The likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0–100 basis using a ratio scale. A value of 0 means 0 percent confidence, and a value of 100 means 100 percent confidence. Documented below.

createdAts

val createdAts: List<AutomationRuleCriteriaCreatedAt>? = null

A timestamp that indicates when this finding record was created. Documented below.

criticalities

val criticalities: List<AutomationRuleCriteriaCriticality>? = null

The level of importance that is assigned to the resources that are associated with a finding. Documented below.

descriptions

val descriptions: List<AutomationRuleCriteriaDescription>? = null

A finding's description. Documented below.

firstObservedAts

val firstObservedAts: List<AutomationRuleCriteriaFirstObservedAt>? = null

A timestamp that indicates when the potential security issue captured by a finding was first observed by the security findings product. Documented below.

generatorIds

val generatorIds: List<AutomationRuleCriteriaGeneratorId>? = null

The identifier for the solution-specific component that generated a finding. Documented below.

ids

val ids: List<AutomationRuleCriteriaId>? = null

The product-specific identifier for a finding. Documented below.

lastObservedAts

val lastObservedAts: List<AutomationRuleCriteriaLastObservedAt>? = null

A timestamp that indicates when the potential security issue captured by a finding was most recently observed by the security findings product. Documented below.

noteTexts

val noteTexts: List<AutomationRuleCriteriaNoteText>? = null

The text of a user-defined note that's added to a finding. Documented below.

noteUpdatedAts

val noteUpdatedAts: List<AutomationRuleCriteriaNoteUpdatedAt>? = null

The timestamp of when the note was updated. Documented below.

noteUpdatedBies

val noteUpdatedBies: List<AutomationRuleCriteriaNoteUpdatedBy>? = null

The principal that created a note. Documented below.

productArns

val productArns: List<AutomationRuleCriteriaProductArn>? = null

The Amazon Resource Name (ARN) for a third-party product that generated a finding in Security Hub. Documented below.

productNames

val productNames: List<AutomationRuleCriteriaProductName>? = null

Provides the name of the product that generated the finding. For control-based findings, the product name is Security Hub. Documented below.

recordStates

val recordStates: List<AutomationRuleCriteriaRecordState>? = null

Provides the current state of a finding. Documented below.

relatedFindingsIds

The product-generated identifier for a related finding. Documented below.

relatedFindingsProductArns

The ARN for the product that generated a related finding. Documented below.

resourceApplicationArns

val resourceApplicationArns: List<AutomationRuleCriteriaResourceApplicationArn>? = null

The Amazon Resource Name (ARN) of the application that is related to a finding. Documented below.

resourceApplicationNames

val resourceApplicationNames: List<AutomationRuleCriteriaResourceApplicationName>? = null

The name of the application that is related to a finding. Documented below.

resourceDetailsOthers

val resourceDetailsOthers: List<AutomationRuleCriteriaResourceDetailsOther>? = null

Custom fields and values about the resource that a finding pertains to. Documented below.

resourceIds

val resourceIds: List<AutomationRuleCriteriaResourceId>? = null

The identifier for the given resource type. For AWS resources that are identified by Amazon Resource Names (ARNs), this is the ARN. For AWS resources that lack ARNs, this is the identifier as defined by the AWS service that created the resource. For non-AWS resources, this is a unique identifier that is associated with the resource. Documented below.

resourcePartitions

val resourcePartitions: List<AutomationRuleCriteriaResourcePartition>? = null

The partition in which the resource that the finding pertains to is located. A partition is a group of AWS Regions. Each AWS account is scoped to one partition. Documented below.

resourceRegions

val resourceRegions: List<AutomationRuleCriteriaResourceRegion>? = null

The AWS Region where the resource that a finding pertains to is located. Documented below.

resourceTags

val resourceTags: List<AutomationRuleCriteriaResourceTag>? = null

A list of AWS tags associated with a resource at the time the finding was processed. Documented below.

resourceTypes

val resourceTypes: List<AutomationRuleCriteriaResourceType>? = null

The type of resource that the finding pertains to. Documented below.

severityLabels

val severityLabels: List<AutomationRuleCriteriaSeverityLabel>? = null

The severity value of the finding. Documented below.

sourceUrls

val sourceUrls: List<AutomationRuleCriteriaSourceUrl>? = null

Provides a URL that links to a page about the current finding in the finding product. Documented below.

titles

val titles: List<AutomationRuleCriteriaTitle>? = null

A finding's title. Documented below.

types

val types: List<AutomationRuleCriteriaType>? = null

One or more finding types in the format of namespace/category/classifier that classify a finding. Documented below.

updatedAts

val updatedAts: List<AutomationRuleCriteriaUpdatedAt>? = null

A timestamp that indicates when the finding record was most recently updated. Documented below.

userDefinedFields

val userDefinedFields: List<AutomationRuleCriteriaUserDefinedField>? = null

A list of user-defined name and value string pairs added to a finding. Documented below.

verificationStates

val verificationStates: List<AutomationRuleCriteriaVerificationState>? = null

Provides the veracity of a finding. Documented below.

workflowStatuses

val workflowStatuses: List<AutomationRuleCriteriaWorkflowStatus>? = null

Provides information about the status of the investigation into a finding. Documented below.