GuardDuty > Structures > RuleDefinition RuleDefinition¶ Structure Class¶ RuleDefinition dataclass ¶ Contains the detection logic for a custom detection rule. Attributes¶ expression class-attribute instance-attribute ¶ expression: str | None = None The detection logic expression for the rule.