Get Detector

guardduty_get_detector

R Documentation

Retrieves a GuardDuty detector specified by the detectorId

Description

Retrieves a GuardDuty detector specified by the detectorId.

There might be regional differences because some data sources might not be available in all the Amazon Web Services Regions where GuardDuty is presently supported. For more information, see Regions and endpoints.

Usage

guardduty_get_detector(DetectorId)

Arguments

DetectorId

[required] The unique ID of the detector that you want to get.

To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the list_detectors API.

Value

A list with the following syntax:

list(
  CreatedAt = "string",
  FindingPublishingFrequency = "FIFTEEN_MINUTES"|"ONE_HOUR"|"SIX_HOURS",
  ServiceRole = "string",
  Status = "ENABLED"|"DISABLED",
  UpdatedAt = "string",
  DataSources = list(
    CloudTrail = list(
      Status = "ENABLED"|"DISABLED"
    ),
    DNSLogs = list(
      Status = "ENABLED"|"DISABLED"
    ),
    FlowLogs = list(
      Status = "ENABLED"|"DISABLED"
    ),
    S3Logs = list(
      Status = "ENABLED"|"DISABLED"
    ),
    Kubernetes = list(
      AuditLogs = list(
        Status = "ENABLED"|"DISABLED"
      )
    ),
    MalwareProtection = list(
      ScanEc2InstanceWithFindings = list(
        EbsVolumes = list(
          Status = "ENABLED"|"DISABLED",
          Reason = "string"
        )
      ),
      ServiceRole = "string"
    )
  ),
  Tags = list(
    "string"
  ),
  Features = list(
    list(
      Name = "FLOW_LOGS"|"CLOUD_TRAIL"|"DNS_LOGS"|"S3_DATA_EVENTS"|"EKS_AUDIT_LOGS"|"EBS_MALWARE_PROTECTION"|"RDS_LOGIN_EVENTS"|"EKS_RUNTIME_MONITORING"|"LAMBDA_NETWORK_LOGS"|"RUNTIME_MONITORING",
      Status = "ENABLED"|"DISABLED",
      UpdatedAt = as.POSIXct(
        "2015-01-01"
      ),
      AdditionalConfiguration = list(
        list(
          Name = "EKS_ADDON_MANAGEMENT"|"ECS_FARGATE_AGENT_MANAGEMENT"|"EC2_AGENT_MANAGEMENT",
          Status = "ENABLED"|"DISABLED",
          UpdatedAt = as.POSIXct(
            "2015-01-01"
          )
        )
      )
    )
  )
)

Request syntax

svc$get_detector(
  DetectorId = "string"
)