@azure/arm-securityinsight 1.0.0-beta.1 → 1.0.0-beta.4

package/src/operations/incidentRelations.ts

@@ -280,8 +280,8 @@ const getOperationSpec: coreClient.OperationSpec = {
     Parameters.subscriptionId,
     Parameters.resourceGroupName,
     Parameters.workspaceName,
-    Parameters.relationName,
-    Parameters.incidentId
+    Parameters.incidentId,
+    Parameters.relationName
   ],
   headerParameters: [Parameters.accept],
   serializer
@@ -308,8 +308,8 @@ const createOrUpdateOperationSpec: coreClient.OperationSpec = {
     Parameters.subscriptionId,
     Parameters.resourceGroupName,
     Parameters.workspaceName,
-    Parameters.relationName,
-    Parameters.incidentId
+    Parameters.incidentId,
+    Parameters.relationName
   ],
   headerParameters: [Parameters.accept, Parameters.contentType],
   mediaType: "json",
@@ -332,8 +332,8 @@ const deleteOperationSpec: coreClient.OperationSpec = {
     Parameters.subscriptionId,
     Parameters.resourceGroupName,
     Parameters.workspaceName,
-    Parameters.relationName,
-    Parameters.incidentId
+    Parameters.incidentId,
+    Parameters.relationName
   ],
   headerParameters: [Parameters.accept],
   serializer

package/src/operations/incidents.ts

@@ -16,6 +16,8 @@ import {
   Incident,
   IncidentsListNextOptionalParams,
   IncidentsListOptionalParams,
+  IncidentsRunPlaybookOptionalParams,
+  IncidentsRunPlaybookResponse,
   IncidentsListResponse,
   IncidentsGetOptionalParams,
   IncidentsGetResponse,
@@ -106,6 +108,25 @@ export class IncidentsImpl implements Incidents {
     }
   }
 
+  /**
+   * Triggers playbook on a specific incident
+   * @param resourceGroupName The name of the resource group. The name is case insensitive.
+   * @param workspaceName The name of the workspace.
+   * @param incidentIdentifier
+   * @param options The options parameters.
+   */
+  runPlaybook(
+    resourceGroupName: string,
+    workspaceName: string,
+    incidentIdentifier: string,
+    options?: IncidentsRunPlaybookOptionalParams
+  ): Promise<IncidentsRunPlaybookResponse> {
+    return this.client.sendOperationRequest(
+      { resourceGroupName, workspaceName, incidentIdentifier, options },
+      runPlaybookOperationSpec
+    );
+  }
+
   /**
    * Gets all incidents.
    * @param resourceGroupName The name of the resource group. The name is case insensitive.
@@ -283,6 +304,33 @@ export class IncidentsImpl implements Incidents {
 // Operation Specifications
 const serializer = coreClient.createSerializer(Mappers, /* isXml */ false);
 
+const runPlaybookOperationSpec: coreClient.OperationSpec = {
+  path:
+    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents/{incidentIdentifier}/runPlaybook",
+  httpMethod: "POST",
+  responses: {
+    204: {
+      bodyMapper: {
+        type: { name: "Dictionary", value: { type: { name: "any" } } }
+      }
+    },
+    default: {
+      bodyMapper: Mappers.CloudError
+    }
+  },
+  requestBody: Parameters.requestBody,
+  queryParameters: [Parameters.apiVersion],
+  urlParameters: [
+    Parameters.$host,
+    Parameters.subscriptionId,
+    Parameters.resourceGroupName,
+    Parameters.workspaceName,
+    Parameters.incidentIdentifier
+  ],
+  headerParameters: [Parameters.accept, Parameters.contentType],
+  mediaType: "json",
+  serializer
+};
 const listOperationSpec: coreClient.OperationSpec = {
   path:
     "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/incidents",

package/src/operations/index.ts

@@ -10,31 +10,32 @@ export * from "./alertRules";
 export * from "./actions";
 export * from "./alertRuleTemplates";
 export * from "./automationRules";
+export * from "./incidents";
 export * from "./bookmarks";
 export * from "./bookmarkRelations";
 export * from "./bookmarkOperations";
 export * from "./iPGeodata";
 export * from "./domainWhois";
-export * from "./entityQueries";
 export * from "./entities";
 export * from "./entitiesGetTimeline";
 export * from "./entitiesRelations";
 export * from "./entityRelations";
-export * from "./incidents";
+export * from "./entityQueries";
+export * from "./entityQueryTemplates";
 export * from "./incidentComments";
 export * from "./incidentRelations";
 export * from "./metadata";
+export * from "./officeConsents";
 export * from "./sentinelOnboardingStates";
+export * from "./securityMLAnalyticsSettings";
 export * from "./productSettings";
 export * from "./sourceControlOperations";
 export * from "./sourceControls";
+export * from "./threatIntelligenceIndicator";
+export * from "./threatIntelligenceIndicators";
+export * from "./threatIntelligenceIndicatorMetrics";
 export * from "./watchlists";
 export * from "./watchlistItems";
 export * from "./dataConnectors";
 export * from "./dataConnectorsCheckRequirementsOperations";
-export * from "./threatIntelligenceIndicator";
-export * from "./threatIntelligenceIndicators";
-export * from "./threatIntelligenceIndicatorMetrics";
 export * from "./operations";
-export * from "./officeConsents";
-export * from "./entityQueryTemplates";

package/src/operations/securityMLAnalyticsSettings.ts

@@ -0,0 +1,321 @@
+/*
+ * Copyright (c) Microsoft Corporation.
+ * Licensed under the MIT License.
+ *
+ * Code generated by Microsoft (R) AutoRest Code Generator.
+ * Changes may cause incorrect behavior and will be lost if the code is regenerated.
+ */
+
+import { PagedAsyncIterableIterator } from "@azure/core-paging";
+import { SecurityMLAnalyticsSettings } from "../operationsInterfaces";
+import * as coreClient from "@azure/core-client";
+import * as Mappers from "../models/mappers";
+import * as Parameters from "../models/parameters";
+import { SecurityInsights } from "../securityInsights";
+import {
+  SecurityMLAnalyticsSettingUnion,
+  SecurityMLAnalyticsSettingsListNextOptionalParams,
+  SecurityMLAnalyticsSettingsListOptionalParams,
+  SecurityMLAnalyticsSettingsListResponse,
+  SecurityMLAnalyticsSettingsGetOptionalParams,
+  SecurityMLAnalyticsSettingsGetResponse,
+  SecurityMLAnalyticsSettingsCreateOrUpdateOptionalParams,
+  SecurityMLAnalyticsSettingsCreateOrUpdateResponse,
+  SecurityMLAnalyticsSettingsDeleteOptionalParams,
+  SecurityMLAnalyticsSettingsListNextResponse
+} from "../models";
+
+/// <reference lib="esnext.asynciterable" />
+/** Class containing SecurityMLAnalyticsSettings operations. */
+export class SecurityMLAnalyticsSettingsImpl
+  implements SecurityMLAnalyticsSettings {
+  private readonly client: SecurityInsights;
+
+  /**
+   * Initialize a new instance of the class SecurityMLAnalyticsSettings class.
+   * @param client Reference to the service client
+   */
+  constructor(client: SecurityInsights) {
+    this.client = client;
+  }
+
+  /**
+   * Gets all Security ML Analytics Settings.
+   * @param resourceGroupName The name of the resource group. The name is case insensitive.
+   * @param workspaceName The name of the workspace.
+   * @param options The options parameters.
+   */
+  public list(
+    resourceGroupName: string,
+    workspaceName: string,
+    options?: SecurityMLAnalyticsSettingsListOptionalParams
+  ): PagedAsyncIterableIterator<SecurityMLAnalyticsSettingUnion> {
+    const iter = this.listPagingAll(resourceGroupName, workspaceName, options);
+    return {
+      next() {
+        return iter.next();
+      },
+      [Symbol.asyncIterator]() {
+        return this;
+      },
+      byPage: () => {
+        return this.listPagingPage(resourceGroupName, workspaceName, options);
+      }
+    };
+  }
+
+  private async *listPagingPage(
+    resourceGroupName: string,
+    workspaceName: string,
+    options?: SecurityMLAnalyticsSettingsListOptionalParams
+  ): AsyncIterableIterator<SecurityMLAnalyticsSettingUnion[]> {
+    let result = await this._list(resourceGroupName, workspaceName, options);
+    yield result.value || [];
+    let continuationToken = result.nextLink;
+    while (continuationToken) {
+      result = await this._listNext(
+        resourceGroupName,
+        workspaceName,
+        continuationToken,
+        options
+      );
+      continuationToken = result.nextLink;
+      yield result.value || [];
+    }
+  }
+
+  private async *listPagingAll(
+    resourceGroupName: string,
+    workspaceName: string,
+    options?: SecurityMLAnalyticsSettingsListOptionalParams
+  ): AsyncIterableIterator<SecurityMLAnalyticsSettingUnion> {
+    for await (const page of this.listPagingPage(
+      resourceGroupName,
+      workspaceName,
+      options
+    )) {
+      yield* page;
+    }
+  }
+
+  /**
+   * Gets all Security ML Analytics Settings.
+   * @param resourceGroupName The name of the resource group. The name is case insensitive.
+   * @param workspaceName The name of the workspace.
+   * @param options The options parameters.
+   */
+  private _list(
+    resourceGroupName: string,
+    workspaceName: string,
+    options?: SecurityMLAnalyticsSettingsListOptionalParams
+  ): Promise<SecurityMLAnalyticsSettingsListResponse> {
+    return this.client.sendOperationRequest(
+      { resourceGroupName, workspaceName, options },
+      listOperationSpec
+    );
+  }
+
+  /**
+   * Gets the Security ML Analytics Settings.
+   * @param resourceGroupName The name of the resource group. The name is case insensitive.
+   * @param workspaceName The name of the workspace.
+   * @param settingsResourceName Security ML Analytics Settings resource name
+   * @param options The options parameters.
+   */
+  get(
+    resourceGroupName: string,
+    workspaceName: string,
+    settingsResourceName: string,
+    options?: SecurityMLAnalyticsSettingsGetOptionalParams
+  ): Promise<SecurityMLAnalyticsSettingsGetResponse> {
+    return this.client.sendOperationRequest(
+      { resourceGroupName, workspaceName, settingsResourceName, options },
+      getOperationSpec
+    );
+  }
+
+  /**
+   * Creates or updates the Security ML Analytics Settings.
+   * @param resourceGroupName The name of the resource group. The name is case insensitive.
+   * @param workspaceName The name of the workspace.
+   * @param settingsResourceName Security ML Analytics Settings resource name
+   * @param securityMLAnalyticsSetting The security ML Analytics setting
+   * @param options The options parameters.
+   */
+  createOrUpdate(
+    resourceGroupName: string,
+    workspaceName: string,
+    settingsResourceName: string,
+    securityMLAnalyticsSetting: SecurityMLAnalyticsSettingUnion,
+    options?: SecurityMLAnalyticsSettingsCreateOrUpdateOptionalParams
+  ): Promise<SecurityMLAnalyticsSettingsCreateOrUpdateResponse> {
+    return this.client.sendOperationRequest(
+      {
+        resourceGroupName,
+        workspaceName,
+        settingsResourceName,
+        securityMLAnalyticsSetting,
+        options
+      },
+      createOrUpdateOperationSpec
+    );
+  }
+
+  /**
+   * Delete the Security ML Analytics Settings.
+   * @param resourceGroupName The name of the resource group. The name is case insensitive.
+   * @param workspaceName The name of the workspace.
+   * @param settingsResourceName Security ML Analytics Settings resource name
+   * @param options The options parameters.
+   */
+  delete(
+    resourceGroupName: string,
+    workspaceName: string,
+    settingsResourceName: string,
+    options?: SecurityMLAnalyticsSettingsDeleteOptionalParams
+  ): Promise<void> {
+    return this.client.sendOperationRequest(
+      { resourceGroupName, workspaceName, settingsResourceName, options },
+      deleteOperationSpec
+    );
+  }
+
+  /**
+   * ListNext
+   * @param resourceGroupName The name of the resource group. The name is case insensitive.
+   * @param workspaceName The name of the workspace.
+   * @param nextLink The nextLink from the previous successful call to the List method.
+   * @param options The options parameters.
+   */
+  private _listNext(
+    resourceGroupName: string,
+    workspaceName: string,
+    nextLink: string,
+    options?: SecurityMLAnalyticsSettingsListNextOptionalParams
+  ): Promise<SecurityMLAnalyticsSettingsListNextResponse> {
+    return this.client.sendOperationRequest(
+      { resourceGroupName, workspaceName, nextLink, options },
+      listNextOperationSpec
+    );
+  }
+}
+// Operation Specifications
+const serializer = coreClient.createSerializer(Mappers, /* isXml */ false);
+
+const listOperationSpec: coreClient.OperationSpec = {
+  path:
+    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/securityMLAnalyticsSettings",
+  httpMethod: "GET",
+  responses: {
+    200: {
+      bodyMapper: Mappers.SecurityMLAnalyticsSettingsList
+    },
+    default: {
+      bodyMapper: Mappers.CloudError
+    }
+  },
+  queryParameters: [Parameters.apiVersion],
+  urlParameters: [
+    Parameters.$host,
+    Parameters.subscriptionId,
+    Parameters.resourceGroupName,
+    Parameters.workspaceName
+  ],
+  headerParameters: [Parameters.accept],
+  serializer
+};
+const getOperationSpec: coreClient.OperationSpec = {
+  path:
+    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/securityMLAnalyticsSettings/{settingsResourceName}",
+  httpMethod: "GET",
+  responses: {
+    200: {
+      bodyMapper: Mappers.SecurityMLAnalyticsSetting
+    },
+    default: {
+      bodyMapper: Mappers.CloudError
+    }
+  },
+  queryParameters: [Parameters.apiVersion],
+  urlParameters: [
+    Parameters.$host,
+    Parameters.subscriptionId,
+    Parameters.resourceGroupName,
+    Parameters.workspaceName,
+    Parameters.settingsResourceName
+  ],
+  headerParameters: [Parameters.accept],
+  serializer
+};
+const createOrUpdateOperationSpec: coreClient.OperationSpec = {
+  path:
+    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/securityMLAnalyticsSettings/{settingsResourceName}",
+  httpMethod: "PUT",
+  responses: {
+    200: {
+      bodyMapper: Mappers.SecurityMLAnalyticsSetting
+    },
+    201: {
+      bodyMapper: Mappers.SecurityMLAnalyticsSetting
+    },
+    default: {
+      bodyMapper: Mappers.CloudError
+    }
+  },
+  requestBody: Parameters.securityMLAnalyticsSetting,
+  queryParameters: [Parameters.apiVersion],
+  urlParameters: [
+    Parameters.$host,
+    Parameters.subscriptionId,
+    Parameters.resourceGroupName,
+    Parameters.workspaceName,
+    Parameters.settingsResourceName
+  ],
+  headerParameters: [Parameters.accept, Parameters.contentType],
+  mediaType: "json",
+  serializer
+};
+const deleteOperationSpec: coreClient.OperationSpec = {
+  path:
+    "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/securityMLAnalyticsSettings/{settingsResourceName}",
+  httpMethod: "DELETE",
+  responses: {
+    200: {},
+    204: {},
+    default: {
+      bodyMapper: Mappers.CloudError
+    }
+  },
+  queryParameters: [Parameters.apiVersion],
+  urlParameters: [
+    Parameters.$host,
+    Parameters.subscriptionId,
+    Parameters.resourceGroupName,
+    Parameters.workspaceName,
+    Parameters.settingsResourceName
+  ],
+  headerParameters: [Parameters.accept],
+  serializer
+};
+const listNextOperationSpec: coreClient.OperationSpec = {
+  path: "{nextLink}",
+  httpMethod: "GET",
+  responses: {
+    200: {
+      bodyMapper: Mappers.SecurityMLAnalyticsSettingsList
+    },
+    default: {
+      bodyMapper: Mappers.CloudError
+    }
+  },
+  queryParameters: [Parameters.apiVersion],
+  urlParameters: [
+    Parameters.$host,
+    Parameters.subscriptionId,
+    Parameters.resourceGroupName,
+    Parameters.workspaceName,
+    Parameters.nextLink
+  ],
+  headerParameters: [Parameters.accept],
+  serializer
+};

package/src/operations/threatIntelligenceIndicator.ts

@@ -17,7 +17,7 @@ import {
   ThreatIntelligenceFilteringCriteria,
   ThreatIntelligenceIndicatorQueryIndicatorsNextOptionalParams,
   ThreatIntelligenceIndicatorQueryIndicatorsOptionalParams,
-  ThreatIntelligenceIndicatorModelForRequestBody,
+  ThreatIntelligenceIndicatorModel,
   ThreatIntelligenceIndicatorCreateIndicatorOptionalParams,
   ThreatIntelligenceIndicatorCreateIndicatorResponse,
   ThreatIntelligenceIndicatorGetOptionalParams,
@@ -139,7 +139,7 @@ export class ThreatIntelligenceIndicatorImpl
   createIndicator(
     resourceGroupName: string,
     workspaceName: string,
-    threatIntelligenceProperties: ThreatIntelligenceIndicatorModelForRequestBody,
+    threatIntelligenceProperties: ThreatIntelligenceIndicatorModel,
     options?: ThreatIntelligenceIndicatorCreateIndicatorOptionalParams
   ): Promise<ThreatIntelligenceIndicatorCreateIndicatorResponse> {
     return this.client.sendOperationRequest(
@@ -185,7 +185,7 @@ export class ThreatIntelligenceIndicatorImpl
     resourceGroupName: string,
     workspaceName: string,
     name: string,
-    threatIntelligenceProperties: ThreatIntelligenceIndicatorModelForRequestBody,
+    threatIntelligenceProperties: ThreatIntelligenceIndicatorModel,
     options?: ThreatIntelligenceIndicatorCreateOptionalParams
   ): Promise<ThreatIntelligenceIndicatorCreateResponse> {
     return this.client.sendOperationRequest(
@@ -283,7 +283,7 @@ export class ThreatIntelligenceIndicatorImpl
     resourceGroupName: string,
     workspaceName: string,
     name: string,
-    threatIntelligenceReplaceTags: ThreatIntelligenceIndicatorModelForRequestBody,
+    threatIntelligenceReplaceTags: ThreatIntelligenceIndicatorModel,
     options?: ThreatIntelligenceIndicatorReplaceTagsOptionalParams
   ): Promise<ThreatIntelligenceIndicatorReplaceTagsResponse> {
     return this.client.sendOperationRequest(

package/src/operations/watchlistItems.ts

@@ -257,7 +257,7 @@ const listOperationSpec: coreClient.OperationSpec = {
       bodyMapper: Mappers.CloudError
     }
   },
-  queryParameters: [Parameters.apiVersion],
+  queryParameters: [Parameters.apiVersion, Parameters.skipToken],
   urlParameters: [
     Parameters.$host,
     Parameters.subscriptionId,
@@ -355,7 +355,7 @@ const listNextOperationSpec: coreClient.OperationSpec = {
       bodyMapper: Mappers.CloudError
     }
   },
-  queryParameters: [Parameters.apiVersion],
+  queryParameters: [Parameters.apiVersion, Parameters.skipToken],
   urlParameters: [
     Parameters.$host,
     Parameters.subscriptionId,

package/src/operations/watchlists.ts

@@ -20,6 +20,7 @@ import {
   WatchlistsGetOptionalParams,
   WatchlistsGetResponse,
   WatchlistsDeleteOptionalParams,
+  WatchlistsDeleteResponse,
   WatchlistsCreateOrUpdateOptionalParams,
   WatchlistsCreateOrUpdateResponse,
   WatchlistsListNextResponse
@@ -145,7 +146,7 @@ export class WatchlistsImpl implements Watchlists {
     workspaceName: string,
     watchlistAlias: string,
     options?: WatchlistsDeleteOptionalParams
-  ): Promise<void> {
+  ): Promise<WatchlistsDeleteResponse> {
     return this.client.sendOperationRequest(
       { resourceGroupName, workspaceName, watchlistAlias, options },
       deleteOperationSpec
@@ -153,9 +154,12 @@ export class WatchlistsImpl implements Watchlists {
   }
 
   /**
-   * Creates or updates a watchlist and its watchlist items (bulk creation, e.g. through text/csv content
-   * type). To create a Watchlist and its items, we should call this endpoint with rawContent and
-   * contentType properties.
+   * Create or update a Watchlist and its Watchlist Items (bulk creation, e.g. through text/csv content
+   * type). To create a Watchlist and its Items, we should call this endpoint with either rawContent or a
+   * valid SAR URI and contentType properties. The rawContent is mainly used for small watchlist (content
+   * size below 3.8 MB). The SAS URI enables the creation of large watchlist, where the content size can
+   * go up to 500 MB. The status of processing such large file can be polled through the URL returned in
+   * Azure-AsyncOperation header.
    * @param resourceGroupName The name of the resource group. The name is case insensitive.
    * @param workspaceName The name of the workspace.
    * @param watchlistAlias Watchlist Alias
@@ -209,7 +213,7 @@ const listOperationSpec: coreClient.OperationSpec = {
       bodyMapper: Mappers.CloudError
     }
   },
-  queryParameters: [Parameters.apiVersion],
+  queryParameters: [Parameters.apiVersion, Parameters.skipToken],
   urlParameters: [
     Parameters.$host,
     Parameters.subscriptionId,
@@ -247,7 +251,9 @@ const deleteOperationSpec: coreClient.OperationSpec = {
     "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/watchlists/{watchlistAlias}",
   httpMethod: "DELETE",
   responses: {
-    200: {},
+    200: {
+      headersMapper: Mappers.WatchlistsDeleteHeaders
+    },
     204: {},
     default: {
       bodyMapper: Mappers.CloudError
@@ -273,7 +279,8 @@ const createOrUpdateOperationSpec: coreClient.OperationSpec = {
       bodyMapper: Mappers.Watchlist
     },
     201: {
-      bodyMapper: Mappers.Watchlist
+      bodyMapper: Mappers.Watchlist,
+      headersMapper: Mappers.WatchlistsCreateOrUpdateHeaders
     },
     default: {
       bodyMapper: Mappers.CloudError
@@ -303,7 +310,7 @@ const listNextOperationSpec: coreClient.OperationSpec = {
       bodyMapper: Mappers.CloudError
     }
   },
-  queryParameters: [Parameters.apiVersion],
+  queryParameters: [Parameters.apiVersion, Parameters.skipToken],
   urlParameters: [
     Parameters.$host,
     Parameters.subscriptionId,

package/src/operationsInterfaces/automationRules.ts

@@ -14,7 +14,8 @@ import {
   AutomationRulesGetResponse,
   AutomationRulesCreateOrUpdateOptionalParams,
   AutomationRulesCreateOrUpdateResponse,
-  AutomationRulesDeleteOptionalParams
+  AutomationRulesDeleteOptionalParams,
+  AutomationRulesDeleteResponse
 } from "../models";
 
 /// <reference lib="esnext.asynciterable" />
@@ -49,14 +50,12 @@ export interface AutomationRules {
    * @param resourceGroupName The name of the resource group. The name is case insensitive.
    * @param workspaceName The name of the workspace.
    * @param automationRuleId Automation rule ID
-   * @param automationRule The automation rule
    * @param options The options parameters.
    */
   createOrUpdate(
     resourceGroupName: string,
     workspaceName: string,
     automationRuleId: string,
-    automationRule: AutomationRule,
     options?: AutomationRulesCreateOrUpdateOptionalParams
   ): Promise<AutomationRulesCreateOrUpdateResponse>;
   /**
@@ -71,5 +70,5 @@ export interface AutomationRules {
     workspaceName: string,
     automationRuleId: string,
     options?: AutomationRulesDeleteOptionalParams
-  ): Promise<void>;
+  ): Promise<AutomationRulesDeleteResponse>;
 }

package/src/operationsInterfaces/incidents.ts

@@ -10,6 +10,8 @@ import { PagedAsyncIterableIterator } from "@azure/core-paging";
 import {
   Incident,
   IncidentsListOptionalParams,
+  IncidentsRunPlaybookOptionalParams,
+  IncidentsRunPlaybookResponse,
   IncidentsGetOptionalParams,
   IncidentsGetResponse,
   IncidentsCreateOrUpdateOptionalParams,
@@ -40,6 +42,19 @@ export interface Incidents {
     workspaceName: string,
     options?: IncidentsListOptionalParams
   ): PagedAsyncIterableIterator<Incident>;
+  /**
+   * Triggers playbook on a specific incident
+   * @param resourceGroupName The name of the resource group. The name is case insensitive.
+   * @param workspaceName The name of the workspace.
+   * @param incidentIdentifier
+   * @param options The options parameters.
+   */
+  runPlaybook(
+    resourceGroupName: string,
+    workspaceName: string,
+    incidentIdentifier: string,
+    options?: IncidentsRunPlaybookOptionalParams
+  ): Promise<IncidentsRunPlaybookResponse>;
   /**
    * Gets an incident.
    * @param resourceGroupName The name of the resource group. The name is case insensitive.

package/src/operationsInterfaces/index.ts

@@ -10,31 +10,32 @@ export * from "./alertRules";
 export * from "./actions";
 export * from "./alertRuleTemplates";
 export * from "./automationRules";
+export * from "./incidents";
 export * from "./bookmarks";
 export * from "./bookmarkRelations";
 export * from "./bookmarkOperations";
 export * from "./iPGeodata";
 export * from "./domainWhois";
-export * from "./entityQueries";
 export * from "./entities";
 export * from "./entitiesGetTimeline";
 export * from "./entitiesRelations";
 export * from "./entityRelations";
-export * from "./incidents";
+export * from "./entityQueries";
+export * from "./entityQueryTemplates";
 export * from "./incidentComments";
 export * from "./incidentRelations";
 export * from "./metadata";
+export * from "./officeConsents";
 export * from "./sentinelOnboardingStates";
+export * from "./securityMLAnalyticsSettings";
 export * from "./productSettings";
 export * from "./sourceControlOperations";
 export * from "./sourceControls";
+export * from "./threatIntelligenceIndicator";
+export * from "./threatIntelligenceIndicators";
+export * from "./threatIntelligenceIndicatorMetrics";
 export * from "./watchlists";
 export * from "./watchlistItems";
 export * from "./dataConnectors";
 export * from "./dataConnectorsCheckRequirementsOperations";
-export * from "./threatIntelligenceIndicator";
-export * from "./threatIntelligenceIndicators";
-export * from "./threatIntelligenceIndicatorMetrics";
 export * from "./operations";
-export * from "./officeConsents";
-export * from "./entityQueryTemplates";