guardduty

type Detector struct {
	pulumi.CustomResourceState

	// The AWS account ID of the GuardDuty detector
	AccountId pulumi.StringOutput `pulumi:"accountId"`
	// Amazon Resource Name (ARN) of the GuardDuty detector
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Describes which data sources will be enabled for the detector. See Data Sources below for more details.
	Datasources DetectorDatasourcesOutput `pulumi:"datasources"`
	// Enable monitoring and feedback reporting. Setting to `false` is equivalent to "suspending" GuardDuty. Defaults to `true`.
	Enable pulumi.BoolPtrOutput `pulumi:"enable"`
	// Specifies the frequency of notifications sent for subsequent finding occurrences. If the detector is a GuardDuty member account, the value is determined by the GuardDuty primary account and cannot be modified, otherwise defaults to `SIX_HOURS`. For standalone and GuardDuty primary accounts, it must be configured in this provider to enable drift detection. Valid values for standalone and primary accounts: `FIFTEEN_MINUTES`, `ONE_HOUR`, `SIX_HOURS`. See [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings_cloudwatch.html#guardduty_findings_cloudwatch_notification_frequency) for more information.
	FindingPublishingFrequency pulumi.StringOutput `pulumi:"findingPublishingFrequency"`
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

type DetectorArgs struct {
	// Describes which data sources will be enabled for the detector. See Data Sources below for more details.
	Datasources DetectorDatasourcesPtrInput
	// Enable monitoring and feedback reporting. Setting to `false` is equivalent to "suspending" GuardDuty. Defaults to `true`.
	Enable pulumi.BoolPtrInput
	// Specifies the frequency of notifications sent for subsequent finding occurrences. If the detector is a GuardDuty member account, the value is determined by the GuardDuty primary account and cannot be modified, otherwise defaults to `SIX_HOURS`. For standalone and GuardDuty primary accounts, it must be configured in this provider to enable drift detection. Valid values for standalone and primary accounts: `FIFTEEN_MINUTES`, `ONE_HOUR`, `SIX_HOURS`. See [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings_cloudwatch.html#guardduty_findings_cloudwatch_notification_frequency) for more information.
	FindingPublishingFrequency pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

type DetectorArray []DetectorInput

type DetectorArrayInput interface {
	pulumi.Input

	ToDetectorArrayOutput() DetectorArrayOutput
	ToDetectorArrayOutputWithContext(context.Context) DetectorArrayOutput
}

type DetectorArrayOutput struct{ *pulumi.OutputState }

type DetectorDatasources struct {
	// Configures [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// See Kubernetes and Kubernetes Audit Logs below for more details.
	Kubernetes *DetectorDatasourcesKubernetes `pulumi:"kubernetes"`
	// Configures [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html).
	// See Malware Protection, Scan EC2 instance with findings and EBS volumes below for more details.
	MalwareProtection *DetectorDatasourcesMalwareProtection `pulumi:"malwareProtection"`
	// Configures [S3 protection](https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html).
	// See S3 Logs below for more details.
	S3Logs *DetectorDatasourcesS3Logs `pulumi:"s3Logs"`
}

type DetectorDatasourcesArgs struct {
	// Configures [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// See Kubernetes and Kubernetes Audit Logs below for more details.
	Kubernetes DetectorDatasourcesKubernetesPtrInput `pulumi:"kubernetes"`
	// Configures [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html).
	// See Malware Protection, Scan EC2 instance with findings and EBS volumes below for more details.
	MalwareProtection DetectorDatasourcesMalwareProtectionPtrInput `pulumi:"malwareProtection"`
	// Configures [S3 protection](https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html).
	// See S3 Logs below for more details.
	S3Logs DetectorDatasourcesS3LogsPtrInput `pulumi:"s3Logs"`
}

type DetectorDatasourcesInput interface {
	pulumi.Input

	ToDetectorDatasourcesOutput() DetectorDatasourcesOutput
	ToDetectorDatasourcesOutputWithContext(context.Context) DetectorDatasourcesOutput
}

type DetectorDatasourcesKubernetes struct {
	// Configures Kubernetes audit logs as a data source for [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// See Kubernetes Audit Logs below for more details.
	AuditLogs DetectorDatasourcesKubernetesAuditLogs `pulumi:"auditLogs"`
}

type DetectorDatasourcesKubernetesArgs struct {
	// Configures Kubernetes audit logs as a data source for [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// See Kubernetes Audit Logs below for more details.
	AuditLogs DetectorDatasourcesKubernetesAuditLogsInput `pulumi:"auditLogs"`
}

type DetectorDatasourcesKubernetesAuditLogs struct {
	// If true, enables Kubernetes audit logs as a data source for [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// Defaults to `true`.
	Enable bool `pulumi:"enable"`
}

type DetectorDatasourcesKubernetesAuditLogsArgs struct {
	// If true, enables Kubernetes audit logs as a data source for [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// Defaults to `true`.
	Enable pulumi.BoolInput `pulumi:"enable"`
}

type DetectorDatasourcesKubernetesAuditLogsInput interface {
	pulumi.Input

	ToDetectorDatasourcesKubernetesAuditLogsOutput() DetectorDatasourcesKubernetesAuditLogsOutput
	ToDetectorDatasourcesKubernetesAuditLogsOutputWithContext(context.Context) DetectorDatasourcesKubernetesAuditLogsOutput
}

type DetectorDatasourcesKubernetesAuditLogsOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesKubernetesAuditLogsPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesKubernetesAuditLogsPtrOutput() DetectorDatasourcesKubernetesAuditLogsPtrOutput
	ToDetectorDatasourcesKubernetesAuditLogsPtrOutputWithContext(context.Context) DetectorDatasourcesKubernetesAuditLogsPtrOutput
}

type DetectorDatasourcesKubernetesAuditLogsPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesKubernetesInput interface {
	pulumi.Input

	ToDetectorDatasourcesKubernetesOutput() DetectorDatasourcesKubernetesOutput
	ToDetectorDatasourcesKubernetesOutputWithContext(context.Context) DetectorDatasourcesKubernetesOutput
}

type DetectorDatasourcesKubernetesOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesKubernetesPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesKubernetesPtrOutput() DetectorDatasourcesKubernetesPtrOutput
	ToDetectorDatasourcesKubernetesPtrOutputWithContext(context.Context) DetectorDatasourcesKubernetesPtrOutput
}

type DetectorDatasourcesKubernetesPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtection struct {
	// Configure whether [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html) is enabled as data source for EC2 instances with findings for the detector.
	// See Scan EC2 instance with findings below for more details.
	ScanEc2InstanceWithFindings DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindings `pulumi:"scanEc2InstanceWithFindings"`
}

type DetectorDatasourcesMalwareProtectionArgs struct {
	// Configure whether [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html) is enabled as data source for EC2 instances with findings for the detector.
	// See Scan EC2 instance with findings below for more details.
	ScanEc2InstanceWithFindings DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsInput `pulumi:"scanEc2InstanceWithFindings"`
}

type DetectorDatasourcesMalwareProtectionInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionOutput() DetectorDatasourcesMalwareProtectionOutput
	ToDetectorDatasourcesMalwareProtectionOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionOutput
}

type DetectorDatasourcesMalwareProtectionOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionPtrOutput() DetectorDatasourcesMalwareProtectionPtrOutput
	ToDetectorDatasourcesMalwareProtectionPtrOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionPtrOutput
}

type DetectorDatasourcesMalwareProtectionPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindings struct {
	// Configure whether scanning EBS volumes is enabled as data source for the detector for instances with findings.
	// See EBS volumes below for more details.
	EbsVolumes DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumes `pulumi:"ebsVolumes"`
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsArgs struct {
	// Configure whether scanning EBS volumes is enabled as data source for the detector for instances with findings.
	// See EBS volumes below for more details.
	EbsVolumes DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesInput `pulumi:"ebsVolumes"`
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumes struct {
	// If true, enables [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html) as data source for the detector.
	// Defaults to `true`.
	Enable bool `pulumi:"enable"`
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesArgs struct {
	// If true, enables [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html) as data source for the detector.
	// Defaults to `true`.
	Enable pulumi.BoolInput `pulumi:"enable"`
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutput() DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutput
	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutput
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutput() DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutput
	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutput
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutput() DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutput
	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutput
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutput() DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutput
	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutput
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesPtrOutput() DetectorDatasourcesPtrOutput
	ToDetectorDatasourcesPtrOutputWithContext(context.Context) DetectorDatasourcesPtrOutput
}

type DetectorDatasourcesPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesS3Logs struct {
	// Enable monitoring and feedback reporting. Setting to `false` is equivalent to "suspending" GuardDuty. Defaults to `true`.
	Enable bool `pulumi:"enable"`
}

type DetectorDatasourcesS3LogsArgs struct {
	// Enable monitoring and feedback reporting. Setting to `false` is equivalent to "suspending" GuardDuty. Defaults to `true`.
	Enable pulumi.BoolInput `pulumi:"enable"`
}

type DetectorDatasourcesS3LogsInput interface {
	pulumi.Input

	ToDetectorDatasourcesS3LogsOutput() DetectorDatasourcesS3LogsOutput
	ToDetectorDatasourcesS3LogsOutputWithContext(context.Context) DetectorDatasourcesS3LogsOutput
}

type DetectorDatasourcesS3LogsOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesS3LogsPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesS3LogsPtrOutput() DetectorDatasourcesS3LogsPtrOutput
	ToDetectorDatasourcesS3LogsPtrOutputWithContext(context.Context) DetectorDatasourcesS3LogsPtrOutput
}

type DetectorDatasourcesS3LogsPtrOutput struct{ *pulumi.OutputState }

type DetectorInput interface {
	pulumi.Input

	ToDetectorOutput() DetectorOutput
	ToDetectorOutputWithContext(ctx context.Context) DetectorOutput
}

type DetectorMap map[string]DetectorInput

type DetectorMapInput interface {
	pulumi.Input

	ToDetectorMapOutput() DetectorMapOutput
	ToDetectorMapOutputWithContext(context.Context) DetectorMapOutput
}

type DetectorMapOutput struct{ *pulumi.OutputState }

type DetectorOutput struct{ *pulumi.OutputState }

type DetectorState struct {
	// The AWS account ID of the GuardDuty detector
	AccountId pulumi.StringPtrInput
	// Amazon Resource Name (ARN) of the GuardDuty detector
	Arn pulumi.StringPtrInput
	// Describes which data sources will be enabled for the detector. See Data Sources below for more details.
	Datasources DetectorDatasourcesPtrInput
	// Enable monitoring and feedback reporting. Setting to `false` is equivalent to "suspending" GuardDuty. Defaults to `true`.
	Enable pulumi.BoolPtrInput
	// Specifies the frequency of notifications sent for subsequent finding occurrences. If the detector is a GuardDuty member account, the value is determined by the GuardDuty primary account and cannot be modified, otherwise defaults to `SIX_HOURS`. For standalone and GuardDuty primary accounts, it must be configured in this provider to enable drift detection. Valid values for standalone and primary accounts: `FIFTEEN_MINUTES`, `ONE_HOUR`, `SIX_HOURS`. See [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings_cloudwatch.html#guardduty_findings_cloudwatch_notification_frequency) for more information.
	FindingPublishingFrequency pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

type Filter struct {
	pulumi.CustomResourceState

	// Specifies the action that is to be applied to the findings that match the filter. Can be one of `ARCHIVE` or `NOOP`.
	Action pulumi.StringOutput `pulumi:"action"`
	// The ARN of the GuardDuty filter.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Description of the filter.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// ID of a GuardDuty detector, attached to your account.
	DetectorId pulumi.StringOutput `pulumi:"detectorId"`
	// Represents the criteria to be used in the filter for querying findings. Contains one or more `criterion` blocks, documented below.
	FindingCriteria FilterFindingCriteriaOutput `pulumi:"findingCriteria"`
	// The name of your filter.
	Name pulumi.StringOutput `pulumi:"name"`
	// Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
	Rank pulumi.IntOutput `pulumi:"rank"`
	// The tags that you want to add to the Filter resource. A tag consists of a key and a value. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

type FilterArgs struct {
	// Specifies the action that is to be applied to the findings that match the filter. Can be one of `ARCHIVE` or `NOOP`.
	Action pulumi.StringInput
	// Description of the filter.
	Description pulumi.StringPtrInput
	// ID of a GuardDuty detector, attached to your account.
	DetectorId pulumi.StringInput
	// Represents the criteria to be used in the filter for querying findings. Contains one or more `criterion` blocks, documented below.
	FindingCriteria FilterFindingCriteriaInput
	// The name of your filter.
	Name pulumi.StringPtrInput
	// Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
	Rank pulumi.IntInput
	// The tags that you want to add to the Filter resource. A tag consists of a key and a value. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

type FilterArray []FilterInput

type FilterArrayInput interface {
	pulumi.Input

	ToFilterArrayOutput() FilterArrayOutput
	ToFilterArrayOutputWithContext(context.Context) FilterArrayOutput
}

type FilterArrayOutput struct{ *pulumi.OutputState }

type FilterFindingCriteria struct {
	Criterions []FilterFindingCriteriaCriterion `pulumi:"criterions"`
}

type FilterFindingCriteriaArgs struct {
	Criterions FilterFindingCriteriaCriterionArrayInput `pulumi:"criterions"`
}

type FilterFindingCriteriaCriterion struct {
	// List of string values to be evaluated.
	Equals []string `pulumi:"equals"`
	// The name of the field to be evaluated. The full list of field names can be found in [AWS documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_filter-findings.html#filter_criteria).
	Field string `pulumi:"field"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	GreaterThan *string `pulumi:"greaterThan"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	GreaterThanOrEqual *string `pulumi:"greaterThanOrEqual"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	LessThan *string `pulumi:"lessThan"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	LessThanOrEqual *string `pulumi:"lessThanOrEqual"`
	// List of string values to be evaluated.
	NotEquals []string `pulumi:"notEquals"`
}

type FilterFindingCriteriaCriterionArgs struct {
	// List of string values to be evaluated.
	Equals pulumi.StringArrayInput `pulumi:"equals"`
	// The name of the field to be evaluated. The full list of field names can be found in [AWS documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_filter-findings.html#filter_criteria).
	Field pulumi.StringInput `pulumi:"field"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	GreaterThan pulumi.StringPtrInput `pulumi:"greaterThan"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	GreaterThanOrEqual pulumi.StringPtrInput `pulumi:"greaterThanOrEqual"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	LessThan pulumi.StringPtrInput `pulumi:"lessThan"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	LessThanOrEqual pulumi.StringPtrInput `pulumi:"lessThanOrEqual"`
	// List of string values to be evaluated.
	NotEquals pulumi.StringArrayInput `pulumi:"notEquals"`
}

type FilterFindingCriteriaCriterionArray []FilterFindingCriteriaCriterionInput

type FilterFindingCriteriaCriterionArrayInput interface {
	pulumi.Input

	ToFilterFindingCriteriaCriterionArrayOutput() FilterFindingCriteriaCriterionArrayOutput
	ToFilterFindingCriteriaCriterionArrayOutputWithContext(context.Context) FilterFindingCriteriaCriterionArrayOutput
}

type FilterFindingCriteriaCriterionArrayOutput struct{ *pulumi.OutputState }

type FilterFindingCriteriaCriterionInput interface {
	pulumi.Input

	ToFilterFindingCriteriaCriterionOutput() FilterFindingCriteriaCriterionOutput
	ToFilterFindingCriteriaCriterionOutputWithContext(context.Context) FilterFindingCriteriaCriterionOutput
}

type FilterFindingCriteriaCriterionOutput struct{ *pulumi.OutputState }

type FilterFindingCriteriaInput interface {
	pulumi.Input

	ToFilterFindingCriteriaOutput() FilterFindingCriteriaOutput
	ToFilterFindingCriteriaOutputWithContext(context.Context) FilterFindingCriteriaOutput
}

type FilterFindingCriteriaOutput struct{ *pulumi.OutputState }

type FilterFindingCriteriaPtrInput interface {
	pulumi.Input

	ToFilterFindingCriteriaPtrOutput() FilterFindingCriteriaPtrOutput
	ToFilterFindingCriteriaPtrOutputWithContext(context.Context) FilterFindingCriteriaPtrOutput
}

type FilterFindingCriteriaPtrOutput struct{ *pulumi.OutputState }

type FilterInput interface {
	pulumi.Input

	ToFilterOutput() FilterOutput
	ToFilterOutputWithContext(ctx context.Context) FilterOutput
}

type FilterMap map[string]FilterInput

type FilterMapInput interface {
	pulumi.Input

	ToFilterMapOutput() FilterMapOutput
	ToFilterMapOutputWithContext(context.Context) FilterMapOutput
}

type FilterMapOutput struct{ *pulumi.OutputState }

type FilterOutput struct{ *pulumi.OutputState }

type FilterState struct {
	// Specifies the action that is to be applied to the findings that match the filter. Can be one of `ARCHIVE` or `NOOP`.
	Action pulumi.StringPtrInput
	// The ARN of the GuardDuty filter.
	Arn pulumi.StringPtrInput
	// Description of the filter.
	Description pulumi.StringPtrInput
	// ID of a GuardDuty detector, attached to your account.
	DetectorId pulumi.StringPtrInput
	// Represents the criteria to be used in the filter for querying findings. Contains one or more `criterion` blocks, documented below.
	FindingCriteria FilterFindingCriteriaPtrInput
	// The name of your filter.
	Name pulumi.StringPtrInput
	// Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
	Rank pulumi.IntPtrInput
	// The tags that you want to add to the Filter resource. A tag consists of a key and a value. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

type GetFindingIdsArgs struct {
	// ID of the GuardDuty detector.
	DetectorId string `pulumi:"detectorId"`
}

type GetFindingIdsOutputArgs struct {
	// ID of the GuardDuty detector.
	DetectorId pulumi.StringInput `pulumi:"detectorId"`
}

type GetFindingIdsResult struct {
	DetectorId string `pulumi:"detectorId"`
	// A list of finding IDs for the specified detector.
	FindingIds []string `pulumi:"findingIds"`
	// Indicates whether findings are present for the specified detector.
	HasFindings bool   `pulumi:"hasFindings"`
	Id          string `pulumi:"id"`
}

type GetFindingIdsResultOutput struct{ *pulumi.OutputState }

type IPSet struct {
	pulumi.CustomResourceState

	// Specifies whether GuardDuty is to start using the uploaded IPSet.
	Activate pulumi.BoolOutput `pulumi:"activate"`
	// Amazon Resource Name (ARN) of the GuardDuty IPSet.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// The detector ID of the GuardDuty.
	DetectorId pulumi.StringOutput `pulumi:"detectorId"`
	// The format of the file that contains the IPSet. Valid values: `TXT` | `STIX` | `OTX_CSV` | `ALIEN_VAULT` | `PROOF_POINT` | `FIRE_EYE`
	Format pulumi.StringOutput `pulumi:"format"`
	// The URI of the file that contains the IPSet.
	Location pulumi.StringOutput `pulumi:"location"`
	// The friendly name to identify the IPSet.
	Name pulumi.StringOutput `pulumi:"name"`
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

type IPSetArgs struct {
	// Specifies whether GuardDuty is to start using the uploaded IPSet.
	Activate pulumi.BoolInput
	// The detector ID of the GuardDuty.
	DetectorId pulumi.StringInput
	// The format of the file that contains the IPSet. Valid values: `TXT` | `STIX` | `OTX_CSV` | `ALIEN_VAULT` | `PROOF_POINT` | `FIRE_EYE`
	Format pulumi.StringInput
	// The URI of the file that contains the IPSet.
	Location pulumi.StringInput
	// The friendly name to identify the IPSet.
	Name pulumi.StringPtrInput
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

type IPSetArray []IPSetInput

type IPSetArrayInput interface {
	pulumi.Input

	ToIPSetArrayOutput() IPSetArrayOutput
	ToIPSetArrayOutputWithContext(context.Context) IPSetArrayOutput
}

type IPSetArrayOutput struct{ *pulumi.OutputState }

type IPSetInput interface {
	pulumi.Input

	ToIPSetOutput() IPSetOutput
	ToIPSetOutputWithContext(ctx context.Context) IPSetOutput
}

type IPSetMap map[string]IPSetInput

type IPSetMapInput interface {
	pulumi.Input

	ToIPSetMapOutput() IPSetMapOutput
	ToIPSetMapOutputWithContext(context.Context) IPSetMapOutput
}

type IPSetMapOutput struct{ *pulumi.OutputState }

type IPSetOutput struct{ *pulumi.OutputState }

type IPSetState struct {
	// Specifies whether GuardDuty is to start using the uploaded IPSet.
	Activate pulumi.BoolPtrInput
	// Amazon Resource Name (ARN) of the GuardDuty IPSet.
	Arn pulumi.StringPtrInput
	// The detector ID of the GuardDuty.
	DetectorId pulumi.StringPtrInput
	// The format of the file that contains the IPSet. Valid values: `TXT` | `STIX` | `OTX_CSV` | `ALIEN_VAULT` | `PROOF_POINT` | `FIRE_EYE`
	Format pulumi.StringPtrInput
	// The URI of the file that contains the IPSet.
	Location pulumi.StringPtrInput
	// The friendly name to identify the IPSet.
	Name pulumi.StringPtrInput
	// Key-value map of resource tags. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

type InviteAccepter struct {
	pulumi.CustomResourceState

	// The detector ID of the member GuardDuty account.
	DetectorId pulumi.StringOutput `pulumi:"detectorId"`
	// AWS account ID for primary account.
	MasterAccountId pulumi.StringOutput `pulumi:"masterAccountId"`
}

type InviteAccepterArgs struct {
	// The detector ID of the member GuardDuty account.
	DetectorId pulumi.StringInput
	// AWS account ID for primary account.
	MasterAccountId pulumi.StringInput
}

type InviteAccepterArray []InviteAccepterInput

type InviteAccepterArrayInput interface {
	pulumi.Input

	ToInviteAccepterArrayOutput() InviteAccepterArrayOutput
	ToInviteAccepterArrayOutputWithContext(context.Context) InviteAccepterArrayOutput
}

type InviteAccepterArrayOutput struct{ *pulumi.OutputState }

type InviteAccepterInput interface {
	pulumi.Input

	ToInviteAccepterOutput() InviteAccepterOutput
	ToInviteAccepterOutputWithContext(ctx context.Context) InviteAccepterOutput
}

type InviteAccepterMap map[string]InviteAccepterInput

type InviteAccepterMapInput interface {
	pulumi.Input

	ToInviteAccepterMapOutput() InviteAccepterMapOutput
	ToInviteAccepterMapOutputWithContext(context.Context) InviteAccepterMapOutput
}

type InviteAccepterMapOutput struct{ *pulumi.OutputState }

type InviteAccepterOutput struct{ *pulumi.OutputState }

type InviteAccepterState struct {
	// The detector ID of the member GuardDuty account.
	DetectorId pulumi.StringPtrInput
	// AWS account ID for primary account.
	MasterAccountId pulumi.StringPtrInput
}

type LookupDetectorArgs struct {
	// ID of the detector.
	Id *string `pulumi:"id"`
}

type LookupDetectorOutputArgs struct {
	// ID of the detector.
	Id pulumi.StringPtrInput `pulumi:"id"`
}

type LookupDetectorResult struct {
	// The frequency of notifications sent about subsequent finding occurrences.
	FindingPublishingFrequency string `pulumi:"findingPublishingFrequency"`
	Id                         string `pulumi:"id"`
	// Service-linked role that grants GuardDuty access to the resources in the AWS account.
	ServiceRoleArn string `pulumi:"serviceRoleArn"`
	// Current status of the detector.
	Status string `pulumi:"status"`
}

type LookupDetectorResultOutput struct{ *pulumi.OutputState }

type Member struct {
	pulumi.CustomResourceState

	// AWS account ID for member account.
	AccountId pulumi.StringOutput `pulumi:"accountId"`
	// The detector ID of the GuardDuty account where you want to create member accounts.
	DetectorId pulumi.StringOutput `pulumi:"detectorId"`
	// Boolean whether an email notification is sent to the accounts. Defaults to `false`.
	DisableEmailNotification pulumi.BoolPtrOutput `pulumi:"disableEmailNotification"`
	// Email address for member account.
	Email pulumi.StringOutput `pulumi:"email"`
	// Message for invitation.
	InvitationMessage pulumi.StringPtrOutput `pulumi:"invitationMessage"`
	// Boolean whether to invite the account to GuardDuty as a member. Defaults to `false`. To detect if an invitation needs to be (re-)sent, the this provider state value is `true` based on a `relationshipStatus` of `Disabled`, `Enabled`, `Invited`, or `EmailVerificationInProgress`.
	Invite pulumi.BoolPtrOutput `pulumi:"invite"`
	// The status of the relationship between the member account and its primary account. More information can be found in [Amazon GuardDuty API Reference](https://docs.aws.amazon.com/guardduty/latest/ug/get-members.html).
	RelationshipStatus pulumi.StringOutput `pulumi:"relationshipStatus"`
}

type MemberArgs struct {
	// AWS account ID for member account.
	AccountId pulumi.StringInput
	// The detector ID of the GuardDuty account where you want to create member accounts.
	DetectorId pulumi.StringInput
	// Boolean whether an email notification is sent to the accounts. Defaults to `false`.
	DisableEmailNotification pulumi.BoolPtrInput
	// Email address for member account.
	Email pulumi.StringInput
	// Message for invitation.
	InvitationMessage pulumi.StringPtrInput
	// Boolean whether to invite the account to GuardDuty as a member. Defaults to `false`. To detect if an invitation needs to be (re-)sent, the this provider state value is `true` based on a `relationshipStatus` of `Disabled`, `Enabled`, `Invited`, or `EmailVerificationInProgress`.
	Invite pulumi.BoolPtrInput
}

type MemberArray []MemberInput

type MemberArrayInput interface {
	pulumi.Input

	ToMemberArrayOutput() MemberArrayOutput
	ToMemberArrayOutputWithContext(context.Context) MemberArrayOutput
}

type MemberArrayOutput struct{ *pulumi.OutputState }

type MemberInput interface {
	pulumi.Input

	ToMemberOutput() MemberOutput
	ToMemberOutputWithContext(ctx context.Context) MemberOutput
}

type MemberMap map[string]MemberInput

type MemberMapInput interface {
	pulumi.Input

	ToMemberMapOutput() MemberMapOutput
	ToMemberMapOutputWithContext(context.Context) MemberMapOutput
}

type MemberMapOutput struct{ *pulumi.OutputState }

type MemberOutput struct{ *pulumi.OutputState }

type MemberState struct {
	// AWS account ID for member account.
	AccountId pulumi.StringPtrInput
	// The detector ID of the GuardDuty account where you want to create member accounts.
	DetectorId pulumi.StringPtrInput
	// Boolean whether an email notification is sent to the accounts. Defaults to `false`.
	DisableEmailNotification pulumi.BoolPtrInput
	// Email address for member account.
	Email pulumi.StringPtrInput
	// Message for invitation.
	InvitationMessage pulumi.StringPtrInput
	// Boolean whether to invite the account to GuardDuty as a member. Defaults to `false`. To detect if an invitation needs to be (re-)sent, the this provider state value is `true` based on a `relationshipStatus` of `Disabled`, `Enabled`, `Invited`, or `EmailVerificationInProgress`.
	Invite pulumi.BoolPtrInput
	// The status of the relationship between the member account and its primary account. More information can be found in [Amazon GuardDuty API Reference](https://docs.aws.amazon.com/guardduty/latest/ug/get-members.html).
	RelationshipStatus pulumi.StringPtrInput
}

type OrganizationAdminAccount struct {
	pulumi.CustomResourceState

	// AWS account identifier to designate as a delegated administrator for GuardDuty.
	AdminAccountId pulumi.StringOutput `pulumi:"adminAccountId"`
}

type OrganizationAdminAccountArgs struct {
	// AWS account identifier to designate as a delegated administrator for GuardDuty.
	AdminAccountId pulumi.StringInput
}

type OrganizationAdminAccountArray []OrganizationAdminAccountInput

type OrganizationAdminAccountArrayInput interface {
	pulumi.Input

	ToOrganizationAdminAccountArrayOutput() OrganizationAdminAccountArrayOutput
	ToOrganizationAdminAccountArrayOutputWithContext(context.Context) OrganizationAdminAccountArrayOutput
}

type OrganizationAdminAccountArrayOutput struct{ *pulumi.OutputState }