InvestigationResource

Contains information about an AWS resource that is relevant to an investigation.

Contents

resourceType

The type of the resource. Possible values are EC2_INSTANCE, EBS_VOLUME, S3_BUCKET, IAM_ROLE, IAM_USER, IAM_ACCESS_KEY, LAMBDA_FUNCTION, EKS_CLUSTER, ECS_CLUSTER, KUBERNETES_WORKLOAD, RDS_INSTANCE, RDS_DB_USER, and EC2_SECURITY_GROUP.

Type: String

Valid Values: EC2_INSTANCE | EBS_VOLUME | S3_BUCKET | IAM_ROLE | IAM_USER | IAM_ACCESS_KEY | LAMBDA_FUNCTION | EKS_CLUSTER | ECS_CLUSTER | KUBERNETES_WORKLOAD | RDS_INSTANCE | RDS_DB_USER | EC2_SECURITY_GROUP

Required: Yes

uid

The unique identifier of the resource. This is the Amazon Resource Name (ARN) of the resource when it's available. Otherwise, it's the name or ID of the resource.

Type: String

Required: Yes

data

Details that are specific to the type of the resource.

Type: InvestigationResourceData object

Required: No

name

The name of the resource.

Type: String

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following:

• AWS SDK for C++

• AWS SDK for Java V2

• AWS SDK for Ruby V3