Skip to content

Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID

Description

Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.

Usage

guardduty_get_threat_intel_set(DetectorId, ThreatIntelSetId)

Arguments

  • DetectorId

    [required] The unique ID of the detector that is associated with the threatIntelSet.

    To find the detectorId in the current Region, see the Settings page in the GuardDuty console, or run the list_detectors API.

  • ThreatIntelSetId

    [required] The unique ID of the threatIntelSet that you want to get.

Value

A list with the following syntax:

list(
  Name = "string",
  Format = "TXT"|"STIX"|"OTX_CSV"|"ALIEN_VAULT"|"PROOF_POINT"|"FIRE_EYE",
  Location = "string",
  Status = "INACTIVE"|"ACTIVATING"|"ACTIVE"|"DEACTIVATING"|"ERROR"|"DELETE_PENDING"|"DELETED",
  Tags = list(
    "string"
  ),
  ExpectedBucketOwner = "string"
)

Request syntax

svc$get_threat_intel_set(
  DetectorId = "string",
  ThreatIntelSetId = "string"
)