Skip to main content

threat_intel_set

Gets an individual threat_intel_set resource

Overview

Namethreat_intel_set
TypeResource
Descriptionthreat_intel_set
Idawscc.guardduty.threat_intel_set

Fields

NameDatatypeDescription
idstring
formatstring
activateboolean
detector_idstring
namestring
locationstring
tagsarray
regionstringAWS region.

Methods

Currently only SELECT is supported for this resource resource.

Example

SELECT
region,
id,
format,
activate,
detector_id,
name,
location,
tags
FROM awscc.guardduty.threat_intel_set
WHERE data__Identifier = '<Id>|<DetectorId>';

Permissions

To operate on the threat_intel_set resource, the following permissions are required:

Read

guardduty:GetThreatIntelSet

Delete

guardduty:ListDetectors,
guardduty:ListThreatIntelSets,
guardduty:DeleteThreatIntelSet,
guardduty:GetThreatIntelSet,
iam:DeleteRolePolicy

Update

guardduty:UpdateThreatIntelSet,
guardduty:GetThreatIntelSet,
guardduty:ListThreatIntelSets,
iam:PutRolePolicy