View a markdown version of this page

FetchRecord - Amazon GuardDuty
ContentsSee Also

FetchRecord

Contains information about data that GuardDuty retrieved during an investigation, including what GuardDuty requested and what it received.

Contents

fetchType

The kind of data that GuardDuty retrieved. The value determines which members of Query and Result can be set. Possible values:

  • FINDINGS – GuardDuty findings.

  • DETECTOR – The configuration of a GuardDuty detector.

  • REPUTATION – Reputation information about a threat indicator, such as an IP address, a domain, or a file hash.

  • FINDING_TYPE_DOCUMENTATION – The documentation for a finding type.

  • CLOUD_TRAIL_RAW_EVENTS – AWS CloudTrail events.

  • RUNTIME_SIGNALS – Runtime signals.

  • MEMBER_ACCOUNTS – A list of member accounts.

Type: String

Valid Values: FINDINGS | DETECTOR | REPUTATION | FINDING_TYPE_DOCUMENTATION | CLOUD_TRAIL_RAW_EVENTS | RUNTIME_SIGNALS | MEMBER_ACCOUNTS

Required: Yes

query

The request that GuardDuty made. Not every record includes a query.

Type: FetchQuery object

Required: No

result

The data that GuardDuty received in response to the request. Not every record includes a result.

Type: FetchResult object

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: