pulumi-gcp-kotlin/com.pulumi.gcp.securitycenter.kotlin/ManagementOrganizationEventThreatDetectionCustomModule

ManagementOrganizationEventThreatDetectionCustomModule

class ManagementOrganizationEventThreatDetectionCustomModule : KotlinCustomResource

Represents an instance of an Event Threat Detection custom module, including its full module name, display name, enablement state, and last updated time. You can create a custom module at the organization level only. To get more information about OrganizationEventThreatDetectionCustomModule, see:

API documentation
How-to Guides

Overview of custom modules for Event Threat Detection

Example Usage

Scc Management Organization Event Threat Detection Custom Module

resources:
  example:
    type: gcp:securitycenter:ManagementOrganizationEventThreatDetectionCustomModule
    properties:
      organization: '123456789'
      location: global
      displayName: basic_custom_module
      enablementState: ENABLED
      type: CONFIGURABLE_BAD_IP
      description: My Event Threat Detection Custom Module
      config:
        fn::toJSON:
          metadata:
            severity: LOW
            description: Flagged by Forcepoint as malicious
            recommendation: Contact the owner of the relevant project.
          ips:
            - 192.0.2.1
            - 192.0.2.0/24

Import

OrganizationEventThreatDetectionCustomModule can be imported using any of these accepted formats:

organizations/{{organization}}/locations/{{location}}/eventThreatDetectionCustomModules/{{name}}
{{organization}}/{{location}}/{{name}} When using the pulumi import command, OrganizationEventThreatDetectionCustomModule can be imported using one of the formats above. For example:

$ pulumi import gcp:securitycenter/managementOrganizationEventThreatDetectionCustomModule:ManagementOrganizationEventThreatDetectionCustomModule default organizations/{{organization}}/locations/{{location}}/eventThreatDetectionCustomModules/{{name}}

$ pulumi import gcp:securitycenter/managementOrganizationEventThreatDetectionCustomModule:ManagementOrganizationEventThreatDetectionCustomModule default {{organization}}/{{location}}/{{name}}

Properties

config

val config: Output<String>?

Config for the module. For the resident module, its config value is defined at this level. For the inherited module, its config value is inherited from the ancestor module.

displayName

val displayName: Output<String>?

The human readable name to be displayed for the module.

enablementState

val enablementState: Output<String>?

The state of enablement for the module at the given level of the hierarchy. Possible values are: ENABLED, DISABLED.

val id: Output<String>

lastEditor

val lastEditor: Output<String>

The editor that last updated the custom module

location

val location: Output<String>?

Location ID of the parent organization. Only global is supported at the moment.

name

val name: Output<String>

The resource name of the Event Threat Detection custom module. Its format is "organizations/{organization}/locations/{location}/eventThreatDetectionCustomModules/{eventThreatDetectionCustomModule}".

organization

val organization: Output<String>

Numerical ID of the parent organization.

pulumiChildResources

val pulumiChildResources: Set<KotlinResource>

pulumiResourceName

val pulumiResourceName: String

pulumiResourceType

val pulumiResourceType: String

type

val type: Output<String>?

Immutable. Type for the module. e.g. CONFIGURABLE_BAD_IP.

updateTime

val updateTime: Output<String>

The time at which the custom module was last updated. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".

urn

val urn: Output<String>