Package com.pulumi.aws.guardduty
Class ThreatIntelSet
- java.lang.Object
-
- com.pulumi.resources.Resource
-
- com.pulumi.resources.CustomResource
-
- com.pulumi.aws.guardduty.ThreatIntelSet
-
public class ThreatIntelSet extends com.pulumi.resources.CustomResourceProvides a resource to manage a GuardDuty ThreatIntelSet. > **Note:** Currently in GuardDuty, users from member accounts cannot upload and further manage ThreatIntelSets. ThreatIntelSets that are uploaded by the primary account are imposed on GuardDuty functionality in its member accounts. See the [GuardDuty API Documentation](https://docs.aws.amazon.com/guardduty/latest/ug/create-threat-intel-set.html) ## Example Usage
## Import Using `pulumi import`, import GuardDuty ThreatIntelSet using the primary GuardDuty detector ID and ThreatIntelSetID. For example: ```sh $ pulumi import aws:guardduty/threatIntelSet:ThreatIntelSet MyThreatIntelSet 00b00fd5aecc0ab60a708659477e9617:123456789012 ```package generated_program; import com.pulumi.Context; import com.pulumi.Pulumi; import com.pulumi.core.Output; import com.pulumi.aws.guardduty.Detector; import com.pulumi.aws.guardduty.DetectorArgs; import com.pulumi.aws.s3.Bucket; import com.pulumi.aws.s3.BucketAcl; import com.pulumi.aws.s3.BucketAclArgs; import com.pulumi.aws.s3.BucketObjectv2; import com.pulumi.aws.s3.BucketObjectv2Args; import com.pulumi.aws.guardduty.ThreatIntelSet; import com.pulumi.aws.guardduty.ThreatIntelSetArgs; import java.util.ArrayList; import java.util.Arrays; import java.util.Map; import java.io.File; import java.nio.file.Files; import java.nio.file.Paths; public class App { public static void main(String[] args) { Pulumi.run(App::stack); } public static void stack(Context ctx) { var primary = new Detector("primary", DetectorArgs.builder() .enable(true) .build()); var bucket = new Bucket("bucket"); var bucketAcl = new BucketAcl("bucketAcl", BucketAclArgs.builder() .bucket(bucket.id()) .acl("private") .build()); var myThreatIntelSet = new BucketObjectv2("myThreatIntelSet", BucketObjectv2Args.builder() .acl("public-read") .content(""" 10.0.0.0/8 """) .bucket(bucket.id()) .key("MyThreatIntelSet") .build()); var myThreatIntelSetThreatIntelSet = new ThreatIntelSet("myThreatIntelSetThreatIntelSet", ThreatIntelSetArgs.builder() .activate(true) .detectorId(primary.id()) .format("TXT") .location(Output.tuple(myThreatIntelSet.bucket(), myThreatIntelSet.key()).applyValue(values -> { var bucket = values.t1; var key = values.t2; return String.format("https://s3.amazonaws.com/%s/%s", bucket,key); })) .name("MyThreatIntelSet") .build()); } }
-
-
Constructor Summary
Constructors Constructor Description ThreatIntelSet(java.lang.String name)ThreatIntelSet(java.lang.String name, ThreatIntelSetArgs args)ThreatIntelSet(java.lang.String name, ThreatIntelSetArgs args, com.pulumi.resources.CustomResourceOptions options)
-
Method Summary
All Methods Static Methods Instance Methods Concrete Methods Modifier and Type Method Description com.pulumi.core.Output<java.lang.Boolean>activate()com.pulumi.core.Output<java.lang.String>arn()com.pulumi.core.Output<java.lang.String>detectorId()com.pulumi.core.Output<java.lang.String>format()static ThreatIntelSetget(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, ThreatIntelSetState state, com.pulumi.resources.CustomResourceOptions options)Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.com.pulumi.core.Output<java.lang.String>location()com.pulumi.core.Output<java.lang.String>name()com.pulumi.core.Output<java.lang.String>region()com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>>tags()com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>>tagsAll()com.pulumi.core.Output<java.lang.String>threatIntelSetId()
-
-
-
Constructor Detail
-
ThreatIntelSet
public ThreatIntelSet(java.lang.String name)
- Parameters:
name- The _unique_ name of the resulting resource.
-
ThreatIntelSet
public ThreatIntelSet(java.lang.String name, ThreatIntelSetArgs args)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.
-
ThreatIntelSet
public ThreatIntelSet(java.lang.String name, ThreatIntelSetArgs args, @Nullable com.pulumi.resources.CustomResourceOptions options)- Parameters:
name- The _unique_ name of the resulting resource.args- The arguments to use to populate this resource's properties.options- A bag of options that control this resource's behavior.
-
-
Method Detail
-
activate
public com.pulumi.core.Output<java.lang.Boolean> activate()
- Returns:
- Whether to start using the uploaded ThreatIntelSet.
-
arn
public com.pulumi.core.Output<java.lang.String> arn()
- Returns:
- ARN of the GuardDuty ThreatIntelSet.
-
detectorId
public com.pulumi.core.Output<java.lang.String> detectorId()
- Returns:
- Detector ID of the GuardDuty.
-
format
public com.pulumi.core.Output<java.lang.String> format()
- Returns:
- Format of the file that contains the ThreatIntelSet. Valid values: `TXT` | `STIX` | `OTX_CSV` | `ALIEN_VAULT` | `PROOF_POINT` | `FIRE_EYE`
-
location
public com.pulumi.core.Output<java.lang.String> location()
- Returns:
- URI of the file that contains the ThreatIntelSet.
-
name
public com.pulumi.core.Output<java.lang.String> name()
- Returns:
- Friendly name to identify the ThreatIntelSet.
-
region
public com.pulumi.core.Output<java.lang.String> region()
- Returns:
- Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
-
tags
public com.pulumi.core.Output<java.util.Optional<java.util.Map<java.lang.String,java.lang.String>>> tags()
- Returns:
- Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
-
tagsAll
public com.pulumi.core.Output<java.util.Map<java.lang.String,java.lang.String>> tagsAll()
- Returns:
- Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
-
threatIntelSetId
public com.pulumi.core.Output<java.lang.String> threatIntelSetId()
- Returns:
- ID of the GuardDuty ThreatIntelSet.
-
get
public static ThreatIntelSet get(java.lang.String name, com.pulumi.core.Output<java.lang.String> id, @Nullable ThreatIntelSetState state, @Nullable com.pulumi.resources.CustomResourceOptions options)
Get an existing Host resource's state with the given name, ID, and optional extra properties used to qualify the lookup.- Parameters:
name- The _unique_ name of the resulting resource.id- The _unique_ provider ID of the resource to lookup.state-options- Optional settings to control the behavior of the CustomResource.
-
-