Class: Aws::CloudTrail::Types::AdvancedFieldSelector

Inherits:
Struct
  • Object
show all
Includes:
Structure
Defined in:
lib/aws-sdk-cloudtrail/types.rb

Overview

A single selector statement in an advanced event selector.

Constant Summary collapse

SENSITIVE =
[]

Instance Attribute Summary collapse

Instance Attribute Details

#ends_withArray<String>

An operator that includes events that match the last few characters of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>)


184
185
186
187
188
189
190
191
192
193
194
# File 'lib/aws-sdk-cloudtrail/types.rb', line 184

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#equalsArray<String>

An operator that includes events that match the exact value of the event record field specified as the value of ‘Field`. This is the only valid operator that you can use with the `readOnly`, `eventCategory`, and `resources.type` fields.

Returns:

  • (Array<String>)


184
185
186
187
188
189
190
191
192
193
194
# File 'lib/aws-sdk-cloudtrail/types.rb', line 184

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#fieldString

A field in a CloudTrail event record on which to filter events to be logged. For event data stores for CloudTrail Insights events, Config configuration items, Audit Manager evidence, or events outside of Amazon Web Services, the field is used only for selecting events as filtering is not supported.

For more information, see [AdvancedFieldSelector] in the *CloudTrail API Reference*.

<note markdown=“1”> Selectors don’t support the use of wildcards like ‘*` . To match multiple values with a single condition, you may use `StartsWith`, `EndsWith`, `NotStartsWith`, or `NotEndsWith` to explicitly match the beginning or end of the event field.

</note>

[1]: docs.aws.amazon.com/awscloudtrail/latest/APIReference/API_AdvancedFieldSelector.html

Returns:

  • (String)


184
185
186
187
188
189
190
191
192
193
194
# File 'lib/aws-sdk-cloudtrail/types.rb', line 184

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#not_ends_withArray<String>

An operator that excludes events that match the last few characters of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>)


184
185
186
187
188
189
190
191
192
193
194
# File 'lib/aws-sdk-cloudtrail/types.rb', line 184

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#not_equalsArray<String>

An operator that excludes events that match the exact value of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>)


184
185
186
187
188
189
190
191
192
193
194
# File 'lib/aws-sdk-cloudtrail/types.rb', line 184

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#not_starts_withArray<String>

An operator that excludes events that match the first few characters of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>)


184
185
186
187
188
189
190
191
192
193
194
# File 'lib/aws-sdk-cloudtrail/types.rb', line 184

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end

#starts_withArray<String>

An operator that includes events that match the first few characters of the event record field specified as the value of ‘Field`.

Returns:

  • (Array<String>)


184
185
186
187
188
189
190
191
192
193
194
# File 'lib/aws-sdk-cloudtrail/types.rb', line 184

class AdvancedFieldSelector < Struct.new(
  :field,
  :equals,
  :starts_with,
  :ends_with,
  :not_equals,
  :not_starts_with,
  :not_ends_with)
  SENSITIVE = []
  include Aws::Structure
end