Class: Aws::CloudTrail::Types::AdvancedFieldSelector

Inherits:
Struct
  • Object
show all
Includes:
Structure
Defined in:
lib/aws-sdk-cloudtrail/types.rb

Overview

A single selector statement in an advanced event selector.

See Also:

Constant Summary collapse

SENSITIVE = 
[]

Instance Attribute Summary collapse

Instance Attribute Details

#ends_with ⇒ Array<String>

An operator that includes events that match the last few characters of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>) 


177
178
179
180
181
182
183
184
185
186
187
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 177

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#equals ⇒ Array<String>

An operator that includes events that match the exact value of the event record field specified as the value of ‘Field`. This is the only valid operator that you can use with the `readOnly`, `eventCategory`, and `resources.type` fields.

Returns:

  • (Array<String>) 


177
178
179
180
181
182
183
184
185
186
187
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 177

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#field ⇒ String

A field in a CloudTrail event record on which to filter events to be logged. For event data stores for CloudTrail Insights events, Config configuration items, Audit Manager evidence, or events outside of Amazon Web Services, the field is used only for selecting events as filtering is not supported.

For more information, see [AdvancedFieldSelector] in the *CloudTrailUser Guide*.

[1]: docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html

Returns:

  • (String) 


177
178
179
180
181
182
183
184
185
186
187
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 177

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#not_ends_with ⇒ Array<String>

An operator that excludes events that match the last few characters of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>) 


177
178
179
180
181
182
183
184
185
186
187
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 177

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#not_equals ⇒ Array<String>

An operator that excludes events that match the exact value of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>) 


177
178
179
180
181
182
183
184
185
186
187
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 177

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#not_starts_with ⇒ Array<String>

An operator that excludes events that match the first few characters of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>) 


177
178
179
180
181
182
183
184
185
186
187
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 177

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#starts_with ⇒ Array<String>

An operator that includes events that match the first few characters of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>) 


177
178
179
180
181
182
183
184
185
186
187
 
# File 'lib/aws-sdk-cloudtrail/types.rb', line 177

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end