SecurityIncidentResponse / Paginator / ListInvestigations
ListInvestigations¶
- class SecurityIncidentResponse.Paginator.ListInvestigations¶
paginator = client.get_paginator('list_investigations')
- paginate(**kwargs)¶
Creates an iterator that will paginate through responses from
SecurityIncidentResponse.Client.list_investigations().See also: AWS API Documentation
Request Syntax
response_iterator = paginator.paginate( caseId='string', PaginationConfig={ 'MaxItems': 123, 'PageSize': 123, 'StartingToken': 'string' } )
- Parameters:
caseId (string) –
[REQUIRED]
Investigation performed by an agent for a security incident per caseID
PaginationConfig (dict) –
A dictionary that provides parameters to control pagination.
MaxItems (integer) –
The total number of items to return. If the total number of items available is more than the value specified in max-items then a
NextTokenwill be provided in the output that you can use to resume pagination.PageSize (integer) –
The size of each page.
StartingToken (string) –
A token to specify where to start paginating. This is the
NextTokenfrom a previous response.
- Return type:
dict
- Returns:
Response Syntax
{ 'investigationActions': [ { 'investigationId': 'string', 'actionType': 'Evidence'|'Investigation'|'Summarization', 'title': 'string', 'content': 'string', 'status': 'Pending'|'InProgress'|'Waiting'|'Completed'|'Failed'|'Cancelled', 'lastUpdated': datetime(2015, 1, 1), 'feedback': { 'usefulness': 'USEFUL'|'NOT_USEFUL', 'comment': 'string', 'submittedAt': datetime(2015, 1, 1) } }, ], 'NextToken': 'string' }
Response Structure
(dict) –
investigationActions (list) –
Investigation performed by an agent for a security incid…Unique identifier for the specific investigation>
(dict) –
Represents an investigation action performed within a case. This structure captures the details of an automated or manual investigation, including its status, results, and user feedback.
investigationId (string) –
The unique identifier for this investigation action. This ID is used to track and reference the specific investigation throughout its lifecycle.
actionType (string) –
The type of investigation action being performed. This categorizes the investigation method or approach used in the case.
title (string) –
Human-readable summary of the investigation focus. This provides a brief description of what the investigation is examining or analyzing.
content (string) –
Detailed investigation results in rich markdown format. This field contains the comprehensive findings, analysis, and conclusions from the investigation.
status (string) –
The current execution status of the investigation. This indicates whether the investigation is pending, in progress, completed, or failed.
lastUpdated (datetime) –
ISO 8601 timestamp of the most recent status update. This indicates when the investigation was last modified or when its status last changed.
feedback (dict) –
User feedback for this investigation result. This contains the user’s assessment and comments about the quality and usefulness of the investigation findings.
usefulness (string) –
User assessment of the investigation result’s quality and helpfulness. This rating indicates how valuable the investigation findings were in addressing the case.
comment (string) –
Optional user comments providing additional context about the investigation feedback. This allows users to explain their rating or provide suggestions for improvement.
submittedAt (datetime) –
ISO 8601 timestamp when the feedback was submitted. This records when the user provided their assessment of the investigation results.
NextToken (string) –
A token to resume pagination.