pulumi-azure-native-kotlin/com.pulumi.azurenative.securityinsights.kotlin/WatchlistItemArgs

WatchlistItemArgs

data class WatchlistItemArgs(val created: Output<String>? = null, val createdBy: Output<WatchlistUserInfoArgs>? = null, val entityMapping: Output<Any>? = null, val isDeleted: Output<Boolean>? = null, val itemsKeyValue: Output<Any>? = null, val resourceGroupName: Output<String>? = null, val tenantId: Output<String>? = null, val updated: Output<String>? = null, val updatedBy: Output<WatchlistUserInfoArgs>? = null, val watchlistAlias: Output<String>? = null, val watchlistItemId: Output<String>? = null, val watchlistItemType: Output<String>? = null, val workspaceName: Output<String>? = null) : ConvertibleToJava<WatchlistItemArgs>

Represents a Watchlist Item in Azure Security Insights. Uses Azure REST API version 2024-09-01. In version 2.x of the Azure Native provider, it used API version 2023-02-01. Other available API versions: 2023-02-01, 2023-03-01-preview, 2023-04-01-preview, 2023-05-01-preview, 2023-06-01-preview, 2023-07-01-preview, 2023-08-01-preview, 2023-09-01-preview, 2023-10-01-preview, 2023-11-01, 2023-12-01-preview, 2024-01-01-preview, 2024-03-01, 2024-04-01-preview, 2024-10-01-preview, 2025-01-01-preview, 2025-03-01. These can be accessed by generating a local SDK package using the CLI command pulumi package add azure-native securityinsights [ApiVersion]. See the ../../../version-guide/#accessing-any-api-version-via-local-packages for details.

Example Usage

Create or update a watchlist item.

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() =>
{
    var watchlistItem = new AzureNative.SecurityInsights.WatchlistItem("watchlistItem", new()
    {
        ItemsKeyValue = new Dictionary<string, object?>
        {
            ["Business tier"] = "10.0.2.0/24",
            ["Data tier"] = "10.0.2.0/24",
            ["Gateway subnet"] = "10.0.255.224/27",
            ["Private DMZ in"] = "10.0.0.0/27",
            ["Public DMZ out"] = "10.0.0.96/27",
            ["Web Tier"] = "10.0.1.0/24",
        },
        ResourceGroupName = "myRg",
        WatchlistAlias = "highValueAsset",
        WatchlistItemId = "82ba292c-dc97-4dfc-969d-d4dd9e666842",
        WorkspaceName = "myWorkspace",
    });
});

package main
import (
	securityinsights "github.com/pulumi/pulumi-azure-native-sdk/securityinsights/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securityinsights.NewWatchlistItem(ctx, "watchlistItem", &securityinsights.WatchlistItemArgs{
			ItemsKeyValue: pulumi.Any(map[string]interface{}{
				"Business tier":  "10.0.2.0/24",
				"Data tier":      "10.0.2.0/24",
				"Gateway subnet": "10.0.255.224/27",
				"Private DMZ in": "10.0.0.0/27",
				"Public DMZ out": "10.0.0.96/27",
				"Web Tier":       "10.0.1.0/24",
			}),
			ResourceGroupName: pulumi.String("myRg"),
			WatchlistAlias:    pulumi.String("highValueAsset"),
			WatchlistItemId:   pulumi.String("82ba292c-dc97-4dfc-969d-d4dd9e666842"),
			WorkspaceName:     pulumi.String("myWorkspace"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.WatchlistItem;
import com.pulumi.azurenative.securityinsights.WatchlistItemArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var watchlistItem = new WatchlistItem("watchlistItem", WatchlistItemArgs.builder()
            .itemsKeyValue(Map.ofEntries(
                Map.entry("Business tier", "10.0.2.0/24"),
                Map.entry("Data tier", "10.0.2.0/24"),
                Map.entry("Gateway subnet", "10.0.255.224/27"),
                Map.entry("Private DMZ in", "10.0.0.0/27"),
                Map.entry("Public DMZ out", "10.0.0.96/27"),
                Map.entry("Web Tier", "10.0.1.0/24")
            ))
            .resourceGroupName("myRg")
            .watchlistAlias("highValueAsset")
            .watchlistItemId("82ba292c-dc97-4dfc-969d-d4dd9e666842")
            .workspaceName("myWorkspace")
            .build());
    }
}

Import

An existing resource can be imported using its type token, name, and identifier, e.g.

$ pulumi import azure-native:securityinsights:WatchlistItem myresource1 /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}/watchlistItems/{watchlistItemId}

Constructors

WatchlistItemArgs

constructor(created: Output<String>? = null, createdBy: Output<WatchlistUserInfoArgs>? = null, entityMapping: Output<Any>? = null, isDeleted: Output<Boolean>? = null, itemsKeyValue: Output<Any>? = null, resourceGroupName: Output<String>? = null, tenantId: Output<String>? = null, updated: Output<String>? = null, updatedBy: Output<WatchlistUserInfoArgs>? = null, watchlistAlias: Output<String>? = null, watchlistItemId: Output<String>? = null, watchlistItemType: Output<String>? = null, workspaceName: Output<String>? = null)