FetchResult
Contains the data that GuardDuty received in response to a request during an
investigation. The members that are set depend on the FetchType of the
record.
Contents
- documentation
-
The documentation for the finding type that GuardDuty retrieved.
Type: FindingTypeDocumentation object
Required: No
- features
-
The configuration of the detector features that GuardDuty retrieved.
Type: Array of InvestigationDetectorFeatureConfiguration objects
Array Members: Minimum number of 0 items. Maximum number of 50 items.
Required: No
- itemIds
-
The identifiers of the items that were returned, such as finding IDs, event IDs, signal IDs, or account IDs, depending on
FetchType. The list contains at most 50 identifiers;TotalCountcan be larger.Type: Array of strings
Array Members: Minimum number of 0 items. Maximum number of 50 items.
Length Constraints: Minimum length of 1. Maximum length of 300.
Required: No
- totalCount
-
The total number of items that were returned. This value can be greater than the number of identifiers in
ItemIds.Type: Long
Valid Range: Minimum value of 0.
Required: No
- verdict
-
The reputation verdict for the threat indicator. Possible values are
THREAT,BENIGN, andNEUTRAL. If the lookup returned more than one result, the verdict describes the first result.Type: String
Valid Values:
THREAT | BENIGN | NEUTRALRequired: No
See Also
For more information about using this API in one of the language-specific AWS SDKs, see the following:
