@Generated(value="software.amazon.awssdk:codegen") public final class AwsSecurityFindingFilters extends Object implements SdkPojo, Serializable, ToCopyableBuilder<AwsSecurityFindingFilters.Builder,AwsSecurityFindingFilters>
A collection of attributes that are applied to all active Security Hub-aggregated findings and that result in a subset of findings that are included in this insight.
You can filter by up to 10 finding attributes. For each attribute, you can provide up to 20 filter values.
| Modifier and Type | Class and Description |
|---|---|
static interface |
AwsSecurityFindingFilters.Builder |
| Modifier and Type | Method and Description |
|---|---|
List<StringFilter> |
awsAccountId()
The AWS account ID that a finding is generated in.
|
static AwsSecurityFindingFilters.Builder |
builder() |
List<StringFilter> |
companyName()
The name of the findings provider (company) that owns the solution (product) that generates findings.
|
List<StringFilter> |
complianceStatus()
Exclusive to findings that are generated as the result of a check run against a specific rule in a supported
standard, such as CIS AWS Foundations.
|
List<NumberFilter> |
confidence()
A finding's confidence.
|
List<DateFilter> |
createdAt()
An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security
issue that a finding captured.
|
List<NumberFilter> |
criticality()
The level of importance assigned to the resources associated with the finding.
|
List<StringFilter> |
description()
A finding's description.
|
boolean |
equals(Object obj) |
boolean |
equalsBySdkFields(Object obj) |
List<NumberFilter> |
findingProviderFieldsConfidence()
The finding provider value for the finding confidence.
|
List<NumberFilter> |
findingProviderFieldsCriticality()
The finding provider value for the level of importance assigned to the resources associated with the findings.
|
List<StringFilter> |
findingProviderFieldsRelatedFindingsId()
The finding identifier of a related finding that is identified by the finding provider.
|
List<StringFilter> |
findingProviderFieldsRelatedFindingsProductArn()
The ARN of the solution that generated a related finding that is identified by the finding provider.
|
List<StringFilter> |
findingProviderFieldsSeverityLabel()
The finding provider value for the severity label.
|
List<StringFilter> |
findingProviderFieldsSeverityOriginal()
The finding provider's original value for the severity.
|
List<StringFilter> |
findingProviderFieldsTypes()
One or more finding types that the finding provider assigned to the finding.
|
List<DateFilter> |
firstObservedAt()
An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential
security issue that a finding captured.
|
List<StringFilter> |
generatorId()
The identifier for the solution-specific component (a discrete unit of logic) that generated a finding.
|
<T> Optional<T> |
getValueForField(String fieldName,
Class<T> clazz) |
boolean |
hasAwsAccountId()
Returns true if the AwsAccountId property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasCompanyName()
Returns true if the CompanyName property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasComplianceStatus()
Returns true if the ComplianceStatus property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasConfidence()
Returns true if the Confidence property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasCreatedAt()
Returns true if the CreatedAt property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasCriticality()
Returns true if the Criticality property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasDescription()
Returns true if the Description property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasFindingProviderFieldsConfidence()
Returns true if the FindingProviderFieldsConfidence property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasFindingProviderFieldsCriticality()
Returns true if the FindingProviderFieldsCriticality property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasFindingProviderFieldsRelatedFindingsId()
Returns true if the FindingProviderFieldsRelatedFindingsId property was specified by the sender (it may be
empty), or false if the sender did not specify the value (it will be empty).
|
boolean |
hasFindingProviderFieldsRelatedFindingsProductArn()
Returns true if the FindingProviderFieldsRelatedFindingsProductArn property was specified by the sender (it may
be empty), or false if the sender did not specify the value (it will be empty).
|
boolean |
hasFindingProviderFieldsSeverityLabel()
Returns true if the FindingProviderFieldsSeverityLabel property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasFindingProviderFieldsSeverityOriginal()
Returns true if the FindingProviderFieldsSeverityOriginal property was specified by the sender (it may be empty),
or false if the sender did not specify the value (it will be empty).
|
boolean |
hasFindingProviderFieldsTypes()
Returns true if the FindingProviderFieldsTypes property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasFirstObservedAt()
Returns true if the FirstObservedAt property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasGeneratorId()
Returns true if the GeneratorId property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
int |
hashCode() |
boolean |
hasId()
Returns true if the Id property was specified by the sender (it may be empty), or false if the sender did not
specify the value (it will be empty).
|
boolean |
hasKeyword()
Returns true if the Keyword property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasLastObservedAt()
Returns true if the LastObservedAt property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasMalwareName()
Returns true if the MalwareName property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasMalwarePath()
Returns true if the MalwarePath property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasMalwareState()
Returns true if the MalwareState property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasMalwareType()
Returns true if the MalwareType property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasNetworkDestinationDomain()
Returns true if the NetworkDestinationDomain property was specified by the sender (it may be empty), or false if
the sender did not specify the value (it will be empty).
|
boolean |
hasNetworkDestinationIpV4()
Returns true if the NetworkDestinationIpV4 property was specified by the sender (it may be empty), or false if
the sender did not specify the value (it will be empty).
|
boolean |
hasNetworkDestinationIpV6()
Returns true if the NetworkDestinationIpV6 property was specified by the sender (it may be empty), or false if
the sender did not specify the value (it will be empty).
|
boolean |
hasNetworkDestinationPort()
Returns true if the NetworkDestinationPort property was specified by the sender (it may be empty), or false if
the sender did not specify the value (it will be empty).
|
boolean |
hasNetworkDirection()
Returns true if the NetworkDirection property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasNetworkProtocol()
Returns true if the NetworkProtocol property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasNetworkSourceDomain()
Returns true if the NetworkSourceDomain property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasNetworkSourceIpV4()
Returns true if the NetworkSourceIpV4 property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasNetworkSourceIpV6()
Returns true if the NetworkSourceIpV6 property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasNetworkSourceMac()
Returns true if the NetworkSourceMac property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasNetworkSourcePort()
Returns true if the NetworkSourcePort property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasNoteText()
Returns true if the NoteText property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasNoteUpdatedAt()
Returns true if the NoteUpdatedAt property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasNoteUpdatedBy()
Returns true if the NoteUpdatedBy property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasProcessLaunchedAt()
Returns true if the ProcessLaunchedAt property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasProcessName()
Returns true if the ProcessName property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasProcessParentPid()
Returns true if the ProcessParentPid property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasProcessPath()
Returns true if the ProcessPath property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasProcessPid()
Returns true if the ProcessPid property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasProcessTerminatedAt()
Returns true if the ProcessTerminatedAt property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasProductArn()
Returns true if the ProductArn property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasProductFields()
Returns true if the ProductFields property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasProductName()
Returns true if the ProductName property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasRecommendationText()
Returns true if the RecommendationText property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasRecordState()
Returns true if the RecordState property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasRelatedFindingsId()
Returns true if the RelatedFindingsId property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasRelatedFindingsProductArn()
Returns true if the RelatedFindingsProductArn property was specified by the sender (it may be empty), or false if
the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceIamInstanceProfileArn()
Returns true if the ResourceAwsEc2InstanceIamInstanceProfileArn property was specified by the sender (it may be
empty), or false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceImageId()
Returns true if the ResourceAwsEc2InstanceImageId property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceIpV4Addresses()
Returns true if the ResourceAwsEc2InstanceIpV4Addresses property was specified by the sender (it may be empty),
or false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceIpV6Addresses()
Returns true if the ResourceAwsEc2InstanceIpV6Addresses property was specified by the sender (it may be empty),
or false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceKeyName()
Returns true if the ResourceAwsEc2InstanceKeyName property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceLaunchedAt()
Returns true if the ResourceAwsEc2InstanceLaunchedAt property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceSubnetId()
Returns true if the ResourceAwsEc2InstanceSubnetId property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceType()
Returns true if the ResourceAwsEc2InstanceType property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsEc2InstanceVpcId()
Returns true if the ResourceAwsEc2InstanceVpcId property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsIamAccessKeyCreatedAt()
Returns true if the ResourceAwsIamAccessKeyCreatedAt property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsIamAccessKeyStatus()
Returns true if the ResourceAwsIamAccessKeyStatus property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsIamAccessKeyUserName()
Returns true if the ResourceAwsIamAccessKeyUserName property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsS3BucketOwnerId()
Returns true if the ResourceAwsS3BucketOwnerId property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceAwsS3BucketOwnerName()
Returns true if the ResourceAwsS3BucketOwnerName property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceContainerImageId()
Returns true if the ResourceContainerImageId property was specified by the sender (it may be empty), or false if
the sender did not specify the value (it will be empty).
|
boolean |
hasResourceContainerImageName()
Returns true if the ResourceContainerImageName property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceContainerLaunchedAt()
Returns true if the ResourceContainerLaunchedAt property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasResourceContainerName()
Returns true if the ResourceContainerName property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasResourceDetailsOther()
Returns true if the ResourceDetailsOther property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasResourceId()
Returns true if the ResourceId property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasResourcePartition()
Returns true if the ResourcePartition property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasResourceRegion()
Returns true if the ResourceRegion property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasResourceTags()
Returns true if the ResourceTags property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasResourceType()
Returns true if the ResourceType property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasSeverityLabel()
Returns true if the SeverityLabel property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasSeverityNormalized()
Returns true if the SeverityNormalized property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasSeverityProduct()
Returns true if the SeverityProduct property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasSourceUrl()
Returns true if the SourceUrl property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasThreatIntelIndicatorCategory()
Returns true if the ThreatIntelIndicatorCategory property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasThreatIntelIndicatorLastObservedAt()
Returns true if the ThreatIntelIndicatorLastObservedAt property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasThreatIntelIndicatorSource()
Returns true if the ThreatIntelIndicatorSource property was specified by the sender (it may be empty), or false
if the sender did not specify the value (it will be empty).
|
boolean |
hasThreatIntelIndicatorSourceUrl()
Returns true if the ThreatIntelIndicatorSourceUrl property was specified by the sender (it may be empty), or
false if the sender did not specify the value (it will be empty).
|
boolean |
hasThreatIntelIndicatorType()
Returns true if the ThreatIntelIndicatorType property was specified by the sender (it may be empty), or false if
the sender did not specify the value (it will be empty).
|
boolean |
hasThreatIntelIndicatorValue()
Returns true if the ThreatIntelIndicatorValue property was specified by the sender (it may be empty), or false if
the sender did not specify the value (it will be empty).
|
boolean |
hasTitle()
Returns true if the Title property was specified by the sender (it may be empty), or false if the sender did not
specify the value (it will be empty).
|
boolean |
hasType()
Returns true if the Type property was specified by the sender (it may be empty), or false if the sender did not
specify the value (it will be empty).
|
boolean |
hasUpdatedAt()
Returns true if the UpdatedAt property was specified by the sender (it may be empty), or false if the sender did
not specify the value (it will be empty).
|
boolean |
hasUserDefinedFields()
Returns true if the UserDefinedFields property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasVerificationState()
Returns true if the VerificationState property was specified by the sender (it may be empty), or false if the
sender did not specify the value (it will be empty).
|
boolean |
hasWorkflowState()
Returns true if the WorkflowState property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
boolean |
hasWorkflowStatus()
Returns true if the WorkflowStatus property was specified by the sender (it may be empty), or false if the sender
did not specify the value (it will be empty).
|
List<StringFilter> |
id()
The security findings provider-specific identifier for a finding.
|
List<KeywordFilter> |
keyword()
A keyword for a finding.
|
List<DateFilter> |
lastObservedAt()
An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the
potential security issue that a finding captured.
|
List<StringFilter> |
malwareName()
The name of the malware that was observed.
|
List<StringFilter> |
malwarePath()
The filesystem path of the malware that was observed.
|
List<StringFilter> |
malwareState()
The state of the malware that was observed.
|
List<StringFilter> |
malwareType()
The type of the malware that was observed.
|
List<StringFilter> |
networkDestinationDomain()
The destination domain of network-related information about a finding.
|
List<IpFilter> |
networkDestinationIpV4()
The destination IPv4 address of network-related information about a finding.
|
List<IpFilter> |
networkDestinationIpV6()
The destination IPv6 address of network-related information about a finding.
|
List<NumberFilter> |
networkDestinationPort()
The destination port of network-related information about a finding.
|
List<StringFilter> |
networkDirection()
Indicates the direction of network traffic associated with a finding.
|
List<StringFilter> |
networkProtocol()
The protocol of network-related information about a finding.
|
List<StringFilter> |
networkSourceDomain()
The source domain of network-related information about a finding.
|
List<IpFilter> |
networkSourceIpV4()
The source IPv4 address of network-related information about a finding.
|
List<IpFilter> |
networkSourceIpV6()
The source IPv6 address of network-related information about a finding.
|
List<StringFilter> |
networkSourceMac()
The source media access control (MAC) address of network-related information about a finding.
|
List<NumberFilter> |
networkSourcePort()
The source port of network-related information about a finding.
|
List<StringFilter> |
noteText()
The text of a note.
|
List<DateFilter> |
noteUpdatedAt()
The timestamp of when the note was updated.
|
List<StringFilter> |
noteUpdatedBy()
The principal that created a note.
|
List<DateFilter> |
processLaunchedAt()
The date/time that the process was launched.
|
List<StringFilter> |
processName()
The name of the process.
|
List<NumberFilter> |
processParentPid()
The parent process ID.
|
List<StringFilter> |
processPath()
The path to the process executable.
|
List<NumberFilter> |
processPid()
The process ID.
|
List<DateFilter> |
processTerminatedAt()
The date/time that the process was terminated.
|
List<StringFilter> |
productArn()
The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider)
after this provider's product (solution that generates findings) is registered with Security Hub.
|
List<MapFilter> |
productFields()
A data type where security-findings providers can include additional solution-specific details that aren't part
of the defined
AwsSecurityFinding format. |
List<StringFilter> |
productName()
The name of the solution (product) that generates findings.
|
List<StringFilter> |
recommendationText()
The recommendation of what to do about the issue described in a finding.
|
List<StringFilter> |
recordState()
The updated record state for the finding.
|
List<StringFilter> |
relatedFindingsId()
The solution-generated identifier for a related finding.
|
List<StringFilter> |
relatedFindingsProductArn()
The ARN of the solution that generated a related finding.
|
List<StringFilter> |
resourceAwsEc2InstanceIamInstanceProfileArn()
The IAM profile ARN of the instance.
|
List<StringFilter> |
resourceAwsEc2InstanceImageId()
The Amazon Machine Image (AMI) ID of the instance.
|
List<IpFilter> |
resourceAwsEc2InstanceIpV4Addresses()
The IPv4 addresses associated with the instance.
|
List<IpFilter> |
resourceAwsEc2InstanceIpV6Addresses()
The IPv6 addresses associated with the instance.
|
List<StringFilter> |
resourceAwsEc2InstanceKeyName()
The key name associated with the instance.
|
List<DateFilter> |
resourceAwsEc2InstanceLaunchedAt()
The date and time the instance was launched.
|
List<StringFilter> |
resourceAwsEc2InstanceSubnetId()
The identifier of the subnet that the instance was launched in.
|
List<StringFilter> |
resourceAwsEc2InstanceType()
The instance type of the instance.
|
List<StringFilter> |
resourceAwsEc2InstanceVpcId()
The identifier of the VPC that the instance was launched in.
|
List<DateFilter> |
resourceAwsIamAccessKeyCreatedAt()
The creation date/time of the IAM access key related to a finding.
|
List<StringFilter> |
resourceAwsIamAccessKeyStatus()
The status of the IAM access key related to a finding.
|
List<StringFilter> |
resourceAwsIamAccessKeyUserName()
The user associated with the IAM access key related to a finding.
|
List<StringFilter> |
resourceAwsS3BucketOwnerId()
The canonical user ID of the owner of the S3 bucket.
|
List<StringFilter> |
resourceAwsS3BucketOwnerName()
The display name of the owner of the S3 bucket.
|
List<StringFilter> |
resourceContainerImageId()
The identifier of the image related to a finding.
|
List<StringFilter> |
resourceContainerImageName()
The name of the image related to a finding.
|
List<DateFilter> |
resourceContainerLaunchedAt()
The date/time that the container was started.
|
List<StringFilter> |
resourceContainerName()
The name of the container related to a finding.
|
List<MapFilter> |
resourceDetailsOther()
The details of a resource that doesn't have a specific subfield for the resource type defined.
|
List<StringFilter> |
resourceId()
The canonical identifier for the given resource type.
|
List<StringFilter> |
resourcePartition()
The canonical AWS partition name that the Region is assigned to.
|
List<StringFilter> |
resourceRegion()
The canonical AWS external Region name where this resource is located.
|
List<MapFilter> |
resourceTags()
A list of AWS tags associated with a resource at the time the finding was processed.
|
List<StringFilter> |
resourceType()
Specifies the type of the resource that details are provided for.
|
List<SdkField<?>> |
sdkFields() |
static Class<? extends AwsSecurityFindingFilters.Builder> |
serializableBuilderClass() |
List<StringFilter> |
severityLabel()
The label of a finding's severity.
|
List<NumberFilter> |
severityNormalized()
The normalized severity of a finding.
|
List<NumberFilter> |
severityProduct()
The native severity as defined by the security-findings provider's solution that generated the finding.
|
List<StringFilter> |
sourceUrl()
A URL that links to a page about the current finding in the security-findings provider's solution.
|
List<StringFilter> |
threatIntelIndicatorCategory()
The category of a threat intelligence indicator.
|
List<DateFilter> |
threatIntelIndicatorLastObservedAt()
The date/time of the last observation of a threat intelligence indicator.
|
List<StringFilter> |
threatIntelIndicatorSource()
The source of the threat intelligence.
|
List<StringFilter> |
threatIntelIndicatorSourceUrl()
The URL for more details from the source of the threat intelligence.
|
List<StringFilter> |
threatIntelIndicatorType()
The type of a threat intelligence indicator.
|
List<StringFilter> |
threatIntelIndicatorValue()
The value of a threat intelligence indicator.
|
List<StringFilter> |
title()
A finding's title.
|
AwsSecurityFindingFilters.Builder |
toBuilder() |
String |
toString()
Returns a string representation of this object.
|
List<StringFilter> |
type()
A finding type in the format of
namespace/category/classifier that classifies a finding. |
List<DateFilter> |
updatedAt()
An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding
record.
|
List<MapFilter> |
userDefinedFields()
A list of name/value string pairs associated with the finding.
|
List<StringFilter> |
verificationState()
The veracity of a finding.
|
List<StringFilter> |
workflowState()
The workflow state of a finding.
|
List<StringFilter> |
workflowStatus()
The status of the investigation into a finding.
|
clone, finalize, getClass, notify, notifyAll, wait, wait, waitcopypublic final boolean hasProductArn()
public final List<StringFilter> productArn()
The ARN generated by Security Hub that uniquely identifies a third-party company (security findings provider) after this provider's product (solution that generates findings) is registered with Security Hub.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProductArn() to see if a value was sent in this field.
public final boolean hasAwsAccountId()
public final List<StringFilter> awsAccountId()
The AWS account ID that a finding is generated in.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasAwsAccountId() to see if a value was sent in this field.
public final boolean hasId()
public final List<StringFilter> id()
The security findings provider-specific identifier for a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasId() to see if a value was sent in this field.
public final boolean hasGeneratorId()
public final List<StringFilter> generatorId()
The identifier for the solution-specific component (a discrete unit of logic) that generated a finding. In various security-findings providers' solutions, this generator can be called a rule, a check, a detector, a plugin, etc.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasGeneratorId() to see if a value was sent in this field.
public final boolean hasType()
public final List<StringFilter> type()
A finding type in the format of namespace/category/classifier that classifies a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasType() to see if a value was sent in this field.
namespace/category/classifier that classifies a finding.public final boolean hasFirstObservedAt()
public final List<DateFilter> firstObservedAt()
An ISO8601-formatted timestamp that indicates when the security-findings provider first observed the potential security issue that a finding captured.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasFirstObservedAt() to see if a value was sent in this field.
public final boolean hasLastObservedAt()
public final List<DateFilter> lastObservedAt()
An ISO8601-formatted timestamp that indicates when the security-findings provider most recently observed the potential security issue that a finding captured.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasLastObservedAt() to see if a value was sent in this field.
public final boolean hasCreatedAt()
public final List<DateFilter> createdAt()
An ISO8601-formatted timestamp that indicates when the security-findings provider captured the potential security issue that a finding captured.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasCreatedAt() to see if a value was sent in this field.
public final boolean hasUpdatedAt()
public final List<DateFilter> updatedAt()
An ISO8601-formatted timestamp that indicates when the security-findings provider last updated the finding record.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasUpdatedAt() to see if a value was sent in this field.
public final boolean hasSeverityProduct()
public final List<NumberFilter> severityProduct()
The native severity as defined by the security-findings provider's solution that generated the finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasSeverityProduct() to see if a value was sent in this field.
public final boolean hasSeverityNormalized()
public final List<NumberFilter> severityNormalized()
The normalized severity of a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasSeverityNormalized() to see if a value was sent in this field.
public final boolean hasSeverityLabel()
public final List<StringFilter> severityLabel()
The label of a finding's severity.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasSeverityLabel() to see if a value was sent in this field.
public final boolean hasConfidence()
public final List<NumberFilter> confidence()
A finding's confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify.
Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasConfidence() to see if a value was sent in this field.
Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence.
public final boolean hasCriticality()
public final List<NumberFilter> criticality()
The level of importance assigned to the resources associated with the finding.
A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasCriticality() to see if a value was sent in this field.
A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources.
public final boolean hasTitle()
public final List<StringFilter> title()
A finding's title.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasTitle() to see if a value was sent in this field.
public final boolean hasDescription()
public final List<StringFilter> description()
A finding's description.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasDescription() to see if a value was sent in this field.
public final boolean hasRecommendationText()
public final List<StringFilter> recommendationText()
The recommendation of what to do about the issue described in a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasRecommendationText() to see if a value was sent in this field.
public final boolean hasSourceUrl()
public final List<StringFilter> sourceUrl()
A URL that links to a page about the current finding in the security-findings provider's solution.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasSourceUrl() to see if a value was sent in this field.
public final boolean hasProductFields()
public final List<MapFilter> productFields()
A data type where security-findings providers can include additional solution-specific details that aren't part
of the defined AwsSecurityFinding format.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProductFields() to see if a value was sent in this field.
AwsSecurityFinding format.public final boolean hasProductName()
public final List<StringFilter> productName()
The name of the solution (product) that generates findings.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProductName() to see if a value was sent in this field.
public final boolean hasCompanyName()
public final List<StringFilter> companyName()
The name of the findings provider (company) that owns the solution (product) that generates findings.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasCompanyName() to see if a value was sent in this field.
public final boolean hasUserDefinedFields()
public final List<MapFilter> userDefinedFields()
A list of name/value string pairs associated with the finding. These are custom, user-defined fields added to a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasUserDefinedFields() to see if a value was sent in this field.
public final boolean hasMalwareName()
public final List<StringFilter> malwareName()
The name of the malware that was observed.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasMalwareName() to see if a value was sent in this field.
public final boolean hasMalwareType()
public final List<StringFilter> malwareType()
The type of the malware that was observed.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasMalwareType() to see if a value was sent in this field.
public final boolean hasMalwarePath()
public final List<StringFilter> malwarePath()
The filesystem path of the malware that was observed.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasMalwarePath() to see if a value was sent in this field.
public final boolean hasMalwareState()
public final List<StringFilter> malwareState()
The state of the malware that was observed.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasMalwareState() to see if a value was sent in this field.
public final boolean hasNetworkDirection()
public final List<StringFilter> networkDirection()
Indicates the direction of network traffic associated with a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkDirection() to see if a value was sent in this field.
public final boolean hasNetworkProtocol()
public final List<StringFilter> networkProtocol()
The protocol of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkProtocol() to see if a value was sent in this field.
public final boolean hasNetworkSourceIpV4()
public final List<IpFilter> networkSourceIpV4()
The source IPv4 address of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkSourceIpV4() to see if a value was sent in this field.
public final boolean hasNetworkSourceIpV6()
public final List<IpFilter> networkSourceIpV6()
The source IPv6 address of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkSourceIpV6() to see if a value was sent in this field.
public final boolean hasNetworkSourcePort()
public final List<NumberFilter> networkSourcePort()
The source port of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkSourcePort() to see if a value was sent in this field.
public final boolean hasNetworkSourceDomain()
public final List<StringFilter> networkSourceDomain()
The source domain of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkSourceDomain() to see if a value was sent in this field.
public final boolean hasNetworkSourceMac()
public final List<StringFilter> networkSourceMac()
The source media access control (MAC) address of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkSourceMac() to see if a value was sent in this field.
public final boolean hasNetworkDestinationIpV4()
public final List<IpFilter> networkDestinationIpV4()
The destination IPv4 address of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkDestinationIpV4() to see if a value was sent in this field.
public final boolean hasNetworkDestinationIpV6()
public final List<IpFilter> networkDestinationIpV6()
The destination IPv6 address of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkDestinationIpV6() to see if a value was sent in this field.
public final boolean hasNetworkDestinationPort()
public final List<NumberFilter> networkDestinationPort()
The destination port of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkDestinationPort() to see if a value was sent in this field.
public final boolean hasNetworkDestinationDomain()
public final List<StringFilter> networkDestinationDomain()
The destination domain of network-related information about a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNetworkDestinationDomain() to see if a value was sent in this field.
public final boolean hasProcessName()
public final List<StringFilter> processName()
The name of the process.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProcessName() to see if a value was sent in this field.
public final boolean hasProcessPath()
public final List<StringFilter> processPath()
The path to the process executable.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProcessPath() to see if a value was sent in this field.
public final boolean hasProcessPid()
public final List<NumberFilter> processPid()
The process ID.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProcessPid() to see if a value was sent in this field.
public final boolean hasProcessParentPid()
public final List<NumberFilter> processParentPid()
The parent process ID.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProcessParentPid() to see if a value was sent in this field.
public final boolean hasProcessLaunchedAt()
public final List<DateFilter> processLaunchedAt()
The date/time that the process was launched.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProcessLaunchedAt() to see if a value was sent in this field.
public final boolean hasProcessTerminatedAt()
public final List<DateFilter> processTerminatedAt()
The date/time that the process was terminated.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasProcessTerminatedAt() to see if a value was sent in this field.
public final boolean hasThreatIntelIndicatorType()
public final List<StringFilter> threatIntelIndicatorType()
The type of a threat intelligence indicator.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasThreatIntelIndicatorType() to see if a value was sent in this field.
public final boolean hasThreatIntelIndicatorValue()
public final List<StringFilter> threatIntelIndicatorValue()
The value of a threat intelligence indicator.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasThreatIntelIndicatorValue() to see if a value was sent in this field.
public final boolean hasThreatIntelIndicatorCategory()
public final List<StringFilter> threatIntelIndicatorCategory()
The category of a threat intelligence indicator.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasThreatIntelIndicatorCategory() to see if a value was sent in this field.
public final boolean hasThreatIntelIndicatorLastObservedAt()
public final List<DateFilter> threatIntelIndicatorLastObservedAt()
The date/time of the last observation of a threat intelligence indicator.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasThreatIntelIndicatorLastObservedAt() to see if a value was sent in this field.
public final boolean hasThreatIntelIndicatorSource()
public final List<StringFilter> threatIntelIndicatorSource()
The source of the threat intelligence.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasThreatIntelIndicatorSource() to see if a value was sent in this field.
public final boolean hasThreatIntelIndicatorSourceUrl()
public final List<StringFilter> threatIntelIndicatorSourceUrl()
The URL for more details from the source of the threat intelligence.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasThreatIntelIndicatorSourceUrl() to see if a value was sent in this field.
public final boolean hasResourceType()
public final List<StringFilter> resourceType()
Specifies the type of the resource that details are provided for.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceType() to see if a value was sent in this field.
public final boolean hasResourceId()
public final List<StringFilter> resourceId()
The canonical identifier for the given resource type.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceId() to see if a value was sent in this field.
public final boolean hasResourcePartition()
public final List<StringFilter> resourcePartition()
The canonical AWS partition name that the Region is assigned to.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourcePartition() to see if a value was sent in this field.
public final boolean hasResourceRegion()
public final List<StringFilter> resourceRegion()
The canonical AWS external Region name where this resource is located.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceRegion() to see if a value was sent in this field.
public final boolean hasResourceTags()
public final List<MapFilter> resourceTags()
A list of AWS tags associated with a resource at the time the finding was processed.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceTags() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceType()
public final List<StringFilter> resourceAwsEc2InstanceType()
The instance type of the instance.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceType() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceImageId()
public final List<StringFilter> resourceAwsEc2InstanceImageId()
The Amazon Machine Image (AMI) ID of the instance.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceImageId() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceIpV4Addresses()
public final List<IpFilter> resourceAwsEc2InstanceIpV4Addresses()
The IPv4 addresses associated with the instance.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceIpV4Addresses() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceIpV6Addresses()
public final List<IpFilter> resourceAwsEc2InstanceIpV6Addresses()
The IPv6 addresses associated with the instance.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceIpV6Addresses() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceKeyName()
public final List<StringFilter> resourceAwsEc2InstanceKeyName()
The key name associated with the instance.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceKeyName() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceIamInstanceProfileArn()
public final List<StringFilter> resourceAwsEc2InstanceIamInstanceProfileArn()
The IAM profile ARN of the instance.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceIamInstanceProfileArn() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceVpcId()
public final List<StringFilter> resourceAwsEc2InstanceVpcId()
The identifier of the VPC that the instance was launched in.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceVpcId() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceSubnetId()
public final List<StringFilter> resourceAwsEc2InstanceSubnetId()
The identifier of the subnet that the instance was launched in.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceSubnetId() to see if a value was sent in this field.
public final boolean hasResourceAwsEc2InstanceLaunchedAt()
public final List<DateFilter> resourceAwsEc2InstanceLaunchedAt()
The date and time the instance was launched.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsEc2InstanceLaunchedAt() to see if a value was sent in this field.
public final boolean hasResourceAwsS3BucketOwnerId()
public final List<StringFilter> resourceAwsS3BucketOwnerId()
The canonical user ID of the owner of the S3 bucket.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsS3BucketOwnerId() to see if a value was sent in this field.
public final boolean hasResourceAwsS3BucketOwnerName()
public final List<StringFilter> resourceAwsS3BucketOwnerName()
The display name of the owner of the S3 bucket.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsS3BucketOwnerName() to see if a value was sent in this field.
public final boolean hasResourceAwsIamAccessKeyUserName()
public final List<StringFilter> resourceAwsIamAccessKeyUserName()
The user associated with the IAM access key related to a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsIamAccessKeyUserName() to see if a value was sent in this field.
public final boolean hasResourceAwsIamAccessKeyStatus()
public final List<StringFilter> resourceAwsIamAccessKeyStatus()
The status of the IAM access key related to a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsIamAccessKeyStatus() to see if a value was sent in this field.
public final boolean hasResourceAwsIamAccessKeyCreatedAt()
public final List<DateFilter> resourceAwsIamAccessKeyCreatedAt()
The creation date/time of the IAM access key related to a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceAwsIamAccessKeyCreatedAt() to see if a value was sent in this field.
public final boolean hasResourceContainerName()
public final List<StringFilter> resourceContainerName()
The name of the container related to a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceContainerName() to see if a value was sent in this field.
public final boolean hasResourceContainerImageId()
public final List<StringFilter> resourceContainerImageId()
The identifier of the image related to a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceContainerImageId() to see if a value was sent in this field.
public final boolean hasResourceContainerImageName()
public final List<StringFilter> resourceContainerImageName()
The name of the image related to a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceContainerImageName() to see if a value was sent in this field.
public final boolean hasResourceContainerLaunchedAt()
public final List<DateFilter> resourceContainerLaunchedAt()
The date/time that the container was started.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceContainerLaunchedAt() to see if a value was sent in this field.
public final boolean hasResourceDetailsOther()
public final List<MapFilter> resourceDetailsOther()
The details of a resource that doesn't have a specific subfield for the resource type defined.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasResourceDetailsOther() to see if a value was sent in this field.
public final boolean hasComplianceStatus()
public final List<StringFilter> complianceStatus()
Exclusive to findings that are generated as the result of a check run against a specific rule in a supported standard, such as CIS AWS Foundations. Contains security standard-related finding details.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasComplianceStatus() to see if a value was sent in this field.
public final boolean hasVerificationState()
public final List<StringFilter> verificationState()
The veracity of a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasVerificationState() to see if a value was sent in this field.
public final boolean hasWorkflowState()
public final List<StringFilter> workflowState()
The workflow state of a finding.
Note that this field is deprecated. To search for a finding based on its workflow status, use
WorkflowStatus.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasWorkflowState() to see if a value was sent in this field.
Note that this field is deprecated. To search for a finding based on its workflow status, use
WorkflowStatus.
public final boolean hasWorkflowStatus()
public final List<StringFilter> workflowStatus()
The status of the investigation into a finding. Allowed values are the following.
NEW - The initial state of a finding, before it is reviewed.
Security Hub also resets the workflow status from NOTIFIED or RESOLVED to
NEW in the following cases:
The record state changes from ARCHIVED to ACTIVE.
The compliance status changes from PASSED to either WARNING, FAILED, or
NOT_AVAILABLE.
NOTIFIED - Indicates that the resource owner has been notified about the security issue. Used when
the initial reviewer is not the resource owner, and needs intervention from the resource owner.
SUPPRESSED - The finding will not be reviewed again and will not be acted upon.
RESOLVED - The finding was reviewed and remediated and is now considered resolved.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasWorkflowStatus() to see if a value was sent in this field.
NEW - The initial state of a finding, before it is reviewed.
Security Hub also resets the workflow status from NOTIFIED or RESOLVED to
NEW in the following cases:
The record state changes from ARCHIVED to ACTIVE.
The compliance status changes from PASSED to either WARNING,
FAILED, or NOT_AVAILABLE.
NOTIFIED - Indicates that the resource owner has been notified about the security issue.
Used when the initial reviewer is not the resource owner, and needs intervention from the resource owner.
SUPPRESSED - The finding will not be reviewed again and will not be acted upon.
RESOLVED - The finding was reviewed and remediated and is now considered resolved.
public final boolean hasRecordState()
public final List<StringFilter> recordState()
The updated record state for the finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasRecordState() to see if a value was sent in this field.
public final boolean hasRelatedFindingsProductArn()
public final List<StringFilter> relatedFindingsProductArn()
The ARN of the solution that generated a related finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasRelatedFindingsProductArn() to see if a value was sent in this field.
public final boolean hasRelatedFindingsId()
public final List<StringFilter> relatedFindingsId()
The solution-generated identifier for a related finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasRelatedFindingsId() to see if a value was sent in this field.
public final boolean hasNoteText()
public final List<StringFilter> noteText()
The text of a note.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNoteText() to see if a value was sent in this field.
public final boolean hasNoteUpdatedAt()
public final List<DateFilter> noteUpdatedAt()
The timestamp of when the note was updated.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNoteUpdatedAt() to see if a value was sent in this field.
public final boolean hasNoteUpdatedBy()
public final List<StringFilter> noteUpdatedBy()
The principal that created a note.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasNoteUpdatedBy() to see if a value was sent in this field.
public final boolean hasKeyword()
public final List<KeywordFilter> keyword()
A keyword for a finding.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasKeyword() to see if a value was sent in this field.
public final boolean hasFindingProviderFieldsConfidence()
public final List<NumberFilter> findingProviderFieldsConfidence()
The finding provider value for the finding confidence. Confidence is defined as the likelihood that a finding accurately identifies the behavior or issue that it was intended to identify.
Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasFindingProviderFieldsConfidence() to see if a value was sent in this field.
Confidence is scored on a 0-100 basis using a ratio scale, where 0 means zero percent confidence and 100 means 100 percent confidence.
public final boolean hasFindingProviderFieldsCriticality()
public final List<NumberFilter> findingProviderFieldsCriticality()
The finding provider value for the level of importance assigned to the resources associated with the findings.
A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasFindingProviderFieldsCriticality() to see if a value was sent in this field.
A score of 0 means that the underlying resources have no criticality, and a score of 100 is reserved for the most critical resources.
public final boolean hasFindingProviderFieldsRelatedFindingsId()
public final List<StringFilter> findingProviderFieldsRelatedFindingsId()
The finding identifier of a related finding that is identified by the finding provider.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasFindingProviderFieldsRelatedFindingsId() to see if a value was sent in this field.
public final boolean hasFindingProviderFieldsRelatedFindingsProductArn()
public final List<StringFilter> findingProviderFieldsRelatedFindingsProductArn()
The ARN of the solution that generated a related finding that is identified by the finding provider.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasFindingProviderFieldsRelatedFindingsProductArn() to see if a value was sent in this
field.
public final boolean hasFindingProviderFieldsSeverityLabel()
public final List<StringFilter> findingProviderFieldsSeverityLabel()
The finding provider value for the severity label.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasFindingProviderFieldsSeverityLabel() to see if a value was sent in this field.
public final boolean hasFindingProviderFieldsSeverityOriginal()
public final List<StringFilter> findingProviderFieldsSeverityOriginal()
The finding provider's original value for the severity.
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasFindingProviderFieldsSeverityOriginal() to see if a value was sent in this field.
public final boolean hasFindingProviderFieldsTypes()
public final List<StringFilter> findingProviderFieldsTypes()
One or more finding types that the finding provider assigned to the finding. Uses the format of
namespace/category/classifier that classify a finding.
Valid namespace values are: Software and Configuration Checks | TTPs | Effects | Unusual Behaviors | Sensitive Data Identifications
Attempts to modify the collection returned by this method will result in an UnsupportedOperationException.
You can use hasFindingProviderFieldsTypes() to see if a value was sent in this field.
namespace/category/classifier that classify a finding.
Valid namespace values are: Software and Configuration Checks | TTPs | Effects | Unusual Behaviors | Sensitive Data Identifications
public AwsSecurityFindingFilters.Builder toBuilder()
toBuilder in interface ToCopyableBuilder<AwsSecurityFindingFilters.Builder,AwsSecurityFindingFilters>public static AwsSecurityFindingFilters.Builder builder()
public static Class<? extends AwsSecurityFindingFilters.Builder> serializableBuilderClass()
public final boolean equalsBySdkFields(Object obj)
equalsBySdkFields in interface SdkPojopublic final String toString()
Copyright © 2021. All rights reserved.