class_docstr: Test class to test ThreatStream functionalities
class_docstr_tok: ["Test","class","to","test","ThreatStream","functionalities"]
code: def _get_fake_intel(value, source):
      return {
          "value": value,
          "itype": "c2_domain",
          "source": source,
          "type": "domain",
          "expiration_ts": "2017-11-30T00:01:02.123Z",
          "key1": "value1",
          "key2": "value2",
      }
  
imports: from datetime import datetime
  import os
  import boto3
  from botocore.exceptions import ClientError
  from mock import Mock, patch
  from moto import mock_ssm
  from nose.tools import assert_equal, raises
  from streamalert.shared.config import load_config
  from streamalert.threat_intel_downloader.exceptions import ThreatStreamCredsError, ThreatStreamLambdaInvokeError, ThreatStreamRequestsError
  from streamalert.threat_intel_downloader.main import ThreatStream
  from tests.unit.streamalert.apps.test_helpers import MockLambdaClient
  from tests.unit.streamalert.shared.test_config import get_mock_lambda_context
  from tests.unit.streamalert.threat_intel_downloader.test_helpers import put_mock_params
label_desc: Use image node_id 2 for calling the TestThreatStream obj's underlying member method code with example usage: obj._get_fake_intel(value, source) and returns: dict