Struct aws_sdk_securitylake::operation::create_custom_log_source::builders::CreateCustomLogSourceFluentBuilder

pub struct CreateCustomLogSourceFluentBuilder { /* private fields */ }

Fluent builder constructing a request to CreateCustomLogSource.

Adds a third-party custom source in Amazon Security Lake, from the Amazon Web Services Region where you want to create a custom source. Security Lake can collect logs and events from third-party custom sources. After creating the appropriate IAM role to invoke Glue crawler, use this API to add a custom source name in Security Lake. This operation creates a partition in the Amazon S3 bucket for Security Lake as the target location for log files from the custom source. In addition, this operation also creates an associated Glue table and an Glue crawler.

Implementations

impl CreateCustomLogSourceFluentBuilder

pub fn as_input(&self) -> &CreateCustomLogSourceInputBuilder

Access the CreateCustomLogSource as a reference.

pub async fn send( self ) -> Result<CreateCustomLogSourceOutput, SdkError<CreateCustomLogSourceError, HttpResponse>>

Sends the request and returns the response.

If an error occurs, an SdkError will be returned with additional details that can be matched against.

By default, any retryable failures will be retried twice. Retry behavior is configurable with the RetryConfig, which can be set when configuring the client.

pub fn customize( self ) -> CustomizableOperation<CreateCustomLogSourceOutput, CreateCustomLogSourceError, Self>

Consumes this builder, creating a customizable operation that can be modified before being sent.

pub fn source_name(self, input: impl Into<String>) -> Self

Specify the name for a third-party custom source. This must be a Regionally unique value.

pub fn set_source_name(self, input: Option<String>) -> Self

Specify the name for a third-party custom source. This must be a Regionally unique value.

pub fn get_source_name(&self) -> &Option<String>

Specify the name for a third-party custom source. This must be a Regionally unique value.

pub fn source_version(self, input: impl Into<String>) -> Self

Specify the source version for the third-party custom source, to limit log collection to a specific version of custom data source.

pub fn set_source_version(self, input: Option<String>) -> Self

Specify the source version for the third-party custom source, to limit log collection to a specific version of custom data source.

pub fn get_source_version(&self) -> &Option<String>

Specify the source version for the third-party custom source, to limit log collection to a specific version of custom data source.

pub fn event_classes(self, input: impl Into<String>) -> Self

Appends an item to eventClasses.

To override the contents of this collection use set_event_classes.

The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake. The supported event classes are:

• ACCESS_ACTIVITY

• FILE_ACTIVITY

• KERNEL_ACTIVITY

• KERNEL_EXTENSION

• MEMORY_ACTIVITY

• MODULE_ACTIVITY

• PROCESS_ACTIVITY

• REGISTRY_KEY_ACTIVITY

• REGISTRY_VALUE_ACTIVITY

• RESOURCE_ACTIVITY

• SCHEDULED_JOB_ACTIVITY

• SECURITY_FINDING

• ACCOUNT_CHANGE

• AUTHENTICATION

• AUTHORIZATION

• ENTITY_MANAGEMENT_AUDIT

• DHCP_ACTIVITY

• NETWORK_ACTIVITY

• DNS_ACTIVITY

• FTP_ACTIVITY

• HTTP_ACTIVITY

• RDP_ACTIVITY

• SMB_ACTIVITY

• SSH_ACTIVITY

• CONFIG_STATE

• INVENTORY_INFO

• EMAIL_ACTIVITY

• API_ACTIVITY

• CLOUD_API

pub fn set_event_classes(self, input: Option<Vec<String>>) -> Self

The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake. The supported event classes are:

• ACCESS_ACTIVITY

• FILE_ACTIVITY

• KERNEL_ACTIVITY

• KERNEL_EXTENSION

• MEMORY_ACTIVITY

• MODULE_ACTIVITY

• PROCESS_ACTIVITY

• REGISTRY_KEY_ACTIVITY

• REGISTRY_VALUE_ACTIVITY

• RESOURCE_ACTIVITY

• SCHEDULED_JOB_ACTIVITY

• SECURITY_FINDING

• ACCOUNT_CHANGE

• AUTHENTICATION

• AUTHORIZATION

• ENTITY_MANAGEMENT_AUDIT

• DHCP_ACTIVITY

• NETWORK_ACTIVITY

• DNS_ACTIVITY

• FTP_ACTIVITY

• HTTP_ACTIVITY

• RDP_ACTIVITY

• SMB_ACTIVITY

• SSH_ACTIVITY

• CONFIG_STATE

• INVENTORY_INFO

• EMAIL_ACTIVITY

• API_ACTIVITY

• CLOUD_API

pub fn get_event_classes(&self) -> &Option<Vec<String>>

The Open Cybersecurity Schema Framework (OCSF) event classes which describes the type of data that the custom source will send to Security Lake. The supported event classes are:

• ACCESS_ACTIVITY

• FILE_ACTIVITY

• KERNEL_ACTIVITY

• KERNEL_EXTENSION

• MEMORY_ACTIVITY

• MODULE_ACTIVITY

• PROCESS_ACTIVITY

• REGISTRY_KEY_ACTIVITY

• REGISTRY_VALUE_ACTIVITY

• RESOURCE_ACTIVITY

• SCHEDULED_JOB_ACTIVITY

• SECURITY_FINDING

• ACCOUNT_CHANGE

• AUTHENTICATION

• AUTHORIZATION

• ENTITY_MANAGEMENT_AUDIT

• DHCP_ACTIVITY

• NETWORK_ACTIVITY

• DNS_ACTIVITY

• FTP_ACTIVITY

• HTTP_ACTIVITY

• RDP_ACTIVITY

• SMB_ACTIVITY

• SSH_ACTIVITY

• CONFIG_STATE

• INVENTORY_INFO

• EMAIL_ACTIVITY

• API_ACTIVITY

• CLOUD_API

pub fn configuration(self, input: CustomLogSourceConfiguration) -> Self

The configuration for the third-party custom source.

pub fn set_configuration( self, input: Option<CustomLogSourceConfiguration> ) -> Self

The configuration for the third-party custom source.

pub fn get_configuration(&self) -> &Option<CustomLogSourceConfiguration>

The configuration for the third-party custom source.

Trait Implementations

impl Clone for CreateCustomLogSourceFluentBuilder

fn clone(&self) -> CreateCustomLogSourceFluentBuilder

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CreateCustomLogSourceFluentBuilder

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.