@@ -59,48 +59,31 @@ input-file:
5959 - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/EntityQueryTemplates.json
6060 - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/Incidents.json
6161 - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/Metadata.json
62- - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/OfficeConsents.json
62+ # - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/OfficeConsents.json
6363 - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/OnboardingStates.json
6464 - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/Settings.json
6565 - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/SourceControls.json
6666 - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/ThreatIntelligence.json
6767 # - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/Watchlists.json
6868 - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/dataConnectors.json
69- - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/operations.json
69+ # - $(repo)/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2021-09-01-preview/operations.json
7070
7171module-version : 1.2.0
7272title : SecurityInsights
7373subject-prefix : Sentinel
7474
7575inlining-threshold : 50
7676
77- # For new modules, please avoid setting 3.x using the use-extension method and instead, use 4.x as the default option
78- use-extension :
79- " @autorest/powershell " : " 3.x"
80-
8177directive :
82- # Fixes/overrides to swaggers
83- # Fix to x-ms-enum when integer (https://github.com/Azure/autorest.powershell/issues/856)
84- - from : dataConnectors.json
85- where : $.definitions.Availability.properties.status
86- transform : >-
87- return {
88- "description": "The connector Availability Status",
89- "format": "int32",
90- "type": "integer",
91- "enum": [
92- 1
93- ]
94- }
9578 # Customize
9679 # Hide Operation API
97- - where :
98- subject : Operation
99- hide : true
80+ # - where:
81+ # subject: Operation
82+ # hide: true
10083 # Hide OfficeConsent API
101- - where :
102- subject : OfficeConsent
103- hide : true
84+ # - where:
85+ # subject: OfficeConsent
86+ # hide: true
10487 # Fix Action to be AlertRuleAction
10588 - where :
10689 subject : Action
@@ -109,8 +92,12 @@ directive:
10992 # Change Sets to Updates to match current module
11093 - where :
11194 verb : Set
95+ subject : AlertRuleAction
11296 set :
11397 verb : Update
98+ - where :
99+ verb : Set
100+ remove : true
114101 # fix subject name to encrichment
115102 - where :
116103 subject : DomainWhois
@@ -145,44 +132,15 @@ directive:
145132 set :
146133 verb : Get
147134 subject : EntityActivity
148- # Fix Update ThreatIntelligenceIndicator
149- - select : command
150- where :
151- verb : New
152- subject : ThreatIntelligenceIndicator
153- variant : CreateExpanded1
154- set :
155- verb : Update
156- variant : UpdateExpanded
157- - select : command
158- where :
159- verb : New
160- subject : ThreatIntelligenceIndicator
161- variant : CreateViaIdentity1
162- set :
163- verb : Update
164- variant : UpdateViaIdentity
165- - select : command
166- where :
167- verb : New
168- subject : ThreatIntelligenceIndicator
169- variant : CreateViaIdentityExpanded1
170- set :
171- verb : Update
172- variant : UpdateViaIdentityExpanded
173- - where :
174- subject : ThreatIntelligenceIndicatorQuery
175- variant : QueryViaIdentityExpanded
176- remove : true
177135 # Fix Entity Insights
178136 - where :
179137 subject : EntityInsight
180- variant : ^Get$|^ GetViaIdentity$
138+ variant : ^( Get| GetViaIdentity)(?!.*?Expanded)
181139 remove : true
182140 # Fix Entity TimeLime
183141 - where :
184142 subject : EntityTimeline
185- variant : List
143+ variant : ^( List)(?!.*?Expanded)
186144 remove : true
187145 # Rename Id for user expierence
188146 - where :
@@ -225,11 +183,6 @@ directive:
225183 parameter-name : Id
226184 set :
227185 alias : IncidentCommentId
228- # Remove Enrichment
229- - where :
230- subject : ^Enrichment$
231- variant : ^GetViaIdenity$|^GetViaIdenity1$
232- remove : true
233186 # Remove source control (requires OAUTH tokens)
234187 - where :
235188 subject : SourceControl
@@ -240,31 +193,36 @@ directive:
240193 subject : DataConnectorsCheckRequirement
241194 hide : true
242195 - where :
196+ verb : New
243197 subject : ^AlertRule$|^DataConnector$|^EntityQuery$
244- variant : ^ Create$|^CreateExpanded$|^Update$|^UpdateExpanded$|^UpdateViaIdentity$|^UpdateViaIdentityExpanded$
198+ variant : Create
245199 hide : true
200+ - where :
201+ subject : ^AlertRule$|^DataConnector$|^EntityQuery$
202+ variant : ^(Create|Update)(?=.*?(Expanded|JsonFilePath|JsonString))|^CreateViaIdentity$|^CreateViaIdentityWorkspace$
203+ remove : true
246204 - where :
247205 verb : ^Update$|^Remove$
248206 subject : Setting
249207 hide : true
250- # Hide Etag as it isnt used
208+ # Hide Etag as it isn't used
251209 - where :
252210 parameter-name : Etag
253211 hide : true
254212 # TI API not useful until API changes
255213 - where :
256214 verb : ^Add$|^New$|^Update$|^Remove$
257215 subject : ThreatIntelligenceIndicator
258- hide : true
216+ remove : true
259217 - where :
260218 verb : ^Add$|^New$|^Update$|^Remove$
261219 subject : ThreatIntelligenceIndicatorTag
262- hide : true
220+ remove : true
263221 # CCP
264222 - where :
265223 verb : ^Connect$|^Disconnect$
266224 subject : DataConnector
267- hide : true
225+ remove : true
268226 # cmdlet review feedback
269227 - where :
270228 subject : Bookmark
@@ -296,11 +254,6 @@ directive:
296254 parameter-name : DataConnectorsCheckRequirement
297255 set :
298256 parameter-name : DataConnectorCheckRequirement
299- - where :
300- verb : New
301- subject : AlertRuleAction
302- variant : Create
303- hide : true
304257 - where :
305258 verb : New
306259 subject : ^AlertRuleAction$|^AutomationRule$|^Bookmark$|^Incident$|^IncidentComment$|
@@ -319,28 +272,26 @@ directive:
319272 - where :
320273 verb : Expand
321274 subject : ^Bookmark$|^Entity$
322- hide : true
275+ remove : true
323276 - where :
324277 verb : ^New$|^Update$|^Remove$
325278 subject : Metadata
326- hide : true
279+ remove : true
327280 # Hide Source Control
328281 - where :
329282 verb : Get
330283 subject : SourceControlRepository
331284 hide : true
332- # Hide UpdateViaId and Update
333- - where :
334- variant : ^Update$|^UpdateViaIdentity$
335- hide : true
336285 # Remove the unexpanded parameter set
337286 - where :
338- variant : ^Append$|^AppendViaIdentity$|^Connect$|^ConnectViaIdentity$|^CreateViaIdentity$|^CreateViaIdentityExpanded$|^Expand$|^ExpandViaIdentity$|^ExpandViaIdentityExpanded$|^GetViaIdentityExpanded$|^PostViaIdentity$|^Query$|^QueryViaIdentity$|^QueriesViaIdentity$|^Replace$|^ReplaceViaIdentity$
287+ subject : AlertRuleAction|AutomationRule|Bookmark|Incident|SentinelOnboardingState
288+ variant : ^(Create|Update)(?!.*?(Expanded|JsonFilePath|JsonString))|^CreateViaIdentityExpanded$
339289 remove : true
340- # fix Equals that conflicts with inhertied property
341290 - where :
342- enum-name : AutomationRulePropertyConditionSupportedOperator
343- enum-value-name : Equals
344- set :
345- enum-value-name : Equal
291+ variant : ^(Append|Connect|Expand|Query|Replace)(?!.*?(Expanded|JsonFilePath|JsonString))
292+ remove : true
293+ # Remove module-cross object (unknown)
294+ - where :
295+ variant : ^(Create|Update|Query|Queries|Replace|Get|Delete)(?=.*?Workspace)
296+ remove : true
346297` ` `
0 commit comments