Package software.amazon.awscdk.services.guardduty

Class CfnTrustedEntitySet

java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
software.amazon.awscdk.CfnElement
software.amazon.awscdk.CfnRefElement
software.amazon.awscdk.CfnResource
software.amazon.awscdk.services.guardduty.CfnTrustedEntitySet
All Implemented Interfaces:
IInspectable, ITaggableV2, ITrustedEntitySetRef, software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable
@Generated(value="jsii-pacmak/1.113.0 (build fc68b25)", date="2025-10-01T17:46:54.757Z") @Stability(Stable) public class CfnTrustedEntitySet extends CfnResource implements IInspectable, ITrustedEntitySetRef, ITaggableV2
The AWS::GuardDuty::TrustedEntitySet resource helps you create a list of IP addresses and domain names that you can use for secure communication with your AWS infrastructure and applications.

Once you activate this list, GuardDuty will not generate findings when there is an activity associated with these safe IP addresses and domain names. At any given time, you can have only one trusted entity set.

Only the users of the GuardDuty administrator account can manage the entity sets. These settings automatically apply member accounts.

Example: 

 // The code below shows an example of how to instantiate this type.
 // The values are placeholders you should change.
 import software.amazon.awscdk.services.guardduty.*;
 CfnTrustedEntitySet cfnTrustedEntitySet = CfnTrustedEntitySet.Builder.create(this, "MyCfnTrustedEntitySet")
         .format("format")
         .location("location")
         // the properties below are optional
         .activate(false)
         .detectorId("detectorId")
         .expectedBucketOwner("expectedBucketOwner")
         .name("name")
         .tags(List.of(TagItemProperty.builder()
                 .key("key")
                 .value("value")
                 .build()))
         .build();

See Also:

  • Field Details

    • CFN_RESOURCE_TYPE_NAME

      @Stability(Stable) public static final String CFN_RESOURCE_TYPE_NAME
      The CloudFormation resource type name for this resource class.

  • Constructor Details

    • CfnTrustedEntitySet

      protected CfnTrustedEntitySet(software.amazon.jsii.JsiiObjectRef objRef)

    • CfnTrustedEntitySet

      protected CfnTrustedEntitySet(software.amazon.jsii.JsiiObject.InitializationMode initializationMode)

    • CfnTrustedEntitySet

      @Stability(Stable) public CfnTrustedEntitySet(@NotNull software.constructs.Construct scope, @NotNull String id, @NotNull CfnTrustedEntitySetProps props)
      Parameters:
      scope - Scope in which this resource is defined. This parameter is required.
      id - Construct identifier for this resource (unique in its scope). This parameter is required.
      props - Resource properties. This parameter is required.

  • Method Details

    • inspect

      @Stability(Stable) public void inspect(@NotNull TreeInspector inspector)
      Examines the CloudFormation resource and discloses attributes.

      Specified by:
      inspect in interface IInspectable
      Parameters:
      inspector - tree inspector to collect and process attributes. This parameter is required.

    • renderProperties

      @Stability(Stable) @NotNull protected Map<String,Object> renderProperties(@NotNull Map<String,Object> props)
      Overrides:
      renderProperties in class CfnResource
      Parameters:
      props - This parameter is required.

    • getAttrCreatedAt

      @Stability(Stable) @NotNull public String getAttrCreatedAt()
      The timestamp when the trusted entity set was created.

    • getAttrErrorDetails

      @Stability(Stable) @NotNull public String getAttrErrorDetails()
      Specifies the error details when the status of the trusted entity set shows as Error .

    • getAttrId

      @Stability(Stable) @NotNull public String getAttrId()

    • getAttrStatus

      @Stability(Stable) @NotNull public String getAttrStatus()
      The status of your TrustedEntitySet .

      For information about valid status values, see Understanding list statuses in the Amazon GuardDuty User Guide .

    • getAttrUpdatedAt

      @Stability(Stable) @NotNull public String getAttrUpdatedAt()
      The timestamp when the trusted entity set was updated.

    • getCdkTagManager

      @Stability(Stable) @NotNull public TagManager getCdkTagManager()
      Tag Manager which manages the tags for this resource.
      Specified by:
      getCdkTagManager in interface ITaggableV2

    • getCfnProperties

      @Stability(Stable) @NotNull protected Map<String,Object> getCfnProperties()
      Overrides:
      getCfnProperties in class CfnResource

    • getTrustedEntitySetRef

      @Stability(Stable) @NotNull public TrustedEntitySetReference getTrustedEntitySetRef()
      A reference to a TrustedEntitySet resource.
      Specified by:
      getTrustedEntitySetRef in interface ITrustedEntitySetRef

    • getFormat

      @Stability(Stable) @NotNull public String getFormat()
      The format of the file that contains the trusted entity set.

    • setFormat

      @Stability(Stable) public void setFormat(@NotNull String value)
      The format of the file that contains the trusted entity set.

    • getLocation

      @Stability(Stable) @NotNull public String getLocation()
      The URI of the file that contains the trusted entity set.

    • setLocation

      @Stability(Stable) public void setLocation(@NotNull String value)
      The URI of the file that contains the trusted entity set.

    • getActivate

      @Stability(Stable) @Nullable public Object getActivate()
      A boolean value that determines if GuardDuty can start using this list for custom threat detection.

    • setActivate

      @Stability(Stable) public void setActivate(@Nullable Boolean value)
      A boolean value that determines if GuardDuty can start using this list for custom threat detection.

    • setActivate

      @Stability(Stable) public void setActivate(@Nullable IResolvable value)
      A boolean value that determines if GuardDuty can start using this list for custom threat detection.

    • getDetectorId

      @Stability(Stable) @Nullable public String getDetectorId()
      The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.

    • setDetectorId

      @Stability(Stable) public void setDetectorId(@Nullable String value)
      The unique regional detector ID of the GuardDuty account for which you want to create a trusted entity set.

    • getExpectedBucketOwner

      @Stability(Stable) @Nullable public String getExpectedBucketOwner()
      The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    • setExpectedBucketOwner

      @Stability(Stable) public void setExpectedBucketOwner(@Nullable String value)
      The AWS account ID that owns the Amazon S3 bucket specified in the Location field.

    • getName

      @Stability(Stable) @Nullable public String getName()
      A user-friendly name to identify the trusted entity set.

    • setName

      @Stability(Stable) public void setName(@Nullable String value)
      A user-friendly name to identify the trusted entity set.

    • getTags

      @Stability(Stable) @Nullable public List<CfnTrustedEntitySet.TagItemProperty> getTags()
      The tags to be added to a new trusted entity set resource.

    • setTags

      @Stability(Stable) public void setTags(@Nullable List<CfnTrustedEntitySet.TagItemProperty> value)
      The tags to be added to a new trusted entity set resource.