aws-cdk-lib 2.146.0__py3-none-any.whl → 2.147.0__py3-none-any.whl

aws_cdk/aws_guardduty/__init__.py

@@ -49,6 +49,7 @@ from .. import (
     IInspectable as _IInspectable_c2943556,
     IResolvable as _IResolvable_da3f097b,
     ITaggable as _ITaggable_36806126,
+    ITaggableV2 as _ITaggableV2_4e6798f8,
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
@@ -2267,6 +2268,726 @@ class CfnIPSetProps:
         )
 
 
+@jsii.implements(_IInspectable_c2943556, _ITaggableV2_4e6798f8)
+class CfnMalwareProtectionPlan(
+    _CfnResource_9df397a6,
+    metaclass=jsii.JSIIMeta,
+    jsii_type="aws-cdk-lib.aws_guardduty.CfnMalwareProtectionPlan",
+):
+    '''Resource Type definition for AWS::GuardDuty::MalwareProtectionPlan.
+
+    :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html
+    :cloudformationResource: AWS::GuardDuty::MalwareProtectionPlan
+    :exampleMetadata: fixture=_generated
+
+    Example::
+
+        # The code below shows an example of how to instantiate this type.
+        # The values are placeholders you should change.
+        from aws_cdk import aws_guardduty as guardduty
+        
+        cfn_malware_protection_plan = guardduty.CfnMalwareProtectionPlan(self, "MyCfnMalwareProtectionPlan",
+            protected_resource=guardduty.CfnMalwareProtectionPlan.CFNProtectedResourceProperty(
+                s3_bucket=guardduty.CfnMalwareProtectionPlan.S3BucketProperty(
+                    bucket_name="bucketName",
+                    object_prefixes=["objectPrefixes"]
+                )
+            ),
+            role="role",
+        
+            # the properties below are optional
+            actions=guardduty.CfnMalwareProtectionPlan.CFNActionsProperty(
+                tagging=guardduty.CfnMalwareProtectionPlan.CFNTaggingProperty(
+                    status="status"
+                )
+            ),
+            tags=[guardduty.CfnMalwareProtectionPlan.TagItemProperty(
+                key="key",
+                value="value"
+            )]
+        )
+    '''
+
+    def __init__(
+        self,
+        scope: _constructs_77d1e7e8.Construct,
+        id: builtins.str,
+        *,
+        protected_resource: typing.Union[_IResolvable_da3f097b, typing.Union["CfnMalwareProtectionPlan.CFNProtectedResourceProperty", typing.Dict[builtins.str, typing.Any]]],
+        role: builtins.str,
+        actions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnMalwareProtectionPlan.CFNActionsProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union["CfnMalwareProtectionPlan.TagItemProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''
+        :param scope: Scope in which this resource is defined.
+        :param id: Construct identifier for this resource (unique in its scope).
+        :param protected_resource: 
+        :param role: IAM role that includes the permissions required to scan and add tags to the associated protected resource.
+        :param actions: 
+        :param tags: 
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__00ef930fce1d868abb00d70b721805e86a6ec1fb82c9df9f9974877a5ec00349)
+            check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
+            check_type(argname="argument id", value=id, expected_type=type_hints["id"])
+        props = CfnMalwareProtectionPlanProps(
+            protected_resource=protected_resource,
+            role=role,
+            actions=actions,
+            tags=tags,
+        )
+
+        jsii.create(self.__class__, self, [scope, id, props])
+
+    @jsii.member(jsii_name="inspect")
+    def inspect(self, inspector: _TreeInspector_488e0dd5) -> None:
+        '''Examines the CloudFormation resource and discloses attributes.
+
+        :param inspector: tree inspector to collect and process attributes.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__f305bc4bdb4472c75f91bda6264efa88f5fca08c3003eadba070f5026ad64459)
+            check_type(argname="argument inspector", value=inspector, expected_type=type_hints["inspector"])
+        return typing.cast(None, jsii.invoke(self, "inspect", [inspector]))
+
+    @jsii.member(jsii_name="renderProperties")
+    def _render_properties(
+        self,
+        props: typing.Mapping[builtins.str, typing.Any],
+    ) -> typing.Mapping[builtins.str, typing.Any]:
+        '''
+        :param props: -
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__3729873a5c0f10b8c53c86823e89a48570fefe0fa2cd1460c5970a77eecf6f5e)
+            check_type(argname="argument props", value=props, expected_type=type_hints["props"])
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.invoke(self, "renderProperties", [props]))
+
+    @jsii.python.classproperty
+    @jsii.member(jsii_name="CFN_RESOURCE_TYPE_NAME")
+    def CFN_RESOURCE_TYPE_NAME(cls) -> builtins.str:
+        '''The CloudFormation resource type name for this resource class.'''
+        return typing.cast(builtins.str, jsii.sget(cls, "CFN_RESOURCE_TYPE_NAME"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrArn")
+    def attr_arn(self) -> builtins.str:
+        '''Amazon Resource Name (ARN) of the protected resource.
+
+        :cloudformationAttribute: Arn
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrArn"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrCreatedAt")
+    def attr_created_at(self) -> builtins.str:
+        '''The timestamp when the Malware Protection plan resource was created.
+
+        :cloudformationAttribute: CreatedAt
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrCreatedAt"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrMalwareProtectionPlanId")
+    def attr_malware_protection_plan_id(self) -> builtins.str:
+        '''A unique identifier associated with Malware Protection plan resource.
+
+        :cloudformationAttribute: MalwareProtectionPlanId
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrMalwareProtectionPlanId"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrStatus")
+    def attr_status(self) -> builtins.str:
+        '''Malware Protection plan status.
+
+        :cloudformationAttribute: Status
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "attrStatus"))
+
+    @builtins.property
+    @jsii.member(jsii_name="attrStatusReasons")
+    def attr_status_reasons(self) -> _IResolvable_da3f097b:
+        '''Information about the issue code and message associated to the status of your Malware Protection plan.
+
+        :cloudformationAttribute: StatusReasons
+        '''
+        return typing.cast(_IResolvable_da3f097b, jsii.get(self, "attrStatusReasons"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cdkTagManager")
+    def cdk_tag_manager(self) -> _TagManager_0a598cb3:
+        '''Tag Manager which manages the tags for this resource.'''
+        return typing.cast(_TagManager_0a598cb3, jsii.get(self, "cdkTagManager"))
+
+    @builtins.property
+    @jsii.member(jsii_name="cfnProperties")
+    def _cfn_properties(self) -> typing.Mapping[builtins.str, typing.Any]:
+        return typing.cast(typing.Mapping[builtins.str, typing.Any], jsii.get(self, "cfnProperties"))
+
+    @builtins.property
+    @jsii.member(jsii_name="protectedResource")
+    def protected_resource(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.CFNProtectedResourceProperty"]:
+        return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.CFNProtectedResourceProperty"], jsii.get(self, "protectedResource"))
+
+    @protected_resource.setter
+    def protected_resource(
+        self,
+        value: typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.CFNProtectedResourceProperty"],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__a380560cce55c21ddf0570542e599e109af7dd74da03656308d8f1082ea92bc6)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "protectedResource", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="role")
+    def role(self) -> builtins.str:
+        '''IAM role that includes the permissions required to scan and add tags to the associated protected resource.'''
+        return typing.cast(builtins.str, jsii.get(self, "role"))
+
+    @role.setter
+    def role(self, value: builtins.str) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__9e1689d4159388f617156dc7b47e3c0ac9eeebcf7d4134a0ad0467e91d311f60)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "role", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="actions")
+    def actions(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.CFNActionsProperty"]]:
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.CFNActionsProperty"]], jsii.get(self, "actions"))
+
+    @actions.setter
+    def actions(
+        self,
+        value: typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.CFNActionsProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__87536f4fee47b32d2726bd495eeb160305899f097f41d5953ef86e973512fe4b)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "actions", value)
+
+    @builtins.property
+    @jsii.member(jsii_name="tags")
+    def tags(
+        self,
+    ) -> typing.Optional[typing.List["CfnMalwareProtectionPlan.TagItemProperty"]]:
+        return typing.cast(typing.Optional[typing.List["CfnMalwareProtectionPlan.TagItemProperty"]], jsii.get(self, "tags"))
+
+    @tags.setter
+    def tags(
+        self,
+        value: typing.Optional[typing.List["CfnMalwareProtectionPlan.TagItemProperty"]],
+    ) -> None:
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__5c90cd61fbec14272b0c810d0552a8021fd2371b9b4b27d087d461ef7a265fe7)
+            check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+        jsii.set(self, "tags", value)
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_guardduty.CfnMalwareProtectionPlan.CFNActionsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"tagging": "tagging"},
+    )
+    class CFNActionsProperty:
+        def __init__(
+            self,
+            *,
+            tagging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union["CfnMalwareProtectionPlan.CFNTaggingProperty", typing.Dict[builtins.str, typing.Any]]]] = None,
+        ) -> None:
+            '''
+            :param tagging: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnactions.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_guardduty as guardduty
+                
+                c_fNActions_property = guardduty.CfnMalwareProtectionPlan.CFNActionsProperty(
+                    tagging=guardduty.CfnMalwareProtectionPlan.CFNTaggingProperty(
+                        status="status"
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__ab1851950cd03a36dd43bad75c8285e8f44efc5d2997fa39dee35d95e43eff22)
+                check_type(argname="argument tagging", value=tagging, expected_type=type_hints["tagging"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if tagging is not None:
+                self._values["tagging"] = tagging
+
+        @builtins.property
+        def tagging(
+            self,
+        ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.CFNTaggingProperty"]]:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnactions.html#cfn-guardduty-malwareprotectionplan-cfnactions-tagging
+            '''
+            result = self._values.get("tagging")
+            return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.CFNTaggingProperty"]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CFNActionsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_guardduty.CfnMalwareProtectionPlan.CFNProtectedResourceProperty",
+        jsii_struct_bases=[],
+        name_mapping={"s3_bucket": "s3Bucket"},
+    )
+    class CFNProtectedResourceProperty:
+        def __init__(
+            self,
+            *,
+            s3_bucket: typing.Union[_IResolvable_da3f097b, typing.Union["CfnMalwareProtectionPlan.S3BucketProperty", typing.Dict[builtins.str, typing.Any]]],
+        ) -> None:
+            '''
+            :param s3_bucket: Information about the protected S3 bucket resource.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnprotectedresource.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_guardduty as guardduty
+                
+                c_fNProtected_resource_property = guardduty.CfnMalwareProtectionPlan.CFNProtectedResourceProperty(
+                    s3_bucket=guardduty.CfnMalwareProtectionPlan.S3BucketProperty(
+                        bucket_name="bucketName",
+                        object_prefixes=["objectPrefixes"]
+                    )
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__628bb2098aad45bbd3dc6562b2fef1b446c6209c8204251fa8278f0a3578da62)
+                check_type(argname="argument s3_bucket", value=s3_bucket, expected_type=type_hints["s3_bucket"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "s3_bucket": s3_bucket,
+            }
+
+        @builtins.property
+        def s3_bucket(
+            self,
+        ) -> typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.S3BucketProperty"]:
+            '''Information about the protected S3 bucket resource.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnprotectedresource.html#cfn-guardduty-malwareprotectionplan-cfnprotectedresource-s3bucket
+            '''
+            result = self._values.get("s3_bucket")
+            assert result is not None, "Required property 's3_bucket' is missing"
+            return typing.cast(typing.Union[_IResolvable_da3f097b, "CfnMalwareProtectionPlan.S3BucketProperty"], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CFNProtectedResourceProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_guardduty.CfnMalwareProtectionPlan.CFNStatusReasonsProperty",
+        jsii_struct_bases=[],
+        name_mapping={"code": "code", "message": "message"},
+    )
+    class CFNStatusReasonsProperty:
+        def __init__(
+            self,
+            *,
+            code: typing.Optional[builtins.str] = None,
+            message: typing.Optional[builtins.str] = None,
+        ) -> None:
+            '''
+            :param code: Issue code.
+            :param message: Issue message that specifies the reason.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnstatusreasons.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_guardduty as guardduty
+                
+                c_fNStatus_reasons_property = guardduty.CfnMalwareProtectionPlan.CFNStatusReasonsProperty(
+                    code="code",
+                    message="message"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__3ec77ecd0e9062aee3249224fcb9027f42ecf7302ac504b68356fe2f59b900da)
+                check_type(argname="argument code", value=code, expected_type=type_hints["code"])
+                check_type(argname="argument message", value=message, expected_type=type_hints["message"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if code is not None:
+                self._values["code"] = code
+            if message is not None:
+                self._values["message"] = message
+
+        @builtins.property
+        def code(self) -> typing.Optional[builtins.str]:
+            '''Issue code.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnstatusreasons.html#cfn-guardduty-malwareprotectionplan-cfnstatusreasons-code
+            '''
+            result = self._values.get("code")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def message(self) -> typing.Optional[builtins.str]:
+            '''Issue message that specifies the reason.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfnstatusreasons.html#cfn-guardduty-malwareprotectionplan-cfnstatusreasons-message
+            '''
+            result = self._values.get("message")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CFNStatusReasonsProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_guardduty.CfnMalwareProtectionPlan.CFNTaggingProperty",
+        jsii_struct_bases=[],
+        name_mapping={"status": "status"},
+    )
+    class CFNTaggingProperty:
+        def __init__(self, *, status: typing.Optional[builtins.str] = None) -> None:
+            '''
+            :param status: Indicates whether or not the tags will added.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfntagging.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_guardduty as guardduty
+                
+                c_fNTagging_property = guardduty.CfnMalwareProtectionPlan.CFNTaggingProperty(
+                    status="status"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__4c35ec5bbb51f8391a385436dad3b9dc0b8432a67385f66a397a691b630ac0ac)
+                check_type(argname="argument status", value=status, expected_type=type_hints["status"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if status is not None:
+                self._values["status"] = status
+
+        @builtins.property
+        def status(self) -> typing.Optional[builtins.str]:
+            '''Indicates whether or not the tags will added.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-cfntagging.html#cfn-guardduty-malwareprotectionplan-cfntagging-status
+            '''
+            result = self._values.get("status")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "CFNTaggingProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_guardduty.CfnMalwareProtectionPlan.S3BucketProperty",
+        jsii_struct_bases=[],
+        name_mapping={
+            "bucket_name": "bucketName",
+            "object_prefixes": "objectPrefixes",
+        },
+    )
+    class S3BucketProperty:
+        def __init__(
+            self,
+            *,
+            bucket_name: typing.Optional[builtins.str] = None,
+            object_prefixes: typing.Optional[typing.Sequence[builtins.str]] = None,
+        ) -> None:
+            '''Information about the protected S3 bucket resource.
+
+            :param bucket_name: Name of the S3 bucket.
+            :param object_prefixes: Information about the specified object prefixes. The S3 object will be scanned only if it belongs to any of the specified object prefixes.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-s3bucket.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_guardduty as guardduty
+                
+                s3_bucket_property = guardduty.CfnMalwareProtectionPlan.S3BucketProperty(
+                    bucket_name="bucketName",
+                    object_prefixes=["objectPrefixes"]
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__a4a8e70e5aca51f1d1d53ca3b54ead0d17508c006f3f219e0bf90cccb08502d3)
+                check_type(argname="argument bucket_name", value=bucket_name, expected_type=type_hints["bucket_name"])
+                check_type(argname="argument object_prefixes", value=object_prefixes, expected_type=type_hints["object_prefixes"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {}
+            if bucket_name is not None:
+                self._values["bucket_name"] = bucket_name
+            if object_prefixes is not None:
+                self._values["object_prefixes"] = object_prefixes
+
+        @builtins.property
+        def bucket_name(self) -> typing.Optional[builtins.str]:
+            '''Name of the S3 bucket.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-s3bucket.html#cfn-guardduty-malwareprotectionplan-s3bucket-bucketname
+            '''
+            result = self._values.get("bucket_name")
+            return typing.cast(typing.Optional[builtins.str], result)
+
+        @builtins.property
+        def object_prefixes(self) -> typing.Optional[typing.List[builtins.str]]:
+            '''Information about the specified object prefixes.
+
+            The S3 object will be scanned only if it belongs to any of the specified object prefixes.
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-s3bucket.html#cfn-guardduty-malwareprotectionplan-s3bucket-objectprefixes
+            '''
+            result = self._values.get("object_prefixes")
+            return typing.cast(typing.Optional[typing.List[builtins.str]], result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "S3BucketProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+    @jsii.data_type(
+        jsii_type="aws-cdk-lib.aws_guardduty.CfnMalwareProtectionPlan.TagItemProperty",
+        jsii_struct_bases=[],
+        name_mapping={"key": "key", "value": "value"},
+    )
+    class TagItemProperty:
+        def __init__(self, *, key: builtins.str, value: builtins.str) -> None:
+            '''
+            :param key: 
+            :param value: 
+
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-tagitem.html
+            :exampleMetadata: fixture=_generated
+
+            Example::
+
+                # The code below shows an example of how to instantiate this type.
+                # The values are placeholders you should change.
+                from aws_cdk import aws_guardduty as guardduty
+                
+                tag_item_property = guardduty.CfnMalwareProtectionPlan.TagItemProperty(
+                    key="key",
+                    value="value"
+                )
+            '''
+            if __debug__:
+                type_hints = typing.get_type_hints(_typecheckingstub__25ebd716f82a226adc91a692f31af8c4a126ad6c6c4f7cdb2b00143232b72d2f)
+                check_type(argname="argument key", value=key, expected_type=type_hints["key"])
+                check_type(argname="argument value", value=value, expected_type=type_hints["value"])
+            self._values: typing.Dict[builtins.str, typing.Any] = {
+                "key": key,
+                "value": value,
+            }
+
+        @builtins.property
+        def key(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-tagitem.html#cfn-guardduty-malwareprotectionplan-tagitem-key
+            '''
+            result = self._values.get("key")
+            assert result is not None, "Required property 'key' is missing"
+            return typing.cast(builtins.str, result)
+
+        @builtins.property
+        def value(self) -> builtins.str:
+            '''
+            :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-guardduty-malwareprotectionplan-tagitem.html#cfn-guardduty-malwareprotectionplan-tagitem-value
+            '''
+            result = self._values.get("value")
+            assert result is not None, "Required property 'value' is missing"
+            return typing.cast(builtins.str, result)
+
+        def __eq__(self, rhs: typing.Any) -> builtins.bool:
+            return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+        def __ne__(self, rhs: typing.Any) -> builtins.bool:
+            return not (rhs == self)
+
+        def __repr__(self) -> str:
+            return "TagItemProperty(%s)" % ", ".join(
+                k + "=" + repr(v) for k, v in self._values.items()
+            )
+
+
+@jsii.data_type(
+    jsii_type="aws-cdk-lib.aws_guardduty.CfnMalwareProtectionPlanProps",
+    jsii_struct_bases=[],
+    name_mapping={
+        "protected_resource": "protectedResource",
+        "role": "role",
+        "actions": "actions",
+        "tags": "tags",
+    },
+)
+class CfnMalwareProtectionPlanProps:
+    def __init__(
+        self,
+        *,
+        protected_resource: typing.Union[_IResolvable_da3f097b, typing.Union[CfnMalwareProtectionPlan.CFNProtectedResourceProperty, typing.Dict[builtins.str, typing.Any]]],
+        role: builtins.str,
+        actions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMalwareProtectionPlan.CFNActionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+        tags: typing.Optional[typing.Sequence[typing.Union[CfnMalwareProtectionPlan.TagItemProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    ) -> None:
+        '''Properties for defining a ``CfnMalwareProtectionPlan``.
+
+        :param protected_resource: 
+        :param role: IAM role that includes the permissions required to scan and add tags to the associated protected resource.
+        :param actions: 
+        :param tags: 
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html
+        :exampleMetadata: fixture=_generated
+
+        Example::
+
+            # The code below shows an example of how to instantiate this type.
+            # The values are placeholders you should change.
+            from aws_cdk import aws_guardduty as guardduty
+            
+            cfn_malware_protection_plan_props = guardduty.CfnMalwareProtectionPlanProps(
+                protected_resource=guardduty.CfnMalwareProtectionPlan.CFNProtectedResourceProperty(
+                    s3_bucket=guardduty.CfnMalwareProtectionPlan.S3BucketProperty(
+                        bucket_name="bucketName",
+                        object_prefixes=["objectPrefixes"]
+                    )
+                ),
+                role="role",
+            
+                # the properties below are optional
+                actions=guardduty.CfnMalwareProtectionPlan.CFNActionsProperty(
+                    tagging=guardduty.CfnMalwareProtectionPlan.CFNTaggingProperty(
+                        status="status"
+                    )
+                ),
+                tags=[guardduty.CfnMalwareProtectionPlan.TagItemProperty(
+                    key="key",
+                    value="value"
+                )]
+            )
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__82e43dbe3124ce5f5e04970117a0d20d3ccdfd803e79608a9dc049755c802f5c)
+            check_type(argname="argument protected_resource", value=protected_resource, expected_type=type_hints["protected_resource"])
+            check_type(argname="argument role", value=role, expected_type=type_hints["role"])
+            check_type(argname="argument actions", value=actions, expected_type=type_hints["actions"])
+            check_type(argname="argument tags", value=tags, expected_type=type_hints["tags"])
+        self._values: typing.Dict[builtins.str, typing.Any] = {
+            "protected_resource": protected_resource,
+            "role": role,
+        }
+        if actions is not None:
+            self._values["actions"] = actions
+        if tags is not None:
+            self._values["tags"] = tags
+
+    @builtins.property
+    def protected_resource(
+        self,
+    ) -> typing.Union[_IResolvable_da3f097b, CfnMalwareProtectionPlan.CFNProtectedResourceProperty]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html#cfn-guardduty-malwareprotectionplan-protectedresource
+        '''
+        result = self._values.get("protected_resource")
+        assert result is not None, "Required property 'protected_resource' is missing"
+        return typing.cast(typing.Union[_IResolvable_da3f097b, CfnMalwareProtectionPlan.CFNProtectedResourceProperty], result)
+
+    @builtins.property
+    def role(self) -> builtins.str:
+        '''IAM role that includes the permissions required to scan and add tags to the associated protected resource.
+
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html#cfn-guardduty-malwareprotectionplan-role
+        '''
+        result = self._values.get("role")
+        assert result is not None, "Required property 'role' is missing"
+        return typing.cast(builtins.str, result)
+
+    @builtins.property
+    def actions(
+        self,
+    ) -> typing.Optional[typing.Union[_IResolvable_da3f097b, CfnMalwareProtectionPlan.CFNActionsProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html#cfn-guardduty-malwareprotectionplan-actions
+        '''
+        result = self._values.get("actions")
+        return typing.cast(typing.Optional[typing.Union[_IResolvable_da3f097b, CfnMalwareProtectionPlan.CFNActionsProperty]], result)
+
+    @builtins.property
+    def tags(
+        self,
+    ) -> typing.Optional[typing.List[CfnMalwareProtectionPlan.TagItemProperty]]:
+        '''
+        :see: http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-guardduty-malwareprotectionplan.html#cfn-guardduty-malwareprotectionplan-tags
+        '''
+        result = self._values.get("tags")
+        return typing.cast(typing.Optional[typing.List[CfnMalwareProtectionPlan.TagItemProperty]], result)
+
+    def __eq__(self, rhs: typing.Any) -> builtins.bool:
+        return isinstance(rhs, self.__class__) and rhs._values == self._values
+
+    def __ne__(self, rhs: typing.Any) -> builtins.bool:
+        return not (rhs == self)
+
+    def __repr__(self) -> str:
+        return "CfnMalwareProtectionPlanProps(%s)" % ", ".join(
+            k + "=" + repr(v) for k, v in self._values.items()
+        )
+
+
 @jsii.implements(_IInspectable_c2943556)
 class CfnMaster(
     _CfnResource_9df397a6,
@@ -3187,6 +3908,8 @@ __all__ = [
     "CfnFilterProps",
     "CfnIPSet",
     "CfnIPSetProps",
+    "CfnMalwareProtectionPlan",
+    "CfnMalwareProtectionPlanProps",
     "CfnMaster",
     "CfnMasterProps",
     "CfnMember",
@@ -3514,6 +4237,109 @@ def _typecheckingstub__f47aa340c89b95bf1878c9cb7463920b568c23940ad283e6f2c2bb481
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__00ef930fce1d868abb00d70b721805e86a6ec1fb82c9df9f9974877a5ec00349(
+    scope: _constructs_77d1e7e8.Construct,
+    id: builtins.str,
+    *,
+    protected_resource: typing.Union[_IResolvable_da3f097b, typing.Union[CfnMalwareProtectionPlan.CFNProtectedResourceProperty, typing.Dict[builtins.str, typing.Any]]],
+    role: builtins.str,
+    actions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMalwareProtectionPlan.CFNActionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[CfnMalwareProtectionPlan.TagItemProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__f305bc4bdb4472c75f91bda6264efa88f5fca08c3003eadba070f5026ad64459(
+    inspector: _TreeInspector_488e0dd5,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3729873a5c0f10b8c53c86823e89a48570fefe0fa2cd1460c5970a77eecf6f5e(
+    props: typing.Mapping[builtins.str, typing.Any],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a380560cce55c21ddf0570542e599e109af7dd74da03656308d8f1082ea92bc6(
+    value: typing.Union[_IResolvable_da3f097b, CfnMalwareProtectionPlan.CFNProtectedResourceProperty],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__9e1689d4159388f617156dc7b47e3c0ac9eeebcf7d4134a0ad0467e91d311f60(
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__87536f4fee47b32d2726bd495eeb160305899f097f41d5953ef86e973512fe4b(
+    value: typing.Optional[typing.Union[_IResolvable_da3f097b, CfnMalwareProtectionPlan.CFNActionsProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__5c90cd61fbec14272b0c810d0552a8021fd2371b9b4b27d087d461ef7a265fe7(
+    value: typing.Optional[typing.List[CfnMalwareProtectionPlan.TagItemProperty]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__ab1851950cd03a36dd43bad75c8285e8f44efc5d2997fa39dee35d95e43eff22(
+    *,
+    tagging: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMalwareProtectionPlan.CFNTaggingProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__628bb2098aad45bbd3dc6562b2fef1b446c6209c8204251fa8278f0a3578da62(
+    *,
+    s3_bucket: typing.Union[_IResolvable_da3f097b, typing.Union[CfnMalwareProtectionPlan.S3BucketProperty, typing.Dict[builtins.str, typing.Any]]],
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__3ec77ecd0e9062aee3249224fcb9027f42ecf7302ac504b68356fe2f59b900da(
+    *,
+    code: typing.Optional[builtins.str] = None,
+    message: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__4c35ec5bbb51f8391a385436dad3b9dc0b8432a67385f66a397a691b630ac0ac(
+    *,
+    status: typing.Optional[builtins.str] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__a4a8e70e5aca51f1d1d53ca3b54ead0d17508c006f3f219e0bf90cccb08502d3(
+    *,
+    bucket_name: typing.Optional[builtins.str] = None,
+    object_prefixes: typing.Optional[typing.Sequence[builtins.str]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__25ebd716f82a226adc91a692f31af8c4a126ad6c6c4f7cdb2b00143232b72d2f(
+    *,
+    key: builtins.str,
+    value: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__82e43dbe3124ce5f5e04970117a0d20d3ccdfd803e79608a9dc049755c802f5c(
+    *,
+    protected_resource: typing.Union[_IResolvable_da3f097b, typing.Union[CfnMalwareProtectionPlan.CFNProtectedResourceProperty, typing.Dict[builtins.str, typing.Any]]],
+    role: builtins.str,
+    actions: typing.Optional[typing.Union[_IResolvable_da3f097b, typing.Union[CfnMalwareProtectionPlan.CFNActionsProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+    tags: typing.Optional[typing.Sequence[typing.Union[CfnMalwareProtectionPlan.TagItemProperty, typing.Dict[builtins.str, typing.Any]]]] = None,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__d5d03095d03ec71c014c1cfc8e78531e9220fec576d321a24de280815b0d72c0(
     scope: _constructs_77d1e7e8.Construct,
     id: builtins.str,