1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. guardduty
  5. getThreatEntitySet

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.37.0 published on Wednesday, Oct 15, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.guardduty.getThreatEntitySet

Get Started
aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.37.0 published on Wednesday, Oct 15, 2025 by Pulumi
pulumi/pulumi-aws-native

    Resource Type definition for AWS::GuardDuty::ThreatEntitySet

    Using getThreatEntitySet

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getThreatEntitySet(args: GetThreatEntitySetArgs, opts?: InvokeOptions): Promise<GetThreatEntitySetResult>
function getThreatEntitySetOutput(args: GetThreatEntitySetOutputArgs, opts?: InvokeOptions): Output<GetThreatEntitySetResult>
    def get_threat_entity_set(detector_id: Optional[str] = None,
                          id: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetThreatEntitySetResult
def get_threat_entity_set_output(detector_id: Optional[pulumi.Input[str]] = None,
                          id: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetThreatEntitySetResult]
    func LookupThreatEntitySet(ctx *Context, args *LookupThreatEntitySetArgs, opts ...InvokeOption) (*LookupThreatEntitySetResult, error)
func LookupThreatEntitySetOutput(ctx *Context, args *LookupThreatEntitySetOutputArgs, opts ...InvokeOption) LookupThreatEntitySetResultOutput

    > Note: This function is named LookupThreatEntitySet in the Go SDK.

    public static class GetThreatEntitySet 
{
    public static Task<GetThreatEntitySetResult> InvokeAsync(GetThreatEntitySetArgs args, InvokeOptions? opts = null)
    public static Output<GetThreatEntitySetResult> Invoke(GetThreatEntitySetInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetThreatEntitySetResult> getThreatEntitySet(GetThreatEntitySetArgs args, InvokeOptions options)
public static Output<GetThreatEntitySetResult> getThreatEntitySet(GetThreatEntitySetArgs args, InvokeOptions options)

    fn::invoke:
  function: aws-native:guardduty:getThreatEntitySet
  arguments:
    # arguments dictionary

    The following arguments are supported:

    DetectorId string

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    Id string
    Returns the unique ID associated with the newly created threat entity set.
    DetectorId string

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    Id string
    Returns the unique ID associated with the newly created threat entity set.
    detectorId String

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    id String
    Returns the unique ID associated with the newly created threat entity set.
    detectorId string

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    id string
    Returns the unique ID associated with the newly created threat entity set.
    detector_id str

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    id str
    Returns the unique ID associated with the newly created threat entity set.
    detectorId String

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    id String
    Returns the unique ID associated with the newly created threat entity set.

    getThreatEntitySet Result

    The following output properties are available:

    CreatedAt string
    The timestamp when the threat entity set was created.
    ErrorDetails string
    The details associated with the Error status of your threat entity list.
    ExpectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    Id string
    Returns the unique ID associated with the newly created threat entity set.
    Location string
    The URI of the file that contains the threat entity set.
    Name string
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    Status Pulumi.AwsNative.GuardDuty.ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    Tags List<Pulumi.AwsNative.Outputs.Tag>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    UpdatedAt string
    The timestamp when the threat entity set was updated.
    CreatedAt string
    The timestamp when the threat entity set was created.
    ErrorDetails string
    The details associated with the Error status of your threat entity list.
    ExpectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    Id string
    Returns the unique ID associated with the newly created threat entity set.
    Location string
    The URI of the file that contains the threat entity set.
    Name string
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    Status ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    Tags Tag

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    UpdatedAt string
    The timestamp when the threat entity set was updated.
    createdAt String
    The timestamp when the threat entity set was created.
    errorDetails String
    The details associated with the Error status of your threat entity list.
    expectedBucketOwner String

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    id String
    Returns the unique ID associated with the newly created threat entity set.
    location String
    The URI of the file that contains the threat entity set.
    name String
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    status ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    tags List<Tag>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    updatedAt String
    The timestamp when the threat entity set was updated.
    createdAt string
    The timestamp when the threat entity set was created.
    errorDetails string
    The details associated with the Error status of your threat entity list.
    expectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    id string
    Returns the unique ID associated with the newly created threat entity set.
    location string
    The URI of the file that contains the threat entity set.
    name string
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    status ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    tags Tag[]

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    updatedAt string
    The timestamp when the threat entity set was updated.
    created_at str
    The timestamp when the threat entity set was created.
    error_details str
    The details associated with the Error status of your threat entity list.
    expected_bucket_owner str

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    id str
    Returns the unique ID associated with the newly created threat entity set.
    location str
    The URI of the file that contains the threat entity set.
    name str
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    status ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    tags Sequence[root_Tag]

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    updated_at str
    The timestamp when the threat entity set was updated.
    createdAt String
    The timestamp when the threat entity set was created.
    errorDetails String
    The details associated with the Error status of your threat entity list.
    expectedBucketOwner String

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    id String
    Returns the unique ID associated with the newly created threat entity set.
    location String
    The URI of the file that contains the threat entity set.
    name String
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    status "INACTIVE" | "ACTIVATING" | "ACTIVE" | "DEACTIVATING" | "ERROR" | "DELETE_PENDING" | "DELETED"
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    tags List<Property Map>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    updatedAt String
    The timestamp when the threat entity set was updated.

    Supporting Types

    Tag

    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    ThreatEntitySetStatus

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.37.0 published on Wednesday, Oct 15, 2025 by Pulumi
    pulumi/pulumi-aws-native
      Meet Neo: Your AI Platform Teammate