Module Values.AwsApiCallActionSource

Provided if ActionType is AWS_API_CALL. It provides details about the API call that was detected.

Sourcetype nonrec t = {
  1. api : NonEmptyString.t option;
    (*

    The name of the API method that was issued. Length Constraints: 128.

    *)
  2. serviceName : NonEmptyString.t option;
    (*

    The name of the Amazon Web Services service that the API method belongs to. Length Constraints: 128.

    *)
  3. callerType : NonEmptyString.t option;
    (*

    Indicates whether the API call originated from a remote IP address (remoteip) or from a DNS domain (domain).

    *)
  4. remoteIpDetails : ActionRemoteIpDetails.t option;
    (*

    Provided if CallerType is remoteip. Provides information about the remote IP address that the API call originated from.

    *)
  5. domainDetails : AwsApiCallActionDomainDetails.t option;
    (*

    Provided if CallerType is domain. Provides information about the DNS domain that the API call originated from.

    *)
  6. affectedResources : FieldMap.t option;
    (*

    Identifies the resources that were affected by the API call.

    *)
  7. firstSeen : NonEmptyString.t option;
    (*

    A timestamp that indicates when the API call was first observed. For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

    *)
  8. lastSeen : NonEmptyString.t option;
    (*

    A timestamp that indicates when the API call was most recently observed. For more information about the validation and formatting of timestamp fields in Security Hub CSPM, see Timestamps.

    *)
}
Sourceval make : ?api:??? -> ?serviceName:??? -> ?callerType:??? -> ?remoteIpDetails:??? -> ?domainDetails:??? -> ?affectedResources:??? -> ?firstSeen:??? -> ?lastSeen:??? -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `Map of ([> `String of NonEmptyString.t ] * [> `String of NonEmptyString.t ]) list | `String of NonEmptyString.t | `Structure of (string * [> `String of NonEmptyString.t | `Structure of (string * [> `Double of Double.t | `Integer of Integer.t | `String of NonEmptyString.t ]) list ]) list ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t