@@ -673,6 +673,23 @@ components:
673
673
required: true
674
674
schema:
675
675
type: string
676
+ ResourceFilterAccountID:
677
+ description: Filter resource filters by cloud provider account ID. This parameter
678
+ is only valid when provider is specified.
679
+ in: query
680
+ name: account_id
681
+ required: false
682
+ schema:
683
+ description: The cloud provider account ID (e.g. AWS account ID, GCP project
684
+ ID, Azure subscription ID)
685
+ type: string
686
+ ResourceFilterProvider:
687
+ description: Filter resource filters by cloud provider (e.g. aws, gcp, azure).
688
+ in: query
689
+ name: cloud_provider
690
+ required: false
691
+ schema:
692
+ $ref: '#/components/schemas/ResourceFilterProviderEnum'
676
693
ResourceID:
677
694
description: 'Identifier, formatted as `type:id`. Supported types: `connection`,
678
695
`dashboard`, `integration-account`, `integration-service`, `integration-webhook`,
@@ -15419,6 +15436,25 @@ components:
15419
15436
$ref: '#/components/schemas/GetInterfacesData'
15420
15437
type: array
15421
15438
type: object
15439
+ GetResourceEvaluationFiltersResponse:
15440
+ description: The definition of `GetResourceEvaluationFiltersResponse` object.
15441
+ properties:
15442
+ data:
15443
+ $ref: '#/components/schemas/GetResourceEvaluationFiltersResponseData'
15444
+ required:
15445
+ - data
15446
+ type: object
15447
+ GetResourceEvaluationFiltersResponseData:
15448
+ description: The definition of `GetResourceFilterResponseData` object.
15449
+ properties:
15450
+ attributes:
15451
+ $ref: '#/components/schemas/ResourceFilterAttributes'
15452
+ id:
15453
+ description: The `data` `id`.
15454
+ type: string
15455
+ type:
15456
+ $ref: '#/components/schemas/ResourceFilterRequestType'
15457
+ type: object
15422
15458
GetRuleVersionHistoryData:
15423
15459
description: Data for the rule version history.
15424
15460
properties:
@@ -29051,6 +29087,57 @@ components:
29051
29087
required:
29052
29088
- data
29053
29089
type: object
29090
+ ResourceFilterAttributes:
29091
+ description: Attributes of a resource filter.
29092
+ properties:
29093
+ cloud_provider:
29094
+ additionalProperties:
29095
+ additionalProperties:
29096
+ items:
29097
+ description: Tag filter in format "key:value"
29098
+ example: environment:production
29099
+ type: string
29100
+ type: array
29101
+ type: object
29102
+ description: A map of cloud provider names (e.g., "aws", "gcp", "azure")
29103
+ to a map of account/resource IDs and their associated tag filters.
29104
+ example:
29105
+ aws:
29106
+ '123456789':
29107
+ - environment:production
29108
+ - team:devops
29109
+ azure:
29110
+ sub-001:
29111
+ - app:frontend
29112
+ gcp:
29113
+ project-abc:
29114
+ - region:us-central1
29115
+ type: object
29116
+ uuid:
29117
+ description: The UUID of the resource filter.
29118
+ type: string
29119
+ required:
29120
+ - cloud_provider
29121
+ type: object
29122
+ ResourceFilterProviderEnum:
29123
+ description: The name of the cloud provider.
29124
+ enum:
29125
+ - aws
29126
+ - gcp
29127
+ - azure
29128
+ type: string
29129
+ x-enum-varnames:
29130
+ - AWS
29131
+ - GCP
29132
+ - AZURE
29133
+ ResourceFilterRequestType:
29134
+ description: Constant string to identify the resource type.
29135
+ enum:
29136
+ - csm_resource_filter
29137
+ example: csm_resource_filter
29138
+ type: string
29139
+ x-enum-varnames:
29140
+ - CSM_RESOURCE_FILTER
29054
29141
ResponseMetaAttributes:
29055
29142
description: Object describing meta attributes of response.
29056
29143
properties:
@@ -32299,9 +32386,11 @@ components:
32299
32386
example: true
32300
32387
type: boolean
32301
32388
SecurityMonitoringRuleKeepAlive:
32302
- description: "Once a signal is generated, the signal will remain \u201Copen\u201D
32303
- if a case is matched at least once within\nthis keep alive window. For third
32304
- party detection method, this field is not used."
32389
+ description: 'Once a signal is generated, the signal will remain "open" if a
32390
+ case is matched at least once within
32391
+
32392
+ this keep alive window. For third party detection method, this field is not
32393
+ used.'
32305
32394
enum:
32306
32395
- 0
32307
32396
- 60
@@ -32331,9 +32420,10 @@ components:
32331
32420
- TWELVE_HOURS
32332
32421
- ONE_DAY
32333
32422
SecurityMonitoringRuleMaxSignalDuration:
32334
- description: "A signal will \u201Cclose\u201D regardless of the query being
32335
- matched once the time exceeds the maximum duration.\nThis time is calculated
32336
- from the first seen timestamp."
32423
+ description: 'A signal will "close" regardless of the query being matched once
32424
+ the time exceeds the maximum duration.
32425
+
32426
+ This time is calculated from the first seen timestamp.'
32337
32427
enum:
32338
32428
- 0
32339
32429
- 60
@@ -38625,6 +38715,44 @@ components:
38625
38715
id:
38626
38716
$ref: '#/components/schemas/ApiID'
38627
38717
type: object
38718
+ UpdateResourceEvaluationFiltersRequest:
38719
+ description: Request object to update a resource filter.
38720
+ properties:
38721
+ data:
38722
+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersRequestData'
38723
+ required:
38724
+ - data
38725
+ type: object
38726
+ UpdateResourceEvaluationFiltersRequestData:
38727
+ description: The definition of `UpdateResourceFilterRequestData` object.
38728
+ properties:
38729
+ attributes:
38730
+ $ref: '#/components/schemas/ResourceFilterAttributes'
38731
+ id:
38732
+ description: The `UpdateResourceEvaluationFiltersRequestData` `id`.
38733
+ type: string
38734
+ type:
38735
+ $ref: '#/components/schemas/ResourceFilterRequestType'
38736
+ type: object
38737
+ UpdateResourceEvaluationFiltersResponse:
38738
+ description: The definition of `UpdateResourceEvaluationFiltersResponse` object.
38739
+ properties:
38740
+ data:
38741
+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersResponseData'
38742
+ required:
38743
+ - data
38744
+ type: object
38745
+ UpdateResourceEvaluationFiltersResponseData:
38746
+ description: The definition of `UpdateResourceFilterResponseData` object.
38747
+ properties:
38748
+ attributes:
38749
+ $ref: '#/components/schemas/ResourceFilterAttributes'
38750
+ id:
38751
+ description: The `data` `id`.
38752
+ type: string
38753
+ type:
38754
+ $ref: '#/components/schemas/ResourceFilterRequestType'
38755
+ type: object
38628
38756
UpdateRuleRequest:
38629
38757
description: Request to update a scorecard rule.
38630
38758
properties:
@@ -43559,6 +43687,73 @@ paths:
43559
43687
permissions:
43560
43688
- security_monitoring_rules_read
43561
43689
- security_monitoring_rules_write
43690
+ /api/v2/cloud_security_management/resource_filters:
43691
+ get:
43692
+ description: List resource filters.
43693
+ operationId: GetResourceEvaluationFilters
43694
+ parameters:
43695
+ - $ref: '#/components/parameters/ResourceFilterProvider'
43696
+ - $ref: '#/components/parameters/ResourceFilterAccountID'
43697
+ responses:
43698
+ '200':
43699
+ content:
43700
+ application/json:
43701
+ schema:
43702
+ $ref: '#/components/schemas/GetResourceEvaluationFiltersResponse'
43703
+ description: OK
43704
+ '400':
43705
+ $ref: '#/components/responses/BadRequestResponse'
43706
+ '403':
43707
+ $ref: '#/components/responses/NotAuthorizedResponse'
43708
+ '429':
43709
+ $ref: '#/components/responses/TooManyRequestsResponse'
43710
+ security:
43711
+ - apiKeyAuth: []
43712
+ appKeyAuth: []
43713
+ - AuthZ:
43714
+ - security_monitoring_filters_read
43715
+ summary: List resource filters
43716
+ tags:
43717
+ - Security Monitoring
43718
+ x-permission:
43719
+ operator: OR
43720
+ permissions:
43721
+ - security_monitoring_filters_read
43722
+ put:
43723
+ description: Update resource filters.
43724
+ operationId: UpdateResourceEvaluationFilters
43725
+ requestBody:
43726
+ content:
43727
+ application/json:
43728
+ schema:
43729
+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersRequest'
43730
+ required: true
43731
+ responses:
43732
+ '201':
43733
+ content:
43734
+ application/json:
43735
+ schema:
43736
+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersResponse'
43737
+ description: OK
43738
+ '400':
43739
+ $ref: '#/components/responses/BadRequestResponse'
43740
+ '403':
43741
+ $ref: '#/components/responses/NotAuthorizedResponse'
43742
+ '429':
43743
+ $ref: '#/components/responses/TooManyRequestsResponse'
43744
+ security:
43745
+ - apiKeyAuth: []
43746
+ appKeyAuth: []
43747
+ - AuthZ:
43748
+ - security_monitoring_filters_write
43749
+ summary: Update resource filters
43750
+ tags:
43751
+ - Security Monitoring
43752
+ x-codegen-request-body-name: body
43753
+ x-permission:
43754
+ operator: OR
43755
+ permissions:
43756
+ - security_monitoring_filters_write
43562
43757
/api/v2/container_images:
43563
43758
get:
43564
43759
description: Get all Container Images for your organization.
0 commit comments