aws.inspector2.list_filters

Example SQL Queries

SELECT * FROM
aws.inspector2.list_filters;

Description

Lists the filters associated with your account.

• View All Inspector2 Tables
• Boto3 Reference

Table Definition

Column Name	Column Data Type
action Input Column The action that is to be applied to the findings that match the filter.	VARCHAR
arns Input Column The Amazon resource number (ARN) of the filter.	VARCHAR[]
Show child fields arns[]
_aws_profile Input Column The AWS profile defines the AWS identity used. It can be defined via credentials or by assuming a IAM role.	STRUCT( "type" VARCHAR, "name" VARCHAR, "account_id" VARCHAR, "via_profile_name" VARCHAR, "assumed_role_arn" VARCHAR, "organization" STRUCT( "account_name" VARCHAR, "id" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[], "master_account" STRUCT( "id" VARCHAR, "email" VARCHAR ), "parents" STRUCT( "type" VARCHAR, "id" VARCHAR, "name" VARCHAR, "tags" STRUCT( "key" VARCHAR, "value" VARCHAR )[] )[] ) )
Show child fields _aws_profile.account_id The AWS account id _aws_profile.assumed_role_arn The ARN of the assumed role _aws_profile.name The unique name of the profile. _aws_profile.organization Information about this profile's membership in the AWS organization. Show child fields _aws_profile.organization.account_name The name of account speciifed by the organization _aws_profile.organization.id The organization id _aws_profile.organization.master_account Show child fields _aws_profile.organization.master_account.email The organization master account email address _aws_profile.organization.master_account.id The organization master account id _aws_profile.organization.parents[] Show child fields _aws_profile.organization.parents[].id The id of the parent _aws_profile.organization.parents[].name The name of the parent _aws_profile.organization.parents[].tags[] Show child fields _aws_profile.organization.parents[].tags[].key _aws_profile.organization.parents[].tags[].value _aws_profile.organization.parents[].type The type of parent can be an organization unit or a root _aws_profile.organization.tags[] Show child fields _aws_profile.organization.tags[].key _aws_profile.organization.tags[].value _aws_profile.type The type of profile, either 'credentials' or 'assumed_role' _aws_profile.via_profile_name This IAM role for this profile is assumed by first utilizing another profile with this name to obtain credentials.
_aws_region Input Column The AWS region to use.	VARCHAR
arn The Amazon Resource Number (ARN) associated with this filter.	VARCHAR
created_at The date and time this filter was created at.	TIMESTAMP_S
criteria Details on the filter criteria associated with this filter.	STRUCT( "aws_account_id" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "code_vulnerability_detector_name" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "code_vulnerability_detector_tags" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "code_vulnerability_file_path" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "component_id" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "component_type" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "ec2_instance_image_id" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "ec2_instance_subnet_id" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "ec2_instance_vpc_id" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "ecr_image_architecture" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "ecr_image_hash" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "ecr_image_pushed_at" STRUCT( "end_inclusive" TIMESTAMP_S, "start_inclusive" TIMESTAMP_S )[], "ecr_image_registry" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "ecr_image_repository_name" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "ecr_image_tags" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "epss_score" STRUCT( "lower_inclusive" DOUBLE, "upper_inclusive" DOUBLE )[], "exploit_available" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "finding_arn" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "finding_status" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "finding_type" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "first_observed_at" STRUCT( "end_inclusive" TIMESTAMP_S, "start_inclusive" TIMESTAMP_S )[], "fix_available" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "inspector_score" STRUCT( "lower_inclusive" DOUBLE, "upper_inclusive" DOUBLE )[], "lambda_function_execution_role_arn" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "lambda_function_last_modified_at" STRUCT( "end_inclusive" TIMESTAMP_S, "start_inclusive" TIMESTAMP_S )[], "lambda_function_layers" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "lambda_function_name" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "lambda_function_runtime" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "last_observed_at" STRUCT( "end_inclusive" TIMESTAMP_S, "start_inclusive" TIMESTAMP_S )[], "network_protocol" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "port_range" STRUCT( "begin_inclusive" BIGINT, "end_inclusive" BIGINT )[], "related_vulnerabilities" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "resource_id" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "resource_tags" STRUCT( "comparison" VARCHAR, "key" VARCHAR, "value" VARCHAR )[], "resource_type" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "severity" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "title" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "updated_at" STRUCT( "end_inclusive" TIMESTAMP_S, "start_inclusive" TIMESTAMP_S )[], "vendor_severity" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "vulnerability_id" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "vulnerability_source" STRUCT( "comparison" VARCHAR, "value" VARCHAR )[], "vulnerable_packages" STRUCT( "architecture" STRUCT( "comparison" VARCHAR, "value" VARCHAR ), "epoch" STRUCT( "lower_inclusive" DOUBLE, "upper_inclusive" DOUBLE ), "name" STRUCT( "comparison" VARCHAR, "value" VARCHAR ), "release" STRUCT( "comparison" VARCHAR, "value" VARCHAR ), "source_lambda_layer_arn" STRUCT( "comparison" VARCHAR, "value" VARCHAR ), "source_layer_hash" STRUCT( "comparison" VARCHAR, "value" VARCHAR ), "version" STRUCT( "comparison" VARCHAR, "value" VARCHAR ) )[] )
Show child fields criteria.aws_account_id[] Show child fields criteria.aws_account_id[].comparison The operator to use when comparing values in the filter. criteria.aws_account_id[].value The value to filter on. criteria.code_vulnerability_detector_name[] Show child fields criteria.code_vulnerability_detector_name[].comparison The operator to use when comparing values in the filter. criteria.code_vulnerability_detector_name[].value The value to filter on. criteria.code_vulnerability_detector_tags[] Show child fields criteria.code_vulnerability_detector_tags[].comparison The operator to use when comparing values in the filter. criteria.code_vulnerability_detector_tags[].value The value to filter on. criteria.code_vulnerability_file_path[] Show child fields criteria.code_vulnerability_file_path[].comparison The operator to use when comparing values in the filter. criteria.code_vulnerability_file_path[].value The value to filter on. criteria.component_id[] Show child fields criteria.component_id[].comparison The operator to use when comparing values in the filter. criteria.component_id[].value The value to filter on. criteria.component_type[] Show child fields criteria.component_type[].comparison The operator to use when comparing values in the filter. criteria.component_type[].value The value to filter on. criteria.ec2_instance_image_id[] Show child fields criteria.ec2_instance_image_id[].comparison The operator to use when comparing values in the filter. criteria.ec2_instance_image_id[].value The value to filter on. criteria.ec2_instance_subnet_id[] Show child fields criteria.ec2_instance_subnet_id[].comparison The operator to use when comparing values in the filter. criteria.ec2_instance_subnet_id[].value The value to filter on. criteria.ec2_instance_vpc_id[] Show child fields criteria.ec2_instance_vpc_id[].comparison The operator to use when comparing values in the filter. criteria.ec2_instance_vpc_id[].value The value to filter on. criteria.ecr_image_architecture[] Show child fields criteria.ecr_image_architecture[].comparison The operator to use when comparing values in the filter. criteria.ecr_image_architecture[].value The value to filter on. criteria.ecr_image_hash[] Show child fields criteria.ecr_image_hash[].comparison The operator to use when comparing values in the filter. criteria.ecr_image_hash[].value The value to filter on. criteria.ecr_image_pushed_at[] Show child fields criteria.ecr_image_pushed_at[].end_inclusive A timestamp representing the end of the time period filtered on. criteria.ecr_image_pushed_at[].start_inclusive A timestamp representing the start of the time period filtered on. criteria.ecr_image_registry[] Show child fields criteria.ecr_image_registry[].comparison The operator to use when comparing values in the filter. criteria.ecr_image_registry[].value The value to filter on. criteria.ecr_image_repository_name[] Show child fields criteria.ecr_image_repository_name[].comparison The operator to use when comparing values in the filter. criteria.ecr_image_repository_name[].value The value to filter on. criteria.ecr_image_tags[] Show child fields criteria.ecr_image_tags[].comparison The operator to use when comparing values in the filter. criteria.ecr_image_tags[].value The value to filter on. criteria.epss_score[] Show child fields criteria.epss_score[].lower_inclusive The lowest number to be included in the filter. criteria.epss_score[].upper_inclusive The highest number to be included in the filter. criteria.exploit_available[] Show child fields criteria.exploit_available[].comparison The operator to use when comparing values in the filter. criteria.exploit_available[].value The value to filter on. criteria.finding_arn[] Show child fields criteria.finding_arn[].comparison The operator to use when comparing values in the filter. criteria.finding_arn[].value The value to filter on. criteria.finding_status[] Show child fields criteria.finding_status[].comparison The operator to use when comparing values in the filter. criteria.finding_status[].value The value to filter on. criteria.finding_type[] Show child fields criteria.finding_type[].comparison The operator to use when comparing values in the filter. criteria.finding_type[].value The value to filter on. criteria.first_observed_at[] Show child fields criteria.first_observed_at[].end_inclusive A timestamp representing the end of the time period filtered on. criteria.first_observed_at[].start_inclusive A timestamp representing the start of the time period filtered on. criteria.fix_available[] Show child fields criteria.fix_available[].comparison The operator to use when comparing values in the filter. criteria.fix_available[].value The value to filter on. criteria.inspector_score[] Show child fields criteria.inspector_score[].lower_inclusive The lowest number to be included in the filter. criteria.inspector_score[].upper_inclusive The highest number to be included in the filter. criteria.lambda_function_execution_role_arn[] Show child fields criteria.lambda_function_execution_role_arn[].comparison The operator to use when comparing values in the filter. criteria.lambda_function_execution_role_arn[].value The value to filter on. criteria.lambda_function_last_modified_at[] Show child fields criteria.lambda_function_last_modified_at[].end_inclusive A timestamp representing the end of the time period filtered on. criteria.lambda_function_last_modified_at[].start_inclusive A timestamp representing the start of the time period filtered on. criteria.lambda_function_layers[] Show child fields criteria.lambda_function_layers[].comparison The operator to use when comparing values in the filter. criteria.lambda_function_layers[].value The value to filter on. criteria.lambda_function_name[] Show child fields criteria.lambda_function_name[].comparison The operator to use when comparing values in the filter. criteria.lambda_function_name[].value The value to filter on. criteria.lambda_function_runtime[] Show child fields criteria.lambda_function_runtime[].comparison The operator to use when comparing values in the filter. criteria.lambda_function_runtime[].value The value to filter on. criteria.last_observed_at[] Show child fields criteria.last_observed_at[].end_inclusive A timestamp representing the end of the time period filtered on. criteria.last_observed_at[].start_inclusive A timestamp representing the start of the time period filtered on. criteria.network_protocol[] Show child fields criteria.network_protocol[].comparison The operator to use when comparing values in the filter. criteria.network_protocol[].value The value to filter on. criteria.port_range[] Show child fields criteria.port_range[].begin_inclusive The port number the port range begins at. criteria.port_range[].end_inclusive The port number the port range ends at. criteria.related_vulnerabilities[] Show child fields criteria.related_vulnerabilities[].comparison The operator to use when comparing values in the filter. criteria.related_vulnerabilities[].value The value to filter on. criteria.resource_id[] Show child fields criteria.resource_id[].comparison The operator to use when comparing values in the filter. criteria.resource_id[].value The value to filter on. criteria.resource_tags[] Show child fields criteria.resource_tags[].comparison The operator to use when comparing values in the filter. criteria.resource_tags[].key The tag key used in the filter. criteria.resource_tags[].value The tag value used in the filter. criteria.resource_type[] Show child fields criteria.resource_type[].comparison The operator to use when comparing values in the filter. criteria.resource_type[].value The value to filter on. criteria.severity[] Show child fields criteria.severity[].comparison The operator to use when comparing values in the filter. criteria.severity[].value The value to filter on. criteria.title[] Show child fields criteria.title[].comparison The operator to use when comparing values in the filter. criteria.title[].value The value to filter on. criteria.updated_at[] Show child fields criteria.updated_at[].end_inclusive A timestamp representing the end of the time period filtered on. criteria.updated_at[].start_inclusive A timestamp representing the start of the time period filtered on. criteria.vendor_severity[] Show child fields criteria.vendor_severity[].comparison The operator to use when comparing values in the filter. criteria.vendor_severity[].value The value to filter on. criteria.vulnerability_id[] Show child fields criteria.vulnerability_id[].comparison The operator to use when comparing values in the filter. criteria.vulnerability_id[].value The value to filter on. criteria.vulnerability_source[] Show child fields criteria.vulnerability_source[].comparison The operator to use when comparing values in the filter. criteria.vulnerability_source[].value The value to filter on. criteria.vulnerable_packages[] Show child fields criteria.vulnerable_packages[].architecture An object that contains details on the package architecture type to filter on. Show child fields criteria.vulnerable_packages[].architecture.comparison The operator to use when comparing values in the filter. criteria.vulnerable_packages[].architecture.value The value to filter on. criteria.vulnerable_packages[].epoch An object that contains details on the package epoch to filter on. Show child fields criteria.vulnerable_packages[].epoch.lower_inclusive The lowest number to be included in the filter. criteria.vulnerable_packages[].epoch.upper_inclusive The highest number to be included in the filter. criteria.vulnerable_packages[].name An object that contains details on the name of the package to filter on. Show child fields criteria.vulnerable_packages[].name.comparison The operator to use when comparing values in the filter. criteria.vulnerable_packages[].name.value The value to filter on. criteria.vulnerable_packages[].release An object that contains details on the package release to filter on. Show child fields criteria.vulnerable_packages[].release.comparison The operator to use when comparing values in the filter. criteria.vulnerable_packages[].release.value The value to filter on. criteria.vulnerable_packages[].source_lambda_layer_arn An object that describes the details of a string filter. Show child fields criteria.vulnerable_packages[].source_lambda_layer_arn.comparison The operator to use when comparing values in the filter. criteria.vulnerable_packages[].source_lambda_layer_arn.value The value to filter on. criteria.vulnerable_packages[].source_layer_hash An object that contains details on the source layer hash to filter on. Show child fields criteria.vulnerable_packages[].source_layer_hash.comparison The operator to use when comparing values in the filter. criteria.vulnerable_packages[].source_layer_hash.value The value to filter on. criteria.vulnerable_packages[].version The package version to filter on. Show child fields criteria.vulnerable_packages[].version.comparison The operator to use when comparing values in the filter. criteria.vulnerable_packages[].version.value The value to filter on.
description A description of the filter.	VARCHAR
name The name of the filter.	VARCHAR
owner_id The Amazon Web Services account ID of the account that created the filter.	VARCHAR
reason The reason for the filter.	VARCHAR
tags The tags attached to the filter.	MAP(VARCHAR, VARCHAR)
updated_at The date and time the filter was last updated at.	TIMESTAMP_S

Note

Tables may require input columns to have values specified before the table can return it’s rows. The values for input parameters are set in the where clause of the query typically using = or IN.