pulumi-azure-native-kotlin/com.pulumi.azurenative.securityinsights.kotlin/MetadataArgs

MetadataArgs

data class MetadataArgs(val author: Output<MetadataAuthorArgs>? = null, val categories: Output<MetadataCategoriesArgs>? = null, val contentId: Output<String>? = null, val dependencies: Output<MetadataDependenciesArgs>? = null, val firstPublishDate: Output<String>? = null, val kind: Output<Either<String, Kind>>? = null, val lastPublishDate: Output<String>? = null, val metadataName: Output<String>? = null, val operationalInsightsResourceProvider: Output<String>? = null, val parentId: Output<String>? = null, val providers: Output<List<String>>? = null, val resourceGroupName: Output<String>? = null, val source: Output<MetadataSourceArgs>? = null, val support: Output<MetadataSupportArgs>? = null, val version: Output<String>? = null, val workspaceName: Output<String>? = null) : ConvertibleToJava<MetadataArgs>

Metadata resource definition. API Version: 2021-03-01-preview.

Example Usage

Create/update full metadata.

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
    var metadata = new AzureNative.SecurityInsights.Metadata("metadata", new()
    {
        Author = new AzureNative.SecurityInsights.Inputs.MetadataAuthorArgs
        {
            Email = "email@microsoft.com",
            Name = "User Name",
        },
        Categories = new AzureNative.SecurityInsights.Inputs.MetadataCategoriesArgs
        {
            Domains = new[]
            {
                "Application",
                "Security – Insider Threat",
            },
            Verticals = new[]
            {
                "Healthcare",
            },
        },
        ContentId = "c00ee137-7475-47c8-9cce-ec6f0f1bedd0",
        Dependencies = new AzureNative.SecurityInsights.Inputs.MetadataDependenciesArgs
        {
            Criteria = new[]
            {
                new AzureNative.SecurityInsights.Inputs.MetadataDependenciesArgs
                {
                    Criteria = new[]
                    {
                        new AzureNative.SecurityInsights.Inputs.MetadataDependenciesArgs
                        {
                            ContentId = "045d06d0-ee72-4794-aba4-cf5646e4c756",
                            Kind = "DataConnector",
                            Name = "Microsoft Defender for Endpoint",
                        },
                        new AzureNative.SecurityInsights.Inputs.MetadataDependenciesArgs
                        {
                            ContentId = "dbfcb2cc-d782-40ef-8d94-fe7af58a6f2d",
                            Kind = "DataConnector",
                        },
                        new AzureNative.SecurityInsights.Inputs.MetadataDependenciesArgs
                        {
                            ContentId = "de4dca9b-eb37-47d6-a56f-b8b06b261593",
                            Kind = "DataConnector",
                            Version = "2.0",
                        },
                    },
                    Operator = "OR",
                },
                new AzureNative.SecurityInsights.Inputs.MetadataDependenciesArgs
                {
                    ContentId = "31ee11cc-9989-4de8-b176-5e0ef5c4dbab",
                    Kind = "Playbook",
                    Version = "1.0",
                },
                new AzureNative.SecurityInsights.Inputs.MetadataDependenciesArgs
                {
                    ContentId = "21ba424a-9438-4444-953a-7059539a7a1b",
                    Kind = "Parser",
                },
            },
            Operator = "AND",
        },
        FirstPublishDate = "2021-05-18",
        Kind = "AnalyticsRule",
        LastPublishDate = "2021-05-18",
        MetadataName = "metadataName",
        OperationalInsightsResourceProvider = "Microsoft.OperationalInsights",
        ParentId = "/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName",
        Providers = new[]
        {
            "Amazon",
            "Microsoft",
        },
        ResourceGroupName = "myRg",
        Source = new AzureNative.SecurityInsights.Inputs.MetadataSourceArgs
        {
            Kind = "Solution",
            Name = "Contoso Solution 1.0",
            SourceId = "b688a130-76f4-4a07-bf57-762222a3cadf",
        },
        Support = new AzureNative.SecurityInsights.Inputs.MetadataSupportArgs
        {
            Email = "support@microsoft.com",
            Link = "https://support.microsoft.com/",
            Name = "Microsoft",
            Tier = "Partner",
        },
        Version = "1.0.0.0",
        WorkspaceName = "myWorkspace",
    });
});
Content copied to clipboard
package main
import (
	securityinsights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/securityinsights"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securityinsights.NewMetadata(ctx, "metadata", &securityinsights.MetadataArgs{
			Author: &securityinsights.MetadataAuthorArgs{
				Email: pulumi.String("email@microsoft.com"),
				Name:  pulumi.String("User Name"),
			},
			Categories: &securityinsights.MetadataCategoriesArgs{
				Domains: pulumi.StringArray{
					pulumi.String("Application"),
					pulumi.String("Security – Insider Threat"),
				},
				Verticals: pulumi.StringArray{
					pulumi.String("Healthcare"),
				},
			},
			ContentId: pulumi.String("c00ee137-7475-47c8-9cce-ec6f0f1bedd0"),
			Dependencies: securityinsights.MetadataDependenciesResponse{
				Criteria: []securityinsights.MetadataDependenciesArgs{
					{
						Criteria: []securityinsights.MetadataDependenciesArgs{
							{
								ContentId: pulumi.String("045d06d0-ee72-4794-aba4-cf5646e4c756"),
								Kind:      pulumi.String("DataConnector"),
								Name:      pulumi.String("Microsoft Defender for Endpoint"),
							},
							{
								ContentId: pulumi.String("dbfcb2cc-d782-40ef-8d94-fe7af58a6f2d"),
								Kind:      pulumi.String("DataConnector"),
							},
							{
								ContentId: pulumi.String("de4dca9b-eb37-47d6-a56f-b8b06b261593"),
								Kind:      pulumi.String("DataConnector"),
								Version:   pulumi.String("2.0"),
							},
						},
						Operator: pulumi.String("OR"),
					},
					{
						ContentId: pulumi.String("31ee11cc-9989-4de8-b176-5e0ef5c4dbab"),
						Kind:      pulumi.String("Playbook"),
						Version:   pulumi.String("1.0"),
					},
					{
						ContentId: pulumi.String("21ba424a-9438-4444-953a-7059539a7a1b"),
						Kind:      pulumi.String("Parser"),
					},
				},
				Operator: pulumi.String("AND"),
			},
			FirstPublishDate:                    pulumi.String("2021-05-18"),
			Kind:                                pulumi.String("AnalyticsRule"),
			LastPublishDate:                     pulumi.String("2021-05-18"),
			MetadataName:                        pulumi.String("metadataName"),
			OperationalInsightsResourceProvider: pulumi.String("Microsoft.OperationalInsights"),
			ParentId:                            pulumi.String("/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName"),
			Providers: pulumi.StringArray{
				pulumi.String("Amazon"),
				pulumi.String("Microsoft"),
			},
			ResourceGroupName: pulumi.String("myRg"),
			Source: securityinsights.MetadataSourceResponse{
				Kind:     pulumi.String("Solution"),
				Name:     pulumi.String("Contoso Solution 1.0"),
				SourceId: pulumi.String("b688a130-76f4-4a07-bf57-762222a3cadf"),
			},
			Support: securityinsights.MetadataSupportResponse{
				Email: pulumi.String("support@microsoft.com"),
				Link:  pulumi.String("https://support.microsoft.com/"),
				Name:  pulumi.String("Microsoft"),
				Tier:  pulumi.String("Partner"),
			},
			Version:       pulumi.String("1.0.0.0"),
			WorkspaceName: pulumi.String("myWorkspace"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.Metadata;
import com.pulumi.azurenative.securityinsights.MetadataArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var metadata = new Metadata("metadata", MetadataArgs.builder()
            .author(Map.ofEntries(
                Map.entry("email", "email@microsoft.com"),
                Map.entry("name", "User Name")
            ))
            .categories(Map.ofEntries(
                Map.entry("domains",
                    "Application",
                    "Security – Insider Threat"),
                Map.entry("verticals", "Healthcare")
            ))
            .contentId("c00ee137-7475-47c8-9cce-ec6f0f1bedd0")
            .dependencies(Map.ofEntries(
                Map.entry("criteria",
                    Map.ofEntries(
                        Map.entry("criteria",
                            Map.ofEntries(
                                Map.entry("contentId", "045d06d0-ee72-4794-aba4-cf5646e4c756"),
                                Map.entry("kind", "DataConnector"),
                                Map.entry("name", "Microsoft Defender for Endpoint")
                            ),
                            Map.ofEntries(
                                Map.entry("contentId", "dbfcb2cc-d782-40ef-8d94-fe7af58a6f2d"),
                                Map.entry("kind", "DataConnector")
                            ),
                            Map.ofEntries(
                                Map.entry("contentId", "de4dca9b-eb37-47d6-a56f-b8b06b261593"),
                                Map.entry("kind", "DataConnector"),
                                Map.entry("version", "2.0")
                            )),
                        Map.entry("operator", "OR")
                    ),
                    Map.ofEntries(
                        Map.entry("contentId", "31ee11cc-9989-4de8-b176-5e0ef5c4dbab"),
                        Map.entry("kind", "Playbook"),
                        Map.entry("version", "1.0")
                    ),
                    Map.ofEntries(
                        Map.entry("contentId", "21ba424a-9438-4444-953a-7059539a7a1b"),
                        Map.entry("kind", "Parser")
                    )),
                Map.entry("operator", "AND")
            ))
            .firstPublishDate("2021-05-18")
            .kind("AnalyticsRule")
            .lastPublishDate("2021-05-18")
            .metadataName("metadataName")
            .operationalInsightsResourceProvider("Microsoft.OperationalInsights")
            .parentId("/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName")
            .providers(
                "Amazon",
                "Microsoft")
            .resourceGroupName("myRg")
            .source(Map.ofEntries(
                Map.entry("kind", "Solution"),
                Map.entry("name", "Contoso Solution 1.0"),
                Map.entry("sourceId", "b688a130-76f4-4a07-bf57-762222a3cadf")
            ))
            .support(Map.ofEntries(
                Map.entry("email", "support@microsoft.com"),
                Map.entry("link", "https://support.microsoft.com/"),
                Map.entry("name", "Microsoft"),
                Map.entry("tier", "Partner")
            ))
            .version("1.0.0.0")
            .workspaceName("myWorkspace")
            .build());
    }
}
Content copied to clipboard

Create/update minimal metadata.

using System.Collections.Generic;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
    var metadata = new AzureNative.SecurityInsights.Metadata("metadata", new()
    {
        ContentId = "c00ee137-7475-47c8-9cce-ec6f0f1bedd0",
        Kind = "AnalyticsRule",
        MetadataName = "metadataName",
        OperationalInsightsResourceProvider = "Microsoft.OperationalInsights",
        ParentId = "/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName",
        ResourceGroupName = "myRg",
        WorkspaceName = "myWorkspace",
    });
});
Content copied to clipboard
package main
import (
	securityinsights "github.com/pulumi/pulumi-azure-native/sdk/go/azure/securityinsights"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securityinsights.NewMetadata(ctx, "metadata", &securityinsights.MetadataArgs{
			ContentId:                           pulumi.String("c00ee137-7475-47c8-9cce-ec6f0f1bedd0"),
			Kind:                                pulumi.String("AnalyticsRule"),
			MetadataName:                        pulumi.String("metadataName"),
			OperationalInsightsResourceProvider: pulumi.String("Microsoft.OperationalInsights"),
			ParentId:                            pulumi.String("/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName"),
			ResourceGroupName:                   pulumi.String("myRg"),
			WorkspaceName:                       pulumi.String("myWorkspace"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.Metadata;
import com.pulumi.azurenative.securityinsights.MetadataArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var metadata = new Metadata("metadata", MetadataArgs.builder()
            .contentId("c00ee137-7475-47c8-9cce-ec6f0f1bedd0")
            .kind("AnalyticsRule")
            .metadataName("metadataName")
            .operationalInsightsResourceProvider("Microsoft.OperationalInsights")
            .parentId("/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName")
            .resourceGroupName("myRg")
            .workspaceName("myWorkspace")
            .build());
    }
}
Content copied to clipboard

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:securityinsights:Metadata metadataName /subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/metadata/metadataName
Content copied to clipboard

Constructors

Link copied to clipboard
fun MetadataArgs(author: Output<MetadataAuthorArgs>? = null, categories: Output<MetadataCategoriesArgs>? = null, contentId: Output<String>? = null, dependencies: Output<MetadataDependenciesArgs>? = null, firstPublishDate: Output<String>? = null, kind: Output<Either<String, Kind>>? = null, lastPublishDate: Output<String>? = null, metadataName: Output<String>? = null, operationalInsightsResourceProvider: Output<String>? = null, parentId: Output<String>? = null, providers: Output<List<String>>? = null, resourceGroupName: Output<String>? = null, source: Output<MetadataSourceArgs>? = null, support: Output<MetadataSupportArgs>? = null, version: Output<String>? = null, workspaceName: Output<String>? = null)

Functions

Link copied to clipboard
open override fun toJava(): MetadataArgs

Properties

Link copied to clipboard
val author: Output<MetadataAuthorArgs>? = null

The creator of the content item.

Link copied to clipboard
val categories: Output<MetadataCategoriesArgs>? = null

Categories for the solution content item

Link copied to clipboard
val contentId: Output<String>? = null

Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name

Link copied to clipboard
val dependencies: Output<MetadataDependenciesArgs>? = null

Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats.

Link copied to clipboard
val firstPublishDate: Output<String>? = null

first publish date solution content item

Link copied to clipboard
val kind: Output<Either<String, Kind>>? = null

The kind of content the metadata is for.

Link copied to clipboard
val lastPublishDate: Output<String>? = null

last publish date for the solution content item

Link copied to clipboard
val metadataName: Output<String>? = null

The Metadata name.

Link copied to clipboard
val operationalInsightsResourceProvider: Output<String>? = null

The namespace of workspaces resource provider- Microsoft.OperationalInsights.

Link copied to clipboard
val parentId: Output<String>? = null

Full parent resource ID of the content item the metadata is for. This is the full resource ID including the scope (subscription and resource group)

Link copied to clipboard
val providers: Output<List<String>>? = null

Providers for the solution content item

Link copied to clipboard
val resourceGroupName: Output<String>? = null

The name of the resource group. The name is case insensitive.

Link copied to clipboard
val source: Output<MetadataSourceArgs>? = null

Source of the content. This is where/how it was created.

Link copied to clipboard
val support: Output<MetadataSupportArgs>? = null

Support information for the metadata - type, name, contact information

Link copied to clipboard
val version: Output<String>? = null

Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks

Link copied to clipboard
val workspaceName: Output<String>? = null

The name of the workspace.