Method: organizations.locations.eventThreatDetectionCustomModules.create

Creates a resident Event Threat Detection custom module at the scope of the given Resource Manager parent, and also creates inherited custom modules for all descendants of the given parent. These modules are enabled by default.

HTTP request


The URL uses gRPC Transcoding syntax.

Path parameters



Required. Name of parent for the module. Its format is "organizations/{organization}/locations/{location}", "folders/{folder}/locations/{location}", or "projects/{project}/locations/{location}"

Query parameters



Optional. When set to true, only validations (including IAM checks) will done for the request (no module will be created). An OK response indicates the request is valid while an error response indicates the request is invalid. Note that a subsequent request to actually create the module could still fail because 1. the state could have changed (e.g. IAM permission lost) or 2. A failure occurred during creation of the module.

Request body

The request body contains an instance of EventThreatDetectionCustomModule.

Response body

If successful, the response body contains a newly created instance of EventThreatDetectionCustomModule.

Authorization scopes

Requires the following OAuth scope:


For more information, see the Authentication Overview.

IAM Permissions

Requires the following IAM permission on the parent resource:

  • securitycentermanagement.eventThreatDetectionCustomModules.create

For more information, see the IAM documentation.