DetectionRuleFilter - Amazon GuardDuty
Services or capabilities described in AWS documentation might vary by Region. To see the differences applicable to the AWS European Sovereign Cloud Region, see the AWS European Sovereign Cloud User Guide.

DetectionRuleFilter

Contains filter criteria for listing custom detection rules or associations.

Contents

name

The name of the field to filter by.

Type: String

Valid Values: name | description | dataSource | severity | tactic | technique | service

Required: Yes

values

The values to match against the specified filter name.

Type: Array of strings

Array Members: Minimum number of 1 item. Maximum number of 50 items.

Length Constraints: Minimum length of 1. Maximum length of 255.

Pattern: [a-zA-Z0-9 _.\-:/]+

Required: Yes

condition

The condition to apply to the filter. For example, EQUALS or CONTAINS.

Type: String

Valid Values: EQUALS | CONTAINS

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: