DenialStat

DenialStat

DenialStat

A DenialStat provides aggregated denial event statistics.

Denial stats are rolled up from raw denial events into hourly buckets for efficient dashboard queries. Each stat represents the count of denials for a specific hour, optionally grouped by account and/or prevention.

For more information, please see SIEM Integration.

account Resource The AWS account resource for this denial stat (when groupBy includes ACCOUNT).
accountId ID The Turbot resource ID of the AWS account (when grouped by account).
day String The day bucket (YYYY-MM-DD) for this aggregation. Available with granularity: DAILY.
denialCount Int! The number of denial events in this bucket.
denialEvents DenialEvents Returns the denialEvents for this time bucket that you have permission to get, subject to the optional filter and paging arguments.
Automatically filters by the parent stat's time bucket (hour for HOURLY granularity, day for DAILY granularity) and propagates the parent query's filter.
hour String The hour bucket (UTC) for this aggregation. Available with granularity: HOURLY.
prevention Prevention The prevention for this denial stat (when groupBy includes PREVENTION).
preventionId ID The Turbot resource ID of the prevention (when grouped by prevention).
turbot TurbotDenialStatMetadata Turbot metadata for this DenialStat.