Struct aws_sdk_auditmanager::model::SourceKeyword

#[non_exhaustive]
pub struct SourceKeyword {
    pub keyword_input_type: Option<KeywordInputType>,
    pub keyword_value: Option<String>,
}

The keyword to search for in CloudTrail logs, Config rules, Security Hub checks, and Amazon Web Services API names.

Fields (Non-exhaustive)

Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.

keyword_input_type: Option<KeywordInputType>

The input method for the keyword.

keyword_value: Option<String>

The value of the keyword that's used when mapping a control data source. For example, this can be a CloudTrail event name, a rule name for Config, a Security Hub control, or the name of an Amazon Web Services API call.

If you’re mapping a data source to a rule in Config, the keywordValue that you specify depends on the type of rule:

• For managed rules, you can use the rule identifier as the keywordValue. You can find the rule identifier from the list of Config managed rules.

  • Managed rule name: s3-bucket-acl-prohibited

    keywordValue: S3_BUCKET_ACL_PROHIBITED

• For custom rules, you form the keywordValue by adding the Custom_ prefix to the rule name. This prefix distinguishes the rule from a managed rule.

  • Custom rule name: my-custom-config-rule

    keywordValue: Custom_my-custom-config-rule

• For service-linked rules, you form the keywordValue by adding the Custom_ prefix to the rule name. In addition, you remove the suffix ID that appears at the end of the rule name.

  • Service-linked rule name: CustomRuleForAccount-conformance-pack-szsm1uv0w

    keywordValue: Custom_CustomRuleForAccount-conformance-pack

  • Service-linked rule name: securityhub-api-gw-cache-encrypted-101104e1

    keywordValue: Custom_securityhub-api-gw-cache-encrypted

  • Service-linked rule name: OrgConfigRule-s3-bucket-versioning-enabled-dbgzf8ba

    keywordValue: Custom_OrgConfigRule-s3-bucket-versioning-enabled

Implementations

impl SourceKeyword

pub fn keyword_input_type(&self) -> Option<&KeywordInputType>

The input method for the keyword.

pub fn keyword_value(&self) -> Option<&str>

The value of the keyword that's used when mapping a control data source. For example, this can be a CloudTrail event name, a rule name for Config, a Security Hub control, or the name of an Amazon Web Services API call.

If you’re mapping a data source to a rule in Config, the keywordValue that you specify depends on the type of rule:

• For managed rules, you can use the rule identifier as the keywordValue. You can find the rule identifier from the list of Config managed rules.

  • Managed rule name: s3-bucket-acl-prohibited

    keywordValue: S3_BUCKET_ACL_PROHIBITED

• For custom rules, you form the keywordValue by adding the Custom_ prefix to the rule name. This prefix distinguishes the rule from a managed rule.

  • Custom rule name: my-custom-config-rule

    keywordValue: Custom_my-custom-config-rule

• For service-linked rules, you form the keywordValue by adding the Custom_ prefix to the rule name. In addition, you remove the suffix ID that appears at the end of the rule name.

  • Service-linked rule name: CustomRuleForAccount-conformance-pack-szsm1uv0w

    keywordValue: Custom_CustomRuleForAccount-conformance-pack

  • Service-linked rule name: securityhub-api-gw-cache-encrypted-101104e1

    keywordValue: Custom_securityhub-api-gw-cache-encrypted

  • Service-linked rule name: OrgConfigRule-s3-bucket-versioning-enabled-dbgzf8ba

    keywordValue: Custom_OrgConfigRule-s3-bucket-versioning-enabled

impl SourceKeyword

pub fn builder() -> Builder

Creates a new builder-style object to manufacture SourceKeyword.

Trait Implementations

impl Clone for SourceKeyword

fn clone(&self) -> SourceKeyword

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SourceKeyword

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq<SourceKeyword> for SourceKeyword

fn eq(&self, other: &SourceKeyword) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &SourceKeyword) -> bool

This method tests for !=.

impl StructuralPartialEq for SourceKeyword