Package com.pulumi.aws.guardduty
Class MemberDetectorFeature
- java.lang.Object
-
- com.pulumi.resources.Resource
-
- com.pulumi.resources.CustomResource
-
- com.pulumi.aws.guardduty.MemberDetectorFeature
-
public class MemberDetectorFeature extends com.pulumi.resources.CustomResourceProvides a resource to manage a single Amazon GuardDuty [detector feature](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-features-activation-model.html#guardduty-features) for a member account. > **NOTE:** Deleting this resource does not disable the detector feature in the member account, the resource in simply removed from state instead. ## Example Usage
### Extended Threat Detection for EKS To enable GuardDuty [Extended Threat Detection](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-extended-threat-detection.html) for EKS, you need at least one of these features enabled: [EKS Protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html) or [Runtime Monitoring](https://docs.aws.amazon.com/guardduty/latest/ug/runtime-monitoring-configuration.html). For maximum detection coverage, enabling both is recommended to enhance detection capabilities.package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.guardduty.Detector; import com.pulumi.aws.guardduty.DetectorArgs; import com.pulumi.aws.guardduty.MemberDetectorFeature; import com.pulumi.aws.guardduty.MemberDetectorFeatureArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new Detector("example", DetectorArgs.builder() .enable(true) .build()); var runtimeMonitoring = new MemberDetectorFeature("runtimeMonitoring", MemberDetectorFeatureArgs.builder() .detectorId(example.id()) .accountId("123456789012") .name("S3_DATA_EVENTS") .status("ENABLED") .build()); } }package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.guardduty.Detector; import com.pulumi.aws.guardduty.DetectorArgs; import com.pulumi.aws.guardduty.DetectorFeature; import com.pulumi.aws.guardduty.DetectorFeatureArgs; import com.pulumi.aws.guardduty.inputs.DetectorFeatureAdditionalConfigurationArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var example = new Detector("example", DetectorArgs.builder() .enable(true) .build()); var eksProtection = new DetectorFeature("eksProtection", DetectorFeatureArgs.builder() .detectorId(example.id()) .accountId("123456789012") .name("EKS_AUDIT_LOGS") .status("ENABLED") .build()); var eksRuntimeMonitoring = new DetectorFeature("eksRuntimeMonitoring", DetectorFeatureArgs.builder() .additionalConfigurations(DetectorFeatureAdditionalConfigurationArgs.builder() .name("EKS_ADDON_MANAGEMENT") .status("ENABLED") .build()) .detectorId(example.id()) .accountId("123456789012") .name("EKS_RUNTIME_MONITORING") .status("ENABLED") .build()); } }
-
-
Constructor Summary
Constructors Constructor Description MemberDetectorFeature(java.lang.String name)MemberDetectorFeature(java.lang.String name, MemberDetectorFeatureArgs args)MemberDetectorFeature(java.lang.String name, MemberDetectorFeatureArgs args, com.pulumi.resources.CustomResourceOptions options)
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description com.pulumi.core.Output<java.lang.String>accountId()com.pulumi.core.Output<java.util.Optional<java.util.List<MemberDetectorFeatureAdditionalConfiguration>>>additionalConfigurations()com.pulumi.core.Output<java.lang.String>detectorId()static MemberDetectorFeatureget(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, MemberDetectorFeatureState state, com.pulumi.resources.CustomResourceOptions options)Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.com.pulumi.core.Output<java.lang.String>name()com.pulumi.core.Output<java.lang.String>region()com.pulumi.core.Output<java.lang.String>status()
-
-
-
Constructor Detail
-
MemberDetectorFeature
public MemberDetectorFeature(java.lang.String name)
- Parameters:
name- The _unique_ name of the resulting resource.
-
MemberDetectorFeature
public MemberDetectorFeature(java.lang.String name, MemberDetectorFeatureArgs args)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.
-
MemberDetectorFeature
public MemberDetectorFeature(java.lang.String name, MemberDetectorFeatureArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.options- A bag of options that control this resource's behavior.
-
-
Method Detail
-
accountId
public com.pulumi.core.Output<java.lang.String> accountId()
- Returns:
- Member account ID to be updated.
-
additionalConfigurations
public com.pulumi.core.Output<java.util.Optional<java.util.List<MemberDetectorFeatureAdditionalConfiguration>>> additionalConfigurations()
- Returns:
- Additional feature configuration block. If omitted, Terraform does not track changes to additional configurations that AWS manages for the feature. Removing a previously declared `additionalConfiguration` block leaves the setting unchanged in AWS; to change a setting, update its `status` instead. See below.
-
detectorId
public com.pulumi.core.Output<java.lang.String> detectorId()
- Returns:
- Amazon GuardDuty detector ID.
-
name
public com.pulumi.core.Output<java.lang.String> name()
- Returns:
- Name of the detector feature. Valid values: `S3_DATA_EVENTS`, `EKS_AUDIT_LOGS`, `EBS_MALWARE_PROTECTION`, `RDS_LOGIN_EVENTS`, `EKS_RUNTIME_MONITORING`,`RUNTIME_MONITORING`, `LAMBDA_NETWORK_LOGS`.
-
region
public com.pulumi.core.Output<java.lang.String> region()
- Returns:
- Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
-
status
public com.pulumi.core.Output<java.lang.String> status()
- Returns:
- Status of the detector feature. Valid values: `ENABLED`, `DISABLED`.
-
get
public static MemberDetectorFeature get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, @Nullable MemberDetectorFeatureState state, @Nullable com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.- Parameters:
name- The _unique_ name of the resulting resource.id- The _unique_ provider ID of the resource to lookup.state-options- Optional settings to control the behavior of the CustomResource.
-
-