Module Values.CreateThreatIntelSetRequestSource

Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can use this operation.

Sourcetype nonrec t = {
  1. detectorId : DetectorId.t;
    (*

    The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet. To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the ListDetectors API.

    *)
  2. name : Name.t;
    (*

    A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.

    *)
  3. format : ThreatIntelSetFormat.t;
    (*

    The format of the file that contains the ThreatIntelSet.

    *)
  4. location : Location.t;
    (*

    The URI of the file that contains the ThreatIntelSet.

    *)
  5. activate : Boolean.t;
    (*

    A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.

    *)
  6. clientToken : ClientToken.t option;
    (*

    The idempotency token for the create request.

    *)
  7. tags : TagMap.t option;
    (*

    The tags to be added to a new threat list resource.

    *)
  8. expectedBucketOwner : AccountId.t option;
    (*

    The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the location parameter.

    *)
}
Sourceval context_ : string
Sourceval make : ?clientToken:??? -> ?tags:??? -> ?expectedBucketOwner:??? -> detectorId:DetectorId.t -> name:Name.t -> format:ThreatIntelSetFormat.t -> location:Location.t -> activate:Boolean.t -> unit -> t
Sourceval to_value : t -> [> `Structure of (string * [> `Boolean of Boolean.t | `Enum of string | `Map of ([> `String of TagKey.t ] * [> `String of TagValue.t ]) list | `String of DetectorId.t ]) list ]
Sourceval to_query : t -> Awso.Client.Query.t
Sourceval of_xml : Awso.Xml.t -> t
Sourceval of_string : string -> t
Sourceval of_json : Yojson.Safe.t -> t
Sourceval to_json : t -> Yojson.Safe.t