Skip to content

Annotation

Source code in docs_src/capo_cloudformation/types/annotation.py
class Annotation(TypedDict, closed=True):
    annotation_name: NotRequired[
        "capo_cloudformation.types.annotation_name.AnnotationName"
    ]
    """<p>An identifier for the evaluation logic that was used when invoking the Hook. For Control Tower, this is the control ID. For Guard, this is the rule ID. For Lambda and custom Hooks, this is a user-defined identifier.</p>"""
    status: NotRequired["capo_cloudformation.types.annotation_status.AnnotationStatus"]
    """<p>The status of the Hook invocation from the downstream service.</p>"""
    status_message: NotRequired[
        "capo_cloudformation.types.remediation_message_status_message.RemediationMessageStatusMessage"
    ]
    """<p>The explanation for the specific status assigned to this Hook invocation. For example, "Bucket does not block public access".</p>"""
    remediation_message: NotRequired[
        "capo_cloudformation.types.remediation_message_remediation_message.RemediationMessageRemediationMessage"
    ]
    """<p>Suggests what to change if your Hook returns a <code>FAILED</code> status. For example, "Block public access to the bucket".</p>"""
    remediation_link: NotRequired[
        "capo_cloudformation.types.annotation_remediation_link.AnnotationRemediationLink"
    ]
    """<p>A URL that you can access for additional remediation guidance.</p>"""
    severity_level: NotRequired[
        "capo_cloudformation.types.annotation_severity_level.AnnotationSeverityLevel"
    ]
    """<p>The relative risk associated with any violations of this type.</p>"""

annotation_name instance-attribute

annotation_name: NotRequired[AnnotationName]

An identifier for the evaluation logic that was used when invoking the Hook. For Control Tower, this is the control ID. For Guard, this is the rule ID. For Lambda and custom Hooks, this is a user-defined identifier.

remediation_link: NotRequired[AnnotationRemediationLink]

A URL that you can access for additional remediation guidance.

remediation_message instance-attribute

remediation_message: NotRequired[RemediationMessageRemediationMessage]

Suggests what to change if your Hook returns a FAILED status. For example, "Block public access to the bucket".

severity_level instance-attribute

severity_level: NotRequired[AnnotationSeverityLevel]

The relative risk associated with any violations of this type.

status instance-attribute

status: NotRequired[AnnotationStatus]

The status of the Hook invocation from the downstream service.

status_message instance-attribute

status_message: NotRequired[RemediationMessageStatusMessage]

The explanation for the specific status assigned to this Hook invocation. For example, "Bucket does not block public access".