Class CfnFilter.FindingCriteriaProperty.Builder

java.lang.Object
software.amazon.awscdk.services.guardduty.CfnFilter.FindingCriteriaProperty.Builder
All Implemented Interfaces:
software.amazon.jsii.Builder<CfnFilter.FindingCriteriaProperty>
Enclosing interface:
CfnFilter.FindingCriteriaProperty

@Stability(Stable) public static final class CfnFilter.FindingCriteriaProperty.Builder extends Object implements software.amazon.jsii.Builder<CfnFilter.FindingCriteriaProperty>
  • Constructor Details

    • Builder

      public Builder()
  • Method Details

    • criterion

      @Stability(Stable) public CfnFilter.FindingCriteriaProperty.Builder criterion(Object criterion)
      Parameters:
      criterion - Represents a map of finding properties that match specified conditions and values when querying findings. For a mapping of JSON criterion to their console equivalent see Finding criteria . The following are the available criterion:

      • accountId
      • region
      • confidence
      • id
      • resource.accessKeyDetails.accessKeyId
      • resource.accessKeyDetails.principalId
      • resource.accessKeyDetails.userName
      • resource.accessKeyDetails.userType
      • resource.instanceDetails.iamInstanceProfile.id
      • resource.instanceDetails.imageId
      • resource.instanceDetails.instanceId
      • resource.instanceDetails.outpostArn
      • resource.instanceDetails.networkInterfaces.ipv6Addresses
      • resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
      • resource.instanceDetails.networkInterfaces.publicDnsName
      • resource.instanceDetails.networkInterfaces.publicIp
      • resource.instanceDetails.networkInterfaces.securityGroups.groupId
      • resource.instanceDetails.networkInterfaces.securityGroups.groupName
      • resource.instanceDetails.networkInterfaces.subnetId
      • resource.instanceDetails.networkInterfaces.vpcId
      • resource.instanceDetails.tags.key
      • resource.instanceDetails.tags.value
      • resource.resourceType
      • service.action.actionType
      • service.action.awsApiCallAction.api
      • service.action.awsApiCallAction.callerType
      • service.action.awsApiCallAction.errorCode
      • service.action.awsApiCallAction.remoteIpDetails.city.cityName
      • service.action.awsApiCallAction.remoteIpDetails.country.countryName
      • service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
      • service.action.awsApiCallAction.remoteIpDetails.organization.asn
      • service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
      • service.action.awsApiCallAction.serviceName
      • service.action.dnsRequestAction.domain
      • service.action.networkConnectionAction.blocked
      • service.action.networkConnectionAction.connectionDirection
      • service.action.networkConnectionAction.localPortDetails.port
      • service.action.networkConnectionAction.protocol
      • service.action.networkConnectionAction.localIpDetails.ipAddressV4
      • service.action.networkConnectionAction.remoteIpDetails.city.cityName
      • service.action.networkConnectionAction.remoteIpDetails.country.countryName
      • service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
      • service.action.networkConnectionAction.remoteIpDetails.organization.asn
      • service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
      • service.action.networkConnectionAction.remotePortDetails.port
      • service.additionalInfo.threatListName
      • service.archived

      When this attribute is set to TRUE, only archived findings are listed. When it's set to FALSE, only unarchived findings are listed. When this attribute is not set, all existing findings are listed.

      • service.resourceRole
      • severity
      • type
      • updatedAt

      Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds.

      Returns:
      this
    • itemType

      @Stability(Stable) public CfnFilter.FindingCriteriaProperty.Builder itemType(IResolvable itemType)
      Parameters:
      itemType - Specifies the condition to be applied to a single field when filtering through findings.
      Returns:
      this
    • itemType

      @Stability(Stable) public CfnFilter.FindingCriteriaProperty.Builder itemType(CfnFilter.ConditionProperty itemType)
      Parameters:
      itemType - Specifies the condition to be applied to a single field when filtering through findings.
      Returns:
      this
    • build

      @Stability(Stable) public CfnFilter.FindingCriteriaProperty build()
      Builds the configured instance.
      Specified by:
      build in interface software.amazon.jsii.Builder<CfnFilter.FindingCriteriaProperty>
      Returns:
      a new instance of CfnFilter.FindingCriteriaProperty
      Throws:
      NullPointerException - if any required attribute was not provided