analysis_report_results

Creates, updates, deletes, gets or lists an analysis_report_results resource.

Overview

Name	analysis_report_results
Type	Resource
Id	aws.network_firewall.analysis_report_results

Fields

The following fields are returned by SELECT queries:

get_analysis_report_results

Name	Datatype	Description
domain	string	The most frequently accessed domains.
first_accessed	string (date-time)	The date and time any domain was first accessed (within the last 30 day period).
hits	object	The number of attempts made to access a observed domain.
last_accessed	string (date-time)	The date and time any domain was last accessed (within the last 30 day period).
protocol	string	The type of traffic captured by the analysis report.
unique_sources	object	The number of unique source IP addresses that connected to a domain.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_analysis_report_results	select	region		The results of a COMPLETED analysis report generated with StartAnalysisReport. For more information, see AnalysisTypeReportResult.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_analysis_report_results

The results of a COMPLETED analysis report generated with StartAnalysisReport. For more information, see AnalysisTypeReportResult.

SELECT
domain,
first_accessed,
hits,
last_accessed,
protocol,
unique_sources
FROM aws.network_firewall.analysis_report_results
WHERE region = '{{ region }}' -- required
;