Struct aws_sdk_securityhub::model::StringFilter
source · [−]#[non_exhaustive]pub struct StringFilter {
pub value: Option<String>,
pub comparison: Option<StringFilterComparison>,
}Expand description
A string filter for querying findings.
Fields (Non-exhaustive)
This struct is marked as non-exhaustive
Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.value: Option<String>The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you provide security hub as the filter text, then there is no match.
comparison: Option<StringFilterComparison>The condition to apply to a string value when querying for findings. To search for values that contain the filter criteria value, use one of the following comparison operators:
-
To search for values that exactly match the filter value, use
EQUALS.For example, the filter
ResourceType EQUALS AwsEc2SecurityGrouponly matches findings that have a resource type ofAwsEc2SecurityGroup. -
To search for values that start with the filter value, use
PREFIX.For example, the filter
ResourceType PREFIX AwsIammatches findings that have a resource type that starts withAwsIam. Findings with a resource type ofAwsIamPolicy,AwsIamRole, orAwsIamUserwould all match.
EQUALS and PREFIX filters on the same field are joined by OR. A finding matches if it matches any one of those filters.
To search for values that do not contain the filter criteria value, use one of the following comparison operators:
-
To search for values that do not exactly match the filter value, use
NOT_EQUALS.For example, the filter
ResourceType NOT_EQUALS AwsIamPolicymatches findings that have a resource type other thanAwsIamPolicy. -
To search for values that do not start with the filter value, use
PREFIX_NOT_EQUALS.For example, the filter
ResourceType PREFIX_NOT_EQUALS AwsIammatches findings that have a resource type that does not start withAwsIam. Findings with a resource type ofAwsIamPolicy,AwsIamRole, orAwsIamUserwould all be excluded from the results.
NOT_EQUALS and PREFIX_NOT_EQUALS filters on the same field are joined by AND. A finding matches only if it matches all of those filters.
For filters on the same field, you cannot provide both an EQUALS filter and a NOT_EQUALS or PREFIX_NOT_EQUALS filter. Combining filters in this way always returns an error, even if the provided filter values would return valid results.
You can combine PREFIX filters with NOT_EQUALS or PREFIX_NOT_EQUALS filters for the same field. Security Hub first processes the PREFIX filters, then the NOT_EQUALS or PREFIX_NOT_EQUALS filters.
For example, for the following filter, Security Hub first identifies findings that have resource types that start with either AwsIAM or AwsEc2. It then excludes findings that have a resource type of AwsIamPolicy and findings that have a resource type of AwsEc2NetworkInterface.
-
ResourceType PREFIX AwsIam -
ResourceType PREFIX AwsEc2 -
ResourceType NOT_EQUALS AwsIamPolicy -
ResourceType NOT_EQUALS AwsEc2NetworkInterface
Implementations
sourceimpl StringFilter
impl StringFilter
sourcepub fn value(&self) -> Option<&str>
pub fn value(&self) -> Option<&str>
The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you provide security hub as the filter text, then there is no match.
sourcepub fn comparison(&self) -> Option<&StringFilterComparison>
pub fn comparison(&self) -> Option<&StringFilterComparison>
The condition to apply to a string value when querying for findings. To search for values that contain the filter criteria value, use one of the following comparison operators:
-
To search for values that exactly match the filter value, use
EQUALS.For example, the filter
ResourceType EQUALS AwsEc2SecurityGrouponly matches findings that have a resource type ofAwsEc2SecurityGroup. -
To search for values that start with the filter value, use
PREFIX.For example, the filter
ResourceType PREFIX AwsIammatches findings that have a resource type that starts withAwsIam. Findings with a resource type ofAwsIamPolicy,AwsIamRole, orAwsIamUserwould all match.
EQUALS and PREFIX filters on the same field are joined by OR. A finding matches if it matches any one of those filters.
To search for values that do not contain the filter criteria value, use one of the following comparison operators:
-
To search for values that do not exactly match the filter value, use
NOT_EQUALS.For example, the filter
ResourceType NOT_EQUALS AwsIamPolicymatches findings that have a resource type other thanAwsIamPolicy. -
To search for values that do not start with the filter value, use
PREFIX_NOT_EQUALS.For example, the filter
ResourceType PREFIX_NOT_EQUALS AwsIammatches findings that have a resource type that does not start withAwsIam. Findings with a resource type ofAwsIamPolicy,AwsIamRole, orAwsIamUserwould all be excluded from the results.
NOT_EQUALS and PREFIX_NOT_EQUALS filters on the same field are joined by AND. A finding matches only if it matches all of those filters.
For filters on the same field, you cannot provide both an EQUALS filter and a NOT_EQUALS or PREFIX_NOT_EQUALS filter. Combining filters in this way always returns an error, even if the provided filter values would return valid results.
You can combine PREFIX filters with NOT_EQUALS or PREFIX_NOT_EQUALS filters for the same field. Security Hub first processes the PREFIX filters, then the NOT_EQUALS or PREFIX_NOT_EQUALS filters.
For example, for the following filter, Security Hub first identifies findings that have resource types that start with either AwsIAM or AwsEc2. It then excludes findings that have a resource type of AwsIamPolicy and findings that have a resource type of AwsEc2NetworkInterface.
-
ResourceType PREFIX AwsIam -
ResourceType PREFIX AwsEc2 -
ResourceType NOT_EQUALS AwsIamPolicy -
ResourceType NOT_EQUALS AwsEc2NetworkInterface
sourceimpl StringFilter
impl StringFilter
sourcepub fn builder() -> Builder
pub fn builder() -> Builder
Creates a new builder-style object to manufacture StringFilter
Trait Implementations
sourceimpl Clone for StringFilter
impl Clone for StringFilter
sourcefn clone(&self) -> StringFilter
fn clone(&self) -> StringFilter
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source. Read more
sourceimpl Debug for StringFilter
impl Debug for StringFilter
sourceimpl PartialEq<StringFilter> for StringFilter
impl PartialEq<StringFilter> for StringFilter
sourcefn eq(&self, other: &StringFilter) -> bool
fn eq(&self, other: &StringFilter) -> bool
This method tests for self and other values to be equal, and is used
by ==. Read more
sourcefn ne(&self, other: &StringFilter) -> bool
fn ne(&self, other: &StringFilter) -> bool
This method tests for !=.
impl StructuralPartialEq for StringFilter
Auto Trait Implementations
impl RefUnwindSafe for StringFilter
impl Send for StringFilter
impl Sync for StringFilter
impl Unpin for StringFilter
impl UnwindSafe for StringFilter
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcepub fn borrow_mut(&mut self) -> &mut T
pub fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<T> Instrument for T
impl<T> Instrument for T
sourcefn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
sourcefn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcepub fn to_owned(&self) -> T
pub fn to_owned(&self) -> T
Creates owned data from borrowed data, usually by cloning. Read more
sourcepub fn clone_into(&self, target: &mut T)
pub fn clone_into(&self, target: &mut T)
toowned_clone_into)Uses borrowed data to replace owned data, usually by cloning. Read more
sourceimpl<T> WithSubscriber for T
impl<T> WithSubscriber for T
sourcefn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
Attaches the provided Subscriber to this type, returning a
WithDispatch wrapper. Read more
sourcefn with_current_subscriber(self) -> WithDispatch<Self>
fn with_current_subscriber(self) -> WithDispatch<Self>
Attaches the current default Subscriber to this type, returning a
WithDispatch wrapper. Read more