@@ -689,6 +689,21 @@ components:
689689 required: true
690690 schema:
691691 type: string
692+ ResourceFilterAccountID:
693+ description: Filter resource filters by cloud provider account ID. This parameter
694+ is only valid when provider is specified.
695+ in: query
696+ name: account_id
697+ required: false
698+ schema:
699+ type: string
700+ ResourceFilterProvider:
701+ description: Filter resource filters by cloud provider (e.g. aws, gcp, azure).
702+ in: query
703+ name: cloud_provider
704+ required: false
705+ schema:
706+ type: string
692707 ResourceID:
693708 description: 'Identifier, formatted as `type:id`. Supported types: `connection`,
694709 `dashboard`, `integration-account`, `integration-service`, `integration-webhook`,
@@ -807,6 +822,13 @@ components:
807822 required: true
808823 schema:
809824 type: string
825+ SkipCache:
826+ description: Skip cache for resource filters.
827+ in: query
828+ name: skip_cache
829+ required: false
830+ schema:
831+ type: boolean
810832 SpansMetricIDParameter:
811833 description: The name of the span-based metric.
812834 in: path
@@ -15715,6 +15737,26 @@ components:
1571515737 $ref: '#/components/schemas/GetInterfacesData'
1571615738 type: array
1571715739 type: object
15740+ GetResourceEvaluationFiltersResponse:
15741+ description: The definition of `GetResourceEvaluationFiltersResponse` object.
15742+ properties:
15743+ data:
15744+ $ref: '#/components/schemas/GetResourceEvaluationFiltersResponseData'
15745+ required:
15746+ - data
15747+ type: object
15748+ GetResourceEvaluationFiltersResponseData:
15749+ description: The definition of `GetResourceFilterResponseData` object.
15750+ properties:
15751+ attributes:
15752+ $ref: '#/components/schemas/ResourceFilterAttributes'
15753+ id:
15754+ description: The `data` `id`.
15755+ example: csm_resource_filter
15756+ type: string
15757+ type:
15758+ $ref: '#/components/schemas/ResourceFilterRequestType'
15759+ type: object
1571815760 GetRuleVersionHistoryData:
1571915761 description: Data for the rule version history.
1572015762 properties:
@@ -29270,6 +29312,35 @@ components:
2927029312 required:
2927129313 - data
2927229314 type: object
29315+ ResourceFilterAttributes:
29316+ description: Attributes of a resource filter.
29317+ properties:
29318+ cloud_provider:
29319+ additionalProperties:
29320+ additionalProperties:
29321+ items:
29322+ description: Tag filter in format "key:value"
29323+ example: environment:production
29324+ type: string
29325+ type: array
29326+ type: object
29327+ description: A map of cloud provider names (e.g., "aws", "gcp", "azure")
29328+ to a map of account/resource IDs and their associated tag filters.
29329+ type: object
29330+ uuid:
29331+ description: The UUID of the resource filter.
29332+ type: string
29333+ required:
29334+ - cloud_provider
29335+ type: object
29336+ ResourceFilterRequestType:
29337+ description: Constant string to identify the resource type.
29338+ enum:
29339+ - csm_resource_filter
29340+ example: csm_resource_filter
29341+ type: string
29342+ x-enum-varnames:
29343+ - CSM_RESOURCE_FILTER
2927329344 ResponseMetaAttributes:
2927429345 description: Object describing meta attributes of response.
2927529346 properties:
@@ -32253,9 +32324,11 @@ components:
3225332324 example: true
3225432325 type: boolean
3225532326 SecurityMonitoringRuleKeepAlive:
32256- description: "Once a signal is generated, the signal will remain \u201Copen\u201D
32257- if a case is matched at least once within\nthis keep alive window. For third
32258- party detection method, this field is not used."
32327+ description: 'Once a signal is generated, the signal will remain "open" if a
32328+ case is matched at least once within
32329+
32330+ this keep alive window. For third party detection method, this field is not
32331+ used.'
3225932332 enum:
3226032333 - 0
3226132334 - 60
@@ -32285,9 +32358,10 @@ components:
3228532358 - TWELVE_HOURS
3228632359 - ONE_DAY
3228732360 SecurityMonitoringRuleMaxSignalDuration:
32288- description: "A signal will \u201Cclose\u201D regardless of the query being
32289- matched once the time exceeds the maximum duration.\nThis time is calculated
32290- from the first seen timestamp."
32361+ description: 'A signal will "close" regardless of the query being matched once
32362+ the time exceeds the maximum duration.
32363+
32364+ This time is calculated from the first seen timestamp.'
3229132365 enum:
3229232366 - 0
3229332367 - 60
@@ -38688,6 +38762,52 @@ components:
3868838762 id:
3868938763 $ref: '#/components/schemas/ApiID'
3869038764 type: object
38765+ UpdateResourceEvaluationFiltersRequest:
38766+ description: Request object to update a resource filter.
38767+ properties:
38768+ data:
38769+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersRequestData'
38770+ required:
38771+ - data
38772+ type: object
38773+ UpdateResourceEvaluationFiltersRequestData:
38774+ description: The definition of `UpdateResourceFilterRequestData` object.
38775+ properties:
38776+ attributes:
38777+ $ref: '#/components/schemas/ResourceFilterAttributes'
38778+ id:
38779+ description: The `UpdateResourceEvaluationFiltersRequestData` `id`.
38780+ example: csm_resource_filter
38781+ type: string
38782+ type:
38783+ $ref: '#/components/schemas/ResourceFilterRequestType'
38784+ required:
38785+ - attributes
38786+ - type
38787+ type: object
38788+ UpdateResourceEvaluationFiltersResponse:
38789+ description: The definition of `UpdateResourceEvaluationFiltersResponse` object.
38790+ properties:
38791+ data:
38792+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersResponseData'
38793+ required:
38794+ - data
38795+ type: object
38796+ UpdateResourceEvaluationFiltersResponseData:
38797+ description: The definition of `UpdateResourceFilterResponseData` object.
38798+ properties:
38799+ attributes:
38800+ $ref: '#/components/schemas/ResourceFilterAttributes'
38801+ id:
38802+ description: The `data` `id`.
38803+ example: csm_resource_filter
38804+ type: string
38805+ type:
38806+ $ref: '#/components/schemas/ResourceFilterRequestType'
38807+ required:
38808+ - attributes
38809+ - type
38810+ type: object
3869138811 UpdateRuleRequest:
3869238812 description: Request to update a scorecard rule.
3869338813 properties:
@@ -43624,6 +43744,74 @@ paths:
4362443744 permissions:
4362543745 - security_monitoring_rules_read
4362643746 - security_monitoring_rules_write
43747+ /api/v2/cloud_security_management/resource_filters:
43748+ get:
43749+ description: List resource filters.
43750+ operationId: GetResourceEvaluationFilters
43751+ parameters:
43752+ - $ref: '#/components/parameters/ResourceFilterProvider'
43753+ - $ref: '#/components/parameters/ResourceFilterAccountID'
43754+ - $ref: '#/components/parameters/SkipCache'
43755+ responses:
43756+ '200':
43757+ content:
43758+ application/json:
43759+ schema:
43760+ $ref: '#/components/schemas/GetResourceEvaluationFiltersResponse'
43761+ description: OK
43762+ '400':
43763+ $ref: '#/components/responses/BadRequestResponse'
43764+ '403':
43765+ $ref: '#/components/responses/NotAuthorizedResponse'
43766+ '429':
43767+ $ref: '#/components/responses/TooManyRequestsResponse'
43768+ security:
43769+ - apiKeyAuth: []
43770+ appKeyAuth: []
43771+ - AuthZ:
43772+ - security_monitoring_filters_read
43773+ summary: List resource filters
43774+ tags:
43775+ - Security Monitoring
43776+ x-permission:
43777+ operator: OR
43778+ permissions:
43779+ - security_monitoring_filters_read
43780+ put:
43781+ description: Update resource filters.
43782+ operationId: UpdateResourceEvaluationFilters
43783+ requestBody:
43784+ content:
43785+ application/json:
43786+ schema:
43787+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersRequest'
43788+ required: true
43789+ responses:
43790+ '201':
43791+ content:
43792+ application/json:
43793+ schema:
43794+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersResponse'
43795+ description: OK
43796+ '400':
43797+ $ref: '#/components/responses/BadRequestResponse'
43798+ '403':
43799+ $ref: '#/components/responses/NotAuthorizedResponse'
43800+ '429':
43801+ $ref: '#/components/responses/TooManyRequestsResponse'
43802+ security:
43803+ - apiKeyAuth: []
43804+ appKeyAuth: []
43805+ - AuthZ:
43806+ - security_monitoring_filters_write
43807+ summary: Update resource filters
43808+ tags:
43809+ - Security Monitoring
43810+ x-codegen-request-body-name: body
43811+ x-permission:
43812+ operator: OR
43813+ permissions:
43814+ - security_monitoring_filters_write
4362743815 /api/v2/container_images:
4362843816 get:
4362943817 description: Get all Container Images for your organization.
0 commit comments