Package com.pulumi.aws.guardduty

Class ThreatIntelSet

  • public class ThreatIntelSet
extends com.pulumi.resources.CustomResource
    Provides a resource to manage a GuardDuty ThreatIntelSet. > **Note:** Currently in GuardDuty, users from member accounts cannot upload and further manage ThreatIntelSets. ThreatIntelSets that are uploaded by the primary account are imposed on GuardDuty functionality in its member accounts. See the [GuardDuty API Documentation](https://docs.aws.amazon.com/guardduty/latest/ug/create-threat-intel-set.html) ## Example Usage <!--Start PulumiCodeChooser --> ```java package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.guardduty.Detector; import com.pulumi.aws.guardduty.DetectorArgs; import com.pulumi.aws.s3.BucketV2; import com.pulumi.aws.s3.BucketAclV2; import com.pulumi.aws.s3.BucketAclV2Args; import com.pulumi.aws.s3.BucketObjectv2; import com.pulumi.aws.s3.BucketObjectv2Args; import com.pulumi.aws.guardduty.ThreatIntelSet; import com.pulumi.aws.guardduty.ThreatIntelSetArgs; import java.util.List; import java.util.ArrayList; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var primary = new Detector("primary", DetectorArgs.builder() .enable(true) .build()); var bucket = new BucketV2("bucket"); var bucketAcl = new BucketAclV2("bucketAcl", BucketAclV2Args.builder() .bucket(bucket.id()) .acl("private") .build()); var myThreatIntelSet = new BucketObjectv2("myThreatIntelSet", BucketObjectv2Args.builder() .acl("public-read") .content(""" 10.0.0.0/8 """) .bucket(bucket.id()) .key("MyThreatIntelSet") .build()); var myThreatIntelSetThreatIntelSet = new ThreatIntelSet("myThreatIntelSetThreatIntelSet", ThreatIntelSetArgs.builder() .activate(true) .detectorId(primary.id()) .format("TXT") .location(Output.tuple(myThreatIntelSet.bucket(), myThreatIntelSet.key()).applyValue(values -> { var bucket = values.t1; var key = values.t2; return String.format("https://s3.amazonaws.com/%s/%s", bucket,key); })) .name("MyThreatIntelSet") .build()); } } ``` <!--End PulumiCodeChooser --> ## Import Using `pulumi import`, import GuardDuty ThreatIntelSet using the primary GuardDuty detector ID and ThreatIntelSetID. For example: ```sh $ pulumi import aws:guardduty/threatIntelSet:ThreatIntelSet MyThreatIntelSet 00b00fd5aecc0ab60a708659477e9617:123456789012 ```

    • Nested Class Summary

      • Nested classes/interfaces inherited from class com.pulumi.resources.CustomResource

        com.pulumi.resources.CustomResource.CustomResourceInternal

      • Nested classes/interfaces inherited from class com.pulumi.resources.Resource

        com.pulumi.resources.Resource.LazyField<T extends java.lang.Object>, com.pulumi.resources.Resource.LazyFields, com.pulumi.resources.Resource.ResourceInternal

    • Field Summary

      • Fields inherited from class com.pulumi.resources.Resource

        childResources, remote

    • Method Summary

      All Methods Static Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      com.pulumi.core.Output<java.lang.Boolean> activate()  
      com.pulumi.core.Output<java.lang.String> arn()  
      com.pulumi.core.Output<java.lang.String> detectorId()  
      com.pulumi.core.Output<java.lang.String> format()  
      static ThreatIntelSet get​(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, ThreatIntelSetState state, com.pulumi.resources.CustomResourceOptions options)
      Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
      com.pulumi.core.Output<java.lang.String> location()  
      com.pulumi.core.Output<java.lang.String> name()  
      com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,​java.lang.String>>> tags()  
      com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tagsAll()  

      • Methods inherited from class com.pulumi.resources.CustomResource

        getId, id, idFuture

      • Methods inherited from class com.pulumi.resources.Resource

        getChildResources, getResourceName, getResourceType, getUrn, pulumiChildResources, pulumiResourceName, pulumiResourceType, urn

      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

    • Constructor Detail

      • ThreatIntelSet

        public ThreatIntelSet​(java.lang.String name)
        Parameters:
        name - The _unique_ name of the resulting resource.

      • ThreatIntelSet

        public ThreatIntelSet​(java.lang.String name,
                      ThreatIntelSetArgs args)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.

      • ThreatIntelSet

        public ThreatIntelSet​(java.lang.String name,
                      ThreatIntelSetArgs args,
                      @Nullable
                      com.pulumi.resources.CustomResourceOptions options)
        Parameters:
        name - The _unique_ name of the resulting resource.
        args - The arguments to use to populate this resource's properties.
        options - A bag of options that control this resource's behavior.

    • Method Detail

      • activate

        public com.pulumi.core.Output<java.lang.Boolean> activate()
        Returns:
        Specifies whether GuardDuty is to start using the uploaded ThreatIntelSet.

      • arn

        public com.pulumi.core.Output<java.lang.String> arn()
        Returns:
        Amazon Resource Name (ARN) of the GuardDuty ThreatIntelSet.

      • detectorId

        public com.pulumi.core.Output<java.lang.String> detectorId()
        Returns:
        The detector ID of the GuardDuty.

      • format

        public com.pulumi.core.Output<java.lang.String> format()
        Returns:
        The format of the file that contains the ThreatIntelSet. Valid values: `TXT` | `STIX` | `OTX_CSV` | `ALIEN_VAULT` | `PROOF_POINT` | `FIRE_EYE`

      • location

        public com.pulumi.core.Output<java.lang.String> location()
        Returns:
        The URI of the file that contains the ThreatIntelSet.

      • name

        public com.pulumi.core.Output<java.lang.String> name()
        Returns:
        The friendly name to identify the ThreatIntelSet.

      • tags

        public com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Key-value map of resource tags. .If configured with a provider `default_tags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.

      • tagsAll

        public com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>> tagsAll()
        Returns:
        A map of tags assigned to the resource, including those inherited from the provider `default_tags` configuration block.

      • get

        public static ThreatIntelSet get​(java.lang.String name,
                                 com.pulumi.core.Output<java.lang.String> id,
                                 @Nullable
                                 ThreatIntelSetState state,
                                 @Nullable
                                 com.pulumi.resources.CustomResourceOptions options)
        Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.
        Parameters:
        name - The _unique_ name of the resulting resource.
        id - The _unique_ provider ID of the resource to lookup.
        state -
        options - Optional settings to control the behavior of the CustomResource.