ScanSetting - AWS Backup
This documentation is a draft for private preview for regions in the AWS European Sovereign Cloud. Documentation content will continue to evolve. Published: January 8, 2026.

ScanSetting

Contains configuration settings for malware scanning, including the scanner type, target resource types, and scanner role.

Contents

MalwareScanner

The malware scanner to use for scanning. Currently only GUARDDUTY is supported.

Type: String

Valid Values: GUARDDUTY

Required: No

ResourceTypes

An array of resource types to be scanned for malware.

Type: Array of strings

Pattern: ^[a-zA-Z0-9\-\_\.]{1,50}$

Required: No

ScannerRoleArn

The Amazon Resource Name (ARN) of the IAM role that the scanner uses to access resources; for example, arn:aws:iam::123456789012:role/ScannerRole.

Type: String

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: