Package software.amazon.awscdk.mixins.preview.services.guardduty.events

Interface DetectorEvents.GuardDutyFinding.AdditionalInfo

All Superinterfaces:
software.amazon.jsii.JsiiSerializable
All Known Implementing Classes:
DetectorEvents.GuardDutyFinding.AdditionalInfo.Jsii$Proxy
Enclosing class:
DetectorEvents.GuardDutyFinding
@Stability(Experimental) public static interface DetectorEvents.GuardDutyFinding.AdditionalInfo extends software.amazon.jsii.JsiiSerializable
(experimental) Type definition for AdditionalInfo.

Example: 

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.mixins.preview.services.guardduty.events.*;
 Object additionalScannedPorts;
 Object unusual;
 AdditionalInfo additionalInfo = AdditionalInfo.builder()
         .additionalScannedPorts(List.of(additionalScannedPorts))
         .anomalies(Anomalies.builder()
                 .anomalousApIs(List.of("anomalousApIs"))
                 .build())
         .apiCalls(List.of(AdditionalInfoItem.builder()
                 .count(List.of("count"))
                 .firstSeen(List.of("firstSeen"))
                 .lastSeen(List.of("lastSeen"))
                 .name(List.of("name"))
                 .build()))
         .domain(List.of("domain"))
         .inBytes(List.of("inBytes"))
         .localPort(List.of("localPort"))
         .newPolicy(NewPolicy.builder()
                 .allowUsersToChangePassword(List.of("allowUsersToChangePassword"))
                 .hardExpiry(List.of("hardExpiry"))
                 .maxPasswordAge(List.of("maxPasswordAge"))
                 .minimumPasswordLength(List.of("minimumPasswordLength"))
                 .passwordReusePrevention(List.of("passwordReusePrevention"))
                 .requireLowercaseCharacters(List.of("requireLowercaseCharacters"))
                 .requireNumbers(List.of("requireNumbers"))
                 .requireSymbols(List.of("requireSymbols"))
                 .requireUppercaseCharacters(List.of("requireUppercaseCharacters"))
                 .build())
         .oldPolicy(OldPolicy.builder()
                 .allowUsersToChangePassword(List.of("allowUsersToChangePassword"))
                 .hardExpiry(List.of("hardExpiry"))
                 .maxPasswordAge(List.of("maxPasswordAge"))
                 .minimumPasswordLength(List.of("minimumPasswordLength"))
                 .passwordReusePrevention(List.of("passwordReusePrevention"))
                 .requireLowercaseCharacters(List.of("requireLowercaseCharacters"))
                 .requireNumbers(List.of("requireNumbers"))
                 .requireSymbols(List.of("requireSymbols"))
                 .requireUppercaseCharacters(List.of("requireUppercaseCharacters"))
                 .build())
         .outBytes(List.of("outBytes"))
         .portsScannedSample(List.of(123))
         .profiledBehavior(ProfiledBehavior.builder()
                 .frequentProfiledApIsAccountProfiling(List.of("frequentProfiledApIsAccountProfiling"))
                 .frequentProfiledApIsUserIdentityProfiling(List.of("frequentProfiledApIsUserIdentityProfiling"))
                 .frequentProfiledAsNsAccountProfiling(List.of("frequentProfiledAsNsAccountProfiling"))
                 .frequentProfiledAsNsBucketProfiling(List.of("frequentProfiledAsNsBucketProfiling"))
                 .frequentProfiledAsNsUserIdentityProfiling(List.of("frequentProfiledAsNsUserIdentityProfiling"))
                 .frequentProfiledBucketsAccountProfiling(List.of("frequentProfiledBucketsAccountProfiling"))
                 .frequentProfiledBucketsUserIdentityProfiling(List.of("frequentProfiledBucketsUserIdentityProfiling"))
                 .frequentProfiledUserAgentsAccountProfiling(List.of("frequentProfiledUserAgentsAccountProfiling"))
                 .frequentProfiledUserAgentsUserIdentityProfiling(List.of("frequentProfiledUserAgentsUserIdentityProfiling"))
                 .frequentProfiledUserNamesAccountProfiling(List.of("frequentProfiledUserNamesAccountProfiling"))
                 .frequentProfiledUserNamesBucketProfiling(List.of("frequentProfiledUserNamesBucketProfiling"))
                 .frequentProfiledUserTypesAccountProfiling(List.of("frequentProfiledUserTypesAccountProfiling"))
                 .infrequentProfiledApIsAccountProfiling(List.of("infrequentProfiledApIsAccountProfiling"))
                 .infrequentProfiledApIsUserIdentityProfiling(List.of("infrequentProfiledApIsUserIdentityProfiling"))
                 .infrequentProfiledAsNsAccountProfiling(List.of("infrequentProfiledAsNsAccountProfiling"))
                 .infrequentProfiledAsNsBucketProfiling(List.of("infrequentProfiledAsNsBucketProfiling"))
                 .infrequentProfiledAsNsUserIdentityProfiling(List.of("infrequentProfiledAsNsUserIdentityProfiling"))
                 .infrequentProfiledBucketsAccountProfiling(List.of("infrequentProfiledBucketsAccountProfiling"))
                 .infrequentProfiledBucketsUserIdentityProfiling(List.of("infrequentProfiledBucketsUserIdentityProfiling"))
                 .infrequentProfiledUserAgentsAccountProfiling(List.of("infrequentProfiledUserAgentsAccountProfiling"))
                 .infrequentProfiledUserAgentsUserIdentityProfiling(List.of("infrequentProfiledUserAgentsUserIdentityProfiling"))
                 .infrequentProfiledUserNamesAccountProfiling(List.of("infrequentProfiledUserNamesAccountProfiling"))
                 .infrequentProfiledUserNamesBucketProfiling(List.of("infrequentProfiledUserNamesBucketProfiling"))
                 .infrequentProfiledUserTypesAccountProfiling(List.of("infrequentProfiledUserTypesAccountProfiling"))
                 .numberOfHistoricalDailyAvgApIsBucketProfiling(List.of("numberOfHistoricalDailyAvgApIsBucketProfiling"))
                 .numberOfHistoricalDailyAvgApIsBucketUserIdentityProfiling(List.of("numberOfHistoricalDailyAvgApIsBucketUserIdentityProfiling"))
                 .numberOfHistoricalDailyAvgApIsUserIdentityProfiling(List.of("numberOfHistoricalDailyAvgApIsUserIdentityProfiling"))
                 .numberOfHistoricalDailyMaxApIsBucketProfiling(List.of("numberOfHistoricalDailyMaxApIsBucketProfiling"))
                 .numberOfHistoricalDailyMaxApIsBucketUserIdentityProfiling(List.of("numberOfHistoricalDailyMaxApIsBucketUserIdentityProfiling"))
                 .numberOfHistoricalDailyMaxApIsUserIdentityProfiling(List.of("numberOfHistoricalDailyMaxApIsUserIdentityProfiling"))
                 .rareProfiledApIsAccountProfiling(List.of("rareProfiledApIsAccountProfiling"))
                 .rareProfiledApIsUserIdentityProfiling(List.of("rareProfiledApIsUserIdentityProfiling"))
                 .rareProfiledAsNsAccountProfiling(List.of("rareProfiledAsNsAccountProfiling"))
                 .rareProfiledAsNsBucketProfiling(List.of("rareProfiledAsNsBucketProfiling"))
                 .rareProfiledAsNsUserIdentityProfiling(List.of("rareProfiledAsNsUserIdentityProfiling"))
                 .rareProfiledBucketsAccountProfiling(List.of("rareProfiledBucketsAccountProfiling"))
                 .rareProfiledBucketsUserIdentityProfiling(List.of("rareProfiledBucketsUserIdentityProfiling"))
                 .rareProfiledUserAgentsAccountProfiling(List.of("rareProfiledUserAgentsAccountProfiling"))
                 .rareProfiledUserAgentsUserIdentityProfiling(List.of("rareProfiledUserAgentsUserIdentityProfiling"))
                 .rareProfiledUserNamesAccountProfiling(List.of("rareProfiledUserNamesAccountProfiling"))
                 .rareProfiledUserNamesBucketProfiling(List.of("rareProfiledUserNamesBucketProfiling"))
                 .rareProfiledUserTypesAccountProfiling(List.of("rareProfiledUserTypesAccountProfiling"))
                 .build())
         .recentCredentials(List.of(AdditionalInfoItem1.builder()
                 .accessKeyId(List.of("accessKeyId"))
                 .ipAddressV4(List.of("ipAddressV4"))
                 .principalId(List.of("principalId"))
                 .build()))
         .sample(List.of("sample"))
         .scannedPort(List.of("scannedPort"))
         .threatListName(List.of("threatListName"))
         .threatName(List.of("threatName"))
         .type(List.of("type"))
         .unusual(unusual)
         .unusualBehavior(UnusualBehavior.builder()
                 .isUnusualUserIdentity(List.of("isUnusualUserIdentity"))
                 .numberOfPast24HoursApIsBucketProfiling(List.of("numberOfPast24HoursApIsBucketProfiling"))
                 .numberOfPast24HoursApIsBucketUserIdentityProfiling(List.of("numberOfPast24HoursApIsBucketUserIdentityProfiling"))
                 .numberOfPast24HoursApIsUserIdentityProfiling(List.of("numberOfPast24HoursApIsUserIdentityProfiling"))
                 .unusualApIsAccountProfiling(List.of("unusualApIsAccountProfiling"))
                 .unusualApIsUserIdentityProfiling(List.of("unusualApIsUserIdentityProfiling"))
                 .unusualAsNsAccountProfiling(List.of("unusualAsNsAccountProfiling"))
                 .unusualAsNsBucketProfiling(List.of("unusualAsNsBucketProfiling"))
                 .unusualAsNsUserIdentityProfiling(List.of("unusualAsNsUserIdentityProfiling"))
                 .unusualBucketsAccountProfiling(List.of("unusualBucketsAccountProfiling"))
                 .unusualBucketsUserIdentityProfiling(List.of("unusualBucketsUserIdentityProfiling"))
                 .unusualUserAgentsAccountProfiling(List.of("unusualUserAgentsAccountProfiling"))
                 .unusualUserAgentsUserIdentityProfiling(List.of("unusualUserAgentsUserIdentityProfiling"))
                 .unusualUserNamesAccountProfiling(List.of("unusualUserNamesAccountProfiling"))
                 .unusualUserNamesBucketProfiling(List.of("unusualUserNamesBucketProfiling"))
                 .unusualUserTypesAccountProfiling(List.of("unusualUserTypesAccountProfiling"))
                 .build())
         .unusualProtocol(List.of("unusualProtocol"))
         .userAgent(UserAgent.builder()
                 .fullUserAgent(List.of("fullUserAgent"))
                 .userAgentCategory(List.of("userAgentCategory"))
                 .build())
         .value(List.of("value"))
         .build();

  • Method Details

    • getAdditionalScannedPorts

      @Stability(Experimental) @Nullable default List<Object> getAdditionalScannedPorts()
      (experimental) additionalScannedPorts property.

      Specify an array of string values to match this event if the actual value of additionalScannedPorts is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getAnomalies

      @Stability(Experimental) @Nullable default DetectorEvents.GuardDutyFinding.Anomalies getAnomalies()
      (experimental) anomalies property.

      Specify an array of string values to match this event if the actual value of anomalies is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getApiCalls

      @Stability(Experimental) @Nullable default List<DetectorEvents.GuardDutyFinding.AdditionalInfoItem> getApiCalls()
      (experimental) apiCalls property.

      Specify an array of string values to match this event if the actual value of apiCalls is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getDomain

      @Stability(Experimental) @Nullable default List<String> getDomain()
      (experimental) domain property.

      Specify an array of string values to match this event if the actual value of domain is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getInBytes

      @Stability(Experimental) @Nullable default List<String> getInBytes()
      (experimental) inBytes property.

      Specify an array of string values to match this event if the actual value of inBytes is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getLocalPort

      @Stability(Experimental) @Nullable default List<String> getLocalPort()
      (experimental) localPort property.

      Specify an array of string values to match this event if the actual value of localPort is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getNewPolicy

      @Stability(Experimental) @Nullable default DetectorEvents.GuardDutyFinding.NewPolicy getNewPolicy()
      (experimental) newPolicy property.

      Specify an array of string values to match this event if the actual value of newPolicy is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getOldPolicy

      @Stability(Experimental) @Nullable default DetectorEvents.GuardDutyFinding.OldPolicy getOldPolicy()
      (experimental) oldPolicy property.

      Specify an array of string values to match this event if the actual value of oldPolicy is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getOutBytes

      @Stability(Experimental) @Nullable default List<String> getOutBytes()
      (experimental) outBytes property.

      Specify an array of string values to match this event if the actual value of outBytes is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getPortsScannedSample

      @Stability(Experimental) @Nullable default List<Number> getPortsScannedSample()
      (experimental) portsScannedSample property.

      Specify an array of string values to match this event if the actual value of portsScannedSample is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getProfiledBehavior

      @Stability(Experimental) @Nullable default DetectorEvents.GuardDutyFinding.ProfiledBehavior getProfiledBehavior()
      (experimental) profiledBehavior property.

      Specify an array of string values to match this event if the actual value of profiledBehavior is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getRecentCredentials

      @Stability(Experimental) @Nullable default List<DetectorEvents.GuardDutyFinding.AdditionalInfoItem1> getRecentCredentials()
      (experimental) recentCredentials property.

      Specify an array of string values to match this event if the actual value of recentCredentials is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getSample

      @Stability(Experimental) @Nullable default List<String> getSample()
      (experimental) sample property.

      Specify an array of string values to match this event if the actual value of sample is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getScannedPort

      @Stability(Experimental) @Nullable default List<String> getScannedPort()
      (experimental) scannedPort property.

      Specify an array of string values to match this event if the actual value of scannedPort is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getThreatListName

      @Stability(Experimental) @Nullable default List<String> getThreatListName()
      (experimental) threatListName property.

      Specify an array of string values to match this event if the actual value of threatListName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getThreatName

      @Stability(Experimental) @Nullable default List<String> getThreatName()
      (experimental) threatName property.

      Specify an array of string values to match this event if the actual value of threatName is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getType

      @Stability(Experimental) @Nullable default List<String> getType()
      (experimental) type property.

      Specify an array of string values to match this event if the actual value of type is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getUnusual

      @Stability(Experimental) @Nullable default Object getUnusual()
      (experimental) unusual property.

      Specify an array of string values to match this event if the actual value of unusual is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getUnusualBehavior

      @Stability(Experimental) @Nullable default DetectorEvents.GuardDutyFinding.UnusualBehavior getUnusualBehavior()
      (experimental) unusualBehavior property.

      Specify an array of string values to match this event if the actual value of unusualBehavior is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getUnusualProtocol

      @Stability(Experimental) @Nullable default List<String> getUnusualProtocol()
      (experimental) unusualProtocol property.

      Specify an array of string values to match this event if the actual value of unusualProtocol is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getUserAgent

      @Stability(Experimental) @Nullable default DetectorEvents.GuardDutyFinding.UserAgent getUserAgent()
      (experimental) userAgent property.

      Specify an array of string values to match this event if the actual value of userAgent is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • getValue

      @Stability(Experimental) @Nullable default List<String> getValue()
      (experimental) value property.

      Specify an array of string values to match this event if the actual value of value is one of the values in the array. Use one of the constructors on the aws_events.Match for more advanced matching options.

      Default: - Do not filter on this field

    • builder

      @Stability(Experimental) static DetectorEvents.GuardDutyFinding.AdditionalInfo.Builder builder()
      Returns:
      a DetectorEvents.GuardDutyFinding.AdditionalInfo.Builder of DetectorEvents.GuardDutyFinding.AdditionalInfo