View a markdown version of this page

FetchQuery - Amazon GuardDuty

FetchQuery

Contains the parameters of a request that GuardDuty made to retrieve data during an investigation. The members that are set depend on the FetchType of the record.

Contents

accountId

The AWS account ID that the request was made for.

Type: String

Required: No

criteria

The filter criteria that GuardDuty applied to the request.

Type: Array of FetchCriterion objects

Array Members: Minimum number of 0 items. Maximum number of 20 items.

Required: No

findingId

The ID of the finding that GuardDuty retrieved.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 300.

Required: No

findingType

The finding type whose documentation GuardDuty retrieved.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 100.

Required: No

indicator

The threat indicator that GuardDuty looked up, such as an IP address, a domain, or a file hash.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 1024.

Required: No

indicatorType

The type of the threat indicator. Possible values are IP, DOMAIN, and FILE.

Type: String

Valid Values: IP | DOMAIN | FILE

Required: No

rowLimit

The maximum number of rows that GuardDuty requested. Valid values are 1 to 1,000.

Type: Integer

Valid Range: Minimum value of 1. Maximum value of 1000.

Required: No

timeWindow

The time range of the data that GuardDuty requested.

Type: FetchTimeWindow object

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: