/AWS1/CL_GDYDNSREQUESTACTION¶
Contains information about the DNS_REQUEST action described in this finding.
CONSTRUCTOR¶
IMPORTING¶
Optional arguments:¶
iv_domain TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING¶
The domain information for the DNS query.
iv_protocol TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING¶
The network connection protocol observed in the activity that prompted GuardDuty to generate the finding.
iv_blocked TYPE /AWS1/GDYBOOLEAN /AWS1/GDYBOOLEAN¶
Indicates whether the targeted port is blocked.
iv_domainwithsuffix TYPE /AWS1/GDYSTRING /AWS1/GDYSTRING¶
The second and top level domain involved in the activity that potentially prompted GuardDuty to generate this finding. For a list of top-level and second-level domains, see public suffix list.
iv_vpcowneraccountid TYPE /AWS1/GDYACCOUNTID /AWS1/GDYACCOUNTID¶
The Amazon Web Services account ID that owns the VPC through which the DNS request was made.
Queryable Attributes¶
Domain¶
The domain information for the DNS query.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_DOMAIN() |
Getter for DOMAIN, with configurable default |
ASK_DOMAIN() |
Getter for DOMAIN w/ exceptions if field has no value |
HAS_DOMAIN() |
Determine if DOMAIN has a value |
Protocol¶
The network connection protocol observed in the activity that prompted GuardDuty to generate the finding.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_PROTOCOL() |
Getter for PROTOCOL, with configurable default |
ASK_PROTOCOL() |
Getter for PROTOCOL w/ exceptions if field has no value |
HAS_PROTOCOL() |
Determine if PROTOCOL has a value |
Blocked¶
Indicates whether the targeted port is blocked.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_BLOCKED() |
Getter for BLOCKED, with configurable default |
ASK_BLOCKED() |
Getter for BLOCKED w/ exceptions if field has no value |
HAS_BLOCKED() |
Determine if BLOCKED has a value |
DomainWithSuffix¶
The second and top level domain involved in the activity that potentially prompted GuardDuty to generate this finding. For a list of top-level and second-level domains, see public suffix list.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_DOMAINWITHSUFFIX() |
Getter for DOMAINWITHSUFFIX, with configurable default |
ASK_DOMAINWITHSUFFIX() |
Getter for DOMAINWITHSUFFIX w/ exceptions if field has no va |
HAS_DOMAINWITHSUFFIX() |
Determine if DOMAINWITHSUFFIX has a value |
VpcOwnerAccountId¶
The Amazon Web Services account ID that owns the VPC through which the DNS request was made.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_VPCOWNERACCOUNTID() |
Getter for VPCOWNERACCOUNTID, with configurable default |
ASK_VPCOWNERACCOUNTID() |
Getter for VPCOWNERACCOUNTID w/ exceptions if field has no v |
HAS_VPCOWNERACCOUNTID() |
Determine if VPCOWNERACCOUNTID has a value |