/** * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved. * SPDX-License-Identifier: Apache-2.0. */ #pragma once #include #include #include #include #include namespace Aws { namespace Utils { namespace Json { class JsonValue; class JsonView; } // namespace Json } // namespace Utils namespace AuditManager { namespace Model { /** *

The settings object that specifies whether evidence finder is enabled. This * object also describes the related event data store, and the backfill status for * populating the event data store with evidence data.

See Also:

* AWS * API Reference

*/ class EvidenceFinderEnablement { public: AWS_AUDITMANAGER_API EvidenceFinderEnablement(); AWS_AUDITMANAGER_API EvidenceFinderEnablement(Aws::Utils::Json::JsonView jsonValue); AWS_AUDITMANAGER_API EvidenceFinderEnablement& operator=(Aws::Utils::Json::JsonView jsonValue); AWS_AUDITMANAGER_API Aws::Utils::Json::JsonValue Jsonize() const; /** *

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s * used by evidence finder. The event data store is the lake of evidence data that * evidence finder runs queries against.

*/ inline const Aws::String& GetEventDataStoreArn() const{ return m_eventDataStoreArn; } /** *

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s * used by evidence finder. The event data store is the lake of evidence data that * evidence finder runs queries against.

*/ inline bool EventDataStoreArnHasBeenSet() const { return m_eventDataStoreArnHasBeenSet; } /** *

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s * used by evidence finder. The event data store is the lake of evidence data that * evidence finder runs queries against.

*/ inline void SetEventDataStoreArn(const Aws::String& value) { m_eventDataStoreArnHasBeenSet = true; m_eventDataStoreArn = value; } /** *

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s * used by evidence finder. The event data store is the lake of evidence data that * evidence finder runs queries against.

*/ inline void SetEventDataStoreArn(Aws::String&& value) { m_eventDataStoreArnHasBeenSet = true; m_eventDataStoreArn = std::move(value); } /** *

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s * used by evidence finder. The event data store is the lake of evidence data that * evidence finder runs queries against.

*/ inline void SetEventDataStoreArn(const char* value) { m_eventDataStoreArnHasBeenSet = true; m_eventDataStoreArn.assign(value); } /** *

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s * used by evidence finder. The event data store is the lake of evidence data that * evidence finder runs queries against.

*/ inline EvidenceFinderEnablement& WithEventDataStoreArn(const Aws::String& value) { SetEventDataStoreArn(value); return *this;} /** *

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s * used by evidence finder. The event data store is the lake of evidence data that * evidence finder runs queries against.

*/ inline EvidenceFinderEnablement& WithEventDataStoreArn(Aws::String&& value) { SetEventDataStoreArn(std::move(value)); return *this;} /** *

The Amazon Resource Name (ARN) of the CloudTrail Lake event data store that’s * used by evidence finder. The event data store is the lake of evidence data that * evidence finder runs queries against.

*/ inline EvidenceFinderEnablement& WithEventDataStoreArn(const char* value) { SetEventDataStoreArn(value); return *this;} /** *

The current status of the evidence finder feature and the related event data * store.

  • ENABLE_IN_PROGRESS means that you * requested to enable evidence finder. An event data store is currently being * created to support evidence finder queries.

  • * ENABLED means that an event data store was successfully created and * evidence finder is enabled. We recommend that you wait 7 days until the event * data store is backfilled with your past two years’ worth of evidence data. You * can use evidence finder in the meantime, but not all data might be available * until the backfill is complete.

  • * DISABLE_IN_PROGRESS means that you requested to disable evidence * finder, and your request is pending the deletion of the event data store.

    *

  • DISABLED means that you have permanently disabled * evidence finder and the event data store has been deleted. You can't re-enable * evidence finder after this point.

*/ inline const EvidenceFinderEnablementStatus& GetEnablementStatus() const{ return m_enablementStatus; } /** *

The current status of the evidence finder feature and the related event data * store.

  • ENABLE_IN_PROGRESS means that you * requested to enable evidence finder. An event data store is currently being * created to support evidence finder queries.

  • * ENABLED means that an event data store was successfully created and * evidence finder is enabled. We recommend that you wait 7 days until the event * data store is backfilled with your past two years’ worth of evidence data. You * can use evidence finder in the meantime, but not all data might be available * until the backfill is complete.

  • * DISABLE_IN_PROGRESS means that you requested to disable evidence * finder, and your request is pending the deletion of the event data store.

    *

  • DISABLED means that you have permanently disabled * evidence finder and the event data store has been deleted. You can't re-enable * evidence finder after this point.

*/ inline bool EnablementStatusHasBeenSet() const { return m_enablementStatusHasBeenSet; } /** *

The current status of the evidence finder feature and the related event data * store.

  • ENABLE_IN_PROGRESS means that you * requested to enable evidence finder. An event data store is currently being * created to support evidence finder queries.

  • * ENABLED means that an event data store was successfully created and * evidence finder is enabled. We recommend that you wait 7 days until the event * data store is backfilled with your past two years’ worth of evidence data. You * can use evidence finder in the meantime, but not all data might be available * until the backfill is complete.

  • * DISABLE_IN_PROGRESS means that you requested to disable evidence * finder, and your request is pending the deletion of the event data store.

    *

  • DISABLED means that you have permanently disabled * evidence finder and the event data store has been deleted. You can't re-enable * evidence finder after this point.

*/ inline void SetEnablementStatus(const EvidenceFinderEnablementStatus& value) { m_enablementStatusHasBeenSet = true; m_enablementStatus = value; } /** *

The current status of the evidence finder feature and the related event data * store.

  • ENABLE_IN_PROGRESS means that you * requested to enable evidence finder. An event data store is currently being * created to support evidence finder queries.

  • * ENABLED means that an event data store was successfully created and * evidence finder is enabled. We recommend that you wait 7 days until the event * data store is backfilled with your past two years’ worth of evidence data. You * can use evidence finder in the meantime, but not all data might be available * until the backfill is complete.

  • * DISABLE_IN_PROGRESS means that you requested to disable evidence * finder, and your request is pending the deletion of the event data store.

    *

  • DISABLED means that you have permanently disabled * evidence finder and the event data store has been deleted. You can't re-enable * evidence finder after this point.

*/ inline void SetEnablementStatus(EvidenceFinderEnablementStatus&& value) { m_enablementStatusHasBeenSet = true; m_enablementStatus = std::move(value); } /** *

The current status of the evidence finder feature and the related event data * store.

  • ENABLE_IN_PROGRESS means that you * requested to enable evidence finder. An event data store is currently being * created to support evidence finder queries.

  • * ENABLED means that an event data store was successfully created and * evidence finder is enabled. We recommend that you wait 7 days until the event * data store is backfilled with your past two years’ worth of evidence data. You * can use evidence finder in the meantime, but not all data might be available * until the backfill is complete.

  • * DISABLE_IN_PROGRESS means that you requested to disable evidence * finder, and your request is pending the deletion of the event data store.

    *

  • DISABLED means that you have permanently disabled * evidence finder and the event data store has been deleted. You can't re-enable * evidence finder after this point.

*/ inline EvidenceFinderEnablement& WithEnablementStatus(const EvidenceFinderEnablementStatus& value) { SetEnablementStatus(value); return *this;} /** *

The current status of the evidence finder feature and the related event data * store.

  • ENABLE_IN_PROGRESS means that you * requested to enable evidence finder. An event data store is currently being * created to support evidence finder queries.

  • * ENABLED means that an event data store was successfully created and * evidence finder is enabled. We recommend that you wait 7 days until the event * data store is backfilled with your past two years’ worth of evidence data. You * can use evidence finder in the meantime, but not all data might be available * until the backfill is complete.

  • * DISABLE_IN_PROGRESS means that you requested to disable evidence * finder, and your request is pending the deletion of the event data store.

    *

  • DISABLED means that you have permanently disabled * evidence finder and the event data store has been deleted. You can't re-enable * evidence finder after this point.

*/ inline EvidenceFinderEnablement& WithEnablementStatus(EvidenceFinderEnablementStatus&& value) { SetEnablementStatus(std::move(value)); return *this;} /** *

The current status of the evidence data backfill process.

The * backfill starts after you enable evidence finder. During this task, Audit * Manager populates an event data store with your past two years’ worth of * evidence data so that your evidence can be queried.

  • * NOT_STARTED means that the backfill hasn’t started yet.

    • *

  • IN_PROGRESS means that the backfill is in progress. This * can take up to 7 days to complete, depending on the amount of evidence data. *

  • COMPLETED means that the backfill is complete. * All of your past evidence is now queryable.

*/ inline const EvidenceFinderBackfillStatus& GetBackfillStatus() const{ return m_backfillStatus; } /** *

The current status of the evidence data backfill process.

The * backfill starts after you enable evidence finder. During this task, Audit * Manager populates an event data store with your past two years’ worth of * evidence data so that your evidence can be queried.

  • * NOT_STARTED means that the backfill hasn’t started yet.

    • *

  • IN_PROGRESS means that the backfill is in progress. This * can take up to 7 days to complete, depending on the amount of evidence data. *

  • COMPLETED means that the backfill is complete. * All of your past evidence is now queryable.

*/ inline bool BackfillStatusHasBeenSet() const { return m_backfillStatusHasBeenSet; } /** *

The current status of the evidence data backfill process.

The * backfill starts after you enable evidence finder. During this task, Audit * Manager populates an event data store with your past two years’ worth of * evidence data so that your evidence can be queried.

  • * NOT_STARTED means that the backfill hasn’t started yet.

    • *

  • IN_PROGRESS means that the backfill is in progress. This * can take up to 7 days to complete, depending on the amount of evidence data. *

  • COMPLETED means that the backfill is complete. * All of your past evidence is now queryable.

*/ inline void SetBackfillStatus(const EvidenceFinderBackfillStatus& value) { m_backfillStatusHasBeenSet = true; m_backfillStatus = value; } /** *

The current status of the evidence data backfill process.

The * backfill starts after you enable evidence finder. During this task, Audit * Manager populates an event data store with your past two years’ worth of * evidence data so that your evidence can be queried.

  • * NOT_STARTED means that the backfill hasn’t started yet.

    • *

  • IN_PROGRESS means that the backfill is in progress. This * can take up to 7 days to complete, depending on the amount of evidence data. *

  • COMPLETED means that the backfill is complete. * All of your past evidence is now queryable.

*/ inline void SetBackfillStatus(EvidenceFinderBackfillStatus&& value) { m_backfillStatusHasBeenSet = true; m_backfillStatus = std::move(value); } /** *

The current status of the evidence data backfill process.

The * backfill starts after you enable evidence finder. During this task, Audit * Manager populates an event data store with your past two years’ worth of * evidence data so that your evidence can be queried.

  • * NOT_STARTED means that the backfill hasn’t started yet.

    • *

  • IN_PROGRESS means that the backfill is in progress. This * can take up to 7 days to complete, depending on the amount of evidence data. *

  • COMPLETED means that the backfill is complete. * All of your past evidence is now queryable.

*/ inline EvidenceFinderEnablement& WithBackfillStatus(const EvidenceFinderBackfillStatus& value) { SetBackfillStatus(value); return *this;} /** *

The current status of the evidence data backfill process.

The * backfill starts after you enable evidence finder. During this task, Audit * Manager populates an event data store with your past two years’ worth of * evidence data so that your evidence can be queried.

  • * NOT_STARTED means that the backfill hasn’t started yet.

    • *

  • IN_PROGRESS means that the backfill is in progress. This * can take up to 7 days to complete, depending on the amount of evidence data. *

  • COMPLETED means that the backfill is complete. * All of your past evidence is now queryable.

*/ inline EvidenceFinderEnablement& WithBackfillStatus(EvidenceFinderBackfillStatus&& value) { SetBackfillStatus(std::move(value)); return *this;} /** *

Represents any errors that occurred when enabling or disabling evidence * finder.

*/ inline const Aws::String& GetError() const{ return m_error; } /** *

Represents any errors that occurred when enabling or disabling evidence * finder.

*/ inline bool ErrorHasBeenSet() const { return m_errorHasBeenSet; } /** *

Represents any errors that occurred when enabling or disabling evidence * finder.

*/ inline void SetError(const Aws::String& value) { m_errorHasBeenSet = true; m_error = value; } /** *

Represents any errors that occurred when enabling or disabling evidence * finder.

*/ inline void SetError(Aws::String&& value) { m_errorHasBeenSet = true; m_error = std::move(value); } /** *

Represents any errors that occurred when enabling or disabling evidence * finder.

*/ inline void SetError(const char* value) { m_errorHasBeenSet = true; m_error.assign(value); } /** *

Represents any errors that occurred when enabling or disabling evidence * finder.

*/ inline EvidenceFinderEnablement& WithError(const Aws::String& value) { SetError(value); return *this;} /** *

Represents any errors that occurred when enabling or disabling evidence * finder.

*/ inline EvidenceFinderEnablement& WithError(Aws::String&& value) { SetError(std::move(value)); return *this;} /** *

Represents any errors that occurred when enabling or disabling evidence * finder.

*/ inline EvidenceFinderEnablement& WithError(const char* value) { SetError(value); return *this;} private: Aws::String m_eventDataStoreArn; bool m_eventDataStoreArnHasBeenSet = false; EvidenceFinderEnablementStatus m_enablementStatus; bool m_enablementStatusHasBeenSet = false; EvidenceFinderBackfillStatus m_backfillStatus; bool m_backfillStatusHasBeenSet = false; Aws::String m_error; bool m_errorHasBeenSet = false; }; } // namespace Model } // namespace AuditManager } // namespace Aws