Skip to content

Commit 1435887

Browse files
authored
feat: Add falco rule type 'aws_cloudtrail' (#94)
* feat: Add falco rule type 'aws_cloudtrail' * docs: Add falco rule type 'aws_cloudtrail'
1 parent 40a1947 commit 1435887

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

sysdig/resource_sysdig_secure_rule_falco.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ func resourceSysdigSecureRuleFalco() *schema.Resource {
5353
Type: schema.TypeString,
5454
Optional: true,
5555
Default: "",
56-
ValidateDiagFunc: validateDiagFunc(validation.StringInSlice([]string{"syscall", "k8s_audit"}, false)),
56+
ValidateDiagFunc: validateDiagFunc(validation.StringInSlice([]string{"syscall", "k8s_audit", "aws_cloudtrail"}, false)),
5757
},
5858
"append": {
5959
Type: schema.TypeBool,

website/docs/r/sysdig_secure_rule_falco.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ The following arguments are supported:
4343
* `condition` - (Required) A [Falco condition](https://falco.org/docs/rules/) is simply a Boolean predicate on Sysdig events expressed using the Sysdig [filter syntax](http://www.sysdig.org/wiki/sysdig-user-guide/#filtering) and macro terms.
4444
* `output` - (Optional) Add additional information to each Falco notification's output. Required if append is false.
4545
* `priority` - (Optional) The priority of the Falco rule. It can be: "emergency", "alert", "critical", "error", "warning", "notice", "info" or "debug". By default is "warning".
46-
* `source` - (Optional) The source of the event. It can be either "syscall" or "k8s_audit". Required if append is false.
46+
* `source` - (Optional) The source of the event. It can be either "syscall", "k8s_audit" or "aws_cloudtrail". Required if append is false.
4747
* `append` - (Optional) This indicates that the rule being created appends the condition to an existing Sysdig-provided rule. By default this is false. Appending to user-created rules is not supported by the API.
4848

4949
## Attributes Reference

0 commit comments

Comments
 (0)