Package-level declarations
Types
Properties of the additional workspaces.
Builder for AdditionalWorkspacesPropertiesArgs.
A custom alert rule that checks if a value (depends on the custom alert type) is allowed.
Builder for AllowlistCustomAlertRuleArgs.
The result of the assessment
Builder for AssessmentStatusArgs.
describe the properties of a security assessment object reference (by key)
Builder for AssignedComponentItemArgs.
describe the properties of a of a security standard object reference
Builder for AssignedStandardItemArgs.
Additional data about the assignment
The target Event Hub to which event data will be exported. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore
Builder for AutomationActionEventHubArgs.
The logic app action that should be triggered. To learn more about Microsoft Defender for Cloud's Workflow Automation capabilities, visit https://aka.ms/ASCWorkflowAutomationLearnMore
Builder for AutomationActionLogicAppArgs.
The Log Analytics Workspace to which event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore
Builder for AutomationActionWorkspaceArgs.
A rule set which evaluates all its rules upon an event interception. Only when all the included rules in the rule set will be evaluated as 'true', will the event trigger the defined actions.
Builder for AutomationRuleSetArgs.
A single automation scope.
Builder for AutomationScopeArgs.
The source event types which evaluate the security automation set of rules. For example - security alerts and security assessments. To learn more about the supported security events data models schemas - please visit https://aka.ms/ASCAutomationSchemas.
Builder for AutomationSourceArgs.
A rule which is evaluated upon event interception. The rule is configured by comparing a specific value from the event model to an expected value. This comparison is done by using one of the supported operators set.
Builder for AutomationTriggeringRuleArgs.
AWS cloud account connector based assume role, the role enables delegating access to your AWS resources. The role is composed of role Amazon Resource Name (ARN) and external ID. For more details, refer to Creating a Role to Delegate Permissions to an IAM User (write only)
AWS cloud account connector based credentials, the credentials is composed of access key ID and secret key, for more details, refer to Creating an IAM User in Your AWS Account (write only)
Details of the Azure resource that was assessed
Builder for AzureResourceDetailsArgs.
The CSPM monitoring for AWS offering configurations
Builder for CspmMonitorAwsOfferingArgs.
The native cloud connection configuration
The Defender for Containers AWS offering configurations
The cloudwatch to kinesis connection configuration
The kinesis to s3 connection configuration
The kubernetes to scuba connection configuration
The kubernetes service connection configuration
The ARC autoprovisioning configuration
The Defender for Servers AWS offering configurations
Builder for DefenderForServersAwsOfferingArgs.
The Defender for servers connection configuration
Metadata of Service Principal secret for autoprovisioning
A custom alert rule that checks if a value (depends on the custom alert type) is denied.
Builder for DenylistCustomAlertRuleArgs.
GCP cloud account connector based service to service credentials, the credentials are composed of the organization ID and a JSON API key (write only)
Builder for GetAlertsSuppressionRulePlainArgs.
Builder for GetApplicationPlainArgs.
Builder for GetAssessmentPlainArgs.
Builder for GetAssignmentPlainArgs.
Builder for GetAutomationPlainArgs.
Builder for GetConnectorPlainArgs.
Builder for GetDeviceSecurityGroupPlainArgs.
Builder for GetIngestionSettingPlainArgs.
Builder for GetIotSecuritySolutionPlainArgs.
Builder for GetJitNetworkAccessPolicyPlainArgs.
Builder for GetSecurityConnectorPlainArgs.
Builder for GetSecurityContactPlainArgs.
Builder for GetStandardPlainArgs.
Builder for GetWorkspaceSettingPlainArgs.
Settings for hybrid compute management
The information protection for AWS offering configurations
The native cloud connection configuration
Builder for JitNetworkAccessPortRuleArgs.
Builder for JitNetworkAccessRequestArgs.
Builder for JitNetworkAccessRequestPortArgs.
Details of the On Premise resource that was assessed
Builder for OnPremiseResourceDetailsArgs.
Details of the On Premise Sql resource that was assessed
Builder for OnPremiseSqlResourceDetailsArgs.
Represents a path that is recommended to be allowed and its properties
Builder for PathRecommendationArgs.
The protection mode of the collection/file types. Exe/Msi/Script are used for Windows, Executable is used for Linux.
Builder for ProtectionModeArgs.
For a non-Azure machine that is not connected directly to the internet, specify a proxy server that the non-Azure machine can use.
Builder for ProxyServerPropertiesArgs.
Represents the publisher information of a process/rule
Builder for PublisherInfoArgs.
The type of IoT Security recommendation.
A more specific scope used to identify the alerts to suppress.
Builder for ScopeElementArgs.
Describes the partner that created the assessment
Describes properties of an assessment metadata.
Data regarding 3rd party partner integration
Builder for SecurityAssessmentPartnerDataArgs.
The multi cloud account's organizational data
Defines whether to send email notifications about new security alerts
Defines whether to send email notifications from Microsoft Defender for Cloud to persons with specific RBAC roles on the subscription.
Details of the service principal.
Builder for ServicePrincipalPropertiesArgs.
Describes properties of an component as related to the standard
Builder for StandardComponentPropertiesArgs.
Builder for SuppressionAlertsScopeArgs.
A custom alert rule that checks if a value (depends on the custom alert type) is within the given range.
Builder for ThresholdCustomAlertRuleArgs.
A custom alert rule that checks if the number of activities (depends on the custom alert type) in a time window is within the given range.
Builder for TimeWindowCustomAlertRuleArgs.
Properties of the IoT Security solution's user defined resources.
Builder for UserDefinedResourcesPropertiesArgs.
Represents a user that is recommended to be allowed for a certain rule
Builder for UserRecommendationArgs.
Represents a machine that is part of a machine group
Builder for VmRecommendationArgs.