Amazon GuardDuty · Schema
Scan
Contains information about a malware scan.
Anomaly DetectionComplianceMachine-LearningMonitoringSecurityThreat Detection
Properties
| Name | Type | Description |
|---|---|---|
| DetectorId | object | |
| AdminDetectorId | object | |
| ScanId | object | |
| ScanStatus | object | |
| FailureReason | object | |
| ScanStartTime | object | |
| ScanEndTime | object | |
| TriggerDetails | object | |
| ResourceDetails | object | |
| ScanResultDetails | object | |
| AccountId | object | |
| TotalBytes | object | |
| FileCount | object | |
| AttachedVolumes | object |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/amazon-guardduty/refs/heads/main/json-schema/guardduty-scan-schema.json",
"title": "Scan",
"description": "Contains information about a malware scan.",
"type": "object",
"properties": {
"DetectorId": {
"allOf": [
{
"$ref": "#/components/schemas/DetectorId"
},
{
"xml": {
"name": "detectorId"
},
"description": "The unique ID of the detector that the request is associated with."
}
]
},
"AdminDetectorId": {
"allOf": [
{
"$ref": "#/components/schemas/DetectorId"
},
{
"xml": {
"name": "adminDetectorId"
},
"description": "The unique detector ID of the administrator account that the request is associated with. Note that this value will be the same as the one used for <code>DetectorId</code> if the account is an administrator."
}
]
},
"ScanId": {
"allOf": [
{
"$ref": "#/components/schemas/NonEmptyString"
},
{
"xml": {
"name": "scanId"
},
"description": "The unique scan ID associated with a scan entry."
}
]
},
"ScanStatus": {
"allOf": [
{
"$ref": "#/components/schemas/ScanStatus"
},
{
"xml": {
"name": "scanStatus"
},
"description": "An enum value representing possible scan statuses."
}
]
},
"FailureReason": {
"allOf": [
{
"$ref": "#/components/schemas/NonEmptyString"
},
{
"xml": {
"name": "failureReason"
},
"description": "Represents the reason for FAILED scan status."
}
]
},
"ScanStartTime": {
"allOf": [
{
"$ref": "#/components/schemas/Timestamp"
},
{
"xml": {
"name": "scanStartTime"
},
"description": "The timestamp of when the scan was triggered."
}
]
},
"ScanEndTime": {
"allOf": [
{
"$ref": "#/components/schemas/Timestamp"
},
{
"xml": {
"name": "scanEndTime"
},
"description": "The timestamp of when the scan was finished."
}
]
},
"TriggerDetails": {
"allOf": [
{
"$ref": "#/components/schemas/TriggerDetails"
},
{
"xml": {
"name": "triggerDetails"
},
"description": "Specifies the reason why the scan was initiated."
}
]
},
"ResourceDetails": {
"allOf": [
{
"$ref": "#/components/schemas/ResourceDetails"
},
{
"xml": {
"name": "resourceDetails"
},
"description": "Represents the resources that were scanned in the scan entry."
}
]
},
"ScanResultDetails": {
"allOf": [
{
"$ref": "#/components/schemas/ScanResultDetails"
},
{
"xml": {
"name": "scanResultDetails"
},
"description": "Represents the result of the scan."
}
]
},
"AccountId": {
"allOf": [
{
"$ref": "#/components/schemas/AccountId"
},
{
"xml": {
"name": "accountId"
},
"description": "The ID for the account that belongs to the scan."
}
]
},
"TotalBytes": {
"allOf": [
{
"$ref": "#/components/schemas/PositiveLong"
},
{
"xml": {
"name": "totalBytes"
},
"description": "Represents total bytes that were scanned."
}
]
},
"FileCount": {
"allOf": [
{
"$ref": "#/components/schemas/PositiveLong"
},
{
"xml": {
"name": "fileCount"
},
"description": "Represents the number of files that were scanned."
}
]
},
"AttachedVolumes": {
"allOf": [
{
"$ref": "#/components/schemas/VolumeDetails"
},
{
"xml": {
"name": "attachedVolumes"
},
"description": "List of volumes that were attached to the original instance to be scanned."
}
]
}
}
}
Work with this as data
Every JSON Schema here is available over the APIs.io API and to AI agents over MCP.
MCP server
One button, every client — Claude, Cursor, VS Code and the rest.
https://apis.io/mcp
Tools for schemas
4 MCP tools reach this
find_json_schemasBrowse and filter every JSON Schema in the catalog.apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.resolveTurn a domain, URL or GitHub org into the provider it belongs to.find_cohortsEvery scored population of providers in the catalog.
Call it yourself
curl for this page
This JSON Schema
curl "https://apis.io/api/v1/json-schemas/guardduty-scan"
All schemas
curl "https://apis.io/api/v1/json-schemas?limit=25"
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.
A second provider on the same verified email joins the account you already have.