InvestigationDetail ¶

class InvestigationDetail(TypedDict, closed=True):
    investigation_id: NotRequired[
        "capo_detective.types.investigation_id.InvestigationId"
    ]
    """<p>The investigation ID of the investigation report.</p>"""
    severity: NotRequired["capo_detective.types.severity.Severity"]
    """<p>Severity based on the likelihood and impact of the indicators of compromise discovered in the investigation.</p>"""
    status: NotRequired["capo_detective.types.status.Status"]
    """<p>Status based on the completion status of the investigation.</p>"""
    state: NotRequired["capo_detective.types.state.State"]
    """<p>The current state of the investigation. An archived investigation indicates you have completed reviewing the investigation.</p>"""
    created_time: NotRequired["capo_detective.types.timestamp.Timestamp"]
    """<p>The time stamp of the creation time of the investigation report. The value is an UTC ISO8601 formatted string. For example, <code>2021-08-18T16:35:56.284Z</code>.</p>"""
    entity_arn: NotRequired["capo_detective.types.entity_arn.EntityArn"]
    """<p>The unique Amazon Resource Name (ARN) of the IAM user and IAM role.</p>"""
    entity_type: NotRequired["capo_detective.types.entity_type.EntityType"]
    """<p>Type of entity. For example, Amazon Web Services accounts, such as IAM user and role.</p>"""