Event Threat Detection Custom Module Args
data class EventThreatDetectionCustomModuleArgs(val config: Output<String>? = null, val displayName: Output<String>? = null, val enablementState: Output<String>? = null, val organization: Output<String>? = null, val type: Output<String>? = null) : ConvertibleToJava<EventThreatDetectionCustomModuleArgs>
Represents an instance of an Event Threat Detection custom module, including its full module name, display name, enablement state, andlast updated time. You can create a custom module at the organization level only. To get more information about EventThreatDetectionCustomModule, see:
Example Usage
Scc Event Threat Detection Custom Module
resources:
example:
type: gcp:securitycenter:EventThreatDetectionCustomModule
properties:
organization: '123456789'
displayName: basic_custom_module
enablementState: ENABLED
type: CONFIGURABLE_BAD_IP
description: My Event Threat Detection Custom Module
config:
fn::toJSON:
metadata:
severity: LOW
description: Flagged by Forcepoint as malicious
recommendation: Contact the owner of the relevant project.
ips:
- 192.0.2.1
- 192.0.2.0/24
Content copied to clipboard
Import
EventThreatDetectionCustomModule can be imported using any of these accepted formats:
organizations/{{organization}}/eventThreatDetectionSettings/customModules/{{name}}
{{organization}}/{{name}}
When using thepulumi import
command, EventThreatDetectionCustomModule can be imported using one of the formats above. For example:
$ pulumi import gcp:securitycenter/eventThreatDetectionCustomModule:EventThreatDetectionCustomModule default organizations/{{organization}}/eventThreatDetectionSettings/customModules/{{name}}
Content copied to clipboard
$ pulumi import gcp:securitycenter/eventThreatDetectionCustomModule:EventThreatDetectionCustomModule default {{organization}}/{{name}}
Content copied to clipboard