interface Action 🔹

Language	Type name
.NET	Amazon.CDK.Mixins.Preview.AWS.GuardDuty.Events.DetectorEvents.GuardDutyFinding.Action
Go	github.com/aws/aws-cdk-go/awscdkmixinspreview/v2/awsguardduty/events#DetectorEvents_GuardDutyFinding_Action
Java	software.amazon.awscdk.mixins.preview.services.guardduty.events.DetectorEvents.GuardDutyFinding.Action
Python	aws_cdk.mixins_preview.aws_guardduty.events.DetectorEvents.GuardDutyFinding.Action
TypeScript	@aws-cdk/mixins-preview » aws_guardduty » events » DetectorEvents » GuardDutyFinding » Action

Type definition for Action.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { events as guardduty_events } from '@aws-cdk/mixins-preview/aws-guardduty';
const action: guardduty_events.DetectorEvents.GuardDutyFinding.Action = {
  actionType: ['actionType'],
  awsApiCallAction: {
    affectedResources: {
      awsCloudTrailTrail: ['awsCloudTrailTrail'],
      awsEc2Instance: ['awsEc2Instance'],
      awsS3Bucket: ['awsS3Bucket'],
    },
    api: ['api'],
    callerType: ['callerType'],
    errorCode: ['errorCode'],
    remoteAccountDetails: {
      accountId: ['accountId'],
      affiliated: ['affiliated'],
    },
    remoteIpDetails: {
      city: {
        cityName: ['cityName'],
      },
      country: {
        countryName: ['countryName'],
      },
      geoLocation: {
        lat: ['lat'],
        lon: ['lon'],
      },
      ipAddressV4: ['ipAddressV4'],
      organization: {
        asn: ['asn'],
        asnOrg: ['asnOrg'],
        isp: ['isp'],
        org: ['org'],
      },
    },
    serviceName: ['serviceName'],
  },
  dnsRequestAction: {
    blocked: ['blocked'],
    domain: ['domain'],
    protocol: ['protocol'],
  },
  kubernetesApiCallAction: {
    parameters: ['parameters'],
    remoteIpDetails: {
      city: {
        cityName: ['cityName'],
      },
      country: {
        countryName: ['countryName'],
      },
      geoLocation: {
        lat: ['lat'],
        lon: ['lon'],
      },
      ipAddressV4: ['ipAddressV4'],
      organization: {
        asn: ['asn'],
        asnOrg: ['asnOrg'],
        isp: ['isp'],
        org: ['org'],
      },
    },
    requestUri: ['requestUri'],
    sourceIPs: ['sourceIPs'],
    statusCode: ['statusCode'],
    userAgent: ['userAgent'],
    verb: ['verb'],
  },
  networkConnectionAction: {
    blocked: ['blocked'],
    connectionDirection: ['connectionDirection'],
    localIpDetails: {
      ipAddressV4: ['ipAddressV4'],
    },
    localPortDetails: {
      port: ['port'],
      portName: ['portName'],
    },
    protocol: ['protocol'],
    remoteIpDetails: {
      city: {
        cityName: ['cityName'],
      },
      country: {
        countryName: ['countryName'],
      },
      geoLocation: {
        lat: ['lat'],
        lon: ['lon'],
      },
      ipAddressV4: ['ipAddressV4'],
      organization: {
        asn: ['asn'],
        asnOrg: ['asnOrg'],
        isp: ['isp'],
        org: ['org'],
      },
    },
    remotePortDetails: {
      port: ['port'],
      portName: ['portName'],
    },
  },
  portProbeAction: {
    blocked: ['blocked'],
    portProbeDetails: [{
      localIpDetails: {
        ipAddressV4: ['ipAddressV4'],
      },
      localPortDetails: {
        port: ['port'],
        portName: ['portName'],
      },
      remoteIpDetails: {
        city: {
          cityName: ['cityName'],
        },
        country: {
          countryName: ['countryName'],
        },
        geoLocation: {
          lat: ['lat'],
          lon: ['lon'],
        },
        ipAddressV4: ['ipAddressV4'],
        organization: {
          asn: ['asn'],
          asnOrg: ['asnOrg'],
          isp: ['isp'],
          org: ['org'],
        },
      },
    }],
  },
};

Properties

Name	Type	Description
actionType?🔹	string[]	actionType property.
awsApiCallAction?🔹	AwsApiCallAction1	awsApiCallAction property.
dnsRequestAction?🔹	DnsRequestAction	dnsRequestAction property.
kubernetesApiCallAction?🔹	KubernetesApiCallAction	kubernetesApiCallAction property.
networkConnectionAction?🔹	NetworkConnectionAction	networkConnectionAction property.
portProbeAction?🔹	PortProbeAction	portProbeAction property.

---

actionType?🔹

Type: string[] (optional, default: Do not filter on this field)

actionType property.

Specify an array of string values to match this event if the actual value of actionType is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

---

awsApiCallAction?🔹

Type: AwsApiCallAction1 (optional, default: Do not filter on this field)

awsApiCallAction property.

Specify an array of string values to match this event if the actual value of awsApiCallAction is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

---

dnsRequestAction?🔹

Type: DnsRequestAction (optional, default: Do not filter on this field)

dnsRequestAction property.

Specify an array of string values to match this event if the actual value of dnsRequestAction is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

---

kubernetesApiCallAction?🔹

Type: KubernetesApiCallAction (optional, default: Do not filter on this field)

kubernetesApiCallAction property.

Specify an array of string values to match this event if the actual value of kubernetesApiCallAction is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

---

networkConnectionAction?🔹

Type: NetworkConnectionAction (optional, default: Do not filter on this field)

networkConnectionAction property.

Specify an array of string values to match this event if the actual value of networkConnectionAction is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

---

portProbeAction?🔹

Type: PortProbeAction (optional, default: Do not filter on this field)

portProbeAction property.

Specify an array of string values to match this event if the actual value of portProbeAction is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.