Create a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the master account can use this operation.
guardduty_create_threat_intel_set(DetectorId, Name, Format, Location,
Activate, ClientToken, Tags)
[required] The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet.
[required] A user-friendly ThreatIntelSet name that is displayed in all finding generated by activity that involves IP addresses included in this ThreatIntelSet.
[required] The format of the file that contains the ThreatIntelSet.
[required] The URI of the file that contains the ThreatIntelSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
[required] A boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.
The idempotency token for the create request.
The tags to be added to a new Threat List resource.
svc$create_threat_intel_set( DetectorId = "string", Name = "string", Format = "TXT"|"STIX"|"OTX_CSV"|"ALIEN_VAULT"|"PROOF_POINT"|"FIRE_EYE", Location = "string", Activate = TRUE|FALSE, ClientToken = "string", Tags = list( "string" ) )