GetInvestigationResponse ¶

class GetInvestigationResponse(TypedDict, closed=True):
    graph_arn: NotRequired["capo_detective.types.graph_arn.GraphArn"]
    """<p>The Amazon Resource Name (ARN) of the behavior graph.</p>"""
    investigation_id: NotRequired[
        "capo_detective.types.investigation_id.InvestigationId"
    ]
    """<p>The investigation ID of the investigation report.</p>"""
    entity_arn: NotRequired["capo_detective.types.entity_arn.EntityArn"]
    """<p>The unique Amazon Resource Name (ARN). Detective supports IAM user ARNs and IAM role ARNs.</p>"""
    entity_type: NotRequired["capo_detective.types.entity_type.EntityType"]
    """<p>Type of entity. For example, Amazon Web Services accounts, such as an IAM user and/or IAM role.</p>"""
    created_time: NotRequired["capo_detective.types.timestamp.Timestamp"]
    """<p>The creation time of the investigation report in UTC time stamp format.</p>"""
    scope_start_time: NotRequired["capo_detective.types.timestamp.Timestamp"]
    """<p>The start date and time used to set the scope time within which you want to generate the investigation report. The value is an UTC ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>"""
    scope_end_time: NotRequired["capo_detective.types.timestamp.Timestamp"]
    """<p>The data and time when the investigation began. The value is an UTC ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>"""
    status: NotRequired["capo_detective.types.status.Status"]
    """<p>The status based on the completion status of the investigation.</p>"""
    severity: NotRequired["capo_detective.types.severity.Severity"]
    """<p>The severity assigned is based on the likelihood and impact of the indicators of compromise discovered in the investigation.</p>"""
    state: NotRequired["capo_detective.types.state.State"]
    """<p>The current state of the investigation. An archived investigation indicates that you have completed reviewing the investigation.</p>"""