AttackProperty - AWS Shield Advanced

AttackProperty

Details of a AWS Shield event. This is provided as part of an AttackDetail.

Contents

AttackLayer

The type of AWS Shield event that was observed. NETWORK indicates layer 3 and layer 4 events and APPLICATION indicates layer 7 events.

For infrastructure layer events (L3 and L4 events), you can view metrics for top contributors in Amazon CloudWatch metrics. For more information, see AWS Shield metrics and alarms in the AWS WAF Developer Guide.

Type: String

Valid Values: NETWORK | APPLICATION

Required: No

AttackPropertyIdentifier

Defines the AWS Shield event property information that is provided. The WORDPRESS_PINGBACK_REFLECTOR and WORDPRESS_PINGBACK_SOURCE values are valid only for WordPress reflective pingback events.

Type: String

Valid Values: DESTINATION_URL | REFERRER | SOURCE_ASN | SOURCE_COUNTRY | SOURCE_IP_ADDRESS | SOURCE_USER_AGENT | WORDPRESS_PINGBACK_REFLECTOR | WORDPRESS_PINGBACK_SOURCE

Required: No

TopContributors

Contributor objects for the top five contributors to a Shield event. A contributor is a source of traffic that Shield Advanced identifies as responsible for some or all of an event.

Type: Array of Contributor objects

Required: No

Total

The total contributions made to this Shield event by all contributors.

Type: Long

Required: No

Unit

The unit used for the Contributor Value property.

Type: String

Valid Values: BITS | BYTES | PACKETS | REQUESTS

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: