pulumi-gcp-kotlin/com.pulumi.gcp.securitycenter.kotlin/ManagementOrganizationEventThreatDetectionCustomModuleArgs

ManagementOrganizationEventThreatDetectionCustomModuleArgs

data class ManagementOrganizationEventThreatDetectionCustomModuleArgs(val config: Output<String>? = null, val displayName: Output<String>? = null, val enablementState: Output<String>? = null, val location: Output<String>? = null, val organization: Output<String>? = null, val type: Output<String>? = null) : ConvertibleToJava<ManagementOrganizationEventThreatDetectionCustomModuleArgs>

Represents an instance of an Event Threat Detection custom module, including its full module name, display name, enablement state, and last updated time. You can create a custom module at the organization level only. To get more information about OrganizationEventThreatDetectionCustomModule, see:

API documentation
How-to Guides

Overview of custom modules for Event Threat Detection

Example Usage

Scc Management Organization Event Threat Detection Custom Module

resources:
  example:
    type: gcp:securitycenter:ManagementOrganizationEventThreatDetectionCustomModule
    properties:
      organization: '123456789'
      location: global
      displayName: basic_custom_module
      enablementState: ENABLED
      type: CONFIGURABLE_BAD_IP
      description: My Event Threat Detection Custom Module
      config:
        fn::toJSON:
          metadata:
            severity: LOW
            description: Flagged by Forcepoint as malicious
            recommendation: Contact the owner of the relevant project.
          ips:
            - 192.0.2.1
            - 192.0.2.0/24

Import

OrganizationEventThreatDetectionCustomModule can be imported using any of these accepted formats:

organizations/{{organization}}/locations/{{location}}/eventThreatDetectionCustomModules/{{name}}
{{organization}}/{{location}}/{{name}} When using the pulumi import command, OrganizationEventThreatDetectionCustomModule can be imported using one of the formats above. For example:

$ pulumi import gcp:securitycenter/managementOrganizationEventThreatDetectionCustomModule:ManagementOrganizationEventThreatDetectionCustomModule default organizations/{{organization}}/locations/{{location}}/eventThreatDetectionCustomModules/{{name}}

$ pulumi import gcp:securitycenter/managementOrganizationEventThreatDetectionCustomModule:ManagementOrganizationEventThreatDetectionCustomModule default {{organization}}/{{location}}/{{name}}

Constructors

ManagementOrganizationEventThreatDetectionCustomModuleArgs

constructor(config: Output<String>? = null, displayName: Output<String>? = null, enablementState: Output<String>? = null, location: Output<String>? = null, organization: Output<String>? = null, type: Output<String>? = null)

Properties

config

val config: Output<String>? = null

Config for the module. For the resident module, its config value is defined at this level. For the inherited module, its config value is inherited from the ancestor module.

displayName

val displayName: Output<String>? = null

The human readable name to be displayed for the module.

enablementState

val enablementState: Output<String>? = null

The state of enablement for the module at the given level of the hierarchy. Possible values are: ENABLED, DISABLED.

location

val location: Output<String>? = null

Location ID of the parent organization. Only global is supported at the moment.

organization

val organization: Output<String>? = null

Numerical ID of the parent organization.