interface CfnTrustedEntitySetProps

Language	Type name
.NET	`Amazon.CDK.AWS.GuardDuty.CfnTrustedEntitySetProps`
Go	`github.com/aws/aws-cdk-go/awscdk/v2/awsguardduty#CfnTrustedEntitySetProps`
Java	`software.amazon.awscdk.services.guardduty.CfnTrustedEntitySetProps`
Python	`aws_cdk.aws_guardduty.CfnTrustedEntitySetProps`
TypeScript	`aws-cdk-lib` » `aws_guardduty` » `CfnTrustedEntitySetProps`

Properties for defining a CfnTrustedEntitySet.

Example

// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_guardduty as guardduty } from 'aws-cdk-lib';
const cfnTrustedEntitySetProps: guardduty.CfnTrustedEntitySetProps = {
  format: 'format',
  location: 'location',

  // the properties below are optional
  activate: false,
  detectorId: 'detectorId',
  expectedBucketOwner: 'expectedBucketOwner',
  name: 'name',
  tags: [{
    key: 'key',
    value: 'value',
  }],
};

Properties

Name	Type	Description
format	`string`	The format of the file that contains the trusted entity set.
location	`string`	The URI of the file that contains the trusted entity set.
activate?	`boolean \|` `IResolvable`	A boolean value that determines if GuardDuty can start using this list for custom threat detection.
detectorId?	`string`	The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.
expectedBucketOwner?	`string`	The AWS account ID that owns the Amazon S3 bucket specified in the Location field.
name?	`string`	A user-friendly name to identify the trusted entity set.
tags?	`TagItemProperty[]`	The tags to be added to a new trusted entity set resource.

format

Type: string

The format of the file that contains the trusted entity set.

For information about supported formats, see List formats in the Amazon GuardDuty User Guide .

location

Type: string

The URI of the file that contains the trusted entity set.

activate?

Type: boolean | IResolvable (optional)

A boolean value that determines if GuardDuty can start using this list for custom threat detection.

For GuardDuty to prevent generating findings based on an activity associated with these entries, this list must be active.

detectorId?

Type: string (optional)

The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.

To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

expectedBucketOwner?

Type: string (optional)

The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId value owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

name?

Type: string (optional)

A user-friendly name to identify the trusted entity set.

Valid characters include lowercase letters, uppercase letters, numbers, dash(-), and underscore (_).

tags?

Type: TagItemProperty[] (optional)

The tags to be added to a new trusted entity set resource.

Each tag consists of a key and an optional value, both of which you define.

For more information, see Tag .