Struct rusoto_guardduty::CreateFilterRequest

pub struct CreateFilterRequest {
    pub action: Option<String>,
    pub client_token: Option<String>,
    pub description: Option<String>,
    pub detector_id: String,
    pub finding_criteria: FindingCriteria,
    pub name: String,
    pub rank: Option<i64>,
    pub tags: Option<HashMap<String, String>>,
}

Fields

action: Option<String>

Specifies the action that is to be applied to the findings that match the filter.

client_token: Option<String>

The idempotency token for the create request.

description: Option<String>

The description of the filter.

detector_id: String

The unique ID of the detector of the GuardDuty account that you want to create a filter for.

finding_criteria: FindingCriteria

Represents the criteria to be used in the filter for querying findings.

You can only use the following attributes to query findings:

• accountId

• region

• confidence

• id

• resource.accessKeyDetails.accessKeyId

• resource.accessKeyDetails.principalId

• resource.accessKeyDetails.userName

• resource.accessKeyDetails.userType

• resource.instanceDetails.iamInstanceProfile.id

• resource.instanceDetails.imageId

• resource.instanceDetails.instanceId

• resource.instanceDetails.outpostArn

• resource.instanceDetails.networkInterfaces.ipv6Addresses

• resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress

• resource.instanceDetails.networkInterfaces.publicDnsName

• resource.instanceDetails.networkInterfaces.publicIp

• resource.instanceDetails.networkInterfaces.securityGroups.groupId

• resource.instanceDetails.networkInterfaces.securityGroups.groupName

• resource.instanceDetails.networkInterfaces.subnetId

• resource.instanceDetails.networkInterfaces.vpcId

• resource.instanceDetails.tags.key

• resource.instanceDetails.tags.value

• resource.resourceType

• service.action.actionType

• service.action.awsApiCallAction.api

• service.action.awsApiCallAction.callerType

• service.action.awsApiCallAction.remoteIpDetails.city.cityName

• service.action.awsApiCallAction.remoteIpDetails.country.countryName

• service.action.awsApiCallAction.remoteIpDetails.ipAddressV4

• service.action.awsApiCallAction.remoteIpDetails.organization.asn

• service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg

• service.action.awsApiCallAction.serviceName

• service.action.dnsRequestAction.domain

• service.action.networkConnectionAction.blocked

• service.action.networkConnectionAction.connectionDirection

• service.action.networkConnectionAction.localPortDetails.port

• service.action.networkConnectionAction.protocol

• service.action.networkConnectionAction.localIpDetails.ipAddressV4

• service.action.networkConnectionAction.remoteIpDetails.city.cityName

• service.action.networkConnectionAction.remoteIpDetails.country.countryName

• service.action.networkConnectionAction.remoteIpDetails.ipAddressV4

• service.action.networkConnectionAction.remoteIpDetails.organization.asn

• service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg

• service.action.networkConnectionAction.remotePortDetails.port

• service.additionalInfo.threatListName

• service.archived

  When this attribute is set to TRUE, only archived findings are listed. When it's set to FALSE, only unarchived findings are listed. When this attribute is not set, all existing findings are listed.

• service.resourceRole

• severity

• type

• updatedAt

  Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds.

name: String

The name of the filter.

rank: Option<i64>

Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.

tags: Option<HashMap<String, String>>

The tags to be added to a new filter resource.

Trait Implementations

impl Clone for CreateFilterRequest

pub fn clone(&self) -> CreateFilterRequest

Returns a copy of the value.

pub fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CreateFilterRequest

pub fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for CreateFilterRequest

pub fn default() -> CreateFilterRequest

Returns the "default value" for a type.

impl PartialEq<CreateFilterRequest> for CreateFilterRequest

pub fn eq(&self, other: &CreateFilterRequest) -> bool

This method tests for self and other values to be equal, and is used by ==.

pub fn ne(&self, other: &CreateFilterRequest) -> bool

This method tests for !=.

impl Serialize for CreateFilterRequest

pub fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error> where
    __S: Serializer, 

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CreateFilterRequest