@pulumi/datadog 5.8.0-alpha.1783234616 → 5.8.0

package/cloudConfigurationRule.d.ts

@@ -87,7 +87,7 @@ export declare class CloudConfigurationRule extends pulumi.CustomResource {
      */
     readonly groupBies: pulumi.Output<string[] | undefined>;
     /**
-     * The message associated to the rule that will be shown in findings and signals.
+     * The message associated to the rule that will be shown in findings and signals. For cloud configuration rules, the message is rendered in the finding side panel. When the message is written as Markdown, you can use the following top-level section headers to control where each part appears in the finding: `Description` and `Rationale` appear under **What Happened**, `Remediation` appears in its own **Remediation** section, and `References` are shown separately. All of these sections are optional and can appear in any order; a typical message uses only `Description` and `Remediation`. Use level-2 (`##`) headers for each section. If none of these headers are present, the entire message is shown as the description.
      */
     readonly message: pulumi.Output<string>;
     /**
@@ -144,7 +144,7 @@ export interface CloudConfigurationRuleState {
      */
     groupBies?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
-     * The message associated to the rule that will be shown in findings and signals.
+     * The message associated to the rule that will be shown in findings and signals. For cloud configuration rules, the message is rendered in the finding side panel. When the message is written as Markdown, you can use the following top-level section headers to control where each part appears in the finding: `Description` and `Rationale` appear under **What Happened**, `Remediation` appears in its own **Remediation** section, and `References` are shown separately. All of these sections are optional and can appear in any order; a typical message uses only `Description` and `Remediation`. Use level-2 (`##`) headers for each section. If none of these headers are present, the entire message is shown as the description.
      */
     message?: pulumi.Input<string | undefined>;
     /**
@@ -193,7 +193,7 @@ export interface CloudConfigurationRuleArgs {
      */
     groupBies?: pulumi.Input<pulumi.Input<string>[] | undefined>;
     /**
-     * The message associated to the rule that will be shown in findings and signals.
+     * The message associated to the rule that will be shown in findings and signals. For cloud configuration rules, the message is rendered in the finding side panel. When the message is written as Markdown, you can use the following top-level section headers to control where each part appears in the finding: `Description` and `Rationale` appear under **What Happened**, `Remediation` appears in its own **Remediation** section, and `References` are shown separately. All of these sections are optional and can appear in any order; a typical message uses only `Description` and `Remediation`. Use level-2 (`##`) headers for each section. If none of these headers are present, the entire message is shown as the description.
      */
     message: pulumi.Input<string>;
     /**

package/getSecurityMonitoringCriticalAsset.d.ts

@@ -27,6 +27,10 @@ export interface GetSecurityMonitoringCriticalAssetArgs {
  * A collection of values returned by getSecurityMonitoringCriticalAsset.
  */
 export interface GetSecurityMonitoringCriticalAssetResult {
+    /**
+     * A description of the critical asset.
+     */
+    readonly description: string;
     /**
      * Whether the critical asset is enabled.
      */

package/getSecurityMonitoringCriticalAsset.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"getSecurityMonitoringCriticalAsset.d.ts","sourceRoot":"","sources":["../getSecurityMonitoringCriticalAsset.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,sCAAsC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAK/K;AAED;;GAEG;AACH,MAAM,WAAW,sCAAsC;IACnD;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,wCAAwC;IACrD;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;CAC3B;AACD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wCAAwC,CAAC,IAAI,EAAE,4CAA4C,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAKvM;AAED;;GAEG;AACH,MAAM,WAAW,4CAA4C;IACzD;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC5B"}
+{"version":3,"file":"getSecurityMonitoringCriticalAsset.d.ts","sourceRoot":"","sources":["../getSecurityMonitoringCriticalAsset.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;GAaG;AACH,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,sCAAsC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,aAAa,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAK/K;AAED;;GAEG;AACH,MAAM,WAAW,sCAAsC;IACnD;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,wCAAwC;IACrD;;OAEG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B;;OAEG;IACH,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;OAEG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;OAEG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;CAC3B;AACD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,wCAAwC,CAAC,IAAI,EAAE,4CAA4C,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,wCAAwC,CAAC,CAKvM;AAED;;GAEG;AACH,MAAM,WAAW,4CAA4C;IACzD;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC5B"}

package/getSecurityMonitoringCriticalAsset.js.map

@@ -1 +1 @@
-{"version":3,"file":"getSecurityMonitoringCriticalAsset.js","sourceRoot":"","sources":["../getSecurityMonitoringCriticalAsset.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;GAaG;AACH,SAAgB,kCAAkC,CAAC,IAA4C,EAAE,IAA2B;IACxH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qFAAqF,EAAE;QAChH,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,gFAKC;AAyCD;;;;;;;;;;;;;GAaG;AACH,SAAgB,wCAAwC,CAAC,IAAkD,EAAE,IAAiC;IAC1I,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,qFAAqF,EAAE;QACtH,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,4FAKC"}
+{"version":3,"file":"getSecurityMonitoringCriticalAsset.js","sourceRoot":"","sources":["../getSecurityMonitoringCriticalAsset.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;GAaG;AACH,SAAgB,kCAAkC,CAAC,IAA4C,EAAE,IAA2B;IACxH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,qFAAqF,EAAE;QAChH,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,gFAKC;AA6CD;;;;;;;;;;;;;GAaG;AACH,SAAgB,wCAAwC,CAAC,IAAkD,EAAE,IAAiC;IAC1I,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,qFAAqF,EAAE;QACtH,IAAI,EAAE,IAAI,CAAC,EAAE;KAChB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,4FAKC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@pulumi/datadog",
-    "version": "5.8.0-alpha.1783234616",
+    "version": "5.8.0",
     "description": "A Pulumi package for creating and managing Datadog resources.",
     "keywords": [
         "pulumi",
@@ -22,6 +22,6 @@
     "pulumi": {
         "resource": true,
         "name": "datadog",
-        "version": "5.8.0-alpha.1783234616"
+        "version": "5.8.0"
     }
 }

package/securityMonitoringCriticalAsset.d.ts

@@ -44,6 +44,10 @@ export declare class SecurityMonitoringCriticalAsset extends pulumi.CustomResour
      * when multiple copies of the Pulumi SDK have been loaded into the same process.
      */
     static isInstance(obj: any): obj is SecurityMonitoringCriticalAsset;
+    /**
+     * A description of the critical asset.
+     */
+    readonly description: pulumi.Output<string | undefined>;
     /**
      * Whether the critical asset is enabled. Defaults to `true`.
      */
@@ -77,6 +81,10 @@ export declare class SecurityMonitoringCriticalAsset extends pulumi.CustomResour
  * Input properties used for looking up and filtering SecurityMonitoringCriticalAsset resources.
  */
 export interface SecurityMonitoringCriticalAssetState {
+    /**
+     * A description of the critical asset.
+     */
+    description?: pulumi.Input<string | undefined>;
     /**
      * Whether the critical asset is enabled. Defaults to `true`.
      */
@@ -102,6 +110,10 @@ export interface SecurityMonitoringCriticalAssetState {
  * The set of arguments for constructing a SecurityMonitoringCriticalAsset resource.
  */
 export interface SecurityMonitoringCriticalAssetArgs {
+    /**
+     * A description of the critical asset.
+     */
+    description?: pulumi.Input<string | undefined>;
     /**
      * Whether the critical asset is enabled. Defaults to `true`.
      */

package/securityMonitoringCriticalAsset.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"securityMonitoringCriticalAsset.d.ts","sourceRoot":"","sources":["../securityMonitoringCriticalAsset.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,oCAAoC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,+BAA+B;IAOhL;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,+BAA+B;IAO1E;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAElE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CA+B3G;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACjD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;CAC3D;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAChD;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;CAC3D"}
+{"version":3,"file":"securityMonitoringCriticalAsset.d.ts","sourceRoot":"","sources":["../securityMonitoringCriticalAsset.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AAGzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,oCAAoC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,+BAA+B;IAOhL;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,+BAA+B;IAO1E;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxD;;OAEG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD;;OAEG;IACH,SAAwB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD;;OAEG;IACH,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC;IAElE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAiC3G;AAED;;GAEG;AACH,MAAM,WAAW,oCAAoC;IACjD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;CAC3D;AAED;;GAEG;AACH,MAAM,WAAW,mCAAmC;IAChD;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAChC;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC/B;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC;CAC3D"}

package/securityMonitoringCriticalAsset.js

@@ -87,6 +87,7 @@ class SecurityMonitoringCriticalAsset extends pulumi.CustomResource {
         opts = opts || {};
         if (opts.id) {
             const state = argsOrState;
+            resourceInputs["description"] = state?.description;
             resourceInputs["enabled"] = state?.enabled;
             resourceInputs["query"] = state?.query;
             resourceInputs["ruleQuery"] = state?.ruleQuery;
@@ -104,6 +105,7 @@ class SecurityMonitoringCriticalAsset extends pulumi.CustomResource {
             if (args?.severity === undefined && !opts.urn) {
                 throw new Error("Missing required property 'severity'");
             }
+            resourceInputs["description"] = args?.description;
             resourceInputs["enabled"] = args?.enabled;
             resourceInputs["query"] = args?.query;
             resourceInputs["ruleQuery"] = args?.ruleQuery;

package/securityMonitoringCriticalAsset.js.map

@@ -1 +1 @@
-{"version":3,"file":"securityMonitoringCriticalAsset.js","sourceRoot":"","sources":["../securityMonitoringCriticalAsset.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4C,EAAE,IAAmC;QAC1I,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,+EAA+E,CAAC;IAEtH;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,+BAA+B,CAAC,YAAY,CAAC;IAChF,CAAC;IA+BD,YAAY,IAAY,EAAE,WAAwF,EAAE,IAAmC;QACnJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+D,CAAC;YAC9E,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;SACxC;aAAM;YACH,MAAM,IAAI,GAAG,WAA8D,CAAC;YAC5E,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;SACvC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,+BAA+B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;;AAtFL,0EAuFC"}
+{"version":3,"file":"securityMonitoringCriticalAsset.js","sourceRoot":"","sources":["../securityMonitoringCriticalAsset.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AACzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4C,EAAE,IAAmC;QAC1I,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,+EAA+E,CAAC;IAEtH;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,+BAA+B,CAAC,YAAY,CAAC;IAChF,CAAC;IAmCD,YAAY,IAAY,EAAE,WAAwF,EAAE,IAAmC;QACnJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+D,CAAC;YAC9E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;SACxC;aAAM;YACH,MAAM,IAAI,GAAG,WAA8D,CAAC;YAC5E,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;SACvC;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,+BAA+B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;;AA5FL,0EA6FC"}

package/types/input.d.ts

@@ -64371,9 +64371,13 @@ export interface LogsArchiveGcsArchive {
 }
 export interface LogsArchiveS3Archive {
     /**
-     * Your AWS account id.
+     * Your AWS access key id, used as an alternative to `accountId`/`roleName`.
      */
-    accountId: pulumi.Input<string>;
+    accessKeyId?: pulumi.Input<string | undefined>;
+    /**
+     * Your AWS account id. Required with `roleName`; mutually exclusive with `accessKeyId`.
+     */
+    accountId?: pulumi.Input<string | undefined>;
     /**
      * Name of your s3 bucket.
      */
@@ -64391,9 +64395,9 @@ export interface LogsArchiveS3Archive {
      */
     path?: pulumi.Input<string | undefined>;
     /**
-     * Your AWS role name
+     * Your AWS role name. Required with `accountId`; mutually exclusive with `accessKeyId`.
      */
-    roleName: pulumi.Input<string>;
+    roleName?: pulumi.Input<string | undefined>;
     /**
      * The AWS S3 storage class used to upload the logs. Valid values are `STANDARD`, `STANDARD_IA`, `ONEZONE_IA`, `INTELLIGENT_TIERING`, `GLACIER_IR`. Defaults to `"STANDARD"`.
      */
@@ -67212,6 +67216,10 @@ export interface ObservabilityPipelineConfigDestination {
      * The `azureStorage` destination forwards logs to an Azure Blob Storage container.
      */
     azureStorages?: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigDestinationAzureStorage>[] | undefined>;
+    /**
+     * The `clickhouse` destination forwards logs to a ClickHouse server via HTTP.
+     */
+    clickhouse?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouse | undefined>;
     /**
      * The `cloudPrem` destination sends logs to Datadog CloudPrem.
      */
@@ -67702,6 +67710,152 @@ export interface ObservabilityPipelineConfigDestinationAzureStorageBufferMemory
      */
     whenFull?: pulumi.Input<string | undefined>;
 }
+export interface ObservabilityPipelineConfigDestinationClickhouse {
+    /**
+     * Authentication strategy for ClickHouse HTTP requests. Only `basic` strategy is supported.
+     */
+    auth?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouseAuth | undefined>;
+    /**
+     * Batching configuration for ClickHouse inserts.
+     */
+    batch?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouseBatch | undefined>;
+    /**
+     * Batch encoding configuration. Required when `format` is `arrowStream`.
+     */
+    batchEncoding?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouseBatchEncoding | undefined>;
+    /**
+     * Configuration for buffer settings on destination components. Exactly one of `disk` or `memory` must be specified.
+     */
+    buffer?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouseBuffer | undefined>;
+    /**
+     * Compression for outbound HTTP requests. Use `algorithm = "gzip"` or `algorithm = "none"`.
+     */
+    compression?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouseCompression | undefined>;
+    /**
+     * Optional name of the ClickHouse database to write to. When omitted, the user's default database is used.
+     */
+    database?: pulumi.Input<string | undefined>;
+    /**
+     * If `true`, enables flexible DateTime parsing on the server side.
+     */
+    dateTimeBestEffort?: pulumi.Input<boolean | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the ClickHouse HTTP endpoint URL. Defaults to `DESTINATION_CLICKHOUSE_ENDPOINT_URL`.
+     */
+    endpointUrlKey?: pulumi.Input<string | undefined>;
+    /**
+     * Insert format for events. `jsonEachRow` maps event fields to columns by name. `jsonAsObject` and `jsonAsString` insert each event into a single JSON or String column. `arrowStream` batches events with Apache Arrow IPC streaming and requires `batchEncoding`. Valid values are `jsonEachRow`, `jsonAsObject`, `jsonAsString`, `arrowStream`.
+     */
+    format?: pulumi.Input<string | undefined>;
+    /**
+     * If `true`, fields not present in the target table schema are dropped instead of causing insert errors. When unset, the ClickHouse server's own `inputFormatSkipUnknownFields` setting applies.
+     */
+    skipUnknownFields?: pulumi.Input<boolean | undefined>;
+    /**
+     * Target ClickHouse table name.
+     */
+    table: pulumi.Input<string>;
+    /**
+     * Configuration for enabling TLS encryption between the pipeline component and external services.
+     */
+    tls?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouseTls | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseAuth {
+    /**
+     * Name of the environment variable or secret that holds the ClickHouse password. Defaults to `DESTINATION_CLICKHOUSE_PASSWORD`.
+     */
+    passwordKey?: pulumi.Input<string | undefined>;
+    /**
+     * Authentication strategy. Must be `basic`. Valid values are `basic`.
+     */
+    strategy: pulumi.Input<string>;
+    /**
+     * Name of the environment variable or secret that holds the ClickHouse username. Defaults to `DESTINATION_CLICKHOUSE_USERNAME`.
+     */
+    usernameKey?: pulumi.Input<string | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBatch {
+    /**
+     * Maximum number of events per batch. Value must be at least 1.
+     */
+    maxEvents?: pulumi.Input<number | undefined>;
+    /**
+     * Maximum time in seconds before a partial batch is flushed. Value must be between 1 and 65535.
+     */
+    timeoutSecs?: pulumi.Input<number | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBatchEncoding {
+    /**
+     * If `true`, allows null values for non-nullable fields in the ClickHouse schema. Defaults to `false`.
+     */
+    allowNullableFields?: pulumi.Input<boolean | undefined>;
+    /**
+     * Batch encoding codec. Must be `arrowStream`. Valid values are `arrowStream`.
+     */
+    codec: pulumi.Input<string>;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBuffer {
+    /**
+     * Options for configuring a disk buffer. Cannot be used with `memory`.
+     */
+    disk?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouseBufferDisk | undefined>;
+    /**
+     * Options for configuring a memory buffer. Cannot be used with `disk`.
+     */
+    memory?: pulumi.Input<inputs.ObservabilityPipelineConfigDestinationClickhouseBufferMemory | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBufferDisk {
+    /**
+     * Maximum size of the disk buffer (in bytes).
+     */
+    maxSize?: pulumi.Input<number | undefined>;
+    /**
+     * Behavior when the buffer is full. Valid values are `block` or `dropNewest`. Defaults to `"block"`.
+     */
+    whenFull?: pulumi.Input<string | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseBufferMemory {
+    /**
+     * Maximum events for the memory buffer.
+     */
+    maxEvents?: pulumi.Input<number | undefined>;
+    /**
+     * Maximum size of the memory buffer (in bytes).
+     */
+    maxSize?: pulumi.Input<number | undefined>;
+    /**
+     * Behavior when the buffer is full. Valid values are `block` or `dropNewest`. Defaults to `"block"`.
+     */
+    whenFull?: pulumi.Input<string | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseCompression {
+    /**
+     * Compression algorithm. Valid values are `gzip` and `none`. Valid values are `gzip`, `none`.
+     */
+    algorithm: pulumi.Input<string>;
+    /**
+     * Compression level (1–9). Only valid when `algorithm` is `gzip`. Value must be between 1 and 9.
+     */
+    level?: pulumi.Input<number | undefined>;
+}
+export interface ObservabilityPipelineConfigDestinationClickhouseTls {
+    /**
+     * Path to the Certificate Authority (CA) file used to validate the server's TLS certificate.
+     */
+    caFile?: pulumi.Input<string | undefined>;
+    /**
+     * Path to the TLS client certificate file used to authenticate the pipeline component with upstream or downstream services.
+     */
+    crtFile: pulumi.Input<string>;
+    /**
+     * Path to the private key file associated with the TLS client certificate. Used for mutual TLS authentication.
+     */
+    keyFile?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the passphrase for the private key file.
+     */
+    keyPassKey?: pulumi.Input<string | undefined>;
+}
 export interface ObservabilityPipelineConfigDestinationCloudPrem {
     /**
      * Configuration for buffer settings on destination components. Exactly one of `disk` or `memory` must be specified.
@@ -69873,17 +70027,59 @@ export interface ObservabilityPipelineConfigProcessorGroupProcessorOcsfMapperMap
 }
 export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrok {
     /**
-     * If set to `true`, disables the default Grok rules provided by Datadog.
+     * If set to `true`, disables the default Grok rules provided by Datadog. Defaults to `false`.
      */
     disableLibraryRules?: pulumi.Input<boolean | undefined>;
+    /**
+     * The log field to parse with the Grok rules. Defaults to `"message"`.
+     */
+    field?: pulumi.Input<string | undefined>;
+    /**
+     * A Grok parsing rule that targets logs matching a Datadog search query.
+     */
+    includeRules?: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRule>[] | undefined>;
     /**
      * The list of Grok parsing rules. If multiple parsing rules are provided, they are evaluated in order. The first successful match is applied.
      */
-    rules: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokRule>[]>;
+    rules?: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokRule>[] | undefined>;
+}
+export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRule {
+    /**
+     * A Datadog search query used to determine which logs this Grok rule targets.
+     */
+    include: pulumi.Input<string>;
+    /**
+     * A list of Grok parsing rules that define how to extract fields. Each rule must contain a name and a valid Grok pattern.
+     */
+    matchRules: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRuleMatchRule>[]>;
+    /**
+     * A list of helper Grok rules that can be referenced by the parsing rules.
+     */
+    supportRules?: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRuleSupportRule>[] | undefined>;
+}
+export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRuleMatchRule {
+    /**
+     * The name of the rule.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * The definition of the Grok rule.
+     */
+    rule: pulumi.Input<string>;
+}
+export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrokIncludeRuleSupportRule {
+    /**
+     * The name of the helper Grok rule.
+     */
+    name: pulumi.Input<string>;
+    /**
+     * The definition of the helper Grok rule.
+     */
+    rule: pulumi.Input<string>;
 }
 export interface ObservabilityPipelineConfigProcessorGroupProcessorParseGrokRule {
     /**
-     * A list of Grok parsing rules that define how to extract fields from the source field. Each rule must contain a name and a valid Grok pattern.
+     * A list of Grok parsing rules that define how to extract fields. Each rule must contain a name and a valid Grok pattern.
      */
     matchRules: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigProcessorGroupProcessorParseGrokRuleMatchRule>[]>;
     /**
@@ -70382,6 +70578,10 @@ export interface ObservabilityPipelineConfigSource {
      * The `syslogNg` source listens for logs over TCP or UDP from a `syslog-ng` server using the syslog protocol.
      */
     syslogNgs?: pulumi.Input<pulumi.Input<inputs.ObservabilityPipelineConfigSourceSyslogNg>[] | undefined>;
+    /**
+     * The `websocket` source establishes a persistent WebSocket connection to a remote endpoint and ingests log events as they are pushed by the server.
+     */
+    websocket?: pulumi.Input<inputs.ObservabilityPipelineConfigSourceWebsocket | undefined>;
 }
 export interface ObservabilityPipelineConfigSourceAmazonDataFirehose {
     /**
@@ -71137,6 +71337,62 @@ export interface ObservabilityPipelineConfigSourceSyslogNgTls {
      */
     verifyCertificate?: pulumi.Input<boolean | undefined>;
 }
+export interface ObservabilityPipelineConfigSourceWebsocket {
+    /**
+     * The authentication strategy used when connecting to the WebSocket server. Valid values are `none`, `basic`, `bearer`, `custom`.
+     */
+    authStrategy: pulumi.Input<string>;
+    /**
+     * Name of the environment variable or secret that holds a custom header value. Used when `authStrategy` is `custom`.
+     */
+    customKey?: pulumi.Input<string | undefined>;
+    /**
+     * The decoding format used to interpret incoming log events. Valid values are `bytes`, `gelf`, `json`, `syslog`.
+     */
+    decoding: pulumi.Input<string>;
+    /**
+     * Name of the environment variable or secret that holds the password. Used when `authStrategy` is `basic`.
+     */
+    passwordKey?: pulumi.Input<string | undefined>;
+    /**
+     * TLS configuration for the WebSocket connection. Set `mode` to `enabled` for server-certificate validation only, or `withClientCert` to additionally present a client certificate.
+     */
+    tls?: pulumi.Input<inputs.ObservabilityPipelineConfigSourceWebsocketTls | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the bearer token. Used when `authStrategy` is `bearer`.
+     */
+    tokenKey?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the WebSocket URI to connect to.
+     */
+    uriKey?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the username. Used when `authStrategy` is `basic`.
+     */
+    usernameKey?: pulumi.Input<string | undefined>;
+}
+export interface ObservabilityPipelineConfigSourceWebsocketTls {
+    /**
+     * Path to the Certificate Authority (CA) file used to validate the server's TLS certificate.
+     */
+    caFile?: pulumi.Input<string | undefined>;
+    /**
+     * Path to the client certificate file. Required when `mode` is `withClientCert`.
+     */
+    crtFile?: pulumi.Input<string | undefined>;
+    /**
+     * Path to the private key file associated with the client certificate.
+     */
+    keyFile?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the environment variable or secret that holds the passphrase for the private key file.
+     */
+    keyPassKey?: pulumi.Input<string | undefined>;
+    /**
+     * The TLS mode. Use `enabled` for server-only TLS, or `withClientCert` for mutual TLS with a client certificate. Valid values are `enabled`, `withClientCert`.
+     */
+    mode: pulumi.Input<string>;
+}
 export interface OnCallEscalationPolicyStep {
     /**
      * Specifies how this escalation step will assign targets. Can be `default` (page all targets at once) or `round-robin`. Valid values are `default`, `round-robin`. Defaults to `"default"`.