Struct rusoto_securityhub::StringFilter
source · [−]Expand description
A string filter for querying findings.
Fields
comparison: Option<String>
The condition to apply to a string value when querying for findings. To search for values that contain the filter criteria value, use one of the following comparison operators:
-
To search for values that exactly match the filter value, use
EQUALS
.For example, the filter
ResourceType EQUALS AwsEc2SecurityGroup
only matches findings that have a resource type ofAwsEc2SecurityGroup
. -
To search for values that start with the filter value, use
PREFIX
.For example, the filter
ResourceType PREFIX AwsIam
matches findings that have a resource type that starts withAwsIam
. Findings with a resource type ofAwsIamPolicy
,AwsIamRole
, orAwsIamUser
would all match.
EQUALS
and PREFIX
filters on the same field are joined by OR
. A finding matches if it matches any one of those filters.
To search for values that do not contain the filter criteria value, use one of the following comparison operators:
-
To search for values that do not exactly match the filter value, use
NOTEQUALS
.For example, the filter
ResourceType NOTEQUALS AwsIamPolicy
matches findings that have a resource type other thanAwsIamPolicy
. -
To search for values that do not start with the filter value, use
PREFIXNOTEQUALS
.For example, the filter
ResourceType PREFIXNOTEQUALS AwsIam
matches findings that have a resource type that does not start withAwsIam
. Findings with a resource type ofAwsIamPolicy
,AwsIamRole
, orAwsIamUser
would all be excluded from the results.
NOTEQUALS
and PREFIXNOTEQUALS
filters on the same field are joined by AND
. A finding matches only if it matches all of those filters.
For filters on the same field, you cannot provide both an EQUALS
filter and a NOTEQUALS
or PREFIXNOTEQUALS
filter. Combining filters in this way always returns an error, even if the provided filter values would return valid results.
You can combine PREFIX
filters with NOTEQUALS
or PREFIXNOTEQUALS
filters for the same field. Security Hub first processes the PREFIX
filters, then the NOTEQUALS
or PREFIXNOTEQUALS
filters.
For example, for the following filter, Security Hub first identifies findings that have resource types that start with either AwsIAM
or AwsEc2
. It then excludes findings that have a resource type of AwsIamPolicy
and findings that have a resource type of AwsEc2NetworkInterface
.
-
ResourceType PREFIX AwsIam
-
ResourceType PREFIX AwsEc2
-
ResourceType NOTEQUALS AwsIamPolicy
-
ResourceType NOTEQUALS AwsEc2NetworkInterface
value: Option<String>
The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is Security Hub
. If you provide security hub
as the filter text, then there is no match.
Trait Implementations
sourceimpl Clone for StringFilter
impl Clone for StringFilter
sourcefn clone(&self) -> StringFilter
fn clone(&self) -> StringFilter
Returns a copy of the value. Read more
1.0.0 · sourcefn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
Performs copy-assignment from source
. Read more
sourceimpl Debug for StringFilter
impl Debug for StringFilter
sourceimpl Default for StringFilter
impl Default for StringFilter
sourcefn default() -> StringFilter
fn default() -> StringFilter
Returns the “default value” for a type. Read more
sourceimpl<'de> Deserialize<'de> for StringFilter
impl<'de> Deserialize<'de> for StringFilter
sourcefn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
__D: Deserializer<'de>,
fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error> where
__D: Deserializer<'de>,
Deserialize this value from the given Serde deserializer. Read more
sourceimpl PartialEq<StringFilter> for StringFilter
impl PartialEq<StringFilter> for StringFilter
sourcefn eq(&self, other: &StringFilter) -> bool
fn eq(&self, other: &StringFilter) -> bool
This method tests for self
and other
values to be equal, and is used
by ==
. Read more
sourcefn ne(&self, other: &StringFilter) -> bool
fn ne(&self, other: &StringFilter) -> bool
This method tests for !=
.
sourceimpl Serialize for StringFilter
impl Serialize for StringFilter
impl StructuralPartialEq for StringFilter
Auto Trait Implementations
impl RefUnwindSafe for StringFilter
impl Send for StringFilter
impl Sync for StringFilter
impl Unpin for StringFilter
impl UnwindSafe for StringFilter
Blanket Implementations
sourceimpl<T> BorrowMut<T> for T where
T: ?Sized,
impl<T> BorrowMut<T> for T where
T: ?Sized,
const: unstable · sourcefn borrow_mut(&mut self) -> &mut T
fn borrow_mut(&mut self) -> &mut T
Mutably borrows from an owned value. Read more
sourceimpl<T> Instrument for T
impl<T> Instrument for T
sourcefn instrument(self, span: Span) -> Instrumented<Self>
fn instrument(self, span: Span) -> Instrumented<Self>
sourcefn in_current_span(self) -> Instrumented<Self>
fn in_current_span(self) -> Instrumented<Self>
sourceimpl<T> ToOwned for T where
T: Clone,
impl<T> ToOwned for T where
T: Clone,
type Owned = T
type Owned = T
The resulting type after obtaining ownership.
sourcefn clone_into(&self, target: &mut T)
fn clone_into(&self, target: &mut T)
toowned_clone_into
)Uses borrowed data to replace owned data, usually by cloning. Read more
sourceimpl<T> WithSubscriber for T
impl<T> WithSubscriber for T
sourcefn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self> where
S: Into<Dispatch>,
Attaches the provided Subscriber
to this type, returning a
WithDispatch
wrapper. Read more
sourcefn with_current_subscriber(self) -> WithDispatch<Self>
fn with_current_subscriber(self) -> WithDispatch<Self>
Attaches the current default Subscriber
to this type, returning a
WithDispatch
wrapper. Read more