newtype EbsSnapshotPreservation Source #
Constructors
| EbsSnapshotPreservation' | |
Fields | |
Bundled Patterns
| pattern EbsSnapshotPreservation_NO_RETENTION :: EbsSnapshotPreservation | |
| pattern EbsSnapshotPreservation_RETENTION_WITH_FINDING :: EbsSnapshotPreservation |
Instances
Feedback
Constructors
| Feedback' | |
Fields
| |
Bundled Patterns
| pattern Feedback_NOT_USEFUL :: Feedback | |
| pattern Feedback_USEFUL :: Feedback |
Instances
FilterAction
newtype FilterAction Source #
Constructors
| FilterAction' | |
Fields | |
Bundled Patterns
| pattern FilterAction_ARCHIVE :: FilterAction | |
| pattern FilterAction_NOOP :: FilterAction |
Instances
FindingPublishingFrequency
newtype FindingPublishingFrequency Source #
Constructors
| FindingPublishingFrequency' | |
Fields | |
Bundled Patterns
Instances
FindingStatisticType
newtype FindingStatisticType Source #
Constructors
| FindingStatisticType' | |
Fields | |
Bundled Patterns
| pattern FindingStatisticType_COUNT_BY_SEVERITY :: FindingStatisticType |
Instances
IpSetFormat
newtype IpSetFormat Source #
Constructors
| IpSetFormat' | |
Fields | |
Bundled Patterns
| pattern IpSetFormat_ALIEN_VAULT :: IpSetFormat | |
| pattern IpSetFormat_FIRE_EYE :: IpSetFormat | |
| pattern IpSetFormat_OTX_CSV :: IpSetFormat | |
| pattern IpSetFormat_PROOF_POINT :: IpSetFormat | |
| pattern IpSetFormat_STIX :: IpSetFormat | |
| pattern IpSetFormat_TXT :: IpSetFormat |
Instances
IpSetStatus
newtype IpSetStatus Source #
Constructors
| IpSetStatus' | |
Fields | |
Bundled Patterns
| pattern IpSetStatus_ACTIVATING :: IpSetStatus | |
| pattern IpSetStatus_ACTIVE :: IpSetStatus | |
| pattern IpSetStatus_DEACTIVATING :: IpSetStatus | |
| pattern IpSetStatus_DELETED :: IpSetStatus | |
| pattern IpSetStatus_DELETE_PENDING :: IpSetStatus | |
| pattern IpSetStatus_ERROR :: IpSetStatus | |
| pattern IpSetStatus_INACTIVE :: IpSetStatus |
Instances
OrderBy
Constructors
| OrderBy' | |
Fields
| |
Bundled Patterns
| pattern OrderBy_ASC :: OrderBy | |
| pattern OrderBy_DESC :: OrderBy |
Instances
PublishingStatus
newtype PublishingStatus Source #
Constructors
| PublishingStatus' | |
Fields | |
Bundled Patterns
Instances
ScanCriterionKey
newtype ScanCriterionKey Source #
An enum value representing possible resource properties to match with given scan condition.
Constructors
| ScanCriterionKey' | |
Fields | |
Bundled Patterns
| pattern ScanCriterionKey_EC2_INSTANCE_TAG :: ScanCriterionKey |
Instances
ScanResult
newtype ScanResult Source #
Constructors
| ScanResult' | |
Fields | |
Bundled Patterns
| pattern ScanResult_CLEAN :: ScanResult | |
| pattern ScanResult_INFECTED :: ScanResult |
Instances
ScanStatus
newtype ScanStatus Source #
Constructors
| ScanStatus' | |
Fields | |
Bundled Patterns
| pattern ScanStatus_COMPLETED :: ScanStatus | |
| pattern ScanStatus_FAILED :: ScanStatus | |
| pattern ScanStatus_RUNNING :: ScanStatus |
Instances
ThreatIntelSetFormat
newtype ThreatIntelSetFormat Source #
Constructors
| ThreatIntelSetFormat' | |
Fields | |
Bundled Patterns
| pattern ThreatIntelSetFormat_ALIEN_VAULT :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_FIRE_EYE :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_OTX_CSV :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_PROOF_POINT :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_STIX :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_TXT :: ThreatIntelSetFormat |
Instances
ThreatIntelSetStatus
newtype ThreatIntelSetStatus Source #
Constructors
| ThreatIntelSetStatus' | |
Fields | |
Bundled Patterns
| pattern ThreatIntelSetStatus_ACTIVATING :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_ACTIVE :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_DEACTIVATING :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_DELETED :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_DELETE_PENDING :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_ERROR :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_INACTIVE :: ThreatIntelSetStatus |
Instances
UsageStatisticType
newtype UsageStatisticType Source #
Constructors
| UsageStatisticType' | |
Fields | |
Bundled Patterns
Instances
AccessControlList
data AccessControlList Source #
Contains information on the current access control policies for the bucket.
See: newAccessControlList smart constructor.
Constructors
| AccessControlList' (Maybe Bool) (Maybe Bool) |
Instances
newAccessControlList :: AccessControlList Source #
Create a value of AccessControlList with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:allowsPublicReadAccess:AccessControlList', accessControlList_allowsPublicReadAccess - A value that indicates whether public read access for the bucket is
enabled through an Access Control List (ACL).
$sel:allowsPublicWriteAccess:AccessControlList', accessControlList_allowsPublicWriteAccess - A value that indicates whether public write access for the bucket is
enabled through an Access Control List (ACL).
AccessKeyDetails
data AccessKeyDetails Source #
Contains information about the access keys.
See: newAccessKeyDetails smart constructor.
Instances
newAccessKeyDetails :: AccessKeyDetails Source #
Create a value of AccessKeyDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accessKeyId:AccessKeyDetails', accessKeyDetails_accessKeyId - The access key ID of the user.
$sel:principalId:AccessKeyDetails', accessKeyDetails_principalId - The principal ID of the user.
$sel:userName:AccessKeyDetails', accessKeyDetails_userName - The name of the user.
$sel:userType:AccessKeyDetails', accessKeyDetails_userType - The type of the user.
AccountDetail
data AccountDetail Source #
Contains information about the account.
See: newAccountDetail smart constructor.
Constructors
| AccountDetail' Text Text |
Instances
Create a value of AccountDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:AccountDetail', accountDetail_accountId - The member account ID.
$sel:email:AccountDetail', accountDetail_email - The email address of the member account.
AccountFreeTrialInfo
data AccountFreeTrialInfo Source #
Provides details of the GuardDuty member account that uses a free trial service.
See: newAccountFreeTrialInfo smart constructor.
Constructors
| AccountFreeTrialInfo' (Maybe Text) (Maybe DataSourcesFreeTrial) |
Instances
newAccountFreeTrialInfo :: AccountFreeTrialInfo Source #
Create a value of AccountFreeTrialInfo with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:AccountFreeTrialInfo', accountFreeTrialInfo_accountId - The account identifier of the GuardDuty member account.
$sel:dataSources:AccountFreeTrialInfo', accountFreeTrialInfo_dataSources - Describes the data source enabled for the GuardDuty member account.
AccountLevelPermissions
data AccountLevelPermissions Source #
Contains information about the account level permissions on the S3 bucket.
See: newAccountLevelPermissions smart constructor.
Constructors
| AccountLevelPermissions' (Maybe BlockPublicAccess) |
Instances
newAccountLevelPermissions :: AccountLevelPermissions Source #
Create a value of AccountLevelPermissions with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:blockPublicAccess:AccountLevelPermissions', accountLevelPermissions_blockPublicAccess - Describes the S3 Block Public Access settings of the bucket's parent
account.
Action
Contains information about actions.
See: newAction smart constructor.
Constructors
| Action' (Maybe Text) (Maybe AwsApiCallAction) (Maybe DnsRequestAction) (Maybe KubernetesApiCallAction) (Maybe NetworkConnectionAction) (Maybe PortProbeAction) |
Instances
Create a value of Action with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:actionType:Action', action_actionType - The GuardDuty finding activity type.
$sel:awsApiCallAction:Action', action_awsApiCallAction - Information about the AWS_API_CALL action described in this finding.
$sel:dnsRequestAction:Action', action_dnsRequestAction - Information about the DNS_REQUEST action described in this finding.
$sel:kubernetesApiCallAction:Action', action_kubernetesApiCallAction - Information about the Kubernetes API call action described in this
finding.
$sel:networkConnectionAction:Action', action_networkConnectionAction - Information about the NETWORK_CONNECTION action described in this
finding.
$sel:portProbeAction:Action', action_portProbeAction - Information about the PORT_PROBE action described in this finding.
AdminAccount
data AdminAccount Source #
The account within the organization specified as the GuardDuty delegated administrator.
See: newAdminAccount smart constructor.
Constructors
| AdminAccount' (Maybe Text) (Maybe AdminStatus) |
Instances
newAdminAccount :: AdminAccount Source #
Create a value of AdminAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:adminAccountId:AdminAccount', adminAccount_adminAccountId - The Amazon Web Services account ID for the account.
$sel:adminStatus:AdminAccount', adminAccount_adminStatus - Indicates whether the account is enabled as the delegated administrator.
Administrator
data Administrator Source #
Contains information about the administrator account and invitation.
See: newAdministrator smart constructor.
Instances
newAdministrator :: Administrator Source #
Create a value of Administrator with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:Administrator', administrator_accountId - The ID of the account used as the administrator account.
$sel:invitationId:Administrator', administrator_invitationId - The value that is used to validate the administrator account to the
member account.
$sel:invitedAt:Administrator', administrator_invitedAt - The timestamp when the invitation was sent.
$sel:relationshipStatus:Administrator', administrator_relationshipStatus - The status of the relationship between the administrator and member
accounts.
AwsApiCallAction
data AwsApiCallAction Source #
Contains information about the API action.
See: newAwsApiCallAction smart constructor.
Constructors
| AwsApiCallAction' (Maybe (HashMap Text Text)) (Maybe Text) (Maybe Text) (Maybe DomainDetails) (Maybe Text) (Maybe RemoteAccountDetails) (Maybe RemoteIpDetails) (Maybe Text) (Maybe Text) |
Instances
newAwsApiCallAction :: AwsApiCallAction Source #
Create a value of AwsApiCallAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:affectedResources:AwsApiCallAction', awsApiCallAction_affectedResources - The details of the Amazon Web Services account that made the API call.
This field identifies the resources that were affected by this API call.
$sel:api:AwsApiCallAction', awsApiCallAction_api - The Amazon Web Services API name.
$sel:callerType:AwsApiCallAction', awsApiCallAction_callerType - The Amazon Web Services API caller type.
$sel:domainDetails:AwsApiCallAction', awsApiCallAction_domainDetails - The domain information for the Amazon Web Services API call.
$sel:errorCode:AwsApiCallAction', awsApiCallAction_errorCode - The error code of the failed Amazon Web Services API action.
$sel:remoteAccountDetails:AwsApiCallAction', awsApiCallAction_remoteAccountDetails - The details of the Amazon Web Services account that made the API call.
This field appears if the call was made from outside your account.
$sel:remoteIpDetails:AwsApiCallAction', awsApiCallAction_remoteIpDetails - The remote IP information of the connection that initiated the Amazon
Web Services API call.
$sel:serviceName:AwsApiCallAction', awsApiCallAction_serviceName - The Amazon Web Services service name whose API was invoked.
$sel:userAgent:AwsApiCallAction', awsApiCallAction_userAgent - The agent through which the API request was made.
BlockPublicAccess
data BlockPublicAccess Source #
Contains information on how the bucker owner's S3 Block Public Access settings are being applied to the S3 bucket. See S3 Block Public Access for more information.
See: newBlockPublicAccess smart constructor.
Instances
newBlockPublicAccess :: BlockPublicAccess Source #
Create a value of BlockPublicAccess with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:blockPublicAcls:BlockPublicAccess', blockPublicAccess_blockPublicAcls - Indicates if S3 Block Public Access is set to BlockPublicAcls.
$sel:blockPublicPolicy:BlockPublicAccess', blockPublicAccess_blockPublicPolicy - Indicates if S3 Block Public Access is set to BlockPublicPolicy.
$sel:ignorePublicAcls:BlockPublicAccess', blockPublicAccess_ignorePublicAcls - Indicates if S3 Block Public Access is set to IgnorePublicAcls.
$sel:restrictPublicBuckets:BlockPublicAccess', blockPublicAccess_restrictPublicBuckets - Indicates if S3 Block Public Access is set to RestrictPublicBuckets.
BucketLevelPermissions
data BucketLevelPermissions Source #
Contains information about the bucket level permissions for the S3 bucket.
See: newBucketLevelPermissions smart constructor.
Constructors
| BucketLevelPermissions' (Maybe AccessControlList) (Maybe BlockPublicAccess) (Maybe BucketPolicy) |
Instances
newBucketLevelPermissions :: BucketLevelPermissions Source #
Create a value of BucketLevelPermissions with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accessControlList:BucketLevelPermissions', bucketLevelPermissions_accessControlList - Contains information on how Access Control Policies are applied to the
bucket.
$sel:blockPublicAccess:BucketLevelPermissions', bucketLevelPermissions_blockPublicAccess - Contains information on which account level S3 Block Public Access
settings are applied to the S3 bucket.
$sel:bucketPolicy:BucketLevelPermissions', bucketLevelPermissions_bucketPolicy - Contains information on the bucket policies for the S3 bucket.
BucketPolicy
data BucketPolicy Source #
Contains information on the current bucket policies for the S3 bucket.
See: newBucketPolicy smart constructor.
Constructors
| BucketPolicy' (Maybe Bool) (Maybe Bool) |
Instances
newBucketPolicy :: BucketPolicy Source #
Create a value of BucketPolicy with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:allowsPublicReadAccess:BucketPolicy', bucketPolicy_allowsPublicReadAccess - A value that indicates whether public read access for the bucket is
enabled through a bucket policy.
$sel:allowsPublicWriteAccess:BucketPolicy', bucketPolicy_allowsPublicWriteAccess - A value that indicates whether public write access for the bucket is
enabled through a bucket policy.
City
Contains information about the city associated with the IP address.
See: newCity smart constructor.
Create a value of City with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:cityName:City', city_cityName - The city name of the remote IP address.
CloudTrailConfigurationResult
data CloudTrailConfigurationResult Source #
Contains information on the status of CloudTrail as a data source for the detector.
See: newCloudTrailConfigurationResult smart constructor.
Constructors
| CloudTrailConfigurationResult' DataSourceStatus |
Instances
newCloudTrailConfigurationResult Source #
Arguments
| :: DataSourceStatus | |
| -> CloudTrailConfigurationResult |
Create a value of CloudTrailConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:CloudTrailConfigurationResult', cloudTrailConfigurationResult_status - Describes whether CloudTrail is enabled as a data source for the
detector.
Condition
Contains information about the condition.
See: newCondition smart constructor.
Constructors
| Condition' (Maybe [Text]) (Maybe [Text]) (Maybe Integer) (Maybe Integer) (Maybe Int) (Maybe Int) (Maybe Integer) (Maybe Integer) (Maybe Int) (Maybe Int) (Maybe [Text]) (Maybe [Text]) |
Instances
newCondition :: Condition Source #
Create a value of Condition with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:eq:Condition', condition_eq - Represents the equal condition to be applied to a single field when
querying for findings.
$sel:equals:Condition', condition_equals - Represents an equal ____ condition to be applied to a single field
when querying for findings.
$sel:greaterThan:Condition', condition_greaterThan - Represents a greater than condition to be applied to a single field
when querying for findings.
$sel:greaterThanOrEqual:Condition', condition_greaterThanOrEqual - Represents a greater than or equal condition to be applied to a single
field when querying for findings.
$sel:gt:Condition', condition_gt - Represents a greater than condition to be applied to a single field
when querying for findings.
$sel:gte:Condition', condition_gte - Represents a greater than or equal condition to be applied to a single
field when querying for findings.
$sel:lessThan:Condition', condition_lessThan - Represents a less than condition to be applied to a single field when
querying for findings.
$sel:lessThanOrEqual:Condition', condition_lessThanOrEqual - Represents a less than or equal condition to be applied to a single
field when querying for findings.
$sel:lt:Condition', condition_lt - Represents a less than condition to be applied to a single field when
querying for findings.
$sel:lte:Condition', condition_lte - Represents a less than or equal condition to be applied to a single
field when querying for findings.
$sel:neq:Condition', condition_neq - Represents the not equal condition to be applied to a single field
when querying for findings.
$sel:notEquals:Condition', condition_notEquals - Represents a not equal ____ condition to be applied to a single field
when querying for findings.
Container
Details of a container.
See: newContainer smart constructor.
Constructors
| Container' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe SecurityContext) (Maybe [VolumeMount]) |
Instances
newContainer :: Container Source #
Create a value of Container with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:containerRuntime:Container', container_containerRuntime - The container runtime (such as, Docker or containerd) used to run the
container.
$sel:id:Container', container_id - Container ID.
$sel:image:Container', container_image - Container image.
$sel:imagePrefix:Container', container_imagePrefix - Part of the image name before the last slash. For example, imagePrefix
for public.ecr.aws/amazonlinux/amazonlinux:latest would be
public.ecr.aws/amazonlinux. If the image name is relative and does not
have a slash, this field is empty.
Container, container_name - Container name.
$sel:securityContext:Container', container_securityContext - Container security context.
$sel:volumeMounts:Container', container_volumeMounts - Container volume mounts.
Country
Contains information about the country where the remote IP address is located.
See: newCountry smart constructor.
Instances
| FromJSON Country Source # | |
| Generic Country Source # | |
| Read Country Source # | |
| Show Country Source # | |
| NFData Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country | |
| Eq Country Source # | |
| Hashable Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country | |
| type Rep Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country type Rep Country = D1 ('MetaData "Country" "Amazonka.GuardDuty.Types.Country" "amazonka-guardduty-2.0-2NN502sGcQRH5risQZb24c" 'False) (C1 ('MetaCons "Country'" 'PrefixI 'True) (S1 ('MetaSel ('Just "countryCode") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "countryName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
newCountry :: Country Source #
Create a value of Country with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:countryCode:Country', country_countryCode - The country code of the remote IP address.
$sel:countryName:Country', country_countryName - The country name of the remote IP address.
DNSLogsConfigurationResult
data DNSLogsConfigurationResult Source #
Contains information on the status of DNS logs as a data source.
See: newDNSLogsConfigurationResult smart constructor.
Constructors
| DNSLogsConfigurationResult' DataSourceStatus |
Instances
newDNSLogsConfigurationResult Source #
Create a value of DNSLogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:DNSLogsConfigurationResult', dNSLogsConfigurationResult_status - Denotes whether DNS logs is enabled as a data source.
DataSourceConfigurations
data DataSourceConfigurations Source #
Contains information about which data sources are enabled.
See: newDataSourceConfigurations smart constructor.
Constructors
| DataSourceConfigurations' (Maybe KubernetesConfiguration) (Maybe MalwareProtectionConfiguration) (Maybe S3LogsConfiguration) |
Instances
newDataSourceConfigurations :: DataSourceConfigurations Source #
Create a value of DataSourceConfigurations with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:kubernetes:DataSourceConfigurations', dataSourceConfigurations_kubernetes - Describes whether any Kubernetes logs are enabled as data sources.
$sel:malwareProtection:DataSourceConfigurations', dataSourceConfigurations_malwareProtection - Describes whether Malware Protection is enabled as a data source.
$sel:s3Logs:DataSourceConfigurations', dataSourceConfigurations_s3Logs - Describes whether S3 data event logs are enabled as a data source.
DataSourceConfigurationsResult
data DataSourceConfigurationsResult Source #
Contains information on the status of data sources for the detector.
See: newDataSourceConfigurationsResult smart constructor.
Constructors
Instances
newDataSourceConfigurationsResult Source #
Arguments
| :: CloudTrailConfigurationResult | |
| -> DNSLogsConfigurationResult | |
| -> FlowLogsConfigurationResult | |
| -> S3LogsConfigurationResult | |
| -> DataSourceConfigurationsResult |
Create a value of DataSourceConfigurationsResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:kubernetes:DataSourceConfigurationsResult', dataSourceConfigurationsResult_kubernetes - An object that contains information on the status of all Kubernetes data
sources.
$sel:malwareProtection:DataSourceConfigurationsResult', dataSourceConfigurationsResult_malwareProtection - Describes the configuration of Malware Protection data sources.
$sel:cloudTrail:DataSourceConfigurationsResult', dataSourceConfigurationsResult_cloudTrail - An object that contains information on the status of CloudTrail as a
data source.
$sel:dNSLogs:DataSourceConfigurationsResult', dataSourceConfigurationsResult_dNSLogs - An object that contains information on the status of DNS logs as a data
source.
$sel:flowLogs:DataSourceConfigurationsResult', dataSourceConfigurationsResult_flowLogs - An object that contains information on the status of VPC flow logs as a
data source.
$sel:s3Logs:DataSourceConfigurationsResult', dataSourceConfigurationsResult_s3Logs - An object that contains information on the status of S3 Data event logs
as a data source.
DataSourceFreeTrial
data DataSourceFreeTrial Source #
Contains information about which data sources are enabled for the GuardDuty member account.
See: newDataSourceFreeTrial smart constructor.
Constructors
| DataSourceFreeTrial' (Maybe Int) |
Instances
newDataSourceFreeTrial :: DataSourceFreeTrial Source #
Create a value of DataSourceFreeTrial with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:freeTrialDaysRemaining:DataSourceFreeTrial', dataSourceFreeTrial_freeTrialDaysRemaining - A value that specifies the number of days left to use each enabled data
source.
DataSourcesFreeTrial
data DataSourcesFreeTrial Source #
Contains information about which data sources are enabled for the GuardDuty member account.
See: newDataSourcesFreeTrial smart constructor.
Constructors
Instances
newDataSourcesFreeTrial :: DataSourcesFreeTrial Source #
Create a value of DataSourcesFreeTrial with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:cloudTrail:DataSourcesFreeTrial', dataSourcesFreeTrial_cloudTrail - Describes whether any Amazon Web Services CloudTrail management event
logs are enabled as data sources.
$sel:dnsLogs:DataSourcesFreeTrial', dataSourcesFreeTrial_dnsLogs - Describes whether any DNS logs are enabled as data sources.
$sel:flowLogs:DataSourcesFreeTrial', dataSourcesFreeTrial_flowLogs - Describes whether any VPC Flow logs are enabled as data sources.
$sel:kubernetes:DataSourcesFreeTrial', dataSourcesFreeTrial_kubernetes - Describes whether any Kubernetes logs are enabled as data sources.
$sel:malwareProtection:DataSourcesFreeTrial', dataSourcesFreeTrial_malwareProtection - Describes whether Malware Protection is enabled as a data source.
$sel:s3Logs:DataSourcesFreeTrial', dataSourcesFreeTrial_s3Logs - Describes whether any S3 data event logs are enabled as data sources.
DefaultServerSideEncryption
data DefaultServerSideEncryption Source #
Contains information on the server side encryption method used in the S3 bucket. See S3 Server-Side Encryption for more information.
See: newDefaultServerSideEncryption smart constructor.
Constructors
| DefaultServerSideEncryption' (Maybe Text) (Maybe Text) |
Instances
newDefaultServerSideEncryption :: DefaultServerSideEncryption Source #
Create a value of DefaultServerSideEncryption with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:encryptionType:DefaultServerSideEncryption', defaultServerSideEncryption_encryptionType - The type of encryption used for objects within the S3 bucket.
$sel:kmsMasterKeyArn:DefaultServerSideEncryption', defaultServerSideEncryption_kmsMasterKeyArn - The Amazon Resource Name (ARN) of the KMS encryption key. Only available
if the bucket EncryptionType is aws:kms.
Destination
data Destination Source #
Contains information about the publishing destination, including the ID, type, and status.
See: newDestination smart constructor.
Constructors
| Destination' Text DestinationType PublishingStatus |
Instances
Arguments
| :: Text | |
| -> DestinationType | |
| -> PublishingStatus | |
| -> Destination |
Create a value of Destination with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:destinationId:Destination', destination_destinationId - The unique ID of the publishing destination.
$sel:destinationType:Destination', destination_destinationType - The type of resource used for the publishing destination. Currently,
only Amazon S3 buckets are supported.
$sel:status:Destination', destination_status - The status of the publishing destination.
DestinationProperties
data DestinationProperties Source #
Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.
See: newDestinationProperties smart constructor.
Constructors
| DestinationProperties' (Maybe Text) (Maybe Text) |
Instances
newDestinationProperties :: DestinationProperties Source #
Create a value of DestinationProperties with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:destinationArn:DestinationProperties', destinationProperties_destinationArn - The ARN of the resource to publish to.
To specify an S3 bucket folder use the following format:
arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/
$sel:kmsKeyArn:DestinationProperties', destinationProperties_kmsKeyArn - The ARN of the KMS key to use for encryption.
DnsRequestAction
data DnsRequestAction Source #
Contains information about the DNS_REQUEST action described in this finding.
See: newDnsRequestAction smart constructor.
Instances
newDnsRequestAction :: DnsRequestAction Source #
Create a value of DnsRequestAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:blocked:DnsRequestAction', dnsRequestAction_blocked - Indicates whether the targeted port is blocked.
$sel:domain:DnsRequestAction', dnsRequestAction_domain - The domain information for the API request.
$sel:protocol:DnsRequestAction', dnsRequestAction_protocol - The network connection protocol observed in the activity that prompted
GuardDuty to generate the finding.
DomainDetails
data DomainDetails Source #
Contains information about the domain.
See: newDomainDetails smart constructor.
Constructors
| DomainDetails' (Maybe Text) |
Instances
newDomainDetails :: DomainDetails Source #
Create a value of DomainDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:domain:DomainDetails', domainDetails_domain - The domain information for the Amazon Web Services API call.
EbsVolumeDetails
data EbsVolumeDetails Source #
Contains list of scanned and skipped EBS volumes with details.
See: newEbsVolumeDetails smart constructor.
Constructors
| EbsVolumeDetails' (Maybe [VolumeDetail]) (Maybe [VolumeDetail]) |
Instances
newEbsVolumeDetails :: EbsVolumeDetails Source #
Create a value of EbsVolumeDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:scannedVolumeDetails:EbsVolumeDetails', ebsVolumeDetails_scannedVolumeDetails - List of EBS volumes that were scanned.
$sel:skippedVolumeDetails:EbsVolumeDetails', ebsVolumeDetails_skippedVolumeDetails - List of EBS volumes that were skipped from the malware scan.
EbsVolumeScanDetails
data EbsVolumeScanDetails Source #
Contains details from the malware scan that created a finding.
See: newEbsVolumeScanDetails smart constructor.
Constructors
| EbsVolumeScanDetails' (Maybe POSIX) (Maybe ScanDetections) (Maybe Text) (Maybe POSIX) (Maybe [Text]) (Maybe Text) |
Instances
newEbsVolumeScanDetails :: EbsVolumeScanDetails Source #
Create a value of EbsVolumeScanDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:scanCompletedAt:EbsVolumeScanDetails', ebsVolumeScanDetails_scanCompletedAt - Returns the completion date and time of the malware scan.
$sel:scanDetections:EbsVolumeScanDetails', ebsVolumeScanDetails_scanDetections - Contains a complete view providing malware scan result details.
$sel:scanId:EbsVolumeScanDetails', ebsVolumeScanDetails_scanId - Unique Id of the malware scan that generated the finding.
$sel:scanStartedAt:EbsVolumeScanDetails', ebsVolumeScanDetails_scanStartedAt - Returns the start date and time of the malware scan.
$sel:sources:EbsVolumeScanDetails', ebsVolumeScanDetails_sources - Contains list of threat intelligence sources used to detect threats.
$sel:triggerFindingId:EbsVolumeScanDetails', ebsVolumeScanDetails_triggerFindingId - GuardDuty finding ID that triggered a malware scan.
EbsVolumesResult
data EbsVolumesResult Source #
Describes the configuration of scanning EBS volumes as a data source.
See: newEbsVolumesResult smart constructor.
Constructors
| EbsVolumesResult' (Maybe Text) (Maybe DataSourceStatus) |
Instances
newEbsVolumesResult :: EbsVolumesResult Source #
Create a value of EbsVolumesResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:reason:EbsVolumesResult', ebsVolumesResult_reason - Specifies the reason why scanning EBS volumes (Malware Protection) was
not enabled as a data source.
$sel:status:EbsVolumesResult', ebsVolumesResult_status - Describes whether scanning EBS volumes is enabled as a data source.
EcsClusterDetails
data EcsClusterDetails Source #
Contains information about the details of the ECS Cluster.
See: newEcsClusterDetails smart constructor.
Constructors
| EcsClusterDetails' (Maybe Int) (Maybe Text) (Maybe Text) (Maybe Int) (Maybe Int) (Maybe Text) (Maybe [Tag]) (Maybe EcsTaskDetails) |
Instances
newEcsClusterDetails :: EcsClusterDetails Source #
Create a value of EcsClusterDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:activeServicesCount:EcsClusterDetails', ecsClusterDetails_activeServicesCount - The number of services that are running on the cluster in an ACTIVE
state.
EcsClusterDetails, ecsClusterDetails_arn - The Amazon Resource Name (ARN) that identifies the cluster.
$sel:name:EcsClusterDetails', ecsClusterDetails_name - The name of the ECS Cluster.
$sel:registeredContainerInstancesCount:EcsClusterDetails', ecsClusterDetails_registeredContainerInstancesCount - The number of container instances registered into the cluster.
$sel:runningTasksCount:EcsClusterDetails', ecsClusterDetails_runningTasksCount - The number of tasks in the cluster that are in the RUNNING state.
$sel:status:EcsClusterDetails', ecsClusterDetails_status - The status of the ECS cluster.
EcsClusterDetails, ecsClusterDetails_tags - The tags of the ECS Cluster.
$sel:taskDetails:EcsClusterDetails', ecsClusterDetails_taskDetails - Contains information about the details of the ECS Task.
EcsTaskDetails
data EcsTaskDetails Source #
Contains information about the task in an ECS cluster.
See: newEcsTaskDetails smart constructor.
Constructors
| EcsTaskDetails' (Maybe Text) (Maybe [Container]) (Maybe Text) (Maybe Text) (Maybe POSIX) (Maybe Text) (Maybe [Tag]) (Maybe POSIX) (Maybe Text) (Maybe [Volume]) |
Instances
newEcsTaskDetails :: EcsTaskDetails Source #
Create a value of EcsTaskDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:EcsTaskDetails', ecsTaskDetails_arn - The Amazon Resource Name (ARN) of the task.
$sel:containers:EcsTaskDetails', ecsTaskDetails_containers - The containers that's associated with the task.
$sel:definitionArn:EcsTaskDetails', ecsTaskDetails_definitionArn - The ARN of the task definition that creates the task.
$sel:group':EcsTaskDetails', ecsTaskDetails_group - The name of the task group that's associated with the task.
$sel:startedAt:EcsTaskDetails', ecsTaskDetails_startedAt - The Unix timestamp for the time when the task started.
$sel:startedBy:EcsTaskDetails', ecsTaskDetails_startedBy - Contains the tag specified when a task is started.
$sel:tags:EcsTaskDetails', ecsTaskDetails_tags - The tags of the ECS Task.
$sel:taskCreatedAt:EcsTaskDetails', ecsTaskDetails_taskCreatedAt - The Unix timestamp for the time when the task was created.
$sel:version:EcsTaskDetails', ecsTaskDetails_version - The version counter for the task.
$sel:volumes:EcsTaskDetails', ecsTaskDetails_volumes - The list of data volume definitions for the task.
EksClusterDetails
data EksClusterDetails Source #
Details about the EKS cluster involved in a Kubernetes finding.
See: newEksClusterDetails smart constructor.
Constructors
| EksClusterDetails' (Maybe Text) (Maybe POSIX) (Maybe Text) (Maybe Text) (Maybe [Tag]) (Maybe Text) |
Instances
newEksClusterDetails :: EksClusterDetails Source #
Create a value of EksClusterDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:EksClusterDetails', eksClusterDetails_arn - EKS cluster ARN.
$sel:createdAt:EksClusterDetails', eksClusterDetails_createdAt - The timestamp when the EKS cluster was created.
$sel:name:EksClusterDetails', eksClusterDetails_name - EKS cluster name.
$sel:status:EksClusterDetails', eksClusterDetails_status - The EKS cluster status.
$sel:tags:EksClusterDetails', eksClusterDetails_tags - The EKS cluster tags.
$sel:vpcId:EksClusterDetails', eksClusterDetails_vpcId - The VPC ID to which the EKS cluster is attached.
Evidence
Contains information about the reason that the finding was generated.
See: newEvidence smart constructor.
Constructors
| Evidence' (Maybe [ThreatIntelligenceDetail]) |
Instances
| FromJSON Evidence Source # | |
| Generic Evidence Source # | |
| Read Evidence Source # | |
| Show Evidence Source # | |
| NFData Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence | |
| Eq Evidence Source # | |
| Hashable Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence | |
| type Rep Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence type Rep Evidence = D1 ('MetaData "Evidence" "Amazonka.GuardDuty.Types.Evidence" "amazonka-guardduty-2.0-2NN502sGcQRH5risQZb24c" 'False) (C1 ('MetaCons "Evidence'" 'PrefixI 'True) (S1 ('MetaSel ('Just "threatIntelligenceDetails") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [ThreatIntelligenceDetail])))) | |
newEvidence :: Evidence Source #
Create a value of Evidence with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:threatIntelligenceDetails:Evidence', evidence_threatIntelligenceDetails - A list of threat intelligence details related to the evidence.
FilterCondition
data FilterCondition Source #
Contains information about the condition.
See: newFilterCondition smart constructor.
Instances
newFilterCondition :: FilterCondition Source #
Create a value of FilterCondition with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:equalsValue:FilterCondition', filterCondition_equalsValue - Represents an equal ____ condition to be applied to a single field
when querying for scan entries.
$sel:greaterThan:FilterCondition', filterCondition_greaterThan - Represents a greater than condition to be applied to a single field
when querying for scan entries.
$sel:lessThan:FilterCondition', filterCondition_lessThan - Represents a less than condition to be applied to a single field when
querying for scan entries.
FilterCriteria
data FilterCriteria Source #
Represents the criteria to be used in the filter for describing scan entries.
See: newFilterCriteria smart constructor.
Constructors
| FilterCriteria' (Maybe [FilterCriterion]) |
Instances
newFilterCriteria :: FilterCriteria Source #
Create a value of FilterCriteria with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:filterCriterion:FilterCriteria', filterCriteria_filterCriterion - Represents a condition that when matched will be added to the response
of the operation.
FilterCriterion
data FilterCriterion Source #
Represents a condition that when matched will be added to the response of the operation. Irrespective of using any filter criteria, an administrator account can view the scan entries for all of its member accounts. However, each member account can view the scan entries only for their own account.
See: newFilterCriterion smart constructor.
Constructors
| FilterCriterion' (Maybe CriterionKey) (Maybe FilterCondition) |
Instances
newFilterCriterion :: FilterCriterion Source #
Create a value of FilterCriterion with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:criterionKey:FilterCriterion', filterCriterion_criterionKey - An enum value representing possible scan properties to match with given
scan entries.
$sel:filterCondition:FilterCriterion', filterCriterion_filterCondition - Contains information about the condition.
Finding
Contains information about the finding, which is generated when abnormal or suspicious activity is detected.
See: newFinding smart constructor.
Constructors
| Finding' (Maybe Double) (Maybe Text) (Maybe Text) (Maybe ServiceInfo) (Maybe Text) Text Text Text Text Text Resource Text Double Text Text |
Instances
Create a value of Finding with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:confidence:Finding', finding_confidence - The confidence score for the finding.
$sel:description:Finding', finding_description - The description of the finding.
$sel:partition:Finding', finding_partition - The partition associated with the finding.
$sel:service:Finding', finding_service - Undocumented member.
$sel:title:Finding', finding_title - The title of the finding.
$sel:accountId:Finding', finding_accountId - The ID of the account in which the finding was generated.
$sel:arn:Finding', finding_arn - The ARN of the finding.
$sel:createdAt:Finding', finding_createdAt - The time and date when the finding was created.
$sel:id:Finding', finding_id - The ID of the finding.
$sel:region:Finding', finding_region - The Region where the finding was generated.
$sel:resource:Finding', finding_resource - Undocumented member.
$sel:schemaVersion:Finding', finding_schemaVersion - The version of the schema used for the finding.
$sel:severity:Finding', finding_severity - The severity of the finding.
$sel:type':Finding', finding_type - The type of finding.
$sel:updatedAt:Finding', finding_updatedAt - The time and date when the finding was last updated.
FindingCriteria
data FindingCriteria Source #
Contains information about the criteria used for querying findings.
See: newFindingCriteria smart constructor.
Constructors
| FindingCriteria' (Maybe (HashMap Text Condition)) |
Instances
newFindingCriteria :: FindingCriteria Source #
Create a value of FindingCriteria with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:criterion:FindingCriteria', findingCriteria_criterion - Represents a map of finding properties that match specified conditions
and values when querying findings.
FindingStatistics
data FindingStatistics Source #
Contains information about finding statistics.
See: newFindingStatistics smart constructor.
Constructors
| FindingStatistics' (Maybe (HashMap Text Int)) |
Instances
newFindingStatistics :: FindingStatistics Source #
Create a value of FindingStatistics with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:countBySeverity:FindingStatistics', findingStatistics_countBySeverity - Represents a map of severity to count statistics for a set of findings.
FlowLogsConfigurationResult
data FlowLogsConfigurationResult Source #
Contains information on the status of VPC flow logs as a data source.
See: newFlowLogsConfigurationResult smart constructor.
Constructors
| FlowLogsConfigurationResult' DataSourceStatus |
Instances
newFlowLogsConfigurationResult Source #
Create a value of FlowLogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:FlowLogsConfigurationResult', flowLogsConfigurationResult_status - Denotes whether VPC flow logs is enabled as a data source.
GeoLocation
data GeoLocation Source #
Contains information about the location of the remote IP address.
See: newGeoLocation smart constructor.
Constructors
| GeoLocation' (Maybe Double) (Maybe Double) |
Instances
newGeoLocation :: GeoLocation Source #
Create a value of GeoLocation with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:lat:GeoLocation', geoLocation_lat - The latitude information of the remote IP address.
$sel:lon:GeoLocation', geoLocation_lon - The longitude information of the remote IP address.
HighestSeverityThreatDetails
data HighestSeverityThreatDetails Source #
Contains details of the highest severity threat detected during scan and number of infected files.
See: newHighestSeverityThreatDetails smart constructor.
Instances
newHighestSeverityThreatDetails :: HighestSeverityThreatDetails Source #
Create a value of HighestSeverityThreatDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:count:HighestSeverityThreatDetails', highestSeverityThreatDetails_count - Total number of infected files with the highest severity threat
detected.
$sel:severity:HighestSeverityThreatDetails', highestSeverityThreatDetails_severity - Severity level of the highest severity threat detected.
$sel:threatName:HighestSeverityThreatDetails', highestSeverityThreatDetails_threatName - Threat name of the highest severity threat detected as part of the
malware scan.
HostPath
Represents a pre-existing file or directory on the host machine that the volume maps to.
See: newHostPath smart constructor.
Instances
| FromJSON HostPath Source # | |
| Generic HostPath Source # | |
| Read HostPath Source # | |
| Show HostPath Source # | |
| NFData HostPath Source # | |
Defined in Amazonka.GuardDuty.Types.HostPath | |
| Eq HostPath Source # | |
| Hashable HostPath Source # | |
Defined in Amazonka.GuardDuty.Types.HostPath | |
| type Rep HostPath Source # | |
Defined in Amazonka.GuardDuty.Types.HostPath | |
newHostPath :: HostPath Source #
Create a value of HostPath with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:path:HostPath', hostPath_path - Path of the file or directory on the host that the volume maps to.
IamInstanceProfile
data IamInstanceProfile Source #
Contains information about the EC2 instance profile.
See: newIamInstanceProfile smart constructor.
Constructors
| IamInstanceProfile' (Maybe Text) (Maybe Text) |
Instances
newIamInstanceProfile :: IamInstanceProfile Source #
Create a value of IamInstanceProfile with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:IamInstanceProfile', iamInstanceProfile_arn - The profile ARN of the EC2 instance.
$sel:id:IamInstanceProfile', iamInstanceProfile_id - The profile ID of the EC2 instance.
InstanceDetails
data InstanceDetails Source #
Contains information about the details of an instance.
See: newInstanceDetails smart constructor.
Constructors
| InstanceDetails' (Maybe Text) (Maybe IamInstanceProfile) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [NetworkInterface]) (Maybe Text) (Maybe Text) (Maybe [ProductCode]) (Maybe [Tag]) |
Instances
newInstanceDetails :: InstanceDetails Source #
Create a value of InstanceDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:availabilityZone:InstanceDetails', instanceDetails_availabilityZone - The Availability Zone of the EC2 instance.
$sel:iamInstanceProfile:InstanceDetails', instanceDetails_iamInstanceProfile - The profile information of the EC2 instance.
$sel:imageDescription:InstanceDetails', instanceDetails_imageDescription - The image description of the EC2 instance.
$sel:imageId:InstanceDetails', instanceDetails_imageId - The image ID of the EC2 instance.
$sel:instanceId:InstanceDetails', instanceDetails_instanceId - The ID of the EC2 instance.
$sel:instanceState:InstanceDetails', instanceDetails_instanceState - The state of the EC2 instance.
$sel:instanceType:InstanceDetails', instanceDetails_instanceType - The type of the EC2 instance.
$sel:launchTime:InstanceDetails', instanceDetails_launchTime - The launch time of the EC2 instance.
$sel:networkInterfaces:InstanceDetails', instanceDetails_networkInterfaces - The elastic network interface information of the EC2 instance.
$sel:outpostArn:InstanceDetails', instanceDetails_outpostArn - The Amazon Resource Name (ARN) of the Amazon Web Services Outpost. Only
applicable to Amazon Web Services Outposts instances.
$sel:platform:InstanceDetails', instanceDetails_platform - The platform of the EC2 instance.
$sel:productCodes:InstanceDetails', instanceDetails_productCodes - The product code of the EC2 instance.
$sel:tags:InstanceDetails', instanceDetails_tags - The tags of the EC2 instance.
Invitation
data Invitation Source #
Contains information about the invitation to become a member account.
See: newInvitation smart constructor.
Instances
newInvitation :: Invitation Source #
Create a value of Invitation with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:Invitation', invitation_accountId - The ID of the account that the invitation was sent from.
$sel:invitationId:Invitation', invitation_invitationId - The ID of the invitation. This value is used to validate the inviter
account to the member account.
$sel:invitedAt:Invitation', invitation_invitedAt - The timestamp when the invitation was sent.
$sel:relationshipStatus:Invitation', invitation_relationshipStatus - The status of the relationship between the inviter and invitee accounts.
KubernetesApiCallAction
data KubernetesApiCallAction Source #
Information about the Kubernetes API call action described in this finding.
See: newKubernetesApiCallAction smart constructor.
Constructors
| KubernetesApiCallAction' (Maybe Text) (Maybe RemoteIpDetails) (Maybe Text) (Maybe [Text]) (Maybe Int) (Maybe Text) (Maybe Text) |
Instances
newKubernetesApiCallAction :: KubernetesApiCallAction Source #
Create a value of KubernetesApiCallAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:parameters:KubernetesApiCallAction', kubernetesApiCallAction_parameters - Parameters related to the Kubernetes API call action.
$sel:remoteIpDetails:KubernetesApiCallAction', kubernetesApiCallAction_remoteIpDetails - Undocumented member.
$sel:requestUri:KubernetesApiCallAction', kubernetesApiCallAction_requestUri - The Kubernetes API request URI.
$sel:sourceIps:KubernetesApiCallAction', kubernetesApiCallAction_sourceIps - The IP of the Kubernetes API caller and the IPs of any proxies or load
balancers between the caller and the API endpoint.
$sel:statusCode:KubernetesApiCallAction', kubernetesApiCallAction_statusCode - The resulting HTTP response code of the Kubernetes API call action.
$sel:userAgent:KubernetesApiCallAction', kubernetesApiCallAction_userAgent - The user agent of the caller of the Kubernetes API.
$sel:verb:KubernetesApiCallAction', kubernetesApiCallAction_verb - The Kubernetes API request HTTP verb.
KubernetesAuditLogsConfiguration
data KubernetesAuditLogsConfiguration Source #
Describes whether Kubernetes audit logs are enabled as a data source.
See: newKubernetesAuditLogsConfiguration smart constructor.
Constructors
| KubernetesAuditLogsConfiguration' Bool |
Instances
newKubernetesAuditLogsConfiguration Source #
Create a value of KubernetesAuditLogsConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:enable:KubernetesAuditLogsConfiguration', kubernetesAuditLogsConfiguration_enable - The status of Kubernetes audit logs as a data source.
KubernetesAuditLogsConfigurationResult
data KubernetesAuditLogsConfigurationResult Source #
Describes whether Kubernetes audit logs are enabled as a data source.
See: newKubernetesAuditLogsConfigurationResult smart constructor.
Instances
newKubernetesAuditLogsConfigurationResult Source #
Arguments
| :: DataSourceStatus | |
| -> KubernetesAuditLogsConfigurationResult |
Create a value of KubernetesAuditLogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:KubernetesAuditLogsConfigurationResult', kubernetesAuditLogsConfigurationResult_status - A value that describes whether Kubernetes audit logs are enabled as a
data source.
KubernetesConfiguration
data KubernetesConfiguration Source #
Describes whether any Kubernetes data sources are enabled.
See: newKubernetesConfiguration smart constructor.
Instances
newKubernetesConfiguration Source #
Arguments
| :: KubernetesAuditLogsConfiguration | |
| -> KubernetesConfiguration |
Create a value of KubernetesConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:auditLogs:KubernetesConfiguration', kubernetesConfiguration_auditLogs - The status of Kubernetes audit logs as a data source.
KubernetesConfigurationResult
data KubernetesConfigurationResult Source #
Describes whether any Kubernetes logs will be enabled as a data source.
See: newKubernetesConfigurationResult smart constructor.
Instances
newKubernetesConfigurationResult Source #
Create a value of KubernetesConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:auditLogs:KubernetesConfigurationResult', kubernetesConfigurationResult_auditLogs - Describes whether Kubernetes audit logs are enabled as a data source.
KubernetesDataSourceFreeTrial
data KubernetesDataSourceFreeTrial Source #
Provides details about the Kubernetes resources when it is enabled as a data source.
See: newKubernetesDataSourceFreeTrial smart constructor.
Constructors
| KubernetesDataSourceFreeTrial' (Maybe DataSourceFreeTrial) |
Instances
newKubernetesDataSourceFreeTrial :: KubernetesDataSourceFreeTrial Source #
Create a value of KubernetesDataSourceFreeTrial with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:auditLogs:KubernetesDataSourceFreeTrial', kubernetesDataSourceFreeTrial_auditLogs - Describes whether Kubernetes audit logs are enabled as a data source.
KubernetesDetails
data KubernetesDetails Source #
Details about Kubernetes resources such as a Kubernetes user or workload resource involved in a Kubernetes finding.
See: newKubernetesDetails smart constructor.
Constructors
| KubernetesDetails' (Maybe KubernetesUserDetails) (Maybe KubernetesWorkloadDetails) |
Instances
newKubernetesDetails :: KubernetesDetails Source #
Create a value of KubernetesDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:kubernetesUserDetails:KubernetesDetails', kubernetesDetails_kubernetesUserDetails - Details about the Kubernetes user involved in a Kubernetes finding.
$sel:kubernetesWorkloadDetails:KubernetesDetails', kubernetesDetails_kubernetesWorkloadDetails - Details about the Kubernetes workload involved in a Kubernetes finding.
KubernetesUserDetails
data KubernetesUserDetails Source #
Details about the Kubernetes user involved in a Kubernetes finding.
See: newKubernetesUserDetails smart constructor.
Instances
newKubernetesUserDetails :: KubernetesUserDetails Source #
Create a value of KubernetesUserDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:groups:KubernetesUserDetails', kubernetesUserDetails_groups - The groups that include the user who called the Kubernetes API.
$sel:uid:KubernetesUserDetails', kubernetesUserDetails_uid - The user ID of the user who called the Kubernetes API.
$sel:username:KubernetesUserDetails', kubernetesUserDetails_username - The username of the user who called the Kubernetes API.
KubernetesWorkloadDetails
data KubernetesWorkloadDetails Source #
Details about the Kubernetes workload involved in a Kubernetes finding.
See: newKubernetesWorkloadDetails smart constructor.
Constructors
| KubernetesWorkloadDetails' (Maybe [Container]) (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [Volume]) |
Instances
newKubernetesWorkloadDetails :: KubernetesWorkloadDetails Source #
Create a value of KubernetesWorkloadDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:containers:KubernetesWorkloadDetails', kubernetesWorkloadDetails_containers - Containers running as part of the Kubernetes workload.
$sel:hostNetwork:KubernetesWorkloadDetails', kubernetesWorkloadDetails_hostNetwork - Whether the hostNetwork flag is enabled for the pods included in the
workload.
KubernetesWorkloadDetails, kubernetesWorkloadDetails_name - Kubernetes workload name.
$sel:namespace:KubernetesWorkloadDetails', kubernetesWorkloadDetails_namespace - Kubernetes namespace that the workload is part of.
$sel:type':KubernetesWorkloadDetails', kubernetesWorkloadDetails_type - Kubernetes workload type (e.g. Pod, Deployment, etc.).
$sel:uid:KubernetesWorkloadDetails', kubernetesWorkloadDetails_uid - Kubernetes workload ID.
$sel:volumes:KubernetesWorkloadDetails', kubernetesWorkloadDetails_volumes - Volumes used by the Kubernetes workload.
LocalIpDetails
data LocalIpDetails Source #
Contains information about the local IP address of the connection.
See: newLocalIpDetails smart constructor.
Constructors
| LocalIpDetails' (Maybe Text) |
Instances
newLocalIpDetails :: LocalIpDetails Source #
Create a value of LocalIpDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ipAddressV4:LocalIpDetails', localIpDetails_ipAddressV4 - The IPv4 local address of the connection.
LocalPortDetails
data LocalPortDetails Source #
Contains information about the port for the local connection.
See: newLocalPortDetails smart constructor.
Constructors
| LocalPortDetails' (Maybe Int) (Maybe Text) |
Instances
newLocalPortDetails :: LocalPortDetails Source #
Create a value of LocalPortDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:port:LocalPortDetails', localPortDetails_port - The port number of the local connection.
$sel:portName:LocalPortDetails', localPortDetails_portName - The port name of the local connection.
MalwareProtectionConfiguration
data MalwareProtectionConfiguration Source #
Describes whether Malware Protection will be enabled as a data source.
See: newMalwareProtectionConfiguration smart constructor.
Constructors
| MalwareProtectionConfiguration' (Maybe ScanEc2InstanceWithFindings) |
Instances
newMalwareProtectionConfiguration :: MalwareProtectionConfiguration Source #
Create a value of MalwareProtectionConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:scanEc2InstanceWithFindings:MalwareProtectionConfiguration', malwareProtectionConfiguration_scanEc2InstanceWithFindings - Describes the configuration of Malware Protection for EC2 instances with
findings.
MalwareProtectionConfigurationResult
data MalwareProtectionConfigurationResult Source #
An object that contains information on the status of all Malware Protection data sources.
See: newMalwareProtectionConfigurationResult smart constructor.
Constructors
| MalwareProtectionConfigurationResult' (Maybe ScanEc2InstanceWithFindingsResult) (Maybe Text) |
Instances
newMalwareProtectionConfigurationResult :: MalwareProtectionConfigurationResult Source #
Create a value of MalwareProtectionConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:scanEc2InstanceWithFindings:MalwareProtectionConfigurationResult', malwareProtectionConfigurationResult_scanEc2InstanceWithFindings - Describes the configuration of Malware Protection for EC2 instances with
findings.
$sel:serviceRole:MalwareProtectionConfigurationResult', malwareProtectionConfigurationResult_serviceRole - The GuardDuty Malware Protection service role.
MalwareProtectionDataSourceFreeTrial
data MalwareProtectionDataSourceFreeTrial Source #
Provides details about Malware Protection when it is enabled as a data source.
See: newMalwareProtectionDataSourceFreeTrial smart constructor.
Constructors
| MalwareProtectionDataSourceFreeTrial' (Maybe DataSourceFreeTrial) |
Instances
newMalwareProtectionDataSourceFreeTrial :: MalwareProtectionDataSourceFreeTrial Source #
Create a value of MalwareProtectionDataSourceFreeTrial with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:scanEc2InstanceWithFindings:MalwareProtectionDataSourceFreeTrial', malwareProtectionDataSourceFreeTrial_scanEc2InstanceWithFindings - Describes whether Malware Protection for EC2 instances with findings is
enabled as a data source.
Member
Contains information about the member account.
See: newMember smart constructor.
Instances
Create a value of Member with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:administratorId:Member', member_administratorId - The administrator account ID.
$sel:detectorId:Member', member_detectorId - The detector ID of the member account.
$sel:invitedAt:Member', member_invitedAt - The timestamp when the invitation was sent.
$sel:accountId:Member', member_accountId - The ID of the member account.
$sel:masterId:Member', member_masterId - The administrator account ID.
$sel:email:Member', member_email - The email address of the member account.
$sel:relationshipStatus:Member', member_relationshipStatus - The status of the relationship between the member and the administrator.
$sel:updatedAt:Member', member_updatedAt - The last-updated timestamp of the member.
MemberDataSourceConfiguration
data MemberDataSourceConfiguration Source #
Contains information on which data sources are enabled for a member account.
See: newMemberDataSourceConfiguration smart constructor.
Instances
newMemberDataSourceConfiguration Source #
Arguments
| :: Text | |
| -> DataSourceConfigurationsResult | |
| -> MemberDataSourceConfiguration |
Create a value of MemberDataSourceConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:MemberDataSourceConfiguration', memberDataSourceConfiguration_accountId - The account ID for the member account.
$sel:dataSources:MemberDataSourceConfiguration', memberDataSourceConfiguration_dataSources - Contains information on the status of data sources for the account.
NetworkConnectionAction
data NetworkConnectionAction Source #
Contains information about the NETWORK_CONNECTION action described in the finding.
See: newNetworkConnectionAction smart constructor.
Constructors
| NetworkConnectionAction' (Maybe Bool) (Maybe Text) (Maybe LocalIpDetails) (Maybe LocalPortDetails) (Maybe Text) (Maybe RemoteIpDetails) (Maybe RemotePortDetails) |
Instances
newNetworkConnectionAction :: NetworkConnectionAction Source #
Create a value of NetworkConnectionAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:blocked:NetworkConnectionAction', networkConnectionAction_blocked - Indicates whether EC2 blocked the network connection to your instance.
$sel:connectionDirection:NetworkConnectionAction', networkConnectionAction_connectionDirection - The network connection direction.
$sel:localIpDetails:NetworkConnectionAction', networkConnectionAction_localIpDetails - The local IP information of the connection.
$sel:localPortDetails:NetworkConnectionAction', networkConnectionAction_localPortDetails - The local port information of the connection.
$sel:protocol:NetworkConnectionAction', networkConnectionAction_protocol - The network connection protocol.
$sel:remoteIpDetails:NetworkConnectionAction', networkConnectionAction_remoteIpDetails - The remote IP information of the connection.
$sel:remotePortDetails:NetworkConnectionAction', networkConnectionAction_remotePortDetails - The remote port information of the connection.
NetworkInterface
data NetworkInterface Source #
Contains information about the elastic network interface of the EC2 instance.
See: newNetworkInterface smart constructor.
Constructors
| NetworkInterface' (Maybe [Text]) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [PrivateIpAddressDetails]) (Maybe Text) (Maybe Text) (Maybe [SecurityGroup]) (Maybe Text) (Maybe Text) |
Instances
newNetworkInterface :: NetworkInterface Source #
Create a value of NetworkInterface with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ipv6Addresses:NetworkInterface', networkInterface_ipv6Addresses - A list of IPv6 addresses for the EC2 instance.
$sel:networkInterfaceId:NetworkInterface', networkInterface_networkInterfaceId - The ID of the network interface.
NetworkInterface, networkInterface_privateDnsName - The private DNS name of the EC2 instance.
NetworkInterface, networkInterface_privateIpAddress - The private IP address of the EC2 instance.
$sel:privateIpAddresses:NetworkInterface', networkInterface_privateIpAddresses - Other private IP address information of the EC2 instance.
$sel:publicDnsName:NetworkInterface', networkInterface_publicDnsName - The public DNS name of the EC2 instance.
$sel:publicIp:NetworkInterface', networkInterface_publicIp - The public IP address of the EC2 instance.
$sel:securityGroups:NetworkInterface', networkInterface_securityGroups - The security groups associated with the EC2 instance.
$sel:subnetId:NetworkInterface', networkInterface_subnetId - The subnet ID of the EC2 instance.
$sel:vpcId:NetworkInterface', networkInterface_vpcId - The VPC ID of the EC2 instance.
Organization
data Organization Source #
Contains information about the ISP organization of the remote IP address.
See: newOrganization smart constructor.
Instances
newOrganization :: Organization Source #
Create a value of Organization with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:asn:Organization', organization_asn - The Autonomous System Number (ASN) of the internet provider of the
remote IP address.
$sel:asnOrg:Organization', organization_asnOrg - The organization that registered this ASN.
$sel:isp:Organization', organization_isp - The ISP information for the internet provider.
$sel:org:Organization', organization_org - The name of the internet provider.
OrganizationDataSourceConfigurations
data OrganizationDataSourceConfigurations Source #
An object that contains information on which data sources will be configured to be automatically enabled for new members within the organization.
See: newOrganizationDataSourceConfigurations smart constructor.
Constructors
| OrganizationDataSourceConfigurations' (Maybe OrganizationKubernetesConfiguration) (Maybe OrganizationMalwareProtectionConfiguration) (Maybe OrganizationS3LogsConfiguration) |
Instances
newOrganizationDataSourceConfigurations :: OrganizationDataSourceConfigurations Source #
Create a value of OrganizationDataSourceConfigurations with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:kubernetes:OrganizationDataSourceConfigurations', organizationDataSourceConfigurations_kubernetes - Describes the configuration of Kubernetes data sources for new members
of the organization.
$sel:malwareProtection:OrganizationDataSourceConfigurations', organizationDataSourceConfigurations_malwareProtection - Describes the configuration of Malware Protection for new members of the
organization.
$sel:s3Logs:OrganizationDataSourceConfigurations', organizationDataSourceConfigurations_s3Logs - Describes whether S3 data event logs are enabled for new members of the
organization.
OrganizationDataSourceConfigurationsResult
data OrganizationDataSourceConfigurationsResult Source #
An object that contains information on which data sources are automatically enabled for new members within the organization.
See: newOrganizationDataSourceConfigurationsResult smart constructor.
Constructors
| OrganizationDataSourceConfigurationsResult' (Maybe OrganizationKubernetesConfigurationResult) (Maybe OrganizationMalwareProtectionConfigurationResult) OrganizationS3LogsConfigurationResult |
Instances
newOrganizationDataSourceConfigurationsResult Source #
Create a value of OrganizationDataSourceConfigurationsResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:kubernetes:OrganizationDataSourceConfigurationsResult', organizationDataSourceConfigurationsResult_kubernetes - Describes the configuration of Kubernetes data sources.
$sel:malwareProtection:OrganizationDataSourceConfigurationsResult', organizationDataSourceConfigurationsResult_malwareProtection - Describes the configuration of Malware Protection data source for an
organization.
$sel:s3Logs:OrganizationDataSourceConfigurationsResult', organizationDataSourceConfigurationsResult_s3Logs - Describes whether S3 data event logs are enabled as a data source.
OrganizationEbsVolumes
data OrganizationEbsVolumes Source #
Organization-wide EBS volumes scan configuration.
See: newOrganizationEbsVolumes smart constructor.
Constructors
| OrganizationEbsVolumes' (Maybe Bool) |
Instances
newOrganizationEbsVolumes :: OrganizationEbsVolumes Source #
Create a value of OrganizationEbsVolumes with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationEbsVolumes', organizationEbsVolumes_autoEnable - Whether scanning EBS volumes should be auto-enabled for new members
joining the organization.
OrganizationEbsVolumesResult
data OrganizationEbsVolumesResult Source #
An object that contains information on the status of whether EBS volumes scanning will be enabled as a data source for an organization.
See: newOrganizationEbsVolumesResult smart constructor.
Constructors
| OrganizationEbsVolumesResult' (Maybe Bool) |
Instances
newOrganizationEbsVolumesResult :: OrganizationEbsVolumesResult Source #
Create a value of OrganizationEbsVolumesResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationEbsVolumesResult', organizationEbsVolumesResult_autoEnable - An object that contains the status of whether scanning EBS volumes
should be auto-enabled for new members joining the organization.
OrganizationKubernetesAuditLogsConfiguration
data OrganizationKubernetesAuditLogsConfiguration Source #
Organization-wide Kubernetes audit logs configuration.
See: newOrganizationKubernetesAuditLogsConfiguration smart constructor.
Constructors
| OrganizationKubernetesAuditLogsConfiguration' Bool |
Instances
newOrganizationKubernetesAuditLogsConfiguration Source #
Arguments
| :: Bool |
|
| -> OrganizationKubernetesAuditLogsConfiguration |
Create a value of OrganizationKubernetesAuditLogsConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationKubernetesAuditLogsConfiguration', organizationKubernetesAuditLogsConfiguration_autoEnable - A value that contains information on whether Kubernetes audit logs
should be enabled automatically as a data source for the organization.
OrganizationKubernetesAuditLogsConfigurationResult
data OrganizationKubernetesAuditLogsConfigurationResult Source #
The current configuration of Kubernetes audit logs as a data source for the organization.
See: newOrganizationKubernetesAuditLogsConfigurationResult smart constructor.
Instances
newOrganizationKubernetesAuditLogsConfigurationResult Source #
Arguments
| :: Bool |
|
| -> OrganizationKubernetesAuditLogsConfigurationResult |
Create a value of OrganizationKubernetesAuditLogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationKubernetesAuditLogsConfigurationResult', organizationKubernetesAuditLogsConfigurationResult_autoEnable - Whether Kubernetes audit logs data source should be auto-enabled for new
members joining the organization.
OrganizationKubernetesConfiguration
data OrganizationKubernetesConfiguration Source #
Organization-wide Kubernetes data sources configurations.
See: newOrganizationKubernetesConfiguration smart constructor.
Instances
newOrganizationKubernetesConfiguration Source #
Create a value of OrganizationKubernetesConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:auditLogs:OrganizationKubernetesConfiguration', organizationKubernetesConfiguration_auditLogs - Whether Kubernetes audit logs data source should be auto-enabled for new
members joining the organization.
OrganizationKubernetesConfigurationResult
data OrganizationKubernetesConfigurationResult Source #
The current configuration of all Kubernetes data sources for the organization.
See: newOrganizationKubernetesConfigurationResult smart constructor.
Constructors
| OrganizationKubernetesConfigurationResult' OrganizationKubernetesAuditLogsConfigurationResult |
Instances
newOrganizationKubernetesConfigurationResult Source #
Arguments
| :: OrganizationKubernetesAuditLogsConfigurationResult | |
| -> OrganizationKubernetesConfigurationResult |
Create a value of OrganizationKubernetesConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:auditLogs:OrganizationKubernetesConfigurationResult', organizationKubernetesConfigurationResult_auditLogs - The current configuration of Kubernetes audit logs as a data source for
the organization.
OrganizationMalwareProtectionConfiguration
data OrganizationMalwareProtectionConfiguration Source #
Organization-wide Malware Protection configurations.
See: newOrganizationMalwareProtectionConfiguration smart constructor.
Constructors
| OrganizationMalwareProtectionConfiguration' (Maybe OrganizationScanEc2InstanceWithFindings) |
Instances
newOrganizationMalwareProtectionConfiguration :: OrganizationMalwareProtectionConfiguration Source #
Create a value of OrganizationMalwareProtectionConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:scanEc2InstanceWithFindings:OrganizationMalwareProtectionConfiguration', organizationMalwareProtectionConfiguration_scanEc2InstanceWithFindings - Whether Malware Protection for EC2 instances with findings should be
auto-enabled for new members joining the organization.
OrganizationMalwareProtectionConfigurationResult
data OrganizationMalwareProtectionConfigurationResult Source #
An object that contains information on the status of all Malware Protection data source for an organization.
See: newOrganizationMalwareProtectionConfigurationResult smart constructor.
Constructors
| OrganizationMalwareProtectionConfigurationResult' (Maybe OrganizationScanEc2InstanceWithFindingsResult) |
Instances
newOrganizationMalwareProtectionConfigurationResult :: OrganizationMalwareProtectionConfigurationResult Source #
Create a value of OrganizationMalwareProtectionConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:scanEc2InstanceWithFindings:OrganizationMalwareProtectionConfigurationResult', organizationMalwareProtectionConfigurationResult_scanEc2InstanceWithFindings - Describes the configuration for scanning EC2 instances with findings for
an organization.
OrganizationS3LogsConfiguration
data OrganizationS3LogsConfiguration Source #
Describes whether S3 data event logs will be automatically enabled for new members of the organization.
See: newOrganizationS3LogsConfiguration smart constructor.
Constructors
| OrganizationS3LogsConfiguration' Bool |
Instances
newOrganizationS3LogsConfiguration Source #
Create a value of OrganizationS3LogsConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationS3LogsConfiguration', organizationS3LogsConfiguration_autoEnable - A value that contains information on whether S3 data event logs will be
enabled automatically as a data source for the organization.
OrganizationS3LogsConfigurationResult
data OrganizationS3LogsConfigurationResult Source #
The current configuration of S3 data event logs as a data source for the organization.
See: newOrganizationS3LogsConfigurationResult smart constructor.
Constructors
| OrganizationS3LogsConfigurationResult' Bool |
Instances
newOrganizationS3LogsConfigurationResult Source #
Arguments
| :: Bool | |
| -> OrganizationS3LogsConfigurationResult |
Create a value of OrganizationS3LogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationS3LogsConfigurationResult', organizationS3LogsConfigurationResult_autoEnable - A value that describes whether S3 data event logs are automatically
enabled for new members of the organization.
OrganizationScanEc2InstanceWithFindings
data OrganizationScanEc2InstanceWithFindings Source #
Organization-wide EC2 instances with findings scan configuration.
See: newOrganizationScanEc2InstanceWithFindings smart constructor.
Instances
newOrganizationScanEc2InstanceWithFindings :: OrganizationScanEc2InstanceWithFindings Source #
Create a value of OrganizationScanEc2InstanceWithFindings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ebsVolumes:OrganizationScanEc2InstanceWithFindings', organizationScanEc2InstanceWithFindings_ebsVolumes - Whether scanning EBS volumes should be auto-enabled for new members
joining the organization.
OrganizationScanEc2InstanceWithFindingsResult
data OrganizationScanEc2InstanceWithFindingsResult Source #
An object that contains information on the status of scanning EC2 instances with findings for an organization.
See: newOrganizationScanEc2InstanceWithFindingsResult smart constructor.
Instances
newOrganizationScanEc2InstanceWithFindingsResult :: OrganizationScanEc2InstanceWithFindingsResult Source #
Create a value of OrganizationScanEc2InstanceWithFindingsResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ebsVolumes:OrganizationScanEc2InstanceWithFindingsResult', organizationScanEc2InstanceWithFindingsResult_ebsVolumes - Describes the configuration for scanning EBS volumes for an
organization.
Owner
Contains information on the owner of the bucket.
See: newOwner smart constructor.
Instances
| FromJSON Owner Source # | |
| Generic Owner Source # | |
| Read Owner Source # | |
| Show Owner Source # | |
| NFData Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner | |
| Eq Owner Source # | |
| Hashable Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner | |
| type Rep Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner | |
Create a value of Owner with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:id:Owner', owner_id - The canonical user ID of the bucket owner. For information about
locating your canonical user ID see
Finding Your Account Canonical User ID.
PermissionConfiguration
data PermissionConfiguration Source #
Contains information about how permissions are configured for the S3 bucket.
See: newPermissionConfiguration smart constructor.
Constructors
| PermissionConfiguration' (Maybe AccountLevelPermissions) (Maybe BucketLevelPermissions) |
Instances
newPermissionConfiguration :: PermissionConfiguration Source #
Create a value of PermissionConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountLevelPermissions:PermissionConfiguration', permissionConfiguration_accountLevelPermissions - Contains information about the account level permissions on the S3
bucket.
$sel:bucketLevelPermissions:PermissionConfiguration', permissionConfiguration_bucketLevelPermissions - Contains information about the bucket level permissions for the S3
bucket.
PortProbeAction
data PortProbeAction Source #
Contains information about the PORT_PROBE action described in the finding.
See: newPortProbeAction smart constructor.
Constructors
| PortProbeAction' (Maybe Bool) (Maybe [PortProbeDetail]) |
Instances
newPortProbeAction :: PortProbeAction Source #
Create a value of PortProbeAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:blocked:PortProbeAction', portProbeAction_blocked - Indicates whether EC2 blocked the port probe to the instance, such as
with an ACL.
$sel:portProbeDetails:PortProbeAction', portProbeAction_portProbeDetails - A list of objects related to port probe details.
PortProbeDetail
data PortProbeDetail Source #
Contains information about the port probe details.
See: newPortProbeDetail smart constructor.
Constructors
| PortProbeDetail' (Maybe LocalIpDetails) (Maybe LocalPortDetails) (Maybe RemoteIpDetails) |
Instances
newPortProbeDetail :: PortProbeDetail Source #
Create a value of PortProbeDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:localIpDetails:PortProbeDetail', portProbeDetail_localIpDetails - The local IP information of the connection.
$sel:localPortDetails:PortProbeDetail', portProbeDetail_localPortDetails - The local port information of the connection.
$sel:remoteIpDetails:PortProbeDetail', portProbeDetail_remoteIpDetails - The remote IP information of the connection.
PrivateIpAddressDetails
data PrivateIpAddressDetails Source #
Contains other private IP address information of the EC2 instance.
See: newPrivateIpAddressDetails smart constructor.
Constructors
| PrivateIpAddressDetails' (Maybe Text) (Maybe Text) |
Instances
newPrivateIpAddressDetails :: PrivateIpAddressDetails Source #
Create a value of PrivateIpAddressDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:privateDnsName:PrivateIpAddressDetails', privateIpAddressDetails_privateDnsName - The private DNS name of the EC2 instance.
$sel:privateIpAddress:PrivateIpAddressDetails', privateIpAddressDetails_privateIpAddress - The private IP address of the EC2 instance.
ProductCode
data ProductCode Source #
Contains information about the product code for the EC2 instance.
See: newProductCode smart constructor.
Constructors
| ProductCode' (Maybe Text) (Maybe Text) |
Instances
newProductCode :: ProductCode Source #
Create a value of ProductCode with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:code:ProductCode', productCode_code - The product code information.
$sel:productType:ProductCode', productCode_productType - The product code type.
PublicAccess
data PublicAccess Source #
Describes the public access policies that apply to the S3 bucket.
See: newPublicAccess smart constructor.
Constructors
| PublicAccess' (Maybe Text) (Maybe PermissionConfiguration) |
Instances
newPublicAccess :: PublicAccess Source #
Create a value of PublicAccess with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:effectivePermission:PublicAccess', publicAccess_effectivePermission - Describes the effective permission on this bucket after factoring all
attached policies.
$sel:permissionConfiguration:PublicAccess', publicAccess_permissionConfiguration - Contains information about how permissions are configured for the S3
bucket.
RemoteAccountDetails
data RemoteAccountDetails Source #
Contains details about the remote Amazon Web Services account that made the API call.
See: newRemoteAccountDetails smart constructor.
Constructors
| RemoteAccountDetails' (Maybe Text) (Maybe Bool) |
Instances
newRemoteAccountDetails :: RemoteAccountDetails Source #
Create a value of RemoteAccountDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:RemoteAccountDetails', remoteAccountDetails_accountId - The Amazon Web Services account ID of the remote API caller.
$sel:affiliated:RemoteAccountDetails', remoteAccountDetails_affiliated - Details on whether the Amazon Web Services account of the remote API
caller is related to your GuardDuty environment. If this value is True
the API caller is affiliated to your account in some way. If it is
False the API caller is from outside your environment.
RemoteIpDetails
data RemoteIpDetails Source #
Contains information about the remote IP address of the connection.
See: newRemoteIpDetails smart constructor.
Constructors
| RemoteIpDetails' (Maybe City) (Maybe Country) (Maybe GeoLocation) (Maybe Text) (Maybe Organization) |
Instances
newRemoteIpDetails :: RemoteIpDetails Source #
Create a value of RemoteIpDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:city:RemoteIpDetails', remoteIpDetails_city - The city information of the remote IP address.
$sel:country:RemoteIpDetails', remoteIpDetails_country - The country code of the remote IP address.
$sel:geoLocation:RemoteIpDetails', remoteIpDetails_geoLocation - The location information of the remote IP address.
$sel:ipAddressV4:RemoteIpDetails', remoteIpDetails_ipAddressV4 - The IPv4 remote address of the connection.
$sel:organization:RemoteIpDetails', remoteIpDetails_organization - The ISP organization information of the remote IP address.
RemotePortDetails
data RemotePortDetails Source #
Contains information about the remote port.
See: newRemotePortDetails smart constructor.
Constructors
| RemotePortDetails' (Maybe Int) (Maybe Text) |
Instances
newRemotePortDetails :: RemotePortDetails Source #
Create a value of RemotePortDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:port:RemotePortDetails', remotePortDetails_port - The port number of the remote connection.
$sel:portName:RemotePortDetails', remotePortDetails_portName - The port name of the remote connection.
Resource
Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.
See: newResource smart constructor.
Constructors
Instances
newResource :: Resource Source #
Create a value of Resource with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accessKeyDetails:Resource', resource_accessKeyDetails - The IAM access key details (IAM user information) of a user that engaged
in the activity that prompted GuardDuty to generate a finding.
$sel:containerDetails:Resource', resource_containerDetails - Undocumented member.
$sel:ebsVolumeDetails:Resource', resource_ebsVolumeDetails - Contains list of scanned and skipped EBS volumes with details.
$sel:ecsClusterDetails:Resource', resource_ecsClusterDetails - Contains information about the details of the ECS Cluster.
$sel:eksClusterDetails:Resource', resource_eksClusterDetails - Details about the EKS cluster involved in a Kubernetes finding.
$sel:instanceDetails:Resource', resource_instanceDetails - The information about the EC2 instance associated with the activity that
prompted GuardDuty to generate a finding.
$sel:kubernetesDetails:Resource', resource_kubernetesDetails - Details about the Kubernetes user and workload involved in a Kubernetes
finding.
$sel:resourceType:Resource', resource_resourceType - The type of Amazon Web Services resource.
$sel:s3BucketDetails:Resource', resource_s3BucketDetails - Contains information on the S3 bucket.
ResourceDetails
data ResourceDetails Source #
Represents the resources that were scanned in the scan entry.
See: newResourceDetails smart constructor.
Constructors
| ResourceDetails' (Maybe Text) |
Instances
newResourceDetails :: ResourceDetails Source #
Create a value of ResourceDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceArn:ResourceDetails', resourceDetails_instanceArn - InstanceArn that was scanned in the scan entry.
S3BucketDetail
data S3BucketDetail Source #
Contains information on the S3 bucket.
See: newS3BucketDetail smart constructor.
Constructors
| S3BucketDetail' (Maybe Text) (Maybe POSIX) (Maybe DefaultServerSideEncryption) (Maybe Text) (Maybe Owner) (Maybe PublicAccess) (Maybe [Tag]) (Maybe Text) |
Instances
newS3BucketDetail :: S3BucketDetail Source #
Create a value of S3BucketDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:S3BucketDetail', s3BucketDetail_arn - The Amazon Resource Name (ARN) of the S3 bucket.
$sel:createdAt:S3BucketDetail', s3BucketDetail_createdAt - The date and time the bucket was created at.
$sel:defaultServerSideEncryption:S3BucketDetail', s3BucketDetail_defaultServerSideEncryption - Describes the server side encryption method used in the S3 bucket.
$sel:name:S3BucketDetail', s3BucketDetail_name - The name of the S3 bucket.
$sel:owner:S3BucketDetail', s3BucketDetail_owner - The owner of the S3 bucket.
$sel:publicAccess:S3BucketDetail', s3BucketDetail_publicAccess - Describes the public access policies that apply to the S3 bucket.
$sel:tags:S3BucketDetail', s3BucketDetail_tags - All tags attached to the S3 bucket
$sel:type':S3BucketDetail', s3BucketDetail_type - Describes whether the bucket is a source or destination bucket.
S3LogsConfiguration
data S3LogsConfiguration Source #
Describes whether S3 data event logs will be enabled as a data source.
See: newS3LogsConfiguration smart constructor.
Constructors
| S3LogsConfiguration' Bool |
Instances
newS3LogsConfiguration Source #
Arguments
| :: Bool | |
| -> S3LogsConfiguration |
Create a value of S3LogsConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:enable:S3LogsConfiguration', s3LogsConfiguration_enable - The status of S3 data event logs as a data source.
S3LogsConfigurationResult
data S3LogsConfigurationResult Source #
Describes whether S3 data event logs will be enabled as a data source.
See: newS3LogsConfigurationResult smart constructor.
Constructors
| S3LogsConfigurationResult' DataSourceStatus |
Instances
newS3LogsConfigurationResult Source #
Create a value of S3LogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:S3LogsConfigurationResult', s3LogsConfigurationResult_status - A value that describes whether S3 data event logs are automatically
enabled for new members of the organization.
Scan
Contains information about a malware scan.
See: newScan smart constructor.
Constructors
| Scan' (Maybe Text) (Maybe Text) (Maybe [VolumeDetail]) (Maybe Text) (Maybe Text) (Maybe Natural) (Maybe ResourceDetails) (Maybe POSIX) (Maybe Text) (Maybe ScanResultDetails) (Maybe POSIX) (Maybe ScanStatus) (Maybe Natural) (Maybe TriggerDetails) |
Instances
Create a value of Scan with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:Scan', scan_accountId - The ID for the account that belongs to the scan.
$sel:adminDetectorId:Scan', scan_adminDetectorId - The unique detector ID of the administrator account that the request is
associated with. Note that this value will be the same as the one used
for DetectorId if the account is an administrator.
$sel:attachedVolumes:Scan', scan_attachedVolumes - List of volumes that were attached to the original instance to be
scanned.
$sel:detectorId:Scan', scan_detectorId - The unique ID of the detector that the request is associated with.
$sel:failureReason:Scan', scan_failureReason - Represents the reason for FAILED scan status.
$sel:fileCount:Scan', scan_fileCount - Represents the number of files that were scanned.
$sel:resourceDetails:Scan', scan_resourceDetails - Represents the resources that were scanned in the scan entry.
$sel:scanEndTime:Scan', scan_scanEndTime - The timestamp of when the scan was finished.
$sel:scanId:Scan', scan_scanId - The unique scan ID associated with a scan entry.
$sel:scanResultDetails:Scan', scan_scanResultDetails - Represents the result of the scan.
$sel:scanStartTime:Scan', scan_scanStartTime - The timestamp of when the scan was triggered.
$sel:scanStatus:Scan', scan_scanStatus - An enum value representing possible scan statuses.
$sel:totalBytes:Scan', scan_totalBytes - Represents total bytes that were scanned.
$sel:triggerDetails:Scan', scan_triggerDetails - Specifies the reason why the scan was initiated.
ScanCondition
data ScanCondition Source #
Contains information about the condition.
See: newScanCondition smart constructor.
Constructors
| ScanCondition' [ScanConditionPair] |
Instances
newScanCondition :: ScanCondition Source #
Create a value of ScanCondition with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:mapEquals:ScanCondition', scanCondition_mapEquals - Represents an mapEqual ____ condition to be applied to a single field
when triggering for malware scan.
ScanConditionPair
data ScanConditionPair Source #
Represents key, value pair to be matched against given resource property.
See: newScanConditionPair smart constructor.
Constructors
| ScanConditionPair' (Maybe Text) Text |
Instances
Arguments
| :: Text | |
| -> ScanConditionPair |
Create a value of ScanConditionPair with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:value:ScanConditionPair', scanConditionPair_value - Represents optional value ____ in the map condition. If not specified,
only key ____ will be matched.
$sel:key:ScanConditionPair', scanConditionPair_key - Represents key ____ in the map condition.
ScanDetections
data ScanDetections Source #
Contains a complete view providing malware scan result details.
See: newScanDetections smart constructor.
Constructors
| ScanDetections' (Maybe HighestSeverityThreatDetails) (Maybe ScannedItemCount) (Maybe ThreatDetectedByName) (Maybe ThreatsDetectedItemCount) |
Instances
newScanDetections :: ScanDetections Source #
Create a value of ScanDetections with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:highestSeverityThreatDetails:ScanDetections', scanDetections_highestSeverityThreatDetails - Details of the highest severity threat detected during malware scan and
number of infected files.
$sel:scannedItemCount:ScanDetections', scanDetections_scannedItemCount - Total number of scanned files.
$sel:threatDetectedByName:ScanDetections', scanDetections_threatDetectedByName - Contains details about identified threats organized by threat name.
$sel:threatsDetectedItemCount:ScanDetections', scanDetections_threatsDetectedItemCount - Total number of infected files.
ScanEc2InstanceWithFindings
data ScanEc2InstanceWithFindings Source #
Describes whether Malware Protection for EC2 instances with findings will be enabled as a data source.
See: newScanEc2InstanceWithFindings smart constructor.
Constructors
| ScanEc2InstanceWithFindings' (Maybe Bool) |
Instances
newScanEc2InstanceWithFindings :: ScanEc2InstanceWithFindings Source #
Create a value of ScanEc2InstanceWithFindings with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ebsVolumes:ScanEc2InstanceWithFindings', scanEc2InstanceWithFindings_ebsVolumes - Describes the configuration for scanning EBS volumes as data source.
ScanEc2InstanceWithFindingsResult
data ScanEc2InstanceWithFindingsResult Source #
An object that contains information on the status of whether Malware Protection for EC2 instances with findings will be enabled as a data source.
See: newScanEc2InstanceWithFindingsResult smart constructor.
Constructors
| ScanEc2InstanceWithFindingsResult' (Maybe EbsVolumesResult) |
Instances
newScanEc2InstanceWithFindingsResult :: ScanEc2InstanceWithFindingsResult Source #
Create a value of ScanEc2InstanceWithFindingsResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ebsVolumes:ScanEc2InstanceWithFindingsResult', scanEc2InstanceWithFindingsResult_ebsVolumes - Describes the configuration of scanning EBS volumes as a data source.
ScanFilePath
data ScanFilePath Source #
Contains details of infected file including name, file path and hash.
See: newScanFilePath smart constructor.
Instances
newScanFilePath :: ScanFilePath Source #
Create a value of ScanFilePath with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:fileName:ScanFilePath', scanFilePath_fileName - File name of the infected file.
$sel:filePath:ScanFilePath', scanFilePath_filePath - The file path of the infected file.
$sel:hash:ScanFilePath', scanFilePath_hash - The hash value of the infected file.
$sel:volumeArn:ScanFilePath', scanFilePath_volumeArn - EBS volume Arn details of the infected file.
ScanResourceCriteria
data ScanResourceCriteria Source #
Contains information about criteria used to filter resources before triggering malware scan.
See: newScanResourceCriteria smart constructor.
Constructors
| ScanResourceCriteria' (Maybe (HashMap ScanCriterionKey ScanCondition)) (Maybe (HashMap ScanCriterionKey ScanCondition)) |
Instances
newScanResourceCriteria :: ScanResourceCriteria Source #
Create a value of ScanResourceCriteria with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:exclude:ScanResourceCriteria', scanResourceCriteria_exclude - Represents condition that when matched will prevent a malware scan for a
certain resource.
$sel:include:ScanResourceCriteria', scanResourceCriteria_include - Represents condition that when matched will allow a malware scan for a
certain resource.
ScanResultDetails
data ScanResultDetails Source #
Represents the result of the scan.
See: newScanResultDetails smart constructor.
Constructors
| ScanResultDetails' (Maybe ScanResult) |
Instances
newScanResultDetails :: ScanResultDetails Source #
Create a value of ScanResultDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:scanResult:ScanResultDetails', scanResultDetails_scanResult - An enum value representing possible scan results.
ScanThreatName
data ScanThreatName Source #
Contains files infected with the given threat providing details of malware name and severity.
See: newScanThreatName smart constructor.
Constructors
| ScanThreatName' (Maybe [ScanFilePath]) (Maybe Int) (Maybe Text) (Maybe Text) |
Instances
newScanThreatName :: ScanThreatName Source #
Create a value of ScanThreatName with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:filePaths:ScanThreatName', scanThreatName_filePaths - List of infected files in EBS volume with details.
$sel:itemCount:ScanThreatName', scanThreatName_itemCount - Total number of files infected with given threat.
$sel:name:ScanThreatName', scanThreatName_name - The name of the identified threat.
$sel:severity:ScanThreatName', scanThreatName_severity - Severity of threat identified as part of the malware scan.
ScannedItemCount
data ScannedItemCount Source #
Total number of scanned files.
See: newScannedItemCount smart constructor.
Instances
newScannedItemCount :: ScannedItemCount Source #
Create a value of ScannedItemCount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:files:ScannedItemCount', scannedItemCount_files - Number of files scanned.
$sel:totalGb:ScannedItemCount', scannedItemCount_totalGb - Total GB of files scanned for malware.
$sel:volumes:ScannedItemCount', scannedItemCount_volumes - Total number of scanned volumes.
SecurityContext
data SecurityContext Source #
Container security context.
See: newSecurityContext smart constructor.
Constructors
| SecurityContext' (Maybe Bool) |
Instances
newSecurityContext :: SecurityContext Source #
Create a value of SecurityContext with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:privileged:SecurityContext', securityContext_privileged - Whether the container is privileged.
SecurityGroup
data SecurityGroup Source #
Contains information about the security groups associated with the EC2 instance.
See: newSecurityGroup smart constructor.
Constructors
| SecurityGroup' (Maybe Text) (Maybe Text) |
Instances
newSecurityGroup :: SecurityGroup Source #
Create a value of SecurityGroup with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:groupId:SecurityGroup', securityGroup_groupId - The security group ID of the EC2 instance.
$sel:groupName:SecurityGroup', securityGroup_groupName - The security group name of the EC2 instance.
ServiceAdditionalInfo
data ServiceAdditionalInfo Source #
Additional information about the generated finding.
See: newServiceAdditionalInfo smart constructor.
Constructors
| ServiceAdditionalInfo' (Maybe Text) (Maybe Text) |
Instances
newServiceAdditionalInfo :: ServiceAdditionalInfo Source #
Create a value of ServiceAdditionalInfo with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:type':ServiceAdditionalInfo', serviceAdditionalInfo_type - Describes the type of the additional information.
$sel:value:ServiceAdditionalInfo', serviceAdditionalInfo_value - This field specifies the value of the additional information.
ServiceInfo
data ServiceInfo Source #
Contains additional information about the generated finding.
See: newServiceInfo smart constructor.
Constructors
| ServiceInfo' (Maybe Action) (Maybe ServiceAdditionalInfo) (Maybe Bool) (Maybe Int) (Maybe Text) (Maybe EbsVolumeScanDetails) (Maybe Text) (Maybe Text) (Maybe Evidence) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) |
Instances
newServiceInfo :: ServiceInfo Source #
Create a value of ServiceInfo with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:action:ServiceInfo', serviceInfo_action - Information about the activity that is described in a finding.
$sel:additionalInfo:ServiceInfo', serviceInfo_additionalInfo - Contains additional information about the generated finding.
$sel:archived:ServiceInfo', serviceInfo_archived - Indicates whether this finding is archived.
$sel:count:ServiceInfo', serviceInfo_count - The total count of the occurrences of this finding type.
$sel:detectorId:ServiceInfo', serviceInfo_detectorId - The detector ID for the GuardDuty service.
$sel:ebsVolumeScanDetails:ServiceInfo', serviceInfo_ebsVolumeScanDetails - Returns details from the malware scan that created a finding.
$sel:eventFirstSeen:ServiceInfo', serviceInfo_eventFirstSeen - The first-seen timestamp of the activity that prompted GuardDuty to
generate this finding.
$sel:eventLastSeen:ServiceInfo', serviceInfo_eventLastSeen - The last-seen timestamp of the activity that prompted GuardDuty to
generate this finding.
$sel:evidence:ServiceInfo', serviceInfo_evidence - An evidence object associated with the service.
$sel:featureName:ServiceInfo', serviceInfo_featureName - The name of the feature that generated a finding.
$sel:resourceRole:ServiceInfo', serviceInfo_resourceRole - The resource role information for this finding.
$sel:serviceName:ServiceInfo', serviceInfo_serviceName - The name of the Amazon Web Services service (GuardDuty) that generated a
finding.
$sel:userFeedback:ServiceInfo', serviceInfo_userFeedback - Feedback that was submitted about the finding.
SortCriteria
data SortCriteria Source #
Contains information about the criteria used for sorting findings.
See: newSortCriteria smart constructor.
Constructors
| SortCriteria' (Maybe Text) (Maybe OrderBy) |
Instances
newSortCriteria :: SortCriteria Source #
Create a value of SortCriteria with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:attributeName:SortCriteria', sortCriteria_attributeName - Represents the finding attribute (for example, accountId) to sort
findings by.
$sel:orderBy:SortCriteria', sortCriteria_orderBy - The order by which the sorted findings are to be displayed.
Tag
Contains information about a tag associated with the EC2 instance.
See: newTag smart constructor.
Instances
| FromJSON Tag Source # | |
| Generic Tag Source # | |
| Read Tag Source # | |
| Show Tag Source # | |
| NFData Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag | |
| Eq Tag Source # | |
| Hashable Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag | |
| type Rep Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag type Rep Tag = D1 ('MetaData "Tag" "Amazonka.GuardDuty.Types.Tag" "amazonka-guardduty-2.0-2NN502sGcQRH5risQZb24c" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "key") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "value") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
Create a value of Tag with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:key:Tag', tag_key - The EC2 instance tag key.
$sel:value:Tag', tag_value - The EC2 instance tag value.
ThreatDetectedByName
data ThreatDetectedByName Source #
Contains details about identified threats organized by threat name.
See: newThreatDetectedByName smart constructor.
Constructors
| ThreatDetectedByName' (Maybe Int) (Maybe Bool) (Maybe [ScanThreatName]) (Maybe Int) |
Instances
newThreatDetectedByName :: ThreatDetectedByName Source #
Create a value of ThreatDetectedByName with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ThreatDetectedByName, threatDetectedByName_itemCount - Total number of infected files identified.
$sel:shortened:ThreatDetectedByName', threatDetectedByName_shortened - Flag to determine if the finding contains every single infected
file-path and/or every threat.
$sel:threatNames:ThreatDetectedByName', threatDetectedByName_threatNames - List of identified threats with details, organized by threat name.
$sel:uniqueThreatNameCount:ThreatDetectedByName', threatDetectedByName_uniqueThreatNameCount - Total number of unique threats by name identified, as part of the
malware scan.
ThreatIntelligenceDetail
data ThreatIntelligenceDetail Source #
An instance of a threat intelligence detail that constitutes evidence for the finding.
See: newThreatIntelligenceDetail smart constructor.
Constructors
| ThreatIntelligenceDetail' (Maybe Text) (Maybe [Text]) |
Instances
newThreatIntelligenceDetail :: ThreatIntelligenceDetail Source #
Create a value of ThreatIntelligenceDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:threatListName:ThreatIntelligenceDetail', threatIntelligenceDetail_threatListName - The name of the threat intelligence list that triggered the finding.
$sel:threatNames:ThreatIntelligenceDetail', threatIntelligenceDetail_threatNames - A list of names of the threats in the threat intelligence list that
triggered the finding.
ThreatsDetectedItemCount
data ThreatsDetectedItemCount Source #
Contains total number of infected files.
See: newThreatsDetectedItemCount smart constructor.
Constructors
| ThreatsDetectedItemCount' (Maybe Int) |
Instances
newThreatsDetectedItemCount :: ThreatsDetectedItemCount Source #
Create a value of ThreatsDetectedItemCount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:files:ThreatsDetectedItemCount', threatsDetectedItemCount_files - Total number of infected files.
Total
Contains the total usage with the corresponding currency unit for that value.
See: newTotal smart constructor.
Instances
| FromJSON Total Source # | |
| Generic Total Source # | |
| Read Total Source # | |
| Show Total Source # | |
| NFData Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total | |
| Eq Total Source # | |
| Hashable Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total | |
| type Rep Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total type Rep Total = D1 ('MetaData "Total" "Amazonka.GuardDuty.Types.Total" "amazonka-guardduty-2.0-2NN502sGcQRH5risQZb24c" 'False) (C1 ('MetaCons "Total'" 'PrefixI 'True) (S1 ('MetaSel ('Just "amount") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "unit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
Create a value of Total with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:amount:Total', total_amount - The total usage.
$sel:unit:Total', total_unit - The currency unit that the amount is given in.
TriggerDetails
data TriggerDetails Source #
Represents the reason the scan was triggered.
See: newTriggerDetails smart constructor.
Constructors
| TriggerDetails' (Maybe Text) (Maybe Text) |
Instances
newTriggerDetails :: TriggerDetails Source #
Create a value of TriggerDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:description:TriggerDetails', triggerDetails_description - The description of the scan trigger.
$sel:guardDutyFindingId:TriggerDetails', triggerDetails_guardDutyFindingId - The ID of the GuardDuty finding that triggered the BirdDog scan.
UnprocessedAccount
data UnprocessedAccount Source #
Contains information about the accounts that weren't processed.
See: newUnprocessedAccount smart constructor.
Constructors
| UnprocessedAccount' Text Text |
Instances
newUnprocessedAccount Source #
Arguments
| :: Text | |
| -> Text | |
| -> UnprocessedAccount |
Create a value of UnprocessedAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:UnprocessedAccount', unprocessedAccount_accountId - The Amazon Web Services account ID.
$sel:result:UnprocessedAccount', unprocessedAccount_result - A reason why the account hasn't been processed.
UnprocessedDataSourcesResult
data UnprocessedDataSourcesResult Source #
Specifies the names of the data sources that couldn't be enabled.
See: newUnprocessedDataSourcesResult smart constructor.
Instances
newUnprocessedDataSourcesResult :: UnprocessedDataSourcesResult Source #
Create a value of UnprocessedDataSourcesResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:malwareProtection:UnprocessedDataSourcesResult', unprocessedDataSourcesResult_malwareProtection - Undocumented member.
UsageAccountResult
data UsageAccountResult Source #
Contains information on the total of usage based on account IDs.
See: newUsageAccountResult smart constructor.
Constructors
| UsageAccountResult' (Maybe Text) (Maybe Total) |
Instances
newUsageAccountResult :: UsageAccountResult Source #
Create a value of UsageAccountResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:UsageAccountResult', usageAccountResult_accountId - The Account ID that generated usage.
$sel:total:UsageAccountResult', usageAccountResult_total - Represents the total of usage for the Account ID.
UsageCriteria
data UsageCriteria Source #
Contains information about the criteria used to query usage statistics.
See: newUsageCriteria smart constructor.
Constructors
| UsageCriteria' (Maybe (NonEmpty Text)) (Maybe [Text]) [DataSource] |
Instances
newUsageCriteria :: UsageCriteria Source #
Create a value of UsageCriteria with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountIds:UsageCriteria', usageCriteria_accountIds - The account IDs to aggregate usage statistics from.
$sel:resources:UsageCriteria', usageCriteria_resources - The resources to aggregate usage statistics from. Only accepts exact
resource names.
$sel:dataSources:UsageCriteria', usageCriteria_dataSources - The data sources to aggregate usage statistics from.
UsageDataSourceResult
data UsageDataSourceResult Source #
Contains information on the result of usage based on data source type.
See: newUsageDataSourceResult smart constructor.
Constructors
| UsageDataSourceResult' (Maybe DataSource) (Maybe Total) |
Instances
newUsageDataSourceResult :: UsageDataSourceResult Source #
Create a value of UsageDataSourceResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:dataSource:UsageDataSourceResult', usageDataSourceResult_dataSource - The data source type that generated usage.
$sel:total:UsageDataSourceResult', usageDataSourceResult_total - Represents the total of usage for the specified data source.
UsageResourceResult
data UsageResourceResult Source #
Contains information on the sum of usage based on an Amazon Web Services resource.
See: newUsageResourceResult smart constructor.
Constructors
| UsageResourceResult' (Maybe Text) (Maybe Total) |
Instances
newUsageResourceResult :: UsageResourceResult Source #
Create a value of UsageResourceResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resource:UsageResourceResult', usageResourceResult_resource - The Amazon Web Services resource that generated usage.
$sel:total:UsageResourceResult', usageResourceResult_total - Represents the sum total of usage for the specified resource type.
UsageStatistics
data UsageStatistics Source #
Contains the result of GuardDuty usage. If a UsageStatisticType is provided the result for other types will be null.
See: newUsageStatistics smart constructor.
Constructors
| UsageStatistics' (Maybe [UsageAccountResult]) (Maybe [UsageDataSourceResult]) (Maybe [UsageResourceResult]) (Maybe [UsageResourceResult]) |
Instances
newUsageStatistics :: UsageStatistics Source #
Create a value of UsageStatistics with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:sumByAccount:UsageStatistics', usageStatistics_sumByAccount - The usage statistic sum organized by account ID.
$sel:sumByDataSource:UsageStatistics', usageStatistics_sumByDataSource - The usage statistic sum organized by on data source.
$sel:sumByResource:UsageStatistics', usageStatistics_sumByResource - The usage statistic sum organized by resource.
$sel:topResources:UsageStatistics', usageStatistics_topResources - Lists the top 50 resources that have generated the most GuardDuty usage,
in order from most to least expensive.
Volume
Volume used by the Kubernetes workload.
See: newVolume smart constructor.
Instances
| FromJSON Volume Source # | |
| Generic Volume Source # | |
| Read Volume Source # | |
| Show Volume Source # | |
| NFData Volume Source # | |
Defined in Amazonka.GuardDuty.Types.Volume | |
| Eq Volume Source # | |
| Hashable Volume Source # | |
Defined in Amazonka.GuardDuty.Types.Volume | |
| type Rep Volume Source # | |
Defined in Amazonka.GuardDuty.Types.Volume type Rep Volume = D1 ('MetaData "Volume" "Amazonka.GuardDuty.Types.Volume" "amazonka-guardduty-2.0-2NN502sGcQRH5risQZb24c" 'False) (C1 ('MetaCons "Volume'" 'PrefixI 'True) (S1 ('MetaSel ('Just "hostPath") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe HostPath)) :*: S1 ('MetaSel ('Just "name") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
Create a value of Volume with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:hostPath:Volume', volume_hostPath - Represents a pre-existing file or directory on the host machine that the
volume maps to.
$sel:name:Volume', volume_name - Volume name.
VolumeDetail
data VolumeDetail Source #
Contains EBS volume details.
See: newVolumeDetail smart constructor.
Constructors
| VolumeDetail' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Int) (Maybe Text) |
Instances
newVolumeDetail :: VolumeDetail Source #
Create a value of VolumeDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:deviceName:VolumeDetail', volumeDetail_deviceName - The device name for the EBS volume.
$sel:encryptionType:VolumeDetail', volumeDetail_encryptionType - EBS volume encryption type.
$sel:kmsKeyArn:VolumeDetail', volumeDetail_kmsKeyArn - KMS key Arn used to encrypt the EBS volume.
$sel:snapshotArn:VolumeDetail', volumeDetail_snapshotArn - Snapshot Arn of the EBS volume.
$sel:volumeArn:VolumeDetail', volumeDetail_volumeArn - EBS volume Arn information.
$sel:volumeSizeInGB:VolumeDetail', volumeDetail_volumeSizeInGB - EBS volume size in GB.
$sel:volumeType:VolumeDetail', volumeDetail_volumeType - The EBS volume type.
VolumeMount
data VolumeMount Source #
Container volume mount.
See: newVolumeMount smart constructor.
Constructors
| VolumeMount' (Maybe Text) (Maybe Text) |
Instances
newVolumeMount :: VolumeMount Source #
Create a value of VolumeMount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:mountPath:VolumeMount', volumeMount_mountPath - Volume mount path.
$sel:name:VolumeMount', volumeMount_name - Volume mount name.