Skip to content

aws.ec2.describe_network_insights_analyses

Example SQL Queries

SELECT * FROM
aws.ec2.describe_network_insights_analyses;

Description

Describes one or more of your network insights analyses.

Table Definition

Column NameColumn Data Type
analysis_end_time Input Column

The time when the network insights analyses ended.

TIMESTAMP_S
analysis_start_time Input Column

The time when the network insights analyses started.

TIMESTAMP_S
dry_run Input Column

Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation. Otherwise, it is UnauthorizedOperation.

BOOLEAN
filters Input Column

The filters. The following are the possible values:

  • path-found - A Boolean value that indicates whether a feasible path is found.

  • status - The status of the analysis (running | succeeded | failed).

STRUCT(
"name" VARCHAR,
"values" VARCHAR[]
)[]
Show child fields
filters[]
Show child fields
filters[].name

The name of the filter. Filter names are case-sensitive.

filters[].values[]
network_insights_analysis_ids Input Column

The ID of the network insights analyses. You must specify either analysis IDs or a path ID.

VARCHAR[]
Show child fields
network_insights_analysis_ids[]
network_insights_path_id Input Column

The ID of the path.

VARCHAR
_aws_profile Input Column

The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.

STRUCT(
"type" VARCHAR,
"name" VARCHAR,
"account_id" VARCHAR,
"via_profile_name" VARCHAR,
"assumed_role_arn" VARCHAR,
"organization" STRUCT(
"account_name" VARCHAR,
"id" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[],
"master_account" STRUCT(
"id" VARCHAR,
"email" VARCHAR
),
"parents" STRUCT(
"type" VARCHAR,
"id" VARCHAR,
"name" VARCHAR,
"tags" STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
)[]
)
)
Show child fields
_aws_profile.account_id

The AWS account id

_aws_profile.assumed_role_arn

The ARN of the assumed role

_aws_profile.name

The unique name of the profile.

_aws_profile.organization

Information about this profile's membership in the AWS organization.

Show child fields
_aws_profile.organization.account_name

The name of account speciifed by the organization

_aws_profile.organization.id

The organization id

_aws_profile.organization.master_account
Show child fields
_aws_profile.organization.master_account.email

The organization master account email address

_aws_profile.organization.master_account.id

The organization master account id

_aws_profile.organization.parents[]
Show child fields
_aws_profile.organization.parents[].id

The id of the parent

_aws_profile.organization.parents[].name

The name of the parent

_aws_profile.organization.parents[].tags[]
Show child fields
_aws_profile.organization.parents[].tags[].key
_aws_profile.organization.parents[].tags[].value
_aws_profile.organization.parents[].type

The type of parent can be an organization unit or a root

_aws_profile.organization.tags[]
Show child fields
_aws_profile.organization.tags[].key
_aws_profile.organization.tags[].value
_aws_profile.type

The type of profile, either 'credentials' or 'assumed_role'

_aws_profile.via_profile_name

This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.

_aws_region Input Column

The AWS region to use.

VARCHAR
additional_accounts

The member accounts that contain resources that the path can traverse.

VARCHAR[]
Show child fields
additional_accounts[]
alternate_path_hints

Potential intermediate components.

STRUCT(
"component_id" VARCHAR,
"component_arn" VARCHAR
)[]
Show child fields
alternate_path_hints[]
Show child fields
alternate_path_hints[].component_arn

The Amazon Resource Name (ARN) of the component.

alternate_path_hints[].component_id

The ID of the component.

explanations

The explanations. For more information, see Reachability Analyzer explanation codes.

STRUCT(
"acl" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"acl_rule" STRUCT(
"cidr" VARCHAR,
"egress" BOOLEAN,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"protocol" VARCHAR,
"rule_action" VARCHAR,
"rule_number" BIGINT
),
"address" VARCHAR,
"addresses" VARCHAR[],
"attached_to" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"availability_zones" VARCHAR[],
"cidrs" VARCHAR[],
"component" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"customer_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"destination" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"destination_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"direction" VARCHAR,
"explanation_code" VARCHAR,
"ingress_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"internet_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"load_balancer_arn" VARCHAR,
"classic_load_balancer_listener" STRUCT(
"load_balancer_port" BIGINT,
"instance_port" BIGINT
),
"load_balancer_listener_port" BIGINT,
"load_balancer_target" STRUCT(
"address" VARCHAR,
"availability_zone" VARCHAR,
"instance" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"port" BIGINT
),
"load_balancer_target_group" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"load_balancer_target_groups" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
)[],
"load_balancer_target_port" BIGINT,
"elastic_load_balancer_listener" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"missing_component" VARCHAR,
"nat_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"network_interface" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"packet_field" VARCHAR,
"vpc_peering_connection" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"port" BIGINT,
"port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"prefix_list" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"protocols" VARCHAR[],
"route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"destination_prefix_list_id" VARCHAR,
"egress_only_internet_gateway_id" VARCHAR,
"gateway_id" VARCHAR,
"instance_id" VARCHAR,
"nat_gateway_id" VARCHAR,
"network_interface_id" VARCHAR,
"origin" VARCHAR,
"transit_gateway_id" VARCHAR,
"vpc_peering_connection_id" VARCHAR,
"state" VARCHAR,
"carrier_gateway_id" VARCHAR,
"core_network_arn" VARCHAR,
"local_gateway_id" VARCHAR
),
"route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"security_group" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"security_group_rule" STRUCT(
"cidr" VARCHAR,
"direction" VARCHAR,
"security_group_id" VARCHAR,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"prefix_list_id" VARCHAR,
"protocol" VARCHAR
),
"security_groups" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
)[],
"source_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"state" VARCHAR,
"subnet" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"subnet_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc_endpoint" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpn_connection" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpn_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway_route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"state" VARCHAR,
"route_origin" VARCHAR,
"prefix_list_id" VARCHAR,
"attachment_id" VARCHAR,
"resource_id" VARCHAR,
"resource_type" VARCHAR
),
"transit_gateway_attachment" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"component_account" VARCHAR,
"component_region" VARCHAR,
"firewall_stateless_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocols" BIGINT[],
"rule_action" VARCHAR,
"priority" BIGINT
),
"firewall_stateful_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"rule_action" VARCHAR,
"direction" VARCHAR
)
)[]
Show child fields
explanations[]
Show child fields
explanations[].acl

The network ACL.

Show child fields
explanations[].acl.arn

The Amazon Resource Name (ARN) of the component.

explanations[].acl.id

The ID of the component.

explanations[].acl.name

The name of the analysis component.

explanations[].acl_rule

The network ACL rule.

Show child fields
explanations[].acl_rule.cidr

The IPv4 address range, in CIDR notation.

explanations[].acl_rule.egress

Indicates whether the rule is an outbound rule.

explanations[].acl_rule.port_range

The range of ports.

Show child fields
explanations[].acl_rule.port_range.from

The first port in the range.

explanations[].acl_rule.port_range.to

The last port in the range.

explanations[].acl_rule.protocol

The protocol.

explanations[].acl_rule.rule_action

Indicates whether to allow or deny traffic that matches the rule.

explanations[].acl_rule.rule_number

The rule number.

explanations[].address

The IPv4 address, in CIDR notation.

explanations[].addresses[]
explanations[].attached_to

The resource to which the component is attached.

Show child fields
explanations[].attached_to.arn

The Amazon Resource Name (ARN) of the component.

explanations[].attached_to.id

The ID of the component.

explanations[].attached_to.name

The name of the analysis component.

explanations[].availability_zones[]
explanations[].cidrs[]
explanations[].classic_load_balancer_listener

The listener for a Classic Load Balancer.

Show child fields
explanations[].classic_load_balancer_listener.instance_port

[Classic Load Balancers] The back-end port for the listener.

explanations[].classic_load_balancer_listener.load_balancer_port

The port on which the load balancer is listening.

explanations[].component

The component.

Show child fields
explanations[].component.arn

The Amazon Resource Name (ARN) of the component.

explanations[].component.id

The ID of the component.

explanations[].component.name

The name of the analysis component.

explanations[].component_account

The Amazon Web Services account for the component.

explanations[].component_region

The Region for the component.

explanations[].customer_gateway

The customer gateway.

Show child fields
explanations[].customer_gateway.arn

The Amazon Resource Name (ARN) of the component.

explanations[].customer_gateway.id

The ID of the component.

explanations[].customer_gateway.name

The name of the analysis component.

explanations[].destination

The destination.

Show child fields
explanations[].destination.arn

The Amazon Resource Name (ARN) of the component.

explanations[].destination.id

The ID of the component.

explanations[].destination.name

The name of the analysis component.

explanations[].destination_vpc

The destination VPC.

Show child fields
explanations[].destination_vpc.arn

The Amazon Resource Name (ARN) of the component.

explanations[].destination_vpc.id

The ID of the component.

explanations[].destination_vpc.name

The name of the analysis component.

explanations[].direction

The direction. The following are the possible values:

  • egress

  • ingress

explanations[].elastic_load_balancer_listener

The load balancer listener.

Show child fields
explanations[].elastic_load_balancer_listener.arn

The Amazon Resource Name (ARN) of the component.

explanations[].elastic_load_balancer_listener.id

The ID of the component.

explanations[].elastic_load_balancer_listener.name

The name of the analysis component.

explanations[].explanation_code

The explanation code.

explanations[].firewall_stateful_rule

The Network Firewall stateful rule.

Show child fields
explanations[].firewall_stateful_rule.destination_ports[]
Show child fields
explanations[].firewall_stateful_rule.destination_ports[].from

The first port in the range.

explanations[].firewall_stateful_rule.destination_ports[].to

The last port in the range.

explanations[].firewall_stateful_rule.destinations[]
explanations[].firewall_stateful_rule.direction

The direction. The possible values are FORWARD and ANY.

explanations[].firewall_stateful_rule.protocol

The protocol.

explanations[].firewall_stateful_rule.rule_action

The rule action. The possible values are pass, drop, and alert.

explanations[].firewall_stateful_rule.rule_group_arn

The ARN of the stateful rule group.

explanations[].firewall_stateful_rule.source_ports[]
Show child fields
explanations[].firewall_stateful_rule.source_ports[].from

The first port in the range.

explanations[].firewall_stateful_rule.source_ports[].to

The last port in the range.

explanations[].firewall_stateful_rule.sources[]
explanations[].firewall_stateless_rule

The Network Firewall stateless rule.

Show child fields
explanations[].firewall_stateless_rule.destination_ports[]
Show child fields
explanations[].firewall_stateless_rule.destination_ports[].from

The first port in the range.

explanations[].firewall_stateless_rule.destination_ports[].to

The last port in the range.

explanations[].firewall_stateless_rule.destinations[]
explanations[].firewall_stateless_rule.priority

The rule priority.

explanations[].firewall_stateless_rule.protocols[]
explanations[].firewall_stateless_rule.rule_action

The rule action. The possible values are pass, drop, and forward_to_site.

explanations[].firewall_stateless_rule.rule_group_arn

The ARN of the stateless rule group.

explanations[].firewall_stateless_rule.source_ports[]
Show child fields
explanations[].firewall_stateless_rule.source_ports[].from

The first port in the range.

explanations[].firewall_stateless_rule.source_ports[].to

The last port in the range.

explanations[].firewall_stateless_rule.sources[]
explanations[].ingress_route_table

The route table.

Show child fields
explanations[].ingress_route_table.arn

The Amazon Resource Name (ARN) of the component.

explanations[].ingress_route_table.id

The ID of the component.

explanations[].ingress_route_table.name

The name of the analysis component.

explanations[].internet_gateway

The internet gateway.

Show child fields
explanations[].internet_gateway.arn

The Amazon Resource Name (ARN) of the component.

explanations[].internet_gateway.id

The ID of the component.

explanations[].internet_gateway.name

The name of the analysis component.

explanations[].load_balancer_arn

The Amazon Resource Name (ARN) of the load balancer.

explanations[].load_balancer_listener_port

The listener port of the load balancer.

explanations[].load_balancer_target

The target.

Show child fields
explanations[].load_balancer_target.address

The IP address.

explanations[].load_balancer_target.availability_zone

The Availability Zone.

explanations[].load_balancer_target.instance

Information about the instance.

Show child fields
explanations[].load_balancer_target.instance.arn

The Amazon Resource Name (ARN) of the component.

explanations[].load_balancer_target.instance.id

The ID of the component.

explanations[].load_balancer_target.instance.name

The name of the analysis component.

explanations[].load_balancer_target.port

The port on which the target is listening.

explanations[].load_balancer_target_group

The target group.

Show child fields
explanations[].load_balancer_target_group.arn

The Amazon Resource Name (ARN) of the component.

explanations[].load_balancer_target_group.id

The ID of the component.

explanations[].load_balancer_target_group.name

The name of the analysis component.

explanations[].load_balancer_target_groups[]
Show child fields
explanations[].load_balancer_target_groups[].arn

The Amazon Resource Name (ARN) of the component.

explanations[].load_balancer_target_groups[].id

The ID of the component.

explanations[].load_balancer_target_groups[].name

The name of the analysis component.

explanations[].load_balancer_target_port

The target port.

explanations[].missing_component

The missing component.

explanations[].nat_gateway

The NAT gateway.

Show child fields
explanations[].nat_gateway.arn

The Amazon Resource Name (ARN) of the component.

explanations[].nat_gateway.id

The ID of the component.

explanations[].nat_gateway.name

The name of the analysis component.

explanations[].network_interface

The network interface.

Show child fields
explanations[].network_interface.arn

The Amazon Resource Name (ARN) of the component.

explanations[].network_interface.id

The ID of the component.

explanations[].network_interface.name

The name of the analysis component.

explanations[].packet_field

The packet field.

explanations[].port

The port.

explanations[].port_ranges[]
Show child fields
explanations[].port_ranges[].from

The first port in the range.

explanations[].port_ranges[].to

The last port in the range.

explanations[].prefix_list

The prefix list.

Show child fields
explanations[].prefix_list.arn

The Amazon Resource Name (ARN) of the component.

explanations[].prefix_list.id

The ID of the component.

explanations[].prefix_list.name

The name of the analysis component.

explanations[].protocols[]
explanations[].route_table

The route table.

Show child fields
explanations[].route_table.arn

The Amazon Resource Name (ARN) of the component.

explanations[].route_table.id

The ID of the component.

explanations[].route_table.name

The name of the analysis component.

explanations[].route_table_route

The route table route.

Show child fields
explanations[].route_table_route.carrier_gateway_id

The ID of a carrier gateway.

explanations[].route_table_route.core_network_arn

The Amazon Resource Name (ARN) of a core network.

explanations[].route_table_route.destination_cidr

The destination IPv4 address, in CIDR notation.

explanations[].route_table_route.destination_prefix_list_id

The prefix of the Amazon Web Services service.

explanations[].route_table_route.egress_only_internet_gateway_id

The ID of an egress-only internet gateway.

explanations[].route_table_route.gateway_id

The ID of the gateway, such as an internet gateway or virtual private gateway.

explanations[].route_table_route.instance_id

The ID of the instance, such as a NAT instance.

explanations[].route_table_route.local_gateway_id

The ID of a local gateway.

explanations[].route_table_route.nat_gateway_id

The ID of a NAT gateway.

explanations[].route_table_route.network_interface_id

The ID of a network interface.

explanations[].route_table_route.origin

Describes how the route was created. The following are the possible values:

  • CreateRouteTable - The route was automatically created when the route table was created.

  • CreateRoute - The route was manually added to the route table.

  • EnableVgwRoutePropagation - The route was propagated by route propagation.

explanations[].route_table_route.state

The state. The following are the possible values:

  • active

  • blackhole

explanations[].route_table_route.transit_gateway_id

The ID of a transit gateway.

explanations[].route_table_route.vpc_peering_connection_id

The ID of a VPC peering connection.

explanations[].security_group

The security group.

Show child fields
explanations[].security_group.arn

The Amazon Resource Name (ARN) of the component.

explanations[].security_group.id

The ID of the component.

explanations[].security_group.name

The name of the analysis component.

explanations[].security_group_rule

The security group rule.

Show child fields
explanations[].security_group_rule.cidr

The IPv4 address range, in CIDR notation.

explanations[].security_group_rule.direction

The direction. The following are the possible values:

  • egress

  • ingress

explanations[].security_group_rule.port_range

The port range.

Show child fields
explanations[].security_group_rule.port_range.from

The first port in the range.

explanations[].security_group_rule.port_range.to

The last port in the range.

explanations[].security_group_rule.prefix_list_id

The prefix list ID.

explanations[].security_group_rule.protocol

The protocol name.

explanations[].security_group_rule.security_group_id

The security group ID.

explanations[].security_groups[]
Show child fields
explanations[].security_groups[].arn

The Amazon Resource Name (ARN) of the component.

explanations[].security_groups[].id

The ID of the component.

explanations[].security_groups[].name

The name of the analysis component.

explanations[].source_vpc

The source VPC.

Show child fields
explanations[].source_vpc.arn

The Amazon Resource Name (ARN) of the component.

explanations[].source_vpc.id

The ID of the component.

explanations[].source_vpc.name

The name of the analysis component.

explanations[].state

The state.

explanations[].subnet

The subnet.

Show child fields
explanations[].subnet.arn

The Amazon Resource Name (ARN) of the component.

explanations[].subnet.id

The ID of the component.

explanations[].subnet.name

The name of the analysis component.

explanations[].subnet_route_table

The route table for the subnet.

Show child fields
explanations[].subnet_route_table.arn

The Amazon Resource Name (ARN) of the component.

explanations[].subnet_route_table.id

The ID of the component.

explanations[].subnet_route_table.name

The name of the analysis component.

explanations[].transit_gateway

The transit gateway.

Show child fields
explanations[].transit_gateway.arn

The Amazon Resource Name (ARN) of the component.

explanations[].transit_gateway.id

The ID of the component.

explanations[].transit_gateway.name

The name of the analysis component.

explanations[].transit_gateway_attachment

The transit gateway attachment.

Show child fields
explanations[].transit_gateway_attachment.arn

The Amazon Resource Name (ARN) of the component.

explanations[].transit_gateway_attachment.id

The ID of the component.

explanations[].transit_gateway_attachment.name

The name of the analysis component.

explanations[].transit_gateway_route_table

The transit gateway route table.

Show child fields
explanations[].transit_gateway_route_table.arn

The Amazon Resource Name (ARN) of the component.

explanations[].transit_gateway_route_table.id

The ID of the component.

explanations[].transit_gateway_route_table.name

The name of the analysis component.

explanations[].transit_gateway_route_table_route

The transit gateway route table route.

Show child fields
explanations[].transit_gateway_route_table_route.attachment_id

The ID of the route attachment.

explanations[].transit_gateway_route_table_route.destination_cidr

The CIDR block used for destination matches.

explanations[].transit_gateway_route_table_route.prefix_list_id

The ID of the prefix list.

explanations[].transit_gateway_route_table_route.resource_id

The ID of the resource for the route attachment.

explanations[].transit_gateway_route_table_route.resource_type

The resource type for the route attachment.

explanations[].transit_gateway_route_table_route.route_origin

The route origin. The following are the possible values:

  • static

  • propagated

explanations[].transit_gateway_route_table_route.state

The state of the route.

explanations[].vpc

The component VPC.

Show child fields
explanations[].vpc.arn

The Amazon Resource Name (ARN) of the component.

explanations[].vpc.id

The ID of the component.

explanations[].vpc.name

The name of the analysis component.

explanations[].vpc_endpoint

The VPC endpoint.

Show child fields
explanations[].vpc_endpoint.arn

The Amazon Resource Name (ARN) of the component.

explanations[].vpc_endpoint.id

The ID of the component.

explanations[].vpc_endpoint.name

The name of the analysis component.

explanations[].vpc_peering_connection

The VPC peering connection.

Show child fields
explanations[].vpc_peering_connection.arn

The Amazon Resource Name (ARN) of the component.

explanations[].vpc_peering_connection.id

The ID of the component.

explanations[].vpc_peering_connection.name

The name of the analysis component.

explanations[].vpn_connection

The VPN connection.

Show child fields
explanations[].vpn_connection.arn

The Amazon Resource Name (ARN) of the component.

explanations[].vpn_connection.id

The ID of the component.

explanations[].vpn_connection.name

The name of the analysis component.

explanations[].vpn_gateway

The VPN gateway.

Show child fields
explanations[].vpn_gateway.arn

The Amazon Resource Name (ARN) of the component.

explanations[].vpn_gateway.id

The ID of the component.

explanations[].vpn_gateway.name

The name of the analysis component.

filter_in_arns

The Amazon Resource Names (ARN) of the resources that the path must traverse.

VARCHAR[]
Show child fields
filter_in_arns[]
forward_path_components

The components in the path from source to destination.

STRUCT(
"sequence_number" BIGINT,
"acl_rule" STRUCT(
"cidr" VARCHAR,
"egress" BOOLEAN,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"protocol" VARCHAR,
"rule_action" VARCHAR,
"rule_number" BIGINT
),
"attached_to" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"component" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"destination_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"outbound_header" STRUCT(
"destination_addresses" VARCHAR[],
"destination_port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"source_addresses" VARCHAR[],
"source_port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[]
),
"inbound_header" STRUCT(
"destination_addresses" VARCHAR[],
"destination_port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"source_addresses" VARCHAR[],
"source_port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[]
),
"route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"destination_prefix_list_id" VARCHAR,
"egress_only_internet_gateway_id" VARCHAR,
"gateway_id" VARCHAR,
"instance_id" VARCHAR,
"nat_gateway_id" VARCHAR,
"network_interface_id" VARCHAR,
"origin" VARCHAR,
"transit_gateway_id" VARCHAR,
"vpc_peering_connection_id" VARCHAR,
"state" VARCHAR,
"carrier_gateway_id" VARCHAR,
"core_network_arn" VARCHAR,
"local_gateway_id" VARCHAR
),
"security_group_rule" STRUCT(
"cidr" VARCHAR,
"direction" VARCHAR,
"security_group_id" VARCHAR,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"prefix_list_id" VARCHAR,
"protocol" VARCHAR
),
"source_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"subnet" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"additional_details" STRUCT(
"additional_detail_type" VARCHAR,
"component" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc_endpoint_service" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"rule_options" STRUCT(
"keyword" VARCHAR,
"settings" VARCHAR[]
)[],
"rule_group_type_pairs" STRUCT(
"rule_group_arn" VARCHAR,
"rule_group_type" VARCHAR
)[],
"rule_group_rule_options_pairs" STRUCT(
"rule_group_arn" VARCHAR,
"rule_options" STRUCT(
"keyword" VARCHAR,
"settings" VARCHAR[]
)[]
)[],
"service_name" VARCHAR,
"load_balancers" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
)[]
)[],
"transit_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway_route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"state" VARCHAR,
"route_origin" VARCHAR,
"prefix_list_id" VARCHAR,
"attachment_id" VARCHAR,
"resource_id" VARCHAR,
"resource_type" VARCHAR
),
"explanations" STRUCT(
"acl" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"acl_rule" STRUCT(
"cidr" VARCHAR,
"egress" BOOLEAN,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"protocol" VARCHAR,
"rule_action" VARCHAR,
"rule_number" BIGINT
),
"address" VARCHAR,
"addresses" VARCHAR[],
"attached_to" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"availability_zones" VARCHAR[],
"cidrs" VARCHAR[],
"component" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"customer_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"destination" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"destination_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"direction" VARCHAR,
"explanation_code" VARCHAR,
"ingress_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"internet_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"load_balancer_arn" VARCHAR,
"classic_load_balancer_listener" STRUCT(
"load_balancer_port" BIGINT,
"instance_port" BIGINT
),
"load_balancer_listener_port" BIGINT,
"load_balancer_target" STRUCT(
"address" VARCHAR,
"availability_zone" VARCHAR,
"instance" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"port" BIGINT
),
"load_balancer_target_group" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"load_balancer_target_groups" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
)[],
"load_balancer_target_port" BIGINT,
"elastic_load_balancer_listener" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"missing_component" VARCHAR,
"nat_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"network_interface" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"packet_field" VARCHAR,
"vpc_peering_connection" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"port" BIGINT,
"port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"prefix_list" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"protocols" VARCHAR[],
"route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"destination_prefix_list_id" VARCHAR,
"egress_only_internet_gateway_id" VARCHAR,
"gateway_id" VARCHAR,
"instance_id" VARCHAR,
"nat_gateway_id" VARCHAR,
"network_interface_id" VARCHAR,
"origin" VARCHAR,
"transit_gateway_id" VARCHAR,
"vpc_peering_connection_id" VARCHAR,
"state" VARCHAR,
"carrier_gateway_id" VARCHAR,
"core_network_arn" VARCHAR,
"local_gateway_id" VARCHAR
),
"route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"security_group" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"security_group_rule" STRUCT(
"cidr" VARCHAR,
"direction" VARCHAR,
"security_group_id" VARCHAR,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"prefix_list_id" VARCHAR,
"protocol" VARCHAR
),
"security_groups" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
)[],
"source_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"state" VARCHAR,
"subnet" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"subnet_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc_endpoint" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpn_connection" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpn_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway_route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"state" VARCHAR,
"route_origin" VARCHAR,
"prefix_list_id" VARCHAR,
"attachment_id" VARCHAR,
"resource_id" VARCHAR,
"resource_type" VARCHAR
),
"transit_gateway_attachment" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"component_account" VARCHAR,
"component_region" VARCHAR,
"firewall_stateless_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocols" BIGINT[],
"rule_action" VARCHAR,
"priority" BIGINT
),
"firewall_stateful_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"rule_action" VARCHAR,
"direction" VARCHAR
)
)[],
"elastic_load_balancer_listener" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"firewall_stateless_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocols" BIGINT[],
"rule_action" VARCHAR,
"priority" BIGINT
),
"firewall_stateful_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"rule_action" VARCHAR,
"direction" VARCHAR
),
"service_name" VARCHAR
)[]
Show child fields
forward_path_components[]
Show child fields
forward_path_components[].acl_rule

The network ACL rule.

Show child fields
forward_path_components[].acl_rule.cidr

The IPv4 address range, in CIDR notation.

forward_path_components[].acl_rule.egress

Indicates whether the rule is an outbound rule.

forward_path_components[].acl_rule.port_range

The range of ports.

Show child fields
forward_path_components[].acl_rule.port_range.from

The first port in the range.

forward_path_components[].acl_rule.port_range.to

The last port in the range.

forward_path_components[].acl_rule.protocol

The protocol.

forward_path_components[].acl_rule.rule_action

Indicates whether to allow or deny traffic that matches the rule.

forward_path_components[].acl_rule.rule_number

The rule number.

forward_path_components[].additional_details[]
Show child fields
forward_path_components[].additional_details[].additional_detail_type

The additional detail code.

forward_path_components[].additional_details[].component

The path component.

Show child fields
forward_path_components[].additional_details[].component.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].additional_details[].component.id

The ID of the component.

forward_path_components[].additional_details[].component.name

The name of the analysis component.

forward_path_components[].additional_details[].load_balancers[]
Show child fields
forward_path_components[].additional_details[].load_balancers[].arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].additional_details[].load_balancers[].id

The ID of the component.

forward_path_components[].additional_details[].load_balancers[].name

The name of the analysis component.

forward_path_components[].additional_details[].rule_group_rule_options_pairs[]
Show child fields
forward_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_group_arn

The ARN of the rule group.

forward_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[]
Show child fields
forward_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].keyword

The Suricata keyword.

forward_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].settings[]
forward_path_components[].additional_details[].rule_group_type_pairs[]
Show child fields
forward_path_components[].additional_details[].rule_group_type_pairs[].rule_group_arn

The ARN of the rule group.

forward_path_components[].additional_details[].rule_group_type_pairs[].rule_group_type

The rule group type. The possible values are Domain List and Suricata.

forward_path_components[].additional_details[].rule_options[]
Show child fields
forward_path_components[].additional_details[].rule_options[].keyword

The Suricata keyword.

forward_path_components[].additional_details[].rule_options[].settings[]
forward_path_components[].additional_details[].service_name

The name of the VPC endpoint service.

forward_path_components[].additional_details[].vpc_endpoint_service

The VPC endpoint service.

Show child fields
forward_path_components[].additional_details[].vpc_endpoint_service.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].additional_details[].vpc_endpoint_service.id

The ID of the component.

forward_path_components[].additional_details[].vpc_endpoint_service.name

The name of the analysis component.

forward_path_components[].attached_to

The resource to which the path component is attached.

Show child fields
forward_path_components[].attached_to.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].attached_to.id

The ID of the component.

forward_path_components[].attached_to.name

The name of the analysis component.

forward_path_components[].component

The component.

Show child fields
forward_path_components[].component.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].component.id

The ID of the component.

forward_path_components[].component.name

The name of the analysis component.

forward_path_components[].destination_vpc

The destination VPC.

Show child fields
forward_path_components[].destination_vpc.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].destination_vpc.id

The ID of the component.

forward_path_components[].destination_vpc.name

The name of the analysis component.

forward_path_components[].elastic_load_balancer_listener

The load balancer listener.

Show child fields
forward_path_components[].elastic_load_balancer_listener.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].elastic_load_balancer_listener.id

The ID of the component.

forward_path_components[].elastic_load_balancer_listener.name

The name of the analysis component.

forward_path_components[].explanations[]
Show child fields
forward_path_components[].explanations[].acl

The network ACL.

Show child fields
forward_path_components[].explanations[].acl.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].acl.id

The ID of the component.

forward_path_components[].explanations[].acl.name

The name of the analysis component.

forward_path_components[].explanations[].acl_rule

The network ACL rule.

Show child fields
forward_path_components[].explanations[].acl_rule.cidr

The IPv4 address range, in CIDR notation.

forward_path_components[].explanations[].acl_rule.egress

Indicates whether the rule is an outbound rule.

forward_path_components[].explanations[].acl_rule.port_range

The range of ports.

Show child fields
forward_path_components[].explanations[].acl_rule.port_range.from

The first port in the range.

forward_path_components[].explanations[].acl_rule.port_range.to

The last port in the range.

forward_path_components[].explanations[].acl_rule.protocol

The protocol.

forward_path_components[].explanations[].acl_rule.rule_action

Indicates whether to allow or deny traffic that matches the rule.

forward_path_components[].explanations[].acl_rule.rule_number

The rule number.

forward_path_components[].explanations[].address

The IPv4 address, in CIDR notation.

forward_path_components[].explanations[].addresses[]
forward_path_components[].explanations[].attached_to

The resource to which the component is attached.

Show child fields
forward_path_components[].explanations[].attached_to.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].attached_to.id

The ID of the component.

forward_path_components[].explanations[].attached_to.name

The name of the analysis component.

forward_path_components[].explanations[].availability_zones[]
forward_path_components[].explanations[].cidrs[]
forward_path_components[].explanations[].classic_load_balancer_listener

The listener for a Classic Load Balancer.

Show child fields
forward_path_components[].explanations[].classic_load_balancer_listener.instance_port

[Classic Load Balancers] The back-end port for the listener.

forward_path_components[].explanations[].classic_load_balancer_listener.load_balancer_port

The port on which the load balancer is listening.

forward_path_components[].explanations[].component

The component.

Show child fields
forward_path_components[].explanations[].component.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].component.id

The ID of the component.

forward_path_components[].explanations[].component.name

The name of the analysis component.

forward_path_components[].explanations[].component_account

The Amazon Web Services account for the component.

forward_path_components[].explanations[].component_region

The Region for the component.

forward_path_components[].explanations[].customer_gateway

The customer gateway.

Show child fields
forward_path_components[].explanations[].customer_gateway.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].customer_gateway.id

The ID of the component.

forward_path_components[].explanations[].customer_gateway.name

The name of the analysis component.

forward_path_components[].explanations[].destination

The destination.

Show child fields
forward_path_components[].explanations[].destination.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].destination.id

The ID of the component.

forward_path_components[].explanations[].destination.name

The name of the analysis component.

forward_path_components[].explanations[].destination_vpc

The destination VPC.

Show child fields
forward_path_components[].explanations[].destination_vpc.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].destination_vpc.id

The ID of the component.

forward_path_components[].explanations[].destination_vpc.name

The name of the analysis component.

forward_path_components[].explanations[].direction

The direction. The following are the possible values:

  • egress

  • ingress

forward_path_components[].explanations[].elastic_load_balancer_listener

The load balancer listener.

Show child fields
forward_path_components[].explanations[].elastic_load_balancer_listener.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].elastic_load_balancer_listener.id

The ID of the component.

forward_path_components[].explanations[].elastic_load_balancer_listener.name

The name of the analysis component.

forward_path_components[].explanations[].explanation_code

The explanation code.

forward_path_components[].explanations[].firewall_stateful_rule

The Network Firewall stateful rule.

Show child fields
forward_path_components[].explanations[].firewall_stateful_rule.destination_ports[]
Show child fields
forward_path_components[].explanations[].firewall_stateful_rule.destination_ports[].from

The first port in the range.

forward_path_components[].explanations[].firewall_stateful_rule.destination_ports[].to

The last port in the range.

forward_path_components[].explanations[].firewall_stateful_rule.destinations[]
forward_path_components[].explanations[].firewall_stateful_rule.direction

The direction. The possible values are FORWARD and ANY.

forward_path_components[].explanations[].firewall_stateful_rule.protocol

The protocol.

forward_path_components[].explanations[].firewall_stateful_rule.rule_action

The rule action. The possible values are pass, drop, and alert.

forward_path_components[].explanations[].firewall_stateful_rule.rule_group_arn

The ARN of the stateful rule group.

forward_path_components[].explanations[].firewall_stateful_rule.source_ports[]
Show child fields
forward_path_components[].explanations[].firewall_stateful_rule.source_ports[].from

The first port in the range.

forward_path_components[].explanations[].firewall_stateful_rule.source_ports[].to

The last port in the range.

forward_path_components[].explanations[].firewall_stateful_rule.sources[]
forward_path_components[].explanations[].firewall_stateless_rule

The Network Firewall stateless rule.

Show child fields
forward_path_components[].explanations[].firewall_stateless_rule.destination_ports[]
Show child fields
forward_path_components[].explanations[].firewall_stateless_rule.destination_ports[].from

The first port in the range.

forward_path_components[].explanations[].firewall_stateless_rule.destination_ports[].to

The last port in the range.

forward_path_components[].explanations[].firewall_stateless_rule.destinations[]
forward_path_components[].explanations[].firewall_stateless_rule.priority

The rule priority.

forward_path_components[].explanations[].firewall_stateless_rule.protocols[]
forward_path_components[].explanations[].firewall_stateless_rule.rule_action

The rule action. The possible values are pass, drop, and forward_to_site.

forward_path_components[].explanations[].firewall_stateless_rule.rule_group_arn

The ARN of the stateless rule group.

forward_path_components[].explanations[].firewall_stateless_rule.source_ports[]
Show child fields
forward_path_components[].explanations[].firewall_stateless_rule.source_ports[].from

The first port in the range.

forward_path_components[].explanations[].firewall_stateless_rule.source_ports[].to

The last port in the range.

forward_path_components[].explanations[].firewall_stateless_rule.sources[]
forward_path_components[].explanations[].ingress_route_table

The route table.

Show child fields
forward_path_components[].explanations[].ingress_route_table.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].ingress_route_table.id

The ID of the component.

forward_path_components[].explanations[].ingress_route_table.name

The name of the analysis component.

forward_path_components[].explanations[].internet_gateway

The internet gateway.

Show child fields
forward_path_components[].explanations[].internet_gateway.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].internet_gateway.id

The ID of the component.

forward_path_components[].explanations[].internet_gateway.name

The name of the analysis component.

forward_path_components[].explanations[].load_balancer_arn

The Amazon Resource Name (ARN) of the load balancer.

forward_path_components[].explanations[].load_balancer_listener_port

The listener port of the load balancer.

forward_path_components[].explanations[].load_balancer_target

The target.

Show child fields
forward_path_components[].explanations[].load_balancer_target.address

The IP address.

forward_path_components[].explanations[].load_balancer_target.availability_zone

The Availability Zone.

forward_path_components[].explanations[].load_balancer_target.instance

Information about the instance.

Show child fields
forward_path_components[].explanations[].load_balancer_target.instance.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].load_balancer_target.instance.id

The ID of the component.

forward_path_components[].explanations[].load_balancer_target.instance.name

The name of the analysis component.

forward_path_components[].explanations[].load_balancer_target.port

The port on which the target is listening.

forward_path_components[].explanations[].load_balancer_target_group

The target group.

Show child fields
forward_path_components[].explanations[].load_balancer_target_group.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].load_balancer_target_group.id

The ID of the component.

forward_path_components[].explanations[].load_balancer_target_group.name

The name of the analysis component.

forward_path_components[].explanations[].load_balancer_target_groups[]
Show child fields
forward_path_components[].explanations[].load_balancer_target_groups[].arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].load_balancer_target_groups[].id

The ID of the component.

forward_path_components[].explanations[].load_balancer_target_groups[].name

The name of the analysis component.

forward_path_components[].explanations[].load_balancer_target_port

The target port.

forward_path_components[].explanations[].missing_component

The missing component.

forward_path_components[].explanations[].nat_gateway

The NAT gateway.

Show child fields
forward_path_components[].explanations[].nat_gateway.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].nat_gateway.id

The ID of the component.

forward_path_components[].explanations[].nat_gateway.name

The name of the analysis component.

forward_path_components[].explanations[].network_interface

The network interface.

Show child fields
forward_path_components[].explanations[].network_interface.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].network_interface.id

The ID of the component.

forward_path_components[].explanations[].network_interface.name

The name of the analysis component.

forward_path_components[].explanations[].packet_field

The packet field.

forward_path_components[].explanations[].port

The port.

forward_path_components[].explanations[].port_ranges[]
Show child fields
forward_path_components[].explanations[].port_ranges[].from

The first port in the range.

forward_path_components[].explanations[].port_ranges[].to

The last port in the range.

forward_path_components[].explanations[].prefix_list

The prefix list.

Show child fields
forward_path_components[].explanations[].prefix_list.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].prefix_list.id

The ID of the component.

forward_path_components[].explanations[].prefix_list.name

The name of the analysis component.

forward_path_components[].explanations[].protocols[]
forward_path_components[].explanations[].route_table

The route table.

Show child fields
forward_path_components[].explanations[].route_table.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].route_table.id

The ID of the component.

forward_path_components[].explanations[].route_table.name

The name of the analysis component.

forward_path_components[].explanations[].route_table_route

The route table route.

Show child fields
forward_path_components[].explanations[].route_table_route.carrier_gateway_id

The ID of a carrier gateway.

forward_path_components[].explanations[].route_table_route.core_network_arn

The Amazon Resource Name (ARN) of a core network.

forward_path_components[].explanations[].route_table_route.destination_cidr

The destination IPv4 address, in CIDR notation.

forward_path_components[].explanations[].route_table_route.destination_prefix_list_id

The prefix of the Amazon Web Services service.

forward_path_components[].explanations[].route_table_route.egress_only_internet_gateway_id

The ID of an egress-only internet gateway.

forward_path_components[].explanations[].route_table_route.gateway_id

The ID of the gateway, such as an internet gateway or virtual private gateway.

forward_path_components[].explanations[].route_table_route.instance_id

The ID of the instance, such as a NAT instance.

forward_path_components[].explanations[].route_table_route.local_gateway_id

The ID of a local gateway.

forward_path_components[].explanations[].route_table_route.nat_gateway_id

The ID of a NAT gateway.

forward_path_components[].explanations[].route_table_route.network_interface_id

The ID of a network interface.

forward_path_components[].explanations[].route_table_route.origin

Describes how the route was created. The following are the possible values:

  • CreateRouteTable - The route was automatically created when the route table was created.

  • CreateRoute - The route was manually added to the route table.

  • EnableVgwRoutePropagation - The route was propagated by route propagation.

forward_path_components[].explanations[].route_table_route.state

The state. The following are the possible values:

  • active

  • blackhole

forward_path_components[].explanations[].route_table_route.transit_gateway_id

The ID of a transit gateway.

forward_path_components[].explanations[].route_table_route.vpc_peering_connection_id

The ID of a VPC peering connection.

forward_path_components[].explanations[].security_group

The security group.

Show child fields
forward_path_components[].explanations[].security_group.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].security_group.id

The ID of the component.

forward_path_components[].explanations[].security_group.name

The name of the analysis component.

forward_path_components[].explanations[].security_group_rule

The security group rule.

Show child fields
forward_path_components[].explanations[].security_group_rule.cidr

The IPv4 address range, in CIDR notation.

forward_path_components[].explanations[].security_group_rule.direction

The direction. The following are the possible values:

  • egress

  • ingress

forward_path_components[].explanations[].security_group_rule.port_range

The port range.

Show child fields
forward_path_components[].explanations[].security_group_rule.port_range.from

The first port in the range.

forward_path_components[].explanations[].security_group_rule.port_range.to

The last port in the range.

forward_path_components[].explanations[].security_group_rule.prefix_list_id

The prefix list ID.

forward_path_components[].explanations[].security_group_rule.protocol

The protocol name.

forward_path_components[].explanations[].security_group_rule.security_group_id

The security group ID.

forward_path_components[].explanations[].security_groups[]
Show child fields
forward_path_components[].explanations[].security_groups[].arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].security_groups[].id

The ID of the component.

forward_path_components[].explanations[].security_groups[].name

The name of the analysis component.

forward_path_components[].explanations[].source_vpc

The source VPC.

Show child fields
forward_path_components[].explanations[].source_vpc.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].source_vpc.id

The ID of the component.

forward_path_components[].explanations[].source_vpc.name

The name of the analysis component.

forward_path_components[].explanations[].state

The state.

forward_path_components[].explanations[].subnet

The subnet.

Show child fields
forward_path_components[].explanations[].subnet.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].subnet.id

The ID of the component.

forward_path_components[].explanations[].subnet.name

The name of the analysis component.

forward_path_components[].explanations[].subnet_route_table

The route table for the subnet.

Show child fields
forward_path_components[].explanations[].subnet_route_table.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].subnet_route_table.id

The ID of the component.

forward_path_components[].explanations[].subnet_route_table.name

The name of the analysis component.

forward_path_components[].explanations[].transit_gateway

The transit gateway.

Show child fields
forward_path_components[].explanations[].transit_gateway.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].transit_gateway.id

The ID of the component.

forward_path_components[].explanations[].transit_gateway.name

The name of the analysis component.

forward_path_components[].explanations[].transit_gateway_attachment

The transit gateway attachment.

Show child fields
forward_path_components[].explanations[].transit_gateway_attachment.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].transit_gateway_attachment.id

The ID of the component.

forward_path_components[].explanations[].transit_gateway_attachment.name

The name of the analysis component.

forward_path_components[].explanations[].transit_gateway_route_table

The transit gateway route table.

Show child fields
forward_path_components[].explanations[].transit_gateway_route_table.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].transit_gateway_route_table.id

The ID of the component.

forward_path_components[].explanations[].transit_gateway_route_table.name

The name of the analysis component.

forward_path_components[].explanations[].transit_gateway_route_table_route

The transit gateway route table route.

Show child fields
forward_path_components[].explanations[].transit_gateway_route_table_route.attachment_id

The ID of the route attachment.

forward_path_components[].explanations[].transit_gateway_route_table_route.destination_cidr

The CIDR block used for destination matches.

forward_path_components[].explanations[].transit_gateway_route_table_route.prefix_list_id

The ID of the prefix list.

forward_path_components[].explanations[].transit_gateway_route_table_route.resource_id

The ID of the resource for the route attachment.

forward_path_components[].explanations[].transit_gateway_route_table_route.resource_type

The resource type for the route attachment.

forward_path_components[].explanations[].transit_gateway_route_table_route.route_origin

The route origin. The following are the possible values:

  • static

  • propagated

forward_path_components[].explanations[].transit_gateway_route_table_route.state

The state of the route.

forward_path_components[].explanations[].vpc

The component VPC.

Show child fields
forward_path_components[].explanations[].vpc.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].vpc.id

The ID of the component.

forward_path_components[].explanations[].vpc.name

The name of the analysis component.

forward_path_components[].explanations[].vpc_endpoint

The VPC endpoint.

Show child fields
forward_path_components[].explanations[].vpc_endpoint.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].vpc_endpoint.id

The ID of the component.

forward_path_components[].explanations[].vpc_endpoint.name

The name of the analysis component.

forward_path_components[].explanations[].vpc_peering_connection

The VPC peering connection.

Show child fields
forward_path_components[].explanations[].vpc_peering_connection.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].vpc_peering_connection.id

The ID of the component.

forward_path_components[].explanations[].vpc_peering_connection.name

The name of the analysis component.

forward_path_components[].explanations[].vpn_connection

The VPN connection.

Show child fields
forward_path_components[].explanations[].vpn_connection.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].vpn_connection.id

The ID of the component.

forward_path_components[].explanations[].vpn_connection.name

The name of the analysis component.

forward_path_components[].explanations[].vpn_gateway

The VPN gateway.

Show child fields
forward_path_components[].explanations[].vpn_gateway.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].explanations[].vpn_gateway.id

The ID of the component.

forward_path_components[].explanations[].vpn_gateway.name

The name of the analysis component.

forward_path_components[].firewall_stateful_rule

The Network Firewall stateful rule.

Show child fields
forward_path_components[].firewall_stateful_rule.destination_ports[]
Show child fields
forward_path_components[].firewall_stateful_rule.destination_ports[].from

The first port in the range.

forward_path_components[].firewall_stateful_rule.destination_ports[].to

The last port in the range.

forward_path_components[].firewall_stateful_rule.destinations[]
forward_path_components[].firewall_stateful_rule.direction

The direction. The possible values are FORWARD and ANY.

forward_path_components[].firewall_stateful_rule.protocol

The protocol.

forward_path_components[].firewall_stateful_rule.rule_action

The rule action. The possible values are pass, drop, and alert.

forward_path_components[].firewall_stateful_rule.rule_group_arn

The ARN of the stateful rule group.

forward_path_components[].firewall_stateful_rule.source_ports[]
Show child fields
forward_path_components[].firewall_stateful_rule.source_ports[].from

The first port in the range.

forward_path_components[].firewall_stateful_rule.source_ports[].to

The last port in the range.

forward_path_components[].firewall_stateful_rule.sources[]
forward_path_components[].firewall_stateless_rule

The Network Firewall stateless rule.

Show child fields
forward_path_components[].firewall_stateless_rule.destination_ports[]
Show child fields
forward_path_components[].firewall_stateless_rule.destination_ports[].from

The first port in the range.

forward_path_components[].firewall_stateless_rule.destination_ports[].to

The last port in the range.

forward_path_components[].firewall_stateless_rule.destinations[]
forward_path_components[].firewall_stateless_rule.priority

The rule priority.

forward_path_components[].firewall_stateless_rule.protocols[]
forward_path_components[].firewall_stateless_rule.rule_action

The rule action. The possible values are pass, drop, and forward_to_site.

forward_path_components[].firewall_stateless_rule.rule_group_arn

The ARN of the stateless rule group.

forward_path_components[].firewall_stateless_rule.source_ports[]
Show child fields
forward_path_components[].firewall_stateless_rule.source_ports[].from

The first port in the range.

forward_path_components[].firewall_stateless_rule.source_ports[].to

The last port in the range.

forward_path_components[].firewall_stateless_rule.sources[]
forward_path_components[].inbound_header

The inbound header.

Show child fields
forward_path_components[].inbound_header.destination_addresses[]
forward_path_components[].inbound_header.destination_port_ranges[]
Show child fields
forward_path_components[].inbound_header.destination_port_ranges[].from

The first port in the range.

forward_path_components[].inbound_header.destination_port_ranges[].to

The last port in the range.

forward_path_components[].inbound_header.protocol

The protocol.

forward_path_components[].inbound_header.source_addresses[]
forward_path_components[].inbound_header.source_port_ranges[]
Show child fields
forward_path_components[].inbound_header.source_port_ranges[].from

The first port in the range.

forward_path_components[].inbound_header.source_port_ranges[].to

The last port in the range.

forward_path_components[].outbound_header

The outbound header.

Show child fields
forward_path_components[].outbound_header.destination_addresses[]
forward_path_components[].outbound_header.destination_port_ranges[]
Show child fields
forward_path_components[].outbound_header.destination_port_ranges[].from

The first port in the range.

forward_path_components[].outbound_header.destination_port_ranges[].to

The last port in the range.

forward_path_components[].outbound_header.protocol

The protocol.

forward_path_components[].outbound_header.source_addresses[]
forward_path_components[].outbound_header.source_port_ranges[]
Show child fields
forward_path_components[].outbound_header.source_port_ranges[].from

The first port in the range.

forward_path_components[].outbound_header.source_port_ranges[].to

The last port in the range.

forward_path_components[].route_table_route

The route table route.

Show child fields
forward_path_components[].route_table_route.carrier_gateway_id

The ID of a carrier gateway.

forward_path_components[].route_table_route.core_network_arn

The Amazon Resource Name (ARN) of a core network.

forward_path_components[].route_table_route.destination_cidr

The destination IPv4 address, in CIDR notation.

forward_path_components[].route_table_route.destination_prefix_list_id

The prefix of the Amazon Web Services service.

forward_path_components[].route_table_route.egress_only_internet_gateway_id

The ID of an egress-only internet gateway.

forward_path_components[].route_table_route.gateway_id

The ID of the gateway, such as an internet gateway or virtual private gateway.

forward_path_components[].route_table_route.instance_id

The ID of the instance, such as a NAT instance.

forward_path_components[].route_table_route.local_gateway_id

The ID of a local gateway.

forward_path_components[].route_table_route.nat_gateway_id

The ID of a NAT gateway.

forward_path_components[].route_table_route.network_interface_id

The ID of a network interface.

forward_path_components[].route_table_route.origin

Describes how the route was created. The following are the possible values:

  • CreateRouteTable - The route was automatically created when the route table was created.

  • CreateRoute - The route was manually added to the route table.

  • EnableVgwRoutePropagation - The route was propagated by route propagation.

forward_path_components[].route_table_route.state

The state. The following are the possible values:

  • active

  • blackhole

forward_path_components[].route_table_route.transit_gateway_id

The ID of a transit gateway.

forward_path_components[].route_table_route.vpc_peering_connection_id

The ID of a VPC peering connection.

forward_path_components[].security_group_rule

The security group rule.

Show child fields
forward_path_components[].security_group_rule.cidr

The IPv4 address range, in CIDR notation.

forward_path_components[].security_group_rule.direction

The direction. The following are the possible values:

  • egress

  • ingress

forward_path_components[].security_group_rule.port_range

The port range.

Show child fields
forward_path_components[].security_group_rule.port_range.from

The first port in the range.

forward_path_components[].security_group_rule.port_range.to

The last port in the range.

forward_path_components[].security_group_rule.prefix_list_id

The prefix list ID.

forward_path_components[].security_group_rule.protocol

The protocol name.

forward_path_components[].security_group_rule.security_group_id

The security group ID.

forward_path_components[].sequence_number

The sequence number.

forward_path_components[].service_name

The name of the VPC endpoint service.

forward_path_components[].source_vpc

The source VPC.

Show child fields
forward_path_components[].source_vpc.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].source_vpc.id

The ID of the component.

forward_path_components[].source_vpc.name

The name of the analysis component.

forward_path_components[].subnet

The subnet.

Show child fields
forward_path_components[].subnet.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].subnet.id

The ID of the component.

forward_path_components[].subnet.name

The name of the analysis component.

forward_path_components[].transit_gateway

The transit gateway.

Show child fields
forward_path_components[].transit_gateway.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].transit_gateway.id

The ID of the component.

forward_path_components[].transit_gateway.name

The name of the analysis component.

forward_path_components[].transit_gateway_route_table_route

The route in a transit gateway route table.

Show child fields
forward_path_components[].transit_gateway_route_table_route.attachment_id

The ID of the route attachment.

forward_path_components[].transit_gateway_route_table_route.destination_cidr

The CIDR block used for destination matches.

forward_path_components[].transit_gateway_route_table_route.prefix_list_id

The ID of the prefix list.

forward_path_components[].transit_gateway_route_table_route.resource_id

The ID of the resource for the route attachment.

forward_path_components[].transit_gateway_route_table_route.resource_type

The resource type for the route attachment.

forward_path_components[].transit_gateway_route_table_route.route_origin

The route origin. The following are the possible values:

  • static

  • propagated

forward_path_components[].transit_gateway_route_table_route.state

The state of the route.

forward_path_components[].vpc

The component VPC.

Show child fields
forward_path_components[].vpc.arn

The Amazon Resource Name (ARN) of the component.

forward_path_components[].vpc.id

The ID of the component.

forward_path_components[].vpc.name

The name of the analysis component.

network_insights_analysis_arn

The Amazon Resource Name (ARN) of the network insights analysis.

VARCHAR
network_insights_analysis_id

The ID of the network insights analysis.

VARCHAR
network_path_found

Indicates whether the destination is reachable from the source.

BOOLEAN
return_path_components

The components in the path from destination to source.

STRUCT(
"sequence_number" BIGINT,
"acl_rule" STRUCT(
"cidr" VARCHAR,
"egress" BOOLEAN,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"protocol" VARCHAR,
"rule_action" VARCHAR,
"rule_number" BIGINT
),
"attached_to" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"component" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"destination_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"outbound_header" STRUCT(
"destination_addresses" VARCHAR[],
"destination_port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"source_addresses" VARCHAR[],
"source_port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[]
),
"inbound_header" STRUCT(
"destination_addresses" VARCHAR[],
"destination_port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"source_addresses" VARCHAR[],
"source_port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[]
),
"route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"destination_prefix_list_id" VARCHAR,
"egress_only_internet_gateway_id" VARCHAR,
"gateway_id" VARCHAR,
"instance_id" VARCHAR,
"nat_gateway_id" VARCHAR,
"network_interface_id" VARCHAR,
"origin" VARCHAR,
"transit_gateway_id" VARCHAR,
"vpc_peering_connection_id" VARCHAR,
"state" VARCHAR,
"carrier_gateway_id" VARCHAR,
"core_network_arn" VARCHAR,
"local_gateway_id" VARCHAR
),
"security_group_rule" STRUCT(
"cidr" VARCHAR,
"direction" VARCHAR,
"security_group_id" VARCHAR,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"prefix_list_id" VARCHAR,
"protocol" VARCHAR
),
"source_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"subnet" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"additional_details" STRUCT(
"additional_detail_type" VARCHAR,
"component" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc_endpoint_service" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"rule_options" STRUCT(
"keyword" VARCHAR,
"settings" VARCHAR[]
)[],
"rule_group_type_pairs" STRUCT(
"rule_group_arn" VARCHAR,
"rule_group_type" VARCHAR
)[],
"rule_group_rule_options_pairs" STRUCT(
"rule_group_arn" VARCHAR,
"rule_options" STRUCT(
"keyword" VARCHAR,
"settings" VARCHAR[]
)[]
)[],
"service_name" VARCHAR,
"load_balancers" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
)[]
)[],
"transit_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway_route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"state" VARCHAR,
"route_origin" VARCHAR,
"prefix_list_id" VARCHAR,
"attachment_id" VARCHAR,
"resource_id" VARCHAR,
"resource_type" VARCHAR
),
"explanations" STRUCT(
"acl" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"acl_rule" STRUCT(
"cidr" VARCHAR,
"egress" BOOLEAN,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"protocol" VARCHAR,
"rule_action" VARCHAR,
"rule_number" BIGINT
),
"address" VARCHAR,
"addresses" VARCHAR[],
"attached_to" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"availability_zones" VARCHAR[],
"cidrs" VARCHAR[],
"component" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"customer_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"destination" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"destination_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"direction" VARCHAR,
"explanation_code" VARCHAR,
"ingress_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"internet_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"load_balancer_arn" VARCHAR,
"classic_load_balancer_listener" STRUCT(
"load_balancer_port" BIGINT,
"instance_port" BIGINT
),
"load_balancer_listener_port" BIGINT,
"load_balancer_target" STRUCT(
"address" VARCHAR,
"availability_zone" VARCHAR,
"instance" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"port" BIGINT
),
"load_balancer_target_group" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"load_balancer_target_groups" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
)[],
"load_balancer_target_port" BIGINT,
"elastic_load_balancer_listener" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"missing_component" VARCHAR,
"nat_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"network_interface" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"packet_field" VARCHAR,
"vpc_peering_connection" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"port" BIGINT,
"port_ranges" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"prefix_list" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"protocols" VARCHAR[],
"route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"destination_prefix_list_id" VARCHAR,
"egress_only_internet_gateway_id" VARCHAR,
"gateway_id" VARCHAR,
"instance_id" VARCHAR,
"nat_gateway_id" VARCHAR,
"network_interface_id" VARCHAR,
"origin" VARCHAR,
"transit_gateway_id" VARCHAR,
"vpc_peering_connection_id" VARCHAR,
"state" VARCHAR,
"carrier_gateway_id" VARCHAR,
"core_network_arn" VARCHAR,
"local_gateway_id" VARCHAR
),
"route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"security_group" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"security_group_rule" STRUCT(
"cidr" VARCHAR,
"direction" VARCHAR,
"security_group_id" VARCHAR,
"port_range" STRUCT(
"from" BIGINT,
"to" BIGINT
),
"prefix_list_id" VARCHAR,
"protocol" VARCHAR
),
"security_groups" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
)[],
"source_vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"state" VARCHAR,
"subnet" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"subnet_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpc_endpoint" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpn_connection" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"vpn_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway_route_table" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"transit_gateway_route_table_route" STRUCT(
"destination_cidr" VARCHAR,
"state" VARCHAR,
"route_origin" VARCHAR,
"prefix_list_id" VARCHAR,
"attachment_id" VARCHAR,
"resource_id" VARCHAR,
"resource_type" VARCHAR
),
"transit_gateway_attachment" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"component_account" VARCHAR,
"component_region" VARCHAR,
"firewall_stateless_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocols" BIGINT[],
"rule_action" VARCHAR,
"priority" BIGINT
),
"firewall_stateful_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"rule_action" VARCHAR,
"direction" VARCHAR
)
)[],
"elastic_load_balancer_listener" STRUCT(
"id" VARCHAR,
"arn" VARCHAR,
"name" VARCHAR
),
"firewall_stateless_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocols" BIGINT[],
"rule_action" VARCHAR,
"priority" BIGINT
),
"firewall_stateful_rule" STRUCT(
"rule_group_arn" VARCHAR,
"sources" VARCHAR[],
"destinations" VARCHAR[],
"source_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"destination_ports" STRUCT(
"from" BIGINT,
"to" BIGINT
)[],
"protocol" VARCHAR,
"rule_action" VARCHAR,
"direction" VARCHAR
),
"service_name" VARCHAR
)[]
Show child fields
return_path_components[]
Show child fields
return_path_components[].acl_rule

The network ACL rule.

Show child fields
return_path_components[].acl_rule.cidr

The IPv4 address range, in CIDR notation.

return_path_components[].acl_rule.egress

Indicates whether the rule is an outbound rule.

return_path_components[].acl_rule.port_range

The range of ports.

Show child fields
return_path_components[].acl_rule.port_range.from

The first port in the range.

return_path_components[].acl_rule.port_range.to

The last port in the range.

return_path_components[].acl_rule.protocol

The protocol.

return_path_components[].acl_rule.rule_action

Indicates whether to allow or deny traffic that matches the rule.

return_path_components[].acl_rule.rule_number

The rule number.

return_path_components[].additional_details[]
Show child fields
return_path_components[].additional_details[].additional_detail_type

The additional detail code.

return_path_components[].additional_details[].component

The path component.

Show child fields
return_path_components[].additional_details[].component.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].additional_details[].component.id

The ID of the component.

return_path_components[].additional_details[].component.name

The name of the analysis component.

return_path_components[].additional_details[].load_balancers[]
Show child fields
return_path_components[].additional_details[].load_balancers[].arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].additional_details[].load_balancers[].id

The ID of the component.

return_path_components[].additional_details[].load_balancers[].name

The name of the analysis component.

return_path_components[].additional_details[].rule_group_rule_options_pairs[]
Show child fields
return_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_group_arn

The ARN of the rule group.

return_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[]
Show child fields
return_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].keyword

The Suricata keyword.

return_path_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].settings[]
return_path_components[].additional_details[].rule_group_type_pairs[]
Show child fields
return_path_components[].additional_details[].rule_group_type_pairs[].rule_group_arn

The ARN of the rule group.

return_path_components[].additional_details[].rule_group_type_pairs[].rule_group_type

The rule group type. The possible values are Domain List and Suricata.

return_path_components[].additional_details[].rule_options[]
Show child fields
return_path_components[].additional_details[].rule_options[].keyword

The Suricata keyword.

return_path_components[].additional_details[].rule_options[].settings[]
return_path_components[].additional_details[].service_name

The name of the VPC endpoint service.

return_path_components[].additional_details[].vpc_endpoint_service

The VPC endpoint service.

Show child fields
return_path_components[].additional_details[].vpc_endpoint_service.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].additional_details[].vpc_endpoint_service.id

The ID of the component.

return_path_components[].additional_details[].vpc_endpoint_service.name

The name of the analysis component.

return_path_components[].attached_to

The resource to which the path component is attached.

Show child fields
return_path_components[].attached_to.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].attached_to.id

The ID of the component.

return_path_components[].attached_to.name

The name of the analysis component.

return_path_components[].component

The component.

Show child fields
return_path_components[].component.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].component.id

The ID of the component.

return_path_components[].component.name

The name of the analysis component.

return_path_components[].destination_vpc

The destination VPC.

Show child fields
return_path_components[].destination_vpc.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].destination_vpc.id

The ID of the component.

return_path_components[].destination_vpc.name

The name of the analysis component.

return_path_components[].elastic_load_balancer_listener

The load balancer listener.

Show child fields
return_path_components[].elastic_load_balancer_listener.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].elastic_load_balancer_listener.id

The ID of the component.

return_path_components[].elastic_load_balancer_listener.name

The name of the analysis component.

return_path_components[].explanations[]
Show child fields
return_path_components[].explanations[].acl

The network ACL.

Show child fields
return_path_components[].explanations[].acl.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].acl.id

The ID of the component.

return_path_components[].explanations[].acl.name

The name of the analysis component.

return_path_components[].explanations[].acl_rule

The network ACL rule.

Show child fields
return_path_components[].explanations[].acl_rule.cidr

The IPv4 address range, in CIDR notation.

return_path_components[].explanations[].acl_rule.egress

Indicates whether the rule is an outbound rule.

return_path_components[].explanations[].acl_rule.port_range

The range of ports.

Show child fields
return_path_components[].explanations[].acl_rule.port_range.from

The first port in the range.

return_path_components[].explanations[].acl_rule.port_range.to

The last port in the range.

return_path_components[].explanations[].acl_rule.protocol

The protocol.

return_path_components[].explanations[].acl_rule.rule_action

Indicates whether to allow or deny traffic that matches the rule.

return_path_components[].explanations[].acl_rule.rule_number

The rule number.

return_path_components[].explanations[].address

The IPv4 address, in CIDR notation.

return_path_components[].explanations[].addresses[]
return_path_components[].explanations[].attached_to

The resource to which the component is attached.

Show child fields
return_path_components[].explanations[].attached_to.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].attached_to.id

The ID of the component.

return_path_components[].explanations[].attached_to.name

The name of the analysis component.

return_path_components[].explanations[].availability_zones[]
return_path_components[].explanations[].cidrs[]
return_path_components[].explanations[].classic_load_balancer_listener

The listener for a Classic Load Balancer.

Show child fields
return_path_components[].explanations[].classic_load_balancer_listener.instance_port

[Classic Load Balancers] The back-end port for the listener.

return_path_components[].explanations[].classic_load_balancer_listener.load_balancer_port

The port on which the load balancer is listening.

return_path_components[].explanations[].component

The component.

Show child fields
return_path_components[].explanations[].component.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].component.id

The ID of the component.

return_path_components[].explanations[].component.name

The name of the analysis component.

return_path_components[].explanations[].component_account

The Amazon Web Services account for the component.

return_path_components[].explanations[].component_region

The Region for the component.

return_path_components[].explanations[].customer_gateway

The customer gateway.

Show child fields
return_path_components[].explanations[].customer_gateway.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].customer_gateway.id

The ID of the component.

return_path_components[].explanations[].customer_gateway.name

The name of the analysis component.

return_path_components[].explanations[].destination

The destination.

Show child fields
return_path_components[].explanations[].destination.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].destination.id

The ID of the component.

return_path_components[].explanations[].destination.name

The name of the analysis component.

return_path_components[].explanations[].destination_vpc

The destination VPC.

Show child fields
return_path_components[].explanations[].destination_vpc.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].destination_vpc.id

The ID of the component.

return_path_components[].explanations[].destination_vpc.name

The name of the analysis component.

return_path_components[].explanations[].direction

The direction. The following are the possible values:

  • egress

  • ingress

return_path_components[].explanations[].elastic_load_balancer_listener

The load balancer listener.

Show child fields
return_path_components[].explanations[].elastic_load_balancer_listener.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].elastic_load_balancer_listener.id

The ID of the component.

return_path_components[].explanations[].elastic_load_balancer_listener.name

The name of the analysis component.

return_path_components[].explanations[].explanation_code

The explanation code.

return_path_components[].explanations[].firewall_stateful_rule

The Network Firewall stateful rule.

Show child fields
return_path_components[].explanations[].firewall_stateful_rule.destination_ports[]
Show child fields
return_path_components[].explanations[].firewall_stateful_rule.destination_ports[].from

The first port in the range.

return_path_components[].explanations[].firewall_stateful_rule.destination_ports[].to

The last port in the range.

return_path_components[].explanations[].firewall_stateful_rule.destinations[]
return_path_components[].explanations[].firewall_stateful_rule.direction

The direction. The possible values are FORWARD and ANY.

return_path_components[].explanations[].firewall_stateful_rule.protocol

The protocol.

return_path_components[].explanations[].firewall_stateful_rule.rule_action

The rule action. The possible values are pass, drop, and alert.

return_path_components[].explanations[].firewall_stateful_rule.rule_group_arn

The ARN of the stateful rule group.

return_path_components[].explanations[].firewall_stateful_rule.source_ports[]
Show child fields
return_path_components[].explanations[].firewall_stateful_rule.source_ports[].from

The first port in the range.

return_path_components[].explanations[].firewall_stateful_rule.source_ports[].to

The last port in the range.

return_path_components[].explanations[].firewall_stateful_rule.sources[]
return_path_components[].explanations[].firewall_stateless_rule

The Network Firewall stateless rule.

Show child fields
return_path_components[].explanations[].firewall_stateless_rule.destination_ports[]
Show child fields
return_path_components[].explanations[].firewall_stateless_rule.destination_ports[].from

The first port in the range.

return_path_components[].explanations[].firewall_stateless_rule.destination_ports[].to

The last port in the range.

return_path_components[].explanations[].firewall_stateless_rule.destinations[]
return_path_components[].explanations[].firewall_stateless_rule.priority

The rule priority.

return_path_components[].explanations[].firewall_stateless_rule.protocols[]
return_path_components[].explanations[].firewall_stateless_rule.rule_action

The rule action. The possible values are pass, drop, and forward_to_site.

return_path_components[].explanations[].firewall_stateless_rule.rule_group_arn

The ARN of the stateless rule group.

return_path_components[].explanations[].firewall_stateless_rule.source_ports[]
Show child fields
return_path_components[].explanations[].firewall_stateless_rule.source_ports[].from

The first port in the range.

return_path_components[].explanations[].firewall_stateless_rule.source_ports[].to

The last port in the range.

return_path_components[].explanations[].firewall_stateless_rule.sources[]
return_path_components[].explanations[].ingress_route_table

The route table.

Show child fields
return_path_components[].explanations[].ingress_route_table.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].ingress_route_table.id

The ID of the component.

return_path_components[].explanations[].ingress_route_table.name

The name of the analysis component.

return_path_components[].explanations[].internet_gateway

The internet gateway.

Show child fields
return_path_components[].explanations[].internet_gateway.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].internet_gateway.id

The ID of the component.

return_path_components[].explanations[].internet_gateway.name

The name of the analysis component.

return_path_components[].explanations[].load_balancer_arn

The Amazon Resource Name (ARN) of the load balancer.

return_path_components[].explanations[].load_balancer_listener_port

The listener port of the load balancer.

return_path_components[].explanations[].load_balancer_target

The target.

Show child fields
return_path_components[].explanations[].load_balancer_target.address

The IP address.

return_path_components[].explanations[].load_balancer_target.availability_zone

The Availability Zone.

return_path_components[].explanations[].load_balancer_target.instance

Information about the instance.

Show child fields
return_path_components[].explanations[].load_balancer_target.instance.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].load_balancer_target.instance.id

The ID of the component.

return_path_components[].explanations[].load_balancer_target.instance.name

The name of the analysis component.

return_path_components[].explanations[].load_balancer_target.port

The port on which the target is listening.

return_path_components[].explanations[].load_balancer_target_group

The target group.

Show child fields
return_path_components[].explanations[].load_balancer_target_group.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].load_balancer_target_group.id

The ID of the component.

return_path_components[].explanations[].load_balancer_target_group.name

The name of the analysis component.

return_path_components[].explanations[].load_balancer_target_groups[]
Show child fields
return_path_components[].explanations[].load_balancer_target_groups[].arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].load_balancer_target_groups[].id

The ID of the component.

return_path_components[].explanations[].load_balancer_target_groups[].name

The name of the analysis component.

return_path_components[].explanations[].load_balancer_target_port

The target port.

return_path_components[].explanations[].missing_component

The missing component.

return_path_components[].explanations[].nat_gateway

The NAT gateway.

Show child fields
return_path_components[].explanations[].nat_gateway.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].nat_gateway.id

The ID of the component.

return_path_components[].explanations[].nat_gateway.name

The name of the analysis component.

return_path_components[].explanations[].network_interface

The network interface.

Show child fields
return_path_components[].explanations[].network_interface.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].network_interface.id

The ID of the component.

return_path_components[].explanations[].network_interface.name

The name of the analysis component.

return_path_components[].explanations[].packet_field

The packet field.

return_path_components[].explanations[].port

The port.

return_path_components[].explanations[].port_ranges[]
Show child fields
return_path_components[].explanations[].port_ranges[].from

The first port in the range.

return_path_components[].explanations[].port_ranges[].to

The last port in the range.

return_path_components[].explanations[].prefix_list

The prefix list.

Show child fields
return_path_components[].explanations[].prefix_list.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].prefix_list.id

The ID of the component.

return_path_components[].explanations[].prefix_list.name

The name of the analysis component.

return_path_components[].explanations[].protocols[]
return_path_components[].explanations[].route_table

The route table.

Show child fields
return_path_components[].explanations[].route_table.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].route_table.id

The ID of the component.

return_path_components[].explanations[].route_table.name

The name of the analysis component.

return_path_components[].explanations[].route_table_route

The route table route.

Show child fields
return_path_components[].explanations[].route_table_route.carrier_gateway_id

The ID of a carrier gateway.

return_path_components[].explanations[].route_table_route.core_network_arn

The Amazon Resource Name (ARN) of a core network.

return_path_components[].explanations[].route_table_route.destination_cidr

The destination IPv4 address, in CIDR notation.

return_path_components[].explanations[].route_table_route.destination_prefix_list_id

The prefix of the Amazon Web Services service.

return_path_components[].explanations[].route_table_route.egress_only_internet_gateway_id

The ID of an egress-only internet gateway.

return_path_components[].explanations[].route_table_route.gateway_id

The ID of the gateway, such as an internet gateway or virtual private gateway.

return_path_components[].explanations[].route_table_route.instance_id

The ID of the instance, such as a NAT instance.

return_path_components[].explanations[].route_table_route.local_gateway_id

The ID of a local gateway.

return_path_components[].explanations[].route_table_route.nat_gateway_id

The ID of a NAT gateway.

return_path_components[].explanations[].route_table_route.network_interface_id

The ID of a network interface.

return_path_components[].explanations[].route_table_route.origin

Describes how the route was created. The following are the possible values:

  • CreateRouteTable - The route was automatically created when the route table was created.

  • CreateRoute - The route was manually added to the route table.

  • EnableVgwRoutePropagation - The route was propagated by route propagation.

return_path_components[].explanations[].route_table_route.state

The state. The following are the possible values:

  • active

  • blackhole

return_path_components[].explanations[].route_table_route.transit_gateway_id

The ID of a transit gateway.

return_path_components[].explanations[].route_table_route.vpc_peering_connection_id

The ID of a VPC peering connection.

return_path_components[].explanations[].security_group

The security group.

Show child fields
return_path_components[].explanations[].security_group.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].security_group.id

The ID of the component.

return_path_components[].explanations[].security_group.name

The name of the analysis component.

return_path_components[].explanations[].security_group_rule

The security group rule.

Show child fields
return_path_components[].explanations[].security_group_rule.cidr

The IPv4 address range, in CIDR notation.

return_path_components[].explanations[].security_group_rule.direction

The direction. The following are the possible values:

  • egress

  • ingress

return_path_components[].explanations[].security_group_rule.port_range

The port range.

Show child fields
return_path_components[].explanations[].security_group_rule.port_range.from

The first port in the range.

return_path_components[].explanations[].security_group_rule.port_range.to

The last port in the range.

return_path_components[].explanations[].security_group_rule.prefix_list_id

The prefix list ID.

return_path_components[].explanations[].security_group_rule.protocol

The protocol name.

return_path_components[].explanations[].security_group_rule.security_group_id

The security group ID.

return_path_components[].explanations[].security_groups[]
Show child fields
return_path_components[].explanations[].security_groups[].arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].security_groups[].id

The ID of the component.

return_path_components[].explanations[].security_groups[].name

The name of the analysis component.

return_path_components[].explanations[].source_vpc

The source VPC.

Show child fields
return_path_components[].explanations[].source_vpc.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].source_vpc.id

The ID of the component.

return_path_components[].explanations[].source_vpc.name

The name of the analysis component.

return_path_components[].explanations[].state

The state.

return_path_components[].explanations[].subnet

The subnet.

Show child fields
return_path_components[].explanations[].subnet.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].subnet.id

The ID of the component.

return_path_components[].explanations[].subnet.name

The name of the analysis component.

return_path_components[].explanations[].subnet_route_table

The route table for the subnet.

Show child fields
return_path_components[].explanations[].subnet_route_table.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].subnet_route_table.id

The ID of the component.

return_path_components[].explanations[].subnet_route_table.name

The name of the analysis component.

return_path_components[].explanations[].transit_gateway

The transit gateway.

Show child fields
return_path_components[].explanations[].transit_gateway.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].transit_gateway.id

The ID of the component.

return_path_components[].explanations[].transit_gateway.name

The name of the analysis component.

return_path_components[].explanations[].transit_gateway_attachment

The transit gateway attachment.

Show child fields
return_path_components[].explanations[].transit_gateway_attachment.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].transit_gateway_attachment.id

The ID of the component.

return_path_components[].explanations[].transit_gateway_attachment.name

The name of the analysis component.

return_path_components[].explanations[].transit_gateway_route_table

The transit gateway route table.

Show child fields
return_path_components[].explanations[].transit_gateway_route_table.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].transit_gateway_route_table.id

The ID of the component.

return_path_components[].explanations[].transit_gateway_route_table.name

The name of the analysis component.

return_path_components[].explanations[].transit_gateway_route_table_route

The transit gateway route table route.

Show child fields
return_path_components[].explanations[].transit_gateway_route_table_route.attachment_id

The ID of the route attachment.

return_path_components[].explanations[].transit_gateway_route_table_route.destination_cidr

The CIDR block used for destination matches.

return_path_components[].explanations[].transit_gateway_route_table_route.prefix_list_id

The ID of the prefix list.

return_path_components[].explanations[].transit_gateway_route_table_route.resource_id

The ID of the resource for the route attachment.

return_path_components[].explanations[].transit_gateway_route_table_route.resource_type

The resource type for the route attachment.

return_path_components[].explanations[].transit_gateway_route_table_route.route_origin

The route origin. The following are the possible values:

  • static

  • propagated

return_path_components[].explanations[].transit_gateway_route_table_route.state

The state of the route.

return_path_components[].explanations[].vpc

The component VPC.

Show child fields
return_path_components[].explanations[].vpc.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].vpc.id

The ID of the component.

return_path_components[].explanations[].vpc.name

The name of the analysis component.

return_path_components[].explanations[].vpc_endpoint

The VPC endpoint.

Show child fields
return_path_components[].explanations[].vpc_endpoint.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].vpc_endpoint.id

The ID of the component.

return_path_components[].explanations[].vpc_endpoint.name

The name of the analysis component.

return_path_components[].explanations[].vpc_peering_connection

The VPC peering connection.

Show child fields
return_path_components[].explanations[].vpc_peering_connection.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].vpc_peering_connection.id

The ID of the component.

return_path_components[].explanations[].vpc_peering_connection.name

The name of the analysis component.

return_path_components[].explanations[].vpn_connection

The VPN connection.

Show child fields
return_path_components[].explanations[].vpn_connection.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].vpn_connection.id

The ID of the component.

return_path_components[].explanations[].vpn_connection.name

The name of the analysis component.

return_path_components[].explanations[].vpn_gateway

The VPN gateway.

Show child fields
return_path_components[].explanations[].vpn_gateway.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].explanations[].vpn_gateway.id

The ID of the component.

return_path_components[].explanations[].vpn_gateway.name

The name of the analysis component.

return_path_components[].firewall_stateful_rule

The Network Firewall stateful rule.

Show child fields
return_path_components[].firewall_stateful_rule.destination_ports[]
Show child fields
return_path_components[].firewall_stateful_rule.destination_ports[].from

The first port in the range.

return_path_components[].firewall_stateful_rule.destination_ports[].to

The last port in the range.

return_path_components[].firewall_stateful_rule.destinations[]
return_path_components[].firewall_stateful_rule.direction

The direction. The possible values are FORWARD and ANY.

return_path_components[].firewall_stateful_rule.protocol

The protocol.

return_path_components[].firewall_stateful_rule.rule_action

The rule action. The possible values are pass, drop, and alert.

return_path_components[].firewall_stateful_rule.rule_group_arn

The ARN of the stateful rule group.

return_path_components[].firewall_stateful_rule.source_ports[]
Show child fields
return_path_components[].firewall_stateful_rule.source_ports[].from

The first port in the range.

return_path_components[].firewall_stateful_rule.source_ports[].to

The last port in the range.

return_path_components[].firewall_stateful_rule.sources[]
return_path_components[].firewall_stateless_rule

The Network Firewall stateless rule.

Show child fields
return_path_components[].firewall_stateless_rule.destination_ports[]
Show child fields
return_path_components[].firewall_stateless_rule.destination_ports[].from

The first port in the range.

return_path_components[].firewall_stateless_rule.destination_ports[].to

The last port in the range.

return_path_components[].firewall_stateless_rule.destinations[]
return_path_components[].firewall_stateless_rule.priority

The rule priority.

return_path_components[].firewall_stateless_rule.protocols[]
return_path_components[].firewall_stateless_rule.rule_action

The rule action. The possible values are pass, drop, and forward_to_site.

return_path_components[].firewall_stateless_rule.rule_group_arn

The ARN of the stateless rule group.

return_path_components[].firewall_stateless_rule.source_ports[]
Show child fields
return_path_components[].firewall_stateless_rule.source_ports[].from

The first port in the range.

return_path_components[].firewall_stateless_rule.source_ports[].to

The last port in the range.

return_path_components[].firewall_stateless_rule.sources[]
return_path_components[].inbound_header

The inbound header.

Show child fields
return_path_components[].inbound_header.destination_addresses[]
return_path_components[].inbound_header.destination_port_ranges[]
Show child fields
return_path_components[].inbound_header.destination_port_ranges[].from

The first port in the range.

return_path_components[].inbound_header.destination_port_ranges[].to

The last port in the range.

return_path_components[].inbound_header.protocol

The protocol.

return_path_components[].inbound_header.source_addresses[]
return_path_components[].inbound_header.source_port_ranges[]
Show child fields
return_path_components[].inbound_header.source_port_ranges[].from

The first port in the range.

return_path_components[].inbound_header.source_port_ranges[].to

The last port in the range.

return_path_components[].outbound_header

The outbound header.

Show child fields
return_path_components[].outbound_header.destination_addresses[]
return_path_components[].outbound_header.destination_port_ranges[]
Show child fields
return_path_components[].outbound_header.destination_port_ranges[].from

The first port in the range.

return_path_components[].outbound_header.destination_port_ranges[].to

The last port in the range.

return_path_components[].outbound_header.protocol

The protocol.

return_path_components[].outbound_header.source_addresses[]
return_path_components[].outbound_header.source_port_ranges[]
Show child fields
return_path_components[].outbound_header.source_port_ranges[].from

The first port in the range.

return_path_components[].outbound_header.source_port_ranges[].to

The last port in the range.

return_path_components[].route_table_route

The route table route.

Show child fields
return_path_components[].route_table_route.carrier_gateway_id

The ID of a carrier gateway.

return_path_components[].route_table_route.core_network_arn

The Amazon Resource Name (ARN) of a core network.

return_path_components[].route_table_route.destination_cidr

The destination IPv4 address, in CIDR notation.

return_path_components[].route_table_route.destination_prefix_list_id

The prefix of the Amazon Web Services service.

return_path_components[].route_table_route.egress_only_internet_gateway_id

The ID of an egress-only internet gateway.

return_path_components[].route_table_route.gateway_id

The ID of the gateway, such as an internet gateway or virtual private gateway.

return_path_components[].route_table_route.instance_id

The ID of the instance, such as a NAT instance.

return_path_components[].route_table_route.local_gateway_id

The ID of a local gateway.

return_path_components[].route_table_route.nat_gateway_id

The ID of a NAT gateway.

return_path_components[].route_table_route.network_interface_id

The ID of a network interface.

return_path_components[].route_table_route.origin

Describes how the route was created. The following are the possible values:

  • CreateRouteTable - The route was automatically created when the route table was created.

  • CreateRoute - The route was manually added to the route table.

  • EnableVgwRoutePropagation - The route was propagated by route propagation.

return_path_components[].route_table_route.state

The state. The following are the possible values:

  • active

  • blackhole

return_path_components[].route_table_route.transit_gateway_id

The ID of a transit gateway.

return_path_components[].route_table_route.vpc_peering_connection_id

The ID of a VPC peering connection.

return_path_components[].security_group_rule

The security group rule.

Show child fields
return_path_components[].security_group_rule.cidr

The IPv4 address range, in CIDR notation.

return_path_components[].security_group_rule.direction

The direction. The following are the possible values:

  • egress

  • ingress

return_path_components[].security_group_rule.port_range

The port range.

Show child fields
return_path_components[].security_group_rule.port_range.from

The first port in the range.

return_path_components[].security_group_rule.port_range.to

The last port in the range.

return_path_components[].security_group_rule.prefix_list_id

The prefix list ID.

return_path_components[].security_group_rule.protocol

The protocol name.

return_path_components[].security_group_rule.security_group_id

The security group ID.

return_path_components[].sequence_number

The sequence number.

return_path_components[].service_name

The name of the VPC endpoint service.

return_path_components[].source_vpc

The source VPC.

Show child fields
return_path_components[].source_vpc.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].source_vpc.id

The ID of the component.

return_path_components[].source_vpc.name

The name of the analysis component.

return_path_components[].subnet

The subnet.

Show child fields
return_path_components[].subnet.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].subnet.id

The ID of the component.

return_path_components[].subnet.name

The name of the analysis component.

return_path_components[].transit_gateway

The transit gateway.

Show child fields
return_path_components[].transit_gateway.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].transit_gateway.id

The ID of the component.

return_path_components[].transit_gateway.name

The name of the analysis component.

return_path_components[].transit_gateway_route_table_route

The route in a transit gateway route table.

Show child fields
return_path_components[].transit_gateway_route_table_route.attachment_id

The ID of the route attachment.

return_path_components[].transit_gateway_route_table_route.destination_cidr

The CIDR block used for destination matches.

return_path_components[].transit_gateway_route_table_route.prefix_list_id

The ID of the prefix list.

return_path_components[].transit_gateway_route_table_route.resource_id

The ID of the resource for the route attachment.

return_path_components[].transit_gateway_route_table_route.resource_type

The resource type for the route attachment.

return_path_components[].transit_gateway_route_table_route.route_origin

The route origin. The following are the possible values:

  • static

  • propagated

return_path_components[].transit_gateway_route_table_route.state

The state of the route.

return_path_components[].vpc

The component VPC.

Show child fields
return_path_components[].vpc.arn

The Amazon Resource Name (ARN) of the component.

return_path_components[].vpc.id

The ID of the component.

return_path_components[].vpc.name

The name of the analysis component.

start_date

The time the analysis started.

TIMESTAMP_S
status

The status of the network insights analysis.

VARCHAR
status_message

The status message, if the status is failed.

VARCHAR
suggested_accounts

Potential intermediate accounts.

VARCHAR[]
Show child fields
suggested_accounts[]
tags

The tags.

STRUCT(
"key" VARCHAR,
"value" VARCHAR
)[]
Show child fields
tags[]
Show child fields
tags[].key

The key of the tag.

Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with aws:.

tags[].value

The value of the tag.

Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.

warning_message

The warning message.

VARCHAR