ClientFileProtect

class ClientFileProtect : KotlinCustomResource

Provides a Threat Detection Client File Protect resource. Client core file protection event monitoring, including file reading and writing, deletion, and permission change. For information about Threat Detection Client File Protect and how to use it, see What is Client File Protect.

NOTE: Available since v1.212.0.

Example Usage

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";
const config = new pulumi.Config();
const name = config.get("name") || "terraform-example";
const _default = new alicloud.threatdetection.ClientFileProtect("default", {
status: 0,
filePaths: ["/usr/local"],
fileOps: ["CREATE"],
ruleAction: "pass",
procPaths: ["/usr/local"],
alertLevel: 0,
switchId: "FILE_PROTECT_RULE_SWITCH_TYPE_1693474122929",
ruleName: "rule_example",
});
import pulumi
import pulumi_alicloud as alicloud
config = pulumi.Config()
name = config.get("name")
if name is None:
name = "terraform-example"
default = alicloud.threatdetection.ClientFileProtect("default",
status=0,
file_paths=["/usr/local"],
file_ops=["CREATE"],
rule_action="pass",
proc_paths=["/usr/local"],
alert_level=0,
switch_id="FILE_PROTECT_RULE_SWITCH_TYPE_1693474122929",
rule_name="rule_example")
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;
return await Deployment.RunAsync(() =>
{
var config = new Config();
var name = config.Get("name") ?? "terraform-example";
var @default = new AliCloud.ThreatDetection.ClientFileProtect("default", new()
{
Status = 0,
FilePaths = new[]
{
"/usr/local",
},
FileOps = new[]
{
"CREATE",
},
RuleAction = "pass",
ProcPaths = new[]
{
"/usr/local",
},
AlertLevel = 0,
SwitchId = "FILE_PROTECT_RULE_SWITCH_TYPE_1693474122929",
RuleName = "rule_example",
});
});
package main
import (
"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/threatdetection"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
cfg := config.New(ctx, "")
name := "terraform-example"
if param := cfg.Get("name"); param != "" {
name = param
}
_, err := threatdetection.NewClientFileProtect(ctx, "default", &threatdetection.ClientFileProtectArgs{
Status: pulumi.Int(0),
FilePaths: pulumi.StringArray{
pulumi.String("/usr/local"),
},
FileOps: pulumi.StringArray{
pulumi.String("CREATE"),
},
RuleAction: pulumi.String("pass"),
ProcPaths: pulumi.StringArray{
pulumi.String("/usr/local"),
},
AlertLevel: pulumi.Int(0),
SwitchId: pulumi.String("FILE_PROTECT_RULE_SWITCH_TYPE_1693474122929"),
RuleName: pulumi.String("rule_example"),
})
if err != nil {
return err
}
return nil
})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.threatdetection.ClientFileProtect;
import com.pulumi.alicloud.threatdetection.ClientFileProtectArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
public static void main(String[] args) {
Pulumi.run(App::stack);
}
public static void stack(Context ctx) {
final var config = ctx.config();
final var name = config.get("name").orElse("terraform-example");
var default_ = new ClientFileProtect("default", ClientFileProtectArgs.builder()
.status(0)
.filePaths("/usr/local")
.fileOps("CREATE")
.ruleAction("pass")
.procPaths("/usr/local")
.alertLevel(0)
.switchId("FILE_PROTECT_RULE_SWITCH_TYPE_1693474122929")
.ruleName("rule_example")
.build());
}
}
configuration:
name:
type: string
default: terraform-example
resources:
default:
type: alicloud:threatdetection:ClientFileProtect
properties:
status: '0'
filePaths:
- /usr/local
fileOps:
- CREATE
ruleAction: pass
procPaths:
- /usr/local
alertLevel: '0'
switchId: FILE_PROTECT_RULE_SWITCH_TYPE_1693474122929
ruleName: rule_example

Import

Threat Detection Client File Protect can be imported using the id, e.g.

$ pulumi import alicloud:threatdetection/clientFileProtect:ClientFileProtect example <id>

Properties

Link copied to clipboard
val alertLevel: Output<Int>?

0 no alert 1 info 2 suspicious 3 critical.

Link copied to clipboard
val fileOps: Output<List<String>>

file operation.

Link copied to clipboard
val filePaths: Output<List<String>>

file path.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val procPaths: Output<List<String>>

process path.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val ruleAction: Output<String>

rule action, pass or alert.

Link copied to clipboard
val ruleName: Output<String>

ruleName.

Link copied to clipboard
val status: Output<Int>

rule status 0 is disable 1 is enable.

Link copied to clipboard
val switchId: Output<String>?

switch id.

Link copied to clipboard
val urn: Output<String>