

# Data Types
<a name="API_Types"></a>

The Amazon GuardDuty API contains several data types that various actions use. This section describes each data type in detail.

**Note**  
The order of each element in a data type structure is not guaranteed. Applications should not assume a particular order.

The following data types are supported:
+  [AccessControlList](API_AccessControlList.md) 
+  [AccessKey](API_AccessKey.md) 
+  [AccessKeyDetails](API_AccessKeyDetails.md) 
+  [Account](API_Account.md) 
+  [AccountDetail](API_AccountDetail.md) 
+  [AccountFreeTrialInfo](API_AccountFreeTrialInfo.md) 
+  [AccountLevelPermissions](API_AccountLevelPermissions.md) 
+  [AccountStatistics](API_AccountStatistics.md) 
+  [Action](API_Action.md) 
+  [Actor](API_Actor.md) 
+  [ActorProcess](API_ActorProcess.md) 
+  [AdditionalInfo](API_AdditionalInfo.md) 
+  [AddonDetails](API_AddonDetails.md) 
+  [AdminAccount](API_AdminAccount.md) 
+  [Administrator](API_Administrator.md) 
+  [AgentDetails](API_AgentDetails.md) 
+  [Anomaly](API_Anomaly.md) 
+  [AnomalyObject](API_AnomalyObject.md) 
+  [AnomalyUnusual](API_AnomalyUnusual.md) 
+  [AutonomousSystem](API_AutonomousSystem.md) 
+  [AutoscalingAutoScalingGroup](API_AutoscalingAutoScalingGroup.md) 
+  [AwsApiCallAction](API_AwsApiCallAction.md) 
+  [BlockPublicAccess](API_BlockPublicAccess.md) 
+  [BucketLevelPermissions](API_BucketLevelPermissions.md) 
+  [BucketPolicy](API_BucketPolicy.md) 
+  [City](API_City.md) 
+  [CloudformationStack](API_CloudformationStack.md) 
+  [CloudTrailConfigurationResult](API_CloudTrailConfigurationResult.md) 
+  [Condition](API_Condition.md) 
+  [Container](API_Container.md) 
+  [ContainerFindingResource](API_ContainerFindingResource.md) 
+  [ContainerInstanceDetails](API_ContainerInstanceDetails.md) 
+  [Country](API_Country.md) 
+  [CoverageEc2InstanceDetails](API_CoverageEc2InstanceDetails.md) 
+  [CoverageEcsClusterDetails](API_CoverageEcsClusterDetails.md) 
+  [CoverageEksClusterDetails](API_CoverageEksClusterDetails.md) 
+  [CoverageFilterCondition](API_CoverageFilterCondition.md) 
+  [CoverageFilterCriteria](API_CoverageFilterCriteria.md) 
+  [CoverageFilterCriterion](API_CoverageFilterCriterion.md) 
+  [CoverageResource](API_CoverageResource.md) 
+  [CoverageResourceDetails](API_CoverageResourceDetails.md) 
+  [CoverageSortCriteria](API_CoverageSortCriteria.md) 
+  [CoverageStatistics](API_CoverageStatistics.md) 
+  [CreateProtectedResource](API_CreateProtectedResource.md) 
+  [CreateS3BucketResource](API_CreateS3BucketResource.md) 
+  [DataSourceConfigurations](API_DataSourceConfigurations.md) 
+  [DataSourceConfigurationsResult](API_DataSourceConfigurationsResult.md) 
+  [DataSourceFreeTrial](API_DataSourceFreeTrial.md) 
+  [DataSourcesFreeTrial](API_DataSourcesFreeTrial.md) 
+  [DateStatistics](API_DateStatistics.md) 
+  [DefaultServerSideEncryption](API_DefaultServerSideEncryption.md) 
+  [Destination](API_Destination.md) 
+  [DestinationProperties](API_DestinationProperties.md) 
+  [Detection](API_Detection.md) 
+  [DetectorAdditionalConfiguration](API_DetectorAdditionalConfiguration.md) 
+  [DetectorAdditionalConfigurationResult](API_DetectorAdditionalConfigurationResult.md) 
+  [DetectorFeatureConfiguration](API_DetectorFeatureConfiguration.md) 
+  [DetectorFeatureConfigurationResult](API_DetectorFeatureConfigurationResult.md) 
+  [DNSLogsConfigurationResult](API_DNSLogsConfigurationResult.md) 
+  [DnsRequestAction](API_DnsRequestAction.md) 
+  [DomainDetails](API_DomainDetails.md) 
+  [EbsSnapshot](API_EbsSnapshot.md) 
+  [EbsSnapshotDetails](API_EbsSnapshotDetails.md) 
+  [EbsVolumeDetails](API_EbsVolumeDetails.md) 
+  [EbsVolumeScanDetails](API_EbsVolumeScanDetails.md) 
+  [EbsVolumesResult](API_EbsVolumesResult.md) 
+  [Ec2Image](API_Ec2Image.md) 
+  [Ec2ImageDetails](API_Ec2ImageDetails.md) 
+  [Ec2Instance](API_Ec2Instance.md) 
+  [Ec2LaunchTemplate](API_Ec2LaunchTemplate.md) 
+  [Ec2NetworkInterface](API_Ec2NetworkInterface.md) 
+  [Ec2Vpc](API_Ec2Vpc.md) 
+  [EcsCluster](API_EcsCluster.md) 
+  [EcsClusterDetails](API_EcsClusterDetails.md) 
+  [EcsTask](API_EcsTask.md) 
+  [EcsTaskDetails](API_EcsTaskDetails.md) 
+  [EksCluster](API_EksCluster.md) 
+  [EksClusterDetails](API_EksClusterDetails.md) 
+  [Evidence](API_Evidence.md) 
+  [FargateDetails](API_FargateDetails.md) 
+  [FilterCondition](API_FilterCondition.md) 
+  [FilterCriteria](API_FilterCriteria.md) 
+  [FilterCriterion](API_FilterCriterion.md) 
+  [Finding](API_Finding.md) 
+  [FindingCriteria](API_FindingCriteria.md) 
+  [FindingStatistics](API_FindingStatistics.md) 
+  [FindingTypeStatistics](API_FindingTypeStatistics.md) 
+  [FlowLogsConfigurationResult](API_FlowLogsConfigurationResult.md) 
+  [FreeTrialFeatureConfigurationResult](API_FreeTrialFeatureConfigurationResult.md) 
+  [GeoLocation](API_GeoLocation.md) 
+  [GetMalwareScanResultDetails](API_GetMalwareScanResultDetails.md) 
+  [HighestSeverityThreatDetails](API_HighestSeverityThreatDetails.md) 
+  [HostPath](API_HostPath.md) 
+  [IamInstanceProfile](API_IamInstanceProfile.md) 
+  [IamInstanceProfileV2](API_IamInstanceProfileV2.md) 
+  [ImpersonatedUser](API_ImpersonatedUser.md) 
+  [IncrementalScanDetails](API_IncrementalScanDetails.md) 
+  [Indicator](API_Indicator.md) 
+  [InstanceDetails](API_InstanceDetails.md) 
+  [Invitation](API_Invitation.md) 
+  [ItemDetails](API_ItemDetails.md) 
+  [ItemPath](API_ItemPath.md) 
+  [KubernetesApiCallAction](API_KubernetesApiCallAction.md) 
+  [KubernetesAuditLogsConfiguration](API_KubernetesAuditLogsConfiguration.md) 
+  [KubernetesAuditLogsConfigurationResult](API_KubernetesAuditLogsConfigurationResult.md) 
+  [KubernetesConfiguration](API_KubernetesConfiguration.md) 
+  [KubernetesConfigurationResult](API_KubernetesConfigurationResult.md) 
+  [KubernetesDataSourceFreeTrial](API_KubernetesDataSourceFreeTrial.md) 
+  [KubernetesDetails](API_KubernetesDetails.md) 
+  [KubernetesPermissionCheckedDetails](API_KubernetesPermissionCheckedDetails.md) 
+  [KubernetesRoleBindingDetails](API_KubernetesRoleBindingDetails.md) 
+  [KubernetesRoleDetails](API_KubernetesRoleDetails.md) 
+  [KubernetesUserDetails](API_KubernetesUserDetails.md) 
+  [KubernetesWorkload](API_KubernetesWorkload.md) 
+  [KubernetesWorkloadDetails](API_KubernetesWorkloadDetails.md) 
+  [LambdaDetails](API_LambdaDetails.md) 
+  [LineageObject](API_LineageObject.md) 
+  [ListMalwareScansFilterCriteria](API_ListMalwareScansFilterCriteria.md) 
+  [ListMalwareScansFilterCriterion](API_ListMalwareScansFilterCriterion.md) 
+  [LocalIpDetails](API_LocalIpDetails.md) 
+  [LocalPortDetails](API_LocalPortDetails.md) 
+  [LoginAttribute](API_LoginAttribute.md) 
+  [MalwareProtectionConfiguration](API_MalwareProtectionConfiguration.md) 
+  [MalwareProtectionConfigurationResult](API_MalwareProtectionConfigurationResult.md) 
+  [MalwareProtectionDataSourceFreeTrial](API_MalwareProtectionDataSourceFreeTrial.md) 
+  [MalwareProtectionFindingsScanConfiguration](API_MalwareProtectionFindingsScanConfiguration.md) 
+  [MalwareProtectionPlanActions](API_MalwareProtectionPlanActions.md) 
+  [MalwareProtectionPlanStatusReason](API_MalwareProtectionPlanStatusReason.md) 
+  [MalwareProtectionPlanSummary](API_MalwareProtectionPlanSummary.md) 
+  [MalwareProtectionPlanTaggingAction](API_MalwareProtectionPlanTaggingAction.md) 
+  [MalwareScan](API_MalwareScan.md) 
+  [MalwareScanDetails](API_MalwareScanDetails.md) 
+  [Master](API_Master.md) 
+  [Member](API_Member.md) 
+  [MemberAdditionalConfiguration](API_MemberAdditionalConfiguration.md) 
+  [MemberAdditionalConfigurationResult](API_MemberAdditionalConfigurationResult.md) 
+  [MemberDataSourceConfiguration](API_MemberDataSourceConfiguration.md) 
+  [MemberFeaturesConfiguration](API_MemberFeaturesConfiguration.md) 
+  [MemberFeaturesConfigurationResult](API_MemberFeaturesConfigurationResult.md) 
+  [NetworkConnection](API_NetworkConnection.md) 
+  [NetworkConnectionAction](API_NetworkConnectionAction.md) 
+  [NetworkEndpoint](API_NetworkEndpoint.md) 
+  [NetworkGeoLocation](API_NetworkGeoLocation.md) 
+  [NetworkInterface](API_NetworkInterface.md) 
+  [Observations](API_Observations.md) 
+  [Organization](API_Organization.md) 
+  [OrganizationAdditionalConfiguration](API_OrganizationAdditionalConfiguration.md) 
+  [OrganizationAdditionalConfigurationResult](API_OrganizationAdditionalConfigurationResult.md) 
+  [OrganizationDataSourceConfigurations](API_OrganizationDataSourceConfigurations.md) 
+  [OrganizationDataSourceConfigurationsResult](API_OrganizationDataSourceConfigurationsResult.md) 
+  [OrganizationDetails](API_OrganizationDetails.md) 
+  [OrganizationEbsVolumes](API_OrganizationEbsVolumes.md) 
+  [OrganizationEbsVolumesResult](API_OrganizationEbsVolumesResult.md) 
+  [OrganizationFeatureConfiguration](API_OrganizationFeatureConfiguration.md) 
+  [OrganizationFeatureConfigurationResult](API_OrganizationFeatureConfigurationResult.md) 
+  [OrganizationFeatureStatistics](API_OrganizationFeatureStatistics.md) 
+  [OrganizationFeatureStatisticsAdditionalConfiguration](API_OrganizationFeatureStatisticsAdditionalConfiguration.md) 
+  [OrganizationKubernetesAuditLogsConfiguration](API_OrganizationKubernetesAuditLogsConfiguration.md) 
+  [OrganizationKubernetesAuditLogsConfigurationResult](API_OrganizationKubernetesAuditLogsConfigurationResult.md) 
+  [OrganizationKubernetesConfiguration](API_OrganizationKubernetesConfiguration.md) 
+  [OrganizationKubernetesConfigurationResult](API_OrganizationKubernetesConfigurationResult.md) 
+  [OrganizationMalwareProtectionConfiguration](API_OrganizationMalwareProtectionConfiguration.md) 
+  [OrganizationMalwareProtectionConfigurationResult](API_OrganizationMalwareProtectionConfigurationResult.md) 
+  [OrganizationS3LogsConfiguration](API_OrganizationS3LogsConfiguration.md) 
+  [OrganizationS3LogsConfigurationResult](API_OrganizationS3LogsConfigurationResult.md) 
+  [OrganizationScanEc2InstanceWithFindings](API_OrganizationScanEc2InstanceWithFindings.md) 
+  [OrganizationScanEc2InstanceWithFindingsResult](API_OrganizationScanEc2InstanceWithFindingsResult.md) 
+  [OrganizationStatistics](API_OrganizationStatistics.md) 
+  [Owner](API_Owner.md) 
+  [PermissionConfiguration](API_PermissionConfiguration.md) 
+  [PortProbeAction](API_PortProbeAction.md) 
+  [PortProbeDetail](API_PortProbeDetail.md) 
+  [PrivateIpAddressDetails](API_PrivateIpAddressDetails.md) 
+  [ProcessDetails](API_ProcessDetails.md) 
+  [ProductCode](API_ProductCode.md) 
+  [PublicAccess](API_PublicAccess.md) 
+  [PublicAccessConfiguration](API_PublicAccessConfiguration.md) 
+  [RdsDbInstanceDetails](API_RdsDbInstanceDetails.md) 
+  [RdsDbUserDetails](API_RdsDbUserDetails.md) 
+  [RdsLimitlessDbDetails](API_RdsLimitlessDbDetails.md) 
+  [RdsLoginAttemptAction](API_RdsLoginAttemptAction.md) 
+  [RecoveryPoint](API_RecoveryPoint.md) 
+  [RecoveryPointDetails](API_RecoveryPointDetails.md) 
+  [RemoteAccountDetails](API_RemoteAccountDetails.md) 
+  [RemoteIpDetails](API_RemoteIpDetails.md) 
+  [RemotePortDetails](API_RemotePortDetails.md) 
+  [Resource](API_Resource.md) 
+  [ResourceData](API_ResourceData.md) 
+  [ResourceDetails](API_ResourceDetails.md) 
+  [ResourceStatistics](API_ResourceStatistics.md) 
+  [ResourceV2](API_ResourceV2.md) 
+  [RuntimeContext](API_RuntimeContext.md) 
+  [RuntimeDetails](API_RuntimeDetails.md) 
+  [S3Bucket](API_S3Bucket.md) 
+  [S3BucketDetail](API_S3BucketDetail.md) 
+  [S3LogsConfiguration](API_S3LogsConfiguration.md) 
+  [S3LogsConfigurationResult](API_S3LogsConfigurationResult.md) 
+  [S3Object](API_S3Object.md) 
+  [S3ObjectDetail](API_S3ObjectDetail.md) 
+  [S3ObjectForSendObjectMalwareScan](API_S3ObjectForSendObjectMalwareScan.md) 
+  [Scan](API_Scan.md) 
+  [ScanCondition](API_ScanCondition.md) 
+  [ScanConditionPair](API_ScanConditionPair.md) 
+  [ScanConfiguration](API_ScanConfiguration.md) 
+  [ScanConfigurationRecoveryPoint](API_ScanConfigurationRecoveryPoint.md) 
+  [ScanDetections](API_ScanDetections.md) 
+  [ScanEc2InstanceWithFindings](API_ScanEc2InstanceWithFindings.md) 
+  [ScanEc2InstanceWithFindingsResult](API_ScanEc2InstanceWithFindingsResult.md) 
+  [ScanFilePath](API_ScanFilePath.md) 
+  [ScannedItemCount](API_ScannedItemCount.md) 
+  [ScannedResource](API_ScannedResource.md) 
+  [ScannedResourceDetails](API_ScannedResourceDetails.md) 
+  [ScanResourceCriteria](API_ScanResourceCriteria.md) 
+  [ScanResultDetails](API_ScanResultDetails.md) 
+  [ScanResultThreat](API_ScanResultThreat.md) 
+  [ScanThreatName](API_ScanThreatName.md) 
+  [SecurityContext](API_SecurityContext.md) 
+  [SecurityGroup](API_SecurityGroup.md) 
+  [Sequence](API_Sequence.md) 
+  [Service](API_Service.md) 
+  [ServiceAdditionalInfo](API_ServiceAdditionalInfo.md) 
+  [Session](API_Session.md) 
+  [SeverityStatistics](API_SeverityStatistics.md) 
+  [Signal](API_Signal.md) 
+  [SortCriteria](API_SortCriteria.md) 
+  [StartMalwareScanConfiguration](API_StartMalwareScanConfiguration.md) 
+  [Tag](API_Tag.md) 
+  [Threat](API_Threat.md) 
+  [ThreatDetectedByName](API_ThreatDetectedByName.md) 
+  [ThreatIntelligenceDetail](API_ThreatIntelligenceDetail.md) 
+  [ThreatsDetectedItemCount](API_ThreatsDetectedItemCount.md) 
+  [Total](API_Total.md) 
+  [TriggerDetails](API_TriggerDetails.md) 
+  [UnprocessedAccount](API_UnprocessedAccount.md) 
+  [UnprocessedDataSourcesResult](API_UnprocessedDataSourcesResult.md) 
+  [UpdateProtectedResource](API_UpdateProtectedResource.md) 
+  [UpdateS3BucketResource](API_UpdateS3BucketResource.md) 
+  [UsageAccountResult](API_UsageAccountResult.md) 
+  [UsageCriteria](API_UsageCriteria.md) 
+  [UsageDataSourceResult](API_UsageDataSourceResult.md) 
+  [UsageFeatureResult](API_UsageFeatureResult.md) 
+  [UsageResourceResult](API_UsageResourceResult.md) 
+  [UsageStatistics](API_UsageStatistics.md) 
+  [UsageTopAccountResult](API_UsageTopAccountResult.md) 
+  [UsageTopAccountsResult](API_UsageTopAccountsResult.md) 
+  [User](API_User.md) 
+  [Volume](API_Volume.md) 
+  [VolumeDetail](API_VolumeDetail.md) 
+  [VolumeMount](API_VolumeMount.md) 
+  [VpcConfig](API_VpcConfig.md) 