datadog_api_client 2.18.0 → 2.20.0

data/lib/datadog_api_client/v2/models/security_monitoring_rule_options.rb

@@ -55,6 +55,9 @@ module DatadogAPIClient::V2
     # Options on new value rules.
     attr_accessor :new_value_options
 
+    # Options on third party rules.
+    attr_accessor :third_party_rule_options
+
     # Attribute mapping from ruby-style variable name to JSON key.
     # @!visibility private
     def self.attribute_map
@@ -67,7 +70,8 @@ module DatadogAPIClient::V2
         :'impossible_travel_options' => :'impossibleTravelOptions',
         :'keep_alive' => :'keepAlive',
         :'max_signal_duration' => :'maxSignalDuration',
-        :'new_value_options' => :'newValueOptions'
+        :'new_value_options' => :'newValueOptions',
+        :'third_party_rule_options' => :'thirdPartyRuleOptions'
       }
     end
 
@@ -83,7 +87,8 @@ module DatadogAPIClient::V2
         :'impossible_travel_options' => :'SecurityMonitoringRuleImpossibleTravelOptions',
         :'keep_alive' => :'SecurityMonitoringRuleKeepAlive',
         :'max_signal_duration' => :'SecurityMonitoringRuleMaxSignalDuration',
-        :'new_value_options' => :'SecurityMonitoringRuleNewValueOptions'
+        :'new_value_options' => :'SecurityMonitoringRuleNewValueOptions',
+        :'third_party_rule_options' => :'SecurityMonitoringRuleThirdPartyOptions'
       }
     end
 
@@ -138,6 +143,10 @@ module DatadogAPIClient::V2
       if attributes.key?(:'new_value_options')
         self.new_value_options = attributes[:'new_value_options']
       end
+
+      if attributes.key?(:'third_party_rule_options')
+        self.third_party_rule_options = attributes[:'third_party_rule_options']
+      end
     end
 
     # Checks equality by comparing each attribute.
@@ -154,14 +163,15 @@ module DatadogAPIClient::V2
           impossible_travel_options == o.impossible_travel_options &&
           keep_alive == o.keep_alive &&
           max_signal_duration == o.max_signal_duration &&
-          new_value_options == o.new_value_options
+          new_value_options == o.new_value_options &&
+          third_party_rule_options == o.third_party_rule_options
     end
 
     # Calculates hash code according to all attributes.
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [compliance_rule_options, decrease_criticality_based_on_env, detection_method, evaluation_window, hardcoded_evaluator_type, impossible_travel_options, keep_alive, max_signal_duration, new_value_options].hash
+      [compliance_rule_options, decrease_criticality_based_on_env, detection_method, evaluation_window, hardcoded_evaluator_type, impossible_travel_options, keep_alive, max_signal_duration, new_value_options, third_party_rule_options].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_rule_third_party_options.rb

@@ -0,0 +1,114 @@
+=begin
+#Datadog API V2 Collection
+
+#Collection of all Datadog Public endpoints.
+
+The version of the OpenAPI document: 1.0
+Contact: support@datadoghq.com
+Generated by: https://github.com/DataDog/datadog-api-client-ruby/tree/master/.generator
+
+ Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ This product includes software developed at Datadog (https://www.datadoghq.com/).
+ Copyright 2020-Present Datadog, Inc.
+
+=end
+
+require 'date'
+require 'time'
+
+module DatadogAPIClient::V2
+  # Options on third party rules.
+  class SecurityMonitoringRuleThirdPartyOptions
+    include BaseGenericModel
+
+    # Notification targets for the logs that do not correspond to any of the cases.
+    attr_accessor :default_notifications
+
+    # Severity of the Security Signal.
+    attr_accessor :default_status
+
+    # Queries to be combined with third party case queries. Each of them can have different group by fields, to aggregate differently based on the type of alert.
+    attr_accessor :root_queries
+
+    # A template for the signal title; if omitted, the title is generated based on the case name.
+    attr_accessor :signal_title_template
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    # @!visibility private
+    def self.attribute_map
+      {
+        :'default_notifications' => :'defaultNotifications',
+        :'default_status' => :'defaultStatus',
+        :'root_queries' => :'rootQueries',
+        :'signal_title_template' => :'signalTitleTemplate'
+      }
+    end
+
+    # Attribute type mapping.
+    # @!visibility private
+    def self.openapi_types
+      {
+        :'default_notifications' => :'Array<String>',
+        :'default_status' => :'SecurityMonitoringRuleSeverity',
+        :'root_queries' => :'Array<SecurityMonitoringThirdPartyRootQuery>',
+        :'signal_title_template' => :'String'
+      }
+    end
+
+    # Initializes the object
+    # @param attributes [Hash] Model attributes in the form of hash
+    # @!visibility private
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::SecurityMonitoringRuleThirdPartyOptions` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `DatadogAPIClient::V2::SecurityMonitoringRuleThirdPartyOptions`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'default_notifications')
+        if (value = attributes[:'default_notifications']).is_a?(Array)
+          self.default_notifications = value
+        end
+      end
+
+      if attributes.key?(:'default_status')
+        self.default_status = attributes[:'default_status']
+      end
+
+      if attributes.key?(:'root_queries')
+        if (value = attributes[:'root_queries']).is_a?(Array)
+          self.root_queries = value
+        end
+      end
+
+      if attributes.key?(:'signal_title_template')
+        self.signal_title_template = attributes[:'signal_title_template']
+      end
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param o [Object] Object to be compared
+    # @!visibility private
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          default_notifications == o.default_notifications &&
+          default_status == o.default_status &&
+          root_queries == o.root_queries &&
+          signal_title_template == o.signal_title_template
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    # @!visibility private
+    def hash
+      [default_notifications, default_status, root_queries, signal_title_template].hash
+    end
+  end
+end

data/lib/datadog_api_client/v2/models/security_monitoring_rule_update_payload.rb

@@ -51,6 +51,9 @@ module DatadogAPIClient::V2
     # Tags for generated signals.
     attr_accessor :tags
 
+    # Cases for generating signals from third party rules. Only available for third party rules.
+    attr_accessor :third_party_cases
+
     # The version of the rule being updated.
     attr_reader :version
 
@@ -68,6 +71,7 @@ module DatadogAPIClient::V2
         :'options' => :'options',
         :'queries' => :'queries',
         :'tags' => :'tags',
+        :'third_party_cases' => :'thirdPartyCases',
         :'version' => :'version'
       }
     end
@@ -86,6 +90,7 @@ module DatadogAPIClient::V2
         :'options' => :'SecurityMonitoringRuleOptions',
         :'queries' => :'Array<SecurityMonitoringRuleQuery>',
         :'tags' => :'Array<String>',
+        :'third_party_cases' => :'Array<SecurityMonitoringThirdPartyRuleCase>',
         :'version' => :'Integer'
       }
     end
@@ -154,6 +159,12 @@ module DatadogAPIClient::V2
         end
       end
 
+      if attributes.key?(:'third_party_cases')
+        if (value = attributes[:'third_party_cases']).is_a?(Array)
+          self.third_party_cases = value
+        end
+      end
+
       if attributes.key?(:'version')
         self.version = attributes[:'version']
       end
@@ -193,6 +204,7 @@ module DatadogAPIClient::V2
           options == o.options &&
           queries == o.queries &&
           tags == o.tags &&
+          third_party_cases == o.third_party_cases &&
           version == o.version
     end
 
@@ -200,7 +212,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [cases, compliance_signal_options, filters, has_extended_title, is_enabled, message, name, options, queries, tags, version].hash
+      [cases, compliance_signal_options, filters, has_extended_title, is_enabled, message, name, options, queries, tags, third_party_cases, version].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_standard_rule_create_payload.rb

@@ -48,6 +48,9 @@ module DatadogAPIClient::V2
     # Tags for generated signals.
     attr_accessor :tags
 
+    # Cases for generating signals from third party rules. Only available for third party rules.
+    attr_accessor :third_party_cases
+
     # The rule type.
     attr_accessor :type
 
@@ -64,6 +67,7 @@ module DatadogAPIClient::V2
         :'options' => :'options',
         :'queries' => :'queries',
         :'tags' => :'tags',
+        :'third_party_cases' => :'thirdPartyCases',
         :'type' => :'type'
       }
     end
@@ -81,6 +85,7 @@ module DatadogAPIClient::V2
         :'options' => :'SecurityMonitoringRuleOptions',
         :'queries' => :'Array<SecurityMonitoringStandardRuleQuery>',
         :'tags' => :'Array<String>',
+        :'third_party_cases' => :'Array<SecurityMonitoringThirdPartyRuleCaseCreate>',
         :'type' => :'SecurityMonitoringRuleTypeCreate'
       }
     end
@@ -145,6 +150,12 @@ module DatadogAPIClient::V2
         end
       end
 
+      if attributes.key?(:'third_party_cases')
+        if (value = attributes[:'third_party_cases']).is_a?(Array)
+          self.third_party_cases = value
+        end
+      end
+
       if attributes.key?(:'type')
         self.type = attributes[:'type']
       end
@@ -238,6 +249,7 @@ module DatadogAPIClient::V2
           options == o.options &&
           queries == o.queries &&
           tags == o.tags &&
+          third_party_cases == o.third_party_cases &&
           type == o.type
     end
 
@@ -245,7 +257,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [cases, filters, has_extended_title, is_enabled, message, name, options, queries, tags, type].hash
+      [cases, filters, has_extended_title, is_enabled, message, name, options, queries, tags, third_party_cases, type].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_standard_rule_response.rb

@@ -69,6 +69,9 @@ module DatadogAPIClient::V2
     # Tags for generated signals.
     attr_accessor :tags
 
+    # Cases for generating signals from third party rules. Only available for third party rules.
+    attr_accessor :third_party_cases
+
     # The rule type.
     attr_accessor :type
 
@@ -98,6 +101,7 @@ module DatadogAPIClient::V2
         :'options' => :'options',
         :'queries' => :'queries',
         :'tags' => :'tags',
+        :'third_party_cases' => :'thirdPartyCases',
         :'type' => :'type',
         :'update_author_id' => :'updateAuthorId',
         :'version' => :'version'
@@ -124,6 +128,7 @@ module DatadogAPIClient::V2
         :'options' => :'SecurityMonitoringRuleOptions',
         :'queries' => :'Array<SecurityMonitoringStandardRuleQuery>',
         :'tags' => :'Array<String>',
+        :'third_party_cases' => :'Array<SecurityMonitoringThirdPartyRuleCase>',
         :'type' => :'SecurityMonitoringRuleTypeRead',
         :'update_author_id' => :'Integer',
         :'version' => :'Integer'
@@ -218,6 +223,12 @@ module DatadogAPIClient::V2
         end
       end
 
+      if attributes.key?(:'third_party_cases')
+        if (value = attributes[:'third_party_cases']).is_a?(Array)
+          self.third_party_cases = value
+        end
+      end
+
       if attributes.key?(:'type')
         self.type = attributes[:'type']
       end
@@ -253,6 +264,7 @@ module DatadogAPIClient::V2
           options == o.options &&
           queries == o.queries &&
           tags == o.tags &&
+          third_party_cases == o.third_party_cases &&
           type == o.type &&
           update_author_id == o.update_author_id &&
           version == o.version
@@ -262,7 +274,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [cases, compliance_signal_options, created_at, creation_author_id, deprecation_date, filters, has_extended_title, id, is_default, is_deleted, is_enabled, message, name, options, queries, tags, type, update_author_id, version].hash
+      [cases, compliance_signal_options, created_at, creation_author_id, deprecation_date, filters, has_extended_title, id, is_default, is_deleted, is_enabled, message, name, options, queries, tags, third_party_cases, type, update_author_id, version].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_suppression.rb

@@ -0,0 +1,100 @@
+=begin
+#Datadog API V2 Collection
+
+#Collection of all Datadog Public endpoints.
+
+The version of the OpenAPI document: 1.0
+Contact: support@datadoghq.com
+Generated by: https://github.com/DataDog/datadog-api-client-ruby/tree/master/.generator
+
+ Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ This product includes software developed at Datadog (https://www.datadoghq.com/).
+ Copyright 2020-Present Datadog, Inc.
+
+=end
+
+require 'date'
+require 'time'
+
+module DatadogAPIClient::V2
+  # The suppression rule's properties.
+  class SecurityMonitoringSuppression
+    include BaseGenericModel
+
+    # The attributes of the suppression rule.
+    attr_accessor :attributes
+
+    # The ID of the suppression rule.
+    attr_accessor :id
+
+    # The type of the resource. The value should always be `suppressions`.
+    attr_accessor :type
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    # @!visibility private
+    def self.attribute_map
+      {
+        :'attributes' => :'attributes',
+        :'id' => :'id',
+        :'type' => :'type'
+      }
+    end
+
+    # Attribute type mapping.
+    # @!visibility private
+    def self.openapi_types
+      {
+        :'attributes' => :'SecurityMonitoringSuppressionAttributes',
+        :'id' => :'String',
+        :'type' => :'SecurityMonitoringSuppressionType'
+      }
+    end
+
+    # Initializes the object
+    # @param attributes [Hash] Model attributes in the form of hash
+    # @!visibility private
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::SecurityMonitoringSuppression` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `DatadogAPIClient::V2::SecurityMonitoringSuppression`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'attributes')
+        self.attributes = attributes[:'attributes']
+      end
+
+      if attributes.key?(:'id')
+        self.id = attributes[:'id']
+      end
+
+      if attributes.key?(:'type')
+        self.type = attributes[:'type']
+      end
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param o [Object] Object to be compared
+    # @!visibility private
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          attributes == o.attributes &&
+          id == o.id &&
+          type == o.type
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    # @!visibility private
+    def hash
+      [attributes, id, type].hash
+    end
+  end
+end

data/lib/datadog_api_client/v2/models/security_monitoring_suppression_attributes.rb

@@ -0,0 +1,198 @@
+=begin
+#Datadog API V2 Collection
+
+#Collection of all Datadog Public endpoints.
+
+The version of the OpenAPI document: 1.0
+Contact: support@datadoghq.com
+Generated by: https://github.com/DataDog/datadog-api-client-ruby/tree/master/.generator
+
+ Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ This product includes software developed at Datadog (https://www.datadoghq.com/).
+ Copyright 2020-Present Datadog, Inc.
+
+=end
+
+require 'date'
+require 'time'
+
+module DatadogAPIClient::V2
+  # The attributes of the suppression rule.
+  class SecurityMonitoringSuppressionAttributes
+    include BaseGenericModel
+
+    # A Unix millisecond timestamp given the creation date of the suppression rule.
+    attr_accessor :creation_date
+
+    # A user.
+    attr_accessor :creator
+
+    # A description for the suppression rule.
+    attr_accessor :description
+
+    # Whether the suppression rule is enabled.
+    attr_accessor :enabled
+
+    # A Unix millisecond timestamp giving an expiration date for the suppression rule. After this date, it won't suppress signals anymore.
+    attr_accessor :expiration_date
+
+    # The name of the suppression rule.
+    attr_accessor :name
+
+    # The rule query of the suppression rule, with the same syntax as the search bar for detection rules.
+    attr_accessor :rule_query
+
+    # The suppression query of the suppression rule. If a signal matches this query, it is suppressed and not triggered. Same syntax as the queries to search signals in the signal explorer.
+    attr_accessor :suppression_query
+
+    # A Unix millisecond timestamp given the update date of the suppression rule.
+    attr_accessor :update_date
+
+    # A user.
+    attr_accessor :updater
+
+    # The version of the suppression rule; it starts at 1, and is incremented at each update.
+    attr_reader :version
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    # @!visibility private
+    def self.attribute_map
+      {
+        :'creation_date' => :'creation_date',
+        :'creator' => :'creator',
+        :'description' => :'description',
+        :'enabled' => :'enabled',
+        :'expiration_date' => :'expiration_date',
+        :'name' => :'name',
+        :'rule_query' => :'rule_query',
+        :'suppression_query' => :'suppression_query',
+        :'update_date' => :'update_date',
+        :'updater' => :'updater',
+        :'version' => :'version'
+      }
+    end
+
+    # Attribute type mapping.
+    # @!visibility private
+    def self.openapi_types
+      {
+        :'creation_date' => :'Integer',
+        :'creator' => :'SecurityMonitoringUser',
+        :'description' => :'String',
+        :'enabled' => :'Boolean',
+        :'expiration_date' => :'Integer',
+        :'name' => :'String',
+        :'rule_query' => :'String',
+        :'suppression_query' => :'String',
+        :'update_date' => :'Integer',
+        :'updater' => :'SecurityMonitoringUser',
+        :'version' => :'Integer'
+      }
+    end
+
+    # Initializes the object
+    # @param attributes [Hash] Model attributes in the form of hash
+    # @!visibility private
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::SecurityMonitoringSuppressionAttributes` initialize method"
+      end
+
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          fail ArgumentError, "`#{k}` is not a valid attribute in `DatadogAPIClient::V2::SecurityMonitoringSuppressionAttributes`. Please check the name to make sure it's valid. List of attributes: " + self.class.attribute_map.keys.inspect
+        end
+        h[k.to_sym] = v
+      }
+
+      if attributes.key?(:'creation_date')
+        self.creation_date = attributes[:'creation_date']
+      end
+
+      if attributes.key?(:'creator')
+        self.creator = attributes[:'creator']
+      end
+
+      if attributes.key?(:'description')
+        self.description = attributes[:'description']
+      end
+
+      if attributes.key?(:'enabled')
+        self.enabled = attributes[:'enabled']
+      end
+
+      if attributes.key?(:'expiration_date')
+        self.expiration_date = attributes[:'expiration_date']
+      end
+
+      if attributes.key?(:'name')
+        self.name = attributes[:'name']
+      end
+
+      if attributes.key?(:'rule_query')
+        self.rule_query = attributes[:'rule_query']
+      end
+
+      if attributes.key?(:'suppression_query')
+        self.suppression_query = attributes[:'suppression_query']
+      end
+
+      if attributes.key?(:'update_date')
+        self.update_date = attributes[:'update_date']
+      end
+
+      if attributes.key?(:'updater')
+        self.updater = attributes[:'updater']
+      end
+
+      if attributes.key?(:'version')
+        self.version = attributes[:'version']
+      end
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    # @!visibility private
+    def valid?
+      return false if !@version.nil? && @version > 2147483647
+      true
+    end
+
+    # Custom attribute writer method with validation
+    # @param version [Object] Object to be assigned
+    # @!visibility private
+    def version=(version)
+      if !version.nil? && version > 2147483647
+        fail ArgumentError, 'invalid value for "version", must be smaller than or equal to 2147483647.'
+      end
+      @version = version
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param o [Object] Object to be compared
+    # @!visibility private
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          creation_date == o.creation_date &&
+          creator == o.creator &&
+          description == o.description &&
+          enabled == o.enabled &&
+          expiration_date == o.expiration_date &&
+          name == o.name &&
+          rule_query == o.rule_query &&
+          suppression_query == o.suppression_query &&
+          update_date == o.update_date &&
+          updater == o.updater &&
+          version == o.version
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    # @!visibility private
+    def hash
+      [creation_date, creator, description, enabled, expiration_date, name, rule_query, suppression_query, update_date, updater, version].hash
+    end
+  end
+end