Struct aws_sdk_auditmanager::types::builders::EvidenceFinderEnablementBuilder

#[non_exhaustive]
pub struct EvidenceFinderEnablementBuilder { /* private fields */ }

A builder for EvidenceFinderEnablement.

Implementations

impl EvidenceFinderEnablementBuilder

pub fn event_data_store_arn(self, input: impl Into<String>) -> Self

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s used by evidence finder. The event data store is the lake of evidence data that evidence finder runs queries against.

pub fn set_event_data_store_arn(self, input: Option<String>) -> Self

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s used by evidence finder. The event data store is the lake of evidence data that evidence finder runs queries against.

pub fn get_event_data_store_arn(&self) -> &Option<String>

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s used by evidence finder. The event data store is the lake of evidence data that evidence finder runs queries against.

pub fn enablement_status(self, input: EvidenceFinderEnablementStatus) -> Self

The current status of the evidence finder feature and the related event data store.

• ENABLE_IN_PROGRESS means that you requested to enable evidence finder. An event data store is currently being created to support evidence finder queries.

• ENABLED means that an event data store was successfully created and evidence finder is enabled. We recommend that you wait 7 days until the event data store is backfilled with your past two years’ worth of evidence data. You can use evidence finder in the meantime, but not all data might be available until the backfill is complete.

• DISABLE_IN_PROGRESS means that you requested to disable evidence finder, and your request is pending the deletion of the event data store.

• DISABLED means that you have permanently disabled evidence finder and the event data store has been deleted. You can't re-enable evidence finder after this point.

pub fn set_enablement_status( self, input: Option<EvidenceFinderEnablementStatus> ) -> Self

The current status of the evidence finder feature and the related event data store.

• ENABLE_IN_PROGRESS means that you requested to enable evidence finder. An event data store is currently being created to support evidence finder queries.

• ENABLED means that an event data store was successfully created and evidence finder is enabled. We recommend that you wait 7 days until the event data store is backfilled with your past two years’ worth of evidence data. You can use evidence finder in the meantime, but not all data might be available until the backfill is complete.

• DISABLE_IN_PROGRESS means that you requested to disable evidence finder, and your request is pending the deletion of the event data store.

• DISABLED means that you have permanently disabled evidence finder and the event data store has been deleted. You can't re-enable evidence finder after this point.

pub fn get_enablement_status(&self) -> &Option<EvidenceFinderEnablementStatus>

The current status of the evidence finder feature and the related event data store.

• ENABLE_IN_PROGRESS means that you requested to enable evidence finder. An event data store is currently being created to support evidence finder queries.

• ENABLED means that an event data store was successfully created and evidence finder is enabled. We recommend that you wait 7 days until the event data store is backfilled with your past two years’ worth of evidence data. You can use evidence finder in the meantime, but not all data might be available until the backfill is complete.

• DISABLE_IN_PROGRESS means that you requested to disable evidence finder, and your request is pending the deletion of the event data store.

• DISABLED means that you have permanently disabled evidence finder and the event data store has been deleted. You can't re-enable evidence finder after this point.

pub fn backfill_status(self, input: EvidenceFinderBackfillStatus) -> Self

The current status of the evidence data backfill process.

The backfill starts after you enable evidence finder. During this task, Audit Manager populates an event data store with your past two years’ worth of evidence data so that your evidence can be queried.

• NOT_STARTED means that the backfill hasn’t started yet.

• IN_PROGRESS means that the backfill is in progress. This can take up to 7 days to complete, depending on the amount of evidence data.

• COMPLETED means that the backfill is complete. All of your past evidence is now queryable.

pub fn set_backfill_status( self, input: Option<EvidenceFinderBackfillStatus> ) -> Self

The current status of the evidence data backfill process.

The backfill starts after you enable evidence finder. During this task, Audit Manager populates an event data store with your past two years’ worth of evidence data so that your evidence can be queried.

• NOT_STARTED means that the backfill hasn’t started yet.

• IN_PROGRESS means that the backfill is in progress. This can take up to 7 days to complete, depending on the amount of evidence data.

• COMPLETED means that the backfill is complete. All of your past evidence is now queryable.

pub fn get_backfill_status(&self) -> &Option<EvidenceFinderBackfillStatus>

The current status of the evidence data backfill process.

The backfill starts after you enable evidence finder. During this task, Audit Manager populates an event data store with your past two years’ worth of evidence data so that your evidence can be queried.

• NOT_STARTED means that the backfill hasn’t started yet.

• IN_PROGRESS means that the backfill is in progress. This can take up to 7 days to complete, depending on the amount of evidence data.

• COMPLETED means that the backfill is complete. All of your past evidence is now queryable.

pub fn error(self, input: impl Into<String>) -> Self

Represents any errors that occurred when enabling or disabling evidence finder.

pub fn set_error(self, input: Option<String>) -> Self

Represents any errors that occurred when enabling or disabling evidence finder.

pub fn get_error(&self) -> &Option<String>

Represents any errors that occurred when enabling or disabling evidence finder.

pub fn build(self) -> EvidenceFinderEnablement

Consumes the builder and constructs a EvidenceFinderEnablement.

Trait Implementations

impl Clone for EvidenceFinderEnablementBuilder

fn clone(&self) -> EvidenceFinderEnablementBuilder

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for EvidenceFinderEnablementBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for EvidenceFinderEnablementBuilder

fn default() -> EvidenceFinderEnablementBuilder

Returns the “default value” for a type.

impl PartialEq for EvidenceFinderEnablementBuilder

fn eq(&self, other: &EvidenceFinderEnablementBuilder) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl StructuralPartialEq for EvidenceFinderEnablementBuilder