pulumi-azure-kotlin/com.pulumi.azure.sentinel.kotlin.inputs/AuthomationRuleConditionArgs

AuthomationRuleConditionArgs

data class AuthomationRuleConditionArgs(val operator: Output<String>, val property: Output<String>, val values: Output<List<String>>) : ConvertibleToJava<AuthomationRuleConditionArgs>

Constructors

fun AuthomationRuleConditionArgs(operator: Output<String>, property: Output<String>, values: Output<List<String>>)

Functions

toJava

open override fun toJava(): AuthomationRuleConditionArgs

Properties

operator

val operator: Output<String>

The operator to use for evaluate the condition. Possible values include: Equals, NotEquals, Contains, NotContains, StartsWith, NotStartsWith, EndsWith, NotEndsWith.

property

val property: Output<String>

The property to use for evaluate the condition. Possible values are AccountAadTenantId, AccountAadUserId, AccountNTDomain, AccountName, AccountObjectGuid, AccountPUID, AccountSid, AccountUPNSuffix, AlertAnalyticRuleIds, AlertProductNames, AzureResourceResourceId, AzureResourceSubscriptionId, CloudApplicationAppId, CloudApplicationAppName, DNSDomainName, FileDirectory, FileHashValue, FileName, HostAzureID, HostNTDomain, HostName, HostNetBiosName, HostOSVersion, IPAddress, IncidentCustomDetailsKey, IncidentCustomDetailsValue, IncidentDescription, IncidentLabel, IncidentProviderName, IncidentRelatedAnalyticRuleIds, IncidentSeverity, IncidentStatus, IncidentTactics, IncidentTitle, IncidentUpdatedBySource, IoTDeviceId, IoTDeviceModel, IoTDeviceName, IoTDeviceOperatingSystem, IoTDeviceType, IoTDeviceVendor, MailMessageDeliveryAction, MailMessageDeliveryLocation, MailMessageP1Sender, MailMessageP2Sender, MailMessageRecipient, MailMessageSenderIP, MailMessageSubject, MailboxDisplayName, MailboxPrimaryAddress, MailboxUPN, MalwareCategory, MalwareName, ProcessCommandLine, ProcessId, RegistryKey, RegistryValueData and Url.

values

val values: Output<List<String>>

Specifies a list of values to use for evaluate the condition.