Skip to content

/AWS1/IF_QST=>CREATEDLPSETTING()

About CreateDlpSetting

Creates a data loss prevention (DLP) setting configuration for an Amazon Web Services account. A DLP setting defines the DLP provider, the enforcement behavior, and the Quick capabilities that the setting applies to.

Method Signature

METHODS /AWS1/IF_QST~CREATEDLPSETTING
  IMPORTING
    !IV_AWSACCOUNTID TYPE /AWS1/QSTAWSACCOUNTID OPTIONAL
    !IV_DLPSETTINGID TYPE /AWS1/QSTDLPSETTINGID OPTIONAL
    !IV_NAME TYPE /AWS1/QSTDLPSETTINGNAME OPTIONAL
    !IV_PROVIDERTYPE TYPE /AWS1/QSTDLPPROVIDERTYPE OPTIONAL
    !IO_PROVIDERCONFIG TYPE REF TO /AWS1/CL_QSTPROVIDERCONFIG OPTIONAL
    !IV_PROVIDEROUTAGEACTION TYPE /AWS1/QSTDLPACTION OPTIONAL
    !IV_ENABLED TYPE /AWS1/QSTBOOLEAN OPTIONAL
    !IT_TAGS TYPE /AWS1/CL_QSTTAG=>TT_TAGLIST OPTIONAL
  RETURNING
    VALUE(OO_OUTPUT) TYPE REF TO /aws1/cl_qstcrtdlpsettingrsp
  RAISING
    /AWS1/CX_QSTACCESSDENIEDEX
    /AWS1/CX_QSTCONFLICTEXCEPTION
    /AWS1/CX_QSTINTERNALFAILUREEX
    /AWS1/CX_QSTINVALIDREQUESTEX
    /AWS1/CX_QSTLIMITEXCEEDEDEX
    /AWS1/CX_QSTRESOURCEEXISTSEX
    /AWS1/CX_QSTTHROTTLINGEX
    /AWS1/CX_QSTCLIENTEXC
    /AWS1/CX_QSTSERVEREXC
    /AWS1/CX_RT_TECHNICAL_GENERIC
    /AWS1/CX_RT_SERVICE_GENERIC.

IMPORTING

Required arguments:

iv_awsaccountid TYPE /AWS1/QSTAWSACCOUNTID /AWS1/QSTAWSACCOUNTID

The ID of the Amazon Web Services account in which to create the DLP setting.

iv_dlpsettingid TYPE /AWS1/QSTDLPSETTINGID /AWS1/QSTDLPSETTINGID

A unique identifier for the DLP setting.

iv_name TYPE /AWS1/QSTDLPSETTINGNAME /AWS1/QSTDLPSETTINGNAME

A human-readable display name for the DLP setting.

iv_providertype TYPE /AWS1/QSTDLPPROVIDERTYPE /AWS1/QSTDLPPROVIDERTYPE

The type of external DLP provider to use for sensitivity label classification. Currently, the only supported value is MICROSOFT_PURVIEW.

io_providerconfig TYPE REF TO /AWS1/CL_QSTPROVIDERCONFIG /AWS1/CL_QSTPROVIDERCONFIG

The provider-specific configuration for the DLP integration. This is a union type structure. For this structure to be valid, only one of the attributes can be defined.

iv_provideroutageaction TYPE /AWS1/QSTDLPACTION /AWS1/QSTDLPACTION

The behavior to apply when the DLP provider is unreachable. Valid values are ALLOW, WARN, and BLOCK.

iv_enabled TYPE /AWS1/QSTBOOLEAN /AWS1/QSTBOOLEAN

Specifies whether DLP enforcement is active for this setting. Set to true to enable enforcement, or false to disable it at time of setting creation.

Optional arguments:

it_tags TYPE /AWS1/CL_QSTTAG=>TT_TAGLIST TT_TAGLIST

A list of resource tags to apply to the DLP setting. You can use tags to manage access to your Amazon Web Services resources.

RETURNING

oo_output TYPE REF TO /aws1/cl_qstcrtdlpsettingrsp /AWS1/CL_QSTCRTDLPSETTINGRSP

Examples

Syntax Example

This is an example of the syntax for calling the method. It includes every possible argument and initializes every possible value. The data provided is not necessarily semantically accurate (for example the value "string" may be provided for something that is intended to be an instance ID, or in some cases two arguments may be mutually exclusive). The syntax shows the ABAP syntax for creating the various data structures.

DATA(lo_result) = lo_client->createdlpsetting(
  io_providerconfig = new /aws1/cl_qstproviderconfig(
    io_microsoftpurview = new /aws1/cl_qstmsftpurviewpvdrcfg(
      io_credentials = new /aws1/cl_qstmsftpurviewcreds( |string| )
      it_labelactionmappings = VALUE /aws1/cl_qstlabelactionmapping=>tt_labelactionmappinglist(
        (
          new /aws1/cl_qstlabelactionmapping(
            iv_action = |string|
            iv_labelid = |string|
            iv_labelname = |string|
          )
        )
      )
      iv_unmappedaction = |string|
    )
  )
  it_tags = VALUE /aws1/cl_qsttag=>tt_taglist(
    (
      new /aws1/cl_qsttag(
        iv_key = |string|
        iv_value = |string|
      )
    )
  )
  iv_awsaccountid = |string|
  iv_dlpsettingid = |string|
  iv_enabled = ABAP_TRUE
  iv_name = |string|
  iv_provideroutageaction = |string|
  iv_providertype = |string|
).

This is an example of reading all possible response values

lo_result = lo_result.
IF lo_result IS NOT INITIAL.
  lv_arn = lo_result->get_arn( ).
  lv_dlpsettingid = lo_result->get_dlpsettingid( ).
  lv_string = lo_result->get_requestid( ).
ENDIF.