datadog_api_client 2.30.0 → 2.31.0

data/lib/datadog_api_client/v2/models/security_monitoring_rule_case_create.rb

@@ -21,6 +21,9 @@ module DatadogAPIClient::V2
   class SecurityMonitoringRuleCaseCreate
     include BaseGenericModel
 
+    # Action to perform for each rule case.
+    attr_accessor :actions
+
     # A case contains logical operations (`>`,`>=`, `&&`, `||`) to determine if a signal should be generated
     # based on the event counts in the previously defined queries.
     attr_accessor :condition
@@ -40,6 +43,7 @@ module DatadogAPIClient::V2
     # @!visibility private
     def self.attribute_map
       {
+        :'actions' => :'actions',
         :'condition' => :'condition',
         :'name' => :'name',
         :'notifications' => :'notifications',
@@ -51,6 +55,7 @@ module DatadogAPIClient::V2
     # @!visibility private
     def self.openapi_types
       {
+        :'actions' => :'Array<SecurityMonitoringRuleCaseAction>',
         :'condition' => :'String',
         :'name' => :'String',
         :'notifications' => :'Array<String>',
@@ -76,6 +81,12 @@ module DatadogAPIClient::V2
         end
       }
 
+      if attributes.key?(:'actions')
+        if (value = attributes[:'actions']).is_a?(Array)
+          self.actions = value
+        end
+      end
+
       if attributes.key?(:'condition')
         self.condition = attributes[:'condition']
       end
@@ -139,6 +150,7 @@ module DatadogAPIClient::V2
     def ==(o)
       return true if self.equal?(o)
       self.class == o.class &&
+          actions == o.actions &&
           condition == o.condition &&
           name == o.name &&
           notifications == o.notifications &&
@@ -150,7 +162,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [condition, name, notifications, status, additional_properties].hash
+      [actions, condition, name, notifications, status, additional_properties].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_rule_evaluation_window.rb

@@ -30,5 +30,9 @@ module DatadogAPIClient::V2
     THIRTY_MINUTES = 1800.freeze
     ONE_HOUR = 3600.freeze
     TWO_HOURS = 7200.freeze
+    THREE_HOURS = 10800.freeze
+    SIX_HOURS = 21600.freeze
+    TWELVE_HOURS = 43200.freeze
+    ONE_DAY = 86400.freeze
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_rule_keep_alive.rb

@@ -32,5 +32,7 @@ module DatadogAPIClient::V2
     TWO_HOURS = 7200.freeze
     THREE_HOURS = 10800.freeze
     SIX_HOURS = 21600.freeze
+    TWELVE_HOURS = 43200.freeze
+    ONE_DAY = 86400.freeze
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_rule_update_payload.rb

@@ -30,6 +30,9 @@ module DatadogAPIClient::V2
     # Additional queries to filter matched events before they are processed. This field is deprecated for log detection, signal correlation, and workload security rules.
     attr_accessor :filters
 
+    # Additional grouping to perform on top of the existing groups in the query section. Must be a subset of the existing groups.
+    attr_accessor :group_signals_by
+
     # Whether the notifications include the triggering group-by values in their title.
     attr_accessor :has_extended_title
 
@@ -69,6 +72,7 @@ module DatadogAPIClient::V2
         :'cases' => :'cases',
         :'compliance_signal_options' => :'complianceSignalOptions',
         :'filters' => :'filters',
+        :'group_signals_by' => :'groupSignalsBy',
         :'has_extended_title' => :'hasExtendedTitle',
         :'is_enabled' => :'isEnabled',
         :'message' => :'message',
@@ -89,6 +93,7 @@ module DatadogAPIClient::V2
         :'cases' => :'Array<SecurityMonitoringRuleCase>',
         :'compliance_signal_options' => :'CloudConfigurationRuleComplianceSignalOptions',
         :'filters' => :'Array<SecurityMonitoringFilter>',
+        :'group_signals_by' => :'Array<String>',
         :'has_extended_title' => :'Boolean',
         :'is_enabled' => :'Boolean',
         :'message' => :'String',
@@ -136,6 +141,12 @@ module DatadogAPIClient::V2
         end
       end
 
+      if attributes.key?(:'group_signals_by')
+        if (value = attributes[:'group_signals_by']).is_a?(Array)
+          self.group_signals_by = value
+        end
+      end
+
       if attributes.key?(:'has_extended_title')
         self.has_extended_title = attributes[:'has_extended_title']
       end
@@ -232,6 +243,7 @@ module DatadogAPIClient::V2
           cases == o.cases &&
           compliance_signal_options == o.compliance_signal_options &&
           filters == o.filters &&
+          group_signals_by == o.group_signals_by &&
           has_extended_title == o.has_extended_title &&
           is_enabled == o.is_enabled &&
           message == o.message &&
@@ -249,7 +261,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [cases, compliance_signal_options, filters, has_extended_title, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, version, additional_properties].hash
+      [cases, compliance_signal_options, filters, group_signals_by, has_extended_title, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, version, additional_properties].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_standard_rule_create_payload.rb

@@ -27,6 +27,9 @@ module DatadogAPIClient::V2
     # Additional queries to filter matched events before they are processed. This field is deprecated for log detection, signal correlation, and workload security rules.
     attr_accessor :filters
 
+    # Additional grouping to perform on top of the existing groups in the query section. Must be a subset of the existing groups.
+    attr_accessor :group_signals_by
+
     # Whether the notifications include the triggering group-by values in their title.
     attr_accessor :has_extended_title
 
@@ -65,6 +68,7 @@ module DatadogAPIClient::V2
       {
         :'cases' => :'cases',
         :'filters' => :'filters',
+        :'group_signals_by' => :'groupSignalsBy',
         :'has_extended_title' => :'hasExtendedTitle',
         :'is_enabled' => :'isEnabled',
         :'message' => :'message',
@@ -84,6 +88,7 @@ module DatadogAPIClient::V2
       {
         :'cases' => :'Array<SecurityMonitoringRuleCaseCreate>',
         :'filters' => :'Array<SecurityMonitoringFilter>',
+        :'group_signals_by' => :'Array<String>',
         :'has_extended_title' => :'Boolean',
         :'is_enabled' => :'Boolean',
         :'message' => :'String',
@@ -127,6 +132,12 @@ module DatadogAPIClient::V2
         end
       end
 
+      if attributes.key?(:'group_signals_by')
+        if (value = attributes[:'group_signals_by']).is_a?(Array)
+          self.group_signals_by = value
+        end
+      end
+
       if attributes.key?(:'has_extended_title')
         self.has_extended_title = attributes[:'has_extended_title']
       end
@@ -277,6 +288,7 @@ module DatadogAPIClient::V2
       self.class == o.class &&
           cases == o.cases &&
           filters == o.filters &&
+          group_signals_by == o.group_signals_by &&
           has_extended_title == o.has_extended_title &&
           is_enabled == o.is_enabled &&
           message == o.message &&
@@ -294,7 +306,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [cases, filters, has_extended_title, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, type, additional_properties].hash
+      [cases, filters, group_signals_by, has_extended_title, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, type, additional_properties].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_standard_rule_payload.rb

@@ -27,6 +27,9 @@ module DatadogAPIClient::V2
     # Additional queries to filter matched events before they are processed. This field is deprecated for log detection, signal correlation, and workload security rules.
     attr_accessor :filters
 
+    # Additional grouping to perform on top of the existing groups in the query section. Must be a subset of the existing groups.
+    attr_accessor :group_signals_by
+
     # Whether the notifications include the triggering group-by values in their title.
     attr_accessor :has_extended_title
 
@@ -65,6 +68,7 @@ module DatadogAPIClient::V2
       {
         :'cases' => :'cases',
         :'filters' => :'filters',
+        :'group_signals_by' => :'groupSignalsBy',
         :'has_extended_title' => :'hasExtendedTitle',
         :'is_enabled' => :'isEnabled',
         :'message' => :'message',
@@ -84,6 +88,7 @@ module DatadogAPIClient::V2
       {
         :'cases' => :'Array<SecurityMonitoringRuleCaseCreate>',
         :'filters' => :'Array<SecurityMonitoringFilter>',
+        :'group_signals_by' => :'Array<String>',
         :'has_extended_title' => :'Boolean',
         :'is_enabled' => :'Boolean',
         :'message' => :'String',
@@ -127,6 +132,12 @@ module DatadogAPIClient::V2
         end
       end
 
+      if attributes.key?(:'group_signals_by')
+        if (value = attributes[:'group_signals_by']).is_a?(Array)
+          self.group_signals_by = value
+        end
+      end
+
       if attributes.key?(:'has_extended_title')
         self.has_extended_title = attributes[:'has_extended_title']
       end
@@ -277,6 +288,7 @@ module DatadogAPIClient::V2
       self.class == o.class &&
           cases == o.cases &&
           filters == o.filters &&
+          group_signals_by == o.group_signals_by &&
           has_extended_title == o.has_extended_title &&
           is_enabled == o.is_enabled &&
           message == o.message &&
@@ -294,7 +306,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [cases, filters, has_extended_title, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, type, additional_properties].hash
+      [cases, filters, group_signals_by, has_extended_title, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, type, additional_properties].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_standard_rule_response.rb

@@ -42,6 +42,9 @@ module DatadogAPIClient::V2
     # Additional queries to filter matched events before they are processed. This field is deprecated for log detection, signal correlation, and workload security rules.
     attr_accessor :filters
 
+    # Additional grouping to perform on top of the existing groups in the query section. Must be a subset of the existing groups.
+    attr_accessor :group_signals_by
+
     # Whether the notifications include the triggering group-by values in their title.
     attr_accessor :has_extended_title
 
@@ -103,6 +106,7 @@ module DatadogAPIClient::V2
         :'default_tags' => :'defaultTags',
         :'deprecation_date' => :'deprecationDate',
         :'filters' => :'filters',
+        :'group_signals_by' => :'groupSignalsBy',
         :'has_extended_title' => :'hasExtendedTitle',
         :'id' => :'id',
         :'is_default' => :'isDefault',
@@ -133,6 +137,7 @@ module DatadogAPIClient::V2
         :'default_tags' => :'Array<String>',
         :'deprecation_date' => :'Integer',
         :'filters' => :'Array<SecurityMonitoringFilter>',
+        :'group_signals_by' => :'Array<String>',
         :'has_extended_title' => :'Boolean',
         :'id' => :'String',
         :'is_default' => :'Boolean',
@@ -204,6 +209,12 @@ module DatadogAPIClient::V2
         end
       end
 
+      if attributes.key?(:'group_signals_by')
+        if (value = attributes[:'group_signals_by']).is_a?(Array)
+          self.group_signals_by = value
+        end
+      end
+
       if attributes.key?(:'has_extended_title')
         self.has_extended_title = attributes[:'has_extended_title']
       end
@@ -310,6 +321,7 @@ module DatadogAPIClient::V2
           default_tags == o.default_tags &&
           deprecation_date == o.deprecation_date &&
           filters == o.filters &&
+          group_signals_by == o.group_signals_by &&
           has_extended_title == o.has_extended_title &&
           id == o.id &&
           is_default == o.is_default &&
@@ -333,7 +345,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [cases, compliance_signal_options, created_at, creation_author_id, default_tags, deprecation_date, filters, has_extended_title, id, is_default, is_deleted, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, type, update_author_id, updated_at, version, additional_properties].hash
+      [cases, compliance_signal_options, created_at, creation_author_id, default_tags, deprecation_date, filters, group_signals_by, has_extended_title, id, is_default, is_deleted, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, type, update_author_id, updated_at, version, additional_properties].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_monitoring_standard_rule_test_payload.rb

@@ -27,6 +27,9 @@ module DatadogAPIClient::V2
     # Additional queries to filter matched events before they are processed. This field is deprecated for log detection, signal correlation, and workload security rules.
     attr_accessor :filters
 
+    # Additional grouping to perform on top of the existing groups in the query section. Must be a subset of the existing groups.
+    attr_accessor :group_signals_by
+
     # Whether the notifications include the triggering group-by values in their title.
     attr_accessor :has_extended_title
 
@@ -65,6 +68,7 @@ module DatadogAPIClient::V2
       {
         :'cases' => :'cases',
         :'filters' => :'filters',
+        :'group_signals_by' => :'groupSignalsBy',
         :'has_extended_title' => :'hasExtendedTitle',
         :'is_enabled' => :'isEnabled',
         :'message' => :'message',
@@ -84,6 +88,7 @@ module DatadogAPIClient::V2
       {
         :'cases' => :'Array<SecurityMonitoringRuleCaseCreate>',
         :'filters' => :'Array<SecurityMonitoringFilter>',
+        :'group_signals_by' => :'Array<String>',
         :'has_extended_title' => :'Boolean',
         :'is_enabled' => :'Boolean',
         :'message' => :'String',
@@ -127,6 +132,12 @@ module DatadogAPIClient::V2
         end
       end
 
+      if attributes.key?(:'group_signals_by')
+        if (value = attributes[:'group_signals_by']).is_a?(Array)
+          self.group_signals_by = value
+        end
+      end
+
       if attributes.key?(:'has_extended_title')
         self.has_extended_title = attributes[:'has_extended_title']
       end
@@ -277,6 +288,7 @@ module DatadogAPIClient::V2
       self.class == o.class &&
           cases == o.cases &&
           filters == o.filters &&
+          group_signals_by == o.group_signals_by &&
           has_extended_title == o.has_extended_title &&
           is_enabled == o.is_enabled &&
           message == o.message &&
@@ -294,7 +306,7 @@ module DatadogAPIClient::V2
     # @return [Integer] Hash code
     # @!visibility private
     def hash
-      [cases, filters, has_extended_title, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, type, additional_properties].hash
+      [cases, filters, group_signals_by, has_extended_title, is_enabled, message, name, options, queries, reference_tables, tags, third_party_cases, type, additional_properties].hash
     end
   end
 end

data/lib/datadog_api_client/v2/models/security_trigger.rb

@@ -0,0 +1,105 @@
+=begin
+#Datadog API V2 Collection
+
+#Collection of all Datadog Public endpoints.
+
+The version of the OpenAPI document: 1.0
+Contact: support@datadoghq.com
+Generated by: https://github.com/DataDog/datadog-api-client-ruby/tree/master/.generator
+
+ Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ This product includes software developed at Datadog (https://www.datadoghq.com/).
+ Copyright 2020-Present Datadog, Inc.
+
+=end
+
+require 'date'
+require 'time'
+
+module DatadogAPIClient::V2
+  # Trigger a workflow VIA a Security Signal or Finding. For automatic triggering a handle must be configured and the workflow must be published.
+  class SecurityTrigger
+    include BaseGenericModel
+
+    # Defines a rate limit for a trigger.
+    attr_accessor :rate_limit
+
+    attr_accessor :additional_properties
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    # @!visibility private
+    def self.attribute_map
+      {
+        :'rate_limit' => :'rateLimit'
+      }
+    end
+
+    # Attribute type mapping.
+    # @!visibility private
+    def self.openapi_types
+      {
+        :'rate_limit' => :'TriggerRateLimit'
+      }
+    end
+
+    # Initializes the object
+    # @param attributes [Hash] Model attributes in the form of hash
+    # @!visibility private
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::SecurityTrigger` initialize method"
+      end
+
+      self.additional_properties = {}
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          self.additional_properties[k.to_sym] = v
+        else
+          h[k.to_sym] = v
+        end
+      }
+
+      if attributes.key?(:'rate_limit')
+        self.rate_limit = attributes[:'rate_limit']
+      end
+    end
+
+    # Returns the object in the form of hash, with additionalProperties support.
+    # @return [Hash] Returns the object in the form of hash
+    # @!visibility private
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      self.additional_properties.each_pair do |attr, value|
+        hash[attr] = value
+      end
+      hash
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param o [Object] Object to be compared
+    # @!visibility private
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          rate_limit == o.rate_limit &&
+          additional_properties == o.additional_properties
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    # @!visibility private
+    def hash
+      [rate_limit, additional_properties].hash
+    end
+  end
+end

data/lib/datadog_api_client/v2/models/security_trigger_wrapper.rb

@@ -0,0 +1,135 @@
+=begin
+#Datadog API V2 Collection
+
+#Collection of all Datadog Public endpoints.
+
+The version of the OpenAPI document: 1.0
+Contact: support@datadoghq.com
+Generated by: https://github.com/DataDog/datadog-api-client-ruby/tree/master/.generator
+
+ Unless explicitly stated otherwise all files in this repository are licensed under the Apache-2.0 License.
+ This product includes software developed at Datadog (https://www.datadoghq.com/).
+ Copyright 2020-Present Datadog, Inc.
+
+=end
+
+require 'date'
+require 'time'
+
+module DatadogAPIClient::V2
+  # Schema for a Security-based trigger.
+  class SecurityTriggerWrapper
+    include BaseGenericModel
+
+    # Trigger a workflow VIA a Security Signal or Finding. For automatic triggering a handle must be configured and the workflow must be published.
+    attr_reader :security_trigger
+
+    # A list of steps that run first after a trigger fires.
+    attr_accessor :start_step_names
+
+    attr_accessor :additional_properties
+
+    # Attribute mapping from ruby-style variable name to JSON key.
+    # @!visibility private
+    def self.attribute_map
+      {
+        :'security_trigger' => :'securityTrigger',
+        :'start_step_names' => :'startStepNames'
+      }
+    end
+
+    # Attribute type mapping.
+    # @!visibility private
+    def self.openapi_types
+      {
+        :'security_trigger' => :'SecurityTrigger',
+        :'start_step_names' => :'Array<String>'
+      }
+    end
+
+    # Initializes the object
+    # @param attributes [Hash] Model attributes in the form of hash
+    # @!visibility private
+    def initialize(attributes = {})
+      if (!attributes.is_a?(Hash))
+        fail ArgumentError, "The input argument (attributes) must be a hash in `DatadogAPIClient::V2::SecurityTriggerWrapper` initialize method"
+      end
+
+      self.additional_properties = {}
+      # check to see if the attribute exists and convert string to symbol for hash key
+      attributes = attributes.each_with_object({}) { |(k, v), h|
+        if (!self.class.attribute_map.key?(k.to_sym))
+          self.additional_properties[k.to_sym] = v
+        else
+          h[k.to_sym] = v
+        end
+      }
+
+      if attributes.key?(:'security_trigger')
+        self.security_trigger = attributes[:'security_trigger']
+      end
+
+      if attributes.key?(:'start_step_names')
+        if (value = attributes[:'start_step_names']).is_a?(Array)
+          self.start_step_names = value
+        end
+      end
+    end
+
+    # Check to see if the all the properties in the model are valid
+    # @return true if the model is valid
+    # @!visibility private
+    def valid?
+      return false if @security_trigger.nil?
+      true
+    end
+
+    # Custom attribute writer method with validation
+    # @param security_trigger [Object] Object to be assigned
+    # @!visibility private
+    def security_trigger=(security_trigger)
+      if security_trigger.nil?
+        fail ArgumentError, 'invalid value for "security_trigger", security_trigger cannot be nil.'
+      end
+      @security_trigger = security_trigger
+    end
+
+    # Returns the object in the form of hash, with additionalProperties support.
+    # @return [Hash] Returns the object in the form of hash
+    # @!visibility private
+    def to_hash
+      hash = {}
+      self.class.attribute_map.each_pair do |attr, param|
+        value = self.send(attr)
+        if value.nil?
+          is_nullable = self.class.openapi_nullable.include?(attr)
+          next if !is_nullable || (is_nullable && !instance_variable_defined?(:"@#{attr}"))
+        end
+
+        hash[param] = _to_hash(value)
+      end
+      self.additional_properties.each_pair do |attr, value|
+        hash[attr] = value
+      end
+      hash
+    end
+
+    # Checks equality by comparing each attribute.
+    # @param o [Object] Object to be compared
+    # @!visibility private
+    def ==(o)
+      return true if self.equal?(o)
+      self.class == o.class &&
+          security_trigger == o.security_trigger &&
+          start_step_names == o.start_step_names &&
+          additional_properties == o.additional_properties
+    end
+
+    # Calculates hash code according to all attributes.
+    # @return [Integer] Hash code
+    # @!visibility private
+    def hash
+      [security_trigger, start_step_names, additional_properties].hash
+    end
+  end
+end

data/lib/datadog_api_client/v2/models/selectors.rb

@@ -26,7 +26,7 @@ module DatadogAPIClient::V2
     # The query is composed of one or several key:value pairs, which can be used to filter security issues on tags and attributes.
     attr_accessor :query
 
-    # Security rule types used to filter signals and vulnerabilities generating notifications.
+    # Security rule types used as filters in security rules.
     attr_accessor :rule_types
 
     # The security rules severities to consider.