GuardDuty

public struct GuardDuty

Client object for interacting with AWS GuardDuty service.

Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC Flow Logs, AWS CloudTrail event logs, and DNS logs. It uses threat intelligence feeds (such as lists of malicious IPs and domains) and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your AWS environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, URLs, or domains. For example, GuardDuty can detect compromised EC2 instances that serve malware or mine bitcoin. GuardDuty also monitors AWS account access behavior for signs of compromise. Some examples of this are unauthorized infrastructure deployments such as EC2 instances deployed in a Region that has never been used, or unusual API calls like a password policy change to reduce password strength. GuardDuty informs you of the status of your AWS environment by producing security findings that you can view in the GuardDuty console or through Amazon CloudWatch events. For more information, see the Amazon GuardDuty User Guide .

  • Initialize the GuardDuty client

    Declaration

    Swift

    public init(accessKeyId: String? = nil, secretAccessKey: String? = nil, sessionToken: String? = nil, region: AWSSDKSwiftCore.Region? = nil, endpoint: String? = nil, middlewares: [AWSServiceMiddleware] = [], eventLoopGroupProvider: AWSClient.EventLoopGroupProvider = .useAWSClientShared)

    Parameters

    accessKeyId

    Public access key provided by AWS

    secretAccessKey

    Private access key provided by AWS

    sessionToken

    Token provided by STS.AssumeRole() which allows access to another AWS account

    region

    Region of server you want to communicate with

    endpoint

    Custom endpoint URL to use instead of standard AWS servers

    middlewares

    Array of middlewares to apply to requests and responses

    eventLoopGroupProvider

    EventLoopGroup to use. Use useAWSClientShared if the client shall manage its own EventLoopGroup.

  • Undocumented

    See more

    Declaration

    Swift

    public enum AdminStatus : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum DataSource : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum DataSourceStatus : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum DestinationType : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum DetectorStatus : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum Feedback : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum FilterAction : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum FindingPublishingFrequency : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum FindingStatisticType : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum IpSetFormat : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum IpSetStatus : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum OrderBy : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum PublishingStatus : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum ThreatIntelSetFormat : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum ThreatIntelSetStatus : String, CustomStringConvertible, Codable
  • Undocumented

    See more

    Declaration

    Swift

    public enum UsageStatisticType : String, CustomStringConvertible, Codable