Package-level declarations

Types

Link copied to clipboard
data class AdditionalWorkspacesPropertiesArgs(val dataTypes: Output<List<Either<String, AdditionalWorkspaceDataType>>>? = null, val type: Output<Either<String, AdditionalWorkspaceType>>? = null, val workspace: Output<String>? = null) : ConvertibleToJava<AdditionalWorkspacesPropertiesArgs>

Properties of the additional workspaces.

Link copied to clipboard
data class AllowlistCustomAlertRuleArgs(val allowlistValues: Output<List<String>>, val isEnabled: Output<Boolean>, val ruleType: Output<String>) : ConvertibleToJava<AllowlistCustomAlertRuleArgs>

A custom alert rule that checks if a value (depends on the custom alert type) is allowed.

Link copied to clipboard
data class AssessmentStatusArgs(val cause: Output<String>? = null, val code: Output<Either<String, AssessmentStatusCode>>, val description: Output<String>? = null) : ConvertibleToJava<AssessmentStatusArgs>

The result of the assessment

Link copied to clipboard
data class AssignedComponentItemArgs(val key: Output<String>? = null) : ConvertibleToJava<AssignedComponentItemArgs>

describe the properties of a security assessment object reference (by key)

Link copied to clipboard
data class AssignedStandardItemArgs(val id: Output<String>? = null) : ConvertibleToJava<AssignedStandardItemArgs>

describe the properties of a of a security standard object reference

Link copied to clipboard
data class AssignmentPropertiesAdditionalDataArgs(val exemptionCategory: Output<String>? = null) : ConvertibleToJava<AssignmentPropertiesAdditionalDataArgs>

Additional data about the assignment

Link copied to clipboard
data class AutomationActionEventHubArgs(val actionType: Output<String>, val connectionString: Output<String>? = null, val eventHubResourceId: Output<String>? = null) : ConvertibleToJava<AutomationActionEventHubArgs>

The target Event Hub to which event data will be exported. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore

Link copied to clipboard
data class AutomationActionLogicAppArgs(val actionType: Output<String>, val logicAppResourceId: Output<String>? = null, val uri: Output<String>? = null) : ConvertibleToJava<AutomationActionLogicAppArgs>

The logic app action that should be triggered. To learn more about Microsoft Defender for Cloud's Workflow Automation capabilities, visit https://aka.ms/ASCWorkflowAutomationLearnMore

Link copied to clipboard
data class AutomationActionWorkspaceArgs(val actionType: Output<String>, val workspaceResourceId: Output<String>? = null) : ConvertibleToJava<AutomationActionWorkspaceArgs>

The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore

Link copied to clipboard
data class AutomationRuleSetArgs(val rules: Output<List<AutomationTriggeringRuleArgs>>? = null) : ConvertibleToJava<AutomationRuleSetArgs>

A rule set which evaluates all its rules upon an event interception. Only when all the included rules in the rule set will be evaluated as 'true', will the event trigger the defined actions.

Link copied to clipboard
data class AutomationScopeArgs(val description: Output<String>? = null, val scopePath: Output<String>? = null) : ConvertibleToJava<AutomationScopeArgs>

A single automation scope.

Link copied to clipboard
data class AutomationSourceArgs(val eventSource: Output<Either<String, EventSource>>? = null, val ruleSets: Output<List<AutomationRuleSetArgs>>? = null) : ConvertibleToJava<AutomationSourceArgs>

The source event types which evaluate the security automation set of rules. For example - security alerts and security assessments. To learn more about the supported security events data models schemas - please visit https://aka.ms/ASCAutomationSchemas.

Link copied to clipboard
data class AutomationTriggeringRuleArgs(val expectedValue: Output<String>? = null, val operator: Output<Either<String, Operator>>? = null, val propertyJPath: Output<String>? = null, val propertyType: Output<Either<String, PropertyType>>? = null) : ConvertibleToJava<AutomationTriggeringRuleArgs>

A rule which is evaluated upon event interception. The rule is configured by comparing a specific value from the event model to an expected value. This comparison is done by using one of the supported operators set.

data class AwAssumeRoleAuthenticationDetailsPropertiesArgs(val authenticationType: Output<String>, val awsAssumeRoleArn: Output<String>, val awsExternalId: Output<String>) : ConvertibleToJava<AwAssumeRoleAuthenticationDetailsPropertiesArgs>

AWS cloud account connector based assume role, the role enables delegating access to your AWS resources. The role is composed of role Amazon Resource Name (ARN) and external ID. For more details, refer to Creating a Role to Delegate Permissions to an IAM User (write only)

data class AwsCredsAuthenticationDetailsPropertiesArgs(val authenticationType: Output<String>, val awsAccessKeyId: Output<String>, val awsSecretAccessKey: Output<String>) : ConvertibleToJava<AwsCredsAuthenticationDetailsPropertiesArgs>

AWS cloud account connector based credentials, the credentials is composed of access key ID and secret key, for more details, refer to Creating an IAM User in Your AWS Account (write only)

Link copied to clipboard
data class AzureResourceDetailsArgs(val source: Output<String>) : ConvertibleToJava<AzureResourceDetailsArgs>

Details of the Azure resource that was assessed

Link copied to clipboard
data class CspmMonitorAwsOfferingArgs(val nativeCloudConnection: Output<CspmMonitorAwsOfferingNativeCloudConnectionArgs>? = null, val offeringType: Output<String>) : ConvertibleToJava<CspmMonitorAwsOfferingArgs>

The CSPM monitoring for AWS offering configurations

data class CspmMonitorAwsOfferingNativeCloudConnectionArgs(val cloudRoleArn: Output<String>? = null) : ConvertibleToJava<CspmMonitorAwsOfferingNativeCloudConnectionArgs>

The native cloud connection configuration

Link copied to clipboard
data class DefenderForContainersAwsOfferingArgs(val cloudWatchToKinesis: Output<DefenderForContainersAwsOfferingCloudWatchToKinesisArgs>? = null, val kinesisToS3: Output<DefenderForContainersAwsOfferingKinesisToS3Args>? = null, val kubernetesScubaReader: Output<DefenderForContainersAwsOfferingKubernetesScubaReaderArgs>? = null, val kubernetesService: Output<DefenderForContainersAwsOfferingKubernetesServiceArgs>? = null, val offeringType: Output<String>) : ConvertibleToJava<DefenderForContainersAwsOfferingArgs>

The Defender for Containers AWS offering configurations

data class DefenderForContainersAwsOfferingCloudWatchToKinesisArgs(val cloudRoleArn: Output<String>? = null) : ConvertibleToJava<DefenderForContainersAwsOfferingCloudWatchToKinesisArgs>

The cloudwatch to kinesis connection configuration

data class DefenderForContainersAwsOfferingKinesisToS3Args(val cloudRoleArn: Output<String>? = null) : ConvertibleToJava<DefenderForContainersAwsOfferingKinesisToS3Args>

The kinesis to s3 connection configuration

data class DefenderForContainersAwsOfferingKubernetesScubaReaderArgs(val cloudRoleArn: Output<String>? = null) : ConvertibleToJava<DefenderForContainersAwsOfferingKubernetesScubaReaderArgs>

The kubernetes to scuba connection configuration

data class DefenderForContainersAwsOfferingKubernetesServiceArgs(val cloudRoleArn: Output<String>? = null) : ConvertibleToJava<DefenderForContainersAwsOfferingKubernetesServiceArgs>

The kubernetes service connection configuration

data class DefenderForServersAwsOfferingArcAutoProvisioningArgs(val enabled: Output<Boolean>? = null, val servicePrincipalSecretMetadata: Output<DefenderForServersAwsOfferingServicePrincipalSecretMetadataArgs>? = null) : ConvertibleToJava<DefenderForServersAwsOfferingArcAutoProvisioningArgs>

The ARC autoprovisioning configuration

Link copied to clipboard
data class DefenderForServersAwsOfferingArgs(val arcAutoProvisioning: Output<DefenderForServersAwsOfferingArcAutoProvisioningArgs>? = null, val defenderForServers: Output<DefenderForServersAwsOfferingDefenderForServersArgs>? = null, val offeringType: Output<String>) : ConvertibleToJava<DefenderForServersAwsOfferingArgs>

The Defender for Servers AWS offering configurations

data class DefenderForServersAwsOfferingDefenderForServersArgs(val cloudRoleArn: Output<String>? = null) : ConvertibleToJava<DefenderForServersAwsOfferingDefenderForServersArgs>

The Defender for servers connection configuration

data class DefenderForServersAwsOfferingServicePrincipalSecretMetadataArgs(val expiryDate: Output<String>? = null, val parameterNameInStore: Output<String>? = null, val parameterStoreRegion: Output<String>? = null) : ConvertibleToJava<DefenderForServersAwsOfferingServicePrincipalSecretMetadataArgs>

Metadata of Service Principal secret for autoprovisioning

Link copied to clipboard
data class DenylistCustomAlertRuleArgs(val denylistValues: Output<List<String>>, val isEnabled: Output<Boolean>, val ruleType: Output<String>) : ConvertibleToJava<DenylistCustomAlertRuleArgs>

A custom alert rule that checks if a value (depends on the custom alert type) is denied.

Link copied to clipboard
data class GcpCredentialsDetailsPropertiesArgs(val authProviderX509CertUrl: Output<String>, val authUri: Output<String>, val authenticationType: Output<String>, val clientEmail: Output<String>, val clientId: Output<String>, val clientX509CertUrl: Output<String>, val organizationId: Output<String>, val privateKey: Output<String>, val privateKeyId: Output<String>, val projectId: Output<String>, val tokenUri: Output<String>, val type: Output<String>) : ConvertibleToJava<GcpCredentialsDetailsPropertiesArgs>

GCP cloud account connector based service to service credentials, the credentials are composed of the organization ID and a JSON API key (write only)

Link copied to clipboard
data class GetAdaptiveApplicationControlPlainArgs(val ascLocation: String, val groupName: String) : ConvertibleToJava<GetAdaptiveApplicationControlPlainArgs>
Link copied to clipboard
data class GetAdvancedThreatProtectionPlainArgs(val resourceId: String, val settingName: String) : ConvertibleToJava<GetAdvancedThreatProtectionPlainArgs>
Link copied to clipboard
data class GetAlertsSuppressionRulePlainArgs(val alertsSuppressionRuleName: String) : ConvertibleToJava<GetAlertsSuppressionRulePlainArgs>
Link copied to clipboard
data class GetApplicationPlainArgs(val applicationId: String) : ConvertibleToJava<GetApplicationPlainArgs>
data class GetAssessmentMetadataInSubscriptionPlainArgs(val assessmentMetadataName: String) : ConvertibleToJava<GetAssessmentMetadataInSubscriptionPlainArgs>
Link copied to clipboard
data class GetAssessmentPlainArgs(val assessmentName: String, val expand: String? = null, val resourceId: String) : ConvertibleToJava<GetAssessmentPlainArgs>
Link copied to clipboard
data class GetAssignmentPlainArgs(val assignmentId: String, val resourceGroupName: String) : ConvertibleToJava<GetAssignmentPlainArgs>
Link copied to clipboard
data class GetAutomationPlainArgs(val automationName: String, val resourceGroupName: String) : ConvertibleToJava<GetAutomationPlainArgs>
Link copied to clipboard
data class GetConnectorPlainArgs(val connectorName: String) : ConvertibleToJava<GetConnectorPlainArgs>
Link copied to clipboard
data class GetCustomAssessmentAutomationPlainArgs(val customAssessmentAutomationName: String, val resourceGroupName: String) : ConvertibleToJava<GetCustomAssessmentAutomationPlainArgs>
Link copied to clipboard
data class GetCustomEntityStoreAssignmentPlainArgs(val customEntityStoreAssignmentName: String, val resourceGroupName: String) : ConvertibleToJava<GetCustomEntityStoreAssignmentPlainArgs>
Link copied to clipboard
data class GetDeviceSecurityGroupPlainArgs(val deviceSecurityGroupName: String, val resourceId: String) : ConvertibleToJava<GetDeviceSecurityGroupPlainArgs>
Link copied to clipboard
data class GetIngestionSettingPlainArgs(val ingestionSettingName: String) : ConvertibleToJava<GetIngestionSettingPlainArgs>
Link copied to clipboard
data class GetIotSecuritySolutionPlainArgs(val resourceGroupName: String, val solutionName: String) : ConvertibleToJava<GetIotSecuritySolutionPlainArgs>
Link copied to clipboard
data class GetJitNetworkAccessPolicyPlainArgs(val ascLocation: String, val jitNetworkAccessPolicyName: String, val resourceGroupName: String) : ConvertibleToJava<GetJitNetworkAccessPolicyPlainArgs>
Link copied to clipboard
data class GetSecurityConnectorApplicationPlainArgs(val applicationId: String, val resourceGroupName: String, val securityConnectorName: String) : ConvertibleToJava<GetSecurityConnectorApplicationPlainArgs>
Link copied to clipboard
data class GetSecurityConnectorPlainArgs(val resourceGroupName: String, val securityConnectorName: String) : ConvertibleToJava<GetSecurityConnectorPlainArgs>
Link copied to clipboard
data class GetSecurityContactPlainArgs(val securityContactName: String) : ConvertibleToJava<GetSecurityContactPlainArgs>
data class GetServerVulnerabilityAssessmentPlainArgs(val resourceGroupName: String, val resourceName: String, val resourceNamespace: String, val resourceType: String, val serverVulnerabilityAssessment: String) : ConvertibleToJava<GetServerVulnerabilityAssessmentPlainArgs>
data class GetSqlVulnerabilityAssessmentBaselineRulePlainArgs(val resourceId: String, val ruleId: String, val workspaceId: String) : ConvertibleToJava<GetSqlVulnerabilityAssessmentBaselineRulePlainArgs>
Link copied to clipboard
data class GetStandardPlainArgs(val resourceGroupName: String, val standardId: String) : ConvertibleToJava<GetStandardPlainArgs>
Link copied to clipboard
data class GetWorkspaceSettingPlainArgs(val workspaceSettingName: String) : ConvertibleToJava<GetWorkspaceSettingPlainArgs>
Link copied to clipboard
data class HybridComputeSettingsPropertiesArgs(val autoProvision: Output<Either<String, AutoProvision>>, val proxyServer: Output<ProxyServerPropertiesArgs>? = null, val region: Output<String>? = null, val resourceGroupName: Output<String>? = null, val servicePrincipal: Output<ServicePrincipalPropertiesArgs>? = null) : ConvertibleToJava<HybridComputeSettingsPropertiesArgs>

Settings for hybrid compute management

Link copied to clipboard
data class InformationProtectionAwsOfferingArgs(val informationProtection: Output<InformationProtectionAwsOfferingInformationProtectionArgs>? = null, val offeringType: Output<String>) : ConvertibleToJava<InformationProtectionAwsOfferingArgs>

The information protection for AWS offering configurations

data class InformationProtectionAwsOfferingInformationProtectionArgs(val cloudRoleArn: Output<String>? = null) : ConvertibleToJava<InformationProtectionAwsOfferingInformationProtectionArgs>

The native cloud connection configuration

Link copied to clipboard
data class JitNetworkAccessPolicyVirtualMachineArgs(val id: Output<String>, val ports: Output<List<JitNetworkAccessPortRuleArgs>>, val publicIpAddress: Output<String>? = null) : ConvertibleToJava<JitNetworkAccessPolicyVirtualMachineArgs>
Link copied to clipboard
data class JitNetworkAccessPortRuleArgs(val allowedSourceAddressPrefix: Output<String>? = null, val allowedSourceAddressPrefixes: Output<List<String>>? = null, val maxRequestAccessDuration: Output<String>, val number: Output<Int>, val protocol: Output<Either<String, Protocol>>) : ConvertibleToJava<JitNetworkAccessPortRuleArgs>
Link copied to clipboard
data class JitNetworkAccessRequestArgs(val justification: Output<String>? = null, val requestor: Output<String>, val startTimeUtc: Output<String>, val virtualMachines: Output<List<JitNetworkAccessRequestVirtualMachineArgs>>) : ConvertibleToJava<JitNetworkAccessRequestArgs>
Link copied to clipboard
data class JitNetworkAccessRequestPortArgs(val allowedSourceAddressPrefix: Output<String>? = null, val allowedSourceAddressPrefixes: Output<List<String>>? = null, val endTimeUtc: Output<String>, val mappedPort: Output<Int>? = null, val number: Output<Int>, val status: Output<Either<String, Status>>, val statusReason: Output<Either<String, StatusReason>>) : ConvertibleToJava<JitNetworkAccessRequestPortArgs>
data class JitNetworkAccessRequestVirtualMachineArgs(val id: Output<String>, val ports: Output<List<JitNetworkAccessRequestPortArgs>>) : ConvertibleToJava<JitNetworkAccessRequestVirtualMachineArgs>
data class ListIngestionSettingConnectionStringsPlainArgs(val ingestionSettingName: String) : ConvertibleToJava<ListIngestionSettingConnectionStringsPlainArgs>
Link copied to clipboard
data class ListIngestionSettingTokensPlainArgs(val ingestionSettingName: String) : ConvertibleToJava<ListIngestionSettingTokensPlainArgs>
Link copied to clipboard
data class OnPremiseResourceDetailsArgs(val machineName: Output<String>, val source: Output<String>, val sourceComputerId: Output<String>, val vmuuid: Output<String>, val workspaceId: Output<String>) : ConvertibleToJava<OnPremiseResourceDetailsArgs>

Details of the On Premise resource that was assessed

Link copied to clipboard
data class OnPremiseSqlResourceDetailsArgs(val databaseName: Output<String>, val machineName: Output<String>, val serverName: Output<String>, val source: Output<String>, val sourceComputerId: Output<String>, val vmuuid: Output<String>, val workspaceId: Output<String>) : ConvertibleToJava<OnPremiseSqlResourceDetailsArgs>

Details of the On Premise Sql resource that was assessed

Link copied to clipboard
data class PathRecommendationArgs(val action: Output<String>? = null, val common: Output<Boolean>? = null, val configurationStatus: Output<String>? = null, val fileType: Output<String>? = null, val path: Output<String>? = null, val publisherInfo: Output<PublisherInfoArgs>? = null, val type: Output<String>? = null, val userSids: Output<List<String>>? = null, val usernames: Output<List<UserRecommendationArgs>>? = null) : ConvertibleToJava<PathRecommendationArgs>

Represents a path that is recommended to be allowed and its properties

Link copied to clipboard
data class ProtectionModeArgs(val exe: Output<String>? = null, val executable: Output<String>? = null, val msi: Output<String>? = null, val script: Output<String>? = null) : ConvertibleToJava<ProtectionModeArgs>

The protection mode of the collection/file types. Exe/Msi/Script are used for Windows, Executable is used for Linux.

Link copied to clipboard
Link copied to clipboard
data class ProxyServerPropertiesArgs(val ip: Output<String>? = null, val port: Output<String>? = null) : ConvertibleToJava<ProxyServerPropertiesArgs>

For a non-Azure machine that is not connected directly to the internet, specify a proxy server that the non-Azure machine can use.

Link copied to clipboard
data class PublisherInfoArgs(val binaryName: Output<String>? = null, val productName: Output<String>? = null, val publisherName: Output<String>? = null, val version: Output<String>? = null) : ConvertibleToJava<PublisherInfoArgs>

Represents the publisher information of a process/rule

Link copied to clipboard
data class RecommendationConfigurationPropertiesArgs(val recommendationType: Output<Either<String, RecommendationType>>, val status: Output<Either<String, RecommendationConfigStatus>>) : ConvertibleToJava<RecommendationConfigurationPropertiesArgs>

The type of IoT Security recommendation.

Link copied to clipboard
data class ScopeElementArgs(val field: Output<String>? = null) : ConvertibleToJava<ScopeElementArgs>

A more specific scope used to identify the alerts to suppress.

Link copied to clipboard
data class SecurityAssessmentMetadataPartnerDataArgs(val partnerName: Output<String>, val productName: Output<String>? = null, val secret: Output<String>) : ConvertibleToJava<SecurityAssessmentMetadataPartnerDataArgs>

Describes the partner that created the assessment

Link copied to clipboard
data class SecurityAssessmentMetadataPropertiesArgs(val assessmentType: Output<Either<String, AssessmentType>>, val categories: Output<List<Either<String, Categories>>>? = null, val description: Output<String>? = null, val displayName: Output<String>, val implementationEffort: Output<Either<String, ImplementationEffort>>? = null, val partnerData: Output<SecurityAssessmentMetadataPartnerDataArgs>? = null, val preview: Output<Boolean>? = null, val remediationDescription: Output<String>? = null, val severity: Output<Either<String, Severity>>, val threats: Output<List<Either<String, Threats>>>? = null, val userImpact: Output<Either<String, UserImpact>>? = null) : ConvertibleToJava<SecurityAssessmentMetadataPropertiesArgs>

Describes properties of an assessment metadata.

Link copied to clipboard
data class SecurityAssessmentPartnerDataArgs(val partnerName: Output<String>, val secret: Output<String>) : ConvertibleToJava<SecurityAssessmentPartnerDataArgs>

Data regarding 3rd party partner integration

data class SecurityConnectorPropertiesOrganizationalDataArgs(val excludedAccountIds: Output<List<String>>? = null, val organizationMembershipType: Output<Either<String, OrganizationMembershipType>>? = null, val parentHierarchyId: Output<String>? = null, val stacksetName: Output<String>? = null) : ConvertibleToJava<SecurityConnectorPropertiesOrganizationalDataArgs>

The multi cloud account's organizational data

data class SecurityContactPropertiesAlertNotificationsArgs(val minimalSeverity: Output<Either<String, MinimalSeverity>>? = null, val state: Output<Either<String, State>>? = null) : ConvertibleToJava<SecurityContactPropertiesAlertNotificationsArgs>

Defines whether to send email notifications about new security alerts

data class SecurityContactPropertiesNotificationsByRoleArgs(val roles: Output<List<Either<String, Roles>>>? = null, val state: Output<Either<String, State>>? = null) : ConvertibleToJava<SecurityContactPropertiesNotificationsByRoleArgs>

Defines whether to send email notifications from Microsoft Defender for Cloud to persons with specific RBAC roles on the subscription.

Link copied to clipboard
data class ServicePrincipalPropertiesArgs(val applicationId: Output<String>? = null, val secret: Output<String>? = null) : ConvertibleToJava<ServicePrincipalPropertiesArgs>

Details of the service principal.

Link copied to clipboard
data class StandardComponentPropertiesArgs(val key: Output<String>? = null) : ConvertibleToJava<StandardComponentPropertiesArgs>

Describes properties of an component as related to the standard

Link copied to clipboard
data class SuppressionAlertsScopeArgs(val allOf: Output<List<ScopeElementArgs>>) : ConvertibleToJava<SuppressionAlertsScopeArgs>
Link copied to clipboard
data class ThresholdCustomAlertRuleArgs(val isEnabled: Output<Boolean>, val maxThreshold: Output<Int>, val minThreshold: Output<Int>, val ruleType: Output<String>) : ConvertibleToJava<ThresholdCustomAlertRuleArgs>

A custom alert rule that checks if a value (depends on the custom alert type) is within the given range.

Link copied to clipboard
data class TimeWindowCustomAlertRuleArgs(val isEnabled: Output<Boolean>, val maxThreshold: Output<Int>, val minThreshold: Output<Int>, val ruleType: Output<String>, val timeWindowSize: Output<String>) : ConvertibleToJava<TimeWindowCustomAlertRuleArgs>

A custom alert rule that checks if the number of activities (depends on the custom alert type) in a time window is within the given range.

Link copied to clipboard
data class UserDefinedResourcesPropertiesArgs(val query: Output<String>, val querySubscriptions: Output<List<String>>) : ConvertibleToJava<UserDefinedResourcesPropertiesArgs>

Properties of the IoT Security solution's user defined resources.

Link copied to clipboard
data class UserRecommendationArgs(val recommendationAction: Output<String>? = null, val username: Output<String>? = null) : ConvertibleToJava<UserRecommendationArgs>

Represents a user that is recommended to be allowed for a certain rule

Link copied to clipboard
data class VmRecommendationArgs(val configurationStatus: Output<String>? = null, val enforcementSupport: Output<String>? = null, val recommendationAction: Output<String>? = null, val resourceId: Output<String>? = null) : ConvertibleToJava<VmRecommendationArgs>

Represents a machine that is part of a machine group