Distribution
Contains a breakdown of findings along a dimension, such as severity or finding type.
Contents
- dimension
-
The dimension of the breakdown. The value identifies the breakdown that the record describes:
SEVERITY(SeverityBreakdown),TYPE(FindingTypesorTopFindingTypes),RESOURCE(Resources),ATTACK_VECTOR(AttackVectors), andARCHIVE(Archive).Type: String
Valid Values:
SEVERITY | TYPE | RESOURCE | ATTACK_VECTOR | ARCHIVERequired: Yes
- archive
-
The number and percentage of archived and unarchived findings.
Type: ArchiveDistribution object
Required: No
- attackVectors
-
The findings broken down by MITRE ATT&CK tactic.
Type: Array of TacticCoverage objects
Array Members: Minimum number of 0 items. Maximum number of 20 items.
Required: No
- findingTypes
-
The findings broken down by finding type, with counts and percentages.
Type: Array of TypeDistribution objects
Array Members: Minimum number of 0 items. Maximum number of 50 items.
Required: No
- resources
-
The findings broken down by affected resource.
Type: Array of ResourceDistribution objects
Array Members: Minimum number of 0 items. Maximum number of 50 items.
Required: No
- severityBreakdown
-
The number of findings at each severity level.
Type: SeverityBreakdown object
Required: No
- topFindingTypes
-
The finding types that have the most findings, with counts.
Type: Array of FindingTypeCount objects
Array Members: Minimum number of 0 items. Maximum number of 50 items.
Required: No
- totalFindings
-
The total number of findings in the breakdown.
Type: Long
Valid Range: Minimum value of 0.
Required: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
