Class: Aws::NetworkSecurityManager::Types::ScopeConfiguration

Inherits:

Struct

Object
Struct
Aws::NetworkSecurityManager::Types::ScopeConfiguration

show all

Defined in:: gems/aws-sdk-networksecuritymanager/lib/aws-sdk-networksecuritymanager/types.rb

Overview

Defines which accounts and resources are in scope.

Constant Summary collapse

SENSITIVE =

[]

Instance Attribute Summary collapse

#account_filter ⇒ Types::AccountFilter
The account filter that determines which accounts are in scope.
#resource_scopes ⇒ Hash<String,Types::ResourceScope>
The resource-level scoping configuration, keyed by resource type, that defines which resources within the selected accounts are in scope.

Instance Attribute Details

#account_filter ⇒ `Types::AccountFilter`

The account filter that determines which accounts are in scope. When set, exactly one of includeAll, include, or exclude is set.

Organization administrators must include an account filter in every scope configuration. Single-account administrators must omit it: a scope without an account filter applies only to the administrator's own account. The presence of an account filter is fixed when the scope is created: an update can't add an account filter to a scope that was created without one, or remove the account filter from a scope that was created with one.

Returns:

(Types::AccountFilter)

# File 'gems/aws-sdk-networksecuritymanager/lib/aws-sdk-networksecuritymanager/types.rb', line 3744

class ScopeConfiguration < Struct.new(
  :account_filter,
  :resource_scopes)
  SENSITIVE = []
  include Aws::Structure
end

#resource_scopes ⇒ `Hash<String,Types::ResourceScope>`

The resource-level scoping configuration, keyed by resource type, that defines which resources within the selected accounts are in scope.