Interface ICfnThreatIntelSetProps

Properties for defining a CfnThreatIntelSet.

Namespace: Amazon.CDK.AWS.GuardDuty

Assembly: Amazon.CDK.Lib.dll

Syntax (csharp)

public interface ICfnThreatIntelSetProps

Syntax (vb)

Public Interface ICfnThreatIntelSetProps

Remarks

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html

ExampleMetadata: fixture=_generated

Examples

// The code below shows an example of how to instantiate this type.
             // The values are placeholders you should change.
             using Amazon.CDK.AWS.GuardDuty;

             var cfnThreatIntelSetProps = new CfnThreatIntelSetProps {
                 Format = "format",
                 Location = "location",

                 // the properties below are optional
                 Activate = false,
                 DetectorId = "detectorId",
                 ExpectedBucketOwner = "expectedBucketOwner",
                 Name = "name",
                 Tags = new [] { new CfnTag {
                     Key = "key",
                     Value = "value"
                 } }
             };

Synopsis

Properties

Activate	A boolean value that determines if GuardDuty can start using this list for custom threat detection.
DetectorId	The unique ID of the detector of the GuardDuty account for which you want to create a `threatIntelSet` .
ExpectedBucketOwner	The AWS account ID that owns the Amazon S3 bucket specified in the Location field.
Format	The format of the file that contains the `ThreatIntelSet` .
Location	The URI of the file that contains the ThreatIntelSet.
Name	The user-friendly name to identify the ThreatIntelSet.
Tags	The tags to be added to a new threat entity set resource.

Properties

Activate

A boolean value that determines if GuardDuty can start using this list for custom threat detection.

object? Activate { get; }

Property Value

object

Remarks

For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-activate

Type union: either bool or IResolvable

DetectorId

The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet .

string? DetectorId { get; }

Property Value

string

Remarks

To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-detectorid

ExpectedBucketOwner

The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

string? ExpectedBucketOwner { get; }

Property Value

string

Remarks

When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

See: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-threatintelset.html#cfn-guardduty-threatintelset-expectedbucketowner