View a markdown version of this page

S3Activity - Amazon GuardDuty

S3Activity

Contains details about Amazon S3 activity.

Contents

activityWindow

The time range of the activity.

Type: ActivityWindow object

Required: No

actor

The identity that performed the activity.

Type: InvestigationActor object

Required: No

affectedBucket

The name of the affected bucket, or account-wide if the activity isn't limited to one bucket.

Type: String

Required: No

api

The Amazon S3 API operation that was called.

Type: String

Required: No

enrichment

Additional context about the activity, such as geolocation information.

Type: Enrichment object

Required: No

eventCount

The number of events.

Type: Long

Valid Range: Minimum value of 0.

Required: No

nonS3Activity

Related activity on AWS services other than Amazon S3.

Type: String

Required: No

otherS3Activity

Other Amazon S3 activity that is related to the observation.

Type: String

Required: No

sessionAssessment

An assessment of the session in which the activity occurred.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 4096.

Required: No

sourceIp

The source address of the activity, or a description of the source.

Type: String

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: