| Guid |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A unique identifier that is a combination of the GUID of the selected Scan and the SSO user’s unique ID. |
| FSName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
A special unique identifier that is a combination of the UserName and the Identity Store ID. |
| UserName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The user’s Identity Center sign-in name. |
| DisplayName |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The user’s full display name. |
| Email |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The primary email address on the Identity Store profile. |
| UserId |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The Identity Store user identifier assigned by AWS. |
| IdentityStoreId |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The identity store the user belongs to (e.g., d-1234567890). |
| AccountId |
TEXT |
LIKE, NOT_LIKE, EQUAL, NOT_EQUAL, IS_EMPTY |
The account that hosts the Identity Center instance the user belongs to. |
| AWSTier |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
Privilege tier of the user based on the effective permissions of its permission set assignments. Higher values indicate greater privilege. |
| ExposurePoint |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
A numerical value indicating the level of exposure based on how many other entities can reach this user through attack paths. |
| risk |
NUMBER |
EQUAL, BETWEEN, SMALLER, LARGER, SMALLER_EQUAL, LARGER_EQUAL |
The risk score of the user calculated based on vulnerability counts and severities. |
