Package software.amazon.awscdk.services.guardduty

Class CfnTrustedEntitySet

java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.CfnElement
software.amazon.awscdk.CfnRefElement
software.amazon.awscdk.CfnResource
software.amazon.awscdk.services.guardduty.CfnTrustedEntitySet
All Implemented Interfaces:
IInspectable, ITrustedEntitySetRef, IEnvironmentAware, ITaggableV2, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable
@Generated(value="jsii-pacmak/1.119.0 (build 1634eac)", date="2025-11-20T23:37:22.865Z") @Stability(Stable) public class CfnTrustedEntitySet extends CfnResource implements IInspectable, ITrustedEntitySetRef, ITaggableV2
Creates a new trusted entity set.

In the trusted entity set, you can provide IP addresses and domains that you believe are secure for communication in your AWS environment. GuardDuty will not generate findings for the entries that are specified in a trusted entity set. At any given time, you can have only one trusted entity set.

Only users of the administrator account can manage the entity sets, which automatically apply to member accounts.

Example: 

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.guardduty.*;
 CfnTrustedEntitySet cfnTrustedEntitySet = CfnTrustedEntitySet.Builder.create(this, "MyCfnTrustedEntitySet")
         .format("format")
         .location("location")
         // the properties below are optional
         .activate(false)
         .detectorId("detectorId")
         .expectedBucketOwner("expectedBucketOwner")
         .name("name")
         .tags(List.of(TagItemProperty.builder()
                 .key("key")
                 .value("value")
                 .build()))
         .build();

See Also:

  • Field Details

    • CFN_RESOURCE_TYPE_NAME

      @Stability(Stable) public static final String CFN_RESOURCE_TYPE_NAME
      The CloudFormation resource type name for this resource class.

  • Constructor Details

    • CfnTrustedEntitySet

      protected CfnTrustedEntitySet(software.amazon.jsii.JsiiObjectRef objRef)

    • CfnTrustedEntitySet

      protected CfnTrustedEntitySet(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

    • CfnTrustedEntitySet

      @Stability(Stable) public CfnTrustedEntitySet(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull CfnTrustedEntitySetProps props)
      Create a new AWS::GuardDuty::TrustedEntitySet.

      Parameters:
      scope - Scope in which this resource is defined. This parameter is required.
      id - Construct identifier for this resource (unique in its scope). This parameter is required.
      props - Resource properties. This parameter is required.

  • Method Details

    • inspect

      @Stability(Stable) public void inspect(@NotNull TreeInspector inspector)
      Examines the CloudFormation resource and discloses attributes.

      Specified by:
      inspect in interface IInspectable
      Parameters:
      inspector - tree inspector to collect and process attributes. This parameter is required.

    • renderProperties

      @Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String,Object> props)
      Overrides:
      renderProperties in class CfnResource
      Parameters:
      props - This parameter is required.

    • getAttrCreatedAt

      @Stability(Stable) @NotNull public String getAttrCreatedAt()
      The timestamp when the trusted entity set was created.

    • getAttrErrorDetails

      @Stability(Stable) @NotNull public String getAttrErrorDetails()
      Specifies the error details when the status of the trusted entity set shows as Error .

    • getAttrId

      @Stability(Stable) @NotNull public String getAttrId()

    • getAttrStatus

      @Stability(Stable) @NotNull public String getAttrStatus()
      The status of your TrustedEntitySet .

      For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .

    • getAttrUpdatedAt

      @Stability(Stable) @NotNull public String getAttrUpdatedAt()
      The timestamp when the trusted entity set was updated.

    • getCdkTagManager

      @Stability(Stable) @NotNull public TagManager getCdkTagManager()
      Tag Manager which manages the tags for this resource.
      Specified by:
      getCdkTagManager in interface ITaggableV2

    • getCfnProperties

      @Stability(Stable) @NotNull protected Map<String,Object> getCfnProperties()
      Overrides:
      getCfnProperties in class CfnResource

    • getTrustedEntitySetRef

      @Stability(Stable) @NotNull public TrustedEntitySetReference getTrustedEntitySetRef()
      A reference to a TrustedEntitySet resource.
      Specified by:
      getTrustedEntitySetRef in interface ITrustedEntitySetRef

    • getFormat

      @Stability(Stable) @NotNull public String getFormat()
      The format of the file that contains the trusted entity set.

    • setFormat

      @Stability(Stable) public void setFormat(@NotNull String value)
      The format of the file that contains the trusted entity set.

    • getLocation

      @Stability(Stable) @NotNull public String getLocation()
      The URI of the file that contains the trusted entity set.

    • setLocation

      @Stability(Stable) public void setLocation(@NotNull String value)
      The URI of the file that contains the trusted entity set.

    • getActivate

      @Stability(Stable) @Nullable public Object getActivate()
      A boolean value that determines if GuardDuty can start using this list for custom threat detection.

      Returns union: either Boolean or IResolvable

    • setActivate

      @Stability(Stable) public void setActivate(@Nullable Boolean value)
      A boolean value that determines if GuardDuty can start using this list for custom threat detection.

    • setActivate

      @Stability(Stable) public void setActivate(@Nullable IResolvable value)
      A boolean value that determines if GuardDuty can start using this list for custom threat detection.

    • getDetectorId

      @Stability(Stable) @Nullable public String getDetectorId()
      The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.

    • setDetectorId

      @Stability(Stable) public void setDetectorId(@Nullable String value)
      The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.

    • getExpectedBucketOwner

      @Stability(Stable) @Nullable public String getExpectedBucketOwner()
      The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    • setExpectedBucketOwner

      @Stability(Stable) public void setExpectedBucketOwner(@Nullable String value)
      The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    • getName

      @Stability(Stable) @Nullable public String getName()
      A user-friendly name to identify the trusted entity set.

    • setName

      @Stability(Stable) public void setName(@Nullable String value)
      A user-friendly name to identify the trusted entity set.

    • getTags

      @Stability(Stable) @Nullable public List<CfnTrustedEntitySet.TagItemProperty> getTags()
      The tags to be added to a new trusted entity set resource.

    • setTags

      @Stability(Stable) public void setTags(@Nullable List<CfnTrustedEntitySet.TagItemProperty> value)
      The tags to be added to a new trusted entity set resource.