Class GuardDutyFactory

java.lang.Object
software.amazon.jsii.JsiiObject
software.constructs.Construct
com.cloudforgeci.api.core.annotation.BaseFactory
com.cloudforgeci.api.observability.GuardDutyFactory
All Implemented Interfaces:
software.amazon.jsii.JsiiSerializable, software.constructs.IConstruct, software.constructs.IDependable
public class GuardDutyFactory extends BaseFactory
Factory for AWS GuardDuty threat detection and compliance automation.

SecurityProfileConfiguration#isGuardDutyEnabled() resolves whether GuardDuty is required -- the compliance matrix first (SOC2 CC7.2, PCI-DSS Req 11.4), then an explicit override, then "always on for PRODUCTION" as the final default. This factory only inherits that resolved value when guardDutyEnabled isn't set explicitly in deployment context.

Cost: $30-100/month based on CloudTrail, VPC Flow Logs, and DNS log volume.

  • Nested Class Summary

    Nested classes/interfaces inherited from class software.amazon.jsii.JsiiObject

    software.amazon.jsii.JsiiObject.InitializationMode

    Nested classes/interfaces inherited from interface software.constructs.IConstruct

    software.constructs.IConstruct.Jsii$Default, software.constructs.IConstruct.Jsii$Proxy

  • Field Summary

    Fields inherited from class BaseFactory

    cfc, config, ctx

  • Constructor Summary

    Constructors
    Constructor
    Description
    GuardDutyFactory(software.constructs.Construct scope, String id)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    void
    create()
    Resolves whether GuardDuty is required, then creates the detector (an account/Region singleton) and registers its AWS Config rule when it is.

    Methods inherited from class BaseFactory

    getDeploymentContext, getSecurityProfileConfiguration, getSystemContext

    Methods inherited from class software.constructs.Construct

    getNode, isConstruct, toString

    Methods inherited from class software.amazon.jsii.JsiiObject

    jsiiAsyncCall, jsiiAsyncCall, jsiiCall, jsiiCall, jsiiGet, jsiiGet, jsiiSet, jsiiStaticCall, jsiiStaticCall, jsiiStaticGet, jsiiStaticGet, jsiiStaticSet, jsiiStaticSet

    Methods inherited from class Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

    Methods inherited from interface software.amazon.jsii.JsiiSerializable

    $jsii$toJson

  • Constructor Details

    • GuardDutyFactory

      public GuardDutyFactory(software.constructs.Construct scope, String id)

  • Method Details

    • create

      public void create()
      Resolves whether GuardDuty is required, then creates the detector (an account/Region singleton) and registers its AWS Config rule when it is.
      Specified by:
      create in class BaseFactory