Class: Aws::SecurityHub::Types::AwsApiCallAction

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb

Overview

Note:

When making an API call, you may pass AwsApiCallAction data as a hash:

{
  api: "NonEmptyString",
  service_name: "NonEmptyString",
  caller_type: "NonEmptyString",
  remote_ip_details: {
    ip_address_v4: "NonEmptyString",
    organization: {
      asn: 1,
      asn_org: "NonEmptyString",
      isp: "NonEmptyString",
      org: "NonEmptyString",
    },
    country: {
      country_code: "NonEmptyString",
      country_name: "NonEmptyString",
    },
    city: {
      city_name: "NonEmptyString",
    },
    geo_location: {
      lon: 1.0,
      lat: 1.0,
    },
  },
  domain_details: {
    domain: "NonEmptyString",
  },
  affected_resources: {
    "NonEmptyString" => "NonEmptyString",
  },
  first_seen: "NonEmptyString",
  last_seen: "NonEmptyString",
}

Provided if ActionType is AWS_API_CALL. It provides details about the API call that was detected.

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#affected_resources ⇒ Hash<String,String>

Identifies the resources that were affected by the API call.

Returns:

  • (Hash<String,String>) 


609
610
611
612
613
614
615
616
617
618
619
620
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 609

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#api ⇒ String

The name of the API method that was issued.

Returns:

  • (String) 


609
610
611
612
613
614
615
616
617
618
619
620
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 609

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#caller_type ⇒ String

Indicates whether the API call originated from a remote IP address (remoteip) or from a DNS domain (domain).

Returns:

  • (String) 


609
610
611
612
613
614
615
616
617
618
619
620
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 609

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#domain_details ⇒ Types::AwsApiCallActionDomainDetails

Provided if CallerType is domain. Provides information about the DNS domain that the API call originated from.

Returns:



609
610
611
612
613
614
615
616
617
618
619
620
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 609

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#first_seen ⇒ String

An ISO8601-formatted timestamp that indicates when the API call was first observed.

Returns:

  • (String) 


609
610
611
612
613
614
615
616
617
618
619
620
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 609

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#last_seen ⇒ String

An ISO8601-formatted timestamp that indicates when the API call was most recently observed.

Returns:

  • (String) 


609
610
611
612
613
614
615
616
617
618
619
620
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 609

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#remote_ip_details ⇒ Types::ActionRemoteIpDetails

Provided if CallerType is remoteIp. Provides information about the remote IP address that the API call originated from.

Returns:



609
610
611
612
613
614
615
616
617
618
619
620
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 609

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#service_name ⇒ String

The name of the Amazon Web Services service that the API method belongs to.

Returns:

  • (String) 


609
610
611
612
613
614
615
616
617
618
619
620
 
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 609

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end