Docs Packages
  1. Pulumi Registry
  2. AWS Classic
  3. API Docs
  4. securityhub
  5. Insight
aws logo
AWS Classic v5.41.0, May 15 23

aws.securityhub.Insight

Explore with Pulumi AI

Provides a Security Hub custom insight resource. See the Managing custom insights section of the AWS User Guide for more information.

Example Usage

Filter by AWS account ID

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var exampleAccount = new Aws.SecurityHub.Account("exampleAccount");

    var exampleInsight = new Aws.SecurityHub.Insight("exampleInsight", new()
    {
        Filters = new Aws.SecurityHub.Inputs.InsightFiltersArgs
        {
            AwsAccountIds = new[]
            {
                new Aws.SecurityHub.Inputs.InsightFiltersAwsAccountIdArgs
                {
                    Comparison = "EQUALS",
                    Value = "1234567890",
                },
                new Aws.SecurityHub.Inputs.InsightFiltersAwsAccountIdArgs
                {
                    Comparison = "EQUALS",
                    Value = "09876543210",
                },
            },
        },
        GroupByAttribute = "AwsAccountId",
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            exampleAccount,
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/securityhub"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleAccount, err := securityhub.NewAccount(ctx, "exampleAccount", nil)
		if err != nil {
			return err
		}
		_, err = securityhub.NewInsight(ctx, "exampleInsight", &securityhub.InsightArgs{
			Filters: &securityhub.InsightFiltersArgs{
				AwsAccountIds: securityhub.InsightFiltersAwsAccountIdArray{
					&securityhub.InsightFiltersAwsAccountIdArgs{
						Comparison: pulumi.String("EQUALS"),
						Value:      pulumi.String("1234567890"),
					},
					&securityhub.InsightFiltersAwsAccountIdArgs{
						Comparison: pulumi.String("EQUALS"),
						Value:      pulumi.String("09876543210"),
					},
				},
			},
			GroupByAttribute: pulumi.String("AwsAccountId"),
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleAccount,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securityhub.Account;
import com.pulumi.aws.securityhub.Insight;
import com.pulumi.aws.securityhub.InsightArgs;
import com.pulumi.aws.securityhub.inputs.InsightFiltersArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleAccount = new Account("exampleAccount");

        var exampleInsight = new Insight("exampleInsight", InsightArgs.builder()        
            .filters(InsightFiltersArgs.builder()
                .awsAccountIds(                
                    InsightFiltersAwsAccountIdArgs.builder()
                        .comparison("EQUALS")
                        .value("1234567890")
                        .build(),
                    InsightFiltersAwsAccountIdArgs.builder()
                        .comparison("EQUALS")
                        .value("09876543210")
                        .build())
                .build())
            .groupByAttribute("AwsAccountId")
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleAccount)
                .build());

    }
}

import pulumi
import pulumi_aws as aws

example_account = aws.securityhub.Account("exampleAccount")
example_insight = aws.securityhub.Insight("exampleInsight",
    filters=aws.securityhub.InsightFiltersArgs(
        aws_account_ids=[
            aws.securityhub.InsightFiltersAwsAccountIdArgs(
                comparison="EQUALS",
                value="1234567890",
            ),
            aws.securityhub.InsightFiltersAwsAccountIdArgs(
                comparison="EQUALS",
                value="09876543210",
            ),
        ],
    ),
    group_by_attribute="AwsAccountId",
    opts=pulumi.ResourceOptions(depends_on=[example_account]))

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const exampleAccount = new aws.securityhub.Account("exampleAccount", {});
const exampleInsight = new aws.securityhub.Insight("exampleInsight", {
    filters: {
        awsAccountIds: [
            {
                comparison: "EQUALS",
                value: "1234567890",
            },
            {
                comparison: "EQUALS",
                value: "09876543210",
            },
        ],
    },
    groupByAttribute: "AwsAccountId",
}, {
    dependsOn: [exampleAccount],
});

resources:
  exampleAccount:
    type: aws:securityhub:Account
  exampleInsight:
    type: aws:securityhub:Insight
    properties:
      filters:
        awsAccountIds:
          - comparison: EQUALS
            value: '1234567890'
          - comparison: EQUALS
            value: '09876543210'
      groupByAttribute: AwsAccountId
    options:
      dependson:
        - ${exampleAccount}

Filter by date range

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var exampleAccount = new Aws.SecurityHub.Account("exampleAccount");

    var exampleInsight = new Aws.SecurityHub.Insight("exampleInsight", new()
    {
        Filters = new Aws.SecurityHub.Inputs.InsightFiltersArgs
        {
            CreatedAts = new[]
            {
                new Aws.SecurityHub.Inputs.InsightFiltersCreatedAtArgs
                {
                    DateRange = new Aws.SecurityHub.Inputs.InsightFiltersCreatedAtDateRangeArgs
                    {
                        Unit = "DAYS",
                        Value = 5,
                    },
                },
            },
        },
        GroupByAttribute = "CreatedAt",
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            exampleAccount,
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/securityhub"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleAccount, err := securityhub.NewAccount(ctx, "exampleAccount", nil)
		if err != nil {
			return err
		}
		_, err = securityhub.NewInsight(ctx, "exampleInsight", &securityhub.InsightArgs{
			Filters: &securityhub.InsightFiltersArgs{
				CreatedAts: securityhub.InsightFiltersCreatedAtArray{
					&securityhub.InsightFiltersCreatedAtArgs{
						DateRange: &securityhub.InsightFiltersCreatedAtDateRangeArgs{
							Unit:  pulumi.String("DAYS"),
							Value: pulumi.Int(5),
						},
					},
				},
			},
			GroupByAttribute: pulumi.String("CreatedAt"),
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleAccount,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securityhub.Account;
import com.pulumi.aws.securityhub.Insight;
import com.pulumi.aws.securityhub.InsightArgs;
import com.pulumi.aws.securityhub.inputs.InsightFiltersArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleAccount = new Account("exampleAccount");

        var exampleInsight = new Insight("exampleInsight", InsightArgs.builder()        
            .filters(InsightFiltersArgs.builder()
                .createdAts(InsightFiltersCreatedAtArgs.builder()
                    .dateRange(InsightFiltersCreatedAtDateRangeArgs.builder()
                        .unit("DAYS")
                        .value(5)
                        .build())
                    .build())
                .build())
            .groupByAttribute("CreatedAt")
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleAccount)
                .build());

    }
}

import pulumi
import pulumi_aws as aws

example_account = aws.securityhub.Account("exampleAccount")
example_insight = aws.securityhub.Insight("exampleInsight",
    filters=aws.securityhub.InsightFiltersArgs(
        created_ats=[aws.securityhub.InsightFiltersCreatedAtArgs(
            date_range=aws.securityhub.InsightFiltersCreatedAtDateRangeArgs(
                unit="DAYS",
                value=5,
            ),
        )],
    ),
    group_by_attribute="CreatedAt",
    opts=pulumi.ResourceOptions(depends_on=[example_account]))

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const exampleAccount = new aws.securityhub.Account("exampleAccount", {});
const exampleInsight = new aws.securityhub.Insight("exampleInsight", {
    filters: {
        createdAts: [{
            dateRange: {
                unit: "DAYS",
                value: 5,
            },
        }],
    },
    groupByAttribute: "CreatedAt",
}, {
    dependsOn: [exampleAccount],
});

resources:
  exampleAccount:
    type: aws:securityhub:Account
  exampleInsight:
    type: aws:securityhub:Insight
    properties:
      filters:
        createdAts:
          - dateRange:
              unit: DAYS
              value: 5
      groupByAttribute: CreatedAt
    options:
      dependson:
        - ${exampleAccount}

Filter by destination IPv4 address

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var exampleAccount = new Aws.SecurityHub.Account("exampleAccount");

    var exampleInsight = new Aws.SecurityHub.Insight("exampleInsight", new()
    {
        Filters = new Aws.SecurityHub.Inputs.InsightFiltersArgs
        {
            NetworkDestinationIpv4s = new[]
            {
                new Aws.SecurityHub.Inputs.InsightFiltersNetworkDestinationIpv4Args
                {
                    Cidr = "10.0.0.0/16",
                },
            },
        },
        GroupByAttribute = "NetworkDestinationIpV4",
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            exampleAccount,
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/securityhub"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleAccount, err := securityhub.NewAccount(ctx, "exampleAccount", nil)
		if err != nil {
			return err
		}
		_, err = securityhub.NewInsight(ctx, "exampleInsight", &securityhub.InsightArgs{
			Filters: &securityhub.InsightFiltersArgs{
				NetworkDestinationIpv4s: securityhub.InsightFiltersNetworkDestinationIpv4Array{
					&securityhub.InsightFiltersNetworkDestinationIpv4Args{
						Cidr: pulumi.String("10.0.0.0/16"),
					},
				},
			},
			GroupByAttribute: pulumi.String("NetworkDestinationIpV4"),
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleAccount,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securityhub.Account;
import com.pulumi.aws.securityhub.Insight;
import com.pulumi.aws.securityhub.InsightArgs;
import com.pulumi.aws.securityhub.inputs.InsightFiltersArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleAccount = new Account("exampleAccount");

        var exampleInsight = new Insight("exampleInsight", InsightArgs.builder()        
            .filters(InsightFiltersArgs.builder()
                .networkDestinationIpv4s(InsightFiltersNetworkDestinationIpv4Args.builder()
                    .cidr("10.0.0.0/16")
                    .build())
                .build())
            .groupByAttribute("NetworkDestinationIpV4")
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleAccount)
                .build());

    }
}

import pulumi
import pulumi_aws as aws

example_account = aws.securityhub.Account("exampleAccount")
example_insight = aws.securityhub.Insight("exampleInsight",
    filters=aws.securityhub.InsightFiltersArgs(
        network_destination_ipv4s=[aws.securityhub.InsightFiltersNetworkDestinationIpv4Args(
            cidr="10.0.0.0/16",
        )],
    ),
    group_by_attribute="NetworkDestinationIpV4",
    opts=pulumi.ResourceOptions(depends_on=[example_account]))

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const exampleAccount = new aws.securityhub.Account("exampleAccount", {});
const exampleInsight = new aws.securityhub.Insight("exampleInsight", {
    filters: {
        networkDestinationIpv4s: [{
            cidr: "10.0.0.0/16",
        }],
    },
    groupByAttribute: "NetworkDestinationIpV4",
}, {
    dependsOn: [exampleAccount],
});

resources:
  exampleAccount:
    type: aws:securityhub:Account
  exampleInsight:
    type: aws:securityhub:Insight
    properties:
      filters:
        networkDestinationIpv4s:
          - cidr: 10.0.0.0/16
      groupByAttribute: NetworkDestinationIpV4
    options:
      dependson:
        - ${exampleAccount}

Filter by finding's confidence

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var exampleAccount = new Aws.SecurityHub.Account("exampleAccount");

    var exampleInsight = new Aws.SecurityHub.Insight("exampleInsight", new()
    {
        Filters = new Aws.SecurityHub.Inputs.InsightFiltersArgs
        {
            Confidences = new[]
            {
                new Aws.SecurityHub.Inputs.InsightFiltersConfidenceArgs
                {
                    Gte = "80",
                },
            },
        },
        GroupByAttribute = "Confidence",
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            exampleAccount,
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/securityhub"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleAccount, err := securityhub.NewAccount(ctx, "exampleAccount", nil)
		if err != nil {
			return err
		}
		_, err = securityhub.NewInsight(ctx, "exampleInsight", &securityhub.InsightArgs{
			Filters: &securityhub.InsightFiltersArgs{
				Confidences: securityhub.InsightFiltersConfidenceArray{
					&securityhub.InsightFiltersConfidenceArgs{
						Gte: pulumi.String("80"),
					},
				},
			},
			GroupByAttribute: pulumi.String("Confidence"),
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleAccount,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securityhub.Account;
import com.pulumi.aws.securityhub.Insight;
import com.pulumi.aws.securityhub.InsightArgs;
import com.pulumi.aws.securityhub.inputs.InsightFiltersArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleAccount = new Account("exampleAccount");

        var exampleInsight = new Insight("exampleInsight", InsightArgs.builder()        
            .filters(InsightFiltersArgs.builder()
                .confidences(InsightFiltersConfidenceArgs.builder()
                    .gte("80")
                    .build())
                .build())
            .groupByAttribute("Confidence")
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleAccount)
                .build());

    }
}

import pulumi
import pulumi_aws as aws

example_account = aws.securityhub.Account("exampleAccount")
example_insight = aws.securityhub.Insight("exampleInsight",
    filters=aws.securityhub.InsightFiltersArgs(
        confidences=[aws.securityhub.InsightFiltersConfidenceArgs(
            gte="80",
        )],
    ),
    group_by_attribute="Confidence",
    opts=pulumi.ResourceOptions(depends_on=[example_account]))

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const exampleAccount = new aws.securityhub.Account("exampleAccount", {});
const exampleInsight = new aws.securityhub.Insight("exampleInsight", {
    filters: {
        confidences: [{
            gte: "80",
        }],
    },
    groupByAttribute: "Confidence",
}, {
    dependsOn: [exampleAccount],
});

resources:
  exampleAccount:
    type: aws:securityhub:Account
  exampleInsight:
    type: aws:securityhub:Insight
    properties:
      filters:
        confidences:
          - gte: '80'
      groupByAttribute: Confidence
    options:
      dependson:
        - ${exampleAccount}

Filter by resource tags

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;

return await Deployment.RunAsync(() => 
{
    var exampleAccount = new Aws.SecurityHub.Account("exampleAccount");

    var exampleInsight = new Aws.SecurityHub.Insight("exampleInsight", new()
    {
        Filters = new Aws.SecurityHub.Inputs.InsightFiltersArgs
        {
            ResourceTags = new[]
            {
                new Aws.SecurityHub.Inputs.InsightFiltersResourceTagArgs
                {
                    Comparison = "EQUALS",
                    Key = "Environment",
                    Value = "Production",
                },
            },
        },
        GroupByAttribute = "ResourceTags",
    }, new CustomResourceOptions
    {
        DependsOn = new[]
        {
            exampleAccount,
        },
    });

});

package main

import (
	"github.com/pulumi/pulumi-aws/sdk/v5/go/aws/securityhub"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleAccount, err := securityhub.NewAccount(ctx, "exampleAccount", nil)
		if err != nil {
			return err
		}
		_, err = securityhub.NewInsight(ctx, "exampleInsight", &securityhub.InsightArgs{
			Filters: &securityhub.InsightFiltersArgs{
				ResourceTags: securityhub.InsightFiltersResourceTagArray{
					&securityhub.InsightFiltersResourceTagArgs{
						Comparison: pulumi.String("EQUALS"),
						Key:        pulumi.String("Environment"),
						Value:      pulumi.String("Production"),
					},
				},
			},
			GroupByAttribute: pulumi.String("ResourceTags"),
		}, pulumi.DependsOn([]pulumi.Resource{
			exampleAccount,
		}))
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securityhub.Account;
import com.pulumi.aws.securityhub.Insight;
import com.pulumi.aws.securityhub.InsightArgs;
import com.pulumi.aws.securityhub.inputs.InsightFiltersArgs;
import com.pulumi.resources.CustomResourceOptions;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var exampleAccount = new Account("exampleAccount");

        var exampleInsight = new Insight("exampleInsight", InsightArgs.builder()        
            .filters(InsightFiltersArgs.builder()
                .resourceTags(InsightFiltersResourceTagArgs.builder()
                    .comparison("EQUALS")
                    .key("Environment")
                    .value("Production")
                    .build())
                .build())
            .groupByAttribute("ResourceTags")
            .build(), CustomResourceOptions.builder()
                .dependsOn(exampleAccount)
                .build());

    }
}

import pulumi
import pulumi_aws as aws

example_account = aws.securityhub.Account("exampleAccount")
example_insight = aws.securityhub.Insight("exampleInsight",
    filters=aws.securityhub.InsightFiltersArgs(
        resource_tags=[aws.securityhub.InsightFiltersResourceTagArgs(
            comparison="EQUALS",
            key="Environment",
            value="Production",
        )],
    ),
    group_by_attribute="ResourceTags",
    opts=pulumi.ResourceOptions(depends_on=[example_account]))

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";

const exampleAccount = new aws.securityhub.Account("exampleAccount", {});
const exampleInsight = new aws.securityhub.Insight("exampleInsight", {
    filters: {
        resourceTags: [{
            comparison: "EQUALS",
            key: "Environment",
            value: "Production",
        }],
    },
    groupByAttribute: "ResourceTags",
}, {
    dependsOn: [exampleAccount],
});

resources:
  exampleAccount:
    type: aws:securityhub:Account
  exampleInsight:
    type: aws:securityhub:Insight
    properties:
      filters:
        resourceTags:
          - comparison: EQUALS
            key: Environment
            value: Production
      groupByAttribute: ResourceTags
    options:
      dependson:
        - ${exampleAccount}

Create Insight Resource

new Insight(name: string, args: InsightArgs, opts?: CustomResourceOptions);
@overload
def Insight(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            filters: Optional[InsightFiltersArgs] = None,
            group_by_attribute: Optional[str] = None,
            name: Optional[str] = None)
@overload
def Insight(resource_name: str,
            args: InsightArgs,
            opts: Optional[ResourceOptions] = None)
func NewInsight(ctx *Context, name string, args InsightArgs, opts ...ResourceOption) (*Insight, error)
public Insight(string name, InsightArgs args, CustomResourceOptions? opts = null)
public Insight(String name, InsightArgs args)
public Insight(String name, InsightArgs args, CustomResourceOptions options)

type: aws:securityhub:Insight
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
name string
The unique name of the resource.
args InsightArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name str
The unique name of the resource.
args InsightArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name string
The unique name of the resource.
args InsightArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name string
The unique name of the resource.
args InsightArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name String
The unique name of the resource.
args InsightArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Insight Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

The Insight resource accepts the following input properties:

Filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

GroupByAttribute string

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

Name string

The name of the custom insight.

Filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

GroupByAttribute string

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

Name string

The name of the custom insight.

filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

groupByAttribute String

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

name String

The name of the custom insight.

filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

groupByAttribute string

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

name string

The name of the custom insight.

filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

group_by_attribute str

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

name str

The name of the custom insight.

filters Property Map

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

groupByAttribute String

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

name String

The name of the custom insight.

Outputs

All input properties are implicitly available as output properties. Additionally, the Insight resource produces the following output properties:

Arn string

ARN of the insight.

Id string

The provider-assigned unique ID for this managed resource.

Arn string

ARN of the insight.

Id string

The provider-assigned unique ID for this managed resource.

arn String

ARN of the insight.

id String

The provider-assigned unique ID for this managed resource.

arn string

ARN of the insight.

id string

The provider-assigned unique ID for this managed resource.

arn str

ARN of the insight.

id str

The provider-assigned unique ID for this managed resource.

arn String

ARN of the insight.

id String

The provider-assigned unique ID for this managed resource.

Look up Existing Insight Resource

Get an existing Insight resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: InsightState, opts?: CustomResourceOptions): Insight
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        arn: Optional[str] = None,
        filters: Optional[InsightFiltersArgs] = None,
        group_by_attribute: Optional[str] = None,
        name: Optional[str] = None) -> Insight
func GetInsight(ctx *Context, name string, id IDInput, state *InsightState, opts ...ResourceOption) (*Insight, error)
public static Insight Get(string name, Input<string> id, InsightState? state, CustomResourceOptions? opts = null)
public static Insight get(String name, Output<String> id, InsightState state, CustomResourceOptions options)
Resource lookup is not supported in YAML
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name
The unique name of the resulting resource.
id
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
Arn string

ARN of the insight.

Filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

GroupByAttribute string

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

Name string

The name of the custom insight.

Arn string

ARN of the insight.

Filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

GroupByAttribute string

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

Name string

The name of the custom insight.

arn String

ARN of the insight.

filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

groupByAttribute String

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

name String

The name of the custom insight.

arn string

ARN of the insight.

filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

groupByAttribute string

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

name string

The name of the custom insight.

arn str

ARN of the insight.

filters InsightFiltersArgs

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

group_by_attribute str

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

name str

The name of the custom insight.

arn String

ARN of the insight.

filters Property Map

A configuration block including one or more (up to 10 distinct) attributes used to filter the findings included in the insight. The insight only includes findings that match criteria defined in the filters. See filters below for more details.

groupByAttribute String

The attribute used to group the findings for the insight e.g., if an insight is grouped by ResourceId, then the insight produces a list of resource identifiers.

name String

The name of the custom insight.

Supporting Types

InsightFilters

AwsAccountIds List<InsightFiltersAwsAccountId>

AWS account ID that a finding is generated in. See String_Filter below for more details.

CompanyNames List<InsightFiltersCompanyName>

The name of the findings provider (company) that owns the solution (product) that generates findings. See String_Filter below for more details.

ComplianceStatuses List<InsightFiltersComplianceStatus>

Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS AWS Foundations. Contains security standard-related finding details. See String Filter below for more details.

Confidences List<InsightFiltersConfidence>

A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

CreatedAts List<InsightFiltersCreatedAt>

An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security issue that a finding captured. See Date Filter below for more details.

Criticalities List<InsightFiltersCriticality>

The level of importance assigned to the resources associated with the finding. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

Descriptions List<InsightFiltersDescription>

A finding's description. See String Filter below for more details.

FindingProviderFieldsConfidences List<InsightFiltersFindingProviderFieldsConfidence>

The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

FindingProviderFieldsCriticalities List<InsightFiltersFindingProviderFieldsCriticality>

The finding provider value for the level of importance assigned to the resources associated with the findings. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

FindingProviderFieldsRelatedFindingsIds List<InsightFiltersFindingProviderFieldsRelatedFindingsId>

The finding identifier of a related finding that is identified by the finding provider. See String Filter below for more details.

FindingProviderFieldsRelatedFindingsProductArns List<InsightFiltersFindingProviderFieldsRelatedFindingsProductArn>

The ARN of the solution that generated a related finding that is identified by the finding provider. See String Filter below for more details.

FindingProviderFieldsSeverityLabels List<InsightFiltersFindingProviderFieldsSeverityLabel>

The finding provider value for the severity label. See String Filter below for more details.

FindingProviderFieldsSeverityOriginals List<InsightFiltersFindingProviderFieldsSeverityOriginal>

The finding provider's original value for the severity. See String Filter below for more details.

FindingProviderFieldsTypes List<InsightFiltersFindingProviderFieldsType>

One or more finding types that the finding provider assigned to the finding. Uses the format of namespace/category/classifier that classify a finding. Valid namespace values include: Software and Configuration Checks, TTPs, Effects, Unusual Behaviors, and Sensitive Data Identifications. See String Filter below for more details.

FirstObservedAts List<InsightFiltersFirstObservedAt>

An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential security issue that a finding captured. See Date Filter below for more details.

GeneratorIds List<InsightFiltersGeneratorId>

The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. See String Filter below for more details.

Ids List<InsightFiltersId>

The security findings provider-specific identifier for a finding. See String Filter below for more details.

Keywords List<InsightFiltersKeyword>

A keyword for a finding. See Keyword Filter below for more details.

LastObservedAts List<InsightFiltersLastObservedAt>

An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the potential security issue that a finding captured. See Date Filter below for more details.

MalwareNames List<InsightFiltersMalwareName>

The name of the malware that was observed. See String Filter below for more details.

MalwarePaths List<InsightFiltersMalwarePath>

The filesystem path of the malware that was observed. See String Filter below for more details.

MalwareStates List<InsightFiltersMalwareState>

The state of the malware that was observed. See String Filter below for more details.

MalwareTypes List<InsightFiltersMalwareType>

The type of the malware that was observed. See String Filter below for more details.

NetworkDestinationDomains List<InsightFiltersNetworkDestinationDomain>

The destination domain of network-related information about a finding. See String Filter below for more details.

NetworkDestinationIpv4s List<InsightFiltersNetworkDestinationIpv4>

The destination IPv4 address of network-related information about a finding. See Ip Filter below for more details.

NetworkDestinationIpv6s List<InsightFiltersNetworkDestinationIpv6>

The destination IPv6 address of network-related information about a finding. See Ip Filter below for more details.

NetworkDestinationPorts List<InsightFiltersNetworkDestinationPort>

The destination port of network-related information about a finding. See Number Filter below for more details.

NetworkDirections List<InsightFiltersNetworkDirection>

Indicates the direction of network traffic associated with a finding. See String Filter below for more details.

NetworkProtocols List<InsightFiltersNetworkProtocol>

The protocol of network-related information about a finding. See String Filter below for more details.

NetworkSourceDomains List<InsightFiltersNetworkSourceDomain>

The source domain of network-related information about a finding. See String Filter below for more details.

NetworkSourceIpv4s List<InsightFiltersNetworkSourceIpv4>

The source IPv4 address of network-related information about a finding. See Ip Filter below for more details.

NetworkSourceIpv6s List<InsightFiltersNetworkSourceIpv6>

The source IPv6 address of network-related information about a finding. See Ip Filter below for more details.

NetworkSourceMacs List<InsightFiltersNetworkSourceMac>

The source media access control (MAC) address of network-related information about a finding. See String Filter below for more details.

NetworkSourcePorts List<InsightFiltersNetworkSourcePort>

The source port of network-related information about a finding. See Number Filter below for more details.

NoteTexts List<InsightFiltersNoteText>

The text of a note. See String Filter below for more details.

NoteUpdatedAts List<InsightFiltersNoteUpdatedAt>

The timestamp of when the note was updated. See Date Filter below for more details.

NoteUpdatedBies List<InsightFiltersNoteUpdatedBy>

The principal that created a note. See String Filter below for more details.

ProcessLaunchedAts List<InsightFiltersProcessLaunchedAt>

The date/time that the process was launched. See Date Filter below for more details.

ProcessNames List<InsightFiltersProcessName>

The name of the process. See String Filter below for more details.

ProcessParentPids List<InsightFiltersProcessParentPid>

The parent process ID. See Number Filter below for more details.

ProcessPaths List<InsightFiltersProcessPath>

The path to the process executable. See String Filter below for more details.

ProcessPids List<InsightFiltersProcessPid>

The process ID. See Number Filter below for more details.

ProcessTerminatedAts List<InsightFiltersProcessTerminatedAt>

The date/time that the process was terminated. See Date Filter below for more details.

ProductArns List<InsightFiltersProductArn>

The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub. See String Filter below for more details.

ProductFields List<InsightFiltersProductField>

A data type where security-findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format. See Map Filter below for more details.

ProductNames List<InsightFiltersProductName>

The name of the solution (product) that generates findings. See String Filter below for more details.

RecommendationTexts List<InsightFiltersRecommendationText>

The recommendation of what to do about the issue described in a finding. See String Filter below for more details.

RecordStates List<InsightFiltersRecordState>

The updated record state for the finding. See String Filter below for more details.

RelatedFindingsIds List<InsightFiltersRelatedFindingsId>

The solution-generated identifier for a related finding. See String Filter below for more details.

RelatedFindingsProductArns List<InsightFiltersRelatedFindingsProductArn>

The ARN of the solution that generated a related finding. See String Filter below for more details.

ResourceAwsEc2InstanceIamInstanceProfileArns List<InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn>

The IAM profile ARN of the instance. See String Filter below for more details.

ResourceAwsEc2InstanceImageIds List<InsightFiltersResourceAwsEc2InstanceImageId>

The Amazon Machine Image (AMI) ID of the instance. See String Filter below for more details.

ResourceAwsEc2InstanceIpv4Addresses List<InsightFiltersResourceAwsEc2InstanceIpv4Address>

The IPv4 addresses associated with the instance. See Ip Filter below for more details.

ResourceAwsEc2InstanceIpv6Addresses List<InsightFiltersResourceAwsEc2InstanceIpv6Address>

The IPv6 addresses associated with the instance. See Ip Filter below for more details.

ResourceAwsEc2InstanceKeyNames List<InsightFiltersResourceAwsEc2InstanceKeyName>

The key name associated with the instance. See String Filter below for more details.

ResourceAwsEc2InstanceLaunchedAts List<InsightFiltersResourceAwsEc2InstanceLaunchedAt>

The date and time the instance was launched. See Date Filter below for more details.

ResourceAwsEc2InstanceSubnetIds List<InsightFiltersResourceAwsEc2InstanceSubnetId>

The identifier of the subnet that the instance was launched in. See String Filter below for more details.

ResourceAwsEc2InstanceTypes List<InsightFiltersResourceAwsEc2InstanceType>

The instance type of the instance. See String Filter below for more details.

ResourceAwsEc2InstanceVpcIds List<InsightFiltersResourceAwsEc2InstanceVpcId>

The identifier of the VPC that the instance was launched in. See String Filter below for more details.

ResourceAwsIamAccessKeyCreatedAts List<InsightFiltersResourceAwsIamAccessKeyCreatedAt>

The creation date/time of the IAM access key related to a finding. See Date Filter below for more details.

ResourceAwsIamAccessKeyStatuses List<InsightFiltersResourceAwsIamAccessKeyStatus>

The status of the IAM access key related to a finding. See String Filter below for more details.

ResourceAwsIamAccessKeyUserNames List<InsightFiltersResourceAwsIamAccessKeyUserName>

The user associated with the IAM access key related to a finding. See String Filter below for more details.

ResourceAwsS3BucketOwnerIds List<InsightFiltersResourceAwsS3BucketOwnerId>

The canonical user ID of the owner of the S3 bucket. See String Filter below for more details.

ResourceAwsS3BucketOwnerNames List<InsightFiltersResourceAwsS3BucketOwnerName>

The display name of the owner of the S3 bucket. See String Filter below for more details.

ResourceContainerImageIds List<InsightFiltersResourceContainerImageId>

The identifier of the image related to a finding. See String Filter below for more details.

ResourceContainerImageNames List<InsightFiltersResourceContainerImageName>

The name of the image related to a finding. See String Filter below for more details.

ResourceContainerLaunchedAts List<InsightFiltersResourceContainerLaunchedAt>

The date/time that the container was started. See Date Filter below for more details.

ResourceContainerNames List<InsightFiltersResourceContainerName>

The name of the container related to a finding. See String Filter below for more details.

ResourceDetailsOthers List<InsightFiltersResourceDetailsOther>

The details of a resource that doesn't have a specific subfield for the resource type defined. See Map Filter below for more details.

ResourceIds List<InsightFiltersResourceId>

The canonical identifier for the given resource type. See String Filter below for more details.

ResourcePartitions List<InsightFiltersResourcePartition>

The canonical AWS partition name that the Region is assigned to. See String Filter below for more details.

ResourceRegions List<InsightFiltersResourceRegion>

The canonical AWS external Region name where this resource is located. See String Filter below for more details.

ResourceTags List<InsightFiltersResourceTag>

A list of AWS tags associated with a resource at the time the finding was processed. See Map Filter below for more details.

ResourceTypes List<InsightFiltersResourceType>

Specifies the type of the resource that details are provided for. See String Filter below for more details.

SeverityLabels List<InsightFiltersSeverityLabel>

The label of a finding's severity. See String Filter below for more details.

SourceUrls List<InsightFiltersSourceUrl>

A URL that links to a page about the current finding in the security-findings provider's solution. See String Filter below for more details.

ThreatIntelIndicatorCategories List<InsightFiltersThreatIntelIndicatorCategory>

The category of a threat intelligence indicator. See String Filter below for more details.

ThreatIntelIndicatorLastObservedAts List<InsightFiltersThreatIntelIndicatorLastObservedAt>

The date/time of the last observation of a threat intelligence indicator. See Date Filter below for more details.

ThreatIntelIndicatorSourceUrls List<InsightFiltersThreatIntelIndicatorSourceUrl>

The URL for more details from the source of the threat intelligence. See String Filter below for more details.

ThreatIntelIndicatorSources List<InsightFiltersThreatIntelIndicatorSource>

The source of the threat intelligence. See String Filter below for more details.

ThreatIntelIndicatorTypes List<InsightFiltersThreatIntelIndicatorType>

The type of a threat intelligence indicator. See String Filter below for more details.

ThreatIntelIndicatorValues List<InsightFiltersThreatIntelIndicatorValue>

The value of a threat intelligence indicator. See String Filter below for more details.

Titles List<InsightFiltersTitle>

A finding's title. See String Filter below for more details.

Types List<InsightFiltersType>

A finding type in the format of namespace/category/classifier that classifies a finding. See String Filter below for more details.

UpdatedAts List<InsightFiltersUpdatedAt>

An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding record. See Date Filter below for more details.

UserDefinedValues List<InsightFiltersUserDefinedValue>

A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. See Map Filter below for more details.

VerificationStates List<InsightFiltersVerificationState>

The veracity of a finding. See String Filter below for more details.

WorkflowStatuses List<InsightFiltersWorkflowStatus>

The status of the investigation into a finding. See Workflow Status Filter below for more details.

AwsAccountIds []InsightFiltersAwsAccountId

AWS account ID that a finding is generated in. See String_Filter below for more details.

CompanyNames []InsightFiltersCompanyName

The name of the findings provider (company) that owns the solution (product) that generates findings. See String_Filter below for more details.

ComplianceStatuses []InsightFiltersComplianceStatus

Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS AWS Foundations. Contains security standard-related finding details. See String Filter below for more details.

Confidences []InsightFiltersConfidence

A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

CreatedAts []InsightFiltersCreatedAt

An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security issue that a finding captured. See Date Filter below for more details.

Criticalities []InsightFiltersCriticality

The level of importance assigned to the resources associated with the finding. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

Descriptions []InsightFiltersDescription

A finding's description. See String Filter below for more details.

FindingProviderFieldsConfidences []InsightFiltersFindingProviderFieldsConfidence

The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

FindingProviderFieldsCriticalities []InsightFiltersFindingProviderFieldsCriticality

The finding provider value for the level of importance assigned to the resources associated with the findings. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

FindingProviderFieldsRelatedFindingsIds []InsightFiltersFindingProviderFieldsRelatedFindingsId

The finding identifier of a related finding that is identified by the finding provider. See String Filter below for more details.

FindingProviderFieldsRelatedFindingsProductArns []InsightFiltersFindingProviderFieldsRelatedFindingsProductArn

The ARN of the solution that generated a related finding that is identified by the finding provider. See String Filter below for more details.

FindingProviderFieldsSeverityLabels []InsightFiltersFindingProviderFieldsSeverityLabel

The finding provider value for the severity label. See String Filter below for more details.

FindingProviderFieldsSeverityOriginals []InsightFiltersFindingProviderFieldsSeverityOriginal

The finding provider's original value for the severity. See String Filter below for more details.

FindingProviderFieldsTypes []InsightFiltersFindingProviderFieldsType

One or more finding types that the finding provider assigned to the finding. Uses the format of namespace/category/classifier that classify a finding. Valid namespace values include: Software and Configuration Checks, TTPs, Effects, Unusual Behaviors, and Sensitive Data Identifications. See String Filter below for more details.

FirstObservedAts []InsightFiltersFirstObservedAt

An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential security issue that a finding captured. See Date Filter below for more details.

GeneratorIds []InsightFiltersGeneratorId

The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. See String Filter below for more details.

Ids []InsightFiltersId

The security findings provider-specific identifier for a finding. See String Filter below for more details.

Keywords []InsightFiltersKeyword

A keyword for a finding. See Keyword Filter below for more details.

LastObservedAts []InsightFiltersLastObservedAt

An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the potential security issue that a finding captured. See Date Filter below for more details.

MalwareNames []InsightFiltersMalwareName

The name of the malware that was observed. See String Filter below for more details.

MalwarePaths []InsightFiltersMalwarePath

The filesystem path of the malware that was observed. See String Filter below for more details.

MalwareStates []InsightFiltersMalwareState

The state of the malware that was observed. See String Filter below for more details.

MalwareTypes []InsightFiltersMalwareType

The type of the malware that was observed. See String Filter below for more details.

NetworkDestinationDomains []InsightFiltersNetworkDestinationDomain

The destination domain of network-related information about a finding. See String Filter below for more details.

NetworkDestinationIpv4s []InsightFiltersNetworkDestinationIpv4

The destination IPv4 address of network-related information about a finding. See Ip Filter below for more details.

NetworkDestinationIpv6s []InsightFiltersNetworkDestinationIpv6

The destination IPv6 address of network-related information about a finding. See Ip Filter below for more details.

NetworkDestinationPorts []InsightFiltersNetworkDestinationPort

The destination port of network-related information about a finding. See Number Filter below for more details.

NetworkDirections []InsightFiltersNetworkDirection

Indicates the direction of network traffic associated with a finding. See String Filter below for more details.

NetworkProtocols []InsightFiltersNetworkProtocol

The protocol of network-related information about a finding. See String Filter below for more details.

NetworkSourceDomains []InsightFiltersNetworkSourceDomain

The source domain of network-related information about a finding. See String Filter below for more details.

NetworkSourceIpv4s []InsightFiltersNetworkSourceIpv4

The source IPv4 address of network-related information about a finding. See Ip Filter below for more details.

NetworkSourceIpv6s []InsightFiltersNetworkSourceIpv6

The source IPv6 address of network-related information about a finding. See Ip Filter below for more details.

NetworkSourceMacs []InsightFiltersNetworkSourceMac

The source media access control (MAC) address of network-related information about a finding. See String Filter below for more details.

NetworkSourcePorts []InsightFiltersNetworkSourcePort

The source port of network-related information about a finding. See Number Filter below for more details.

NoteTexts []InsightFiltersNoteText

The text of a note. See String Filter below for more details.

NoteUpdatedAts []InsightFiltersNoteUpdatedAt

The timestamp of when the note was updated. See Date Filter below for more details.

NoteUpdatedBies []InsightFiltersNoteUpdatedBy

The principal that created a note. See String Filter below for more details.

ProcessLaunchedAts []InsightFiltersProcessLaunchedAt

The date/time that the process was launched. See Date Filter below for more details.

ProcessNames []InsightFiltersProcessName

The name of the process. See String Filter below for more details.

ProcessParentPids []InsightFiltersProcessParentPid

The parent process ID. See Number Filter below for more details.

ProcessPaths []InsightFiltersProcessPath

The path to the process executable. See String Filter below for more details.

ProcessPids []InsightFiltersProcessPid

The process ID. See Number Filter below for more details.

ProcessTerminatedAts []InsightFiltersProcessTerminatedAt

The date/time that the process was terminated. See Date Filter below for more details.

ProductArns []InsightFiltersProductArn

The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub. See String Filter below for more details.

ProductFields []InsightFiltersProductField

A data type where security-findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format. See Map Filter below for more details.

ProductNames []InsightFiltersProductName

The name of the solution (product) that generates findings. See String Filter below for more details.

RecommendationTexts []InsightFiltersRecommendationText

The recommendation of what to do about the issue described in a finding. See String Filter below for more details.

RecordStates []InsightFiltersRecordState

The updated record state for the finding. See String Filter below for more details.

RelatedFindingsIds []InsightFiltersRelatedFindingsId

The solution-generated identifier for a related finding. See String Filter below for more details.

RelatedFindingsProductArns []InsightFiltersRelatedFindingsProductArn

The ARN of the solution that generated a related finding. See String Filter below for more details.

ResourceAwsEc2InstanceIamInstanceProfileArns []InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn

The IAM profile ARN of the instance. See String Filter below for more details.

ResourceAwsEc2InstanceImageIds []InsightFiltersResourceAwsEc2InstanceImageId

The Amazon Machine Image (AMI) ID of the instance. See String Filter below for more details.

ResourceAwsEc2InstanceIpv4Addresses []InsightFiltersResourceAwsEc2InstanceIpv4Address

The IPv4 addresses associated with the instance. See Ip Filter below for more details.

ResourceAwsEc2InstanceIpv6Addresses []InsightFiltersResourceAwsEc2InstanceIpv6Address

The IPv6 addresses associated with the instance. See Ip Filter below for more details.

ResourceAwsEc2InstanceKeyNames []InsightFiltersResourceAwsEc2InstanceKeyName

The key name associated with the instance. See String Filter below for more details.

ResourceAwsEc2InstanceLaunchedAts []InsightFiltersResourceAwsEc2InstanceLaunchedAt

The date and time the instance was launched. See Date Filter below for more details.

ResourceAwsEc2InstanceSubnetIds []InsightFiltersResourceAwsEc2InstanceSubnetId

The identifier of the subnet that the instance was launched in. See String Filter below for more details.

ResourceAwsEc2InstanceTypes []InsightFiltersResourceAwsEc2InstanceType

The instance type of the instance. See String Filter below for more details.

ResourceAwsEc2InstanceVpcIds []InsightFiltersResourceAwsEc2InstanceVpcId

The identifier of the VPC that the instance was launched in. See String Filter below for more details.

ResourceAwsIamAccessKeyCreatedAts []InsightFiltersResourceAwsIamAccessKeyCreatedAt

The creation date/time of the IAM access key related to a finding. See Date Filter below for more details.

ResourceAwsIamAccessKeyStatuses []InsightFiltersResourceAwsIamAccessKeyStatus

The status of the IAM access key related to a finding. See String Filter below for more details.

ResourceAwsIamAccessKeyUserNames []InsightFiltersResourceAwsIamAccessKeyUserName

The user associated with the IAM access key related to a finding. See String Filter below for more details.

ResourceAwsS3BucketOwnerIds []InsightFiltersResourceAwsS3BucketOwnerId

The canonical user ID of the owner of the S3 bucket. See String Filter below for more details.

ResourceAwsS3BucketOwnerNames []InsightFiltersResourceAwsS3BucketOwnerName

The display name of the owner of the S3 bucket. See String Filter below for more details.

ResourceContainerImageIds []InsightFiltersResourceContainerImageId

The identifier of the image related to a finding. See String Filter below for more details.

ResourceContainerImageNames []InsightFiltersResourceContainerImageName

The name of the image related to a finding. See String Filter below for more details.

ResourceContainerLaunchedAts []InsightFiltersResourceContainerLaunchedAt

The date/time that the container was started. See Date Filter below for more details.

ResourceContainerNames []InsightFiltersResourceContainerName

The name of the container related to a finding. See String Filter below for more details.

ResourceDetailsOthers []InsightFiltersResourceDetailsOther

The details of a resource that doesn't have a specific subfield for the resource type defined. See Map Filter below for more details.

ResourceIds []InsightFiltersResourceId

The canonical identifier for the given resource type. See String Filter below for more details.

ResourcePartitions []InsightFiltersResourcePartition

The canonical AWS partition name that the Region is assigned to. See String Filter below for more details.

ResourceRegions []InsightFiltersResourceRegion

The canonical AWS external Region name where this resource is located. See String Filter below for more details.

ResourceTags []InsightFiltersResourceTag

A list of AWS tags associated with a resource at the time the finding was processed. See Map Filter below for more details.

ResourceTypes []InsightFiltersResourceType

Specifies the type of the resource that details are provided for. See String Filter below for more details.

SeverityLabels []InsightFiltersSeverityLabel

The label of a finding's severity. See String Filter below for more details.

SourceUrls []InsightFiltersSourceUrl

A URL that links to a page about the current finding in the security-findings provider's solution. See String Filter below for more details.

ThreatIntelIndicatorCategories []InsightFiltersThreatIntelIndicatorCategory

The category of a threat intelligence indicator. See String Filter below for more details.

ThreatIntelIndicatorLastObservedAts []InsightFiltersThreatIntelIndicatorLastObservedAt

The date/time of the last observation of a threat intelligence indicator. See Date Filter below for more details.

ThreatIntelIndicatorSourceUrls []InsightFiltersThreatIntelIndicatorSourceUrl

The URL for more details from the source of the threat intelligence. See String Filter below for more details.

ThreatIntelIndicatorSources []InsightFiltersThreatIntelIndicatorSource

The source of the threat intelligence. See String Filter below for more details.

ThreatIntelIndicatorTypes []InsightFiltersThreatIntelIndicatorType

The type of a threat intelligence indicator. See String Filter below for more details.

ThreatIntelIndicatorValues []InsightFiltersThreatIntelIndicatorValue

The value of a threat intelligence indicator. See String Filter below for more details.

Titles []InsightFiltersTitle

A finding's title. See String Filter below for more details.

Types []InsightFiltersType

A finding type in the format of namespace/category/classifier that classifies a finding. See String Filter below for more details.

UpdatedAts []InsightFiltersUpdatedAt

An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding record. See Date Filter below for more details.

UserDefinedValues []InsightFiltersUserDefinedValue

A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. See Map Filter below for more details.

VerificationStates []InsightFiltersVerificationState

The veracity of a finding. See String Filter below for more details.

WorkflowStatuses []InsightFiltersWorkflowStatus

The status of the investigation into a finding. See Workflow Status Filter below for more details.

awsAccountIds List<InsightFiltersAwsAccountId>

AWS account ID that a finding is generated in. See String_Filter below for more details.

companyNames List<InsightFiltersCompanyName>

The name of the findings provider (company) that owns the solution (product) that generates findings. See String_Filter below for more details.

complianceStatuses List<InsightFiltersComplianceStatus>

Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS AWS Foundations. Contains security standard-related finding details. See String Filter below for more details.

confidences List<InsightFiltersConfidence>

A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

createdAts List<InsightFiltersCreatedAt>

An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security issue that a finding captured. See Date Filter below for more details.

criticalities List<InsightFiltersCriticality>

The level of importance assigned to the resources associated with the finding. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

descriptions List<InsightFiltersDescription>

A finding's description. See String Filter below for more details.

findingProviderFieldsConfidences List<InsightFiltersFindingProviderFieldsConfidence>

The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

findingProviderFieldsCriticalities List<InsightFiltersFindingProviderFieldsCriticality>

The finding provider value for the level of importance assigned to the resources associated with the findings. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

findingProviderFieldsRelatedFindingsIds List<InsightFiltersFindingProviderFieldsRelatedFindingsId>

The finding identifier of a related finding that is identified by the finding provider. See String Filter below for more details.

findingProviderFieldsRelatedFindingsProductArns List<InsightFiltersFindingProviderFieldsRelatedFindingsProductArn>

The ARN of the solution that generated a related finding that is identified by the finding provider. See String Filter below for more details.

findingProviderFieldsSeverityLabels List<InsightFiltersFindingProviderFieldsSeverityLabel>

The finding provider value for the severity label. See String Filter below for more details.

findingProviderFieldsSeverityOriginals List<InsightFiltersFindingProviderFieldsSeverityOriginal>

The finding provider's original value for the severity. See String Filter below for more details.

findingProviderFieldsTypes List<InsightFiltersFindingProviderFieldsType>

One or more finding types that the finding provider assigned to the finding. Uses the format of namespace/category/classifier that classify a finding. Valid namespace values include: Software and Configuration Checks, TTPs, Effects, Unusual Behaviors, and Sensitive Data Identifications. See String Filter below for more details.

firstObservedAts List<InsightFiltersFirstObservedAt>

An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential security issue that a finding captured. See Date Filter below for more details.

generatorIds List<InsightFiltersGeneratorId>

The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. See String Filter below for more details.

ids List<InsightFiltersId>

The security findings provider-specific identifier for a finding. See String Filter below for more details.

keywords List<InsightFiltersKeyword>

A keyword for a finding. See Keyword Filter below for more details.

lastObservedAts List<InsightFiltersLastObservedAt>

An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the potential security issue that a finding captured. See Date Filter below for more details.

malwareNames List<InsightFiltersMalwareName>

The name of the malware that was observed. See String Filter below for more details.

malwarePaths List<InsightFiltersMalwarePath>

The filesystem path of the malware that was observed. See String Filter below for more details.

malwareStates List<InsightFiltersMalwareState>

The state of the malware that was observed. See String Filter below for more details.

malwareTypes List<InsightFiltersMalwareType>

The type of the malware that was observed. See String Filter below for more details.

networkDestinationDomains List<InsightFiltersNetworkDestinationDomain>

The destination domain of network-related information about a finding. See String Filter below for more details.

networkDestinationIpv4s List<InsightFiltersNetworkDestinationIpv4>

The destination IPv4 address of network-related information about a finding. See Ip Filter below for more details.

networkDestinationIpv6s List<InsightFiltersNetworkDestinationIpv6>

The destination IPv6 address of network-related information about a finding. See Ip Filter below for more details.

networkDestinationPorts List<InsightFiltersNetworkDestinationPort>

The destination port of network-related information about a finding. See Number Filter below for more details.

networkDirections List<InsightFiltersNetworkDirection>

Indicates the direction of network traffic associated with a finding. See String Filter below for more details.

networkProtocols List<InsightFiltersNetworkProtocol>

The protocol of network-related information about a finding. See String Filter below for more details.

networkSourceDomains List<InsightFiltersNetworkSourceDomain>

The source domain of network-related information about a finding. See String Filter below for more details.

networkSourceIpv4s List<InsightFiltersNetworkSourceIpv4>

The source IPv4 address of network-related information about a finding. See Ip Filter below for more details.

networkSourceIpv6s List<InsightFiltersNetworkSourceIpv6>

The source IPv6 address of network-related information about a finding. See Ip Filter below for more details.

networkSourceMacs List<InsightFiltersNetworkSourceMac>

The source media access control (MAC) address of network-related information about a finding. See String Filter below for more details.

networkSourcePorts List<InsightFiltersNetworkSourcePort>

The source port of network-related information about a finding. See Number Filter below for more details.

noteTexts List<InsightFiltersNoteText>

The text of a note. See String Filter below for more details.

noteUpdatedAts List<InsightFiltersNoteUpdatedAt>

The timestamp of when the note was updated. See Date Filter below for more details.

noteUpdatedBies List<InsightFiltersNoteUpdatedBy>

The principal that created a note. See String Filter below for more details.

processLaunchedAts List<InsightFiltersProcessLaunchedAt>

The date/time that the process was launched. See Date Filter below for more details.

processNames List<InsightFiltersProcessName>

The name of the process. See String Filter below for more details.

processParentPids List<InsightFiltersProcessParentPid>

The parent process ID. See Number Filter below for more details.

processPaths List<InsightFiltersProcessPath>

The path to the process executable. See String Filter below for more details.

processPids List<InsightFiltersProcessPid>

The process ID. See Number Filter below for more details.

processTerminatedAts List<InsightFiltersProcessTerminatedAt>

The date/time that the process was terminated. See Date Filter below for more details.

productArns List<InsightFiltersProductArn>

The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub. See String Filter below for more details.

productFields List<InsightFiltersProductField>

A data type where security-findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format. See Map Filter below for more details.

productNames List<InsightFiltersProductName>

The name of the solution (product) that generates findings. See String Filter below for more details.

recommendationTexts List<InsightFiltersRecommendationText>

The recommendation of what to do about the issue described in a finding. See String Filter below for more details.

recordStates List<InsightFiltersRecordState>

The updated record state for the finding. See String Filter below for more details.

relatedFindingsIds List<InsightFiltersRelatedFindingsId>

The solution-generated identifier for a related finding. See String Filter below for more details.

relatedFindingsProductArns List<InsightFiltersRelatedFindingsProductArn>

The ARN of the solution that generated a related finding. See String Filter below for more details.

resourceAwsEc2InstanceIamInstanceProfileArns List<InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn>

The IAM profile ARN of the instance. See String Filter below for more details.

resourceAwsEc2InstanceImageIds List<InsightFiltersResourceAwsEc2InstanceImageId>

The Amazon Machine Image (AMI) ID of the instance. See String Filter below for more details.

resourceAwsEc2InstanceIpv4Addresses List<InsightFiltersResourceAwsEc2InstanceIpv4Address>

The IPv4 addresses associated with the instance. See Ip Filter below for more details.

resourceAwsEc2InstanceIpv6Addresses List<InsightFiltersResourceAwsEc2InstanceIpv6Address>

The IPv6 addresses associated with the instance. See Ip Filter below for more details.

resourceAwsEc2InstanceKeyNames List<InsightFiltersResourceAwsEc2InstanceKeyName>

The key name associated with the instance. See String Filter below for more details.

resourceAwsEc2InstanceLaunchedAts List<InsightFiltersResourceAwsEc2InstanceLaunchedAt>

The date and time the instance was launched. See Date Filter below for more details.

resourceAwsEc2InstanceSubnetIds List<InsightFiltersResourceAwsEc2InstanceSubnetId>

The identifier of the subnet that the instance was launched in. See String Filter below for more details.

resourceAwsEc2InstanceTypes List<InsightFiltersResourceAwsEc2InstanceType>

The instance type of the instance. See String Filter below for more details.

resourceAwsEc2InstanceVpcIds List<InsightFiltersResourceAwsEc2InstanceVpcId>

The identifier of the VPC that the instance was launched in. See String Filter below for more details.

resourceAwsIamAccessKeyCreatedAts List<InsightFiltersResourceAwsIamAccessKeyCreatedAt>

The creation date/time of the IAM access key related to a finding. See Date Filter below for more details.

resourceAwsIamAccessKeyStatuses List<InsightFiltersResourceAwsIamAccessKeyStatus>

The status of the IAM access key related to a finding. See String Filter below for more details.

resourceAwsIamAccessKeyUserNames List<InsightFiltersResourceAwsIamAccessKeyUserName>

The user associated with the IAM access key related to a finding. See String Filter below for more details.

resourceAwsS3BucketOwnerIds List<InsightFiltersResourceAwsS3BucketOwnerId>

The canonical user ID of the owner of the S3 bucket. See String Filter below for more details.

resourceAwsS3BucketOwnerNames List<InsightFiltersResourceAwsS3BucketOwnerName>

The display name of the owner of the S3 bucket. See String Filter below for more details.

resourceContainerImageIds List<InsightFiltersResourceContainerImageId>

The identifier of the image related to a finding. See String Filter below for more details.

resourceContainerImageNames List<InsightFiltersResourceContainerImageName>

The name of the image related to a finding. See String Filter below for more details.

resourceContainerLaunchedAts List<InsightFiltersResourceContainerLaunchedAt>

The date/time that the container was started. See Date Filter below for more details.

resourceContainerNames List<InsightFiltersResourceContainerName>

The name of the container related to a finding. See String Filter below for more details.

resourceDetailsOthers List<InsightFiltersResourceDetailsOther>

The details of a resource that doesn't have a specific subfield for the resource type defined. See Map Filter below for more details.

resourceIds List<InsightFiltersResourceId>

The canonical identifier for the given resource type. See String Filter below for more details.

resourcePartitions List<InsightFiltersResourcePartition>

The canonical AWS partition name that the Region is assigned to. See String Filter below for more details.

resourceRegions List<InsightFiltersResourceRegion>

The canonical AWS external Region name where this resource is located. See String Filter below for more details.

resourceTags List<InsightFiltersResourceTag>

A list of AWS tags associated with a resource at the time the finding was processed. See Map Filter below for more details.

resourceTypes List<InsightFiltersResourceType>

Specifies the type of the resource that details are provided for. See String Filter below for more details.

severityLabels List<InsightFiltersSeverityLabel>

The label of a finding's severity. See String Filter below for more details.

sourceUrls List<InsightFiltersSourceUrl>

A URL that links to a page about the current finding in the security-findings provider's solution. See String Filter below for more details.

threatIntelIndicatorCategories List<InsightFiltersThreatIntelIndicatorCategory>

The category of a threat intelligence indicator. See String Filter below for more details.

threatIntelIndicatorLastObservedAts List<InsightFiltersThreatIntelIndicatorLastObservedAt>

The date/time of the last observation of a threat intelligence indicator. See Date Filter below for more details.

threatIntelIndicatorSourceUrls List<InsightFiltersThreatIntelIndicatorSourceUrl>

The URL for more details from the source of the threat intelligence. See String Filter below for more details.

threatIntelIndicatorSources List<InsightFiltersThreatIntelIndicatorSource>

The source of the threat intelligence. See String Filter below for more details.

threatIntelIndicatorTypes List<InsightFiltersThreatIntelIndicatorType>

The type of a threat intelligence indicator. See String Filter below for more details.

threatIntelIndicatorValues List<InsightFiltersThreatIntelIndicatorValue>

The value of a threat intelligence indicator. See String Filter below for more details.

titles List<InsightFiltersTitle>

A finding's title. See String Filter below for more details.

types List<InsightFiltersType>

A finding type in the format of namespace/category/classifier that classifies a finding. See String Filter below for more details.

updatedAts List<InsightFiltersUpdatedAt>

An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding record. See Date Filter below for more details.

userDefinedValues List<InsightFiltersUserDefinedValue>

A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. See Map Filter below for more details.

verificationStates List<InsightFiltersVerificationState>

The veracity of a finding. See String Filter below for more details.

workflowStatuses List<InsightFiltersWorkflowStatus>

The status of the investigation into a finding. See Workflow Status Filter below for more details.

awsAccountIds InsightFiltersAwsAccountId[]

AWS account ID that a finding is generated in. See String_Filter below for more details.

companyNames InsightFiltersCompanyName[]

The name of the findings provider (company) that owns the solution (product) that generates findings. See String_Filter below for more details.

complianceStatuses InsightFiltersComplianceStatus[]

Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS AWS Foundations. Contains security standard-related finding details. See String Filter below for more details.

confidences InsightFiltersConfidence[]

A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

createdAts InsightFiltersCreatedAt[]

An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security issue that a finding captured. See Date Filter below for more details.

criticalities InsightFiltersCriticality[]

The level of importance assigned to the resources associated with the finding. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

descriptions InsightFiltersDescription[]

A finding's description. See String Filter below for more details.

findingProviderFieldsConfidences InsightFiltersFindingProviderFieldsConfidence[]

The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

findingProviderFieldsCriticalities InsightFiltersFindingProviderFieldsCriticality[]

The finding provider value for the level of importance assigned to the resources associated with the findings. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

findingProviderFieldsRelatedFindingsIds InsightFiltersFindingProviderFieldsRelatedFindingsId[]

The finding identifier of a related finding that is identified by the finding provider. See String Filter below for more details.

findingProviderFieldsRelatedFindingsProductArns InsightFiltersFindingProviderFieldsRelatedFindingsProductArn[]

The ARN of the solution that generated a related finding that is identified by the finding provider. See String Filter below for more details.

findingProviderFieldsSeverityLabels InsightFiltersFindingProviderFieldsSeverityLabel[]

The finding provider value for the severity label. See String Filter below for more details.

findingProviderFieldsSeverityOriginals InsightFiltersFindingProviderFieldsSeverityOriginal[]

The finding provider's original value for the severity. See String Filter below for more details.

findingProviderFieldsTypes InsightFiltersFindingProviderFieldsType[]

One or more finding types that the finding provider assigned to the finding. Uses the format of namespace/category/classifier that classify a finding. Valid namespace values include: Software and Configuration Checks, TTPs, Effects, Unusual Behaviors, and Sensitive Data Identifications. See String Filter below for more details.

firstObservedAts InsightFiltersFirstObservedAt[]

An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential security issue that a finding captured. See Date Filter below for more details.

generatorIds InsightFiltersGeneratorId[]

The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. See String Filter below for more details.

ids InsightFiltersId[]

The security findings provider-specific identifier for a finding. See String Filter below for more details.

keywords InsightFiltersKeyword[]

A keyword for a finding. See Keyword Filter below for more details.

lastObservedAts InsightFiltersLastObservedAt[]

An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the potential security issue that a finding captured. See Date Filter below for more details.

malwareNames InsightFiltersMalwareName[]

The name of the malware that was observed. See String Filter below for more details.

malwarePaths InsightFiltersMalwarePath[]

The filesystem path of the malware that was observed. See String Filter below for more details.

malwareStates InsightFiltersMalwareState[]

The state of the malware that was observed. See String Filter below for more details.

malwareTypes InsightFiltersMalwareType[]

The type of the malware that was observed. See String Filter below for more details.

networkDestinationDomains InsightFiltersNetworkDestinationDomain[]

The destination domain of network-related information about a finding. See String Filter below for more details.

networkDestinationIpv4s InsightFiltersNetworkDestinationIpv4[]

The destination IPv4 address of network-related information about a finding. See Ip Filter below for more details.

networkDestinationIpv6s InsightFiltersNetworkDestinationIpv6[]

The destination IPv6 address of network-related information about a finding. See Ip Filter below for more details.

networkDestinationPorts InsightFiltersNetworkDestinationPort[]

The destination port of network-related information about a finding. See Number Filter below for more details.

networkDirections InsightFiltersNetworkDirection[]

Indicates the direction of network traffic associated with a finding. See String Filter below for more details.

networkProtocols InsightFiltersNetworkProtocol[]

The protocol of network-related information about a finding. See String Filter below for more details.

networkSourceDomains InsightFiltersNetworkSourceDomain[]

The source domain of network-related information about a finding. See String Filter below for more details.

networkSourceIpv4s InsightFiltersNetworkSourceIpv4[]

The source IPv4 address of network-related information about a finding. See Ip Filter below for more details.

networkSourceIpv6s InsightFiltersNetworkSourceIpv6[]

The source IPv6 address of network-related information about a finding. See Ip Filter below for more details.

networkSourceMacs InsightFiltersNetworkSourceMac[]

The source media access control (MAC) address of network-related information about a finding. See String Filter below for more details.

networkSourcePorts InsightFiltersNetworkSourcePort[]

The source port of network-related information about a finding. See Number Filter below for more details.

noteTexts InsightFiltersNoteText[]

The text of a note. See String Filter below for more details.

noteUpdatedAts InsightFiltersNoteUpdatedAt[]

The timestamp of when the note was updated. See Date Filter below for more details.

noteUpdatedBies InsightFiltersNoteUpdatedBy[]

The principal that created a note. See String Filter below for more details.

processLaunchedAts InsightFiltersProcessLaunchedAt[]

The date/time that the process was launched. See Date Filter below for more details.

processNames InsightFiltersProcessName[]

The name of the process. See String Filter below for more details.

processParentPids InsightFiltersProcessParentPid[]

The parent process ID. See Number Filter below for more details.

processPaths InsightFiltersProcessPath[]

The path to the process executable. See String Filter below for more details.

processPids InsightFiltersProcessPid[]

The process ID. See Number Filter below for more details.

processTerminatedAts InsightFiltersProcessTerminatedAt[]

The date/time that the process was terminated. See Date Filter below for more details.

productArns InsightFiltersProductArn[]

The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub. See String Filter below for more details.

productFields InsightFiltersProductField[]

A data type where security-findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format. See Map Filter below for more details.

productNames InsightFiltersProductName[]

The name of the solution (product) that generates findings. See String Filter below for more details.

recommendationTexts InsightFiltersRecommendationText[]

The recommendation of what to do about the issue described in a finding. See String Filter below for more details.

recordStates InsightFiltersRecordState[]

The updated record state for the finding. See String Filter below for more details.

relatedFindingsIds InsightFiltersRelatedFindingsId[]

The solution-generated identifier for a related finding. See String Filter below for more details.

relatedFindingsProductArns InsightFiltersRelatedFindingsProductArn[]

The ARN of the solution that generated a related finding. See String Filter below for more details.

resourceAwsEc2InstanceIamInstanceProfileArns InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn[]

The IAM profile ARN of the instance. See String Filter below for more details.

resourceAwsEc2InstanceImageIds InsightFiltersResourceAwsEc2InstanceImageId[]

The Amazon Machine Image (AMI) ID of the instance. See String Filter below for more details.

resourceAwsEc2InstanceIpv4Addresses InsightFiltersResourceAwsEc2InstanceIpv4Address[]

The IPv4 addresses associated with the instance. See Ip Filter below for more details.

resourceAwsEc2InstanceIpv6Addresses InsightFiltersResourceAwsEc2InstanceIpv6Address[]

The IPv6 addresses associated with the instance. See Ip Filter below for more details.

resourceAwsEc2InstanceKeyNames InsightFiltersResourceAwsEc2InstanceKeyName[]

The key name associated with the instance. See String Filter below for more details.

resourceAwsEc2InstanceLaunchedAts InsightFiltersResourceAwsEc2InstanceLaunchedAt[]

The date and time the instance was launched. See Date Filter below for more details.

resourceAwsEc2InstanceSubnetIds InsightFiltersResourceAwsEc2InstanceSubnetId[]

The identifier of the subnet that the instance was launched in. See String Filter below for more details.

resourceAwsEc2InstanceTypes InsightFiltersResourceAwsEc2InstanceType[]

The instance type of the instance. See String Filter below for more details.

resourceAwsEc2InstanceVpcIds InsightFiltersResourceAwsEc2InstanceVpcId[]

The identifier of the VPC that the instance was launched in. See String Filter below for more details.

resourceAwsIamAccessKeyCreatedAts InsightFiltersResourceAwsIamAccessKeyCreatedAt[]

The creation date/time of the IAM access key related to a finding. See Date Filter below for more details.

resourceAwsIamAccessKeyStatuses InsightFiltersResourceAwsIamAccessKeyStatus[]

The status of the IAM access key related to a finding. See String Filter below for more details.

resourceAwsIamAccessKeyUserNames InsightFiltersResourceAwsIamAccessKeyUserName[]

The user associated with the IAM access key related to a finding. See String Filter below for more details.

resourceAwsS3BucketOwnerIds InsightFiltersResourceAwsS3BucketOwnerId[]

The canonical user ID of the owner of the S3 bucket. See String Filter below for more details.

resourceAwsS3BucketOwnerNames InsightFiltersResourceAwsS3BucketOwnerName[]

The display name of the owner of the S3 bucket. See String Filter below for more details.

resourceContainerImageIds InsightFiltersResourceContainerImageId[]

The identifier of the image related to a finding. See String Filter below for more details.

resourceContainerImageNames InsightFiltersResourceContainerImageName[]

The name of the image related to a finding. See String Filter below for more details.

resourceContainerLaunchedAts InsightFiltersResourceContainerLaunchedAt[]

The date/time that the container was started. See Date Filter below for more details.

resourceContainerNames InsightFiltersResourceContainerName[]

The name of the container related to a finding. See String Filter below for more details.

resourceDetailsOthers InsightFiltersResourceDetailsOther[]

The details of a resource that doesn't have a specific subfield for the resource type defined. See Map Filter below for more details.

resourceIds InsightFiltersResourceId[]

The canonical identifier for the given resource type. See String Filter below for more details.

resourcePartitions InsightFiltersResourcePartition[]

The canonical AWS partition name that the Region is assigned to. See String Filter below for more details.

resourceRegions InsightFiltersResourceRegion[]

The canonical AWS external Region name where this resource is located. See String Filter below for more details.

resourceTags InsightFiltersResourceTag[]

A list of AWS tags associated with a resource at the time the finding was processed. See Map Filter below for more details.

resourceTypes InsightFiltersResourceType[]

Specifies the type of the resource that details are provided for. See String Filter below for more details.

severityLabels InsightFiltersSeverityLabel[]

The label of a finding's severity. See String Filter below for more details.

sourceUrls InsightFiltersSourceUrl[]

A URL that links to a page about the current finding in the security-findings provider's solution. See String Filter below for more details.

threatIntelIndicatorCategories InsightFiltersThreatIntelIndicatorCategory[]

The category of a threat intelligence indicator. See String Filter below for more details.

threatIntelIndicatorLastObservedAts InsightFiltersThreatIntelIndicatorLastObservedAt[]

The date/time of the last observation of a threat intelligence indicator. See Date Filter below for more details.

threatIntelIndicatorSourceUrls InsightFiltersThreatIntelIndicatorSourceUrl[]

The URL for more details from the source of the threat intelligence. See String Filter below for more details.

threatIntelIndicatorSources InsightFiltersThreatIntelIndicatorSource[]

The source of the threat intelligence. See String Filter below for more details.

threatIntelIndicatorTypes InsightFiltersThreatIntelIndicatorType[]

The type of a threat intelligence indicator. See String Filter below for more details.

threatIntelIndicatorValues InsightFiltersThreatIntelIndicatorValue[]

The value of a threat intelligence indicator. See String Filter below for more details.

titles InsightFiltersTitle[]

A finding's title. See String Filter below for more details.

types InsightFiltersType[]

A finding type in the format of namespace/category/classifier that classifies a finding. See String Filter below for more details.

updatedAts InsightFiltersUpdatedAt[]

An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding record. See Date Filter below for more details.

userDefinedValues InsightFiltersUserDefinedValue[]

A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. See Map Filter below for more details.

verificationStates InsightFiltersVerificationState[]

The veracity of a finding. See String Filter below for more details.

workflowStatuses InsightFiltersWorkflowStatus[]

The status of the investigation into a finding. See Workflow Status Filter below for more details.

aws_account_ids Sequence[InsightFiltersAwsAccountId]

AWS account ID that a finding is generated in. See String_Filter below for more details.

company_names Sequence[InsightFiltersCompanyName]

The name of the findings provider (company) that owns the solution (product) that generates findings. See String_Filter below for more details.

compliance_statuses Sequence[InsightFiltersComplianceStatus]

Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS AWS Foundations. Contains security standard-related finding details. See String Filter below for more details.

confidences Sequence[InsightFiltersConfidence]

A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

created_ats Sequence[InsightFiltersCreatedAt]

An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security issue that a finding captured. See Date Filter below for more details.

criticalities Sequence[InsightFiltersCriticality]

The level of importance assigned to the resources associated with the finding. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

descriptions Sequence[InsightFiltersDescription]

A finding's description. See String Filter below for more details.

finding_provider_fields_confidences Sequence[InsightFiltersFindingProviderFieldsConfidence]

The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

finding_provider_fields_criticalities Sequence[InsightFiltersFindingProviderFieldsCriticality]

The finding provider value for the level of importance assigned to the resources associated with the findings. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

finding_provider_fields_related_findings_ids Sequence[InsightFiltersFindingProviderFieldsRelatedFindingsId]

The finding identifier of a related finding that is identified by the finding provider. See String Filter below for more details.

finding_provider_fields_related_findings_product_arns Sequence[InsightFiltersFindingProviderFieldsRelatedFindingsProductArn]

The ARN of the solution that generated a related finding that is identified by the finding provider. See String Filter below for more details.

finding_provider_fields_severity_labels Sequence[InsightFiltersFindingProviderFieldsSeverityLabel]

The finding provider value for the severity label. See String Filter below for more details.

finding_provider_fields_severity_originals Sequence[InsightFiltersFindingProviderFieldsSeverityOriginal]

The finding provider's original value for the severity. See String Filter below for more details.

finding_provider_fields_types Sequence[InsightFiltersFindingProviderFieldsType]

One or more finding types that the finding provider assigned to the finding. Uses the format of namespace/category/classifier that classify a finding. Valid namespace values include: Software and Configuration Checks, TTPs, Effects, Unusual Behaviors, and Sensitive Data Identifications. See String Filter below for more details.

first_observed_ats Sequence[InsightFiltersFirstObservedAt]

An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential security issue that a finding captured. See Date Filter below for more details.

generator_ids Sequence[InsightFiltersGeneratorId]

The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. See String Filter below for more details.

ids Sequence[InsightFiltersId]

The security findings provider-specific identifier for a finding. See String Filter below for more details.

keywords Sequence[InsightFiltersKeyword]

A keyword for a finding. See Keyword Filter below for more details.

last_observed_ats Sequence[InsightFiltersLastObservedAt]

An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the potential security issue that a finding captured. See Date Filter below for more details.

malware_names Sequence[InsightFiltersMalwareName]

The name of the malware that was observed. See String Filter below for more details.

malware_paths Sequence[InsightFiltersMalwarePath]

The filesystem path of the malware that was observed. See String Filter below for more details.

malware_states Sequence[InsightFiltersMalwareState]

The state of the malware that was observed. See String Filter below for more details.

malware_types Sequence[InsightFiltersMalwareType]

The type of the malware that was observed. See String Filter below for more details.

network_destination_domains Sequence[InsightFiltersNetworkDestinationDomain]

The destination domain of network-related information about a finding. See String Filter below for more details.

network_destination_ipv4s Sequence[InsightFiltersNetworkDestinationIpv4]

The destination IPv4 address of network-related information about a finding. See Ip Filter below for more details.

network_destination_ipv6s Sequence[InsightFiltersNetworkDestinationIpv6]

The destination IPv6 address of network-related information about a finding. See Ip Filter below for more details.

network_destination_ports Sequence[InsightFiltersNetworkDestinationPort]

The destination port of network-related information about a finding. See Number Filter below for more details.

network_directions Sequence[InsightFiltersNetworkDirection]

Indicates the direction of network traffic associated with a finding. See String Filter below for more details.

network_protocols Sequence[InsightFiltersNetworkProtocol]

The protocol of network-related information about a finding. See String Filter below for more details.

network_source_domains Sequence[InsightFiltersNetworkSourceDomain]

The source domain of network-related information about a finding. See String Filter below for more details.

network_source_ipv4s Sequence[InsightFiltersNetworkSourceIpv4]

The source IPv4 address of network-related information about a finding. See Ip Filter below for more details.

network_source_ipv6s Sequence[InsightFiltersNetworkSourceIpv6]

The source IPv6 address of network-related information about a finding. See Ip Filter below for more details.

network_source_macs Sequence[InsightFiltersNetworkSourceMac]

The source media access control (MAC) address of network-related information about a finding. See String Filter below for more details.

network_source_ports Sequence[InsightFiltersNetworkSourcePort]

The source port of network-related information about a finding. See Number Filter below for more details.

note_texts Sequence[InsightFiltersNoteText]

The text of a note. See String Filter below for more details.

note_updated_ats Sequence[InsightFiltersNoteUpdatedAt]

The timestamp of when the note was updated. See Date Filter below for more details.

note_updated_bies Sequence[InsightFiltersNoteUpdatedBy]

The principal that created a note. See String Filter below for more details.

process_launched_ats Sequence[InsightFiltersProcessLaunchedAt]

The date/time that the process was launched. See Date Filter below for more details.

process_names Sequence[InsightFiltersProcessName]

The name of the process. See String Filter below for more details.

process_parent_pids Sequence[InsightFiltersProcessParentPid]

The parent process ID. See Number Filter below for more details.

process_paths Sequence[InsightFiltersProcessPath]

The path to the process executable. See String Filter below for more details.

process_pids Sequence[InsightFiltersProcessPid]

The process ID. See Number Filter below for more details.

process_terminated_ats Sequence[InsightFiltersProcessTerminatedAt]

The date/time that the process was terminated. See Date Filter below for more details.

product_arns Sequence[InsightFiltersProductArn]

The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub. See String Filter below for more details.

product_fields Sequence[InsightFiltersProductField]

A data type where security-findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format. See Map Filter below for more details.

product_names Sequence[InsightFiltersProductName]

The name of the solution (product) that generates findings. See String Filter below for more details.

recommendation_texts Sequence[InsightFiltersRecommendationText]

The recommendation of what to do about the issue described in a finding. See String Filter below for more details.

record_states Sequence[InsightFiltersRecordState]

The updated record state for the finding. See String Filter below for more details.

related_findings_ids Sequence[InsightFiltersRelatedFindingsId]

The solution-generated identifier for a related finding. See String Filter below for more details.

related_findings_product_arns Sequence[InsightFiltersRelatedFindingsProductArn]

The ARN of the solution that generated a related finding. See String Filter below for more details.

resource_aws_ec2_instance_iam_instance_profile_arns Sequence[InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn]

The IAM profile ARN of the instance. See String Filter below for more details.

resource_aws_ec2_instance_image_ids Sequence[InsightFiltersResourceAwsEc2InstanceImageId]

The Amazon Machine Image (AMI) ID of the instance. See String Filter below for more details.

resource_aws_ec2_instance_ipv4_addresses Sequence[InsightFiltersResourceAwsEc2InstanceIpv4Address]

The IPv4 addresses associated with the instance. See Ip Filter below for more details.

resource_aws_ec2_instance_ipv6_addresses Sequence[InsightFiltersResourceAwsEc2InstanceIpv6Address]

The IPv6 addresses associated with the instance. See Ip Filter below for more details.

resource_aws_ec2_instance_key_names Sequence[InsightFiltersResourceAwsEc2InstanceKeyName]

The key name associated with the instance. See String Filter below for more details.

resource_aws_ec2_instance_launched_ats Sequence[InsightFiltersResourceAwsEc2InstanceLaunchedAt]

The date and time the instance was launched. See Date Filter below for more details.

resource_aws_ec2_instance_subnet_ids Sequence[InsightFiltersResourceAwsEc2InstanceSubnetId]

The identifier of the subnet that the instance was launched in. See String Filter below for more details.

resource_aws_ec2_instance_types Sequence[InsightFiltersResourceAwsEc2InstanceType]

The instance type of the instance. See String Filter below for more details.

resource_aws_ec2_instance_vpc_ids Sequence[InsightFiltersResourceAwsEc2InstanceVpcId]

The identifier of the VPC that the instance was launched in. See String Filter below for more details.

resource_aws_iam_access_key_created_ats Sequence[InsightFiltersResourceAwsIamAccessKeyCreatedAt]

The creation date/time of the IAM access key related to a finding. See Date Filter below for more details.

resource_aws_iam_access_key_statuses Sequence[InsightFiltersResourceAwsIamAccessKeyStatus]

The status of the IAM access key related to a finding. See String Filter below for more details.

resource_aws_iam_access_key_user_names Sequence[InsightFiltersResourceAwsIamAccessKeyUserName]

The user associated with the IAM access key related to a finding. See String Filter below for more details.

resource_aws_s3_bucket_owner_ids Sequence[InsightFiltersResourceAwsS3BucketOwnerId]

The canonical user ID of the owner of the S3 bucket. See String Filter below for more details.

resource_aws_s3_bucket_owner_names Sequence[InsightFiltersResourceAwsS3BucketOwnerName]

The display name of the owner of the S3 bucket. See String Filter below for more details.

resource_container_image_ids Sequence[InsightFiltersResourceContainerImageId]

The identifier of the image related to a finding. See String Filter below for more details.

resource_container_image_names Sequence[InsightFiltersResourceContainerImageName]

The name of the image related to a finding. See String Filter below for more details.

resource_container_launched_ats Sequence[InsightFiltersResourceContainerLaunchedAt]

The date/time that the container was started. See Date Filter below for more details.

resource_container_names Sequence[InsightFiltersResourceContainerName]

The name of the container related to a finding. See String Filter below for more details.

resource_details_others Sequence[InsightFiltersResourceDetailsOther]

The details of a resource that doesn't have a specific subfield for the resource type defined. See Map Filter below for more details.

resource_ids Sequence[InsightFiltersResourceId]

The canonical identifier for the given resource type. See String Filter below for more details.

resource_partitions Sequence[InsightFiltersResourcePartition]

The canonical AWS partition name that the Region is assigned to. See String Filter below for more details.

resource_regions Sequence[InsightFiltersResourceRegion]

The canonical AWS external Region name where this resource is located. See String Filter below for more details.

resource_tags Sequence[InsightFiltersResourceTag]

A list of AWS tags associated with a resource at the time the finding was processed. See Map Filter below for more details.

resource_types Sequence[InsightFiltersResourceType]

Specifies the type of the resource that details are provided for. See String Filter below for more details.

severity_labels Sequence[InsightFiltersSeverityLabel]

The label of a finding's severity. See String Filter below for more details.

source_urls Sequence[InsightFiltersSourceUrl]

A URL that links to a page about the current finding in the security-findings provider's solution. See String Filter below for more details.

threat_intel_indicator_categories Sequence[InsightFiltersThreatIntelIndicatorCategory]

The category of a threat intelligence indicator. See String Filter below for more details.

threat_intel_indicator_last_observed_ats Sequence[InsightFiltersThreatIntelIndicatorLastObservedAt]

The date/time of the last observation of a threat intelligence indicator. See Date Filter below for more details.

threat_intel_indicator_source_urls Sequence[InsightFiltersThreatIntelIndicatorSourceUrl]

The URL for more details from the source of the threat intelligence. See String Filter below for more details.

threat_intel_indicator_sources Sequence[InsightFiltersThreatIntelIndicatorSource]

The source of the threat intelligence. See String Filter below for more details.

threat_intel_indicator_types Sequence[InsightFiltersThreatIntelIndicatorType]

The type of a threat intelligence indicator. See String Filter below for more details.

threat_intel_indicator_values Sequence[InsightFiltersThreatIntelIndicatorValue]

The value of a threat intelligence indicator. See String Filter below for more details.

titles Sequence[InsightFiltersTitle]

A finding's title. See String Filter below for more details.

types Sequence[InsightFiltersType]

A finding type in the format of namespace/category/classifier that classifies a finding. See String Filter below for more details.

updated_ats Sequence[InsightFiltersUpdatedAt]

An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding record. See Date Filter below for more details.

user_defined_values Sequence[InsightFiltersUserDefinedValue]

A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. See Map Filter below for more details.

verification_states Sequence[InsightFiltersVerificationState]

The veracity of a finding. See String Filter below for more details.

workflow_statuses Sequence[InsightFiltersWorkflowStatus]

The status of the investigation into a finding. See Workflow Status Filter below for more details.

awsAccountIds List<Property Map>

AWS account ID that a finding is generated in. See String_Filter below for more details.

companyNames List<Property Map>

The name of the findings provider (company) that owns the solution (product) that generates findings. See String_Filter below for more details.

complianceStatuses List<Property Map>

Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS AWS Foundations. Contains security standard-related finding details. See String Filter below for more details.

confidences List<Property Map>

A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

createdAts List<Property Map>

An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security issue that a finding captured. See Date Filter below for more details.

criticalities List<Property Map>

The level of importance assigned to the resources associated with the finding. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

descriptions List<Property Map>

A finding's description. See String Filter below for more details.

findingProviderFieldsConfidences List<Property Map>

The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

findingProviderFieldsCriticalities List<Property Map>

The finding provider value for the level of importance assigned to the resources associated with the findings. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

findingProviderFieldsRelatedFindingsIds List<Property Map>

The finding identifier of a related finding that is identified by the finding provider. See String Filter below for more details.

findingProviderFieldsRelatedFindingsProductArns List<Property Map>

The ARN of the solution that generated a related finding that is identified by the finding provider. See String Filter below for more details.

findingProviderFieldsSeverityLabels List<Property Map>

The finding provider value for the severity label. See String Filter below for more details.

findingProviderFieldsSeverityOriginals List<Property Map>

The finding provider's original value for the severity. See String Filter below for more details.

findingProviderFieldsTypes List<Property Map>

One or more finding types that the finding provider assigned to the finding. Uses the format of namespace/category/classifier that classify a finding. Valid namespace values include: Software and Configuration Checks, TTPs, Effects, Unusual Behaviors, and Sensitive Data Identifications. See String Filter below for more details.

firstObservedAts List<Property Map>

An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential security issue that a finding captured. See Date Filter below for more details.

generatorIds List<Property Map>

The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. See String Filter below for more details.

ids List<Property Map>

The security findings provider-specific identifier for a finding. See String Filter below for more details.

keywords List<Property Map>

A keyword for a finding. See Keyword Filter below for more details.

lastObservedAts List<Property Map>

An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the potential security issue that a finding captured. See Date Filter below for more details.

malwareNames List<Property Map>

The name of the malware that was observed. See String Filter below for more details.

malwarePaths List<Property Map>

The filesystem path of the malware that was observed. See String Filter below for more details.

malwareStates List<Property Map>

The state of the malware that was observed. See String Filter below for more details.

malwareTypes List<Property Map>

The type of the malware that was observed. See String Filter below for more details.

networkDestinationDomains List<Property Map>

The destination domain of network-related information about a finding. See String Filter below for more details.

networkDestinationIpv4s List<Property Map>

The destination IPv4 address of network-related information about a finding. See Ip Filter below for more details.

networkDestinationIpv6s List<Property Map>

The destination IPv6 address of network-related information about a finding. See Ip Filter below for more details.

networkDestinationPorts List<Property Map>

The destination port of network-related information about a finding. See Number Filter below for more details.

networkDirections List<Property Map>

Indicates the direction of network traffic associated with a finding. See String Filter below for more details.

networkProtocols List<Property Map>

The protocol of network-related information about a finding. See String Filter below for more details.

networkSourceDomains List<Property Map>

The source domain of network-related information about a finding. See String Filter below for more details.

networkSourceIpv4s List<Property Map>

The source IPv4 address of network-related information about a finding. See Ip Filter below for more details.

networkSourceIpv6s List<Property Map>

The source IPv6 address of network-related information about a finding. See Ip Filter below for more details.

networkSourceMacs List<Property Map>

The source media access control (MAC) address of network-related information about a finding. See String Filter below for more details.

networkSourcePorts List<Property Map>

The source port of network-related information about a finding. See Number Filter below for more details.

noteTexts List<Property Map>

The text of a note. See String Filter below for more details.

noteUpdatedAts List<Property Map>

The timestamp of when the note was updated. See Date Filter below for more details.

noteUpdatedBies List<Property Map>

The principal that created a note. See String Filter below for more details.

processLaunchedAts List<Property Map>

The date/time that the process was launched. See Date Filter below for more details.

processNames List<Property Map>

The name of the process. See String Filter below for more details.

processParentPids List<Property Map>

The parent process ID. See Number Filter below for more details.

processPaths List<Property Map>

The path to the process executable. See String Filter below for more details.

processPids List<Property Map>

The process ID. See Number Filter below for more details.

processTerminatedAts List<Property Map>

The date/time that the process was terminated. See Date Filter below for more details.

productArns List<Property Map>

The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub. See String Filter below for more details.

productFields List<Property Map>

A data type where security-findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format. See Map Filter below for more details.

productNames List<Property Map>

The name of the solution (product) that generates findings. See String Filter below for more details.

recommendationTexts List<Property Map>

The recommendation of what to do about the issue described in a finding. See String Filter below for more details.

recordStates List<Property Map>

The updated record state for the finding. See String Filter below for more details.

relatedFindingsIds List<Property Map>

The solution-generated identifier for a related finding. See String Filter below for more details.

relatedFindingsProductArns List<Property Map>

The ARN of the solution that generated a related finding. See String Filter below for more details.

resourceAwsEc2InstanceIamInstanceProfileArns List<Property Map>

The IAM profile ARN of the instance. See String Filter below for more details.

resourceAwsEc2InstanceImageIds List<Property Map>

The Amazon Machine Image (AMI) ID of the instance. See String Filter below for more details.

resourceAwsEc2InstanceIpv4Addresses List<Property Map>

The IPv4 addresses associated with the instance. See Ip Filter below for more details.

resourceAwsEc2InstanceIpv6Addresses List<Property Map>

The IPv6 addresses associated with the instance. See Ip Filter below for more details.

resourceAwsEc2InstanceKeyNames List<Property Map>

The key name associated with the instance. See String Filter below for more details.

resourceAwsEc2InstanceLaunchedAts List<Property Map>

The date and time the instance was launched. See Date Filter below for more details.

resourceAwsEc2InstanceSubnetIds List<Property Map>

The identifier of the subnet that the instance was launched in. See String Filter below for more details.

resourceAwsEc2InstanceTypes List<Property Map>

The instance type of the instance. See String Filter below for more details.

resourceAwsEc2InstanceVpcIds List<Property Map>

The identifier of the VPC that the instance was launched in. See String Filter below for more details.

resourceAwsIamAccessKeyCreatedAts List<Property Map>

The creation date/time of the IAM access key related to a finding. See Date Filter below for more details.

resourceAwsIamAccessKeyStatuses List<Property Map>

The status of the IAM access key related to a finding. See String Filter below for more details.

resourceAwsIamAccessKeyUserNames List<Property Map>

The user associated with the IAM access key related to a finding. See String Filter below for more details.

resourceAwsS3BucketOwnerIds List<Property Map>

The canonical user ID of the owner of the S3 bucket. See String Filter below for more details.

resourceAwsS3BucketOwnerNames List<Property Map>

The display name of the owner of the S3 bucket. See String Filter below for more details.

resourceContainerImageIds List<Property Map>

The identifier of the image related to a finding. See String Filter below for more details.

resourceContainerImageNames List<Property Map>

The name of the image related to a finding. See String Filter below for more details.

resourceContainerLaunchedAts List<Property Map>

The date/time that the container was started. See Date Filter below for more details.

resourceContainerNames List<Property Map>

The name of the container related to a finding. See String Filter below for more details.

resourceDetailsOthers List<Property Map>

The details of a resource that doesn't have a specific subfield for the resource type defined. See Map Filter below for more details.

resourceIds List<Property Map>

The canonical identifier for the given resource type. See String Filter below for more details.

resourcePartitions List<Property Map>

The canonical AWS partition name that the Region is assigned to. See String Filter below for more details.

resourceRegions List<Property Map>

The canonical AWS external Region name where this resource is located. See String Filter below for more details.

resourceTags List<Property Map>

A list of AWS tags associated with a resource at the time the finding was processed. See Map Filter below for more details.

resourceTypes List<Property Map>

Specifies the type of the resource that details are provided for. See String Filter below for more details.

severityLabels List<Property Map>

The label of a finding's severity. See String Filter below for more details.

sourceUrls List<Property Map>

A URL that links to a page about the current finding in the security-findings provider's solution. See String Filter below for more details.

threatIntelIndicatorCategories List<Property Map>

The category of a threat intelligence indicator. See String Filter below for more details.

threatIntelIndicatorLastObservedAts List<Property Map>

The date/time of the last observation of a threat intelligence indicator. See Date Filter below for more details.

threatIntelIndicatorSourceUrls List<Property Map>

The URL for more details from the source of the threat intelligence. See String Filter below for more details.

threatIntelIndicatorSources List<Property Map>

The source of the threat intelligence. See String Filter below for more details.

threatIntelIndicatorTypes List<Property Map>

The type of a threat intelligence indicator. See String Filter below for more details.

threatIntelIndicatorValues List<Property Map>

The value of a threat intelligence indicator. See String Filter below for more details.

titles List<Property Map>

A finding's title. See String Filter below for more details.

types List<Property Map>

A finding type in the format of namespace/category/classifier that classifies a finding. See String Filter below for more details.

updatedAts List<Property Map>

An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding record. See Date Filter below for more details.

userDefinedValues List<Property Map>

A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. See Map Filter below for more details.

verificationStates List<Property Map>

The veracity of a finding. See String Filter below for more details.

workflowStatuses List<Property Map>

The status of the investigation into a finding. See Workflow Status Filter below for more details.

InsightFiltersAwsAccountId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersCompanyName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersComplianceStatus

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersConfidence

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq str

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte str

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte str

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

InsightFiltersCreatedAt

DateRange InsightFiltersCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersCreatedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersCriticality

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq str

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte str

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte str

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

InsightFiltersDescription

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersFindingProviderFieldsConfidence

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq str

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte str

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte str

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

InsightFiltersFindingProviderFieldsCriticality

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq str

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte str

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte str

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

InsightFiltersFindingProviderFieldsRelatedFindingsId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersFindingProviderFieldsRelatedFindingsProductArn

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersFindingProviderFieldsSeverityLabel

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersFindingProviderFieldsSeverityOriginal

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersFindingProviderFieldsType

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersFirstObservedAt

DateRange InsightFiltersFirstObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersFirstObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersFirstObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersFirstObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersFirstObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersFirstObservedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersGeneratorId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersKeyword

Value string

A value for the keyword.

Value string

A value for the keyword.

value String

A value for the keyword.

value string

A value for the keyword.

value str

A value for the keyword.

value String

A value for the keyword.

InsightFiltersLastObservedAt

DateRange InsightFiltersLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersLastObservedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersMalwareName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersMalwarePath

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersMalwareState

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersMalwareType

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersNetworkDestinationDomain

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersNetworkDestinationIpv4

Cidr string

A finding's CIDR value.

Cidr string

A finding's CIDR value.

cidr String

A finding's CIDR value.

cidr string

A finding's CIDR value.

cidr str

A finding's CIDR value.

cidr String

A finding's CIDR value.

InsightFiltersNetworkDestinationIpv6

Cidr string

A finding's CIDR value.

Cidr string

A finding's CIDR value.

cidr String

A finding's CIDR value.

cidr string

A finding's CIDR value.

cidr str

A finding's CIDR value.

cidr String

A finding's CIDR value.

InsightFiltersNetworkDestinationPort

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq str

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte str

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte str

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

InsightFiltersNetworkDirection

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersNetworkProtocol

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersNetworkSourceDomain

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersNetworkSourceIpv4

Cidr string

A finding's CIDR value.

Cidr string

A finding's CIDR value.

cidr String

A finding's CIDR value.

cidr string

A finding's CIDR value.

cidr str

A finding's CIDR value.

cidr String

A finding's CIDR value.

InsightFiltersNetworkSourceIpv6

Cidr string

A finding's CIDR value.

Cidr string

A finding's CIDR value.

cidr String

A finding's CIDR value.

cidr string

A finding's CIDR value.

cidr str

A finding's CIDR value.

cidr String

A finding's CIDR value.

InsightFiltersNetworkSourceMac

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersNetworkSourcePort

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq str

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte str

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte str

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

InsightFiltersNoteText

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersNoteUpdatedAt

DateRange InsightFiltersNoteUpdatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersNoteUpdatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersNoteUpdatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersNoteUpdatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersNoteUpdatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersNoteUpdatedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersNoteUpdatedBy

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersProcessLaunchedAt

DateRange InsightFiltersProcessLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersProcessLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersProcessLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersProcessLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersProcessLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersProcessLaunchedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersProcessName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersProcessParentPid

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq str

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte str

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte str

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

InsightFiltersProcessPath

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersProcessPid

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

Gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

Lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq string

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte string

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte string

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq str

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte str

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte str

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

eq String

The equal-to condition to be applied to a single field when querying for findings, provided as a String.

gte String

The greater-than-equal condition to be applied to a single field when querying for findings, provided as a String.

lte String

The less-than-equal condition to be applied to a single field when querying for findings, provided as a String.

InsightFiltersProcessTerminatedAt

DateRange InsightFiltersProcessTerminatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersProcessTerminatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersProcessTerminatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersProcessTerminatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersProcessTerminatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersProcessTerminatedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersProductArn

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersProductField

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key String

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key str

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key String

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersProductName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersRecommendationText

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersRecordState

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersRelatedFindingsId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersRelatedFindingsProductArn

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsEc2InstanceImageId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsEc2InstanceIpv4Address

Cidr string

A finding's CIDR value.

Cidr string

A finding's CIDR value.

cidr String

A finding's CIDR value.

cidr string

A finding's CIDR value.

cidr str

A finding's CIDR value.

cidr String

A finding's CIDR value.

InsightFiltersResourceAwsEc2InstanceIpv6Address

Cidr string

A finding's CIDR value.

Cidr string

A finding's CIDR value.

cidr String

A finding's CIDR value.

cidr string

A finding's CIDR value.

cidr str

A finding's CIDR value.

cidr String

A finding's CIDR value.

InsightFiltersResourceAwsEc2InstanceKeyName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsEc2InstanceLaunchedAt

DateRange InsightFiltersResourceAwsEc2InstanceLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersResourceAwsEc2InstanceLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersResourceAwsEc2InstanceLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersResourceAwsEc2InstanceLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersResourceAwsEc2InstanceLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersResourceAwsEc2InstanceLaunchedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsEc2InstanceSubnetId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsEc2InstanceType

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsEc2InstanceVpcId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsIamAccessKeyCreatedAt

DateRange InsightFiltersResourceAwsIamAccessKeyCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersResourceAwsIamAccessKeyCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersResourceAwsIamAccessKeyCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersResourceAwsIamAccessKeyCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersResourceAwsIamAccessKeyCreatedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersResourceAwsIamAccessKeyCreatedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsIamAccessKeyStatus

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsIamAccessKeyUserName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsS3BucketOwnerId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceAwsS3BucketOwnerName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceContainerImageId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceContainerImageName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceContainerLaunchedAt

DateRange InsightFiltersResourceContainerLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersResourceContainerLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersResourceContainerLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersResourceContainerLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersResourceContainerLaunchedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersResourceContainerLaunchedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceContainerName

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceDetailsOther

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key String

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key str

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key String

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceId

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourcePartition

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceRegion

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceTag

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key String

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key string

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key str

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

key String

The key of the map filter. For example, for ResourceTags, Key identifies the name of the tag. For UserDefinedFields, Key is the name of the field.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersResourceType

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersSeverityLabel

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersSourceUrl

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersThreatIntelIndicatorCategory

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersThreatIntelIndicatorLastObservedAt

DateRange InsightFiltersThreatIntelIndicatorLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

DateRange InsightFiltersThreatIntelIndicatorLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

End string

An end date for the date filter. Required with start if date_range is not specified.

Start string

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersThreatIntelIndicatorLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

dateRange InsightFiltersThreatIntelIndicatorLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end string

An end date for the date filter. Required with start if date_range is not specified.

start string

A start date for the date filter. Required with end if date_range is not specified.

date_range InsightFiltersThreatIntelIndicatorLastObservedAtDateRange

A configuration block of the date range for the date filter. See date_range below for more details.

end str

An end date for the date filter. Required with start if date_range is not specified.

start str

A start date for the date filter. Required with end if date_range is not specified.

dateRange Property Map

A configuration block of the date range for the date filter. See date_range below for more details.

end String

An end date for the date filter. Required with start if date_range is not specified.

start String

A start date for the date filter. Required with end if date_range is not specified.

InsightFiltersThreatIntelIndicatorLastObservedAtDateRange

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

Unit string

A date range unit for the date filter. Valid values: DAYS.

Value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Integer

A date range value for the date filter, provided as an Integer.

unit string

A date range unit for the date filter. Valid values: DAYS.

value number

A date range value for the date filter, provided as an Integer.

unit str

A date range unit for the date filter. Valid values: DAYS.

value int

A date range value for the date filter, provided as an Integer.

unit String

A date range unit for the date filter. Valid values: DAYS.

value Number

A date range value for the date filter, provided as an Integer.

InsightFiltersThreatIntelIndicatorSource

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersThreatIntelIndicatorSourceUrl

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value str

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

InsightFiltersThreatIntelIndicatorType

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

Comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

Value string

A date range value for the date filter, provided as an Integer.

comparison String

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value String

A date range value for the date filter, provided as an Integer.

comparison string

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value string

A date range value for the date filter, provided as an Integer.

comparison str

The condition to apply to a string value when querying for findings. Valid values include: EQUALS and NOT_EQUALS.

value