Fleet uses osquery tables to query operating system, hardware, and software data. Each table provides specific data for analysis and filtering.
ec2_instance_metadata
EC2 instance metadata.
Column | Type | Description |
---|---|---|
account_id | text | AWS account ID which owns this EC2 instance |
ami_id | text | AMI ID used to launch this EC2 instance |
architecture | text | Hardware architecture of this EC2 instance |
availability_zone | text | Availability zone in which this instance launched |
iam_arn | text | If there is an IAM role associated with the instance, contains instance profile ARN |
instance_id | text | EC2 instance ID |
instance_type | text | EC2 instance type |
local_hostname | text | Private IPv4 DNS hostname of the first interface of this instance |
local_ipv4 | text | Private IPv4 address of the first interface of this instance |
mac | text | MAC address for the first network interface of this EC2 instance |
region | text | AWS region in which this instance launched |
reservation_id | text | ID of the reservation |
security_groups | text | Comma separated list of security group names |
ssh_public_key | text | SSH public key. Only available if supplied at instance launch time |
select * from ec2_instance_metadata