Class PublishingDestinationArgs


  • public final class PublishingDestinationArgs
    extends com.pulumi.resources.ResourceArgs
    • Method Detail

      • destinationArn

        public com.pulumi.core.Output<java.lang.String> destinationArn()
        Returns:
        Bucket ARN and prefix under which the findings get exported. Bucket-ARN is required, the prefix is optional and will be `AWSLogs/[Account-ID]/GuardDuty/[Region]/` if not provided
      • destinationType

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> destinationType()
        Returns:
        Currently there is only "S3" available as destination type which is also the default value
      • detectorId

        public com.pulumi.core.Output<java.lang.String> detectorId()
        Returns:
        Detector ID of the GuardDuty.
      • kmsKeyArn

        public com.pulumi.core.Output<java.lang.String> kmsKeyArn()
        Returns:
        ARN of the KMS key used to encrypt GuardDuty findings. GuardDuty enforces this to be encrypted.
      • region

        public java.util.Optional<com.pulumi.core.Output<java.lang.String>> region()
        Returns:
        Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
      • tags

        public java.util.Optional<com.pulumi.core.Output<java.util.Map<java.lang.String,​java.lang.String>>> tags()
        Returns:
        Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level. > **Note:** In case of missing permissions (S3 Bucket Policy _or_ KMS Key permissions) the resource will fail to create. If the permissions are changed after resource creation, this can be asked from the AWS API via the "DescribePublishingDestination" call (https://docs.aws.amazon.com/cli/latest/reference/guardduty/describe-publishing-destination.html).