Documentation ¶
Index ¶
- func CfnDetector_CFN_RESOURCE_TYPE_NAME() *string
- func CfnDetector_IsCfnElement(x interface{}) *bool
- func CfnDetector_IsCfnResource(construct constructs.IConstruct) *bool
- func CfnDetector_IsConstruct(x interface{}) *bool
- func CfnFilter_CFN_RESOURCE_TYPE_NAME() *string
- func CfnFilter_IsCfnElement(x interface{}) *bool
- func CfnFilter_IsCfnResource(construct constructs.IConstruct) *bool
- func CfnFilter_IsConstruct(x interface{}) *bool
- func CfnIPSet_CFN_RESOURCE_TYPE_NAME() *string
- func CfnIPSet_IsCfnElement(x interface{}) *bool
- func CfnIPSet_IsCfnResource(construct constructs.IConstruct) *bool
- func CfnIPSet_IsConstruct(x interface{}) *bool
- func CfnMaster_CFN_RESOURCE_TYPE_NAME() *string
- func CfnMaster_IsCfnElement(x interface{}) *bool
- func CfnMaster_IsCfnResource(construct constructs.IConstruct) *bool
- func CfnMaster_IsConstruct(x interface{}) *bool
- func CfnMember_CFN_RESOURCE_TYPE_NAME() *string
- func CfnMember_IsCfnElement(x interface{}) *bool
- func CfnMember_IsCfnResource(construct constructs.IConstruct) *bool
- func CfnMember_IsConstruct(x interface{}) *bool
- func CfnThreatIntelSet_CFN_RESOURCE_TYPE_NAME() *string
- func CfnThreatIntelSet_IsCfnElement(x interface{}) *bool
- func CfnThreatIntelSet_IsCfnResource(construct constructs.IConstruct) *bool
- func CfnThreatIntelSet_IsConstruct(x interface{}) *bool
- func NewCfnDetector_Override(c CfnDetector, scope constructs.Construct, id *string, props *CfnDetectorProps)
- func NewCfnFilter_Override(c CfnFilter, scope constructs.Construct, id *string, props *CfnFilterProps)
- func NewCfnIPSet_Override(c CfnIPSet, scope constructs.Construct, id *string, props *CfnIPSetProps)
- func NewCfnMaster_Override(c CfnMaster, scope constructs.Construct, id *string, props *CfnMasterProps)
- func NewCfnMember_Override(c CfnMember, scope constructs.Construct, id *string, props *CfnMemberProps)
- func NewCfnThreatIntelSet_Override(c CfnThreatIntelSet, scope constructs.Construct, id *string, ...)
- type CfnDetector
- type CfnDetectorProps
- type CfnDetector_CFNDataSourceConfigurationsProperty
- type CfnDetector_CFNKubernetesAuditLogsConfigurationProperty
- type CfnDetector_CFNKubernetesConfigurationProperty
- type CfnDetector_CFNS3LogsConfigurationProperty
- type CfnFilter
- type CfnFilterProps
- type CfnFilter_ConditionProperty
- type CfnFilter_FindingCriteriaProperty
- type CfnIPSet
- type CfnIPSetProps
- type CfnMaster
- type CfnMasterProps
- type CfnMember
- type CfnMemberProps
- type CfnThreatIntelSet
- type CfnThreatIntelSetProps
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func CfnDetector_CFN_RESOURCE_TYPE_NAME ¶
func CfnDetector_CFN_RESOURCE_TYPE_NAME() *string
func CfnDetector_IsCfnElement ¶
func CfnDetector_IsCfnElement(x interface{}) *bool
Returns `true` if a construct is a stack element (i.e. part of the synthesized cloudformation template).
Uses duck-typing instead of `instanceof` to allow stack elements from different versions of this library to be included in the same stack.
Returns: The construct as a stack element or undefined if it is not a stack element.
func CfnDetector_IsCfnResource ¶
func CfnDetector_IsCfnResource(construct constructs.IConstruct) *bool
Check whether the given construct is a CfnResource.
func CfnDetector_IsConstruct ¶
func CfnDetector_IsConstruct(x interface{}) *bool
Checks if `x` is a construct.
Returns: true if `x` is an object created from a class which extends `Construct`. Deprecated: use `x instanceof Construct` instead
func CfnFilter_CFN_RESOURCE_TYPE_NAME ¶
func CfnFilter_CFN_RESOURCE_TYPE_NAME() *string
func CfnFilter_IsCfnElement ¶
func CfnFilter_IsCfnElement(x interface{}) *bool
Returns `true` if a construct is a stack element (i.e. part of the synthesized cloudformation template).
Uses duck-typing instead of `instanceof` to allow stack elements from different versions of this library to be included in the same stack.
Returns: The construct as a stack element or undefined if it is not a stack element.
func CfnFilter_IsCfnResource ¶
func CfnFilter_IsCfnResource(construct constructs.IConstruct) *bool
Check whether the given construct is a CfnResource.
func CfnFilter_IsConstruct ¶
func CfnFilter_IsConstruct(x interface{}) *bool
Checks if `x` is a construct.
Returns: true if `x` is an object created from a class which extends `Construct`. Deprecated: use `x instanceof Construct` instead
func CfnIPSet_CFN_RESOURCE_TYPE_NAME ¶
func CfnIPSet_CFN_RESOURCE_TYPE_NAME() *string
func CfnIPSet_IsCfnElement ¶
func CfnIPSet_IsCfnElement(x interface{}) *bool
Returns `true` if a construct is a stack element (i.e. part of the synthesized cloudformation template).
Uses duck-typing instead of `instanceof` to allow stack elements from different versions of this library to be included in the same stack.
Returns: The construct as a stack element or undefined if it is not a stack element.
func CfnIPSet_IsCfnResource ¶
func CfnIPSet_IsCfnResource(construct constructs.IConstruct) *bool
Check whether the given construct is a CfnResource.
func CfnIPSet_IsConstruct ¶
func CfnIPSet_IsConstruct(x interface{}) *bool
Checks if `x` is a construct.
Returns: true if `x` is an object created from a class which extends `Construct`. Deprecated: use `x instanceof Construct` instead
func CfnMaster_CFN_RESOURCE_TYPE_NAME ¶
func CfnMaster_CFN_RESOURCE_TYPE_NAME() *string
func CfnMaster_IsCfnElement ¶
func CfnMaster_IsCfnElement(x interface{}) *bool
Returns `true` if a construct is a stack element (i.e. part of the synthesized cloudformation template).
Uses duck-typing instead of `instanceof` to allow stack elements from different versions of this library to be included in the same stack.
Returns: The construct as a stack element or undefined if it is not a stack element.
func CfnMaster_IsCfnResource ¶
func CfnMaster_IsCfnResource(construct constructs.IConstruct) *bool
Check whether the given construct is a CfnResource.
func CfnMaster_IsConstruct ¶
func CfnMaster_IsConstruct(x interface{}) *bool
Checks if `x` is a construct.
Returns: true if `x` is an object created from a class which extends `Construct`. Deprecated: use `x instanceof Construct` instead
func CfnMember_CFN_RESOURCE_TYPE_NAME ¶
func CfnMember_CFN_RESOURCE_TYPE_NAME() *string
func CfnMember_IsCfnElement ¶
func CfnMember_IsCfnElement(x interface{}) *bool
Returns `true` if a construct is a stack element (i.e. part of the synthesized cloudformation template).
Uses duck-typing instead of `instanceof` to allow stack elements from different versions of this library to be included in the same stack.
Returns: The construct as a stack element or undefined if it is not a stack element.
func CfnMember_IsCfnResource ¶
func CfnMember_IsCfnResource(construct constructs.IConstruct) *bool
Check whether the given construct is a CfnResource.
func CfnMember_IsConstruct ¶
func CfnMember_IsConstruct(x interface{}) *bool
Checks if `x` is a construct.
Returns: true if `x` is an object created from a class which extends `Construct`. Deprecated: use `x instanceof Construct` instead
func CfnThreatIntelSet_CFN_RESOURCE_TYPE_NAME ¶
func CfnThreatIntelSet_CFN_RESOURCE_TYPE_NAME() *string
func CfnThreatIntelSet_IsCfnElement ¶
func CfnThreatIntelSet_IsCfnElement(x interface{}) *bool
Returns `true` if a construct is a stack element (i.e. part of the synthesized cloudformation template).
Uses duck-typing instead of `instanceof` to allow stack elements from different versions of this library to be included in the same stack.
Returns: The construct as a stack element or undefined if it is not a stack element.
func CfnThreatIntelSet_IsCfnResource ¶
func CfnThreatIntelSet_IsCfnResource(construct constructs.IConstruct) *bool
Check whether the given construct is a CfnResource.
func CfnThreatIntelSet_IsConstruct ¶
func CfnThreatIntelSet_IsConstruct(x interface{}) *bool
Checks if `x` is a construct.
Returns: true if `x` is an object created from a class which extends `Construct`. Deprecated: use `x instanceof Construct` instead
func NewCfnDetector_Override ¶
func NewCfnDetector_Override(c CfnDetector, scope constructs.Construct, id *string, props *CfnDetectorProps)
Create a new `AWS::GuardDuty::Detector`.
func NewCfnFilter_Override ¶
func NewCfnFilter_Override(c CfnFilter, scope constructs.Construct, id *string, props *CfnFilterProps)
Create a new `AWS::GuardDuty::Filter`.
func NewCfnIPSet_Override ¶
func NewCfnIPSet_Override(c CfnIPSet, scope constructs.Construct, id *string, props *CfnIPSetProps)
Create a new `AWS::GuardDuty::IPSet`.
func NewCfnMaster_Override ¶
func NewCfnMaster_Override(c CfnMaster, scope constructs.Construct, id *string, props *CfnMasterProps)
Create a new `AWS::GuardDuty::Master`.
func NewCfnMember_Override ¶
func NewCfnMember_Override(c CfnMember, scope constructs.Construct, id *string, props *CfnMemberProps)
Create a new `AWS::GuardDuty::Member`.
func NewCfnThreatIntelSet_Override ¶
func NewCfnThreatIntelSet_Override(c CfnThreatIntelSet, scope constructs.Construct, id *string, props *CfnThreatIntelSetProps)
Create a new `AWS::GuardDuty::ThreatIntelSet`.
Types ¶
type CfnDetector ¶
type CfnDetector interface { awscdk.CfnResource awscdk.IInspectable CfnOptions() awscdk.ICfnResourceOptions CfnProperties() *map[string]interface{} CfnResourceType() *string CreationStack() *[]*string DataSources() interface{} SetDataSources(val interface{}) Enable() interface{} SetEnable(val interface{}) FindingPublishingFrequency() *string SetFindingPublishingFrequency(val *string) LogicalId() *string Node() constructs.Node Ref() *string Stack() awscdk.Stack UpdatedProperites() *map[string]interface{} AddDeletionOverride(path *string) AddDependsOn(target awscdk.CfnResource) AddMetadata(key *string, value interface{}) AddOverride(path *string, value interface{}) AddPropertyDeletionOverride(propertyPath *string) AddPropertyOverride(propertyPath *string, value interface{}) ApplyRemovalPolicy(policy awscdk.RemovalPolicy, options *awscdk.RemovalPolicyOptions) GetAtt(attributeName *string) awscdk.Reference GetMetadata(key *string) interface{} Inspect(inspector awscdk.TreeInspector) OverrideLogicalId(newLogicalId *string) RenderProperties(props *map[string]interface{}) *map[string]interface{} ShouldSynthesize() *bool ToString() *string ValidateProperties(_properties interface{}) }
A CloudFormation `AWS::GuardDuty::Detector`.
The `AWS::GuardDuty::Detector` resource specifies a new detector. A detector is an object that represents the service. A detector is required for to become operational.
TODO: EXAMPLE
func NewCfnDetector ¶
func NewCfnDetector(scope constructs.Construct, id *string, props *CfnDetectorProps) CfnDetector
Create a new `AWS::GuardDuty::Detector`.
type CfnDetectorProps ¶
type CfnDetectorProps struct { // Specifies whether the detector is to be enabled on creation. Enable interface{} `json:"enable" yaml:"enable"` // Describes which data sources will be enabled for the detector. DataSources interface{} `json:"dataSources" yaml:"dataSources"` // Specifies how frequently updated findings are exported. FindingPublishingFrequency *string `json:"findingPublishingFrequency" yaml:"findingPublishingFrequency"` }
Properties for defining a `CfnDetector`.
TODO: EXAMPLE
type CfnDetector_CFNDataSourceConfigurationsProperty ¶
type CfnDetector_CFNDataSourceConfigurationsProperty struct { // Describes which Kuberentes data sources are enabled for a detector. Kubernetes interface{} `json:"kubernetes" yaml:"kubernetes"` // Describes whether S3 data event logs are enabled as a data source. S3Logs interface{} `json:"s3Logs" yaml:"s3Logs"` }
Describes whether S3 data event logs or Kubernetes audit logs will be enabled as a data source when the detector is created.
TODO: EXAMPLE
type CfnDetector_CFNKubernetesAuditLogsConfigurationProperty ¶ added in v2.11.0
type CfnDetector_CFNKubernetesAuditLogsConfigurationProperty struct {
// Describes whether Kubernetes audit logs are enabled as a data source for the detector.
Enable interface{} `json:"enable" yaml:"enable"`
}
Describes which optional data sources are enabled for a detector.
TODO: EXAMPLE
type CfnDetector_CFNKubernetesConfigurationProperty ¶ added in v2.11.0
type CfnDetector_CFNKubernetesConfigurationProperty struct {
// Describes whether Kubernetes audit logs are enabled as a data source for the detector.
AuditLogs interface{} `json:"auditLogs" yaml:"auditLogs"`
}
Describes which Kubernetes protection data sources are enabled for the detector.
TODO: EXAMPLE
type CfnDetector_CFNS3LogsConfigurationProperty ¶
type CfnDetector_CFNS3LogsConfigurationProperty struct {
// The status of S3 data event logs as a data source.
Enable interface{} `json:"enable" yaml:"enable"`
}
Describes whether S3 data event logs will be enabled as a data source when the detector is created.
TODO: EXAMPLE
type CfnFilter ¶
type CfnFilter interface { awscdk.CfnResource awscdk.IInspectable Action() *string SetAction(val *string) CfnOptions() awscdk.ICfnResourceOptions CfnProperties() *map[string]interface{} CfnResourceType() *string CreationStack() *[]*string Description() *string SetDescription(val *string) DetectorId() *string SetDetectorId(val *string) FindingCriteria() interface{} SetFindingCriteria(val interface{}) LogicalId() *string Name() *string SetName(val *string) Node() constructs.Node Rank() *float64 SetRank(val *float64) Ref() *string Stack() awscdk.Stack UpdatedProperites() *map[string]interface{} AddDeletionOverride(path *string) AddDependsOn(target awscdk.CfnResource) AddMetadata(key *string, value interface{}) AddOverride(path *string, value interface{}) AddPropertyDeletionOverride(propertyPath *string) AddPropertyOverride(propertyPath *string, value interface{}) ApplyRemovalPolicy(policy awscdk.RemovalPolicy, options *awscdk.RemovalPolicyOptions) GetAtt(attributeName *string) awscdk.Reference GetMetadata(key *string) interface{} Inspect(inspector awscdk.TreeInspector) OverrideLogicalId(newLogicalId *string) RenderProperties(props *map[string]interface{}) *map[string]interface{} ShouldSynthesize() *bool ToString() *string ValidateProperties(_properties interface{}) }
A CloudFormation `AWS::GuardDuty::Filter`.
The `AWS::GuardDuty::Filter` resource specifies a new filter defined by the provided `findingCriteria` .
TODO: EXAMPLE
func NewCfnFilter ¶
func NewCfnFilter(scope constructs.Construct, id *string, props *CfnFilterProps) CfnFilter
Create a new `AWS::GuardDuty::Filter`.
type CfnFilterProps ¶
type CfnFilterProps struct { // Specifies the action that is to be applied to the findings that match the filter. Action *string `json:"action" yaml:"action"` // The description of the filter. Description *string `json:"description" yaml:"description"` // The ID of the detector belonging to the GuardDuty account that you want to create a filter for. DetectorId *string `json:"detectorId" yaml:"detectorId"` // Represents the criteria to be used in the filter for querying findings. FindingCriteria interface{} `json:"findingCriteria" yaml:"findingCriteria"` // The name of the filter. // // Minimum length of 3. Maximum length of 64. Valid characters include alphanumeric characters, dot (.), underscore (_), and dash (-). Spaces are not allowed. Name *string `json:"name" yaml:"name"` // `AWS::GuardDuty::Filter.Rank`. Rank *float64 `json:"rank" yaml:"rank"` }
Properties for defining a `CfnFilter`.
TODO: EXAMPLE
type CfnFilter_ConditionProperty ¶
type CfnFilter_ConditionProperty struct { // Represents the equal condition to apply to a single field when querying for findings. Eq *[]*string `json:"eq" yaml:"eq"` // Represents the greater than or equal condition to apply to a single field when querying for findings. Gte *float64 `json:"gte" yaml:"gte"` // Represents the less than condition to apply to a single field when querying for findings. Lt *float64 `json:"lt" yaml:"lt"` // Represents the less than or equal condition to apply to a single field when querying for findings. Lte *float64 `json:"lte" yaml:"lte"` // Represents the not equal condition to apply to a single field when querying for findings. Neq *[]*string `json:"neq" yaml:"neq"` }
Specifies the condition to apply to a single field when filtering through findings.
TODO: EXAMPLE
type CfnFilter_FindingCriteriaProperty ¶
type CfnFilter_FindingCriteriaProperty struct { // Represents a map of finding properties that match specified conditions and values when querying findings. // // For a mapping of JSON criterion to their console equivalent see [Finding criteria](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_filter-findings.html#filter_criteria) . The following are the available criterion: // // - accountId // - region // - confidence // - id // - resource.accessKeyDetails.accessKeyId // - resource.accessKeyDetails.principalId // - resource.accessKeyDetails.userName // - resource.accessKeyDetails.userType // - resource.instanceDetails.iamInstanceProfile.id // - resource.instanceDetails.imageId // - resource.instanceDetails.instanceId // - resource.instanceDetails.outpostArn // - resource.instanceDetails.networkInterfaces.ipv6Addresses // - resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress // - resource.instanceDetails.networkInterfaces.publicDnsName // - resource.instanceDetails.networkInterfaces.publicIp // - resource.instanceDetails.networkInterfaces.securityGroups.groupId // - resource.instanceDetails.networkInterfaces.securityGroups.groupName // - resource.instanceDetails.networkInterfaces.subnetId // - resource.instanceDetails.networkInterfaces.vpcId // - resource.instanceDetails.tags.key // - resource.instanceDetails.tags.value // - resource.resourceType // - service.action.actionType // - service.action.awsApiCallAction.api // - service.action.awsApiCallAction.callerType // - service.action.awsApiCallAction.errorCode // - service.action.awsApiCallAction.remoteIpDetails.city.cityName // - service.action.awsApiCallAction.remoteIpDetails.country.countryName // - service.action.awsApiCallAction.remoteIpDetails.ipAddressV4 // - service.action.awsApiCallAction.remoteIpDetails.organization.asn // - service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg // - service.action.awsApiCallAction.serviceName // - service.action.dnsRequestAction.domain // - service.action.networkConnectionAction.blocked // - service.action.networkConnectionAction.connectionDirection // - service.action.networkConnectionAction.localPortDetails.port // - service.action.networkConnectionAction.protocol // - service.action.networkConnectionAction.localIpDetails.ipAddressV4 // - service.action.networkConnectionAction.remoteIpDetails.city.cityName // - service.action.networkConnectionAction.remoteIpDetails.country.countryName // - service.action.networkConnectionAction.remoteIpDetails.ipAddressV4 // - service.action.networkConnectionAction.remoteIpDetails.organization.asn // - service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg // - service.action.networkConnectionAction.remotePortDetails.port // - service.additionalInfo.threatListName // - service.archived // // When this attribute is set to TRUE, only archived findings are listed. When it's set to FALSE, only unarchived findings are listed. When this attribute is not set, all existing findings are listed. // - service.resourceRole // - severity // - type // - updatedAt // // Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds. Criterion interface{} `json:"criterion" yaml:"criterion"` // Specifies the condition to be applied to a single field when filtering through findings. ItemType interface{} `json:"itemType" yaml:"itemType"` }
Represents a map of finding properties that match specified conditions and values when querying findings.
TODO: EXAMPLE
type CfnIPSet ¶
type CfnIPSet interface { awscdk.CfnResource awscdk.IInspectable Activate() interface{} SetActivate(val interface{}) CfnOptions() awscdk.ICfnResourceOptions CfnProperties() *map[string]interface{} CfnResourceType() *string CreationStack() *[]*string DetectorId() *string SetDetectorId(val *string) Format() *string SetFormat(val *string) Location() *string SetLocation(val *string) LogicalId() *string Name() *string SetName(val *string) Node() constructs.Node Ref() *string Stack() awscdk.Stack UpdatedProperites() *map[string]interface{} AddDeletionOverride(path *string) AddDependsOn(target awscdk.CfnResource) AddMetadata(key *string, value interface{}) AddOverride(path *string, value interface{}) AddPropertyDeletionOverride(propertyPath *string) AddPropertyOverride(propertyPath *string, value interface{}) ApplyRemovalPolicy(policy awscdk.RemovalPolicy, options *awscdk.RemovalPolicyOptions) GetAtt(attributeName *string) awscdk.Reference GetMetadata(key *string) interface{} Inspect(inspector awscdk.TreeInspector) OverrideLogicalId(newLogicalId *string) RenderProperties(props *map[string]interface{}) *map[string]interface{} ShouldSynthesize() *bool ToString() *string ValidateProperties(_properties interface{}) }
A CloudFormation `AWS::GuardDuty::IPSet`.
The `AWS::GuardDuty::IPSet` resource specifies a new `IPSet` . An `IPSet` is a list of trusted IP addresses from which secure communication is allowed with AWS infrastructure and applications.
TODO: EXAMPLE
func NewCfnIPSet ¶
func NewCfnIPSet(scope constructs.Construct, id *string, props *CfnIPSetProps) CfnIPSet
Create a new `AWS::GuardDuty::IPSet`.
type CfnIPSetProps ¶
type CfnIPSetProps struct { // Indicates whether or not uses the `IPSet` . Activate interface{} `json:"activate" yaml:"activate"` // The unique ID of the detector of the GuardDuty account that you want to create an IPSet for. DetectorId *string `json:"detectorId" yaml:"detectorId"` // The format of the file that contains the IPSet. Format *string `json:"format" yaml:"format"` // The URI of the file that contains the IPSet. Location *string `json:"location" yaml:"location"` // The user-friendly name to identify the IPSet. // // Allowed characters are alphanumerics, spaces, hyphens (-), and underscores (_). Name *string `json:"name" yaml:"name"` }
Properties for defining a `CfnIPSet`.
TODO: EXAMPLE
type CfnMaster ¶
type CfnMaster interface { awscdk.CfnResource awscdk.IInspectable CfnOptions() awscdk.ICfnResourceOptions CfnProperties() *map[string]interface{} CfnResourceType() *string CreationStack() *[]*string DetectorId() *string SetDetectorId(val *string) InvitationId() *string SetInvitationId(val *string) LogicalId() *string MasterId() *string SetMasterId(val *string) Node() constructs.Node Ref() *string Stack() awscdk.Stack UpdatedProperites() *map[string]interface{} AddDeletionOverride(path *string) AddDependsOn(target awscdk.CfnResource) AddMetadata(key *string, value interface{}) AddOverride(path *string, value interface{}) AddPropertyDeletionOverride(propertyPath *string) AddPropertyOverride(propertyPath *string, value interface{}) ApplyRemovalPolicy(policy awscdk.RemovalPolicy, options *awscdk.RemovalPolicyOptions) GetAtt(attributeName *string) awscdk.Reference GetMetadata(key *string) interface{} Inspect(inspector awscdk.TreeInspector) OverrideLogicalId(newLogicalId *string) RenderProperties(props *map[string]interface{}) *map[string]interface{} ShouldSynthesize() *bool ToString() *string ValidateProperties(_properties interface{}) }
A CloudFormation `AWS::GuardDuty::Master`.
You can use the `AWS::GuardDuty::Master` resource in a member account to accept an invitation from a administrator account. The invitation to the member account must be sent prior to using the `AWS::GuardDuty::Master` resource to accept the administrator account's invitation. You can invite a member account by using the `InviteMembers` operation of the API, or by creating an `AWS::GuardDuty::Member` resource.
TODO: EXAMPLE
func NewCfnMaster ¶
func NewCfnMaster(scope constructs.Construct, id *string, props *CfnMasterProps) CfnMaster
Create a new `AWS::GuardDuty::Master`.
type CfnMasterProps ¶
type CfnMasterProps struct { // The unique ID of the detector of the GuardDuty member account. DetectorId *string `json:"detectorId" yaml:"detectorId"` // The AWS account ID of the account designated as the administrator account. MasterId *string `json:"masterId" yaml:"masterId"` // The ID of the invitation that is sent to the account designated as a member account. // // You can find the invitation ID by using the ListInvitation action of the API. InvitationId *string `json:"invitationId" yaml:"invitationId"` }
Properties for defining a `CfnMaster`.
TODO: EXAMPLE
type CfnMember ¶
type CfnMember interface { awscdk.CfnResource awscdk.IInspectable CfnOptions() awscdk.ICfnResourceOptions CfnProperties() *map[string]interface{} CfnResourceType() *string CreationStack() *[]*string DetectorId() *string SetDetectorId(val *string) DisableEmailNotification() interface{} SetDisableEmailNotification(val interface{}) Email() *string SetEmail(val *string) LogicalId() *string MemberId() *string SetMemberId(val *string) Message() *string SetMessage(val *string) Node() constructs.Node Ref() *string Stack() awscdk.Stack Status() *string SetStatus(val *string) UpdatedProperites() *map[string]interface{} AddDeletionOverride(path *string) AddDependsOn(target awscdk.CfnResource) AddMetadata(key *string, value interface{}) AddOverride(path *string, value interface{}) AddPropertyDeletionOverride(propertyPath *string) AddPropertyOverride(propertyPath *string, value interface{}) ApplyRemovalPolicy(policy awscdk.RemovalPolicy, options *awscdk.RemovalPolicyOptions) GetAtt(attributeName *string) awscdk.Reference GetMetadata(key *string) interface{} Inspect(inspector awscdk.TreeInspector) OverrideLogicalId(newLogicalId *string) RenderProperties(props *map[string]interface{}) *map[string]interface{} ShouldSynthesize() *bool ToString() *string ValidateProperties(_properties interface{}) }
A CloudFormation `AWS::GuardDuty::Member`.
You can use the `AWS::GuardDuty::Member` resource to add an AWS account as a member account to the current administrator account. If the value of the `Status` property is not provided or is set to `Created` , a member account is created but not invited. If the value of the `Status` property is set to `Invited` , a member account is created and invited. An `AWS::GuardDuty::Member` resource must be created with the `Status` property set to `Invited` before the `AWS::GuardDuty::Master` resource can be created in a member account.
TODO: EXAMPLE
func NewCfnMember ¶
func NewCfnMember(scope constructs.Construct, id *string, props *CfnMemberProps) CfnMember
Create a new `AWS::GuardDuty::Member`.
type CfnMemberProps ¶
type CfnMemberProps struct { // The ID of the detector associated with the service to add the member to. DetectorId *string `json:"detectorId" yaml:"detectorId"` // The email address associated with the member account. Email *string `json:"email" yaml:"email"` // The AWS account ID of the account to designate as a member. MemberId *string `json:"memberId" yaml:"memberId"` // Specifies whether or not to disable email notification for the member account that you invite. DisableEmailNotification interface{} `json:"disableEmailNotification" yaml:"disableEmailNotification"` // The invitation message that you want to send to the accounts that you're inviting to GuardDuty as members. Message *string `json:"message" yaml:"message"` // You can use the `Status` property to update the status of the relationship between the member account and its administrator account. // // Valid values are `Created` and `Invited` when using an `AWS::GuardDuty::Member` resource. If the value for this property is not provided or set to `Created` , a member account is created but not invited. If the value of this property is set to `Invited` , a member account is created and invited. Status *string `json:"status" yaml:"status"` }
Properties for defining a `CfnMember`.
TODO: EXAMPLE
type CfnThreatIntelSet ¶
type CfnThreatIntelSet interface { awscdk.CfnResource awscdk.IInspectable Activate() interface{} SetActivate(val interface{}) CfnOptions() awscdk.ICfnResourceOptions CfnProperties() *map[string]interface{} CfnResourceType() *string CreationStack() *[]*string DetectorId() *string SetDetectorId(val *string) Format() *string SetFormat(val *string) Location() *string SetLocation(val *string) LogicalId() *string Name() *string SetName(val *string) Node() constructs.Node Ref() *string Stack() awscdk.Stack UpdatedProperites() *map[string]interface{} AddDeletionOverride(path *string) AddDependsOn(target awscdk.CfnResource) AddMetadata(key *string, value interface{}) AddOverride(path *string, value interface{}) AddPropertyDeletionOverride(propertyPath *string) AddPropertyOverride(propertyPath *string, value interface{}) ApplyRemovalPolicy(policy awscdk.RemovalPolicy, options *awscdk.RemovalPolicyOptions) GetAtt(attributeName *string) awscdk.Reference GetMetadata(key *string) interface{} Inspect(inspector awscdk.TreeInspector) OverrideLogicalId(newLogicalId *string) RenderProperties(props *map[string]interface{}) *map[string]interface{} ShouldSynthesize() *bool ToString() *string ValidateProperties(_properties interface{}) }
A CloudFormation `AWS::GuardDuty::ThreatIntelSet`.
The `AWS::GuardDuty::ThreatIntelSet` resource specifies a new `ThreatIntelSet` . A `ThreatIntelSet` consists of known malicious IP addresses. generates findings based on the `ThreatIntelSet` when it is activated.
TODO: EXAMPLE
func NewCfnThreatIntelSet ¶
func NewCfnThreatIntelSet(scope constructs.Construct, id *string, props *CfnThreatIntelSetProps) CfnThreatIntelSet
Create a new `AWS::GuardDuty::ThreatIntelSet`.
type CfnThreatIntelSetProps ¶
type CfnThreatIntelSetProps struct { // A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet. Activate interface{} `json:"activate" yaml:"activate"` // The unique ID of the detector of the GuardDuty account that you want to create a threatIntelSet for. DetectorId *string `json:"detectorId" yaml:"detectorId"` // The format of the file that contains the ThreatIntelSet. Format *string `json:"format" yaml:"format"` // The URI of the file that contains the ThreatIntelSet. Location *string `json:"location" yaml:"location"` // A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet. Name *string `json:"name" yaml:"name"` }
Properties for defining a `CfnThreatIntelSet`.
TODO: EXAMPLE