Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi IDP Pulumi Cloud Packages Tutorials
  1. Packages
  2. AWS Cloud Control
  3. API Docs
  4. guardduty
  5. ThreatIntelSet

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi
pulumi/pulumi-aws-native

aws-native.guardduty.ThreatIntelSet

Explore with Pulumi AI

aws-native logo

We recommend new projects start with resources from the AWS provider.

AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi
pulumi/pulumi-aws-native

    Resource Type definition for AWS::GuardDuty::ThreatIntelSet

    Create ThreatIntelSet Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ThreatIntelSet(name: string, args: ThreatIntelSetArgs, opts?: CustomResourceOptions);
    @overload
def ThreatIntelSet(resource_name: str,
                   args: ThreatIntelSetArgs,
                   opts: Optional[ResourceOptions] = None)

@overload
def ThreatIntelSet(resource_name: str,
                   opts: Optional[ResourceOptions] = None,
                   format: Optional[str] = None,
                   location: Optional[str] = None,
                   activate: Optional[bool] = None,
                   detector_id: Optional[str] = None,
                   expected_bucket_owner: Optional[str] = None,
                   name: Optional[str] = None,
                   tags: Optional[Sequence[_root_inputs.TagArgs]] = None)
    func NewThreatIntelSet(ctx *Context, name string, args ThreatIntelSetArgs, opts ...ResourceOption) (*ThreatIntelSet, error)
    public ThreatIntelSet(string name, ThreatIntelSetArgs args, CustomResourceOptions? opts = null)
    public ThreatIntelSet(String name, ThreatIntelSetArgs args)
public ThreatIntelSet(String name, ThreatIntelSetArgs args, CustomResourceOptions options)

    type: aws-native:guardduty:ThreatIntelSet
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ThreatIntelSetArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ThreatIntelSetArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ThreatIntelSetArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ThreatIntelSetArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ThreatIntelSetArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    ThreatIntelSet Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ThreatIntelSet resource accepts the following input properties:

    Format string
    The format of the file that contains the ThreatIntelSet . For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    Location string
    The URI of the file that contains the ThreatIntelSet.
    Activate bool
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
    DetectorId string

    The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    ExpectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    Name string

    The user-friendly name to identify the ThreatIntelSet.

    The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).

    Tags List<Pulumi.AwsNative.Inputs.Tag>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    Format string
    The format of the file that contains the ThreatIntelSet . For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    Location string
    The URI of the file that contains the ThreatIntelSet.
    Activate bool
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
    DetectorId string

    The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    ExpectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    Name string

    The user-friendly name to identify the ThreatIntelSet.

    The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).

    Tags TagArgs

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    format String
    The format of the file that contains the ThreatIntelSet . For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    location String
    The URI of the file that contains the ThreatIntelSet.
    activate Boolean
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
    detectorId String

    The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    expectedBucketOwner String

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    name String

    The user-friendly name to identify the ThreatIntelSet.

    The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).

    tags List<Tag>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    format string
    The format of the file that contains the ThreatIntelSet . For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    location string
    The URI of the file that contains the ThreatIntelSet.
    activate boolean
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
    detectorId string

    The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    expectedBucketOwner string

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    name string

    The user-friendly name to identify the ThreatIntelSet.

    The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).

    tags Tag[]

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    format str
    The format of the file that contains the ThreatIntelSet . For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    location str
    The URI of the file that contains the ThreatIntelSet.
    activate bool
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
    detector_id str

    The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    expected_bucket_owner str

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    name str

    The user-friendly name to identify the ThreatIntelSet.

    The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).

    tags Sequence[TagArgs]

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    format String
    The format of the file that contains the ThreatIntelSet . For information about supported formats, see List formats in the Amazon GuardDuty User Guide .
    location String
    The URI of the file that contains the ThreatIntelSet.
    activate Boolean
    A boolean value that determines if GuardDuty can start using this list for custom threat detection. For GuardDuty to be able to generate findings based on an activity associated with these entries, this list must be active.
    detectorId String

    The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet .

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    expectedBucketOwner String

    The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    When you provide this account ID, GuardDuty will validate that the S3 bucket belongs to this account. If you don't specify an account ID owner, GuardDuty doesn't perform any validation.

    name String

    The user-friendly name to identify the ThreatIntelSet.

    The name of your list must be unique within an AWS account and Region. Valid characters are alphanumeric, whitespace, dash (-), and underscores (_).

    tags List<Property Map>

    The tags to be added to a new threat entity set resource. Each tag consists of a key and an optional value, both of which you define.

    For more information, see Tag .

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ThreatIntelSet resource produces the following output properties:

    AwsId string
    The unique ID of the threatIntelSet .
    Id string
    The provider-assigned unique ID for this managed resource.
    AwsId string
    The unique ID of the threatIntelSet .
    Id string
    The provider-assigned unique ID for this managed resource.
    awsId String
    The unique ID of the threatIntelSet .
    id String
    The provider-assigned unique ID for this managed resource.
    awsId string
    The unique ID of the threatIntelSet .
    id string
    The provider-assigned unique ID for this managed resource.
    aws_id str
    The unique ID of the threatIntelSet .
    id str
    The provider-assigned unique ID for this managed resource.
    awsId String
    The unique ID of the threatIntelSet .
    id String
    The provider-assigned unique ID for this managed resource.

    Supporting Types

    Tag, TagArgs

    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    AWS Cloud Control v1.34.0 published on Friday, Sep 12, 2025 by Pulumi
    pulumi/pulumi-aws-native