You are viewing documentation for version 2 of the AWS SDK for Ruby. Version 3 documentation can be found here.

Class: Aws::GuardDuty::Types::CreateThreatIntelSetRequest

Inherits:
Struct
  • Object
show all
Defined in:
(unknown)

Overview

Note:

When passing CreateThreatIntelSetRequest as input to an Aws::Client method, you can use a vanilla Hash:

{
  detector_id: "DetectorId", # required
  name: "Name", # required
  format: "TXT", # required, accepts TXT, STIX, OTX_CSV, ALIEN_VAULT, PROOF_POINT, FIRE_EYE
  location: "Location", # required
  activate: false, # required
  client_token: "ClientToken",
  tags: {
    "TagKey" => "TagValue",
  },
}

See Also:

Instance Attribute Summary collapse

Instance Attribute Details

#activate ⇒ Boolean

A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.

Returns:

  • (Boolean) —

    A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.

#client_token ⇒ String

The idempotency token for the create request.

Returns:

  • (String) —

    The idempotency token for the create request.

#detector_id ⇒ String

The unique ID of the detector of the GuardDuty account that you want to create a threatIntelSet for.

Returns:

  • (String) —

    The unique ID of the detector of the GuardDuty account that you want to create a threatIntelSet for.

#format ⇒ String

The format of the file that contains the ThreatIntelSet.

Possible values:

  • TXT
  • STIX
  • OTX_CSV
  • ALIEN_VAULT
  • PROOF_POINT
  • FIRE_EYE

Returns:

  • (String) —

    The format of the file that contains the ThreatIntelSet.

#location ⇒ String

The URI of the file that contains the ThreatIntelSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.

Returns:

  • (String) —

    The URI of the file that contains the ThreatIntelSet.

#name ⇒ String

A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.

Returns:

  • (String) —

    A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.

#tags ⇒ Hash<String,String>

The tags to be added to a new threat list resource.

Returns:

  • (Hash<String,String>) —

    The tags to be added to a new threat list resource.