Amazon Detective · Schema

StartInvestigationRequest

Request to start an investigation

ForensicsInvestigationSecurity

Properties

Name Type Description
GraphArn string The ARN of the behavior graph.
EntityArn string The unique Amazon Resource Name (ARN) of the IAM user and IAM role.
ScopeStartTime string The data and time when the investigation began.
ScopeEndTime string The data and time when the investigation ended.
View JSON Schema on GitHub

JSON Schema

amazon-detective-start-investigation-request-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-detective/refs/heads/main/json-schema/amazon-detective-start-investigation-request-schema.json",
  "title": "StartInvestigationRequest",
  "description": "Request to start an investigation",
  "type": "object",
  "properties": {
    "GraphArn": {
      "type": "string",
      "description": "The ARN of the behavior graph.",
      "example": "arn:aws:detective:us-east-1:123456789012:graph:abc123def456"
    },
    "EntityArn": {
      "type": "string",
      "description": "The unique Amazon Resource Name (ARN) of the IAM user and IAM role.",
      "example": "arn:aws:iam::123456789012:user/jsmith"
    },
    "ScopeStartTime": {
      "type": "string",
      "format": "date-time",
      "description": "The data and time when the investigation began.",
      "example": "2025-01-01T00:00:00Z"
    },
    "ScopeEndTime": {
      "type": "string",
      "format": "date-time",
      "description": "The data and time when the investigation ended.",
      "example": "2025-01-15T23:59:59Z"
    }
  },
  "required": [
    "GraphArn",
    "EntityArn",
    "ScopeStartTime",
    "ScopeEndTime"
  ]
}