aws.ec2.get_network_insights_access_scope_analysis_findings

Example SQL Queries

SELECT * FROM
aws.ec2.get_network_insights_access_scope_analysis_findings
WHERE
"network_insights_access_scope_analysis_id" = 'VALUE';

Description

Gets the findings for the specified Network Access Scope analysis.

Table Definition

Column Name	Column Data Type
`network_insights_access_scope_analysis_id` Required Input Column The ID of the Network Access Scope analysis.	VARCHAR
`dry_run` Input Column Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.	BOOLEAN
`_aws_profile` Input Column The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.	STRUCT( "type" VARCHAR, "name" VARCHAR, "account_id" VARCHAR, "via_profile_name" VARCHAR, "assumed_role_arn" VARCHAR, "organization" STRUCT( "account_name" VARCHAR, "id" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[], "master_account" STRUCT( "id" VARCHAR, "email" VARCHAR ), "parents" STRUCT( "type" VARCHAR, "id" VARCHAR, "name" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[] )[] ) )
Show child fields `_aws_profile.account_id` The AWS account id `_aws_profile.assumed_role_arn` The ARN of the assumed role `_aws_profile.name` The unique name of the profile. `_aws_profile.organization` Information about this profile's membership in the AWS organization. Show child fields `_aws_profile.organization.account_name` The name of account speciifed by the organization `_aws_profile.organization.id` The organization id `_aws_profile.organization.master_account` Show child fields `_aws_profile.organization.master_account.email` The organization master account email address `_aws_profile.organization.master_account.id` The organization master account id `_aws_profile.organization.parents[]` Show child fields `_aws_profile.organization.parents[].id` The id of the parent `_aws_profile.organization.parents[].name` The name of the parent `_aws_profile.organization.parents[].tags[]` Show child fields `_aws_profile.organization.parents[].tags[].key` `_aws_profile.organization.parents[].tags[].value` `_aws_profile.organization.parents[].type` The type of parent can be an organization unit or a root `_aws_profile.organization.tags[]` Show child fields `_aws_profile.organization.tags[].key` `_aws_profile.organization.tags[].value` `_aws_profile.type` The type of profile, either 'credentials' or 'assumed_role' `_aws_profile.via_profile_name` This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.
`_aws_region` Input Column The AWS region to use.	VARCHAR
`analysis_findings` The findings associated with Network Access Scope Analysis.	STRUCT( "network_insights_access_scope_analysis_id" VARCHAR, "network_insights_access_scope_id" VARCHAR, "finding_id" VARCHAR, "finding_components" STRUCT( "sequence_number" BIGINT, "acl_rule" STRUCT( "cidr" VARCHAR, "egress" BOOLEAN, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "protocol" VARCHAR, "rule_action" VARCHAR, "rule_number" BIGINT ), "attached_to" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "outbound_header" STRUCT( "destination_addresses" VARCHAR[], "destination_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "source_addresses" VARCHAR[], "source_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[] ), "inbound_header" STRUCT( "destination_addresses" VARCHAR[], "destination_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "source_addresses" VARCHAR[], "source_port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[] ), "route_table_route" STRUCT( "destination_cidr" VARCHAR, "destination_prefix_list_id" VARCHAR, "egress_only_internet_gateway_id" VARCHAR, "gateway_id" VARCHAR, "instance_id" VARCHAR, "nat_gateway_id" VARCHAR, "network_interface_id" VARCHAR, "origin" VARCHAR, "transit_gateway_id" VARCHAR, "vpc_peering_connection_id" VARCHAR, "state" VARCHAR, "carrier_gateway_id" VARCHAR, "core_network_arn" VARCHAR, "local_gateway_id" VARCHAR ), "security_group_rule" STRUCT( "cidr" VARCHAR, "direction" VARCHAR, "security_group_id" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "prefix_list_id" VARCHAR, "protocol" VARCHAR ), "source_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "subnet" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "additional_details" STRUCT( "additional_detail_type" VARCHAR, "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc_endpoint_service" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "rule_options" STRUCT( "keyword" VARCHAR, "settings" VARCHAR[] )[], "rule_group_type_pairs" STRUCT( "rule_group_arn" VARCHAR, "rule_group_type" VARCHAR )[], "rule_group_rule_options_pairs" STRUCT( "rule_group_arn" VARCHAR, "rule_options" STRUCT( "keyword" VARCHAR, "settings" VARCHAR[] )[] )[], "service_name" VARCHAR, "load_balancers" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[] )[], "transit_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table_route" STRUCT( "destination_cidr" VARCHAR, "state" VARCHAR, "route_origin" VARCHAR, "prefix_list_id" VARCHAR, "attachment_id" VARCHAR, "resource_id" VARCHAR, "resource_type" VARCHAR ), "explanations" STRUCT( "acl" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "acl_rule" STRUCT( "cidr" VARCHAR, "egress" BOOLEAN, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "protocol" VARCHAR, "rule_action" VARCHAR, "rule_number" BIGINT ), "address" VARCHAR, "addresses" VARCHAR[], "attached_to" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "availability_zones" VARCHAR[], "cidrs" VARCHAR[], "component" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "customer_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "destination_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "direction" VARCHAR, "explanation_code" VARCHAR, "ingress_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "internet_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "load_balancer_arn" VARCHAR, "classic_load_balancer_listener" STRUCT( "load_balancer_port" BIGINT, "instance_port" BIGINT ), "load_balancer_listener_port" BIGINT, "load_balancer_target" STRUCT( "address" VARCHAR, "availability_zone" VARCHAR, "instance" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "port" BIGINT ), "load_balancer_target_group" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "load_balancer_target_groups" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[], "load_balancer_target_port" BIGINT, "elastic_load_balancer_listener" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "missing_component" VARCHAR, "nat_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "network_interface" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "packet_field" VARCHAR, "vpc_peering_connection" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "port" BIGINT, "port_ranges" STRUCT( "from" BIGINT, "to" BIGINT )[], "prefix_list" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "protocols" VARCHAR[], "route_table_route" STRUCT( "destination_cidr" VARCHAR, "destination_prefix_list_id" VARCHAR, "egress_only_internet_gateway_id" VARCHAR, "gateway_id" VARCHAR, "instance_id" VARCHAR, "nat_gateway_id" VARCHAR, "network_interface_id" VARCHAR, "origin" VARCHAR, "transit_gateway_id" VARCHAR, "vpc_peering_connection_id" VARCHAR, "state" VARCHAR, "carrier_gateway_id" VARCHAR, "core_network_arn" VARCHAR, "local_gateway_id" VARCHAR ), "route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "security_group" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "security_group_rule" STRUCT( "cidr" VARCHAR, "direction" VARCHAR, "security_group_id" VARCHAR, "port_range" STRUCT( "from" BIGINT, "to" BIGINT ), "prefix_list_id" VARCHAR, "protocol" VARCHAR ), "security_groups" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR )[], "source_vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "state" VARCHAR, "subnet" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "subnet_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpc_endpoint" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpn_connection" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "vpn_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "transit_gateway_route_table_route" STRUCT( "destination_cidr" VARCHAR, "state" VARCHAR, "route_origin" VARCHAR, "prefix_list_id" VARCHAR, "attachment_id" VARCHAR, "resource_id" VARCHAR, "resource_type" VARCHAR ), "transit_gateway_attachment" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "component_account" VARCHAR, "component_region" VARCHAR, "firewall_stateless_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocols" BIGINT[], "rule_action" VARCHAR, "priority" BIGINT ), "firewall_stateful_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "rule_action" VARCHAR, "direction" VARCHAR ) )[], "elastic_load_balancer_listener" STRUCT( "id" VARCHAR, "arn" VARCHAR, "name" VARCHAR ), "firewall_stateless_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocols" BIGINT[], "rule_action" VARCHAR, "priority" BIGINT ), "firewall_stateful_rule" STRUCT( "rule_group_arn" VARCHAR, "sources" VARCHAR[], "destinations" VARCHAR[], "source_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "destination_ports" STRUCT( "from" BIGINT, "to" BIGINT )[], "protocol" VARCHAR, "rule_action" VARCHAR, "direction" VARCHAR ), "service_name" VARCHAR )[] )[]
Show child fields `analysis_findings[]` Show child fields `analysis_findings[].finding_components[]` Show child fields `analysis_findings[].finding_components[].acl_rule` The network ACL rule. Show child fields `analysis_findings[].finding_components[].acl_rule.cidr` The IPv4 address range, in CIDR notation. `analysis_findings[].finding_components[].acl_rule.egress` Indicates whether the rule is an outbound rule. `analysis_findings[].finding_components[].acl_rule.port_range` The range of ports. Show child fields `analysis_findings[].finding_components[].acl_rule.port_range.from` The first port in the range. `analysis_findings[].finding_components[].acl_rule.port_range.to` The last port in the range. `analysis_findings[].finding_components[].acl_rule.protocol` The protocol. `analysis_findings[].finding_components[].acl_rule.rule_action` Indicates whether to allow or deny traffic that matches the rule. `analysis_findings[].finding_components[].acl_rule.rule_number` The rule number. `analysis_findings[].finding_components[].additional_details[]` Show child fields `analysis_findings[].finding_components[].additional_details[].additional_detail_type` The additional detail code. `analysis_findings[].finding_components[].additional_details[].component` The path component. Show child fields `analysis_findings[].finding_components[].additional_details[].component.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].additional_details[].component.id` The ID of the component. `analysis_findings[].finding_components[].additional_details[].component.name` The name of the analysis component. `analysis_findings[].finding_components[].additional_details[].load_balancers[]` Show child fields `analysis_findings[].finding_components[].additional_details[].load_balancers[].arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].additional_details[].load_balancers[].id` The ID of the component. `analysis_findings[].finding_components[].additional_details[].load_balancers[].name` The name of the analysis component. `analysis_findings[].finding_components[].additional_details[].rule_group_rule_options_pairs[]` Show child fields `analysis_findings[].finding_components[].additional_details[].rule_group_rule_options_pairs[].rule_group_arn` The ARN of the rule group. `analysis_findings[].finding_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[]` Show child fields `analysis_findings[].finding_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].keyword` The Suricata keyword. `analysis_findings[].finding_components[].additional_details[].rule_group_rule_options_pairs[].rule_options[].settings[]` `analysis_findings[].finding_components[].additional_details[].rule_group_type_pairs[]` Show child fields `analysis_findings[].finding_components[].additional_details[].rule_group_type_pairs[].rule_group_arn` The ARN of the rule group. `analysis_findings[].finding_components[].additional_details[].rule_group_type_pairs[].rule_group_type` The rule group type. The possible values are `Domain List` and `Suricata`. `analysis_findings[].finding_components[].additional_details[].rule_options[]` Show child fields `analysis_findings[].finding_components[].additional_details[].rule_options[].keyword` The Suricata keyword. `analysis_findings[].finding_components[].additional_details[].rule_options[].settings[]` `analysis_findings[].finding_components[].additional_details[].service_name` The name of the VPC endpoint service. `analysis_findings[].finding_components[].additional_details[].vpc_endpoint_service` The VPC endpoint service. Show child fields `analysis_findings[].finding_components[].additional_details[].vpc_endpoint_service.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].additional_details[].vpc_endpoint_service.id` The ID of the component. `analysis_findings[].finding_components[].additional_details[].vpc_endpoint_service.name` The name of the analysis component. `analysis_findings[].finding_components[].attached_to` The resource to which the path component is attached. Show child fields `analysis_findings[].finding_components[].attached_to.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].attached_to.id` The ID of the component. `analysis_findings[].finding_components[].attached_to.name` The name of the analysis component. `analysis_findings[].finding_components[].component` The component. Show child fields `analysis_findings[].finding_components[].component.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].component.id` The ID of the component. `analysis_findings[].finding_components[].component.name` The name of the analysis component. `analysis_findings[].finding_components[].destination_vpc` The destination VPC. Show child fields `analysis_findings[].finding_components[].destination_vpc.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].destination_vpc.id` The ID of the component. `analysis_findings[].finding_components[].destination_vpc.name` The name of the analysis component. `analysis_findings[].finding_components[].elastic_load_balancer_listener` The load balancer listener. Show child fields `analysis_findings[].finding_components[].elastic_load_balancer_listener.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].elastic_load_balancer_listener.id` The ID of the component. `analysis_findings[].finding_components[].elastic_load_balancer_listener.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[]` Show child fields `analysis_findings[].finding_components[].explanations[].acl` The network ACL. Show child fields `analysis_findings[].finding_components[].explanations[].acl.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].acl.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].acl.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].acl_rule` The network ACL rule. Show child fields `analysis_findings[].finding_components[].explanations[].acl_rule.cidr` The IPv4 address range, in CIDR notation. `analysis_findings[].finding_components[].explanations[].acl_rule.egress` Indicates whether the rule is an outbound rule. `analysis_findings[].finding_components[].explanations[].acl_rule.port_range` The range of ports. Show child fields `analysis_findings[].finding_components[].explanations[].acl_rule.port_range.from` The first port in the range. `analysis_findings[].finding_components[].explanations[].acl_rule.port_range.to` The last port in the range. `analysis_findings[].finding_components[].explanations[].acl_rule.protocol` The protocol. `analysis_findings[].finding_components[].explanations[].acl_rule.rule_action` Indicates whether to allow or deny traffic that matches the rule. `analysis_findings[].finding_components[].explanations[].acl_rule.rule_number` The rule number. `analysis_findings[].finding_components[].explanations[].address` The IPv4 address, in CIDR notation. `analysis_findings[].finding_components[].explanations[].addresses[]` `analysis_findings[].finding_components[].explanations[].attached_to` The resource to which the component is attached. Show child fields `analysis_findings[].finding_components[].explanations[].attached_to.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].attached_to.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].attached_to.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].availability_zones[]` `analysis_findings[].finding_components[].explanations[].cidrs[]` `analysis_findings[].finding_components[].explanations[].classic_load_balancer_listener` The listener for a Classic Load Balancer. Show child fields `analysis_findings[].finding_components[].explanations[].classic_load_balancer_listener.instance_port` [Classic Load Balancers] The back-end port for the listener. `analysis_findings[].finding_components[].explanations[].classic_load_balancer_listener.load_balancer_port` The port on which the load balancer is listening. `analysis_findings[].finding_components[].explanations[].component` The component. Show child fields `analysis_findings[].finding_components[].explanations[].component.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].component.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].component.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].component_account` The Amazon Web Services account for the component. `analysis_findings[].finding_components[].explanations[].component_region` The Region for the component. `analysis_findings[].finding_components[].explanations[].customer_gateway` The customer gateway. Show child fields `analysis_findings[].finding_components[].explanations[].customer_gateway.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].customer_gateway.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].customer_gateway.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].destination` The destination. Show child fields `analysis_findings[].finding_components[].explanations[].destination.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].destination.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].destination.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].destination_vpc` The destination VPC. Show child fields `analysis_findings[].finding_components[].explanations[].destination_vpc.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].destination_vpc.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].destination_vpc.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].direction` The direction. The following are the possible values: egress ingress `analysis_findings[].finding_components[].explanations[].elastic_load_balancer_listener` The load balancer listener. Show child fields `analysis_findings[].finding_components[].explanations[].elastic_load_balancer_listener.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].elastic_load_balancer_listener.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].elastic_load_balancer_listener.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].explanation_code` The explanation code. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule` The Network Firewall stateful rule. Show child fields `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.destination_ports[]` Show child fields `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.destination_ports[].from` The first port in the range. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.destination_ports[].to` The last port in the range. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.destinations[]` `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.direction` The direction. The possible values are `FORWARD` and `ANY`. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.protocol` The protocol. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.rule_action` The rule action. The possible values are `pass`, `drop`, and `alert`. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.rule_group_arn` The ARN of the stateful rule group. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.source_ports[]` Show child fields `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.source_ports[].from` The first port in the range. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.source_ports[].to` The last port in the range. `analysis_findings[].finding_components[].explanations[].firewall_stateful_rule.sources[]` `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule` The Network Firewall stateless rule. Show child fields `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.destination_ports[]` Show child fields `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.destination_ports[].from` The first port in the range. `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.destination_ports[].to` The last port in the range. `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.destinations[]` `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.priority` The rule priority. `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.protocols[]` `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.rule_action` The rule action. The possible values are `pass`, `drop`, and `forward_to_site`. `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.rule_group_arn` The ARN of the stateless rule group. `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.source_ports[]` Show child fields `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.source_ports[].from` The first port in the range. `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.source_ports[].to` The last port in the range. `analysis_findings[].finding_components[].explanations[].firewall_stateless_rule.sources[]` `analysis_findings[].finding_components[].explanations[].ingress_route_table` The route table. Show child fields `analysis_findings[].finding_components[].explanations[].ingress_route_table.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].ingress_route_table.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].ingress_route_table.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].internet_gateway` The internet gateway. Show child fields `analysis_findings[].finding_components[].explanations[].internet_gateway.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].internet_gateway.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].internet_gateway.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].load_balancer_arn` The Amazon Resource Name (ARN) of the load balancer. `analysis_findings[].finding_components[].explanations[].load_balancer_listener_port` The listener port of the load balancer. `analysis_findings[].finding_components[].explanations[].load_balancer_target` The target. Show child fields `analysis_findings[].finding_components[].explanations[].load_balancer_target.address` The IP address. `analysis_findings[].finding_components[].explanations[].load_balancer_target.availability_zone` The Availability Zone. `analysis_findings[].finding_components[].explanations[].load_balancer_target.instance` Information about the instance. Show child fields `analysis_findings[].finding_components[].explanations[].load_balancer_target.instance.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].load_balancer_target.instance.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].load_balancer_target.instance.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].load_balancer_target.port` The port on which the target is listening. `analysis_findings[].finding_components[].explanations[].load_balancer_target_group` The target group. Show child fields `analysis_findings[].finding_components[].explanations[].load_balancer_target_group.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].load_balancer_target_group.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].load_balancer_target_group.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].load_balancer_target_groups[]` Show child fields `analysis_findings[].finding_components[].explanations[].load_balancer_target_groups[].arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].load_balancer_target_groups[].id` The ID of the component. `analysis_findings[].finding_components[].explanations[].load_balancer_target_groups[].name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].load_balancer_target_port` The target port. `analysis_findings[].finding_components[].explanations[].missing_component` The missing component. `analysis_findings[].finding_components[].explanations[].nat_gateway` The NAT gateway. Show child fields `analysis_findings[].finding_components[].explanations[].nat_gateway.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].nat_gateway.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].nat_gateway.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].network_interface` The network interface. Show child fields `analysis_findings[].finding_components[].explanations[].network_interface.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].network_interface.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].network_interface.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].packet_field` The packet field. `analysis_findings[].finding_components[].explanations[].port` The port. `analysis_findings[].finding_components[].explanations[].port_ranges[]` Show child fields `analysis_findings[].finding_components[].explanations[].port_ranges[].from` The first port in the range. `analysis_findings[].finding_components[].explanations[].port_ranges[].to` The last port in the range. `analysis_findings[].finding_components[].explanations[].prefix_list` The prefix list. Show child fields `analysis_findings[].finding_components[].explanations[].prefix_list.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].prefix_list.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].prefix_list.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].protocols[]` `analysis_findings[].finding_components[].explanations[].route_table` The route table. Show child fields `analysis_findings[].finding_components[].explanations[].route_table.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].route_table.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].route_table.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].route_table_route` The route table route. Show child fields `analysis_findings[].finding_components[].explanations[].route_table_route.carrier_gateway_id` The ID of a carrier gateway. `analysis_findings[].finding_components[].explanations[].route_table_route.core_network_arn` The Amazon Resource Name (ARN) of a core network. `analysis_findings[].finding_components[].explanations[].route_table_route.destination_cidr` The destination IPv4 address, in CIDR notation. `analysis_findings[].finding_components[].explanations[].route_table_route.destination_prefix_list_id` The prefix of the Amazon Web Services service. `analysis_findings[].finding_components[].explanations[].route_table_route.egress_only_internet_gateway_id` The ID of an egress-only internet gateway. `analysis_findings[].finding_components[].explanations[].route_table_route.gateway_id` The ID of the gateway, such as an internet gateway or virtual private gateway. `analysis_findings[].finding_components[].explanations[].route_table_route.instance_id` The ID of the instance, such as a NAT instance. `analysis_findings[].finding_components[].explanations[].route_table_route.local_gateway_id` The ID of a local gateway. `analysis_findings[].finding_components[].explanations[].route_table_route.nat_gateway_id` The ID of a NAT gateway. `analysis_findings[].finding_components[].explanations[].route_table_route.network_interface_id` The ID of a network interface. `analysis_findings[].finding_components[].explanations[].route_table_route.origin` Describes how the route was created. The following are the possible values: CreateRouteTable - The route was automatically created when the route table was created. CreateRoute - The route was manually added to the route table. EnableVgwRoutePropagation - The route was propagated by route propagation. `analysis_findings[].finding_components[].explanations[].route_table_route.state` The state. The following are the possible values: active blackhole `analysis_findings[].finding_components[].explanations[].route_table_route.transit_gateway_id` The ID of a transit gateway. `analysis_findings[].finding_components[].explanations[].route_table_route.vpc_peering_connection_id` The ID of a VPC peering connection. `analysis_findings[].finding_components[].explanations[].security_group` The security group. Show child fields `analysis_findings[].finding_components[].explanations[].security_group.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].security_group.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].security_group.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].security_group_rule` The security group rule. Show child fields `analysis_findings[].finding_components[].explanations[].security_group_rule.cidr` The IPv4 address range, in CIDR notation. `analysis_findings[].finding_components[].explanations[].security_group_rule.direction` The direction. The following are the possible values: egress ingress `analysis_findings[].finding_components[].explanations[].security_group_rule.port_range` The port range. Show child fields `analysis_findings[].finding_components[].explanations[].security_group_rule.port_range.from` The first port in the range. `analysis_findings[].finding_components[].explanations[].security_group_rule.port_range.to` The last port in the range. `analysis_findings[].finding_components[].explanations[].security_group_rule.prefix_list_id` The prefix list ID. `analysis_findings[].finding_components[].explanations[].security_group_rule.protocol` The protocol name. `analysis_findings[].finding_components[].explanations[].security_group_rule.security_group_id` The security group ID. `analysis_findings[].finding_components[].explanations[].security_groups[]` Show child fields `analysis_findings[].finding_components[].explanations[].security_groups[].arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].security_groups[].id` The ID of the component. `analysis_findings[].finding_components[].explanations[].security_groups[].name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].source_vpc` The source VPC. Show child fields `analysis_findings[].finding_components[].explanations[].source_vpc.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].source_vpc.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].source_vpc.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].state` The state. `analysis_findings[].finding_components[].explanations[].subnet` The subnet. Show child fields `analysis_findings[].finding_components[].explanations[].subnet.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].subnet.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].subnet.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].subnet_route_table` The route table for the subnet. Show child fields `analysis_findings[].finding_components[].explanations[].subnet_route_table.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].subnet_route_table.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].subnet_route_table.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].transit_gateway` The transit gateway. Show child fields `analysis_findings[].finding_components[].explanations[].transit_gateway.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].transit_gateway.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].transit_gateway.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].transit_gateway_attachment` The transit gateway attachment. Show child fields `analysis_findings[].finding_components[].explanations[].transit_gateway_attachment.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].transit_gateway_attachment.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].transit_gateway_attachment.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table` The transit gateway route table. Show child fields `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table_route` The transit gateway route table route. Show child fields `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table_route.attachment_id` The ID of the route attachment. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table_route.destination_cidr` The CIDR block used for destination matches. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table_route.prefix_list_id` The ID of the prefix list. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table_route.resource_id` The ID of the resource for the route attachment. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table_route.resource_type` The resource type for the route attachment. `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table_route.route_origin` The route origin. The following are the possible values: static propagated `analysis_findings[].finding_components[].explanations[].transit_gateway_route_table_route.state` The state of the route. `analysis_findings[].finding_components[].explanations[].vpc` The component VPC. Show child fields `analysis_findings[].finding_components[].explanations[].vpc.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].vpc.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].vpc.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].vpc_endpoint` The VPC endpoint. Show child fields `analysis_findings[].finding_components[].explanations[].vpc_endpoint.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].vpc_endpoint.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].vpc_endpoint.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].vpc_peering_connection` The VPC peering connection. Show child fields `analysis_findings[].finding_components[].explanations[].vpc_peering_connection.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].vpc_peering_connection.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].vpc_peering_connection.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].vpn_connection` The VPN connection. Show child fields `analysis_findings[].finding_components[].explanations[].vpn_connection.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].vpn_connection.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].vpn_connection.name` The name of the analysis component. `analysis_findings[].finding_components[].explanations[].vpn_gateway` The VPN gateway. Show child fields `analysis_findings[].finding_components[].explanations[].vpn_gateway.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].explanations[].vpn_gateway.id` The ID of the component. `analysis_findings[].finding_components[].explanations[].vpn_gateway.name` The name of the analysis component. `analysis_findings[].finding_components[].firewall_stateful_rule` The Network Firewall stateful rule. Show child fields `analysis_findings[].finding_components[].firewall_stateful_rule.destination_ports[]` Show child fields `analysis_findings[].finding_components[].firewall_stateful_rule.destination_ports[].from` The first port in the range. `analysis_findings[].finding_components[].firewall_stateful_rule.destination_ports[].to` The last port in the range. `analysis_findings[].finding_components[].firewall_stateful_rule.destinations[]` `analysis_findings[].finding_components[].firewall_stateful_rule.direction` The direction. The possible values are `FORWARD` and `ANY`. `analysis_findings[].finding_components[].firewall_stateful_rule.protocol` The protocol. `analysis_findings[].finding_components[].firewall_stateful_rule.rule_action` The rule action. The possible values are `pass`, `drop`, and `alert`. `analysis_findings[].finding_components[].firewall_stateful_rule.rule_group_arn` The ARN of the stateful rule group. `analysis_findings[].finding_components[].firewall_stateful_rule.source_ports[]` Show child fields `analysis_findings[].finding_components[].firewall_stateful_rule.source_ports[].from` The first port in the range. `analysis_findings[].finding_components[].firewall_stateful_rule.source_ports[].to` The last port in the range. `analysis_findings[].finding_components[].firewall_stateful_rule.sources[]` `analysis_findings[].finding_components[].firewall_stateless_rule` The Network Firewall stateless rule. Show child fields `analysis_findings[].finding_components[].firewall_stateless_rule.destination_ports[]` Show child fields `analysis_findings[].finding_components[].firewall_stateless_rule.destination_ports[].from` The first port in the range. `analysis_findings[].finding_components[].firewall_stateless_rule.destination_ports[].to` The last port in the range. `analysis_findings[].finding_components[].firewall_stateless_rule.destinations[]` `analysis_findings[].finding_components[].firewall_stateless_rule.priority` The rule priority. `analysis_findings[].finding_components[].firewall_stateless_rule.protocols[]` `analysis_findings[].finding_components[].firewall_stateless_rule.rule_action` The rule action. The possible values are `pass`, `drop`, and `forward_to_site`. `analysis_findings[].finding_components[].firewall_stateless_rule.rule_group_arn` The ARN of the stateless rule group. `analysis_findings[].finding_components[].firewall_stateless_rule.source_ports[]` Show child fields `analysis_findings[].finding_components[].firewall_stateless_rule.source_ports[].from` The first port in the range. `analysis_findings[].finding_components[].firewall_stateless_rule.source_ports[].to` The last port in the range. `analysis_findings[].finding_components[].firewall_stateless_rule.sources[]` `analysis_findings[].finding_components[].inbound_header` The inbound header. Show child fields `analysis_findings[].finding_components[].inbound_header.destination_addresses[]` `analysis_findings[].finding_components[].inbound_header.destination_port_ranges[]` Show child fields `analysis_findings[].finding_components[].inbound_header.destination_port_ranges[].from` The first port in the range. `analysis_findings[].finding_components[].inbound_header.destination_port_ranges[].to` The last port in the range. `analysis_findings[].finding_components[].inbound_header.protocol` The protocol. `analysis_findings[].finding_components[].inbound_header.source_addresses[]` `analysis_findings[].finding_components[].inbound_header.source_port_ranges[]` Show child fields `analysis_findings[].finding_components[].inbound_header.source_port_ranges[].from` The first port in the range. `analysis_findings[].finding_components[].inbound_header.source_port_ranges[].to` The last port in the range. `analysis_findings[].finding_components[].outbound_header` The outbound header. Show child fields `analysis_findings[].finding_components[].outbound_header.destination_addresses[]` `analysis_findings[].finding_components[].outbound_header.destination_port_ranges[]` Show child fields `analysis_findings[].finding_components[].outbound_header.destination_port_ranges[].from` The first port in the range. `analysis_findings[].finding_components[].outbound_header.destination_port_ranges[].to` The last port in the range. `analysis_findings[].finding_components[].outbound_header.protocol` The protocol. `analysis_findings[].finding_components[].outbound_header.source_addresses[]` `analysis_findings[].finding_components[].outbound_header.source_port_ranges[]` Show child fields `analysis_findings[].finding_components[].outbound_header.source_port_ranges[].from` The first port in the range. `analysis_findings[].finding_components[].outbound_header.source_port_ranges[].to` The last port in the range. `analysis_findings[].finding_components[].route_table_route` The route table route. Show child fields `analysis_findings[].finding_components[].route_table_route.carrier_gateway_id` The ID of a carrier gateway. `analysis_findings[].finding_components[].route_table_route.core_network_arn` The Amazon Resource Name (ARN) of a core network. `analysis_findings[].finding_components[].route_table_route.destination_cidr` The destination IPv4 address, in CIDR notation. `analysis_findings[].finding_components[].route_table_route.destination_prefix_list_id` The prefix of the Amazon Web Services service. `analysis_findings[].finding_components[].route_table_route.egress_only_internet_gateway_id` The ID of an egress-only internet gateway. `analysis_findings[].finding_components[].route_table_route.gateway_id` The ID of the gateway, such as an internet gateway or virtual private gateway. `analysis_findings[].finding_components[].route_table_route.instance_id` The ID of the instance, such as a NAT instance. `analysis_findings[].finding_components[].route_table_route.local_gateway_id` The ID of a local gateway. `analysis_findings[].finding_components[].route_table_route.nat_gateway_id` The ID of a NAT gateway. `analysis_findings[].finding_components[].route_table_route.network_interface_id` The ID of a network interface. `analysis_findings[].finding_components[].route_table_route.origin` Describes how the route was created. The following are the possible values: CreateRouteTable - The route was automatically created when the route table was created. CreateRoute - The route was manually added to the route table. EnableVgwRoutePropagation - The route was propagated by route propagation. `analysis_findings[].finding_components[].route_table_route.state` The state. The following are the possible values: active blackhole `analysis_findings[].finding_components[].route_table_route.transit_gateway_id` The ID of a transit gateway. `analysis_findings[].finding_components[].route_table_route.vpc_peering_connection_id` The ID of a VPC peering connection. `analysis_findings[].finding_components[].security_group_rule` The security group rule. Show child fields `analysis_findings[].finding_components[].security_group_rule.cidr` The IPv4 address range, in CIDR notation. `analysis_findings[].finding_components[].security_group_rule.direction` The direction. The following are the possible values: egress ingress `analysis_findings[].finding_components[].security_group_rule.port_range` The port range. Show child fields `analysis_findings[].finding_components[].security_group_rule.port_range.from` The first port in the range. `analysis_findings[].finding_components[].security_group_rule.port_range.to` The last port in the range. `analysis_findings[].finding_components[].security_group_rule.prefix_list_id` The prefix list ID. `analysis_findings[].finding_components[].security_group_rule.protocol` The protocol name. `analysis_findings[].finding_components[].security_group_rule.security_group_id` The security group ID. `analysis_findings[].finding_components[].sequence_number` The sequence number. `analysis_findings[].finding_components[].service_name` The name of the VPC endpoint service. `analysis_findings[].finding_components[].source_vpc` The source VPC. Show child fields `analysis_findings[].finding_components[].source_vpc.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].source_vpc.id` The ID of the component. `analysis_findings[].finding_components[].source_vpc.name` The name of the analysis component. `analysis_findings[].finding_components[].subnet` The subnet. Show child fields `analysis_findings[].finding_components[].subnet.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].subnet.id` The ID of the component. `analysis_findings[].finding_components[].subnet.name` The name of the analysis component. `analysis_findings[].finding_components[].transit_gateway` The transit gateway. Show child fields `analysis_findings[].finding_components[].transit_gateway.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].transit_gateway.id` The ID of the component. `analysis_findings[].finding_components[].transit_gateway.name` The name of the analysis component. `analysis_findings[].finding_components[].transit_gateway_route_table_route` The route in a transit gateway route table. Show child fields `analysis_findings[].finding_components[].transit_gateway_route_table_route.attachment_id` The ID of the route attachment. `analysis_findings[].finding_components[].transit_gateway_route_table_route.destination_cidr` The CIDR block used for destination matches. `analysis_findings[].finding_components[].transit_gateway_route_table_route.prefix_list_id` The ID of the prefix list. `analysis_findings[].finding_components[].transit_gateway_route_table_route.resource_id` The ID of the resource for the route attachment. `analysis_findings[].finding_components[].transit_gateway_route_table_route.resource_type` The resource type for the route attachment. `analysis_findings[].finding_components[].transit_gateway_route_table_route.route_origin` The route origin. The following are the possible values: static propagated `analysis_findings[].finding_components[].transit_gateway_route_table_route.state` The state of the route. `analysis_findings[].finding_components[].vpc` The component VPC. Show child fields `analysis_findings[].finding_components[].vpc.arn` The Amazon Resource Name (ARN) of the component. `analysis_findings[].finding_components[].vpc.id` The ID of the component. `analysis_findings[].finding_components[].vpc.name` The name of the analysis component. `analysis_findings[].finding_id` The ID of the finding. `analysis_findings[].network_insights_access_scope_analysis_id` The ID of the Network Access Scope analysis. `analysis_findings[].network_insights_access_scope_id` The ID of the Network Access Scope.
`analysis_status` The status of Network Access Scope Analysis.	VARCHAR