Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can use this operation.
See https://www.paws-r-sdk.com/docs/guardduty_create_threat_intel_set/ for full documentation.
guardduty_create_threat_intel_set(
DetectorId,
Name,
Format,
Location,
Activate,
ClientToken = NULL,
Tags = NULL
)
[required] The unique ID of the detector of the GuardDuty account for which you
want to create a ThreatIntelSet
.
To find the detectorId
in the current Region, see the Settings page in
the GuardDuty console, or run the
list_detectors
API.
[required] A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
[required] The format of the file that contains the ThreatIntelSet.
[required] The URI of the file that contains the ThreatIntelSet.
[required] A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet.
The idempotency token for the create request.
The tags to be added to a new threat list resource.