com.mozilla.secops.parser.models.cloudwatch

Class CloudWatchEvent

java.lang.Object

com.mozilla.secops.parser.models.cloudwatch.CloudWatchEvent

All Implemented Interfaces:

Serializable

public class CloudWatchEvent
extends Object
implements Serializable

Describes the format of an AWS CloudWatch Event

See also https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/CloudWatchEventsandEventPatterns.html

See Also:

Serialized Form

Constructor Summary

Constructors

Constructor and Description
CloudWatchEvent()

Method Summary

Modifier and Type	Method and Description
String	getAccount() Get event AWS account id
Object	getDetail() Get event detail
String	getDetailType() Get event detail type, e.g.
String	getId() Get event id
String	getRegion() Get event AWS region
ArrayList<String>	getResources() Get event resources, typically in the form of ARNs
String	getSource() Get event source service, e.g.
String	getTime() Get event timestamp
String	getVersion() Get event message version

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CloudWatchEvent

public CloudWatchEvent()

Method Detail

getVersion

public String getVersion()

Get event message version

Returns:

String

getId

public String getId()

Get event id

Returns:

String

getDetailType

public String getDetailType()

Get event detail type, e.g. GuardDuty Finding, AWS Health Event, etc...

See also https://docs.aws.amazon.com/AmazonCloudWatch/latest/events/EventTypes.html

Returns:

String source ip

getSource

public String getSource()

Get event source service, e.g. aws.guardduty, aws.ec2, etc...

Returns:

String

getAccount

public String getAccount()

Get event AWS account id

Returns:

String

getTime

public String getTime()

Get event timestamp

Returns:

String

getRegion

public String getRegion()

Get event AWS region

Returns:

String

getResources

public ArrayList<String> getResources()

Get event resources, typically in the form of ARNs

Returns:

ArrayList<String>

getDetail

public Object getDetail()

Get event detail

This is a JSON format payload which must be parsed further in accordance to the "source" or "detail-type" of the CloudWatch Event

Returns:

Object