Module Values.CreateThreatEntitySetRequestSource

Creates a new threat entity set. In a threat entity set, you can provide known malicious IP addresses and domains for your Amazon Web Services environment. GuardDuty generates findings based on the entries in the threat entity sets. Only users of the administrator account can manage entity sets, which automatically apply to member accounts.

Sourcetype nonrec t = {
  1. detectorId : DetectorId.t;
    (*

    The unique ID of the detector of the GuardDuty account for which you want to create a threat entity set. To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    *)
  2. name : Name.t;
    (*

    A user-friendly name to identify the threat entity set. The name of your list can include lowercase letters, uppercase letters, numbers, dash (-), and underscore (_).

    *)
  3. format : ThreatEntitySetFormat.t;
    (*

    The format of the file that contains the threat entity set.

    *)
  4. location : Location.t;
    (*

    The URI of the file that contains the threat entity set. The format of the Location URL must be a valid Amazon S3 URL format. Invalid URL formats will result in an error, regardless of whether you activate the entity set or not. For more information about format of the location URLs, see Format of location URL under Step 2: Adding trusted or threat intelligence data in the Amazon GuardDuty User Guide.

    *)
  5. expectedBucketOwner : ExpectedBucketOwner.t option;
    (*

    The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the location parameter.

    *)
  6. activate : Boolean.t;
    (*

    A boolean value that indicates whether GuardDuty should start using the uploaded threat entity set to generate findings.

    *)
  7. clientToken : ClientToken.t option;
    (*

    The idempotency token for the create request.

    *)
  8. tags : TagMap.t option;
    (*

    The tags to be added to a new threat entity set resource.

    *)
}
Sourceval context_ : string
Sourceval make : ?expectedBucketOwner:??? -> ?clientToken:??? -> ?tags:??? -> detectorId:DetectorId.t -> name:Name.t -> format:ThreatEntitySetFormat.t -> location:Location.t -> activate:Boolean.t -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `Boolean of Boolean.t | `Enum of string | `Map of ([> `String of TagKey.t ] * [> `String of TagValue.t ]) list | `String of DetectorId.t ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t