View a markdown version of this page

Resource - AWS Security Hub CSPM

Resource

A resource related to a finding.

Contents

Id

The canonical identifier for the given resource type.

Type: String

Pattern: .*\S.*

Required: Yes

Type

The type of the resource that details are provided for. If possible, set Type to one of the supported resource types. For example, if the resource is an EC2 instance, then set Type to AwsEc2Instance.

If the resource does not match any of the provided types, then set Type to Other.

Length Constraints: Minimum length of 1. Maximum length of 256.

Type: String

Pattern: .*\S.*

Required: Yes

ApplicationArn

The Amazon Resource Name (ARN) of the application that is related to a finding.

Type: String

Pattern: .*\S.*

Required: No

ApplicationName

The name of the application that is related to a finding.

Type: String

Pattern: .*\S.*

Required: No

DataClassification

Contains information about sensitive data that was detected on the resource.

Type: DataClassificationDetails object

Required: No

Details

Additional details about the resource related to a finding.

Type: ResourceDetails object

Required: No

Owner

Information about the account and organization that own the resource.

Type: object

Required: No

Partition

The canonical AWS partition name that the Region is assigned to.

Type: String

Valid Values: aws | aws-cn | aws-us-gov | aws-us-iso | aws-us-iso-b | AzureCloud

Required: No

Provider

The cloud provider that the resource belongs to. Valid values are AWS and Azure.

Type: String

Valid Values: Azure | AWS

Required: No

Region

The canonical AWS external Region name where this resource is located.

Length Constraints: Minimum length of 1. Maximum length of 16.

Type: String

Pattern: .*\S.*

Required: No

ResourceRole

Identifies the role of the resource in the finding. A resource is either the actor or target of the finding activity,

Type: String

Pattern: .*\S.*

Required: No

Tags

A list of AWS tags associated with a resource at the time the finding was processed. Tags must follow AWS tag naming limits and requirements.

Type: String to string map

Key Pattern: .*\S.*

Value Pattern: .*\S.*

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: