Class: Aws::SecurityHub::Types::AwsApiCallAction

Inherits:
Struct
  • Object
show all
Defined in:
gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb

Overview

Note:

When making an API call, you may pass AwsApiCallAction data as a hash:

{
  api: "NonEmptyString",
  service_name: "NonEmptyString",
  caller_type: "NonEmptyString",
  remote_ip_details: {
    ip_address_v4: "NonEmptyString",
    organization: {
      asn: 1,
      asn_org: "NonEmptyString",
      isp: "NonEmptyString",
      org: "NonEmptyString",
    },
    country: {
      country_code: "NonEmptyString",
      country_name: "NonEmptyString",
    },
    city: {
      city_name: "NonEmptyString",
    },
    geo_location: {
      lon: 1.0,
      lat: 1.0,
    },
  },
  domain_details: {
    domain: "NonEmptyString",
  },
  affected_resources: {
    "NonEmptyString" => "NonEmptyString",
  },
  first_seen: "NonEmptyString",
  last_seen: "NonEmptyString",
}

Provided if ActionType is AWS_API_CALL. It provides details about the API call that was detected.

Constant Summary collapse

SENSITIVE =
[]

Instance Attribute Summary collapse

Instance Attribute Details

#affected_resourcesHash<String,String>

Identifies the resources that were affected by the API call.

Returns:

  • (Hash<String,String>)


549
550
551
552
553
554
555
556
557
558
559
560
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 549

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#apiString

The name of the API method that was issued.

Returns:

  • (String)


549
550
551
552
553
554
555
556
557
558
559
560
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 549

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#caller_typeString

Indicates whether the API call originated from a remote IP address (remoteip) or from a DNS domain (domain).

Returns:

  • (String)


549
550
551
552
553
554
555
556
557
558
559
560
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 549

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#domain_detailsTypes::AwsApiCallActionDomainDetails

Provided if CallerType is domain. Provides information about the DNS domain that the API call originated from.



549
550
551
552
553
554
555
556
557
558
559
560
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 549

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#first_seenString

An ISO8601-formatted timestamp that indicates when the API call was first observed.

Returns:

  • (String)


549
550
551
552
553
554
555
556
557
558
559
560
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 549

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#last_seenString

An ISO8601-formatted timestamp that indicates when the API call was most recently observed.

Returns:

  • (String)


549
550
551
552
553
554
555
556
557
558
559
560
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 549

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#remote_ip_detailsTypes::ActionRemoteIpDetails

Provided if CallerType is remoteIp. Provides information about the remote IP address that the API call originated from.



549
550
551
552
553
554
555
556
557
558
559
560
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 549

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end

#service_nameString

The name of the AWS service that the API method belongs to.

Returns:

  • (String)


549
550
551
552
553
554
555
556
557
558
559
560
# File 'gems/aws-sdk-securityhub/lib/aws-sdk-securityhub/types.rb', line 549

class AwsApiCallAction < Struct.new(
  :api,
  :service_name,
  :caller_type,
  :remote_ip_details,
  :domain_details,
  :affected_resources,
  :first_seen,
  :last_seen)
  SENSITIVE = []
  include Aws::Structure
end