Skip to content

Finding

Source code in docs_src/capo_guardduty/types/finding.py 
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
class Finding(TypedDict, closed=True):
    account_id: NotRequired["capo_guardduty.types.string.String"]
    """<p>The ID of the account in which the finding was generated.</p>"""
    arn: NotRequired["capo_guardduty.types.string.String"]
    """<p>The ARN of the finding.</p>"""
    confidence: NotRequired["capo_guardduty.types.double.Double"]
    """<p>The confidence score for the finding.</p>"""
    created_at: NotRequired["capo_guardduty.types.string.String"]
    """<p>The time and date when the finding was created.</p>"""
    description: NotRequired["capo_guardduty.types.string.String"]
    """<p>The description of the finding.</p>"""
    id: NotRequired["capo_guardduty.types.string.String"]
    """<p>The ID of the finding.</p>"""
    partition: NotRequired["capo_guardduty.types.string.String"]
    """<p>The partition associated with the finding.</p>"""
    region: NotRequired["capo_guardduty.types.string.String"]
    """<p>The Region where the finding was generated. For findings generated from <a href="https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-concepts.html#cloudtrail-concepts-global-service-events">Global Service Events</a>, the Region value in the finding might differ from the Region where GuardDuty identifies the potential threat. For more information, see <a href="https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_data-sources.html#cloudtrail_global">How GuardDuty handles Amazon Web Services CloudTrail global events</a> in the <i>Amazon GuardDuty User Guide</i>.</p>"""
    resource: NotRequired["capo_guardduty.types.resource.Resource"]
    schema_version: NotRequired["capo_guardduty.types.string.String"]
    """<p>The version of the schema used for the finding.</p>"""
    service: NotRequired["capo_guardduty.types.service.Service"]
    severity: NotRequired["capo_guardduty.types.double.Double"]
    """<p>The severity of the finding.</p>"""
    title: NotRequired["capo_guardduty.types.string.String"]
    """<p>The title of the finding.</p>"""
    type: NotRequired["capo_guardduty.types.finding_type.FindingType"]
    """<p>The type of finding.</p>"""
    updated_at: NotRequired["capo_guardduty.types.string.String"]
    """<p>The time and date when the finding was last updated.</p>"""
    associated_attack_sequence_arn: NotRequired["capo_guardduty.types.string.String"]
    """<p>Amazon Resource Name (ARN) associated with the attack sequence finding.</p>"""
    custom_detection_rule_name: NotRequired["capo_guardduty.types.string.String"]
    """<p>The name of the custom detection rule that generated this finding.</p>"""

account_id instance-attribute 

account_id: NotRequired[String]

The ID of the account in which the finding was generated.

arn instance-attribute 

arn: NotRequired[String]

The ARN of the finding.

associated_attack_sequence_arn instance-attribute 

associated_attack_sequence_arn: NotRequired[String]

Amazon Resource Name (ARN) associated with the attack sequence finding.

confidence instance-attribute 

confidence: NotRequired[Double]

The confidence score for the finding.

created_at instance-attribute 

created_at: NotRequired[String]

The time and date when the finding was created.

custom_detection_rule_name instance-attribute 

custom_detection_rule_name: NotRequired[String]

The name of the custom detection rule that generated this finding.

description instance-attribute 

description: NotRequired[String]

The description of the finding.

id instance-attribute 

id: NotRequired[String]

The ID of the finding.

partition instance-attribute 

partition: NotRequired[String]

The partition associated with the finding.

region instance-attribute 

region: NotRequired[String]

The Region where the finding was generated. For findings generated from Global Service Events, the Region value in the finding might differ from the Region where GuardDuty identifies the potential threat. For more information, see How GuardDuty handles Amazon Web Services CloudTrail global events in the Amazon GuardDuty User Guide.

resource instance-attribute 

resource: NotRequired[Resource]

schema_version instance-attribute 

schema_version: NotRequired[String]

The version of the schema used for the finding.

service instance-attribute 

service: NotRequired[Service]

severity instance-attribute 

severity: NotRequired[Double]

The severity of the finding.

title instance-attribute 

title: NotRequired[String]

The title of the finding.

type instance-attribute 

type: NotRequired[FindingType]

The type of finding.

updated_at instance-attribute 

updated_at: NotRequired[String]

The time and date when the finding was last updated.