| Copyright | (c) 2013-2021 Brendan Hay |
|---|---|
| License | Mozilla Public License, v. 2.0. |
| Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
| Stability | auto-generated |
| Portability | non-portable (GHC extensions) |
| Safe Haskell | None |
Amazonka.GuardDuty.Types
Contents
- Service Configuration
- Errors
- AdminStatus
- DataSource
- DataSourceStatus
- DestinationType
- DetectorStatus
- Feedback
- FilterAction
- FindingPublishingFrequency
- FindingStatisticType
- IpSetFormat
- IpSetStatus
- OrderBy
- PublishingStatus
- ThreatIntelSetFormat
- ThreatIntelSetStatus
- UsageStatisticType
- AccessControlList
- AccessKeyDetails
- AccountDetail
- AccountLevelPermissions
- Action
- AdminAccount
- AwsApiCallAction
- BlockPublicAccess
- BucketLevelPermissions
- BucketPolicy
- City
- CloudTrailConfigurationResult
- Condition
- Country
- DNSLogsConfigurationResult
- DataSourceConfigurations
- DataSourceConfigurationsResult
- DefaultServerSideEncryption
- Destination
- DestinationProperties
- DnsRequestAction
- DomainDetails
- Evidence
- Finding
- FindingCriteria
- FindingStatistics
- FlowLogsConfigurationResult
- GeoLocation
- IamInstanceProfile
- InstanceDetails
- Invitation
- LocalIpDetails
- LocalPortDetails
- Master
- Member
- MemberDataSourceConfiguration
- NetworkConnectionAction
- NetworkInterface
- Organization
- OrganizationDataSourceConfigurations
- OrganizationDataSourceConfigurationsResult
- OrganizationS3LogsConfiguration
- OrganizationS3LogsConfigurationResult
- Owner
- PermissionConfiguration
- PortProbeAction
- PortProbeDetail
- PrivateIpAddressDetails
- ProductCode
- PublicAccess
- RemoteIpDetails
- RemotePortDetails
- Resource
- S3BucketDetail
- S3LogsConfiguration
- S3LogsConfigurationResult
- SecurityGroup
- ServiceInfo
- SortCriteria
- Tag
- ThreatIntelligenceDetail
- Total
- UnprocessedAccount
- UsageAccountResult
- UsageCriteria
- UsageDataSourceResult
- UsageResourceResult
- UsageStatistics
Description
Synopsis
- defaultService :: Service
- _InternalServerErrorException :: AsError a => Getting (First ServiceError) a ServiceError
- _BadRequestException :: AsError a => Getting (First ServiceError) a ServiceError
- newtype AdminStatus where
- AdminStatus' { }
- pattern AdminStatus_DISABLE_IN_PROGRESS :: AdminStatus
- pattern AdminStatus_ENABLED :: AdminStatus
- newtype DataSource where
- DataSource' { }
- pattern DataSource_CLOUD_TRAIL :: DataSource
- pattern DataSource_DNS_LOGS :: DataSource
- pattern DataSource_FLOW_LOGS :: DataSource
- pattern DataSource_S3_LOGS :: DataSource
- newtype DataSourceStatus where
- DataSourceStatus' { }
- pattern DataSourceStatus_DISABLED :: DataSourceStatus
- pattern DataSourceStatus_ENABLED :: DataSourceStatus
- newtype DestinationType where
- DestinationType' { }
- pattern DestinationType_S3 :: DestinationType
- newtype DetectorStatus where
- DetectorStatus' { }
- pattern DetectorStatus_DISABLED :: DetectorStatus
- pattern DetectorStatus_ENABLED :: DetectorStatus
- newtype Feedback where
- Feedback' {
- fromFeedback :: Text
- pattern Feedback_NOT_USEFUL :: Feedback
- pattern Feedback_USEFUL :: Feedback
- Feedback' {
- newtype FilterAction where
- FilterAction' { }
- pattern FilterAction_ARCHIVE :: FilterAction
- pattern FilterAction_NOOP :: FilterAction
- newtype FindingPublishingFrequency where
- newtype FindingStatisticType where
- newtype IpSetFormat where
- IpSetFormat' { }
- pattern IpSetFormat_ALIEN_VAULT :: IpSetFormat
- pattern IpSetFormat_FIRE_EYE :: IpSetFormat
- pattern IpSetFormat_OTX_CSV :: IpSetFormat
- pattern IpSetFormat_PROOF_POINT :: IpSetFormat
- pattern IpSetFormat_STIX :: IpSetFormat
- pattern IpSetFormat_TXT :: IpSetFormat
- newtype IpSetStatus where
- IpSetStatus' { }
- pattern IpSetStatus_ACTIVATING :: IpSetStatus
- pattern IpSetStatus_ACTIVE :: IpSetStatus
- pattern IpSetStatus_DEACTIVATING :: IpSetStatus
- pattern IpSetStatus_DELETED :: IpSetStatus
- pattern IpSetStatus_DELETE_PENDING :: IpSetStatus
- pattern IpSetStatus_ERROR :: IpSetStatus
- pattern IpSetStatus_INACTIVE :: IpSetStatus
- newtype OrderBy where
- OrderBy' {
- fromOrderBy :: Text
- pattern OrderBy_ASC :: OrderBy
- pattern OrderBy_DESC :: OrderBy
- OrderBy' {
- newtype PublishingStatus where
- newtype ThreatIntelSetFormat where
- ThreatIntelSetFormat' { }
- pattern ThreatIntelSetFormat_ALIEN_VAULT :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_FIRE_EYE :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_OTX_CSV :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_PROOF_POINT :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_STIX :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_TXT :: ThreatIntelSetFormat
- newtype ThreatIntelSetStatus where
- ThreatIntelSetStatus' { }
- pattern ThreatIntelSetStatus_ACTIVATING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_ACTIVE :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DEACTIVATING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DELETED :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DELETE_PENDING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_ERROR :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_INACTIVE :: ThreatIntelSetStatus
- newtype UsageStatisticType where
- data AccessControlList = AccessControlList' {}
- newAccessControlList :: AccessControlList
- accessControlList_allowsPublicWriteAccess :: Lens' AccessControlList (Maybe Bool)
- accessControlList_allowsPublicReadAccess :: Lens' AccessControlList (Maybe Bool)
- data AccessKeyDetails = AccessKeyDetails' {}
- newAccessKeyDetails :: AccessKeyDetails
- accessKeyDetails_principalId :: Lens' AccessKeyDetails (Maybe Text)
- accessKeyDetails_userName :: Lens' AccessKeyDetails (Maybe Text)
- accessKeyDetails_accessKeyId :: Lens' AccessKeyDetails (Maybe Text)
- accessKeyDetails_userType :: Lens' AccessKeyDetails (Maybe Text)
- data AccountDetail = AccountDetail' {}
- newAccountDetail :: Text -> Text -> AccountDetail
- accountDetail_accountId :: Lens' AccountDetail Text
- accountDetail_email :: Lens' AccountDetail Text
- data AccountLevelPermissions = AccountLevelPermissions' {}
- newAccountLevelPermissions :: AccountLevelPermissions
- accountLevelPermissions_blockPublicAccess :: Lens' AccountLevelPermissions (Maybe BlockPublicAccess)
- data Action = Action' {}
- newAction :: Action
- action_networkConnectionAction :: Lens' Action (Maybe NetworkConnectionAction)
- action_portProbeAction :: Lens' Action (Maybe PortProbeAction)
- action_actionType :: Lens' Action (Maybe Text)
- action_dnsRequestAction :: Lens' Action (Maybe DnsRequestAction)
- action_awsApiCallAction :: Lens' Action (Maybe AwsApiCallAction)
- data AdminAccount = AdminAccount' {}
- newAdminAccount :: AdminAccount
- adminAccount_adminAccountId :: Lens' AdminAccount (Maybe Text)
- adminAccount_adminStatus :: Lens' AdminAccount (Maybe AdminStatus)
- data AwsApiCallAction = AwsApiCallAction' {}
- newAwsApiCallAction :: AwsApiCallAction
- awsApiCallAction_remoteIpDetails :: Lens' AwsApiCallAction (Maybe RemoteIpDetails)
- awsApiCallAction_callerType :: Lens' AwsApiCallAction (Maybe Text)
- awsApiCallAction_domainDetails :: Lens' AwsApiCallAction (Maybe DomainDetails)
- awsApiCallAction_serviceName :: Lens' AwsApiCallAction (Maybe Text)
- awsApiCallAction_errorCode :: Lens' AwsApiCallAction (Maybe Text)
- awsApiCallAction_api :: Lens' AwsApiCallAction (Maybe Text)
- data BlockPublicAccess = BlockPublicAccess' {}
- newBlockPublicAccess :: BlockPublicAccess
- blockPublicAccess_ignorePublicAcls :: Lens' BlockPublicAccess (Maybe Bool)
- blockPublicAccess_blockPublicAcls :: Lens' BlockPublicAccess (Maybe Bool)
- blockPublicAccess_restrictPublicBuckets :: Lens' BlockPublicAccess (Maybe Bool)
- blockPublicAccess_blockPublicPolicy :: Lens' BlockPublicAccess (Maybe Bool)
- data BucketLevelPermissions = BucketLevelPermissions' {}
- newBucketLevelPermissions :: BucketLevelPermissions
- bucketLevelPermissions_accessControlList :: Lens' BucketLevelPermissions (Maybe AccessControlList)
- bucketLevelPermissions_blockPublicAccess :: Lens' BucketLevelPermissions (Maybe BlockPublicAccess)
- bucketLevelPermissions_bucketPolicy :: Lens' BucketLevelPermissions (Maybe BucketPolicy)
- data BucketPolicy = BucketPolicy' {}
- newBucketPolicy :: BucketPolicy
- bucketPolicy_allowsPublicWriteAccess :: Lens' BucketPolicy (Maybe Bool)
- bucketPolicy_allowsPublicReadAccess :: Lens' BucketPolicy (Maybe Bool)
- data City = City' {}
- newCity :: City
- city_cityName :: Lens' City (Maybe Text)
- data CloudTrailConfigurationResult = CloudTrailConfigurationResult' {}
- newCloudTrailConfigurationResult :: DataSourceStatus -> CloudTrailConfigurationResult
- cloudTrailConfigurationResult_status :: Lens' CloudTrailConfigurationResult DataSourceStatus
- data Condition = Condition' {}
- newCondition :: Condition
- condition_eq :: Lens' Condition (Maybe [Text])
- condition_lessThan :: Lens' Condition (Maybe Integer)
- condition_lte :: Lens' Condition (Maybe Int)
- condition_greaterThanOrEqual :: Lens' Condition (Maybe Integer)
- condition_lessThanOrEqual :: Lens' Condition (Maybe Integer)
- condition_gt :: Lens' Condition (Maybe Int)
- condition_equals :: Lens' Condition (Maybe [Text])
- condition_neq :: Lens' Condition (Maybe [Text])
- condition_notEquals :: Lens' Condition (Maybe [Text])
- condition_lt :: Lens' Condition (Maybe Int)
- condition_gte :: Lens' Condition (Maybe Int)
- condition_greaterThan :: Lens' Condition (Maybe Integer)
- data Country = Country' {
- countryName :: Maybe Text
- countryCode :: Maybe Text
- newCountry :: Country
- country_countryName :: Lens' Country (Maybe Text)
- country_countryCode :: Lens' Country (Maybe Text)
- data DNSLogsConfigurationResult = DNSLogsConfigurationResult' {}
- newDNSLogsConfigurationResult :: DataSourceStatus -> DNSLogsConfigurationResult
- dNSLogsConfigurationResult_status :: Lens' DNSLogsConfigurationResult DataSourceStatus
- data DataSourceConfigurations = DataSourceConfigurations' {}
- newDataSourceConfigurations :: DataSourceConfigurations
- dataSourceConfigurations_s3Logs :: Lens' DataSourceConfigurations (Maybe S3LogsConfiguration)
- data DataSourceConfigurationsResult = DataSourceConfigurationsResult' {}
- newDataSourceConfigurationsResult :: CloudTrailConfigurationResult -> DNSLogsConfigurationResult -> FlowLogsConfigurationResult -> S3LogsConfigurationResult -> DataSourceConfigurationsResult
- dataSourceConfigurationsResult_cloudTrail :: Lens' DataSourceConfigurationsResult CloudTrailConfigurationResult
- dataSourceConfigurationsResult_dNSLogs :: Lens' DataSourceConfigurationsResult DNSLogsConfigurationResult
- dataSourceConfigurationsResult_flowLogs :: Lens' DataSourceConfigurationsResult FlowLogsConfigurationResult
- dataSourceConfigurationsResult_s3Logs :: Lens' DataSourceConfigurationsResult S3LogsConfigurationResult
- data DefaultServerSideEncryption = DefaultServerSideEncryption' {}
- newDefaultServerSideEncryption :: DefaultServerSideEncryption
- defaultServerSideEncryption_encryptionType :: Lens' DefaultServerSideEncryption (Maybe Text)
- defaultServerSideEncryption_kmsMasterKeyArn :: Lens' DefaultServerSideEncryption (Maybe Text)
- data Destination = Destination' {}
- newDestination :: Text -> DestinationType -> PublishingStatus -> Destination
- destination_destinationId :: Lens' Destination Text
- destination_destinationType :: Lens' Destination DestinationType
- destination_status :: Lens' Destination PublishingStatus
- data DestinationProperties = DestinationProperties' {}
- newDestinationProperties :: DestinationProperties
- destinationProperties_kmsKeyArn :: Lens' DestinationProperties (Maybe Text)
- destinationProperties_destinationArn :: Lens' DestinationProperties (Maybe Text)
- data DnsRequestAction = DnsRequestAction' {}
- newDnsRequestAction :: DnsRequestAction
- dnsRequestAction_domain :: Lens' DnsRequestAction (Maybe Text)
- data DomainDetails = DomainDetails' {}
- newDomainDetails :: DomainDetails
- domainDetails_domain :: Lens' DomainDetails (Maybe Text)
- data Evidence = Evidence' {}
- newEvidence :: Evidence
- evidence_threatIntelligenceDetails :: Lens' Evidence (Maybe [ThreatIntelligenceDetail])
- data Finding = Finding' {}
- newFinding :: Text -> Text -> Text -> Text -> Text -> Resource -> Text -> Double -> Text -> Text -> Finding
- finding_service :: Lens' Finding (Maybe ServiceInfo)
- finding_confidence :: Lens' Finding (Maybe Double)
- finding_partition :: Lens' Finding (Maybe Text)
- finding_title :: Lens' Finding (Maybe Text)
- finding_description :: Lens' Finding (Maybe Text)
- finding_accountId :: Lens' Finding Text
- finding_arn :: Lens' Finding Text
- finding_createdAt :: Lens' Finding Text
- finding_id :: Lens' Finding Text
- finding_region :: Lens' Finding Text
- finding_resource :: Lens' Finding Resource
- finding_schemaVersion :: Lens' Finding Text
- finding_severity :: Lens' Finding Double
- finding_type :: Lens' Finding Text
- finding_updatedAt :: Lens' Finding Text
- data FindingCriteria = FindingCriteria' {}
- newFindingCriteria :: FindingCriteria
- findingCriteria_criterion :: Lens' FindingCriteria (Maybe (HashMap Text Condition))
- data FindingStatistics = FindingStatistics' {
- countBySeverity :: Maybe (HashMap Text Int)
- newFindingStatistics :: FindingStatistics
- findingStatistics_countBySeverity :: Lens' FindingStatistics (Maybe (HashMap Text Int))
- data FlowLogsConfigurationResult = FlowLogsConfigurationResult' {}
- newFlowLogsConfigurationResult :: DataSourceStatus -> FlowLogsConfigurationResult
- flowLogsConfigurationResult_status :: Lens' FlowLogsConfigurationResult DataSourceStatus
- data GeoLocation = GeoLocation' {}
- newGeoLocation :: GeoLocation
- geoLocation_lat :: Lens' GeoLocation (Maybe Double)
- geoLocation_lon :: Lens' GeoLocation (Maybe Double)
- data IamInstanceProfile = IamInstanceProfile' {}
- newIamInstanceProfile :: IamInstanceProfile
- iamInstanceProfile_arn :: Lens' IamInstanceProfile (Maybe Text)
- iamInstanceProfile_id :: Lens' IamInstanceProfile (Maybe Text)
- data InstanceDetails = InstanceDetails' {
- instanceId :: Maybe Text
- platform :: Maybe Text
- launchTime :: Maybe Text
- networkInterfaces :: Maybe [NetworkInterface]
- outpostArn :: Maybe Text
- instanceType :: Maybe Text
- availabilityZone :: Maybe Text
- iamInstanceProfile :: Maybe IamInstanceProfile
- imageId :: Maybe Text
- productCodes :: Maybe [ProductCode]
- instanceState :: Maybe Text
- tags :: Maybe [Tag]
- imageDescription :: Maybe Text
- newInstanceDetails :: InstanceDetails
- instanceDetails_instanceId :: Lens' InstanceDetails (Maybe Text)
- instanceDetails_platform :: Lens' InstanceDetails (Maybe Text)
- instanceDetails_launchTime :: Lens' InstanceDetails (Maybe Text)
- instanceDetails_networkInterfaces :: Lens' InstanceDetails (Maybe [NetworkInterface])
- instanceDetails_outpostArn :: Lens' InstanceDetails (Maybe Text)
- instanceDetails_instanceType :: Lens' InstanceDetails (Maybe Text)
- instanceDetails_availabilityZone :: Lens' InstanceDetails (Maybe Text)
- instanceDetails_iamInstanceProfile :: Lens' InstanceDetails (Maybe IamInstanceProfile)
- instanceDetails_imageId :: Lens' InstanceDetails (Maybe Text)
- instanceDetails_productCodes :: Lens' InstanceDetails (Maybe [ProductCode])
- instanceDetails_instanceState :: Lens' InstanceDetails (Maybe Text)
- instanceDetails_tags :: Lens' InstanceDetails (Maybe [Tag])
- instanceDetails_imageDescription :: Lens' InstanceDetails (Maybe Text)
- data Invitation = Invitation' {}
- newInvitation :: Invitation
- invitation_invitedAt :: Lens' Invitation (Maybe Text)
- invitation_relationshipStatus :: Lens' Invitation (Maybe Text)
- invitation_invitationId :: Lens' Invitation (Maybe Text)
- invitation_accountId :: Lens' Invitation (Maybe Text)
- data LocalIpDetails = LocalIpDetails' {
- ipAddressV4 :: Maybe Text
- newLocalIpDetails :: LocalIpDetails
- localIpDetails_ipAddressV4 :: Lens' LocalIpDetails (Maybe Text)
- data LocalPortDetails = LocalPortDetails' {}
- newLocalPortDetails :: LocalPortDetails
- localPortDetails_portName :: Lens' LocalPortDetails (Maybe Text)
- localPortDetails_port :: Lens' LocalPortDetails (Maybe Int)
- data Master = Master' {}
- newMaster :: Master
- master_invitedAt :: Lens' Master (Maybe Text)
- master_relationshipStatus :: Lens' Master (Maybe Text)
- master_invitationId :: Lens' Master (Maybe Text)
- master_accountId :: Lens' Master (Maybe Text)
- data Member = Member' {}
- newMember :: Text -> Text -> Text -> Text -> Text -> Member
- member_invitedAt :: Lens' Member (Maybe Text)
- member_detectorId :: Lens' Member (Maybe Text)
- member_accountId :: Lens' Member Text
- member_masterId :: Lens' Member Text
- member_email :: Lens' Member Text
- member_relationshipStatus :: Lens' Member Text
- member_updatedAt :: Lens' Member Text
- data MemberDataSourceConfiguration = MemberDataSourceConfiguration' {}
- newMemberDataSourceConfiguration :: Text -> DataSourceConfigurationsResult -> MemberDataSourceConfiguration
- memberDataSourceConfiguration_accountId :: Lens' MemberDataSourceConfiguration Text
- memberDataSourceConfiguration_dataSources :: Lens' MemberDataSourceConfiguration DataSourceConfigurationsResult
- data NetworkConnectionAction = NetworkConnectionAction' {}
- newNetworkConnectionAction :: NetworkConnectionAction
- networkConnectionAction_remoteIpDetails :: Lens' NetworkConnectionAction (Maybe RemoteIpDetails)
- networkConnectionAction_protocol :: Lens' NetworkConnectionAction (Maybe Text)
- networkConnectionAction_localIpDetails :: Lens' NetworkConnectionAction (Maybe LocalIpDetails)
- networkConnectionAction_remotePortDetails :: Lens' NetworkConnectionAction (Maybe RemotePortDetails)
- networkConnectionAction_blocked :: Lens' NetworkConnectionAction (Maybe Bool)
- networkConnectionAction_connectionDirection :: Lens' NetworkConnectionAction (Maybe Text)
- networkConnectionAction_localPortDetails :: Lens' NetworkConnectionAction (Maybe LocalPortDetails)
- data NetworkInterface = NetworkInterface' {
- privateIpAddresses :: Maybe [PrivateIpAddressDetails]
- publicDnsName :: Maybe Text
- securityGroups :: Maybe [SecurityGroup]
- vpcId :: Maybe Text
- networkInterfaceId :: Maybe Text
- subnetId :: Maybe Text
- privateIpAddress :: Maybe Text
- publicIp :: Maybe Text
- privateDnsName :: Maybe Text
- ipv6Addresses :: Maybe [Text]
- newNetworkInterface :: NetworkInterface
- networkInterface_privateIpAddresses :: Lens' NetworkInterface (Maybe [PrivateIpAddressDetails])
- networkInterface_publicDnsName :: Lens' NetworkInterface (Maybe Text)
- networkInterface_securityGroups :: Lens' NetworkInterface (Maybe [SecurityGroup])
- networkInterface_vpcId :: Lens' NetworkInterface (Maybe Text)
- networkInterface_networkInterfaceId :: Lens' NetworkInterface (Maybe Text)
- networkInterface_subnetId :: Lens' NetworkInterface (Maybe Text)
- networkInterface_privateIpAddress :: Lens' NetworkInterface (Maybe Text)
- networkInterface_publicIp :: Lens' NetworkInterface (Maybe Text)
- networkInterface_privateDnsName :: Lens' NetworkInterface (Maybe Text)
- networkInterface_ipv6Addresses :: Lens' NetworkInterface (Maybe [Text])
- data Organization = Organization' {}
- newOrganization :: Organization
- organization_org :: Lens' Organization (Maybe Text)
- organization_asnOrg :: Lens' Organization (Maybe Text)
- organization_asn :: Lens' Organization (Maybe Text)
- organization_isp :: Lens' Organization (Maybe Text)
- data OrganizationDataSourceConfigurations = OrganizationDataSourceConfigurations' {}
- newOrganizationDataSourceConfigurations :: OrganizationDataSourceConfigurations
- organizationDataSourceConfigurations_s3Logs :: Lens' OrganizationDataSourceConfigurations (Maybe OrganizationS3LogsConfiguration)
- data OrganizationDataSourceConfigurationsResult = OrganizationDataSourceConfigurationsResult' {}
- newOrganizationDataSourceConfigurationsResult :: OrganizationS3LogsConfigurationResult -> OrganizationDataSourceConfigurationsResult
- organizationDataSourceConfigurationsResult_s3Logs :: Lens' OrganizationDataSourceConfigurationsResult OrganizationS3LogsConfigurationResult
- data OrganizationS3LogsConfiguration = OrganizationS3LogsConfiguration' {
- autoEnable :: Bool
- newOrganizationS3LogsConfiguration :: Bool -> OrganizationS3LogsConfiguration
- organizationS3LogsConfiguration_autoEnable :: Lens' OrganizationS3LogsConfiguration Bool
- data OrganizationS3LogsConfigurationResult = OrganizationS3LogsConfigurationResult' {
- autoEnable :: Bool
- newOrganizationS3LogsConfigurationResult :: Bool -> OrganizationS3LogsConfigurationResult
- organizationS3LogsConfigurationResult_autoEnable :: Lens' OrganizationS3LogsConfigurationResult Bool
- data Owner = Owner' {}
- newOwner :: Owner
- owner_id :: Lens' Owner (Maybe Text)
- data PermissionConfiguration = PermissionConfiguration' {}
- newPermissionConfiguration :: PermissionConfiguration
- permissionConfiguration_bucketLevelPermissions :: Lens' PermissionConfiguration (Maybe BucketLevelPermissions)
- permissionConfiguration_accountLevelPermissions :: Lens' PermissionConfiguration (Maybe AccountLevelPermissions)
- data PortProbeAction = PortProbeAction' {}
- newPortProbeAction :: PortProbeAction
- portProbeAction_portProbeDetails :: Lens' PortProbeAction (Maybe [PortProbeDetail])
- portProbeAction_blocked :: Lens' PortProbeAction (Maybe Bool)
- data PortProbeDetail = PortProbeDetail' {}
- newPortProbeDetail :: PortProbeDetail
- portProbeDetail_remoteIpDetails :: Lens' PortProbeDetail (Maybe RemoteIpDetails)
- portProbeDetail_localIpDetails :: Lens' PortProbeDetail (Maybe LocalIpDetails)
- portProbeDetail_localPortDetails :: Lens' PortProbeDetail (Maybe LocalPortDetails)
- data PrivateIpAddressDetails = PrivateIpAddressDetails' {}
- newPrivateIpAddressDetails :: PrivateIpAddressDetails
- privateIpAddressDetails_privateIpAddress :: Lens' PrivateIpAddressDetails (Maybe Text)
- privateIpAddressDetails_privateDnsName :: Lens' PrivateIpAddressDetails (Maybe Text)
- data ProductCode = ProductCode' {}
- newProductCode :: ProductCode
- productCode_productType :: Lens' ProductCode (Maybe Text)
- productCode_code :: Lens' ProductCode (Maybe Text)
- data PublicAccess = PublicAccess' {}
- newPublicAccess :: PublicAccess
- publicAccess_permissionConfiguration :: Lens' PublicAccess (Maybe PermissionConfiguration)
- publicAccess_effectivePermission :: Lens' PublicAccess (Maybe Text)
- data RemoteIpDetails = RemoteIpDetails' {}
- newRemoteIpDetails :: RemoteIpDetails
- remoteIpDetails_country :: Lens' RemoteIpDetails (Maybe Country)
- remoteIpDetails_city :: Lens' RemoteIpDetails (Maybe City)
- remoteIpDetails_ipAddressV4 :: Lens' RemoteIpDetails (Maybe Text)
- remoteIpDetails_geoLocation :: Lens' RemoteIpDetails (Maybe GeoLocation)
- remoteIpDetails_organization :: Lens' RemoteIpDetails (Maybe Organization)
- data RemotePortDetails = RemotePortDetails' {}
- newRemotePortDetails :: RemotePortDetails
- remotePortDetails_portName :: Lens' RemotePortDetails (Maybe Text)
- remotePortDetails_port :: Lens' RemotePortDetails (Maybe Int)
- data Resource = Resource' {}
- newResource :: Resource
- resource_resourceType :: Lens' Resource (Maybe Text)
- resource_s3BucketDetails :: Lens' Resource (Maybe [S3BucketDetail])
- resource_instanceDetails :: Lens' Resource (Maybe InstanceDetails)
- resource_accessKeyDetails :: Lens' Resource (Maybe AccessKeyDetails)
- data S3BucketDetail = S3BucketDetail' {}
- newS3BucketDetail :: S3BucketDetail
- s3BucketDetail_arn :: Lens' S3BucketDetail (Maybe Text)
- s3BucketDetail_createdAt :: Lens' S3BucketDetail (Maybe UTCTime)
- s3BucketDetail_owner :: Lens' S3BucketDetail (Maybe Owner)
- s3BucketDetail_name :: Lens' S3BucketDetail (Maybe Text)
- s3BucketDetail_defaultServerSideEncryption :: Lens' S3BucketDetail (Maybe DefaultServerSideEncryption)
- s3BucketDetail_publicAccess :: Lens' S3BucketDetail (Maybe PublicAccess)
- s3BucketDetail_type :: Lens' S3BucketDetail (Maybe Text)
- s3BucketDetail_tags :: Lens' S3BucketDetail (Maybe [Tag])
- data S3LogsConfiguration = S3LogsConfiguration' {}
- newS3LogsConfiguration :: Bool -> S3LogsConfiguration
- s3LogsConfiguration_enable :: Lens' S3LogsConfiguration Bool
- data S3LogsConfigurationResult = S3LogsConfigurationResult' {}
- newS3LogsConfigurationResult :: DataSourceStatus -> S3LogsConfigurationResult
- s3LogsConfigurationResult_status :: Lens' S3LogsConfigurationResult DataSourceStatus
- data SecurityGroup = SecurityGroup' {}
- newSecurityGroup :: SecurityGroup
- securityGroup_groupId :: Lens' SecurityGroup (Maybe Text)
- securityGroup_groupName :: Lens' SecurityGroup (Maybe Text)
- data ServiceInfo = ServiceInfo' {
- count :: Maybe Int
- eventFirstSeen :: Maybe Text
- action :: Maybe Action
- detectorId :: Maybe Text
- serviceName :: Maybe Text
- userFeedback :: Maybe Text
- evidence :: Maybe Evidence
- eventLastSeen :: Maybe Text
- resourceRole :: Maybe Text
- archived :: Maybe Bool
- newServiceInfo :: ServiceInfo
- serviceInfo_count :: Lens' ServiceInfo (Maybe Int)
- serviceInfo_eventFirstSeen :: Lens' ServiceInfo (Maybe Text)
- serviceInfo_action :: Lens' ServiceInfo (Maybe Action)
- serviceInfo_detectorId :: Lens' ServiceInfo (Maybe Text)
- serviceInfo_serviceName :: Lens' ServiceInfo (Maybe Text)
- serviceInfo_userFeedback :: Lens' ServiceInfo (Maybe Text)
- serviceInfo_evidence :: Lens' ServiceInfo (Maybe Evidence)
- serviceInfo_eventLastSeen :: Lens' ServiceInfo (Maybe Text)
- serviceInfo_resourceRole :: Lens' ServiceInfo (Maybe Text)
- serviceInfo_archived :: Lens' ServiceInfo (Maybe Bool)
- data SortCriteria = SortCriteria' {}
- newSortCriteria :: SortCriteria
- sortCriteria_orderBy :: Lens' SortCriteria (Maybe OrderBy)
- sortCriteria_attributeName :: Lens' SortCriteria (Maybe Text)
- data Tag = Tag' {}
- newTag :: Tag
- tag_value :: Lens' Tag (Maybe Text)
- tag_key :: Lens' Tag (Maybe Text)
- data ThreatIntelligenceDetail = ThreatIntelligenceDetail' {
- threatNames :: Maybe [Text]
- threatListName :: Maybe Text
- newThreatIntelligenceDetail :: ThreatIntelligenceDetail
- threatIntelligenceDetail_threatNames :: Lens' ThreatIntelligenceDetail (Maybe [Text])
- threatIntelligenceDetail_threatListName :: Lens' ThreatIntelligenceDetail (Maybe Text)
- data Total = Total' {}
- newTotal :: Total
- total_amount :: Lens' Total (Maybe Text)
- total_unit :: Lens' Total (Maybe Text)
- data UnprocessedAccount = UnprocessedAccount' {}
- newUnprocessedAccount :: Text -> Text -> UnprocessedAccount
- unprocessedAccount_accountId :: Lens' UnprocessedAccount Text
- unprocessedAccount_result :: Lens' UnprocessedAccount Text
- data UsageAccountResult = UsageAccountResult' {}
- newUsageAccountResult :: UsageAccountResult
- usageAccountResult_accountId :: Lens' UsageAccountResult (Maybe Text)
- usageAccountResult_total :: Lens' UsageAccountResult (Maybe Total)
- data UsageCriteria = UsageCriteria' {
- accountIds :: Maybe (NonEmpty Text)
- resources :: Maybe [Text]
- dataSources :: [DataSource]
- newUsageCriteria :: UsageCriteria
- usageCriteria_accountIds :: Lens' UsageCriteria (Maybe (NonEmpty Text))
- usageCriteria_resources :: Lens' UsageCriteria (Maybe [Text])
- usageCriteria_dataSources :: Lens' UsageCriteria [DataSource]
- data UsageDataSourceResult = UsageDataSourceResult' {
- total :: Maybe Total
- dataSource :: Maybe DataSource
- newUsageDataSourceResult :: UsageDataSourceResult
- usageDataSourceResult_total :: Lens' UsageDataSourceResult (Maybe Total)
- usageDataSourceResult_dataSource :: Lens' UsageDataSourceResult (Maybe DataSource)
- data UsageResourceResult = UsageResourceResult' {}
- newUsageResourceResult :: UsageResourceResult
- usageResourceResult_total :: Lens' UsageResourceResult (Maybe Total)
- usageResourceResult_resource :: Lens' UsageResourceResult (Maybe Text)
- data UsageStatistics = UsageStatistics' {}
- newUsageStatistics :: UsageStatistics
- usageStatistics_topResources :: Lens' UsageStatistics (Maybe [UsageResourceResult])
- usageStatistics_sumByResource :: Lens' UsageStatistics (Maybe [UsageResourceResult])
- usageStatistics_sumByDataSource :: Lens' UsageStatistics (Maybe [UsageDataSourceResult])
- usageStatistics_sumByAccount :: Lens' UsageStatistics (Maybe [UsageAccountResult])
Service Configuration
defaultService :: Service Source #
API version 2017-11-28 of the Amazon GuardDuty SDK configuration.
Errors
_InternalServerErrorException :: AsError a => Getting (First ServiceError) a ServiceError Source #
An internal server error exception object.
_BadRequestException :: AsError a => Getting (First ServiceError) a ServiceError Source #
A bad request exception object.
AdminStatus
newtype AdminStatus Source #
Constructors
| AdminStatus' | |
Fields | |
Bundled Patterns
| pattern AdminStatus_DISABLE_IN_PROGRESS :: AdminStatus | |
| pattern AdminStatus_ENABLED :: AdminStatus |
Instances
DataSource
newtype DataSource Source #
Constructors
| DataSource' | |
Fields | |
Bundled Patterns
| pattern DataSource_CLOUD_TRAIL :: DataSource | |
| pattern DataSource_DNS_LOGS :: DataSource | |
| pattern DataSource_FLOW_LOGS :: DataSource | |
| pattern DataSource_S3_LOGS :: DataSource |
Instances
DataSourceStatus
newtype DataSourceStatus Source #
Constructors
| DataSourceStatus' | |
Fields | |
Bundled Patterns
| pattern DataSourceStatus_DISABLED :: DataSourceStatus | |
| pattern DataSourceStatus_ENABLED :: DataSourceStatus |
Instances
DestinationType
newtype DestinationType Source #
Constructors
| DestinationType' | |
Fields | |
Bundled Patterns
| pattern DestinationType_S3 :: DestinationType |
Instances
DetectorStatus
newtype DetectorStatus Source #
Constructors
| DetectorStatus' | |
Fields | |
Bundled Patterns
| pattern DetectorStatus_DISABLED :: DetectorStatus | |
| pattern DetectorStatus_ENABLED :: DetectorStatus |
Instances
Feedback
Constructors
| Feedback' | |
Fields
| |
Bundled Patterns
| pattern Feedback_NOT_USEFUL :: Feedback | |
| pattern Feedback_USEFUL :: Feedback |
Instances
FilterAction
newtype FilterAction Source #
Constructors
| FilterAction' | |
Fields | |
Bundled Patterns
| pattern FilterAction_ARCHIVE :: FilterAction | |
| pattern FilterAction_NOOP :: FilterAction |
Instances
FindingPublishingFrequency
newtype FindingPublishingFrequency Source #
Constructors
| FindingPublishingFrequency' | |
Fields | |
Bundled Patterns
Instances
FindingStatisticType
newtype FindingStatisticType Source #
Constructors
| FindingStatisticType' | |
Fields | |
Bundled Patterns
| pattern FindingStatisticType_COUNT_BY_SEVERITY :: FindingStatisticType |
Instances
IpSetFormat
newtype IpSetFormat Source #
Constructors
| IpSetFormat' | |
Fields | |
Bundled Patterns
| pattern IpSetFormat_ALIEN_VAULT :: IpSetFormat | |
| pattern IpSetFormat_FIRE_EYE :: IpSetFormat | |
| pattern IpSetFormat_OTX_CSV :: IpSetFormat | |
| pattern IpSetFormat_PROOF_POINT :: IpSetFormat | |
| pattern IpSetFormat_STIX :: IpSetFormat | |
| pattern IpSetFormat_TXT :: IpSetFormat |
Instances
IpSetStatus
newtype IpSetStatus Source #
Constructors
| IpSetStatus' | |
Fields | |
Bundled Patterns
| pattern IpSetStatus_ACTIVATING :: IpSetStatus | |
| pattern IpSetStatus_ACTIVE :: IpSetStatus | |
| pattern IpSetStatus_DEACTIVATING :: IpSetStatus | |
| pattern IpSetStatus_DELETED :: IpSetStatus | |
| pattern IpSetStatus_DELETE_PENDING :: IpSetStatus | |
| pattern IpSetStatus_ERROR :: IpSetStatus | |
| pattern IpSetStatus_INACTIVE :: IpSetStatus |
Instances
OrderBy
Constructors
| OrderBy' | |
Fields
| |
Bundled Patterns
| pattern OrderBy_ASC :: OrderBy | |
| pattern OrderBy_DESC :: OrderBy |
Instances
PublishingStatus
newtype PublishingStatus Source #
Constructors
| PublishingStatus' | |
Fields | |
Bundled Patterns
Instances
ThreatIntelSetFormat
newtype ThreatIntelSetFormat Source #
Constructors
| ThreatIntelSetFormat' | |
Fields | |
Bundled Patterns
| pattern ThreatIntelSetFormat_ALIEN_VAULT :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_FIRE_EYE :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_OTX_CSV :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_PROOF_POINT :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_STIX :: ThreatIntelSetFormat | |
| pattern ThreatIntelSetFormat_TXT :: ThreatIntelSetFormat |
Instances
ThreatIntelSetStatus
newtype ThreatIntelSetStatus Source #
Constructors
| ThreatIntelSetStatus' | |
Fields | |
Bundled Patterns
| pattern ThreatIntelSetStatus_ACTIVATING :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_ACTIVE :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_DEACTIVATING :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_DELETED :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_DELETE_PENDING :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_ERROR :: ThreatIntelSetStatus | |
| pattern ThreatIntelSetStatus_INACTIVE :: ThreatIntelSetStatus |
Instances
UsageStatisticType
newtype UsageStatisticType Source #
Constructors
| UsageStatisticType' | |
Fields | |
Bundled Patterns
Instances
AccessControlList
data AccessControlList Source #
Contains information on the current access control policies for the bucket.
See: newAccessControlList smart constructor.
Constructors
| AccessControlList' | |
Fields
| |
Instances
newAccessControlList :: AccessControlList Source #
Create a value of AccessControlList with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:allowsPublicWriteAccess:AccessControlList', accessControlList_allowsPublicWriteAccess - A value that indicates whether public write access for the bucket is
enabled through an Access Control List (ACL).
$sel:allowsPublicReadAccess:AccessControlList', accessControlList_allowsPublicReadAccess - A value that indicates whether public read access for the bucket is
enabled through an Access Control List (ACL).
accessControlList_allowsPublicWriteAccess :: Lens' AccessControlList (Maybe Bool) Source #
A value that indicates whether public write access for the bucket is enabled through an Access Control List (ACL).
accessControlList_allowsPublicReadAccess :: Lens' AccessControlList (Maybe Bool) Source #
A value that indicates whether public read access for the bucket is enabled through an Access Control List (ACL).
AccessKeyDetails
data AccessKeyDetails Source #
Contains information about the access keys.
See: newAccessKeyDetails smart constructor.
Constructors
| AccessKeyDetails' | |
Instances
newAccessKeyDetails :: AccessKeyDetails Source #
Create a value of AccessKeyDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:principalId:AccessKeyDetails', accessKeyDetails_principalId - The principal ID of the user.
$sel:userName:AccessKeyDetails', accessKeyDetails_userName - The name of the user.
$sel:accessKeyId:AccessKeyDetails', accessKeyDetails_accessKeyId - The access key ID of the user.
$sel:userType:AccessKeyDetails', accessKeyDetails_userType - The type of the user.
accessKeyDetails_principalId :: Lens' AccessKeyDetails (Maybe Text) Source #
The principal ID of the user.
accessKeyDetails_userName :: Lens' AccessKeyDetails (Maybe Text) Source #
The name of the user.
accessKeyDetails_accessKeyId :: Lens' AccessKeyDetails (Maybe Text) Source #
The access key ID of the user.
accessKeyDetails_userType :: Lens' AccessKeyDetails (Maybe Text) Source #
The type of the user.
AccountDetail
data AccountDetail Source #
Contains information about the account.
See: newAccountDetail smart constructor.
Constructors
| AccountDetail' | |
Instances
Create a value of AccountDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:AccountDetail', accountDetail_accountId - The member account ID.
$sel:email:AccountDetail', accountDetail_email - The email address of the member account.
accountDetail_accountId :: Lens' AccountDetail Text Source #
The member account ID.
accountDetail_email :: Lens' AccountDetail Text Source #
The email address of the member account.
AccountLevelPermissions
data AccountLevelPermissions Source #
Contains information about the account level permissions on the S3 bucket.
See: newAccountLevelPermissions smart constructor.
Constructors
| AccountLevelPermissions' | |
Fields
| |
Instances
newAccountLevelPermissions :: AccountLevelPermissions Source #
Create a value of AccountLevelPermissions with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:blockPublicAccess:AccountLevelPermissions', accountLevelPermissions_blockPublicAccess - Describes the S3 Block Public Access settings of the bucket's parent
account.
accountLevelPermissions_blockPublicAccess :: Lens' AccountLevelPermissions (Maybe BlockPublicAccess) Source #
Describes the S3 Block Public Access settings of the bucket's parent account.
Action
Contains information about actions.
See: newAction smart constructor.
Constructors
| Action' | |
Fields
| |
Instances
Create a value of Action with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:networkConnectionAction:Action', action_networkConnectionAction - Information about the NETWORK_CONNECTION action described in this
finding.
$sel:portProbeAction:Action', action_portProbeAction - Information about the PORT_PROBE action described in this finding.
$sel:actionType:Action', action_actionType - The GuardDuty finding activity type.
$sel:dnsRequestAction:Action', action_dnsRequestAction - Information about the DNS_REQUEST action described in this finding.
$sel:awsApiCallAction:Action', action_awsApiCallAction - Information about the AWS_API_CALL action described in this finding.
action_networkConnectionAction :: Lens' Action (Maybe NetworkConnectionAction) Source #
Information about the NETWORK_CONNECTION action described in this finding.
action_portProbeAction :: Lens' Action (Maybe PortProbeAction) Source #
Information about the PORT_PROBE action described in this finding.
action_dnsRequestAction :: Lens' Action (Maybe DnsRequestAction) Source #
Information about the DNS_REQUEST action described in this finding.
action_awsApiCallAction :: Lens' Action (Maybe AwsApiCallAction) Source #
Information about the AWS_API_CALL action described in this finding.
AdminAccount
data AdminAccount Source #
The account within the organization specified as the GuardDuty delegated administrator.
See: newAdminAccount smart constructor.
Constructors
| AdminAccount' | |
Fields
| |
Instances
newAdminAccount :: AdminAccount Source #
Create a value of AdminAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:adminAccountId:AdminAccount', adminAccount_adminAccountId - The AWS account ID for the account.
$sel:adminStatus:AdminAccount', adminAccount_adminStatus - Indicates whether the account is enabled as the delegated administrator.
adminAccount_adminAccountId :: Lens' AdminAccount (Maybe Text) Source #
The AWS account ID for the account.
adminAccount_adminStatus :: Lens' AdminAccount (Maybe AdminStatus) Source #
Indicates whether the account is enabled as the delegated administrator.
AwsApiCallAction
data AwsApiCallAction Source #
Contains information about the API action.
See: newAwsApiCallAction smart constructor.
Constructors
| AwsApiCallAction' | |
Fields
| |
Instances
newAwsApiCallAction :: AwsApiCallAction Source #
Create a value of AwsApiCallAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:remoteIpDetails:AwsApiCallAction', awsApiCallAction_remoteIpDetails - The remote IP information of the connection that initiated the AWS API
call.
$sel:callerType:AwsApiCallAction', awsApiCallAction_callerType - The AWS API caller type.
$sel:domainDetails:AwsApiCallAction', awsApiCallAction_domainDetails - The domain information for the AWS API call.
$sel:serviceName:AwsApiCallAction', awsApiCallAction_serviceName - The AWS service name whose API was invoked.
$sel:errorCode:AwsApiCallAction', awsApiCallAction_errorCode - The error code of the failed AWS API action.
$sel:api:AwsApiCallAction', awsApiCallAction_api - The AWS API name.
awsApiCallAction_remoteIpDetails :: Lens' AwsApiCallAction (Maybe RemoteIpDetails) Source #
The remote IP information of the connection that initiated the AWS API call.
awsApiCallAction_callerType :: Lens' AwsApiCallAction (Maybe Text) Source #
The AWS API caller type.
awsApiCallAction_domainDetails :: Lens' AwsApiCallAction (Maybe DomainDetails) Source #
The domain information for the AWS API call.
awsApiCallAction_serviceName :: Lens' AwsApiCallAction (Maybe Text) Source #
The AWS service name whose API was invoked.
awsApiCallAction_errorCode :: Lens' AwsApiCallAction (Maybe Text) Source #
The error code of the failed AWS API action.
awsApiCallAction_api :: Lens' AwsApiCallAction (Maybe Text) Source #
The AWS API name.
BlockPublicAccess
data BlockPublicAccess Source #
Contains information on how the bucker owner's S3 Block Public Access settings are being applied to the S3 bucket. See S3 Block Public Access for more information.
See: newBlockPublicAccess smart constructor.
Constructors
| BlockPublicAccess' | |
Fields
| |
Instances
newBlockPublicAccess :: BlockPublicAccess Source #
Create a value of BlockPublicAccess with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ignorePublicAcls:BlockPublicAccess', blockPublicAccess_ignorePublicAcls - Indicates if S3 Block Public Access is set to IgnorePublicAcls.
$sel:blockPublicAcls:BlockPublicAccess', blockPublicAccess_blockPublicAcls - Indicates if S3 Block Public Access is set to BlockPublicAcls.
$sel:restrictPublicBuckets:BlockPublicAccess', blockPublicAccess_restrictPublicBuckets - Indicates if S3 Block Public Access is set to RestrictPublicBuckets.
$sel:blockPublicPolicy:BlockPublicAccess', blockPublicAccess_blockPublicPolicy - Indicates if S3 Block Public Access is set to BlockPublicPolicy.
blockPublicAccess_ignorePublicAcls :: Lens' BlockPublicAccess (Maybe Bool) Source #
Indicates if S3 Block Public Access is set to IgnorePublicAcls.
blockPublicAccess_blockPublicAcls :: Lens' BlockPublicAccess (Maybe Bool) Source #
Indicates if S3 Block Public Access is set to BlockPublicAcls.
blockPublicAccess_restrictPublicBuckets :: Lens' BlockPublicAccess (Maybe Bool) Source #
Indicates if S3 Block Public Access is set to RestrictPublicBuckets.
blockPublicAccess_blockPublicPolicy :: Lens' BlockPublicAccess (Maybe Bool) Source #
Indicates if S3 Block Public Access is set to BlockPublicPolicy.
BucketLevelPermissions
data BucketLevelPermissions Source #
Contains information about the bucket level permissions for the S3 bucket.
See: newBucketLevelPermissions smart constructor.
Constructors
| BucketLevelPermissions' | |
Fields
| |
Instances
newBucketLevelPermissions :: BucketLevelPermissions Source #
Create a value of BucketLevelPermissions with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accessControlList:BucketLevelPermissions', bucketLevelPermissions_accessControlList - Contains information on how Access Control Policies are applied to the
bucket.
$sel:blockPublicAccess:BucketLevelPermissions', bucketLevelPermissions_blockPublicAccess - Contains information on which account level S3 Block Public Access
settings are applied to the S3 bucket.
$sel:bucketPolicy:BucketLevelPermissions', bucketLevelPermissions_bucketPolicy - Contains information on the bucket policies for the S3 bucket.
bucketLevelPermissions_accessControlList :: Lens' BucketLevelPermissions (Maybe AccessControlList) Source #
Contains information on how Access Control Policies are applied to the bucket.
bucketLevelPermissions_blockPublicAccess :: Lens' BucketLevelPermissions (Maybe BlockPublicAccess) Source #
Contains information on which account level S3 Block Public Access settings are applied to the S3 bucket.
bucketLevelPermissions_bucketPolicy :: Lens' BucketLevelPermissions (Maybe BucketPolicy) Source #
Contains information on the bucket policies for the S3 bucket.
BucketPolicy
data BucketPolicy Source #
Contains information on the current bucket policies for the S3 bucket.
See: newBucketPolicy smart constructor.
Constructors
| BucketPolicy' | |
Fields
| |
Instances
newBucketPolicy :: BucketPolicy Source #
Create a value of BucketPolicy with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:allowsPublicWriteAccess:BucketPolicy', bucketPolicy_allowsPublicWriteAccess - A value that indicates whether public write access for the bucket is
enabled through a bucket policy.
$sel:allowsPublicReadAccess:BucketPolicy', bucketPolicy_allowsPublicReadAccess - A value that indicates whether public read access for the bucket is
enabled through a bucket policy.
bucketPolicy_allowsPublicWriteAccess :: Lens' BucketPolicy (Maybe Bool) Source #
A value that indicates whether public write access for the bucket is enabled through a bucket policy.
bucketPolicy_allowsPublicReadAccess :: Lens' BucketPolicy (Maybe Bool) Source #
A value that indicates whether public read access for the bucket is enabled through a bucket policy.
City
Contains information about the city associated with the IP address.
See: newCity smart constructor.
Create a value of City with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:cityName:City', city_cityName - The city name of the remote IP address.
CloudTrailConfigurationResult
data CloudTrailConfigurationResult Source #
Contains information on the status of CloudTrail as a data source for the detector.
See: newCloudTrailConfigurationResult smart constructor.
Constructors
| CloudTrailConfigurationResult' | |
Fields
| |
Instances
newCloudTrailConfigurationResult Source #
Arguments
| :: DataSourceStatus | |
| -> CloudTrailConfigurationResult |
Create a value of CloudTrailConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:CloudTrailConfigurationResult', cloudTrailConfigurationResult_status - Describes whether CloudTrail is enabled as a data source for the
detector.
cloudTrailConfigurationResult_status :: Lens' CloudTrailConfigurationResult DataSourceStatus Source #
Describes whether CloudTrail is enabled as a data source for the detector.
Condition
Contains information about the condition.
See: newCondition smart constructor.
Constructors
| Condition' | |
Fields
| |
Instances
newCondition :: Condition Source #
Create a value of Condition with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:eq:Condition', condition_eq - Represents the equal condition to be applied to a single field when
querying for findings.
$sel:lessThan:Condition', condition_lessThan - Represents a less than condition to be applied to a single field when
querying for findings.
$sel:lte:Condition', condition_lte - Represents a less than or equal condition to be applied to a single
field when querying for findings.
$sel:greaterThanOrEqual:Condition', condition_greaterThanOrEqual - Represents a greater than or equal condition to be applied to a single
field when querying for findings.
$sel:lessThanOrEqual:Condition', condition_lessThanOrEqual - Represents a less than or equal condition to be applied to a single
field when querying for findings.
$sel:gt:Condition', condition_gt - Represents a greater than condition to be applied to a single field
when querying for findings.
$sel:equals:Condition', condition_equals - Represents an equal ____ condition to be applied to a single field
when querying for findings.
$sel:neq:Condition', condition_neq - Represents the not equal condition to be applied to a single field
when querying for findings.
$sel:notEquals:Condition', condition_notEquals - Represents a not equal ____ condition to be applied to a single field
when querying for findings.
$sel:lt:Condition', condition_lt - Represents a less than condition to be applied to a single field when
querying for findings.
$sel:gte:Condition', condition_gte - Represents a greater than or equal condition to be applied to a single
field when querying for findings.
$sel:greaterThan:Condition', condition_greaterThan - Represents a greater than condition to be applied to a single field
when querying for findings.
condition_eq :: Lens' Condition (Maybe [Text]) Source #
Represents the equal condition to be applied to a single field when querying for findings.
condition_lessThan :: Lens' Condition (Maybe Integer) Source #
Represents a less than condition to be applied to a single field when querying for findings.
condition_lte :: Lens' Condition (Maybe Int) Source #
Represents a less than or equal condition to be applied to a single field when querying for findings.
condition_greaterThanOrEqual :: Lens' Condition (Maybe Integer) Source #
Represents a greater than or equal condition to be applied to a single field when querying for findings.
condition_lessThanOrEqual :: Lens' Condition (Maybe Integer) Source #
Represents a less than or equal condition to be applied to a single field when querying for findings.
condition_gt :: Lens' Condition (Maybe Int) Source #
Represents a greater than condition to be applied to a single field when querying for findings.
condition_equals :: Lens' Condition (Maybe [Text]) Source #
Represents an equal ____ condition to be applied to a single field when querying for findings.
condition_neq :: Lens' Condition (Maybe [Text]) Source #
Represents the not equal condition to be applied to a single field when querying for findings.
condition_notEquals :: Lens' Condition (Maybe [Text]) Source #
Represents a not equal ____ condition to be applied to a single field when querying for findings.
condition_lt :: Lens' Condition (Maybe Int) Source #
Represents a less than condition to be applied to a single field when querying for findings.
condition_gte :: Lens' Condition (Maybe Int) Source #
Represents a greater than or equal condition to be applied to a single field when querying for findings.
condition_greaterThan :: Lens' Condition (Maybe Integer) Source #
Represents a greater than condition to be applied to a single field when querying for findings.
Country
Contains information about the country where the remote IP address is located.
See: newCountry smart constructor.
Constructors
| Country' | |
Fields
| |
Instances
| Eq Country Source # | |
| Read Country Source # | |
| Show Country Source # | |
| Generic Country Source # | |
| NFData Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country | |
| Hashable Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country | |
| FromJSON Country Source # | |
| type Rep Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country type Rep Country = D1 ('MetaData "Country" "Amazonka.GuardDuty.Types.Country" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Country'" 'PrefixI 'True) (S1 ('MetaSel ('Just "countryName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "countryCode") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
newCountry :: Country Source #
Create a value of Country with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:countryName:Country', country_countryName - The country name of the remote IP address.
$sel:countryCode:Country', country_countryCode - The country code of the remote IP address.
country_countryName :: Lens' Country (Maybe Text) Source #
The country name of the remote IP address.
country_countryCode :: Lens' Country (Maybe Text) Source #
The country code of the remote IP address.
DNSLogsConfigurationResult
data DNSLogsConfigurationResult Source #
Contains information on the status of DNS logs as a data source.
See: newDNSLogsConfigurationResult smart constructor.
Constructors
| DNSLogsConfigurationResult' | |
Fields
| |
Instances
newDNSLogsConfigurationResult Source #
Create a value of DNSLogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:DNSLogsConfigurationResult', dNSLogsConfigurationResult_status - Denotes whether DNS logs is enabled as a data source.
dNSLogsConfigurationResult_status :: Lens' DNSLogsConfigurationResult DataSourceStatus Source #
Denotes whether DNS logs is enabled as a data source.
DataSourceConfigurations
data DataSourceConfigurations Source #
Contains information about which data sources are enabled.
See: newDataSourceConfigurations smart constructor.
Constructors
| DataSourceConfigurations' | |
Fields
| |
Instances
newDataSourceConfigurations :: DataSourceConfigurations Source #
Create a value of DataSourceConfigurations with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:s3Logs:DataSourceConfigurations', dataSourceConfigurations_s3Logs - Describes whether S3 data event logs are enabled as a data source.
dataSourceConfigurations_s3Logs :: Lens' DataSourceConfigurations (Maybe S3LogsConfiguration) Source #
Describes whether S3 data event logs are enabled as a data source.
DataSourceConfigurationsResult
data DataSourceConfigurationsResult Source #
Contains information on the status of data sources for the detector.
See: newDataSourceConfigurationsResult smart constructor.
Constructors
| DataSourceConfigurationsResult' | |
Fields
| |
Instances
newDataSourceConfigurationsResult Source #
Arguments
| :: CloudTrailConfigurationResult | |
| -> DNSLogsConfigurationResult | |
| -> FlowLogsConfigurationResult | |
| -> S3LogsConfigurationResult | |
| -> DataSourceConfigurationsResult |
Create a value of DataSourceConfigurationsResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:cloudTrail:DataSourceConfigurationsResult', dataSourceConfigurationsResult_cloudTrail - An object that contains information on the status of CloudTrail as a
data source.
$sel:dNSLogs:DataSourceConfigurationsResult', dataSourceConfigurationsResult_dNSLogs - An object that contains information on the status of DNS logs as a data
source.
$sel:flowLogs:DataSourceConfigurationsResult', dataSourceConfigurationsResult_flowLogs - An object that contains information on the status of VPC flow logs as a
data source.
$sel:s3Logs:DataSourceConfigurationsResult', dataSourceConfigurationsResult_s3Logs - An object that contains information on the status of S3 Data event logs
as a data source.
dataSourceConfigurationsResult_cloudTrail :: Lens' DataSourceConfigurationsResult CloudTrailConfigurationResult Source #
An object that contains information on the status of CloudTrail as a data source.
dataSourceConfigurationsResult_dNSLogs :: Lens' DataSourceConfigurationsResult DNSLogsConfigurationResult Source #
An object that contains information on the status of DNS logs as a data source.
dataSourceConfigurationsResult_flowLogs :: Lens' DataSourceConfigurationsResult FlowLogsConfigurationResult Source #
An object that contains information on the status of VPC flow logs as a data source.
dataSourceConfigurationsResult_s3Logs :: Lens' DataSourceConfigurationsResult S3LogsConfigurationResult Source #
An object that contains information on the status of S3 Data event logs as a data source.
DefaultServerSideEncryption
data DefaultServerSideEncryption Source #
Contains information on the server side encryption method used in the S3 bucket. See S3 Server-Side Encryption for more information.
See: newDefaultServerSideEncryption smart constructor.
Constructors
| DefaultServerSideEncryption' | |
Fields
| |
Instances
newDefaultServerSideEncryption :: DefaultServerSideEncryption Source #
Create a value of DefaultServerSideEncryption with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:encryptionType:DefaultServerSideEncryption', defaultServerSideEncryption_encryptionType - The type of encryption used for objects within the S3 bucket.
$sel:kmsMasterKeyArn:DefaultServerSideEncryption', defaultServerSideEncryption_kmsMasterKeyArn - The Amazon Resource Name (ARN) of the KMS encryption key. Only available
if the bucket EncryptionType is aws:kms.
defaultServerSideEncryption_encryptionType :: Lens' DefaultServerSideEncryption (Maybe Text) Source #
The type of encryption used for objects within the S3 bucket.
defaultServerSideEncryption_kmsMasterKeyArn :: Lens' DefaultServerSideEncryption (Maybe Text) Source #
The Amazon Resource Name (ARN) of the KMS encryption key. Only available
if the bucket EncryptionType is aws:kms.
Destination
data Destination Source #
Contains information about the publishing destination, including the ID, type, and status.
See: newDestination smart constructor.
Constructors
| Destination' | |
Fields
| |
Instances
Arguments
| :: Text | |
| -> DestinationType | |
| -> PublishingStatus | |
| -> Destination |
Create a value of Destination with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:destinationId:Destination', destination_destinationId - The unique ID of the publishing destination.
$sel:destinationType:Destination', destination_destinationType - The type of resource used for the publishing destination. Currently,
only Amazon S3 buckets are supported.
$sel:status:Destination', destination_status - The status of the publishing destination.
destination_destinationId :: Lens' Destination Text Source #
The unique ID of the publishing destination.
destination_destinationType :: Lens' Destination DestinationType Source #
The type of resource used for the publishing destination. Currently, only Amazon S3 buckets are supported.
destination_status :: Lens' Destination PublishingStatus Source #
The status of the publishing destination.
DestinationProperties
data DestinationProperties Source #
Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.
See: newDestinationProperties smart constructor.
Constructors
| DestinationProperties' | |
Instances
newDestinationProperties :: DestinationProperties Source #
Create a value of DestinationProperties with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:kmsKeyArn:DestinationProperties', destinationProperties_kmsKeyArn - The ARN of the KMS key to use for encryption.
$sel:destinationArn:DestinationProperties', destinationProperties_destinationArn - The ARN of the resource to publish to.
destinationProperties_kmsKeyArn :: Lens' DestinationProperties (Maybe Text) Source #
The ARN of the KMS key to use for encryption.
destinationProperties_destinationArn :: Lens' DestinationProperties (Maybe Text) Source #
The ARN of the resource to publish to.
DnsRequestAction
data DnsRequestAction Source #
Contains information about the DNS_REQUEST action described in this finding.
See: newDnsRequestAction smart constructor.
Constructors
| DnsRequestAction' | |
Instances
newDnsRequestAction :: DnsRequestAction Source #
Create a value of DnsRequestAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:domain:DnsRequestAction', dnsRequestAction_domain - The domain information for the API request.
dnsRequestAction_domain :: Lens' DnsRequestAction (Maybe Text) Source #
The domain information for the API request.
DomainDetails
data DomainDetails Source #
Contains information about the domain.
See: newDomainDetails smart constructor.
Constructors
| DomainDetails' | |
Instances
newDomainDetails :: DomainDetails Source #
Create a value of DomainDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:domain:DomainDetails', domainDetails_domain - The domain information for the AWS API call.
domainDetails_domain :: Lens' DomainDetails (Maybe Text) Source #
The domain information for the AWS API call.
Evidence
Contains information about the reason that the finding was generated.
See: newEvidence smart constructor.
Constructors
| Evidence' | |
Fields
| |
Instances
| Eq Evidence Source # | |
| Read Evidence Source # | |
| Show Evidence Source # | |
| Generic Evidence Source # | |
| NFData Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence | |
| Hashable Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence | |
| FromJSON Evidence Source # | |
| type Rep Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence type Rep Evidence = D1 ('MetaData "Evidence" "Amazonka.GuardDuty.Types.Evidence" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Evidence'" 'PrefixI 'True) (S1 ('MetaSel ('Just "threatIntelligenceDetails") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [ThreatIntelligenceDetail])))) | |
newEvidence :: Evidence Source #
Create a value of Evidence with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:threatIntelligenceDetails:Evidence', evidence_threatIntelligenceDetails - A list of threat intelligence details related to the evidence.
evidence_threatIntelligenceDetails :: Lens' Evidence (Maybe [ThreatIntelligenceDetail]) Source #
A list of threat intelligence details related to the evidence.
Finding
Contains information about the finding, which is generated when abnormal or suspicious activity is detected.
See: newFinding smart constructor.
Constructors
| Finding' | |
Fields
| |
Instances
Create a value of Finding with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:service:Finding', finding_service - Undocumented member.
$sel:confidence:Finding', finding_confidence - The confidence score for the finding.
$sel:partition:Finding', finding_partition - The partition associated with the finding.
$sel:title:Finding', finding_title - The title of the finding.
$sel:description:Finding', finding_description - The description of the finding.
$sel:accountId:Finding', finding_accountId - The ID of the account in which the finding was generated.
$sel:arn:Finding', finding_arn - The ARN of the finding.
$sel:createdAt:Finding', finding_createdAt - The time and date when the finding was created.
$sel:id:Finding', finding_id - The ID of the finding.
$sel:region:Finding', finding_region - The Region where the finding was generated.
$sel:resource:Finding', finding_resource - Undocumented member.
$sel:schemaVersion:Finding', finding_schemaVersion - The version of the schema used for the finding.
$sel:severity:Finding', finding_severity - The severity of the finding.
$sel:type':Finding', finding_type - The type of finding.
$sel:updatedAt:Finding', finding_updatedAt - The time and date when the finding was last updated.
finding_service :: Lens' Finding (Maybe ServiceInfo) Source #
Undocumented member.
finding_accountId :: Lens' Finding Text Source #
The ID of the account in which the finding was generated.
finding_updatedAt :: Lens' Finding Text Source #
The time and date when the finding was last updated.
FindingCriteria
data FindingCriteria Source #
Contains information about the criteria used for querying findings.
See: newFindingCriteria smart constructor.
Constructors
| FindingCriteria' | |
Instances
newFindingCriteria :: FindingCriteria Source #
Create a value of FindingCriteria with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:criterion:FindingCriteria', findingCriteria_criterion - Represents a map of finding properties that match specified conditions
and values when querying findings.
findingCriteria_criterion :: Lens' FindingCriteria (Maybe (HashMap Text Condition)) Source #
Represents a map of finding properties that match specified conditions and values when querying findings.
FindingStatistics
data FindingStatistics Source #
Contains information about finding statistics.
See: newFindingStatistics smart constructor.
Constructors
| FindingStatistics' | |
Fields
| |
Instances
newFindingStatistics :: FindingStatistics Source #
Create a value of FindingStatistics with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:countBySeverity:FindingStatistics', findingStatistics_countBySeverity - Represents a map of severity to count statistics for a set of findings.
findingStatistics_countBySeverity :: Lens' FindingStatistics (Maybe (HashMap Text Int)) Source #
Represents a map of severity to count statistics for a set of findings.
FlowLogsConfigurationResult
data FlowLogsConfigurationResult Source #
Contains information on the status of VPC flow logs as a data source.
See: newFlowLogsConfigurationResult smart constructor.
Constructors
| FlowLogsConfigurationResult' | |
Fields
| |
Instances
newFlowLogsConfigurationResult Source #
Create a value of FlowLogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:FlowLogsConfigurationResult', flowLogsConfigurationResult_status - Denotes whether VPC flow logs is enabled as a data source.
flowLogsConfigurationResult_status :: Lens' FlowLogsConfigurationResult DataSourceStatus Source #
Denotes whether VPC flow logs is enabled as a data source.
GeoLocation
data GeoLocation Source #
Contains information about the location of the remote IP address.
See: newGeoLocation smart constructor.
Constructors
| GeoLocation' | |
Instances
newGeoLocation :: GeoLocation Source #
Create a value of GeoLocation with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:lat:GeoLocation', geoLocation_lat - The latitude information of the remote IP address.
$sel:lon:GeoLocation', geoLocation_lon - The longitude information of the remote IP address.
geoLocation_lat :: Lens' GeoLocation (Maybe Double) Source #
The latitude information of the remote IP address.
geoLocation_lon :: Lens' GeoLocation (Maybe Double) Source #
The longitude information of the remote IP address.
IamInstanceProfile
data IamInstanceProfile Source #
Contains information about the EC2 instance profile.
See: newIamInstanceProfile smart constructor.
Constructors
| IamInstanceProfile' | |
Instances
newIamInstanceProfile :: IamInstanceProfile Source #
Create a value of IamInstanceProfile with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:IamInstanceProfile', iamInstanceProfile_arn - The profile ARN of the EC2 instance.
$sel:id:IamInstanceProfile', iamInstanceProfile_id - The profile ID of the EC2 instance.
iamInstanceProfile_arn :: Lens' IamInstanceProfile (Maybe Text) Source #
The profile ARN of the EC2 instance.
iamInstanceProfile_id :: Lens' IamInstanceProfile (Maybe Text) Source #
The profile ID of the EC2 instance.
InstanceDetails
data InstanceDetails Source #
Contains information about the details of an instance.
See: newInstanceDetails smart constructor.
Constructors
| InstanceDetails' | |
Fields
| |
Instances
newInstanceDetails :: InstanceDetails Source #
Create a value of InstanceDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceId:InstanceDetails', instanceDetails_instanceId - The ID of the EC2 instance.
$sel:platform:InstanceDetails', instanceDetails_platform - The platform of the EC2 instance.
$sel:launchTime:InstanceDetails', instanceDetails_launchTime - The launch time of the EC2 instance.
$sel:networkInterfaces:InstanceDetails', instanceDetails_networkInterfaces - The elastic network interface information of the EC2 instance.
$sel:outpostArn:InstanceDetails', instanceDetails_outpostArn - The Amazon Resource Name (ARN) of the AWS Outpost. Only applicable to
AWS Outposts instances.
$sel:instanceType:InstanceDetails', instanceDetails_instanceType - The type of the EC2 instance.
$sel:availabilityZone:InstanceDetails', instanceDetails_availabilityZone - The Availability Zone of the EC2 instance.
$sel:iamInstanceProfile:InstanceDetails', instanceDetails_iamInstanceProfile - The profile information of the EC2 instance.
$sel:imageId:InstanceDetails', instanceDetails_imageId - The image ID of the EC2 instance.
$sel:productCodes:InstanceDetails', instanceDetails_productCodes - The product code of the EC2 instance.
$sel:instanceState:InstanceDetails', instanceDetails_instanceState - The state of the EC2 instance.
$sel:tags:InstanceDetails', instanceDetails_tags - The tags of the EC2 instance.
$sel:imageDescription:InstanceDetails', instanceDetails_imageDescription - The image description of the EC2 instance.
instanceDetails_instanceId :: Lens' InstanceDetails (Maybe Text) Source #
The ID of the EC2 instance.
instanceDetails_platform :: Lens' InstanceDetails (Maybe Text) Source #
The platform of the EC2 instance.
instanceDetails_launchTime :: Lens' InstanceDetails (Maybe Text) Source #
The launch time of the EC2 instance.
instanceDetails_networkInterfaces :: Lens' InstanceDetails (Maybe [NetworkInterface]) Source #
The elastic network interface information of the EC2 instance.
instanceDetails_outpostArn :: Lens' InstanceDetails (Maybe Text) Source #
The Amazon Resource Name (ARN) of the AWS Outpost. Only applicable to AWS Outposts instances.
instanceDetails_instanceType :: Lens' InstanceDetails (Maybe Text) Source #
The type of the EC2 instance.
instanceDetails_availabilityZone :: Lens' InstanceDetails (Maybe Text) Source #
The Availability Zone of the EC2 instance.
instanceDetails_iamInstanceProfile :: Lens' InstanceDetails (Maybe IamInstanceProfile) Source #
The profile information of the EC2 instance.
instanceDetails_imageId :: Lens' InstanceDetails (Maybe Text) Source #
The image ID of the EC2 instance.
instanceDetails_productCodes :: Lens' InstanceDetails (Maybe [ProductCode]) Source #
The product code of the EC2 instance.
instanceDetails_instanceState :: Lens' InstanceDetails (Maybe Text) Source #
The state of the EC2 instance.
instanceDetails_tags :: Lens' InstanceDetails (Maybe [Tag]) Source #
The tags of the EC2 instance.
instanceDetails_imageDescription :: Lens' InstanceDetails (Maybe Text) Source #
The image description of the EC2 instance.
Invitation
data Invitation Source #
Contains information about the invitation to become a member account.
See: newInvitation smart constructor.
Constructors
| Invitation' | |
Fields
| |
Instances
newInvitation :: Invitation Source #
Create a value of Invitation with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitedAt:Invitation', invitation_invitedAt - The timestamp when the invitation was sent.
$sel:relationshipStatus:Invitation', invitation_relationshipStatus - The status of the relationship between the inviter and invitee accounts.
$sel:invitationId:Invitation', invitation_invitationId - The ID of the invitation. This value is used to validate the inviter
account to the member account.
$sel:accountId:Invitation', invitation_accountId - The ID of the account that the invitation was sent from.
invitation_invitedAt :: Lens' Invitation (Maybe Text) Source #
The timestamp when the invitation was sent.
invitation_relationshipStatus :: Lens' Invitation (Maybe Text) Source #
The status of the relationship between the inviter and invitee accounts.
invitation_invitationId :: Lens' Invitation (Maybe Text) Source #
The ID of the invitation. This value is used to validate the inviter account to the member account.
invitation_accountId :: Lens' Invitation (Maybe Text) Source #
The ID of the account that the invitation was sent from.
LocalIpDetails
data LocalIpDetails Source #
Contains information about the local IP address of the connection.
See: newLocalIpDetails smart constructor.
Constructors
| LocalIpDetails' | |
Fields
| |
Instances
newLocalIpDetails :: LocalIpDetails Source #
Create a value of LocalIpDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ipAddressV4:LocalIpDetails', localIpDetails_ipAddressV4 - The IPv4 local address of the connection.
localIpDetails_ipAddressV4 :: Lens' LocalIpDetails (Maybe Text) Source #
The IPv4 local address of the connection.
LocalPortDetails
data LocalPortDetails Source #
Contains information about the port for the local connection.
See: newLocalPortDetails smart constructor.
Constructors
| LocalPortDetails' | |
Instances
newLocalPortDetails :: LocalPortDetails Source #
Create a value of LocalPortDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:portName:LocalPortDetails', localPortDetails_portName - The port name of the local connection.
$sel:port:LocalPortDetails', localPortDetails_port - The port number of the local connection.
localPortDetails_portName :: Lens' LocalPortDetails (Maybe Text) Source #
The port name of the local connection.
localPortDetails_port :: Lens' LocalPortDetails (Maybe Int) Source #
The port number of the local connection.
Master
Contains information about the administrator account and invitation.
See: newMaster smart constructor.
Constructors
| Master' | |
Fields
| |
Instances
| Eq Master Source # | |
| Read Master Source # | |
| Show Master Source # | |
| Generic Master Source # | |
| NFData Master Source # | |
Defined in Amazonka.GuardDuty.Types.Master | |
| Hashable Master Source # | |
Defined in Amazonka.GuardDuty.Types.Master | |
| FromJSON Master Source # | |
| type Rep Master Source # | |
Defined in Amazonka.GuardDuty.Types.Master type Rep Master = D1 ('MetaData "Master" "Amazonka.GuardDuty.Types.Master" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Master'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "invitedAt") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "relationshipStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "invitationId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "accountId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))) | |
Create a value of Master with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitedAt:Master', master_invitedAt - The timestamp when the invitation was sent.
$sel:relationshipStatus:Master', master_relationshipStatus - The status of the relationship between the administrator and member
accounts.
$sel:invitationId:Master', master_invitationId - The value used to validate the administrator account to the member
account.
$sel:accountId:Master', master_accountId - The ID of the account used as the administrator account.
master_relationshipStatus :: Lens' Master (Maybe Text) Source #
The status of the relationship between the administrator and member accounts.
master_invitationId :: Lens' Master (Maybe Text) Source #
The value used to validate the administrator account to the member account.
master_accountId :: Lens' Master (Maybe Text) Source #
The ID of the account used as the administrator account.
Member
Contains information about the member account.
See: newMember smart constructor.
Constructors
| Member' | |
Fields
| |
Instances
Create a value of Member with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitedAt:Member', member_invitedAt - The timestamp when the invitation was sent.
$sel:detectorId:Member', member_detectorId - The detector ID of the member account.
$sel:accountId:Member', member_accountId - The ID of the member account.
$sel:masterId:Member', member_masterId - The administrator account ID.
$sel:email:Member', member_email - The email address of the member account.
$sel:relationshipStatus:Member', member_relationshipStatus - The status of the relationship between the member and the administrator.
$sel:updatedAt:Member', member_updatedAt - The last-updated timestamp of the member.
member_relationshipStatus :: Lens' Member Text Source #
The status of the relationship between the member and the administrator.
MemberDataSourceConfiguration
data MemberDataSourceConfiguration Source #
Contains information on which data sources are enabled for a member account.
See: newMemberDataSourceConfiguration smart constructor.
Constructors
| MemberDataSourceConfiguration' | |
Fields
| |
Instances
newMemberDataSourceConfiguration Source #
Arguments
| :: Text | |
| -> DataSourceConfigurationsResult | |
| -> MemberDataSourceConfiguration |
Create a value of MemberDataSourceConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:MemberDataSourceConfiguration', memberDataSourceConfiguration_accountId - The account ID for the member account.
$sel:dataSources:MemberDataSourceConfiguration', memberDataSourceConfiguration_dataSources - Contains information on the status of data sources for the account.
memberDataSourceConfiguration_accountId :: Lens' MemberDataSourceConfiguration Text Source #
The account ID for the member account.
memberDataSourceConfiguration_dataSources :: Lens' MemberDataSourceConfiguration DataSourceConfigurationsResult Source #
Contains information on the status of data sources for the account.
NetworkConnectionAction
data NetworkConnectionAction Source #
Contains information about the NETWORK_CONNECTION action described in the finding.
See: newNetworkConnectionAction smart constructor.
Constructors
| NetworkConnectionAction' | |
Fields
| |
Instances
newNetworkConnectionAction :: NetworkConnectionAction Source #
Create a value of NetworkConnectionAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:remoteIpDetails:NetworkConnectionAction', networkConnectionAction_remoteIpDetails - The remote IP information of the connection.
$sel:protocol:NetworkConnectionAction', networkConnectionAction_protocol - The network connection protocol.
$sel:localIpDetails:NetworkConnectionAction', networkConnectionAction_localIpDetails - The local IP information of the connection.
$sel:remotePortDetails:NetworkConnectionAction', networkConnectionAction_remotePortDetails - The remote port information of the connection.
$sel:blocked:NetworkConnectionAction', networkConnectionAction_blocked - Indicates whether EC2 blocked the network connection to your instance.
$sel:connectionDirection:NetworkConnectionAction', networkConnectionAction_connectionDirection - The network connection direction.
$sel:localPortDetails:NetworkConnectionAction', networkConnectionAction_localPortDetails - The local port information of the connection.
networkConnectionAction_remoteIpDetails :: Lens' NetworkConnectionAction (Maybe RemoteIpDetails) Source #
The remote IP information of the connection.
networkConnectionAction_protocol :: Lens' NetworkConnectionAction (Maybe Text) Source #
The network connection protocol.
networkConnectionAction_localIpDetails :: Lens' NetworkConnectionAction (Maybe LocalIpDetails) Source #
The local IP information of the connection.
networkConnectionAction_remotePortDetails :: Lens' NetworkConnectionAction (Maybe RemotePortDetails) Source #
The remote port information of the connection.
networkConnectionAction_blocked :: Lens' NetworkConnectionAction (Maybe Bool) Source #
Indicates whether EC2 blocked the network connection to your instance.
networkConnectionAction_connectionDirection :: Lens' NetworkConnectionAction (Maybe Text) Source #
The network connection direction.
networkConnectionAction_localPortDetails :: Lens' NetworkConnectionAction (Maybe LocalPortDetails) Source #
The local port information of the connection.
NetworkInterface
data NetworkInterface Source #
Contains information about the elastic network interface of the EC2 instance.
See: newNetworkInterface smart constructor.
Constructors
| NetworkInterface' | |
Fields
| |
Instances
newNetworkInterface :: NetworkInterface Source #
Create a value of NetworkInterface with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:privateIpAddresses:NetworkInterface', networkInterface_privateIpAddresses - Other private IP address information of the EC2 instance.
$sel:publicDnsName:NetworkInterface', networkInterface_publicDnsName - The public DNS name of the EC2 instance.
$sel:securityGroups:NetworkInterface', networkInterface_securityGroups - The security groups associated with the EC2 instance.
$sel:vpcId:NetworkInterface', networkInterface_vpcId - The VPC ID of the EC2 instance.
$sel:networkInterfaceId:NetworkInterface', networkInterface_networkInterfaceId - The ID of the network interface.
$sel:subnetId:NetworkInterface', networkInterface_subnetId - The subnet ID of the EC2 instance.
$sel:privateIpAddress:NetworkInterface', networkInterface_privateIpAddress - The private IP address of the EC2 instance.
$sel:publicIp:NetworkInterface', networkInterface_publicIp - The public IP address of the EC2 instance.
$sel:privateDnsName:NetworkInterface', networkInterface_privateDnsName - The private DNS name of the EC2 instance.
$sel:ipv6Addresses:NetworkInterface', networkInterface_ipv6Addresses - A list of IPv6 addresses for the EC2 instance.
networkInterface_privateIpAddresses :: Lens' NetworkInterface (Maybe [PrivateIpAddressDetails]) Source #
Other private IP address information of the EC2 instance.
networkInterface_publicDnsName :: Lens' NetworkInterface (Maybe Text) Source #
The public DNS name of the EC2 instance.
networkInterface_securityGroups :: Lens' NetworkInterface (Maybe [SecurityGroup]) Source #
The security groups associated with the EC2 instance.
networkInterface_vpcId :: Lens' NetworkInterface (Maybe Text) Source #
The VPC ID of the EC2 instance.
networkInterface_networkInterfaceId :: Lens' NetworkInterface (Maybe Text) Source #
The ID of the network interface.
networkInterface_subnetId :: Lens' NetworkInterface (Maybe Text) Source #
The subnet ID of the EC2 instance.
networkInterface_privateIpAddress :: Lens' NetworkInterface (Maybe Text) Source #
The private IP address of the EC2 instance.
networkInterface_publicIp :: Lens' NetworkInterface (Maybe Text) Source #
The public IP address of the EC2 instance.
networkInterface_privateDnsName :: Lens' NetworkInterface (Maybe Text) Source #
The private DNS name of the EC2 instance.
networkInterface_ipv6Addresses :: Lens' NetworkInterface (Maybe [Text]) Source #
A list of IPv6 addresses for the EC2 instance.
Organization
data Organization Source #
Contains information about the ISP organization of the remote IP address.
See: newOrganization smart constructor.
Constructors
| Organization' | |
Instances
newOrganization :: Organization Source #
Create a value of Organization with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:org:Organization', organization_org - The name of the internet provider.
$sel:asnOrg:Organization', organization_asnOrg - The organization that registered this ASN.
$sel:asn:Organization', organization_asn - The Autonomous System Number (ASN) of the internet provider of the
remote IP address.
$sel:isp:Organization', organization_isp - The ISP information for the internet provider.
organization_org :: Lens' Organization (Maybe Text) Source #
The name of the internet provider.
organization_asnOrg :: Lens' Organization (Maybe Text) Source #
The organization that registered this ASN.
organization_asn :: Lens' Organization (Maybe Text) Source #
The Autonomous System Number (ASN) of the internet provider of the remote IP address.
organization_isp :: Lens' Organization (Maybe Text) Source #
The ISP information for the internet provider.
OrganizationDataSourceConfigurations
data OrganizationDataSourceConfigurations Source #
An object that contains information on which data sources will be configured to be automatically enabled for new members within the organization.
See: newOrganizationDataSourceConfigurations smart constructor.
Constructors
| OrganizationDataSourceConfigurations' | |
Fields
| |
Instances
newOrganizationDataSourceConfigurations :: OrganizationDataSourceConfigurations Source #
Create a value of OrganizationDataSourceConfigurations with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:s3Logs:OrganizationDataSourceConfigurations', organizationDataSourceConfigurations_s3Logs - Describes whether S3 data event logs are enabled for new members of the
organization.
organizationDataSourceConfigurations_s3Logs :: Lens' OrganizationDataSourceConfigurations (Maybe OrganizationS3LogsConfiguration) Source #
Describes whether S3 data event logs are enabled for new members of the organization.
OrganizationDataSourceConfigurationsResult
data OrganizationDataSourceConfigurationsResult Source #
An object that contains information on which data sources are automatically enabled for new members within the organization.
See: newOrganizationDataSourceConfigurationsResult smart constructor.
Constructors
| OrganizationDataSourceConfigurationsResult' | |
Fields
| |
Instances
newOrganizationDataSourceConfigurationsResult Source #
Create a value of OrganizationDataSourceConfigurationsResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:s3Logs:OrganizationDataSourceConfigurationsResult', organizationDataSourceConfigurationsResult_s3Logs - Describes whether S3 data event logs are enabled as a data source.
organizationDataSourceConfigurationsResult_s3Logs :: Lens' OrganizationDataSourceConfigurationsResult OrganizationS3LogsConfigurationResult Source #
Describes whether S3 data event logs are enabled as a data source.
OrganizationS3LogsConfiguration
data OrganizationS3LogsConfiguration Source #
Describes whether S3 data event logs will be automatically enabled for new members of the organization.
See: newOrganizationS3LogsConfiguration smart constructor.
Constructors
| OrganizationS3LogsConfiguration' | |
Fields
| |
Instances
newOrganizationS3LogsConfiguration Source #
Create a value of OrganizationS3LogsConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationS3LogsConfiguration', organizationS3LogsConfiguration_autoEnable - A value that contains information on whether S3 data event logs will be
enabled automatically as a data source for the organization.
organizationS3LogsConfiguration_autoEnable :: Lens' OrganizationS3LogsConfiguration Bool Source #
A value that contains information on whether S3 data event logs will be enabled automatically as a data source for the organization.
OrganizationS3LogsConfigurationResult
data OrganizationS3LogsConfigurationResult Source #
The current configuration of S3 data event logs as a data source for the organization.
See: newOrganizationS3LogsConfigurationResult smart constructor.
Constructors
| OrganizationS3LogsConfigurationResult' | |
Fields
| |
Instances
newOrganizationS3LogsConfigurationResult Source #
Arguments
| :: Bool | |
| -> OrganizationS3LogsConfigurationResult |
Create a value of OrganizationS3LogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationS3LogsConfigurationResult', organizationS3LogsConfigurationResult_autoEnable - A value that describes whether S3 data event logs are automatically
enabled for new members of the organization.
organizationS3LogsConfigurationResult_autoEnable :: Lens' OrganizationS3LogsConfigurationResult Bool Source #
A value that describes whether S3 data event logs are automatically enabled for new members of the organization.
Owner
Contains information on the owner of the bucket.
See: newOwner smart constructor.
Constructors
| Owner' | |
Fields
| |
Instances
| Eq Owner Source # | |
| Read Owner Source # | |
| Show Owner Source # | |
| Generic Owner Source # | |
| NFData Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner | |
| Hashable Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner | |
| FromJSON Owner Source # | |
| type Rep Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner | |
Create a value of Owner with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:id:Owner', owner_id - The canonical user ID of the bucket owner. For information about
locating your canonical user ID see
Finding Your Account Canonical User ID.
owner_id :: Lens' Owner (Maybe Text) Source #
The canonical user ID of the bucket owner. For information about locating your canonical user ID see Finding Your Account Canonical User ID.
PermissionConfiguration
data PermissionConfiguration Source #
Contains information about how permissions are configured for the S3 bucket.
See: newPermissionConfiguration smart constructor.
Constructors
| PermissionConfiguration' | |
Fields
| |
Instances
newPermissionConfiguration :: PermissionConfiguration Source #
Create a value of PermissionConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:bucketLevelPermissions:PermissionConfiguration', permissionConfiguration_bucketLevelPermissions - Contains information about the bucket level permissions for the S3
bucket.
$sel:accountLevelPermissions:PermissionConfiguration', permissionConfiguration_accountLevelPermissions - Contains information about the account level permissions on the S3
bucket.
permissionConfiguration_bucketLevelPermissions :: Lens' PermissionConfiguration (Maybe BucketLevelPermissions) Source #
Contains information about the bucket level permissions for the S3 bucket.
permissionConfiguration_accountLevelPermissions :: Lens' PermissionConfiguration (Maybe AccountLevelPermissions) Source #
Contains information about the account level permissions on the S3 bucket.
PortProbeAction
data PortProbeAction Source #
Contains information about the PORT_PROBE action described in the finding.
See: newPortProbeAction smart constructor.
Constructors
| PortProbeAction' | |
Fields
| |
Instances
newPortProbeAction :: PortProbeAction Source #
Create a value of PortProbeAction with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:portProbeDetails:PortProbeAction', portProbeAction_portProbeDetails - A list of objects related to port probe details.
$sel:blocked:PortProbeAction', portProbeAction_blocked - Indicates whether EC2 blocked the port probe to the instance, such as
with an ACL.
portProbeAction_portProbeDetails :: Lens' PortProbeAction (Maybe [PortProbeDetail]) Source #
A list of objects related to port probe details.
portProbeAction_blocked :: Lens' PortProbeAction (Maybe Bool) Source #
Indicates whether EC2 blocked the port probe to the instance, such as with an ACL.
PortProbeDetail
data PortProbeDetail Source #
Contains information about the port probe details.
See: newPortProbeDetail smart constructor.
Constructors
| PortProbeDetail' | |
Fields
| |
Instances
newPortProbeDetail :: PortProbeDetail Source #
Create a value of PortProbeDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:remoteIpDetails:PortProbeDetail', portProbeDetail_remoteIpDetails - The remote IP information of the connection.
$sel:localIpDetails:PortProbeDetail', portProbeDetail_localIpDetails - The local IP information of the connection.
$sel:localPortDetails:PortProbeDetail', portProbeDetail_localPortDetails - The local port information of the connection.
portProbeDetail_remoteIpDetails :: Lens' PortProbeDetail (Maybe RemoteIpDetails) Source #
The remote IP information of the connection.
portProbeDetail_localIpDetails :: Lens' PortProbeDetail (Maybe LocalIpDetails) Source #
The local IP information of the connection.
portProbeDetail_localPortDetails :: Lens' PortProbeDetail (Maybe LocalPortDetails) Source #
The local port information of the connection.
PrivateIpAddressDetails
data PrivateIpAddressDetails Source #
Contains other private IP address information of the EC2 instance.
See: newPrivateIpAddressDetails smart constructor.
Constructors
| PrivateIpAddressDetails' | |
Fields
| |
Instances
newPrivateIpAddressDetails :: PrivateIpAddressDetails Source #
Create a value of PrivateIpAddressDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:privateIpAddress:PrivateIpAddressDetails', privateIpAddressDetails_privateIpAddress - The private IP address of the EC2 instance.
$sel:privateDnsName:PrivateIpAddressDetails', privateIpAddressDetails_privateDnsName - The private DNS name of the EC2 instance.
privateIpAddressDetails_privateIpAddress :: Lens' PrivateIpAddressDetails (Maybe Text) Source #
The private IP address of the EC2 instance.
privateIpAddressDetails_privateDnsName :: Lens' PrivateIpAddressDetails (Maybe Text) Source #
The private DNS name of the EC2 instance.
ProductCode
data ProductCode Source #
Contains information about the product code for the EC2 instance.
See: newProductCode smart constructor.
Constructors
| ProductCode' | |
Instances
newProductCode :: ProductCode Source #
Create a value of ProductCode with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:productType:ProductCode', productCode_productType - The product code type.
$sel:code:ProductCode', productCode_code - The product code information.
productCode_productType :: Lens' ProductCode (Maybe Text) Source #
The product code type.
productCode_code :: Lens' ProductCode (Maybe Text) Source #
The product code information.
PublicAccess
data PublicAccess Source #
Describes the public access policies that apply to the S3 bucket.
See: newPublicAccess smart constructor.
Constructors
| PublicAccess' | |
Fields
| |
Instances
newPublicAccess :: PublicAccess Source #
Create a value of PublicAccess with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionConfiguration:PublicAccess', publicAccess_permissionConfiguration - Contains information about how permissions are configured for the S3
bucket.
$sel:effectivePermission:PublicAccess', publicAccess_effectivePermission - Describes the effective permission on this bucket after factoring all
attached policies.
publicAccess_permissionConfiguration :: Lens' PublicAccess (Maybe PermissionConfiguration) Source #
Contains information about how permissions are configured for the S3 bucket.
publicAccess_effectivePermission :: Lens' PublicAccess (Maybe Text) Source #
Describes the effective permission on this bucket after factoring all attached policies.
RemoteIpDetails
data RemoteIpDetails Source #
Contains information about the remote IP address of the connection.
See: newRemoteIpDetails smart constructor.
Constructors
| RemoteIpDetails' | |
Fields
| |
Instances
newRemoteIpDetails :: RemoteIpDetails Source #
Create a value of RemoteIpDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:country:RemoteIpDetails', remoteIpDetails_country - The country code of the remote IP address.
$sel:city:RemoteIpDetails', remoteIpDetails_city - The city information of the remote IP address.
$sel:ipAddressV4:RemoteIpDetails', remoteIpDetails_ipAddressV4 - The IPv4 remote address of the connection.
$sel:geoLocation:RemoteIpDetails', remoteIpDetails_geoLocation - The location information of the remote IP address.
$sel:organization:RemoteIpDetails', remoteIpDetails_organization - The ISP organization information of the remote IP address.
remoteIpDetails_country :: Lens' RemoteIpDetails (Maybe Country) Source #
The country code of the remote IP address.
remoteIpDetails_city :: Lens' RemoteIpDetails (Maybe City) Source #
The city information of the remote IP address.
remoteIpDetails_ipAddressV4 :: Lens' RemoteIpDetails (Maybe Text) Source #
The IPv4 remote address of the connection.
remoteIpDetails_geoLocation :: Lens' RemoteIpDetails (Maybe GeoLocation) Source #
The location information of the remote IP address.
remoteIpDetails_organization :: Lens' RemoteIpDetails (Maybe Organization) Source #
The ISP organization information of the remote IP address.
RemotePortDetails
data RemotePortDetails Source #
Contains information about the remote port.
See: newRemotePortDetails smart constructor.
Constructors
| RemotePortDetails' | |
Instances
newRemotePortDetails :: RemotePortDetails Source #
Create a value of RemotePortDetails with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:portName:RemotePortDetails', remotePortDetails_portName - The port name of the remote connection.
$sel:port:RemotePortDetails', remotePortDetails_port - The port number of the remote connection.
remotePortDetails_portName :: Lens' RemotePortDetails (Maybe Text) Source #
The port name of the remote connection.
remotePortDetails_port :: Lens' RemotePortDetails (Maybe Int) Source #
The port number of the remote connection.
Resource
Contains information about the AWS resource associated with the activity that prompted GuardDuty to generate a finding.
See: newResource smart constructor.
Constructors
| Resource' | |
Fields
| |
Instances
newResource :: Resource Source #
Create a value of Resource with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceType:Resource', resource_resourceType - The type of AWS resource.
$sel:s3BucketDetails:Resource', resource_s3BucketDetails - Contains information on the S3 bucket.
$sel:instanceDetails:Resource', resource_instanceDetails - The information about the EC2 instance associated with the activity that
prompted GuardDuty to generate a finding.
$sel:accessKeyDetails:Resource', resource_accessKeyDetails - The IAM access key details (IAM user information) of a user that engaged
in the activity that prompted GuardDuty to generate a finding.
resource_s3BucketDetails :: Lens' Resource (Maybe [S3BucketDetail]) Source #
Contains information on the S3 bucket.
resource_instanceDetails :: Lens' Resource (Maybe InstanceDetails) Source #
The information about the EC2 instance associated with the activity that prompted GuardDuty to generate a finding.
resource_accessKeyDetails :: Lens' Resource (Maybe AccessKeyDetails) Source #
The IAM access key details (IAM user information) of a user that engaged in the activity that prompted GuardDuty to generate a finding.
S3BucketDetail
data S3BucketDetail Source #
Contains information on the S3 bucket.
See: newS3BucketDetail smart constructor.
Constructors
| S3BucketDetail' | |
Fields
| |
Instances
newS3BucketDetail :: S3BucketDetail Source #
Create a value of S3BucketDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:S3BucketDetail', s3BucketDetail_arn - The Amazon Resource Name (ARN) of the S3 bucket.
$sel:createdAt:S3BucketDetail', s3BucketDetail_createdAt - The date and time the bucket was created at.
$sel:owner:S3BucketDetail', s3BucketDetail_owner - The owner of the S3 bucket.
$sel:name:S3BucketDetail', s3BucketDetail_name - The name of the S3 bucket.
$sel:defaultServerSideEncryption:S3BucketDetail', s3BucketDetail_defaultServerSideEncryption - Describes the server side encryption method used in the S3 bucket.
$sel:publicAccess:S3BucketDetail', s3BucketDetail_publicAccess - Describes the public access policies that apply to the S3 bucket.
$sel:type':S3BucketDetail', s3BucketDetail_type - Describes whether the bucket is a source or destination bucket.
$sel:tags:S3BucketDetail', s3BucketDetail_tags - All tags attached to the S3 bucket
s3BucketDetail_arn :: Lens' S3BucketDetail (Maybe Text) Source #
The Amazon Resource Name (ARN) of the S3 bucket.
s3BucketDetail_createdAt :: Lens' S3BucketDetail (Maybe UTCTime) Source #
The date and time the bucket was created at.
s3BucketDetail_owner :: Lens' S3BucketDetail (Maybe Owner) Source #
The owner of the S3 bucket.
s3BucketDetail_name :: Lens' S3BucketDetail (Maybe Text) Source #
The name of the S3 bucket.
s3BucketDetail_defaultServerSideEncryption :: Lens' S3BucketDetail (Maybe DefaultServerSideEncryption) Source #
Describes the server side encryption method used in the S3 bucket.
s3BucketDetail_publicAccess :: Lens' S3BucketDetail (Maybe PublicAccess) Source #
Describes the public access policies that apply to the S3 bucket.
s3BucketDetail_type :: Lens' S3BucketDetail (Maybe Text) Source #
Describes whether the bucket is a source or destination bucket.
s3BucketDetail_tags :: Lens' S3BucketDetail (Maybe [Tag]) Source #
All tags attached to the S3 bucket
S3LogsConfiguration
data S3LogsConfiguration Source #
Describes whether S3 data event logs will be enabled as a data source.
See: newS3LogsConfiguration smart constructor.
Constructors
| S3LogsConfiguration' | |
Instances
newS3LogsConfiguration Source #
Arguments
| :: Bool | |
| -> S3LogsConfiguration |
Create a value of S3LogsConfiguration with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:enable:S3LogsConfiguration', s3LogsConfiguration_enable - The status of S3 data event logs as a data source.
s3LogsConfiguration_enable :: Lens' S3LogsConfiguration Bool Source #
The status of S3 data event logs as a data source.
S3LogsConfigurationResult
data S3LogsConfigurationResult Source #
Describes whether S3 data event logs will be enabled as a data source.
See: newS3LogsConfigurationResult smart constructor.
Constructors
| S3LogsConfigurationResult' | |
Fields
| |
Instances
newS3LogsConfigurationResult Source #
Create a value of S3LogsConfigurationResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:S3LogsConfigurationResult', s3LogsConfigurationResult_status - A value that describes whether S3 data event logs are automatically
enabled for new members of the organization.
s3LogsConfigurationResult_status :: Lens' S3LogsConfigurationResult DataSourceStatus Source #
A value that describes whether S3 data event logs are automatically enabled for new members of the organization.
SecurityGroup
data SecurityGroup Source #
Contains information about the security groups associated with the EC2 instance.
See: newSecurityGroup smart constructor.
Constructors
| SecurityGroup' | |
Instances
newSecurityGroup :: SecurityGroup Source #
Create a value of SecurityGroup with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:groupId:SecurityGroup', securityGroup_groupId - The security group ID of the EC2 instance.
$sel:groupName:SecurityGroup', securityGroup_groupName - The security group name of the EC2 instance.
securityGroup_groupId :: Lens' SecurityGroup (Maybe Text) Source #
The security group ID of the EC2 instance.
securityGroup_groupName :: Lens' SecurityGroup (Maybe Text) Source #
The security group name of the EC2 instance.
ServiceInfo
data ServiceInfo Source #
Contains additional information about the generated finding.
See: newServiceInfo smart constructor.
Constructors
| ServiceInfo' | |
Fields
| |
Instances
newServiceInfo :: ServiceInfo Source #
Create a value of ServiceInfo with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:count:ServiceInfo', serviceInfo_count - The total count of the occurrences of this finding type.
$sel:eventFirstSeen:ServiceInfo', serviceInfo_eventFirstSeen - The first-seen timestamp of the activity that prompted GuardDuty to
generate this finding.
$sel:action:ServiceInfo', serviceInfo_action - Information about the activity that is described in a finding.
$sel:detectorId:ServiceInfo', serviceInfo_detectorId - The detector ID for the GuardDuty service.
$sel:serviceName:ServiceInfo', serviceInfo_serviceName - The name of the AWS service (GuardDuty) that generated a finding.
$sel:userFeedback:ServiceInfo', serviceInfo_userFeedback - Feedback that was submitted about the finding.
$sel:evidence:ServiceInfo', serviceInfo_evidence - An evidence object associated with the service.
$sel:eventLastSeen:ServiceInfo', serviceInfo_eventLastSeen - The last-seen timestamp of the activity that prompted GuardDuty to
generate this finding.
$sel:resourceRole:ServiceInfo', serviceInfo_resourceRole - The resource role information for this finding.
$sel:archived:ServiceInfo', serviceInfo_archived - Indicates whether this finding is archived.
serviceInfo_count :: Lens' ServiceInfo (Maybe Int) Source #
The total count of the occurrences of this finding type.
serviceInfo_eventFirstSeen :: Lens' ServiceInfo (Maybe Text) Source #
The first-seen timestamp of the activity that prompted GuardDuty to generate this finding.
serviceInfo_action :: Lens' ServiceInfo (Maybe Action) Source #
Information about the activity that is described in a finding.
serviceInfo_detectorId :: Lens' ServiceInfo (Maybe Text) Source #
The detector ID for the GuardDuty service.
serviceInfo_serviceName :: Lens' ServiceInfo (Maybe Text) Source #
The name of the AWS service (GuardDuty) that generated a finding.
serviceInfo_userFeedback :: Lens' ServiceInfo (Maybe Text) Source #
Feedback that was submitted about the finding.
serviceInfo_evidence :: Lens' ServiceInfo (Maybe Evidence) Source #
An evidence object associated with the service.
serviceInfo_eventLastSeen :: Lens' ServiceInfo (Maybe Text) Source #
The last-seen timestamp of the activity that prompted GuardDuty to generate this finding.
serviceInfo_resourceRole :: Lens' ServiceInfo (Maybe Text) Source #
The resource role information for this finding.
serviceInfo_archived :: Lens' ServiceInfo (Maybe Bool) Source #
Indicates whether this finding is archived.
SortCriteria
data SortCriteria Source #
Contains information about the criteria used for sorting findings.
See: newSortCriteria smart constructor.
Constructors
| SortCriteria' | |
Instances
newSortCriteria :: SortCriteria Source #
Create a value of SortCriteria with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:orderBy:SortCriteria', sortCriteria_orderBy - The order by which the sorted findings are to be displayed.
$sel:attributeName:SortCriteria', sortCriteria_attributeName - Represents the finding attribute (for example, accountId) to sort
findings by.
sortCriteria_orderBy :: Lens' SortCriteria (Maybe OrderBy) Source #
The order by which the sorted findings are to be displayed.
sortCriteria_attributeName :: Lens' SortCriteria (Maybe Text) Source #
Represents the finding attribute (for example, accountId) to sort findings by.
Tag
Contains information about a tag associated with the EC2 instance.
See: newTag smart constructor.
Constructors
| Tag' | |
Instances
| Eq Tag Source # | |
| Read Tag Source # | |
| Show Tag Source # | |
| Generic Tag Source # | |
| NFData Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag | |
| Hashable Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag | |
| FromJSON Tag Source # | |
| type Rep Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag type Rep Tag = D1 ('MetaData "Tag" "Amazonka.GuardDuty.Types.Tag" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "value") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "key") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
Create a value of Tag with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:value:Tag', tag_value - The EC2 instance tag value.
$sel:key:Tag', tag_key - The EC2 instance tag key.
ThreatIntelligenceDetail
data ThreatIntelligenceDetail Source #
An instance of a threat intelligence detail that constitutes evidence for the finding.
See: newThreatIntelligenceDetail smart constructor.
Constructors
| ThreatIntelligenceDetail' | |
Fields
| |
Instances
newThreatIntelligenceDetail :: ThreatIntelligenceDetail Source #
Create a value of ThreatIntelligenceDetail with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:threatNames:ThreatIntelligenceDetail', threatIntelligenceDetail_threatNames - A list of names of the threats in the threat intelligence list that
triggered the finding.
$sel:threatListName:ThreatIntelligenceDetail', threatIntelligenceDetail_threatListName - The name of the threat intelligence list that triggered the finding.
threatIntelligenceDetail_threatNames :: Lens' ThreatIntelligenceDetail (Maybe [Text]) Source #
A list of names of the threats in the threat intelligence list that triggered the finding.
threatIntelligenceDetail_threatListName :: Lens' ThreatIntelligenceDetail (Maybe Text) Source #
The name of the threat intelligence list that triggered the finding.
Total
Contains the total usage with the corresponding currency unit for that value.
See: newTotal smart constructor.
Constructors
| Total' | |
Instances
| Eq Total Source # | |
| Read Total Source # | |
| Show Total Source # | |
| Generic Total Source # | |
| NFData Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total | |
| Hashable Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total | |
| FromJSON Total Source # | |
| type Rep Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total type Rep Total = D1 ('MetaData "Total" "Amazonka.GuardDuty.Types.Total" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Total'" 'PrefixI 'True) (S1 ('MetaSel ('Just "amount") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "unit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) | |
Create a value of Total with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:amount:Total', total_amount - The total usage.
$sel:unit:Total', total_unit - The currency unit that the amount is given in.
UnprocessedAccount
data UnprocessedAccount Source #
Contains information about the accounts that weren't processed.
See: newUnprocessedAccount smart constructor.
Constructors
| UnprocessedAccount' | |
Instances
newUnprocessedAccount Source #
Arguments
| :: Text | |
| -> Text | |
| -> UnprocessedAccount |
Create a value of UnprocessedAccount with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:UnprocessedAccount', unprocessedAccount_accountId - The AWS account ID.
$sel:result:UnprocessedAccount', unprocessedAccount_result - A reason why the account hasn't been processed.
unprocessedAccount_accountId :: Lens' UnprocessedAccount Text Source #
The AWS account ID.
unprocessedAccount_result :: Lens' UnprocessedAccount Text Source #
A reason why the account hasn't been processed.
UsageAccountResult
data UsageAccountResult Source #
Contains information on the total of usage based on account IDs.
See: newUsageAccountResult smart constructor.
Constructors
| UsageAccountResult' | |
Instances
newUsageAccountResult :: UsageAccountResult Source #
Create a value of UsageAccountResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:UsageAccountResult', usageAccountResult_accountId - The Account ID that generated usage.
$sel:total:UsageAccountResult', usageAccountResult_total - Represents the total of usage for the Account ID.
usageAccountResult_accountId :: Lens' UsageAccountResult (Maybe Text) Source #
The Account ID that generated usage.
usageAccountResult_total :: Lens' UsageAccountResult (Maybe Total) Source #
Represents the total of usage for the Account ID.
UsageCriteria
data UsageCriteria Source #
Contains information about the criteria used to query usage statistics.
See: newUsageCriteria smart constructor.
Constructors
| UsageCriteria' | |
Fields
| |
Instances
newUsageCriteria :: UsageCriteria Source #
Create a value of UsageCriteria with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountIds:UsageCriteria', usageCriteria_accountIds - The account IDs to aggregate usage statistics from.
$sel:resources:UsageCriteria', usageCriteria_resources - The resources to aggregate usage statistics from. Only accepts exact
resource names.
$sel:dataSources:UsageCriteria', usageCriteria_dataSources - The data sources to aggregate usage statistics from.
usageCriteria_accountIds :: Lens' UsageCriteria (Maybe (NonEmpty Text)) Source #
The account IDs to aggregate usage statistics from.
usageCriteria_resources :: Lens' UsageCriteria (Maybe [Text]) Source #
The resources to aggregate usage statistics from. Only accepts exact resource names.
usageCriteria_dataSources :: Lens' UsageCriteria [DataSource] Source #
The data sources to aggregate usage statistics from.
UsageDataSourceResult
data UsageDataSourceResult Source #
Contains information on the result of usage based on data source type.
See: newUsageDataSourceResult smart constructor.
Constructors
| UsageDataSourceResult' | |
Fields
| |
Instances
newUsageDataSourceResult :: UsageDataSourceResult Source #
Create a value of UsageDataSourceResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:total:UsageDataSourceResult', usageDataSourceResult_total - Represents the total of usage for the specified data source.
$sel:dataSource:UsageDataSourceResult', usageDataSourceResult_dataSource - The data source type that generated usage.
usageDataSourceResult_total :: Lens' UsageDataSourceResult (Maybe Total) Source #
Represents the total of usage for the specified data source.
usageDataSourceResult_dataSource :: Lens' UsageDataSourceResult (Maybe DataSource) Source #
The data source type that generated usage.
UsageResourceResult
data UsageResourceResult Source #
Contains information on the sum of usage based on an AWS resource.
See: newUsageResourceResult smart constructor.
Constructors
| UsageResourceResult' | |
Instances
newUsageResourceResult :: UsageResourceResult Source #
Create a value of UsageResourceResult with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:total:UsageResourceResult', usageResourceResult_total - Represents the sum total of usage for the specified resource type.
$sel:resource:UsageResourceResult', usageResourceResult_resource - The AWS resource that generated usage.
usageResourceResult_total :: Lens' UsageResourceResult (Maybe Total) Source #
Represents the sum total of usage for the specified resource type.
usageResourceResult_resource :: Lens' UsageResourceResult (Maybe Text) Source #
The AWS resource that generated usage.
UsageStatistics
data UsageStatistics Source #
Contains the result of GuardDuty usage. If a UsageStatisticType is provided the result for other types will be null.
See: newUsageStatistics smart constructor.
Constructors
| UsageStatistics' | |
Fields
| |
Instances
newUsageStatistics :: UsageStatistics Source #
Create a value of UsageStatistics with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:topResources:UsageStatistics', usageStatistics_topResources - Lists the top 50 resources that have generated the most GuardDuty usage,
in order from most to least expensive.
$sel:sumByResource:UsageStatistics', usageStatistics_sumByResource - The usage statistic sum organized by resource.
$sel:sumByDataSource:UsageStatistics', usageStatistics_sumByDataSource - The usage statistic sum organized by on data source.
$sel:sumByAccount:UsageStatistics', usageStatistics_sumByAccount - The usage statistic sum organized by account ID.
usageStatistics_topResources :: Lens' UsageStatistics (Maybe [UsageResourceResult]) Source #
Lists the top 50 resources that have generated the most GuardDuty usage, in order from most to least expensive.
usageStatistics_sumByResource :: Lens' UsageStatistics (Maybe [UsageResourceResult]) Source #
The usage statistic sum organized by resource.
usageStatistics_sumByDataSource :: Lens' UsageStatistics (Maybe [UsageDataSourceResult]) Source #
The usage statistic sum organized by on data source.
usageStatistics_sumByAccount :: Lens' UsageStatistics (Maybe [UsageAccountResult]) Source #
The usage statistic sum organized by account ID.