/AWS1/CL_SHBRESOURCERESULT

Provides comprehensive details about an Amazon Web Services resource and its associated security findings.

CONSTRUCTOR

IMPORTING

Required arguments:

iv_resourceid TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The unique identifier for a resource.

iv_accountid TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The Amazon Web Services account that recorded the resource data in Security Hub.

iv_region TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The Amazon Web Services Region that recorded the resource data in Security Hub.

iv_resourcetype TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The type of resource.

iv_resdetailcapturetimedt TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The timestamp when information about the resource was captured.

io_resourceconfig TYPE REF TO /AWS1/CL_RT_DOCUMENT /AWS1/CL_RT_DOCUMENT

The configuration details of a resource.

Optional arguments:

iv_resourceguid TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The global identifier used to identify a resource.

iv_accountname TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The name of the Amazon Web Services account that's associated with the resource.

iv_resourceprovider TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The cloud provider where the resource exists. Valid values are AWS and Azure. This field is always included.

iv_resourceowneraccountid TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The identifier of the cloud account that owns the resource. For Amazon Web Services resources, this is the Amazon Web Services account ID. For Azure resources, this is the Azure subscription ID.

iv_resourceownerorgid TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The identifier of the cloud organization that owns the resource. For Amazon Web Services resources, this is the Organizations ID. For Azure resources, this is the Azure tenant ID.

iv_resourcecloudpartition TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The cloud partition where the resource exists. For Amazon Web Services, valid values include aws, aws-cn, and aws-us-gov. This field isn't returned for cloud providers that don't use partitions.

iv_resourceregion TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The native cloud region where the resource is located. For Amazon Web Services, this is an Amazon Web Services Region (for example, us-east-1). For Azure resources, this is the Azure region (for example, westus2). This field is always included.

iv_resourcecategory TYPE /AWS1/SHBRESOURCECATEGORY /AWS1/SHBRESOURCECATEGORY

The grouping where the resource belongs.

iv_resourcename TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The name of the resource.

iv_resourcecreationtimedt TYPE /AWS1/SHBNONEMPTYSTRING /AWS1/SHBNONEMPTYSTRING

The time when the resource was created.

it_findingssummary TYPE /AWS1/CL_SHBRESFINDINGSSUMMARY=>TT_RESOURCEFINDINGSSUMMARYLIST TT_RESOURCEFINDINGSSUMMARYLIST

An aggregated view of security findings associated with a resource.

it_resourcetags TYPE /AWS1/CL_SHBRESOURCETAG=>TT_RESOURCETAGLIST TT_RESOURCETAGLIST

The key-value pairs associated with a resource.

iv_resourcesubcategory TYPE /AWS1/SHBRESOURCESUBCATEGORY /AWS1/SHBRESOURCESUBCATEGORY

The AI/ML sub-grouping of the resource. Present only when ResourceCategory is AI/ML.

iv_discoverytype TYPE /AWS1/SHBDISCOVERYTYPE /AWS1/SHBDISCOVERYTYPE

Specifies how the resource was discovered. If the value is Managed, the resource is natively provided by a cloud service provider. If the value is SelfHosted, the resource is hosted on customer-managed infrastructure, such as a compute instance or container image.

io_resourceinfo TYPE REF TO /AWS1/CL_SHBRESOURCEINFO /AWS1/CL_SHBRESOURCEINFO

Additional resource-type-specific details. For self-hosted AI resources and their host resources, contains an AIDetails structure.

---

Queryable Attributes

ResourceGuid

The global identifier used to identify a resource.

Accessible with the following methods

Method	Description
GET_RESOURCEGUID()	Getter for RESOURCEGUID, with configurable default
ASK_RESOURCEGUID()	Getter for RESOURCEGUID w/ exceptions if field has no value
HAS_RESOURCEGUID()	Determine if RESOURCEGUID has a value

ResourceId

The unique identifier for a resource.

Accessible with the following methods

Method	Description
GET_RESOURCEID()	Getter for RESOURCEID, with configurable default
ASK_RESOURCEID()	Getter for RESOURCEID w/ exceptions if field has no value
HAS_RESOURCEID()	Determine if RESOURCEID has a value

AccountId

The Amazon Web Services account that recorded the resource data in Security Hub.

Accessible with the following methods

Method	Description
GET_ACCOUNTID()	Getter for ACCOUNTID, with configurable default
ASK_ACCOUNTID()	Getter for ACCOUNTID w/ exceptions if field has no value
HAS_ACCOUNTID()	Determine if ACCOUNTID has a value

AccountName

The name of the Amazon Web Services account that's associated with the resource.

Accessible with the following methods

Method	Description
GET_ACCOUNTNAME()	Getter for ACCOUNTNAME, with configurable default
ASK_ACCOUNTNAME()	Getter for ACCOUNTNAME w/ exceptions if field has no value
HAS_ACCOUNTNAME()	Determine if ACCOUNTNAME has a value

Region

The Amazon Web Services Region that recorded the resource data in Security Hub.

Accessible with the following methods

Method	Description
GET_REGION()	Getter for REGION, with configurable default
ASK_REGION()	Getter for REGION w/ exceptions if field has no value
HAS_REGION()	Determine if REGION has a value

ResourceProvider

The cloud provider where the resource exists. Valid values are AWS and Azure. This field is always included.

Accessible with the following methods

Method	Description
GET_RESOURCEPROVIDER()	Getter for RESOURCEPROVIDER, with configurable default
ASK_RESOURCEPROVIDER()	Getter for RESOURCEPROVIDER w/ exceptions if field has no va
HAS_RESOURCEPROVIDER()	Determine if RESOURCEPROVIDER has a value

ResourceOwnerAccountId

The identifier of the cloud account that owns the resource. For Amazon Web Services resources, this is the Amazon Web Services account ID. For Azure resources, this is the Azure subscription ID.

Accessible with the following methods

Method	Description
GET_RESOURCEOWNERACCOUNTID()	Getter for RESOURCEOWNERACCOUNTID, with configurable default
ASK_RESOURCEOWNERACCOUNTID()	Getter for RESOURCEOWNERACCOUNTID w/ exceptions if field has
HAS_RESOURCEOWNERACCOUNTID()	Determine if RESOURCEOWNERACCOUNTID has a value

ResourceOwnerOrgId

The identifier of the cloud organization that owns the resource. For Amazon Web Services resources, this is the Organizations ID. For Azure resources, this is the Azure tenant ID.

Accessible with the following methods

Method	Description
GET_RESOURCEOWNERORGID()	Getter for RESOURCEOWNERORGID, with configurable default
ASK_RESOURCEOWNERORGID()	Getter for RESOURCEOWNERORGID w/ exceptions if field has no
HAS_RESOURCEOWNERORGID()	Determine if RESOURCEOWNERORGID has a value

ResourceCloudPartition

The cloud partition where the resource exists. For Amazon Web Services, valid values include aws, aws-cn, and aws-us-gov. This field isn't returned for cloud providers that don't use partitions.

Accessible with the following methods

Method	Description
GET_RESOURCECLOUDPARTITION()	Getter for RESOURCECLOUDPARTITION, with configurable default
ASK_RESOURCECLOUDPARTITION()	Getter for RESOURCECLOUDPARTITION w/ exceptions if field has
HAS_RESOURCECLOUDPARTITION()	Determine if RESOURCECLOUDPARTITION has a value

ResourceRegion

The native cloud region where the resource is located. For Amazon Web Services, this is an Amazon Web Services Region (for example, us-east-1). For Azure resources, this is the Azure region (for example, westus2). This field is always included.

Accessible with the following methods

Method	Description
GET_RESOURCEREGION()	Getter for RESOURCEREGION, with configurable default
ASK_RESOURCEREGION()	Getter for RESOURCEREGION w/ exceptions if field has no valu
HAS_RESOURCEREGION()	Determine if RESOURCEREGION has a value

ResourceCategory

The grouping where the resource belongs.

Accessible with the following methods

Method	Description
GET_RESOURCECATEGORY()	Getter for RESOURCECATEGORY, with configurable default
ASK_RESOURCECATEGORY()	Getter for RESOURCECATEGORY w/ exceptions if field has no va
HAS_RESOURCECATEGORY()	Determine if RESOURCECATEGORY has a value

ResourceType

The type of resource.

Accessible with the following methods

Method	Description
GET_RESOURCETYPE()	Getter for RESOURCETYPE, with configurable default
ASK_RESOURCETYPE()	Getter for RESOURCETYPE w/ exceptions if field has no value
HAS_RESOURCETYPE()	Determine if RESOURCETYPE has a value

ResourceName

The name of the resource.

Accessible with the following methods

Method	Description
GET_RESOURCENAME()	Getter for RESOURCENAME, with configurable default
ASK_RESOURCENAME()	Getter for RESOURCENAME w/ exceptions if field has no value
HAS_RESOURCENAME()	Determine if RESOURCENAME has a value

ResourceCreationTimeDt

The time when the resource was created.

Accessible with the following methods

Method	Description
GET_RESOURCECREATIONTIMEDT()	Getter for RESOURCECREATIONTIMEDT, with configurable default
ASK_RESOURCECREATIONTIMEDT()	Getter for RESOURCECREATIONTIMEDT w/ exceptions if field has
HAS_RESOURCECREATIONTIMEDT()	Determine if RESOURCECREATIONTIMEDT has a value

ResourceDetailCaptureTimeDt

The timestamp when information about the resource was captured.

Accessible with the following methods

Method	Description
GET_RESDETAILCAPTURETIMEDT()	Getter for RESOURCEDETAILCAPTURETIMEDT, with configurable de
ASK_RESDETAILCAPTURETIMEDT()	Getter for RESOURCEDETAILCAPTURETIMEDT w/ exceptions if fiel
HAS_RESDETAILCAPTURETIMEDT()	Determine if RESOURCEDETAILCAPTURETIMEDT has a value

FindingsSummary

An aggregated view of security findings associated with a resource.

Accessible with the following methods

Method	Description
GET_FINDINGSSUMMARY()	Getter for FINDINGSSUMMARY, with configurable default
ASK_FINDINGSSUMMARY()	Getter for FINDINGSSUMMARY w/ exceptions if field has no val
HAS_FINDINGSSUMMARY()	Determine if FINDINGSSUMMARY has a value

ResourceTags

The key-value pairs associated with a resource.

Accessible with the following methods

Method	Description
GET_RESOURCETAGS()	Getter for RESOURCETAGS, with configurable default
ASK_RESOURCETAGS()	Getter for RESOURCETAGS w/ exceptions if field has no value
HAS_RESOURCETAGS()	Determine if RESOURCETAGS has a value

ResourceConfig

The configuration details of a resource.

Accessible with the following methods

Method	Description
GET_RESOURCECONFIG()	Getter for RESOURCECONFIG, with configurable default
ASK_RESOURCECONFIG()	Getter for RESOURCECONFIG w/ exceptions if field has no valu
HAS_RESOURCECONFIG()	Determine if RESOURCECONFIG has a value

ResourceSubCategory

The AI/ML sub-grouping of the resource. Present only when ResourceCategory is AI/ML.

Accessible with the following methods

Method	Description
GET_RESOURCESUBCATEGORY()	Getter for RESOURCESUBCATEGORY, with configurable default
ASK_RESOURCESUBCATEGORY()	Getter for RESOURCESUBCATEGORY w/ exceptions if field has no
HAS_RESOURCESUBCATEGORY()	Determine if RESOURCESUBCATEGORY has a value

DiscoveryType

Specifies how the resource was discovered. If the value is Managed, the resource is natively provided by a cloud service provider. If the value is SelfHosted, the resource is hosted on customer-managed infrastructure, such as a compute instance or container image.

Accessible with the following methods

Method	Description
GET_DISCOVERYTYPE()	Getter for DISCOVERYTYPE, with configurable default
ASK_DISCOVERYTYPE()	Getter for DISCOVERYTYPE w/ exceptions if field has no value
HAS_DISCOVERYTYPE()	Determine if DISCOVERYTYPE has a value

ResourceInfo

Additional resource-type-specific details. For self-hosted AI resources and their host resources, contains an AIDetails structure.

Accessible with the following methods

Method	Description
GET_RESOURCEINFO()	Getter for RESOURCEINFO

Public Local Types In This Class

Internal table types, representing arrays and maps of this class, are defined as local types:

TT_RESOURCES

TYPES TT_RESOURCES TYPE STANDARD TABLE OF REF TO /AWS1/CL_SHBRESOURCERESULT WITH DEFAULT KEY
.