pulumi-aws-kotlin/com.pulumi.aws.securityhub.kotlin.outputs/InsightFilters

InsightFilters

data class InsightFilters(val awsAccountIds: List<InsightFiltersAwsAccountId>? = null, val companyNames: List<InsightFiltersCompanyName>? = null, val complianceStatuses: List<InsightFiltersComplianceStatus>? = null, val confidences: List<InsightFiltersConfidence>? = null, val createdAts: List<InsightFiltersCreatedAt>? = null, val criticalities: List<InsightFiltersCriticality>? = null, val descriptions: List<InsightFiltersDescription>? = null, val findingProviderFieldsConfidences: List<InsightFiltersFindingProviderFieldsConfidence>? = null, val findingProviderFieldsCriticalities: List<InsightFiltersFindingProviderFieldsCriticality>? = null, val findingProviderFieldsRelatedFindingsIds: List<InsightFiltersFindingProviderFieldsRelatedFindingsId>? = null, val findingProviderFieldsRelatedFindingsProductArns: List<InsightFiltersFindingProviderFieldsRelatedFindingsProductArn>? = null, val findingProviderFieldsSeverityLabels: List<InsightFiltersFindingProviderFieldsSeverityLabel>? = null, val findingProviderFieldsSeverityOriginals: List<InsightFiltersFindingProviderFieldsSeverityOriginal>? = null, val findingProviderFieldsTypes: List<InsightFiltersFindingProviderFieldsType>? = null, val firstObservedAts: List<InsightFiltersFirstObservedAt>? = null, val generatorIds: List<InsightFiltersGeneratorId>? = null, val ids: List<InsightFiltersId>? = null, val keywords: List<InsightFiltersKeyword>? = null, val lastObservedAts: List<InsightFiltersLastObservedAt>? = null, val malwareNames: List<InsightFiltersMalwareName>? = null, val malwarePaths: List<InsightFiltersMalwarePath>? = null, val malwareStates: List<InsightFiltersMalwareState>? = null, val malwareTypes: List<InsightFiltersMalwareType>? = null, val networkDestinationDomains: List<InsightFiltersNetworkDestinationDomain>? = null, val networkDestinationIpv4s: List<InsightFiltersNetworkDestinationIpv4>? = null, val networkDestinationIpv6s: List<InsightFiltersNetworkDestinationIpv6>? = null, val networkDestinationPorts: List<InsightFiltersNetworkDestinationPort>? = null, val networkDirections: List<InsightFiltersNetworkDirection>? = null, val networkProtocols: List<InsightFiltersNetworkProtocol>? = null, val networkSourceDomains: List<InsightFiltersNetworkSourceDomain>? = null, val networkSourceIpv4s: List<InsightFiltersNetworkSourceIpv4>? = null, val networkSourceIpv6s: List<InsightFiltersNetworkSourceIpv6>? = null, val networkSourceMacs: List<InsightFiltersNetworkSourceMac>? = null, val networkSourcePorts: List<InsightFiltersNetworkSourcePort>? = null, val noteTexts: List<InsightFiltersNoteText>? = null, val noteUpdatedAts: List<InsightFiltersNoteUpdatedAt>? = null, val noteUpdatedBies: List<InsightFiltersNoteUpdatedBy>? = null, val processLaunchedAts: List<InsightFiltersProcessLaunchedAt>? = null, val processNames: List<InsightFiltersProcessName>? = null, val processParentPids: List<InsightFiltersProcessParentPid>? = null, val processPaths: List<InsightFiltersProcessPath>? = null, val processPids: List<InsightFiltersProcessPid>? = null, val processTerminatedAts: List<InsightFiltersProcessTerminatedAt>? = null, val productArns: List<InsightFiltersProductArn>? = null, val productFields: List<InsightFiltersProductField>? = null, val productNames: List<InsightFiltersProductName>? = null, val recommendationTexts: List<InsightFiltersRecommendationText>? = null, val recordStates: List<InsightFiltersRecordState>? = null, val relatedFindingsIds: List<InsightFiltersRelatedFindingsId>? = null, val relatedFindingsProductArns: List<InsightFiltersRelatedFindingsProductArn>? = null, val resourceAwsEc2InstanceIamInstanceProfileArns: List<InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn>? = null, val resourceAwsEc2InstanceImageIds: List<InsightFiltersResourceAwsEc2InstanceImageId>? = null, val resourceAwsEc2InstanceIpv4Addresses: List<InsightFiltersResourceAwsEc2InstanceIpv4Address>? = null, val resourceAwsEc2InstanceIpv6Addresses: List<InsightFiltersResourceAwsEc2InstanceIpv6Address>? = null, val resourceAwsEc2InstanceKeyNames: List<InsightFiltersResourceAwsEc2InstanceKeyName>? = null, val resourceAwsEc2InstanceLaunchedAts: List<InsightFiltersResourceAwsEc2InstanceLaunchedAt>? = null, val resourceAwsEc2InstanceSubnetIds: List<InsightFiltersResourceAwsEc2InstanceSubnetId>? = null, val resourceAwsEc2InstanceTypes: List<InsightFiltersResourceAwsEc2InstanceType>? = null, val resourceAwsEc2InstanceVpcIds: List<InsightFiltersResourceAwsEc2InstanceVpcId>? = null, val resourceAwsIamAccessKeyCreatedAts: List<InsightFiltersResourceAwsIamAccessKeyCreatedAt>? = null, val resourceAwsIamAccessKeyStatuses: List<InsightFiltersResourceAwsIamAccessKeyStatus>? = null, val resourceAwsIamAccessKeyUserNames: List<InsightFiltersResourceAwsIamAccessKeyUserName>? = null, val resourceAwsS3BucketOwnerIds: List<InsightFiltersResourceAwsS3BucketOwnerId>? = null, val resourceAwsS3BucketOwnerNames: List<InsightFiltersResourceAwsS3BucketOwnerName>? = null, val resourceContainerImageIds: List<InsightFiltersResourceContainerImageId>? = null, val resourceContainerImageNames: List<InsightFiltersResourceContainerImageName>? = null, val resourceContainerLaunchedAts: List<InsightFiltersResourceContainerLaunchedAt>? = null, val resourceContainerNames: List<InsightFiltersResourceContainerName>? = null, val resourceDetailsOthers: List<InsightFiltersResourceDetailsOther>? = null, val resourceIds: List<InsightFiltersResourceId>? = null, val resourcePartitions: List<InsightFiltersResourcePartition>? = null, val resourceRegions: List<InsightFiltersResourceRegion>? = null, val resourceTags: List<InsightFiltersResourceTag>? = null, val resourceTypes: List<InsightFiltersResourceType>? = null, val severityLabels: List<InsightFiltersSeverityLabel>? = null, val sourceUrls: List<InsightFiltersSourceUrl>? = null, val threatIntelIndicatorCategories: List<InsightFiltersThreatIntelIndicatorCategory>? = null, val threatIntelIndicatorLastObservedAts: List<InsightFiltersThreatIntelIndicatorLastObservedAt>? = null, val threatIntelIndicatorSourceUrls: List<InsightFiltersThreatIntelIndicatorSourceUrl>? = null, val threatIntelIndicatorSources: List<InsightFiltersThreatIntelIndicatorSource>? = null, val threatIntelIndicatorTypes: List<InsightFiltersThreatIntelIndicatorType>? = null, val threatIntelIndicatorValues: List<InsightFiltersThreatIntelIndicatorValue>? = null, val titles: List<InsightFiltersTitle>? = null, val types: List<InsightFiltersType>? = null, val updatedAts: List<InsightFiltersUpdatedAt>? = null, val userDefinedValues: List<InsightFiltersUserDefinedValue>? = null, val verificationStates: List<InsightFiltersVerificationState>? = null, val workflowStatuses: List<InsightFiltersWorkflowStatus>? = null)

Constructors

InsightFilters

Types

Companion

object Companion

Properties

awsAccountIds

val awsAccountIds: List<InsightFiltersAwsAccountId>? = null

AWS account ID that a finding is generated in. See String_Filter below for more details.

companyNames

val companyNames: List<InsightFiltersCompanyName>? = null

The name of the findings provider (company) that owns the solution (product) that generates findings. See String_Filter below for more details.

complianceStatuses

val complianceStatuses: List<InsightFiltersComplianceStatus>? = null

Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS AWS Foundations. Contains security standard-related finding details. See String Filter below for more details.

confidences

val confidences: List<InsightFiltersConfidence>? = null

A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

createdAts

val createdAts: List<InsightFiltersCreatedAt>? = null

An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security issue that a finding captured. See Date Filter below for more details.

criticalities

val criticalities: List<InsightFiltersCriticality>? = null

The level of importance assigned to the resources associated with the finding. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

descriptions

val descriptions: List<InsightFiltersDescription>? = null

A finding's description. See String Filter below for more details.

findingProviderFieldsConfidences

val findingProviderFieldsConfidences: List<InsightFiltersFindingProviderFieldsConfidence>? = null

The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify. Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence. See Number Filter below for more details.

findingProviderFieldsCriticalities

val findingProviderFieldsCriticalities: List<InsightFiltersFindingProviderFieldsCriticality>? = null

The finding provider value for the level of importance assigned to the resources associated with the findings. A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources. See Number Filter below for more details.

findingProviderFieldsRelatedFindingsIds

val findingProviderFieldsRelatedFindingsIds: List<InsightFiltersFindingProviderFieldsRelatedFindingsId>? = null

The finding identifier of a related finding that is identified by the finding provider. See String Filter below for more details.

findingProviderFieldsRelatedFindingsProductArns

val findingProviderFieldsRelatedFindingsProductArns: List<InsightFiltersFindingProviderFieldsRelatedFindingsProductArn>? = null

The ARN of the solution that generated a related finding that is identified by the finding provider. See String Filter below for more details.

findingProviderFieldsSeverityLabels

val findingProviderFieldsSeverityLabels: List<InsightFiltersFindingProviderFieldsSeverityLabel>? = null

The finding provider value for the severity label. See String Filter below for more details.

findingProviderFieldsSeverityOriginals

val findingProviderFieldsSeverityOriginals: List<InsightFiltersFindingProviderFieldsSeverityOriginal>? = null

The finding provider's original value for the severity. See String Filter below for more details.

findingProviderFieldsTypes

val findingProviderFieldsTypes: List<InsightFiltersFindingProviderFieldsType>? = null

One or more finding types that the finding provider assigned to the finding. Uses the format of namespace/category/classifier that classify a finding. Valid namespace values include: Software and Configuration Checks, TTPs, Effects, Unusual Behaviors, and Sensitive Data Identifications. See String Filter below for more details.

firstObservedAts

val firstObservedAts: List<InsightFiltersFirstObservedAt>? = null

An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential security issue that a finding captured. See Date Filter below for more details.

generatorIds

val generatorIds: List<InsightFiltersGeneratorId>? = null

The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. See String Filter below for more details.

ids

val ids: List<InsightFiltersId>? = null

The security findings provider-specific identifier for a finding. See String Filter below for more details.

keywords

val keywords: List<InsightFiltersKeyword>? = null

A keyword for a finding. See Keyword Filter below for more details.

lastObservedAts

val lastObservedAts: List<InsightFiltersLastObservedAt>? = null

An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the potential security issue that a finding captured. See Date Filter below for more details.

malwareNames

val malwareNames: List<InsightFiltersMalwareName>? = null

The name of the malware that was observed. See String Filter below for more details.

malwarePaths

val malwarePaths: List<InsightFiltersMalwarePath>? = null

The filesystem path of the malware that was observed. See String Filter below for more details.

malwareStates

val malwareStates: List<InsightFiltersMalwareState>? = null

The state of the malware that was observed. See String Filter below for more details.

malwareTypes

val malwareTypes: List<InsightFiltersMalwareType>? = null

The type of the malware that was observed. See String Filter below for more details.

networkDestinationDomains

val networkDestinationDomains: List<InsightFiltersNetworkDestinationDomain>? = null

The destination domain of network-related information about a finding. See String Filter below for more details.

networkDestinationIpv4s

val networkDestinationIpv4s: List<InsightFiltersNetworkDestinationIpv4>? = null

The destination IPv4 address of network-related information about a finding. See Ip Filter below for more details.

networkDestinationIpv6s

val networkDestinationIpv6s: List<InsightFiltersNetworkDestinationIpv6>? = null

The destination IPv6 address of network-related information about a finding. See Ip Filter below for more details.

networkDestinationPorts

val networkDestinationPorts: List<InsightFiltersNetworkDestinationPort>? = null

The destination port of network-related information about a finding. See Number Filter below for more details.

networkDirections

val networkDirections: List<InsightFiltersNetworkDirection>? = null

Indicates the direction of network traffic associated with a finding. See String Filter below for more details.

networkProtocols

val networkProtocols: List<InsightFiltersNetworkProtocol>? = null

The protocol of network-related information about a finding. See String Filter below for more details.

networkSourceDomains

val networkSourceDomains: List<InsightFiltersNetworkSourceDomain>? = null

The source domain of network-related information about a finding. See String Filter below for more details.

networkSourceIpv4s

val networkSourceIpv4s: List<InsightFiltersNetworkSourceIpv4>? = null

The source IPv4 address of network-related information about a finding. See Ip Filter below for more details.

networkSourceIpv6s

val networkSourceIpv6s: List<InsightFiltersNetworkSourceIpv6>? = null

The source IPv6 address of network-related information about a finding. See Ip Filter below for more details.

networkSourceMacs

val networkSourceMacs: List<InsightFiltersNetworkSourceMac>? = null

The source media access control (MAC) address of network-related information about a finding. See String Filter below for more details.

networkSourcePorts

val networkSourcePorts: List<InsightFiltersNetworkSourcePort>? = null

The source port of network-related information about a finding. See Number Filter below for more details.

noteTexts

val noteTexts: List<InsightFiltersNoteText>? = null

The text of a note. See String Filter below for more details.

noteUpdatedAts

val noteUpdatedAts: List<InsightFiltersNoteUpdatedAt>? = null

The timestamp of when the note was updated. See Date Filter below for more details.

noteUpdatedBies

val noteUpdatedBies: List<InsightFiltersNoteUpdatedBy>? = null

The principal that created a note. See String Filter below for more details.

processLaunchedAts

val processLaunchedAts: List<InsightFiltersProcessLaunchedAt>? = null

The date/time that the process was launched. See Date Filter below for more details.

processNames

val processNames: List<InsightFiltersProcessName>? = null

The name of the process. See String Filter below for more details.

processParentPids

val processParentPids: List<InsightFiltersProcessParentPid>? = null

The parent process ID. See Number Filter below for more details.

processPaths

val processPaths: List<InsightFiltersProcessPath>? = null

The path to the process executable. See String Filter below for more details.

processPids

val processPids: List<InsightFiltersProcessPid>? = null

The process ID. See Number Filter below for more details.

processTerminatedAts

val processTerminatedAts: List<InsightFiltersProcessTerminatedAt>? = null

The date/time that the process was terminated. See Date Filter below for more details.

productArns

val productArns: List<InsightFiltersProductArn>? = null

The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub. See String Filter below for more details.

productFields

val productFields: List<InsightFiltersProductField>? = null

A data type where security-findings providers can include additional solution-specific details that aren't part of the defined AwsSecurityFinding format. See Map Filter below for more details.

productNames

val productNames: List<InsightFiltersProductName>? = null

The name of the solution (product) that generates findings. See String Filter below for more details.

recommendationTexts

val recommendationTexts: List<InsightFiltersRecommendationText>? = null

The recommendation of what to do about the issue described in a finding. See String Filter below for more details.

recordStates

val recordStates: List<InsightFiltersRecordState>? = null

The updated record state for the finding. See String Filter below for more details.

relatedFindingsIds

The solution-generated identifier for a related finding. See String Filter below for more details.

relatedFindingsProductArns

The ARN of the solution that generated a related finding. See String Filter below for more details.

resourceAwsEc2InstanceIamInstanceProfileArns

val resourceAwsEc2InstanceIamInstanceProfileArns: List<InsightFiltersResourceAwsEc2InstanceIamInstanceProfileArn>? = null

The IAM profile ARN of the instance. See String Filter below for more details.

resourceAwsEc2InstanceImageIds

val resourceAwsEc2InstanceImageIds: List<InsightFiltersResourceAwsEc2InstanceImageId>? = null

The Amazon Machine Image (AMI) ID of the instance. See String Filter below for more details.

resourceAwsEc2InstanceIpv4Addresses

val resourceAwsEc2InstanceIpv4Addresses: List<InsightFiltersResourceAwsEc2InstanceIpv4Address>? = null

The IPv4 addresses associated with the instance. See Ip Filter below for more details.

resourceAwsEc2InstanceIpv6Addresses

val resourceAwsEc2InstanceIpv6Addresses: List<InsightFiltersResourceAwsEc2InstanceIpv6Address>? = null

The IPv6 addresses associated with the instance. See Ip Filter below for more details.

resourceAwsEc2InstanceKeyNames

val resourceAwsEc2InstanceKeyNames: List<InsightFiltersResourceAwsEc2InstanceKeyName>? = null

The key name associated with the instance. See String Filter below for more details.

resourceAwsEc2InstanceLaunchedAts

val resourceAwsEc2InstanceLaunchedAts: List<InsightFiltersResourceAwsEc2InstanceLaunchedAt>? = null

The date and time the instance was launched. See Date Filter below for more details.

resourceAwsEc2InstanceSubnetIds

val resourceAwsEc2InstanceSubnetIds: List<InsightFiltersResourceAwsEc2InstanceSubnetId>? = null

The identifier of the subnet that the instance was launched in. See String Filter below for more details.

resourceAwsEc2InstanceTypes

val resourceAwsEc2InstanceTypes: List<InsightFiltersResourceAwsEc2InstanceType>? = null

The instance type of the instance. See String Filter below for more details.

resourceAwsEc2InstanceVpcIds

val resourceAwsEc2InstanceVpcIds: List<InsightFiltersResourceAwsEc2InstanceVpcId>? = null

The identifier of the VPC that the instance was launched in. See String Filter below for more details.

resourceAwsIamAccessKeyCreatedAts

val resourceAwsIamAccessKeyCreatedAts: List<InsightFiltersResourceAwsIamAccessKeyCreatedAt>? = null

The creation date/time of the IAM access key related to a finding. See Date Filter below for more details.

resourceAwsIamAccessKeyStatuses

val resourceAwsIamAccessKeyStatuses: List<InsightFiltersResourceAwsIamAccessKeyStatus>? = null

The status of the IAM access key related to a finding. See String Filter below for more details.

resourceAwsIamAccessKeyUserNames

val resourceAwsIamAccessKeyUserNames: List<InsightFiltersResourceAwsIamAccessKeyUserName>? = null

The user associated with the IAM access key related to a finding. See String Filter below for more details.

resourceAwsS3BucketOwnerIds

val resourceAwsS3BucketOwnerIds: List<InsightFiltersResourceAwsS3BucketOwnerId>? = null

The canonical user ID of the owner of the S3 bucket. See String Filter below for more details.

resourceAwsS3BucketOwnerNames

val resourceAwsS3BucketOwnerNames: List<InsightFiltersResourceAwsS3BucketOwnerName>? = null

The display name of the owner of the S3 bucket. See String Filter below for more details.

resourceContainerImageIds

val resourceContainerImageIds: List<InsightFiltersResourceContainerImageId>? = null

The identifier of the image related to a finding. See String Filter below for more details.

resourceContainerImageNames

val resourceContainerImageNames: List<InsightFiltersResourceContainerImageName>? = null

The name of the image related to a finding. See String Filter below for more details.

resourceContainerLaunchedAts

val resourceContainerLaunchedAts: List<InsightFiltersResourceContainerLaunchedAt>? = null

The date/time that the container was started. See Date Filter below for more details.

resourceContainerNames

val resourceContainerNames: List<InsightFiltersResourceContainerName>? = null

The name of the container related to a finding. See String Filter below for more details.

resourceDetailsOthers

val resourceDetailsOthers: List<InsightFiltersResourceDetailsOther>? = null

The details of a resource that doesn't have a specific subfield for the resource type defined. See Map Filter below for more details.

resourceIds

val resourceIds: List<InsightFiltersResourceId>? = null

The canonical identifier for the given resource type. See String Filter below for more details.

resourcePartitions

val resourcePartitions: List<InsightFiltersResourcePartition>? = null

The canonical AWS partition name that the Region is assigned to. See String Filter below for more details.

resourceRegions

val resourceRegions: List<InsightFiltersResourceRegion>? = null

The canonical AWS external Region name where this resource is located. See String Filter below for more details.

resourceTags

val resourceTags: List<InsightFiltersResourceTag>? = null

A list of AWS tags associated with a resource at the time the finding was processed. See Map Filter below for more details.

resourceTypes

val resourceTypes: List<InsightFiltersResourceType>? = null

Specifies the type of the resource that details are provided for. See String Filter below for more details.

severityLabels

val severityLabels: List<InsightFiltersSeverityLabel>? = null

The label of a finding's severity. See String Filter below for more details.

sourceUrls

val sourceUrls: List<InsightFiltersSourceUrl>? = null

A URL that links to a page about the current finding in the security-findings provider's solution. See String Filter below for more details.

threatIntelIndicatorCategories

val threatIntelIndicatorCategories: List<InsightFiltersThreatIntelIndicatorCategory>? = null

The category of a threat intelligence indicator. See String Filter below for more details.

threatIntelIndicatorLastObservedAts

val threatIntelIndicatorLastObservedAts: List<InsightFiltersThreatIntelIndicatorLastObservedAt>? = null

The date/time of the last observation of a threat intelligence indicator. See Date Filter below for more details.

threatIntelIndicatorSources

val threatIntelIndicatorSources: List<InsightFiltersThreatIntelIndicatorSource>? = null

The source of the threat intelligence. See String Filter below for more details.

threatIntelIndicatorSourceUrls

val threatIntelIndicatorSourceUrls: List<InsightFiltersThreatIntelIndicatorSourceUrl>? = null

The URL for more details from the source of the threat intelligence. See String Filter below for more details.

threatIntelIndicatorTypes

val threatIntelIndicatorTypes: List<InsightFiltersThreatIntelIndicatorType>? = null

The type of a threat intelligence indicator. See String Filter below for more details.

threatIntelIndicatorValues

val threatIntelIndicatorValues: List<InsightFiltersThreatIntelIndicatorValue>? = null

The value of a threat intelligence indicator. See String Filter below for more details.

titles

val titles: List<InsightFiltersTitle>? = null

A finding's title. See String Filter below for more details.

types

val types: List<InsightFiltersType>? = null

A finding type in the format of namespace/category/classifier that classifies a finding. See String Filter below for more details.

updatedAts

val updatedAts: List<InsightFiltersUpdatedAt>? = null

An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding record. See Date Filter below for more details.

userDefinedValues

val userDefinedValues: List<InsightFiltersUserDefinedValue>? = null

A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding. See Map Filter below for more details.

verificationStates

val verificationStates: List<InsightFiltersVerificationState>? = null

The veracity of a finding. See String Filter below for more details.

workflowStatuses

val workflowStatuses: List<InsightFiltersWorkflowStatus>? = null

The status of the investigation into a finding. See Workflow Status Filter below for more details.