Copyright | (c) 2013-2021 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay <brendan.g.hay+amazonka@gmail.com> |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | None |
- Service Configuration
- Errors
- Waiters
- Operations
- CreateFilter
- EnableOrganizationAdminAccount
- ListFindings (Paginated)
- ListOrganizationAdminAccounts (Paginated)
- CreateIPSet
- DeleteThreatIntelSet
- UpdateThreatIntelSet
- StopMonitoringMembers
- ListThreatIntelSets (Paginated)
- CreateThreatIntelSet
- DeleteMembers
- ListTagsForResource
- GetFindingsStatistics
- GetIPSet
- ListInvitations (Paginated)
- UpdateMemberDetectors
- GetThreatIntelSet
- DeleteInvitations
- GetMasterAccount
- GetUsageStatistics
- CreateDetector
- DeclineInvitations
- DescribeOrganizationConfiguration
- CreatePublishingDestination
- UpdateFilter
- DeleteFilter
- DisassociateMembers
- DisassociateFromMasterAccount
- AcceptInvitation
- ListFilters (Paginated)
- ListMembers (Paginated)
- ListPublishingDestinations
- DeletePublishingDestination
- UpdatePublishingDestination
- GetDetector
- CreateSampleFindings
- ArchiveFindings
- CreateMembers
- UnarchiveFindings
- GetMemberDetectors
- GetInvitationsCount
- StartMonitoringMembers
- UpdateOrganizationConfiguration
- InviteMembers
- DeleteIPSet
- UpdateIPSet
- ListIPSets (Paginated)
- GetMembers
- DescribePublishingDestination
- TagResource
- GetFindings
- ListDetectors (Paginated)
- UntagResource
- UpdateDetector
- DeleteDetector
- UpdateFindingsFeedback
- GetFilter
- DisableOrganizationAdminAccount
- Types
- AdminStatus
- DataSource
- DataSourceStatus
- DestinationType
- DetectorStatus
- Feedback
- FilterAction
- FindingPublishingFrequency
- FindingStatisticType
- IpSetFormat
- IpSetStatus
- OrderBy
- PublishingStatus
- ThreatIntelSetFormat
- ThreatIntelSetStatus
- UsageStatisticType
- AccessControlList
- AccessKeyDetails
- AccountDetail
- AccountLevelPermissions
- Action
- AdminAccount
- AwsApiCallAction
- BlockPublicAccess
- BucketLevelPermissions
- BucketPolicy
- City
- CloudTrailConfigurationResult
- Condition
- Country
- DNSLogsConfigurationResult
- DataSourceConfigurations
- DataSourceConfigurationsResult
- DefaultServerSideEncryption
- Destination
- DestinationProperties
- DnsRequestAction
- DomainDetails
- Evidence
- Finding
- FindingCriteria
- FindingStatistics
- FlowLogsConfigurationResult
- GeoLocation
- IamInstanceProfile
- InstanceDetails
- Invitation
- LocalIpDetails
- LocalPortDetails
- Master
- Member
- MemberDataSourceConfiguration
- NetworkConnectionAction
- NetworkInterface
- Organization
- OrganizationDataSourceConfigurations
- OrganizationDataSourceConfigurationsResult
- OrganizationS3LogsConfiguration
- OrganizationS3LogsConfigurationResult
- Owner
- PermissionConfiguration
- PortProbeAction
- PortProbeDetail
- PrivateIpAddressDetails
- ProductCode
- PublicAccess
- RemoteIpDetails
- RemotePortDetails
- Resource
- S3BucketDetail
- S3LogsConfiguration
- S3LogsConfigurationResult
- SecurityGroup
- ServiceInfo
- SortCriteria
- Tag
- ThreatIntelligenceDetail
- Total
- UnprocessedAccount
- UsageAccountResult
- UsageCriteria
- UsageDataSourceResult
- UsageResourceResult
- UsageStatistics
Derived from API version 2017-11-28
of the AWS service descriptions, licensed under Apache 2.0.
Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC Flow Logs, AWS CloudTrail event logs, and DNS logs. It uses threat intelligence feeds (such as lists of malicious IPs and domains) and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your AWS environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, URLs, or domains. For example, GuardDuty can detect compromised EC2 instances that serve malware or mine bitcoin.
GuardDuty also monitors AWS account access behavior for signs of compromise. Some examples of this are unauthorized infrastructure deployments such as EC2 instances deployed in a Region that has never been used, or unusual API calls like a password policy change to reduce password strength.
GuardDuty informs you of the status of your AWS environment by producing security findings that you can view in the GuardDuty console or through Amazon CloudWatch events. For more information, see the <https:docs.aws.amazon.comguarddutylatestugwhat-is-guardduty.html Amazon GuardDuty User Guide> .
Synopsis
- defaultService :: Service
- _InternalServerErrorException :: AsError a => Getting (First ServiceError) a ServiceError
- _BadRequestException :: AsError a => Getting (First ServiceError) a ServiceError
- data CreateFilter = CreateFilter' (Maybe Text) (Maybe FilterAction) (Maybe Text) (Maybe Natural) (Maybe (HashMap Text Text)) Text Text FindingCriteria
- newCreateFilter :: Text -> Text -> FindingCriteria -> CreateFilter
- data CreateFilterResponse = CreateFilterResponse' Int Text
- newCreateFilterResponse :: Int -> Text -> CreateFilterResponse
- data EnableOrganizationAdminAccount = EnableOrganizationAdminAccount' Text
- newEnableOrganizationAdminAccount :: Text -> EnableOrganizationAdminAccount
- data EnableOrganizationAdminAccountResponse = EnableOrganizationAdminAccountResponse' Int
- newEnableOrganizationAdminAccountResponse :: Int -> EnableOrganizationAdminAccountResponse
- data ListFindings = ListFindings' (Maybe FindingCriteria) (Maybe SortCriteria) (Maybe Text) (Maybe Natural) Text
- newListFindings :: Text -> ListFindings
- data ListFindingsResponse = ListFindingsResponse' (Maybe Text) Int [Text]
- newListFindingsResponse :: Int -> ListFindingsResponse
- data ListOrganizationAdminAccounts = ListOrganizationAdminAccounts' (Maybe Text) (Maybe Natural)
- newListOrganizationAdminAccounts :: ListOrganizationAdminAccounts
- data ListOrganizationAdminAccountsResponse = ListOrganizationAdminAccountsResponse' (Maybe [AdminAccount]) (Maybe Text) Int
- newListOrganizationAdminAccountsResponse :: Int -> ListOrganizationAdminAccountsResponse
- data CreateIPSet = CreateIPSet' (Maybe Text) (Maybe (HashMap Text Text)) Text Text IpSetFormat Text Bool
- newCreateIPSet :: Text -> Text -> IpSetFormat -> Text -> Bool -> CreateIPSet
- data CreateIPSetResponse = CreateIPSetResponse' Int Text
- newCreateIPSetResponse :: Int -> Text -> CreateIPSetResponse
- data DeleteThreatIntelSet = DeleteThreatIntelSet' Text Text
- newDeleteThreatIntelSet :: Text -> Text -> DeleteThreatIntelSet
- data DeleteThreatIntelSetResponse = DeleteThreatIntelSetResponse' Int
- newDeleteThreatIntelSetResponse :: Int -> DeleteThreatIntelSetResponse
- data UpdateThreatIntelSet = UpdateThreatIntelSet' (Maybe Text) (Maybe Bool) (Maybe Text) Text Text
- newUpdateThreatIntelSet :: Text -> Text -> UpdateThreatIntelSet
- data UpdateThreatIntelSetResponse = UpdateThreatIntelSetResponse' Int
- newUpdateThreatIntelSetResponse :: Int -> UpdateThreatIntelSetResponse
- data StopMonitoringMembers = StopMonitoringMembers' Text (NonEmpty Text)
- newStopMonitoringMembers :: Text -> NonEmpty Text -> StopMonitoringMembers
- data StopMonitoringMembersResponse = StopMonitoringMembersResponse' Int [UnprocessedAccount]
- newStopMonitoringMembersResponse :: Int -> StopMonitoringMembersResponse
- data ListThreatIntelSets = ListThreatIntelSets' (Maybe Text) (Maybe Natural) Text
- newListThreatIntelSets :: Text -> ListThreatIntelSets
- data ListThreatIntelSetsResponse = ListThreatIntelSetsResponse' (Maybe Text) Int [Text]
- newListThreatIntelSetsResponse :: Int -> ListThreatIntelSetsResponse
- data CreateThreatIntelSet = CreateThreatIntelSet' (Maybe Text) (Maybe (HashMap Text Text)) Text Text ThreatIntelSetFormat Text Bool
- newCreateThreatIntelSet :: Text -> Text -> ThreatIntelSetFormat -> Text -> Bool -> CreateThreatIntelSet
- data CreateThreatIntelSetResponse = CreateThreatIntelSetResponse' Int Text
- newCreateThreatIntelSetResponse :: Int -> Text -> CreateThreatIntelSetResponse
- data DeleteMembers = DeleteMembers' Text (NonEmpty Text)
- newDeleteMembers :: Text -> NonEmpty Text -> DeleteMembers
- data DeleteMembersResponse = DeleteMembersResponse' Int [UnprocessedAccount]
- newDeleteMembersResponse :: Int -> DeleteMembersResponse
- data ListTagsForResource = ListTagsForResource' Text
- newListTagsForResource :: Text -> ListTagsForResource
- data ListTagsForResourceResponse = ListTagsForResourceResponse' (Maybe (HashMap Text Text)) Int
- newListTagsForResourceResponse :: Int -> ListTagsForResourceResponse
- data GetFindingsStatistics = GetFindingsStatistics' (Maybe FindingCriteria) Text [FindingStatisticType]
- newGetFindingsStatistics :: Text -> GetFindingsStatistics
- data GetFindingsStatisticsResponse = GetFindingsStatisticsResponse' Int FindingStatistics
- newGetFindingsStatisticsResponse :: Int -> FindingStatistics -> GetFindingsStatisticsResponse
- data GetIPSet = GetIPSet' Text Text
- newGetIPSet :: Text -> Text -> GetIPSet
- data GetIPSetResponse = GetIPSetResponse' (Maybe (HashMap Text Text)) Int Text IpSetFormat Text IpSetStatus
- newGetIPSetResponse :: Int -> Text -> IpSetFormat -> Text -> IpSetStatus -> GetIPSetResponse
- data ListInvitations = ListInvitations' (Maybe Text) (Maybe Natural)
- newListInvitations :: ListInvitations
- data ListInvitationsResponse = ListInvitationsResponse' (Maybe [Invitation]) (Maybe Text) Int
- newListInvitationsResponse :: Int -> ListInvitationsResponse
- data UpdateMemberDetectors = UpdateMemberDetectors' (Maybe DataSourceConfigurations) Text (NonEmpty Text)
- newUpdateMemberDetectors :: Text -> NonEmpty Text -> UpdateMemberDetectors
- data UpdateMemberDetectorsResponse = UpdateMemberDetectorsResponse' Int [UnprocessedAccount]
- newUpdateMemberDetectorsResponse :: Int -> UpdateMemberDetectorsResponse
- data GetThreatIntelSet = GetThreatIntelSet' Text Text
- newGetThreatIntelSet :: Text -> Text -> GetThreatIntelSet
- data GetThreatIntelSetResponse = GetThreatIntelSetResponse' (Maybe (HashMap Text Text)) Int Text ThreatIntelSetFormat Text ThreatIntelSetStatus
- newGetThreatIntelSetResponse :: Int -> Text -> ThreatIntelSetFormat -> Text -> ThreatIntelSetStatus -> GetThreatIntelSetResponse
- data DeleteInvitations = DeleteInvitations' (NonEmpty Text)
- newDeleteInvitations :: NonEmpty Text -> DeleteInvitations
- data DeleteInvitationsResponse = DeleteInvitationsResponse' Int [UnprocessedAccount]
- newDeleteInvitationsResponse :: Int -> DeleteInvitationsResponse
- data GetMasterAccount = GetMasterAccount' Text
- newGetMasterAccount :: Text -> GetMasterAccount
- data GetMasterAccountResponse = GetMasterAccountResponse' Int Master
- newGetMasterAccountResponse :: Int -> Master -> GetMasterAccountResponse
- data GetUsageStatistics = GetUsageStatistics' (Maybe Text) (Maybe Text) (Maybe Natural) Text UsageStatisticType UsageCriteria
- newGetUsageStatistics :: Text -> UsageStatisticType -> UsageCriteria -> GetUsageStatistics
- data GetUsageStatisticsResponse = GetUsageStatisticsResponse' (Maybe UsageStatistics) (Maybe Text) Int
- newGetUsageStatisticsResponse :: Int -> GetUsageStatisticsResponse
- data CreateDetector = CreateDetector' (Maybe Text) (Maybe FindingPublishingFrequency) (Maybe DataSourceConfigurations) (Maybe (HashMap Text Text)) Bool
- newCreateDetector :: Bool -> CreateDetector
- data CreateDetectorResponse = CreateDetectorResponse' (Maybe Text) Int
- newCreateDetectorResponse :: Int -> CreateDetectorResponse
- data DeclineInvitations = DeclineInvitations' (NonEmpty Text)
- newDeclineInvitations :: NonEmpty Text -> DeclineInvitations
- data DeclineInvitationsResponse = DeclineInvitationsResponse' Int [UnprocessedAccount]
- newDeclineInvitationsResponse :: Int -> DeclineInvitationsResponse
- data DescribeOrganizationConfiguration = DescribeOrganizationConfiguration' Text
- newDescribeOrganizationConfiguration :: Text -> DescribeOrganizationConfiguration
- data DescribeOrganizationConfigurationResponse = DescribeOrganizationConfigurationResponse' (Maybe OrganizationDataSourceConfigurationsResult) Int Bool Bool
- newDescribeOrganizationConfigurationResponse :: Int -> Bool -> Bool -> DescribeOrganizationConfigurationResponse
- data CreatePublishingDestination = CreatePublishingDestination' (Maybe Text) Text DestinationType DestinationProperties
- newCreatePublishingDestination :: Text -> DestinationType -> DestinationProperties -> CreatePublishingDestination
- data CreatePublishingDestinationResponse = CreatePublishingDestinationResponse' Int Text
- newCreatePublishingDestinationResponse :: Int -> Text -> CreatePublishingDestinationResponse
- data UpdateFilter = UpdateFilter' (Maybe FindingCriteria) (Maybe FilterAction) (Maybe Text) (Maybe Natural) Text Text
- newUpdateFilter :: Text -> Text -> UpdateFilter
- data UpdateFilterResponse = UpdateFilterResponse' Int Text
- newUpdateFilterResponse :: Int -> Text -> UpdateFilterResponse
- data DeleteFilter = DeleteFilter' Text Text
- newDeleteFilter :: Text -> Text -> DeleteFilter
- data DeleteFilterResponse = DeleteFilterResponse' Int
- newDeleteFilterResponse :: Int -> DeleteFilterResponse
- data DisassociateMembers = DisassociateMembers' Text (NonEmpty Text)
- newDisassociateMembers :: Text -> NonEmpty Text -> DisassociateMembers
- data DisassociateMembersResponse = DisassociateMembersResponse' Int [UnprocessedAccount]
- newDisassociateMembersResponse :: Int -> DisassociateMembersResponse
- data DisassociateFromMasterAccount = DisassociateFromMasterAccount' Text
- newDisassociateFromMasterAccount :: Text -> DisassociateFromMasterAccount
- data DisassociateFromMasterAccountResponse = DisassociateFromMasterAccountResponse' Int
- newDisassociateFromMasterAccountResponse :: Int -> DisassociateFromMasterAccountResponse
- data AcceptInvitation = AcceptInvitation' Text Text Text
- newAcceptInvitation :: Text -> Text -> Text -> AcceptInvitation
- data AcceptInvitationResponse = AcceptInvitationResponse' Int
- newAcceptInvitationResponse :: Int -> AcceptInvitationResponse
- data ListFilters = ListFilters' (Maybe Text) (Maybe Natural) Text
- newListFilters :: Text -> ListFilters
- data ListFiltersResponse = ListFiltersResponse' (Maybe Text) Int [Text]
- newListFiltersResponse :: Int -> ListFiltersResponse
- data ListMembers = ListMembers' (Maybe Text) (Maybe Text) (Maybe Natural) Text
- newListMembers :: Text -> ListMembers
- data ListMembersResponse = ListMembersResponse' (Maybe [Member]) (Maybe Text) Int
- newListMembersResponse :: Int -> ListMembersResponse
- data ListPublishingDestinations = ListPublishingDestinations' (Maybe Text) (Maybe Natural) Text
- newListPublishingDestinations :: Text -> ListPublishingDestinations
- data ListPublishingDestinationsResponse = ListPublishingDestinationsResponse' (Maybe Text) Int [Destination]
- newListPublishingDestinationsResponse :: Int -> ListPublishingDestinationsResponse
- data DeletePublishingDestination = DeletePublishingDestination' Text Text
- newDeletePublishingDestination :: Text -> Text -> DeletePublishingDestination
- data DeletePublishingDestinationResponse = DeletePublishingDestinationResponse' Int
- newDeletePublishingDestinationResponse :: Int -> DeletePublishingDestinationResponse
- data UpdatePublishingDestination = UpdatePublishingDestination' (Maybe DestinationProperties) Text Text
- newUpdatePublishingDestination :: Text -> Text -> UpdatePublishingDestination
- data UpdatePublishingDestinationResponse = UpdatePublishingDestinationResponse' Int
- newUpdatePublishingDestinationResponse :: Int -> UpdatePublishingDestinationResponse
- data GetDetector = GetDetector' Text
- newGetDetector :: Text -> GetDetector
- data GetDetectorResponse = GetDetectorResponse' (Maybe Text) (Maybe FindingPublishingFrequency) (Maybe DataSourceConfigurationsResult) (Maybe Text) (Maybe (HashMap Text Text)) Int Text DetectorStatus
- newGetDetectorResponse :: Int -> Text -> DetectorStatus -> GetDetectorResponse
- data CreateSampleFindings = CreateSampleFindings' (Maybe [Text]) Text
- newCreateSampleFindings :: Text -> CreateSampleFindings
- data CreateSampleFindingsResponse = CreateSampleFindingsResponse' Int
- newCreateSampleFindingsResponse :: Int -> CreateSampleFindingsResponse
- data ArchiveFindings = ArchiveFindings' Text [Text]
- newArchiveFindings :: Text -> ArchiveFindings
- data ArchiveFindingsResponse = ArchiveFindingsResponse' Int
- newArchiveFindingsResponse :: Int -> ArchiveFindingsResponse
- data CreateMembers = CreateMembers' Text (NonEmpty AccountDetail)
- newCreateMembers :: Text -> NonEmpty AccountDetail -> CreateMembers
- data CreateMembersResponse = CreateMembersResponse' Int [UnprocessedAccount]
- newCreateMembersResponse :: Int -> CreateMembersResponse
- data UnarchiveFindings = UnarchiveFindings' Text [Text]
- newUnarchiveFindings :: Text -> UnarchiveFindings
- data UnarchiveFindingsResponse = UnarchiveFindingsResponse' Int
- newUnarchiveFindingsResponse :: Int -> UnarchiveFindingsResponse
- data GetMemberDetectors = GetMemberDetectors' Text (NonEmpty Text)
- newGetMemberDetectors :: Text -> NonEmpty Text -> GetMemberDetectors
- data GetMemberDetectorsResponse = GetMemberDetectorsResponse' Int (NonEmpty MemberDataSourceConfiguration) [UnprocessedAccount]
- newGetMemberDetectorsResponse :: Int -> NonEmpty MemberDataSourceConfiguration -> GetMemberDetectorsResponse
- data GetInvitationsCount = GetInvitationsCount' {
- newGetInvitationsCount :: GetInvitationsCount
- data GetInvitationsCountResponse = GetInvitationsCountResponse' (Maybe Int) Int
- newGetInvitationsCountResponse :: Int -> GetInvitationsCountResponse
- data StartMonitoringMembers = StartMonitoringMembers' Text (NonEmpty Text)
- newStartMonitoringMembers :: Text -> NonEmpty Text -> StartMonitoringMembers
- data StartMonitoringMembersResponse = StartMonitoringMembersResponse' Int [UnprocessedAccount]
- newStartMonitoringMembersResponse :: Int -> StartMonitoringMembersResponse
- data UpdateOrganizationConfiguration = UpdateOrganizationConfiguration' (Maybe OrganizationDataSourceConfigurations) Text Bool
- newUpdateOrganizationConfiguration :: Text -> Bool -> UpdateOrganizationConfiguration
- data UpdateOrganizationConfigurationResponse = UpdateOrganizationConfigurationResponse' Int
- newUpdateOrganizationConfigurationResponse :: Int -> UpdateOrganizationConfigurationResponse
- data InviteMembers = InviteMembers' (Maybe Bool) (Maybe Text) Text (NonEmpty Text)
- newInviteMembers :: Text -> NonEmpty Text -> InviteMembers
- data InviteMembersResponse = InviteMembersResponse' Int [UnprocessedAccount]
- newInviteMembersResponse :: Int -> InviteMembersResponse
- data DeleteIPSet = DeleteIPSet' Text Text
- newDeleteIPSet :: Text -> Text -> DeleteIPSet
- data DeleteIPSetResponse = DeleteIPSetResponse' Int
- newDeleteIPSetResponse :: Int -> DeleteIPSetResponse
- data UpdateIPSet = UpdateIPSet' (Maybe Text) (Maybe Bool) (Maybe Text) Text Text
- newUpdateIPSet :: Text -> Text -> UpdateIPSet
- data UpdateIPSetResponse = UpdateIPSetResponse' Int
- newUpdateIPSetResponse :: Int -> UpdateIPSetResponse
- data ListIPSets = ListIPSets' (Maybe Text) (Maybe Natural) Text
- newListIPSets :: Text -> ListIPSets
- data ListIPSetsResponse = ListIPSetsResponse' (Maybe Text) Int [Text]
- newListIPSetsResponse :: Int -> ListIPSetsResponse
- data GetMembers = GetMembers' Text (NonEmpty Text)
- newGetMembers :: Text -> NonEmpty Text -> GetMembers
- data GetMembersResponse = GetMembersResponse' Int [Member] [UnprocessedAccount]
- newGetMembersResponse :: Int -> GetMembersResponse
- data DescribePublishingDestination = DescribePublishingDestination' Text Text
- newDescribePublishingDestination :: Text -> Text -> DescribePublishingDestination
- data DescribePublishingDestinationResponse = DescribePublishingDestinationResponse' Int Text DestinationType PublishingStatus Integer DestinationProperties
- newDescribePublishingDestinationResponse :: Int -> Text -> DestinationType -> PublishingStatus -> Integer -> DestinationProperties -> DescribePublishingDestinationResponse
- data TagResource = TagResource' Text (HashMap Text Text)
- newTagResource :: Text -> TagResource
- data TagResourceResponse = TagResourceResponse' Int
- newTagResourceResponse :: Int -> TagResourceResponse
- data GetFindings = GetFindings' (Maybe SortCriteria) Text [Text]
- newGetFindings :: Text -> GetFindings
- data GetFindingsResponse = GetFindingsResponse' Int [Finding]
- newGetFindingsResponse :: Int -> GetFindingsResponse
- data ListDetectors = ListDetectors' (Maybe Text) (Maybe Natural)
- newListDetectors :: ListDetectors
- data ListDetectorsResponse = ListDetectorsResponse' (Maybe Text) Int [Text]
- newListDetectorsResponse :: Int -> ListDetectorsResponse
- data UntagResource = UntagResource' Text (NonEmpty Text)
- newUntagResource :: Text -> NonEmpty Text -> UntagResource
- data UntagResourceResponse = UntagResourceResponse' Int
- newUntagResourceResponse :: Int -> UntagResourceResponse
- data UpdateDetector = UpdateDetector' (Maybe FindingPublishingFrequency) (Maybe DataSourceConfigurations) (Maybe Bool) Text
- newUpdateDetector :: Text -> UpdateDetector
- data UpdateDetectorResponse = UpdateDetectorResponse' Int
- newUpdateDetectorResponse :: Int -> UpdateDetectorResponse
- data DeleteDetector = DeleteDetector' Text
- newDeleteDetector :: Text -> DeleteDetector
- data DeleteDetectorResponse = DeleteDetectorResponse' Int
- newDeleteDetectorResponse :: Int -> DeleteDetectorResponse
- data UpdateFindingsFeedback = UpdateFindingsFeedback' (Maybe Text) Text [Text] Feedback
- newUpdateFindingsFeedback :: Text -> Feedback -> UpdateFindingsFeedback
- data UpdateFindingsFeedbackResponse = UpdateFindingsFeedbackResponse' Int
- newUpdateFindingsFeedbackResponse :: Int -> UpdateFindingsFeedbackResponse
- data GetFilter = GetFilter' Text Text
- newGetFilter :: Text -> Text -> GetFilter
- data GetFilterResponse = GetFilterResponse' (Maybe Text) (Maybe Natural) (Maybe (HashMap Text Text)) Int Text FilterAction FindingCriteria
- newGetFilterResponse :: Int -> Text -> FilterAction -> FindingCriteria -> GetFilterResponse
- data DisableOrganizationAdminAccount = DisableOrganizationAdminAccount' Text
- newDisableOrganizationAdminAccount :: Text -> DisableOrganizationAdminAccount
- data DisableOrganizationAdminAccountResponse = DisableOrganizationAdminAccountResponse' Int
- newDisableOrganizationAdminAccountResponse :: Int -> DisableOrganizationAdminAccountResponse
- newtype AdminStatus where
- AdminStatus' { }
- pattern AdminStatus_DISABLE_IN_PROGRESS :: AdminStatus
- pattern AdminStatus_ENABLED :: AdminStatus
- newtype DataSource where
- DataSource' { }
- pattern DataSource_CLOUD_TRAIL :: DataSource
- pattern DataSource_DNS_LOGS :: DataSource
- pattern DataSource_FLOW_LOGS :: DataSource
- pattern DataSource_S3_LOGS :: DataSource
- newtype DataSourceStatus where
- DataSourceStatus' { }
- pattern DataSourceStatus_DISABLED :: DataSourceStatus
- pattern DataSourceStatus_ENABLED :: DataSourceStatus
- newtype DestinationType where
- DestinationType' { }
- pattern DestinationType_S3 :: DestinationType
- newtype DetectorStatus where
- DetectorStatus' { }
- pattern DetectorStatus_DISABLED :: DetectorStatus
- pattern DetectorStatus_ENABLED :: DetectorStatus
- newtype Feedback where
- Feedback' {
- fromFeedback :: Text
- pattern Feedback_NOT_USEFUL :: Feedback
- pattern Feedback_USEFUL :: Feedback
- Feedback' {
- newtype FilterAction where
- FilterAction' { }
- pattern FilterAction_ARCHIVE :: FilterAction
- pattern FilterAction_NOOP :: FilterAction
- newtype FindingPublishingFrequency where
- newtype FindingStatisticType where
- newtype IpSetFormat where
- IpSetFormat' { }
- pattern IpSetFormat_ALIEN_VAULT :: IpSetFormat
- pattern IpSetFormat_FIRE_EYE :: IpSetFormat
- pattern IpSetFormat_OTX_CSV :: IpSetFormat
- pattern IpSetFormat_PROOF_POINT :: IpSetFormat
- pattern IpSetFormat_STIX :: IpSetFormat
- pattern IpSetFormat_TXT :: IpSetFormat
- newtype IpSetStatus where
- IpSetStatus' { }
- pattern IpSetStatus_ACTIVATING :: IpSetStatus
- pattern IpSetStatus_ACTIVE :: IpSetStatus
- pattern IpSetStatus_DEACTIVATING :: IpSetStatus
- pattern IpSetStatus_DELETED :: IpSetStatus
- pattern IpSetStatus_DELETE_PENDING :: IpSetStatus
- pattern IpSetStatus_ERROR :: IpSetStatus
- pattern IpSetStatus_INACTIVE :: IpSetStatus
- newtype OrderBy where
- OrderBy' {
- fromOrderBy :: Text
- pattern OrderBy_ASC :: OrderBy
- pattern OrderBy_DESC :: OrderBy
- OrderBy' {
- newtype PublishingStatus where
- newtype ThreatIntelSetFormat where
- ThreatIntelSetFormat' { }
- pattern ThreatIntelSetFormat_ALIEN_VAULT :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_FIRE_EYE :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_OTX_CSV :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_PROOF_POINT :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_STIX :: ThreatIntelSetFormat
- pattern ThreatIntelSetFormat_TXT :: ThreatIntelSetFormat
- newtype ThreatIntelSetStatus where
- ThreatIntelSetStatus' { }
- pattern ThreatIntelSetStatus_ACTIVATING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_ACTIVE :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DEACTIVATING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DELETED :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_DELETE_PENDING :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_ERROR :: ThreatIntelSetStatus
- pattern ThreatIntelSetStatus_INACTIVE :: ThreatIntelSetStatus
- newtype UsageStatisticType where
- data AccessControlList = AccessControlList' (Maybe Bool) (Maybe Bool)
- newAccessControlList :: AccessControlList
- data AccessKeyDetails = AccessKeyDetails' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newAccessKeyDetails :: AccessKeyDetails
- data AccountDetail = AccountDetail' Text Text
- newAccountDetail :: Text -> Text -> AccountDetail
- data AccountLevelPermissions = AccountLevelPermissions' (Maybe BlockPublicAccess)
- newAccountLevelPermissions :: AccountLevelPermissions
- data Action = Action' (Maybe NetworkConnectionAction) (Maybe PortProbeAction) (Maybe Text) (Maybe DnsRequestAction) (Maybe AwsApiCallAction)
- newAction :: Action
- data AdminAccount = AdminAccount' (Maybe Text) (Maybe AdminStatus)
- newAdminAccount :: AdminAccount
- data AwsApiCallAction = AwsApiCallAction' (Maybe RemoteIpDetails) (Maybe Text) (Maybe DomainDetails) (Maybe Text) (Maybe Text) (Maybe Text)
- newAwsApiCallAction :: AwsApiCallAction
- data BlockPublicAccess = BlockPublicAccess' (Maybe Bool) (Maybe Bool) (Maybe Bool) (Maybe Bool)
- newBlockPublicAccess :: BlockPublicAccess
- data BucketLevelPermissions = BucketLevelPermissions' (Maybe AccessControlList) (Maybe BlockPublicAccess) (Maybe BucketPolicy)
- newBucketLevelPermissions :: BucketLevelPermissions
- data BucketPolicy = BucketPolicy' (Maybe Bool) (Maybe Bool)
- newBucketPolicy :: BucketPolicy
- data City = City' (Maybe Text)
- newCity :: City
- data CloudTrailConfigurationResult = CloudTrailConfigurationResult' DataSourceStatus
- newCloudTrailConfigurationResult :: DataSourceStatus -> CloudTrailConfigurationResult
- data Condition = Condition' (Maybe [Text]) (Maybe Integer) (Maybe Int) (Maybe Integer) (Maybe Integer) (Maybe Int) (Maybe [Text]) (Maybe [Text]) (Maybe [Text]) (Maybe Int) (Maybe Int) (Maybe Integer)
- newCondition :: Condition
- data Country = Country' (Maybe Text) (Maybe Text)
- newCountry :: Country
- data DNSLogsConfigurationResult = DNSLogsConfigurationResult' DataSourceStatus
- newDNSLogsConfigurationResult :: DataSourceStatus -> DNSLogsConfigurationResult
- data DataSourceConfigurations = DataSourceConfigurations' (Maybe S3LogsConfiguration)
- newDataSourceConfigurations :: DataSourceConfigurations
- data DataSourceConfigurationsResult = DataSourceConfigurationsResult' CloudTrailConfigurationResult DNSLogsConfigurationResult FlowLogsConfigurationResult S3LogsConfigurationResult
- newDataSourceConfigurationsResult :: CloudTrailConfigurationResult -> DNSLogsConfigurationResult -> FlowLogsConfigurationResult -> S3LogsConfigurationResult -> DataSourceConfigurationsResult
- data DefaultServerSideEncryption = DefaultServerSideEncryption' (Maybe Text) (Maybe Text)
- newDefaultServerSideEncryption :: DefaultServerSideEncryption
- data Destination = Destination' Text DestinationType PublishingStatus
- newDestination :: Text -> DestinationType -> PublishingStatus -> Destination
- data DestinationProperties = DestinationProperties' (Maybe Text) (Maybe Text)
- newDestinationProperties :: DestinationProperties
- data DnsRequestAction = DnsRequestAction' (Maybe Text)
- newDnsRequestAction :: DnsRequestAction
- data DomainDetails = DomainDetails' (Maybe Text)
- newDomainDetails :: DomainDetails
- data Evidence = Evidence' (Maybe [ThreatIntelligenceDetail])
- newEvidence :: Evidence
- data Finding = Finding' (Maybe ServiceInfo) (Maybe Double) (Maybe Text) (Maybe Text) (Maybe Text) Text Text Text Text Text Resource Text Double Text Text
- newFinding :: Text -> Text -> Text -> Text -> Text -> Resource -> Text -> Double -> Text -> Text -> Finding
- data FindingCriteria = FindingCriteria' (Maybe (HashMap Text Condition))
- newFindingCriteria :: FindingCriteria
- data FindingStatistics = FindingStatistics' (Maybe (HashMap Text Int))
- newFindingStatistics :: FindingStatistics
- data FlowLogsConfigurationResult = FlowLogsConfigurationResult' DataSourceStatus
- newFlowLogsConfigurationResult :: DataSourceStatus -> FlowLogsConfigurationResult
- data GeoLocation = GeoLocation' (Maybe Double) (Maybe Double)
- newGeoLocation :: GeoLocation
- data IamInstanceProfile = IamInstanceProfile' (Maybe Text) (Maybe Text)
- newIamInstanceProfile :: IamInstanceProfile
- data InstanceDetails = InstanceDetails' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [NetworkInterface]) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe IamInstanceProfile) (Maybe Text) (Maybe [ProductCode]) (Maybe Text) (Maybe [Tag]) (Maybe Text)
- newInstanceDetails :: InstanceDetails
- data Invitation = Invitation' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newInvitation :: Invitation
- data LocalIpDetails = LocalIpDetails' (Maybe Text)
- newLocalIpDetails :: LocalIpDetails
- data LocalPortDetails = LocalPortDetails' (Maybe Text) (Maybe Int)
- newLocalPortDetails :: LocalPortDetails
- data Master = Master' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newMaster :: Master
- data Member = Member' (Maybe Text) (Maybe Text) Text Text Text Text Text
- newMember :: Text -> Text -> Text -> Text -> Text -> Member
- data MemberDataSourceConfiguration = MemberDataSourceConfiguration' Text DataSourceConfigurationsResult
- newMemberDataSourceConfiguration :: Text -> DataSourceConfigurationsResult -> MemberDataSourceConfiguration
- data NetworkConnectionAction = NetworkConnectionAction' (Maybe RemoteIpDetails) (Maybe Text) (Maybe LocalIpDetails) (Maybe RemotePortDetails) (Maybe Bool) (Maybe Text) (Maybe LocalPortDetails)
- newNetworkConnectionAction :: NetworkConnectionAction
- data NetworkInterface = NetworkInterface' (Maybe [PrivateIpAddressDetails]) (Maybe Text) (Maybe [SecurityGroup]) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [Text])
- newNetworkInterface :: NetworkInterface
- data Organization = Organization' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text)
- newOrganization :: Organization
- data OrganizationDataSourceConfigurations = OrganizationDataSourceConfigurations' (Maybe OrganizationS3LogsConfiguration)
- newOrganizationDataSourceConfigurations :: OrganizationDataSourceConfigurations
- data OrganizationDataSourceConfigurationsResult = OrganizationDataSourceConfigurationsResult' OrganizationS3LogsConfigurationResult
- newOrganizationDataSourceConfigurationsResult :: OrganizationS3LogsConfigurationResult -> OrganizationDataSourceConfigurationsResult
- data OrganizationS3LogsConfiguration = OrganizationS3LogsConfiguration' Bool
- newOrganizationS3LogsConfiguration :: Bool -> OrganizationS3LogsConfiguration
- data OrganizationS3LogsConfigurationResult = OrganizationS3LogsConfigurationResult' Bool
- newOrganizationS3LogsConfigurationResult :: Bool -> OrganizationS3LogsConfigurationResult
- data Owner = Owner' (Maybe Text)
- newOwner :: Owner
- data PermissionConfiguration = PermissionConfiguration' (Maybe BucketLevelPermissions) (Maybe AccountLevelPermissions)
- newPermissionConfiguration :: PermissionConfiguration
- data PortProbeAction = PortProbeAction' (Maybe [PortProbeDetail]) (Maybe Bool)
- newPortProbeAction :: PortProbeAction
- data PortProbeDetail = PortProbeDetail' (Maybe RemoteIpDetails) (Maybe LocalIpDetails) (Maybe LocalPortDetails)
- newPortProbeDetail :: PortProbeDetail
- data PrivateIpAddressDetails = PrivateIpAddressDetails' (Maybe Text) (Maybe Text)
- newPrivateIpAddressDetails :: PrivateIpAddressDetails
- data ProductCode = ProductCode' (Maybe Text) (Maybe Text)
- newProductCode :: ProductCode
- data PublicAccess = PublicAccess' (Maybe PermissionConfiguration) (Maybe Text)
- newPublicAccess :: PublicAccess
- data RemoteIpDetails = RemoteIpDetails' (Maybe Country) (Maybe City) (Maybe Text) (Maybe GeoLocation) (Maybe Organization)
- newRemoteIpDetails :: RemoteIpDetails
- data RemotePortDetails = RemotePortDetails' (Maybe Text) (Maybe Int)
- newRemotePortDetails :: RemotePortDetails
- data Resource = Resource' (Maybe Text) (Maybe [S3BucketDetail]) (Maybe InstanceDetails) (Maybe AccessKeyDetails)
- newResource :: Resource
- data S3BucketDetail = S3BucketDetail' (Maybe Text) (Maybe POSIX) (Maybe Owner) (Maybe Text) (Maybe DefaultServerSideEncryption) (Maybe PublicAccess) (Maybe Text) (Maybe [Tag])
- newS3BucketDetail :: S3BucketDetail
- data S3LogsConfiguration = S3LogsConfiguration' Bool
- newS3LogsConfiguration :: Bool -> S3LogsConfiguration
- data S3LogsConfigurationResult = S3LogsConfigurationResult' DataSourceStatus
- newS3LogsConfigurationResult :: DataSourceStatus -> S3LogsConfigurationResult
- data SecurityGroup = SecurityGroup' (Maybe Text) (Maybe Text)
- newSecurityGroup :: SecurityGroup
- data ServiceInfo = ServiceInfo' (Maybe Int) (Maybe Text) (Maybe Action) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Evidence) (Maybe Text) (Maybe Text) (Maybe Bool)
- newServiceInfo :: ServiceInfo
- data SortCriteria = SortCriteria' (Maybe OrderBy) (Maybe Text)
- newSortCriteria :: SortCriteria
- data Tag = Tag' (Maybe Text) (Maybe Text)
- newTag :: Tag
- data ThreatIntelligenceDetail = ThreatIntelligenceDetail' (Maybe [Text]) (Maybe Text)
- newThreatIntelligenceDetail :: ThreatIntelligenceDetail
- data Total = Total' (Maybe Text) (Maybe Text)
- newTotal :: Total
- data UnprocessedAccount = UnprocessedAccount' Text Text
- newUnprocessedAccount :: Text -> Text -> UnprocessedAccount
- data UsageAccountResult = UsageAccountResult' (Maybe Text) (Maybe Total)
- newUsageAccountResult :: UsageAccountResult
- data UsageCriteria = UsageCriteria' (Maybe (NonEmpty Text)) (Maybe [Text]) [DataSource]
- newUsageCriteria :: UsageCriteria
- data UsageDataSourceResult = UsageDataSourceResult' (Maybe Total) (Maybe DataSource)
- newUsageDataSourceResult :: UsageDataSourceResult
- data UsageResourceResult = UsageResourceResult' (Maybe Total) (Maybe Text)
- newUsageResourceResult :: UsageResourceResult
- data UsageStatistics = UsageStatistics' (Maybe [UsageResourceResult]) (Maybe [UsageResourceResult]) (Maybe [UsageDataSourceResult]) (Maybe [UsageAccountResult])
- newUsageStatistics :: UsageStatistics
Service Configuration
defaultService :: Service Source #
API version 2017-11-28
of the Amazon GuardDuty SDK configuration.
Errors
Error matchers are designed for use with the functions provided by
Control.Exception.Lens.
This allows catching (and rethrowing) service specific errors returned
by GuardDuty
.
InternalServerErrorException
_InternalServerErrorException :: AsError a => Getting (First ServiceError) a ServiceError Source #
An internal server error exception object.
BadRequestException
_BadRequestException :: AsError a => Getting (First ServiceError) a ServiceError Source #
A bad request exception object.
Waiters
Waiters poll by repeatedly sending a request until some remote success condition
configured by the Wait
specification is fulfilled. The Wait
specification
determines how many attempts should be made, in addition to delay and retry strategies.
Operations
Some AWS operations return results that are incomplete and require subsequent
requests in order to obtain the entire result set. The process of sending
subsequent requests to continue where a previous request left off is called
pagination. For example, the ListObjects
operation of Amazon S3 returns up to
1000 objects at a time, and you must send subsequent requests with the
appropriate Marker in order to retrieve the next page of results.
Operations that have an AWSPager
instance can transparently perform subsequent
requests, correctly setting Markers and other request facets to iterate through
the entire result set of a truncated API operation. Operations which support
this have an additional note in the documentation.
Many operations have the ability to filter results on the server side. See the individual operation parameters for details.
CreateFilter
data CreateFilter Source #
See: newCreateFilter
smart constructor.
CreateFilter' (Maybe Text) (Maybe FilterAction) (Maybe Text) (Maybe Natural) (Maybe (HashMap Text Text)) Text Text FindingCriteria |
Instances
:: Text | |
-> Text | |
-> FindingCriteria | |
-> CreateFilter |
Create a value of CreateFilter
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreateFilter'
, createFilter_clientToken
- The idempotency token for the create request.
$sel:action:CreateFilter'
, createFilter_action
- Specifies the action that is to be applied to the findings that match
the filter.
$sel:description:CreateFilter'
, createFilter_description
- The description of the filter.
$sel:rank:CreateFilter'
, createFilter_rank
- Specifies the position of the filter in the list of current filters.
Also specifies the order in which this filter is applied to the
findings.
$sel:tags:CreateFilter'
, createFilter_tags
- The tags to be added to a new filter resource.
$sel:detectorId:CreateFilter'
, createFilter_detectorId
- The ID of the detector belonging to the GuardDuty account that you want
to create a filter for.
$sel:name:CreateFilter'
, createFilter_name
- The name of the filter. Minimum length of 3. Maximum length of 64. Valid
characters include alphanumeric characters, dot (.), underscore (_), and
dash (-). Spaces are not allowed.
$sel:findingCriteria:CreateFilter'
, createFilter_findingCriteria
- Represents the criteria to be used in the filter for querying findings.
You can only use the following attributes to query findings:
- accountId
- region
- confidence
- id
- resource.accessKeyDetails.accessKeyId
- resource.accessKeyDetails.principalId
- resource.accessKeyDetails.userName
- resource.accessKeyDetails.userType
- resource.instanceDetails.iamInstanceProfile.id
- resource.instanceDetails.imageId
- resource.instanceDetails.instanceId
- resource.instanceDetails.outpostArn
- resource.instanceDetails.networkInterfaces.ipv6Addresses
- resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
- resource.instanceDetails.networkInterfaces.publicDnsName
- resource.instanceDetails.networkInterfaces.publicIp
- resource.instanceDetails.networkInterfaces.securityGroups.groupId
- resource.instanceDetails.networkInterfaces.securityGroups.groupName
- resource.instanceDetails.networkInterfaces.subnetId
- resource.instanceDetails.networkInterfaces.vpcId
- resource.instanceDetails.tags.key
- resource.instanceDetails.tags.value
- resource.resourceType
- service.action.actionType
- service.action.awsApiCallAction.api
- service.action.awsApiCallAction.callerType
- service.action.awsApiCallAction.errorCode
- service.action.awsApiCallAction.remoteIpDetails.city.cityName
- service.action.awsApiCallAction.remoteIpDetails.country.countryName
- service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
- service.action.awsApiCallAction.remoteIpDetails.organization.asn
- service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
- service.action.awsApiCallAction.serviceName
- service.action.dnsRequestAction.domain
- service.action.networkConnectionAction.blocked
- service.action.networkConnectionAction.connectionDirection
- service.action.networkConnectionAction.localPortDetails.port
- service.action.networkConnectionAction.protocol
- service.action.networkConnectionAction.localIpDetails.ipAddressV4
- service.action.networkConnectionAction.remoteIpDetails.city.cityName
- service.action.networkConnectionAction.remoteIpDetails.country.countryName
- service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
- service.action.networkConnectionAction.remoteIpDetails.organization.asn
- service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
- service.action.networkConnectionAction.remotePortDetails.port
- service.additionalInfo.threatListName
service.archived
When this attribute is set to TRUE, only archived findings are listed. When it's set to FALSE, only unarchived findings are listed. When this attribute is not set, all existing findings are listed.
- service.resourceRole
- severity
- type
updatedAt
Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds.
data CreateFilterResponse Source #
See: newCreateFilterResponse
smart constructor.
Instances
newCreateFilterResponse Source #
Create a value of CreateFilterResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateFilterResponse'
, createFilterResponse_httpStatus
- The response's http status code.
$sel:name:CreateFilter'
, createFilterResponse_name
- The name of the successfully created filter.
EnableOrganizationAdminAccount
data EnableOrganizationAdminAccount Source #
See: newEnableOrganizationAdminAccount
smart constructor.
Instances
newEnableOrganizationAdminAccount Source #
Create a value of EnableOrganizationAdminAccount
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:adminAccountId:EnableOrganizationAdminAccount'
, enableOrganizationAdminAccount_adminAccountId
- The AWS Account ID for the organization account to be enabled as a
GuardDuty delegated administrator.
data EnableOrganizationAdminAccountResponse Source #
See: newEnableOrganizationAdminAccountResponse
smart constructor.
Instances
newEnableOrganizationAdminAccountResponse Source #
Create a value of EnableOrganizationAdminAccountResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:EnableOrganizationAdminAccountResponse'
, enableOrganizationAdminAccountResponse_httpStatus
- The response's http status code.
ListFindings (Paginated)
data ListFindings Source #
See: newListFindings
smart constructor.
Instances
Create a value of ListFindings
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:findingCriteria:ListFindings'
, listFindings_findingCriteria
- Represents the criteria used for querying findings. Valid values
include:
- JSON field name
- accountId
- region
- confidence
- id
- resource.accessKeyDetails.accessKeyId
- resource.accessKeyDetails.principalId
- resource.accessKeyDetails.userName
- resource.accessKeyDetails.userType
- resource.instanceDetails.iamInstanceProfile.id
- resource.instanceDetails.imageId
- resource.instanceDetails.instanceId
- resource.instanceDetails.networkInterfaces.ipv6Addresses
- resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
- resource.instanceDetails.networkInterfaces.publicDnsName
- resource.instanceDetails.networkInterfaces.publicIp
- resource.instanceDetails.networkInterfaces.securityGroups.groupId
- resource.instanceDetails.networkInterfaces.securityGroups.groupName
- resource.instanceDetails.networkInterfaces.subnetId
- resource.instanceDetails.networkInterfaces.vpcId
- resource.instanceDetails.tags.key
- resource.instanceDetails.tags.value
- resource.resourceType
- service.action.actionType
- service.action.awsApiCallAction.api
- service.action.awsApiCallAction.callerType
- service.action.awsApiCallAction.remoteIpDetails.city.cityName
- service.action.awsApiCallAction.remoteIpDetails.country.countryName
- service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
- service.action.awsApiCallAction.remoteIpDetails.organization.asn
- service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
- service.action.awsApiCallAction.serviceName
- service.action.dnsRequestAction.domain
- service.action.networkConnectionAction.blocked
- service.action.networkConnectionAction.connectionDirection
- service.action.networkConnectionAction.localPortDetails.port
- service.action.networkConnectionAction.protocol
- service.action.networkConnectionAction.remoteIpDetails.city.cityName
- service.action.networkConnectionAction.remoteIpDetails.country.countryName
- service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
- service.action.networkConnectionAction.remoteIpDetails.organization.asn
- service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
- service.action.networkConnectionAction.remotePortDetails.port
- service.additionalInfo.threatListName
service.archived
When this attribute is set to 'true', only archived findings are listed. When it's set to 'false', only unarchived findings are listed. When this attribute is not set, all existing findings are listed.
- service.resourceRole
- severity
- type
updatedAt
Type: Timestamp in Unix Epoch millisecond format: 1486685375000
$sel:sortCriteria:ListFindings'
, listFindings_sortCriteria
- Represents the criteria used for sorting findings.
$sel:nextToken:ListFindings'
, listFindings_nextToken
- You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:maxResults:ListFindings'
, listFindings_maxResults
- You can use this parameter to indicate the maximum number of items you
want in the response. The default value is 50. The maximum value is 50.
$sel:detectorId:ListFindings'
, listFindings_detectorId
- The ID of the detector that specifies the GuardDuty service whose
findings you want to list.
data ListFindingsResponse Source #
See: newListFindingsResponse
smart constructor.
Instances
newListFindingsResponse Source #
Create a value of ListFindingsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListFindings'
, listFindingsResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListFindingsResponse'
, listFindingsResponse_httpStatus
- The response's http status code.
$sel:findingIds:ListFindingsResponse'
, listFindingsResponse_findingIds
- The IDs of the findings that you're listing.
ListOrganizationAdminAccounts (Paginated)
data ListOrganizationAdminAccounts Source #
See: newListOrganizationAdminAccounts
smart constructor.
Instances
newListOrganizationAdminAccounts :: ListOrganizationAdminAccounts Source #
Create a value of ListOrganizationAdminAccounts
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListOrganizationAdminAccounts'
, listOrganizationAdminAccounts_nextToken
- A token to use for paginating results that are returned in the response.
Set the value of this parameter to null for the first request to a list
action. For subsequent calls, use the NextToken
value returned from
the previous request to continue listing results after the first page.
$sel:maxResults:ListOrganizationAdminAccounts'
, listOrganizationAdminAccounts_maxResults
- The maximum number of results to return in the response.
data ListOrganizationAdminAccountsResponse Source #
See: newListOrganizationAdminAccountsResponse
smart constructor.
Instances
newListOrganizationAdminAccountsResponse Source #
Create a value of ListOrganizationAdminAccountsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:adminAccounts:ListOrganizationAdminAccountsResponse'
, listOrganizationAdminAccountsResponse_adminAccounts
- A list of accounts configured as GuardDuty delegated administrators.
$sel:nextToken:ListOrganizationAdminAccounts'
, listOrganizationAdminAccountsResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListOrganizationAdminAccountsResponse'
, listOrganizationAdminAccountsResponse_httpStatus
- The response's http status code.
CreateIPSet
data CreateIPSet Source #
See: newCreateIPSet
smart constructor.
Instances
:: Text | |
-> Text | |
-> IpSetFormat | |
-> Text | |
-> Bool | |
-> CreateIPSet |
Create a value of CreateIPSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreateIPSet'
, createIPSet_clientToken
- The idempotency token for the create request.
$sel:tags:CreateIPSet'
, createIPSet_tags
- The tags to be added to a new IP set resource.
$sel:detectorId:CreateIPSet'
, createIPSet_detectorId
- The unique ID of the detector of the GuardDuty account that you want to
create an IPSet for.
$sel:name:CreateIPSet'
, createIPSet_name
- The user-friendly name to identify the IPSet.
Allowed characters are alphanumerics, spaces, hyphens (-), and underscores (_).
$sel:format:CreateIPSet'
, createIPSet_format
- The format of the file that contains the IPSet.
$sel:location:CreateIPSet'
, createIPSet_location
- The URI of the file that contains the IPSet. For example:
https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
$sel:activate:CreateIPSet'
, createIPSet_activate
- A Boolean value that indicates whether GuardDuty is to start using the
uploaded IPSet.
data CreateIPSetResponse Source #
See: newCreateIPSetResponse
smart constructor.
Instances
newCreateIPSetResponse Source #
:: Int | |
-> Text | |
-> CreateIPSetResponse |
Create a value of CreateIPSetResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateIPSetResponse'
, createIPSetResponse_httpStatus
- The response's http status code.
$sel:ipSetId:CreateIPSetResponse'
, createIPSetResponse_ipSetId
- The ID of the IPSet resource.
DeleteThreatIntelSet
data DeleteThreatIntelSet Source #
See: newDeleteThreatIntelSet
smart constructor.
Instances
newDeleteThreatIntelSet Source #
:: Text | |
-> Text | |
-> DeleteThreatIntelSet |
Create a value of DeleteThreatIntelSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DeleteThreatIntelSet'
, deleteThreatIntelSet_detectorId
- The unique ID of the detector that the threatIntelSet is associated
with.
$sel:threatIntelSetId:DeleteThreatIntelSet'
, deleteThreatIntelSet_threatIntelSetId
- The unique ID of the threatIntelSet that you want to delete.
data DeleteThreatIntelSetResponse Source #
See: newDeleteThreatIntelSetResponse
smart constructor.
Instances
newDeleteThreatIntelSetResponse Source #
Create a value of DeleteThreatIntelSetResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteThreatIntelSetResponse'
, deleteThreatIntelSetResponse_httpStatus
- The response's http status code.
UpdateThreatIntelSet
data UpdateThreatIntelSet Source #
See: newUpdateThreatIntelSet
smart constructor.
Instances
newUpdateThreatIntelSet Source #
:: Text | |
-> Text | |
-> UpdateThreatIntelSet |
Create a value of UpdateThreatIntelSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:location:UpdateThreatIntelSet'
, updateThreatIntelSet_location
- The updated URI of the file that contains the ThreateIntelSet.
$sel:activate:UpdateThreatIntelSet'
, updateThreatIntelSet_activate
- The updated Boolean value that specifies whether the ThreateIntelSet is
active or not.
$sel:name:UpdateThreatIntelSet'
, updateThreatIntelSet_name
- The unique ID that specifies the ThreatIntelSet that you want to update.
$sel:detectorId:UpdateThreatIntelSet'
, updateThreatIntelSet_detectorId
- The detectorID that specifies the GuardDuty service whose ThreatIntelSet
you want to update.
$sel:threatIntelSetId:UpdateThreatIntelSet'
, updateThreatIntelSet_threatIntelSetId
- The unique ID that specifies the ThreatIntelSet that you want to update.
data UpdateThreatIntelSetResponse Source #
See: newUpdateThreatIntelSetResponse
smart constructor.
Instances
newUpdateThreatIntelSetResponse Source #
Create a value of UpdateThreatIntelSetResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateThreatIntelSetResponse'
, updateThreatIntelSetResponse_httpStatus
- The response's http status code.
StopMonitoringMembers
data StopMonitoringMembers Source #
See: newStopMonitoringMembers
smart constructor.
Instances
newStopMonitoringMembers Source #
:: Text | |
-> NonEmpty Text | |
-> StopMonitoringMembers |
Create a value of StopMonitoringMembers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:StopMonitoringMembers'
, stopMonitoringMembers_detectorId
- The unique ID of the detector associated with the GuardDuty
administrator account that is monitoring member accounts.
$sel:accountIds:StopMonitoringMembers'
, stopMonitoringMembers_accountIds
- A list of account IDs for the member accounts to stop monitoring.
data StopMonitoringMembersResponse Source #
See: newStopMonitoringMembersResponse
smart constructor.
Instances
newStopMonitoringMembersResponse Source #
Create a value of StopMonitoringMembersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:StopMonitoringMembersResponse'
, stopMonitoringMembersResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:StopMonitoringMembersResponse'
, stopMonitoringMembersResponse_unprocessedAccounts
- A list of objects that contain an accountId for each account that could
not be processed, and a result string that indicates why the account was
not processed.
ListThreatIntelSets (Paginated)
data ListThreatIntelSets Source #
See: newListThreatIntelSets
smart constructor.
Instances
newListThreatIntelSets Source #
Create a value of ListThreatIntelSets
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListThreatIntelSets'
, listThreatIntelSets_nextToken
- You can use this parameter to paginate results in the response. Set the
value of this parameter to null on your first call to the list action.
For subsequent calls to the action, fill nextToken in the request with
the value of NextToken from the previous response to continue listing
data.
$sel:maxResults:ListThreatIntelSets'
, listThreatIntelSets_maxResults
- You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
$sel:detectorId:ListThreatIntelSets'
, listThreatIntelSets_detectorId
- The unique ID of the detector that the threatIntelSet is associated
with.
data ListThreatIntelSetsResponse Source #
See: newListThreatIntelSetsResponse
smart constructor.
Instances
newListThreatIntelSetsResponse Source #
Create a value of ListThreatIntelSetsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListThreatIntelSets'
, listThreatIntelSetsResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListThreatIntelSetsResponse'
, listThreatIntelSetsResponse_httpStatus
- The response's http status code.
$sel:threatIntelSetIds:ListThreatIntelSetsResponse'
, listThreatIntelSetsResponse_threatIntelSetIds
- The IDs of the ThreatIntelSet resources.
CreateThreatIntelSet
data CreateThreatIntelSet Source #
See: newCreateThreatIntelSet
smart constructor.
CreateThreatIntelSet' (Maybe Text) (Maybe (HashMap Text Text)) Text Text ThreatIntelSetFormat Text Bool |
Instances
newCreateThreatIntelSet Source #
:: Text | |
-> Text | |
-> ThreatIntelSetFormat | |
-> Text | |
-> Bool | |
-> CreateThreatIntelSet |
Create a value of CreateThreatIntelSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreateThreatIntelSet'
, createThreatIntelSet_clientToken
- The idempotency token for the create request.
$sel:tags:CreateThreatIntelSet'
, createThreatIntelSet_tags
- The tags to be added to a new threat list resource.
$sel:detectorId:CreateThreatIntelSet'
, createThreatIntelSet_detectorId
- The unique ID of the detector of the GuardDuty account that you want to
create a threatIntelSet for.
$sel:name:CreateThreatIntelSet'
, createThreatIntelSet_name
- A user-friendly ThreatIntelSet name displayed in all findings that are
generated by activity that involves IP addresses included in this
ThreatIntelSet.
$sel:format:CreateThreatIntelSet'
, createThreatIntelSet_format
- The format of the file that contains the ThreatIntelSet.
$sel:location:CreateThreatIntelSet'
, createThreatIntelSet_location
- The URI of the file that contains the ThreatIntelSet. For example:
https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
$sel:activate:CreateThreatIntelSet'
, createThreatIntelSet_activate
- A Boolean value that indicates whether GuardDuty is to start using the
uploaded ThreatIntelSet.
data CreateThreatIntelSetResponse Source #
See: newCreateThreatIntelSetResponse
smart constructor.
Instances
newCreateThreatIntelSetResponse Source #
:: Int | |
-> Text | |
-> CreateThreatIntelSetResponse |
Create a value of CreateThreatIntelSetResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateThreatIntelSetResponse'
, createThreatIntelSetResponse_httpStatus
- The response's http status code.
$sel:threatIntelSetId:CreateThreatIntelSetResponse'
, createThreatIntelSetResponse_threatIntelSetId
- The ID of the ThreatIntelSet resource.
DeleteMembers
data DeleteMembers Source #
See: newDeleteMembers
smart constructor.
Instances
Create a value of DeleteMembers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DeleteMembers'
, deleteMembers_detectorId
- The unique ID of the detector of the GuardDuty account whose members you
want to delete.
$sel:accountIds:DeleteMembers'
, deleteMembers_accountIds
- A list of account IDs of the GuardDuty member accounts that you want to
delete.
data DeleteMembersResponse Source #
See: newDeleteMembersResponse
smart constructor.
Instances
newDeleteMembersResponse Source #
Create a value of DeleteMembersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteMembersResponse'
, deleteMembersResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:DeleteMembersResponse'
, deleteMembersResponse_unprocessedAccounts
- The accounts that could not be processed.
ListTagsForResource
data ListTagsForResource Source #
See: newListTagsForResource
smart constructor.
Instances
newListTagsForResource Source #
Create a value of ListTagsForResource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceArn:ListTagsForResource'
, listTagsForResource_resourceArn
- The Amazon Resource Name (ARN) for the given GuardDuty resource.
data ListTagsForResourceResponse Source #
See: newListTagsForResourceResponse
smart constructor.
Instances
newListTagsForResourceResponse Source #
Create a value of ListTagsForResourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:tags:ListTagsForResourceResponse'
, listTagsForResourceResponse_tags
- The tags associated with the resource.
$sel:httpStatus:ListTagsForResourceResponse'
, listTagsForResourceResponse_httpStatus
- The response's http status code.
GetFindingsStatistics
data GetFindingsStatistics Source #
See: newGetFindingsStatistics
smart constructor.
Instances
newGetFindingsStatistics Source #
Create a value of GetFindingsStatistics
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:findingCriteria:GetFindingsStatistics'
, getFindingsStatistics_findingCriteria
- Represents the criteria that is used for querying findings.
$sel:detectorId:GetFindingsStatistics'
, getFindingsStatistics_detectorId
- The ID of the detector that specifies the GuardDuty service whose
findings' statistics you want to retrieve.
$sel:findingStatisticTypes:GetFindingsStatistics'
, getFindingsStatistics_findingStatisticTypes
- The types of finding statistics to retrieve.
data GetFindingsStatisticsResponse Source #
See: newGetFindingsStatisticsResponse
smart constructor.
Instances
newGetFindingsStatisticsResponse Source #
Create a value of GetFindingsStatisticsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetFindingsStatisticsResponse'
, getFindingsStatisticsResponse_httpStatus
- The response's http status code.
$sel:findingStatistics:GetFindingsStatisticsResponse'
, getFindingsStatisticsResponse_findingStatistics
- The finding statistics object.
GetIPSet
See: newGetIPSet
smart constructor.
Instances
Create a value of GetIPSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:GetIPSet'
, getIPSet_detectorId
- The unique ID of the detector that the IPSet is associated with.
$sel:ipSetId:GetIPSet'
, getIPSet_ipSetId
- The unique ID of the IPSet to retrieve.
data GetIPSetResponse Source #
See: newGetIPSetResponse
smart constructor.
Instances
:: Int | |
-> Text | |
-> IpSetFormat | |
-> Text | |
-> IpSetStatus | |
-> GetIPSetResponse |
Create a value of GetIPSetResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:tags:GetIPSetResponse'
, getIPSetResponse_tags
- The tags of the IPSet resource.
$sel:httpStatus:GetIPSetResponse'
, getIPSetResponse_httpStatus
- The response's http status code.
$sel:name:GetIPSetResponse'
, getIPSetResponse_name
- The user-friendly name for the IPSet.
$sel:format:GetIPSetResponse'
, getIPSetResponse_format
- The format of the file that contains the IPSet.
$sel:location:GetIPSetResponse'
, getIPSetResponse_location
- The URI of the file that contains the IPSet. For example:
https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
$sel:status:GetIPSetResponse'
, getIPSetResponse_status
- The status of IPSet file that was uploaded.
ListInvitations (Paginated)
data ListInvitations Source #
See: newListInvitations
smart constructor.
Instances
newListInvitations :: ListInvitations Source #
Create a value of ListInvitations
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListInvitations'
, listInvitations_nextToken
- You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:maxResults:ListInvitations'
, listInvitations_maxResults
- You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
data ListInvitationsResponse Source #
See: newListInvitationsResponse
smart constructor.
Instances
newListInvitationsResponse Source #
Create a value of ListInvitationsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitations:ListInvitationsResponse'
, listInvitationsResponse_invitations
- A list of invitation descriptions.
$sel:nextToken:ListInvitations'
, listInvitationsResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListInvitationsResponse'
, listInvitationsResponse_httpStatus
- The response's http status code.
UpdateMemberDetectors
data UpdateMemberDetectors Source #
See: newUpdateMemberDetectors
smart constructor.
Instances
newUpdateMemberDetectors Source #
:: Text | |
-> NonEmpty Text | |
-> UpdateMemberDetectors |
Create a value of UpdateMemberDetectors
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:dataSources:UpdateMemberDetectors'
, updateMemberDetectors_dataSources
- Describes which data sources will be updated.
$sel:detectorId:UpdateMemberDetectors'
, updateMemberDetectors_detectorId
- The detector ID of the administrator account.
$sel:accountIds:UpdateMemberDetectors'
, updateMemberDetectors_accountIds
- A list of member account IDs to be updated.
data UpdateMemberDetectorsResponse Source #
See: newUpdateMemberDetectorsResponse
smart constructor.
Instances
newUpdateMemberDetectorsResponse Source #
Create a value of UpdateMemberDetectorsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateMemberDetectorsResponse'
, updateMemberDetectorsResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:UpdateMemberDetectorsResponse'
, updateMemberDetectorsResponse_unprocessedAccounts
- A list of member account IDs that were unable to be processed along with
an explanation for why they were not processed.
GetThreatIntelSet
data GetThreatIntelSet Source #
See: newGetThreatIntelSet
smart constructor.
Instances
:: Text | |
-> Text | |
-> GetThreatIntelSet |
Create a value of GetThreatIntelSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:GetThreatIntelSet'
, getThreatIntelSet_detectorId
- The unique ID of the detector that the threatIntelSet is associated
with.
$sel:threatIntelSetId:GetThreatIntelSet'
, getThreatIntelSet_threatIntelSetId
- The unique ID of the threatIntelSet that you want to get.
data GetThreatIntelSetResponse Source #
See: newGetThreatIntelSetResponse
smart constructor.
GetThreatIntelSetResponse' (Maybe (HashMap Text Text)) Int Text ThreatIntelSetFormat Text ThreatIntelSetStatus |
Instances
newGetThreatIntelSetResponse Source #
Create a value of GetThreatIntelSetResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:tags:GetThreatIntelSetResponse'
, getThreatIntelSetResponse_tags
- The tags of the threat list resource.
$sel:httpStatus:GetThreatIntelSetResponse'
, getThreatIntelSetResponse_httpStatus
- The response's http status code.
$sel:name:GetThreatIntelSetResponse'
, getThreatIntelSetResponse_name
- A user-friendly ThreatIntelSet name displayed in all findings that are
generated by activity that involves IP addresses included in this
ThreatIntelSet.
$sel:format:GetThreatIntelSetResponse'
, getThreatIntelSetResponse_format
- The format of the threatIntelSet.
$sel:location:GetThreatIntelSetResponse'
, getThreatIntelSetResponse_location
- The URI of the file that contains the ThreatIntelSet. For example:
https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
$sel:status:GetThreatIntelSetResponse'
, getThreatIntelSetResponse_status
- The status of threatIntelSet file uploaded.
DeleteInvitations
data DeleteInvitations Source #
See: newDeleteInvitations
smart constructor.
Instances
Create a value of DeleteInvitations
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountIds:DeleteInvitations'
, deleteInvitations_accountIds
- A list of account IDs of the AWS accounts that sent invitations to the
current member account that you want to delete invitations from.
data DeleteInvitationsResponse Source #
See: newDeleteInvitationsResponse
smart constructor.
Instances
newDeleteInvitationsResponse Source #
Create a value of DeleteInvitationsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteInvitationsResponse'
, deleteInvitationsResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:DeleteInvitationsResponse'
, deleteInvitationsResponse_unprocessedAccounts
- A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
GetMasterAccount
data GetMasterAccount Source #
See: newGetMasterAccount
smart constructor.
Instances
Create a value of GetMasterAccount
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:GetMasterAccount'
, getMasterAccount_detectorId
- The unique ID of the detector of the GuardDuty member account.
data GetMasterAccountResponse Source #
See: newGetMasterAccountResponse
smart constructor.
Instances
newGetMasterAccountResponse Source #
:: Int | |
-> Master | |
-> GetMasterAccountResponse |
Create a value of GetMasterAccountResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetMasterAccountResponse'
, getMasterAccountResponse_httpStatus
- The response's http status code.
$sel:master:GetMasterAccountResponse'
, getMasterAccountResponse_master
- The administrator account details.
GetUsageStatistics
data GetUsageStatistics Source #
See: newGetUsageStatistics
smart constructor.
Instances
newGetUsageStatistics Source #
Create a value of GetUsageStatistics
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:GetUsageStatistics'
, getUsageStatistics_nextToken
- A token to use for paginating results that are returned in the response.
Set the value of this parameter to null for the first request to a list
action. For subsequent calls, use the NextToken value returned from the
previous request to continue listing results after the first page.
$sel:unit:GetUsageStatistics'
, getUsageStatistics_unit
- The currency unit you would like to view your usage statistics in.
Current valid values are USD.
$sel:maxResults:GetUsageStatistics'
, getUsageStatistics_maxResults
- The maximum number of results to return in the response.
$sel:detectorId:GetUsageStatistics'
, getUsageStatistics_detectorId
- The ID of the detector that specifies the GuardDuty service whose usage
statistics you want to retrieve.
$sel:usageStatisticType:GetUsageStatistics'
, getUsageStatistics_usageStatisticType
- The type of usage statistics to retrieve.
$sel:usageCriteria:GetUsageStatistics'
, getUsageStatistics_usageCriteria
- Represents the criteria used for querying usage.
data GetUsageStatisticsResponse Source #
See: newGetUsageStatisticsResponse
smart constructor.
Instances
newGetUsageStatisticsResponse Source #
Create a value of GetUsageStatisticsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:usageStatistics:GetUsageStatisticsResponse'
, getUsageStatisticsResponse_usageStatistics
- The usage statistics object. If a UsageStatisticType was provided, the
objects representing other types will be null.
$sel:nextToken:GetUsageStatistics'
, getUsageStatisticsResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:GetUsageStatisticsResponse'
, getUsageStatisticsResponse_httpStatus
- The response's http status code.
CreateDetector
data CreateDetector Source #
See: newCreateDetector
smart constructor.
CreateDetector' (Maybe Text) (Maybe FindingPublishingFrequency) (Maybe DataSourceConfigurations) (Maybe (HashMap Text Text)) Bool |
Instances
Create a value of CreateDetector
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreateDetector'
, createDetector_clientToken
- The idempotency token for the create request.
$sel:findingPublishingFrequency:CreateDetector'
, createDetector_findingPublishingFrequency
- A value that specifies how frequently updated findings are exported.
$sel:dataSources:CreateDetector'
, createDetector_dataSources
- Describes which data sources will be enabled for the detector.
$sel:tags:CreateDetector'
, createDetector_tags
- The tags to be added to a new detector resource.
$sel:enable:CreateDetector'
, createDetector_enable
- A Boolean value that specifies whether the detector is to be enabled.
data CreateDetectorResponse Source #
See: newCreateDetectorResponse
smart constructor.
Instances
newCreateDetectorResponse Source #
Create a value of CreateDetectorResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:CreateDetectorResponse'
, createDetectorResponse_detectorId
- The unique ID of the created detector.
$sel:httpStatus:CreateDetectorResponse'
, createDetectorResponse_httpStatus
- The response's http status code.
DeclineInvitations
data DeclineInvitations Source #
See: newDeclineInvitations
smart constructor.
Instances
newDeclineInvitations Source #
Create a value of DeclineInvitations
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountIds:DeclineInvitations'
, declineInvitations_accountIds
- A list of account IDs of the AWS accounts that sent invitations to the
current member account that you want to decline invitations from.
data DeclineInvitationsResponse Source #
See: newDeclineInvitationsResponse
smart constructor.
Instances
newDeclineInvitationsResponse Source #
Create a value of DeclineInvitationsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeclineInvitationsResponse'
, declineInvitationsResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:DeclineInvitationsResponse'
, declineInvitationsResponse_unprocessedAccounts
- A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
DescribeOrganizationConfiguration
data DescribeOrganizationConfiguration Source #
See: newDescribeOrganizationConfiguration
smart constructor.
Instances
newDescribeOrganizationConfiguration Source #
Create a value of DescribeOrganizationConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DescribeOrganizationConfiguration'
, describeOrganizationConfiguration_detectorId
- The ID of the detector to retrieve information about the delegated
administrator from.
data DescribeOrganizationConfigurationResponse Source #
See: newDescribeOrganizationConfigurationResponse
smart constructor.
DescribeOrganizationConfigurationResponse' (Maybe OrganizationDataSourceConfigurationsResult) Int Bool Bool |
Instances
newDescribeOrganizationConfigurationResponse Source #
:: Int | |
-> Bool | |
-> Bool |
|
-> DescribeOrganizationConfigurationResponse |
Create a value of DescribeOrganizationConfigurationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:dataSources:DescribeOrganizationConfigurationResponse'
, describeOrganizationConfigurationResponse_dataSources
- Describes which data sources are enabled automatically for member
accounts.
$sel:httpStatus:DescribeOrganizationConfigurationResponse'
, describeOrganizationConfigurationResponse_httpStatus
- The response's http status code.
$sel:autoEnable:DescribeOrganizationConfigurationResponse'
, describeOrganizationConfigurationResponse_autoEnable
- Indicates whether GuardDuty is automatically enabled for accounts added
to the organization.
$sel:memberAccountLimitReached:DescribeOrganizationConfigurationResponse'
, describeOrganizationConfigurationResponse_memberAccountLimitReached
- Indicates whether the maximum number of allowed member accounts are
already associated with the delegated administrator account for your
organization.
CreatePublishingDestination
data CreatePublishingDestination Source #
See: newCreatePublishingDestination
smart constructor.
Instances
newCreatePublishingDestination Source #
Create a value of CreatePublishingDestination
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:clientToken:CreatePublishingDestination'
, createPublishingDestination_clientToken
- The idempotency token for the request.
$sel:detectorId:CreatePublishingDestination'
, createPublishingDestination_detectorId
- The ID of the GuardDuty detector associated with the publishing
destination.
$sel:destinationType:CreatePublishingDestination'
, createPublishingDestination_destinationType
- The type of resource for the publishing destination. Currently only
Amazon S3 buckets are supported.
$sel:destinationProperties:CreatePublishingDestination'
, createPublishingDestination_destinationProperties
- The properties of the publishing destination, including the ARNs for the
destination and the KMS key used for encryption.
data CreatePublishingDestinationResponse Source #
See: newCreatePublishingDestinationResponse
smart constructor.
Instances
Eq CreatePublishingDestinationResponse Source # | |
Read CreatePublishingDestinationResponse Source # | |
Show CreatePublishingDestinationResponse Source # | |
Generic CreatePublishingDestinationResponse Source # | |
NFData CreatePublishingDestinationResponse Source # | |
Defined in Amazonka.GuardDuty.CreatePublishingDestination rnf :: CreatePublishingDestinationResponse -> () # | |
type Rep CreatePublishingDestinationResponse Source # | |
Defined in Amazonka.GuardDuty.CreatePublishingDestination type Rep CreatePublishingDestinationResponse = D1 ('MetaData "CreatePublishingDestinationResponse" "Amazonka.GuardDuty.CreatePublishingDestination" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "CreatePublishingDestinationResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int) :*: S1 ('MetaSel ('Just "destinationId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))) |
newCreatePublishingDestinationResponse Source #
Create a value of CreatePublishingDestinationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreatePublishingDestinationResponse'
, createPublishingDestinationResponse_httpStatus
- The response's http status code.
$sel:destinationId:CreatePublishingDestinationResponse'
, createPublishingDestinationResponse_destinationId
- The ID of the publishing destination that is created.
UpdateFilter
data UpdateFilter Source #
See: newUpdateFilter
smart constructor.
Instances
Create a value of UpdateFilter
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:findingCriteria:UpdateFilter'
, updateFilter_findingCriteria
- Represents the criteria to be used in the filter for querying findings.
$sel:action:UpdateFilter'
, updateFilter_action
- Specifies the action that is to be applied to the findings that match
the filter.
$sel:description:UpdateFilter'
, updateFilter_description
- The description of the filter.
$sel:rank:UpdateFilter'
, updateFilter_rank
- Specifies the position of the filter in the list of current filters.
Also specifies the order in which this filter is applied to the
findings.
$sel:detectorId:UpdateFilter'
, updateFilter_detectorId
- The unique ID of the detector that specifies the GuardDuty service where
you want to update a filter.
$sel:filterName:UpdateFilter'
, updateFilter_filterName
- The name of the filter.
data UpdateFilterResponse Source #
See: newUpdateFilterResponse
smart constructor.
Instances
newUpdateFilterResponse Source #
:: Int | |
-> Text | |
-> UpdateFilterResponse |
Create a value of UpdateFilterResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateFilterResponse'
, updateFilterResponse_httpStatus
- The response's http status code.
$sel:name:UpdateFilterResponse'
, updateFilterResponse_name
- The name of the filter.
DeleteFilter
data DeleteFilter Source #
See: newDeleteFilter
smart constructor.
Instances
Create a value of DeleteFilter
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DeleteFilter'
, deleteFilter_detectorId
- The unique ID of the detector that the filter is associated with.
$sel:filterName:DeleteFilter'
, deleteFilter_filterName
- The name of the filter that you want to delete.
data DeleteFilterResponse Source #
See: newDeleteFilterResponse
smart constructor.
Instances
newDeleteFilterResponse Source #
Create a value of DeleteFilterResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteFilterResponse'
, deleteFilterResponse_httpStatus
- The response's http status code.
DisassociateMembers
data DisassociateMembers Source #
See: newDisassociateMembers
smart constructor.
Instances
newDisassociateMembers Source #
:: Text | |
-> NonEmpty Text | |
-> DisassociateMembers |
Create a value of DisassociateMembers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DisassociateMembers'
, disassociateMembers_detectorId
- The unique ID of the detector of the GuardDuty account whose members you
want to disassociate from the administrator account.
$sel:accountIds:DisassociateMembers'
, disassociateMembers_accountIds
- A list of account IDs of the GuardDuty member accounts that you want to
disassociate from the administrator account.
data DisassociateMembersResponse Source #
See: newDisassociateMembersResponse
smart constructor.
Instances
newDisassociateMembersResponse Source #
Create a value of DisassociateMembersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DisassociateMembersResponse'
, disassociateMembersResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:DisassociateMembersResponse'
, disassociateMembersResponse_unprocessedAccounts
- A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
DisassociateFromMasterAccount
data DisassociateFromMasterAccount Source #
See: newDisassociateFromMasterAccount
smart constructor.
Instances
newDisassociateFromMasterAccount Source #
Create a value of DisassociateFromMasterAccount
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DisassociateFromMasterAccount'
, disassociateFromMasterAccount_detectorId
- The unique ID of the detector of the GuardDuty member account.
data DisassociateFromMasterAccountResponse Source #
See: newDisassociateFromMasterAccountResponse
smart constructor.
Instances
newDisassociateFromMasterAccountResponse Source #
Create a value of DisassociateFromMasterAccountResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DisassociateFromMasterAccountResponse'
, disassociateFromMasterAccountResponse_httpStatus
- The response's http status code.
AcceptInvitation
data AcceptInvitation Source #
See: newAcceptInvitation
smart constructor.
Instances
:: Text | |
-> Text | |
-> Text | |
-> AcceptInvitation |
Create a value of AcceptInvitation
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:AcceptInvitation'
, acceptInvitation_detectorId
- The unique ID of the detector of the GuardDuty member account.
$sel:masterId:AcceptInvitation'
, acceptInvitation_masterId
- The account ID of the GuardDuty administrator account whose invitation
you're accepting.
$sel:invitationId:AcceptInvitation'
, acceptInvitation_invitationId
- The value that is used to validate the administrator account to the
member account.
data AcceptInvitationResponse Source #
See: newAcceptInvitationResponse
smart constructor.
Instances
newAcceptInvitationResponse Source #
Create a value of AcceptInvitationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:AcceptInvitationResponse'
, acceptInvitationResponse_httpStatus
- The response's http status code.
ListFilters (Paginated)
data ListFilters Source #
See: newListFilters
smart constructor.
Instances
Create a value of ListFilters
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListFilters'
, listFilters_nextToken
- You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:maxResults:ListFilters'
, listFilters_maxResults
- You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
$sel:detectorId:ListFilters'
, listFilters_detectorId
- The unique ID of the detector that the filter is associated with.
data ListFiltersResponse Source #
See: newListFiltersResponse
smart constructor.
Instances
newListFiltersResponse Source #
Create a value of ListFiltersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListFilters'
, listFiltersResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListFiltersResponse'
, listFiltersResponse_httpStatus
- The response's http status code.
$sel:filterNames:ListFiltersResponse'
, listFiltersResponse_filterNames
- A list of filter names.
ListMembers (Paginated)
data ListMembers Source #
See: newListMembers
smart constructor.
Instances
Create a value of ListMembers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:onlyAssociated:ListMembers'
, listMembers_onlyAssociated
- Specifies whether to only return associated members or to return all
members (including members who haven't been invited yet or have been
disassociated).
$sel:nextToken:ListMembers'
, listMembers_nextToken
- You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:maxResults:ListMembers'
, listMembers_maxResults
- You can use this parameter to indicate the maximum number of items you
want in the response. The default value is 50. The maximum value is 50.
$sel:detectorId:ListMembers'
, listMembers_detectorId
- The unique ID of the detector the member is associated with.
data ListMembersResponse Source #
See: newListMembersResponse
smart constructor.
Instances
newListMembersResponse Source #
Create a value of ListMembersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:members:ListMembersResponse'
, listMembersResponse_members
- A list of members.
$sel:nextToken:ListMembers'
, listMembersResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListMembersResponse'
, listMembersResponse_httpStatus
- The response's http status code.
ListPublishingDestinations
data ListPublishingDestinations Source #
See: newListPublishingDestinations
smart constructor.
Instances
newListPublishingDestinations Source #
Create a value of ListPublishingDestinations
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListPublishingDestinations'
, listPublishingDestinations_nextToken
- A token to use for paginating results that are returned in the response.
Set the value of this parameter to null for the first request to a list
action. For subsequent calls, use the NextToken
value returned from
the previous request to continue listing results after the first page.
$sel:maxResults:ListPublishingDestinations'
, listPublishingDestinations_maxResults
- The maximum number of results to return in the response.
$sel:detectorId:ListPublishingDestinations'
, listPublishingDestinations_detectorId
- The ID of the detector to retrieve publishing destinations for.
data ListPublishingDestinationsResponse Source #
See: newListPublishingDestinationsResponse
smart constructor.
Instances
newListPublishingDestinationsResponse Source #
Create a value of ListPublishingDestinationsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListPublishingDestinations'
, listPublishingDestinationsResponse_nextToken
- A token to use for paginating results that are returned in the response.
Set the value of this parameter to null for the first request to a list
action. For subsequent calls, use the NextToken
value returned from
the previous request to continue listing results after the first page.
$sel:httpStatus:ListPublishingDestinationsResponse'
, listPublishingDestinationsResponse_httpStatus
- The response's http status code.
$sel:destinations:ListPublishingDestinationsResponse'
, listPublishingDestinationsResponse_destinations
- A Destinations
object that includes information about each publishing
destination returned.
DeletePublishingDestination
data DeletePublishingDestination Source #
See: newDeletePublishingDestination
smart constructor.
Instances
newDeletePublishingDestination Source #
:: Text | |
-> Text | |
-> DeletePublishingDestination |
Create a value of DeletePublishingDestination
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DeletePublishingDestination'
, deletePublishingDestination_detectorId
- The unique ID of the detector associated with the publishing destination
to delete.
$sel:destinationId:DeletePublishingDestination'
, deletePublishingDestination_destinationId
- The ID of the publishing destination to delete.
data DeletePublishingDestinationResponse Source #
See: newDeletePublishingDestinationResponse
smart constructor.
Instances
Eq DeletePublishingDestinationResponse Source # | |
Read DeletePublishingDestinationResponse Source # | |
Show DeletePublishingDestinationResponse Source # | |
Generic DeletePublishingDestinationResponse Source # | |
NFData DeletePublishingDestinationResponse Source # | |
Defined in Amazonka.GuardDuty.DeletePublishingDestination rnf :: DeletePublishingDestinationResponse -> () # | |
type Rep DeletePublishingDestinationResponse Source # | |
Defined in Amazonka.GuardDuty.DeletePublishingDestination type Rep DeletePublishingDestinationResponse = D1 ('MetaData "DeletePublishingDestinationResponse" "Amazonka.GuardDuty.DeletePublishingDestination" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "DeletePublishingDestinationResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newDeletePublishingDestinationResponse Source #
Create a value of DeletePublishingDestinationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeletePublishingDestinationResponse'
, deletePublishingDestinationResponse_httpStatus
- The response's http status code.
UpdatePublishingDestination
data UpdatePublishingDestination Source #
See: newUpdatePublishingDestination
smart constructor.
Instances
newUpdatePublishingDestination Source #
:: Text | |
-> Text | |
-> UpdatePublishingDestination |
Create a value of UpdatePublishingDestination
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:destinationProperties:UpdatePublishingDestination'
, updatePublishingDestination_destinationProperties
- A DestinationProperties
object that includes the DestinationArn
and
KmsKeyArn
of the publishing destination.
$sel:detectorId:UpdatePublishingDestination'
, updatePublishingDestination_detectorId
- The ID of the detector associated with the publishing destinations to
update.
$sel:destinationId:UpdatePublishingDestination'
, updatePublishingDestination_destinationId
- The ID of the publishing destination to update.
data UpdatePublishingDestinationResponse Source #
See: newUpdatePublishingDestinationResponse
smart constructor.
Instances
Eq UpdatePublishingDestinationResponse Source # | |
Read UpdatePublishingDestinationResponse Source # | |
Show UpdatePublishingDestinationResponse Source # | |
Generic UpdatePublishingDestinationResponse Source # | |
NFData UpdatePublishingDestinationResponse Source # | |
Defined in Amazonka.GuardDuty.UpdatePublishingDestination rnf :: UpdatePublishingDestinationResponse -> () # | |
type Rep UpdatePublishingDestinationResponse Source # | |
Defined in Amazonka.GuardDuty.UpdatePublishingDestination type Rep UpdatePublishingDestinationResponse = D1 ('MetaData "UpdatePublishingDestinationResponse" "Amazonka.GuardDuty.UpdatePublishingDestination" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "UpdatePublishingDestinationResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newUpdatePublishingDestinationResponse Source #
Create a value of UpdatePublishingDestinationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdatePublishingDestinationResponse'
, updatePublishingDestinationResponse_httpStatus
- The response's http status code.
GetDetector
data GetDetector Source #
See: newGetDetector
smart constructor.
Instances
Create a value of GetDetector
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:GetDetector'
, getDetector_detectorId
- The unique ID of the detector that you want to get.
data GetDetectorResponse Source #
See: newGetDetectorResponse
smart constructor.
GetDetectorResponse' (Maybe Text) (Maybe FindingPublishingFrequency) (Maybe DataSourceConfigurationsResult) (Maybe Text) (Maybe (HashMap Text Text)) Int Text DetectorStatus |
Instances
newGetDetectorResponse Source #
:: Int | |
-> Text | |
-> DetectorStatus | |
-> GetDetectorResponse |
Create a value of GetDetectorResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:createdAt:GetDetectorResponse'
, getDetectorResponse_createdAt
- The timestamp of when the detector was created.
$sel:findingPublishingFrequency:GetDetectorResponse'
, getDetectorResponse_findingPublishingFrequency
- The publishing frequency of the finding.
$sel:dataSources:GetDetectorResponse'
, getDetectorResponse_dataSources
- Describes which data sources are enabled for the detector.
$sel:updatedAt:GetDetectorResponse'
, getDetectorResponse_updatedAt
- The last-updated timestamp for the detector.
$sel:tags:GetDetectorResponse'
, getDetectorResponse_tags
- The tags of the detector resource.
$sel:httpStatus:GetDetectorResponse'
, getDetectorResponse_httpStatus
- The response's http status code.
$sel:serviceRole:GetDetectorResponse'
, getDetectorResponse_serviceRole
- The GuardDuty service role.
$sel:status:GetDetectorResponse'
, getDetectorResponse_status
- The detector status.
CreateSampleFindings
data CreateSampleFindings Source #
See: newCreateSampleFindings
smart constructor.
Instances
newCreateSampleFindings Source #
Create a value of CreateSampleFindings
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:findingTypes:CreateSampleFindings'
, createSampleFindings_findingTypes
- The types of sample findings to generate.
$sel:detectorId:CreateSampleFindings'
, createSampleFindings_detectorId
- The ID of the detector to create sample findings for.
data CreateSampleFindingsResponse Source #
See: newCreateSampleFindingsResponse
smart constructor.
Instances
newCreateSampleFindingsResponse Source #
Create a value of CreateSampleFindingsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateSampleFindingsResponse'
, createSampleFindingsResponse_httpStatus
- The response's http status code.
ArchiveFindings
data ArchiveFindings Source #
See: newArchiveFindings
smart constructor.
Instances
Create a value of ArchiveFindings
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:ArchiveFindings'
, archiveFindings_detectorId
- The ID of the detector that specifies the GuardDuty service whose
findings you want to archive.
$sel:findingIds:ArchiveFindings'
, archiveFindings_findingIds
- The IDs of the findings that you want to archive.
data ArchiveFindingsResponse Source #
See: newArchiveFindingsResponse
smart constructor.
Instances
newArchiveFindingsResponse Source #
Create a value of ArchiveFindingsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:ArchiveFindingsResponse'
, archiveFindingsResponse_httpStatus
- The response's http status code.
CreateMembers
data CreateMembers Source #
See: newCreateMembers
smart constructor.
Instances
:: Text | |
-> NonEmpty AccountDetail | |
-> CreateMembers |
Create a value of CreateMembers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:CreateMembers'
, createMembers_detectorId
- The unique ID of the detector of the GuardDuty account that you want to
associate member accounts with.
$sel:accountDetails:CreateMembers'
, createMembers_accountDetails
- A list of account ID and email address pairs of the accounts that you
want to associate with the GuardDuty administrator account.
data CreateMembersResponse Source #
See: newCreateMembersResponse
smart constructor.
Instances
newCreateMembersResponse Source #
Create a value of CreateMembersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateMembersResponse'
, createMembersResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:CreateMembersResponse'
, createMembersResponse_unprocessedAccounts
- A list of objects that include the accountIds
of the unprocessed
accounts and a result string that explains why each was unprocessed.
UnarchiveFindings
data UnarchiveFindings Source #
See: newUnarchiveFindings
smart constructor.
Instances
Create a value of UnarchiveFindings
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:UnarchiveFindings'
, unarchiveFindings_detectorId
- The ID of the detector associated with the findings to unarchive.
$sel:findingIds:UnarchiveFindings'
, unarchiveFindings_findingIds
- The IDs of the findings to unarchive.
data UnarchiveFindingsResponse Source #
See: newUnarchiveFindingsResponse
smart constructor.
Instances
newUnarchiveFindingsResponse Source #
Create a value of UnarchiveFindingsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UnarchiveFindingsResponse'
, unarchiveFindingsResponse_httpStatus
- The response's http status code.
GetMemberDetectors
data GetMemberDetectors Source #
See: newGetMemberDetectors
smart constructor.
Instances
newGetMemberDetectors Source #
:: Text | |
-> NonEmpty Text | |
-> GetMemberDetectors |
Create a value of GetMemberDetectors
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:GetMemberDetectors'
, getMemberDetectors_detectorId
- The detector ID for the administrator account.
$sel:accountIds:GetMemberDetectors'
, getMemberDetectors_accountIds
- The account ID of the member account.
data GetMemberDetectorsResponse Source #
See: newGetMemberDetectorsResponse
smart constructor.
Instances
newGetMemberDetectorsResponse Source #
:: Int | |
-> NonEmpty MemberDataSourceConfiguration |
|
-> GetMemberDetectorsResponse |
Create a value of GetMemberDetectorsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetMemberDetectorsResponse'
, getMemberDetectorsResponse_httpStatus
- The response's http status code.
$sel:memberDataSourceConfigurations:GetMemberDetectorsResponse'
, getMemberDetectorsResponse_memberDataSourceConfigurations
- An object that describes which data sources are enabled for a member
account.
$sel:unprocessedAccounts:GetMemberDetectorsResponse'
, getMemberDetectorsResponse_unprocessedAccounts
- A list of member account IDs that were unable to be processed along with
an explanation for why they were not processed.
GetInvitationsCount
data GetInvitationsCount Source #
See: newGetInvitationsCount
smart constructor.
Instances
newGetInvitationsCount :: GetInvitationsCount Source #
Create a value of GetInvitationsCount
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
data GetInvitationsCountResponse Source #
See: newGetInvitationsCountResponse
smart constructor.
Instances
newGetInvitationsCountResponse Source #
Create a value of GetInvitationsCountResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitationsCount:GetInvitationsCountResponse'
, getInvitationsCountResponse_invitationsCount
- The number of received invitations.
$sel:httpStatus:GetInvitationsCountResponse'
, getInvitationsCountResponse_httpStatus
- The response's http status code.
StartMonitoringMembers
data StartMonitoringMembers Source #
See: newStartMonitoringMembers
smart constructor.
Instances
newStartMonitoringMembers Source #
:: Text | |
-> NonEmpty Text | |
-> StartMonitoringMembers |
Create a value of StartMonitoringMembers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:StartMonitoringMembers'
, startMonitoringMembers_detectorId
- The unique ID of the detector of the GuardDuty administrator account
associated with the member accounts to monitor.
$sel:accountIds:StartMonitoringMembers'
, startMonitoringMembers_accountIds
- A list of account IDs of the GuardDuty member accounts to start
monitoring.
data StartMonitoringMembersResponse Source #
See: newStartMonitoringMembersResponse
smart constructor.
Instances
Eq StartMonitoringMembersResponse Source # | |
Read StartMonitoringMembersResponse Source # | |
Show StartMonitoringMembersResponse Source # | |
Defined in Amazonka.GuardDuty.StartMonitoringMembers | |
Generic StartMonitoringMembersResponse Source # | |
NFData StartMonitoringMembersResponse Source # | |
Defined in Amazonka.GuardDuty.StartMonitoringMembers rnf :: StartMonitoringMembersResponse -> () # | |
type Rep StartMonitoringMembersResponse Source # | |
Defined in Amazonka.GuardDuty.StartMonitoringMembers type Rep StartMonitoringMembersResponse = D1 ('MetaData "StartMonitoringMembersResponse" "Amazonka.GuardDuty.StartMonitoringMembers" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "StartMonitoringMembersResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int) :*: S1 ('MetaSel ('Just "unprocessedAccounts") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 [UnprocessedAccount]))) |
newStartMonitoringMembersResponse Source #
Create a value of StartMonitoringMembersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:StartMonitoringMembersResponse'
, startMonitoringMembersResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:StartMonitoringMembersResponse'
, startMonitoringMembersResponse_unprocessedAccounts
- A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
UpdateOrganizationConfiguration
data UpdateOrganizationConfiguration Source #
See: newUpdateOrganizationConfiguration
smart constructor.
Instances
newUpdateOrganizationConfiguration Source #
Create a value of UpdateOrganizationConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:dataSources:UpdateOrganizationConfiguration'
, updateOrganizationConfiguration_dataSources
- Describes which data sources will be updated.
$sel:detectorId:UpdateOrganizationConfiguration'
, updateOrganizationConfiguration_detectorId
- The ID of the detector to update the delegated administrator for.
$sel:autoEnable:UpdateOrganizationConfiguration'
, updateOrganizationConfiguration_autoEnable
- Indicates whether to automatically enable member accounts in the
organization.
data UpdateOrganizationConfigurationResponse Source #
See: newUpdateOrganizationConfigurationResponse
smart constructor.
Instances
Eq UpdateOrganizationConfigurationResponse Source # | |
Read UpdateOrganizationConfigurationResponse Source # | |
Show UpdateOrganizationConfigurationResponse Source # | |
Generic UpdateOrganizationConfigurationResponse Source # | |
Defined in Amazonka.GuardDuty.UpdateOrganizationConfiguration type Rep UpdateOrganizationConfigurationResponse :: Type -> Type # | |
NFData UpdateOrganizationConfigurationResponse Source # | |
type Rep UpdateOrganizationConfigurationResponse Source # | |
Defined in Amazonka.GuardDuty.UpdateOrganizationConfiguration type Rep UpdateOrganizationConfigurationResponse = D1 ('MetaData "UpdateOrganizationConfigurationResponse" "Amazonka.GuardDuty.UpdateOrganizationConfiguration" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "UpdateOrganizationConfigurationResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newUpdateOrganizationConfigurationResponse Source #
Create a value of UpdateOrganizationConfigurationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateOrganizationConfigurationResponse'
, updateOrganizationConfigurationResponse_httpStatus
- The response's http status code.
InviteMembers
data InviteMembers Source #
See: newInviteMembers
smart constructor.
Instances
Create a value of InviteMembers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:disableEmailNotification:InviteMembers'
, inviteMembers_disableEmailNotification
- A Boolean value that specifies whether you want to disable email
notification to the accounts that you are inviting to GuardDuty as
members.
$sel:message:InviteMembers'
, inviteMembers_message
- The invitation message that you want to send to the accounts that
you're inviting to GuardDuty as members.
$sel:detectorId:InviteMembers'
, inviteMembers_detectorId
- The unique ID of the detector of the GuardDuty account that you want to
invite members with.
$sel:accountIds:InviteMembers'
, inviteMembers_accountIds
- A list of account IDs of the accounts that you want to invite to
GuardDuty as members.
data InviteMembersResponse Source #
See: newInviteMembersResponse
smart constructor.
Instances
newInviteMembersResponse Source #
Create a value of InviteMembersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:InviteMembersResponse'
, inviteMembersResponse_httpStatus
- The response's http status code.
$sel:unprocessedAccounts:InviteMembersResponse'
, inviteMembersResponse_unprocessedAccounts
- A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
DeleteIPSet
data DeleteIPSet Source #
See: newDeleteIPSet
smart constructor.
Instances
Create a value of DeleteIPSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DeleteIPSet'
, deleteIPSet_detectorId
- The unique ID of the detector associated with the IPSet.
$sel:ipSetId:DeleteIPSet'
, deleteIPSet_ipSetId
- The unique ID of the IPSet to delete.
data DeleteIPSetResponse Source #
See: newDeleteIPSetResponse
smart constructor.
Instances
newDeleteIPSetResponse Source #
Create a value of DeleteIPSetResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteIPSetResponse'
, deleteIPSetResponse_httpStatus
- The response's http status code.
UpdateIPSet
data UpdateIPSet Source #
See: newUpdateIPSet
smart constructor.
Instances
Create a value of UpdateIPSet
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:location:UpdateIPSet'
, updateIPSet_location
- The updated URI of the file that contains the IPSet. For example:
https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
$sel:activate:UpdateIPSet'
, updateIPSet_activate
- The updated Boolean value that specifies whether the IPSet is active or
not.
$sel:name:UpdateIPSet'
, updateIPSet_name
- The unique ID that specifies the IPSet that you want to update.
$sel:detectorId:UpdateIPSet'
, updateIPSet_detectorId
- The detectorID that specifies the GuardDuty service whose IPSet you want
to update.
$sel:ipSetId:UpdateIPSet'
, updateIPSet_ipSetId
- The unique ID that specifies the IPSet that you want to update.
data UpdateIPSetResponse Source #
See: newUpdateIPSetResponse
smart constructor.
Instances
newUpdateIPSetResponse Source #
Create a value of UpdateIPSetResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateIPSetResponse'
, updateIPSetResponse_httpStatus
- The response's http status code.
ListIPSets (Paginated)
data ListIPSets Source #
See: newListIPSets
smart constructor.
Instances
Create a value of ListIPSets
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListIPSets'
, listIPSets_nextToken
- You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:maxResults:ListIPSets'
, listIPSets_maxResults
- You can use this parameter to indicate the maximum number of items you
want in the response. The default value is 50. The maximum value is 50.
$sel:detectorId:ListIPSets'
, listIPSets_detectorId
- The unique ID of the detector that the IPSet is associated with.
data ListIPSetsResponse Source #
See: newListIPSetsResponse
smart constructor.
Instances
newListIPSetsResponse Source #
Create a value of ListIPSetsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListIPSets'
, listIPSetsResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListIPSetsResponse'
, listIPSetsResponse_httpStatus
- The response's http status code.
$sel:ipSetIds:ListIPSetsResponse'
, listIPSetsResponse_ipSetIds
- The IDs of the IPSet resources.
GetMembers
data GetMembers Source #
See: newGetMembers
smart constructor.
Instances
Create a value of GetMembers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:GetMembers'
, getMembers_detectorId
- The unique ID of the detector of the GuardDuty account whose members you
want to retrieve.
$sel:accountIds:GetMembers'
, getMembers_accountIds
- A list of account IDs of the GuardDuty member accounts that you want to
describe.
data GetMembersResponse Source #
See: newGetMembersResponse
smart constructor.
Instances
newGetMembersResponse Source #
Create a value of GetMembersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetMembersResponse'
, getMembersResponse_httpStatus
- The response's http status code.
$sel:members:GetMembersResponse'
, getMembersResponse_members
- A list of members.
$sel:unprocessedAccounts:GetMembersResponse'
, getMembersResponse_unprocessedAccounts
- A list of objects that contain the unprocessed account and a result
string that explains why it was unprocessed.
DescribePublishingDestination
data DescribePublishingDestination Source #
See: newDescribePublishingDestination
smart constructor.
Instances
newDescribePublishingDestination Source #
Create a value of DescribePublishingDestination
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DescribePublishingDestination'
, describePublishingDestination_detectorId
- The unique ID of the detector associated with the publishing destination
to retrieve.
$sel:destinationId:DescribePublishingDestination'
, describePublishingDestination_destinationId
- The ID of the publishing destination to retrieve.
data DescribePublishingDestinationResponse Source #
See: newDescribePublishingDestinationResponse
smart constructor.
DescribePublishingDestinationResponse' Int Text DestinationType PublishingStatus Integer DestinationProperties |
Instances
newDescribePublishingDestinationResponse Source #
Create a value of DescribePublishingDestinationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DescribePublishingDestinationResponse'
, describePublishingDestinationResponse_httpStatus
- The response's http status code.
$sel:destinationId:DescribePublishingDestination'
, describePublishingDestinationResponse_destinationId
- The ID of the publishing destination.
$sel:destinationType:DescribePublishingDestinationResponse'
, describePublishingDestinationResponse_destinationType
- The type of publishing destination. Currently, only Amazon S3 buckets
are supported.
$sel:status:DescribePublishingDestinationResponse'
, describePublishingDestinationResponse_status
- The status of the publishing destination.
$sel:publishingFailureStartTimestamp:DescribePublishingDestinationResponse'
, describePublishingDestinationResponse_publishingFailureStartTimestamp
- The time, in epoch millisecond format, at which GuardDuty was first
unable to publish findings to the destination.
$sel:destinationProperties:DescribePublishingDestinationResponse'
, describePublishingDestinationResponse_destinationProperties
- A DestinationProperties
object that includes the DestinationArn
and
KmsKeyArn
of the publishing destination.
TagResource
data TagResource Source #
See: newTagResource
smart constructor.
Instances
Create a value of TagResource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceArn:TagResource'
, tagResource_resourceArn
- The Amazon Resource Name (ARN) for the GuardDuty resource to apply a tag
to.
$sel:tags:TagResource'
, tagResource_tags
- The tags to be added to a resource.
data TagResourceResponse Source #
See: newTagResourceResponse
smart constructor.
Instances
newTagResourceResponse Source #
Create a value of TagResourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:TagResourceResponse'
, tagResourceResponse_httpStatus
- The response's http status code.
GetFindings
data GetFindings Source #
See: newGetFindings
smart constructor.
Instances
Create a value of GetFindings
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:sortCriteria:GetFindings'
, getFindings_sortCriteria
- Represents the criteria used for sorting findings.
$sel:detectorId:GetFindings'
, getFindings_detectorId
- The ID of the detector that specifies the GuardDuty service whose
findings you want to retrieve.
$sel:findingIds:GetFindings'
, getFindings_findingIds
- The IDs of the findings that you want to retrieve.
data GetFindingsResponse Source #
See: newGetFindingsResponse
smart constructor.
Instances
newGetFindingsResponse Source #
Create a value of GetFindingsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetFindingsResponse'
, getFindingsResponse_httpStatus
- The response's http status code.
$sel:findings:GetFindingsResponse'
, getFindingsResponse_findings
- A list of findings.
ListDetectors (Paginated)
data ListDetectors Source #
See: newListDetectors
smart constructor.
Instances
newListDetectors :: ListDetectors Source #
Create a value of ListDetectors
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListDetectors'
, listDetectors_nextToken
- You can use this parameter when paginating results. Set the value of
this parameter to null on your first call to the list action. For
subsequent calls to the action, fill nextToken in the request with the
value of NextToken from the previous response to continue listing data.
$sel:maxResults:ListDetectors'
, listDetectors_maxResults
- You can use this parameter to indicate the maximum number of items that
you want in the response. The default value is 50. The maximum value is
50.
data ListDetectorsResponse Source #
See: newListDetectorsResponse
smart constructor.
Instances
newListDetectorsResponse Source #
Create a value of ListDetectorsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:nextToken:ListDetectors'
, listDetectorsResponse_nextToken
- The pagination parameter to be used on the next list operation to
retrieve more items.
$sel:httpStatus:ListDetectorsResponse'
, listDetectorsResponse_httpStatus
- The response's http status code.
$sel:detectorIds:ListDetectorsResponse'
, listDetectorsResponse_detectorIds
- A list of detector IDs.
UntagResource
data UntagResource Source #
See: newUntagResource
smart constructor.
Instances
Create a value of UntagResource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceArn:UntagResource'
, untagResource_resourceArn
- The Amazon Resource Name (ARN) for the resource to remove tags from.
$sel:tagKeys:UntagResource'
, untagResource_tagKeys
- The tag keys to remove from the resource.
data UntagResourceResponse Source #
See: newUntagResourceResponse
smart constructor.
Instances
newUntagResourceResponse Source #
Create a value of UntagResourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UntagResourceResponse'
, untagResourceResponse_httpStatus
- The response's http status code.
UpdateDetector
data UpdateDetector Source #
See: newUpdateDetector
smart constructor.
UpdateDetector' (Maybe FindingPublishingFrequency) (Maybe DataSourceConfigurations) (Maybe Bool) Text |
Instances
Create a value of UpdateDetector
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:findingPublishingFrequency:UpdateDetector'
, updateDetector_findingPublishingFrequency
- An enum value that specifies how frequently findings are exported, such
as to CloudWatch Events.
$sel:dataSources:UpdateDetector'
, updateDetector_dataSources
- Describes which data sources will be updated.
$sel:enable:UpdateDetector'
, updateDetector_enable
- Specifies whether the detector is enabled or not enabled.
$sel:detectorId:UpdateDetector'
, updateDetector_detectorId
- The unique ID of the detector to update.
data UpdateDetectorResponse Source #
See: newUpdateDetectorResponse
smart constructor.
Instances
newUpdateDetectorResponse Source #
Create a value of UpdateDetectorResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateDetectorResponse'
, updateDetectorResponse_httpStatus
- The response's http status code.
DeleteDetector
data DeleteDetector Source #
See: newDeleteDetector
smart constructor.
Instances
Create a value of DeleteDetector
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:DeleteDetector'
, deleteDetector_detectorId
- The unique ID of the detector that you want to delete.
data DeleteDetectorResponse Source #
See: newDeleteDetectorResponse
smart constructor.
Instances
newDeleteDetectorResponse Source #
Create a value of DeleteDetectorResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteDetectorResponse'
, deleteDetectorResponse_httpStatus
- The response's http status code.
UpdateFindingsFeedback
data UpdateFindingsFeedback Source #
See: newUpdateFindingsFeedback
smart constructor.
Instances
newUpdateFindingsFeedback Source #
:: Text | |
-> Feedback | |
-> UpdateFindingsFeedback |
Create a value of UpdateFindingsFeedback
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:comments:UpdateFindingsFeedback'
, updateFindingsFeedback_comments
- Additional feedback about the GuardDuty findings.
$sel:detectorId:UpdateFindingsFeedback'
, updateFindingsFeedback_detectorId
- The ID of the detector associated with the findings to update feedback
for.
$sel:findingIds:UpdateFindingsFeedback'
, updateFindingsFeedback_findingIds
- The IDs of the findings that you want to mark as useful or not useful.
$sel:feedback:UpdateFindingsFeedback'
, updateFindingsFeedback_feedback
- The feedback for the finding.
data UpdateFindingsFeedbackResponse Source #
See: newUpdateFindingsFeedbackResponse
smart constructor.
Instances
Eq UpdateFindingsFeedbackResponse Source # | |
Read UpdateFindingsFeedbackResponse Source # | |
Show UpdateFindingsFeedbackResponse Source # | |
Defined in Amazonka.GuardDuty.UpdateFindingsFeedback | |
Generic UpdateFindingsFeedbackResponse Source # | |
NFData UpdateFindingsFeedbackResponse Source # | |
Defined in Amazonka.GuardDuty.UpdateFindingsFeedback rnf :: UpdateFindingsFeedbackResponse -> () # | |
type Rep UpdateFindingsFeedbackResponse Source # | |
Defined in Amazonka.GuardDuty.UpdateFindingsFeedback type Rep UpdateFindingsFeedbackResponse = D1 ('MetaData "UpdateFindingsFeedbackResponse" "Amazonka.GuardDuty.UpdateFindingsFeedback" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "UpdateFindingsFeedbackResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newUpdateFindingsFeedbackResponse Source #
Create a value of UpdateFindingsFeedbackResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateFindingsFeedbackResponse'
, updateFindingsFeedbackResponse_httpStatus
- The response's http status code.
GetFilter
See: newGetFilter
smart constructor.
Instances
Create a value of GetFilter
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:detectorId:GetFilter'
, getFilter_detectorId
- The unique ID of the detector that the filter is associated with.
$sel:filterName:GetFilter'
, getFilter_filterName
- The name of the filter you want to get.
data GetFilterResponse Source #
See: newGetFilterResponse
smart constructor.
GetFilterResponse' (Maybe Text) (Maybe Natural) (Maybe (HashMap Text Text)) Int Text FilterAction FindingCriteria |
Instances
:: Int | |
-> Text | |
-> FilterAction | |
-> FindingCriteria | |
-> GetFilterResponse |
Create a value of GetFilterResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:description:GetFilterResponse'
, getFilterResponse_description
- The description of the filter.
$sel:rank:GetFilterResponse'
, getFilterResponse_rank
- Specifies the position of the filter in the list of current filters.
Also specifies the order in which this filter is applied to the
findings.
$sel:tags:GetFilterResponse'
, getFilterResponse_tags
- The tags of the filter resource.
$sel:httpStatus:GetFilterResponse'
, getFilterResponse_httpStatus
- The response's http status code.
$sel:name:GetFilterResponse'
, getFilterResponse_name
- The name of the filter.
$sel:action:GetFilterResponse'
, getFilterResponse_action
- Specifies the action that is to be applied to the findings that match
the filter.
$sel:findingCriteria:GetFilterResponse'
, getFilterResponse_findingCriteria
- Represents the criteria to be used in the filter for querying findings.
DisableOrganizationAdminAccount
data DisableOrganizationAdminAccount Source #
See: newDisableOrganizationAdminAccount
smart constructor.
Instances
newDisableOrganizationAdminAccount Source #
Create a value of DisableOrganizationAdminAccount
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:adminAccountId:DisableOrganizationAdminAccount'
, disableOrganizationAdminAccount_adminAccountId
- The AWS Account ID for the organizations account to be disabled as a
GuardDuty delegated administrator.
data DisableOrganizationAdminAccountResponse Source #
See: newDisableOrganizationAdminAccountResponse
smart constructor.
Instances
Eq DisableOrganizationAdminAccountResponse Source # | |
Read DisableOrganizationAdminAccountResponse Source # | |
Show DisableOrganizationAdminAccountResponse Source # | |
Generic DisableOrganizationAdminAccountResponse Source # | |
Defined in Amazonka.GuardDuty.DisableOrganizationAdminAccount type Rep DisableOrganizationAdminAccountResponse :: Type -> Type # | |
NFData DisableOrganizationAdminAccountResponse Source # | |
type Rep DisableOrganizationAdminAccountResponse Source # | |
Defined in Amazonka.GuardDuty.DisableOrganizationAdminAccount type Rep DisableOrganizationAdminAccountResponse = D1 ('MetaData "DisableOrganizationAdminAccountResponse" "Amazonka.GuardDuty.DisableOrganizationAdminAccount" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "DisableOrganizationAdminAccountResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newDisableOrganizationAdminAccountResponse Source #
Create a value of DisableOrganizationAdminAccountResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DisableOrganizationAdminAccountResponse'
, disableOrganizationAdminAccountResponse_httpStatus
- The response's http status code.
Types
AdminStatus
newtype AdminStatus Source #
pattern AdminStatus_DISABLE_IN_PROGRESS :: AdminStatus | |
pattern AdminStatus_ENABLED :: AdminStatus |
Instances
DataSource
newtype DataSource Source #
pattern DataSource_CLOUD_TRAIL :: DataSource | |
pattern DataSource_DNS_LOGS :: DataSource | |
pattern DataSource_FLOW_LOGS :: DataSource | |
pattern DataSource_S3_LOGS :: DataSource |
Instances
DataSourceStatus
newtype DataSourceStatus Source #
pattern DataSourceStatus_DISABLED :: DataSourceStatus | |
pattern DataSourceStatus_ENABLED :: DataSourceStatus |
Instances
DestinationType
newtype DestinationType Source #
pattern DestinationType_S3 :: DestinationType |
Instances
DetectorStatus
newtype DetectorStatus Source #
pattern DetectorStatus_DISABLED :: DetectorStatus | |
pattern DetectorStatus_ENABLED :: DetectorStatus |
Instances
Feedback
pattern Feedback_NOT_USEFUL :: Feedback | |
pattern Feedback_USEFUL :: Feedback |
Instances
FilterAction
newtype FilterAction Source #
pattern FilterAction_ARCHIVE :: FilterAction | |
pattern FilterAction_NOOP :: FilterAction |
Instances
FindingPublishingFrequency
newtype FindingPublishingFrequency Source #
Instances
FindingStatisticType
newtype FindingStatisticType Source #
Instances
IpSetFormat
newtype IpSetFormat Source #
pattern IpSetFormat_ALIEN_VAULT :: IpSetFormat | |
pattern IpSetFormat_FIRE_EYE :: IpSetFormat | |
pattern IpSetFormat_OTX_CSV :: IpSetFormat | |
pattern IpSetFormat_PROOF_POINT :: IpSetFormat | |
pattern IpSetFormat_STIX :: IpSetFormat | |
pattern IpSetFormat_TXT :: IpSetFormat |
Instances
IpSetStatus
newtype IpSetStatus Source #
pattern IpSetStatus_ACTIVATING :: IpSetStatus | |
pattern IpSetStatus_ACTIVE :: IpSetStatus | |
pattern IpSetStatus_DEACTIVATING :: IpSetStatus | |
pattern IpSetStatus_DELETED :: IpSetStatus | |
pattern IpSetStatus_DELETE_PENDING :: IpSetStatus | |
pattern IpSetStatus_ERROR :: IpSetStatus | |
pattern IpSetStatus_INACTIVE :: IpSetStatus |
Instances
OrderBy
pattern OrderBy_ASC :: OrderBy | |
pattern OrderBy_DESC :: OrderBy |
Instances
PublishingStatus
newtype PublishingStatus Source #
Instances
ThreatIntelSetFormat
newtype ThreatIntelSetFormat Source #
pattern ThreatIntelSetFormat_ALIEN_VAULT :: ThreatIntelSetFormat | |
pattern ThreatIntelSetFormat_FIRE_EYE :: ThreatIntelSetFormat | |
pattern ThreatIntelSetFormat_OTX_CSV :: ThreatIntelSetFormat | |
pattern ThreatIntelSetFormat_PROOF_POINT :: ThreatIntelSetFormat | |
pattern ThreatIntelSetFormat_STIX :: ThreatIntelSetFormat | |
pattern ThreatIntelSetFormat_TXT :: ThreatIntelSetFormat |
Instances
ThreatIntelSetStatus
newtype ThreatIntelSetStatus Source #
pattern ThreatIntelSetStatus_ACTIVATING :: ThreatIntelSetStatus | |
pattern ThreatIntelSetStatus_ACTIVE :: ThreatIntelSetStatus | |
pattern ThreatIntelSetStatus_DEACTIVATING :: ThreatIntelSetStatus | |
pattern ThreatIntelSetStatus_DELETED :: ThreatIntelSetStatus | |
pattern ThreatIntelSetStatus_DELETE_PENDING :: ThreatIntelSetStatus | |
pattern ThreatIntelSetStatus_ERROR :: ThreatIntelSetStatus | |
pattern ThreatIntelSetStatus_INACTIVE :: ThreatIntelSetStatus |
Instances
UsageStatisticType
newtype UsageStatisticType Source #
Instances
AccessControlList
data AccessControlList Source #
Contains information on the current access control policies for the bucket.
See: newAccessControlList
smart constructor.
Instances
newAccessControlList :: AccessControlList Source #
Create a value of AccessControlList
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:allowsPublicWriteAccess:AccessControlList'
, accessControlList_allowsPublicWriteAccess
- A value that indicates whether public write access for the bucket is
enabled through an Access Control List (ACL).
$sel:allowsPublicReadAccess:AccessControlList'
, accessControlList_allowsPublicReadAccess
- A value that indicates whether public read access for the bucket is
enabled through an Access Control List (ACL).
AccessKeyDetails
data AccessKeyDetails Source #
Contains information about the access keys.
See: newAccessKeyDetails
smart constructor.
Instances
newAccessKeyDetails :: AccessKeyDetails Source #
Create a value of AccessKeyDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:principalId:AccessKeyDetails'
, accessKeyDetails_principalId
- The principal ID of the user.
$sel:userName:AccessKeyDetails'
, accessKeyDetails_userName
- The name of the user.
$sel:accessKeyId:AccessKeyDetails'
, accessKeyDetails_accessKeyId
- The access key ID of the user.
$sel:userType:AccessKeyDetails'
, accessKeyDetails_userType
- The type of the user.
AccountDetail
data AccountDetail Source #
Contains information about the account.
See: newAccountDetail
smart constructor.
Instances
Create a value of AccountDetail
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:AccountDetail'
, accountDetail_accountId
- The member account ID.
$sel:email:AccountDetail'
, accountDetail_email
- The email address of the member account.
AccountLevelPermissions
data AccountLevelPermissions Source #
Contains information about the account level permissions on the S3 bucket.
See: newAccountLevelPermissions
smart constructor.
Instances
newAccountLevelPermissions :: AccountLevelPermissions Source #
Create a value of AccountLevelPermissions
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:blockPublicAccess:AccountLevelPermissions'
, accountLevelPermissions_blockPublicAccess
- Describes the S3 Block Public Access settings of the bucket's parent
account.
Action
Contains information about actions.
See: newAction
smart constructor.
Action' (Maybe NetworkConnectionAction) (Maybe PortProbeAction) (Maybe Text) (Maybe DnsRequestAction) (Maybe AwsApiCallAction) |
Instances
Create a value of Action
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:networkConnectionAction:Action'
, action_networkConnectionAction
- Information about the NETWORK_CONNECTION action described in this
finding.
$sel:portProbeAction:Action'
, action_portProbeAction
- Information about the PORT_PROBE action described in this finding.
$sel:actionType:Action'
, action_actionType
- The GuardDuty finding activity type.
$sel:dnsRequestAction:Action'
, action_dnsRequestAction
- Information about the DNS_REQUEST action described in this finding.
$sel:awsApiCallAction:Action'
, action_awsApiCallAction
- Information about the AWS_API_CALL action described in this finding.
AdminAccount
data AdminAccount Source #
The account within the organization specified as the GuardDuty delegated administrator.
See: newAdminAccount
smart constructor.
Instances
newAdminAccount :: AdminAccount Source #
Create a value of AdminAccount
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:adminAccountId:AdminAccount'
, adminAccount_adminAccountId
- The AWS account ID for the account.
$sel:adminStatus:AdminAccount'
, adminAccount_adminStatus
- Indicates whether the account is enabled as the delegated administrator.
AwsApiCallAction
data AwsApiCallAction Source #
Contains information about the API action.
See: newAwsApiCallAction
smart constructor.
AwsApiCallAction' (Maybe RemoteIpDetails) (Maybe Text) (Maybe DomainDetails) (Maybe Text) (Maybe Text) (Maybe Text) |
Instances
newAwsApiCallAction :: AwsApiCallAction Source #
Create a value of AwsApiCallAction
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:remoteIpDetails:AwsApiCallAction'
, awsApiCallAction_remoteIpDetails
- The remote IP information of the connection that initiated the AWS API
call.
$sel:callerType:AwsApiCallAction'
, awsApiCallAction_callerType
- The AWS API caller type.
$sel:domainDetails:AwsApiCallAction'
, awsApiCallAction_domainDetails
- The domain information for the AWS API call.
$sel:serviceName:AwsApiCallAction'
, awsApiCallAction_serviceName
- The AWS service name whose API was invoked.
$sel:errorCode:AwsApiCallAction'
, awsApiCallAction_errorCode
- The error code of the failed AWS API action.
$sel:api:AwsApiCallAction'
, awsApiCallAction_api
- The AWS API name.
BlockPublicAccess
data BlockPublicAccess Source #
Contains information on how the bucker owner's S3 Block Public Access settings are being applied to the S3 bucket. See S3 Block Public Access for more information.
See: newBlockPublicAccess
smart constructor.
Instances
newBlockPublicAccess :: BlockPublicAccess Source #
Create a value of BlockPublicAccess
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ignorePublicAcls:BlockPublicAccess'
, blockPublicAccess_ignorePublicAcls
- Indicates if S3 Block Public Access is set to IgnorePublicAcls
.
$sel:blockPublicAcls:BlockPublicAccess'
, blockPublicAccess_blockPublicAcls
- Indicates if S3 Block Public Access is set to BlockPublicAcls
.
$sel:restrictPublicBuckets:BlockPublicAccess'
, blockPublicAccess_restrictPublicBuckets
- Indicates if S3 Block Public Access is set to RestrictPublicBuckets
.
$sel:blockPublicPolicy:BlockPublicAccess'
, blockPublicAccess_blockPublicPolicy
- Indicates if S3 Block Public Access is set to BlockPublicPolicy
.
BucketLevelPermissions
data BucketLevelPermissions Source #
Contains information about the bucket level permissions for the S3 bucket.
See: newBucketLevelPermissions
smart constructor.
Instances
newBucketLevelPermissions :: BucketLevelPermissions Source #
Create a value of BucketLevelPermissions
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accessControlList:BucketLevelPermissions'
, bucketLevelPermissions_accessControlList
- Contains information on how Access Control Policies are applied to the
bucket.
$sel:blockPublicAccess:BucketLevelPermissions'
, bucketLevelPermissions_blockPublicAccess
- Contains information on which account level S3 Block Public Access
settings are applied to the S3 bucket.
$sel:bucketPolicy:BucketLevelPermissions'
, bucketLevelPermissions_bucketPolicy
- Contains information on the bucket policies for the S3 bucket.
BucketPolicy
data BucketPolicy Source #
Contains information on the current bucket policies for the S3 bucket.
See: newBucketPolicy
smart constructor.
BucketPolicy' (Maybe Bool) (Maybe Bool) |
Instances
newBucketPolicy :: BucketPolicy Source #
Create a value of BucketPolicy
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:allowsPublicWriteAccess:BucketPolicy'
, bucketPolicy_allowsPublicWriteAccess
- A value that indicates whether public write access for the bucket is
enabled through a bucket policy.
$sel:allowsPublicReadAccess:BucketPolicy'
, bucketPolicy_allowsPublicReadAccess
- A value that indicates whether public read access for the bucket is
enabled through a bucket policy.
City
Contains information about the city associated with the IP address.
See: newCity
smart constructor.
Create a value of City
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:cityName:City'
, city_cityName
- The city name of the remote IP address.
CloudTrailConfigurationResult
data CloudTrailConfigurationResult Source #
Contains information on the status of CloudTrail as a data source for the detector.
See: newCloudTrailConfigurationResult
smart constructor.
Instances
Eq CloudTrailConfigurationResult Source # | |
Read CloudTrailConfigurationResult Source # | |
Show CloudTrailConfigurationResult Source # | |
Generic CloudTrailConfigurationResult Source # | |
NFData CloudTrailConfigurationResult Source # | |
Defined in Amazonka.GuardDuty.Types.CloudTrailConfigurationResult rnf :: CloudTrailConfigurationResult -> () # | |
Hashable CloudTrailConfigurationResult Source # | |
FromJSON CloudTrailConfigurationResult Source # | |
type Rep CloudTrailConfigurationResult Source # | |
Defined in Amazonka.GuardDuty.Types.CloudTrailConfigurationResult type Rep CloudTrailConfigurationResult = D1 ('MetaData "CloudTrailConfigurationResult" "Amazonka.GuardDuty.Types.CloudTrailConfigurationResult" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "CloudTrailConfigurationResult'" 'PrefixI 'True) (S1 ('MetaSel ('Just "status") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 DataSourceStatus))) |
newCloudTrailConfigurationResult Source #
Create a value of CloudTrailConfigurationResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:CloudTrailConfigurationResult'
, cloudTrailConfigurationResult_status
- Describes whether CloudTrail is enabled as a data source for the
detector.
Condition
Contains information about the condition.
See: newCondition
smart constructor.
Condition' (Maybe [Text]) (Maybe Integer) (Maybe Int) (Maybe Integer) (Maybe Integer) (Maybe Int) (Maybe [Text]) (Maybe [Text]) (Maybe [Text]) (Maybe Int) (Maybe Int) (Maybe Integer) |
Instances
newCondition :: Condition Source #
Create a value of Condition
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:eq:Condition'
, condition_eq
- Represents the equal condition to be applied to a single field when
querying for findings.
$sel:lessThan:Condition'
, condition_lessThan
- Represents a less than condition to be applied to a single field when
querying for findings.
$sel:lte:Condition'
, condition_lte
- Represents a less than or equal condition to be applied to a single
field when querying for findings.
$sel:greaterThanOrEqual:Condition'
, condition_greaterThanOrEqual
- Represents a greater than or equal condition to be applied to a single
field when querying for findings.
$sel:lessThanOrEqual:Condition'
, condition_lessThanOrEqual
- Represents a less than or equal condition to be applied to a single
field when querying for findings.
$sel:gt:Condition'
, condition_gt
- Represents a greater than condition to be applied to a single field
when querying for findings.
$sel:equals:Condition'
, condition_equals
- Represents an equal ____ condition to be applied to a single field
when querying for findings.
$sel:neq:Condition'
, condition_neq
- Represents the not equal condition to be applied to a single field
when querying for findings.
$sel:notEquals:Condition'
, condition_notEquals
- Represents a not equal ____ condition to be applied to a single field
when querying for findings.
$sel:lt:Condition'
, condition_lt
- Represents a less than condition to be applied to a single field when
querying for findings.
$sel:gte:Condition'
, condition_gte
- Represents a greater than or equal condition to be applied to a single
field when querying for findings.
$sel:greaterThan:Condition'
, condition_greaterThan
- Represents a greater than condition to be applied to a single field
when querying for findings.
Country
Contains information about the country where the remote IP address is located.
See: newCountry
smart constructor.
Instances
Eq Country Source # | |
Read Country Source # | |
Show Country Source # | |
Generic Country Source # | |
NFData Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country | |
Hashable Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country | |
FromJSON Country Source # | |
type Rep Country Source # | |
Defined in Amazonka.GuardDuty.Types.Country type Rep Country = D1 ('MetaData "Country" "Amazonka.GuardDuty.Types.Country" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Country'" 'PrefixI 'True) (S1 ('MetaSel ('Just "countryName") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "countryCode") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) |
newCountry :: Country Source #
Create a value of Country
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:countryName:Country'
, country_countryName
- The country name of the remote IP address.
$sel:countryCode:Country'
, country_countryCode
- The country code of the remote IP address.
DNSLogsConfigurationResult
data DNSLogsConfigurationResult Source #
Contains information on the status of DNS logs as a data source.
See: newDNSLogsConfigurationResult
smart constructor.
Instances
newDNSLogsConfigurationResult Source #
Create a value of DNSLogsConfigurationResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:DNSLogsConfigurationResult'
, dNSLogsConfigurationResult_status
- Denotes whether DNS logs is enabled as a data source.
DataSourceConfigurations
data DataSourceConfigurations Source #
Contains information about which data sources are enabled.
See: newDataSourceConfigurations
smart constructor.
Instances
newDataSourceConfigurations :: DataSourceConfigurations Source #
Create a value of DataSourceConfigurations
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:s3Logs:DataSourceConfigurations'
, dataSourceConfigurations_s3Logs
- Describes whether S3 data event logs are enabled as a data source.
DataSourceConfigurationsResult
data DataSourceConfigurationsResult Source #
Contains information on the status of data sources for the detector.
See: newDataSourceConfigurationsResult
smart constructor.
DataSourceConfigurationsResult' CloudTrailConfigurationResult DNSLogsConfigurationResult FlowLogsConfigurationResult S3LogsConfigurationResult |
Instances
newDataSourceConfigurationsResult Source #
:: CloudTrailConfigurationResult | |
-> DNSLogsConfigurationResult | |
-> FlowLogsConfigurationResult | |
-> S3LogsConfigurationResult | |
-> DataSourceConfigurationsResult |
Create a value of DataSourceConfigurationsResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:cloudTrail:DataSourceConfigurationsResult'
, dataSourceConfigurationsResult_cloudTrail
- An object that contains information on the status of CloudTrail as a
data source.
$sel:dNSLogs:DataSourceConfigurationsResult'
, dataSourceConfigurationsResult_dNSLogs
- An object that contains information on the status of DNS logs as a data
source.
$sel:flowLogs:DataSourceConfigurationsResult'
, dataSourceConfigurationsResult_flowLogs
- An object that contains information on the status of VPC flow logs as a
data source.
$sel:s3Logs:DataSourceConfigurationsResult'
, dataSourceConfigurationsResult_s3Logs
- An object that contains information on the status of S3 Data event logs
as a data source.
DefaultServerSideEncryption
data DefaultServerSideEncryption Source #
Contains information on the server side encryption method used in the S3 bucket. See S3 Server-Side Encryption for more information.
See: newDefaultServerSideEncryption
smart constructor.
Instances
newDefaultServerSideEncryption :: DefaultServerSideEncryption Source #
Create a value of DefaultServerSideEncryption
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:encryptionType:DefaultServerSideEncryption'
, defaultServerSideEncryption_encryptionType
- The type of encryption used for objects within the S3 bucket.
$sel:kmsMasterKeyArn:DefaultServerSideEncryption'
, defaultServerSideEncryption_kmsMasterKeyArn
- The Amazon Resource Name (ARN) of the KMS encryption key. Only available
if the bucket EncryptionType
is aws:kms
.
Destination
data Destination Source #
Contains information about the publishing destination, including the ID, type, and status.
See: newDestination
smart constructor.
Instances
:: Text | |
-> DestinationType | |
-> PublishingStatus | |
-> Destination |
Create a value of Destination
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:destinationId:Destination'
, destination_destinationId
- The unique ID of the publishing destination.
$sel:destinationType:Destination'
, destination_destinationType
- The type of resource used for the publishing destination. Currently,
only Amazon S3 buckets are supported.
$sel:status:Destination'
, destination_status
- The status of the publishing destination.
DestinationProperties
data DestinationProperties Source #
Contains the Amazon Resource Name (ARN) of the resource to publish to, such as an S3 bucket, and the ARN of the KMS key to use to encrypt published findings.
See: newDestinationProperties
smart constructor.
Instances
newDestinationProperties :: DestinationProperties Source #
Create a value of DestinationProperties
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:kmsKeyArn:DestinationProperties'
, destinationProperties_kmsKeyArn
- The ARN of the KMS key to use for encryption.
$sel:destinationArn:DestinationProperties'
, destinationProperties_destinationArn
- The ARN of the resource to publish to.
DnsRequestAction
data DnsRequestAction Source #
Contains information about the DNS_REQUEST action described in this finding.
See: newDnsRequestAction
smart constructor.
Instances
newDnsRequestAction :: DnsRequestAction Source #
Create a value of DnsRequestAction
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:domain:DnsRequestAction'
, dnsRequestAction_domain
- The domain information for the API request.
DomainDetails
data DomainDetails Source #
Contains information about the domain.
See: newDomainDetails
smart constructor.
Instances
newDomainDetails :: DomainDetails Source #
Create a value of DomainDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:domain:DomainDetails'
, domainDetails_domain
- The domain information for the AWS API call.
Evidence
Contains information about the reason that the finding was generated.
See: newEvidence
smart constructor.
Instances
Eq Evidence Source # | |
Read Evidence Source # | |
Show Evidence Source # | |
Generic Evidence Source # | |
NFData Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence | |
Hashable Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence | |
FromJSON Evidence Source # | |
type Rep Evidence Source # | |
Defined in Amazonka.GuardDuty.Types.Evidence type Rep Evidence = D1 ('MetaData "Evidence" "Amazonka.GuardDuty.Types.Evidence" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Evidence'" 'PrefixI 'True) (S1 ('MetaSel ('Just "threatIntelligenceDetails") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe [ThreatIntelligenceDetail])))) |
newEvidence :: Evidence Source #
Create a value of Evidence
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:threatIntelligenceDetails:Evidence'
, evidence_threatIntelligenceDetails
- A list of threat intelligence details related to the evidence.
Finding
Contains information about the finding, which is generated when abnormal or suspicious activity is detected.
See: newFinding
smart constructor.
Finding' (Maybe ServiceInfo) (Maybe Double) (Maybe Text) (Maybe Text) (Maybe Text) Text Text Text Text Text Resource Text Double Text Text |
Instances
Create a value of Finding
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:service:Finding'
, finding_service
- Undocumented member.
$sel:confidence:Finding'
, finding_confidence
- The confidence score for the finding.
$sel:partition:Finding'
, finding_partition
- The partition associated with the finding.
$sel:title:Finding'
, finding_title
- The title of the finding.
$sel:description:Finding'
, finding_description
- The description of the finding.
$sel:accountId:Finding'
, finding_accountId
- The ID of the account in which the finding was generated.
$sel:arn:Finding'
, finding_arn
- The ARN of the finding.
$sel:createdAt:Finding'
, finding_createdAt
- The time and date when the finding was created.
$sel:id:Finding'
, finding_id
- The ID of the finding.
$sel:region:Finding'
, finding_region
- The Region where the finding was generated.
$sel:resource:Finding'
, finding_resource
- Undocumented member.
$sel:schemaVersion:Finding'
, finding_schemaVersion
- The version of the schema used for the finding.
$sel:severity:Finding'
, finding_severity
- The severity of the finding.
$sel:type':Finding'
, finding_type
- The type of finding.
$sel:updatedAt:Finding'
, finding_updatedAt
- The time and date when the finding was last updated.
FindingCriteria
data FindingCriteria Source #
Contains information about the criteria used for querying findings.
See: newFindingCriteria
smart constructor.
Instances
newFindingCriteria :: FindingCriteria Source #
Create a value of FindingCriteria
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:criterion:FindingCriteria'
, findingCriteria_criterion
- Represents a map of finding properties that match specified conditions
and values when querying findings.
FindingStatistics
data FindingStatistics Source #
Contains information about finding statistics.
See: newFindingStatistics
smart constructor.
Instances
newFindingStatistics :: FindingStatistics Source #
Create a value of FindingStatistics
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:countBySeverity:FindingStatistics'
, findingStatistics_countBySeverity
- Represents a map of severity to count statistics for a set of findings.
FlowLogsConfigurationResult
data FlowLogsConfigurationResult Source #
Contains information on the status of VPC flow logs as a data source.
See: newFlowLogsConfigurationResult
smart constructor.
Instances
newFlowLogsConfigurationResult Source #
Create a value of FlowLogsConfigurationResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:FlowLogsConfigurationResult'
, flowLogsConfigurationResult_status
- Denotes whether VPC flow logs is enabled as a data source.
GeoLocation
data GeoLocation Source #
Contains information about the location of the remote IP address.
See: newGeoLocation
smart constructor.
Instances
newGeoLocation :: GeoLocation Source #
Create a value of GeoLocation
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:lat:GeoLocation'
, geoLocation_lat
- The latitude information of the remote IP address.
$sel:lon:GeoLocation'
, geoLocation_lon
- The longitude information of the remote IP address.
IamInstanceProfile
data IamInstanceProfile Source #
Contains information about the EC2 instance profile.
See: newIamInstanceProfile
smart constructor.
Instances
newIamInstanceProfile :: IamInstanceProfile Source #
Create a value of IamInstanceProfile
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:IamInstanceProfile'
, iamInstanceProfile_arn
- The profile ARN of the EC2 instance.
$sel:id:IamInstanceProfile'
, iamInstanceProfile_id
- The profile ID of the EC2 instance.
InstanceDetails
data InstanceDetails Source #
Contains information about the details of an instance.
See: newInstanceDetails
smart constructor.
InstanceDetails' (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [NetworkInterface]) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe IamInstanceProfile) (Maybe Text) (Maybe [ProductCode]) (Maybe Text) (Maybe [Tag]) (Maybe Text) |
Instances
newInstanceDetails :: InstanceDetails Source #
Create a value of InstanceDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:instanceId:InstanceDetails'
, instanceDetails_instanceId
- The ID of the EC2 instance.
$sel:platform:InstanceDetails'
, instanceDetails_platform
- The platform of the EC2 instance.
$sel:launchTime:InstanceDetails'
, instanceDetails_launchTime
- The launch time of the EC2 instance.
$sel:networkInterfaces:InstanceDetails'
, instanceDetails_networkInterfaces
- The elastic network interface information of the EC2 instance.
$sel:outpostArn:InstanceDetails'
, instanceDetails_outpostArn
- The Amazon Resource Name (ARN) of the AWS Outpost. Only applicable to
AWS Outposts instances.
$sel:instanceType:InstanceDetails'
, instanceDetails_instanceType
- The type of the EC2 instance.
$sel:availabilityZone:InstanceDetails'
, instanceDetails_availabilityZone
- The Availability Zone of the EC2 instance.
$sel:iamInstanceProfile:InstanceDetails'
, instanceDetails_iamInstanceProfile
- The profile information of the EC2 instance.
$sel:imageId:InstanceDetails'
, instanceDetails_imageId
- The image ID of the EC2 instance.
$sel:productCodes:InstanceDetails'
, instanceDetails_productCodes
- The product code of the EC2 instance.
$sel:instanceState:InstanceDetails'
, instanceDetails_instanceState
- The state of the EC2 instance.
$sel:tags:InstanceDetails'
, instanceDetails_tags
- The tags of the EC2 instance.
$sel:imageDescription:InstanceDetails'
, instanceDetails_imageDescription
- The image description of the EC2 instance.
Invitation
data Invitation Source #
Contains information about the invitation to become a member account.
See: newInvitation
smart constructor.
Instances
newInvitation :: Invitation Source #
Create a value of Invitation
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitedAt:Invitation'
, invitation_invitedAt
- The timestamp when the invitation was sent.
$sel:relationshipStatus:Invitation'
, invitation_relationshipStatus
- The status of the relationship between the inviter and invitee accounts.
$sel:invitationId:Invitation'
, invitation_invitationId
- The ID of the invitation. This value is used to validate the inviter
account to the member account.
$sel:accountId:Invitation'
, invitation_accountId
- The ID of the account that the invitation was sent from.
LocalIpDetails
data LocalIpDetails Source #
Contains information about the local IP address of the connection.
See: newLocalIpDetails
smart constructor.
Instances
newLocalIpDetails :: LocalIpDetails Source #
Create a value of LocalIpDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:ipAddressV4:LocalIpDetails'
, localIpDetails_ipAddressV4
- The IPv4 local address of the connection.
LocalPortDetails
data LocalPortDetails Source #
Contains information about the port for the local connection.
See: newLocalPortDetails
smart constructor.
Instances
newLocalPortDetails :: LocalPortDetails Source #
Create a value of LocalPortDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:portName:LocalPortDetails'
, localPortDetails_portName
- The port name of the local connection.
$sel:port:LocalPortDetails'
, localPortDetails_port
- The port number of the local connection.
Master
Contains information about the administrator account and invitation.
See: newMaster
smart constructor.
Instances
Eq Master Source # | |
Read Master Source # | |
Show Master Source # | |
Generic Master Source # | |
NFData Master Source # | |
Defined in Amazonka.GuardDuty.Types.Master | |
Hashable Master Source # | |
Defined in Amazonka.GuardDuty.Types.Master | |
FromJSON Master Source # | |
type Rep Master Source # | |
Defined in Amazonka.GuardDuty.Types.Master type Rep Master = D1 ('MetaData "Master" "Amazonka.GuardDuty.Types.Master" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Master'" 'PrefixI 'True) ((S1 ('MetaSel ('Just "invitedAt") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "relationshipStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))) :*: (S1 ('MetaSel ('Just "invitationId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "accountId") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text))))) |
Create a value of Master
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitedAt:Master'
, master_invitedAt
- The timestamp when the invitation was sent.
$sel:relationshipStatus:Master'
, master_relationshipStatus
- The status of the relationship between the administrator and member
accounts.
$sel:invitationId:Master'
, master_invitationId
- The value used to validate the administrator account to the member
account.
$sel:accountId:Master'
, master_accountId
- The ID of the account used as the administrator account.
Member
Contains information about the member account.
See: newMember
smart constructor.
Instances
Create a value of Member
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:invitedAt:Member'
, member_invitedAt
- The timestamp when the invitation was sent.
$sel:detectorId:Member'
, member_detectorId
- The detector ID of the member account.
$sel:accountId:Member'
, member_accountId
- The ID of the member account.
$sel:masterId:Member'
, member_masterId
- The administrator account ID.
$sel:email:Member'
, member_email
- The email address of the member account.
$sel:relationshipStatus:Member'
, member_relationshipStatus
- The status of the relationship between the member and the administrator.
$sel:updatedAt:Member'
, member_updatedAt
- The last-updated timestamp of the member.
MemberDataSourceConfiguration
data MemberDataSourceConfiguration Source #
Contains information on which data sources are enabled for a member account.
See: newMemberDataSourceConfiguration
smart constructor.
Instances
newMemberDataSourceConfiguration Source #
Create a value of MemberDataSourceConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:MemberDataSourceConfiguration'
, memberDataSourceConfiguration_accountId
- The account ID for the member account.
$sel:dataSources:MemberDataSourceConfiguration'
, memberDataSourceConfiguration_dataSources
- Contains information on the status of data sources for the account.
NetworkConnectionAction
data NetworkConnectionAction Source #
Contains information about the NETWORK_CONNECTION action described in the finding.
See: newNetworkConnectionAction
smart constructor.
NetworkConnectionAction' (Maybe RemoteIpDetails) (Maybe Text) (Maybe LocalIpDetails) (Maybe RemotePortDetails) (Maybe Bool) (Maybe Text) (Maybe LocalPortDetails) |
Instances
newNetworkConnectionAction :: NetworkConnectionAction Source #
Create a value of NetworkConnectionAction
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:remoteIpDetails:NetworkConnectionAction'
, networkConnectionAction_remoteIpDetails
- The remote IP information of the connection.
$sel:protocol:NetworkConnectionAction'
, networkConnectionAction_protocol
- The network connection protocol.
$sel:localIpDetails:NetworkConnectionAction'
, networkConnectionAction_localIpDetails
- The local IP information of the connection.
$sel:remotePortDetails:NetworkConnectionAction'
, networkConnectionAction_remotePortDetails
- The remote port information of the connection.
$sel:blocked:NetworkConnectionAction'
, networkConnectionAction_blocked
- Indicates whether EC2 blocked the network connection to your instance.
$sel:connectionDirection:NetworkConnectionAction'
, networkConnectionAction_connectionDirection
- The network connection direction.
$sel:localPortDetails:NetworkConnectionAction'
, networkConnectionAction_localPortDetails
- The local port information of the connection.
NetworkInterface
data NetworkInterface Source #
Contains information about the elastic network interface of the EC2 instance.
See: newNetworkInterface
smart constructor.
NetworkInterface' (Maybe [PrivateIpAddressDetails]) (Maybe Text) (Maybe [SecurityGroup]) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe [Text]) |
Instances
newNetworkInterface :: NetworkInterface Source #
Create a value of NetworkInterface
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:privateIpAddresses:NetworkInterface'
, networkInterface_privateIpAddresses
- Other private IP address information of the EC2 instance.
$sel:publicDnsName:NetworkInterface'
, networkInterface_publicDnsName
- The public DNS name of the EC2 instance.
$sel:securityGroups:NetworkInterface'
, networkInterface_securityGroups
- The security groups associated with the EC2 instance.
$sel:vpcId:NetworkInterface'
, networkInterface_vpcId
- The VPC ID of the EC2 instance.
$sel:networkInterfaceId:NetworkInterface'
, networkInterface_networkInterfaceId
- The ID of the network interface.
$sel:subnetId:NetworkInterface'
, networkInterface_subnetId
- The subnet ID of the EC2 instance.
$sel:privateIpAddress:NetworkInterface'
, networkInterface_privateIpAddress
- The private IP address of the EC2 instance.
$sel:publicIp:NetworkInterface'
, networkInterface_publicIp
- The public IP address of the EC2 instance.
$sel:privateDnsName:NetworkInterface'
, networkInterface_privateDnsName
- The private DNS name of the EC2 instance.
$sel:ipv6Addresses:NetworkInterface'
, networkInterface_ipv6Addresses
- A list of IPv6 addresses for the EC2 instance.
Organization
data Organization Source #
Contains information about the ISP organization of the remote IP address.
See: newOrganization
smart constructor.
Instances
newOrganization :: Organization Source #
Create a value of Organization
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:org:Organization'
, organization_org
- The name of the internet provider.
$sel:asnOrg:Organization'
, organization_asnOrg
- The organization that registered this ASN.
$sel:asn:Organization'
, organization_asn
- The Autonomous System Number (ASN) of the internet provider of the
remote IP address.
$sel:isp:Organization'
, organization_isp
- The ISP information for the internet provider.
OrganizationDataSourceConfigurations
data OrganizationDataSourceConfigurations Source #
An object that contains information on which data sources will be configured to be automatically enabled for new members within the organization.
See: newOrganizationDataSourceConfigurations
smart constructor.
Instances
Eq OrganizationDataSourceConfigurations Source # | |
Read OrganizationDataSourceConfigurations Source # | |
Show OrganizationDataSourceConfigurations Source # | |
Generic OrganizationDataSourceConfigurations Source # | |
NFData OrganizationDataSourceConfigurations Source # | |
Hashable OrganizationDataSourceConfigurations Source # | |
ToJSON OrganizationDataSourceConfigurations Source # | |
type Rep OrganizationDataSourceConfigurations Source # | |
Defined in Amazonka.GuardDuty.Types.OrganizationDataSourceConfigurations type Rep OrganizationDataSourceConfigurations = D1 ('MetaData "OrganizationDataSourceConfigurations" "Amazonka.GuardDuty.Types.OrganizationDataSourceConfigurations" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "OrganizationDataSourceConfigurations'" 'PrefixI 'True) (S1 ('MetaSel ('Just "s3Logs") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe OrganizationS3LogsConfiguration)))) |
newOrganizationDataSourceConfigurations :: OrganizationDataSourceConfigurations Source #
Create a value of OrganizationDataSourceConfigurations
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:s3Logs:OrganizationDataSourceConfigurations'
, organizationDataSourceConfigurations_s3Logs
- Describes whether S3 data event logs are enabled for new members of the
organization.
OrganizationDataSourceConfigurationsResult
data OrganizationDataSourceConfigurationsResult Source #
An object that contains information on which data sources are automatically enabled for new members within the organization.
See: newOrganizationDataSourceConfigurationsResult
smart constructor.
Instances
newOrganizationDataSourceConfigurationsResult Source #
Create a value of OrganizationDataSourceConfigurationsResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:s3Logs:OrganizationDataSourceConfigurationsResult'
, organizationDataSourceConfigurationsResult_s3Logs
- Describes whether S3 data event logs are enabled as a data source.
OrganizationS3LogsConfiguration
data OrganizationS3LogsConfiguration Source #
Describes whether S3 data event logs will be automatically enabled for new members of the organization.
See: newOrganizationS3LogsConfiguration
smart constructor.
Instances
Eq OrganizationS3LogsConfiguration Source # | |
Read OrganizationS3LogsConfiguration Source # | |
Show OrganizationS3LogsConfiguration Source # | |
Generic OrganizationS3LogsConfiguration Source # | |
NFData OrganizationS3LogsConfiguration Source # | |
Defined in Amazonka.GuardDuty.Types.OrganizationS3LogsConfiguration rnf :: OrganizationS3LogsConfiguration -> () # | |
Hashable OrganizationS3LogsConfiguration Source # | |
ToJSON OrganizationS3LogsConfiguration Source # | |
type Rep OrganizationS3LogsConfiguration Source # | |
Defined in Amazonka.GuardDuty.Types.OrganizationS3LogsConfiguration type Rep OrganizationS3LogsConfiguration = D1 ('MetaData "OrganizationS3LogsConfiguration" "Amazonka.GuardDuty.Types.OrganizationS3LogsConfiguration" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "OrganizationS3LogsConfiguration'" 'PrefixI 'True) (S1 ('MetaSel ('Just "autoEnable") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Bool))) |
newOrganizationS3LogsConfiguration Source #
Create a value of OrganizationS3LogsConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationS3LogsConfiguration'
, organizationS3LogsConfiguration_autoEnable
- A value that contains information on whether S3 data event logs will be
enabled automatically as a data source for the organization.
OrganizationS3LogsConfigurationResult
data OrganizationS3LogsConfigurationResult Source #
The current configuration of S3 data event logs as a data source for the organization.
See: newOrganizationS3LogsConfigurationResult
smart constructor.
Instances
Eq OrganizationS3LogsConfigurationResult Source # | |
Read OrganizationS3LogsConfigurationResult Source # | |
Show OrganizationS3LogsConfigurationResult Source # | |
Generic OrganizationS3LogsConfigurationResult Source # | |
NFData OrganizationS3LogsConfigurationResult Source # | |
Hashable OrganizationS3LogsConfigurationResult Source # | |
FromJSON OrganizationS3LogsConfigurationResult Source # | |
type Rep OrganizationS3LogsConfigurationResult Source # | |
Defined in Amazonka.GuardDuty.Types.OrganizationS3LogsConfigurationResult type Rep OrganizationS3LogsConfigurationResult = D1 ('MetaData "OrganizationS3LogsConfigurationResult" "Amazonka.GuardDuty.Types.OrganizationS3LogsConfigurationResult" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "OrganizationS3LogsConfigurationResult'" 'PrefixI 'True) (S1 ('MetaSel ('Just "autoEnable") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Bool))) |
newOrganizationS3LogsConfigurationResult Source #
Create a value of OrganizationS3LogsConfigurationResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:autoEnable:OrganizationS3LogsConfigurationResult'
, organizationS3LogsConfigurationResult_autoEnable
- A value that describes whether S3 data event logs are automatically
enabled for new members of the organization.
Owner
Contains information on the owner of the bucket.
See: newOwner
smart constructor.
Instances
Eq Owner Source # | |
Read Owner Source # | |
Show Owner Source # | |
Generic Owner Source # | |
NFData Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner | |
Hashable Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner | |
FromJSON Owner Source # | |
type Rep Owner Source # | |
Defined in Amazonka.GuardDuty.Types.Owner |
Create a value of Owner
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:id:Owner'
, owner_id
- The canonical user ID of the bucket owner. For information about
locating your canonical user ID see
Finding Your Account Canonical User ID.
PermissionConfiguration
data PermissionConfiguration Source #
Contains information about how permissions are configured for the S3 bucket.
See: newPermissionConfiguration
smart constructor.
Instances
newPermissionConfiguration :: PermissionConfiguration Source #
Create a value of PermissionConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:bucketLevelPermissions:PermissionConfiguration'
, permissionConfiguration_bucketLevelPermissions
- Contains information about the bucket level permissions for the S3
bucket.
$sel:accountLevelPermissions:PermissionConfiguration'
, permissionConfiguration_accountLevelPermissions
- Contains information about the account level permissions on the S3
bucket.
PortProbeAction
data PortProbeAction Source #
Contains information about the PORT_PROBE action described in the finding.
See: newPortProbeAction
smart constructor.
Instances
newPortProbeAction :: PortProbeAction Source #
Create a value of PortProbeAction
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:portProbeDetails:PortProbeAction'
, portProbeAction_portProbeDetails
- A list of objects related to port probe details.
$sel:blocked:PortProbeAction'
, portProbeAction_blocked
- Indicates whether EC2 blocked the port probe to the instance, such as
with an ACL.
PortProbeDetail
data PortProbeDetail Source #
Contains information about the port probe details.
See: newPortProbeDetail
smart constructor.
Instances
newPortProbeDetail :: PortProbeDetail Source #
Create a value of PortProbeDetail
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:remoteIpDetails:PortProbeDetail'
, portProbeDetail_remoteIpDetails
- The remote IP information of the connection.
$sel:localIpDetails:PortProbeDetail'
, portProbeDetail_localIpDetails
- The local IP information of the connection.
$sel:localPortDetails:PortProbeDetail'
, portProbeDetail_localPortDetails
- The local port information of the connection.
PrivateIpAddressDetails
data PrivateIpAddressDetails Source #
Contains other private IP address information of the EC2 instance.
See: newPrivateIpAddressDetails
smart constructor.
Instances
newPrivateIpAddressDetails :: PrivateIpAddressDetails Source #
Create a value of PrivateIpAddressDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:privateIpAddress:PrivateIpAddressDetails'
, privateIpAddressDetails_privateIpAddress
- The private IP address of the EC2 instance.
$sel:privateDnsName:PrivateIpAddressDetails'
, privateIpAddressDetails_privateDnsName
- The private DNS name of the EC2 instance.
ProductCode
data ProductCode Source #
Contains information about the product code for the EC2 instance.
See: newProductCode
smart constructor.
ProductCode' (Maybe Text) (Maybe Text) |
Instances
newProductCode :: ProductCode Source #
Create a value of ProductCode
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:productType:ProductCode'
, productCode_productType
- The product code type.
$sel:code:ProductCode'
, productCode_code
- The product code information.
PublicAccess
data PublicAccess Source #
Describes the public access policies that apply to the S3 bucket.
See: newPublicAccess
smart constructor.
Instances
newPublicAccess :: PublicAccess Source #
Create a value of PublicAccess
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:permissionConfiguration:PublicAccess'
, publicAccess_permissionConfiguration
- Contains information about how permissions are configured for the S3
bucket.
$sel:effectivePermission:PublicAccess'
, publicAccess_effectivePermission
- Describes the effective permission on this bucket after factoring all
attached policies.
RemoteIpDetails
data RemoteIpDetails Source #
Contains information about the remote IP address of the connection.
See: newRemoteIpDetails
smart constructor.
RemoteIpDetails' (Maybe Country) (Maybe City) (Maybe Text) (Maybe GeoLocation) (Maybe Organization) |
Instances
newRemoteIpDetails :: RemoteIpDetails Source #
Create a value of RemoteIpDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:country:RemoteIpDetails'
, remoteIpDetails_country
- The country code of the remote IP address.
$sel:city:RemoteIpDetails'
, remoteIpDetails_city
- The city information of the remote IP address.
$sel:ipAddressV4:RemoteIpDetails'
, remoteIpDetails_ipAddressV4
- The IPv4 remote address of the connection.
$sel:geoLocation:RemoteIpDetails'
, remoteIpDetails_geoLocation
- The location information of the remote IP address.
$sel:organization:RemoteIpDetails'
, remoteIpDetails_organization
- The ISP organization information of the remote IP address.
RemotePortDetails
data RemotePortDetails Source #
Contains information about the remote port.
See: newRemotePortDetails
smart constructor.
Instances
newRemotePortDetails :: RemotePortDetails Source #
Create a value of RemotePortDetails
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:portName:RemotePortDetails'
, remotePortDetails_portName
- The port name of the remote connection.
$sel:port:RemotePortDetails'
, remotePortDetails_port
- The port number of the remote connection.
Resource
Contains information about the AWS resource associated with the activity that prompted GuardDuty to generate a finding.
See: newResource
smart constructor.
Instances
newResource :: Resource Source #
Create a value of Resource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:resourceType:Resource'
, resource_resourceType
- The type of AWS resource.
$sel:s3BucketDetails:Resource'
, resource_s3BucketDetails
- Contains information on the S3 bucket.
$sel:instanceDetails:Resource'
, resource_instanceDetails
- The information about the EC2 instance associated with the activity that
prompted GuardDuty to generate a finding.
$sel:accessKeyDetails:Resource'
, resource_accessKeyDetails
- The IAM access key details (IAM user information) of a user that engaged
in the activity that prompted GuardDuty to generate a finding.
S3BucketDetail
data S3BucketDetail Source #
Contains information on the S3 bucket.
See: newS3BucketDetail
smart constructor.
S3BucketDetail' (Maybe Text) (Maybe POSIX) (Maybe Owner) (Maybe Text) (Maybe DefaultServerSideEncryption) (Maybe PublicAccess) (Maybe Text) (Maybe [Tag]) |
Instances
newS3BucketDetail :: S3BucketDetail Source #
Create a value of S3BucketDetail
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:arn:S3BucketDetail'
, s3BucketDetail_arn
- The Amazon Resource Name (ARN) of the S3 bucket.
$sel:createdAt:S3BucketDetail'
, s3BucketDetail_createdAt
- The date and time the bucket was created at.
$sel:owner:S3BucketDetail'
, s3BucketDetail_owner
- The owner of the S3 bucket.
$sel:name:S3BucketDetail'
, s3BucketDetail_name
- The name of the S3 bucket.
$sel:defaultServerSideEncryption:S3BucketDetail'
, s3BucketDetail_defaultServerSideEncryption
- Describes the server side encryption method used in the S3 bucket.
$sel:publicAccess:S3BucketDetail'
, s3BucketDetail_publicAccess
- Describes the public access policies that apply to the S3 bucket.
$sel:type':S3BucketDetail'
, s3BucketDetail_type
- Describes whether the bucket is a source or destination bucket.
$sel:tags:S3BucketDetail'
, s3BucketDetail_tags
- All tags attached to the S3 bucket
S3LogsConfiguration
data S3LogsConfiguration Source #
Describes whether S3 data event logs will be enabled as a data source.
See: newS3LogsConfiguration
smart constructor.
Instances
newS3LogsConfiguration Source #
Create a value of S3LogsConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:enable:S3LogsConfiguration'
, s3LogsConfiguration_enable
- The status of S3 data event logs as a data source.
S3LogsConfigurationResult
data S3LogsConfigurationResult Source #
Describes whether S3 data event logs will be enabled as a data source.
See: newS3LogsConfigurationResult
smart constructor.
Instances
newS3LogsConfigurationResult Source #
Create a value of S3LogsConfigurationResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:status:S3LogsConfigurationResult'
, s3LogsConfigurationResult_status
- A value that describes whether S3 data event logs are automatically
enabled for new members of the organization.
SecurityGroup
data SecurityGroup Source #
Contains information about the security groups associated with the EC2 instance.
See: newSecurityGroup
smart constructor.
SecurityGroup' (Maybe Text) (Maybe Text) |
Instances
newSecurityGroup :: SecurityGroup Source #
Create a value of SecurityGroup
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:groupId:SecurityGroup'
, securityGroup_groupId
- The security group ID of the EC2 instance.
$sel:groupName:SecurityGroup'
, securityGroup_groupName
- The security group name of the EC2 instance.
ServiceInfo
data ServiceInfo Source #
Contains additional information about the generated finding.
See: newServiceInfo
smart constructor.
ServiceInfo' (Maybe Int) (Maybe Text) (Maybe Action) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Evidence) (Maybe Text) (Maybe Text) (Maybe Bool) |
Instances
newServiceInfo :: ServiceInfo Source #
Create a value of ServiceInfo
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:count:ServiceInfo'
, serviceInfo_count
- The total count of the occurrences of this finding type.
$sel:eventFirstSeen:ServiceInfo'
, serviceInfo_eventFirstSeen
- The first-seen timestamp of the activity that prompted GuardDuty to
generate this finding.
$sel:action:ServiceInfo'
, serviceInfo_action
- Information about the activity that is described in a finding.
$sel:detectorId:ServiceInfo'
, serviceInfo_detectorId
- The detector ID for the GuardDuty service.
$sel:serviceName:ServiceInfo'
, serviceInfo_serviceName
- The name of the AWS service (GuardDuty) that generated a finding.
$sel:userFeedback:ServiceInfo'
, serviceInfo_userFeedback
- Feedback that was submitted about the finding.
$sel:evidence:ServiceInfo'
, serviceInfo_evidence
- An evidence object associated with the service.
$sel:eventLastSeen:ServiceInfo'
, serviceInfo_eventLastSeen
- The last-seen timestamp of the activity that prompted GuardDuty to
generate this finding.
$sel:resourceRole:ServiceInfo'
, serviceInfo_resourceRole
- The resource role information for this finding.
$sel:archived:ServiceInfo'
, serviceInfo_archived
- Indicates whether this finding is archived.
SortCriteria
data SortCriteria Source #
Contains information about the criteria used for sorting findings.
See: newSortCriteria
smart constructor.
Instances
newSortCriteria :: SortCriteria Source #
Create a value of SortCriteria
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:orderBy:SortCriteria'
, sortCriteria_orderBy
- The order by which the sorted findings are to be displayed.
$sel:attributeName:SortCriteria'
, sortCriteria_attributeName
- Represents the finding attribute (for example, accountId) to sort
findings by.
Tag
Contains information about a tag associated with the EC2 instance.
See: newTag
smart constructor.
Instances
Eq Tag Source # | |
Read Tag Source # | |
Show Tag Source # | |
Generic Tag Source # | |
NFData Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag | |
Hashable Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag | |
FromJSON Tag Source # | |
type Rep Tag Source # | |
Defined in Amazonka.GuardDuty.Types.Tag type Rep Tag = D1 ('MetaData "Tag" "Amazonka.GuardDuty.Types.Tag" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Tag'" 'PrefixI 'True) (S1 ('MetaSel ('Just "value") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "key") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) |
Create a value of Tag
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:value:Tag'
, tag_value
- The EC2 instance tag value.
$sel:key:Tag'
, tag_key
- The EC2 instance tag key.
ThreatIntelligenceDetail
data ThreatIntelligenceDetail Source #
An instance of a threat intelligence detail that constitutes evidence for the finding.
See: newThreatIntelligenceDetail
smart constructor.
Instances
newThreatIntelligenceDetail :: ThreatIntelligenceDetail Source #
Create a value of ThreatIntelligenceDetail
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:threatNames:ThreatIntelligenceDetail'
, threatIntelligenceDetail_threatNames
- A list of names of the threats in the threat intelligence list that
triggered the finding.
$sel:threatListName:ThreatIntelligenceDetail'
, threatIntelligenceDetail_threatListName
- The name of the threat intelligence list that triggered the finding.
Total
Contains the total usage with the corresponding currency unit for that value.
See: newTotal
smart constructor.
Instances
Eq Total Source # | |
Read Total Source # | |
Show Total Source # | |
Generic Total Source # | |
NFData Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total | |
Hashable Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total | |
FromJSON Total Source # | |
type Rep Total Source # | |
Defined in Amazonka.GuardDuty.Types.Total type Rep Total = D1 ('MetaData "Total" "Amazonka.GuardDuty.Types.Total" "libZSservicesZSamazonka-guarddutyZSamazonka-guardduty" 'False) (C1 ('MetaCons "Total'" 'PrefixI 'True) (S1 ('MetaSel ('Just "amount") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "unit") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) |
Create a value of Total
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:amount:Total'
, total_amount
- The total usage.
$sel:unit:Total'
, total_unit
- The currency unit that the amount is given in.
UnprocessedAccount
data UnprocessedAccount Source #
Contains information about the accounts that weren't processed.
See: newUnprocessedAccount
smart constructor.
Instances
newUnprocessedAccount Source #
:: Text | |
-> Text | |
-> UnprocessedAccount |
Create a value of UnprocessedAccount
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:UnprocessedAccount'
, unprocessedAccount_accountId
- The AWS account ID.
$sel:result:UnprocessedAccount'
, unprocessedAccount_result
- A reason why the account hasn't been processed.
UsageAccountResult
data UsageAccountResult Source #
Contains information on the total of usage based on account IDs.
See: newUsageAccountResult
smart constructor.
Instances
newUsageAccountResult :: UsageAccountResult Source #
Create a value of UsageAccountResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountId:UsageAccountResult'
, usageAccountResult_accountId
- The Account ID that generated usage.
$sel:total:UsageAccountResult'
, usageAccountResult_total
- Represents the total of usage for the Account ID.
UsageCriteria
data UsageCriteria Source #
Contains information about the criteria used to query usage statistics.
See: newUsageCriteria
smart constructor.
UsageCriteria' (Maybe (NonEmpty Text)) (Maybe [Text]) [DataSource] |
Instances
newUsageCriteria :: UsageCriteria Source #
Create a value of UsageCriteria
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountIds:UsageCriteria'
, usageCriteria_accountIds
- The account IDs to aggregate usage statistics from.
$sel:resources:UsageCriteria'
, usageCriteria_resources
- The resources to aggregate usage statistics from. Only accepts exact
resource names.
$sel:dataSources:UsageCriteria'
, usageCriteria_dataSources
- The data sources to aggregate usage statistics from.
UsageDataSourceResult
data UsageDataSourceResult Source #
Contains information on the result of usage based on data source type.
See: newUsageDataSourceResult
smart constructor.
Instances
newUsageDataSourceResult :: UsageDataSourceResult Source #
Create a value of UsageDataSourceResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:total:UsageDataSourceResult'
, usageDataSourceResult_total
- Represents the total of usage for the specified data source.
$sel:dataSource:UsageDataSourceResult'
, usageDataSourceResult_dataSource
- The data source type that generated usage.
UsageResourceResult
data UsageResourceResult Source #
Contains information on the sum of usage based on an AWS resource.
See: newUsageResourceResult
smart constructor.
Instances
newUsageResourceResult :: UsageResourceResult Source #
Create a value of UsageResourceResult
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:total:UsageResourceResult'
, usageResourceResult_total
- Represents the sum total of usage for the specified resource type.
$sel:resource:UsageResourceResult'
, usageResourceResult_resource
- The AWS resource that generated usage.
UsageStatistics
data UsageStatistics Source #
Contains the result of GuardDuty usage. If a UsageStatisticType is provided the result for other types will be null.
See: newUsageStatistics
smart constructor.
UsageStatistics' (Maybe [UsageResourceResult]) (Maybe [UsageResourceResult]) (Maybe [UsageDataSourceResult]) (Maybe [UsageAccountResult]) |
Instances
newUsageStatistics :: UsageStatistics Source #
Create a value of UsageStatistics
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:topResources:UsageStatistics'
, usageStatistics_topResources
- Lists the top 50 resources that have generated the most GuardDuty usage,
in order from most to least expensive.
$sel:sumByResource:UsageStatistics'
, usageStatistics_sumByResource
- The usage statistic sum organized by resource.
$sel:sumByDataSource:UsageStatistics'
, usageStatistics_sumByDataSource
- The usage statistic sum organized by on data source.
$sel:sumByAccount:UsageStatistics'
, usageStatistics_sumByAccount
- The usage statistic sum organized by account ID.