Skip to content

CreateThreatIntelSetRequest

Source code in docs_src/capo_guardduty/types/create_threat_intel_set_request.py
class CreateThreatIntelSetRequest(TypedDict, closed=True):
    detector_id: "capo_guardduty.types.detector_id.DetectorId"
    """<p>The unique ID of the detector of the GuardDuty account for which you want to create a <code>threatIntelSet</code>.</p> <p>To find the <code>detectorId</code> in the current Region, see the Settings page in the GuardDuty console, or run the <a href="https://docs.aws.amazon.com/guardduty/latest/APIReference/API_ListDetectors.html">ListDetectors</a> API.</p>"""
    name: NotRequired["capo_guardduty.types.name.Name"]
    """<p>A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.</p>"""
    format: NotRequired[
        "capo_guardduty.types.threat_intel_set_format.ThreatIntelSetFormat"
    ]
    """<p>The format of the file that contains the ThreatIntelSet.</p>"""
    location: NotRequired["capo_guardduty.types.location.Location"]
    """<p>The URI of the file that contains the ThreatIntelSet. </p>"""
    activate: NotRequired["capo_guardduty.types.boolean.Boolean"]
    """<p>A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.</p>"""
    client_token: NotRequired["capo_guardduty.types.client_token.ClientToken"]
    """<p>The idempotency token for the create request.</p>"""
    tags: NotRequired["capo_guardduty.types.tag_map.TagMap"]
    """<p>The tags to be added to a new threat list resource.</p>"""
    expected_bucket_owner: NotRequired["capo_guardduty.types.account_id.AccountId"]
    """<p>The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the <b>location</b> parameter.</p>"""

activate instance-attribute

activate: NotRequired[Boolean]

A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.

client_token instance-attribute

client_token: NotRequired[ClientToken]

The idempotency token for the create request.

detector_id instance-attribute

detector_id: DetectorId

The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet.

To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

expected_bucket_owner instance-attribute

expected_bucket_owner: NotRequired[AccountId]

The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the location parameter.

format instance-attribute

format: NotRequired[ThreatIntelSetFormat]

The format of the file that contains the ThreatIntelSet.

location instance-attribute

location: NotRequired[Location]

The URI of the file that contains the ThreatIntelSet.

name instance-attribute

name: NotRequired[Name]

A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.

tags instance-attribute

tags: NotRequired[TagMap]

The tags to be added to a new threat list resource.