Add Cloud SIEM batch migration endpoints as unstable

examples/v2/security-monitoring/CancelSecurityMonitoringBatchMigration.py

@@ -0,0 +1,17 @@
+"""
+Cancel a batch migration returns "Accepted" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from uuid import UUID
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["cancel_security_monitoring_batch_migration"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    api_instance.cancel_security_monitoring_batch_migration(
+        batch_id=UUID("7cdb3a75-64fb-46ce-9445-41969e78fe8e"),
+    )

examples/v2/security-monitoring/CreateSecurityMonitoringBatchMigration.py

@@ -0,0 +1,53 @@
+"""
+Create a batch migration returns "Created" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_batch_migration_create_attributes import (
+    SecurityMonitoringBatchMigrationCreateAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_create_data import (
+    SecurityMonitoringBatchMigrationCreateData,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_create_request import (
+    SecurityMonitoringBatchMigrationCreateRequest,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resource_create_item import (
+    SecurityMonitoringBatchMigrationResourceCreateItem,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resource_input_type import (
+    SecurityMonitoringBatchMigrationResourceInputType,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_type import SecurityMonitoringBatchMigrationType
+
+body = SecurityMonitoringBatchMigrationCreateRequest(
+    data=SecurityMonitoringBatchMigrationCreateData(
+        type=SecurityMonitoringBatchMigrationType.BATCH_MIGRATION,
+        attributes=SecurityMonitoringBatchMigrationCreateAttributes(
+            name="Example-Security-Monitoring",
+            description="Rules imported from Splunk",
+            tags=[
+                "source:splunk",
+            ],
+            resources=[
+                SecurityMonitoringBatchMigrationResourceCreateItem(
+                    name="Repeated Windows login failures",
+                    description="Detects repeated failed Windows authentication attempts.",
+                    input_type=SecurityMonitoringBatchMigrationResourceInputType.SPL,
+                    input="index=wineventlog EventCode=4625",
+                ),
+            ],
+        ),
+    ),
+)
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["create_security_monitoring_batch_migration"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.create_security_monitoring_batch_migration(body=body)
+
+    print(response)

examples/v2/security-monitoring/CreateSecurityMonitoringBatchMigrationResources.py

@@ -0,0 +1,54 @@
+"""
+Add resources to a batch migration returns "Created" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resource_create_item import (
+    SecurityMonitoringBatchMigrationResourceCreateItem,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resource_input_type import (
+    SecurityMonitoringBatchMigrationResourceInputType,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resources_create_attributes import (
+    SecurityMonitoringBatchMigrationResourcesCreateAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resources_create_data import (
+    SecurityMonitoringBatchMigrationResourcesCreateData,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resources_create_request import (
+    SecurityMonitoringBatchMigrationResourcesCreateRequest,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resources_type import (
+    SecurityMonitoringBatchMigrationResourcesType,
+)
+
+# there is a valid "batch_migration" in the system
+BATCH_MIGRATION_DATA_ID = environ["BATCH_MIGRATION_DATA_ID"]
+
+body = SecurityMonitoringBatchMigrationResourcesCreateRequest(
+    data=SecurityMonitoringBatchMigrationResourcesCreateData(
+        type=SecurityMonitoringBatchMigrationResourcesType.BATCH_MIGRATION_RESOURCES,
+        attributes=SecurityMonitoringBatchMigrationResourcesCreateAttributes(
+            resources=[
+                SecurityMonitoringBatchMigrationResourceCreateItem(
+                    name="Linux sudo abuse",
+                    input_type=SecurityMonitoringBatchMigrationResourceInputType.SPL,
+                    input='index=linux process=sudo "authentication failure" | stats count by user, host',
+                ),
+            ],
+        ),
+    ),
+)
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["create_security_monitoring_batch_migration_resources"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.create_security_monitoring_batch_migration_resources(
+        batch_id=BATCH_MIGRATION_DATA_ID, body=body
+    )
+
+    print(response)

examples/v2/security-monitoring/DeleteSecurityMonitoringBatchMigration.py

@@ -0,0 +1,19 @@
+"""
+Delete a batch migration returns "No Content" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+# there is a valid "batch_migration" in the system
+BATCH_MIGRATION_DATA_ID = environ["BATCH_MIGRATION_DATA_ID"]
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["delete_security_monitoring_batch_migration"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    api_instance.delete_security_monitoring_batch_migration(
+        batch_id=BATCH_MIGRATION_DATA_ID,
+    )

examples/v2/security-monitoring/DeleteSecurityMonitoringBatchMigrationResources.py

@@ -0,0 +1,43 @@
+"""
+Delete resources from a batch migration returns "No Content" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resources_delete_attributes import (
+    SecurityMonitoringBatchMigrationResourcesDeleteAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resources_delete_data import (
+    SecurityMonitoringBatchMigrationResourcesDeleteData,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resources_delete_request import (
+    SecurityMonitoringBatchMigrationResourcesDeleteRequest,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resources_type import (
+    SecurityMonitoringBatchMigrationResourcesType,
+)
+
+# there is a valid "batch_migration" in the system
+BATCH_MIGRATION_DATA_ID = environ["BATCH_MIGRATION_DATA_ID"]
+
+# there is a valid "batch_migration_resource" in the system
+BATCH_MIGRATION_RESOURCE_ID = environ["BATCH_MIGRATION_RESOURCE_ID"]
+
+body = SecurityMonitoringBatchMigrationResourcesDeleteRequest(
+    data=SecurityMonitoringBatchMigrationResourcesDeleteData(
+        type=SecurityMonitoringBatchMigrationResourcesType.BATCH_MIGRATION_RESOURCES,
+        attributes=SecurityMonitoringBatchMigrationResourcesDeleteAttributes(
+            resource_ids=[
+                BATCH_MIGRATION_RESOURCE_ID,
+            ],
+        ),
+    ),
+)
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["delete_security_monitoring_batch_migration_resources"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    api_instance.delete_security_monitoring_batch_migration_resources(batch_id=BATCH_MIGRATION_DATA_ID, body=body)

examples/v2/security-monitoring/ListSecurityMonitoringBatchMigrationResources.py

@@ -0,0 +1,21 @@
+"""
+List batch migration resources returns "OK" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+# there is a valid "batch_migration" in the system
+BATCH_MIGRATION_DATA_ID = environ["BATCH_MIGRATION_DATA_ID"]
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["list_security_monitoring_batch_migration_resources"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.list_security_monitoring_batch_migration_resources(
+        batch_id=BATCH_MIGRATION_DATA_ID,
+    )
+
+    print(response)

examples/v2/security-monitoring/ListSecurityMonitoringBatchMigrations.py

@@ -0,0 +1,21 @@
+"""
+List batch migrations returns "OK" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+# there is a valid "batch_migration" in the system
+BATCH_MIGRATION_DATA_ID = environ["BATCH_MIGRATION_DATA_ID"]
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["list_security_monitoring_batch_migrations"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.list_security_monitoring_batch_migrations(
+        filter_query="id:7cdb3a75-64fb-46ce-9445-41969e78fe8e",
+    )
+
+    print(response)

examples/v2/security-monitoring/PublishSecurityMonitoringBatchMigration.py

@@ -0,0 +1,42 @@
+"""
+Publish a batch migration returns "OK" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_batch_migration_publish_attributes import (
+    SecurityMonitoringBatchMigrationPublishAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_publish_data import (
+    SecurityMonitoringBatchMigrationPublishData,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_publish_request import (
+    SecurityMonitoringBatchMigrationPublishRequest,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_publish_type import (
+    SecurityMonitoringBatchMigrationPublishType,
+)
+from uuid import UUID
+
+body = SecurityMonitoringBatchMigrationPublishRequest(
+    data=SecurityMonitoringBatchMigrationPublishData(
+        attributes=SecurityMonitoringBatchMigrationPublishAttributes(
+            resource_ids=[
+                UUID("c968cf83-56c2-4d54-a993-6c86dfb83527"),
+            ],
+        ),
+        type=SecurityMonitoringBatchMigrationPublishType.BATCH_MIGRATION_PUBLISH,
+    ),
+)
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["publish_security_monitoring_batch_migration"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.publish_security_monitoring_batch_migration(
+        batch_id=UUID("7cdb3a75-64fb-46ce-9445-41969e78fe8e"), body=body
+    )
+
+    print(response)

examples/v2/security-monitoring/StartSecurityMonitoringBatchMigration.py

@@ -0,0 +1,17 @@
+"""
+Start a batch migration returns "Accepted" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from uuid import UUID
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["start_security_monitoring_batch_migration"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    api_instance.start_security_monitoring_batch_migration(
+        batch_id=UUID("7cdb3a75-64fb-46ce-9445-41969e78fe8e"),
+    )

examples/v2/security-monitoring/UpdateSecurityMonitoringBatchMigration.py

@@ -0,0 +1,42 @@
+"""
+Update a batch migration returns "OK" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_batch_migration_type import SecurityMonitoringBatchMigrationType
+from datadog_api_client.v2.model.security_monitoring_batch_migration_update_attributes import (
+    SecurityMonitoringBatchMigrationUpdateAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_update_data import (
+    SecurityMonitoringBatchMigrationUpdateData,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_update_request import (
+    SecurityMonitoringBatchMigrationUpdateRequest,
+)
+
+# there is a valid "batch_migration" in the system
+BATCH_MIGRATION_DATA_ID = environ["BATCH_MIGRATION_DATA_ID"]
+
+body = SecurityMonitoringBatchMigrationUpdateRequest(
+    data=SecurityMonitoringBatchMigrationUpdateData(
+        type=SecurityMonitoringBatchMigrationType.BATCH_MIGRATION,
+        attributes=SecurityMonitoringBatchMigrationUpdateAttributes(
+            name="Example-Security-Monitoring-updated",
+            tags=[
+                "source:splunk",
+                "team:secops",
+            ],
+        ),
+    ),
+)
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["update_security_monitoring_batch_migration"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.update_security_monitoring_batch_migration(batch_id=BATCH_MIGRATION_DATA_ID, body=body)
+
+    print(response)

examples/v2/security-monitoring/UpdateSecurityMonitoringBatchMigrationResource.py

@@ -0,0 +1,45 @@
+"""
+Update a batch migration resource returns "OK" response
+"""
+
+from os import environ
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resource_type import (
+    SecurityMonitoringBatchMigrationResourceType,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resource_update_attributes import (
+    SecurityMonitoringBatchMigrationResourceUpdateAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resource_update_data import (
+    SecurityMonitoringBatchMigrationResourceUpdateData,
+)
+from datadog_api_client.v2.model.security_monitoring_batch_migration_resource_update_request import (
+    SecurityMonitoringBatchMigrationResourceUpdateRequest,
+)
+
+# there is a valid "batch_migration" in the system
+BATCH_MIGRATION_DATA_ID = environ["BATCH_MIGRATION_DATA_ID"]
+
+# there is a valid "batch_migration_resource" in the system
+BATCH_MIGRATION_RESOURCE_ID = environ["BATCH_MIGRATION_RESOURCE_ID"]
+
+body = SecurityMonitoringBatchMigrationResourceUpdateRequest(
+    data=SecurityMonitoringBatchMigrationResourceUpdateData(
+        type=SecurityMonitoringBatchMigrationResourceType.BATCH_MIGRATION_RESOURCE,
+        attributes=SecurityMonitoringBatchMigrationResourceUpdateAttributes(
+            input="index=wineventlog EventCode=4625 | stats count by user",
+        ),
+    ),
+)
+
+configuration = Configuration()
+configuration.access_token = environ["DD_BEARER_TOKEN"]
+configuration.unstable_operations["update_security_monitoring_batch_migration_resource"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.update_security_monitoring_batch_migration_resource(
+        batch_id=BATCH_MIGRATION_DATA_ID, resource_id=BATCH_MIGRATION_RESOURCE_ID, body=body
+    )
+
+    print(response)