Document Cloud SIEM Growth and Content owned endpoints

examples/v2/security-monitoring/BulkCreateSampleLogGenerationSubscriptions.rb

@@ -0,0 +1,20 @@
+# Bulk subscribe to sample log generation returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.bulk_create_sample_log_generation_subscriptions".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SampleLogGenerationBulkSubscriptionRequest.new({
+  data: DatadogAPIClient::V2::SampleLogGenerationBulkSubscriptionData.new({
+    attributes: DatadogAPIClient::V2::SampleLogGenerationBulkSubscriptionAttributes.new({
+      content_pack_ids: [
+        "aws-cloudtrail",
+      ],
+      duration: DatadogAPIClient::V2::SampleLogGenerationDuration::THREE_DAYS,
+    }),
+    type: DatadogAPIClient::V2::SampleLogGenerationBulkSubscriptionRequestType::BULK_SUBSCRIPTION_REQUESTS,
+  }),
+})
+p api_instance.bulk_create_sample_log_generation_subscriptions(body)

examples/v2/security-monitoring/CreateSampleLogGenerationSubscription.rb

@@ -0,0 +1,18 @@
+# Subscribe to sample log generation returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.create_sample_log_generation_subscription".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SampleLogGenerationSubscriptionCreateRequest.new({
+  data: DatadogAPIClient::V2::SampleLogGenerationSubscriptionCreateData.new({
+    attributes: DatadogAPIClient::V2::SampleLogGenerationSubscriptionCreateAttributes.new({
+      content_pack_id: "aws-cloudtrail",
+      duration: DatadogAPIClient::V2::SampleLogGenerationDuration::THREE_DAYS,
+    }),
+    type: DatadogAPIClient::V2::SampleLogGenerationSubscriptionRequestType::SUBSCRIPTION_REQUESTS,
+  }),
+})
+p api_instance.create_sample_log_generation_subscription(body)

examples/v2/security-monitoring/CreateSecurityMonitoringIntegrationConfig.rb

@@ -0,0 +1,21 @@
+# Create an entity context sync configuration returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.create_security_monitoring_integration_config".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigCreateRequest.new({
+  data: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigCreateData.new({
+    attributes: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigCreateAttributes.new({
+      domain: "siem-test.com",
+      integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationType::GOOGLE_WORKSPACE,
+      name: "My GWS Integration",
+      secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSecrets.new({}),
+      settings: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSettings.new({}),
+    }),
+    type: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigResourceType::INTEGRATION_CONFIG,
+  }),
+})
+p api_instance.create_security_monitoring_integration_config(body)

examples/v2/security-monitoring/DeleteSampleLogGenerationSubscription.rb

@@ -0,0 +1,8 @@
+# Unsubscribe from sample log generation returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.delete_sample_log_generation_subscription".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.delete_sample_log_generation_subscription("content_pack_id")

examples/v2/security-monitoring/DeleteSecurityMonitoringIntegrationConfig.rb

@@ -0,0 +1,8 @@
+# Delete an entity context sync configuration returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.delete_security_monitoring_integration_config".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+api_instance.delete_security_monitoring_integration_config("integration_config_id")

examples/v2/security-monitoring/GetEntityContext.rb

@@ -0,0 +1,8 @@
+# Get entity context returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.get_entity_context".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.get_entity_context()

examples/v2/security-monitoring/GetSecurityMonitoringIntegrationConfig.rb

@@ -0,0 +1,8 @@
+# Get an entity context sync configuration returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.get_security_monitoring_integration_config".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.get_security_monitoring_integration_config("integration_config_id")

examples/v2/security-monitoring/GetSignalEntities.rb

@@ -0,0 +1,8 @@
+# Get entities related to a signal returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.get_signal_entities".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.get_signal_entities("signal_id")

examples/v2/security-monitoring/ListLogFormattingIssues.rb

@@ -0,0 +1,8 @@
+# Get Cloud SIEM log formatting issues returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.list_log_formatting_issues".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.list_log_formatting_issues()

examples/v2/security-monitoring/ListSampleLogGenerationSubscriptions.rb

@@ -0,0 +1,8 @@
+# Get sample log generation subscriptions returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.list_sample_log_generation_subscriptions".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.list_sample_log_generation_subscriptions()

examples/v2/security-monitoring/ListSecurityFilterVersions.rb

@@ -0,0 +1,5 @@
+# Get the version history of security filters returns "OK" response
+
+require "datadog_api_client"
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.list_security_filter_versions()

examples/v2/security-monitoring/ListSecurityMonitoringIntegrationConfigs.rb

@@ -0,0 +1,8 @@
+# List entity context sync configurations returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.list_security_monitoring_integration_configs".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.list_security_monitoring_integration_configs()

examples/v2/security-monitoring/UpdateSecurityMonitoringIntegrationConfig.rb

@@ -0,0 +1,22 @@
+# Update an entity context sync configuration returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.update_security_monitoring_integration_config".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigUpdateRequest.new({
+  data: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigUpdateData.new({
+    attributes: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigUpdateAttributes.new({
+      domain: "siem-test.com",
+      enabled: true,
+      integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationType::GOOGLE_WORKSPACE,
+      name: "My GWS Integration (renamed)",
+      secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSecrets.new({}),
+      settings: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSettings.new({}),
+    }),
+    type: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigResourceType::INTEGRATION_CONFIG,
+  }),
+})
+p api_instance.update_security_monitoring_integration_config("integration_config_id", body)

examples/v2/security-monitoring/ValidateSecurityMonitoringIntegrationConfig.rb

@@ -0,0 +1,8 @@
+# Validate an entity context sync configuration returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.validate_security_monitoring_integration_config".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+p api_instance.validate_security_monitoring_integration_config("integration_config_id")

examples/v2/security-monitoring/ValidateSecurityMonitoringIntegrationCredentials.rb

@@ -0,0 +1,19 @@
+# Validate entity context sync credentials returns "OK" response
+
+require "datadog_api_client"
+DatadogAPIClient.configure do |config|
+  config.unstable_operations["v2.validate_security_monitoring_integration_credentials".to_sym] = true
+end
+api_instance = DatadogAPIClient::V2::SecurityMonitoringAPI.new
+
+body = DatadogAPIClient::V2::SecurityMonitoringIntegrationCredentialsValidateRequest.new({
+  data: DatadogAPIClient::V2::SecurityMonitoringIntegrationCredentialsValidateData.new({
+    attributes: DatadogAPIClient::V2::SecurityMonitoringIntegrationCredentialsValidateAttributes.new({
+      domain: "siem-test.com",
+      integration_type: DatadogAPIClient::V2::SecurityMonitoringIntegrationType::GOOGLE_WORKSPACE,
+      secrets: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigSecrets.new({}),
+    }),
+    type: DatadogAPIClient::V2::SecurityMonitoringIntegrationConfigResourceType::INTEGRATION_CONFIG,
+  }),
+})
+p api_instance.validate_security_monitoring_integration_credentials(body)

features/scenarios_model_mapping.rb

@@ -1910,6 +1910,28 @@
             "critical_asset_id" => "String",
             "body" => "SecurityMonitoringCriticalAssetUpdateRequest",
     },
+    "v2.ListSecurityMonitoringIntegrationConfigs" => {
+            "filter_integration_type" => "SecurityMonitoringIntegrationType",
+    },
+    "v2.CreateSecurityMonitoringIntegrationConfig" => {
+            "body" => "SecurityMonitoringIntegrationConfigCreateRequest",
+    },
+    "v2.ValidateSecurityMonitoringIntegrationCredentials" => {
+            "body" => "SecurityMonitoringIntegrationCredentialsValidateRequest",
+    },
+    "v2.DeleteSecurityMonitoringIntegrationConfig" => {
+            "integration_config_id" => "String",
+    },
+    "v2.GetSecurityMonitoringIntegrationConfig" => {
+            "integration_config_id" => "String",
+    },
+    "v2.UpdateSecurityMonitoringIntegrationConfig" => {
+            "integration_config_id" => "String",
+            "body" => "SecurityMonitoringIntegrationConfigUpdateRequest",
+    },
+    "v2.ValidateSecurityMonitoringIntegrationConfig" => {
+            "integration_config_id" => "String",
+    },
     "v2.CreateSecurityFilter" => {
             "body" => "SecurityFilterCreateRequest",
     },
@@ -1962,6 +1984,18 @@
     "v2.DeactivateContentPack" => {
             "content_pack_id" => "String",
     },
+    "v2.GetEntityContext" => {
+            "query" => "String",
+            "from" => "String",
+            "to" => "String",
+            "as_of" => "String",
+            "limit" => "Integer",
+            "page_token" => "String",
+    },
+    "v2.ListLogFormattingIssues" => {
+            "filter_from" => "String",
+            "filter_to" => "String",
+    },
     "v2.ListSecurityMonitoringRules" => {
             "page_size" => "Integer",
             "page_number" => "Integer",
@@ -2008,6 +2042,20 @@
             "page_size" => "Integer",
             "page_number" => "Integer",
     },
+    "v2.ListSampleLogGenerationSubscriptions" => {
+            "status" => "SampleLogGenerationSubscriptionsStatusFilter",
+            "start_timestamp" => "Time",
+            "end_timestamp" => "Time",
+    },
+    "v2.CreateSampleLogGenerationSubscription" => {
+            "body" => "SampleLogGenerationSubscriptionCreateRequest",
+    },
+    "v2.BulkCreateSampleLogGenerationSubscriptions" => {
+            "body" => "SampleLogGenerationBulkSubscriptionRequest",
+    },
+    "v2.DeleteSampleLogGenerationSubscription" => {
+            "content_pack_id" => "String",
+    },
     "v2.ListSecurityMonitoringSignals" => {
             "filter_query" => "String",
             "filter_from" => "Time",
@@ -2035,6 +2083,10 @@
             "signal_id" => "String",
             "body" => "SecurityMonitoringSignalAssigneeUpdateRequest",
     },
+    "v2.GetSignalEntities" => {
+            "signal_id" => "String",
+            "limit" => "Integer",
+    },
     "v2.EditSecurityMonitoringSignalIncidents" => {
             "signal_id" => "String",
             "body" => "SecurityMonitoringSignalIncidentsUpdateRequest",