Skip to main content

drt_accesses_list_only

Lists drt_accesses in a region or regions, for all properties use drt_accesses

Overview

Namedrt_accesses_list_only
TypeResource
DescriptionConfig the role and list of Amazon S3 log buckets used by the Shield Response Team (SRT) to access your AWS account while assisting with attack mitigation.
Idaws.shield.drt_accesses_list_only

Fields

NameDatatypeDescription
account_idstring
log_bucket_listarrayAuthorizes the Shield Response Team (SRT) to access the specified Amazon S3 bucket containing log data such as Application Load Balancer access logs, CloudFront logs, or logs from third party sources. You can associate up to 10 Amazon S3 buckets with your subscription.
role_arnstringAuthorizes the Shield Response Team (SRT) using the specified role, to access your AWS account to assist with DDoS attack mitigation during potential attacks. This enables the SRT to inspect your AWS WAF configuration and create or update AWS WAF rules and web ACLs.
regionstringAWS region.

Methods

NameAccessible byRequired Params
list_resourcesSELECTregion

SELECT examples

Lists all drt_accesses in a region.

SELECT
region,
account_id
FROM aws.shield.drt_accesses_list_only
;

Permissions

For permissions required to operate on the drt_accesses_list_only resource, see drt_accesses