| Column Name | Column Data Type |
|---|
case_id Required Input Column
A unique identifier of the case. | VARCHAR |
domain_id Required Input Column
The unique identifier of the Cases domain. | VARCHAR |
max_results Input Column
The maximum number of audit events to return. The current maximum supported value is 25. This is also the default when no other value is provided. | BIGINT |
next_token Input Column
The token for the next set of results. This is null if there are no more results to return. | VARCHAR |
_aws_profile Input Column
The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role. | STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
) |
Show child fields- _aws_profile.account_id
The AWS account id - _aws_profile.assumed_role_arn
The ARN of the assumed role - _aws_profile.name
The unique name of the profile. - _aws_profile.organization
Information about this profile's membership in the AWS organization. Show child fields- _aws_profile.organization.account_name
The name of account speciifed by the organization - _aws_profile.organization.id
The organization id - _aws_profile.organization.master_account
Show child fields- _aws_profile.organization.master_account.email
The organization master account email address - _aws_profile.organization.master_account.id
The organization master account id
- _aws_profile.organization.parents[]
Show child fields- _aws_profile.organization.parents[].id
The id of the parent - _aws_profile.organization.parents[].name
The name of the parent - _aws_profile.organization.parents[].tags[]
Show child fields- _aws_profile.organization.parents[].tags[].key
- _aws_profile.organization.parents[].tags[].value
- _aws_profile.organization.parents[].type
The type of parent can be an organization unit or a root
- _aws_profile.organization.tags[]
Show child fields- _aws_profile.organization.tags[].key
- _aws_profile.organization.tags[].value
- _aws_profile.type
The type of profile, either 'credentials' or 'assumed_role' - _aws_profile.via_profile_name
This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.
|
audit_events
A list of case audits where each represents a particular edit of the case. | STRUCT(
"event_id" VARCHAR,
"fields" STRUCT(
"event_field_id" VARCHAR,
"new_value" STRUCT(
"boolean_value" BOOLEAN,
"double_value" DOUBLE,
"empty_value" BOOLEAN,
"string_value" VARCHAR,
"user_arn_value" VARCHAR
),
"old_value" STRUCT(
"boolean_value" BOOLEAN,
"double_value" DOUBLE,
"empty_value" BOOLEAN,
"string_value" VARCHAR,
"user_arn_value" VARCHAR
)
)[],
"performed_by" STRUCT(
"iam_principal_arn" VARCHAR,
"user" STRUCT(
"user_arn" VARCHAR
)
),
"performed_time" TIMESTAMP_S,
"related_item_type" VARCHAR,
"type" VARCHAR
)[] |
Show child fields- audit_events[]
Show child fields- audit_events[].event_id
Unique identifier of a case audit history event. - audit_events[].fields[]
Show child fields- audit_events[].fields[].event_field_id
Unique identifier of field in an Audit History entry. - audit_events[].fields[].new_value
Union of potential field value types. Show child fields- audit_events[].fields[].new_value.boolean_value
Can be either null, or have a Boolean value type. Only one value can be provided. - audit_events[].fields[].new_value.double_value
Can be either null, or have a Double value type. Only one value can be provided. - audit_events[].fields[].new_value.empty_value
An empty value. You cannot set EmptyFieldValue on a field that is required on a case template. This structure will never have any data members. It signifies an empty value on a case field. - audit_events[].fields[].new_value.string_value
Can be either null, or have a String value type. Only one value can be provided. - audit_events[].fields[].new_value.user_arn_value
Can be either null, or have a String value type formatted as an ARN. Only one value can be provided.
- audit_events[].fields[].old_value
Union of potential field value types. Show child fields- audit_events[].fields[].old_value.boolean_value
Can be either null, or have a Boolean value type. Only one value can be provided. - audit_events[].fields[].old_value.double_value
Can be either null, or have a Double value type. Only one value can be provided. - audit_events[].fields[].old_value.empty_value
An empty value. You cannot set EmptyFieldValue on a field that is required on a case template. This structure will never have any data members. It signifies an empty value on a case field. - audit_events[].fields[].old_value.string_value
Can be either null, or have a String value type. Only one value can be provided. - audit_events[].fields[].old_value.user_arn_value
Can be either null, or have a String value type formatted as an ARN. Only one value can be provided.
- audit_events[].performed_by
Information of the user which performed the audit. Show child fields- audit_events[].performed_by.iam_principal_arn
Unique identifier of an IAM role. - audit_events[].performed_by.user
Represents the identity of the person who performed the action. Show child fields- audit_events[].performed_by.user.user_arn
Represents the Amazon Connect ARN of the user.
- audit_events[].performed_time
Time at which an Audit History event took place. - audit_events[].related_item_type
The Type of the related item. - audit_events[].type
The Type of an audit history event.
|