| Column Name | Column Data Type |
analysis_end_time Input Column
The time when the network insights analyses ended. | TIMESTAMP_S |
analysis_start_time Input Column
The time when the network insights analyses started. | TIMESTAMP_S |
dry_run Input Column
Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation. | BOOLEAN |
filters Input Column
The filters. The following are the possible values: | STRUCT( "name" VARCHAR, "values" VARCHAR[] )[] |
Show child fields- filters[]
Show child fields- filters[].name
The name of the filter. Filter names are case-sensitive.
- filters[].values[]
|
network_insights_analysis_ids Input Column
The ID of the network insights analyses. You must specify either analysis IDs or a path ID. | VARCHAR[] |
Show child fields- network_insights_analysis_ids[]
|
network_insights_path_id Input Column
The ID of the path. | VARCHAR |
_aws_profile Input Column
The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role. | STRUCT( "type" VARCHAR, "name" VARCHAR, "account_id" VARCHAR, "via_profile_name" VARCHAR, "assumed_role_arn" VARCHAR, "organization" STRUCT( "account_name" VARCHAR, "id" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[], "master_account" STRUCT( "id" VARCHAR, "email" VARCHAR ), "parents" STRUCT( "type" VARCHAR, "id" VARCHAR, "name" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[] )[] ) ) |
Show child fields- _aws_profile.account_id
The AWS account id
- _aws_profile.assumed_role_arn
The ARN of the assumed role
- _aws_profile.name
The unique name of the profile.
- _aws_profile.organization
Information about this profile's membership in the AWS organization. Show child fields- _aws_profile.organization.account_name
The name of account speciifed by the organization
- _aws_profile.organization.id
The organization id
- _aws_profile.organization.master_account
Show child fields- _aws_profile.organization.master_account.email
The organization master account email address
- _aws_profile.organization.master_account.id
The organization master account id
- _aws_profile.organization.parents[]
Show child fields- _aws_profile.organization.parents[].id
The id of the parent
- _aws_profile.organization.parents[].name
The name of the parent
- _aws_profile.organization.parents[].tags[]
Show child fields- _aws_profile.organization.parents[].tags[].key
- _aws_profile.organization.parents[].tags[].value
- _aws_profile.organization.parents[].type
The type of parent can be an organization unit or a root
- _aws_profile.organization.tags[]
Show child fields- _aws_profile.organization.tags[].key
- _aws_profile.organization.tags[].value
- _aws_profile.type
The type of profile, either 'credentials' or 'assumed_role'
- _aws_profile.via_profile_name
This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.
|
_aws_region Input Column
The AWS region to use. | VARCHAR |
additional_accounts
The member accounts that contain resources that the path can traverse. | VARCHAR[] |
Show child fields- additional_accounts[]
|
alternate_path_hints
Potential intermediate components. | STRUCT( "component_id" VARCHAR, "component_arn" VARCHAR )[] |
Show child fields- alternate_path_hints[]
Show child fields- alternate_path_hints[].component_arn
The Amazon Resource Name (ARN) of the component.
- alternate_path_hints[].component_id
The ID of the component.
|
explanations
The explanations. For more information, see Reachability Analyzer explanation codes. | STRUCT( "acl" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "acl_rule" STRUCT( "cidr" VARCHAR, "egress" BOOLEAN, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "protocol" VARCHAR, "rule_action" VARCHAR, "rule_number" BIGINT ), "address" VARCHAR, "addresses" VARCHAR[], "attached_to" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "availability_zones" VARCHAR[], "cidrs" VARCHAR[], "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "customer_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "direction" VARCHAR, "explanation_code" VARCHAR, "ingress_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "internet_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "load_balancer_arn" VARCHAR, "classic_load_balancer_listener" STRUCT( "load_balancer_port" BIGINT, "instance_port" BIGINT ), "load_balancer_listener_port" BIGINT, "load_balancer_target" STRUCT( "address" VARCHAR, "availability_zone" VARCHAR, "instance" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "port" BIGINT ), "load_balancer_target_group" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "load_balancer_target_groups" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[], "load_balancer_target_port" BIGINT, "elastic_load_balancer_listener" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "missing_component" VARCHAR, "nat_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "network_interface" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "packet_field" VARCHAR, "vpc_peering_connection" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "port" BIGINT, "port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "prefix_list" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "protocols" VARCHAR[], "route_table_route" STRUCT( "destination_cidr" VARCHAR, "destination_prefix_list_id" VARCHAR, "egress_only_internet_gateway_id" VARCHAR, "gateway_id" VARCHAR, "instance_id" VARCHAR, "nat_gateway_id" VARCHAR, "network_interface_id" VARCHAR, "origin" VARCHAR, "transit_gateway_id" VARCHAR, "vpc_peering_connection_id" VARCHAR, "state" VARCHAR, "carrier_gateway_id" VARCHAR, "core_network_arn" VARCHAR, "local_gateway_id" VARCHAR ), "route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "security_group" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "security_group_rule" STRUCT( "cidr" VARCHAR, "direction" VARCHAR, "security_group_id" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "prefix_list_id" VARCHAR, "protocol" VARCHAR ), "security_groups" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[], "source_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "state" VARCHAR, "subnet" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "subnet_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc_endpoint" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpn_connection" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpn_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table_route" STRUCT( "destination_cidr" VARCHAR, "state" VARCHAR, "route_origin" VARCHAR, "prefix_list_id" VARCHAR, "attachment_id" VARCHAR, "resource_id" VARCHAR, "resource_type" VARCHAR ), "transit_gateway_attachment" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "component_account" VARCHAR, "component_region" VARCHAR, "firewall_stateless_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocols" BIGINT[], "rule_action" VARCHAR, "priority" BIGINT ), "firewall_stateful_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "rule_action" VARCHAR, "direction" VARCHAR ) )[] |
Show child fields- explanations[]
Show child fields- explanations[].acl
The network ACL. Show child fields- explanations[].acl.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].acl.id
The ID of the component.
- explanations[].acl.name
The name of the analysis component.
- explanations[].acl_rule
The network ACL rule. Show child fields- explanations[].acl_rule.cidr
The IPv4 address range, in CIDR notation.
- explanations[].acl_rule.egress
Indicates whether the rule is an outbound rule.
- explanations[].acl_rule.port_range
The range of ports. Show child fields- explanations[].acl_rule.port_range.from
The first port in the range.
- explanations[].acl_rule.port_range.to
The last port in the range.
- explanations[].acl_rule.protocol
The protocol.
- explanations[].acl_rule.rule_action
Indicates whether to allow or deny traffic that matches the rule.
- explanations[].acl_rule.rule_number
The rule number.
- explanations[].address
The IPv4 address, in CIDR notation.
- explanations[].addresses[]
- explanations[].attached_to
The resource to which the component is attached. Show child fields- explanations[].attached_to.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].attached_to.id
The ID of the component.
- explanations[].attached_to.name
The name of the analysis component.
- explanations[].availability_zones[]
- explanations[].cidrs[]
- explanations[].classic_load_balancer_listener
The listener for a Classic Load Balancer. Show child fields- explanations[].classic_load_balancer_listener.instance_port
[Classic Load Balancers] The back-end port for the listener.
- explanations[].classic_load_balancer_listener.load_balancer_port
The port on which the load balancer is listening.
- explanations[].component
The component. Show child fields- explanations[].component.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].component.id
The ID of the component.
- explanations[].component.name
The name of the analysis component.
- explanations[].component_account
The Amazon Web Services account for the component.
- explanations[].component_region
The Region for the component.
- explanations[].customer_gateway
The customer gateway. Show child fields- explanations[].customer_gateway.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].customer_gateway.id
The ID of the component.
- explanations[].customer_gateway.name
The name of the analysis component.
- explanations[].destination
The destination. Show child fields- explanations[].destination.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].destination.id
The ID of the component.
- explanations[].destination.name
The name of the analysis component.
- explanations[].destination_vpc
The destination VPC. Show child fields- explanations[].destination_vpc.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].destination_vpc.id
The ID of the component.
- explanations[].destination_vpc.name
The name of the analysis component.
- explanations[].direction
The direction. The following are the possible values:
- explanations[].elastic_load_balancer_listener
The load balancer listener. Show child fields- explanations[].elastic_load_balancer_listener.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].elastic_load_balancer_listener.id
The ID of the component.
- explanations[].elastic_load_balancer_listener.name
The name of the analysis component.
- explanations[].explanation_code
The explanation code.
- explanations[].firewall_stateful_rule
The Network Firewall stateful rule. Show child fields- explanations[].firewall_stateful_rule.destination_ports[]
Show child fields- explanations[].firewall_stateful_rule.destination_ports[].from
The first port in the range.
- explanations[].firewall_stateful_rule.destination_ports[].to
The last port in the range.
- explanations[].firewall_stateful_rule.destinations[]
- explanations[].firewall_stateful_rule.direction
The direction. The possible values are FORWARD and ANY.
- explanations[].firewall_stateful_rule.protocol
The protocol.
- explanations[].firewall_stateful_rule.rule_action
The rule action. The possible values are pass, drop, and alert.
- explanations[].firewall_stateful_rule.rule_group_arn
The ARN of the stateful rule group.
- explanations[].firewall_stateful_rule.source_ports[]
Show child fields- explanations[].firewall_stateful_rule.source_ports[].from
The first port in the range.
- explanations[].firewall_stateful_rule.source_ports[].to
The last port in the range.
- explanations[].firewall_stateful_rule.sources[]
- explanations[].firewall_stateless_rule
The Network Firewall stateless rule. Show child fields- explanations[].firewall_stateless_rule.destination_ports[]
Show child fields- explanations[].firewall_stateless_rule.destination_ports[].from
The first port in the range.
- explanations[].firewall_stateless_rule.destination_ports[].to
The last port in the range.
- explanations[].firewall_stateless_rule.destinations[]
- explanations[].firewall_stateless_rule.priority
The rule priority.
- explanations[].firewall_stateless_rule.protocols[]
- explanations[].firewall_stateless_rule.rule_action
The rule action. The possible values are pass, drop, and forward_to_site.
- explanations[].firewall_stateless_rule.rule_group_arn
The ARN of the stateless rule group.
- explanations[].firewall_stateless_rule.source_ports[]
Show child fields- explanations[].firewall_stateless_rule.source_ports[].from
The first port in the range.
- explanations[].firewall_stateless_rule.source_ports[].to
The last port in the range.
- explanations[].firewall_stateless_rule.sources[]
- explanations[].ingress_route_table
The route table. Show child fields- explanations[].ingress_route_table.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].ingress_route_table.id
The ID of the component.
- explanations[].ingress_route_table.name
The name of the analysis component.
- explanations[].internet_gateway
The internet gateway. Show child fields- explanations[].internet_gateway.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].internet_gateway.id
The ID of the component.
- explanations[].internet_gateway.name
The name of the analysis component.
- explanations[].load_balancer_arn
The Amazon Resource Name (ARN) of the load balancer.
- explanations[].load_balancer_listener_port
The listener port of the load balancer.
- explanations[].load_balancer_target
The target. Show child fields- explanations[].load_balancer_target.address
The IP address.
- explanations[].load_balancer_target.availability_zone
The Availability Zone.
- explanations[].load_balancer_target.instance
Information about the instance. Show child fields- explanations[].load_balancer_target.instance.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].load_balancer_target.instance.id
The ID of the component.
- explanations[].load_balancer_target.instance.name
The name of the analysis component.
- explanations[].load_balancer_target.port
The port on which the target is listening.
- explanations[].load_balancer_target_group
The target group. Show child fields- explanations[].load_balancer_target_group.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].load_balancer_target_group.id
The ID of the component.
- explanations[].load_balancer_target_group.name
The name of the analysis component.
- explanations[].load_balancer_target_groups[]
Show child fields- explanations[].load_balancer_target_groups[].arn
The Amazon Resource Name (ARN) of the component.
- explanations[].load_balancer_target_groups[].id
The ID of the component.
- explanations[].load_balancer_target_groups[].name
The name of the analysis component.
- explanations[].load_balancer_target_port
The target port.
- explanations[].missing_component
The missing component.
- explanations[].nat_gateway
The NAT gateway. Show child fields- explanations[].nat_gateway.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].nat_gateway.id
The ID of the component.
- explanations[].nat_gateway.name
The name of the analysis component.
- explanations[].network_interface
The network interface. Show child fields- explanations[].network_interface.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].network_interface.id
The ID of the component.
- explanations[].network_interface.name
The name of the analysis component.
- explanations[].packet_field
The packet field.
- explanations[].port
The port.
- explanations[].port_ranges[]
Show child fields- explanations[].port_ranges[].from
The first port in the range.
- explanations[].port_ranges[].to
The last port in the range.
- explanations[].prefix_list
The prefix list. Show child fields- explanations[].prefix_list.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].prefix_list.id
The ID of the component.
- explanations[].prefix_list.name
The name of the analysis component.
- explanations[].protocols[]
- explanations[].route_table
The route table. Show child fields- explanations[].route_table.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].route_table.id
The ID of the component.
- explanations[].route_table.name
The name of the analysis component.
- explanations[].route_table_route
The route table route. Show child fields- explanations[].route_table_route.carrier_gateway_id
The ID of a carrier gateway.
- explanations[].route_table_route.core_network_arn
The Amazon Resource Name (ARN) of a core network.
- explanations[].route_table_route.destination_cidr
The destination IPv4 address, in CIDR notation.
- explanations[].route_table_route.destination_prefix_list_id
The prefix of the Amazon Web Services service.
- explanations[].route_table_route.egress_only_internet_gateway_id
The ID of an egress-only internet gateway.
- explanations[].route_table_route.gateway_id
The ID of the gateway, such as an internet gateway or virtual private gateway.
- explanations[].route_table_route.instance_id
The ID of the instance, such as a NAT instance.
- explanations[].route_table_route.local_gateway_id
The ID of a local gateway.
- explanations[].route_table_route.nat_gateway_id
The ID of a NAT gateway.
- explanations[].route_table_route.network_interface_id
The ID of a network interface.
- explanations[].route_table_route.origin
Describes how the route was created. The following are the possible values: -
CreateRouteTable - The route was automatically created when the route table was created. -
CreateRoute - The route was manually added to the route table. -
EnableVgwRoutePropagation - The route was propagated by route propagation.
- explanations[].route_table_route.state
The state. The following are the possible values:
- explanations[].route_table_route.transit_gateway_id
The ID of a transit gateway.
- explanations[].route_table_route.vpc_peering_connection_id
The ID of a VPC peering connection.
- explanations[].security_group
The security group. Show child fields- explanations[].security_group.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].security_group.id
The ID of the component.
- explanations[].security_group.name
The name of the analysis component.
- explanations[].security_group_rule
The security group rule. Show child fields- explanations[].security_group_rule.cidr
The IPv4 address range, in CIDR notation.
- explanations[].security_group_rule.direction
The direction. The following are the possible values:
- explanations[].security_group_rule.port_range
The port range. Show child fields- explanations[].security_group_rule.port_range.from
The first port in the range.
- explanations[].security_group_rule.port_range.to
The last port in the range.
- explanations[].security_group_rule.prefix_list_id
The prefix list ID.
- explanations[].security_group_rule.protocol
The protocol name.
- explanations[].security_group_rule.security_group_id
The security group ID.
- explanations[].security_groups[]
Show child fields- explanations[].security_groups[].arn
The Amazon Resource Name (ARN) of the component.
- explanations[].security_groups[].id
The ID of the component.
- explanations[].security_groups[].name
The name of the analysis component.
- explanations[].source_vpc
The source VPC. Show child fields- explanations[].source_vpc.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].source_vpc.id
The ID of the component.
- explanations[].source_vpc.name
The name of the analysis component.
- explanations[].state
The state.
- explanations[].subnet
The subnet. Show child fields- explanations[].subnet.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].subnet.id
The ID of the component.
- explanations[].subnet.name
The name of the analysis component.
- explanations[].subnet_route_table
The route table for the subnet. Show child fields- explanations[].subnet_route_table.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].subnet_route_table.id
The ID of the component.
- explanations[].subnet_route_table.name
The name of the analysis component.
- explanations[].transit_gateway
The transit gateway. Show child fields- explanations[].transit_gateway.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].transit_gateway.id
The ID of the component.
- explanations[].transit_gateway.name
The name of the analysis component.
- explanations[].transit_gateway_attachment
The transit gateway attachment. Show child fields- explanations[].transit_gateway_attachment.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].transit_gateway_attachment.id
The ID of the component.
- explanations[].transit_gateway_attachment.name
The name of the analysis component.
- explanations[].transit_gateway_route_table
The transit gateway route table. Show child fields- explanations[].transit_gateway_route_table.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].transit_gateway_route_table.id
The ID of the component.
- explanations[].transit_gateway_route_table.name
The name of the analysis component.
- explanations[].transit_gateway_route_table_route
The transit gateway route table route. Show child fields- explanations[].transit_gateway_route_table_route.attachment_id
The ID of the route attachment.
- explanations[].transit_gateway_route_table_route.destination_cidr
The CIDR block used for destination matches.
- explanations[].transit_gateway_route_table_route.prefix_list_id
The ID of the prefix list.
- explanations[].transit_gateway_route_table_route.resource_id
The ID of the resource for the route attachment.
- explanations[].transit_gateway_route_table_route.resource_type
The resource type for the route attachment.
- explanations[].transit_gateway_route_table_route.route_origin
The route origin. The following are the possible values:
- explanations[].transit_gateway_route_table_route.state
The state of the route.
- explanations[].vpc
The component VPC. Show child fields- explanations[].vpc.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].vpc.id
The ID of the component.
- explanations[].vpc.name
The name of the analysis component.
- explanations[].vpc_endpoint
The VPC endpoint. Show child fields- explanations[].vpc_endpoint.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].vpc_endpoint.id
The ID of the component.
- explanations[].vpc_endpoint.name
The name of the analysis component.
- explanations[].vpc_peering_connection
The VPC peering connection. Show child fields- explanations[].vpc_peering_connection.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].vpc_peering_connection.id
The ID of the component.
- explanations[].vpc_peering_connection.name
The name of the analysis component.
- explanations[].vpn_connection
The VPN connection. Show child fields- explanations[].vpn_connection.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].vpn_connection.id
The ID of the component.
- explanations[].vpn_connection.name
The name of the analysis component.
- explanations[].vpn_gateway
The VPN gateway. Show child fields- explanations[].vpn_gateway.arn
The Amazon Resource Name (ARN) of the component.
- explanations[].vpn_gateway.id
The ID of the component.
- explanations[].vpn_gateway.name
The name of the analysis component.
|
filter_in_arns
The Amazon Resource Names (ARN) of the resources that the path must traverse. | VARCHAR[] |
Show child fields- filter_in_arns[]
|
forward_path_components
The components in the path from source to destination. | STRUCT( "sequence_number" BIGINT, "acl_rule" STRUCT( "cidr" VARCHAR, "egress" BOOLEAN, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "protocol" VARCHAR, "rule_action" VARCHAR, "rule_number" BIGINT ), "attached_to" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "outbound_header" STRUCT( "destination_addresses" VARCHAR[], "destination_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "source_addresses" VARCHAR[], "source_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[] ), "inbound_header" STRUCT( "destination_addresses" VARCHAR[], "destination_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "source_addresses" VARCHAR[], "source_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[] ), "route_table_route" STRUCT( "destination_cidr" VARCHAR, "destination_prefix_list_id" VARCHAR, "egress_only_internet_gateway_id" VARCHAR, "gateway_id" VARCHAR, "instance_id" VARCHAR, "nat_gateway_id" VARCHAR, "network_interface_id" VARCHAR, "origin" VARCHAR, "transit_gateway_id" VARCHAR, "vpc_peering_connection_id" VARCHAR, "state" VARCHAR, "carrier_gateway_id" VARCHAR, "core_network_arn" VARCHAR, "local_gateway_id" VARCHAR ), "security_group_rule" STRUCT( "cidr" VARCHAR, "direction" VARCHAR, "security_group_id" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "prefix_list_id" VARCHAR, "protocol" VARCHAR ), "source_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "subnet" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "additional_details" STRUCT( "additional_detail_type" VARCHAR, "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc_endpoint_service" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "rule_options" STRUCT( "keyword" VARCHAR, "settings" VARCHAR[] )[], "rule_group_type_pairs" STRUCT( "rule_group_arn" VARCHAR, "rule_group_type" VARCHAR )[], "rule_group_rule_options_pairs" STRUCT( "rule_group_arn" VARCHAR, "rule_options" STRUCT( "keyword" VARCHAR, "settings" VARCHAR[] )[] )[], "service_name" VARCHAR, "load_balancers" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[] )[], "transit_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table_route" STRUCT( "destination_cidr" VARCHAR, "state" VARCHAR, "route_origin" VARCHAR, "prefix_list_id" VARCHAR, "attachment_id" VARCHAR, "resource_id" VARCHAR, "resource_type" VARCHAR ), "explanations" STRUCT( "acl" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "acl_rule" STRUCT( "cidr" VARCHAR, "egress" BOOLEAN, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "protocol" VARCHAR, "rule_action" VARCHAR, "rule_number" BIGINT ), "address" VARCHAR, "addresses" VARCHAR[], "attached_to" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "availability_zones" VARCHAR[], "cidrs" VARCHAR[], "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "customer_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "direction" VARCHAR, "explanation_code" VARCHAR, "ingress_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "internet_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "load_balancer_arn" VARCHAR, "classic_load_balancer_listener" STRUCT( "load_balancer_port" BIGINT, "instance_port" BIGINT ), "load_balancer_listener_port" BIGINT, "load_balancer_target" STRUCT( "address" VARCHAR, "availability_zone" VARCHAR, "instance" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "port" BIGINT ), "load_balancer_target_group" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "load_balancer_target_groups" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[], "load_balancer_target_port" BIGINT, "elastic_load_balancer_listener" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "missing_component" VARCHAR, "nat_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "network_interface" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "packet_field" VARCHAR, "vpc_peering_connection" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "port" BIGINT, "port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "prefix_list" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "protocols" VARCHAR[], "route_table_route" STRUCT( "destination_cidr" VARCHAR, "destination_prefix_list_id" VARCHAR, "egress_only_internet_gateway_id" VARCHAR, "gateway_id" VARCHAR, "instance_id" VARCHAR, "nat_gateway_id" VARCHAR, "network_interface_id" VARCHAR, "origin" VARCHAR, "transit_gateway_id" VARCHAR, "vpc_peering_connection_id" VARCHAR, "state" VARCHAR, "carrier_gateway_id" VARCHAR, "core_network_arn" VARCHAR, "local_gateway_id" VARCHAR ), "route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "security_group" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "security_group_rule" STRUCT( "cidr" VARCHAR, "direction" VARCHAR, "security_group_id" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "prefix_list_id" VARCHAR, "protocol" VARCHAR ), "security_groups" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[], "source_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "state" VARCHAR, "subnet" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "subnet_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc_endpoint" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpn_connection" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpn_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table_route" STRUCT( "destination_cidr" VARCHAR, "state" VARCHAR, "route_origin" VARCHAR, "prefix_list_id" VARCHAR, "attachment_id" VARCHAR, "resource_id" VARCHAR, "resource_type" VARCHAR ), "transit_gateway_attachment" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "component_account" VARCHAR, "component_region" VARCHAR, "firewall_stateless_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocols" BIGINT[], "rule_action" VARCHAR, "priority" BIGINT ), "firewall_stateful_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "rule_action" VARCHAR, "direction" VARCHAR ) )[], "elastic_load_balancer_listener" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "firewall_stateless_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocols" BIGINT[], "rule_action" VARCHAR, "priority" BIGINT ), "firewall_stateful_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "rule_action" VARCHAR, "direction" VARCHAR ), "service_name" VARCHAR )[] |
Show child fields- forward_path_components[]
Show child fields- forward_path_components[].acl_rule
The network ACL rule. Show child fields- forward_path_components[].acl_rule.cidr
The IPv4 address range, in CIDR notation.
- forward_path_components[].acl_rule.egress
Indicates whether the rule is an outbound rule.
- forward_path_components[].acl_rule.port_range
The range of ports. Show child fields- forward_path_components[].acl_rule.port_range.from
The first port in the range.
- forward_path_components[].acl_rule.port_range.to
The last port in the range.
- forward_path_components[].acl_rule.protocol
The protocol.
- forward_path_components[].acl_rule.rule_action
Indicates whether to allow or deny traffic that matches the rule.
- forward_path_components[].acl_rule.rule_number
The rule number.
- forward_path_components[].additional_details[]
Show child fields- forward_path_components[].additional_details[].additional_detail_type
The additional detail code.
- forward_path_components[].additional_details[].component
The path component. Show child fields- forward_path_components[].additional_details[].component.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].additional_details[].component.id
The ID of the component.
- forward_path_components[].additional_details[].component.name
The name of the analysis component.
- forward_path_components[].additional_details[].load_balancers[]
Show child fields- forward_path_components[].additional_details[].load_balancers[].arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].additional_details[].load_balancers[].id
The ID of the component.
- forward_path_components[].additional_details[].load_balancers[].name
The name of the analysis component.
- forward_path_components[].additional_details[].rule_group_rule_options_pairs[]
Show child fields- forward_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_group_arn
The ARN of the rule group.
- forward_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[]
Show child fields- forward_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].keyword
The Suricata keyword.
- forward_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].settings[]
- forward_path_components[].additional_details[].rule_group_type_pairs[]
Show child fields- forward_path_components[].additional_details[].rule_group_type_pairs[].rule_group_arn
The ARN of the rule group.
- forward_path_components[].additional_details[].rule_group_type_pairs[].rule_group_type
The rule group type. The possible values are Domain List and Suricata.
- forward_path_components[].additional_details[].rule_options[]
Show child fields- forward_path_components[].additional_details[].rule_options[].keyword
The Suricata keyword.
- forward_path_components[].additional_details[].rule_options[].settings[]
- forward_path_components[].additional_details[].service_name
The name of the VPC endpoint service.
- forward_path_components[].additional_details[].vpc_endpoint_service
The VPC endpoint service. Show child fields- forward_path_components[].additional_details[].vpc_endpoint_service.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].additional_details[].vpc_endpoint_service.id
The ID of the component.
- forward_path_components[].additional_details[].vpc_endpoint_service.name
The name of the analysis component.
- forward_path_components[].attached_to
The resource to which the path component is attached. Show child fields- forward_path_components[].attached_to.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].attached_to.id
The ID of the component.
- forward_path_components[].attached_to.name
The name of the analysis component.
- forward_path_components[].component
The component. Show child fields- forward_path_components[].component.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].component.id
The ID of the component.
- forward_path_components[].component.name
The name of the analysis component.
- forward_path_components[].destination_vpc
The destination VPC. Show child fields- forward_path_components[].destination_vpc.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].destination_vpc.id
The ID of the component.
- forward_path_components[].destination_vpc.name
The name of the analysis component.
- forward_path_components[].elastic_load_balancer_listener
The load balancer listener. Show child fields- forward_path_components[].elastic_load_balancer_listener.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].elastic_load_balancer_listener.id
The ID of the component.
- forward_path_components[].elastic_load_balancer_listener.name
The name of the analysis component.
- forward_path_components[].explanations[]
Show child fields- forward_path_components[].explanations[].acl
The network ACL. Show child fields- forward_path_components[].explanations[].acl.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].acl.id
The ID of the component.
- forward_path_components[].explanations[].acl.name
The name of the analysis component.
- forward_path_components[].explanations[].acl_rule
The network ACL rule. Show child fields- forward_path_components[].explanations[].acl_rule.cidr
The IPv4 address range, in CIDR notation.
- forward_path_components[].explanations[].acl_rule.egress
Indicates whether the rule is an outbound rule.
- forward_path_components[].explanations[].acl_rule.port_range
The range of ports. Show child fields- forward_path_components[].explanations[].acl_rule.port_range.from
The first port in the range.
- forward_path_components[].explanations[].acl_rule.port_range.to
The last port in the range.
- forward_path_components[].explanations[].acl_rule.protocol
The protocol.
- forward_path_components[].explanations[].acl_rule.rule_action
Indicates whether to allow or deny traffic that matches the rule.
- forward_path_components[].explanations[].acl_rule.rule_number
The rule number.
- forward_path_components[].explanations[].address
The IPv4 address, in CIDR notation.
- forward_path_components[].explanations[].addresses[]
- forward_path_components[].explanations[].attached_to
The resource to which the component is attached. Show child fields- forward_path_components[].explanations[].attached_to.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].attached_to.id
The ID of the component.
- forward_path_components[].explanations[].attached_to.name
The name of the analysis component.
- forward_path_components[].explanations[].availability_zones[]
- forward_path_components[].explanations[].cidrs[]
- forward_path_components[].explanations[].classic_load_balancer_listener
The listener for a Classic Load Balancer. Show child fields- forward_path_components[].explanations[].classic_load_balancer_listener.instance_port
[Classic Load Balancers] The back-end port for the listener.
- forward_path_components[].explanations[].classic_load_balancer_listener.load_balancer_port
The port on which the load balancer is listening.
- forward_path_components[].explanations[].component
The component. Show child fields- forward_path_components[].explanations[].component.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].component.id
The ID of the component.
- forward_path_components[].explanations[].component.name
The name of the analysis component.
- forward_path_components[].explanations[].component_account
The Amazon Web Services account for the component.
- forward_path_components[].explanations[].component_region
The Region for the component.
- forward_path_components[].explanations[].customer_gateway
The customer gateway. Show child fields- forward_path_components[].explanations[].customer_gateway.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].customer_gateway.id
The ID of the component.
- forward_path_components[].explanations[].customer_gateway.name
The name of the analysis component.
- forward_path_components[].explanations[].destination
The destination. Show child fields- forward_path_components[].explanations[].destination.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].destination.id
The ID of the component.
- forward_path_components[].explanations[].destination.name
The name of the analysis component.
- forward_path_components[].explanations[].destination_vpc
The destination VPC. Show child fields- forward_path_components[].explanations[].destination_vpc.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].destination_vpc.id
The ID of the component.
- forward_path_components[].explanations[].destination_vpc.name
The name of the analysis component.
- forward_path_components[].explanations[].direction
The direction. The following are the possible values:
- forward_path_components[].explanations[].elastic_load_balancer_listener
The load balancer listener. Show child fields- forward_path_components[].explanations[].elastic_load_balancer_listener.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].elastic_load_balancer_listener.id
The ID of the component.
- forward_path_components[].explanations[].elastic_load_balancer_listener.name
The name of the analysis component.
- forward_path_components[].explanations[].explanation_code
The explanation code.
- forward_path_components[].explanations[].firewall_stateful_rule
The Network Firewall stateful rule. Show child fields- forward_path_components[].explanations[].firewall_stateful_rule.destination_ports[]
Show child fields- forward_path_components[].explanations[].firewall_stateful_rule.destination_ports[].from
The first port in the range.
- forward_path_components[].explanations[].firewall_stateful_rule.destination_ports[].to
The last port in the range.
- forward_path_components[].explanations[].firewall_stateful_rule.destinations[]
- forward_path_components[].explanations[].firewall_stateful_rule.direction
The direction. The possible values are FORWARD and ANY.
- forward_path_components[].explanations[].firewall_stateful_rule.protocol
The protocol.
- forward_path_components[].explanations[].firewall_stateful_rule.rule_action
The rule action. The possible values are pass, drop, and alert.
- forward_path_components[].explanations[].firewall_stateful_rule.rule_group_arn
The ARN of the stateful rule group.
- forward_path_components[].explanations[].firewall_stateful_rule.source_ports[]
Show child fields- forward_path_components[].explanations[].firewall_stateful_rule.source_ports[].from
The first port in the range.
- forward_path_components[].explanations[].firewall_stateful_rule.source_ports[].to
The last port in the range.
- forward_path_components[].explanations[].firewall_stateful_rule.sources[]
- forward_path_components[].explanations[].firewall_stateless_rule
The Network Firewall stateless rule. Show child fields- forward_path_components[].explanations[].firewall_stateless_rule.destination_ports[]
Show child fields- forward_path_components[].explanations[].firewall_stateless_rule.destination_ports[].from
The first port in the range.
- forward_path_components[].explanations[].firewall_stateless_rule.destination_ports[].to
The last port in the range.
- forward_path_components[].explanations[].firewall_stateless_rule.destinations[]
- forward_path_components[].explanations[].firewall_stateless_rule.priority
The rule priority.
- forward_path_components[].explanations[].firewall_stateless_rule.protocols[]
- forward_path_components[].explanations[].firewall_stateless_rule.rule_action
The rule action. The possible values are pass, drop, and forward_to_site.
- forward_path_components[].explanations[].firewall_stateless_rule.rule_group_arn
The ARN of the stateless rule group.
- forward_path_components[].explanations[].firewall_stateless_rule.source_ports[]
Show child fields- forward_path_components[].explanations[].firewall_stateless_rule.source_ports[].from
The first port in the range.
- forward_path_components[].explanations[].firewall_stateless_rule.source_ports[].to
The last port in the range.
- forward_path_components[].explanations[].firewall_stateless_rule.sources[]
- forward_path_components[].explanations[].ingress_route_table
The route table. Show child fields- forward_path_components[].explanations[].ingress_route_table.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].ingress_route_table.id
The ID of the component.
- forward_path_components[].explanations[].ingress_route_table.name
The name of the analysis component.
- forward_path_components[].explanations[].internet_gateway
The internet gateway. Show child fields- forward_path_components[].explanations[].internet_gateway.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].internet_gateway.id
The ID of the component.
- forward_path_components[].explanations[].internet_gateway.name
The name of the analysis component.
- forward_path_components[].explanations[].load_balancer_arn
The Amazon Resource Name (ARN) of the load balancer.
- forward_path_components[].explanations[].load_balancer_listener_port
The listener port of the load balancer.
- forward_path_components[].explanations[].load_balancer_target
The target. Show child fields- forward_path_components[].explanations[].load_balancer_target.address
The IP address.
- forward_path_components[].explanations[].load_balancer_target.availability_zone
The Availability Zone.
- forward_path_components[].explanations[].load_balancer_target.instance
Information about the instance. Show child fields- forward_path_components[].explanations[].load_balancer_target.instance.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].load_balancer_target.instance.id
The ID of the component.
- forward_path_components[].explanations[].load_balancer_target.instance.name
The name of the analysis component.
- forward_path_components[].explanations[].load_balancer_target.port
The port on which the target is listening.
- forward_path_components[].explanations[].load_balancer_target_group
The target group. Show child fields- forward_path_components[].explanations[].load_balancer_target_group.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].load_balancer_target_group.id
The ID of the component.
- forward_path_components[].explanations[].load_balancer_target_group.name
The name of the analysis component.
- forward_path_components[].explanations[].load_balancer_target_groups[]
Show child fields- forward_path_components[].explanations[].load_balancer_target_groups[].arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].load_balancer_target_groups[].id
The ID of the component.
- forward_path_components[].explanations[].load_balancer_target_groups[].name
The name of the analysis component.
- forward_path_components[].explanations[].load_balancer_target_port
The target port.
- forward_path_components[].explanations[].missing_component
The missing component.
- forward_path_components[].explanations[].nat_gateway
The NAT gateway. Show child fields- forward_path_components[].explanations[].nat_gateway.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].nat_gateway.id
The ID of the component.
- forward_path_components[].explanations[].nat_gateway.name
The name of the analysis component.
- forward_path_components[].explanations[].network_interface
The network interface. Show child fields- forward_path_components[].explanations[].network_interface.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].network_interface.id
The ID of the component.
- forward_path_components[].explanations[].network_interface.name
The name of the analysis component.
- forward_path_components[].explanations[].packet_field
The packet field.
- forward_path_components[].explanations[].port
The port.
- forward_path_components[].explanations[].port_ranges[]
Show child fields- forward_path_components[].explanations[].port_ranges[].from
The first port in the range.
- forward_path_components[].explanations[].port_ranges[].to
The last port in the range.
- forward_path_components[].explanations[].prefix_list
The prefix list. Show child fields- forward_path_components[].explanations[].prefix_list.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].prefix_list.id
The ID of the component.
- forward_path_components[].explanations[].prefix_list.name
The name of the analysis component.
- forward_path_components[].explanations[].protocols[]
- forward_path_components[].explanations[].route_table
The route table. Show child fields- forward_path_components[].explanations[].route_table.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].route_table.id
The ID of the component.
- forward_path_components[].explanations[].route_table.name
The name of the analysis component.
- forward_path_components[].explanations[].route_table_route
The route table route. Show child fields- forward_path_components[].explanations[].route_table_route.carrier_gateway_id
The ID of a carrier gateway.
- forward_path_components[].explanations[].route_table_route.core_network_arn
The Amazon Resource Name (ARN) of a core network.
- forward_path_components[].explanations[].route_table_route.destination_cidr
The destination IPv4 address, in CIDR notation.
- forward_path_components[].explanations[].route_table_route.destination_prefix_list_id
The prefix of the Amazon Web Services service.
- forward_path_components[].explanations[].route_table_route.egress_only_internet_gateway_id
The ID of an egress-only internet gateway.
- forward_path_components[].explanations[].route_table_route.gateway_id
The ID of the gateway, such as an internet gateway or virtual private gateway.
- forward_path_components[].explanations[].route_table_route.instance_id
The ID of the instance, such as a NAT instance.
- forward_path_components[].explanations[].route_table_route.local_gateway_id
The ID of a local gateway.
- forward_path_components[].explanations[].route_table_route.nat_gateway_id
The ID of a NAT gateway.
- forward_path_components[].explanations[].route_table_route.network_interface_id
The ID of a network interface.
- forward_path_components[].explanations[].route_table_route.origin
Describes how the route was created. The following are the possible values: -
CreateRouteTable - The route was automatically created when the route table was created. -
CreateRoute - The route was manually added to the route table. -
EnableVgwRoutePropagation - The route was propagated by route propagation.
- forward_path_components[].explanations[].route_table_route.state
The state. The following are the possible values:
- forward_path_components[].explanations[].route_table_route.transit_gateway_id
The ID of a transit gateway.
- forward_path_components[].explanations[].route_table_route.vpc_peering_connection_id
The ID of a VPC peering connection.
- forward_path_components[].explanations[].security_group
The security group. Show child fields- forward_path_components[].explanations[].security_group.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].security_group.id
The ID of the component.
- forward_path_components[].explanations[].security_group.name
The name of the analysis component.
- forward_path_components[].explanations[].security_group_rule
The security group rule. Show child fields- forward_path_components[].explanations[].security_group_rule.cidr
The IPv4 address range, in CIDR notation.
- forward_path_components[].explanations[].security_group_rule.direction
The direction. The following are the possible values:
- forward_path_components[].explanations[].security_group_rule.port_range
The port range. Show child fields- forward_path_components[].explanations[].security_group_rule.port_range.from
The first port in the range.
- forward_path_components[].explanations[].security_group_rule.port_range.to
The last port in the range.
- forward_path_components[].explanations[].security_group_rule.prefix_list_id
The prefix list ID.
- forward_path_components[].explanations[].security_group_rule.protocol
The protocol name.
- forward_path_components[].explanations[].security_group_rule.security_group_id
The security group ID.
- forward_path_components[].explanations[].security_groups[]
Show child fields- forward_path_components[].explanations[].security_groups[].arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].security_groups[].id
The ID of the component.
- forward_path_components[].explanations[].security_groups[].name
The name of the analysis component.
- forward_path_components[].explanations[].source_vpc
The source VPC. Show child fields- forward_path_components[].explanations[].source_vpc.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].source_vpc.id
The ID of the component.
- forward_path_components[].explanations[].source_vpc.name
The name of the analysis component.
- forward_path_components[].explanations[].state
The state.
- forward_path_components[].explanations[].subnet
The subnet. Show child fields- forward_path_components[].explanations[].subnet.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].subnet.id
The ID of the component.
- forward_path_components[].explanations[].subnet.name
The name of the analysis component.
- forward_path_components[].explanations[].subnet_route_table
The route table for the subnet. Show child fields- forward_path_components[].explanations[].subnet_route_table.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].subnet_route_table.id
The ID of the component.
- forward_path_components[].explanations[].subnet_route_table.name
The name of the analysis component.
- forward_path_components[].explanations[].transit_gateway
The transit gateway. Show child fields- forward_path_components[].explanations[].transit_gateway.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].transit_gateway.id
The ID of the component.
- forward_path_components[].explanations[].transit_gateway.name
The name of the analysis component.
- forward_path_components[].explanations[].transit_gateway_attachment
The transit gateway attachment. Show child fields- forward_path_components[].explanations[].transit_gateway_attachment.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].transit_gateway_attachment.id
The ID of the component.
- forward_path_components[].explanations[].transit_gateway_attachment.name
The name of the analysis component.
- forward_path_components[].explanations[].transit_gateway_route_table
The transit gateway route table. Show child fields- forward_path_components[].explanations[].transit_gateway_route_table.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].transit_gateway_route_table.id
The ID of the component.
- forward_path_components[].explanations[].transit_gateway_route_table.name
The name of the analysis component.
- forward_path_components[].explanations[].transit_gateway_route_table_route
The transit gateway route table route. Show child fields- forward_path_components[].explanations[].transit_gateway_route_table_route.attachment_id
The ID of the route attachment.
- forward_path_components[].explanations[].transit_gateway_route_table_route.destination_cidr
The CIDR block used for destination matches.
- forward_path_components[].explanations[].transit_gateway_route_table_route.prefix_list_id
The ID of the prefix list.
- forward_path_components[].explanations[].transit_gateway_route_table_route.resource_id
The ID of the resource for the route attachment.
- forward_path_components[].explanations[].transit_gateway_route_table_route.resource_type
The resource type for the route attachment.
- forward_path_components[].explanations[].transit_gateway_route_table_route.route_origin
The route origin. The following are the possible values:
- forward_path_components[].explanations[].transit_gateway_route_table_route.state
The state of the route.
- forward_path_components[].explanations[].vpc
The component VPC. Show child fields- forward_path_components[].explanations[].vpc.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].vpc.id
The ID of the component.
- forward_path_components[].explanations[].vpc.name
The name of the analysis component.
- forward_path_components[].explanations[].vpc_endpoint
The VPC endpoint. Show child fields- forward_path_components[].explanations[].vpc_endpoint.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].vpc_endpoint.id
The ID of the component.
- forward_path_components[].explanations[].vpc_endpoint.name
The name of the analysis component.
- forward_path_components[].explanations[].vpc_peering_connection
The VPC peering connection. Show child fields- forward_path_components[].explanations[].vpc_peering_connection.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].vpc_peering_connection.id
The ID of the component.
- forward_path_components[].explanations[].vpc_peering_connection.name
The name of the analysis component.
- forward_path_components[].explanations[].vpn_connection
The VPN connection. Show child fields- forward_path_components[].explanations[].vpn_connection.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].vpn_connection.id
The ID of the component.
- forward_path_components[].explanations[].vpn_connection.name
The name of the analysis component.
- forward_path_components[].explanations[].vpn_gateway
The VPN gateway. Show child fields- forward_path_components[].explanations[].vpn_gateway.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].explanations[].vpn_gateway.id
The ID of the component.
- forward_path_components[].explanations[].vpn_gateway.name
The name of the analysis component.
- forward_path_components[].firewall_stateful_rule
The Network Firewall stateful rule. Show child fields- forward_path_components[].firewall_stateful_rule.destination_ports[]
Show child fields- forward_path_components[].firewall_stateful_rule.destination_ports[].from
The first port in the range.
- forward_path_components[].firewall_stateful_rule.destination_ports[].to
The last port in the range.
- forward_path_components[].firewall_stateful_rule.destinations[]
- forward_path_components[].firewall_stateful_rule.direction
The direction. The possible values are FORWARD and ANY.
- forward_path_components[].firewall_stateful_rule.protocol
The protocol.
- forward_path_components[].firewall_stateful_rule.rule_action
The rule action. The possible values are pass, drop, and alert.
- forward_path_components[].firewall_stateful_rule.rule_group_arn
The ARN of the stateful rule group.
- forward_path_components[].firewall_stateful_rule.source_ports[]
Show child fields- forward_path_components[].firewall_stateful_rule.source_ports[].from
The first port in the range.
- forward_path_components[].firewall_stateful_rule.source_ports[].to
The last port in the range.
- forward_path_components[].firewall_stateful_rule.sources[]
- forward_path_components[].firewall_stateless_rule
The Network Firewall stateless rule. Show child fields- forward_path_components[].firewall_stateless_rule.destination_ports[]
Show child fields- forward_path_components[].firewall_stateless_rule.destination_ports[].from
The first port in the range.
- forward_path_components[].firewall_stateless_rule.destination_ports[].to
The last port in the range.
- forward_path_components[].firewall_stateless_rule.destinations[]
- forward_path_components[].firewall_stateless_rule.priority
The rule priority.
- forward_path_components[].firewall_stateless_rule.protocols[]
- forward_path_components[].firewall_stateless_rule.rule_action
The rule action. The possible values are pass, drop, and forward_to_site.
- forward_path_components[].firewall_stateless_rule.rule_group_arn
The ARN of the stateless rule group.
- forward_path_components[].firewall_stateless_rule.source_ports[]
Show child fields- forward_path_components[].firewall_stateless_rule.source_ports[].from
The first port in the range.
- forward_path_components[].firewall_stateless_rule.source_ports[].to
The last port in the range.
- forward_path_components[].firewall_stateless_rule.sources[]
- forward_path_components[].inbound_header
The inbound header. Show child fields- forward_path_components[].inbound_header.destination_addresses[]
- forward_path_components[].inbound_header.destination_port_ranges[]
Show child fields- forward_path_components[].inbound_header.destination_port_ranges[].from
The first port in the range.
- forward_path_components[].inbound_header.destination_port_ranges[].to
The last port in the range.
- forward_path_components[].inbound_header.protocol
The protocol.
- forward_path_components[].inbound_header.source_addresses[]
- forward_path_components[].inbound_header.source_port_ranges[]
Show child fields- forward_path_components[].inbound_header.source_port_ranges[].from
The first port in the range.
- forward_path_components[].inbound_header.source_port_ranges[].to
The last port in the range.
- forward_path_components[].outbound_header
The outbound header. Show child fields- forward_path_components[].outbound_header.destination_addresses[]
- forward_path_components[].outbound_header.destination_port_ranges[]
Show child fields- forward_path_components[].outbound_header.destination_port_ranges[].from
The first port in the range.
- forward_path_components[].outbound_header.destination_port_ranges[].to
The last port in the range.
- forward_path_components[].outbound_header.protocol
The protocol.
- forward_path_components[].outbound_header.source_addresses[]
- forward_path_components[].outbound_header.source_port_ranges[]
Show child fields- forward_path_components[].outbound_header.source_port_ranges[].from
The first port in the range.
- forward_path_components[].outbound_header.source_port_ranges[].to
The last port in the range.
- forward_path_components[].route_table_route
The route table route. Show child fields- forward_path_components[].route_table_route.carrier_gateway_id
The ID of a carrier gateway.
- forward_path_components[].route_table_route.core_network_arn
The Amazon Resource Name (ARN) of a core network.
- forward_path_components[].route_table_route.destination_cidr
The destination IPv4 address, in CIDR notation.
- forward_path_components[].route_table_route.destination_prefix_list_id
The prefix of the Amazon Web Services service.
- forward_path_components[].route_table_route.egress_only_internet_gateway_id
The ID of an egress-only internet gateway.
- forward_path_components[].route_table_route.gateway_id
The ID of the gateway, such as an internet gateway or virtual private gateway.
- forward_path_components[].route_table_route.instance_id
The ID of the instance, such as a NAT instance.
- forward_path_components[].route_table_route.local_gateway_id
The ID of a local gateway.
- forward_path_components[].route_table_route.nat_gateway_id
The ID of a NAT gateway.
- forward_path_components[].route_table_route.network_interface_id
The ID of a network interface.
- forward_path_components[].route_table_route.origin
Describes how the route was created. The following are the possible values: -
CreateRouteTable - The route was automatically created when the route table was created. -
CreateRoute - The route was manually added to the route table. -
EnableVgwRoutePropagation - The route was propagated by route propagation.
- forward_path_components[].route_table_route.state
The state. The following are the possible values:
- forward_path_components[].route_table_route.transit_gateway_id
The ID of a transit gateway.
- forward_path_components[].route_table_route.vpc_peering_connection_id
The ID of a VPC peering connection.
- forward_path_components[].security_group_rule
The security group rule. Show child fields- forward_path_components[].security_group_rule.cidr
The IPv4 address range, in CIDR notation.
- forward_path_components[].security_group_rule.direction
The direction. The following are the possible values:
- forward_path_components[].security_group_rule.port_range
The port range. Show child fields- forward_path_components[].security_group_rule.port_range.from
The first port in the range.
- forward_path_components[].security_group_rule.port_range.to
The last port in the range.
- forward_path_components[].security_group_rule.prefix_list_id
The prefix list ID.
- forward_path_components[].security_group_rule.protocol
The protocol name.
- forward_path_components[].security_group_rule.security_group_id
The security group ID.
- forward_path_components[].sequence_number
The sequence number.
- forward_path_components[].service_name
The name of the VPC endpoint service.
- forward_path_components[].source_vpc
The source VPC. Show child fields- forward_path_components[].source_vpc.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].source_vpc.id
The ID of the component.
- forward_path_components[].source_vpc.name
The name of the analysis component.
- forward_path_components[].subnet
The subnet. Show child fields- forward_path_components[].subnet.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].subnet.id
The ID of the component.
- forward_path_components[].subnet.name
The name of the analysis component.
- forward_path_components[].transit_gateway
The transit gateway. Show child fields- forward_path_components[].transit_gateway.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].transit_gateway.id
The ID of the component.
- forward_path_components[].transit_gateway.name
The name of the analysis component.
- forward_path_components[].transit_gateway_route_table_route
The route in a transit gateway route table. Show child fields- forward_path_components[].transit_gateway_route_table_route.attachment_id
The ID of the route attachment.
- forward_path_components[].transit_gateway_route_table_route.destination_cidr
The CIDR block used for destination matches.
- forward_path_components[].transit_gateway_route_table_route.prefix_list_id
The ID of the prefix list.
- forward_path_components[].transit_gateway_route_table_route.resource_id
The ID of the resource for the route attachment.
- forward_path_components[].transit_gateway_route_table_route.resource_type
The resource type for the route attachment.
- forward_path_components[].transit_gateway_route_table_route.route_origin
The route origin. The following are the possible values:
- forward_path_components[].transit_gateway_route_table_route.state
The state of the route.
- forward_path_components[].vpc
The component VPC. Show child fields- forward_path_components[].vpc.arn
The Amazon Resource Name (ARN) of the component.
- forward_path_components[].vpc.id
The ID of the component.
- forward_path_components[].vpc.name
The name of the analysis component.
|
network_insights_analysis_arn
The Amazon Resource Name (ARN) of the network insights analysis. | VARCHAR |
network_insights_analysis_id
The ID of the network insights analysis. | VARCHAR |
network_path_found
Indicates whether the destination is reachable from the source. | BOOLEAN |
return_path_components
The components in the path from destination to source. | STRUCT( "sequence_number" BIGINT, "acl_rule" STRUCT( "cidr" VARCHAR, "egress" BOOLEAN, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "protocol" VARCHAR, "rule_action" VARCHAR, "rule_number" BIGINT ), "attached_to" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "outbound_header" STRUCT( "destination_addresses" VARCHAR[], "destination_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "source_addresses" VARCHAR[], "source_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[] ), "inbound_header" STRUCT( "destination_addresses" VARCHAR[], "destination_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "source_addresses" VARCHAR[], "source_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[] ), "route_table_route" STRUCT( "destination_cidr" VARCHAR, "destination_prefix_list_id" VARCHAR, "egress_only_internet_gateway_id" VARCHAR, "gateway_id" VARCHAR, "instance_id" VARCHAR, "nat_gateway_id" VARCHAR, "network_interface_id" VARCHAR, "origin" VARCHAR, "transit_gateway_id" VARCHAR, "vpc_peering_connection_id" VARCHAR, "state" VARCHAR, "carrier_gateway_id" VARCHAR, "core_network_arn" VARCHAR, "local_gateway_id" VARCHAR ), "security_group_rule" STRUCT( "cidr" VARCHAR, "direction" VARCHAR, "security_group_id" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "prefix_list_id" VARCHAR, "protocol" VARCHAR ), "source_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "subnet" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "additional_details" STRUCT( "additional_detail_type" VARCHAR, "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc_endpoint_service" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "rule_options" STRUCT( "keyword" VARCHAR, "settings" VARCHAR[] )[], "rule_group_type_pairs" STRUCT( "rule_group_arn" VARCHAR, "rule_group_type" VARCHAR )[], "rule_group_rule_options_pairs" STRUCT( "rule_group_arn" VARCHAR, "rule_options" STRUCT( "keyword" VARCHAR, "settings" VARCHAR[] )[] )[], "service_name" VARCHAR, "load_balancers" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[] )[], "transit_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table_route" STRUCT( "destination_cidr" VARCHAR, "state" VARCHAR, "route_origin" VARCHAR, "prefix_list_id" VARCHAR, "attachment_id" VARCHAR, "resource_id" VARCHAR, "resource_type" VARCHAR ), "explanations" STRUCT( "acl" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "acl_rule" STRUCT( "cidr" VARCHAR, "egress" BOOLEAN, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "protocol" VARCHAR, "rule_action" VARCHAR, "rule_number" BIGINT ), "address" VARCHAR, "addresses" VARCHAR[], "attached_to" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "availability_zones" VARCHAR[], "cidrs" VARCHAR[], "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "customer_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "direction" VARCHAR, "explanation_code" VARCHAR, "ingress_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "internet_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "load_balancer_arn" VARCHAR, "classic_load_balancer_listener" STRUCT( "load_balancer_port" BIGINT, "instance_port" BIGINT ), "load_balancer_listener_port" BIGINT, "load_balancer_target" STRUCT( "address" VARCHAR, "availability_zone" VARCHAR, "instance" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "port" BIGINT ), "load_balancer_target_group" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "load_balancer_target_groups" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[], "load_balancer_target_port" BIGINT, "elastic_load_balancer_listener" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "missing_component" VARCHAR, "nat_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "network_interface" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "packet_field" VARCHAR, "vpc_peering_connection" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "port" BIGINT, "port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "prefix_list" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "protocols" VARCHAR[], "route_table_route" STRUCT( "destination_cidr" VARCHAR, "destination_prefix_list_id" VARCHAR, "egress_only_internet_gateway_id" VARCHAR, "gateway_id" VARCHAR, "instance_id" VARCHAR, "nat_gateway_id" VARCHAR, "network_interface_id" VARCHAR, "origin" VARCHAR, "transit_gateway_id" VARCHAR, "vpc_peering_connection_id" VARCHAR, "state" VARCHAR, "carrier_gateway_id" VARCHAR, "core_network_arn" VARCHAR, "local_gateway_id" VARCHAR ), "route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "security_group" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "security_group_rule" STRUCT( "cidr" VARCHAR, "direction" VARCHAR, "security_group_id" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "prefix_list_id" VARCHAR, "protocol" VARCHAR ), "security_groups" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[], "source_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "state" VARCHAR, "subnet" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "subnet_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc_endpoint" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpn_connection" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpn_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table_route" STRUCT( "destination_cidr" VARCHAR, "state" VARCHAR, "route_origin" VARCHAR, "prefix_list_id" VARCHAR, "attachment_id" VARCHAR, "resource_id" VARCHAR, "resource_type" VARCHAR ), "transit_gateway_attachment" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "component_account" VARCHAR, "component_region" VARCHAR, "firewall_stateless_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocols" BIGINT[], "rule_action" VARCHAR, "priority" BIGINT ), "firewall_stateful_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "rule_action" VARCHAR, "direction" VARCHAR ) )[], "elastic_load_balancer_listener" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "firewall_stateless_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocols" BIGINT[], "rule_action" VARCHAR, "priority" BIGINT ), "firewall_stateful_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "rule_action" VARCHAR, "direction" VARCHAR ), "service_name" VARCHAR )[] |
Show child fields- return_path_components[]
Show child fields- return_path_components[].acl_rule
The network ACL rule. Show child fields- return_path_components[].acl_rule.cidr
The IPv4 address range, in CIDR notation.
- return_path_components[].acl_rule.egress
Indicates whether the rule is an outbound rule.
- return_path_components[].acl_rule.port_range
The range of ports. Show child fields- return_path_components[].acl_rule.port_range.from
The first port in the range.
- return_path_components[].acl_rule.port_range.to
The last port in the range.
- return_path_components[].acl_rule.protocol
The protocol.
- return_path_components[].acl_rule.rule_action
Indicates whether to allow or deny traffic that matches the rule.
- return_path_components[].acl_rule.rule_number
The rule number.
- return_path_components[].additional_details[]
Show child fields- return_path_components[].additional_details[].additional_detail_type
The additional detail code.
- return_path_components[].additional_details[].component
The path component. Show child fields- return_path_components[].additional_details[].component.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].additional_details[].component.id
The ID of the component.
- return_path_components[].additional_details[].component.name
The name of the analysis component.
- return_path_components[].additional_details[].load_balancers[]
Show child fields- return_path_components[].additional_details[].load_balancers[].arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].additional_details[].load_balancers[].id
The ID of the component.
- return_path_components[].additional_details[].load_balancers[].name
The name of the analysis component.
- return_path_components[].additional_details[].rule_group_rule_options_pairs[]
Show child fields- return_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_group_arn
The ARN of the rule group.
- return_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[]
Show child fields- return_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].keyword
The Suricata keyword.
- return_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].settings[]
- return_path_components[].additional_details[].rule_group_type_pairs[]
Show child fields- return_path_components[].additional_details[].rule_group_type_pairs[].rule_group_arn
The ARN of the rule group.
- return_path_components[].additional_details[].rule_group_type_pairs[].rule_group_type
The rule group type. The possible values are Domain List and Suricata.
- return_path_components[].additional_details[].rule_options[]
Show child fields- return_path_components[].additional_details[].rule_options[].keyword
The Suricata keyword.
- return_path_components[].additional_details[].rule_options[].settings[]
- return_path_components[].additional_details[].service_name
The name of the VPC endpoint service.
- return_path_components[].additional_details[].vpc_endpoint_service
The VPC endpoint service. Show child fields- return_path_components[].additional_details[].vpc_endpoint_service.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].additional_details[].vpc_endpoint_service.id
The ID of the component.
- return_path_components[].additional_details[].vpc_endpoint_service.name
The name of the analysis component.
- return_path_components[].attached_to
The resource to which the path component is attached. Show child fields- return_path_components[].attached_to.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].attached_to.id
The ID of the component.
- return_path_components[].attached_to.name
The name of the analysis component.
- return_path_components[].component
The component. Show child fields- return_path_components[].component.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].component.id
The ID of the component.
- return_path_components[].component.name
The name of the analysis component.
- return_path_components[].destination_vpc
The destination VPC. Show child fields- return_path_components[].destination_vpc.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].destination_vpc.id
The ID of the component.
- return_path_components[].destination_vpc.name
The name of the analysis component.
- return_path_components[].elastic_load_balancer_listener
The load balancer listener. Show child fields- return_path_components[].elastic_load_balancer_listener.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].elastic_load_balancer_listener.id
The ID of the component.
- return_path_components[].elastic_load_balancer_listener.name
The name of the analysis component.
- return_path_components[].explanations[]
Show child fields- return_path_components[].explanations[].acl
The network ACL. Show child fields- return_path_components[].explanations[].acl.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].acl.id
The ID of the component.
- return_path_components[].explanations[].acl.name
The name of the analysis component.
- return_path_components[].explanations[].acl_rule
The network ACL rule. Show child fields- return_path_components[].explanations[].acl_rule.cidr
The IPv4 address range, in CIDR notation.
- return_path_components[].explanations[].acl_rule.egress
Indicates whether the rule is an outbound rule.
- return_path_components[].explanations[].acl_rule.port_range
The range of ports. Show child fields- return_path_components[].explanations[].acl_rule.port_range.from
The first port in the range.
- return_path_components[].explanations[].acl_rule.port_range.to
The last port in the range.
- return_path_components[].explanations[].acl_rule.protocol
The protocol.
- return_path_components[].explanations[].acl_rule.rule_action
Indicates whether to allow or deny traffic that matches the rule.
- return_path_components[].explanations[].acl_rule.rule_number
The rule number.
- return_path_components[].explanations[].address
The IPv4 address, in CIDR notation.
- return_path_components[].explanations[].addresses[]
- return_path_components[].explanations[].attached_to
The resource to which the component is attached. Show child fields- return_path_components[].explanations[].attached_to.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].attached_to.id
The ID of the component.
- return_path_components[].explanations[].attached_to.name
The name of the analysis component.
- return_path_components[].explanations[].availability_zones[]
- return_path_components[].explanations[].cidrs[]
- return_path_components[].explanations[].classic_load_balancer_listener
The listener for a Classic Load Balancer. Show child fields- return_path_components[].explanations[].classic_load_balancer_listener.instance_port
[Classic Load Balancers] The back-end port for the listener.
- return_path_components[].explanations[].classic_load_balancer_listener.load_balancer_port
The port on which the load balancer is listening.
- return_path_components[].explanations[].component
The component. Show child fields- return_path_components[].explanations[].component.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].component.id
The ID of the component.
- return_path_components[].explanations[].component.name
The name of the analysis component.
- return_path_components[].explanations[].component_account
The Amazon Web Services account for the component.
- return_path_components[].explanations[].component_region
The Region for the component.
- return_path_components[].explanations[].customer_gateway
The customer gateway. Show child fields- return_path_components[].explanations[].customer_gateway.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].customer_gateway.id
The ID of the component.
- return_path_components[].explanations[].customer_gateway.name
The name of the analysis component.
- return_path_components[].explanations[].destination
The destination. Show child fields- return_path_components[].explanations[].destination.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].destination.id
The ID of the component.
- return_path_components[].explanations[].destination.name
The name of the analysis component.
- return_path_components[].explanations[].destination_vpc
The destination VPC. Show child fields- return_path_components[].explanations[].destination_vpc.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].destination_vpc.id
The ID of the component.
- return_path_components[].explanations[].destination_vpc.name
The name of the analysis component.
- return_path_components[].explanations[].direction
The direction. The following are the possible values:
- return_path_components[].explanations[].elastic_load_balancer_listener
The load balancer listener. Show child fields- return_path_components[].explanations[].elastic_load_balancer_listener.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].elastic_load_balancer_listener.id
The ID of the component.
- return_path_components[].explanations[].elastic_load_balancer_listener.name
The name of the analysis component.
- return_path_components[].explanations[].explanation_code
The explanation code.
- return_path_components[].explanations[].firewall_stateful_rule
The Network Firewall stateful rule. Show child fields- return_path_components[].explanations[].firewall_stateful_rule.destination_ports[]
Show child fields- return_path_components[].explanations[].firewall_stateful_rule.destination_ports[].from
The first port in the range.
- return_path_components[].explanations[].firewall_stateful_rule.destination_ports[].to
The last port in the range.
- return_path_components[].explanations[].firewall_stateful_rule.destinations[]
- return_path_components[].explanations[].firewall_stateful_rule.direction
The direction. The possible values are FORWARD and ANY.
- return_path_components[].explanations[].firewall_stateful_rule.protocol
The protocol.
- return_path_components[].explanations[].firewall_stateful_rule.rule_action
The rule action. The possible values are pass, drop, and alert.
- return_path_components[].explanations[].firewall_stateful_rule.rule_group_arn
The ARN of the stateful rule group.
- return_path_components[].explanations[].firewall_stateful_rule.source_ports[]
Show child fields- return_path_components[].explanations[].firewall_stateful_rule.source_ports[].from
The first port in the range.
- return_path_components[].explanations[].firewall_stateful_rule.source_ports[].to
The last port in the range.
- return_path_components[].explanations[].firewall_stateful_rule.sources[]
- return_path_components[].explanations[].firewall_stateless_rule
The Network Firewall stateless rule. Show child fields- return_path_components[].explanations[].firewall_stateless_rule.destination_ports[]
Show child fields- return_path_components[].explanations[].firewall_stateless_rule.destination_ports[].from
The first port in the range.
- return_path_components[].explanations[].firewall_stateless_rule.destination_ports[].to
The last port in the range.
- return_path_components[].explanations[].firewall_stateless_rule.destinations[]
- return_path_components[].explanations[].firewall_stateless_rule.priority
The rule priority.
- return_path_components[].explanations[].firewall_stateless_rule.protocols[]
- return_path_components[].explanations[].firewall_stateless_rule.rule_action
The rule action. The possible values are pass, drop, and forward_to_site.
- return_path_components[].explanations[].firewall_stateless_rule.rule_group_arn
The ARN of the stateless rule group.
- return_path_components[].explanations[].firewall_stateless_rule.source_ports[]
Show child fields- return_path_components[].explanations[].firewall_stateless_rule.source_ports[].from
The first port in the range.
- return_path_components[].explanations[].firewall_stateless_rule.source_ports[].to
The last port in the range.
- return_path_components[].explanations[].firewall_stateless_rule.sources[]
- return_path_components[].explanations[].ingress_route_table
The route table. Show child fields- return_path_components[].explanations[].ingress_route_table.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].ingress_route_table.id
The ID of the component.
- return_path_components[].explanations[].ingress_route_table.name
The name of the analysis component.
- return_path_components[].explanations[].internet_gateway
The internet gateway. Show child fields- return_path_components[].explanations[].internet_gateway.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].internet_gateway.id
The ID of the component.
- return_path_components[].explanations[].internet_gateway.name
The name of the analysis component.
- return_path_components[].explanations[].load_balancer_arn
The Amazon Resource Name (ARN) of the load balancer.
- return_path_components[].explanations[].load_balancer_listener_port
The listener port of the load balancer.
- return_path_components[].explanations[].load_balancer_target
The target. Show child fields- return_path_components[].explanations[].load_balancer_target.address
The IP address.
- return_path_components[].explanations[].load_balancer_target.availability_zone
The Availability Zone.
- return_path_components[].explanations[].load_balancer_target.instance
Information about the instance. Show child fields- return_path_components[].explanations[].load_balancer_target.instance.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].load_balancer_target.instance.id
The ID of the component.
- return_path_components[].explanations[].load_balancer_target.instance.name
The name of the analysis component.
- return_path_components[].explanations[].load_balancer_target.port
The port on which the target is listening.
- return_path_components[].explanations[].load_balancer_target_group
The target group. Show child fields- return_path_components[].explanations[].load_balancer_target_group.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].load_balancer_target_group.id
The ID of the component.
- return_path_components[].explanations[].load_balancer_target_group.name
The name of the analysis component.
- return_path_components[].explanations[].load_balancer_target_groups[]
Show child fields- return_path_components[].explanations[].load_balancer_target_groups[].arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].load_balancer_target_groups[].id
The ID of the component.
- return_path_components[].explanations[].load_balancer_target_groups[].name
The name of the analysis component.
- return_path_components[].explanations[].load_balancer_target_port
The target port.
- return_path_components[].explanations[].missing_component
The missing component.
- return_path_components[].explanations[].nat_gateway
The NAT gateway. Show child fields- return_path_components[].explanations[].nat_gateway.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].nat_gateway.id
The ID of the component.
- return_path_components[].explanations[].nat_gateway.name
The name of the analysis component.
- return_path_components[].explanations[].network_interface
The network interface. Show child fields- return_path_components[].explanations[].network_interface.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].network_interface.id
The ID of the component.
- return_path_components[].explanations[].network_interface.name
The name of the analysis component.
- return_path_components[].explanations[].packet_field
The packet field.
- return_path_components[].explanations[].port
The port.
- return_path_components[].explanations[].port_ranges[]
Show child fields- return_path_components[].explanations[].port_ranges[].from
The first port in the range.
- return_path_components[].explanations[].port_ranges[].to
The last port in the range.
- return_path_components[].explanations[].prefix_list
The prefix list. Show child fields- return_path_components[].explanations[].prefix_list.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].prefix_list.id
The ID of the component.
- return_path_components[].explanations[].prefix_list.name
The name of the analysis component.
- return_path_components[].explanations[].protocols[]
- return_path_components[].explanations[].route_table
The route table. Show child fields- return_path_components[].explanations[].route_table.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].route_table.id
The ID of the component.
- return_path_components[].explanations[].route_table.name
The name of the analysis component.
- return_path_components[].explanations[].route_table_route
The route table route. Show child fields- return_path_components[].explanations[].route_table_route.carrier_gateway_id
The ID of a carrier gateway.
- return_path_components[].explanations[].route_table_route.core_network_arn
The Amazon Resource Name (ARN) of a core network.
- return_path_components[].explanations[].route_table_route.destination_cidr
The destination IPv4 address, in CIDR notation.
- return_path_components[].explanations[].route_table_route.destination_prefix_list_id
The prefix of the Amazon Web Services service.
- return_path_components[].explanations[].route_table_route.egress_only_internet_gateway_id
The ID of an egress-only internet gateway.
- return_path_components[].explanations[].route_table_route.gateway_id
The ID of the gateway, such as an internet gateway or virtual private gateway.
- return_path_components[].explanations[].route_table_route.instance_id
The ID of the instance, such as a NAT instance.
- return_path_components[].explanations[].route_table_route.local_gateway_id
The ID of a local gateway.
- return_path_components[].explanations[].route_table_route.nat_gateway_id
The ID of a NAT gateway.
- return_path_components[].explanations[].route_table_route.network_interface_id
The ID of a network interface.
- return_path_components[].explanations[].route_table_route.origin
Describes how the route was created. The following are the possible values: -
CreateRouteTable - The route was automatically created when the route table was created. -
CreateRoute - The route was manually added to the route table. -
EnableVgwRoutePropagation - The route was propagated by route propagation.
- return_path_components[].explanations[].route_table_route.state
The state. The following are the possible values:
- return_path_components[].explanations[].route_table_route.transit_gateway_id
The ID of a transit gateway.
- return_path_components[].explanations[].route_table_route.vpc_peering_connection_id
The ID of a VPC peering connection.
- return_path_components[].explanations[].security_group
The security group. Show child fields- return_path_components[].explanations[].security_group.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].security_group.id
The ID of the component.
- return_path_components[].explanations[].security_group.name
The name of the analysis component.
- return_path_components[].explanations[].security_group_rule
The security group rule. Show child fields- return_path_components[].explanations[].security_group_rule.cidr
The IPv4 address range, in CIDR notation.
- return_path_components[].explanations[].security_group_rule.direction
The direction. The following are the possible values:
- return_path_components[].explanations[].security_group_rule.port_range
The port range. Show child fields- return_path_components[].explanations[].security_group_rule.port_range.from
The first port in the range.
- return_path_components[].explanations[].security_group_rule.port_range.to
The last port in the range.
- return_path_components[].explanations[].security_group_rule.prefix_list_id
The prefix list ID.
- return_path_components[].explanations[].security_group_rule.protocol
The protocol name.
- return_path_components[].explanations[].security_group_rule.security_group_id
The security group ID.
- return_path_components[].explanations[].security_groups[]
Show child fields- return_path_components[].explanations[].security_groups[].arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].security_groups[].id
The ID of the component.
- return_path_components[].explanations[].security_groups[].name
The name of the analysis component.
- return_path_components[].explanations[].source_vpc
The source VPC. Show child fields- return_path_components[].explanations[].source_vpc.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].source_vpc.id
The ID of the component.
- return_path_components[].explanations[].source_vpc.name
The name of the analysis component.
- return_path_components[].explanations[].state
The state.
- return_path_components[].explanations[].subnet
The subnet. Show child fields- return_path_components[].explanations[].subnet.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].subnet.id
The ID of the component.
- return_path_components[].explanations[].subnet.name
The name of the analysis component.
- return_path_components[].explanations[].subnet_route_table
The route table for the subnet. Show child fields- return_path_components[].explanations[].subnet_route_table.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].subnet_route_table.id
The ID of the component.
- return_path_components[].explanations[].subnet_route_table.name
The name of the analysis component.
- return_path_components[].explanations[].transit_gateway
The transit gateway. Show child fields- return_path_components[].explanations[].transit_gateway.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].transit_gateway.id
The ID of the component.
- return_path_components[].explanations[].transit_gateway.name
The name of the analysis component.
- return_path_components[].explanations[].transit_gateway_attachment
The transit gateway attachment. Show child fields- return_path_components[].explanations[].transit_gateway_attachment.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].transit_gateway_attachment.id
The ID of the component.
- return_path_components[].explanations[].transit_gateway_attachment.name
The name of the analysis component.
- return_path_components[].explanations[].transit_gateway_route_table
The transit gateway route table. Show child fields- return_path_components[].explanations[].transit_gateway_route_table.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].transit_gateway_route_table.id
The ID of the component.
- return_path_components[].explanations[].transit_gateway_route_table.name
The name of the analysis component.
- return_path_components[].explanations[].transit_gateway_route_table_route
The transit gateway route table route. Show child fields- return_path_components[].explanations[].transit_gateway_route_table_route.attachment_id
The ID of the route attachment.
- return_path_components[].explanations[].transit_gateway_route_table_route.destination_cidr
The CIDR block used for destination matches.
- return_path_components[].explanations[].transit_gateway_route_table_route.prefix_list_id
The ID of the prefix list.
- return_path_components[].explanations[].transit_gateway_route_table_route.resource_id
The ID of the resource for the route attachment.
- return_path_components[].explanations[].transit_gateway_route_table_route.resource_type
The resource type for the route attachment.
- return_path_components[].explanations[].transit_gateway_route_table_route.route_origin
The route origin. The following are the possible values:
- return_path_components[].explanations[].transit_gateway_route_table_route.state
The state of the route.
- return_path_components[].explanations[].vpc
The component VPC. Show child fields- return_path_components[].explanations[].vpc.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].vpc.id
The ID of the component.
- return_path_components[].explanations[].vpc.name
The name of the analysis component.
- return_path_components[].explanations[].vpc_endpoint
The VPC endpoint. Show child fields- return_path_components[].explanations[].vpc_endpoint.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].vpc_endpoint.id
The ID of the component.
- return_path_components[].explanations[].vpc_endpoint.name
The name of the analysis component.
- return_path_components[].explanations[].vpc_peering_connection
The VPC peering connection. Show child fields- return_path_components[].explanations[].vpc_peering_connection.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].vpc_peering_connection.id
The ID of the component.
- return_path_components[].explanations[].vpc_peering_connection.name
The name of the analysis component.
- return_path_components[].explanations[].vpn_connection
The VPN connection. Show child fields- return_path_components[].explanations[].vpn_connection.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].vpn_connection.id
The ID of the component.
- return_path_components[].explanations[].vpn_connection.name
The name of the analysis component.
- return_path_components[].explanations[].vpn_gateway
The VPN gateway. Show child fields- return_path_components[].explanations[].vpn_gateway.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].explanations[].vpn_gateway.id
The ID of the component.
- return_path_components[].explanations[].vpn_gateway.name
The name of the analysis component.
- return_path_components[].firewall_stateful_rule
The Network Firewall stateful rule. Show child fields- return_path_components[].firewall_stateful_rule.destination_ports[]
Show child fields- return_path_components[].firewall_stateful_rule.destination_ports[].from
The first port in the range.
- return_path_components[].firewall_stateful_rule.destination_ports[].to
The last port in the range.
- return_path_components[].firewall_stateful_rule.destinations[]
- return_path_components[].firewall_stateful_rule.direction
The direction. The possible values are FORWARD and ANY.
- return_path_components[].firewall_stateful_rule.protocol
The protocol.
- return_path_components[].firewall_stateful_rule.rule_action
The rule action. The possible values are pass, drop, and alert.
- return_path_components[].firewall_stateful_rule.rule_group_arn
The ARN of the stateful rule group.
- return_path_components[].firewall_stateful_rule.source_ports[]
Show child fields- return_path_components[].firewall_stateful_rule.source_ports[].from
The first port in the range.
- return_path_components[].firewall_stateful_rule.source_ports[].to
The last port in the range.
- return_path_components[].firewall_stateful_rule.sources[]
- return_path_components[].firewall_stateless_rule
The Network Firewall stateless rule. Show child fields- return_path_components[].firewall_stateless_rule.destination_ports[]
Show child fields- return_path_components[].firewall_stateless_rule.destination_ports[].from
The first port in the range.
- return_path_components[].firewall_stateless_rule.destination_ports[].to
The last port in the range.
- return_path_components[].firewall_stateless_rule.destinations[]
- return_path_components[].firewall_stateless_rule.priority
The rule priority.
- return_path_components[].firewall_stateless_rule.protocols[]
- return_path_components[].firewall_stateless_rule.rule_action
The rule action. The possible values are pass, drop, and forward_to_site.
- return_path_components[].firewall_stateless_rule.rule_group_arn
The ARN of the stateless rule group.
- return_path_components[].firewall_stateless_rule.source_ports[]
Show child fields- return_path_components[].firewall_stateless_rule.source_ports[].from
The first port in the range.
- return_path_components[].firewall_stateless_rule.source_ports[].to
The last port in the range.
- return_path_components[].firewall_stateless_rule.sources[]
- return_path_components[].inbound_header
The inbound header. Show child fields- return_path_components[].inbound_header.destination_addresses[]
- return_path_components[].inbound_header.destination_port_ranges[]
Show child fields- return_path_components[].inbound_header.destination_port_ranges[].from
The first port in the range.
- return_path_components[].inbound_header.destination_port_ranges[].to
The last port in the range.
- return_path_components[].inbound_header.protocol
The protocol.
- return_path_components[].inbound_header.source_addresses[]
- return_path_components[].inbound_header.source_port_ranges[]
Show child fields- return_path_components[].inbound_header.source_port_ranges[].from
The first port in the range.
- return_path_components[].inbound_header.source_port_ranges[].to
The last port in the range.
- return_path_components[].outbound_header
The outbound header. Show child fields- return_path_components[].outbound_header.destination_addresses[]
- return_path_components[].outbound_header.destination_port_ranges[]
Show child fields- return_path_components[].outbound_header.destination_port_ranges[].from
The first port in the range.
- return_path_components[].outbound_header.destination_port_ranges[].to
The last port in the range.
- return_path_components[].outbound_header.protocol
The protocol.
- return_path_components[].outbound_header.source_addresses[]
- return_path_components[].outbound_header.source_port_ranges[]
Show child fields- return_path_components[].outbound_header.source_port_ranges[].from
The first port in the range.
- return_path_components[].outbound_header.source_port_ranges[].to
The last port in the range.
- return_path_components[].route_table_route
The route table route. Show child fields- return_path_components[].route_table_route.carrier_gateway_id
The ID of a carrier gateway.
- return_path_components[].route_table_route.core_network_arn
The Amazon Resource Name (ARN) of a core network.
- return_path_components[].route_table_route.destination_cidr
The destination IPv4 address, in CIDR notation.
- return_path_components[].route_table_route.destination_prefix_list_id
The prefix of the Amazon Web Services service.
- return_path_components[].route_table_route.egress_only_internet_gateway_id
The ID of an egress-only internet gateway.
- return_path_components[].route_table_route.gateway_id
The ID of the gateway, such as an internet gateway or virtual private gateway.
- return_path_components[].route_table_route.instance_id
The ID of the instance, such as a NAT instance.
- return_path_components[].route_table_route.local_gateway_id
The ID of a local gateway.
- return_path_components[].route_table_route.nat_gateway_id
The ID of a NAT gateway.
- return_path_components[].route_table_route.network_interface_id
The ID of a network interface.
- return_path_components[].route_table_route.origin
Describes how the route was created. The following are the possible values: -
CreateRouteTable - The route was automatically created when the route table was created. -
CreateRoute - The route was manually added to the route table. -
EnableVgwRoutePropagation - The route was propagated by route propagation.
- return_path_components[].route_table_route.state
The state. The following are the possible values:
- return_path_components[].route_table_route.transit_gateway_id
The ID of a transit gateway.
- return_path_components[].route_table_route.vpc_peering_connection_id
The ID of a VPC peering connection.
- return_path_components[].security_group_rule
The security group rule. Show child fields- return_path_components[].security_group_rule.cidr
The IPv4 address range, in CIDR notation.
- return_path_components[].security_group_rule.direction
The direction. The following are the possible values:
- return_path_components[].security_group_rule.port_range
The port range. Show child fields- return_path_components[].security_group_rule.port_range.from
The first port in the range.
- return_path_components[].security_group_rule.port_range.to
The last port in the range.
- return_path_components[].security_group_rule.prefix_list_id
The prefix list ID.
- return_path_components[].security_group_rule.protocol
The protocol name.
- return_path_components[].security_group_rule.security_group_id
The security group ID.
- return_path_components[].sequence_number
The sequence number.
- return_path_components[].service_name
The name of the VPC endpoint service.
- return_path_components[].source_vpc
The source VPC. Show child fields- return_path_components[].source_vpc.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].source_vpc.id
The ID of the component.
- return_path_components[].source_vpc.name
The name of the analysis component.
- return_path_components[].subnet
The subnet. Show child fields- return_path_components[].subnet.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].subnet.id
The ID of the component.
- return_path_components[].subnet.name
The name of the analysis component.
- return_path_components[].transit_gateway
The transit gateway. Show child fields- return_path_components[].transit_gateway.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].transit_gateway.id
The ID of the component.
- return_path_components[].transit_gateway.name
The name of the analysis component.
- return_path_components[].transit_gateway_route_table_route
The route in a transit gateway route table. Show child fields- return_path_components[].transit_gateway_route_table_route.attachment_id
The ID of the route attachment.
- return_path_components[].transit_gateway_route_table_route.destination_cidr
The CIDR block used for destination matches.
- return_path_components[].transit_gateway_route_table_route.prefix_list_id
The ID of the prefix list.
- return_path_components[].transit_gateway_route_table_route.resource_id
The ID of the resource for the route attachment.
- return_path_components[].transit_gateway_route_table_route.resource_type
The resource type for the route attachment.
- return_path_components[].transit_gateway_route_table_route.route_origin
The route origin. The following are the possible values:
- return_path_components[].transit_gateway_route_table_route.state
The state of the route.
- return_path_components[].vpc
The component VPC. Show child fields- return_path_components[].vpc.arn
The Amazon Resource Name (ARN) of the component.
- return_path_components[].vpc.id
The ID of the component.
- return_path_components[].vpc.name
The name of the analysis component.
|
start_date
The time the analysis started. | TIMESTAMP_S |
status
The status of the network insights analysis. | VARCHAR |
status_message
The status message, if the status is failed. | VARCHAR |
suggested_accounts
Potential intermediate accounts. | VARCHAR[] |
Show child fields- suggested_accounts[]
|
tags
The tags. | STRUCT( "key" VARCHAR, "value" VARCHAR )[] |
Show child fields- tags[]
Show child fields- tags[].key
The key of the tag. Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:.
- tags[].value
The value of the tag. Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.
|
warning_message
The warning message. | VARCHAR |