AWS S3 Bucket Tables

Tables

AWSS3BucketAnalytics

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
FilterPredicate	string	Corresponds to the `Filter` (AnalyticsFilter) in the API. Specifies which objects to include (via prefix, tag, or an `AND` combination).
StorageClassAnalysisDataExportDestinationBucketAccountID	string	Maps to `BucketAccountId` under `S3BucketDestination` in the DataExport configuration. Specifies the AWS account ID owning the destination bucket.
StorageClassAnalysisDataExportDestinationBucketName	string	Maps to Bucket (the destination bucket) in the exported data configuration—can be ARN or bucket name.
StorageClassAnalysisDataExportDestinationBucketFormat	string	Maps to `Format` (e.g., `CSV`) used in `S3BucketDestination` to specify file format of exported analytics.
StorageClassAnalysisDataExportDestinationBucketPrefix	string	Maps to `Prefix` within destination bucket, specifying folder path where exported analytics CSV files are stored.
StorageClassAnalysisDataExportOutputSchemaVersion	string	Maps to `OutputSchemaVersion` (typically `V_1`) under `DataExport`. Defines schema version of export file.
IsEnabled	bit	A custom flag indicating whether the analytics configuration is active or `disabled`.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketCORSRules

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
AllowedHeadersJson	string	A JSON array specifying the `HTTP` request headers that the origin can include in requests to the S3 bucket. `*` allows all headers.
AllowedMethodsJson	string	A JSON array listing the `HTTP` methods (e.g., `GET`, `PUT`, `POST`) that are allowed when accessing the bucket from the specified origins.
AllowedOriginsJson	string	A JSON array of origins (e.g., `https://example.com`) that are permitted to make cross-origin requests to the bucket. `*` allows all origins.
ExposeHeadersJson	string	A JSON array of response headers that are exposed to the application making the cross-origin request, enabling the client to read them.
MaxAgeSeconds	integer	The number of seconds a browser can cache the results of a preflight request for the specified resource, reducing the need for repeated OPTIONS requests.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketIntelligentTierings

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
Status	string	Indicates whether the S3 Intelligent-Tiering configuration is `enabled` or `disabled`. When `enabled`, S3 automatically moves objects between tiers based on access patterns.
FilterPredicate	string	Specifies the filter conditions (prefix, tags, or a combination) that determine which objects are included in the Intelligent-Tiering configuration.
TiersJson	string	A JSON array defining the tiers used in the configuration (e.g., `Frequent Access`, `Infrequent Access`, `Archive Access`), along with transition and monitoring rules.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketInventoryConfigurations

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
InventoryDestinationBucketAccountID	string	The AWS account ID of the owner of the destination bucket where the inventory reports are stored.
InventoryDestinationBucketName	string	The name or ARN of the destination S3 bucket that receives the inventory report files.
InventoryOptionalFieldsJson	string	A JSON array of optional fields to include in the inventory report (e.g., `Size`, `LastModifiedDate`, `StorageClass`, `ETag`, `ReplicationStatus`)
InventoryDestinationBucketInventoryEncryptionSSEKMSKeyID	string	The AWS KMS key ID to use for server-side encryption of the inventory report when encryption is set to `SSE-KMS`.
InventoryDestinationBucketInventoryEncryptionSSES3	string	A flag indicating that Amazon S3 should use `SSE-S3` encryption for the inventory report objects.
InventoryDestinationBucketInventoryFormat	string	The output format for the inventory report, such as `CSV` or `ORC`.
InventoryDestinationBucketPrefix	string	The key prefix used within the destination bucket to organize the inventory report files.
InventoryFilterPredicate	string	The filter (prefix, tags, or combination) specifying which objects to include in the inventory results.
InventoryIncludedObjectVersions	string	Specifies whether the inventory report includes all object versions (`All`) or only the current versions (`Current`).
InventoryScheduleFrequency	string	How often the inventory report is generated, such as `Daily` or `Weekly`.
IsEnabled	bit	Indicates whether the inventory configuration is active (`true`) or inactive (`false`).
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketLifecycleRuleNoncurrentVersionTransitions

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
NoncurrentDays	integer	The number of days an object version remains noncurrent before it is transitioned to the specified storage class.
NewerNoncurrentVersions	integer	The number of newer noncurrent versions to retain; older noncurrent versions beyond this count are subject to the transition action.
StorageClass	string	The storage class (e.g., `GLACIER`, `STANDARD_IA`, `DEEP_ARCHIVE`) to which the noncurrent object versions will be transitioned.
AWSS3BucketLifecycleRuleID	string	The identifier for the lifecycle rule that applies this noncurrent version transition policy.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketLifecycleRules

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
AbortIncompleteMultipartUploadDaysAfterInitiation	integer	The number of days after a multipart upload is initiated that Amazon S3 will abort the upload if it remains incomplete.
Status	string	Indicates whether the lifecycle rule is `enabled` (`enabled`) or `disabled` (`disabled`).
FilterPredicate	string	Specifies the filter conditions (prefix, tags, or a combination) that determine which objects the lifecycle rule applies to.
ExpirationDate	datetime	A specific date when the objects covered by the lifecycle rule will expire and be permanently deleted.
ExpirationDays	integer	The number of days from object creation until the object expires and is deleted.
ExpirationExpiredObjectDeleteMarker	bit	A flag indicating whether to remove delete markers when no current object versions exist (used for versioned buckets).
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketLifecycleRuleTransitions

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
Date	datetime	The specific date when the object transition to a different storage class should occur.
DateUtc	datetime	The `UTC` timestamp representation of the transition date.
Days	integer	The number of days after object creation when the transition to the specified storage class should occur.
StorageClass	string	The storage class (e.g., `GLACIER`, `STANDARD_IA`, `DEEP_ARCHIVE`) to which the noncurrent object versions will be transitioned.
AWSS3BucketLifecycleRuleID	string	The identifier for the lifecycle rule that applies this noncurrent version transition policy.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketNotificationLambdas

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
FunctionARN	string	The Amazon Resource Name (ARN) of the AWS Lambda function to invoke when specified S3 events occur.
EventTypesJson	string	A JSON array specifying the S3 event types (e.g., `s3:ObjectCreated:`, `s3:ObjectRemoved:`) that trigger the Lambda.
FilterJson	string	A JSON object defining filters (such as prefix or suffix conditions) to restrict which objects trigger the Lambda.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketNotificationQueues

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
Queue	string	The Amazon Resource Name (ARN) of the Amazon SQS queue to which notifications are sent when specified S3 events occur.
EventTypesJson	string	A JSON array specifying the S3 event types (e.g., `s3:ObjectCreated:`, `s3:ObjectRemoved:`) that trigger the notifications.
FilterJson	string	A JSON object defining filters (such as prefix or suffix conditions) to restrict which objects trigger the notifications.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketNotificationTopics

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
Topic	string	The Amazon Resource Name (ARN) of the Amazon SNS topic to which notifications are sent when specified S3 events occur.
EventTypesJson	string	A JSON array specifying the S3 event types (e.g., `s3:ObjectCreated:`, `s3:ObjectRemoved:`) that trigger the notifications.
FilterJson	string	A JSON object defining filters (such as prefix or suffix conditions) to restrict which objects trigger the notifications.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketReplicationRules

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	string	Unique internal identifier for the application instance record.
Status	string	The status of the replication rule, either `enabled` or `disabled`.
Prefix	string	The object key prefix that identifies the subset of objects to which the rule applies.
FilterPrefix	string	The prefix filter used to select objects for replication (used when Filter is a simple prefix).
FilterAndPrefix	string	The prefix used inside a filter that combines prefix and tag conditions (part of a complex filter).
Priority	integer	The priority of the replication rule, used to resolve conflicts when multiple rules apply.
DeleteMarkerReplicationStatus	string	Indicates whether delete markers are replicated (`enabled` or `disabled`).
SourceSelectionReplicaModificationsStatus	string	Status of replica modifications for the source bucket, typically `enabled` or `disabled`.
SourceSelectionCriteriaSseKmsEncryptedObjectsStatus	string	Indicates if replication applies to `SSE-KMS` encrypted objects (`enabled` or `disabled`).
DestinationBucketARN	string	The Amazon Resource Name (ARN) of the destination bucket where objects are replicated.
DestinationStorageClass	string	The storage class for the replicated objects (e.g., `STANDARD`, `STANDARD_IA`).
DestinationAccessControlTranslationOwner	string	The owner of the replicated object, used when access control translation is applied (e.g., `Destination` or `Source`).
DestinationAccountID	string	AWS account ID of the destination bucket owner, useful when replicating across accounts.
DestinationEncryptionConfigurationReplicaKmsKeyID	string	The AWS `KMS` key ID used to encrypt replicated objects in the destination bucket.
DestinationMetricEventThresholdMinutes	integer	The time threshold in minutes for replication metrics events.
DestinationMetricStatus	string	The status of replication metrics (e.g., `enabled` or `disabled`).
DestinationReplicationTimeStatus	string	The status of replication time control (e.g., `enabled` or `disabled`).
DestinationReplicationTimeMinutes	integer	The time in minutes within which replication is guaranteed to be completed when replication time control is `enabled`.
ExistingObjectReplicationStatus	string	Indicates whether existing objects in the source bucket are replicated (`enabled` or `disabled`).
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3BucketRoutingRules

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
ConditionHttpErrorCodeReturnedEquals	string	Specifies the `HTTP` error code (e.g., `404`) that triggers the redirect when matched in the condition.
ConditionKeyPrefixEquals	string	Defines the object key prefix that, when matched, triggers the redirect.
RedirectHostName	string	The hostname to which requests are redirected.
RedirectHttpRedirectCode	string	The `HTTP` status code to use for the redirect (e.g., `301`, `302`).
RedirectProtocol	string	The protocol to use for the redirect (`HTTP` or `HTTP`s).
RedirectReplaceKeyPrefixWith	string	Replaces the matched key prefix with this string in the redirect request.
RedirectReplaceKeyWith	string	Replaces the entire object key with this string for the redirect request.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3Buckets

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
BucketARN	string	The Amazon Resource Name (ARN) that uniquely identifies the S3 bucket.
BucketName	string	The name of the S3 bucket.
BucketRegion	string	The AWS region where the bucket is hosted (e.g., `us-east-1`).
CreationDate	datetime	The date and time when the bucket was created.
LoggingTargetBucketName	string	The target bucket name where access logs are stored if logging is `enabled`.
LoggingTargetPrefix	string	The prefix applied to the keys of the log files stored in the target bucket.
TransitionDefaultMinimumObjectSize	string	The default minimum object size (in bytes) for lifecycle transitions.
ReplicationConfigurationRole	string	The IAM role ARN used by S3 to perform replication actions.
VersioningEnableMFADelete	bit	Indicates whether MFA delete is `enabled` for versioning (`true` or `false`).
BlockPublicAcls	bit	Whether public ACLs are blocked on the bucket (`true` or `false`).
IgnorePublicAcls	bit	Whether public ACLs are ignored on the bucket (`true` or `false`).
BlockPublicPolicy	bit	Whether the bucket blocks public bucket policies (`true` or `false`).
RestrictPublicBuckets	bit	Whether the bucket restricts public bucket policies (`true` or `false`).
Policy	string	The JSON bucket policy attached to the bucket.
VersioningStatus	string	The versioning state of the bucket (`enabled`, `Suspended`, or `disabled`).
OwnershipControlsJson	string	JSON representation of bucket ownership controls (e.g., `BucketOwnerPreferred`).
WebsiteConfigurationRedirectHttpRequestCode	string	`HTTP` response code used for website redirect (e.g., `301`).
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.
AccelerateStatus	string	Indicates if Transfer Acceleration is `enabled` (`enabled` or `Suspended`).
LoggingTargetObjectKeyFormatPartitionedPrefixDateSource	string	Format string for partitioned log keys based on date source.
LoggingTargetObjectKeyFormatSimplePrefix	string	Format string for simple log key prefixes.
NotificationEventBridgeConfiguration	string	Configuration for sending S3 events to Amazon EventBridge.
PolicyIsPublic	bit	Flag indicating whether the bucket policy allows public access (`true` or `false`).
WebsiteConfigurationErrorDocument	string	The name of the error document for website hosting.
WebsiteConfigurationIndexDocumentSuffix	string	The suffix for the index document for website hosting (e.g., `index.html`).
WebsiteConfigurationRedirectAllRequestsToHostName	string	Hostname to which all website requests are redirected.
WebsiteConfigurationRedirectAllRequestsToProtocol	string	Protocol (e.g., `HTTP`, `HTTPS`) used in website redirect configuration.
WebsiteConfigurationRedirectReplaceKeyPrefixWith	string	Prefix string to replace key prefix in redirects.
WebsiteConfigurationRedirectReplaceKeyWith	string	String to replace the entire key in redirects.
OutpostID	string	The ID of the AWS Outposts bucket, if applicable.
PublicAccessBlockEnabled	bit	Indicates if public access block settings are `enabled` for the bucket (`true` or `false`).

AWSS3BucketServerSideEncryptionRules

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
ServerSideEncryptionAlgorithm	string	The server-side encryption algorithm used for objects in the bucket (e.g., `AES256`, `aws:kms`).
ServerSideEncryptionKeyManagementServiceKeyID	string	The AWS KMS key ID or ARN used for server-side encryption when the algorithm is `aws:kms`.
BucketKeyEnabled	bit	Indicates whether S3 Bucket Keys are enabled to reduce KMS request costs for server-side encryption with AWS KMS (`true` or `false`).
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3ControlAccessPoints

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
AccessPointARN	string	The Amazon Resource Name (ARN) that uniquely identifies the S3 Access Point.
Alias	string	A unique alias assigned to the access point for simplified access.
DataSourceID	string	An internal or external identifier for the data source associated with the access point.
DataSourceType	string	The type of data source associated with the access point (e.g., `S3Bucket`).
Name	string	The name of the S3 Access Point.
NetworkOrigin	string	Indicates whether the access point is accessible through the internet (Internet) or restricted to a VPC (VPC).
VPCID	string	The ID of the Amazon VPC associated with the access point if NetworkOrigin is set to VPC.
EndpointsJson	string	A JSON structure listing the endpoints associated with the access point.
BlockPublicAcls	bit	Whether public ACLs are blocked for the access point (`true` or `false`).
IgnorePublicAcls	bit	Whether public ACLs are ignored for the access point (`true` or `false`).
BlockPublicPolicy	bit	Whether the access point blocks public bucket policies (`true` or `false`).
RestrictPublicBuckets	bit	Whether the access point restricts public bucket policies (`true` or `false`).
CreationDate	datetime	The date and time the access point was created.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
AWSS3BucketConfigID	integer	A unique identifier used to reference a specific configuration associated with the S3 bucket. Often used to correlate bucket settings, rules, or integrations within AWS or external systems.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3ControlBatchJobs

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
JobID	string	The unique identifier for the batch job.
JobARN	string	The Amazon Resource Name (ARN) that uniquely identifies the batch job.
Status	string	The current status of the batch job (e.g., `Active`, `Complete`, `Failed`, `Suspended`).
StatusUpdateReason	string	A brief message or reason describing why the job status last changed.
ConfirmationRequired	bit	Indicates whether the job requires explicit confirmation before running (`true` or `false`).
Priority	integer	The priority assigned to the job, used to determine execution order when multiple jobs are queued.
CreationTime	datetime	The date and time when the batch job was created.
CompletionTime	datetime	The date and time when the batch job finished executing.
TerminationDate	datetime	The date and time when the job was terminated before completion.
SuspendedDate	datetime	The date and time when the job was suspended.
SuspendedCause	string	A message describing the reason the job was suspended.
Description	string	A user-defined description of the batch job’s purpose or scope.
RoleARN	string	The ARN of the IAM role that S3 Batch Operations assumes to run the job.
ProgressTotalNumberOfTasks	bigint	The total number of tasks that the batch job will perform.
ProgressNumberOfTasksSucceeded	bigint	The number of tasks completed successfully so far.
ProgressNumberOfTasksFailed	bigint	The number of tasks that failed to complete successfully.
ReportEnabled	bit	Indicates whether a job-completion report is generated (`true` or `false`).
ReportBucket	string	The name or ARN of the S3 bucket where the job report is stored.
ReportPrefix	string	The key prefix for storing job report files in the destination bucket.
ReportFormat	string	The format of the job report (e.g., `CSV`, `JSON`).
ReportScope	string	The scope of the job report, defining which results are included (e.g., `AllTasks`, `FailedTasksOnly`).
ManifestSpecFormat	string	The format of the manifest that lists the objects for the job (e.g., `S3InventoryReport`).
ManifestSpecFieldsJson	string	A JSON array listing the fields to include in the manifest.
ManifestLocationObjectARN	string	The ARN of the S3 object containing the manifest file.
ManifestLocationObjectVersionID	string	The version ID of the manifest object if versioning is enabled.
ManifestLocationETag	string	The ETag value of the manifest object used for integrity verification.
ManifestGeneratorJson	string	A JSON object specifying how the manifest is generated.
OperationJson	string	A JSON object describing the operation to perform on each object in the job (e.g., `copy`, `restore`, `tagging`).
FailureReasonsJson	string	A JSON array of reasons for job-level failures encountered during execution.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3ControlDataAccess

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
MatchedGrantTarget	string	The specific AWS resource or permission target that matched the granted access conditions.
AccessKeyID	string	The AWS access key ID provided for programmatic access to the resource.
SecretAccessKey	string	The AWS secret access key paired with the access key ID, used for signing requests.
SessionToken	string	The temporary session token associated with AWS temporary security credentials.
Expiration	datetime	The date and time when the temporary credentials expire.
GranteeIdentifier	string	The unique identifier of the entity (e.g., `IAM user`, `role`, or `account`) receiving access.
GranteeType	string	The type of grantee receiving the access, such as `CanonicalUser`, A`WSAccount`, or `IAMRole`.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3ControlMRAPRegions

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
Region	string	The AWS region associated with the Multi-Region Access Point.
Bucket	string	The name of the S3 bucket linked to the Multi-Region Access Point in the specified region.
BucketAccountID	string	The AWS account ID that owns the bucket associated with the Multi-Region Access Point.
MRAPARN	string	The Amazon Resource Name (ARN) that uniquely identifies the Multi-Region Access Point.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3ControlMRAPRoutes

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
MRAPARN	string	The Amazon Resource Name (ARN) that uniquely identifies the Multi-Region Access Point.
Region	string	The AWS region that this route directs traffic to.
Bucket	string	The name of the S3 bucket in the specified region that receives routed traffic.
TrafficDialPercentage	float	The percentage of traffic directed to this region’s bucket from the Multi-Region Access Point.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3ControlMultiRegionAccessPoints

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
MRAPARN	string	The Amazon Resource Name (ARN) that uniquely identifies the Multi-Region Access Point.
Alias	string	A unique, user-friendly identifier assigned to the Multi-Region Access Point for easier reference.
Name	string	The name of the Multi-Region Access Point.
CreatedAt	datetime	The date and time when the Multi-Region Access Point was created.
BlockPublicAcls	bit	Indicates whether public access control lists (ACLs) for buckets in this access point are blocked.
IgnorePublicAcls	bit	Indicates whether public ACLs are ignored for the buckets in this access point.
BlockPublicPolicy	bit	Indicates whether public bucket policies are blocked for the Multi-Region Access Point.
RestrictPublicBuckets	bit	Indicates whether access to public buckets through the Multi-Region Access Point is restricted.
Policy	string	The resource policy JSON defining permissions for the Multi-Region Access Point.
PolicyIsPublic	bit	Indicates whether the Multi-Region Access Point’s resource policy grants public access.
Status	string	The current operational status of the Multi-Region Access Point (e.g., `READY`, `IN_PROGRESS`, `FAILED`).
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3ControlStorageLensConfigurations

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
StorageLensARN	string	The Amazon Resource Name (ARN) that uniquely identifies the S3 Storage Lens configuration.
ID	string	Unique internal identifier for the application instance record.
IsEnabled	bit	Indicates whether the Storage Lens configuration is active (true or false).
AccountLevelActivityMetricsIsEnabled	bit	Specifies whether account-level activity metrics are enabled in the Storage Lens configuration.
AccountLevelBucketLevelActivityMetricsIsEnabled	bit	Specifies whether bucket-level activity metrics are enabled for all buckets in the account.
AccountLevelBucketLevelPrefixLevelStorageMetricsSelection	string	Defines the selection of prefix-level storage metrics for bucket-level reporting.
DataExportS3BucketDestinationAccountID	string	The AWS account ID that owns the S3 bucket where Storage Lens data exports are delivered.
DataExportS3BucketDestinationARN	string	The Amazon Resource Name (ARN) of the S3 bucket that receives Storage Lens export data.
DataExportS3BucketDestinationFormat	string	The file format for the exported Storage Lens data (e.g., `CSV` or `Parquet`).
DataExportS3BucketDestinationOutputSchemaVersion	string	The schema version used for formatting the exported Storage Lens data.
DataExportS3BucketDestinationPrefix	string	An optional prefix for the export file path in the destination S3 bucket.
DataExportS3BucketDestinationSSES3	string	Indicates whether the exported data is encrypted using Amazon S3-managed keys (`SSE-S3`).
DataExportS3BucketDestinationSSEKMSKeyID	string	The AWS KMS key ID used for encrypting exported data when server-side encryption with AWS KMS (`SSE-KMS`) is specified.
DataExportCloudWatchMetricsIsEnabled	bit	Indicates whether Storage Lens metrics are also published to Amazon CloudWatch.
AWSOrgARN	string	The Amazon Resource Name (ARN) of the AWS Organization associated with the Storage Lens configuration.
AWSOrgOrganizationID	string	The unique identifier of the AWS Organization linked to the Storage Lens configuration.
IncludeJson	string	A JSON structure specifying buckets or regions to explicitly include in Storage Lens metrics.
ExcludeJson	string	A JSON structure specifying buckets or regions to exclude from Storage Lens metrics.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3ControlStorageLensGroups

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
StorageLensGroupARN	string	The Amazon Resource Name (ARN) that uniquely identifies the Storage Lens group.
HomeRegion	string	The AWS region where the Storage Lens group is managed and primarily operates.
Name	string	The name assigned to the Storage Lens group.
FilterJSON	string	A JSON structure defining the filter criteria (e.g., `buckets`, `regions`, or `tags`) for including resources in the group.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3Grants

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
GranteeCanonicalUser	string	The canonical user ID of the grantee for the S3 object or bucket.
GranteeDisplayName	string	The display name associated with the grantee’s AWS account.
GranteeEmailAddress	string	The email address of the grantee, if applicable (used for legacy email-based ACLs).
GranteeType	string	The type of grantee, such as `CanonicalUser`, `AmazonCustomerByEmail`, or `Group`.
GranteeURI	string	The URI of a predefined group (e.g., `http://acs.amazonaws.com/groups/global/AllUsers`) if the grantee is a group.
PermissionHeaderName	string	The name of the permission granted (e.g., `READ`, `WRITE`, `FULL_CONTROL`).
PermissionValue	string	The value of the granted permission.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
AWSS3BucketConfigID	integer	The unique identifier for the bucket configuration to which the grant applies.
AWSS3ObjectARN	string	The Amazon Resource Name (ARN) of the specific S3 object associated with the grant.
AWSS3ObjectConfigID	integer	The unique identifier for the object configuration to which the grant applies.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3Objects

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ARN	string	The Amazon Resource Name (ARN) that uniquely identifies the S3 object.
Key	string	The object key (name) within the bucket.
Size	bigint	The size of the object in bytes.
StorageClass	string	The storage class of the object (e.g., `STANDARD`, `STANDARD_IA`, `GLACIER`).
ETag	string	The entity tag (`ETag`) of the object, often used for integrity verification.
LastModified	datetime	The date and time when the object was last modified.
ChecksumCRC64NVME	string	The CRC64 checksum of the object calculated using NVMe hardware acceleration for data integrity.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.
ChecksumCRC32	string	The CRC32 checksum of the object, used to verify data integrity.
ChecksumCRC32C	string	The CRC32C checksum of the object, another form of integrity verification.
ChecksumSHA1	string	The SHA-1 checksum of the object for cryptographic integrity validation.
ChecksumSHA256	string	The SHA-256 checksum of the object for cryptographic integrity validation.
ChecksumType	string	The type of checksum used (e.g., `CRC32`, `CRC32C`, `SHA1`, `SHA256`).
DefaultRetentionDays	integer	The default number of days to retain the object under the bucket’s Object Lock configuration.
DefaultRetentionMode	string	The default Object Lock retention mode for objects (e.g., `GOVERNANCE` or `COMPLIANCE`).
DefaultRetentionYears	integer	The default number of years to retain the object under the bucket’s Object Lock configuration.
ObjectLockEnabled	string	Indicates whether Object Lock is enabled on the bucket (`true` or `false`).
ObjectLockLegalHoldStatus	string	The legal hold status of the object (`ON` or `OFF`).
ObjectLockRetainUntilDate	datetime	The date until which the object is protected by Object Lock retention.
ObjectLockRetentionMode	string	The retention mode applied to the object (`GOVERNANCE` or `COMPLIANCE`).
Owner	string	The AWS account or canonical user that owns the object.
AWSS3BucketConfigID	integer	The unique identifier of the bucket configuration associated with this object.

AWSS3Parts

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ARN	string	The Amazon Resource Name (ARN) that uniquely identifies the multipart upload object.
Key	string	The object key (name) of the multipart upload in the bucket.
UploadID	string	The unique identifier for the multipart upload session.
PartNumber	integer	The specific part number in the multipart upload sequence.
Size	bigint	The size of the individual part in bytes.
LastModified	datetime	The date and time when this part was last modified or uploaded.
AWSS3BucketConfigID	integer	The unique identifier of the bucket configuration associated with this object.
AWSS3BucketARN	string	The source bucket’s ARN where analytics is configured.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3TableBuckets

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
TableBucketARN	string	The Amazon Resource Name (ARN) that uniquely identifies the S3 Table bucket.
TableBucketID	string	A unique identifier for the table bucket.
Name	string	The name of the table bucket.
CreatedAt	datetime	The date and time when the table bucket was created.
OwnerAccountID	string	The AWS account ID of the bucket owner.
Type	string	The type of table bucket, e.g., `STANDARD`, `INTELLIGENT_TIERING`.
KMSKeyARN	string	The ARN of the AWS KMS key used for server-side encryption.
SSEAlgorithm	string	The server-side encryption algorithm applied to the bucket (e.g., `AES256`, `aws:kms`).
ResourcePolicyJson	string	The JSON representation of the bucket policy attached to the table bucket.
MaintenanceConfigurationJson	string	JSON configuration for maintenance tasks associated with the table bucket, such as backups or optimization operations.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3TableNamespaces

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
NamespaceID	string	A unique identifier for the table namespace.
TableBucketARN	string	The Amazon Resource Name (ARN) of the table bucket associated with this namespace.
CreatedAt	datetime	The date and time when the namespace was created.
CreatedBy	string	The user, service, or process that created the namespace.
OwnerAccountID	string	The AWS account ID that owns the namespace.
TableBucketID	string	The unique identifier of the table bucket associated with this namespace.
NamespaceJson	string	JSON representation of the namespace configuration, including metadata and settings.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3Tables

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
TableARN	string	The Amazon Resource Name (ARN) that uniquely identifies the table.
TableBucketID	string	The unique identifier of the table bucket where the table resides.
Name	string	The name of the table.
CreatedAt	datetime	The date and time when the table was created.
CreatedBy	string	The user, service, or process that created the table.
ModifiedAt	datetime	The date and time when the table was last modified.
ModifiedBy	string	The user, service, or process that last modified the table.
Format	string	The data format used by the table (e.g., `PARQUET`, `CSV`, `JSON`).
ManagedByService	string	Indicates whether the table is managed by an AWS service (true or false).
MetadataLocation	string	The S3 location (bucket and prefix) where the table’s metadata is stored.
WarehouseLocation	string	The S3 location used as a warehouse or storage location for the table’s data.
VersionToken	string	A token representing the version of the table metadata or schema.
Type	string	The type of table, such as `EXTERNAL`, `MANAGED`, or `VIEW`.
OwnerAccountID	string	The AWS account ID that owns the table.
NamespaceID	string	The unique identifier of the namespace to which the table belongs.
NamespaceJson	string	JSON representation of the namespace associated with the table.
TableKMSKeyARN	string	The ARN of the AWS KMS key used for server-side encryption of the table data.
TableSSEAlgorithm	string	The server-side encryption algorithm applied to the table (e.g., `AES256`, `aws:kms`).
TableResourcePolicyJson	string	JSON representation of the resource policy attached to the table.
TableMaintenanceConfigurationJson	string	JSON configuration for table maintenance tasks, such as optimization, backups, or lifecycle operations.
MaintenanceJobStatusJson	string	JSON detailing the current or recent status of maintenance jobs for the table.
TableBucketARN	string	The Amazon Resource Name (ARN) of the table bucket associated with this table.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3VectorBuckets

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
VectorBucketARN	string	The Amazon Resource Name (ARN) that uniquely identifies the vector bucket.
VectorBucketName	string	The name of the vector bucket.
CreationTime	datetime	The date and time when the vector bucket was created.
VectorKMSKeyARN	string	The ARN of the AWS KMS key used for server-side encryption of the vector bucket data.
VectorSSEType	string	The server-side encryption type applied to the vector bucket (e.g., `AES256`, `aws:kms`).
VectorBucketPolicyJson	string	JSON representation of the bucket policy applied to the vector bucket.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3VectorIndexes

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
IndexARN	string	The Amazon Resource Name (ARN) that uniquely identifies the vector index.
VectorBucketARN	string	The ARN of the vector bucket associated with this index.
IndexName	string	The name of the vector index.
CreationTime	datetime	The date and time when the vector index was created.
DataType	string	The data type of the vectors stored in the index (e.g., `float32`, `int8`).
Dimensions	integer	The number of dimensions for each vector in the index.
DistanceMetric	string	The distance metric used for similarity searches (e.g., `COSINE`, `EUCLIDEAN`).
MetadataNonFilterableKeysJson	string	JSON array listing metadata keys that are stored but cannot be used as filters in search queries.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.

AWSS3Vectors

Name	Type	Description
ConfigID	integer	Internal configuration identifier used to track this record.
ID	integer	Unique internal identifier for the application instance record.
VectorKey	string	The unique key (identifier) for the vector within the vector bucket.
VectorDataFloat32Json	string	JSON array representing the vector’s numerical data in `float32` format.
MetadataJson	string	JSON object containing metadata associated with the vector, such as tags or custom attributes.
DefinitionJson	string	JSON object describing the vector’s schema, structure, or additional definition details.
VectorBucketARN	string	The ARN of the vector bucket where the vector is stored.
IndexARN	string	The ARN of the vector index associated with this vector, if indexed for similarity search.
BatchDate	datetime	The timestamp when the asset data was retrieved or recorded.