@azure/arm-security 6.0.0-beta.1 → 6.0.0-beta.2

package/dist-esm/src/models/index.d.ts

@@ -6,8 +6,8 @@ export declare type AutomationActionUnion = AutomationAction | AutomationActionL
 export declare type AuthenticationDetailsPropertiesUnion = AuthenticationDetailsProperties | AwsCredsAuthenticationDetailsProperties | AwAssumeRoleAuthenticationDetailsProperties | GcpCredentialsDetailsProperties;
 export declare type ResourceIdentifierUnion = ResourceIdentifier | AzureResourceIdentifier | LogAnalyticsIdentifier;
 export declare type AlertSimulatorRequestPropertiesUnion = AlertSimulatorRequestProperties | AlertSimulatorBundlesRequestProperties;
-export declare type CloudOfferingUnion = CloudOffering | CspmMonitorAwsOffering | DefenderForContainersAwsOffering | DefenderForServersAwsOffering | DefenderFoDatabasesAwsOffering | InformationProtectionAwsOffering | CspmMonitorGcpOffering | DefenderForServersGcpOffering | DefenderForDatabasesGcpOffering | DefenderForContainersGcpOffering | CspmMonitorGithubOffering | CspmMonitorAzureDevOpsOffering;
-export declare type EnvironmentDataUnion = EnvironmentData | AWSEnvironmentData | GcpProjectEnvironmentData | GithubScopeEnvironmentData | AzureDevOpsScopeEnvironmentData;
+export declare type CloudOfferingUnion = CloudOffering | CspmMonitorAwsOffering | DefenderForContainersAwsOffering | DefenderForServersAwsOffering | DefenderFoDatabasesAwsOffering | InformationProtectionAwsOffering | CspmMonitorGcpOffering | DefenderForServersGcpOffering | DefenderForDatabasesGcpOffering | DefenderForContainersGcpOffering | CspmMonitorGithubOffering | CspmMonitorAzureDevOpsOffering | DefenderCspmAwsOffering | DefenderCspmGcpOffering | DefenderForDevOpsGithubOffering | DefenderForDevOpsAzureDevOpsOffering;
+export declare type EnvironmentDataUnion = EnvironmentData | AwsEnvironmentData | GcpProjectEnvironmentData | GithubScopeEnvironmentData | AzureDevOpsScopeEnvironmentData;
 export declare type AwsOrganizationalDataUnion = AwsOrganizationalData | AwsOrganizationalDataMaster | AwsOrganizationalDataMember;
 export declare type GcpOrganizationalDataUnion = GcpOrganizationalData | GcpOrganizationalDataOrganization | GcpOrganizationalDataMember;
 export declare type SettingUnion = Setting | DataExportSettings | AlertSyncSettings;
@@ -1533,7 +1533,7 @@ export interface SecurityConnectorsList {
 /** The security offering details */
 export interface CloudOffering {
     /** Polymorphic discriminator, which specifies the different types this object can be */
-    offeringType: "CspmMonitorAws" | "DefenderForContainersAws" | "DefenderForServersAws" | "DefenderForDatabasesAws" | "InformationProtectionAws" | "CspmMonitorGcp" | "DefenderForServersGcp" | "DefenderForDatabasesGcp" | "DefenderForContainersGcp" | "CspmMonitorGithub" | "CspmMonitorAzureDevOps";
+    offeringType: "CspmMonitorAws" | "DefenderForContainersAws" | "DefenderForServersAws" | "DefenderForDatabasesAws" | "InformationProtectionAws" | "CspmMonitorGcp" | "DefenderForServersGcp" | "DefenderForDatabasesGcp" | "DefenderForContainersGcp" | "CspmMonitorGithub" | "CspmMonitorAzureDevOps" | "DefenderCspmAws" | "DefenderCspmGcp" | "DefenderForDevOpsGithub" | "DefenderForDevOpsAzureDevOps";
     /**
      * The offering description.
      * NOTE: This property will not be serialized. It can only be populated by the server.
@@ -1634,6 +1634,52 @@ export interface ApplicationsList {
      */
     readonly nextLink?: string;
 }
+/** Page of a list of API collections as represented by Defender for APIs. */
+export interface ApiCollectionResponseList {
+    /**
+     * API collections in this page.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly value?: ApiCollectionResponse[];
+    /**
+     * The URI to fetch the next page.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly nextLink?: string;
+}
+/** Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.). */
+export interface ErrorResponse {
+    /** The error object. */
+    error?: ErrorDetail;
+}
+/** The error detail. */
+export interface ErrorDetail {
+    /**
+     * The error code.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly code?: string;
+    /**
+     * The error message.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly message?: string;
+    /**
+     * The error target.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly target?: string;
+    /**
+     * The error details.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly details?: ErrorDetail[];
+    /**
+     * The error additional info.
+     * NOTE: This property will not be serialized. It can only be populated by the server.
+     */
+    readonly additionalInfo?: ErrorAdditionalInfo[];
+}
 /** CVSS details */
 export interface Cvss {
     /**
@@ -1773,17 +1819,6 @@ export interface DefenderForServersAwsOfferingArcAutoProvisioning {
     enabled?: boolean;
     /** The cloud role ARN in AWS for this feature */
     cloudRoleArn?: string;
-    /** Metadata of Service Principal secret for autoprovisioning */
-    servicePrincipalSecretMetadata?: DefenderForServersAwsOfferingArcAutoProvisioningServicePrincipalSecretMetadata;
-}
-/** Metadata of Service Principal secret for autoprovisioning */
-export interface DefenderForServersAwsOfferingArcAutoProvisioningServicePrincipalSecretMetadata {
-    /** expiration date of service principal secret */
-    expiryDate?: string;
-    /** region of parameter store where secret is kept */
-    parameterStoreRegion?: string;
-    /** name of secret resource in parameter store */
-    parameterNameInStore?: string;
 }
 /** The Vulnerability Assessment autoprovisioning configuration */
 export interface DefenderForServersAwsOfferingVaAutoProvisioning {
@@ -1823,7 +1858,9 @@ export interface DefenderForServersAwsOfferingVmScannersConfiguration {
     /** The scanning mode for the vm scan. */
     scanningMode?: ScanningMode;
     /** VM tags that indicates that VM should not be scanned */
-    exclusionTags?: Record<string, unknown>;
+    exclusionTags?: {
+        [propertyName: string]: string;
+    };
 }
 /** The ARC autoprovisioning configuration */
 export interface DefenderFoDatabasesAwsOfferingArcAutoProvisioning {
@@ -1831,17 +1868,13 @@ export interface DefenderFoDatabasesAwsOfferingArcAutoProvisioning {
     enabled?: boolean;
     /** The cloud role ARN in AWS for this feature */
     cloudRoleArn?: string;
-    /** Metadata of Service Principal secret for autoprovisioning */
-    servicePrincipalSecretMetadata?: DefenderFoDatabasesAwsOfferingArcAutoProvisioningServicePrincipalSecretMetadata;
-}
-/** Metadata of Service Principal secret for autoprovisioning */
-export interface DefenderFoDatabasesAwsOfferingArcAutoProvisioningServicePrincipalSecretMetadata {
-    /** expiration date of service principal secret */
-    expiryDate?: Date;
-    /** region of parameter store where secret is kept */
-    parameterStoreRegion?: string;
-    /** name of secret resource in parameter store */
-    parameterNameInStore?: string;
+}
+/** The RDS configuration */
+export interface DefenderFoDatabasesAwsOfferingRds {
+    /** Is RDS protection enabled */
+    enabled?: boolean;
+    /** The cloud role ARN in AWS for this feature */
+    cloudRoleArn?: string;
 }
 /** The native cloud connection configuration */
 export interface InformationProtectionAwsOfferingInformationProtection {
@@ -1866,15 +1899,6 @@ export interface DefenderForServersGcpOfferingDefenderForServers {
 export interface DefenderForServersGcpOfferingArcAutoProvisioning {
     /** Is arc auto provisioning enabled */
     enabled?: boolean;
-    /** Configuration for ARC autoprovisioning */
-    configuration?: DefenderForServersGcpOfferingArcAutoProvisioningConfiguration;
-}
-/** Configuration for ARC autoprovisioning */
-export interface DefenderForServersGcpOfferingArcAutoProvisioningConfiguration {
-    /** The Azure service principal client id for agent onboarding */
-    clientId?: string;
-    /** The agent onboarding service account numeric id */
-    agentOnboardingServiceAccountNumericId?: string;
 }
 /** The Vulnerability Assessment autoprovisioning configuration */
 export interface DefenderForServersGcpOfferingVaAutoProvisioning {
@@ -1904,15 +1928,6 @@ export interface DefenderForServersGcpOfferingSubPlan {
 export interface DefenderForDatabasesGcpOfferingArcAutoProvisioning {
     /** Is arc auto provisioning enabled */
     enabled?: boolean;
-    /** Configuration for ARC autoprovisioning */
-    configuration?: DefenderForDatabasesGcpOfferingArcAutoProvisioningConfiguration;
-}
-/** Configuration for ARC autoprovisioning */
-export interface DefenderForDatabasesGcpOfferingArcAutoProvisioningConfiguration {
-    /** The Azure service principal client id for agent onboarding */
-    clientId?: string;
-    /** The agent onboarding service account numeric id */
-    agentOnboardingServiceAccountNumericId?: string;
 }
 /** The native cloud connection configuration */
 export interface DefenderForDatabasesGcpOfferingDefenderForDatabasesArcAutoProvisioning {
@@ -1935,6 +1950,24 @@ export interface DefenderForContainersGcpOfferingDataPipelineNativeCloudConnecti
     /** The data collection GCP workload identity provider id for this offering */
     workloadIdentityProviderId?: string;
 }
+/** The Microsoft Defender for Server VM scanning configuration */
+export interface DefenderCspmAwsOfferingVmScanners {
+    /** Is Microsoft Defender for Server VM scanning enabled */
+    enabled?: boolean;
+    /** configuration for Microsoft Defender for Server VM scanning */
+    configuration?: DefenderCspmAwsOfferingVmScannersConfiguration;
+}
+/** configuration for Microsoft Defender for Server VM scanning */
+export interface DefenderCspmAwsOfferingVmScannersConfiguration {
+    /** The cloud role ARN in AWS for this feature */
+    cloudRoleArn?: string;
+    /** The scanning mode for the vm scan. */
+    scanningMode?: ScanningMode;
+    /** VM tags that indicates that VM should not be scanned */
+    exclusionTags?: {
+        [propertyName: string]: string;
+    };
+}
 /** Governance rule's condition */
 export interface Condition {
     /** The governance rule Condition's Property, e.g. Severity or AssessmentKey, see examples */
@@ -3020,6 +3053,15 @@ export interface Application extends Resource {
     /** The application conditionSets - see examples */
     conditionSets?: Record<string, unknown>[];
 }
+/** An API collection as represented by Defender for APIs. */
+export interface ApiCollectionResponse extends Resource {
+    /** The display name of the Azure API Management API. */
+    displayName?: string;
+    /** Additional data regarding the API collection. */
+    additionalData?: {
+        [propertyName: string]: string;
+    };
+}
 /** Security assessment metadata */
 export interface SecurityAssessmentMetadata extends Resource {
     /** User friendly display name of the assessment */
@@ -3406,6 +3448,8 @@ export interface DefenderFoDatabasesAwsOffering extends CloudOffering {
     offeringType: "DefenderForDatabasesAws";
     /** The ARC autoprovisioning configuration */
     arcAutoProvisioning?: DefenderFoDatabasesAwsOfferingArcAutoProvisioning;
+    /** The RDS configuration */
+    rds?: DefenderFoDatabasesAwsOfferingRds;
 }
 /** The information protection for AWS offering */
 export interface InformationProtectionAwsOffering extends CloudOffering {
@@ -3470,8 +3514,30 @@ export interface CspmMonitorAzureDevOpsOffering extends CloudOffering {
     /** Polymorphic discriminator, which specifies the different types this object can be */
     offeringType: "CspmMonitorAzureDevOps";
 }
+/** The CSPM P1 for Aws offering */
+export interface DefenderCspmAwsOffering extends CloudOffering {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    offeringType: "DefenderCspmAws";
+    /** The Microsoft Defender for Server VM scanning configuration */
+    vmScanners?: DefenderCspmAwsOfferingVmScanners;
+}
+/** The CSPM P1 for GCP offering */
+export interface DefenderCspmGcpOffering extends CloudOffering {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    offeringType: "DefenderCspmGcp";
+}
+/** The Defender for DevOps for Github offering */
+export interface DefenderForDevOpsGithubOffering extends CloudOffering {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    offeringType: "DefenderForDevOpsGithub";
+}
+/** The Defender for DevOps for Azure DevOps offering */
+export interface DefenderForDevOpsAzureDevOpsOffering extends CloudOffering {
+    /** Polymorphic discriminator, which specifies the different types this object can be */
+    offeringType: "DefenderForDevOpsAzureDevOps";
+}
 /** The aws connector environment data */
-export interface AWSEnvironmentData extends EnvironmentData {
+export interface AwsEnvironmentData extends EnvironmentData {
     /** Polymorphic discriminator, which specifies the different types this object can be */
     environmentType: "AwsAccount";
     /** The AWS account's organizational data */
@@ -5732,7 +5798,15 @@ export declare enum KnownOfferingType {
     /** DefenderForContainersGcp */
     DefenderForContainersGcp = "DefenderForContainersGcp",
     /** DefenderForDatabasesGcp */
-    DefenderForDatabasesGcp = "DefenderForDatabasesGcp"
+    DefenderForDatabasesGcp = "DefenderForDatabasesGcp",
+    /** DefenderCspmAws */
+    DefenderCspmAws = "DefenderCspmAws",
+    /** DefenderCspmGcp */
+    DefenderCspmGcp = "DefenderCspmGcp",
+    /** DefenderForDevOpsGithub */
+    DefenderForDevOpsGithub = "DefenderForDevOpsGithub",
+    /** DefenderForDevOpsAzureDevOps */
+    DefenderForDevOpsAzureDevOps = "DefenderForDevOpsAzureDevOps"
 }
 /**
  * Defines values for OfferingType. \
@@ -5749,7 +5823,11 @@ export declare enum KnownOfferingType {
  * **CspmMonitorAzureDevOps** \
  * **DefenderForServersGcp** \
  * **DefenderForContainersGcp** \
- * **DefenderForDatabasesGcp**
+ * **DefenderForDatabasesGcp** \
+ * **DefenderCspmAws** \
+ * **DefenderCspmGcp** \
+ * **DefenderForDevOpsGithub** \
+ * **DefenderForDevOpsAzureDevOps**
  */
 export declare type OfferingType = string;
 /** Known values of {@link EnvironmentType} that the service accepts. */
@@ -5969,6 +6047,8 @@ export declare type GovernanceRuleConditionOperator = string;
 export declare enum KnownApplicationConditionOperator {
     /** Checks that the string value of the data defined in Property contains the given value */
     Contains = "Contains",
+    /** Checks that the string value of the data defined in Property equals the given value */
+    Equals = "Equals",
     /** Checks that the string value of the data defined in Property equals any of the given values (exact fit) */
     In = "In"
 }
@@ -5978,6 +6058,7 @@ export declare enum KnownApplicationConditionOperator {
  *  this enum contains the known values that the service supports.
  * ### Known values supported by the service
  * **Contains**: Checks that the string value of the data defined in Property contains the given value \
+ * **Equals**: Checks that the string value of the data defined in Property equals the given value \
  * **In**: Checks that the string value of the data defined in Property equals any of the given values (exact fit)
  */
 export declare type ApplicationConditionOperator = string;
@@ -7355,6 +7436,29 @@ export declare type SecurityConnectorApplicationCreateOrUpdateResponse = Applica
 export interface SecurityConnectorApplicationDeleteOptionalParams extends coreClient.OperationOptions {
 }
 /** Optional parameters. */
+export interface APICollectionListOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the list operation. */
+export declare type APICollectionListResponse = ApiCollectionResponseList;
+/** Optional parameters. */
+export interface APICollectionGetOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the get operation. */
+export declare type APICollectionGetResponse = ApiCollectionResponse;
+/** Optional parameters. */
+export interface APICollectionListNextOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the listNext operation. */
+export declare type APICollectionListNextResponse = ApiCollectionResponseList;
+/** Optional parameters. */
+export interface APICollectionOnboardingCreateOptionalParams extends coreClient.OperationOptions {
+}
+/** Contains response data for the create operation. */
+export declare type APICollectionOnboardingCreateResponse = ApiCollectionResponse;
+/** Optional parameters. */
+export interface APICollectionOffboardingDeleteOptionalParams extends coreClient.OperationOptions {
+}
+/** Optional parameters. */
 export interface SecurityCenterOptionalParams extends coreClient.ServiceClientOptions {
     /** server parameter */
     $host?: string;