AWS::GuardDuty::MalwareProtectionPlanCreates a new Malware Protection plan for the protected resource. When you create a Malware Protection plan, the [AWS service terms for GuardDuty Malware Protection](https://docs.aws.amazon.com/service-terms/#87._Amazon_GuardDuty) will apply.
import { CfnMalwareProtectionPlan } from 'aws-cdk-lib/aws-guardduty';Or use the module namespace:
import * as guardduty from 'aws-cdk-lib/aws-guardduty';
// guardduty.CfnMalwareProtectionPlanConfiguration passed to the constructor as CfnMalwareProtectionPlanProps.
protectedResourceRequiredIResolvable | CFNProtectedResourcePropertyInformation about the protected resource. Presently, `S3Bucket` is the only supported protected resource.
roleRequiredstringAmazon Resource Name (ARN) of the IAM role that includes the permissions required to scan and (optionally) add tags to the associated protected resource. To find the ARN of your IAM role, go to the IAM console, and select the role name for details.
actionsOptionalIResolvable | CFNActionsPropertySpecifies the action that is to be applied to the Malware Protection plan resource.
tagsOptionalTagItemProperty[]The tags to be added to the created Malware Protection plan resource. Each tag consists of a key and an optional value, both of which you need to specify.
This L1 construct maps directly to the following CloudFormation resource type.
Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.
Subscribe to Newsletteraws-guarddutyAWS::GuardDuty::MalwareProtectionPlan