interface CfnThreatIntelSetProps

Language	Type name
.NET	`Amazon.CDK.AWS.GuardDuty.CfnThreatIntelSetProps`
Go	`github.com/aws/aws-cdk-go/awscdk/v2/awsguardduty#CfnThreatIntelSetProps`
Java	`software.amazon.awscdk.services.guardduty.CfnThreatIntelSetProps`
Python	`aws_cdk.aws_guardduty.CfnThreatIntelSetProps`
TypeScript	`aws-cdk-lib` » `aws_guardduty` » `CfnThreatIntelSetProps`

Properties for defining a CfnThreatIntelSet.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_guardduty as guardduty } from 'aws-cdk-lib';
const cfnThreatIntelSetProps: guardduty.CfnThreatIntelSetProps = {
  format: 'format',
  location: 'location',

  // the properties below are optional
  activate: false,
  detectorId: 'detectorId',
  expectedBucketOwner: 'expectedBucketOwner',
  name: 'name',
  tags: [{
    key: 'key',
    value: 'value',
  }],
};

Properties

Name	Type	Description
format	`string`	The format of the file that contains the `ThreatIntelSet` .
location	`string`	The URI of the file that contains the ThreatIntelSet.
activate?	`boolean \|` `IResolvable`	A boolean value that determines if GuardDuty can start using this list for custom threat detection.
detectorId?	`string`	The unique ID of the detector of the GuardDuty account for which you want to create a `threatIntelSet` .
expectedBucketOwner?	`string`	The AWS account ID that owns the Amazon S3 bucket specified in the Location field.
name?	`string`	The user-friendly name to identify the ThreatIntelSet.
tags?	`CfnTag[]`	The tags to be added to a new threat entity set resource.

format

Type: string

The format of the file that contains the ThreatIntelSet .

For information about supported formats, see List formats in the Amazon GuardDuty User Guide .

location

Type: string

The URI of the file that contains the ThreatIntelSet.

activate?

Type: boolean | IResolvable (optional)

A boolean value that determines if GuardDuty can start using this list for custom threat detection.

For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.

detectorId?

Type: string (optional)

The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet .

To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

expectedBucketOwner?

Type: string (optional)

The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

name?

Type: string (optional)

The user-friendly name to identify the ThreatIntelSet.

The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).

tags?

Type: CfnTag[] (optional)

The tags to be added to a new threat entity set resource.

Each tag consists of a key and an optional value, both of which you define.

For more information, see Tag .