View a markdown version of this page

DetectionCoverage - Amazon GuardDuty

DetectionCoverage

Contains information about your detection coverage, such as the status of protection plans and foundational data sources.

Contents

coverageGaps

A description of the gaps in detection coverage. A record doesn't include both CoverageGaps and KeyObservation.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 4096.

Required: No

foundationalDataSources

The foundational data sources, such as CLOUD_TRAIL, DNS_LOGS, and FLOW_LOGS.

Type: Array of strings

Array Members: Minimum number of 0 items. Maximum number of 20 items.

Valid Values: CLOUD_TRAIL | DNS_LOGS | FLOW_LOGS | S3_DATA_EVENTS | EKS_AUDIT_LOGS | EBS_MALWARE_PROTECTION | RDS_LOGIN_EVENTS | EKS_RUNTIME_MONITORING | EKS_ADDON_MANAGEMENT | LAMBDA_NETWORK_LOGS | RUNTIME_MONITORING | ECS_FARGATE_AGENT_MANAGEMENT | EC2_AGENT_MANAGEMENT

Required: No

keyObservation

A key observation about detection coverage.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 4096.

Required: No

protectionPlans

The protection plans and their status.

Type: Array of ProtectionPlan objects

Array Members: Minimum number of 0 items. Maximum number of 20 items.

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: