| Guid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A unique identifier that is a combination of the GUID of the selected Scan and the AWS Account ID. |
| FSName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A special unique identifier that is a combination of the AccountName and the AWS Account ID. |
| AccountName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The friendly name given to the AWS account, as defined in AWS Organizations. |
| AwsAccountId |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The 12-digit AWS account ID. Equivalent to AccountId; stored for cross-reference purposes. |
| Email |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The email address associated with the root user of this AWS account. |
| Status |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The status of the account within the organization. Can be ACTIVE or SUSPENDED. |
| JoinedMethod |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
How the account joined the organization. Can be INVITED (accepted an invitation) or CREATED (created directly within the organization). |
| IsMasterAccount |
BOOLEAN |
N/A (toggle) |
Indicates whether this is the master (management) account of the AWS Organization. The master account has full control over all member accounts. |
| JoinedDate |
DATE |
SMALLER, LARGER, BETWEEN, EQUAL, IS_EMPTY |
The date and time when the account joined the AWS Organization. |
| ExposurePoint |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
A numerical value indicating the level of exposure based on the attack paths reaching this account. |
| risk |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
The risk score of the account calculated based on vulnerability counts and severities. |
| IsPrivileged |
BOOLEAN |
N/A (toggle) |
Whether the account is treated as privileged. An AWS account is always privileged: compromising it gives control of everything in it. |
