pulumi-azure-native 2.82.0a1736495350__py3-none-any.whl → 2.82.0a1736497599__py3-none-any.whl

pulumi_azure_native/securityinsights/v20241001preview/get_file_import.py

@@ -0,0 +1,317 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from ... import _utilities
+from . import outputs
+
+__all__ = [
+    'GetFileImportResult',
+    'AwaitableGetFileImportResult',
+    'get_file_import',
+    'get_file_import_output',
+]
+
+@pulumi.output_type
+class GetFileImportResult:
+    """
+    Represents a file import in Azure Security Insights.
+    """
+    def __init__(__self__, content_type=None, created_time_utc=None, error_file=None, errors_preview=None, files_valid_until_time_utc=None, id=None, import_file=None, import_valid_until_time_utc=None, ingested_record_count=None, ingestion_mode=None, name=None, source=None, state=None, system_data=None, total_record_count=None, type=None, valid_record_count=None):
+        if content_type and not isinstance(content_type, str):
+            raise TypeError("Expected argument 'content_type' to be a str")
+        pulumi.set(__self__, "content_type", content_type)
+        if created_time_utc and not isinstance(created_time_utc, str):
+            raise TypeError("Expected argument 'created_time_utc' to be a str")
+        pulumi.set(__self__, "created_time_utc", created_time_utc)
+        if error_file and not isinstance(error_file, dict):
+            raise TypeError("Expected argument 'error_file' to be a dict")
+        pulumi.set(__self__, "error_file", error_file)
+        if errors_preview and not isinstance(errors_preview, list):
+            raise TypeError("Expected argument 'errors_preview' to be a list")
+        pulumi.set(__self__, "errors_preview", errors_preview)
+        if files_valid_until_time_utc and not isinstance(files_valid_until_time_utc, str):
+            raise TypeError("Expected argument 'files_valid_until_time_utc' to be a str")
+        pulumi.set(__self__, "files_valid_until_time_utc", files_valid_until_time_utc)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if import_file and not isinstance(import_file, dict):
+            raise TypeError("Expected argument 'import_file' to be a dict")
+        pulumi.set(__self__, "import_file", import_file)
+        if import_valid_until_time_utc and not isinstance(import_valid_until_time_utc, str):
+            raise TypeError("Expected argument 'import_valid_until_time_utc' to be a str")
+        pulumi.set(__self__, "import_valid_until_time_utc", import_valid_until_time_utc)
+        if ingested_record_count and not isinstance(ingested_record_count, int):
+            raise TypeError("Expected argument 'ingested_record_count' to be a int")
+        pulumi.set(__self__, "ingested_record_count", ingested_record_count)
+        if ingestion_mode and not isinstance(ingestion_mode, str):
+            raise TypeError("Expected argument 'ingestion_mode' to be a str")
+        pulumi.set(__self__, "ingestion_mode", ingestion_mode)
+        if name and not isinstance(name, str):
+            raise TypeError("Expected argument 'name' to be a str")
+        pulumi.set(__self__, "name", name)
+        if source and not isinstance(source, str):
+            raise TypeError("Expected argument 'source' to be a str")
+        pulumi.set(__self__, "source", source)
+        if state and not isinstance(state, str):
+            raise TypeError("Expected argument 'state' to be a str")
+        pulumi.set(__self__, "state", state)
+        if system_data and not isinstance(system_data, dict):
+            raise TypeError("Expected argument 'system_data' to be a dict")
+        pulumi.set(__self__, "system_data", system_data)
+        if total_record_count and not isinstance(total_record_count, int):
+            raise TypeError("Expected argument 'total_record_count' to be a int")
+        pulumi.set(__self__, "total_record_count", total_record_count)
+        if type and not isinstance(type, str):
+            raise TypeError("Expected argument 'type' to be a str")
+        pulumi.set(__self__, "type", type)
+        if valid_record_count and not isinstance(valid_record_count, int):
+            raise TypeError("Expected argument 'valid_record_count' to be a int")
+        pulumi.set(__self__, "valid_record_count", valid_record_count)
+
+    @property
+    @pulumi.getter(name="contentType")
+    def content_type(self) -> str:
+        """
+        The content type of this file.
+        """
+        return pulumi.get(self, "content_type")
+
+    @property
+    @pulumi.getter(name="createdTimeUTC")
+    def created_time_utc(self) -> str:
+        """
+        The time the file was imported.
+        """
+        return pulumi.get(self, "created_time_utc")
+
+    @property
+    @pulumi.getter(name="errorFile")
+    def error_file(self) -> 'outputs.FileMetadataResponse':
+        """
+        Represents the error file (if the import was ingested with errors or failed the validation).
+        """
+        return pulumi.get(self, "error_file")
+
+    @property
+    @pulumi.getter(name="errorsPreview")
+    def errors_preview(self) -> Sequence['outputs.ValidationErrorResponse']:
+        """
+        An ordered list of some of the errors that were encountered during validation.
+        """
+        return pulumi.get(self, "errors_preview")
+
+    @property
+    @pulumi.getter(name="filesValidUntilTimeUTC")
+    def files_valid_until_time_utc(self) -> str:
+        """
+        The time the files associated with this import are deleted from the storage account.
+        """
+        return pulumi.get(self, "files_valid_until_time_utc")
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter(name="importFile")
+    def import_file(self) -> 'outputs.FileMetadataResponse':
+        """
+        Represents the imported file.
+        """
+        return pulumi.get(self, "import_file")
+
+    @property
+    @pulumi.getter(name="importValidUntilTimeUTC")
+    def import_valid_until_time_utc(self) -> str:
+        """
+        The time the file import record is soft deleted from the database and history.
+        """
+        return pulumi.get(self, "import_valid_until_time_utc")
+
+    @property
+    @pulumi.getter(name="ingestedRecordCount")
+    def ingested_record_count(self) -> int:
+        """
+        The number of records that have been successfully ingested.
+        """
+        return pulumi.get(self, "ingested_record_count")
+
+    @property
+    @pulumi.getter(name="ingestionMode")
+    def ingestion_mode(self) -> str:
+        """
+        Describes how to ingest the records in the file.
+        """
+        return pulumi.get(self, "ingestion_mode")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The name of the resource
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter
+    def source(self) -> str:
+        """
+        The source for the data in the file.
+        """
+        return pulumi.get(self, "source")
+
+    @property
+    @pulumi.getter
+    def state(self) -> str:
+        """
+        The state of the file import.
+        """
+        return pulumi.get(self, "state")
+
+    @property
+    @pulumi.getter(name="systemData")
+    def system_data(self) -> 'outputs.SystemDataResponse':
+        """
+        Azure Resource Manager metadata containing createdBy and modifiedBy information.
+        """
+        return pulumi.get(self, "system_data")
+
+    @property
+    @pulumi.getter(name="totalRecordCount")
+    def total_record_count(self) -> int:
+        """
+        The number of records in the file.
+        """
+        return pulumi.get(self, "total_record_count")
+
+    @property
+    @pulumi.getter
+    def type(self) -> str:
+        """
+        The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
+        """
+        return pulumi.get(self, "type")
+
+    @property
+    @pulumi.getter(name="validRecordCount")
+    def valid_record_count(self) -> int:
+        """
+        The number of records that have passed validation.
+        """
+        return pulumi.get(self, "valid_record_count")
+
+
+class AwaitableGetFileImportResult(GetFileImportResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetFileImportResult(
+            content_type=self.content_type,
+            created_time_utc=self.created_time_utc,
+            error_file=self.error_file,
+            errors_preview=self.errors_preview,
+            files_valid_until_time_utc=self.files_valid_until_time_utc,
+            id=self.id,
+            import_file=self.import_file,
+            import_valid_until_time_utc=self.import_valid_until_time_utc,
+            ingested_record_count=self.ingested_record_count,
+            ingestion_mode=self.ingestion_mode,
+            name=self.name,
+            source=self.source,
+            state=self.state,
+            system_data=self.system_data,
+            total_record_count=self.total_record_count,
+            type=self.type,
+            valid_record_count=self.valid_record_count)
+
+
+def get_file_import(file_import_id: Optional[str] = None,
+                    resource_group_name: Optional[str] = None,
+                    workspace_name: Optional[str] = None,
+                    opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetFileImportResult:
+    """
+    Gets a file import.
+
+
+    :param str file_import_id: File import ID
+    :param str resource_group_name: The name of the resource group. The name is case insensitive.
+    :param str workspace_name: The name of the workspace.
+    """
+    __args__ = dict()
+    __args__['fileImportId'] = file_import_id
+    __args__['resourceGroupName'] = resource_group_name
+    __args__['workspaceName'] = workspace_name
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('azure-native:securityinsights/v20241001preview:getFileImport', __args__, opts=opts, typ=GetFileImportResult).value
+
+    return AwaitableGetFileImportResult(
+        content_type=pulumi.get(__ret__, 'content_type'),
+        created_time_utc=pulumi.get(__ret__, 'created_time_utc'),
+        error_file=pulumi.get(__ret__, 'error_file'),
+        errors_preview=pulumi.get(__ret__, 'errors_preview'),
+        files_valid_until_time_utc=pulumi.get(__ret__, 'files_valid_until_time_utc'),
+        id=pulumi.get(__ret__, 'id'),
+        import_file=pulumi.get(__ret__, 'import_file'),
+        import_valid_until_time_utc=pulumi.get(__ret__, 'import_valid_until_time_utc'),
+        ingested_record_count=pulumi.get(__ret__, 'ingested_record_count'),
+        ingestion_mode=pulumi.get(__ret__, 'ingestion_mode'),
+        name=pulumi.get(__ret__, 'name'),
+        source=pulumi.get(__ret__, 'source'),
+        state=pulumi.get(__ret__, 'state'),
+        system_data=pulumi.get(__ret__, 'system_data'),
+        total_record_count=pulumi.get(__ret__, 'total_record_count'),
+        type=pulumi.get(__ret__, 'type'),
+        valid_record_count=pulumi.get(__ret__, 'valid_record_count'))
+def get_file_import_output(file_import_id: Optional[pulumi.Input[str]] = None,
+                           resource_group_name: Optional[pulumi.Input[str]] = None,
+                           workspace_name: Optional[pulumi.Input[str]] = None,
+                           opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetFileImportResult]:
+    """
+    Gets a file import.
+
+
+    :param str file_import_id: File import ID
+    :param str resource_group_name: The name of the resource group. The name is case insensitive.
+    :param str workspace_name: The name of the workspace.
+    """
+    __args__ = dict()
+    __args__['fileImportId'] = file_import_id
+    __args__['resourceGroupName'] = resource_group_name
+    __args__['workspaceName'] = workspace_name
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('azure-native:securityinsights/v20241001preview:getFileImport', __args__, opts=opts, typ=GetFileImportResult)
+    return __ret__.apply(lambda __response__: GetFileImportResult(
+        content_type=pulumi.get(__response__, 'content_type'),
+        created_time_utc=pulumi.get(__response__, 'created_time_utc'),
+        error_file=pulumi.get(__response__, 'error_file'),
+        errors_preview=pulumi.get(__response__, 'errors_preview'),
+        files_valid_until_time_utc=pulumi.get(__response__, 'files_valid_until_time_utc'),
+        id=pulumi.get(__response__, 'id'),
+        import_file=pulumi.get(__response__, 'import_file'),
+        import_valid_until_time_utc=pulumi.get(__response__, 'import_valid_until_time_utc'),
+        ingested_record_count=pulumi.get(__response__, 'ingested_record_count'),
+        ingestion_mode=pulumi.get(__response__, 'ingestion_mode'),
+        name=pulumi.get(__response__, 'name'),
+        source=pulumi.get(__response__, 'source'),
+        state=pulumi.get(__response__, 'state'),
+        system_data=pulumi.get(__response__, 'system_data'),
+        total_record_count=pulumi.get(__response__, 'total_record_count'),
+        type=pulumi.get(__response__, 'type'),
+        valid_record_count=pulumi.get(__response__, 'valid_record_count')))

pulumi_azure_native/securityinsights/v20241001preview/get_fusion_alert_rule.py

@@ -0,0 +1,318 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from ... import _utilities
+from . import outputs
+
+__all__ = [
+    'GetFusionAlertRuleResult',
+    'AwaitableGetFusionAlertRuleResult',
+    'get_fusion_alert_rule',
+    'get_fusion_alert_rule_output',
+]
+
+@pulumi.output_type
+class GetFusionAlertRuleResult:
+    """
+    Represents Fusion alert rule.
+    """
+    def __init__(__self__, alert_rule_template_name=None, description=None, display_name=None, enabled=None, etag=None, id=None, kind=None, last_modified_utc=None, name=None, scenario_exclusion_patterns=None, severity=None, source_settings=None, sub_techniques=None, system_data=None, tactics=None, techniques=None, type=None):
+        if alert_rule_template_name and not isinstance(alert_rule_template_name, str):
+            raise TypeError("Expected argument 'alert_rule_template_name' to be a str")
+        pulumi.set(__self__, "alert_rule_template_name", alert_rule_template_name)
+        if description and not isinstance(description, str):
+            raise TypeError("Expected argument 'description' to be a str")
+        pulumi.set(__self__, "description", description)
+        if display_name and not isinstance(display_name, str):
+            raise TypeError("Expected argument 'display_name' to be a str")
+        pulumi.set(__self__, "display_name", display_name)
+        if enabled and not isinstance(enabled, bool):
+            raise TypeError("Expected argument 'enabled' to be a bool")
+        pulumi.set(__self__, "enabled", enabled)
+        if etag and not isinstance(etag, str):
+            raise TypeError("Expected argument 'etag' to be a str")
+        pulumi.set(__self__, "etag", etag)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if kind and not isinstance(kind, str):
+            raise TypeError("Expected argument 'kind' to be a str")
+        pulumi.set(__self__, "kind", kind)
+        if last_modified_utc and not isinstance(last_modified_utc, str):
+            raise TypeError("Expected argument 'last_modified_utc' to be a str")
+        pulumi.set(__self__, "last_modified_utc", last_modified_utc)
+        if name and not isinstance(name, str):
+            raise TypeError("Expected argument 'name' to be a str")
+        pulumi.set(__self__, "name", name)
+        if scenario_exclusion_patterns and not isinstance(scenario_exclusion_patterns, list):
+            raise TypeError("Expected argument 'scenario_exclusion_patterns' to be a list")
+        pulumi.set(__self__, "scenario_exclusion_patterns", scenario_exclusion_patterns)
+        if severity and not isinstance(severity, str):
+            raise TypeError("Expected argument 'severity' to be a str")
+        pulumi.set(__self__, "severity", severity)
+        if source_settings and not isinstance(source_settings, list):
+            raise TypeError("Expected argument 'source_settings' to be a list")
+        pulumi.set(__self__, "source_settings", source_settings)
+        if sub_techniques and not isinstance(sub_techniques, list):
+            raise TypeError("Expected argument 'sub_techniques' to be a list")
+        pulumi.set(__self__, "sub_techniques", sub_techniques)
+        if system_data and not isinstance(system_data, dict):
+            raise TypeError("Expected argument 'system_data' to be a dict")
+        pulumi.set(__self__, "system_data", system_data)
+        if tactics and not isinstance(tactics, list):
+            raise TypeError("Expected argument 'tactics' to be a list")
+        pulumi.set(__self__, "tactics", tactics)
+        if techniques and not isinstance(techniques, list):
+            raise TypeError("Expected argument 'techniques' to be a list")
+        pulumi.set(__self__, "techniques", techniques)
+        if type and not isinstance(type, str):
+            raise TypeError("Expected argument 'type' to be a str")
+        pulumi.set(__self__, "type", type)
+
+    @property
+    @pulumi.getter(name="alertRuleTemplateName")
+    def alert_rule_template_name(self) -> str:
+        """
+        The Name of the alert rule template used to create this rule.
+        """
+        return pulumi.get(self, "alert_rule_template_name")
+
+    @property
+    @pulumi.getter
+    def description(self) -> str:
+        """
+        The description of the alert rule.
+        """
+        return pulumi.get(self, "description")
+
+    @property
+    @pulumi.getter(name="displayName")
+    def display_name(self) -> str:
+        """
+        The display name for alerts created by this alert rule.
+        """
+        return pulumi.get(self, "display_name")
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> bool:
+        """
+        Determines whether this alert rule is enabled or disabled.
+        """
+        return pulumi.get(self, "enabled")
+
+    @property
+    @pulumi.getter
+    def etag(self) -> Optional[str]:
+        """
+        Etag of the azure resource
+        """
+        return pulumi.get(self, "etag")
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        Fully qualified resource ID for the resource. E.g. "/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}"
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def kind(self) -> str:
+        """
+        The kind of the alert rule
+        Expected value is 'Fusion'.
+        """
+        return pulumi.get(self, "kind")
+
+    @property
+    @pulumi.getter(name="lastModifiedUtc")
+    def last_modified_utc(self) -> str:
+        """
+        The last time that this alert has been modified.
+        """
+        return pulumi.get(self, "last_modified_utc")
+
+    @property
+    @pulumi.getter
+    def name(self) -> str:
+        """
+        The name of the resource
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter(name="scenarioExclusionPatterns")
+    def scenario_exclusion_patterns(self) -> Optional[Sequence['outputs.FusionScenarioExclusionPatternResponse']]:
+        """
+        Configuration to exclude scenarios in fusion detection.
+        """
+        return pulumi.get(self, "scenario_exclusion_patterns")
+
+    @property
+    @pulumi.getter
+    def severity(self) -> str:
+        """
+        The severity for alerts created by this alert rule.
+        """
+        return pulumi.get(self, "severity")
+
+    @property
+    @pulumi.getter(name="sourceSettings")
+    def source_settings(self) -> Optional[Sequence['outputs.FusionSourceSettingsResponse']]:
+        """
+        Configuration for all supported source signals in fusion detection.
+        """
+        return pulumi.get(self, "source_settings")
+
+    @property
+    @pulumi.getter(name="subTechniques")
+    def sub_techniques(self) -> Sequence[str]:
+        """
+        The sub-techniques of the alert rule
+        """
+        return pulumi.get(self, "sub_techniques")
+
+    @property
+    @pulumi.getter(name="systemData")
+    def system_data(self) -> 'outputs.SystemDataResponse':
+        """
+        Azure Resource Manager metadata containing createdBy and modifiedBy information.
+        """
+        return pulumi.get(self, "system_data")
+
+    @property
+    @pulumi.getter
+    def tactics(self) -> Sequence[str]:
+        """
+        The tactics of the alert rule
+        """
+        return pulumi.get(self, "tactics")
+
+    @property
+    @pulumi.getter
+    def techniques(self) -> Sequence[str]:
+        """
+        The techniques of the alert rule
+        """
+        return pulumi.get(self, "techniques")
+
+    @property
+    @pulumi.getter
+    def type(self) -> str:
+        """
+        The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
+        """
+        return pulumi.get(self, "type")
+
+
+class AwaitableGetFusionAlertRuleResult(GetFusionAlertRuleResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetFusionAlertRuleResult(
+            alert_rule_template_name=self.alert_rule_template_name,
+            description=self.description,
+            display_name=self.display_name,
+            enabled=self.enabled,
+            etag=self.etag,
+            id=self.id,
+            kind=self.kind,
+            last_modified_utc=self.last_modified_utc,
+            name=self.name,
+            scenario_exclusion_patterns=self.scenario_exclusion_patterns,
+            severity=self.severity,
+            source_settings=self.source_settings,
+            sub_techniques=self.sub_techniques,
+            system_data=self.system_data,
+            tactics=self.tactics,
+            techniques=self.techniques,
+            type=self.type)
+
+
+def get_fusion_alert_rule(resource_group_name: Optional[str] = None,
+                          rule_id: Optional[str] = None,
+                          workspace_name: Optional[str] = None,
+                          opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetFusionAlertRuleResult:
+    """
+    Gets the alert rule.
+
+
+    :param str resource_group_name: The name of the resource group. The name is case insensitive.
+    :param str rule_id: Alert rule ID
+    :param str workspace_name: The name of the workspace.
+    """
+    __args__ = dict()
+    __args__['resourceGroupName'] = resource_group_name
+    __args__['ruleId'] = rule_id
+    __args__['workspaceName'] = workspace_name
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('azure-native:securityinsights/v20241001preview:getFusionAlertRule', __args__, opts=opts, typ=GetFusionAlertRuleResult).value
+
+    return AwaitableGetFusionAlertRuleResult(
+        alert_rule_template_name=pulumi.get(__ret__, 'alert_rule_template_name'),
+        description=pulumi.get(__ret__, 'description'),
+        display_name=pulumi.get(__ret__, 'display_name'),
+        enabled=pulumi.get(__ret__, 'enabled'),
+        etag=pulumi.get(__ret__, 'etag'),
+        id=pulumi.get(__ret__, 'id'),
+        kind=pulumi.get(__ret__, 'kind'),
+        last_modified_utc=pulumi.get(__ret__, 'last_modified_utc'),
+        name=pulumi.get(__ret__, 'name'),
+        scenario_exclusion_patterns=pulumi.get(__ret__, 'scenario_exclusion_patterns'),
+        severity=pulumi.get(__ret__, 'severity'),
+        source_settings=pulumi.get(__ret__, 'source_settings'),
+        sub_techniques=pulumi.get(__ret__, 'sub_techniques'),
+        system_data=pulumi.get(__ret__, 'system_data'),
+        tactics=pulumi.get(__ret__, 'tactics'),
+        techniques=pulumi.get(__ret__, 'techniques'),
+        type=pulumi.get(__ret__, 'type'))
+def get_fusion_alert_rule_output(resource_group_name: Optional[pulumi.Input[str]] = None,
+                                 rule_id: Optional[pulumi.Input[str]] = None,
+                                 workspace_name: Optional[pulumi.Input[str]] = None,
+                                 opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetFusionAlertRuleResult]:
+    """
+    Gets the alert rule.
+
+
+    :param str resource_group_name: The name of the resource group. The name is case insensitive.
+    :param str rule_id: Alert rule ID
+    :param str workspace_name: The name of the workspace.
+    """
+    __args__ = dict()
+    __args__['resourceGroupName'] = resource_group_name
+    __args__['ruleId'] = rule_id
+    __args__['workspaceName'] = workspace_name
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('azure-native:securityinsights/v20241001preview:getFusionAlertRule', __args__, opts=opts, typ=GetFusionAlertRuleResult)
+    return __ret__.apply(lambda __response__: GetFusionAlertRuleResult(
+        alert_rule_template_name=pulumi.get(__response__, 'alert_rule_template_name'),
+        description=pulumi.get(__response__, 'description'),
+        display_name=pulumi.get(__response__, 'display_name'),
+        enabled=pulumi.get(__response__, 'enabled'),
+        etag=pulumi.get(__response__, 'etag'),
+        id=pulumi.get(__response__, 'id'),
+        kind=pulumi.get(__response__, 'kind'),
+        last_modified_utc=pulumi.get(__response__, 'last_modified_utc'),
+        name=pulumi.get(__response__, 'name'),
+        scenario_exclusion_patterns=pulumi.get(__response__, 'scenario_exclusion_patterns'),
+        severity=pulumi.get(__response__, 'severity'),
+        source_settings=pulumi.get(__response__, 'source_settings'),
+        sub_techniques=pulumi.get(__response__, 'sub_techniques'),
+        system_data=pulumi.get(__response__, 'system_data'),
+        tactics=pulumi.get(__response__, 'tactics'),
+        techniques=pulumi.get(__response__, 'techniques'),
+        type=pulumi.get(__response__, 'type')))