Skip to content

Commit 296c37f

Browse files
author
ci.datadog-api-spec
committed
Regenerate client from commit 216c60c of spec repo
1 parent 7647287 commit 296c37f

File tree

8 files changed

+394
-0
lines changed

8 files changed

+394
-0
lines changed

‎.generator/schemas/v2/openapi.yaml‎

Lines changed: 59 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -63779,6 +63779,65 @@ paths:
6377963779
tags:
6378063780
- Security Monitoring
6378163781
x-codegen-request-body-name: body
63782+
/api/v2/security_monitoring/configuration/suppressions/rules:
63783+
post:
63784+
description: Get the list of suppressions that would affect a rule.
63785+
operationId: GetSuppressionsAffectingFutureRule
63786+
requestBody:
63787+
content:
63788+
application/json:
63789+
schema:
63790+
$ref: '#/components/schemas/SecurityMonitoringRuleCreatePayload'
63791+
required: true
63792+
responses:
63793+
'200':
63794+
content:
63795+
application/json:
63796+
schema:
63797+
$ref: '#/components/schemas/SecurityMonitoringSuppressionsResponse'
63798+
description: OK
63799+
'400':
63800+
$ref: '#/components/responses/BadRequestResponse'
63801+
'403':
63802+
$ref: '#/components/responses/NotAuthorizedResponse'
63803+
'429':
63804+
$ref: '#/components/responses/TooManyRequestsResponse'
63805+
security:
63806+
- apiKeyAuth: []
63807+
appKeyAuth: []
63808+
- AuthZ:
63809+
- security_monitoring_suppressions_read
63810+
summary: Get suppressions affecting future rule
63811+
tags:
63812+
- Security Monitoring
63813+
/api/v2/security_monitoring/configuration/suppressions/rules/{rule_id}:
63814+
get:
63815+
description: Get the list of suppressions that affect a specific existing rule
63816+
by its ID.
63817+
operationId: GetSuppressionsAffectingRule
63818+
parameters:
63819+
- $ref: '#/components/parameters/SecurityMonitoringRuleID'
63820+
responses:
63821+
'200':
63822+
content:
63823+
application/json:
63824+
schema:
63825+
$ref: '#/components/schemas/SecurityMonitoringSuppressionsResponse'
63826+
description: OK
63827+
'403':
63828+
$ref: '#/components/responses/NotAuthorizedResponse'
63829+
'404':
63830+
$ref: '#/components/responses/NotFoundResponse'
63831+
'429':
63832+
$ref: '#/components/responses/TooManyRequestsResponse'
63833+
security:
63834+
- apiKeyAuth: []
63835+
appKeyAuth: []
63836+
- AuthZ:
63837+
- security_monitoring_suppressions_read
63838+
summary: Get suppressions affecting a specific rule
63839+
tags:
63840+
- Security Monitoring
6378263841
/api/v2/security_monitoring/configuration/suppressions/{suppression_id}:
6378363842
delete:
6378463843
description: Delete a specific suppression rule.

‎examples/v2/security-monitoring/GetSuppressionsAffectingFutureRule.rb‎

Lines changed: 79 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,79 @@
1+
# Get suppressions affecting future rule returns "OK" response
2+
3+
require "datadog_api_client"
4+
api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
5+
6+
body = DatadogAPIClient::V2::SecurityMonitoringStandardRuleCreatePayload.new({
7+
calculated_fields: [
8+
DatadogAPIClient::V2::CalculatedField.new({
9+
expression: "@request_end_timestamp - @request_start_timestamp",
10+
name: "response_time",
11+
}),
12+
],
13+
cases: [],
14+
filters: [
15+
DatadogAPIClient::V2::SecurityMonitoringFilter.new({
16+
action: DatadogAPIClient::V2::SecurityMonitoringFilterAction::REQUIRE,
17+
}),
18+
],
19+
group_signals_by: [
20+
"service",
21+
],
22+
has_extended_title: true,
23+
is_enabled: true,
24+
message: "",
25+
name: "My security monitoring rule.",
26+
options: DatadogAPIClient::V2::SecurityMonitoringRuleOptions.new({
27+
compliance_rule_options: DatadogAPIClient::V2::CloudConfigurationComplianceRuleOptions.new({
28+
rego_rule: DatadogAPIClient::V2::CloudConfigurationRegoRule.new({
29+
policy: 'package datadog\n\nimport data.datadog.output as dd_output\nimport future.keywords.contains\nimport future.keywords.if\nimport future.keywords.in\n\neval(resource) = "skip" if {\n # Logic that evaluates to true if the resource should be skipped\n true\n} else = "pass" {\n # Logic that evaluates to true if the resource is compliant\n true\n} else = "fail" {\n # Logic that evaluates to true if the resource is not compliant\n true\n}\n\n# This part remains unchanged for all rules\nresults contains result if {\n some resource in input.resources[input.main_resource_type]\n result := dd_output.format(resource, eval(resource))\n}\n',
30+
resource_types: [
31+
"gcp_iam_service_account",
32+
"gcp_iam_policy",
33+
],
34+
}),
35+
resource_type: "aws_acm",
36+
}),
37+
decrease_criticality_based_on_env: false,
38+
detection_method: DatadogAPIClient::V2::SecurityMonitoringRuleDetectionMethod::THRESHOLD,
39+
evaluation_window: DatadogAPIClient::V2::SecurityMonitoringRuleEvaluationWindow::ZERO_MINUTES,
40+
hardcoded_evaluator_type: DatadogAPIClient::V2::SecurityMonitoringRuleHardcodedEvaluatorType::LOG4SHELL,
41+
impossible_travel_options: DatadogAPIClient::V2::SecurityMonitoringRuleImpossibleTravelOptions.new({
42+
baseline_user_locations: true,
43+
}),
44+
keep_alive: DatadogAPIClient::V2::SecurityMonitoringRuleKeepAlive::ZERO_MINUTES,
45+
max_signal_duration: DatadogAPIClient::V2::SecurityMonitoringRuleMaxSignalDuration::ZERO_MINUTES,
46+
new_value_options: DatadogAPIClient::V2::SecurityMonitoringRuleNewValueOptions.new({
47+
forget_after: DatadogAPIClient::V2::SecurityMonitoringRuleNewValueOptionsForgetAfter::ONE_DAY,
48+
learning_duration: DatadogAPIClient::V2::SecurityMonitoringRuleNewValueOptionsLearningDuration::ZERO_DAYS,
49+
learning_method: DatadogAPIClient::V2::SecurityMonitoringRuleNewValueOptionsLearningMethod::DURATION,
50+
learning_threshold: DatadogAPIClient::V2::SecurityMonitoringRuleNewValueOptionsLearningThreshold::ZERO_OCCURRENCES,
51+
}),
52+
third_party_rule_options: DatadogAPIClient::V2::SecurityMonitoringRuleThirdPartyOptions.new({
53+
default_notifications: [],
54+
default_status: DatadogAPIClient::V2::SecurityMonitoringRuleSeverity::CRITICAL,
55+
root_queries: [
56+
DatadogAPIClient::V2::SecurityMonitoringThirdPartyRootQuery.new({
57+
group_by_fields: [],
58+
query: "source:cloudtrail",
59+
}),
60+
],
61+
}),
62+
}),
63+
queries: [],
64+
reference_tables: [
65+
DatadogAPIClient::V2::SecurityMonitoringReferenceTable.new({}),
66+
],
67+
scheduling_options: DatadogAPIClient::V2::SecurityMonitoringSchedulingOptions.new({
68+
rrule: "FREQ=HOURLY;INTERVAL=1;",
69+
start: "2025-07-14T12:00:00",
70+
timezone: "America/New_York",
71+
}),
72+
tags: [
73+
"env:prod",
74+
"team:security",
75+
],
76+
third_party_cases: [],
77+
type: DatadogAPIClient::V2::SecurityMonitoringRuleTypeCreate::API_SECURITY,
78+
})
79+
p api_instance.get_suppressions_affecting_future_rule(body)

‎examples/v2/security-monitoring/GetSuppressionsAffectingRule.rb‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
# Get suppressions affecting a specific rule returns "OK" response
2+
3+
require "datadog_api_client"
4+
api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
5+
p api_instance.get_suppressions_affecting_rule("rule_id")

‎features/scenarios_model_mapping.rb‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1354,6 +1354,12 @@
13541354
"v2.CreateSecurityMonitoringSuppression" => {
13551355
"body" => "SecurityMonitoringSuppressionCreateRequest",
13561356
},
1357+
"v2.GetSuppressionsAffectingFutureRule" => {
1358+
"body" => "SecurityMonitoringRuleCreatePayload",
1359+
},
1360+
"v2.GetSuppressionsAffectingRule" => {
1361+
"rule_id" => "String",
1362+
},
13571363
"v2.DeleteSecurityMonitoringSuppression" => {
13581364
"suppression_id" => "String",
13591365
},

‎features/v2/security_monitoring.feature‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -822,6 +822,34 @@ Feature: Security Monitoring
822822
And the response "data.attributes.count" is equal to 1
823823
And the response "data.attributes.data[1].rule.name" has the same value as "security_rule.name"
824824

825+
@generated @skip @team:DataDog/k9-cloud-security-platform
826+
Scenario: Get suppressions affecting a specific rule returns "Not Found" response
827+
Given new "GetSuppressionsAffectingRule" request
828+
And request contains "rule_id" parameter from "REPLACE.ME"
829+
When the request is sent
830+
Then the response status is 404 Not Found
831+
832+
@generated @skip @team:DataDog/k9-cloud-security-platform
833+
Scenario: Get suppressions affecting a specific rule returns "OK" response
834+
Given new "GetSuppressionsAffectingRule" request
835+
And request contains "rule_id" parameter from "REPLACE.ME"
836+
When the request is sent
837+
Then the response status is 200 OK
838+
839+
@skip @team:DataDog/k9-cloud-security-platform
840+
Scenario: Get suppressions affecting future rule returns "Bad Request" response
841+
Given new "GetSuppressionsAffectingFutureRule" request
842+
And body from file "security_monitoring_future_rule_surpression_payload.json"
843+
When the request is sent
844+
Then the response status is 400 Bad Request
845+
846+
@skip @team:DataDog/k9-cloud-security-platform
847+
Scenario: Get suppressions affecting future rule returns "OK" response
848+
Given new "GetSuppressionsAffectingFutureRule" request
849+
And body from file "security_monitoring_future_rule_surpression_payload.json"
850+
When the request is sent
851+
Then the response status is 200 OK
852+
825853
@team:DataDog/cloud-security-posture-management
826854
Scenario: Get the list of signal-based notification rules returns "The list of notification rules." response
827855
Given there is a valid "valid_signal_notification_rule" in the system

‎features/v2/security_monitoring_future_rule_surpression_payload.json‎

Lines changed: 73 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,73 @@
1+
{
2+
"calculatedFields": [
3+
{
4+
"expression": "@request_end_timestamp - @request_start_timestamp",
5+
"name": "response_time"
6+
}
7+
],
8+
"cases": [],
9+
"filters": [
10+
{
11+
"action": "require"
12+
}
13+
],
14+
"groupSignalsBy": [
15+
"service"
16+
],
17+
"hasExtendedTitle": true,
18+
"isEnabled": true,
19+
"message": "",
20+
"name": "My security monitoring rule.",
21+
"options": {
22+
"complianceRuleOptions": {
23+
"regoRule": {
24+
"policy": "package datadog\n\nimport data.datadog.output as dd_output\nimport future.keywords.contains\nimport future.keywords.if\nimport future.keywords.in\n\neval(resource) = \"skip\" if {\n # Logic that evaluates to true if the resource should be skipped\n true\n} else = \"pass\" {\n # Logic that evaluates to true if the resource is compliant\n true\n} else = \"fail\" {\n # Logic that evaluates to true if the resource is not compliant\n true\n}\n\n# This part remains unchanged for all rules\nresults contains result if {\n some resource in input.resources[input.main_resource_type]\n result := dd_output.format(resource, eval(resource))\n}\n",
25+
"resourceTypes": [
26+
"gcp_iam_service_account",
27+
"gcp_iam_policy"
28+
]
29+
},
30+
"resourceType": "aws_acm"
31+
},
32+
"decreaseCriticalityBasedOnEnv": false,
33+
"detectionMethod": "threshold",
34+
"evaluationWindow": 0,
35+
"hardcodedEvaluatorType": "log4shell",
36+
"impossibleTravelOptions": {
37+
"baselineUserLocations": true
38+
},
39+
"keepAlive": 0,
40+
"maxSignalDuration": 0,
41+
"newValueOptions": {
42+
"forgetAfter": 1,
43+
"learningDuration": 0,
44+
"learningMethod": "duration",
45+
"learningThreshold": 0
46+
},
47+
"thirdPartyRuleOptions": {
48+
"defaultNotifications": [],
49+
"defaultStatus": "critical",
50+
"rootQueries": [
51+
{
52+
"groupByFields": [],
53+
"query": "source:cloudtrail"
54+
}
55+
]
56+
}
57+
},
58+
"queries": [],
59+
"referenceTables": [
60+
{}
61+
],
62+
"schedulingOptions": {
63+
"rrule": "FREQ=HOURLY;INTERVAL=1;",
64+
"start": "2025-07-14T12:00:00",
65+
"timezone": "America/New_York"
66+
},
67+
"tags": [
68+
"env:prod",
69+
"team:security"
70+
],
71+
"thirdPartyCases": [],
72+
"type": "api_security"
73+
}

‎features/v2/undo.json‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2988,6 +2988,18 @@
29882988
"type": "unsafe"
29892989
}
29902990
},
2991+
"GetSuppressionsAffectingFutureRule": {
2992+
"tag": "Security Monitoring",
2993+
"undo": {
2994+
"type": "safe"
2995+
}
2996+
},
2997+
"GetSuppressionsAffectingRule": {
2998+
"tag": "Security Monitoring",
2999+
"undo": {
3000+
"type": "safe"
3001+
}
3002+
},
29913003
"DeleteSecurityMonitoringSuppression": {
29923004
"tag": "Security Monitoring",
29933005
"undo": {

0 commit comments

Comments
 (0)