@@ -689,6 +689,21 @@ components:
689689 required: true
690690 schema:
691691 type: string
692+ ResourceFilterAccountID:
693+ description: Filter resource filters by cloud provider account ID. This parameter
694+ is only valid when provider is specified.
695+ in: query
696+ name: account_id
697+ required: false
698+ schema:
699+ type: string
700+ ResourceFilterProvider:
701+ description: Filter resource filters by cloud provider (e.g. aws, gcp, azure).
702+ in: query
703+ name: cloud_provider
704+ required: false
705+ schema:
706+ type: string
692707 ResourceID:
693708 description: 'Identifier, formatted as `type:id`. Supported types: `connection`,
694709 `dashboard`, `integration-account`, `integration-service`, `integration-webhook`,
@@ -807,6 +822,13 @@ components:
807822 required: true
808823 schema:
809824 type: string
825+ SkipCache:
826+ description: Skip cache for resource filters.
827+ in: query
828+ name: skip_cache
829+ required: false
830+ schema:
831+ type: boolean
810832 SpansMetricIDParameter:
811833 description: The name of the span-based metric.
812834 in: path
@@ -15791,6 +15813,25 @@ components:
1579115813 $ref: '#/components/schemas/GetInterfacesData'
1579215814 type: array
1579315815 type: object
15816+ GetResourceEvaluationFiltersResponse:
15817+ description: The definition of `GetResourceEvaluationFiltersResponse` object.
15818+ properties:
15819+ data:
15820+ $ref: '#/components/schemas/GetResourceEvaluationFiltersResponseData'
15821+ required:
15822+ - data
15823+ type: object
15824+ GetResourceEvaluationFiltersResponseData:
15825+ description: The definition of `GetResourceFilterResponseData` object.
15826+ properties:
15827+ attributes:
15828+ $ref: '#/components/schemas/ResourceFilterAttributes'
15829+ id:
15830+ description: The `data` `id`.
15831+ type: string
15832+ type:
15833+ $ref: '#/components/schemas/ResourceFilterRequestType'
15834+ type: object
1579415835 GetRuleVersionHistoryData:
1579515836 description: Data for the rule version history.
1579615837 properties:
@@ -29377,6 +29418,46 @@ components:
2937729418 required:
2937829419 - data
2937929420 type: object
29421+ ResourceFilterAttributes:
29422+ description: Attributes of a resource filter.
29423+ properties:
29424+ cloud_provider:
29425+ additionalProperties:
29426+ additionalProperties:
29427+ items:
29428+ description: Tag filter in format "key:value"
29429+ example: environment:production
29430+ type: string
29431+ type: array
29432+ type: object
29433+ description: A map of cloud provider names (e.g., "aws", "gcp", "azure")
29434+ to a map of account/resource IDs and their associated tag filters.
29435+ example:
29436+ aws:
29437+ '123456789':
29438+ - environment:production
29439+ - team:devops
29440+ azure:
29441+ sub-001:
29442+ - app:frontend
29443+ gcp:
29444+ project-abc:
29445+ - region:us-central1
29446+ type: object
29447+ uuid:
29448+ description: The UUID of the resource filter.
29449+ type: string
29450+ required:
29451+ - cloud_provider
29452+ type: object
29453+ ResourceFilterRequestType:
29454+ description: Constant string to identify the resource type.
29455+ enum:
29456+ - csm_resource_filter
29457+ example: csm_resource_filter
29458+ type: string
29459+ x-enum-varnames:
29460+ - CSM_RESOURCE_FILTER
2938029461 ResponseMetaAttributes:
2938129462 description: Object describing meta attributes of response.
2938229463 properties:
@@ -32512,9 +32593,11 @@ components:
3251232593 example: true
3251332594 type: boolean
3251432595 SecurityMonitoringRuleKeepAlive:
32515- description: "Once a signal is generated, the signal will remain \u201Copen\u201D
32516- if a case is matched at least once within\nthis keep alive window. For third
32517- party detection method, this field is not used."
32596+ description: 'Once a signal is generated, the signal will remain "open" if a
32597+ case is matched at least once within
32598+
32599+ this keep alive window. For third party detection method, this field is not
32600+ used.'
3251832601 enum:
3251932602 - 0
3252032603 - 60
@@ -32544,9 +32627,10 @@ components:
3254432627 - TWELVE_HOURS
3254532628 - ONE_DAY
3254632629 SecurityMonitoringRuleMaxSignalDuration:
32547- description: "A signal will \u201Cclose\u201D regardless of the query being
32548- matched once the time exceeds the maximum duration.\nThis time is calculated
32549- from the first seen timestamp."
32630+ description: 'A signal will "close" regardless of the query being matched once
32631+ the time exceeds the maximum duration.
32632+
32633+ This time is calculated from the first seen timestamp.'
3255032634 enum:
3255132635 - 0
3255232636 - 60
@@ -38947,6 +39031,44 @@ components:
3894739031 id:
3894839032 $ref: '#/components/schemas/ApiID'
3894939033 type: object
39034+ UpdateResourceEvaluationFiltersRequest:
39035+ description: Request object to update a resource filter.
39036+ properties:
39037+ data:
39038+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersRequestData'
39039+ required:
39040+ - data
39041+ type: object
39042+ UpdateResourceEvaluationFiltersRequestData:
39043+ description: The definition of `UpdateResourceFilterRequestData` object.
39044+ properties:
39045+ attributes:
39046+ $ref: '#/components/schemas/ResourceFilterAttributes'
39047+ id:
39048+ description: The `UpdateResourceEvaluationFiltersRequestData` `id`.
39049+ type: string
39050+ type:
39051+ $ref: '#/components/schemas/ResourceFilterRequestType'
39052+ type: object
39053+ UpdateResourceEvaluationFiltersResponse:
39054+ description: The definition of `UpdateResourceEvaluationFiltersResponse` object.
39055+ properties:
39056+ data:
39057+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersResponseData'
39058+ required:
39059+ - data
39060+ type: object
39061+ UpdateResourceEvaluationFiltersResponseData:
39062+ description: The definition of `UpdateResourceFilterResponseData` object.
39063+ properties:
39064+ attributes:
39065+ $ref: '#/components/schemas/ResourceFilterAttributes'
39066+ id:
39067+ description: The `data` `id`.
39068+ type: string
39069+ type:
39070+ $ref: '#/components/schemas/ResourceFilterRequestType'
39071+ type: object
3895039072 UpdateRuleRequest:
3895139073 description: Request to update a scorecard rule.
3895239074 properties:
@@ -43883,6 +44005,74 @@ paths:
4388344005 permissions:
4388444006 - security_monitoring_rules_read
4388544007 - security_monitoring_rules_write
44008+ /api/v2/cloud_security_management/resource_filters:
44009+ get:
44010+ description: List resource filters.
44011+ operationId: GetResourceEvaluationFilters
44012+ parameters:
44013+ - $ref: '#/components/parameters/ResourceFilterProvider'
44014+ - $ref: '#/components/parameters/ResourceFilterAccountID'
44015+ - $ref: '#/components/parameters/SkipCache'
44016+ responses:
44017+ '200':
44018+ content:
44019+ application/json:
44020+ schema:
44021+ $ref: '#/components/schemas/GetResourceEvaluationFiltersResponse'
44022+ description: OK
44023+ '400':
44024+ $ref: '#/components/responses/BadRequestResponse'
44025+ '403':
44026+ $ref: '#/components/responses/NotAuthorizedResponse'
44027+ '429':
44028+ $ref: '#/components/responses/TooManyRequestsResponse'
44029+ security:
44030+ - apiKeyAuth: []
44031+ appKeyAuth: []
44032+ - AuthZ:
44033+ - security_monitoring_filters_read
44034+ summary: List resource filters
44035+ tags:
44036+ - Security Monitoring
44037+ x-permission:
44038+ operator: OR
44039+ permissions:
44040+ - security_monitoring_filters_read
44041+ put:
44042+ description: Update resource filters.
44043+ operationId: UpdateResourceEvaluationFilters
44044+ requestBody:
44045+ content:
44046+ application/json:
44047+ schema:
44048+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersRequest'
44049+ required: true
44050+ responses:
44051+ '201':
44052+ content:
44053+ application/json:
44054+ schema:
44055+ $ref: '#/components/schemas/UpdateResourceEvaluationFiltersResponse'
44056+ description: OK
44057+ '400':
44058+ $ref: '#/components/responses/BadRequestResponse'
44059+ '403':
44060+ $ref: '#/components/responses/NotAuthorizedResponse'
44061+ '429':
44062+ $ref: '#/components/responses/TooManyRequestsResponse'
44063+ security:
44064+ - apiKeyAuth: []
44065+ appKeyAuth: []
44066+ - AuthZ:
44067+ - security_monitoring_filters_write
44068+ summary: Update resource filters
44069+ tags:
44070+ - Security Monitoring
44071+ x-codegen-request-body-name: body
44072+ x-permission:
44073+ operator: OR
44074+ permissions:
44075+ - security_monitoring_filters_write
4388644076 /api/v2/container_images:
4388744077 get:
4388844078 description: Get all Container Images for your organization.
0 commit comments