Package-level declarations

Types

Link copied to clipboard
class AlertRuleAnomalyBuiltIn : KotlinCustomResource
Link copied to clipboard
data class AlertRuleAnomalyBuiltInArgs(val displayName: Output<String>? = null, val enabled: Output<Boolean>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val mode: Output<String>? = null, val name: Output<String>? = null) : ConvertibleToJava<AlertRuleAnomalyBuiltInArgs>
Link copied to clipboard
Link copied to clipboard
class AlertRuleAnomalyDuplicate : KotlinCustomResource

Manages a Duplicated Anomaly Alert Rule.

Link copied to clipboard
data class AlertRuleAnomalyDuplicateArgs(val builtInRuleId: Output<String>? = null, val displayName: Output<String>? = null, val enabled: Output<Boolean>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val mode: Output<String>? = null, val multiSelectObservations: Output<List<AlertRuleAnomalyDuplicateMultiSelectObservationArgs>>? = null, val prioritizedExcludeObservations: Output<List<AlertRuleAnomalyDuplicatePrioritizedExcludeObservationArgs>>? = null, val singleSelectObservations: Output<List<AlertRuleAnomalyDuplicateSingleSelectObservationArgs>>? = null, val thresholdObservations: Output<List<AlertRuleAnomalyDuplicateThresholdObservationArgs>>? = null) : ConvertibleToJava<AlertRuleAnomalyDuplicateArgs>

Manages a Duplicated Anomaly Alert Rule.

Link copied to clipboard
class AlertRuleFusion : KotlinCustomResource

Manages a Sentinel Fusion Alert Rule.

Link copied to clipboard
data class AlertRuleFusionArgs(val alertRuleTemplateGuid: Output<String>? = null, val enabled: Output<Boolean>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val sources: Output<List<AlertRuleFusionSourceArgs>>? = null) : ConvertibleToJava<AlertRuleFusionArgs>

Manages a Sentinel Fusion Alert Rule.

Link copied to clipboard
object AlertRuleFusionMapper : ResourceMapper<AlertRuleFusion>
class AlertRuleMachineLearningBehaviorAnalytics : KotlinCustomResource

Manages a Sentinel Machine Learning Behavior Analytics Alert Rule.

data class AlertRuleMachineLearningBehaviorAnalyticsArgs(val alertRuleTemplateGuid: Output<String>? = null, val enabled: Output<Boolean>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null) : ConvertibleToJava<AlertRuleMachineLearningBehaviorAnalyticsArgs>

Manages a Sentinel Machine Learning Behavior Analytics Alert Rule.

Link copied to clipboard
class AlertRuleMsSecurityIncident : KotlinCustomResource

Manages a Sentinel MS Security Incident Alert Rule.

Link copied to clipboard
data class AlertRuleMsSecurityIncidentArgs(val alertRuleTemplateGuid: Output<String>? = null, val description: Output<String>? = null, val displayName: Output<String>? = null, val displayNameExcludeFilters: Output<List<String>>? = null, val displayNameFilters: Output<List<String>>? = null, val enabled: Output<Boolean>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val productFilter: Output<String>? = null, val severityFilters: Output<List<String>>? = null) : ConvertibleToJava<AlertRuleMsSecurityIncidentArgs>

Manages a Sentinel MS Security Incident Alert Rule.

Link copied to clipboard
class AlertRuleNrt : KotlinCustomResource

Manages a Sentinel NRT Alert Rule.

Link copied to clipboard
data class AlertRuleNrtArgs(val alertDetailsOverrides: Output<List<AlertRuleNrtAlertDetailsOverrideArgs>>? = null, val alertRuleTemplateGuid: Output<String>? = null, val alertRuleTemplateVersion: Output<String>? = null, val customDetails: Output<Map<String, String>>? = null, val description: Output<String>? = null, val displayName: Output<String>? = null, val enabled: Output<Boolean>? = null, val entityMappings: Output<List<AlertRuleNrtEntityMappingArgs>>? = null, val eventGrouping: Output<AlertRuleNrtEventGroupingArgs>? = null, val incident: Output<AlertRuleNrtIncidentArgs>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val query: Output<String>? = null, val sentinelEntityMappings: Output<List<AlertRuleNrtSentinelEntityMappingArgs>>? = null, val severity: Output<String>? = null, val suppressionDuration: Output<String>? = null, val suppressionEnabled: Output<Boolean>? = null, val tactics: Output<List<String>>? = null, val techniques: Output<List<String>>? = null) : ConvertibleToJava<AlertRuleNrtArgs>

Manages a Sentinel NRT Alert Rule.

Link copied to clipboard
Link copied to clipboard
object AlertRuleNrtMapper : ResourceMapper<AlertRuleNrt>
Link copied to clipboard
Link copied to clipboard
class AlertRuleScheduled : KotlinCustomResource

Manages a Sentinel Scheduled Alert Rule.

Link copied to clipboard
data class AlertRuleScheduledArgs(val alertDetailsOverrides: Output<List<AlertRuleScheduledAlertDetailsOverrideArgs>>? = null, val alertRuleTemplateGuid: Output<String>? = null, val alertRuleTemplateVersion: Output<String>? = null, val customDetails: Output<Map<String, String>>? = null, val description: Output<String>? = null, val displayName: Output<String>? = null, val enabled: Output<Boolean>? = null, val entityMappings: Output<List<AlertRuleScheduledEntityMappingArgs>>? = null, val eventGrouping: Output<AlertRuleScheduledEventGroupingArgs>? = null, val incident: Output<AlertRuleScheduledIncidentArgs>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val query: Output<String>? = null, val queryFrequency: Output<String>? = null, val queryPeriod: Output<String>? = null, val sentinelEntityMappings: Output<List<AlertRuleScheduledSentinelEntityMappingArgs>>? = null, val severity: Output<String>? = null, val suppressionDuration: Output<String>? = null, val suppressionEnabled: Output<Boolean>? = null, val tactics: Output<List<String>>? = null, val techniques: Output<List<String>>? = null, val triggerOperator: Output<String>? = null, val triggerThreshold: Output<Int>? = null) : ConvertibleToJava<AlertRuleScheduledArgs>

Manages a Sentinel Scheduled Alert Rule.

Link copied to clipboard
Link copied to clipboard
class AlertRuleThreatIntelligence : KotlinCustomResource

Manages a Sentinel Threat Intelligence Alert Rule.

Link copied to clipboard
data class AlertRuleThreatIntelligenceArgs(val alertRuleTemplateGuid: Output<String>? = null, val enabled: Output<Boolean>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null) : ConvertibleToJava<AlertRuleThreatIntelligenceArgs>

Manages a Sentinel Threat Intelligence Alert Rule.

Link copied to clipboard
class AuthomationRule : KotlinCustomResource

Manages a Sentinel Automation Rule.

Link copied to clipboard
data class AuthomationRuleArgs constructor(val actionIncidents: Output<List<AuthomationRuleActionIncidentArgs>>? = null, val actionPlaybooks: Output<List<AuthomationRuleActionPlaybookArgs>>? = null, val conditionJson: Output<String>? = null, val displayName: Output<String>? = null, val enabled: Output<Boolean>? = null, val expiration: Output<String>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val order: Output<Int>? = null, val triggersOn: Output<String>? = null, val triggersWhen: Output<String>? = null) : ConvertibleToJava<AuthomationRuleArgs>

Manages a Sentinel Automation Rule.

Link copied to clipboard
object AuthomationRuleMapper : ResourceMapper<AuthomationRule>
Link copied to clipboard
class AutomationRule : KotlinCustomResource

Manages a Sentinel Automation Rule.

Link copied to clipboard
data class AutomationRuleArgs(val actionIncidents: Output<List<AutomationRuleActionIncidentArgs>>? = null, val actionPlaybooks: Output<List<AutomationRuleActionPlaybookArgs>>? = null, val conditionJson: Output<String>? = null, val displayName: Output<String>? = null, val enabled: Output<Boolean>? = null, val expiration: Output<String>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val order: Output<Int>? = null, val triggersOn: Output<String>? = null, val triggersWhen: Output<String>? = null) : ConvertibleToJava<AutomationRuleArgs>

Manages a Sentinel Automation Rule.

Link copied to clipboard
Link copied to clipboard
object AutomationRuleMapper : ResourceMapper<AutomationRule>
Link copied to clipboard
class DataConnectorAwsCloudTrail : KotlinCustomResource

Manages a AWS CloudTrail Data Connector.

Link copied to clipboard
data class DataConnectorAwsCloudTrailArgs(val awsRoleArn: Output<String>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null) : ConvertibleToJava<DataConnectorAwsCloudTrailArgs>

Manages a AWS CloudTrail Data Connector.

Link copied to clipboard
class DataConnectorAwsS3 : KotlinCustomResource

Manages a AWS S3 Data Connector.

Link copied to clipboard
data class DataConnectorAwsS3Args(val awsRoleArn: Output<String>? = null, val destinationTable: Output<String>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val sqsUrls: Output<List<String>>? = null) : ConvertibleToJava<DataConnectorAwsS3Args>

Manages a AWS S3 Data Connector.

Link copied to clipboard
Link copied to clipboard
class DataConnectorAzureActiveDirectory : KotlinCustomResource

Manages a Azure Active Directory Data Connector.

Link copied to clipboard
data class DataConnectorAzureActiveDirectoryArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorAzureActiveDirectoryArgs>

Manages a Azure Active Directory Data Connector.

class DataConnectorAzureAdvancedThreadProtection : KotlinCustomResource

Manages a Azure Advanced Threat Protection Data Connector. !>Note: This resource requires that Enterprise Mobility + Security E5 is enabled on the tenant being connected to.

data class DataConnectorAzureAdvancedThreadProtectionArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorAzureAdvancedThreadProtectionArgs>

Manages a Azure Advanced Threat Protection Data Connector. !>Note: This resource requires that Enterprise Mobility + Security E5 is enabled on the tenant being connected to.

Link copied to clipboard
class DataConnectorAzureSecurityCenter : KotlinCustomResource

Manages a Azure Security Center Data Connector.

Link copied to clipboard
data class DataConnectorAzureSecurityCenterArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val subscriptionId: Output<String>? = null) : ConvertibleToJava<DataConnectorAzureSecurityCenterArgs>

Manages a Azure Security Center Data Connector.

Link copied to clipboard
class DataConnectorDynamics365 : KotlinCustomResource

Manages a Dynamics 365 Data Connector.

Link copied to clipboard
data class DataConnectorDynamics365Args(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorDynamics365Args>

Manages a Dynamics 365 Data Connector.

Link copied to clipboard
class DataConnectorIot : KotlinCustomResource

Manages an Iot Data Connector.

Link copied to clipboard
data class DataConnectorIotArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val subscriptionId: Output<String>? = null) : ConvertibleToJava<DataConnectorIotArgs>

Manages an Iot Data Connector.

Link copied to clipboard
object DataConnectorIotMapper : ResourceMapper<DataConnectorIot>
Link copied to clipboard
class DataConnectorMicrosoftCloudAppSecurity : KotlinCustomResource

Manages a Microsoft Cloud App Security Data Connector. !>Note: This resource requires that Enterprise Mobility + Security E5 is enabled on the tenant being connected to.

data class DataConnectorMicrosoftCloudAppSecurityArgs(val alertsEnabled: Output<Boolean>? = null, val discoveryLogsEnabled: Output<Boolean>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorMicrosoftCloudAppSecurityArgs>

Manages a Microsoft Cloud App Security Data Connector. !>Note: This resource requires that Enterprise Mobility + Security E5 is enabled on the tenant being connected to.

Manages a Microsoft Defender Advanced Threat Protection Data Connector.

data class DataConnectorMicrosoftDefenderAdvancedThreatProtectionArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorMicrosoftDefenderAdvancedThreatProtectionArgs>

Manages a Microsoft Defender Advanced Threat Protection Data Connector.

Link copied to clipboard
class DataConnectorMicrosoftThreatIntelligence : KotlinCustomResource

Manages a Microsoft Threat Intelligence Data Connector.

data class DataConnectorMicrosoftThreatIntelligenceArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val microsoftEmergingThreatFeedLookbackDate: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorMicrosoftThreatIntelligenceArgs>

Manages a Microsoft Threat Intelligence Data Connector.

Link copied to clipboard
class DataConnectorMicrosoftThreatProtection : KotlinCustomResource

Manages a Microsoft Threat Protection Data Connector.

data class DataConnectorMicrosoftThreatProtectionArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorMicrosoftThreatProtectionArgs>

Manages a Microsoft Threat Protection Data Connector.

Link copied to clipboard
class DataConnectorOffice365 : KotlinCustomResource

Manages a Office 365 Data Connector.

Link copied to clipboard
data class DataConnectorOffice365Args(val exchangeEnabled: Output<Boolean>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val sharepointEnabled: Output<Boolean>? = null, val teamsEnabled: Output<Boolean>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorOffice365Args>

Manages a Office 365 Data Connector.

Link copied to clipboard
Link copied to clipboard
class DataConnectorOffice365Project : KotlinCustomResource

Manages an Office 365 Project Data Connector.

Link copied to clipboard
data class DataConnectorOffice365ProjectArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorOffice365ProjectArgs>

Manages an Office 365 Project Data Connector.

Link copied to clipboard
class DataConnectorOfficeAtp : KotlinCustomResource

Manages a Office ATP Data Connector.

Link copied to clipboard
data class DataConnectorOfficeAtpArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorOfficeAtpArgs>

Manages a Office ATP Data Connector.

Link copied to clipboard
Link copied to clipboard
class DataConnectorOfficeIrm : KotlinCustomResource

Manages an Office IRM Data Connector.

Link copied to clipboard
data class DataConnectorOfficeIrmArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorOfficeIrmArgs>

Manages an Office IRM Data Connector.

Link copied to clipboard
Link copied to clipboard
class DataConnectorOfficePowerBi : KotlinCustomResource

Manages an Office Power BI Data Connector.

Link copied to clipboard
data class DataConnectorOfficePowerBiArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorOfficePowerBiArgs>

Manages an Office Power BI Data Connector.

Link copied to clipboard
class DataConnectorThreatIntelligence : KotlinCustomResource

Manages a Threat Intelligence Data Connector.

Link copied to clipboard
data class DataConnectorThreatIntelligenceArgs(val logAnalyticsWorkspaceId: Output<String>? = null, val lookbackDate: Output<String>? = null, val name: Output<String>? = null, val tenantId: Output<String>? = null) : ConvertibleToJava<DataConnectorThreatIntelligenceArgs>

Manages a Threat Intelligence Data Connector.

Link copied to clipboard
class DataConnectorThreatIntelligenceTaxii : KotlinCustomResource

Manages an Threat Intelligence TAXII Data Connector.

Link copied to clipboard
data class DataConnectorThreatIntelligenceTaxiiArgs(val apiRootUrl: Output<String>? = null, val collectionId: Output<String>? = null, val displayName: Output<String>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val lookbackDate: Output<String>? = null, val name: Output<String>? = null, val password: Output<String>? = null, val pollingFrequency: Output<String>? = null, val tenantId: Output<String>? = null, val userName: Output<String>? = null) : ConvertibleToJava<DataConnectorThreatIntelligenceTaxiiArgs>

Manages an Threat Intelligence TAXII Data Connector.

Link copied to clipboard
class LogAnalyticsWorkspaceOnboarding : KotlinCustomResource

Manages a Security Insights Sentinel Onboarding.

Link copied to clipboard
data class LogAnalyticsWorkspaceOnboardingArgs(val customerManagedKeyEnabled: Output<Boolean>? = null, val workspaceId: Output<String>? = null) : ConvertibleToJava<LogAnalyticsWorkspaceOnboardingArgs>

Manages a Security Insights Sentinel Onboarding.

Link copied to clipboard
class Metadata : KotlinCustomResource

Manages a Sentinel Metadata.

Link copied to clipboard
data class MetadataArgs(val author: Output<MetadataAuthorArgs>? = null, val category: Output<MetadataCategoryArgs>? = null, val contentId: Output<String>? = null, val contentSchemaVersion: Output<String>? = null, val customVersion: Output<String>? = null, val dependency: Output<String>? = null, val firstPublishDate: Output<String>? = null, val iconId: Output<String>? = null, val kind: Output<String>? = null, val lastPublishDate: Output<String>? = null, val name: Output<String>? = null, val parentId: Output<String>? = null, val previewImages: Output<List<String>>? = null, val previewImagesDarks: Output<List<String>>? = null, val providers: Output<List<String>>? = null, val source: Output<MetadataSourceArgs>? = null, val support: Output<MetadataSupportArgs>? = null, val threatAnalysisTactics: Output<List<String>>? = null, val threatAnalysisTechniques: Output<List<String>>? = null, val version: Output<String>? = null, val workspaceId: Output<String>? = null) : ConvertibleToJava<MetadataArgs>

Manages a Sentinel Metadata.

Link copied to clipboard
Link copied to clipboard
object MetadataMapper : ResourceMapper<Metadata>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
class ThreatIntelligenceIndicator : KotlinCustomResource

Manages a Sentinel Threat Intelligence Indicator.

Link copied to clipboard
data class ThreatIntelligenceIndicatorArgs(val confidence: Output<Int>? = null, val createdBy: Output<String>? = null, val description: Output<String>? = null, val displayName: Output<String>? = null, val extension: Output<String>? = null, val externalReferences: Output<List<ThreatIntelligenceIndicatorExternalReferenceArgs>>? = null, val granularMarkings: Output<List<ThreatIntelligenceIndicatorGranularMarkingArgs>>? = null, val killChainPhases: Output<List<ThreatIntelligenceIndicatorKillChainPhaseArgs>>? = null, val language: Output<String>? = null, val objectMarkingRefs: Output<List<String>>? = null, val pattern: Output<String>? = null, val patternType: Output<String>? = null, val patternVersion: Output<String>? = null, val revoked: Output<Boolean>? = null, val source: Output<String>? = null, val tags: Output<List<String>>? = null, val threatTypes: Output<List<String>>? = null, val validateFromUtc: Output<String>? = null, val validateUntilUtc: Output<String>? = null, val workspaceId: Output<String>? = null) : ConvertibleToJava<ThreatIntelligenceIndicatorArgs>

Manages a Sentinel Threat Intelligence Indicator.

Link copied to clipboard
class Watchlist : KotlinCustomResource

Manages a Sentinel Watchlist.

Link copied to clipboard
data class WatchlistArgs(val defaultDuration: Output<String>? = null, val description: Output<String>? = null, val displayName: Output<String>? = null, val itemSearchKey: Output<String>? = null, val labels: Output<List<String>>? = null, val logAnalyticsWorkspaceId: Output<String>? = null, val name: Output<String>? = null) : ConvertibleToJava<WatchlistArgs>

Manages a Sentinel Watchlist.

Link copied to clipboard
Link copied to clipboard
class WatchlistItem : KotlinCustomResource

Manages a Sentinel Watchlist Item.

Link copied to clipboard
data class WatchlistItemArgs(val name: Output<String>? = null, val properties: Output<Map<String, String>>? = null, val watchlistId: Output<String>? = null) : ConvertibleToJava<WatchlistItemArgs>

Manages a Sentinel Watchlist Item.

Link copied to clipboard
Link copied to clipboard
object WatchlistItemMapper : ResourceMapper<WatchlistItem>
Link copied to clipboard
Link copied to clipboard
object WatchlistMapper : ResourceMapper<Watchlist>
Link copied to clipboard

Functions

Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
suspend fun metadata(name: String, block: suspend MetadataResourceBuilder.() -> Unit): Metadata
Link copied to clipboard
suspend fun watchlist(name: String, block: suspend WatchlistResourceBuilder.() -> Unit): Watchlist
Link copied to clipboard