pulumi-gcp-kotlin/com.pulumi.gcp.securitycenter.kotlin/EventThreatDetectionCustomModule

EventThreatDetectionCustomModule

class EventThreatDetectionCustomModule : KotlinCustomResource

Represents an instance of an Event Threat Detection custom module, including its full module name, display name, enablement state, andlast updated time. You can create a custom module at the organization level only. To get more information about EventThreatDetectionCustomModule, see:

API documentation
How-to Guides

Overview of custom modules for Event Threat Detection

Example Usage

Scc Event Threat Detection Custom Module

resources:
  example:
    type: gcp:securitycenter:EventThreatDetectionCustomModule
    properties:
      organization: '123456789'
      displayName: basic_custom_module
      enablementState: ENABLED
      type: CONFIGURABLE_BAD_IP
      description: My Event Threat Detection Custom Module
      config:
        fn::toJSON:
          metadata:
            severity: LOW
            description: Flagged by Forcepoint as malicious
            recommendation: Contact the owner of the relevant project.
          ips:
            - 192.0.2.1
            - 192.0.2.0/24

Import

EventThreatDetectionCustomModule can be imported using any of these accepted formats:

organizations/{{organization}}/eventThreatDetectionSettings/customModules/{{name}}
{{organization}}/{{name}} When using the pulumi import command, EventThreatDetectionCustomModule can be imported using one of the formats above. For example:

$ pulumi import gcp:securitycenter/eventThreatDetectionCustomModule:EventThreatDetectionCustomModule default organizations/{{organization}}/eventThreatDetectionSettings/customModules/{{name}}

$ pulumi import gcp:securitycenter/eventThreatDetectionCustomModule:EventThreatDetectionCustomModule default {{organization}}/{{name}}

Properties

config

val config: Output<String>

Config for the module. For the resident module, its config value is defined at this level. For the inherited module, its config value is inherited from the ancestor module.

displayName

val displayName: Output<String>?

The human readable name to be displayed for the module.

enablementState

val enablementState: Output<String>

The state of enablement for the module at the given level of the hierarchy. Possible values are: ENABLED, DISABLED.

val id: Output<String>

lastEditor

val lastEditor: Output<String>

The editor that last updated the custom module

name

val name: Output<String>

The resource name of the Event Threat Detection custom module. Its format is "organizations/{organization}/eventThreatDetectionSettings/customModules/{module}".

organization

val organization: Output<String>

Numerical ID of the parent organization.

pulumiChildResources

val pulumiChildResources: Set<KotlinResource>

pulumiResourceName

val pulumiResourceName: String

pulumiResourceType

val pulumiResourceType: String

type

val type: Output<String>

Immutable. Type for the module. e.g. CONFIGURABLE_BAD_IP.

updateTime

val updateTime: Output<String>

The time at which the custom module was last updated. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

urn

val urn: Output<String>