Amazon Detective · JSON Structure

Amazon Detective Investigation Detail Structure

Summary details of an investigation

Type: object Properties: 7
ForensicsInvestigationSecurity

InvestigationDetail is a JSON Structure definition published by Amazon Detective, describing 7 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

InvestigationId Severity Status State CreatedTime EntityArn EntityType

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-detective/refs/heads/main/json-structure/amazon-detective-investigation-detail-structure.json",
  "description": "Summary details of an investigation",
  "type": "object",
  "properties": {
    "InvestigationId": {
      "type": "string",
      "description": "The investigation ID of the investigation report.",
      "example": "invest-abc123def456"
    },
    "Severity": {
      "type": "string",
      "description": "The severity assigned to the investigation.",
      "enum": [
        "INFORMATIONAL",
        "LOW",
        "MEDIUM",
        "HIGH",
        "CRITICAL"
      ],
      "example": "HIGH"
    },
    "Status": {
      "type": "string",
      "description": "The status based on the completion status of the investigation.",
      "enum": [
        "RUNNING",
        "FAILED",
        "SUCCESSFUL"
      ],
      "example": "RUNNING"
    },
    "State": {
      "type": "string",
      "description": "The current state of the investigation.",
      "enum": [
        "ACTIVE",
        "ARCHIVED"
      ],
      "example": "ACTIVE"
    },
    "CreatedTime": {
      "type": "datetime",
      "description": "The time stamp of the creation time of the investigation report.",
      "example": "2025-01-15T10:00:00Z"
    },
    "EntityArn": {
      "type": "string",
      "description": "The unique Amazon Resource Name (ARN) of the IAM user and IAM role.",
      "example": "arn:aws:iam::123456789012:user/jsmith"
    },
    "EntityType": {
      "type": "string",
      "description": "Type of entity. For example, IAM_ROLE or IAM_USER.",
      "enum": [
        "IAM_ROLE",
        "IAM_USER"
      ],
      "example": "IAM_ROLE"
    }
  },
  "name": "InvestigationDetail"
}