datadog_api_client::datadogV2::model::model_cloud_configuration_rule_create_payload

Struct CloudConfigurationRuleCreatePayload

Source 
#[non_exhaustive]
pub struct CloudConfigurationRuleCreatePayload {
    pub cases: Vec<CloudConfigurationRuleCaseCreate>,
    pub compliance_signal_options: CloudConfigurationRuleComplianceSignalOptions,
    pub filters: Option<Vec<SecurityMonitoringFilter>>,
    pub is_enabled: bool,
    pub message: String,
    pub name: String,
    pub options: CloudConfigurationRuleOptions,
    pub tags: Option<Vec<String>>,
    pub type_: Option<CloudConfigurationRuleType>,
    pub additional_properties: BTreeMap<String, Value>,
    /* private fields */
}
Expand description

Create a new cloud configuration rule.

Fields (Non-exhaustive)§

This struct is marked as non-exhaustive
Non-exhaustive structs could have additional fields added in future. Therefore, non-exhaustive structs cannot be constructed in external crates using the traditional Struct { .. } syntax; cannot be matched against without a wildcard ..; and struct update syntax will not work.
§cases: Vec<CloudConfigurationRuleCaseCreate>

Description of generated findings and signals (severity and channels to be notified in case of a signal). Must contain exactly one item.

§compliance_signal_options: CloudConfigurationRuleComplianceSignalOptions

How to generate compliance signals. Useful for cloud_configuration rules only.

§filters: Option<Vec<SecurityMonitoringFilter>>

Additional queries to filter matched events before they are processed.

§is_enabled: bool

Whether the rule is enabled.

§message: String

Message in markdown format for generated findings and signals.

§name: String

The name of the rule.

§options: CloudConfigurationRuleOptions

Options on cloud configuration rules.

§tags: Option<Vec<String>>

Tags for generated findings and signals.

§type_: Option<CloudConfigurationRuleType>

The rule type.

§additional_properties: BTreeMap<String, Value>

Implementations§

Source§

impl CloudConfigurationRuleCreatePayload

Source

pub fn new( cases: Vec<CloudConfigurationRuleCaseCreate>, compliance_signal_options: CloudConfigurationRuleComplianceSignalOptions, is_enabled: bool, message: String, name: String, options: CloudConfigurationRuleOptions, ) -> CloudConfigurationRuleCreatePayload

Examples found in repository?
examples/v2_security-monitoring_CreateSecurityMonitoringRule_1092490364.rs (lines 21-65)
17async fn main() {
18    let body =
19        SecurityMonitoringRuleCreatePayload::CloudConfigurationRuleCreatePayload(
20            Box::new(
21                CloudConfigurationRuleCreatePayload::new(
22                    vec![
23                        CloudConfigurationRuleCaseCreate::new(
24                            SecurityMonitoringRuleSeverity::INFO,
25                        ).notifications(vec!["channel".to_string()])
26                    ],
27                    CloudConfigurationRuleComplianceSignalOptions::new()
28                        .user_activation_status(Some(true))
29                        .user_group_by_fields(Some(vec!["@account_id".to_string()])),
30                    false,
31                    "ddd".to_string(),
32                    "Example-Security-Monitoring_cloud".to_string(),
33                    CloudConfigurationRuleOptions::new(
34                        CloudConfigurationComplianceRuleOptions::new()
35                            .complex_rule(false)
36                            .rego_rule(
37                                CloudConfigurationRegoRule::new(
38                                    r#"package datadog
39
40import data.datadog.output as dd_output
41
42import future.keywords.contains
43import future.keywords.if
44import future.keywords.in
45
46milliseconds_in_a_day := ((1000 * 60) * 60) * 24
47
48eval(iam_service_account_key) = "skip" if {
49	iam_service_account_key.disabled
50} else = "pass" if {
51	(iam_service_account_key.resource_seen_at / milliseconds_in_a_day) - (iam_service_account_key.valid_after_time / milliseconds_in_a_day) <= 90
52} else = "fail"
53
54# This part remains unchanged for all rules
55results contains result if {
56	some resource in input.resources[input.main_resource_type]
57	result := dd_output.format(resource, eval(resource))
58}
59"#.to_string(),
60                                    vec!["gcp_compute_disk".to_string()],
61                                ),
62                            )
63                            .resource_type("gcp_compute_disk".to_string()),
64                    ),
65                )
66                    .filters(
67                        vec![
68                            SecurityMonitoringFilter::new()
69                                .action(SecurityMonitoringFilterAction::REQUIRE)
70                                .query("resource_id:helo*".to_string()),
71                            SecurityMonitoringFilter::new()
72                                .action(SecurityMonitoringFilterAction::SUPPRESS)
73                                .query("control:helo*".to_string())
74                        ],
75                    )
76                    .tags(vec!["my:tag".to_string()])
77                    .type_(CloudConfigurationRuleType::CLOUD_CONFIGURATION),
78            ),
79        );
80    let configuration = datadog::Configuration::new();
81    let api = SecurityMonitoringAPI::with_config(configuration);
82    let resp = api.create_security_monitoring_rule(body).await;
83    if let Ok(value) = resp {
84        println!("{:#?}", value);
85    } else {
86        println!("{:#?}", resp.unwrap_err());
87    }
88}
Source

pub fn filters(self, value: Vec<SecurityMonitoringFilter>) -> Self

Examples found in repository?
examples/v2_security-monitoring_CreateSecurityMonitoringRule_1092490364.rs (lines 66-75)
17async fn main() {
18    let body =
19        SecurityMonitoringRuleCreatePayload::CloudConfigurationRuleCreatePayload(
20            Box::new(
21                CloudConfigurationRuleCreatePayload::new(
22                    vec![
23                        CloudConfigurationRuleCaseCreate::new(
24                            SecurityMonitoringRuleSeverity::INFO,
25                        ).notifications(vec!["channel".to_string()])
26                    ],
27                    CloudConfigurationRuleComplianceSignalOptions::new()
28                        .user_activation_status(Some(true))
29                        .user_group_by_fields(Some(vec!["@account_id".to_string()])),
30                    false,
31                    "ddd".to_string(),
32                    "Example-Security-Monitoring_cloud".to_string(),
33                    CloudConfigurationRuleOptions::new(
34                        CloudConfigurationComplianceRuleOptions::new()
35                            .complex_rule(false)
36                            .rego_rule(
37                                CloudConfigurationRegoRule::new(
38                                    r#"package datadog
39
40import data.datadog.output as dd_output
41
42import future.keywords.contains
43import future.keywords.if
44import future.keywords.in
45
46milliseconds_in_a_day := ((1000 * 60) * 60) * 24
47
48eval(iam_service_account_key) = "skip" if {
49	iam_service_account_key.disabled
50} else = "pass" if {
51	(iam_service_account_key.resource_seen_at / milliseconds_in_a_day) - (iam_service_account_key.valid_after_time / milliseconds_in_a_day) <= 90
52} else = "fail"
53
54# This part remains unchanged for all rules
55results contains result if {
56	some resource in input.resources[input.main_resource_type]
57	result := dd_output.format(resource, eval(resource))
58}
59"#.to_string(),
60                                    vec!["gcp_compute_disk".to_string()],
61                                ),
62                            )
63                            .resource_type("gcp_compute_disk".to_string()),
64                    ),
65                )
66                    .filters(
67                        vec![
68                            SecurityMonitoringFilter::new()
69                                .action(SecurityMonitoringFilterAction::REQUIRE)
70                                .query("resource_id:helo*".to_string()),
71                            SecurityMonitoringFilter::new()
72                                .action(SecurityMonitoringFilterAction::SUPPRESS)
73                                .query("control:helo*".to_string())
74                        ],
75                    )
76                    .tags(vec!["my:tag".to_string()])
77                    .type_(CloudConfigurationRuleType::CLOUD_CONFIGURATION),
78            ),
79        );
80    let configuration = datadog::Configuration::new();
81    let api = SecurityMonitoringAPI::with_config(configuration);
82    let resp = api.create_security_monitoring_rule(body).await;
83    if let Ok(value) = resp {
84        println!("{:#?}", value);
85    } else {
86        println!("{:#?}", resp.unwrap_err());
87    }
88}
Source

pub fn tags(self, value: Vec<String>) -> Self

Examples found in repository?
examples/v2_security-monitoring_CreateSecurityMonitoringRule_1092490364.rs (line 76)
17async fn main() {
18    let body =
19        SecurityMonitoringRuleCreatePayload::CloudConfigurationRuleCreatePayload(
20            Box::new(
21                CloudConfigurationRuleCreatePayload::new(
22                    vec![
23                        CloudConfigurationRuleCaseCreate::new(
24                            SecurityMonitoringRuleSeverity::INFO,
25                        ).notifications(vec!["channel".to_string()])
26                    ],
27                    CloudConfigurationRuleComplianceSignalOptions::new()
28                        .user_activation_status(Some(true))
29                        .user_group_by_fields(Some(vec!["@account_id".to_string()])),
30                    false,
31                    "ddd".to_string(),
32                    "Example-Security-Monitoring_cloud".to_string(),
33                    CloudConfigurationRuleOptions::new(
34                        CloudConfigurationComplianceRuleOptions::new()
35                            .complex_rule(false)
36                            .rego_rule(
37                                CloudConfigurationRegoRule::new(
38                                    r#"package datadog
39
40import data.datadog.output as dd_output
41
42import future.keywords.contains
43import future.keywords.if
44import future.keywords.in
45
46milliseconds_in_a_day := ((1000 * 60) * 60) * 24
47
48eval(iam_service_account_key) = "skip" if {
49	iam_service_account_key.disabled
50} else = "pass" if {
51	(iam_service_account_key.resource_seen_at / milliseconds_in_a_day) - (iam_service_account_key.valid_after_time / milliseconds_in_a_day) <= 90
52} else = "fail"
53
54# This part remains unchanged for all rules
55results contains result if {
56	some resource in input.resources[input.main_resource_type]
57	result := dd_output.format(resource, eval(resource))
58}
59"#.to_string(),
60                                    vec!["gcp_compute_disk".to_string()],
61                                ),
62                            )
63                            .resource_type("gcp_compute_disk".to_string()),
64                    ),
65                )
66                    .filters(
67                        vec![
68                            SecurityMonitoringFilter::new()
69                                .action(SecurityMonitoringFilterAction::REQUIRE)
70                                .query("resource_id:helo*".to_string()),
71                            SecurityMonitoringFilter::new()
72                                .action(SecurityMonitoringFilterAction::SUPPRESS)
73                                .query("control:helo*".to_string())
74                        ],
75                    )
76                    .tags(vec!["my:tag".to_string()])
77                    .type_(CloudConfigurationRuleType::CLOUD_CONFIGURATION),
78            ),
79        );
80    let configuration = datadog::Configuration::new();
81    let api = SecurityMonitoringAPI::with_config(configuration);
82    let resp = api.create_security_monitoring_rule(body).await;
83    if let Ok(value) = resp {
84        println!("{:#?}", value);
85    } else {
86        println!("{:#?}", resp.unwrap_err());
87    }
88}
Source

pub fn type_(self, value: CloudConfigurationRuleType) -> Self

Examples found in repository?
examples/v2_security-monitoring_CreateSecurityMonitoringRule_1092490364.rs (line 77)
17async fn main() {
18    let body =
19        SecurityMonitoringRuleCreatePayload::CloudConfigurationRuleCreatePayload(
20            Box::new(
21                CloudConfigurationRuleCreatePayload::new(
22                    vec![
23                        CloudConfigurationRuleCaseCreate::new(
24                            SecurityMonitoringRuleSeverity::INFO,
25                        ).notifications(vec!["channel".to_string()])
26                    ],
27                    CloudConfigurationRuleComplianceSignalOptions::new()
28                        .user_activation_status(Some(true))
29                        .user_group_by_fields(Some(vec!["@account_id".to_string()])),
30                    false,
31                    "ddd".to_string(),
32                    "Example-Security-Monitoring_cloud".to_string(),
33                    CloudConfigurationRuleOptions::new(
34                        CloudConfigurationComplianceRuleOptions::new()
35                            .complex_rule(false)
36                            .rego_rule(
37                                CloudConfigurationRegoRule::new(
38                                    r#"package datadog
39
40import data.datadog.output as dd_output
41
42import future.keywords.contains
43import future.keywords.if
44import future.keywords.in
45
46milliseconds_in_a_day := ((1000 * 60) * 60) * 24
47
48eval(iam_service_account_key) = "skip" if {
49	iam_service_account_key.disabled
50} else = "pass" if {
51	(iam_service_account_key.resource_seen_at / milliseconds_in_a_day) - (iam_service_account_key.valid_after_time / milliseconds_in_a_day) <= 90
52} else = "fail"
53
54# This part remains unchanged for all rules
55results contains result if {
56	some resource in input.resources[input.main_resource_type]
57	result := dd_output.format(resource, eval(resource))
58}
59"#.to_string(),
60                                    vec!["gcp_compute_disk".to_string()],
61                                ),
62                            )
63                            .resource_type("gcp_compute_disk".to_string()),
64                    ),
65                )
66                    .filters(
67                        vec![
68                            SecurityMonitoringFilter::new()
69                                .action(SecurityMonitoringFilterAction::REQUIRE)
70                                .query("resource_id:helo*".to_string()),
71                            SecurityMonitoringFilter::new()
72                                .action(SecurityMonitoringFilterAction::SUPPRESS)
73                                .query("control:helo*".to_string())
74                        ],
75                    )
76                    .tags(vec!["my:tag".to_string()])
77                    .type_(CloudConfigurationRuleType::CLOUD_CONFIGURATION),
78            ),
79        );
80    let configuration = datadog::Configuration::new();
81    let api = SecurityMonitoringAPI::with_config(configuration);
82    let resp = api.create_security_monitoring_rule(body).await;
83    if let Ok(value) = resp {
84        println!("{:#?}", value);
85    } else {
86        println!("{:#?}", resp.unwrap_err());
87    }
88}
Source

pub fn additional_properties(self, value: BTreeMap<String, Value>) -> Self

Trait Implementations§

Source§

impl Clone for CloudConfigurationRuleCreatePayload

Source§

fn clone(&self) -> CloudConfigurationRuleCreatePayload

Returns a duplicate of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for CloudConfigurationRuleCreatePayload

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl<'de> Deserialize<'de> for CloudConfigurationRuleCreatePayload

Source§

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
Source§

impl PartialEq for CloudConfigurationRuleCreatePayload

Source§

fn eq(&self, other: &CloudConfigurationRuleCreatePayload) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl Serialize for CloudConfigurationRuleCreatePayload

Source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more
Source§

impl StructuralPartialEq for CloudConfigurationRuleCreatePayload

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,

Source§

impl<T> ErasedDestructor for T
where T: 'static,