GetFindings C Example
#include <C_CkRest.h>
#include <C_CkAuthAws.h>
#include <C_CkJsonObject.h>
#include <C_CkStringBuilder.h>
void ChilkatSample(void)
{
HCkRest rest;
BOOL success;
HCkAuthAws authAws;
HCkJsonObject json;
HCkStringBuilder sbRequestBody;
HCkStringBuilder sbResponseBody;
int respStatusCode;
HCkJsonObject jResp;
const char *accountId;
const char *arn;
int confidence;
const char *createdAt;
const char *description;
const char *id;
const char *partition;
const char *region;
const char *AccessKeyId;
const char *PrincipalId;
const char *UserName;
const char *UserType;
const char *Arn;
int CreatedAt;
const char *Name;
const char *Status;
const char *VpcId;
const char *AvailabilityZone;
const char *IamInstanceProfileArn;
const char *Id;
const char *ImageDescription;
const char *ImageId;
const char *InstanceId;
const char *InstanceState;
const char *InstanceType;
const char *LaunchTime;
const char *OutpostArn;
const char *Platform;
const char *Uid;
const char *Username;
int HostNetwork;
const char *KubernetesWorkloadDetailsName;
const char *Namespace;
const char *v_Type;
const char *KubernetesWorkloadDetailsUid;
const char *ResourceType;
const char *schemaVersion;
const char *ActionType;
const char *Api;
const char *CallerType;
const char *Domain;
const char *ErrorCode;
const char *AccountId;
int Affiliated;
const char *CityName;
const char *CountryCode;
const char *CountryName;
int Lat;
int Lon;
const char *IpAddressV4;
const char *v_Asn;
const char *AsnOrg;
const char *Isp;
const char *Org;
const char *ServiceName;
const char *UserAgent;
const char *DnsRequestActionDomain;
const char *Parameters;
const char *CityCityName;
const char *CountryCountryCode;
const char *CountryCountryName;
int GeoLocationLat;
int GeoLocationLon;
const char *RemoteIpDetailsIpAddressV4;
const char *OrganizationAsn;
const char *OrganizationAsnOrg;
const char *OrganizationIsp;
const char *OrganizationOrg;
const char *RequestUri;
int StatusCode;
const char *KubernetesApiCallActionUserAgent;
const char *Verb;
int Blocked;
const char *ConnectionDirection;
const char *LocalIpDetailsIpAddressV4;
int Port;
const char *PortName;
const char *Protocol;
int RemotePortDetailsPort;
const char *RemotePortDetailsPortName;
int PortProbeActionBlocked;
int Archived;
int Count;
const char *DetectorId;
const char *EventFirstSeen;
const char *EventLastSeen;
const char *ResourceRole;
const char *serviceServiceName;
const char *UserFeedback;
int severity;
const char *title;
const char *v_type;
const char *updatedAt;
int j;
int count_j;
const char *key;
const char *value;
const char *networkInterfaceId;
const char *privateDnsName;
const char *privateIpAddress;
const char *publicDnsName;
const char *publicIp;
const char *subnetId;
const char *vpcId;
int k;
int count_k;
const char *strVal;
const char *groupId;
const char *groupName;
const char *code;
const char *productType;
const char *containerRuntime;
const char *image;
const char *imagePrefix;
const char *name;
int Privileged;
const char *mountPath;
const char *Path;
int createdAt_int;
const char *EncryptionType;
const char *KmsMasterKeyArn;
const char *ownerId;
const char *EffectivePermission;
int BlockPublicAcls;
int BlockPublicPolicy;
int IgnorePublicAcls;
int RestrictPublicBuckets;
int AllowsPublicReadAccess;
int AllowsPublicWriteAccess;
int BlockPublicAccessBlockPublicAcls;
int BlockPublicAccessBlockPublicPolicy;
int BlockPublicAccessIgnorePublicAcls;
int BlockPublicAccessRestrictPublicBuckets;
int BucketPolicyAllowsPublicReadAccess;
int BucketPolicyAllowsPublicWriteAccess;
const char *localIpDetailsIpAddressV4;
int localPortDetailsPort;
const char *localPortDetailsPortName;
const char *remoteIpDetailsIpAddressV4;
const char *threatListName;
int i;
int count_i;
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.
rest = CkRest_Create();
authAws = CkAuthAws_Create();
CkAuthAws_putAccessKey(authAws,"AWS_ACCESS_KEY");
CkAuthAws_putSecretKey(authAws,"AWS_SECRET_KEY");
// Don't forget to change the region to your particular region. (Also make the same change in the call to Connect below.)
CkAuthAws_putRegion(authAws,"us-west-2");
CkAuthAws_putServiceName(authAws,"guardduty");
// SetAuthAws causes Chilkat to automatically add the following headers: Authorization, X-Amz-Date
CkRest_SetAuthAws(rest,authAws);
// URL: https://guardduty.us-west-2.amazonaws.com/
// Use the same region as specified above.
success = CkRest_Connect(rest,"guardduty.us-west-2.amazonaws.com",443,TRUE,TRUE);
if (success != TRUE) {
printf("ConnectFailReason: %d\n",CkRest_getConnectFailReason(rest));
printf("%s\n",CkRest_lastErrorText(rest));
CkRest_Dispose(rest);
CkAuthAws_Dispose(authAws);
return;
}
// The following code creates the JSON request body.
// The JSON created by this code is shown below.
// Use this online tool to generate code from sample JSON:
// Generate Code to Create JSON
json = CkJsonObject_Create();
CkJsonObject_UpdateString(json,"findingIds[0]","string");
CkJsonObject_UpdateString(json,"sortCriteria.attributeName","string");
CkJsonObject_UpdateString(json,"sortCriteria.orderBy","string");
// The JSON request body created by the above code:
// {
// "findingIds": [
// "string"
// ],
// "sortCriteria": {
// "attributeName": "string",
// "orderBy": "string"
// }
// }
CkRest_AddHeader(rest,"Content-Type","application/x-amz-json-1.1");
CkRest_AddHeader(rest,"X-Amz-Target","GetFindings");
sbRequestBody = CkStringBuilder_Create();
CkJsonObject_EmitSb(json,sbRequestBody);
sbResponseBody = CkStringBuilder_Create();
success = CkRest_FullRequestSb(rest,"POST","/detector/{detectorId}/findings/get",sbRequestBody,sbResponseBody);
if (success != TRUE) {
printf("%s\n",CkRest_lastErrorText(rest));
CkRest_Dispose(rest);
CkAuthAws_Dispose(authAws);
CkJsonObject_Dispose(json);
CkStringBuilder_Dispose(sbRequestBody);
CkStringBuilder_Dispose(sbResponseBody);
return;
}
respStatusCode = CkRest_getResponseStatusCode(rest);
printf("response status code = %d\n",respStatusCode);
if (respStatusCode != 200) {
printf("Response Header:\n");
printf("%s\n",CkRest_responseHeader(rest));
printf("Response Body:\n");
printf("%s\n",CkStringBuilder_getAsString(sbResponseBody));
CkRest_Dispose(rest);
CkAuthAws_Dispose(authAws);
CkJsonObject_Dispose(json);
CkStringBuilder_Dispose(sbRequestBody);
CkStringBuilder_Dispose(sbResponseBody);
return;
}
jResp = CkJsonObject_Create();
CkJsonObject_LoadSb(jResp,sbResponseBody);
// The following code parses the JSON response.
// A sample JSON response is shown below the sample code.
// Use this online tool to generate parsing code from sample JSON:
// Generate Parsing Code from JSON
// Chilkat functions returning "const char *" return a pointer to temporary internal memory owned and managed by Chilkat.
// See this example explaining how this memory should be used: const char * functions.
i = 0;
count_i = CkJsonObject_SizeOfArray(jResp,"findings");
while (i < count_i) {
CkJsonObject_putI(jResp,i);
accountId = CkJsonObject_stringOf(jResp,"findings[i].accountId");
arn = CkJsonObject_stringOf(jResp,"findings[i].arn");
confidence = CkJsonObject_IntOf(jResp,"findings[i].confidence");
createdAt = CkJsonObject_stringOf(jResp,"findings[i].createdAt");
description = CkJsonObject_stringOf(jResp,"findings[i].description");
id = CkJsonObject_stringOf(jResp,"findings[i].id");
partition = CkJsonObject_stringOf(jResp,"findings[i].partition");
region = CkJsonObject_stringOf(jResp,"findings[i].region");
AccessKeyId = CkJsonObject_stringOf(jResp,"findings[i].resource.accessKeyDetails.accessKeyId");
PrincipalId = CkJsonObject_stringOf(jResp,"findings[i].resource.accessKeyDetails.principalId");
UserName = CkJsonObject_stringOf(jResp,"findings[i].resource.accessKeyDetails.userName");
UserType = CkJsonObject_stringOf(jResp,"findings[i].resource.accessKeyDetails.userType");
Arn = CkJsonObject_stringOf(jResp,"findings[i].resource.eksClusterDetails.arn");
CreatedAt = CkJsonObject_IntOf(jResp,"findings[i].resource.eksClusterDetails.createdAt");
Name = CkJsonObject_stringOf(jResp,"findings[i].resource.eksClusterDetails.name");
Status = CkJsonObject_stringOf(jResp,"findings[i].resource.eksClusterDetails.status");
VpcId = CkJsonObject_stringOf(jResp,"findings[i].resource.eksClusterDetails.vpcId");
AvailabilityZone = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.availabilityZone");
IamInstanceProfileArn = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.iamInstanceProfile.arn");
Id = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.iamInstanceProfile.id");
ImageDescription = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.imageDescription");
ImageId = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.imageId");
InstanceId = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.instanceId");
InstanceState = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.instanceState");
InstanceType = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.instanceType");
LaunchTime = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.launchTime");
OutpostArn = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.outpostArn");
Platform = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.platform");
Uid = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesUserDetails.uid");
Username = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesUserDetails.username");
HostNetwork = CkJsonObject_IntOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.hostNetwork");
KubernetesWorkloadDetailsName = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.name");
Namespace = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.namespace");
v_Type = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.type");
KubernetesWorkloadDetailsUid = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.uid");
ResourceType = CkJsonObject_stringOf(jResp,"findings[i].resource.resourceType");
schemaVersion = CkJsonObject_stringOf(jResp,"findings[i].schemaVersion");
ActionType = CkJsonObject_stringOf(jResp,"findings[i].service.action.actionType");
Api = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.api");
CallerType = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.callerType");
Domain = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.domainDetails.domain");
ErrorCode = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.errorCode");
AccountId = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteAccountDetails.accountId");
Affiliated = CkJsonObject_IntOf(jResp,"findings[i].service.action.awsApiCallAction.remoteAccountDetails.affiliated");
CityName = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.city.cityName");
CountryCode = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.country.countryCode");
CountryName = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.country.countryName");
Lat = CkJsonObject_IntOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.geoLocation.lat");
Lon = CkJsonObject_IntOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.geoLocation.lon");
IpAddressV4 = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.ipAddressV4");
v_Asn = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.organization.asn");
AsnOrg = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg");
Isp = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.organization.isp");
Org = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.remoteIpDetails.organization.org");
ServiceName = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.serviceName");
UserAgent = CkJsonObject_stringOf(jResp,"findings[i].service.action.awsApiCallAction.userAgent");
DnsRequestActionDomain = CkJsonObject_stringOf(jResp,"findings[i].service.action.dnsRequestAction.domain");
Parameters = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.parameters");
CityCityName = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.city.cityName");
CountryCountryCode = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.country.countryCode");
CountryCountryName = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.country.countryName");
GeoLocationLat = CkJsonObject_IntOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.geoLocation.lat");
GeoLocationLon = CkJsonObject_IntOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.geoLocation.lon");
RemoteIpDetailsIpAddressV4 = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.ipAddressV4");
OrganizationAsn = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.organization.asn");
OrganizationAsnOrg = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.organization.asnOrg");
OrganizationIsp = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.organization.isp");
OrganizationOrg = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.remoteIpDetails.organization.org");
RequestUri = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.requestUri");
StatusCode = CkJsonObject_IntOf(jResp,"findings[i].service.action.kubernetesApiCallAction.statusCode");
KubernetesApiCallActionUserAgent = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.userAgent");
Verb = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.verb");
Blocked = CkJsonObject_IntOf(jResp,"findings[i].service.action.networkConnectionAction.blocked");
ConnectionDirection = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.connectionDirection");
LocalIpDetailsIpAddressV4 = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.localIpDetails.ipAddressV4");
Port = CkJsonObject_IntOf(jResp,"findings[i].service.action.networkConnectionAction.localPortDetails.port");
PortName = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.localPortDetails.portName");
Protocol = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.protocol");
CityCityName = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.city.cityName");
CountryCountryCode = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.country.countryCode");
CountryCountryName = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.country.countryName");
GeoLocationLat = CkJsonObject_IntOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.geoLocation.lat");
GeoLocationLon = CkJsonObject_IntOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.geoLocation.lon");
RemoteIpDetailsIpAddressV4 = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.ipAddressV4");
OrganizationAsn = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.organization.asn");
OrganizationAsnOrg = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg");
OrganizationIsp = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.organization.isp");
OrganizationOrg = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remoteIpDetails.organization.org");
RemotePortDetailsPort = CkJsonObject_IntOf(jResp,"findings[i].service.action.networkConnectionAction.remotePortDetails.port");
RemotePortDetailsPortName = CkJsonObject_stringOf(jResp,"findings[i].service.action.networkConnectionAction.remotePortDetails.portName");
PortProbeActionBlocked = CkJsonObject_IntOf(jResp,"findings[i].service.action.portProbeAction.blocked");
Archived = CkJsonObject_IntOf(jResp,"findings[i].service.archived");
Count = CkJsonObject_IntOf(jResp,"findings[i].service.count");
DetectorId = CkJsonObject_stringOf(jResp,"findings[i].service.detectorId");
EventFirstSeen = CkJsonObject_stringOf(jResp,"findings[i].service.eventFirstSeen");
EventLastSeen = CkJsonObject_stringOf(jResp,"findings[i].service.eventLastSeen");
ResourceRole = CkJsonObject_stringOf(jResp,"findings[i].service.resourceRole");
serviceServiceName = CkJsonObject_stringOf(jResp,"findings[i].service.serviceName");
UserFeedback = CkJsonObject_stringOf(jResp,"findings[i].service.userFeedback");
severity = CkJsonObject_IntOf(jResp,"findings[i].severity");
title = CkJsonObject_stringOf(jResp,"findings[i].title");
v_type = CkJsonObject_stringOf(jResp,"findings[i].type");
updatedAt = CkJsonObject_stringOf(jResp,"findings[i].updatedAt");
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.eksClusterDetails.tags");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
key = CkJsonObject_stringOf(jResp,"findings[i].resource.eksClusterDetails.tags[j].key");
value = CkJsonObject_stringOf(jResp,"findings[i].resource.eksClusterDetails.tags[j].value");
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.instanceDetails.networkInterfaces");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
networkInterfaceId = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].networkInterfaceId");
privateDnsName = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].privateDnsName");
privateIpAddress = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].privateIpAddress");
publicDnsName = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].publicDnsName");
publicIp = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].publicIp");
subnetId = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].subnetId");
vpcId = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].vpcId");
k = 0;
count_k = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].ipv6Addresses");
while (k < count_k) {
CkJsonObject_putK(jResp,k);
strVal = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].ipv6Addresses[k]");
k = k + 1;
}
k = 0;
count_k = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].privateIpAddresses");
while (k < count_k) {
CkJsonObject_putK(jResp,k);
privateDnsName = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].privateIpAddresses[k].privateDnsName");
privateIpAddress = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].privateIpAddresses[k].privateIpAddress");
k = k + 1;
}
k = 0;
count_k = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].securityGroups");
while (k < count_k) {
CkJsonObject_putK(jResp,k);
groupId = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].securityGroups[k].groupId");
groupName = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.networkInterfaces[j].securityGroups[k].groupName");
k = k + 1;
}
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.instanceDetails.productCodes");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
code = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.productCodes[j].code");
productType = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.productCodes[j].productType");
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.instanceDetails.tags");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
key = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.tags[j].key");
value = CkJsonObject_stringOf(jResp,"findings[i].resource.instanceDetails.tags[j].value");
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.kubernetesDetails.kubernetesUserDetails.groups");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
strVal = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesUserDetails.groups[j]");
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
containerRuntime = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].containerRuntime");
id = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].id");
image = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].image");
imagePrefix = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].imagePrefix");
name = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].name");
Privileged = CkJsonObject_IntOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].securityContext.privileged");
k = 0;
count_k = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].volumeMounts");
while (k < count_k) {
CkJsonObject_putK(jResp,k);
mountPath = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].volumeMounts[k].mountPath");
name = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.containers[j].volumeMounts[k].name");
k = k + 1;
}
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.volumes");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
Path = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.volumes[j].hostPath.path");
name = CkJsonObject_stringOf(jResp,"findings[i].resource.kubernetesDetails.kubernetesWorkloadDetails.volumes[j].name");
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.s3BucketDetails");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
arn = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].arn");
createdAt_int = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].createdAt");
EncryptionType = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].defaultServerSideEncryption.encryptionType");
KmsMasterKeyArn = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].defaultServerSideEncryption.kmsMasterKeyArn");
name = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].name");
ownerId = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].owner.id");
EffectivePermission = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.effectivePermission");
BlockPublicAcls = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.accountLevelPermissions.blockPublicAccess.blockPublicAcls");
BlockPublicPolicy = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.accountLevelPermissions.blockPublicAccess.blockPublicPolicy");
IgnorePublicAcls = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.accountLevelPermissions.blockPublicAccess.ignorePublicAcls");
RestrictPublicBuckets = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.accountLevelPermissions.blockPublicAccess.restrictPublicBuckets");
AllowsPublicReadAccess = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.bucketLevelPermissions.accessControlList.allowsPublicReadAccess");
AllowsPublicWriteAccess = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.bucketLevelPermissions.accessControlList.allowsPublicWriteAccess");
BlockPublicAccessBlockPublicAcls = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.bucketLevelPermissions.blockPublicAccess.blockPublicAcls");
BlockPublicAccessBlockPublicPolicy = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.bucketLevelPermissions.blockPublicAccess.blockPublicPolicy");
BlockPublicAccessIgnorePublicAcls = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.bucketLevelPermissions.blockPublicAccess.ignorePublicAcls");
BlockPublicAccessRestrictPublicBuckets = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.bucketLevelPermissions.blockPublicAccess.restrictPublicBuckets");
BucketPolicyAllowsPublicReadAccess = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.bucketLevelPermissions.bucketPolicy.allowsPublicReadAccess");
BucketPolicyAllowsPublicWriteAccess = CkJsonObject_IntOf(jResp,"findings[i].resource.s3BucketDetails[j].publicAccess.permissionConfiguration.bucketLevelPermissions.bucketPolicy.allowsPublicWriteAccess");
v_type = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].type");
k = 0;
count_k = CkJsonObject_SizeOfArray(jResp,"findings[i].resource.s3BucketDetails[j].tags");
while (k < count_k) {
CkJsonObject_putK(jResp,k);
key = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].tags[k].key");
value = CkJsonObject_stringOf(jResp,"findings[i].resource.s3BucketDetails[j].tags[k].value");
k = k + 1;
}
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].service.action.kubernetesApiCallAction.sourceIps");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
strVal = CkJsonObject_stringOf(jResp,"findings[i].service.action.kubernetesApiCallAction.sourceIps[j]");
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].service.action.portProbeAction.portProbeDetails");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
localIpDetailsIpAddressV4 = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].localIpDetails.ipAddressV4");
localPortDetailsPort = CkJsonObject_IntOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].localPortDetails.port");
localPortDetailsPortName = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].localPortDetails.portName");
CityCityName = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.city.cityName");
CountryCountryCode = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.country.countryCode");
CountryCountryName = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.country.countryName");
GeoLocationLat = CkJsonObject_IntOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.geoLocation.lat");
GeoLocationLon = CkJsonObject_IntOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.geoLocation.lon");
remoteIpDetailsIpAddressV4 = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.ipAddressV4");
OrganizationAsn = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.organization.asn");
OrganizationAsnOrg = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.organization.asnOrg");
OrganizationIsp = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.organization.isp");
OrganizationOrg = CkJsonObject_stringOf(jResp,"findings[i].service.action.portProbeAction.portProbeDetails[j].remoteIpDetails.organization.org");
j = j + 1;
}
j = 0;
count_j = CkJsonObject_SizeOfArray(jResp,"findings[i].service.evidence.threatIntelligenceDetails");
while (j < count_j) {
CkJsonObject_putJ(jResp,j);
threatListName = CkJsonObject_stringOf(jResp,"findings[i].service.evidence.threatIntelligenceDetails[j].threatListName");
k = 0;
count_k = CkJsonObject_SizeOfArray(jResp,"findings[i].service.evidence.threatIntelligenceDetails[j].threatNames");
while (k < count_k) {
CkJsonObject_putK(jResp,k);
strVal = CkJsonObject_stringOf(jResp,"findings[i].service.evidence.threatIntelligenceDetails[j].threatNames[k]");
k = k + 1;
}
j = j + 1;
}
i = i + 1;
}
// A sample JSON response body parsed by the above code:
// {
// "findings": [
// {
// "accountId": "string",
// "arn": "string",
// "confidence": number,
// "createdAt": "string",
// "description": "string",
// "id": "string",
// "partition": "string",
// "region": "string",
// "resource": {
// "accessKeyDetails": {
// "accessKeyId": "string",
// "principalId": "string",
// "userName": "string",
// "userType": "string"
// },
// "eksClusterDetails": {
// "arn": "string",
// "createdAt": number,
// "name": "string",
// "status": "string",
// "tags": [
// {
// "key": "string",
// "value": "string"
// }
// ],
// "vpcId": "string"
// },
// "instanceDetails": {
// "availabilityZone": "string",
// "iamInstanceProfile": {
// "arn": "string",
// "id": "string"
// },
// "imageDescription": "string",
// "imageId": "string",
// "instanceId": "string",
// "instanceState": "string",
// "instanceType": "string",
// "launchTime": "string",
// "networkInterfaces": [
// {
// "ipv6Addresses": [
// "string"
// ],
// "networkInterfaceId": "string",
// "privateDnsName": "string",
// "privateIpAddress": "string",
// "privateIpAddresses": [
// {
// "privateDnsName": "string",
// "privateIpAddress": "string"
// }
// ],
// "publicDnsName": "string",
// "publicIp": "string",
// "securityGroups": [
// {
// "groupId": "string",
// "groupName": "string"
// }
// ],
// "subnetId": "string",
// "vpcId": "string"
// }
// ],
// "outpostArn": "string",
// "platform": "string",
// "productCodes": [
// {
// "code": "string",
// "productType": "string"
// }
// ],
// "tags": [
// {
// "key": "string",
// "value": "string"
// }
// ]
// },
// "kubernetesDetails": {
// "kubernetesUserDetails": {
// "groups": [
// "string"
// ],
// "uid": "string",
// "username": "string"
// },
// "kubernetesWorkloadDetails": {
// "containers": [
// {
// "containerRuntime": "string",
// "id": "string",
// "image": "string",
// "imagePrefix": "string",
// "name": "string",
// "securityContext": {
// "privileged": boolean
// },
// "volumeMounts": [
// {
// "mountPath": "string",
// "name": "string"
// }
// ]
// }
// ],
// "hostNetwork": boolean,
// "name": "string",
// "namespace": "string",
// "type": "string",
// "uid": "string",
// "volumes": [
// {
// "hostPath": {
// "path": "string"
// },
// "name": "string"
// }
// ]
// }
// },
// "resourceType": "string",
// "s3BucketDetails": [
// {
// "arn": "string",
// "createdAt": number,
// "defaultServerSideEncryption": {
// "encryptionType": "string",
// "kmsMasterKeyArn": "string"
// },
// "name": "string",
// "owner": {
// "id": "string"
// },
// "publicAccess": {
// "effectivePermission": "string",
// "permissionConfiguration": {
// "accountLevelPermissions": {
// "blockPublicAccess": {
// "blockPublicAcls": boolean,
// "blockPublicPolicy": boolean,
// "ignorePublicAcls": boolean,
// "restrictPublicBuckets": boolean
// }
// },
// "bucketLevelPermissions": {
// "accessControlList": {
// "allowsPublicReadAccess": boolean,
// "allowsPublicWriteAccess": boolean
// },
// "blockPublicAccess": {
// "blockPublicAcls": boolean,
// "blockPublicPolicy": boolean,
// "ignorePublicAcls": boolean,
// "restrictPublicBuckets": boolean
// },
// "bucketPolicy": {
// "allowsPublicReadAccess": boolean,
// "allowsPublicWriteAccess": boolean
// }
// }
// }
// },
// "tags": [
// {
// "key": "string",
// "value": "string"
// }
// ],
// "type": "string"
// }
// ]
// },
// "schemaVersion": "string",
// "service": {
// "action": {
// "actionType": "string",
// "awsApiCallAction": {
// "api": "string",
// "callerType": "string",
// "domainDetails": {
// "domain": "string"
// },
// "errorCode": "string",
// "remoteAccountDetails": {
// "accountId": "string",
// "affiliated": boolean
// },
// "remoteIpDetails": {
// "city": {
// "cityName": "string"
// },
// "country": {
// "countryCode": "string",
// "countryName": "string"
// },
// "geoLocation": {
// "lat": number,
// "lon": number
// },
// "ipAddressV4": "string",
// "organization": {
// "asn": "string",
// "asnOrg": "string",
// "isp": "string",
// "org": "string"
// }
// },
// "serviceName": "string",
// "userAgent": "string"
// },
// "dnsRequestAction": {
// "domain": "string"
// },
// "kubernetesApiCallAction": {
// "parameters": "string",
// "remoteIpDetails": {
// "city": {
// "cityName": "string"
// },
// "country": {
// "countryCode": "string",
// "countryName": "string"
// },
// "geoLocation": {
// "lat": number,
// "lon": number
// },
// "ipAddressV4": "string",
// "organization": {
// "asn": "string",
// "asnOrg": "string",
// "isp": "string",
// "org": "string"
// }
// },
// "requestUri": "string",
// "sourceIps": [
// "string"
// ],
// "statusCode": number,
// "userAgent": "string",
// "verb": "string"
// },
// "networkConnectionAction": {
// "blocked": boolean,
// "connectionDirection": "string",
// "localIpDetails": {
// "ipAddressV4": "string"
// },
// "localPortDetails": {
// "port": number,
// "portName": "string"
// },
// "protocol": "string",
// "remoteIpDetails": {
// "city": {
// "cityName": "string"
// },
// "country": {
// "countryCode": "string",
// "countryName": "string"
// },
// "geoLocation": {
// "lat": number,
// "lon": number
// },
// "ipAddressV4": "string",
// "organization": {
// "asn": "string",
// "asnOrg": "string",
// "isp": "string",
// "org": "string"
// }
// },
// "remotePortDetails": {
// "port": number,
// "portName": "string"
// }
// },
// "portProbeAction": {
// "blocked": boolean,
// "portProbeDetails": [
// {
// "localIpDetails": {
// "ipAddressV4": "string"
// },
// "localPortDetails": {
// "port": number,
// "portName": "string"
// },
// "remoteIpDetails": {
// "city": {
// "cityName": "string"
// },
// "country": {
// "countryCode": "string",
// "countryName": "string"
// },
// "geoLocation": {
// "lat": number,
// "lon": number
// },
// "ipAddressV4": "string",
// "organization": {
// "asn": "string",
// "asnOrg": "string",
// "isp": "string",
// "org": "string"
// }
// }
// }
// ]
// }
// },
// "archived": boolean,
// "count": number,
// "detectorId": "string",
// "eventFirstSeen": "string",
// "eventLastSeen": "string",
// "evidence": {
// "threatIntelligenceDetails": [
// {
// "threatListName": "string",
// "threatNames": [
// "string"
// ]
// }
// ]
// },
// "resourceRole": "string",
// "serviceName": "string",
// "userFeedback": "string"
// },
// "severity": number,
// "title": "string",
// "type": "string",
// "updatedAt": "string"
// }
// ]
// }
CkRest_Dispose(rest);
CkAuthAws_Dispose(authAws);
CkJsonObject_Dispose(json);
CkStringBuilder_Dispose(sbRequestBody);
CkStringBuilder_Dispose(sbResponseBody);
CkJsonObject_Dispose(jResp);
}
