Select your cookie preferences

We use essential cookies and similar tools that are necessary to provide our site and services. We use performance cookies to collect anonymous statistics, so we can understand how customers use our site and make improvements. Essential cookies cannot be deactivated, but you can choose “Customize” or “Decline” to decline performance cookies.

If you agree, AWS and approved third parties will also use cookies to provide useful site features, remember your preferences, and display relevant content, including relevant advertising. To accept or decline all non-essential cookies, choose “Accept” or “Decline.” To make more detailed choices, choose “Customize.”

Resource - Amazon GuardDuty

Resource

Contains information about the AWS resource associated with the activity that prompted GuardDuty to generate a finding.

Contents

accessKeyDetails

The IAM access key details (user information) of a user that engaged in the activity that prompted GuardDuty to generate a finding.

Type: AccessKeyDetails object

Required: No

containerDetails

Details of a container.

Type: Container object

Required: No

ebsVolumeDetails

Contains list of scanned and skipped EBS volumes with details.

Type: EbsVolumeDetails object

Required: No

ecsClusterDetails

Contains information about the details of the ECS Cluster.

Type: EcsClusterDetails object

Required: No

eksClusterDetails

Details about the EKS cluster involved in a Kubernetes finding.

Type: EksClusterDetails object

Required: No

instanceDetails

The information about the EC2 instance associated with the activity that prompted GuardDuty to generate a finding.

Type: InstanceDetails object

Required: No

kubernetesDetails

Details about the Kubernetes user and workload involved in a Kubernetes finding.

Type: KubernetesDetails object

Required: No

lambdaDetails

Contains information about the Lambda function that was involved in a finding.

Type: LambdaDetails object

Required: No

rdsDbInstanceDetails

Contains information about the database instance to which an anomalous login attempt was made.

Type: RdsDbInstanceDetails object

Required: No

rdsDbUserDetails

Contains information about the user details through which anomalous login attempt was made.

Type: RdsDbUserDetails object

Required: No

rdsLimitlessDbDetails

Contains information about the RDS Limitless database that was involved in a GuardDuty finding.

Type: RdsLimitlessDbDetails object

Required: No

resourceType

The type of AWS resource.

Type: String

Required: No

s3BucketDetails

Contains information on the S3 bucket.

Type: Array of S3BucketDetail objects

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following:

PrivacySite termsCookie preferences
© 2025, Amazon Web Services, Inc. or its affiliates. All rights reserved.