Detective / Client / start_investigation

start_investigation#

Detective.Client.start_investigation(**kwargs)#

initiate an investigation on an entity in a graph

See also: AWS API Documentation

Request Syntax

response = client.start_investigation(
    GraphArn='string',
    EntityArn='string',
    ScopeStartTime=datetime(2015, 1, 1),
    ScopeEndTime=datetime(2015, 1, 1)
)
Parameters:

  • GraphArn (string) –

    [REQUIRED]

    The ARN of the behavior graph.

  • EntityArn (string) –

    [REQUIRED]

    The unique Amazon Resource Name (ARN) of the IAM user and IAM role.

  • ScopeStartTime (datetime) –

    [REQUIRED]

    The data and time when the investigation began. The value is an UTC ISO8601 formatted string. For example, 2021-08-18T16:35:56.284Z.

  • ScopeEndTime (datetime) –

    [REQUIRED]

    The data and time when the investigation began. The value is an UTC ISO8601 formatted string. For example, 2021-08-18T16:35:56.284Z.

Return type:

dict

Returns:

Response Syntax

{
    'InvestigationId': 'string'
}

Response Structure

  • (dict) –

    • InvestigationId (string) –

      The investigation ID of the investigation report.

Exceptions

  • Detective.Client.exceptions.AccessDeniedException

  • Detective.Client.exceptions.InternalServerException

  • Detective.Client.exceptions.ValidationException

  • Detective.Client.exceptions.TooManyRequestsException

  • Detective.Client.exceptions.ResourceNotFoundException