---
title: "POST /detector/{detectorId}/ipset"
method: POST
path: "/detector/{detectorId}/ipset"
---

# POST /detector/{detectorId}/ipset

`POST /detector/{detectorId}/ipset`

Creates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of IP addresses that are trusted for secure communication with Amazon Web Services infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are included in IPSets. Only users from the administrator account can use this operation.

## Path parameters

- `detectorId` string, required

## Request body

- object
  - `name` string, required — <p>The user-friendly name to identify the IPSet.</p> <p> Allowed characters are alphanumeric, whitespace, dash (-), and underscores (_).</p>
  - `format` 'TXT' | 'STIX' | 'OTX_CSV' | 'ALIEN_VAULT' | 'PROOF_POINT' | 'FIRE_EYE', required — The format of the file that contains the IPSet.
  - `location` string, required — The URI of the file that contains the IPSet.
  - `activate` boolean, required — A Boolean value that indicates whether GuardDuty is to start using the uploaded IPSet.
  - `clientToken` string — The idempotency token for the create request.
  - `tags` object — The tags to be added to a new IP set resource.

## Response `200`

Success

- CreateIPSetResponse
  - `IpSetId` string, required — The ID of the IPSet resource.

## Other responses

- `480` — BadRequestException
- `481` — InternalServerErrorException

---

[API](https://skmtc.net/aws/apis/guardduty.md) · [All operations](https://skmtc.net/aws/apis/guardduty/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/guardduty/versions/d35ef49b25a3/schema)