DenialStat
DenialStat
DenialStat
A DenialStat provides aggregated denial event statistics.
Denial stats are rolled up from raw denial events into hourly buckets for efficient dashboard queries. Each stat represents the count of denials for a specific hour, optionally grouped by account and/or prevention.
For more information, please see SIEM Integration.
account |
Resource | The AWS account resource for this denial stat (when groupBy includes ACCOUNT). |
accountId |
ID | The Turbot resource ID of the AWS account (when grouped by account). |
day |
String | The day bucket (YYYY-MM-DD) for this aggregation. Available with granularity: DAILY. |
denialCount |
Int! | The number of denial events in this bucket. |
denialEvents |
DenialEvents | Returns the denialEvents for this time bucket that you have permission to get, subject to the optional filter and paging arguments. |
| Automatically filters by the parent stat's time bucket (hour for HOURLY granularity, day for DAILY granularity) and propagates the parent query's filter. | ||
hour |
String | The hour bucket (UTC) for this aggregation. Available with granularity: HOURLY. |
prevention |
Prevention | The prevention for this denial stat (when groupBy includes PREVENTION). |
preventionId |
ID | The Turbot resource ID of the prevention (when grouped by prevention). |
turbot |
TurbotDenialStatMetadata | Turbot metadata for this DenialStat. |