guardduty

type Detector struct {
	pulumi.CustomResourceState

	// The AWS account ID of the GuardDuty detector
	AccountId pulumi.StringOutput `pulumi:"accountId"`
	// Amazon Resource Name (ARN) of the GuardDuty detector
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Describes which data sources will be enabled for the detector. See Data Sources below for more details. [Deprecated](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-feature-object-api-changes-march2023.html) in favor of `guardduty.DetectorFeature` resources.
	//
	// Deprecated: datasources is deprecated. Use guardduty.DetectorFeature resources instead.
	Datasources DetectorDatasourcesOutput `pulumi:"datasources"`
	// Enable monitoring and feedback reporting. Setting to `false` is equivalent to "suspending" GuardDuty. Defaults to `true`.
	Enable pulumi.BoolPtrOutput `pulumi:"enable"`
	// Specifies the frequency of notifications sent for subsequent finding occurrences. If the detector is a GuardDuty member account, the value is determined by the GuardDuty primary account and cannot be modified, otherwise defaults to `SIX_HOURS`. For standalone and GuardDuty primary accounts, it must be configured in this provider to enable drift detection. Valid values for standalone and primary accounts: `FIFTEEN_MINUTES`, `ONE_HOUR`, `SIX_HOURS`. See [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings_cloudwatch.html#guardduty_findings_cloudwatch_notification_frequency) for more information.
	FindingPublishingFrequency pulumi.StringOutput `pulumi:"findingPublishingFrequency"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

type DetectorArgs struct {
	// Describes which data sources will be enabled for the detector. See Data Sources below for more details. [Deprecated](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-feature-object-api-changes-march2023.html) in favor of `guardduty.DetectorFeature` resources.
	//
	// Deprecated: datasources is deprecated. Use guardduty.DetectorFeature resources instead.
	Datasources DetectorDatasourcesPtrInput
	// Enable monitoring and feedback reporting. Setting to `false` is equivalent to "suspending" GuardDuty. Defaults to `true`.
	Enable pulumi.BoolPtrInput
	// Specifies the frequency of notifications sent for subsequent finding occurrences. If the detector is a GuardDuty member account, the value is determined by the GuardDuty primary account and cannot be modified, otherwise defaults to `SIX_HOURS`. For standalone and GuardDuty primary accounts, it must be configured in this provider to enable drift detection. Valid values for standalone and primary accounts: `FIFTEEN_MINUTES`, `ONE_HOUR`, `SIX_HOURS`. See [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings_cloudwatch.html#guardduty_findings_cloudwatch_notification_frequency) for more information.
	FindingPublishingFrequency pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

type DetectorArray []DetectorInput

type DetectorArrayInput interface {
	pulumi.Input

	ToDetectorArrayOutput() DetectorArrayOutput
	ToDetectorArrayOutputWithContext(context.Context) DetectorArrayOutput
}

type DetectorArrayOutput struct{ *pulumi.OutputState }

type DetectorDatasources struct {
	// Configures [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// See Kubernetes and Kubernetes Audit Logs below for more details.
	Kubernetes *DetectorDatasourcesKubernetes `pulumi:"kubernetes"`
	// Configures [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html).
	// See Malware Protection, Scan EC2 instance with findings and EBS volumes below for more details.
	MalwareProtection *DetectorDatasourcesMalwareProtection `pulumi:"malwareProtection"`
	// Configures [S3 protection](https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html).
	// See S3 Logs below for more details.
	S3Logs *DetectorDatasourcesS3Logs `pulumi:"s3Logs"`
}

type DetectorDatasourcesArgs struct {
	// Configures [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// See Kubernetes and Kubernetes Audit Logs below for more details.
	Kubernetes DetectorDatasourcesKubernetesPtrInput `pulumi:"kubernetes"`
	// Configures [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html).
	// See Malware Protection, Scan EC2 instance with findings and EBS volumes below for more details.
	MalwareProtection DetectorDatasourcesMalwareProtectionPtrInput `pulumi:"malwareProtection"`
	// Configures [S3 protection](https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html).
	// See S3 Logs below for more details.
	S3Logs DetectorDatasourcesS3LogsPtrInput `pulumi:"s3Logs"`
}

type DetectorDatasourcesInput interface {
	pulumi.Input

	ToDetectorDatasourcesOutput() DetectorDatasourcesOutput
	ToDetectorDatasourcesOutputWithContext(context.Context) DetectorDatasourcesOutput
}

type DetectorDatasourcesKubernetes struct {
	// Configures Kubernetes audit logs as a data source for [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// See Kubernetes Audit Logs below for more details.
	AuditLogs DetectorDatasourcesKubernetesAuditLogs `pulumi:"auditLogs"`
}

type DetectorDatasourcesKubernetesArgs struct {
	// Configures Kubernetes audit logs as a data source for [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// See Kubernetes Audit Logs below for more details.
	AuditLogs DetectorDatasourcesKubernetesAuditLogsInput `pulumi:"auditLogs"`
}

type DetectorDatasourcesKubernetesAuditLogs struct {
	// If true, enables Kubernetes audit logs as a data source for [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// Defaults to `true`.
	Enable bool `pulumi:"enable"`
}

type DetectorDatasourcesKubernetesAuditLogsArgs struct {
	// If true, enables Kubernetes audit logs as a data source for [Kubernetes protection](https://docs.aws.amazon.com/guardduty/latest/ug/kubernetes-protection.html).
	// Defaults to `true`.
	Enable pulumi.BoolInput `pulumi:"enable"`
}

type DetectorDatasourcesKubernetesAuditLogsInput interface {
	pulumi.Input

	ToDetectorDatasourcesKubernetesAuditLogsOutput() DetectorDatasourcesKubernetesAuditLogsOutput
	ToDetectorDatasourcesKubernetesAuditLogsOutputWithContext(context.Context) DetectorDatasourcesKubernetesAuditLogsOutput
}

type DetectorDatasourcesKubernetesAuditLogsOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesKubernetesAuditLogsPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesKubernetesAuditLogsPtrOutput() DetectorDatasourcesKubernetesAuditLogsPtrOutput
	ToDetectorDatasourcesKubernetesAuditLogsPtrOutputWithContext(context.Context) DetectorDatasourcesKubernetesAuditLogsPtrOutput
}

type DetectorDatasourcesKubernetesAuditLogsPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesKubernetesInput interface {
	pulumi.Input

	ToDetectorDatasourcesKubernetesOutput() DetectorDatasourcesKubernetesOutput
	ToDetectorDatasourcesKubernetesOutputWithContext(context.Context) DetectorDatasourcesKubernetesOutput
}

type DetectorDatasourcesKubernetesOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesKubernetesPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesKubernetesPtrOutput() DetectorDatasourcesKubernetesPtrOutput
	ToDetectorDatasourcesKubernetesPtrOutputWithContext(context.Context) DetectorDatasourcesKubernetesPtrOutput
}

type DetectorDatasourcesKubernetesPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtection struct {
	// Configure whether [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html) is enabled as data source for EC2 instances with findings for the detector.
	// See Scan EC2 instance with findings below for more details.
	ScanEc2InstanceWithFindings DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindings `pulumi:"scanEc2InstanceWithFindings"`
}

type DetectorDatasourcesMalwareProtectionArgs struct {
	// Configure whether [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html) is enabled as data source for EC2 instances with findings for the detector.
	// See Scan EC2 instance with findings below for more details.
	ScanEc2InstanceWithFindings DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsInput `pulumi:"scanEc2InstanceWithFindings"`
}

type DetectorDatasourcesMalwareProtectionInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionOutput() DetectorDatasourcesMalwareProtectionOutput
	ToDetectorDatasourcesMalwareProtectionOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionOutput
}

type DetectorDatasourcesMalwareProtectionOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionPtrOutput() DetectorDatasourcesMalwareProtectionPtrOutput
	ToDetectorDatasourcesMalwareProtectionPtrOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionPtrOutput
}

type DetectorDatasourcesMalwareProtectionPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindings struct {
	// Configure whether scanning EBS volumes is enabled as data source for the detector for instances with findings.
	// See EBS volumes below for more details.
	EbsVolumes DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumes `pulumi:"ebsVolumes"`
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsArgs struct {
	// Configure whether scanning EBS volumes is enabled as data source for the detector for instances with findings.
	// See EBS volumes below for more details.
	EbsVolumes DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesInput `pulumi:"ebsVolumes"`
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumes struct {
	// If true, enables [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html) as data source for the detector.
	// Defaults to `true`.
	Enable bool `pulumi:"enable"`
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesArgs struct {
	// If true, enables [Malware Protection](https://docs.aws.amazon.com/guardduty/latest/ug/malware-protection.html) as data source for the detector.
	// Defaults to `true`.
	Enable pulumi.BoolInput `pulumi:"enable"`
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutput() DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutput
	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutput
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutput() DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutput
	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutput
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsEbsVolumesPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutput() DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutput
	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutput
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutput() DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutput
	ToDetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutputWithContext(context.Context) DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutput
}

type DetectorDatasourcesMalwareProtectionScanEc2InstanceWithFindingsPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesPtrOutput() DetectorDatasourcesPtrOutput
	ToDetectorDatasourcesPtrOutputWithContext(context.Context) DetectorDatasourcesPtrOutput
}

type DetectorDatasourcesPtrOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesS3Logs struct {
	// If true, enables [S3 protection](https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html).
	// Defaults to `true`.
	Enable bool `pulumi:"enable"`
}

type DetectorDatasourcesS3LogsArgs struct {
	// If true, enables [S3 protection](https://docs.aws.amazon.com/guardduty/latest/ug/s3-protection.html).
	// Defaults to `true`.
	Enable pulumi.BoolInput `pulumi:"enable"`
}

type DetectorDatasourcesS3LogsInput interface {
	pulumi.Input

	ToDetectorDatasourcesS3LogsOutput() DetectorDatasourcesS3LogsOutput
	ToDetectorDatasourcesS3LogsOutputWithContext(context.Context) DetectorDatasourcesS3LogsOutput
}

type DetectorDatasourcesS3LogsOutput struct{ *pulumi.OutputState }

type DetectorDatasourcesS3LogsPtrInput interface {
	pulumi.Input

	ToDetectorDatasourcesS3LogsPtrOutput() DetectorDatasourcesS3LogsPtrOutput
	ToDetectorDatasourcesS3LogsPtrOutputWithContext(context.Context) DetectorDatasourcesS3LogsPtrOutput
}

type DetectorDatasourcesS3LogsPtrOutput struct{ *pulumi.OutputState }

type DetectorFeature struct {
	pulumi.CustomResourceState

	// Additional feature configuration block for features`EKS_RUNTIME_MONITORING` or `RUNTIME_MONITORING`. See below.
	AdditionalConfigurations DetectorFeatureAdditionalConfigurationArrayOutput `pulumi:"additionalConfigurations"`
	// Amazon GuardDuty detector ID.
	DetectorId pulumi.StringOutput `pulumi:"detectorId"`
	// The name of the detector feature. Valid values: `S3_DATA_EVENTS`, `EKS_AUDIT_LOGS`, `EBS_MALWARE_PROTECTION`, `RDS_LOGIN_EVENTS`, `EKS_RUNTIME_MONITORING`, `LAMBDA_NETWORK_LOGS`, `RUNTIME_MONITORING`. Only one of two features `EKS_RUNTIME_MONITORING` or `RUNTIME_MONITORING` can be added, adding both features will cause an error. Refer to the [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DetectorFeatureConfiguration.html) for the current list of supported values.
	Name pulumi.StringOutput `pulumi:"name"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// The status of the detector feature. Valid values: `ENABLED`, `DISABLED`.
	Status pulumi.StringOutput `pulumi:"status"`
}

type DetectorFeatureAdditionalConfiguration struct {
	// The name of the additional configuration for a feature. Valid values: `EKS_ADDON_MANAGEMENT`, `ECS_FARGATE_AGENT_MANAGEMENT`, `EC2_AGENT_MANAGEMENT`. Refer to the [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DetectorAdditionalConfiguration.html) for the current list of supported values.
	Name string `pulumi:"name"`
	// The status of the additional configuration. Valid values: `ENABLED`, `DISABLED`.
	Status string `pulumi:"status"`
}

type DetectorFeatureAdditionalConfigurationArgs struct {
	// The name of the additional configuration for a feature. Valid values: `EKS_ADDON_MANAGEMENT`, `ECS_FARGATE_AGENT_MANAGEMENT`, `EC2_AGENT_MANAGEMENT`. Refer to the [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DetectorAdditionalConfiguration.html) for the current list of supported values.
	Name pulumi.StringInput `pulumi:"name"`
	// The status of the additional configuration. Valid values: `ENABLED`, `DISABLED`.
	Status pulumi.StringInput `pulumi:"status"`
}

type DetectorFeatureAdditionalConfigurationArray []DetectorFeatureAdditionalConfigurationInput

type DetectorFeatureAdditionalConfigurationArrayInput interface {
	pulumi.Input

	ToDetectorFeatureAdditionalConfigurationArrayOutput() DetectorFeatureAdditionalConfigurationArrayOutput
	ToDetectorFeatureAdditionalConfigurationArrayOutputWithContext(context.Context) DetectorFeatureAdditionalConfigurationArrayOutput
}

type DetectorFeatureAdditionalConfigurationArrayOutput struct{ *pulumi.OutputState }

type DetectorFeatureAdditionalConfigurationInput interface {
	pulumi.Input

	ToDetectorFeatureAdditionalConfigurationOutput() DetectorFeatureAdditionalConfigurationOutput
	ToDetectorFeatureAdditionalConfigurationOutputWithContext(context.Context) DetectorFeatureAdditionalConfigurationOutput
}

type DetectorFeatureAdditionalConfigurationOutput struct{ *pulumi.OutputState }

type DetectorFeatureArgs struct {
	// Additional feature configuration block for features`EKS_RUNTIME_MONITORING` or `RUNTIME_MONITORING`. See below.
	AdditionalConfigurations DetectorFeatureAdditionalConfigurationArrayInput
	// Amazon GuardDuty detector ID.
	DetectorId pulumi.StringInput
	// The name of the detector feature. Valid values: `S3_DATA_EVENTS`, `EKS_AUDIT_LOGS`, `EBS_MALWARE_PROTECTION`, `RDS_LOGIN_EVENTS`, `EKS_RUNTIME_MONITORING`, `LAMBDA_NETWORK_LOGS`, `RUNTIME_MONITORING`. Only one of two features `EKS_RUNTIME_MONITORING` or `RUNTIME_MONITORING` can be added, adding both features will cause an error. Refer to the [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DetectorFeatureConfiguration.html) for the current list of supported values.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// The status of the detector feature. Valid values: `ENABLED`, `DISABLED`.
	Status pulumi.StringInput
}

type DetectorFeatureArray []DetectorFeatureInput

type DetectorFeatureArrayInput interface {
	pulumi.Input

	ToDetectorFeatureArrayOutput() DetectorFeatureArrayOutput
	ToDetectorFeatureArrayOutputWithContext(context.Context) DetectorFeatureArrayOutput
}

type DetectorFeatureArrayOutput struct{ *pulumi.OutputState }

type DetectorFeatureInput interface {
	pulumi.Input

	ToDetectorFeatureOutput() DetectorFeatureOutput
	ToDetectorFeatureOutputWithContext(ctx context.Context) DetectorFeatureOutput
}

type DetectorFeatureMap map[string]DetectorFeatureInput

type DetectorFeatureMapInput interface {
	pulumi.Input

	ToDetectorFeatureMapOutput() DetectorFeatureMapOutput
	ToDetectorFeatureMapOutputWithContext(context.Context) DetectorFeatureMapOutput
}

type DetectorFeatureMapOutput struct{ *pulumi.OutputState }

type DetectorFeatureOutput struct{ *pulumi.OutputState }

type DetectorFeatureState struct {
	// Additional feature configuration block for features`EKS_RUNTIME_MONITORING` or `RUNTIME_MONITORING`. See below.
	AdditionalConfigurations DetectorFeatureAdditionalConfigurationArrayInput
	// Amazon GuardDuty detector ID.
	DetectorId pulumi.StringPtrInput
	// The name of the detector feature. Valid values: `S3_DATA_EVENTS`, `EKS_AUDIT_LOGS`, `EBS_MALWARE_PROTECTION`, `RDS_LOGIN_EVENTS`, `EKS_RUNTIME_MONITORING`, `LAMBDA_NETWORK_LOGS`, `RUNTIME_MONITORING`. Only one of two features `EKS_RUNTIME_MONITORING` or `RUNTIME_MONITORING` can be added, adding both features will cause an error. Refer to the [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/APIReference/API_DetectorFeatureConfiguration.html) for the current list of supported values.
	Name pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// The status of the detector feature. Valid values: `ENABLED`, `DISABLED`.
	Status pulumi.StringPtrInput
}

type DetectorInput interface {
	pulumi.Input

	ToDetectorOutput() DetectorOutput
	ToDetectorOutputWithContext(ctx context.Context) DetectorOutput
}

type DetectorMap map[string]DetectorInput

type DetectorMapInput interface {
	pulumi.Input

	ToDetectorMapOutput() DetectorMapOutput
	ToDetectorMapOutputWithContext(context.Context) DetectorMapOutput
}

type DetectorMapOutput struct{ *pulumi.OutputState }

type DetectorOutput struct{ *pulumi.OutputState }

type DetectorState struct {
	// The AWS account ID of the GuardDuty detector
	AccountId pulumi.StringPtrInput
	// Amazon Resource Name (ARN) of the GuardDuty detector
	Arn pulumi.StringPtrInput
	// Describes which data sources will be enabled for the detector. See Data Sources below for more details. [Deprecated](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty-feature-object-api-changes-march2023.html) in favor of `guardduty.DetectorFeature` resources.
	//
	// Deprecated: datasources is deprecated. Use guardduty.DetectorFeature resources instead.
	Datasources DetectorDatasourcesPtrInput
	// Enable monitoring and feedback reporting. Setting to `false` is equivalent to "suspending" GuardDuty. Defaults to `true`.
	Enable pulumi.BoolPtrInput
	// Specifies the frequency of notifications sent for subsequent finding occurrences. If the detector is a GuardDuty member account, the value is determined by the GuardDuty primary account and cannot be modified, otherwise defaults to `SIX_HOURS`. For standalone and GuardDuty primary accounts, it must be configured in this provider to enable drift detection. Valid values for standalone and primary accounts: `FIFTEEN_MINUTES`, `ONE_HOUR`, `SIX_HOURS`. See [AWS Documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_findings_cloudwatch.html#guardduty_findings_cloudwatch_notification_frequency) for more information.
	FindingPublishingFrequency pulumi.StringPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

type Filter struct {
	pulumi.CustomResourceState

	// Specifies the action that is to be applied to the findings that match the filter. Can be one of `ARCHIVE` or `NOOP`.
	Action pulumi.StringOutput `pulumi:"action"`
	// The ARN of the GuardDuty filter.
	Arn pulumi.StringOutput `pulumi:"arn"`
	// Description of the filter.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// ID of a GuardDuty detector, attached to your account.
	DetectorId pulumi.StringOutput `pulumi:"detectorId"`
	// Represents the criteria to be used in the filter for querying findings. Contains one or more `criterion` blocks, documented below.
	FindingCriteria FilterFindingCriteriaOutput `pulumi:"findingCriteria"`
	// The name of your filter.
	Name pulumi.StringOutput `pulumi:"name"`
	// Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
	Rank pulumi.IntOutput `pulumi:"rank"`
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringOutput `pulumi:"region"`
	// The tags that you want to add to the Filter resource. A tag consists of a key and a value. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapOutput `pulumi:"tags"`
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapOutput `pulumi:"tagsAll"`
}

type FilterArgs struct {
	// Specifies the action that is to be applied to the findings that match the filter. Can be one of `ARCHIVE` or `NOOP`.
	Action pulumi.StringInput
	// Description of the filter.
	Description pulumi.StringPtrInput
	// ID of a GuardDuty detector, attached to your account.
	DetectorId pulumi.StringInput
	// Represents the criteria to be used in the filter for querying findings. Contains one or more `criterion` blocks, documented below.
	FindingCriteria FilterFindingCriteriaInput
	// The name of your filter.
	Name pulumi.StringPtrInput
	// Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
	Rank pulumi.IntInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// The tags that you want to add to the Filter resource. A tag consists of a key and a value. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
}

type FilterArray []FilterInput

type FilterArrayInput interface {
	pulumi.Input

	ToFilterArrayOutput() FilterArrayOutput
	ToFilterArrayOutputWithContext(context.Context) FilterArrayOutput
}

type FilterArrayOutput struct{ *pulumi.OutputState }

type FilterFindingCriteria struct {
	Criterions []FilterFindingCriteriaCriterion `pulumi:"criterions"`
}

type FilterFindingCriteriaArgs struct {
	Criterions FilterFindingCriteriaCriterionArrayInput `pulumi:"criterions"`
}

type FilterFindingCriteriaCriterion struct {
	// List of string values to be evaluated.
	Equals []string `pulumi:"equals"`
	// The name of the field to be evaluated. The full list of field names can be found in [AWS documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_filter-findings.html#filter_criteria).
	Field string `pulumi:"field"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	GreaterThan *string `pulumi:"greaterThan"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	GreaterThanOrEqual *string `pulumi:"greaterThanOrEqual"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	LessThan *string `pulumi:"lessThan"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	LessThanOrEqual *string `pulumi:"lessThanOrEqual"`
	// List of string values to be evaluated.
	NotEquals []string `pulumi:"notEquals"`
}

type FilterFindingCriteriaCriterionArgs struct {
	// List of string values to be evaluated.
	Equals pulumi.StringArrayInput `pulumi:"equals"`
	// The name of the field to be evaluated. The full list of field names can be found in [AWS documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_filter-findings.html#filter_criteria).
	Field pulumi.StringInput `pulumi:"field"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	GreaterThan pulumi.StringPtrInput `pulumi:"greaterThan"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	GreaterThanOrEqual pulumi.StringPtrInput `pulumi:"greaterThanOrEqual"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	LessThan pulumi.StringPtrInput `pulumi:"lessThan"`
	// A value to be evaluated. Accepts either an integer or a date in [RFC 3339 format](https://tools.ietf.org/html/rfc3339#section-5.8).
	LessThanOrEqual pulumi.StringPtrInput `pulumi:"lessThanOrEqual"`
	// List of string values to be evaluated.
	NotEquals pulumi.StringArrayInput `pulumi:"notEquals"`
}

type FilterFindingCriteriaCriterionArray []FilterFindingCriteriaCriterionInput

type FilterFindingCriteriaCriterionArrayInput interface {
	pulumi.Input

	ToFilterFindingCriteriaCriterionArrayOutput() FilterFindingCriteriaCriterionArrayOutput
	ToFilterFindingCriteriaCriterionArrayOutputWithContext(context.Context) FilterFindingCriteriaCriterionArrayOutput
}

type FilterFindingCriteriaCriterionArrayOutput struct{ *pulumi.OutputState }

type FilterFindingCriteriaCriterionInput interface {
	pulumi.Input

	ToFilterFindingCriteriaCriterionOutput() FilterFindingCriteriaCriterionOutput
	ToFilterFindingCriteriaCriterionOutputWithContext(context.Context) FilterFindingCriteriaCriterionOutput
}

type FilterFindingCriteriaCriterionOutput struct{ *pulumi.OutputState }

type FilterFindingCriteriaInput interface {
	pulumi.Input

	ToFilterFindingCriteriaOutput() FilterFindingCriteriaOutput
	ToFilterFindingCriteriaOutputWithContext(context.Context) FilterFindingCriteriaOutput
}

type FilterFindingCriteriaOutput struct{ *pulumi.OutputState }

type FilterFindingCriteriaPtrInput interface {
	pulumi.Input

	ToFilterFindingCriteriaPtrOutput() FilterFindingCriteriaPtrOutput
	ToFilterFindingCriteriaPtrOutputWithContext(context.Context) FilterFindingCriteriaPtrOutput
}

type FilterFindingCriteriaPtrOutput struct{ *pulumi.OutputState }

type FilterInput interface {
	pulumi.Input

	ToFilterOutput() FilterOutput
	ToFilterOutputWithContext(ctx context.Context) FilterOutput
}

type FilterMap map[string]FilterInput

type FilterMapInput interface {
	pulumi.Input

	ToFilterMapOutput() FilterMapOutput
	ToFilterMapOutputWithContext(context.Context) FilterMapOutput
}

type FilterMapOutput struct{ *pulumi.OutputState }

type FilterOutput struct{ *pulumi.OutputState }

type FilterState struct {
	// Specifies the action that is to be applied to the findings that match the filter. Can be one of `ARCHIVE` or `NOOP`.
	Action pulumi.StringPtrInput
	// The ARN of the GuardDuty filter.
	Arn pulumi.StringPtrInput
	// Description of the filter.
	Description pulumi.StringPtrInput
	// ID of a GuardDuty detector, attached to your account.
	DetectorId pulumi.StringPtrInput
	// Represents the criteria to be used in the filter for querying findings. Contains one or more `criterion` blocks, documented below.
	FindingCriteria FilterFindingCriteriaPtrInput
	// The name of your filter.
	Name pulumi.StringPtrInput
	// Specifies the position of the filter in the list of current filters. Also specifies the order in which this filter is applied to the findings.
	Rank pulumi.IntPtrInput
	// Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
	Region pulumi.StringPtrInput
	// The tags that you want to add to the Filter resource. A tag consists of a key and a value. .If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
	Tags pulumi.StringMapInput
	// A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
	TagsAll pulumi.StringMapInput
}

type GetDetectorFeatureAdditionalConfiguration struct {
	// The name of the detector feature.
	Name string `pulumi:"name"`
	// Current status of the detector.
	Status string `pulumi:"status"`
}

type GetDetectorFeatureAdditionalConfigurationArgs struct {
	// The name of the detector feature.
	Name pulumi.StringInput `pulumi:"name"`
	// Current status of the detector.
	Status pulumi.StringInput `pulumi:"status"`
}

type GetDetectorFeatureAdditionalConfigurationArray []GetDetectorFeatureAdditionalConfigurationInput

type GetDetectorFeatureAdditionalConfigurationArrayInput interface {
	pulumi.Input

	ToGetDetectorFeatureAdditionalConfigurationArrayOutput() GetDetectorFeatureAdditionalConfigurationArrayOutput
	ToGetDetectorFeatureAdditionalConfigurationArrayOutputWithContext(context.Context) GetDetectorFeatureAdditionalConfigurationArrayOutput
}

type GetDetectorFeatureAdditionalConfigurationArrayOutput struct{ *pulumi.OutputState }

type GetDetectorFeatureAdditionalConfigurationInput interface {
	pulumi.Input

	ToGetDetectorFeatureAdditionalConfigurationOutput() GetDetectorFeatureAdditionalConfigurationOutput
	ToGetDetectorFeatureAdditionalConfigurationOutputWithContext(context.Context) GetDetectorFeatureAdditionalConfigurationOutput
}

type GetDetectorFeatureAdditionalConfigurationOutput struct{ *pulumi.OutputState }

type GetDetectorFeatureType struct {
	// Additional feature configuration.
	AdditionalConfigurations []GetDetectorFeatureAdditionalConfiguration `pulumi:"additionalConfigurations"`
	// The name of the detector feature.
	Name string `pulumi:"name"`
	// Current status of the detector.
	Status string `pulumi:"status"`
}

type GetDetectorFeatureTypeArgs struct {
	// Additional feature configuration.
	AdditionalConfigurations GetDetectorFeatureAdditionalConfigurationArrayInput `pulumi:"additionalConfigurations"`
	// The name of the detector feature.
	Name pulumi.StringInput `pulumi:"name"`
	// Current status of the detector.
	Status pulumi.StringInput `pulumi:"status"`
}

type GetDetectorFeatureTypeArray []GetDetectorFeatureTypeInput

type GetDetectorFeatureTypeArrayInput interface {
	pulumi.Input

	ToGetDetectorFeatureTypeArrayOutput() GetDetectorFeatureTypeArrayOutput
	ToGetDetectorFeatureTypeArrayOutputWithContext(context.Context) GetDetectorFeatureTypeArrayOutput
}

type GetDetectorFeatureTypeArrayOutput struct{ *pulumi.OutputState }