AWS::GuardDuty::Filter Condition - AWS CloudFormation
SyntaxProperties
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

This is the new CloudFormation Template Reference Guide. Please update your bookmarks and links. For help getting started with CloudFormation, see the AWS CloudFormation User Guide.

AWS::GuardDuty::Filter Condition

Specifies the condition to apply to a single field when filtering through GuardDuty findings.

Syntax

To declare this entity in your CloudFormation template, use the following syntax:

JSON

{
  "Eq" : [ String, ... ],
  "Equals" : [ String, ... ],
  "GreaterThan" : Integer,
  "GreaterThanOrEqual" : Integer,
  "Gt" : Integer,
  "Gte" : Integer,
  "LessThan" : Integer,
  "LessThanOrEqual" : Integer,
  "Lt" : Integer,
  "Lte" : Integer,
  "Matches" : [ String, ... ],
  "Neq" : [ String, ... ],
  "NotEquals" : [ String, ... ],
  "NotMatches" : [ String, ... ]
}

YAML

  Eq: 
    - String
  Equals: 
    - String
  GreaterThan: Integer
  GreaterThanOrEqual: Integer
  Gt: Integer
  Gte: Integer
  LessThan: Integer
  LessThanOrEqual: Integer
  Lt: Integer
  Lte: Integer
  Matches: 
    - String
  Neq: 
    - String
  NotEquals: 
    - String
  NotMatches: 
    - String

Properties

Eq

Represents the equal condition to apply to a single field when querying for findings.

Required: No

Type: Array of String

Update requires: No interruption

Equals

Represents an equal condition to be applied to a single field when querying for findings.

Required: No

Type: Array of String

Update requires: No interruption

GreaterThan

Represents a greater than condition to be applied to a single field when querying for findings.

Required: No

Type: Integer

Update requires: No interruption

GreaterThanOrEqual

Represents a greater than or equal condition to be applied to a single field when querying for findings.

Required: No

Type: Integer

Update requires: No interruption

Gt

Represents a greater than condition to be applied to a single field when querying for findings.

Required: No

Type: Integer

Update requires: No interruption

Gte

Represents the greater than or equal condition to apply to a single field when querying for findings.

Required: No

Type: Integer

Update requires: No interruption

LessThan

Represents a less than condition to be applied to a single field when querying for findings.

Required: No

Type: Integer

Update requires: No interruption

LessThanOrEqual

Represents a less than or equal condition to be applied to a single field when querying for findings.

Required: No

Type: Integer

Update requires: No interruption

Lt

Represents the less than condition to apply to a single field when querying for findings.

Required: No

Type: Integer

Update requires: No interruption

Lte

Represents the less than or equal condition to apply to a single field when querying for findings.

Required: No

Type: Integer

Update requires: No interruption

Matches

Represents the match condition to be applied to a single field when querying for findings.

Note

The matches condition is available only for create-filter and update-filter APIs.

Required: No

Type: Array of String

Minimum: 1

Maximum: 5

Update requires: No interruption

Neq

Represents the not equal condition to apply to a single field when querying for findings.

Required: No

Type: Array of String

Update requires: No interruption

NotEquals

Represents a not equal condition to be applied to a single field when querying for findings.

Required: No

Type: Array of String

Update requires: No interruption

NotMatches

Represents the not match condition to be applied to a single field when querying for findings.

Note

The not-matches condition is available only for create-filter and update-filter APIs.

Required: No

Type: Array of String

Minimum: 1

Maximum: 5

Update requires: No interruption