datadog_api_client 2.42.0 → 2.44.0

data/examples/v2/csm-threats/CreateCSMThreatsAgentRule.rb

@@ -12,6 +12,7 @@ body = DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleCreateRequest.new({
       description: "My Agent rule",
       enabled: true,
       expression: 'exec.file.name == "sh"',
+      agent_version: "> 7.60",
       filters: [],
       name: "examplecsmthreat",
       policy_id: POLICY_DATA_ID,

data/examples/v2/csm-threats/CreateCSMThreatsAgentRule_1295653933.rb

@@ -22,6 +22,7 @@ body = DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleCreateRequest.new({
             name: "test_set",
             value: "test_value",
             scope: "process",
+            inherited: true,
           }),
         }),
         DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleAction.new({

data/examples/v2/csm-threats/CreateCSMThreatsAgentRule_1363354233.rb

@@ -0,0 +1,33 @@
+# Create a Workload Protection agent rule with set action with expression returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::CSMThreatsAPI.new
+
+# there is a valid "policy_rc" in the system
+POLICY_DATA_ID = ENV["POLICY_DATA_ID"]
+
+body = DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleCreateRequest.new({
+  data: DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleCreateData.new({
+    attributes: DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleCreateAttributes.new({
+      description: "My Agent rule with set action with expression",
+      enabled: true,
+      expression: 'exec.file.name == "sh"',
+      filters: [],
+      name: "examplecsmthreat",
+      policy_id: POLICY_DATA_ID,
+      product_tags: [],
+      actions: [
+        DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleAction.new({
+          set: DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleActionSet.new({
+            name: "test_set",
+            expression: "open.file.path",
+            default_value: "/dev/null",
+            scope: "process",
+          }),
+        }),
+      ],
+    }),
+    type: DatadogAPIClient::V2::CloudWorkloadSecurityAgentRuleType::AGENT_RULE,
+  }),
+})
+p api_instance.create_csm_threats_agent_rule(body)

data/examples/v2/dora-metrics/CreateDORADeployment.rb

@@ -1,4 +1,4 @@
-# Send a deployment event for DORA Metrics returns "OK" response
+# Send a deployment event returns "OK" response
 
 require "datadog_api_client"
 api_instance = DatadogAPIClient::V2::DORAMetricsAPI.new

data/examples/v2/dora-metrics/CreateDORAFailure.rb

@@ -1,4 +1,4 @@
-# Send a failure event for DORA Metrics returns "OK - but delayed due to incident" response
+# Send a failure event returns "OK - but delayed due to incident" response
 
 require "datadog_api_client"
 api_instance = DatadogAPIClient::V2::DORAMetricsAPI.new

data/examples/v2/dora-metrics/CreateDORAIncident.rb

@@ -1,4 +1,4 @@
-# Send an incident event for DORA Metrics returns "OK" response
+# Send an incident event returns "OK" response
 
 require "datadog_api_client"
 api_instance = DatadogAPIClient::V2::DORAMetricsAPI.new

data/examples/v2/dora-metrics/{CreateDORAIncident_1768887482.rb → CreateDORAIncident_1101664022.rb}

@@ -1,4 +1,4 @@
-# Send a failure event for DORA Metrics returns "OK" response
+# Send a failure event returns "OK" response
 
 require "datadog_api_client"
 api_instance = DatadogAPIClient::V2::DORAMetricsAPI.new

data/examples/v2/dora-metrics/DeleteDORADeployment.rb

@@ -0,0 +1,5 @@
+# Delete a deployment event returns "Accepted" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::DORAMetricsAPI.new
+p api_instance.delete_dora_deployment("NO_VALUE")

data/examples/v2/dora-metrics/DeleteDORAFailure.rb

@@ -0,0 +1,5 @@
+# Delete a failure event returns "Accepted" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::DORAMetricsAPI.new
+p api_instance.delete_dora_failure("NO_VALUE")

data/examples/v2/error-tracking/DeleteIssueAssignee.rb

@@ -0,0 +1,8 @@
+# Remove the assignee of an issue returns "No Content" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ErrorTrackingAPI.new
+
+# there is a valid "issue" in the system
+ISSUE_ID = ENV["ISSUE_ID"]
+api_instance.delete_issue_assignee(ISSUE_ID)

data/examples/v2/fleet-automation/CancelFleetDeployment.rb

@@ -0,0 +1,8 @@
+# Cancel a deployment returns "Deployment successfully canceled." response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.cancel_fleet_deployment".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::FleetAutomationAPI.new
+api_instance.cancel_fleet_deployment("deployment_id")

data/examples/v2/fleet-automation/CreateFleetDeploymentConfigure.rb

@@ -0,0 +1,26 @@
+# Create a deployment returns "CREATED" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.create_fleet_deployment_configure".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::FleetAutomationAPI.new
+
+body = DatadogAPIClient::V2::FleetDeploymentConfigureCreateRequest.new({
+  data: DatadogAPIClient::V2::FleetDeploymentConfigureCreate.new({
+    attributes: DatadogAPIClient::V2::FleetDeploymentConfigureAttributes.new({
+      config_operations: [
+        DatadogAPIClient::V2::FleetDeploymentOperation.new({
+          file_op: DatadogAPIClient::V2::FleetDeploymentFileOp::MERGE_PATCH,
+          file_path: "/datadog.yaml",
+          patch: {
+            "apm_config": "{'enabled': True}", "log_level": "debug", "logs_enabled": "True",
+          },
+        }),
+      ],
+      filter_query: "env:prod AND service:web",
+    }),
+    type: DatadogAPIClient::V2::FleetDeploymentResourceType::DEPLOYMENT,
+  }),
+})
+p api_instance.create_fleet_deployment_configure(body)

data/examples/v2/fleet-automation/GetFleetDeployment.rb

@@ -0,0 +1,11 @@
+# Get a deployment by ID returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.get_fleet_deployment".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::FleetAutomationAPI.new
+
+# there is a valid "deployment" in the system
+DEPLOYMENT_ID = ENV["DEPLOYMENT_ID"]
+p api_instance.get_fleet_deployment(DEPLOYMENT_ID)

data/examples/v2/fleet-automation/ListFleetDeployments.rb

@@ -0,0 +1,8 @@
+# List all deployments returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.list_fleet_deployments".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::FleetAutomationAPI.new
+p api_instance.list_fleet_deployments()

data/examples/v2/incidents/CreateIncidentImpact.rb

@@ -0,0 +1,22 @@
+# Create an incident impact returns "CREATED" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.create_incident_impact".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::IncidentsAPI.new
+
+# there is a valid "incident" in the system
+INCIDENT_DATA_ID = ENV["INCIDENT_DATA_ID"]
+
+body = DatadogAPIClient::V2::IncidentImpactCreateRequest.new({
+  data: DatadogAPIClient::V2::IncidentImpactCreateData.new({
+    type: DatadogAPIClient::V2::IncidentImpactType::INCIDENT_IMPACTS,
+    attributes: DatadogAPIClient::V2::IncidentImpactCreateAttributes.new({
+      start_at: "2025-09-12T13:50:00.000Z",
+      end_at: "2025-09-12T14:50:00.000Z",
+      description: "Outage in the us-east-1 region",
+    }),
+  }),
+})
+p api_instance.create_incident_impact(INCIDENT_DATA_ID, body)

data/examples/v2/incidents/DeleteIncidentImpact.rb

@@ -0,0 +1,12 @@
+# Delete an incident impact returns "No Content" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.delete_incident_impact".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::IncidentsAPI.new
+
+# the "incident" has an "incident_impact"
+INCIDENT_IMPACT_DATA_ID = ENV["INCIDENT_IMPACT_DATA_ID"]
+INCIDENT_IMPACT_DATA_RELATIONSHIPS_INCIDENT_DATA_ID = ENV["INCIDENT_IMPACT_DATA_RELATIONSHIPS_INCIDENT_DATA_ID"]
+api_instance.delete_incident_impact(INCIDENT_IMPACT_DATA_RELATIONSHIPS_INCIDENT_DATA_ID, INCIDENT_IMPACT_DATA_ID)

data/examples/v2/incidents/ListIncidentImpacts.rb

@@ -0,0 +1,11 @@
+# List an incident's impacts returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.list_incident_impacts".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::IncidentsAPI.new
+
+# there is a valid "incident" in the system
+INCIDENT_DATA_ID = ENV["INCIDENT_DATA_ID"]
+p api_instance.list_incident_impacts(INCIDENT_DATA_ID)

data/examples/v2/key-management/GetCurrentUserApplicationKey.rb

@@ -2,4 +2,7 @@
 
 require "datadog_api_client"
 api_instance = DatadogAPIClient::V2::KeyManagementAPI.new
-p api_instance.get_current_user_application_key("app_key_id")
+
+# there is a valid "application_key" in the system
+APPLICATION_KEY_DATA_ID = ENV["APPLICATION_KEY_DATA_ID"]
+p api_instance.get_current_user_application_key(APPLICATION_KEY_DATA_ID)

data/examples/v2/monitors/CreateMonitorNotificationRule_1181818787.rb

@@ -0,0 +1,30 @@
+# Create a monitor notification rule with conditional recipients returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::MonitorsAPI.new
+
+body = DatadogAPIClient::V2::MonitorNotificationRuleCreateRequest.new({
+  data: DatadogAPIClient::V2::MonitorNotificationRuleCreateRequestData.new({
+    attributes: DatadogAPIClient::V2::MonitorNotificationRuleAttributes.new({
+      filter: DatadogAPIClient::V2::MonitorNotificationRuleFilterTags.new({
+        tags: [
+          "test:example-monitor",
+        ],
+      }),
+      name: "test rule",
+      conditional_recipients: DatadogAPIClient::V2::MonitorNotificationRuleConditionalRecipients.new({
+        conditions: [
+          DatadogAPIClient::V2::MonitorNotificationRuleCondition.new({
+            scope: "transition_type:is_alert",
+            recipients: [
+              "slack-test-channel",
+              "jira-test",
+            ],
+          }),
+        ],
+      }),
+    }),
+    type: DatadogAPIClient::V2::MonitorNotificationRuleResourceType::MONITOR_NOTIFICATION_RULE,
+  }),
+})
+p api_instance.create_monitor_notification_rule(body)

data/examples/v2/monitors/UpdateMonitorNotificationRule_1400905713.rb

@@ -0,0 +1,35 @@
+# Update a monitor notification rule with conditional_recipients returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::MonitorsAPI.new
+
+# there is a valid "monitor_notification_rule" in the system
+MONITOR_NOTIFICATION_RULE_DATA_ID = ENV["MONITOR_NOTIFICATION_RULE_DATA_ID"]
+
+body = DatadogAPIClient::V2::MonitorNotificationRuleUpdateRequest.new({
+  data: DatadogAPIClient::V2::MonitorNotificationRuleUpdateRequestData.new({
+    attributes: DatadogAPIClient::V2::MonitorNotificationRuleAttributes.new({
+      filter: DatadogAPIClient::V2::MonitorNotificationRuleFilterTags.new({
+        tags: [
+          "test:example-monitor",
+          "host:abc",
+        ],
+      }),
+      name: "updated rule",
+      conditional_recipients: DatadogAPIClient::V2::MonitorNotificationRuleConditionalRecipients.new({
+        conditions: [
+          DatadogAPIClient::V2::MonitorNotificationRuleCondition.new({
+            scope: "transition_type:is_alert",
+            recipients: [
+              "slack-test-channel",
+              "jira-test",
+            ],
+          }),
+        ],
+      }),
+    }),
+    id: MONITOR_NOTIFICATION_RULE_DATA_ID,
+    type: DatadogAPIClient::V2::MonitorNotificationRuleResourceType::MONITOR_NOTIFICATION_RULE,
+  }),
+})
+p api_instance.update_monitor_notification_rule(MONITOR_NOTIFICATION_RULE_DATA_ID, body)

data/examples/v2/reference-tables/CreateReferenceTable.rb

@@ -0,0 +1,44 @@
+# Create reference table returns "Created" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ReferenceTablesAPI.new
+
+body = DatadogAPIClient::V2::CreateTableRequest.new({
+  data: DatadogAPIClient::V2::CreateTableRequestData.new({
+    attributes: DatadogAPIClient::V2::CreateTableRequestDataAttributes.new({
+      description: "this is a cloud table generated via a cloud bucket sync",
+      file_metadata: DatadogAPIClient::V2::CreateTableRequestDataAttributesFileMetadataCloudStorage.new({
+        access_details: DatadogAPIClient::V2::CreateTableRequestDataAttributesFileMetadataOneOfAccessDetails.new({
+          aws_detail: DatadogAPIClient::V2::CreateTableRequestDataAttributesFileMetadataOneOfAccessDetailsAwsDetail.new({
+            aws_account_id: "test-account-id",
+            aws_bucket_name: "test-bucket",
+            file_path: "test_rt.csv",
+          }),
+        }),
+        sync_enabled: true,
+      }),
+      schema: DatadogAPIClient::V2::CreateTableRequestDataAttributesSchema.new({
+        fields: [
+          DatadogAPIClient::V2::CreateTableRequestDataAttributesSchemaFieldsItems.new({
+            name: "name",
+            type: DatadogAPIClient::V2::ReferenceTableSchemaFieldType::STRING,
+          }),
+          DatadogAPIClient::V2::CreateTableRequestDataAttributesSchemaFieldsItems.new({
+            name: "account_id",
+            type: DatadogAPIClient::V2::ReferenceTableSchemaFieldType::STRING,
+          }),
+        ],
+        primary_keys: [
+          "account_id",
+        ],
+      }),
+      source: DatadogAPIClient::V2::ReferenceTableCreateSourceType::S3,
+      table_name: "test_reference_table",
+      tags: [
+        "test_tag",
+      ],
+    }),
+    type: DatadogAPIClient::V2::CreateTableRequestDataType::REFERENCE_TABLE,
+  }),
+})
+p api_instance.create_reference_table(body)

data/examples/v2/reference-tables/CreateReferenceTableUpload.rb

@@ -0,0 +1,21 @@
+# Create reference table upload returns "Created" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ReferenceTablesAPI.new
+
+body = DatadogAPIClient::V2::CreateUploadRequest.new({
+  data: DatadogAPIClient::V2::CreateUploadRequestData.new({
+    attributes: DatadogAPIClient::V2::CreateUploadRequestDataAttributes.new({
+      headers: [
+        "id",
+        "name",
+        "value",
+      ],
+      table_name: "test_upload_table_Example-Reference-Table",
+      part_count: 1,
+      part_size: 1024,
+    }),
+    type: DatadogAPIClient::V2::CreateUploadRequestDataType::UPLOAD,
+  }),
+})
+p api_instance.create_reference_table_upload(body)

data/examples/v2/reference-tables/CreateReferenceTable_3196130987.rb

@@ -0,0 +1,41 @@
+# Create reference table with upload returns "Created" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ReferenceTablesAPI.new
+
+body = DatadogAPIClient::V2::CreateTableRequest.new({
+  data: DatadogAPIClient::V2::CreateTableRequestData.new({
+    attributes: DatadogAPIClient::V2::CreateTableRequestDataAttributes.new({
+      description: "Test reference table created via BDD test Example-Reference-Table",
+      source: DatadogAPIClient::V2::ReferenceTableCreateSourceType::LOCAL_FILE,
+      file_metadata: DatadogAPIClient::V2::CreateTableRequestDataAttributesFileMetadataLocalFile.new({
+        upload_id: "test-upload-id-Example-Reference-Table",
+      }),
+      schema: DatadogAPIClient::V2::CreateTableRequestDataAttributesSchema.new({
+        fields: [
+          DatadogAPIClient::V2::CreateTableRequestDataAttributesSchemaFieldsItems.new({
+            name: "id",
+            type: DatadogAPIClient::V2::ReferenceTableSchemaFieldType::STRING,
+          }),
+          DatadogAPIClient::V2::CreateTableRequestDataAttributesSchemaFieldsItems.new({
+            name: "name",
+            type: DatadogAPIClient::V2::ReferenceTableSchemaFieldType::STRING,
+          }),
+          DatadogAPIClient::V2::CreateTableRequestDataAttributesSchemaFieldsItems.new({
+            name: "value",
+            type: DatadogAPIClient::V2::ReferenceTableSchemaFieldType::INT32,
+          }),
+        ],
+        primary_keys: [
+          "id",
+        ],
+      }),
+      table_name: "test_reference_table_Example-Reference-Table",
+      tags: [
+        "test_tag",
+      ],
+    }),
+    type: DatadogAPIClient::V2::CreateTableRequestDataType::REFERENCE_TABLE,
+  }),
+})
+p api_instance.create_reference_table(body)

data/examples/v2/reference-tables/DeleteTable.rb

@@ -0,0 +1,5 @@
+# Delete table returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ReferenceTablesAPI.new
+p api_instance.delete_table("id")

data/examples/v2/reference-tables/GetRowsByID.rb

@@ -0,0 +1,5 @@
+# Get rows by id returns "Some or all requested rows were found." response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ReferenceTablesAPI.new
+p api_instance.get_rows_by_id("id", [])

data/examples/v2/reference-tables/GetTable.rb

@@ -0,0 +1,5 @@
+# Get table returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ReferenceTablesAPI.new
+p api_instance.get_table("id")

data/examples/v2/reference-tables/ListTables.rb

@@ -0,0 +1,5 @@
+# List tables returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ReferenceTablesAPI.new
+p api_instance.list_tables()

data/examples/v2/reference-tables/UpdateReferenceTable.rb

@@ -0,0 +1,44 @@
+# Update reference table returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::ReferenceTablesAPI.new
+
+body = DatadogAPIClient::V2::PatchTableRequest.new({
+  data: DatadogAPIClient::V2::PatchTableRequestData.new({
+    attributes: DatadogAPIClient::V2::PatchTableRequestDataAttributes.new({
+      description: "this is a cloud table generated via a cloud bucket sync",
+      file_metadata: DatadogAPIClient::V2::PatchTableRequestDataAttributesFileMetadataCloudStorage.new({
+        access_details: DatadogAPIClient::V2::PatchTableRequestDataAttributesFileMetadataOneOfAccessDetails.new({
+          aws_detail: DatadogAPIClient::V2::PatchTableRequestDataAttributesFileMetadataOneOfAccessDetailsAwsDetail.new({
+            aws_account_id: "test-account-id",
+            aws_bucket_name: "test-bucket",
+            file_path: "test_rt.csv",
+          }),
+        }),
+        sync_enabled: true,
+      }),
+      schema: DatadogAPIClient::V2::PatchTableRequestDataAttributesSchema.new({
+        fields: [
+          DatadogAPIClient::V2::PatchTableRequestDataAttributesSchemaFieldsItems.new({
+            name: "id",
+            type: DatadogAPIClient::V2::ReferenceTableSchemaFieldType::INT32,
+          }),
+          DatadogAPIClient::V2::PatchTableRequestDataAttributesSchemaFieldsItems.new({
+            name: "name",
+            type: DatadogAPIClient::V2::ReferenceTableSchemaFieldType::STRING,
+          }),
+        ],
+        primary_keys: [
+          "id",
+        ],
+      }),
+      sync_enabled: false,
+      tags: [
+        "test_tag",
+      ],
+    }),
+    id: "00000000-0000-0000-0000-000000000000",
+    type: DatadogAPIClient::V2::PatchTableRequestDataType::REFERENCE_TABLE,
+  }),
+})
+p api_instance.update_reference_table("id", body)

data/examples/v2/roles/ListRoleTemplates.rb

@@ -0,0 +1,8 @@
+# List role templates returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.list_role_templates".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::RolesAPI.new
+p api_instance.list_role_templates()

data/examples/v2/security-monitoring/CreateSecurityMonitoringRule_2899714190.rb

@@ -0,0 +1,68 @@
+# Create a detection rule with detection method 'sequence_detection' returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SecurityMonitoringStandardRuleCreatePayload.new({
+  name: "Example-Security-Monitoring",
+  type: DatadogAPIClient::V2::SecurityMonitoringRuleTypeCreate::LOG_DETECTION,
+  is_enabled: true,
+  queries: [
+    DatadogAPIClient::V2::SecurityMonitoringStandardRuleQuery.new({
+      aggregation: DatadogAPIClient::V2::SecurityMonitoringRuleQueryAggregation::COUNT,
+      data_source: DatadogAPIClient::V2::SecurityMonitoringStandardDataSource::LOGS,
+      distinct_fields: [],
+      group_by_fields: [],
+      has_optional_group_by_fields: false,
+      name: "",
+      query: "service:logs-rule-reducer source:paul test2",
+    }),
+    DatadogAPIClient::V2::SecurityMonitoringStandardRuleQuery.new({
+      aggregation: DatadogAPIClient::V2::SecurityMonitoringRuleQueryAggregation::COUNT,
+      data_source: DatadogAPIClient::V2::SecurityMonitoringStandardDataSource::LOGS,
+      distinct_fields: [],
+      group_by_fields: [],
+      has_optional_group_by_fields: false,
+      name: "",
+      query: "service:logs-rule-reducer source:paul test1",
+    }),
+  ],
+  cases: [
+    DatadogAPIClient::V2::SecurityMonitoringRuleCaseCreate.new({
+      name: "",
+      status: DatadogAPIClient::V2::SecurityMonitoringRuleSeverity::INFO,
+      notifications: [],
+      condition: "step_b > 0",
+    }),
+  ],
+  message: "Logs and signals asdf",
+  options: DatadogAPIClient::V2::SecurityMonitoringRuleOptions.new({
+    detection_method: DatadogAPIClient::V2::SecurityMonitoringRuleDetectionMethod::SEQUENCE_DETECTION,
+    evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::ZERO_MINUTES,
+    keep_alive: DatadogAPIClient::V2::SecurityMonitoringRuleKeepAlive::FIVE_MINUTES,
+    max_signal_duration: DatadogAPIClient::V2::SecurityMonitoringRuleMaxSignalDuration::TEN_MINUTES,
+    sequence_detection_options: DatadogAPIClient::V2::SecurityMonitoringRuleSequenceDetectionOptions.new({
+      step_transitions: [
+        DatadogAPIClient::V2::SecurityMonitoringRuleSequenceDetectionStepTransition.new({
+          child: "step_b",
+          evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::FIFTEEN_MINUTES,
+          parent: "step_a",
+        }),
+      ],
+      steps: [
+        DatadogAPIClient::V2::SecurityMonitoringRuleSequenceDetectionStep.new({
+          condition: "a > 0",
+          evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::ONE_MINUTE,
+          name: "step_a",
+        }),
+        DatadogAPIClient::V2::SecurityMonitoringRuleSequenceDetectionStep.new({
+          condition: "b > 0",
+          evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::ONE_MINUTE,
+          name: "step_b",
+        }),
+      ],
+    }),
+  }),
+  tags: [],
+})
+p api_instance.create_security_monitoring_rule(body)

data/examples/v2/security-monitoring/CreateSecurityMonitoringRule_868881438.rb

@@ -11,7 +11,9 @@ body = DatadogAPIClient::V2::SecurityMonitoringStandardRuleCreatePayload.new({
       aggregation: DatadogAPIClient::V2::SecurityMonitoringRuleQueryAggregation::COUNT,
       group_by_fields: [],
       distinct_fields: [],
-      index: "main",
+      indexes: [
+        "main",
+      ],
     }),
   ],
   filters: [],

data/examples/v2/security-monitoring/ListScannedAssetsMetadata.rb

@@ -0,0 +1,8 @@
+# List scanned assets metadata returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.list_scanned_assets_metadata".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.list_scanned_assets_metadata()

data/examples/v2/security-monitoring/ValidateSecurityMonitoringRule_4152369508.rb

@@ -0,0 +1,70 @@
+# Validate a detection rule with detection method 'sequence_detection' returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SecurityMonitoringStandardRulePayload.new({
+  cases: [
+    DatadogAPIClient::V2::SecurityMonitoringRuleCaseCreate.new({
+      name: "",
+      status: DatadogAPIClient::V2::SecurityMonitoringRuleSeverity::INFO,
+      notifications: [],
+      condition: "step_b > 0",
+    }),
+  ],
+  has_extended_title: true,
+  is_enabled: true,
+  message: "My security monitoring rule",
+  name: "My security monitoring rule",
+  options: DatadogAPIClient::V2::SecurityMonitoringRuleOptions.new({
+    evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::ZERO_MINUTES,
+    keep_alive: DatadogAPIClient::V2::SecurityMonitoringRuleKeepAlive::FIVE_MINUTES,
+    max_signal_duration: DatadogAPIClient::V2::SecurityMonitoringRuleMaxSignalDuration::TEN_MINUTES,
+    detection_method: DatadogAPIClient::V2::SecurityMonitoringRuleDetectionMethod::SEQUENCE_DETECTION,
+    sequence_detection_options: DatadogAPIClient::V2::SecurityMonitoringRuleSequenceDetectionOptions.new({
+      step_transitions: [
+        DatadogAPIClient::V2::SecurityMonitoringRuleSequenceDetectionStepTransition.new({
+          child: "step_b",
+          evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::FIFTEEN_MINUTES,
+          parent: "step_a",
+        }),
+      ],
+      steps: [
+        DatadogAPIClient::V2::SecurityMonitoringRuleSequenceDetectionStep.new({
+          condition: "a > 0",
+          evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::ONE_MINUTE,
+          name: "step_a",
+        }),
+        DatadogAPIClient::V2::SecurityMonitoringRuleSequenceDetectionStep.new({
+          condition: "b > 0",
+          evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::ONE_MINUTE,
+          name: "step_b",
+        }),
+      ],
+    }),
+  }),
+  queries: [
+    DatadogAPIClient::V2::SecurityMonitoringStandardRuleQuery.new({
+      query: "source:source_here",
+      group_by_fields: [
+        "@userIdentity.assumed_role",
+      ],
+      distinct_fields: [],
+      aggregation: DatadogAPIClient::V2::SecurityMonitoringRuleQueryAggregation::COUNT,
+      name: "",
+    }),
+    DatadogAPIClient::V2::SecurityMonitoringStandardRuleQuery.new({
+      query: "source:source_here2",
+      group_by_fields: [],
+      distinct_fields: [],
+      aggregation: DatadogAPIClient::V2::SecurityMonitoringRuleQueryAggregation::COUNT,
+      name: "",
+    }),
+  ],
+  tags: [
+    "env:prod",
+    "team:security",
+  ],
+  type: DatadogAPIClient::V2::SecurityMonitoringRuleTypeCreate::LOG_DETECTION,
+})
+api_instance.validate_security_monitoring_rule(body)