Values.GetInvestigationResponseSourceDetective investigations lets you investigate IAM users and IAM roles using indicators of compromise. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident. GetInvestigation returns the investigation results of an investigation for a behavior graph.
type nonrec t = {graphArn : GraphArn.t option;The Amazon Resource Name (ARN) of the behavior graph.
*)investigationId : InvestigationId.t option;The investigation ID of the investigation report.
*)entityArn : EntityArn.t option;The unique Amazon Resource Name (ARN). Detective supports IAM user ARNs and IAM role ARNs.
*)entityType : EntityType.t option;Type of entity. For example, Amazon Web Services accounts, such as an IAM user and/or IAM role.
*)createdTime : Timestamp.t option;The creation time of the investigation report in UTC time stamp format.
*)scopeStartTime : Timestamp.t option;The start date and time used to set the scope time within which you want to generate the investigation report. The value is an UTC ISO8601 formatted string. For example, 2021-08-18T16:35:56.284Z.
*)scopeEndTime : Timestamp.t option;The data and time when the investigation began. The value is an UTC ISO8601 formatted string. For example, 2021-08-18T16:35:56.284Z.
*)status : Status.t option;The status based on the completion status of the investigation.
*)severity : Severity.t option;The severity assigned is based on the likelihood and impact of the indicators of compromise discovered in the investigation.
*)state : State.t option;The current state of the investigation. An archived investigation indicates that you have completed reviewing the investigation.
*)}type nonrec error = [ | `AccessDeniedException of AccessDeniedException.t| `InternalServerException of InternalServerException.t| `ResourceNotFoundException of ResourceNotFoundException.t| `TooManyRequestsException of TooManyRequestsException.t| `ValidationException of ValidationException.t| `Unknown_operation_error of string * string option ]val error_of_json :
string ->
Yojson.Safe.t ->
[> `AccessDeniedException of AccessDeniedException.t
| `InternalServerException of InternalServerException.t
| `ResourceNotFoundException of ResourceNotFoundException.t
| `TooManyRequestsException of TooManyRequestsException.t
| `Unknown_operation_error of string * string option
| `ValidationException of ValidationException.t ]val error_of_xml :
string ->
Awso.Xml.t ->
[> `AccessDeniedException of AccessDeniedException.t
| `InternalServerException of InternalServerException.t
| `ResourceNotFoundException of ResourceNotFoundException.t
| `TooManyRequestsException of TooManyRequestsException.t
| `Unknown_operation_error of string * string option
| `ValidationException of ValidationException.t ]val to_value :
t ->
[> `Structure of
(string
* [> `Enum of string
| `String of GraphArn.t
| `Timestamp of Timestamp.t ])
list ]