Detective investigations lets you investigate IAM users and IAM roles using indicators of compromise. An indicator of compromise (IOC) is an artifact observed in or on a network, system, or environment that can (with a high level of confidence) identify malicious activity or a security incident. get_investigation
returns the investigation results of an investigation for a behavior graph.
See https://www.paws-r-sdk.com/docs/detective_get_investigation/ for full documentation.
detective_get_investigation(GraphArn, InvestigationId)
[required] The Amazon Resource Name (ARN) of the behavior graph.
[required] The investigation ID of the investigation report.