DnsRequestAction - Amazon GuardDuty
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

DnsRequestAction

Contains information about the DNS_REQUEST action described in this finding.

Contents

blocked

Indicates whether the targeted port is blocked.

Type: Boolean

Required: No

domain

The domain information for the DNS query.

Type: String

Required: No

domainWithSuffix

The second and top level domain involved in the activity that potentially prompted GuardDuty to generate this finding. For a list of top-level and second-level domains, see public suffix list.

Type: String

Required: No

protocol

The network connection protocol observed in the activity that prompted GuardDuty to generate the finding.

Type: String

Required: No

vpcOwnerAccountId

The AWS account ID that owns the VPC through which the DNS request was made.

Type: String

Length Constraints: Fixed length of 12.

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: