/AWS1/CL_BUPCONTROLSCOPE¶
A framework consists of one or more controls. Each control has its own control scope. The control scope can include one or more resource types, a combination of a tag key and value, or a combination of one resource type and one resource ID. If no scope is specified, evaluations for the rule are triggered when any resource in your recording group changes in configuration.
To set a control scope that includes all of a particular resource, leave the
ControlScope empty or do not pass it when calling
CreateFramework.
CONSTRUCTOR¶
IMPORTING¶
Optional arguments:¶
it_complianceresourceids TYPE /AWS1/CL_BUPCPLNCRESRCIDLIST_W=>TT_COMPLIANCERESOURCEIDLIST TT_COMPLIANCERESOURCEIDLIST¶
The ID of the only Amazon Web Services resource that you want your control scope to contain.
it_complianceresourcetypes TYPE /AWS1/CL_BUPRESOURCETYPELIST_W=>TT_RESOURCETYPELIST TT_RESOURCETYPELIST¶
Describes whether the control scope includes one or more types of resources, such as
EFSorRDS.
it_tags TYPE /AWS1/CL_BUPSTRINGMAP_W=>TT_STRINGMAP TT_STRINGMAP¶
The tag key-value pair applied to those Amazon Web Services resources that you want to trigger an evaluation for a rule. A maximum of one key-value pair can be provided. The tag value is optional, but it cannot be an empty string if you are creating or editing a framework from the console (though the value can be an empty string when included in a CloudFormation template).
The structure to assign a tag is:
[{"Key":"string","Value":"string"}].
Queryable Attributes¶
ComplianceResourceIds¶
The ID of the only Amazon Web Services resource that you want your control scope to contain.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_COMPLIANCERESOURCEIDS() |
Getter for COMPLIANCERESOURCEIDS, with configurable default |
ASK_COMPLIANCERESOURCEIDS() |
Getter for COMPLIANCERESOURCEIDS w/ exceptions if field has |
HAS_COMPLIANCERESOURCEIDS() |
Determine if COMPLIANCERESOURCEIDS has a value |
ComplianceResourceTypes¶
Describes whether the control scope includes one or more types of resources, such as
EFSorRDS.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_COMPLIANCERESOURCETYPES() |
Getter for COMPLIANCERESOURCETYPES, with configurable defaul |
ASK_COMPLIANCERESOURCETYPES() |
Getter for COMPLIANCERESOURCETYPES w/ exceptions if field ha |
HAS_COMPLIANCERESOURCETYPES() |
Determine if COMPLIANCERESOURCETYPES has a value |
Tags¶
The tag key-value pair applied to those Amazon Web Services resources that you want to trigger an evaluation for a rule. A maximum of one key-value pair can be provided. The tag value is optional, but it cannot be an empty string if you are creating or editing a framework from the console (though the value can be an empty string when included in a CloudFormation template).
The structure to assign a tag is:
[{"Key":"string","Value":"string"}].
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_TAGS() |
Getter for TAGS, with configurable default |
ASK_TAGS() |
Getter for TAGS w/ exceptions if field has no value |
HAS_TAGS() |
Determine if TAGS has a value |