Amazon GuardDuty · JSON Structure

Guardduty Create Threat Intel Set Request Structure

CreateThreatIntelSetRequest schema from Amazon GuardDuty API

Type: object Properties: 6 Required: 4
Anomaly DetectionComplianceMachine LearningMonitoringSecurityThreat Detection

CreateThreatIntelSetRequest is a JSON Structure definition published by Amazon GuardDuty, describing 6 properties, of which 4 are required. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

Name Format Location Activate ClientToken Tags

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/amazon-guardduty/refs/heads/main/json-structure/guardduty-create-threat-intel-set-request-structure.json",
  "name": "CreateThreatIntelSetRequest",
  "description": "CreateThreatIntelSetRequest schema from Amazon GuardDuty API",
  "type": "object",
  "properties": {
    "Name": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Name"
        },
        {
          "xml": {
            "name": "name"
          },
          "description": "A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet."
        }
      ]
    },
    "Format": {
      "allOf": [
        {
          "$ref": "#/components/schemas/ThreatIntelSetFormat"
        },
        {
          "xml": {
            "name": "format"
          },
          "description": "The format of the file that contains the ThreatIntelSet."
        }
      ]
    },
    "Location": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Location"
        },
        {
          "xml": {
            "name": "location"
          },
          "description": "The URI of the file that contains the ThreatIntelSet. "
        }
      ]
    },
    "Activate": {
      "allOf": [
        {
          "$ref": "#/components/schemas/Boolean"
        },
        {
          "xml": {
            "name": "activate"
          },
          "description": "A Boolean value that indicates whether GuardDuty is to start using the uploaded ThreatIntelSet."
        }
      ]
    },
    "ClientToken": {
      "allOf": [
        {
          "$ref": "#/components/schemas/ClientToken"
        },
        {
          "xml": {
            "name": "clientToken"
          },
          "description": "The idempotency token for the create request."
        }
      ]
    },
    "Tags": {
      "allOf": [
        {
          "$ref": "#/components/schemas/TagMap"
        },
        {
          "xml": {
            "name": "tags"
          },
          "description": "The tags to be added to a new threat list resource."
        }
      ]
    }
  },
  "required": [
    "Name",
    "Format",
    "Location",
    "Activate"
  ]
}