Create a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the master account can use this operation.
guardduty_create_threat_intel_set(DetectorId, Name, Format, Location,
Activate, ClientToken, Tags)[required] The unique ID of the detector of the GuardDuty account for which you want to create a threatIntelSet.
[required] A user-friendly ThreatIntelSet name that is displayed in all finding generated by activity that involves IP addresses included in this ThreatIntelSet.
[required] The format of the file that contains the ThreatIntelSet.
[required] The URI of the file that contains the ThreatIntelSet. For example (https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key).
[required] A boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.
The idempotency token for the create request.
The tags to be added to a new Threat List resource.
svc$create_threat_intel_set(
DetectorId = "string",
Name = "string",
Format = "TXT"|"STIX"|"OTX_CSV"|"ALIEN_VAULT"|"PROOF_POINT"|"FIRE_EYE",
Location = "string",
Activate = TRUE|FALSE,
ClientToken = "string",
Tags = list(
"string"
)
)