Skip to content

GuardDuty  >  Structures  >  DnsRequestAction

DnsRequestAction

Structure Class

DnsRequestAction dataclass

Contains information about the DNS_REQUEST action described in this finding.

Attributes

blocked class-attribute instance-attribute 
blocked: bool | None = None

Indicates whether the targeted port is blocked.

domain class-attribute instance-attribute 
domain: str | None = None

The domain information for the DNS query.

domain_with_suffix class-attribute instance-attribute 
domain_with_suffix: str | None = None

The second and top level domain involved in the activity that potentially prompted GuardDuty to generate this finding. For a list of top-level and second-level domains, see public suffix list.

protocol class-attribute instance-attribute 
protocol: str | None = None

The network connection protocol observed in the activity that prompted GuardDuty to generate the finding.

vpc_owner_account_id class-attribute instance-attribute 
vpc_owner_account_id: str | None = None

The Amazon Web Services account ID that owns the VPC through which the DNS request was made.