Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. guardduty
  5. ThreatEntitySet

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.guardduty.ThreatEntitySet

Explore with Pulumi AI

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi
pulumi/pulumi-aws-native

    Resource Type definition for AWS::GuardDuty::ThreatEntitySet

    Create ThreatEntitySet Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ThreatEntitySet(name: string, args: ThreatEntitySetArgs, opts?: CustomResourceOptions);
    @overload
def ThreatEntitySet(resource_name: str,
                    args: ThreatEntitySetArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def ThreatEntitySet(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    format: Optional[str] = None,
                    location: Optional[str] = None,
                    activate: Optional[bool] = None,
                    detector_id: Optional[str] = None,
                    expected_bucket_owner: Optional[str] = None,
                    name: Optional[str] = None,
                    tags: Optional[Sequence[_root_inputs.TagArgs]] = None)
    func NewThreatEntitySet(ctx *Context, name string, args ThreatEntitySetArgs, opts ...ResourceOption) (*ThreatEntitySet, error)
    public ThreatEntitySet(string name, ThreatEntitySetArgs args, CustomResourceOptions? opts = null)
    public ThreatEntitySet(String name, ThreatEntitySetArgs args)
public ThreatEntitySet(String name, ThreatEntitySetArgs args, CustomResourceOptions options)

    type: aws-native:guardduty:ThreatEntitySet
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ThreatEntitySetArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ThreatEntitySetArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ThreatEntitySetArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ThreatEntitySetArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ThreatEntitySetArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    ThreatEntitySet Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ThreatEntitySet resource accepts the following input properties:

    Format string
    The format of the file that contains the threat entity set. For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    Location string
    The URI of the file that contains the threat entity set.
    Activate bool
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
    DetectorId string

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    ExpectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    Name string
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    Tags List<Pulumi.AwsNative.Inputs.Tag>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    Format string
    The format of the file that contains the threat entity set. For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    Location string
    The URI of the file that contains the threat entity set.
    Activate bool
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
    DetectorId string

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    ExpectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    Name string
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    Tags TagArgs

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    format String
    The format of the file that contains the threat entity set. For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    location String
    The URI of the file that contains the threat entity set.
    activate Boolean
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
    detectorId String

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    expectedBucketOwner String

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    name String
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    tags List<Tag>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    format string
    The format of the file that contains the threat entity set. For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    location string
    The URI of the file that contains the threat entity set.
    activate boolean
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
    detectorId string

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    expectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    name string
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    tags Tag[]

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    format str
    The format of the file that contains the threat entity set. For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    location str
    The URI of the file that contains the threat entity set.
    activate bool
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
    detector_id str

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    expected_bucket_owner str

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    name str
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    tags Sequence[TagArgs]

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    format String
    The format of the file that contains the threat entity set. For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    location String
    The URI of the file that contains the threat entity set.
    activate Boolean
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to consider the entries in this list and generate findings based on associated activity, this list must be active.
    detectorId String

    The unique regional detector ID of the GuardDuty account for which you want to create a threat entity set.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    expectedBucketOwner String

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    Whether or not you provide the account ID for this optional field, GuardDuty validates that the account ID associated with the DetectorId owns the S3 bucket in the Location field. If GuardDuty finds that this S3 bucket doesn't belong to the specified account ID, you will get an error at the time of activating this list.

    name String
    The user-friendly name to identify the threat entity set. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).
    tags List<Property Map>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ThreatEntitySet resource produces the following output properties:

    AwsId string
    Returns the unique ID associated with the newly created threat entity set.
    CreatedAt string
    The timestamp when the threat entity set was created.
    ErrorDetails string
    The details associated with the Error status of your threat entity list.
    Id string
    The provider-assigned unique ID for this managed resource.
    Status Pulumi.AwsNative.GuardDuty.ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    UpdatedAt string
    The timestamp when the threat entity set was updated.
    AwsId string
    Returns the unique ID associated with the newly created threat entity set.
    CreatedAt string
    The timestamp when the threat entity set was created.
    ErrorDetails string
    The details associated with the Error status of your threat entity list.
    Id string
    The provider-assigned unique ID for this managed resource.
    Status ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    UpdatedAt string
    The timestamp when the threat entity set was updated.
    awsId String
    Returns the unique ID associated with the newly created threat entity set.
    createdAt String
    The timestamp when the threat entity set was created.
    errorDetails String
    The details associated with the Error status of your threat entity list.
    id String
    The provider-assigned unique ID for this managed resource.
    status ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    updatedAt String
    The timestamp when the threat entity set was updated.
    awsId string
    Returns the unique ID associated with the newly created threat entity set.
    createdAt string
    The timestamp when the threat entity set was created.
    errorDetails string
    The details associated with the Error status of your threat entity list.
    id string
    The provider-assigned unique ID for this managed resource.
    status ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    updatedAt string
    The timestamp when the threat entity set was updated.
    aws_id str
    Returns the unique ID associated with the newly created threat entity set.
    created_at str
    The timestamp when the threat entity set was created.
    error_details str
    The details associated with the Error status of your threat entity list.
    id str
    The provider-assigned unique ID for this managed resource.
    status ThreatEntitySetStatus
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    updated_at str
    The timestamp when the threat entity set was updated.
    awsId String
    Returns the unique ID associated with the newly created threat entity set.
    createdAt String
    The timestamp when the threat entity set was created.
    errorDetails String
    The details associated with the Error status of your threat entity list.
    id String
    The provider-assigned unique ID for this managed resource.
    status "INACTIVE" | "ACTIVATING" | "ACTIVE" | "DEACTIVATING" | "ERROR" | "DELETE_PENDING" | "DELETED"
    The status of your ThreatEntitySet . For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .
    updatedAt String
    The timestamp when the threat entity set was updated.

    Supporting Types

    Tag, TagArgs

    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    ThreatEntitySetStatus, ThreatEntitySetStatusArgs

    Inactive
    INACTIVE
    Activating
    ACTIVATING
    Active
    ACTIVE
    Deactivating
    DEACTIVATING
    Error
    ERROR
    DeletePending
    DELETE_PENDING
    Deleted
    DELETED
    ThreatEntitySetStatusInactive
    INACTIVE
    ThreatEntitySetStatusActivating
    ACTIVATING
    ThreatEntitySetStatusActive
    ACTIVE
    ThreatEntitySetStatusDeactivating
    DEACTIVATING
    ThreatEntitySetStatusError
    ERROR
    ThreatEntitySetStatusDeletePending
    DELETE_PENDING
    ThreatEntitySetStatusDeleted
    DELETED
    Inactive
    INACTIVE
    Activating
    ACTIVATING
    Active
    ACTIVE
    Deactivating
    DEACTIVATING
    Error
    ERROR
    DeletePending
    DELETE_PENDING
    Deleted
    DELETED
    Inactive
    INACTIVE
    Activating
    ACTIVATING
    Active
    ACTIVE
    Deactivating
    DEACTIVATING
    Error
    ERROR
    DeletePending
    DELETE_PENDING
    Deleted
    DELETED
    INACTIVE
    INACTIVE
    ACTIVATING
    ACTIVATING
    ACTIVE
    ACTIVE
    DEACTIVATING
    DEACTIVATING
    ERROR
    ERROR
    DELETE_PENDING
    DELETE_PENDING
    DELETED
    DELETED
    "INACTIVE"
    INACTIVE
    "ACTIVATING"
    ACTIVATING
    "ACTIVE"
    ACTIVE
    "DEACTIVATING"
    DEACTIVATING
    "ERROR"
    ERROR
    "DELETE_PENDING"
    DELETE_PENDING
    "DELETED"
    DELETED

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi
    pulumi/pulumi-aws-native