sentinel

package
v3.55.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 9, 2021 License: Apache-2.0 Imports: 7 Imported by: 0

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type AlertRuleFusion added in v3.42.0

type AlertRuleFusion struct {
	pulumi.CustomResourceState

	// The GUID of the alert rule template which is used for this Sentinel Fusion Alert Rule. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringOutput `pulumi:"alertRuleTemplateGuid"`
	// Should this Sentinel Fusion Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrOutput `pulumi:"enabled"`
	// The ID of the Log Analytics Workspace this Sentinel Fusion Alert Rule belongs to. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Sentinel Fusion Alert Rule. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	Name pulumi.StringOutput `pulumi:"name"`
}

Manages a Sentinel Fusion Alert Rule.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("pergb2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewAlertRuleFusion(ctx, "exampleAlertRuleFusion", &sentinel.AlertRuleFusionArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
			AlertRuleTemplateGuid:   pulumi.String("f71aba3d-28fb-450b-b192-4e76a83015c8"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Sentinel Fusion Alert Rules can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/alertRuleFusion:AlertRuleFusion example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/alertRules/rule1

```

func GetAlertRuleFusion added in v3.42.0

func GetAlertRuleFusion(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AlertRuleFusionState, opts ...pulumi.ResourceOption) (*AlertRuleFusion, error)

GetAlertRuleFusion gets an existing AlertRuleFusion resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAlertRuleFusion added in v3.42.0

func NewAlertRuleFusion(ctx *pulumi.Context,
	name string, args *AlertRuleFusionArgs, opts ...pulumi.ResourceOption) (*AlertRuleFusion, error)

NewAlertRuleFusion registers a new resource with the given unique name, arguments, and options.

func (*AlertRuleFusion) ElementType added in v3.42.0

func (*AlertRuleFusion) ElementType() reflect.Type

func (*AlertRuleFusion) ToAlertRuleFusionOutput added in v3.42.0

func (i *AlertRuleFusion) ToAlertRuleFusionOutput() AlertRuleFusionOutput

func (*AlertRuleFusion) ToAlertRuleFusionOutputWithContext added in v3.42.0

func (i *AlertRuleFusion) ToAlertRuleFusionOutputWithContext(ctx context.Context) AlertRuleFusionOutput

func (*AlertRuleFusion) ToAlertRuleFusionPtrOutput added in v3.47.1

func (i *AlertRuleFusion) ToAlertRuleFusionPtrOutput() AlertRuleFusionPtrOutput

func (*AlertRuleFusion) ToAlertRuleFusionPtrOutputWithContext added in v3.47.1

func (i *AlertRuleFusion) ToAlertRuleFusionPtrOutputWithContext(ctx context.Context) AlertRuleFusionPtrOutput

type AlertRuleFusionArgs added in v3.42.0

type AlertRuleFusionArgs struct {
	// The GUID of the alert rule template which is used for this Sentinel Fusion Alert Rule. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringInput
	// Should this Sentinel Fusion Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrInput
	// The ID of the Log Analytics Workspace this Sentinel Fusion Alert Rule belongs to. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Sentinel Fusion Alert Rule. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	Name pulumi.StringPtrInput
}

The set of arguments for constructing a AlertRuleFusion resource.

func (AlertRuleFusionArgs) ElementType added in v3.42.0

func (AlertRuleFusionArgs) ElementType() reflect.Type

type AlertRuleFusionArray added in v3.47.1

type AlertRuleFusionArray []AlertRuleFusionInput

func (AlertRuleFusionArray) ElementType added in v3.47.1

func (AlertRuleFusionArray) ElementType() reflect.Type

func (AlertRuleFusionArray) ToAlertRuleFusionArrayOutput added in v3.47.1

func (i AlertRuleFusionArray) ToAlertRuleFusionArrayOutput() AlertRuleFusionArrayOutput

func (AlertRuleFusionArray) ToAlertRuleFusionArrayOutputWithContext added in v3.47.1

func (i AlertRuleFusionArray) ToAlertRuleFusionArrayOutputWithContext(ctx context.Context) AlertRuleFusionArrayOutput

type AlertRuleFusionArrayInput added in v3.47.1

type AlertRuleFusionArrayInput interface {
	pulumi.Input

	ToAlertRuleFusionArrayOutput() AlertRuleFusionArrayOutput
	ToAlertRuleFusionArrayOutputWithContext(context.Context) AlertRuleFusionArrayOutput
}

AlertRuleFusionArrayInput is an input type that accepts AlertRuleFusionArray and AlertRuleFusionArrayOutput values. You can construct a concrete instance of `AlertRuleFusionArrayInput` via:

AlertRuleFusionArray{ AlertRuleFusionArgs{...} }

type AlertRuleFusionArrayOutput added in v3.47.1

type AlertRuleFusionArrayOutput struct{ *pulumi.OutputState }

func (AlertRuleFusionArrayOutput) ElementType added in v3.47.1

func (AlertRuleFusionArrayOutput) ElementType() reflect.Type

func (AlertRuleFusionArrayOutput) Index added in v3.47.1

func (AlertRuleFusionArrayOutput) ToAlertRuleFusionArrayOutput added in v3.47.1

func (o AlertRuleFusionArrayOutput) ToAlertRuleFusionArrayOutput() AlertRuleFusionArrayOutput

func (AlertRuleFusionArrayOutput) ToAlertRuleFusionArrayOutputWithContext added in v3.47.1

func (o AlertRuleFusionArrayOutput) ToAlertRuleFusionArrayOutputWithContext(ctx context.Context) AlertRuleFusionArrayOutput

type AlertRuleFusionInput added in v3.42.0

type AlertRuleFusionInput interface {
	pulumi.Input

	ToAlertRuleFusionOutput() AlertRuleFusionOutput
	ToAlertRuleFusionOutputWithContext(ctx context.Context) AlertRuleFusionOutput
}

type AlertRuleFusionMap added in v3.47.1

type AlertRuleFusionMap map[string]AlertRuleFusionInput

func (AlertRuleFusionMap) ElementType added in v3.47.1

func (AlertRuleFusionMap) ElementType() reflect.Type

func (AlertRuleFusionMap) ToAlertRuleFusionMapOutput added in v3.47.1

func (i AlertRuleFusionMap) ToAlertRuleFusionMapOutput() AlertRuleFusionMapOutput

func (AlertRuleFusionMap) ToAlertRuleFusionMapOutputWithContext added in v3.47.1

func (i AlertRuleFusionMap) ToAlertRuleFusionMapOutputWithContext(ctx context.Context) AlertRuleFusionMapOutput

type AlertRuleFusionMapInput added in v3.47.1

type AlertRuleFusionMapInput interface {
	pulumi.Input

	ToAlertRuleFusionMapOutput() AlertRuleFusionMapOutput
	ToAlertRuleFusionMapOutputWithContext(context.Context) AlertRuleFusionMapOutput
}

AlertRuleFusionMapInput is an input type that accepts AlertRuleFusionMap and AlertRuleFusionMapOutput values. You can construct a concrete instance of `AlertRuleFusionMapInput` via:

AlertRuleFusionMap{ "key": AlertRuleFusionArgs{...} }

type AlertRuleFusionMapOutput added in v3.47.1

type AlertRuleFusionMapOutput struct{ *pulumi.OutputState }

func (AlertRuleFusionMapOutput) ElementType added in v3.47.1

func (AlertRuleFusionMapOutput) ElementType() reflect.Type

func (AlertRuleFusionMapOutput) MapIndex added in v3.47.1

func (AlertRuleFusionMapOutput) ToAlertRuleFusionMapOutput added in v3.47.1

func (o AlertRuleFusionMapOutput) ToAlertRuleFusionMapOutput() AlertRuleFusionMapOutput

func (AlertRuleFusionMapOutput) ToAlertRuleFusionMapOutputWithContext added in v3.47.1

func (o AlertRuleFusionMapOutput) ToAlertRuleFusionMapOutputWithContext(ctx context.Context) AlertRuleFusionMapOutput

type AlertRuleFusionOutput added in v3.42.0

type AlertRuleFusionOutput struct {
	*pulumi.OutputState
}

func (AlertRuleFusionOutput) ElementType added in v3.42.0

func (AlertRuleFusionOutput) ElementType() reflect.Type

func (AlertRuleFusionOutput) ToAlertRuleFusionOutput added in v3.42.0

func (o AlertRuleFusionOutput) ToAlertRuleFusionOutput() AlertRuleFusionOutput

func (AlertRuleFusionOutput) ToAlertRuleFusionOutputWithContext added in v3.42.0

func (o AlertRuleFusionOutput) ToAlertRuleFusionOutputWithContext(ctx context.Context) AlertRuleFusionOutput

func (AlertRuleFusionOutput) ToAlertRuleFusionPtrOutput added in v3.47.1

func (o AlertRuleFusionOutput) ToAlertRuleFusionPtrOutput() AlertRuleFusionPtrOutput

func (AlertRuleFusionOutput) ToAlertRuleFusionPtrOutputWithContext added in v3.47.1

func (o AlertRuleFusionOutput) ToAlertRuleFusionPtrOutputWithContext(ctx context.Context) AlertRuleFusionPtrOutput

type AlertRuleFusionPtrInput added in v3.47.1

type AlertRuleFusionPtrInput interface {
	pulumi.Input

	ToAlertRuleFusionPtrOutput() AlertRuleFusionPtrOutput
	ToAlertRuleFusionPtrOutputWithContext(ctx context.Context) AlertRuleFusionPtrOutput
}

type AlertRuleFusionPtrOutput added in v3.47.1

type AlertRuleFusionPtrOutput struct {
	*pulumi.OutputState
}

func (AlertRuleFusionPtrOutput) ElementType added in v3.47.1

func (AlertRuleFusionPtrOutput) ElementType() reflect.Type

func (AlertRuleFusionPtrOutput) ToAlertRuleFusionPtrOutput added in v3.47.1

func (o AlertRuleFusionPtrOutput) ToAlertRuleFusionPtrOutput() AlertRuleFusionPtrOutput

func (AlertRuleFusionPtrOutput) ToAlertRuleFusionPtrOutputWithContext added in v3.47.1

func (o AlertRuleFusionPtrOutput) ToAlertRuleFusionPtrOutputWithContext(ctx context.Context) AlertRuleFusionPtrOutput

type AlertRuleFusionState added in v3.42.0

type AlertRuleFusionState struct {
	// The GUID of the alert rule template which is used for this Sentinel Fusion Alert Rule. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringPtrInput
	// Should this Sentinel Fusion Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrInput
	// The ID of the Log Analytics Workspace this Sentinel Fusion Alert Rule belongs to. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Sentinel Fusion Alert Rule. Changing this forces a new Sentinel Fusion Alert Rule to be created.
	Name pulumi.StringPtrInput
}

func (AlertRuleFusionState) ElementType added in v3.42.0

func (AlertRuleFusionState) ElementType() reflect.Type

type AlertRuleMsSecurityIncident

type AlertRuleMsSecurityIncident struct {
	pulumi.CustomResourceState

	// The GUID of the alert rule template which is used to create this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringPtrOutput `pulumi:"alertRuleTemplateGuid"`
	// The description of this Sentinel MS Security Incident Alert Rule.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The friendly name of this Sentinel MS Security Incident Alert Rule.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Only create incidents when the alert display name doesn't contain text from this list.
	DisplayNameExcludeFilters pulumi.StringArrayOutput `pulumi:"displayNameExcludeFilters"`
	// Only create incidents when the alert display name contain text from this list, leave empty to apply no filter.
	DisplayNameFilters pulumi.StringArrayOutput `pulumi:"displayNameFilters"`
	// Should this Sentinel MS Security Incident Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrOutput `pulumi:"enabled"`
	// The ID of the Log Analytics Workspace this Sentinel MS Security Incident Alert Rule belongs to. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Sentinel MS Security Incident Alert Rule. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The Microsoft Security Service from where the alert will be generated. Possible values are `Azure Active Directory Identity Protection`, `Azure Advanced Threat Protection`, `Azure Security Center`, `Azure Security Center for IoT`, `Microsoft Cloud App Security`, `Microsoft Defender Advanced Threat Protection` and `Office 365 Advanced Threat Protection`.
	ProductFilter pulumi.StringOutput `pulumi:"productFilter"`
	// Only create incidents from alerts when alert severity level is contained in this list. Possible values are `High`, `Medium`, `Low` and `Informational`.
	SeverityFilters pulumi.StringArrayOutput `pulumi:"severityFilters"`
	// Deprecated: this property has been renamed to display_name_filter to better match the SDK & API
	TextWhitelists pulumi.StringArrayOutput `pulumi:"textWhitelists"`
}

Manages a Sentinel MS Security Incident Alert Rule.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("pergb2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewAlertRuleMsSecurityIncident(ctx, "exampleAlertRuleMsSecurityIncident", &sentinel.AlertRuleMsSecurityIncidentArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
			ProductFilter:           pulumi.String("Microsoft Cloud App Security"),
			DisplayName:             pulumi.String("example rule"),
			SeverityFilters: pulumi.StringArray{
				pulumi.String("High"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Sentinel MS Security Incident Alert Rules can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/alertRuleMsSecurityIncident:AlertRuleMsSecurityIncident example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/alertRules/rule1

```

func GetAlertRuleMsSecurityIncident

func GetAlertRuleMsSecurityIncident(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AlertRuleMsSecurityIncidentState, opts ...pulumi.ResourceOption) (*AlertRuleMsSecurityIncident, error)

GetAlertRuleMsSecurityIncident gets an existing AlertRuleMsSecurityIncident resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAlertRuleMsSecurityIncident

func NewAlertRuleMsSecurityIncident(ctx *pulumi.Context,
	name string, args *AlertRuleMsSecurityIncidentArgs, opts ...pulumi.ResourceOption) (*AlertRuleMsSecurityIncident, error)

NewAlertRuleMsSecurityIncident registers a new resource with the given unique name, arguments, and options.

func (*AlertRuleMsSecurityIncident) ElementType added in v3.31.1

func (*AlertRuleMsSecurityIncident) ElementType() reflect.Type

func (*AlertRuleMsSecurityIncident) ToAlertRuleMsSecurityIncidentOutput added in v3.31.1

func (i *AlertRuleMsSecurityIncident) ToAlertRuleMsSecurityIncidentOutput() AlertRuleMsSecurityIncidentOutput

func (*AlertRuleMsSecurityIncident) ToAlertRuleMsSecurityIncidentOutputWithContext added in v3.31.1

func (i *AlertRuleMsSecurityIncident) ToAlertRuleMsSecurityIncidentOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentOutput

func (*AlertRuleMsSecurityIncident) ToAlertRuleMsSecurityIncidentPtrOutput added in v3.47.1

func (i *AlertRuleMsSecurityIncident) ToAlertRuleMsSecurityIncidentPtrOutput() AlertRuleMsSecurityIncidentPtrOutput

func (*AlertRuleMsSecurityIncident) ToAlertRuleMsSecurityIncidentPtrOutputWithContext added in v3.47.1

func (i *AlertRuleMsSecurityIncident) ToAlertRuleMsSecurityIncidentPtrOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentPtrOutput

type AlertRuleMsSecurityIncidentArgs

type AlertRuleMsSecurityIncidentArgs struct {
	// The GUID of the alert rule template which is used to create this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringPtrInput
	// The description of this Sentinel MS Security Incident Alert Rule.
	Description pulumi.StringPtrInput
	// The friendly name of this Sentinel MS Security Incident Alert Rule.
	DisplayName pulumi.StringInput
	// Only create incidents when the alert display name doesn't contain text from this list.
	DisplayNameExcludeFilters pulumi.StringArrayInput
	// Only create incidents when the alert display name contain text from this list, leave empty to apply no filter.
	DisplayNameFilters pulumi.StringArrayInput
	// Should this Sentinel MS Security Incident Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrInput
	// The ID of the Log Analytics Workspace this Sentinel MS Security Incident Alert Rule belongs to. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Sentinel MS Security Incident Alert Rule. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	Name pulumi.StringPtrInput
	// The Microsoft Security Service from where the alert will be generated. Possible values are `Azure Active Directory Identity Protection`, `Azure Advanced Threat Protection`, `Azure Security Center`, `Azure Security Center for IoT`, `Microsoft Cloud App Security`, `Microsoft Defender Advanced Threat Protection` and `Office 365 Advanced Threat Protection`.
	ProductFilter pulumi.StringInput
	// Only create incidents from alerts when alert severity level is contained in this list. Possible values are `High`, `Medium`, `Low` and `Informational`.
	SeverityFilters pulumi.StringArrayInput
	// Deprecated: this property has been renamed to display_name_filter to better match the SDK & API
	TextWhitelists pulumi.StringArrayInput
}

The set of arguments for constructing a AlertRuleMsSecurityIncident resource.

func (AlertRuleMsSecurityIncidentArgs) ElementType

type AlertRuleMsSecurityIncidentArray added in v3.47.1

type AlertRuleMsSecurityIncidentArray []AlertRuleMsSecurityIncidentInput

func (AlertRuleMsSecurityIncidentArray) ElementType added in v3.47.1

func (AlertRuleMsSecurityIncidentArray) ToAlertRuleMsSecurityIncidentArrayOutput added in v3.47.1

func (i AlertRuleMsSecurityIncidentArray) ToAlertRuleMsSecurityIncidentArrayOutput() AlertRuleMsSecurityIncidentArrayOutput

func (AlertRuleMsSecurityIncidentArray) ToAlertRuleMsSecurityIncidentArrayOutputWithContext added in v3.47.1

func (i AlertRuleMsSecurityIncidentArray) ToAlertRuleMsSecurityIncidentArrayOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentArrayOutput

type AlertRuleMsSecurityIncidentArrayInput added in v3.47.1

type AlertRuleMsSecurityIncidentArrayInput interface {
	pulumi.Input

	ToAlertRuleMsSecurityIncidentArrayOutput() AlertRuleMsSecurityIncidentArrayOutput
	ToAlertRuleMsSecurityIncidentArrayOutputWithContext(context.Context) AlertRuleMsSecurityIncidentArrayOutput
}

AlertRuleMsSecurityIncidentArrayInput is an input type that accepts AlertRuleMsSecurityIncidentArray and AlertRuleMsSecurityIncidentArrayOutput values. You can construct a concrete instance of `AlertRuleMsSecurityIncidentArrayInput` via:

AlertRuleMsSecurityIncidentArray{ AlertRuleMsSecurityIncidentArgs{...} }

type AlertRuleMsSecurityIncidentArrayOutput added in v3.47.1

type AlertRuleMsSecurityIncidentArrayOutput struct{ *pulumi.OutputState }

func (AlertRuleMsSecurityIncidentArrayOutput) ElementType added in v3.47.1

func (AlertRuleMsSecurityIncidentArrayOutput) Index added in v3.47.1

func (AlertRuleMsSecurityIncidentArrayOutput) ToAlertRuleMsSecurityIncidentArrayOutput added in v3.47.1

func (o AlertRuleMsSecurityIncidentArrayOutput) ToAlertRuleMsSecurityIncidentArrayOutput() AlertRuleMsSecurityIncidentArrayOutput

func (AlertRuleMsSecurityIncidentArrayOutput) ToAlertRuleMsSecurityIncidentArrayOutputWithContext added in v3.47.1

func (o AlertRuleMsSecurityIncidentArrayOutput) ToAlertRuleMsSecurityIncidentArrayOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentArrayOutput

type AlertRuleMsSecurityIncidentInput added in v3.31.1

type AlertRuleMsSecurityIncidentInput interface {
	pulumi.Input

	ToAlertRuleMsSecurityIncidentOutput() AlertRuleMsSecurityIncidentOutput
	ToAlertRuleMsSecurityIncidentOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentOutput
}

type AlertRuleMsSecurityIncidentMap added in v3.47.1

type AlertRuleMsSecurityIncidentMap map[string]AlertRuleMsSecurityIncidentInput

func (AlertRuleMsSecurityIncidentMap) ElementType added in v3.47.1

func (AlertRuleMsSecurityIncidentMap) ToAlertRuleMsSecurityIncidentMapOutput added in v3.47.1

func (i AlertRuleMsSecurityIncidentMap) ToAlertRuleMsSecurityIncidentMapOutput() AlertRuleMsSecurityIncidentMapOutput

func (AlertRuleMsSecurityIncidentMap) ToAlertRuleMsSecurityIncidentMapOutputWithContext added in v3.47.1

func (i AlertRuleMsSecurityIncidentMap) ToAlertRuleMsSecurityIncidentMapOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentMapOutput

type AlertRuleMsSecurityIncidentMapInput added in v3.47.1

type AlertRuleMsSecurityIncidentMapInput interface {
	pulumi.Input

	ToAlertRuleMsSecurityIncidentMapOutput() AlertRuleMsSecurityIncidentMapOutput
	ToAlertRuleMsSecurityIncidentMapOutputWithContext(context.Context) AlertRuleMsSecurityIncidentMapOutput
}

AlertRuleMsSecurityIncidentMapInput is an input type that accepts AlertRuleMsSecurityIncidentMap and AlertRuleMsSecurityIncidentMapOutput values. You can construct a concrete instance of `AlertRuleMsSecurityIncidentMapInput` via:

AlertRuleMsSecurityIncidentMap{ "key": AlertRuleMsSecurityIncidentArgs{...} }

type AlertRuleMsSecurityIncidentMapOutput added in v3.47.1

type AlertRuleMsSecurityIncidentMapOutput struct{ *pulumi.OutputState }

func (AlertRuleMsSecurityIncidentMapOutput) ElementType added in v3.47.1

func (AlertRuleMsSecurityIncidentMapOutput) MapIndex added in v3.47.1

func (AlertRuleMsSecurityIncidentMapOutput) ToAlertRuleMsSecurityIncidentMapOutput added in v3.47.1

func (o AlertRuleMsSecurityIncidentMapOutput) ToAlertRuleMsSecurityIncidentMapOutput() AlertRuleMsSecurityIncidentMapOutput

func (AlertRuleMsSecurityIncidentMapOutput) ToAlertRuleMsSecurityIncidentMapOutputWithContext added in v3.47.1

func (o AlertRuleMsSecurityIncidentMapOutput) ToAlertRuleMsSecurityIncidentMapOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentMapOutput

type AlertRuleMsSecurityIncidentOutput added in v3.31.1

type AlertRuleMsSecurityIncidentOutput struct {
	*pulumi.OutputState
}

func (AlertRuleMsSecurityIncidentOutput) ElementType added in v3.31.1

func (AlertRuleMsSecurityIncidentOutput) ToAlertRuleMsSecurityIncidentOutput added in v3.31.1

func (o AlertRuleMsSecurityIncidentOutput) ToAlertRuleMsSecurityIncidentOutput() AlertRuleMsSecurityIncidentOutput

func (AlertRuleMsSecurityIncidentOutput) ToAlertRuleMsSecurityIncidentOutputWithContext added in v3.31.1

func (o AlertRuleMsSecurityIncidentOutput) ToAlertRuleMsSecurityIncidentOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentOutput

func (AlertRuleMsSecurityIncidentOutput) ToAlertRuleMsSecurityIncidentPtrOutput added in v3.47.1

func (o AlertRuleMsSecurityIncidentOutput) ToAlertRuleMsSecurityIncidentPtrOutput() AlertRuleMsSecurityIncidentPtrOutput

func (AlertRuleMsSecurityIncidentOutput) ToAlertRuleMsSecurityIncidentPtrOutputWithContext added in v3.47.1

func (o AlertRuleMsSecurityIncidentOutput) ToAlertRuleMsSecurityIncidentPtrOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentPtrOutput

type AlertRuleMsSecurityIncidentPtrInput added in v3.47.1

type AlertRuleMsSecurityIncidentPtrInput interface {
	pulumi.Input

	ToAlertRuleMsSecurityIncidentPtrOutput() AlertRuleMsSecurityIncidentPtrOutput
	ToAlertRuleMsSecurityIncidentPtrOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentPtrOutput
}

type AlertRuleMsSecurityIncidentPtrOutput added in v3.47.1

type AlertRuleMsSecurityIncidentPtrOutput struct {
	*pulumi.OutputState
}

func (AlertRuleMsSecurityIncidentPtrOutput) ElementType added in v3.47.1

func (AlertRuleMsSecurityIncidentPtrOutput) ToAlertRuleMsSecurityIncidentPtrOutput added in v3.47.1

func (o AlertRuleMsSecurityIncidentPtrOutput) ToAlertRuleMsSecurityIncidentPtrOutput() AlertRuleMsSecurityIncidentPtrOutput

func (AlertRuleMsSecurityIncidentPtrOutput) ToAlertRuleMsSecurityIncidentPtrOutputWithContext added in v3.47.1

func (o AlertRuleMsSecurityIncidentPtrOutput) ToAlertRuleMsSecurityIncidentPtrOutputWithContext(ctx context.Context) AlertRuleMsSecurityIncidentPtrOutput

type AlertRuleMsSecurityIncidentState

type AlertRuleMsSecurityIncidentState struct {
	// The GUID of the alert rule template which is used to create this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringPtrInput
	// The description of this Sentinel MS Security Incident Alert Rule.
	Description pulumi.StringPtrInput
	// The friendly name of this Sentinel MS Security Incident Alert Rule.
	DisplayName pulumi.StringPtrInput
	// Only create incidents when the alert display name doesn't contain text from this list.
	DisplayNameExcludeFilters pulumi.StringArrayInput
	// Only create incidents when the alert display name contain text from this list, leave empty to apply no filter.
	DisplayNameFilters pulumi.StringArrayInput
	// Should this Sentinel MS Security Incident Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrInput
	// The ID of the Log Analytics Workspace this Sentinel MS Security Incident Alert Rule belongs to. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Sentinel MS Security Incident Alert Rule. Changing this forces a new Sentinel MS Security Incident Alert Rule to be created.
	Name pulumi.StringPtrInput
	// The Microsoft Security Service from where the alert will be generated. Possible values are `Azure Active Directory Identity Protection`, `Azure Advanced Threat Protection`, `Azure Security Center`, `Azure Security Center for IoT`, `Microsoft Cloud App Security`, `Microsoft Defender Advanced Threat Protection` and `Office 365 Advanced Threat Protection`.
	ProductFilter pulumi.StringPtrInput
	// Only create incidents from alerts when alert severity level is contained in this list. Possible values are `High`, `Medium`, `Low` and `Informational`.
	SeverityFilters pulumi.StringArrayInput
	// Deprecated: this property has been renamed to display_name_filter to better match the SDK & API
	TextWhitelists pulumi.StringArrayInput
}

func (AlertRuleMsSecurityIncidentState) ElementType

type AlertRuleScheduled added in v3.5.0

type AlertRuleScheduled struct {
	pulumi.CustomResourceState

	// The GUID of the alert rule template which is used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringPtrOutput `pulumi:"alertRuleTemplateGuid"`
	// The description of this Sentinel Scheduled Alert Rule.
	Description pulumi.StringPtrOutput `pulumi:"description"`
	// The friendly name of this Sentinel Scheduled Alert Rule.
	DisplayName pulumi.StringOutput `pulumi:"displayName"`
	// Should the Sentinel Scheduled Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrOutput `pulumi:"enabled"`
	// A `eventGrouping` block as defined below.
	EventGrouping AlertRuleScheduledEventGroupingPtrOutput `pulumi:"eventGrouping"`
	// A `incidentConfiguration` block as defined below.
	IncidentConfiguration AlertRuleScheduledIncidentConfigurationOutput `pulumi:"incidentConfiguration"`
	// The ID of the Log Analytics Workspace this Sentinel Scheduled Alert Rule belongs to. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The query of this Sentinel Scheduled Alert Rule.
	Query pulumi.StringOutput `pulumi:"query"`
	// The ISO 8601 timespan duration between two consecutive queries. Defaults to `PT5H`.
	QueryFrequency pulumi.StringPtrOutput `pulumi:"queryFrequency"`
	// The ISO 8601 timespan duration, which determine the time period of the data covered by the query. For example, it can query the past 10 minutes of data, or the past 6 hours of data. Defaults to `PT5H`.
	QueryPeriod pulumi.StringPtrOutput `pulumi:"queryPeriod"`
	// The alert severity of this Sentinel Scheduled Alert Rule. Possible values are `High`, `Medium`, `Low` and `Informational`.
	Severity pulumi.StringOutput `pulumi:"severity"`
	// If `suppressionEnabled` is `true`, this is ISO 8601 timespan duration, which specifies the amount of time the query should stop running after alert is generated. Defaults to `PT5H`.
	SuppressionDuration pulumi.StringPtrOutput `pulumi:"suppressionDuration"`
	// Should the Sentinel Scheduled Alert Rulea stop running query after alert is generated? Defaults to `false`.
	SuppressionEnabled pulumi.BoolPtrOutput `pulumi:"suppressionEnabled"`
	// A list of categories of attacks by which to classify the rule. Possible values are `Collection`, `CommandAndControl`, `CredentialAccess`, `DefenseEvasion`, `Discovery`, `Execution`, `Exfiltration`, `Impact`, `InitialAccess`, `LateralMovement`, `Persistence` and `PrivilegeEscalation`.
	Tactics pulumi.StringArrayOutput `pulumi:"tactics"`
	// The alert trigger operator, combined with `triggerThreshold`, setting alert threshold of this Sentinel Scheduled Alert Rule. Possible values are `Equal`, `GreaterThan`, `LessThan`, `NotEqual`.
	TriggerOperator pulumi.StringPtrOutput `pulumi:"triggerOperator"`
	// The baseline number of query results generated, combined with `triggerOperator`, setting alert threshold of this Sentinel Scheduled Alert Rule.
	TriggerThreshold pulumi.IntPtrOutput `pulumi:"triggerThreshold"`
}

Manages a Sentinel Scheduled Alert Rule.

## Example Usage

```go package main

import (

"fmt"

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("pergb2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewAlertRuleScheduled(ctx, "exampleAlertRuleScheduled", &sentinel.AlertRuleScheduledArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
			DisplayName:             pulumi.String("example"),
			Severity:                pulumi.String("High"),
			Query:                   pulumi.String(fmt.Sprintf("%v%v%v%v", "AzureActivity |\n", "  where OperationName == \"Create or Update Virtual Machine\" or OperationName ==\"Create Deployment\" |\n", "  where ActivityStatus == \"Succeeded\" |\n", "  make-series dcount(ResourceId) default=0 on EventSubmissionTimestamp in range(ago(7d), now(), 1d) by Caller\n")),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Sentinel Scheduled Alert Rules can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/alertRuleScheduled:AlertRuleScheduled example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/alertRules/rule1

```

func GetAlertRuleScheduled added in v3.5.0

func GetAlertRuleScheduled(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *AlertRuleScheduledState, opts ...pulumi.ResourceOption) (*AlertRuleScheduled, error)

GetAlertRuleScheduled gets an existing AlertRuleScheduled resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewAlertRuleScheduled added in v3.5.0

func NewAlertRuleScheduled(ctx *pulumi.Context,
	name string, args *AlertRuleScheduledArgs, opts ...pulumi.ResourceOption) (*AlertRuleScheduled, error)

NewAlertRuleScheduled registers a new resource with the given unique name, arguments, and options.

func (*AlertRuleScheduled) ElementType added in v3.31.1

func (*AlertRuleScheduled) ElementType() reflect.Type

func (*AlertRuleScheduled) ToAlertRuleScheduledOutput added in v3.31.1

func (i *AlertRuleScheduled) ToAlertRuleScheduledOutput() AlertRuleScheduledOutput

func (*AlertRuleScheduled) ToAlertRuleScheduledOutputWithContext added in v3.31.1

func (i *AlertRuleScheduled) ToAlertRuleScheduledOutputWithContext(ctx context.Context) AlertRuleScheduledOutput

func (*AlertRuleScheduled) ToAlertRuleScheduledPtrOutput added in v3.47.1

func (i *AlertRuleScheduled) ToAlertRuleScheduledPtrOutput() AlertRuleScheduledPtrOutput

func (*AlertRuleScheduled) ToAlertRuleScheduledPtrOutputWithContext added in v3.47.1

func (i *AlertRuleScheduled) ToAlertRuleScheduledPtrOutputWithContext(ctx context.Context) AlertRuleScheduledPtrOutput

type AlertRuleScheduledArgs added in v3.5.0

type AlertRuleScheduledArgs struct {
	// The GUID of the alert rule template which is used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringPtrInput
	// The description of this Sentinel Scheduled Alert Rule.
	Description pulumi.StringPtrInput
	// The friendly name of this Sentinel Scheduled Alert Rule.
	DisplayName pulumi.StringInput
	// Should the Sentinel Scheduled Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrInput
	// A `eventGrouping` block as defined below.
	EventGrouping AlertRuleScheduledEventGroupingPtrInput
	// A `incidentConfiguration` block as defined below.
	IncidentConfiguration AlertRuleScheduledIncidentConfigurationPtrInput
	// The ID of the Log Analytics Workspace this Sentinel Scheduled Alert Rule belongs to. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	Name pulumi.StringPtrInput
	// The query of this Sentinel Scheduled Alert Rule.
	Query pulumi.StringInput
	// The ISO 8601 timespan duration between two consecutive queries. Defaults to `PT5H`.
	QueryFrequency pulumi.StringPtrInput
	// The ISO 8601 timespan duration, which determine the time period of the data covered by the query. For example, it can query the past 10 minutes of data, or the past 6 hours of data. Defaults to `PT5H`.
	QueryPeriod pulumi.StringPtrInput
	// The alert severity of this Sentinel Scheduled Alert Rule. Possible values are `High`, `Medium`, `Low` and `Informational`.
	Severity pulumi.StringInput
	// If `suppressionEnabled` is `true`, this is ISO 8601 timespan duration, which specifies the amount of time the query should stop running after alert is generated. Defaults to `PT5H`.
	SuppressionDuration pulumi.StringPtrInput
	// Should the Sentinel Scheduled Alert Rulea stop running query after alert is generated? Defaults to `false`.
	SuppressionEnabled pulumi.BoolPtrInput
	// A list of categories of attacks by which to classify the rule. Possible values are `Collection`, `CommandAndControl`, `CredentialAccess`, `DefenseEvasion`, `Discovery`, `Execution`, `Exfiltration`, `Impact`, `InitialAccess`, `LateralMovement`, `Persistence` and `PrivilegeEscalation`.
	Tactics pulumi.StringArrayInput
	// The alert trigger operator, combined with `triggerThreshold`, setting alert threshold of this Sentinel Scheduled Alert Rule. Possible values are `Equal`, `GreaterThan`, `LessThan`, `NotEqual`.
	TriggerOperator pulumi.StringPtrInput
	// The baseline number of query results generated, combined with `triggerOperator`, setting alert threshold of this Sentinel Scheduled Alert Rule.
	TriggerThreshold pulumi.IntPtrInput
}

The set of arguments for constructing a AlertRuleScheduled resource.

func (AlertRuleScheduledArgs) ElementType added in v3.5.0

func (AlertRuleScheduledArgs) ElementType() reflect.Type

type AlertRuleScheduledArray added in v3.47.1

type AlertRuleScheduledArray []AlertRuleScheduledInput

func (AlertRuleScheduledArray) ElementType added in v3.47.1

func (AlertRuleScheduledArray) ElementType() reflect.Type

func (AlertRuleScheduledArray) ToAlertRuleScheduledArrayOutput added in v3.47.1

func (i AlertRuleScheduledArray) ToAlertRuleScheduledArrayOutput() AlertRuleScheduledArrayOutput

func (AlertRuleScheduledArray) ToAlertRuleScheduledArrayOutputWithContext added in v3.47.1

func (i AlertRuleScheduledArray) ToAlertRuleScheduledArrayOutputWithContext(ctx context.Context) AlertRuleScheduledArrayOutput

type AlertRuleScheduledArrayInput added in v3.47.1

type AlertRuleScheduledArrayInput interface {
	pulumi.Input

	ToAlertRuleScheduledArrayOutput() AlertRuleScheduledArrayOutput
	ToAlertRuleScheduledArrayOutputWithContext(context.Context) AlertRuleScheduledArrayOutput
}

AlertRuleScheduledArrayInput is an input type that accepts AlertRuleScheduledArray and AlertRuleScheduledArrayOutput values. You can construct a concrete instance of `AlertRuleScheduledArrayInput` via:

AlertRuleScheduledArray{ AlertRuleScheduledArgs{...} }

type AlertRuleScheduledArrayOutput added in v3.47.1

type AlertRuleScheduledArrayOutput struct{ *pulumi.OutputState }

func (AlertRuleScheduledArrayOutput) ElementType added in v3.47.1

func (AlertRuleScheduledArrayOutput) Index added in v3.47.1

func (AlertRuleScheduledArrayOutput) ToAlertRuleScheduledArrayOutput added in v3.47.1

func (o AlertRuleScheduledArrayOutput) ToAlertRuleScheduledArrayOutput() AlertRuleScheduledArrayOutput

func (AlertRuleScheduledArrayOutput) ToAlertRuleScheduledArrayOutputWithContext added in v3.47.1

func (o AlertRuleScheduledArrayOutput) ToAlertRuleScheduledArrayOutputWithContext(ctx context.Context) AlertRuleScheduledArrayOutput

type AlertRuleScheduledEventGrouping added in v3.44.0

type AlertRuleScheduledEventGrouping struct {
	// The aggregation type of grouping the events.
	AggregationMethod string `pulumi:"aggregationMethod"`
}

type AlertRuleScheduledEventGroupingArgs added in v3.44.0

type AlertRuleScheduledEventGroupingArgs struct {
	// The aggregation type of grouping the events.
	AggregationMethod pulumi.StringInput `pulumi:"aggregationMethod"`
}

func (AlertRuleScheduledEventGroupingArgs) ElementType added in v3.44.0

func (AlertRuleScheduledEventGroupingArgs) ToAlertRuleScheduledEventGroupingOutput added in v3.44.0

func (i AlertRuleScheduledEventGroupingArgs) ToAlertRuleScheduledEventGroupingOutput() AlertRuleScheduledEventGroupingOutput

func (AlertRuleScheduledEventGroupingArgs) ToAlertRuleScheduledEventGroupingOutputWithContext added in v3.44.0

func (i AlertRuleScheduledEventGroupingArgs) ToAlertRuleScheduledEventGroupingOutputWithContext(ctx context.Context) AlertRuleScheduledEventGroupingOutput

func (AlertRuleScheduledEventGroupingArgs) ToAlertRuleScheduledEventGroupingPtrOutput added in v3.44.0

func (i AlertRuleScheduledEventGroupingArgs) ToAlertRuleScheduledEventGroupingPtrOutput() AlertRuleScheduledEventGroupingPtrOutput

func (AlertRuleScheduledEventGroupingArgs) ToAlertRuleScheduledEventGroupingPtrOutputWithContext added in v3.44.0

func (i AlertRuleScheduledEventGroupingArgs) ToAlertRuleScheduledEventGroupingPtrOutputWithContext(ctx context.Context) AlertRuleScheduledEventGroupingPtrOutput

type AlertRuleScheduledEventGroupingInput added in v3.44.0

type AlertRuleScheduledEventGroupingInput interface {
	pulumi.Input

	ToAlertRuleScheduledEventGroupingOutput() AlertRuleScheduledEventGroupingOutput
	ToAlertRuleScheduledEventGroupingOutputWithContext(context.Context) AlertRuleScheduledEventGroupingOutput
}

AlertRuleScheduledEventGroupingInput is an input type that accepts AlertRuleScheduledEventGroupingArgs and AlertRuleScheduledEventGroupingOutput values. You can construct a concrete instance of `AlertRuleScheduledEventGroupingInput` via:

AlertRuleScheduledEventGroupingArgs{...}

type AlertRuleScheduledEventGroupingOutput added in v3.44.0

type AlertRuleScheduledEventGroupingOutput struct{ *pulumi.OutputState }

func (AlertRuleScheduledEventGroupingOutput) AggregationMethod added in v3.44.0

The aggregation type of grouping the events.

func (AlertRuleScheduledEventGroupingOutput) ElementType added in v3.44.0

func (AlertRuleScheduledEventGroupingOutput) ToAlertRuleScheduledEventGroupingOutput added in v3.44.0

func (o AlertRuleScheduledEventGroupingOutput) ToAlertRuleScheduledEventGroupingOutput() AlertRuleScheduledEventGroupingOutput

func (AlertRuleScheduledEventGroupingOutput) ToAlertRuleScheduledEventGroupingOutputWithContext added in v3.44.0

func (o AlertRuleScheduledEventGroupingOutput) ToAlertRuleScheduledEventGroupingOutputWithContext(ctx context.Context) AlertRuleScheduledEventGroupingOutput

func (AlertRuleScheduledEventGroupingOutput) ToAlertRuleScheduledEventGroupingPtrOutput added in v3.44.0

func (o AlertRuleScheduledEventGroupingOutput) ToAlertRuleScheduledEventGroupingPtrOutput() AlertRuleScheduledEventGroupingPtrOutput

func (AlertRuleScheduledEventGroupingOutput) ToAlertRuleScheduledEventGroupingPtrOutputWithContext added in v3.44.0

func (o AlertRuleScheduledEventGroupingOutput) ToAlertRuleScheduledEventGroupingPtrOutputWithContext(ctx context.Context) AlertRuleScheduledEventGroupingPtrOutput

type AlertRuleScheduledEventGroupingPtrInput added in v3.44.0

type AlertRuleScheduledEventGroupingPtrInput interface {
	pulumi.Input

	ToAlertRuleScheduledEventGroupingPtrOutput() AlertRuleScheduledEventGroupingPtrOutput
	ToAlertRuleScheduledEventGroupingPtrOutputWithContext(context.Context) AlertRuleScheduledEventGroupingPtrOutput
}

AlertRuleScheduledEventGroupingPtrInput is an input type that accepts AlertRuleScheduledEventGroupingArgs, AlertRuleScheduledEventGroupingPtr and AlertRuleScheduledEventGroupingPtrOutput values. You can construct a concrete instance of `AlertRuleScheduledEventGroupingPtrInput` via:

        AlertRuleScheduledEventGroupingArgs{...}

or:

        nil

type AlertRuleScheduledEventGroupingPtrOutput added in v3.44.0

type AlertRuleScheduledEventGroupingPtrOutput struct{ *pulumi.OutputState }

func (AlertRuleScheduledEventGroupingPtrOutput) AggregationMethod added in v3.44.0

The aggregation type of grouping the events.

func (AlertRuleScheduledEventGroupingPtrOutput) Elem added in v3.44.0

func (AlertRuleScheduledEventGroupingPtrOutput) ElementType added in v3.44.0

func (AlertRuleScheduledEventGroupingPtrOutput) ToAlertRuleScheduledEventGroupingPtrOutput added in v3.44.0

func (o AlertRuleScheduledEventGroupingPtrOutput) ToAlertRuleScheduledEventGroupingPtrOutput() AlertRuleScheduledEventGroupingPtrOutput

func (AlertRuleScheduledEventGroupingPtrOutput) ToAlertRuleScheduledEventGroupingPtrOutputWithContext added in v3.44.0

func (o AlertRuleScheduledEventGroupingPtrOutput) ToAlertRuleScheduledEventGroupingPtrOutputWithContext(ctx context.Context) AlertRuleScheduledEventGroupingPtrOutput

type AlertRuleScheduledIncidentConfiguration added in v3.42.0

type AlertRuleScheduledIncidentConfiguration struct {
	// Whether to create an incident from alerts triggered by this Sentinel Scheduled Alert Rule?
	CreateIncident bool `pulumi:"createIncident"`
	// A `grouping` block as defined below.
	Grouping AlertRuleScheduledIncidentConfigurationGrouping `pulumi:"grouping"`
}

type AlertRuleScheduledIncidentConfigurationArgs added in v3.42.0

type AlertRuleScheduledIncidentConfigurationArgs struct {
	// Whether to create an incident from alerts triggered by this Sentinel Scheduled Alert Rule?
	CreateIncident pulumi.BoolInput `pulumi:"createIncident"`
	// A `grouping` block as defined below.
	Grouping AlertRuleScheduledIncidentConfigurationGroupingInput `pulumi:"grouping"`
}

func (AlertRuleScheduledIncidentConfigurationArgs) ElementType added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationArgs) ToAlertRuleScheduledIncidentConfigurationOutput added in v3.42.0

func (i AlertRuleScheduledIncidentConfigurationArgs) ToAlertRuleScheduledIncidentConfigurationOutput() AlertRuleScheduledIncidentConfigurationOutput

func (AlertRuleScheduledIncidentConfigurationArgs) ToAlertRuleScheduledIncidentConfigurationOutputWithContext added in v3.42.0

func (i AlertRuleScheduledIncidentConfigurationArgs) ToAlertRuleScheduledIncidentConfigurationOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationOutput

func (AlertRuleScheduledIncidentConfigurationArgs) ToAlertRuleScheduledIncidentConfigurationPtrOutput added in v3.42.0

func (i AlertRuleScheduledIncidentConfigurationArgs) ToAlertRuleScheduledIncidentConfigurationPtrOutput() AlertRuleScheduledIncidentConfigurationPtrOutput

func (AlertRuleScheduledIncidentConfigurationArgs) ToAlertRuleScheduledIncidentConfigurationPtrOutputWithContext added in v3.42.0

func (i AlertRuleScheduledIncidentConfigurationArgs) ToAlertRuleScheduledIncidentConfigurationPtrOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationPtrOutput

type AlertRuleScheduledIncidentConfigurationGrouping added in v3.42.0

type AlertRuleScheduledIncidentConfigurationGrouping struct {
	// Enable grouping incidents created from alerts triggered by this Sentinel Scheduled Alert Rule. Defaults to `true`.
	Enabled *bool `pulumi:"enabled"`
	// The method used to group incidents. Possible values are `All`, `Custom` and `None`. Defaults to `None`.
	EntityMatchingMethod *string `pulumi:"entityMatchingMethod"`
	// A list of entity types to group by, only when the `entityMatchingMethod` is `Custom`. Possible values are `Account`, `Host`, `Url`, `Ip`.
	GroupBies []string `pulumi:"groupBies"`
	// Limit the group to alerts created within the lookback duration (in ISO 8601 duration format). Defaults to `PT5M`.
	LookbackDuration *string `pulumi:"lookbackDuration"`
	// Whether to re-open closed matching incidents? Defaults to `false`.
	ReopenClosedIncidents *bool `pulumi:"reopenClosedIncidents"`
}

type AlertRuleScheduledIncidentConfigurationGroupingArgs added in v3.42.0

type AlertRuleScheduledIncidentConfigurationGroupingArgs struct {
	// Enable grouping incidents created from alerts triggered by this Sentinel Scheduled Alert Rule. Defaults to `true`.
	Enabled pulumi.BoolPtrInput `pulumi:"enabled"`
	// The method used to group incidents. Possible values are `All`, `Custom` and `None`. Defaults to `None`.
	EntityMatchingMethod pulumi.StringPtrInput `pulumi:"entityMatchingMethod"`
	// A list of entity types to group by, only when the `entityMatchingMethod` is `Custom`. Possible values are `Account`, `Host`, `Url`, `Ip`.
	GroupBies pulumi.StringArrayInput `pulumi:"groupBies"`
	// Limit the group to alerts created within the lookback duration (in ISO 8601 duration format). Defaults to `PT5M`.
	LookbackDuration pulumi.StringPtrInput `pulumi:"lookbackDuration"`
	// Whether to re-open closed matching incidents? Defaults to `false`.
	ReopenClosedIncidents pulumi.BoolPtrInput `pulumi:"reopenClosedIncidents"`
}

func (AlertRuleScheduledIncidentConfigurationGroupingArgs) ElementType added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationGroupingArgs) ToAlertRuleScheduledIncidentConfigurationGroupingOutput added in v3.42.0

func (i AlertRuleScheduledIncidentConfigurationGroupingArgs) ToAlertRuleScheduledIncidentConfigurationGroupingOutput() AlertRuleScheduledIncidentConfigurationGroupingOutput

func (AlertRuleScheduledIncidentConfigurationGroupingArgs) ToAlertRuleScheduledIncidentConfigurationGroupingOutputWithContext added in v3.42.0

func (i AlertRuleScheduledIncidentConfigurationGroupingArgs) ToAlertRuleScheduledIncidentConfigurationGroupingOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationGroupingOutput

func (AlertRuleScheduledIncidentConfigurationGroupingArgs) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutput added in v3.42.0

func (i AlertRuleScheduledIncidentConfigurationGroupingArgs) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutput() AlertRuleScheduledIncidentConfigurationGroupingPtrOutput

func (AlertRuleScheduledIncidentConfigurationGroupingArgs) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutputWithContext added in v3.42.0

func (i AlertRuleScheduledIncidentConfigurationGroupingArgs) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationGroupingPtrOutput

type AlertRuleScheduledIncidentConfigurationGroupingInput added in v3.42.0

type AlertRuleScheduledIncidentConfigurationGroupingInput interface {
	pulumi.Input

	ToAlertRuleScheduledIncidentConfigurationGroupingOutput() AlertRuleScheduledIncidentConfigurationGroupingOutput
	ToAlertRuleScheduledIncidentConfigurationGroupingOutputWithContext(context.Context) AlertRuleScheduledIncidentConfigurationGroupingOutput
}

AlertRuleScheduledIncidentConfigurationGroupingInput is an input type that accepts AlertRuleScheduledIncidentConfigurationGroupingArgs and AlertRuleScheduledIncidentConfigurationGroupingOutput values. You can construct a concrete instance of `AlertRuleScheduledIncidentConfigurationGroupingInput` via:

AlertRuleScheduledIncidentConfigurationGroupingArgs{...}

type AlertRuleScheduledIncidentConfigurationGroupingOutput added in v3.42.0

type AlertRuleScheduledIncidentConfigurationGroupingOutput struct{ *pulumi.OutputState }

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) ElementType added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) Enabled added in v3.42.0

Enable grouping incidents created from alerts triggered by this Sentinel Scheduled Alert Rule. Defaults to `true`.

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) EntityMatchingMethod added in v3.42.0

The method used to group incidents. Possible values are `All`, `Custom` and `None`. Defaults to `None`.

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) GroupBies added in v3.42.0

A list of entity types to group by, only when the `entityMatchingMethod` is `Custom`. Possible values are `Account`, `Host`, `Url`, `Ip`.

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) LookbackDuration added in v3.42.0

Limit the group to alerts created within the lookback duration (in ISO 8601 duration format). Defaults to `PT5M`.

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) ReopenClosedIncidents added in v3.42.0

Whether to re-open closed matching incidents? Defaults to `false`.

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) ToAlertRuleScheduledIncidentConfigurationGroupingOutput added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) ToAlertRuleScheduledIncidentConfigurationGroupingOutputWithContext added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationGroupingOutput) ToAlertRuleScheduledIncidentConfigurationGroupingOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationGroupingOutput

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutput added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationGroupingOutput) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutput() AlertRuleScheduledIncidentConfigurationGroupingPtrOutput

func (AlertRuleScheduledIncidentConfigurationGroupingOutput) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutputWithContext added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationGroupingOutput) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationGroupingPtrOutput

type AlertRuleScheduledIncidentConfigurationGroupingPtrInput added in v3.42.0

type AlertRuleScheduledIncidentConfigurationGroupingPtrInput interface {
	pulumi.Input

	ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutput() AlertRuleScheduledIncidentConfigurationGroupingPtrOutput
	ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutputWithContext(context.Context) AlertRuleScheduledIncidentConfigurationGroupingPtrOutput
}

AlertRuleScheduledIncidentConfigurationGroupingPtrInput is an input type that accepts AlertRuleScheduledIncidentConfigurationGroupingArgs, AlertRuleScheduledIncidentConfigurationGroupingPtr and AlertRuleScheduledIncidentConfigurationGroupingPtrOutput values. You can construct a concrete instance of `AlertRuleScheduledIncidentConfigurationGroupingPtrInput` via:

        AlertRuleScheduledIncidentConfigurationGroupingArgs{...}

or:

        nil

type AlertRuleScheduledIncidentConfigurationGroupingPtrOutput added in v3.42.0

type AlertRuleScheduledIncidentConfigurationGroupingPtrOutput struct{ *pulumi.OutputState }

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) Elem added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) ElementType added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) Enabled added in v3.42.0

Enable grouping incidents created from alerts triggered by this Sentinel Scheduled Alert Rule. Defaults to `true`.

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) EntityMatchingMethod added in v3.42.0

The method used to group incidents. Possible values are `All`, `Custom` and `None`. Defaults to `None`.

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) GroupBies added in v3.42.0

A list of entity types to group by, only when the `entityMatchingMethod` is `Custom`. Possible values are `Account`, `Host`, `Url`, `Ip`.

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) LookbackDuration added in v3.42.0

Limit the group to alerts created within the lookback duration (in ISO 8601 duration format). Defaults to `PT5M`.

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) ReopenClosedIncidents added in v3.42.0

Whether to re-open closed matching incidents? Defaults to `false`.

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutput added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutputWithContext added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationGroupingPtrOutput) ToAlertRuleScheduledIncidentConfigurationGroupingPtrOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationGroupingPtrOutput

type AlertRuleScheduledIncidentConfigurationInput added in v3.42.0

type AlertRuleScheduledIncidentConfigurationInput interface {
	pulumi.Input

	ToAlertRuleScheduledIncidentConfigurationOutput() AlertRuleScheduledIncidentConfigurationOutput
	ToAlertRuleScheduledIncidentConfigurationOutputWithContext(context.Context) AlertRuleScheduledIncidentConfigurationOutput
}

AlertRuleScheduledIncidentConfigurationInput is an input type that accepts AlertRuleScheduledIncidentConfigurationArgs and AlertRuleScheduledIncidentConfigurationOutput values. You can construct a concrete instance of `AlertRuleScheduledIncidentConfigurationInput` via:

AlertRuleScheduledIncidentConfigurationArgs{...}

type AlertRuleScheduledIncidentConfigurationOutput added in v3.42.0

type AlertRuleScheduledIncidentConfigurationOutput struct{ *pulumi.OutputState }

func (AlertRuleScheduledIncidentConfigurationOutput) CreateIncident added in v3.42.0

Whether to create an incident from alerts triggered by this Sentinel Scheduled Alert Rule?

func (AlertRuleScheduledIncidentConfigurationOutput) ElementType added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationOutput) Grouping added in v3.42.0

A `grouping` block as defined below.

func (AlertRuleScheduledIncidentConfigurationOutput) ToAlertRuleScheduledIncidentConfigurationOutput added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationOutput) ToAlertRuleScheduledIncidentConfigurationOutput() AlertRuleScheduledIncidentConfigurationOutput

func (AlertRuleScheduledIncidentConfigurationOutput) ToAlertRuleScheduledIncidentConfigurationOutputWithContext added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationOutput) ToAlertRuleScheduledIncidentConfigurationOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationOutput

func (AlertRuleScheduledIncidentConfigurationOutput) ToAlertRuleScheduledIncidentConfigurationPtrOutput added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationOutput) ToAlertRuleScheduledIncidentConfigurationPtrOutput() AlertRuleScheduledIncidentConfigurationPtrOutput

func (AlertRuleScheduledIncidentConfigurationOutput) ToAlertRuleScheduledIncidentConfigurationPtrOutputWithContext added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationOutput) ToAlertRuleScheduledIncidentConfigurationPtrOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationPtrOutput

type AlertRuleScheduledIncidentConfigurationPtrInput added in v3.42.0

type AlertRuleScheduledIncidentConfigurationPtrInput interface {
	pulumi.Input

	ToAlertRuleScheduledIncidentConfigurationPtrOutput() AlertRuleScheduledIncidentConfigurationPtrOutput
	ToAlertRuleScheduledIncidentConfigurationPtrOutputWithContext(context.Context) AlertRuleScheduledIncidentConfigurationPtrOutput
}

AlertRuleScheduledIncidentConfigurationPtrInput is an input type that accepts AlertRuleScheduledIncidentConfigurationArgs, AlertRuleScheduledIncidentConfigurationPtr and AlertRuleScheduledIncidentConfigurationPtrOutput values. You can construct a concrete instance of `AlertRuleScheduledIncidentConfigurationPtrInput` via:

        AlertRuleScheduledIncidentConfigurationArgs{...}

or:

        nil

type AlertRuleScheduledIncidentConfigurationPtrOutput added in v3.42.0

type AlertRuleScheduledIncidentConfigurationPtrOutput struct{ *pulumi.OutputState }

func (AlertRuleScheduledIncidentConfigurationPtrOutput) CreateIncident added in v3.42.0

Whether to create an incident from alerts triggered by this Sentinel Scheduled Alert Rule?

func (AlertRuleScheduledIncidentConfigurationPtrOutput) Elem added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationPtrOutput) ElementType added in v3.42.0

func (AlertRuleScheduledIncidentConfigurationPtrOutput) Grouping added in v3.42.0

A `grouping` block as defined below.

func (AlertRuleScheduledIncidentConfigurationPtrOutput) ToAlertRuleScheduledIncidentConfigurationPtrOutput added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationPtrOutput) ToAlertRuleScheduledIncidentConfigurationPtrOutput() AlertRuleScheduledIncidentConfigurationPtrOutput

func (AlertRuleScheduledIncidentConfigurationPtrOutput) ToAlertRuleScheduledIncidentConfigurationPtrOutputWithContext added in v3.42.0

func (o AlertRuleScheduledIncidentConfigurationPtrOutput) ToAlertRuleScheduledIncidentConfigurationPtrOutputWithContext(ctx context.Context) AlertRuleScheduledIncidentConfigurationPtrOutput

type AlertRuleScheduledInput added in v3.31.1

type AlertRuleScheduledInput interface {
	pulumi.Input

	ToAlertRuleScheduledOutput() AlertRuleScheduledOutput
	ToAlertRuleScheduledOutputWithContext(ctx context.Context) AlertRuleScheduledOutput
}

type AlertRuleScheduledMap added in v3.47.1

type AlertRuleScheduledMap map[string]AlertRuleScheduledInput

func (AlertRuleScheduledMap) ElementType added in v3.47.1

func (AlertRuleScheduledMap) ElementType() reflect.Type

func (AlertRuleScheduledMap) ToAlertRuleScheduledMapOutput added in v3.47.1

func (i AlertRuleScheduledMap) ToAlertRuleScheduledMapOutput() AlertRuleScheduledMapOutput

func (AlertRuleScheduledMap) ToAlertRuleScheduledMapOutputWithContext added in v3.47.1

func (i AlertRuleScheduledMap) ToAlertRuleScheduledMapOutputWithContext(ctx context.Context) AlertRuleScheduledMapOutput

type AlertRuleScheduledMapInput added in v3.47.1

type AlertRuleScheduledMapInput interface {
	pulumi.Input

	ToAlertRuleScheduledMapOutput() AlertRuleScheduledMapOutput
	ToAlertRuleScheduledMapOutputWithContext(context.Context) AlertRuleScheduledMapOutput
}

AlertRuleScheduledMapInput is an input type that accepts AlertRuleScheduledMap and AlertRuleScheduledMapOutput values. You can construct a concrete instance of `AlertRuleScheduledMapInput` via:

AlertRuleScheduledMap{ "key": AlertRuleScheduledArgs{...} }

type AlertRuleScheduledMapOutput added in v3.47.1

type AlertRuleScheduledMapOutput struct{ *pulumi.OutputState }

func (AlertRuleScheduledMapOutput) ElementType added in v3.47.1

func (AlertRuleScheduledMapOutput) MapIndex added in v3.47.1

func (AlertRuleScheduledMapOutput) ToAlertRuleScheduledMapOutput added in v3.47.1

func (o AlertRuleScheduledMapOutput) ToAlertRuleScheduledMapOutput() AlertRuleScheduledMapOutput

func (AlertRuleScheduledMapOutput) ToAlertRuleScheduledMapOutputWithContext added in v3.47.1

func (o AlertRuleScheduledMapOutput) ToAlertRuleScheduledMapOutputWithContext(ctx context.Context) AlertRuleScheduledMapOutput

type AlertRuleScheduledOutput added in v3.31.1

type AlertRuleScheduledOutput struct {
	*pulumi.OutputState
}

func (AlertRuleScheduledOutput) ElementType added in v3.31.1

func (AlertRuleScheduledOutput) ElementType() reflect.Type

func (AlertRuleScheduledOutput) ToAlertRuleScheduledOutput added in v3.31.1

func (o AlertRuleScheduledOutput) ToAlertRuleScheduledOutput() AlertRuleScheduledOutput

func (AlertRuleScheduledOutput) ToAlertRuleScheduledOutputWithContext added in v3.31.1

func (o AlertRuleScheduledOutput) ToAlertRuleScheduledOutputWithContext(ctx context.Context) AlertRuleScheduledOutput

func (AlertRuleScheduledOutput) ToAlertRuleScheduledPtrOutput added in v3.47.1

func (o AlertRuleScheduledOutput) ToAlertRuleScheduledPtrOutput() AlertRuleScheduledPtrOutput

func (AlertRuleScheduledOutput) ToAlertRuleScheduledPtrOutputWithContext added in v3.47.1

func (o AlertRuleScheduledOutput) ToAlertRuleScheduledPtrOutputWithContext(ctx context.Context) AlertRuleScheduledPtrOutput

type AlertRuleScheduledPtrInput added in v3.47.1

type AlertRuleScheduledPtrInput interface {
	pulumi.Input

	ToAlertRuleScheduledPtrOutput() AlertRuleScheduledPtrOutput
	ToAlertRuleScheduledPtrOutputWithContext(ctx context.Context) AlertRuleScheduledPtrOutput
}

type AlertRuleScheduledPtrOutput added in v3.47.1

type AlertRuleScheduledPtrOutput struct {
	*pulumi.OutputState
}

func (AlertRuleScheduledPtrOutput) ElementType added in v3.47.1

func (AlertRuleScheduledPtrOutput) ToAlertRuleScheduledPtrOutput added in v3.47.1

func (o AlertRuleScheduledPtrOutput) ToAlertRuleScheduledPtrOutput() AlertRuleScheduledPtrOutput

func (AlertRuleScheduledPtrOutput) ToAlertRuleScheduledPtrOutputWithContext added in v3.47.1

func (o AlertRuleScheduledPtrOutput) ToAlertRuleScheduledPtrOutputWithContext(ctx context.Context) AlertRuleScheduledPtrOutput

type AlertRuleScheduledState added in v3.5.0

type AlertRuleScheduledState struct {
	// The GUID of the alert rule template which is used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	AlertRuleTemplateGuid pulumi.StringPtrInput
	// The description of this Sentinel Scheduled Alert Rule.
	Description pulumi.StringPtrInput
	// The friendly name of this Sentinel Scheduled Alert Rule.
	DisplayName pulumi.StringPtrInput
	// Should the Sentinel Scheduled Alert Rule be enabled? Defaults to `true`.
	Enabled pulumi.BoolPtrInput
	// A `eventGrouping` block as defined below.
	EventGrouping AlertRuleScheduledEventGroupingPtrInput
	// A `incidentConfiguration` block as defined below.
	IncidentConfiguration AlertRuleScheduledIncidentConfigurationPtrInput
	// The ID of the Log Analytics Workspace this Sentinel Scheduled Alert Rule belongs to. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Sentinel Scheduled Alert Rule. Changing this forces a new Sentinel Scheduled Alert Rule to be created.
	Name pulumi.StringPtrInput
	// The query of this Sentinel Scheduled Alert Rule.
	Query pulumi.StringPtrInput
	// The ISO 8601 timespan duration between two consecutive queries. Defaults to `PT5H`.
	QueryFrequency pulumi.StringPtrInput
	// The ISO 8601 timespan duration, which determine the time period of the data covered by the query. For example, it can query the past 10 minutes of data, or the past 6 hours of data. Defaults to `PT5H`.
	QueryPeriod pulumi.StringPtrInput
	// The alert severity of this Sentinel Scheduled Alert Rule. Possible values are `High`, `Medium`, `Low` and `Informational`.
	Severity pulumi.StringPtrInput
	// If `suppressionEnabled` is `true`, this is ISO 8601 timespan duration, which specifies the amount of time the query should stop running after alert is generated. Defaults to `PT5H`.
	SuppressionDuration pulumi.StringPtrInput
	// Should the Sentinel Scheduled Alert Rulea stop running query after alert is generated? Defaults to `false`.
	SuppressionEnabled pulumi.BoolPtrInput
	// A list of categories of attacks by which to classify the rule. Possible values are `Collection`, `CommandAndControl`, `CredentialAccess`, `DefenseEvasion`, `Discovery`, `Execution`, `Exfiltration`, `Impact`, `InitialAccess`, `LateralMovement`, `Persistence` and `PrivilegeEscalation`.
	Tactics pulumi.StringArrayInput
	// The alert trigger operator, combined with `triggerThreshold`, setting alert threshold of this Sentinel Scheduled Alert Rule. Possible values are `Equal`, `GreaterThan`, `LessThan`, `NotEqual`.
	TriggerOperator pulumi.StringPtrInput
	// The baseline number of query results generated, combined with `triggerOperator`, setting alert threshold of this Sentinel Scheduled Alert Rule.
	TriggerThreshold pulumi.IntPtrInput
}

func (AlertRuleScheduledState) ElementType added in v3.5.0

func (AlertRuleScheduledState) ElementType() reflect.Type

type DataConnectorAwsCloudTrail added in v3.50.0

type DataConnectorAwsCloudTrail struct {
	pulumi.CustomResourceState

	// The ARN of the AWS CloudTrail role, which is connected to this AWS CloudTrail Data Connector.
	AwsRoleArn pulumi.StringOutput `pulumi:"awsRoleArn"`
	// The ID of the Log Analytics Workspace that this AWS CloudTrail Data Connector resides in. Changing this forces a new AWS CloudTrail Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this AWS CloudTrail Data Connector. Changing this forces a new AWS CloudTrail Data Connector to be created.
	Name pulumi.StringOutput `pulumi:"name"`
}

Manages a AWS CloudTrail Data Connector.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("PerGB2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewDataConnectorAwsCloudTrail(ctx, "exampleDataConnectorAwsCloudTrail", &sentinel.DataConnectorAwsCloudTrailArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
			AwsRoleArn:              pulumi.String("arn:aws:iam::000000000000:role/role1"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

AWS CloudTrail Data Connectors can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/dataConnectorAwsCloudTrail:DataConnectorAwsCloudTrail example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/dataConnectors/dc1

```

func GetDataConnectorAwsCloudTrail added in v3.50.0

func GetDataConnectorAwsCloudTrail(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataConnectorAwsCloudTrailState, opts ...pulumi.ResourceOption) (*DataConnectorAwsCloudTrail, error)

GetDataConnectorAwsCloudTrail gets an existing DataConnectorAwsCloudTrail resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataConnectorAwsCloudTrail added in v3.50.0

func NewDataConnectorAwsCloudTrail(ctx *pulumi.Context,
	name string, args *DataConnectorAwsCloudTrailArgs, opts ...pulumi.ResourceOption) (*DataConnectorAwsCloudTrail, error)

NewDataConnectorAwsCloudTrail registers a new resource with the given unique name, arguments, and options.

func (*DataConnectorAwsCloudTrail) ElementType added in v3.50.0

func (*DataConnectorAwsCloudTrail) ElementType() reflect.Type

func (*DataConnectorAwsCloudTrail) ToDataConnectorAwsCloudTrailOutput added in v3.50.0

func (i *DataConnectorAwsCloudTrail) ToDataConnectorAwsCloudTrailOutput() DataConnectorAwsCloudTrailOutput

func (*DataConnectorAwsCloudTrail) ToDataConnectorAwsCloudTrailOutputWithContext added in v3.50.0

func (i *DataConnectorAwsCloudTrail) ToDataConnectorAwsCloudTrailOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailOutput

func (*DataConnectorAwsCloudTrail) ToDataConnectorAwsCloudTrailPtrOutput added in v3.50.0

func (i *DataConnectorAwsCloudTrail) ToDataConnectorAwsCloudTrailPtrOutput() DataConnectorAwsCloudTrailPtrOutput

func (*DataConnectorAwsCloudTrail) ToDataConnectorAwsCloudTrailPtrOutputWithContext added in v3.50.0

func (i *DataConnectorAwsCloudTrail) ToDataConnectorAwsCloudTrailPtrOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailPtrOutput

type DataConnectorAwsCloudTrailArgs added in v3.50.0

type DataConnectorAwsCloudTrailArgs struct {
	// The ARN of the AWS CloudTrail role, which is connected to this AWS CloudTrail Data Connector.
	AwsRoleArn pulumi.StringInput
	// The ID of the Log Analytics Workspace that this AWS CloudTrail Data Connector resides in. Changing this forces a new AWS CloudTrail Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this AWS CloudTrail Data Connector. Changing this forces a new AWS CloudTrail Data Connector to be created.
	Name pulumi.StringPtrInput
}

The set of arguments for constructing a DataConnectorAwsCloudTrail resource.

func (DataConnectorAwsCloudTrailArgs) ElementType added in v3.50.0

type DataConnectorAwsCloudTrailArray added in v3.50.0

type DataConnectorAwsCloudTrailArray []DataConnectorAwsCloudTrailInput

func (DataConnectorAwsCloudTrailArray) ElementType added in v3.50.0

func (DataConnectorAwsCloudTrailArray) ToDataConnectorAwsCloudTrailArrayOutput added in v3.50.0

func (i DataConnectorAwsCloudTrailArray) ToDataConnectorAwsCloudTrailArrayOutput() DataConnectorAwsCloudTrailArrayOutput

func (DataConnectorAwsCloudTrailArray) ToDataConnectorAwsCloudTrailArrayOutputWithContext added in v3.50.0

func (i DataConnectorAwsCloudTrailArray) ToDataConnectorAwsCloudTrailArrayOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailArrayOutput

type DataConnectorAwsCloudTrailArrayInput added in v3.50.0

type DataConnectorAwsCloudTrailArrayInput interface {
	pulumi.Input

	ToDataConnectorAwsCloudTrailArrayOutput() DataConnectorAwsCloudTrailArrayOutput
	ToDataConnectorAwsCloudTrailArrayOutputWithContext(context.Context) DataConnectorAwsCloudTrailArrayOutput
}

DataConnectorAwsCloudTrailArrayInput is an input type that accepts DataConnectorAwsCloudTrailArray and DataConnectorAwsCloudTrailArrayOutput values. You can construct a concrete instance of `DataConnectorAwsCloudTrailArrayInput` via:

DataConnectorAwsCloudTrailArray{ DataConnectorAwsCloudTrailArgs{...} }

type DataConnectorAwsCloudTrailArrayOutput added in v3.50.0

type DataConnectorAwsCloudTrailArrayOutput struct{ *pulumi.OutputState }

func (DataConnectorAwsCloudTrailArrayOutput) ElementType added in v3.50.0

func (DataConnectorAwsCloudTrailArrayOutput) Index added in v3.50.0

func (DataConnectorAwsCloudTrailArrayOutput) ToDataConnectorAwsCloudTrailArrayOutput added in v3.50.0

func (o DataConnectorAwsCloudTrailArrayOutput) ToDataConnectorAwsCloudTrailArrayOutput() DataConnectorAwsCloudTrailArrayOutput

func (DataConnectorAwsCloudTrailArrayOutput) ToDataConnectorAwsCloudTrailArrayOutputWithContext added in v3.50.0

func (o DataConnectorAwsCloudTrailArrayOutput) ToDataConnectorAwsCloudTrailArrayOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailArrayOutput

type DataConnectorAwsCloudTrailInput added in v3.50.0

type DataConnectorAwsCloudTrailInput interface {
	pulumi.Input

	ToDataConnectorAwsCloudTrailOutput() DataConnectorAwsCloudTrailOutput
	ToDataConnectorAwsCloudTrailOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailOutput
}

type DataConnectorAwsCloudTrailMap added in v3.50.0

type DataConnectorAwsCloudTrailMap map[string]DataConnectorAwsCloudTrailInput

func (DataConnectorAwsCloudTrailMap) ElementType added in v3.50.0

func (DataConnectorAwsCloudTrailMap) ToDataConnectorAwsCloudTrailMapOutput added in v3.50.0

func (i DataConnectorAwsCloudTrailMap) ToDataConnectorAwsCloudTrailMapOutput() DataConnectorAwsCloudTrailMapOutput

func (DataConnectorAwsCloudTrailMap) ToDataConnectorAwsCloudTrailMapOutputWithContext added in v3.50.0

func (i DataConnectorAwsCloudTrailMap) ToDataConnectorAwsCloudTrailMapOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailMapOutput

type DataConnectorAwsCloudTrailMapInput added in v3.50.0

type DataConnectorAwsCloudTrailMapInput interface {
	pulumi.Input

	ToDataConnectorAwsCloudTrailMapOutput() DataConnectorAwsCloudTrailMapOutput
	ToDataConnectorAwsCloudTrailMapOutputWithContext(context.Context) DataConnectorAwsCloudTrailMapOutput
}

DataConnectorAwsCloudTrailMapInput is an input type that accepts DataConnectorAwsCloudTrailMap and DataConnectorAwsCloudTrailMapOutput values. You can construct a concrete instance of `DataConnectorAwsCloudTrailMapInput` via:

DataConnectorAwsCloudTrailMap{ "key": DataConnectorAwsCloudTrailArgs{...} }

type DataConnectorAwsCloudTrailMapOutput added in v3.50.0

type DataConnectorAwsCloudTrailMapOutput struct{ *pulumi.OutputState }

func (DataConnectorAwsCloudTrailMapOutput) ElementType added in v3.50.0

func (DataConnectorAwsCloudTrailMapOutput) MapIndex added in v3.50.0

func (DataConnectorAwsCloudTrailMapOutput) ToDataConnectorAwsCloudTrailMapOutput added in v3.50.0

func (o DataConnectorAwsCloudTrailMapOutput) ToDataConnectorAwsCloudTrailMapOutput() DataConnectorAwsCloudTrailMapOutput

func (DataConnectorAwsCloudTrailMapOutput) ToDataConnectorAwsCloudTrailMapOutputWithContext added in v3.50.0

func (o DataConnectorAwsCloudTrailMapOutput) ToDataConnectorAwsCloudTrailMapOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailMapOutput

type DataConnectorAwsCloudTrailOutput added in v3.50.0

type DataConnectorAwsCloudTrailOutput struct {
	*pulumi.OutputState
}

func (DataConnectorAwsCloudTrailOutput) ElementType added in v3.50.0

func (DataConnectorAwsCloudTrailOutput) ToDataConnectorAwsCloudTrailOutput added in v3.50.0

func (o DataConnectorAwsCloudTrailOutput) ToDataConnectorAwsCloudTrailOutput() DataConnectorAwsCloudTrailOutput

func (DataConnectorAwsCloudTrailOutput) ToDataConnectorAwsCloudTrailOutputWithContext added in v3.50.0

func (o DataConnectorAwsCloudTrailOutput) ToDataConnectorAwsCloudTrailOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailOutput

func (DataConnectorAwsCloudTrailOutput) ToDataConnectorAwsCloudTrailPtrOutput added in v3.50.0

func (o DataConnectorAwsCloudTrailOutput) ToDataConnectorAwsCloudTrailPtrOutput() DataConnectorAwsCloudTrailPtrOutput

func (DataConnectorAwsCloudTrailOutput) ToDataConnectorAwsCloudTrailPtrOutputWithContext added in v3.50.0

func (o DataConnectorAwsCloudTrailOutput) ToDataConnectorAwsCloudTrailPtrOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailPtrOutput

type DataConnectorAwsCloudTrailPtrInput added in v3.50.0

type DataConnectorAwsCloudTrailPtrInput interface {
	pulumi.Input

	ToDataConnectorAwsCloudTrailPtrOutput() DataConnectorAwsCloudTrailPtrOutput
	ToDataConnectorAwsCloudTrailPtrOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailPtrOutput
}

type DataConnectorAwsCloudTrailPtrOutput added in v3.50.0

type DataConnectorAwsCloudTrailPtrOutput struct {
	*pulumi.OutputState
}

func (DataConnectorAwsCloudTrailPtrOutput) ElementType added in v3.50.0

func (DataConnectorAwsCloudTrailPtrOutput) ToDataConnectorAwsCloudTrailPtrOutput added in v3.50.0

func (o DataConnectorAwsCloudTrailPtrOutput) ToDataConnectorAwsCloudTrailPtrOutput() DataConnectorAwsCloudTrailPtrOutput

func (DataConnectorAwsCloudTrailPtrOutput) ToDataConnectorAwsCloudTrailPtrOutputWithContext added in v3.50.0

func (o DataConnectorAwsCloudTrailPtrOutput) ToDataConnectorAwsCloudTrailPtrOutputWithContext(ctx context.Context) DataConnectorAwsCloudTrailPtrOutput

type DataConnectorAwsCloudTrailState added in v3.50.0

type DataConnectorAwsCloudTrailState struct {
	// The ARN of the AWS CloudTrail role, which is connected to this AWS CloudTrail Data Connector.
	AwsRoleArn pulumi.StringPtrInput
	// The ID of the Log Analytics Workspace that this AWS CloudTrail Data Connector resides in. Changing this forces a new AWS CloudTrail Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this AWS CloudTrail Data Connector. Changing this forces a new AWS CloudTrail Data Connector to be created.
	Name pulumi.StringPtrInput
}

func (DataConnectorAwsCloudTrailState) ElementType added in v3.50.0

type DataConnectorAzureActiveDirectory added in v3.50.0

type DataConnectorAzureActiveDirectory struct {
	pulumi.CustomResourceState

	// The ID of the Log Analytics Workspace that this Azure Active Directory Data Connector resides in. Changing this forces a new Azure Active Directory Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Azure Active Directory Data Connector. Changing this forces a new Azure Active Directory Data Connector to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the tenant that this Azure Active Directory Data Connector connects to. Changing this forces a new Azure Active Directory Data Connector to be created.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
}

Manages a Azure Active Directory Data Connector.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("PerGB2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewDataConnectorAzureActiveDirectory(ctx, "exampleDataConnectorAzureActiveDirectory", &sentinel.DataConnectorAzureActiveDirectoryArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Azure Active Directory Data Connectors can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/dataConnectorAzureActiveDirectory:DataConnectorAzureActiveDirectory example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/dataConnectors/dc1

```

func GetDataConnectorAzureActiveDirectory added in v3.50.0

func GetDataConnectorAzureActiveDirectory(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataConnectorAzureActiveDirectoryState, opts ...pulumi.ResourceOption) (*DataConnectorAzureActiveDirectory, error)

GetDataConnectorAzureActiveDirectory gets an existing DataConnectorAzureActiveDirectory resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataConnectorAzureActiveDirectory added in v3.50.0

func NewDataConnectorAzureActiveDirectory(ctx *pulumi.Context,
	name string, args *DataConnectorAzureActiveDirectoryArgs, opts ...pulumi.ResourceOption) (*DataConnectorAzureActiveDirectory, error)

NewDataConnectorAzureActiveDirectory registers a new resource with the given unique name, arguments, and options.

func (*DataConnectorAzureActiveDirectory) ElementType added in v3.50.0

func (*DataConnectorAzureActiveDirectory) ToDataConnectorAzureActiveDirectoryOutput added in v3.50.0

func (i *DataConnectorAzureActiveDirectory) ToDataConnectorAzureActiveDirectoryOutput() DataConnectorAzureActiveDirectoryOutput

func (*DataConnectorAzureActiveDirectory) ToDataConnectorAzureActiveDirectoryOutputWithContext added in v3.50.0

func (i *DataConnectorAzureActiveDirectory) ToDataConnectorAzureActiveDirectoryOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryOutput

func (*DataConnectorAzureActiveDirectory) ToDataConnectorAzureActiveDirectoryPtrOutput added in v3.50.0

func (i *DataConnectorAzureActiveDirectory) ToDataConnectorAzureActiveDirectoryPtrOutput() DataConnectorAzureActiveDirectoryPtrOutput

func (*DataConnectorAzureActiveDirectory) ToDataConnectorAzureActiveDirectoryPtrOutputWithContext added in v3.50.0

func (i *DataConnectorAzureActiveDirectory) ToDataConnectorAzureActiveDirectoryPtrOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryPtrOutput

type DataConnectorAzureActiveDirectoryArgs added in v3.50.0

type DataConnectorAzureActiveDirectoryArgs struct {
	// The ID of the Log Analytics Workspace that this Azure Active Directory Data Connector resides in. Changing this forces a new Azure Active Directory Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Azure Active Directory Data Connector. Changing this forces a new Azure Active Directory Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the tenant that this Azure Active Directory Data Connector connects to. Changing this forces a new Azure Active Directory Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

The set of arguments for constructing a DataConnectorAzureActiveDirectory resource.

func (DataConnectorAzureActiveDirectoryArgs) ElementType added in v3.50.0

type DataConnectorAzureActiveDirectoryArray added in v3.50.0

type DataConnectorAzureActiveDirectoryArray []DataConnectorAzureActiveDirectoryInput

func (DataConnectorAzureActiveDirectoryArray) ElementType added in v3.50.0

func (DataConnectorAzureActiveDirectoryArray) ToDataConnectorAzureActiveDirectoryArrayOutput added in v3.50.0

func (i DataConnectorAzureActiveDirectoryArray) ToDataConnectorAzureActiveDirectoryArrayOutput() DataConnectorAzureActiveDirectoryArrayOutput

func (DataConnectorAzureActiveDirectoryArray) ToDataConnectorAzureActiveDirectoryArrayOutputWithContext added in v3.50.0

func (i DataConnectorAzureActiveDirectoryArray) ToDataConnectorAzureActiveDirectoryArrayOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryArrayOutput

type DataConnectorAzureActiveDirectoryArrayInput added in v3.50.0

type DataConnectorAzureActiveDirectoryArrayInput interface {
	pulumi.Input

	ToDataConnectorAzureActiveDirectoryArrayOutput() DataConnectorAzureActiveDirectoryArrayOutput
	ToDataConnectorAzureActiveDirectoryArrayOutputWithContext(context.Context) DataConnectorAzureActiveDirectoryArrayOutput
}

DataConnectorAzureActiveDirectoryArrayInput is an input type that accepts DataConnectorAzureActiveDirectoryArray and DataConnectorAzureActiveDirectoryArrayOutput values. You can construct a concrete instance of `DataConnectorAzureActiveDirectoryArrayInput` via:

DataConnectorAzureActiveDirectoryArray{ DataConnectorAzureActiveDirectoryArgs{...} }

type DataConnectorAzureActiveDirectoryArrayOutput added in v3.50.0

type DataConnectorAzureActiveDirectoryArrayOutput struct{ *pulumi.OutputState }

func (DataConnectorAzureActiveDirectoryArrayOutput) ElementType added in v3.50.0

func (DataConnectorAzureActiveDirectoryArrayOutput) Index added in v3.50.0

func (DataConnectorAzureActiveDirectoryArrayOutput) ToDataConnectorAzureActiveDirectoryArrayOutput added in v3.50.0

func (o DataConnectorAzureActiveDirectoryArrayOutput) ToDataConnectorAzureActiveDirectoryArrayOutput() DataConnectorAzureActiveDirectoryArrayOutput

func (DataConnectorAzureActiveDirectoryArrayOutput) ToDataConnectorAzureActiveDirectoryArrayOutputWithContext added in v3.50.0

func (o DataConnectorAzureActiveDirectoryArrayOutput) ToDataConnectorAzureActiveDirectoryArrayOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryArrayOutput

type DataConnectorAzureActiveDirectoryInput added in v3.50.0

type DataConnectorAzureActiveDirectoryInput interface {
	pulumi.Input

	ToDataConnectorAzureActiveDirectoryOutput() DataConnectorAzureActiveDirectoryOutput
	ToDataConnectorAzureActiveDirectoryOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryOutput
}

type DataConnectorAzureActiveDirectoryMap added in v3.50.0

type DataConnectorAzureActiveDirectoryMap map[string]DataConnectorAzureActiveDirectoryInput

func (DataConnectorAzureActiveDirectoryMap) ElementType added in v3.50.0

func (DataConnectorAzureActiveDirectoryMap) ToDataConnectorAzureActiveDirectoryMapOutput added in v3.50.0

func (i DataConnectorAzureActiveDirectoryMap) ToDataConnectorAzureActiveDirectoryMapOutput() DataConnectorAzureActiveDirectoryMapOutput

func (DataConnectorAzureActiveDirectoryMap) ToDataConnectorAzureActiveDirectoryMapOutputWithContext added in v3.50.0

func (i DataConnectorAzureActiveDirectoryMap) ToDataConnectorAzureActiveDirectoryMapOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryMapOutput

type DataConnectorAzureActiveDirectoryMapInput added in v3.50.0

type DataConnectorAzureActiveDirectoryMapInput interface {
	pulumi.Input

	ToDataConnectorAzureActiveDirectoryMapOutput() DataConnectorAzureActiveDirectoryMapOutput
	ToDataConnectorAzureActiveDirectoryMapOutputWithContext(context.Context) DataConnectorAzureActiveDirectoryMapOutput
}

DataConnectorAzureActiveDirectoryMapInput is an input type that accepts DataConnectorAzureActiveDirectoryMap and DataConnectorAzureActiveDirectoryMapOutput values. You can construct a concrete instance of `DataConnectorAzureActiveDirectoryMapInput` via:

DataConnectorAzureActiveDirectoryMap{ "key": DataConnectorAzureActiveDirectoryArgs{...} }

type DataConnectorAzureActiveDirectoryMapOutput added in v3.50.0

type DataConnectorAzureActiveDirectoryMapOutput struct{ *pulumi.OutputState }

func (DataConnectorAzureActiveDirectoryMapOutput) ElementType added in v3.50.0

func (DataConnectorAzureActiveDirectoryMapOutput) MapIndex added in v3.50.0

func (DataConnectorAzureActiveDirectoryMapOutput) ToDataConnectorAzureActiveDirectoryMapOutput added in v3.50.0

func (o DataConnectorAzureActiveDirectoryMapOutput) ToDataConnectorAzureActiveDirectoryMapOutput() DataConnectorAzureActiveDirectoryMapOutput

func (DataConnectorAzureActiveDirectoryMapOutput) ToDataConnectorAzureActiveDirectoryMapOutputWithContext added in v3.50.0

func (o DataConnectorAzureActiveDirectoryMapOutput) ToDataConnectorAzureActiveDirectoryMapOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryMapOutput

type DataConnectorAzureActiveDirectoryOutput added in v3.50.0

type DataConnectorAzureActiveDirectoryOutput struct {
	*pulumi.OutputState
}

func (DataConnectorAzureActiveDirectoryOutput) ElementType added in v3.50.0

func (DataConnectorAzureActiveDirectoryOutput) ToDataConnectorAzureActiveDirectoryOutput added in v3.50.0

func (o DataConnectorAzureActiveDirectoryOutput) ToDataConnectorAzureActiveDirectoryOutput() DataConnectorAzureActiveDirectoryOutput

func (DataConnectorAzureActiveDirectoryOutput) ToDataConnectorAzureActiveDirectoryOutputWithContext added in v3.50.0

func (o DataConnectorAzureActiveDirectoryOutput) ToDataConnectorAzureActiveDirectoryOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryOutput

func (DataConnectorAzureActiveDirectoryOutput) ToDataConnectorAzureActiveDirectoryPtrOutput added in v3.50.0

func (o DataConnectorAzureActiveDirectoryOutput) ToDataConnectorAzureActiveDirectoryPtrOutput() DataConnectorAzureActiveDirectoryPtrOutput

func (DataConnectorAzureActiveDirectoryOutput) ToDataConnectorAzureActiveDirectoryPtrOutputWithContext added in v3.50.0

func (o DataConnectorAzureActiveDirectoryOutput) ToDataConnectorAzureActiveDirectoryPtrOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryPtrOutput

type DataConnectorAzureActiveDirectoryPtrInput added in v3.50.0

type DataConnectorAzureActiveDirectoryPtrInput interface {
	pulumi.Input

	ToDataConnectorAzureActiveDirectoryPtrOutput() DataConnectorAzureActiveDirectoryPtrOutput
	ToDataConnectorAzureActiveDirectoryPtrOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryPtrOutput
}

type DataConnectorAzureActiveDirectoryPtrOutput added in v3.50.0

type DataConnectorAzureActiveDirectoryPtrOutput struct {
	*pulumi.OutputState
}

func (DataConnectorAzureActiveDirectoryPtrOutput) ElementType added in v3.50.0

func (DataConnectorAzureActiveDirectoryPtrOutput) ToDataConnectorAzureActiveDirectoryPtrOutput added in v3.50.0

func (o DataConnectorAzureActiveDirectoryPtrOutput) ToDataConnectorAzureActiveDirectoryPtrOutput() DataConnectorAzureActiveDirectoryPtrOutput

func (DataConnectorAzureActiveDirectoryPtrOutput) ToDataConnectorAzureActiveDirectoryPtrOutputWithContext added in v3.50.0

func (o DataConnectorAzureActiveDirectoryPtrOutput) ToDataConnectorAzureActiveDirectoryPtrOutputWithContext(ctx context.Context) DataConnectorAzureActiveDirectoryPtrOutput

type DataConnectorAzureActiveDirectoryState added in v3.50.0

type DataConnectorAzureActiveDirectoryState struct {
	// The ID of the Log Analytics Workspace that this Azure Active Directory Data Connector resides in. Changing this forces a new Azure Active Directory Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Azure Active Directory Data Connector. Changing this forces a new Azure Active Directory Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the tenant that this Azure Active Directory Data Connector connects to. Changing this forces a new Azure Active Directory Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

func (DataConnectorAzureActiveDirectoryState) ElementType added in v3.50.0

type DataConnectorAzureAdvancedThreadProtection added in v3.51.0

type DataConnectorAzureAdvancedThreadProtection struct {
	pulumi.CustomResourceState

	// The ID of the Log Analytics Workspace that this Azure Advanced Threat Protection Data Connector resides in. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Azure Advanced Threat Protection Data Connector. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the tenant that this Azure Advanced Threat Protection Data Connector connects to. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
}

Manages a Azure Advanced Threat Protection Data Connector.

!> **NOTE:** This resource requires that [Enterprise Mobility + Security E5](https://www.microsoft.com/en-us/microsoft-365/enterprise-mobility-security) is enabled on the tenant being connected to.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("west europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("PerGB2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewDataConnectorAzureAdvancedThreadProtection(ctx, "exampleDataConnectorAzureAdvancedThreadProtection", &sentinel.DataConnectorAzureAdvancedThreadProtectionArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Azure Advanced Threat Protection Data Connectors can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/dataConnectorAzureAdvancedThreadProtection:DataConnectorAzureAdvancedThreadProtection example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/dataConnectors/dc1

```

func GetDataConnectorAzureAdvancedThreadProtection added in v3.51.0

func GetDataConnectorAzureAdvancedThreadProtection(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataConnectorAzureAdvancedThreadProtectionState, opts ...pulumi.ResourceOption) (*DataConnectorAzureAdvancedThreadProtection, error)

GetDataConnectorAzureAdvancedThreadProtection gets an existing DataConnectorAzureAdvancedThreadProtection resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataConnectorAzureAdvancedThreadProtection added in v3.51.0

func NewDataConnectorAzureAdvancedThreadProtection(ctx *pulumi.Context,
	name string, args *DataConnectorAzureAdvancedThreadProtectionArgs, opts ...pulumi.ResourceOption) (*DataConnectorAzureAdvancedThreadProtection, error)

NewDataConnectorAzureAdvancedThreadProtection registers a new resource with the given unique name, arguments, and options.

func (*DataConnectorAzureAdvancedThreadProtection) ElementType added in v3.51.0

func (*DataConnectorAzureAdvancedThreadProtection) ToDataConnectorAzureAdvancedThreadProtectionOutput added in v3.51.0

func (i *DataConnectorAzureAdvancedThreadProtection) ToDataConnectorAzureAdvancedThreadProtectionOutput() DataConnectorAzureAdvancedThreadProtectionOutput

func (*DataConnectorAzureAdvancedThreadProtection) ToDataConnectorAzureAdvancedThreadProtectionOutputWithContext added in v3.51.0

func (i *DataConnectorAzureAdvancedThreadProtection) ToDataConnectorAzureAdvancedThreadProtectionOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionOutput

func (*DataConnectorAzureAdvancedThreadProtection) ToDataConnectorAzureAdvancedThreadProtectionPtrOutput added in v3.51.0

func (i *DataConnectorAzureAdvancedThreadProtection) ToDataConnectorAzureAdvancedThreadProtectionPtrOutput() DataConnectorAzureAdvancedThreadProtectionPtrOutput

func (*DataConnectorAzureAdvancedThreadProtection) ToDataConnectorAzureAdvancedThreadProtectionPtrOutputWithContext added in v3.51.0

func (i *DataConnectorAzureAdvancedThreadProtection) ToDataConnectorAzureAdvancedThreadProtectionPtrOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionPtrOutput

type DataConnectorAzureAdvancedThreadProtectionArgs added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionArgs struct {
	// The ID of the Log Analytics Workspace that this Azure Advanced Threat Protection Data Connector resides in. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Azure Advanced Threat Protection Data Connector. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the tenant that this Azure Advanced Threat Protection Data Connector connects to. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

The set of arguments for constructing a DataConnectorAzureAdvancedThreadProtection resource.

func (DataConnectorAzureAdvancedThreadProtectionArgs) ElementType added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionArray added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionArray []DataConnectorAzureAdvancedThreadProtectionInput

func (DataConnectorAzureAdvancedThreadProtectionArray) ElementType added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionArray) ToDataConnectorAzureAdvancedThreadProtectionArrayOutput added in v3.51.0

func (i DataConnectorAzureAdvancedThreadProtectionArray) ToDataConnectorAzureAdvancedThreadProtectionArrayOutput() DataConnectorAzureAdvancedThreadProtectionArrayOutput

func (DataConnectorAzureAdvancedThreadProtectionArray) ToDataConnectorAzureAdvancedThreadProtectionArrayOutputWithContext added in v3.51.0

func (i DataConnectorAzureAdvancedThreadProtectionArray) ToDataConnectorAzureAdvancedThreadProtectionArrayOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionArrayOutput

type DataConnectorAzureAdvancedThreadProtectionArrayInput added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionArrayInput interface {
	pulumi.Input

	ToDataConnectorAzureAdvancedThreadProtectionArrayOutput() DataConnectorAzureAdvancedThreadProtectionArrayOutput
	ToDataConnectorAzureAdvancedThreadProtectionArrayOutputWithContext(context.Context) DataConnectorAzureAdvancedThreadProtectionArrayOutput
}

DataConnectorAzureAdvancedThreadProtectionArrayInput is an input type that accepts DataConnectorAzureAdvancedThreadProtectionArray and DataConnectorAzureAdvancedThreadProtectionArrayOutput values. You can construct a concrete instance of `DataConnectorAzureAdvancedThreadProtectionArrayInput` via:

DataConnectorAzureAdvancedThreadProtectionArray{ DataConnectorAzureAdvancedThreadProtectionArgs{...} }

type DataConnectorAzureAdvancedThreadProtectionArrayOutput added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionArrayOutput struct{ *pulumi.OutputState }

func (DataConnectorAzureAdvancedThreadProtectionArrayOutput) ElementType added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionArrayOutput) Index added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionArrayOutput) ToDataConnectorAzureAdvancedThreadProtectionArrayOutput added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionArrayOutput) ToDataConnectorAzureAdvancedThreadProtectionArrayOutputWithContext added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionArrayOutput) ToDataConnectorAzureAdvancedThreadProtectionArrayOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionArrayOutput

type DataConnectorAzureAdvancedThreadProtectionInput added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionInput interface {
	pulumi.Input

	ToDataConnectorAzureAdvancedThreadProtectionOutput() DataConnectorAzureAdvancedThreadProtectionOutput
	ToDataConnectorAzureAdvancedThreadProtectionOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionOutput
}

type DataConnectorAzureAdvancedThreadProtectionMap added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionMap map[string]DataConnectorAzureAdvancedThreadProtectionInput

func (DataConnectorAzureAdvancedThreadProtectionMap) ElementType added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionMap) ToDataConnectorAzureAdvancedThreadProtectionMapOutput added in v3.51.0

func (i DataConnectorAzureAdvancedThreadProtectionMap) ToDataConnectorAzureAdvancedThreadProtectionMapOutput() DataConnectorAzureAdvancedThreadProtectionMapOutput

func (DataConnectorAzureAdvancedThreadProtectionMap) ToDataConnectorAzureAdvancedThreadProtectionMapOutputWithContext added in v3.51.0

func (i DataConnectorAzureAdvancedThreadProtectionMap) ToDataConnectorAzureAdvancedThreadProtectionMapOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionMapOutput

type DataConnectorAzureAdvancedThreadProtectionMapInput added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionMapInput interface {
	pulumi.Input

	ToDataConnectorAzureAdvancedThreadProtectionMapOutput() DataConnectorAzureAdvancedThreadProtectionMapOutput
	ToDataConnectorAzureAdvancedThreadProtectionMapOutputWithContext(context.Context) DataConnectorAzureAdvancedThreadProtectionMapOutput
}

DataConnectorAzureAdvancedThreadProtectionMapInput is an input type that accepts DataConnectorAzureAdvancedThreadProtectionMap and DataConnectorAzureAdvancedThreadProtectionMapOutput values. You can construct a concrete instance of `DataConnectorAzureAdvancedThreadProtectionMapInput` via:

DataConnectorAzureAdvancedThreadProtectionMap{ "key": DataConnectorAzureAdvancedThreadProtectionArgs{...} }

type DataConnectorAzureAdvancedThreadProtectionMapOutput added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionMapOutput struct{ *pulumi.OutputState }

func (DataConnectorAzureAdvancedThreadProtectionMapOutput) ElementType added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionMapOutput) MapIndex added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionMapOutput) ToDataConnectorAzureAdvancedThreadProtectionMapOutput added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionMapOutput) ToDataConnectorAzureAdvancedThreadProtectionMapOutput() DataConnectorAzureAdvancedThreadProtectionMapOutput

func (DataConnectorAzureAdvancedThreadProtectionMapOutput) ToDataConnectorAzureAdvancedThreadProtectionMapOutputWithContext added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionMapOutput) ToDataConnectorAzureAdvancedThreadProtectionMapOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionMapOutput

type DataConnectorAzureAdvancedThreadProtectionOutput added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionOutput struct {
	*pulumi.OutputState
}

func (DataConnectorAzureAdvancedThreadProtectionOutput) ElementType added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionOutput) ToDataConnectorAzureAdvancedThreadProtectionOutput added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionOutput) ToDataConnectorAzureAdvancedThreadProtectionOutput() DataConnectorAzureAdvancedThreadProtectionOutput

func (DataConnectorAzureAdvancedThreadProtectionOutput) ToDataConnectorAzureAdvancedThreadProtectionOutputWithContext added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionOutput) ToDataConnectorAzureAdvancedThreadProtectionOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionOutput

func (DataConnectorAzureAdvancedThreadProtectionOutput) ToDataConnectorAzureAdvancedThreadProtectionPtrOutput added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionOutput) ToDataConnectorAzureAdvancedThreadProtectionPtrOutput() DataConnectorAzureAdvancedThreadProtectionPtrOutput

func (DataConnectorAzureAdvancedThreadProtectionOutput) ToDataConnectorAzureAdvancedThreadProtectionPtrOutputWithContext added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionOutput) ToDataConnectorAzureAdvancedThreadProtectionPtrOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionPtrOutput

type DataConnectorAzureAdvancedThreadProtectionPtrInput added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionPtrInput interface {
	pulumi.Input

	ToDataConnectorAzureAdvancedThreadProtectionPtrOutput() DataConnectorAzureAdvancedThreadProtectionPtrOutput
	ToDataConnectorAzureAdvancedThreadProtectionPtrOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionPtrOutput
}

type DataConnectorAzureAdvancedThreadProtectionPtrOutput added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionPtrOutput struct {
	*pulumi.OutputState
}

func (DataConnectorAzureAdvancedThreadProtectionPtrOutput) ElementType added in v3.51.0

func (DataConnectorAzureAdvancedThreadProtectionPtrOutput) ToDataConnectorAzureAdvancedThreadProtectionPtrOutput added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionPtrOutput) ToDataConnectorAzureAdvancedThreadProtectionPtrOutput() DataConnectorAzureAdvancedThreadProtectionPtrOutput

func (DataConnectorAzureAdvancedThreadProtectionPtrOutput) ToDataConnectorAzureAdvancedThreadProtectionPtrOutputWithContext added in v3.51.0

func (o DataConnectorAzureAdvancedThreadProtectionPtrOutput) ToDataConnectorAzureAdvancedThreadProtectionPtrOutputWithContext(ctx context.Context) DataConnectorAzureAdvancedThreadProtectionPtrOutput

type DataConnectorAzureAdvancedThreadProtectionState added in v3.51.0

type DataConnectorAzureAdvancedThreadProtectionState struct {
	// The ID of the Log Analytics Workspace that this Azure Advanced Threat Protection Data Connector resides in. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Azure Advanced Threat Protection Data Connector. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the tenant that this Azure Advanced Threat Protection Data Connector connects to. Changing this forces a new Azure Advanced Threat Protection Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

func (DataConnectorAzureAdvancedThreadProtectionState) ElementType added in v3.51.0

type DataConnectorAzureSecurityCenter added in v3.51.0

type DataConnectorAzureSecurityCenter struct {
	pulumi.CustomResourceState

	// The ID of the Log Analytics Workspace that this Azure Security Center Data Connector resides in. Changing this forces a new Azure Security Center Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Azure Security Center Data Connector. Changing this forces a new Azure Security Center Data Connector to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the subscription that this Azure Security Center Data Connector connects to. Changing this forces a new Azure Security Center Data Connector to be created.
	SubscriptionId pulumi.StringOutput `pulumi:"subscriptionId"`
}

Manages a Azure Security Center Data Connector.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("west europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("PerGB2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewDataConnectorAzureSecurityCenter(ctx, "exampleDataConnectorAzureSecurityCenter", &sentinel.DataConnectorAzureSecurityCenterArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Azure Security Center Data Connectors can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/dataConnectorAzureSecurityCenter:DataConnectorAzureSecurityCenter example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/dataConnectors/dc1

```

func GetDataConnectorAzureSecurityCenter added in v3.51.0

func GetDataConnectorAzureSecurityCenter(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataConnectorAzureSecurityCenterState, opts ...pulumi.ResourceOption) (*DataConnectorAzureSecurityCenter, error)

GetDataConnectorAzureSecurityCenter gets an existing DataConnectorAzureSecurityCenter resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataConnectorAzureSecurityCenter added in v3.51.0

func NewDataConnectorAzureSecurityCenter(ctx *pulumi.Context,
	name string, args *DataConnectorAzureSecurityCenterArgs, opts ...pulumi.ResourceOption) (*DataConnectorAzureSecurityCenter, error)

NewDataConnectorAzureSecurityCenter registers a new resource with the given unique name, arguments, and options.

func (*DataConnectorAzureSecurityCenter) ElementType added in v3.51.0

func (*DataConnectorAzureSecurityCenter) ToDataConnectorAzureSecurityCenterOutput added in v3.51.0

func (i *DataConnectorAzureSecurityCenter) ToDataConnectorAzureSecurityCenterOutput() DataConnectorAzureSecurityCenterOutput

func (*DataConnectorAzureSecurityCenter) ToDataConnectorAzureSecurityCenterOutputWithContext added in v3.51.0

func (i *DataConnectorAzureSecurityCenter) ToDataConnectorAzureSecurityCenterOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterOutput

func (*DataConnectorAzureSecurityCenter) ToDataConnectorAzureSecurityCenterPtrOutput added in v3.51.0

func (i *DataConnectorAzureSecurityCenter) ToDataConnectorAzureSecurityCenterPtrOutput() DataConnectorAzureSecurityCenterPtrOutput

func (*DataConnectorAzureSecurityCenter) ToDataConnectorAzureSecurityCenterPtrOutputWithContext added in v3.51.0

func (i *DataConnectorAzureSecurityCenter) ToDataConnectorAzureSecurityCenterPtrOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterPtrOutput

type DataConnectorAzureSecurityCenterArgs added in v3.51.0

type DataConnectorAzureSecurityCenterArgs struct {
	// The ID of the Log Analytics Workspace that this Azure Security Center Data Connector resides in. Changing this forces a new Azure Security Center Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Azure Security Center Data Connector. Changing this forces a new Azure Security Center Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the subscription that this Azure Security Center Data Connector connects to. Changing this forces a new Azure Security Center Data Connector to be created.
	SubscriptionId pulumi.StringPtrInput
}

The set of arguments for constructing a DataConnectorAzureSecurityCenter resource.

func (DataConnectorAzureSecurityCenterArgs) ElementType added in v3.51.0

type DataConnectorAzureSecurityCenterArray added in v3.51.0

type DataConnectorAzureSecurityCenterArray []DataConnectorAzureSecurityCenterInput

func (DataConnectorAzureSecurityCenterArray) ElementType added in v3.51.0

func (DataConnectorAzureSecurityCenterArray) ToDataConnectorAzureSecurityCenterArrayOutput added in v3.51.0

func (i DataConnectorAzureSecurityCenterArray) ToDataConnectorAzureSecurityCenterArrayOutput() DataConnectorAzureSecurityCenterArrayOutput

func (DataConnectorAzureSecurityCenterArray) ToDataConnectorAzureSecurityCenterArrayOutputWithContext added in v3.51.0

func (i DataConnectorAzureSecurityCenterArray) ToDataConnectorAzureSecurityCenterArrayOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterArrayOutput

type DataConnectorAzureSecurityCenterArrayInput added in v3.51.0

type DataConnectorAzureSecurityCenterArrayInput interface {
	pulumi.Input

	ToDataConnectorAzureSecurityCenterArrayOutput() DataConnectorAzureSecurityCenterArrayOutput
	ToDataConnectorAzureSecurityCenterArrayOutputWithContext(context.Context) DataConnectorAzureSecurityCenterArrayOutput
}

DataConnectorAzureSecurityCenterArrayInput is an input type that accepts DataConnectorAzureSecurityCenterArray and DataConnectorAzureSecurityCenterArrayOutput values. You can construct a concrete instance of `DataConnectorAzureSecurityCenterArrayInput` via:

DataConnectorAzureSecurityCenterArray{ DataConnectorAzureSecurityCenterArgs{...} }

type DataConnectorAzureSecurityCenterArrayOutput added in v3.51.0

type DataConnectorAzureSecurityCenterArrayOutput struct{ *pulumi.OutputState }

func (DataConnectorAzureSecurityCenterArrayOutput) ElementType added in v3.51.0

func (DataConnectorAzureSecurityCenterArrayOutput) Index added in v3.51.0

func (DataConnectorAzureSecurityCenterArrayOutput) ToDataConnectorAzureSecurityCenterArrayOutput added in v3.51.0

func (o DataConnectorAzureSecurityCenterArrayOutput) ToDataConnectorAzureSecurityCenterArrayOutput() DataConnectorAzureSecurityCenterArrayOutput

func (DataConnectorAzureSecurityCenterArrayOutput) ToDataConnectorAzureSecurityCenterArrayOutputWithContext added in v3.51.0

func (o DataConnectorAzureSecurityCenterArrayOutput) ToDataConnectorAzureSecurityCenterArrayOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterArrayOutput

type DataConnectorAzureSecurityCenterInput added in v3.51.0

type DataConnectorAzureSecurityCenterInput interface {
	pulumi.Input

	ToDataConnectorAzureSecurityCenterOutput() DataConnectorAzureSecurityCenterOutput
	ToDataConnectorAzureSecurityCenterOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterOutput
}

type DataConnectorAzureSecurityCenterMap added in v3.51.0

type DataConnectorAzureSecurityCenterMap map[string]DataConnectorAzureSecurityCenterInput

func (DataConnectorAzureSecurityCenterMap) ElementType added in v3.51.0

func (DataConnectorAzureSecurityCenterMap) ToDataConnectorAzureSecurityCenterMapOutput added in v3.51.0

func (i DataConnectorAzureSecurityCenterMap) ToDataConnectorAzureSecurityCenterMapOutput() DataConnectorAzureSecurityCenterMapOutput

func (DataConnectorAzureSecurityCenterMap) ToDataConnectorAzureSecurityCenterMapOutputWithContext added in v3.51.0

func (i DataConnectorAzureSecurityCenterMap) ToDataConnectorAzureSecurityCenterMapOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterMapOutput

type DataConnectorAzureSecurityCenterMapInput added in v3.51.0

type DataConnectorAzureSecurityCenterMapInput interface {
	pulumi.Input

	ToDataConnectorAzureSecurityCenterMapOutput() DataConnectorAzureSecurityCenterMapOutput
	ToDataConnectorAzureSecurityCenterMapOutputWithContext(context.Context) DataConnectorAzureSecurityCenterMapOutput
}

DataConnectorAzureSecurityCenterMapInput is an input type that accepts DataConnectorAzureSecurityCenterMap and DataConnectorAzureSecurityCenterMapOutput values. You can construct a concrete instance of `DataConnectorAzureSecurityCenterMapInput` via:

DataConnectorAzureSecurityCenterMap{ "key": DataConnectorAzureSecurityCenterArgs{...} }

type DataConnectorAzureSecurityCenterMapOutput added in v3.51.0

type DataConnectorAzureSecurityCenterMapOutput struct{ *pulumi.OutputState }

func (DataConnectorAzureSecurityCenterMapOutput) ElementType added in v3.51.0

func (DataConnectorAzureSecurityCenterMapOutput) MapIndex added in v3.51.0

func (DataConnectorAzureSecurityCenterMapOutput) ToDataConnectorAzureSecurityCenterMapOutput added in v3.51.0

func (o DataConnectorAzureSecurityCenterMapOutput) ToDataConnectorAzureSecurityCenterMapOutput() DataConnectorAzureSecurityCenterMapOutput

func (DataConnectorAzureSecurityCenterMapOutput) ToDataConnectorAzureSecurityCenterMapOutputWithContext added in v3.51.0

func (o DataConnectorAzureSecurityCenterMapOutput) ToDataConnectorAzureSecurityCenterMapOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterMapOutput

type DataConnectorAzureSecurityCenterOutput added in v3.51.0

type DataConnectorAzureSecurityCenterOutput struct {
	*pulumi.OutputState
}

func (DataConnectorAzureSecurityCenterOutput) ElementType added in v3.51.0

func (DataConnectorAzureSecurityCenterOutput) ToDataConnectorAzureSecurityCenterOutput added in v3.51.0

func (o DataConnectorAzureSecurityCenterOutput) ToDataConnectorAzureSecurityCenterOutput() DataConnectorAzureSecurityCenterOutput

func (DataConnectorAzureSecurityCenterOutput) ToDataConnectorAzureSecurityCenterOutputWithContext added in v3.51.0

func (o DataConnectorAzureSecurityCenterOutput) ToDataConnectorAzureSecurityCenterOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterOutput

func (DataConnectorAzureSecurityCenterOutput) ToDataConnectorAzureSecurityCenterPtrOutput added in v3.51.0

func (o DataConnectorAzureSecurityCenterOutput) ToDataConnectorAzureSecurityCenterPtrOutput() DataConnectorAzureSecurityCenterPtrOutput

func (DataConnectorAzureSecurityCenterOutput) ToDataConnectorAzureSecurityCenterPtrOutputWithContext added in v3.51.0

func (o DataConnectorAzureSecurityCenterOutput) ToDataConnectorAzureSecurityCenterPtrOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterPtrOutput

type DataConnectorAzureSecurityCenterPtrInput added in v3.51.0

type DataConnectorAzureSecurityCenterPtrInput interface {
	pulumi.Input

	ToDataConnectorAzureSecurityCenterPtrOutput() DataConnectorAzureSecurityCenterPtrOutput
	ToDataConnectorAzureSecurityCenterPtrOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterPtrOutput
}

type DataConnectorAzureSecurityCenterPtrOutput added in v3.51.0

type DataConnectorAzureSecurityCenterPtrOutput struct {
	*pulumi.OutputState
}

func (DataConnectorAzureSecurityCenterPtrOutput) ElementType added in v3.51.0

func (DataConnectorAzureSecurityCenterPtrOutput) ToDataConnectorAzureSecurityCenterPtrOutput added in v3.51.0

func (o DataConnectorAzureSecurityCenterPtrOutput) ToDataConnectorAzureSecurityCenterPtrOutput() DataConnectorAzureSecurityCenterPtrOutput

func (DataConnectorAzureSecurityCenterPtrOutput) ToDataConnectorAzureSecurityCenterPtrOutputWithContext added in v3.51.0

func (o DataConnectorAzureSecurityCenterPtrOutput) ToDataConnectorAzureSecurityCenterPtrOutputWithContext(ctx context.Context) DataConnectorAzureSecurityCenterPtrOutput

type DataConnectorAzureSecurityCenterState added in v3.51.0

type DataConnectorAzureSecurityCenterState struct {
	// The ID of the Log Analytics Workspace that this Azure Security Center Data Connector resides in. Changing this forces a new Azure Security Center Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Azure Security Center Data Connector. Changing this forces a new Azure Security Center Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the subscription that this Azure Security Center Data Connector connects to. Changing this forces a new Azure Security Center Data Connector to be created.
	SubscriptionId pulumi.StringPtrInput
}

func (DataConnectorAzureSecurityCenterState) ElementType added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurity added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurity struct {
	pulumi.CustomResourceState

	// Should the alerts be enabled? Defaults to `true`.
	AlertsEnabled pulumi.BoolPtrOutput `pulumi:"alertsEnabled"`
	// Should the Discovery Logs be enabled? Defaults to `true`.
	DiscoveryLogsEnabled pulumi.BoolPtrOutput `pulumi:"discoveryLogsEnabled"`
	// The ID of the Log Analytics Workspace that this Microsoft Cloud App Security Data Connector resides in. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Microsoft Cloud App Security Data Connector. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the Tenant that this Microsoft Cloud App Security Data Connector connects to. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
}

Manages a Microsoft Cloud App Security Data Connector.

!> **NOTE:** This resource requires that [Enterprise Mobility + Security E5](https://www.microsoft.com/en-us/microsoft-365/enterprise-mobility-security) is enabled on the tenant being connected to.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("west europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("PerGB2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewDataConnectorMicrosoftCloudAppSecurity(ctx, "exampleDataConnectorMicrosoftCloudAppSecurity", &sentinel.DataConnectorMicrosoftCloudAppSecurityArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Microsoft Cloud App Security Data Connectors can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/dataConnectorMicrosoftCloudAppSecurity:DataConnectorMicrosoftCloudAppSecurity example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/dataConnectors/dc1

```

func GetDataConnectorMicrosoftCloudAppSecurity added in v3.51.0

func GetDataConnectorMicrosoftCloudAppSecurity(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataConnectorMicrosoftCloudAppSecurityState, opts ...pulumi.ResourceOption) (*DataConnectorMicrosoftCloudAppSecurity, error)

GetDataConnectorMicrosoftCloudAppSecurity gets an existing DataConnectorMicrosoftCloudAppSecurity resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataConnectorMicrosoftCloudAppSecurity added in v3.51.0

func NewDataConnectorMicrosoftCloudAppSecurity(ctx *pulumi.Context,
	name string, args *DataConnectorMicrosoftCloudAppSecurityArgs, opts ...pulumi.ResourceOption) (*DataConnectorMicrosoftCloudAppSecurity, error)

NewDataConnectorMicrosoftCloudAppSecurity registers a new resource with the given unique name, arguments, and options.

func (*DataConnectorMicrosoftCloudAppSecurity) ElementType added in v3.51.0

func (*DataConnectorMicrosoftCloudAppSecurity) ToDataConnectorMicrosoftCloudAppSecurityOutput added in v3.51.0

func (i *DataConnectorMicrosoftCloudAppSecurity) ToDataConnectorMicrosoftCloudAppSecurityOutput() DataConnectorMicrosoftCloudAppSecurityOutput

func (*DataConnectorMicrosoftCloudAppSecurity) ToDataConnectorMicrosoftCloudAppSecurityOutputWithContext added in v3.51.0

func (i *DataConnectorMicrosoftCloudAppSecurity) ToDataConnectorMicrosoftCloudAppSecurityOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityOutput

func (*DataConnectorMicrosoftCloudAppSecurity) ToDataConnectorMicrosoftCloudAppSecurityPtrOutput added in v3.51.0

func (i *DataConnectorMicrosoftCloudAppSecurity) ToDataConnectorMicrosoftCloudAppSecurityPtrOutput() DataConnectorMicrosoftCloudAppSecurityPtrOutput

func (*DataConnectorMicrosoftCloudAppSecurity) ToDataConnectorMicrosoftCloudAppSecurityPtrOutputWithContext added in v3.51.0

func (i *DataConnectorMicrosoftCloudAppSecurity) ToDataConnectorMicrosoftCloudAppSecurityPtrOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityPtrOutput

type DataConnectorMicrosoftCloudAppSecurityArgs added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityArgs struct {
	// Should the alerts be enabled? Defaults to `true`.
	AlertsEnabled pulumi.BoolPtrInput
	// Should the Discovery Logs be enabled? Defaults to `true`.
	DiscoveryLogsEnabled pulumi.BoolPtrInput
	// The ID of the Log Analytics Workspace that this Microsoft Cloud App Security Data Connector resides in. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Microsoft Cloud App Security Data Connector. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the Tenant that this Microsoft Cloud App Security Data Connector connects to. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

The set of arguments for constructing a DataConnectorMicrosoftCloudAppSecurity resource.

func (DataConnectorMicrosoftCloudAppSecurityArgs) ElementType added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityArray added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityArray []DataConnectorMicrosoftCloudAppSecurityInput

func (DataConnectorMicrosoftCloudAppSecurityArray) ElementType added in v3.51.0

func (DataConnectorMicrosoftCloudAppSecurityArray) ToDataConnectorMicrosoftCloudAppSecurityArrayOutput added in v3.51.0

func (i DataConnectorMicrosoftCloudAppSecurityArray) ToDataConnectorMicrosoftCloudAppSecurityArrayOutput() DataConnectorMicrosoftCloudAppSecurityArrayOutput

func (DataConnectorMicrosoftCloudAppSecurityArray) ToDataConnectorMicrosoftCloudAppSecurityArrayOutputWithContext added in v3.51.0

func (i DataConnectorMicrosoftCloudAppSecurityArray) ToDataConnectorMicrosoftCloudAppSecurityArrayOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityArrayOutput

type DataConnectorMicrosoftCloudAppSecurityArrayInput added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityArrayInput interface {
	pulumi.Input

	ToDataConnectorMicrosoftCloudAppSecurityArrayOutput() DataConnectorMicrosoftCloudAppSecurityArrayOutput
	ToDataConnectorMicrosoftCloudAppSecurityArrayOutputWithContext(context.Context) DataConnectorMicrosoftCloudAppSecurityArrayOutput
}

DataConnectorMicrosoftCloudAppSecurityArrayInput is an input type that accepts DataConnectorMicrosoftCloudAppSecurityArray and DataConnectorMicrosoftCloudAppSecurityArrayOutput values. You can construct a concrete instance of `DataConnectorMicrosoftCloudAppSecurityArrayInput` via:

DataConnectorMicrosoftCloudAppSecurityArray{ DataConnectorMicrosoftCloudAppSecurityArgs{...} }

type DataConnectorMicrosoftCloudAppSecurityArrayOutput added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityArrayOutput struct{ *pulumi.OutputState }

func (DataConnectorMicrosoftCloudAppSecurityArrayOutput) ElementType added in v3.51.0

func (DataConnectorMicrosoftCloudAppSecurityArrayOutput) Index added in v3.51.0

func (DataConnectorMicrosoftCloudAppSecurityArrayOutput) ToDataConnectorMicrosoftCloudAppSecurityArrayOutput added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityArrayOutput) ToDataConnectorMicrosoftCloudAppSecurityArrayOutput() DataConnectorMicrosoftCloudAppSecurityArrayOutput

func (DataConnectorMicrosoftCloudAppSecurityArrayOutput) ToDataConnectorMicrosoftCloudAppSecurityArrayOutputWithContext added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityArrayOutput) ToDataConnectorMicrosoftCloudAppSecurityArrayOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityArrayOutput

type DataConnectorMicrosoftCloudAppSecurityInput added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityInput interface {
	pulumi.Input

	ToDataConnectorMicrosoftCloudAppSecurityOutput() DataConnectorMicrosoftCloudAppSecurityOutput
	ToDataConnectorMicrosoftCloudAppSecurityOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityOutput
}

type DataConnectorMicrosoftCloudAppSecurityMap added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityMap map[string]DataConnectorMicrosoftCloudAppSecurityInput

func (DataConnectorMicrosoftCloudAppSecurityMap) ElementType added in v3.51.0

func (DataConnectorMicrosoftCloudAppSecurityMap) ToDataConnectorMicrosoftCloudAppSecurityMapOutput added in v3.51.0

func (i DataConnectorMicrosoftCloudAppSecurityMap) ToDataConnectorMicrosoftCloudAppSecurityMapOutput() DataConnectorMicrosoftCloudAppSecurityMapOutput

func (DataConnectorMicrosoftCloudAppSecurityMap) ToDataConnectorMicrosoftCloudAppSecurityMapOutputWithContext added in v3.51.0

func (i DataConnectorMicrosoftCloudAppSecurityMap) ToDataConnectorMicrosoftCloudAppSecurityMapOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityMapOutput

type DataConnectorMicrosoftCloudAppSecurityMapInput added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityMapInput interface {
	pulumi.Input

	ToDataConnectorMicrosoftCloudAppSecurityMapOutput() DataConnectorMicrosoftCloudAppSecurityMapOutput
	ToDataConnectorMicrosoftCloudAppSecurityMapOutputWithContext(context.Context) DataConnectorMicrosoftCloudAppSecurityMapOutput
}

DataConnectorMicrosoftCloudAppSecurityMapInput is an input type that accepts DataConnectorMicrosoftCloudAppSecurityMap and DataConnectorMicrosoftCloudAppSecurityMapOutput values. You can construct a concrete instance of `DataConnectorMicrosoftCloudAppSecurityMapInput` via:

DataConnectorMicrosoftCloudAppSecurityMap{ "key": DataConnectorMicrosoftCloudAppSecurityArgs{...} }

type DataConnectorMicrosoftCloudAppSecurityMapOutput added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityMapOutput struct{ *pulumi.OutputState }

func (DataConnectorMicrosoftCloudAppSecurityMapOutput) ElementType added in v3.51.0

func (DataConnectorMicrosoftCloudAppSecurityMapOutput) MapIndex added in v3.51.0

func (DataConnectorMicrosoftCloudAppSecurityMapOutput) ToDataConnectorMicrosoftCloudAppSecurityMapOutput added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityMapOutput) ToDataConnectorMicrosoftCloudAppSecurityMapOutput() DataConnectorMicrosoftCloudAppSecurityMapOutput

func (DataConnectorMicrosoftCloudAppSecurityMapOutput) ToDataConnectorMicrosoftCloudAppSecurityMapOutputWithContext added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityMapOutput) ToDataConnectorMicrosoftCloudAppSecurityMapOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityMapOutput

type DataConnectorMicrosoftCloudAppSecurityOutput added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityOutput struct {
	*pulumi.OutputState
}

func (DataConnectorMicrosoftCloudAppSecurityOutput) ElementType added in v3.51.0

func (DataConnectorMicrosoftCloudAppSecurityOutput) ToDataConnectorMicrosoftCloudAppSecurityOutput added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityOutput) ToDataConnectorMicrosoftCloudAppSecurityOutput() DataConnectorMicrosoftCloudAppSecurityOutput

func (DataConnectorMicrosoftCloudAppSecurityOutput) ToDataConnectorMicrosoftCloudAppSecurityOutputWithContext added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityOutput) ToDataConnectorMicrosoftCloudAppSecurityOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityOutput

func (DataConnectorMicrosoftCloudAppSecurityOutput) ToDataConnectorMicrosoftCloudAppSecurityPtrOutput added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityOutput) ToDataConnectorMicrosoftCloudAppSecurityPtrOutput() DataConnectorMicrosoftCloudAppSecurityPtrOutput

func (DataConnectorMicrosoftCloudAppSecurityOutput) ToDataConnectorMicrosoftCloudAppSecurityPtrOutputWithContext added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityOutput) ToDataConnectorMicrosoftCloudAppSecurityPtrOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityPtrOutput

type DataConnectorMicrosoftCloudAppSecurityPtrInput added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityPtrInput interface {
	pulumi.Input

	ToDataConnectorMicrosoftCloudAppSecurityPtrOutput() DataConnectorMicrosoftCloudAppSecurityPtrOutput
	ToDataConnectorMicrosoftCloudAppSecurityPtrOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityPtrOutput
}

type DataConnectorMicrosoftCloudAppSecurityPtrOutput added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityPtrOutput struct {
	*pulumi.OutputState
}

func (DataConnectorMicrosoftCloudAppSecurityPtrOutput) ElementType added in v3.51.0

func (DataConnectorMicrosoftCloudAppSecurityPtrOutput) ToDataConnectorMicrosoftCloudAppSecurityPtrOutput added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityPtrOutput) ToDataConnectorMicrosoftCloudAppSecurityPtrOutput() DataConnectorMicrosoftCloudAppSecurityPtrOutput

func (DataConnectorMicrosoftCloudAppSecurityPtrOutput) ToDataConnectorMicrosoftCloudAppSecurityPtrOutputWithContext added in v3.51.0

func (o DataConnectorMicrosoftCloudAppSecurityPtrOutput) ToDataConnectorMicrosoftCloudAppSecurityPtrOutputWithContext(ctx context.Context) DataConnectorMicrosoftCloudAppSecurityPtrOutput

type DataConnectorMicrosoftCloudAppSecurityState added in v3.51.0

type DataConnectorMicrosoftCloudAppSecurityState struct {
	// Should the alerts be enabled? Defaults to `true`.
	AlertsEnabled pulumi.BoolPtrInput
	// Should the Discovery Logs be enabled? Defaults to `true`.
	DiscoveryLogsEnabled pulumi.BoolPtrInput
	// The ID of the Log Analytics Workspace that this Microsoft Cloud App Security Data Connector resides in. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Microsoft Cloud App Security Data Connector. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the Tenant that this Microsoft Cloud App Security Data Connector connects to. Changing this forces a new Microsoft Cloud App Security Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

func (DataConnectorMicrosoftCloudAppSecurityState) ElementType added in v3.51.0

type DataConnectorOffice365 added in v3.50.0

type DataConnectorOffice365 struct {
	pulumi.CustomResourceState

	// Should the Exchange data connector be enabled? Defaults to `true`.
	ExchangeEnabled pulumi.BoolPtrOutput `pulumi:"exchangeEnabled"`
	// The ID of the Log Analytics Workspace that this Office 365 Data Connector resides in. Changing this forces a new Office 365 Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Office 365 Data Connector. Changing this forces a new Office 365 Data Connector to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// Should the SharePoint data connector be enabled? Defaults to `true`.
	SharepointEnabled pulumi.BoolPtrOutput `pulumi:"sharepointEnabled"`
	// Should the Microsoft Teams data connector be enabled? Defaults to `true`.
	TeamsEnabled pulumi.BoolPtrOutput `pulumi:"teamsEnabled"`
	// The ID of the Tenant that this Office 365 Data Connector connects to. Changing this forces a new Office 365 Data Connector to be created.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
}

Manages a Office 365 Data Connector.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("PerGB2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewDataConnectorOffice365(ctx, "exampleDataConnectorOffice365", &sentinel.DataConnectorOffice365Args{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Office 365 Data Connectors can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/dataConnectorOffice365:DataConnectorOffice365 example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/dataConnectors/dc1

```

func GetDataConnectorOffice365 added in v3.50.0

func GetDataConnectorOffice365(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataConnectorOffice365State, opts ...pulumi.ResourceOption) (*DataConnectorOffice365, error)

GetDataConnectorOffice365 gets an existing DataConnectorOffice365 resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataConnectorOffice365 added in v3.50.0

func NewDataConnectorOffice365(ctx *pulumi.Context,
	name string, args *DataConnectorOffice365Args, opts ...pulumi.ResourceOption) (*DataConnectorOffice365, error)

NewDataConnectorOffice365 registers a new resource with the given unique name, arguments, and options.

func (*DataConnectorOffice365) ElementType added in v3.50.0

func (*DataConnectorOffice365) ElementType() reflect.Type

func (*DataConnectorOffice365) ToDataConnectorOffice365Output added in v3.50.0

func (i *DataConnectorOffice365) ToDataConnectorOffice365Output() DataConnectorOffice365Output

func (*DataConnectorOffice365) ToDataConnectorOffice365OutputWithContext added in v3.50.0

func (i *DataConnectorOffice365) ToDataConnectorOffice365OutputWithContext(ctx context.Context) DataConnectorOffice365Output

func (*DataConnectorOffice365) ToDataConnectorOffice365PtrOutput added in v3.50.0

func (i *DataConnectorOffice365) ToDataConnectorOffice365PtrOutput() DataConnectorOffice365PtrOutput

func (*DataConnectorOffice365) ToDataConnectorOffice365PtrOutputWithContext added in v3.50.0

func (i *DataConnectorOffice365) ToDataConnectorOffice365PtrOutputWithContext(ctx context.Context) DataConnectorOffice365PtrOutput

type DataConnectorOffice365Args added in v3.50.0

type DataConnectorOffice365Args struct {
	// Should the Exchange data connector be enabled? Defaults to `true`.
	ExchangeEnabled pulumi.BoolPtrInput
	// The ID of the Log Analytics Workspace that this Office 365 Data Connector resides in. Changing this forces a new Office 365 Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Office 365 Data Connector. Changing this forces a new Office 365 Data Connector to be created.
	Name pulumi.StringPtrInput
	// Should the SharePoint data connector be enabled? Defaults to `true`.
	SharepointEnabled pulumi.BoolPtrInput
	// Should the Microsoft Teams data connector be enabled? Defaults to `true`.
	TeamsEnabled pulumi.BoolPtrInput
	// The ID of the Tenant that this Office 365 Data Connector connects to. Changing this forces a new Office 365 Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

The set of arguments for constructing a DataConnectorOffice365 resource.

func (DataConnectorOffice365Args) ElementType added in v3.50.0

func (DataConnectorOffice365Args) ElementType() reflect.Type

type DataConnectorOffice365Array added in v3.50.0

type DataConnectorOffice365Array []DataConnectorOffice365Input

func (DataConnectorOffice365Array) ElementType added in v3.50.0

func (DataConnectorOffice365Array) ToDataConnectorOffice365ArrayOutput added in v3.50.0

func (i DataConnectorOffice365Array) ToDataConnectorOffice365ArrayOutput() DataConnectorOffice365ArrayOutput

func (DataConnectorOffice365Array) ToDataConnectorOffice365ArrayOutputWithContext added in v3.50.0

func (i DataConnectorOffice365Array) ToDataConnectorOffice365ArrayOutputWithContext(ctx context.Context) DataConnectorOffice365ArrayOutput

type DataConnectorOffice365ArrayInput added in v3.50.0

type DataConnectorOffice365ArrayInput interface {
	pulumi.Input

	ToDataConnectorOffice365ArrayOutput() DataConnectorOffice365ArrayOutput
	ToDataConnectorOffice365ArrayOutputWithContext(context.Context) DataConnectorOffice365ArrayOutput
}

DataConnectorOffice365ArrayInput is an input type that accepts DataConnectorOffice365Array and DataConnectorOffice365ArrayOutput values. You can construct a concrete instance of `DataConnectorOffice365ArrayInput` via:

DataConnectorOffice365Array{ DataConnectorOffice365Args{...} }

type DataConnectorOffice365ArrayOutput added in v3.50.0

type DataConnectorOffice365ArrayOutput struct{ *pulumi.OutputState }

func (DataConnectorOffice365ArrayOutput) ElementType added in v3.50.0

func (DataConnectorOffice365ArrayOutput) Index added in v3.50.0

func (DataConnectorOffice365ArrayOutput) ToDataConnectorOffice365ArrayOutput added in v3.50.0

func (o DataConnectorOffice365ArrayOutput) ToDataConnectorOffice365ArrayOutput() DataConnectorOffice365ArrayOutput

func (DataConnectorOffice365ArrayOutput) ToDataConnectorOffice365ArrayOutputWithContext added in v3.50.0

func (o DataConnectorOffice365ArrayOutput) ToDataConnectorOffice365ArrayOutputWithContext(ctx context.Context) DataConnectorOffice365ArrayOutput

type DataConnectorOffice365Input added in v3.50.0

type DataConnectorOffice365Input interface {
	pulumi.Input

	ToDataConnectorOffice365Output() DataConnectorOffice365Output
	ToDataConnectorOffice365OutputWithContext(ctx context.Context) DataConnectorOffice365Output
}

type DataConnectorOffice365Map added in v3.50.0

type DataConnectorOffice365Map map[string]DataConnectorOffice365Input

func (DataConnectorOffice365Map) ElementType added in v3.50.0

func (DataConnectorOffice365Map) ElementType() reflect.Type

func (DataConnectorOffice365Map) ToDataConnectorOffice365MapOutput added in v3.50.0

func (i DataConnectorOffice365Map) ToDataConnectorOffice365MapOutput() DataConnectorOffice365MapOutput

func (DataConnectorOffice365Map) ToDataConnectorOffice365MapOutputWithContext added in v3.50.0

func (i DataConnectorOffice365Map) ToDataConnectorOffice365MapOutputWithContext(ctx context.Context) DataConnectorOffice365MapOutput

type DataConnectorOffice365MapInput added in v3.50.0

type DataConnectorOffice365MapInput interface {
	pulumi.Input

	ToDataConnectorOffice365MapOutput() DataConnectorOffice365MapOutput
	ToDataConnectorOffice365MapOutputWithContext(context.Context) DataConnectorOffice365MapOutput
}

DataConnectorOffice365MapInput is an input type that accepts DataConnectorOffice365Map and DataConnectorOffice365MapOutput values. You can construct a concrete instance of `DataConnectorOffice365MapInput` via:

DataConnectorOffice365Map{ "key": DataConnectorOffice365Args{...} }

type DataConnectorOffice365MapOutput added in v3.50.0

type DataConnectorOffice365MapOutput struct{ *pulumi.OutputState }

func (DataConnectorOffice365MapOutput) ElementType added in v3.50.0

func (DataConnectorOffice365MapOutput) MapIndex added in v3.50.0

func (DataConnectorOffice365MapOutput) ToDataConnectorOffice365MapOutput added in v3.50.0

func (o DataConnectorOffice365MapOutput) ToDataConnectorOffice365MapOutput() DataConnectorOffice365MapOutput

func (DataConnectorOffice365MapOutput) ToDataConnectorOffice365MapOutputWithContext added in v3.50.0

func (o DataConnectorOffice365MapOutput) ToDataConnectorOffice365MapOutputWithContext(ctx context.Context) DataConnectorOffice365MapOutput

type DataConnectorOffice365Output added in v3.50.0

type DataConnectorOffice365Output struct {
	*pulumi.OutputState
}

func (DataConnectorOffice365Output) ElementType added in v3.50.0

func (DataConnectorOffice365Output) ToDataConnectorOffice365Output added in v3.50.0

func (o DataConnectorOffice365Output) ToDataConnectorOffice365Output() DataConnectorOffice365Output

func (DataConnectorOffice365Output) ToDataConnectorOffice365OutputWithContext added in v3.50.0

func (o DataConnectorOffice365Output) ToDataConnectorOffice365OutputWithContext(ctx context.Context) DataConnectorOffice365Output

func (DataConnectorOffice365Output) ToDataConnectorOffice365PtrOutput added in v3.50.0

func (o DataConnectorOffice365Output) ToDataConnectorOffice365PtrOutput() DataConnectorOffice365PtrOutput

func (DataConnectorOffice365Output) ToDataConnectorOffice365PtrOutputWithContext added in v3.50.0

func (o DataConnectorOffice365Output) ToDataConnectorOffice365PtrOutputWithContext(ctx context.Context) DataConnectorOffice365PtrOutput

type DataConnectorOffice365PtrInput added in v3.50.0

type DataConnectorOffice365PtrInput interface {
	pulumi.Input

	ToDataConnectorOffice365PtrOutput() DataConnectorOffice365PtrOutput
	ToDataConnectorOffice365PtrOutputWithContext(ctx context.Context) DataConnectorOffice365PtrOutput
}

type DataConnectorOffice365PtrOutput added in v3.50.0

type DataConnectorOffice365PtrOutput struct {
	*pulumi.OutputState
}

func (DataConnectorOffice365PtrOutput) ElementType added in v3.50.0

func (DataConnectorOffice365PtrOutput) ToDataConnectorOffice365PtrOutput added in v3.50.0

func (o DataConnectorOffice365PtrOutput) ToDataConnectorOffice365PtrOutput() DataConnectorOffice365PtrOutput

func (DataConnectorOffice365PtrOutput) ToDataConnectorOffice365PtrOutputWithContext added in v3.50.0

func (o DataConnectorOffice365PtrOutput) ToDataConnectorOffice365PtrOutputWithContext(ctx context.Context) DataConnectorOffice365PtrOutput

type DataConnectorOffice365State added in v3.50.0

type DataConnectorOffice365State struct {
	// Should the Exchange data connector be enabled? Defaults to `true`.
	ExchangeEnabled pulumi.BoolPtrInput
	// The ID of the Log Analytics Workspace that this Office 365 Data Connector resides in. Changing this forces a new Office 365 Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Office 365 Data Connector. Changing this forces a new Office 365 Data Connector to be created.
	Name pulumi.StringPtrInput
	// Should the SharePoint data connector be enabled? Defaults to `true`.
	SharepointEnabled pulumi.BoolPtrInput
	// Should the Microsoft Teams data connector be enabled? Defaults to `true`.
	TeamsEnabled pulumi.BoolPtrInput
	// The ID of the Tenant that this Office 365 Data Connector connects to. Changing this forces a new Office 365 Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

func (DataConnectorOffice365State) ElementType added in v3.50.0

type DataConnectorThreatIntelligence added in v3.50.0

type DataConnectorThreatIntelligence struct {
	pulumi.CustomResourceState

	// The ID of the Log Analytics Workspace that this Threat Intelligence Data Connector resides in. Changing this forces a new Threat Intelligence Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringOutput `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Threat Intelligence Data Connector. Changing this forces a new Threat Intelligence Data Connector to be created.
	Name pulumi.StringOutput `pulumi:"name"`
	// The ID of the tenant that this Threat Intelligence Data Connector connects to. Changing this forces a new Threat Intelligence Data Connector to be created.
	TenantId pulumi.StringOutput `pulumi:"tenantId"`
}

Manages a Threat Intelligence Data Connector.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/core"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleResourceGroup, err := core.NewResourceGroup(ctx, "exampleResourceGroup", &core.ResourceGroupArgs{
			Location: pulumi.String("West Europe"),
		})
		if err != nil {
			return err
		}
		exampleAnalyticsWorkspace, err := operationalinsights.NewAnalyticsWorkspace(ctx, "exampleAnalyticsWorkspace", &operationalinsights.AnalyticsWorkspaceArgs{
			Location:          exampleResourceGroup.Location,
			ResourceGroupName: exampleResourceGroup.Name,
			Sku:               pulumi.String("PerGB2018"),
		})
		if err != nil {
			return err
		}
		_, err = sentinel.NewDataConnectorThreatIntelligence(ctx, "exampleDataConnectorThreatIntelligence", &sentinel.DataConnectorThreatIntelligenceArgs{
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

```

## Import

Threat Intelligence Data Connectors can be imported using the `resource id`, e.g.

```sh

$ pulumi import azure:sentinel/dataConnectorThreatIntelligence:DataConnectorThreatIntelligence example /subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/group1/providers/Microsoft.OperationalInsights/workspaces/workspace1/providers/Microsoft.SecurityInsights/dataConnectors/dc1

```

func GetDataConnectorThreatIntelligence added in v3.50.0

func GetDataConnectorThreatIntelligence(ctx *pulumi.Context,
	name string, id pulumi.IDInput, state *DataConnectorThreatIntelligenceState, opts ...pulumi.ResourceOption) (*DataConnectorThreatIntelligence, error)

GetDataConnectorThreatIntelligence gets an existing DataConnectorThreatIntelligence resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).

func NewDataConnectorThreatIntelligence added in v3.50.0

func NewDataConnectorThreatIntelligence(ctx *pulumi.Context,
	name string, args *DataConnectorThreatIntelligenceArgs, opts ...pulumi.ResourceOption) (*DataConnectorThreatIntelligence, error)

NewDataConnectorThreatIntelligence registers a new resource with the given unique name, arguments, and options.

func (*DataConnectorThreatIntelligence) ElementType added in v3.50.0

func (*DataConnectorThreatIntelligence) ToDataConnectorThreatIntelligenceOutput added in v3.50.0

func (i *DataConnectorThreatIntelligence) ToDataConnectorThreatIntelligenceOutput() DataConnectorThreatIntelligenceOutput

func (*DataConnectorThreatIntelligence) ToDataConnectorThreatIntelligenceOutputWithContext added in v3.50.0

func (i *DataConnectorThreatIntelligence) ToDataConnectorThreatIntelligenceOutputWithContext(ctx context.Context) DataConnectorThreatIntelligenceOutput

func (*DataConnectorThreatIntelligence) ToDataConnectorThreatIntelligencePtrOutput added in v3.50.0

func (i *DataConnectorThreatIntelligence) ToDataConnectorThreatIntelligencePtrOutput() DataConnectorThreatIntelligencePtrOutput

func (*DataConnectorThreatIntelligence) ToDataConnectorThreatIntelligencePtrOutputWithContext added in v3.50.0

func (i *DataConnectorThreatIntelligence) ToDataConnectorThreatIntelligencePtrOutputWithContext(ctx context.Context) DataConnectorThreatIntelligencePtrOutput

type DataConnectorThreatIntelligenceArgs added in v3.50.0

type DataConnectorThreatIntelligenceArgs struct {
	// The ID of the Log Analytics Workspace that this Threat Intelligence Data Connector resides in. Changing this forces a new Threat Intelligence Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringInput
	// The name which should be used for this Threat Intelligence Data Connector. Changing this forces a new Threat Intelligence Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the tenant that this Threat Intelligence Data Connector connects to. Changing this forces a new Threat Intelligence Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

The set of arguments for constructing a DataConnectorThreatIntelligence resource.

func (DataConnectorThreatIntelligenceArgs) ElementType added in v3.50.0

type DataConnectorThreatIntelligenceArray added in v3.50.0

type DataConnectorThreatIntelligenceArray []DataConnectorThreatIntelligenceInput

func (DataConnectorThreatIntelligenceArray) ElementType added in v3.50.0

func (DataConnectorThreatIntelligenceArray) ToDataConnectorThreatIntelligenceArrayOutput added in v3.50.0

func (i DataConnectorThreatIntelligenceArray) ToDataConnectorThreatIntelligenceArrayOutput() DataConnectorThreatIntelligenceArrayOutput

func (DataConnectorThreatIntelligenceArray) ToDataConnectorThreatIntelligenceArrayOutputWithContext added in v3.50.0

func (i DataConnectorThreatIntelligenceArray) ToDataConnectorThreatIntelligenceArrayOutputWithContext(ctx context.Context) DataConnectorThreatIntelligenceArrayOutput

type DataConnectorThreatIntelligenceArrayInput added in v3.50.0

type DataConnectorThreatIntelligenceArrayInput interface {
	pulumi.Input

	ToDataConnectorThreatIntelligenceArrayOutput() DataConnectorThreatIntelligenceArrayOutput
	ToDataConnectorThreatIntelligenceArrayOutputWithContext(context.Context) DataConnectorThreatIntelligenceArrayOutput
}

DataConnectorThreatIntelligenceArrayInput is an input type that accepts DataConnectorThreatIntelligenceArray and DataConnectorThreatIntelligenceArrayOutput values. You can construct a concrete instance of `DataConnectorThreatIntelligenceArrayInput` via:

DataConnectorThreatIntelligenceArray{ DataConnectorThreatIntelligenceArgs{...} }

type DataConnectorThreatIntelligenceArrayOutput added in v3.50.0

type DataConnectorThreatIntelligenceArrayOutput struct{ *pulumi.OutputState }

func (DataConnectorThreatIntelligenceArrayOutput) ElementType added in v3.50.0

func (DataConnectorThreatIntelligenceArrayOutput) Index added in v3.50.0

func (DataConnectorThreatIntelligenceArrayOutput) ToDataConnectorThreatIntelligenceArrayOutput added in v3.50.0

func (o DataConnectorThreatIntelligenceArrayOutput) ToDataConnectorThreatIntelligenceArrayOutput() DataConnectorThreatIntelligenceArrayOutput

func (DataConnectorThreatIntelligenceArrayOutput) ToDataConnectorThreatIntelligenceArrayOutputWithContext added in v3.50.0

func (o DataConnectorThreatIntelligenceArrayOutput) ToDataConnectorThreatIntelligenceArrayOutputWithContext(ctx context.Context) DataConnectorThreatIntelligenceArrayOutput

type DataConnectorThreatIntelligenceInput added in v3.50.0

type DataConnectorThreatIntelligenceInput interface {
	pulumi.Input

	ToDataConnectorThreatIntelligenceOutput() DataConnectorThreatIntelligenceOutput
	ToDataConnectorThreatIntelligenceOutputWithContext(ctx context.Context) DataConnectorThreatIntelligenceOutput
}

type DataConnectorThreatIntelligenceMap added in v3.50.0

type DataConnectorThreatIntelligenceMap map[string]DataConnectorThreatIntelligenceInput

func (DataConnectorThreatIntelligenceMap) ElementType added in v3.50.0

func (DataConnectorThreatIntelligenceMap) ToDataConnectorThreatIntelligenceMapOutput added in v3.50.0

func (i DataConnectorThreatIntelligenceMap) ToDataConnectorThreatIntelligenceMapOutput() DataConnectorThreatIntelligenceMapOutput

func (DataConnectorThreatIntelligenceMap) ToDataConnectorThreatIntelligenceMapOutputWithContext added in v3.50.0

func (i DataConnectorThreatIntelligenceMap) ToDataConnectorThreatIntelligenceMapOutputWithContext(ctx context.Context) DataConnectorThreatIntelligenceMapOutput

type DataConnectorThreatIntelligenceMapInput added in v3.50.0

type DataConnectorThreatIntelligenceMapInput interface {
	pulumi.Input

	ToDataConnectorThreatIntelligenceMapOutput() DataConnectorThreatIntelligenceMapOutput
	ToDataConnectorThreatIntelligenceMapOutputWithContext(context.Context) DataConnectorThreatIntelligenceMapOutput
}

DataConnectorThreatIntelligenceMapInput is an input type that accepts DataConnectorThreatIntelligenceMap and DataConnectorThreatIntelligenceMapOutput values. You can construct a concrete instance of `DataConnectorThreatIntelligenceMapInput` via:

DataConnectorThreatIntelligenceMap{ "key": DataConnectorThreatIntelligenceArgs{...} }

type DataConnectorThreatIntelligenceMapOutput added in v3.50.0

type DataConnectorThreatIntelligenceMapOutput struct{ *pulumi.OutputState }

func (DataConnectorThreatIntelligenceMapOutput) ElementType added in v3.50.0

func (DataConnectorThreatIntelligenceMapOutput) MapIndex added in v3.50.0

func (DataConnectorThreatIntelligenceMapOutput) ToDataConnectorThreatIntelligenceMapOutput added in v3.50.0

func (o DataConnectorThreatIntelligenceMapOutput) ToDataConnectorThreatIntelligenceMapOutput() DataConnectorThreatIntelligenceMapOutput

func (DataConnectorThreatIntelligenceMapOutput) ToDataConnectorThreatIntelligenceMapOutputWithContext added in v3.50.0

func (o DataConnectorThreatIntelligenceMapOutput) ToDataConnectorThreatIntelligenceMapOutputWithContext(ctx context.Context) DataConnectorThreatIntelligenceMapOutput

type DataConnectorThreatIntelligenceOutput added in v3.50.0

type DataConnectorThreatIntelligenceOutput struct {
	*pulumi.OutputState
}

func (DataConnectorThreatIntelligenceOutput) ElementType added in v3.50.0

func (DataConnectorThreatIntelligenceOutput) ToDataConnectorThreatIntelligenceOutput added in v3.50.0

func (o DataConnectorThreatIntelligenceOutput) ToDataConnectorThreatIntelligenceOutput() DataConnectorThreatIntelligenceOutput

func (DataConnectorThreatIntelligenceOutput) ToDataConnectorThreatIntelligenceOutputWithContext added in v3.50.0

func (o DataConnectorThreatIntelligenceOutput) ToDataConnectorThreatIntelligenceOutputWithContext(ctx context.Context) DataConnectorThreatIntelligenceOutput

func (DataConnectorThreatIntelligenceOutput) ToDataConnectorThreatIntelligencePtrOutput added in v3.50.0

func (o DataConnectorThreatIntelligenceOutput) ToDataConnectorThreatIntelligencePtrOutput() DataConnectorThreatIntelligencePtrOutput

func (DataConnectorThreatIntelligenceOutput) ToDataConnectorThreatIntelligencePtrOutputWithContext added in v3.50.0

func (o DataConnectorThreatIntelligenceOutput) ToDataConnectorThreatIntelligencePtrOutputWithContext(ctx context.Context) DataConnectorThreatIntelligencePtrOutput

type DataConnectorThreatIntelligencePtrInput added in v3.50.0

type DataConnectorThreatIntelligencePtrInput interface {
	pulumi.Input

	ToDataConnectorThreatIntelligencePtrOutput() DataConnectorThreatIntelligencePtrOutput
	ToDataConnectorThreatIntelligencePtrOutputWithContext(ctx context.Context) DataConnectorThreatIntelligencePtrOutput
}

type DataConnectorThreatIntelligencePtrOutput added in v3.50.0

type DataConnectorThreatIntelligencePtrOutput struct {
	*pulumi.OutputState
}

func (DataConnectorThreatIntelligencePtrOutput) ElementType added in v3.50.0

func (DataConnectorThreatIntelligencePtrOutput) ToDataConnectorThreatIntelligencePtrOutput added in v3.50.0

func (o DataConnectorThreatIntelligencePtrOutput) ToDataConnectorThreatIntelligencePtrOutput() DataConnectorThreatIntelligencePtrOutput

func (DataConnectorThreatIntelligencePtrOutput) ToDataConnectorThreatIntelligencePtrOutputWithContext added in v3.50.0

func (o DataConnectorThreatIntelligencePtrOutput) ToDataConnectorThreatIntelligencePtrOutputWithContext(ctx context.Context) DataConnectorThreatIntelligencePtrOutput

type DataConnectorThreatIntelligenceState added in v3.50.0

type DataConnectorThreatIntelligenceState struct {
	// The ID of the Log Analytics Workspace that this Threat Intelligence Data Connector resides in. Changing this forces a new Threat Intelligence Data Connector to be created.
	LogAnalyticsWorkspaceId pulumi.StringPtrInput
	// The name which should be used for this Threat Intelligence Data Connector. Changing this forces a new Threat Intelligence Data Connector to be created.
	Name pulumi.StringPtrInput
	// The ID of the tenant that this Threat Intelligence Data Connector connects to. Changing this forces a new Threat Intelligence Data Connector to be created.
	TenantId pulumi.StringPtrInput
}

func (DataConnectorThreatIntelligenceState) ElementType added in v3.50.0

type GetAlertRuleArgs

type GetAlertRuleArgs struct {
	// The ID of the Log Analytics Workspace this Sentinel Alert Rule belongs to.
	LogAnalyticsWorkspaceId string `pulumi:"logAnalyticsWorkspaceId"`
	// The name which should be used for this Sentinel Alert Rule.
	Name string `pulumi:"name"`
}

A collection of arguments for invoking getAlertRule.

type GetAlertRuleResult

type GetAlertRuleResult struct {
	// The provider-assigned unique ID for this managed resource.
	Id                      string `pulumi:"id"`
	LogAnalyticsWorkspaceId string `pulumi:"logAnalyticsWorkspaceId"`
	Name                    string `pulumi:"name"`
}

A collection of values returned by getAlertRule.

func GetAlertRule

func GetAlertRule(ctx *pulumi.Context, args *GetAlertRuleArgs, opts ...pulumi.InvokeOption) (*GetAlertRuleResult, error)

Use this data source to access information about an existing Sentinel Alert Rule.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/operationalinsights"
"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		exampleAnalyticsWorkspace, err := operationalinsights.LookupAnalyticsWorkspace(ctx, &operationalinsights.LookupAnalyticsWorkspaceArgs{
			Name:              "example",
			ResourceGroupName: "example-resources",
		}, nil)
		if err != nil {
			return err
		}
		exampleAlertRule, err := sentinel.GetAlertRule(ctx, &sentinel.GetAlertRuleArgs{
			Name:                    "existing",
			LogAnalyticsWorkspaceId: exampleAnalyticsWorkspace.Id,
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("id", exampleAlertRule.Id)
		return nil
	})
}

```

type GetAlertRuleTemplateArgs added in v3.43.0

type GetAlertRuleTemplateArgs struct {
	// The display name of this Sentinel Alert Rule Template. Either `displayName` or `name` have to be specified.
	DisplayName *string `pulumi:"displayName"`
	// The ID of the Log Analytics Workspace.
	LogAnalyticsWorkspaceId string `pulumi:"logAnalyticsWorkspaceId"`
	// The name of this Sentinel Alert Rule Template. Either `displayName` or `name` have to be specified.
	Name *string `pulumi:"name"`
}

A collection of arguments for invoking getAlertRuleTemplate.

type GetAlertRuleTemplateResult added in v3.43.0

type GetAlertRuleTemplateResult struct {
	DisplayName string `pulumi:"displayName"`
	// The provider-assigned unique ID for this managed resource.
	Id                      string `pulumi:"id"`
	LogAnalyticsWorkspaceId string `pulumi:"logAnalyticsWorkspaceId"`
	Name                    string `pulumi:"name"`
	// A `scheduledTemplate` block as defined below. This only applies to Sentinel Scheduled Alert Rule Template.
	ScheduledTemplates []GetAlertRuleTemplateScheduledTemplate `pulumi:"scheduledTemplates"`
	// A `securityIncidentTemplate` block as defined below. This only applies to Sentinel MS Security Incident Alert Rule Template.
	SecurityIncidentTemplates []GetAlertRuleTemplateSecurityIncidentTemplate `pulumi:"securityIncidentTemplates"`
}

A collection of values returned by getAlertRuleTemplate.

func GetAlertRuleTemplate added in v3.43.0

func GetAlertRuleTemplate(ctx *pulumi.Context, args *GetAlertRuleTemplateArgs, opts ...pulumi.InvokeOption) (*GetAlertRuleTemplateResult, error)

Use this data source to access information about an existing Sentinel Alert Rule Template.

## Example Usage

```go package main

import (

"github.com/pulumi/pulumi-azure/sdk/v3/go/azure/sentinel"
"github.com/pulumi/pulumi/sdk/v2/go/pulumi"

)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		opt0 := "Create incidents based on Azure Security Center for IoT alerts"
		example, err := sentinel.GetAlertRuleTemplate(ctx, &sentinel.GetAlertRuleTemplateArgs{
			LogAnalyticsWorkspaceId: "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/mygroup1/providers/Microsoft.OperationalInsights/workspaces/workspace1",
			DisplayName:             &opt0,
		}, nil)
		if err != nil {
			return err
		}
		ctx.Export("id", example.Id)
		return nil
	})
}

```

type GetAlertRuleTemplateScheduledTemplate added in v3.43.0

type GetAlertRuleTemplateScheduledTemplate struct {
	// The description of this Sentinel Scheduled Alert Rule Template.
	Description string `pulumi:"description"`
	// The query of this Sentinel Scheduled Alert Rule Template.
	Query string `pulumi:"query"`
	// The ISO 8601 timespan duration between two consecutive queries.
	QueryFrequency string `pulumi:"queryFrequency"`
	// The ISO 8601 timespan duration, which determine the time period of the data covered by the query.
	QueryPeriod string `pulumi:"queryPeriod"`
	// The alert severity of this Sentinel Scheduled Alert Rule Template.
	Severity string `pulumi:"severity"`
	// A list of categories of attacks by which to classify the rule.
	Tactics []string `pulumi:"tactics"`
	// The alert trigger operator, combined with `triggerThreshold`, setting alert threshold of this Sentinel Scheduled Alert Rule Template.
	TriggerOperator string `pulumi:"triggerOperator"`
	// The baseline number of query results generated, combined with `triggerOperator`, setting alert threshold of this Sentinel Scheduled Alert Rule Template.
	TriggerThreshold int `pulumi:"triggerThreshold"`
}

type GetAlertRuleTemplateScheduledTemplateArgs added in v3.43.0

type GetAlertRuleTemplateScheduledTemplateArgs struct {
	// The description of this Sentinel Scheduled Alert Rule Template.
	Description pulumi.StringInput `pulumi:"description"`
	// The query of this Sentinel Scheduled Alert Rule Template.
	Query pulumi.StringInput `pulumi:"query"`
	// The ISO 8601 timespan duration between two consecutive queries.
	QueryFrequency pulumi.StringInput `pulumi:"queryFrequency"`
	// The ISO 8601 timespan duration, which determine the time period of the data covered by the query.
	QueryPeriod pulumi.StringInput `pulumi:"queryPeriod"`
	// The alert severity of this Sentinel Scheduled Alert Rule Template.
	Severity pulumi.StringInput `pulumi:"severity"`
	// A list of categories of attacks by which to classify the rule.
	Tactics pulumi.StringArrayInput `pulumi:"tactics"`
	// The alert trigger operator, combined with `triggerThreshold`, setting alert threshold of this Sentinel Scheduled Alert Rule Template.
	TriggerOperator pulumi.StringInput `pulumi:"triggerOperator"`
	// The baseline number of query results generated, combined with `triggerOperator`, setting alert threshold of this Sentinel Scheduled Alert Rule Template.
	TriggerThreshold pulumi.IntInput `pulumi:"triggerThreshold"`
}

func (GetAlertRuleTemplateScheduledTemplateArgs) ElementType added in v3.43.0

func (GetAlertRuleTemplateScheduledTemplateArgs) ToGetAlertRuleTemplateScheduledTemplateOutput added in v3.43.0

func (i GetAlertRuleTemplateScheduledTemplateArgs) ToGetAlertRuleTemplateScheduledTemplateOutput() GetAlertRuleTemplateScheduledTemplateOutput

func (GetAlertRuleTemplateScheduledTemplateArgs) ToGetAlertRuleTemplateScheduledTemplateOutputWithContext added in v3.43.0

func (i GetAlertRuleTemplateScheduledTemplateArgs) ToGetAlertRuleTemplateScheduledTemplateOutputWithContext(ctx context.Context) GetAlertRuleTemplateScheduledTemplateOutput

type GetAlertRuleTemplateScheduledTemplateArray added in v3.43.0

type GetAlertRuleTemplateScheduledTemplateArray []GetAlertRuleTemplateScheduledTemplateInput

func (GetAlertRuleTemplateScheduledTemplateArray) ElementType added in v3.43.0

func (GetAlertRuleTemplateScheduledTemplateArray) ToGetAlertRuleTemplateScheduledTemplateArrayOutput added in v3.43.0

func (i GetAlertRuleTemplateScheduledTemplateArray) ToGetAlertRuleTemplateScheduledTemplateArrayOutput() GetAlertRuleTemplateScheduledTemplateArrayOutput

func (GetAlertRuleTemplateScheduledTemplateArray) ToGetAlertRuleTemplateScheduledTemplateArrayOutputWithContext added in v3.43.0

func (i GetAlertRuleTemplateScheduledTemplateArray) ToGetAlertRuleTemplateScheduledTemplateArrayOutputWithContext(ctx context.Context) GetAlertRuleTemplateScheduledTemplateArrayOutput

type GetAlertRuleTemplateScheduledTemplateArrayInput added in v3.43.0

type GetAlertRuleTemplateScheduledTemplateArrayInput interface {
	pulumi.Input

	ToGetAlertRuleTemplateScheduledTemplateArrayOutput() GetAlertRuleTemplateScheduledTemplateArrayOutput
	ToGetAlertRuleTemplateScheduledTemplateArrayOutputWithContext(context.Context) GetAlertRuleTemplateScheduledTemplateArrayOutput
}

GetAlertRuleTemplateScheduledTemplateArrayInput is an input type that accepts GetAlertRuleTemplateScheduledTemplateArray and GetAlertRuleTemplateScheduledTemplateArrayOutput values. You can construct a concrete instance of `GetAlertRuleTemplateScheduledTemplateArrayInput` via:

GetAlertRuleTemplateScheduledTemplateArray{ GetAlertRuleTemplateScheduledTemplateArgs{...} }

type GetAlertRuleTemplateScheduledTemplateArrayOutput added in v3.43.0

type GetAlertRuleTemplateScheduledTemplateArrayOutput struct{ *pulumi.OutputState }

func (GetAlertRuleTemplateScheduledTemplateArrayOutput) ElementType added in v3.43.0

func (GetAlertRuleTemplateScheduledTemplateArrayOutput) Index added in v3.43.0

func (GetAlertRuleTemplateScheduledTemplateArrayOutput) ToGetAlertRuleTemplateScheduledTemplateArrayOutput added in v3.43.0

func (o GetAlertRuleTemplateScheduledTemplateArrayOutput) ToGetAlertRuleTemplateScheduledTemplateArrayOutput() GetAlertRuleTemplateScheduledTemplateArrayOutput

func (GetAlertRuleTemplateScheduledTemplateArrayOutput) ToGetAlertRuleTemplateScheduledTemplateArrayOutputWithContext added in v3.43.0

func (o GetAlertRuleTemplateScheduledTemplateArrayOutput) ToGetAlertRuleTemplateScheduledTemplateArrayOutputWithContext(ctx context.Context) GetAlertRuleTemplateScheduledTemplateArrayOutput

type GetAlertRuleTemplateScheduledTemplateInput added in v3.43.0

type GetAlertRuleTemplateScheduledTemplateInput interface {
	pulumi.Input

	ToGetAlertRuleTemplateScheduledTemplateOutput() GetAlertRuleTemplateScheduledTemplateOutput
	ToGetAlertRuleTemplateScheduledTemplateOutputWithContext(context.Context) GetAlertRuleTemplateScheduledTemplateOutput
}

GetAlertRuleTemplateScheduledTemplateInput is an input type that accepts GetAlertRuleTemplateScheduledTemplateArgs and GetAlertRuleTemplateScheduledTemplateOutput values. You can construct a concrete instance of `GetAlertRuleTemplateScheduledTemplateInput` via:

GetAlertRuleTemplateScheduledTemplateArgs{...}

type GetAlertRuleTemplateScheduledTemplateOutput added in v3.43.0

type GetAlertRuleTemplateScheduledTemplateOutput struct{ *pulumi.OutputState }

func (GetAlertRuleTemplateScheduledTemplateOutput) Description added in v3.43.0

The description of this Sentinel Scheduled Alert Rule Template.

func (GetAlertRuleTemplateScheduledTemplateOutput) ElementType added in v3.43.0

func (GetAlertRuleTemplateScheduledTemplateOutput) Query added in v3.43.0

The query of this Sentinel Scheduled Alert Rule Template.

func (GetAlertRuleTemplateScheduledTemplateOutput) QueryFrequency added in v3.43.0

The ISO 8601 timespan duration between two consecutive queries.

func (GetAlertRuleTemplateScheduledTemplateOutput) QueryPeriod added in v3.43.0

The ISO 8601 timespan duration, which determine the time period of the data covered by the query.

func (GetAlertRuleTemplateScheduledTemplateOutput) Severity added in v3.43.0

The alert severity of this Sentinel Scheduled Alert Rule Template.

func (GetAlertRuleTemplateScheduledTemplateOutput) Tactics added in v3.43.0

A list of categories of attacks by which to classify the rule.

func (GetAlertRuleTemplateScheduledTemplateOutput) ToGetAlertRuleTemplateScheduledTemplateOutput added in v3.43.0

func (o GetAlertRuleTemplateScheduledTemplateOutput) ToGetAlertRuleTemplateScheduledTemplateOutput() GetAlertRuleTemplateScheduledTemplateOutput

func (GetAlertRuleTemplateScheduledTemplateOutput) ToGetAlertRuleTemplateScheduledTemplateOutputWithContext added in v3.43.0

func (o GetAlertRuleTemplateScheduledTemplateOutput) ToGetAlertRuleTemplateScheduledTemplateOutputWithContext(ctx context.Context) GetAlertRuleTemplateScheduledTemplateOutput

func (GetAlertRuleTemplateScheduledTemplateOutput) TriggerOperator added in v3.43.0

The alert trigger operator, combined with `triggerThreshold`, setting alert threshold of this Sentinel Scheduled Alert Rule Template.

func (GetAlertRuleTemplateScheduledTemplateOutput) TriggerThreshold added in v3.43.0

The baseline number of query results generated, combined with `triggerOperator`, setting alert threshold of this Sentinel Scheduled Alert Rule Template.

type GetAlertRuleTemplateSecurityIncidentTemplate added in v3.43.0

type GetAlertRuleTemplateSecurityIncidentTemplate struct {
	// The description of this Sentinel Scheduled Alert Rule Template.
	Description string `pulumi:"description"`
	// The Microsoft Security Service from where the alert will be generated.
	ProductFilter string `pulumi:"productFilter"`
}

type GetAlertRuleTemplateSecurityIncidentTemplateArgs added in v3.43.0

type GetAlertRuleTemplateSecurityIncidentTemplateArgs struct {
	// The description of this Sentinel Scheduled Alert Rule Template.
	Description pulumi.StringInput `pulumi:"description"`
	// The Microsoft Security Service from where the alert will be generated.
	ProductFilter pulumi.StringInput `pulumi:"productFilter"`
}

func (GetAlertRuleTemplateSecurityIncidentTemplateArgs) ElementType added in v3.43.0

func (GetAlertRuleTemplateSecurityIncidentTemplateArgs) ToGetAlertRuleTemplateSecurityIncidentTemplateOutput added in v3.43.0

func (i GetAlertRuleTemplateSecurityIncidentTemplateArgs) ToGetAlertRuleTemplateSecurityIncidentTemplateOutput() GetAlertRuleTemplateSecurityIncidentTemplateOutput

func (GetAlertRuleTemplateSecurityIncidentTemplateArgs) ToGetAlertRuleTemplateSecurityIncidentTemplateOutputWithContext added in v3.43.0

func (i GetAlertRuleTemplateSecurityIncidentTemplateArgs) ToGetAlertRuleTemplateSecurityIncidentTemplateOutputWithContext(ctx context.Context) GetAlertRuleTemplateSecurityIncidentTemplateOutput

type GetAlertRuleTemplateSecurityIncidentTemplateArray added in v3.43.0

type GetAlertRuleTemplateSecurityIncidentTemplateArray []GetAlertRuleTemplateSecurityIncidentTemplateInput

func (GetAlertRuleTemplateSecurityIncidentTemplateArray) ElementType added in v3.43.0

func (GetAlertRuleTemplateSecurityIncidentTemplateArray) ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutput added in v3.43.0

func (i GetAlertRuleTemplateSecurityIncidentTemplateArray) ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutput() GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput

func (GetAlertRuleTemplateSecurityIncidentTemplateArray) ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutputWithContext added in v3.43.0

func (i GetAlertRuleTemplateSecurityIncidentTemplateArray) ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutputWithContext(ctx context.Context) GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput

type GetAlertRuleTemplateSecurityIncidentTemplateArrayInput added in v3.43.0

type GetAlertRuleTemplateSecurityIncidentTemplateArrayInput interface {
	pulumi.Input

	ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutput() GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput
	ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutputWithContext(context.Context) GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput
}

GetAlertRuleTemplateSecurityIncidentTemplateArrayInput is an input type that accepts GetAlertRuleTemplateSecurityIncidentTemplateArray and GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput values. You can construct a concrete instance of `GetAlertRuleTemplateSecurityIncidentTemplateArrayInput` via:

GetAlertRuleTemplateSecurityIncidentTemplateArray{ GetAlertRuleTemplateSecurityIncidentTemplateArgs{...} }

type GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput added in v3.43.0

type GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput struct{ *pulumi.OutputState }

func (GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput) ElementType added in v3.43.0

func (GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput) Index added in v3.43.0

func (GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput) ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutput added in v3.43.0

func (GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput) ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutputWithContext added in v3.43.0

func (o GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput) ToGetAlertRuleTemplateSecurityIncidentTemplateArrayOutputWithContext(ctx context.Context) GetAlertRuleTemplateSecurityIncidentTemplateArrayOutput

type GetAlertRuleTemplateSecurityIncidentTemplateInput added in v3.43.0

type GetAlertRuleTemplateSecurityIncidentTemplateInput interface {
	pulumi.Input

	ToGetAlertRuleTemplateSecurityIncidentTemplateOutput() GetAlertRuleTemplateSecurityIncidentTemplateOutput
	ToGetAlertRuleTemplateSecurityIncidentTemplateOutputWithContext(context.Context) GetAlertRuleTemplateSecurityIncidentTemplateOutput
}

GetAlertRuleTemplateSecurityIncidentTemplateInput is an input type that accepts GetAlertRuleTemplateSecurityIncidentTemplateArgs and GetAlertRuleTemplateSecurityIncidentTemplateOutput values. You can construct a concrete instance of `GetAlertRuleTemplateSecurityIncidentTemplateInput` via:

GetAlertRuleTemplateSecurityIncidentTemplateArgs{...}

type GetAlertRuleTemplateSecurityIncidentTemplateOutput added in v3.43.0

type GetAlertRuleTemplateSecurityIncidentTemplateOutput struct{ *pulumi.OutputState }

func (GetAlertRuleTemplateSecurityIncidentTemplateOutput) Description added in v3.43.0

The description of this Sentinel Scheduled Alert Rule Template.

func (GetAlertRuleTemplateSecurityIncidentTemplateOutput) ElementType added in v3.43.0

func (GetAlertRuleTemplateSecurityIncidentTemplateOutput) ProductFilter added in v3.43.0

The Microsoft Security Service from where the alert will be generated.

func (GetAlertRuleTemplateSecurityIncidentTemplateOutput) ToGetAlertRuleTemplateSecurityIncidentTemplateOutput added in v3.43.0

func (o GetAlertRuleTemplateSecurityIncidentTemplateOutput) ToGetAlertRuleTemplateSecurityIncidentTemplateOutput() GetAlertRuleTemplateSecurityIncidentTemplateOutput

func (GetAlertRuleTemplateSecurityIncidentTemplateOutput) ToGetAlertRuleTemplateSecurityIncidentTemplateOutputWithContext added in v3.43.0

func (o GetAlertRuleTemplateSecurityIncidentTemplateOutput) ToGetAlertRuleTemplateSecurityIncidentTemplateOutputWithContext(ctx context.Context) GetAlertRuleTemplateSecurityIncidentTemplateOutput

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL