get_threat_intel_set¶
Operation¶
async
¶
get_threat_intel_set(input: GetThreatIntelSetInput, plugins: list[Plugin] | None = None) -> GetThreatIntelSetOutput
Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
Parameters:
| Name | Type | Description | Default |
|---|---|---|---|
input
|
GetThreatIntelSetInput
|
An instance of |
required |
plugins
|
list[Plugin] | None
|
A list of callables that modify the configuration dynamically. Changes made by these plugins only apply for the duration of the operation execution and will not affect any other operation invocations. |
None
|
Returns:
| Type | Description |
|---|---|
GetThreatIntelSetOutput
|
An instance of |
Input¶
dataclass
¶
Dataclass for GetThreatIntelSetInput structure.
Attributes¶
class-attribute
instance-attribute
¶
detector_id: str | None = None
The unique ID of the detector that is associated with the threatIntelSet.
To find the detectorId in the current Region, see the Settings page in
the GuardDuty console, or run the
ListDetectors
API.
class-attribute
instance-attribute
¶
threat_intel_set_id: str | None = None
The unique ID of the threatIntelSet that you want to get.
Output¶
dataclass
¶
Dataclass for GetThreatIntelSetOutput structure.
Attributes¶
class-attribute
instance-attribute
¶
expected_bucket_owner: str | None = None
The Amazon Web Services account ID that owns the Amazon S3 bucket specified in the location parameter. This field appears in the response only if it was provided during ThreatIntelSet creation or update.
class-attribute
instance-attribute
¶
format: ThreatIntelSetFormat | None = None
The format of the threatIntelSet.
class-attribute
instance-attribute
¶
location: str | None = None
The URI of the file that contains the ThreatIntelSet.
class-attribute
instance-attribute
¶
name: str | None = None
A user-friendly ThreatIntelSet name displayed in all findings that are generated by activity that involves IP addresses included in this ThreatIntelSet.
class-attribute
instance-attribute
¶
status: ThreatIntelSetStatus | None = None
The status of threatIntelSet file uploaded.
class-attribute
instance-attribute
¶
tags: dict[str, str] | None = None
The tags of the threat list resource.