class_docstr: Load threat intelligence data from DynamoDB and perform IOC detection
class_docstr_tok: ["Load","threat","intelligence","data","from","DynamoDB","and","perform","IOC","detection"]
code: def __init__(
      self, table, enabled_clusters, ioc_types_map, excluded_iocs=None
  ):
      self._table = table
      self._enabled_clusters = enabled_clusters
      self._ioc_config = ioc_types_map
      self._excluded_iocs = self._setup_excluded_iocs(excluded_iocs)
  
      region = (
          env.get("AWS_REGION")
          or env.get("AWS_DEFAULT_REGION")
          or "us-east-1"
      )
      ThreatIntel._client = ThreatIntel._client or boto3.client(
          "dynamodb", region_name=region
      )
  
imports: from collections import defaultdict
  from os import environ
  import backoff
  import boto3
  from boto3.dynamodb.types import TypeDeserializer
  from botocore.exceptions import ClientError, ParamValidationError
  from netaddr import IPNetwork
  from streamalert.shared.backoff_handlers import backoff_handler, success_handler, giveup_handler
  from streamalert.shared.logger import get_logger
  from streamalert.shared.normalize import Normalizer
  from streamalert.shared.utils import in_network, valid_ip
label_desc: Use image node_id 1 to create a new ThreatIntel object  with example: obj = ThreatIntel(table, enabled_clusters, ioc_types_map, excluded_iocs)