steampipe plugin install awssteampipe plugin install aws

Table: aws_macie2_classification_job

A classification job, also referred to as a sensitive data discovery job, is a job that analyzes objects in Amazon Simple Storage Service (Amazon S3) buckets to determine whether the objects contain sensitive data. Each job uses managed data identifiers that Amazon Macie provides and, optionally, custom data identifiers that you create.

Examples

Basic info

select
  job_id,
  arn,
  name,
  job_status,
  region
from
  aws_macie2_classification_job;

Get S3 bucket details for each classification job

select
  job_id,
  detail -> 'AccountId' as account_id,
  detail -> 'Buckets' as buckets
from
  aws_macie2_classification_job,
  jsonb_array_elements(s3_job_definition -> 'BucketDefinitions') as detail;

List paused or cancelled classification jobs

select
  job_id,
  arn,
  name,
  job_status as status
from
  aws_macie2_classification_job
where
  job_status = 'CANCELLED'
  or job_status = 'PAUSED';

Get the number of times each classification job has run

select
  job_id,
  arn,
  statistics ->> 'ApproximateNumberOfObjectsToProcess' as approximate_number_of_objects_to_process,
  statistics ->> 'NumberOfRuns' as number_of_runs
from
  aws_macie2_classification_job;

.inspect aws_macie2_classification_job

AWS Macie2 Classification Job

Name	Type	Description
_ctx	jsonb	Steampipe context in JSON form, e.g. connection_name.
account_id	text	The AWS Account ID in which the resource is located.
akas	jsonb	Array of globally unique identifier strings (also known as) for the resource.
arn	text	The Amazon Resource Name (ARN) of the job.
bucket_definitions	jsonb	The namespace of the AWS service that provides the resource, or a custom-resource.
client_token	text	The token that was provided to ensure the idempotency of the request to create the job.
created_at	timestamp with time zone	The date and time, in UTC and extended ISO 8601 format, when the job was created.
custom_data_identifier_ids	jsonb	The custom data identifiers that the job uses to analyze data.
job_id	text	The unique identifier for the job.
job_status	text	The status of a classification job.
job_type	text	The schedule for running a classification job.
last_run_error_status	jsonb	Specifies whether any account- or bucket-level access errors occurred when a classification job ran.
last_run_time	timestamp with time zone	This value indicates when the most recent run started.
name	text	The custom name of the job.
partition	text	The AWS partition in which the resource is located (aws, aws-cn, or aws-us-gov).
region	text	The AWS Region in which the resource is located.
s3_job_definition	jsonb	Specifies which S3 buckets contain the objects that a classification job analyzes, and the scope of that analysis.
sampling_percentage	bigint	The sampling depth, as a percentage, that determines the percentage of eligible objects that the job analyzes.
schedule_frequency	jsonb	Specifies the recurrence pattern for running a classification job.
statistics	jsonb	Provides processing statistics for a classification job.
tags	jsonb	A map of tags for the resource.
title	text	Title of the resource.
user_paused_details	jsonb	Provides information about when a classification job was paused.

turbot/aws