Class ThreatIntelSet
Provides a resource to manage a GuardDuty ThreatIntelSet.
Note: Currently in GuardDuty, users from member accounts cannot upload and further manage ThreatIntelSets. ThreatIntelSets that are uploaded by the master account are imposed on GuardDuty functionality in its member accounts. See the GuardDuty API Documentation
Example Usage
using Pulumi;
using Aws = Pulumi.Aws;
class MyStack : Stack
{
public MyStack()
{
var master = new Aws.GuardDuty.Detector("master", new Aws.GuardDuty.DetectorArgs
{
Enable = true,
});
var bucket = new Aws.S3.Bucket("bucket", new Aws.S3.BucketArgs
{
Acl = "private",
});
var myThreatIntelSetBucketObject = new Aws.S3.BucketObject("myThreatIntelSetBucketObject", new Aws.S3.BucketObjectArgs
{
Acl = "public-read",
Bucket = bucket.Id,
Content = @"10.0.0.0/8
",
Key = "MyThreatIntelSet",
});
var myThreatIntelSetThreatIntelSet = new Aws.GuardDuty.ThreatIntelSet("myThreatIntelSetThreatIntelSet", new Aws.GuardDuty.ThreatIntelSetArgs
{
Activate = true,
DetectorId = master.Id,
Format = "TXT",
Location = Output.Tuple(myThreatIntelSetBucketObject.Bucket, myThreatIntelSetBucketObject.Key).Apply(values =>
{
var bucket = values.Item1;
var key = values.Item2;
return $"https://s3.amazonaws.com/{bucket}/{key}";
}),
});
}
}
Inherited Members
Namespace: Pulumi.Aws.GuardDuty
Assembly: Pulumi.Aws.dll
Syntax
public class ThreatIntelSet : CustomResource
Constructors
View SourceThreatIntelSet(String, ThreatIntelSetArgs, CustomResourceOptions)
Create a ThreatIntelSet resource with the given unique name, arguments, and options.
Declaration
public ThreatIntelSet(string name, ThreatIntelSetArgs args, CustomResourceOptions options = null)
Parameters
| Type | Name | Description |
|---|---|---|
| System.String | name | The unique name of the resource |
| ThreatIntelSetArgs | args | The arguments used to populate this resource's properties |
| CustomResourceOptions | options | A bag of options that control this resource's behavior |
Properties
View SourceActivate
Specifies whether GuardDuty is to start using the uploaded ThreatIntelSet.
Declaration
public Output<bool> Activate { get; }
Property Value
| Type | Description |
|---|---|
| Output<System.Boolean> |
DetectorId
The detector ID of the GuardDuty.
Declaration
public Output<string> DetectorId { get; }
Property Value
| Type | Description |
|---|---|
| Output<System.String> |
Format
The format of the file that contains the ThreatIntelSet. Valid values: TXT | STIX | OTX_CSV | ALIEN_VAULT | PROOF_POINT | FIRE_EYE
Declaration
public Output<string> Format { get; }
Property Value
| Type | Description |
|---|---|
| Output<System.String> |
Location
The URI of the file that contains the ThreatIntelSet.
Declaration
public Output<string> Location { get; }
Property Value
| Type | Description |
|---|---|
| Output<System.String> |
Name
The friendly name to identify the ThreatIntelSet.
Declaration
public Output<string> Name { get; }
Property Value
| Type | Description |
|---|---|
| Output<System.String> |
Methods
View SourceGet(String, Input<String>, ThreatIntelSetState, CustomResourceOptions)
Get an existing ThreatIntelSet resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
Declaration
public static ThreatIntelSet Get(string name, Input<string> id, ThreatIntelSetState state = null, CustomResourceOptions options = null)
Parameters
| Type | Name | Description |
|---|---|---|
| System.String | name | The unique name of the resulting resource. |
| Input<System.String> | id | The unique provider ID of the resource to lookup. |
| ThreatIntelSetState | state | Any extra arguments used during the lookup. |
| CustomResourceOptions | options | A bag of options that control this resource's behavior |
Returns
| Type | Description |
|---|---|
| ThreatIntelSet |