Struct rusoto_securityhub::StringFilter

pub struct StringFilter {
    pub comparison: Option<String>,
    pub value: Option<String>,
}

A string filter for querying findings.

Fields

comparison: Option<String>

The condition to apply to a string value when querying for findings. To search for values that contain the filter criteria value, use one of the following comparison operators:

• To search for values that exactly match the filter value, use EQUALS.

  For example, the filter ResourceType EQUALS AwsEc2SecurityGroup only matches findings that have a resource type of AwsEc2SecurityGroup.

• To search for values that start with the filter value, use PREFIX.

  For example, the filter ResourceType PREFIX AwsIam matches findings that have a resource type that starts with AwsIam. Findings with a resource type of AwsIamPolicy, AwsIamRole, or AwsIamUser would all match.

EQUALS and PREFIX filters on the same field are joined by OR. A finding matches if it matches any one of those filters.

To search for values that do not contain the filter criteria value, use one of the following comparison operators:

• To search for values that do not exactly match the filter value, use NOTEQUALS.

  For example, the filter ResourceType NOTEQUALS AwsIamPolicy matches findings that have a resource type other than AwsIamPolicy.

• To search for values that do not start with the filter value, use PREFIXNOTEQUALS.

  For example, the filter ResourceType PREFIXNOTEQUALS AwsIam matches findings that have a resource type that does not start with AwsIam. Findings with a resource type of AwsIamPolicy, AwsIamRole, or AwsIamUser would all be excluded from the results.

NOTEQUALS and PREFIXNOTEQUALS filters on the same field are joined by AND. A finding matches only if it matches all of those filters.

For filters on the same field, you cannot provide both an EQUALS filter and a NOTEQUALS or PREFIXNOTEQUALS filter. Combining filters in this way always returns an error, even if the provided filter values would return valid results.

You can combine PREFIX filters with NOTEQUALS or PREFIXNOTEQUALS filters for the same field. Security Hub first processes the PREFIX filters, then the NOTEQUALS or PREFIXNOTEQUALS filters.

For example, for the following filter, Security Hub first identifies findings that have resource types that start with either AwsIAM or AwsEc2. It then excludes findings that have a resource type of AwsIamPolicy and findings that have a resource type of AwsEc2NetworkInterface.

• ResourceType PREFIX AwsIam

• ResourceType PREFIX AwsEc2

• ResourceType NOTEQUALS AwsIamPolicy

• ResourceType NOTEQUALS AwsEc2NetworkInterface

value: Option<String>

The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub. If you provide security hub as the filter text, then there is no match.

Trait Implementations

impl Clone for StringFilter

pub fn clone(&self) -> StringFilter

Returns a copy of the value.

pub fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for StringFilter

pub fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for StringFilter

pub fn default() -> StringFilter

Returns the "default value" for a type.

impl<'de> Deserialize<'de> for StringFilter

pub fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
    __D: Deserializer<'de>, 

Deserialize this value from the given Serde deserializer.

impl PartialEq<StringFilter> for StringFilter

pub fn eq(&self, other: &StringFilter) -> bool

This method tests for self and other values to be equal, and is used by ==.

pub fn ne(&self, other: &StringFilter) -> bool

This method tests for !=.

impl Serialize for StringFilter

pub fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for StringFilter