Class EvidenceFinderEnablement
- All Implemented Interfaces:
Serializable
,SdkPojo
,ToCopyableBuilder<EvidenceFinderEnablement.Builder,
EvidenceFinderEnablement>
The settings object that specifies whether evidence finder is enabled. This object also describes the related event data store, and the backfill status for populating the event data store with evidence data.
- See Also:
-
Nested Class Summary
-
Method Summary
Modifier and TypeMethodDescriptionThe current status of the evidence data backfill process.final String
The current status of the evidence data backfill process.builder()
The current status of the evidence finder feature and the related event data store.final String
The current status of the evidence finder feature and the related event data store.final boolean
final boolean
equalsBySdkFields
(Object obj) Indicates whether some other object is "equal to" this one by SDK fields.final String
error()
Represents any errors that occurred when enabling or disabling evidence finder.final String
The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s used by evidence finder.final <T> Optional
<T> getValueForField
(String fieldName, Class<T> clazz) final int
hashCode()
static Class
<? extends EvidenceFinderEnablement.Builder> Take this object and create a builder that contains all of the current property values of this object.final String
toString()
Returns a string representation of this object.Methods inherited from interface software.amazon.awssdk.utils.builder.ToCopyableBuilder
copy
-
Method Details
-
eventDataStoreArn
The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s used by evidence finder. The event data store is the lake of evidence data that evidence finder runs queries against.
- Returns:
- The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s used by evidence finder. The event data store is the lake of evidence data that evidence finder runs queries against.
-
enablementStatus
The current status of the evidence finder feature and the related event data store.
-
ENABLE_IN_PROGRESS
means that you requested to enable evidence finder. An event data store is currently being created to support evidence finder queries. -
ENABLED
means that an event data store was successfully created and evidence finder is enabled. We recommend that you wait 7 days until the event data store is backfilled with your past two years’ worth of evidence data. You can use evidence finder in the meantime, but not all data might be available until the backfill is complete. -
DISABLE_IN_PROGRESS
means that you requested to disable evidence finder, and your request is pending the deletion of the event data store. -
DISABLED
means that you have permanently disabled evidence finder and the event data store has been deleted. You can't re-enable evidence finder after this point.
If the service returns an enum value that is not available in the current SDK version,
enablementStatus
will returnEvidenceFinderEnablementStatus.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromenablementStatusAsString()
.- Returns:
- The current status of the evidence finder feature and the related event data store.
-
ENABLE_IN_PROGRESS
means that you requested to enable evidence finder. An event data store is currently being created to support evidence finder queries. -
ENABLED
means that an event data store was successfully created and evidence finder is enabled. We recommend that you wait 7 days until the event data store is backfilled with your past two years’ worth of evidence data. You can use evidence finder in the meantime, but not all data might be available until the backfill is complete. -
DISABLE_IN_PROGRESS
means that you requested to disable evidence finder, and your request is pending the deletion of the event data store. -
DISABLED
means that you have permanently disabled evidence finder and the event data store has been deleted. You can't re-enable evidence finder after this point.
-
- See Also:
-
-
enablementStatusAsString
The current status of the evidence finder feature and the related event data store.
-
ENABLE_IN_PROGRESS
means that you requested to enable evidence finder. An event data store is currently being created to support evidence finder queries. -
ENABLED
means that an event data store was successfully created and evidence finder is enabled. We recommend that you wait 7 days until the event data store is backfilled with your past two years’ worth of evidence data. You can use evidence finder in the meantime, but not all data might be available until the backfill is complete. -
DISABLE_IN_PROGRESS
means that you requested to disable evidence finder, and your request is pending the deletion of the event data store. -
DISABLED
means that you have permanently disabled evidence finder and the event data store has been deleted. You can't re-enable evidence finder after this point.
If the service returns an enum value that is not available in the current SDK version,
enablementStatus
will returnEvidenceFinderEnablementStatus.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available fromenablementStatusAsString()
.- Returns:
- The current status of the evidence finder feature and the related event data store.
-
ENABLE_IN_PROGRESS
means that you requested to enable evidence finder. An event data store is currently being created to support evidence finder queries. -
ENABLED
means that an event data store was successfully created and evidence finder is enabled. We recommend that you wait 7 days until the event data store is backfilled with your past two years’ worth of evidence data. You can use evidence finder in the meantime, but not all data might be available until the backfill is complete. -
DISABLE_IN_PROGRESS
means that you requested to disable evidence finder, and your request is pending the deletion of the event data store. -
DISABLED
means that you have permanently disabled evidence finder and the event data store has been deleted. You can't re-enable evidence finder after this point.
-
- See Also:
-
-
backfillStatus
The current status of the evidence data backfill process.
The backfill starts after you enable evidence finder. During this task, Audit Manager populates an event data store with your past two years’ worth of evidence data so that your evidence can be queried.
-
NOT_STARTED
means that the backfill hasn’t started yet. -
IN_PROGRESS
means that the backfill is in progress. This can take up to 7 days to complete, depending on the amount of evidence data. -
COMPLETED
means that the backfill is complete. All of your past evidence is now queryable.
If the service returns an enum value that is not available in the current SDK version,
backfillStatus
will returnEvidenceFinderBackfillStatus.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available frombackfillStatusAsString()
.- Returns:
- The current status of the evidence data backfill process.
The backfill starts after you enable evidence finder. During this task, Audit Manager populates an event data store with your past two years’ worth of evidence data so that your evidence can be queried.
-
NOT_STARTED
means that the backfill hasn’t started yet. -
IN_PROGRESS
means that the backfill is in progress. This can take up to 7 days to complete, depending on the amount of evidence data. -
COMPLETED
means that the backfill is complete. All of your past evidence is now queryable.
-
- See Also:
-
-
backfillStatusAsString
The current status of the evidence data backfill process.
The backfill starts after you enable evidence finder. During this task, Audit Manager populates an event data store with your past two years’ worth of evidence data so that your evidence can be queried.
-
NOT_STARTED
means that the backfill hasn’t started yet. -
IN_PROGRESS
means that the backfill is in progress. This can take up to 7 days to complete, depending on the amount of evidence data. -
COMPLETED
means that the backfill is complete. All of your past evidence is now queryable.
If the service returns an enum value that is not available in the current SDK version,
backfillStatus
will returnEvidenceFinderBackfillStatus.UNKNOWN_TO_SDK_VERSION
. The raw value returned by the service is available frombackfillStatusAsString()
.- Returns:
- The current status of the evidence data backfill process.
The backfill starts after you enable evidence finder. During this task, Audit Manager populates an event data store with your past two years’ worth of evidence data so that your evidence can be queried.
-
NOT_STARTED
means that the backfill hasn’t started yet. -
IN_PROGRESS
means that the backfill is in progress. This can take up to 7 days to complete, depending on the amount of evidence data. -
COMPLETED
means that the backfill is complete. All of your past evidence is now queryable.
-
- See Also:
-
-
error
Represents any errors that occurred when enabling or disabling evidence finder.
- Returns:
- Represents any errors that occurred when enabling or disabling evidence finder.
-
toBuilder
Description copied from interface:ToCopyableBuilder
Take this object and create a builder that contains all of the current property values of this object.- Specified by:
toBuilder
in interfaceToCopyableBuilder<EvidenceFinderEnablement.Builder,
EvidenceFinderEnablement> - Returns:
- a builder for type T
-
builder
-
serializableBuilderClass
-
hashCode
public final int hashCode() -
equals
-
equalsBySdkFields
Description copied from interface:SdkPojo
Indicates whether some other object is "equal to" this one by SDK fields. An SDK field is a modeled, non-inherited field in anSdkPojo
class, and is generated based on a service model.If an
SdkPojo
class does not have any inherited fields,equalsBySdkFields
andequals
are essentially the same.- Specified by:
equalsBySdkFields
in interfaceSdkPojo
- Parameters:
obj
- the object to be compared with- Returns:
- true if the other object equals to this object by sdk fields, false otherwise.
-
toString
Returns a string representation of this object. This is useful for testing and debugging. Sensitive data will be redacted from this string using a placeholder value. -
getValueForField
-
sdkFields
-