@azure/arm-security package

Interface representing a APICollections.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Defines headers for APICollections_onboardAzureApiManagementApi operation.

Optional parameters.

Describes an Azure resource with kind

Represents an AAD identity protection solution which sends logs to an OMS workspace.

The external security solution properties for AAD solutions

Configuration payload for PR Annotations.

Number of active connections is not in allowed range.

Describes an Azure resource.

Represents a list of VM/server groups and set of rules that are Recommended by Microsoft Defender for Cloud to be allowed

Represents a summary of the alerts of the machine group

Interface representing a AdaptiveApplicationControls.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

The resource whose properties describes the Adaptive Network Hardening settings for some Azure resource

Interface representing a AdaptiveNetworkHardenings.

Optional parameters.

Optional parameters.

Response for ListAdaptiveNetworkHardenings API service call

Optional parameters.

Optional parameters.

Details of the sub-assessment

Properties of the additional workspaces.

Interface representing a AdvancedThreatProtection.

Optional parameters.

Optional parameters.

The Advanced Threat Protection resource.

Security alert

Changing set of properties depending on the entity type.

List of security alerts

Changing set of properties depending on the supportingEvidence type.

Simulate alerts according to this bundles.

Alert Simulator request body.

Describes properties of an alert simulation request

Represents an alert sync setting

Interface representing a Alerts.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Describes the suppression rule

Interface representing a AlertsSuppressionRules.

Optional parameters.

Optional parameters.

Suppression rules list for subscription.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a AllowedConnections.

Optional parameters.

List of all possible traffic between Azure resources

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

The resource whose properties describes the allowed traffic between Azure resources

A custom alert rule that checks if a value (depends on the custom alert type) is allowed.

Number of cloud to device messages (AMQP protocol) is not in allowed range.

Number of rejected cloud to device messages (AMQP protocol) is not in allowed range.

Number of device to cloud messages (AMQP protocol) is not in allowed range.

An API collection as represented by Microsoft Defender for APIs.

Page of a list of API collections as represented by Microsoft Defender for APIs.

Security Application over a given scope

Application's condition

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a ApplicationOperations.

Interface representing a Applications.

Page of a security applications list

Optional parameters.

Optional parameters.

The ASC location of the subscription is in the "name" field

List of locations where ASC saves your data

Links relevant to the assessment

The result of the assessment

The result of the assessment

Interface representing a Assessments.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a AssessmentsMetadata.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Represents an ATA security solution which sends logs to an OMS workspace

The external security solution properties for ATA solutions

Settings for cloud authentication management

Authorization payload.

Auto provisioning setting

List of all the auto provisioning settings response

Interface representing a AutoProvisioningSettings.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

The security automation resource.

The action that should be triggered.

The target Event Hub to which event data will be exported. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore

The logic app action that should be triggered. To learn more about Microsoft Defender for Cloud's Workflow Automation capabilities, visit https://aka.ms/ASCWorkflowAutomationLearnMore

The�Log�Analytics�Workspace�to�which�event data will be exported. Security alerts data will reside in the 'SecurityAlert' table and the assessments data will reside in the 'SecurityRecommendation' table (under the 'Security'/'SecurityCenterFree' solutions). Note that in order to view the data in the workspace, the Security Center Log Analytics free/standard solution needs to be enabled on that workspace. To learn more about Microsoft Defender for Cloud continuous export capabilities, visit https://aka.ms/ASCExportLearnMore

List of security automations response.

A rule set which evaluates all its rules upon an event interception. Only when all the included rules in the rule set will be evaluated as 'true', will the event trigger the defined actions.

A single automation scope.

The source event types which evaluate the security automation set of rules. For example - security alerts and security assessments. To learn more about the supported security events data models schemas - please visit https://aka.ms/ASCAutomationSchemas.

A rule which is evaluated upon event interception. The rule is configured by comparing a specific value from the event model to an expected value. This comparison is done by using one of the supported operators set.

The update model of security automation resource.

The security automation model state property bag.

Interface representing a Automations.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

AWS cloud account connector based assume role, the role enables delegating access to your AWS resources. The role is composed of role Amazon Resource Name (ARN) and external ID. For more details, refer to Creating a Role to Delegate Permissions to an IAM User (write only)

AWS cloud account connector based credentials, the credentials is composed of access key ID and secret key, for more details, refer to Creating an IAM User in Your AWS Account (write only)

The AWS connector environment data

The AWS organization data

The AWS organization data for the master account

The AWS organization data for the member account

Azure DevOps Organization resource.

List of RP resources which supports pagination.

Azure DevOps Organization properties.

AzureDevOps Org Inventory Configuration.

Interface representing a AzureDevOpsOrgs.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Azure DevOps Project resource.

AzureDevOps Project Inventory Configuration.

List of RP resources which supports pagination.

Azure DevOps Project properties.

Interface representing a AzureDevOpsProjects.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a AzureDevOpsRepos.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Azure DevOps Repository resource.

List of RP resources which supports pagination.

Azure DevOps Repository properties.

The AzureDevOps scope connector's environment data

Details of the Azure resource that was assessed

Azure resource identifier.

Describes an Azure resource with kind

A vulnerability assessments setting on Azure servers in the defined scope.

Describes an Azure resource with location

Base Resource Inventory configuration changes.

Baseline details.

The rule result adjusted with baseline.

The benchmark references.

Pre-configured sensitive information type

Severity level per category configuration for PR Annotations.

Represents a security solution which sends CEF logs to an OMS workspace

The external security solution properties for CEF solutions

Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).

The error detail.

The security offering details

Compliance of a scope

List of Compliance objects response

a compliance result

List of compliance results response

Interface representing a ComplianceResults.

Optional parameters.

Optional parameters.

Optional parameters.

A segment of a compliance assessment.

Interface representing a Compliances.

Optional parameters.

Optional parameters.

Optional parameters.

Governance rule's condition

Describes the allowed inbound and outbound traffic of an Azure resource

Describes properties of a connected resource

Represents an OMS workspace to which the solution is connected

Inbound connection from an ip that isn't allowed. Allow list consists of ipv4 or ipv6 range in CIDR notation.

Outbound connection to an ip that isn't allowed. Allow list consists of ipv4 or ipv6 range in CIDR notation.

The connector setting

For a subscription, list of all cloud account connectors and their settings

Interface representing a Connectors.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Additional context fields for container registry Vulnerability assessment

The CSPM monitoring for AWS offering

The native cloud connection configuration

The CSPM monitoring for AzureDevOps offering

The CSPM monitoring for GCP offering

The native cloud connection configuration

The CSPM (Cloud security posture management) monitoring for gitlab offering

The CSPM monitoring for github offering

A custom alert rule.

Custom Assessment Automation

Custom Assessment Automation request

Interface representing a CustomAssessmentAutomations.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

A list of Custom Assessment Automations

Custom entity store assignment

describes the custom entity store assignment request

Interface representing a CustomEntityStoreAssignments.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

A list of custom entity store assignments

CVE details

CVSS details

Represents a data export setting

The CSPM P1 for AWS offering

Defenders CSPM Cloud infrastructure entitlement management (CIEM) offering configurations

Defender CSPM CIEM discovery configuration

Defender CSPM CIEM AWS OIDC (open id connect) configuration

The Microsoft Defender Data Sensitivity discovery configuration

The databases DSPM configuration

The Microsoft Defender container agentless discovery K8s configuration

The Microsoft Defender container image assessment configuration

The Microsoft Defender for Server VM scanning configuration

configuration for Microsoft Defender for Server VM scanning

The CSPM P1 for GCP offering

GCP Defenders CSPM Cloud infrastructure entitlement management (CIEM) discovery offering configurations

The Microsoft Defender Data Sensitivity discovery configuration

The Microsoft Defender Container agentless discovery configuration

The Microsoft Defender Container image assessment configuration

The Microsoft Defender for Server VM scanning configuration

configuration for Microsoft Defender for Server VM scanning

The Defender for Databases AWS offering

The ARC autoprovisioning configuration

Configuration for servers Arc auto provisioning

The databases data security posture management (DSPM) configuration

The RDS configuration

The Defender for Containers AWS offering

The cloudwatch to kinesis connection configuration

The container vulnerability assessment configuration

The container vulnerability assessment task configuration

The kinesis to s3 connection configuration

The kubernetes to scuba connection configuration

The kubernetes service connection configuration

The Microsoft Defender container agentless discovery K8s configuration

The Microsoft Defender container image assessment configuration

The containers GCP offering

The native cloud connection configuration

The Microsoft Defender Container agentless discovery configuration

The Microsoft Defender Container image assessment configuration

The native cloud connection configuration

The Defender for Databases GCP offering configurations

The ARC autoprovisioning configuration

Configuration for servers Arc auto provisioning

The native cloud connection configuration

The Defender for DevOps for Azure DevOps offering

The Defender for DevOps for Gitlab offering

The Defender for DevOps for Github offering

The Defender for Servers AWS offering

The ARC autoprovisioning configuration

Configuration for servers Arc auto provisioning

The Defender for servers connection configuration

The Microsoft Defender for Endpoint autoprovisioning configuration

configuration for the servers offering subPlan

The Vulnerability Assessment autoprovisioning configuration

configuration for Vulnerability Assessment autoprovisioning

The Microsoft Defender for Server VM scanning configuration

configuration for Microsoft Defender for Server VM scanning

The Defender for Servers GCP offering configurations

The ARC autoprovisioning configuration

Configuration for servers Arc auto provisioning

The Defender for servers connection configuration

The Microsoft Defender for Endpoint autoprovisioning configuration

configuration for the servers offering subPlan

The Vulnerability Assessment autoprovisioning configuration

configuration for Vulnerability Assessment autoprovisioning

The Microsoft Defender for Server VM scanning configuration

configuration for Microsoft Defender for Server VM scanning

Interface representing a DefenderForStorage.

Optional parameters.

Optional parameters.

The Defender for Storage resource.

A custom alert rule that checks if a value (depends on the custom alert type) is denied.

DevOps Configuration resource.

List of RP resources which supports pagination.

DevOps Configuration properties.

Interface representing a DevOpsConfigurations.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a DevOpsOperationResults.

Optional parameters.

The device security group resource

List of device security groups

Interface representing a DeviceSecurityGroups.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Number of direct method invokes is not in allowed range.

Describes an Azure resource.

Interface representing a DiscoveredSecuritySolutions.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Entity tag is used for comparing two or more entities from the same requested resource.

Describes the Network Security Groups effective on a network interface

The security connector environment data.

The environment details of the resource

The resource management error additional info.

The error detail.

The error detail.

Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).

Common error response for all Azure Resource Manager APIs to return error details for failed operations. (This also follows the OData error response format.).

Governance rule execution parameters

A plan's extension properties

Represents a security solution external to Microsoft Defender for Cloud which sends information to an OMS workspace and whose data is displayed by Microsoft Defender for Cloud.

Describes an Azure resource with kind

The solution properties (correspond to the solution kind)

Interface representing a ExternalSecuritySolutions.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Number of failed local logins is not in allowed range.

Number of file uploads is not in allowed range.

GCP cloud account connector based service to service credentials, the credentials are composed of the organization ID and a JSON API key (write only)

The gcpOrganization data

The gcpOrganization data for the member account

The gcpOrganization data for the parent account

The details about the project represented by the security connector

The GCP project connector environment data

A list with a single sensitivity settings resource

Optional parameters.

Data sensitivity settings for sensitive data discovery

The sensitivity settings properties

Microsoft information protection built-in and custom information types, labels, and integration status.

GitHub Owner resource.

GitHub Owner Inventory Configuration.

List of RP resources which supports pagination.

GitHub Owner properties.

Interface representing a GitHubOwners.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a GitHubRepos.

Optional parameters.

Optional parameters.

Optional parameters.

GitHub Repository resource.

List of RP resources which supports pagination.

GitHub Repository properties.

GitLab Group resource.

GitLab Group Inventory Configuration.

List of RP resources which supports pagination.

GitLab Group properties.

Interface representing a GitLabGroups.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

GitLab Project resource.

List of RP resources which supports pagination.

GitLab Project properties.

Interface representing a GitLabProjects.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a GitLabSubgroups.

Optional parameters.

The github scope connector's environment data

The GitLab scope connector's environment data

Governance assignment over a given scope

Describe the additional data of governance assignment - optional

Interface representing a GovernanceAssignments.

Optional parameters.

Optional parameters.

Optional parameters.

Page of a governance assignments list

Optional parameters.

Optional parameters.

The governance email weekly notification configuration.

Governance rule over a given scope

The governance email weekly notification configuration

Page of a governance rules list

The governance rule metadata

Describe the owner source of governance rule

Interface representing a GovernanceRules.

Optional parameters.

Defines headers for GovernanceRules_delete operation.

Optional parameters.

Defines headers for GovernanceRules_execute operation.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Defines headers for GovernanceRules_operationResults operation.

Optional parameters.

The classification of the health report

The health report resource

Interface representing a HealthReports.

Optional parameters.

Page of health reports list

Optional parameters.

Optional parameters.

Number of cloud to device messages (HTTP protocol) is not in allowed range.

Number of rejected cloud to device messages (HTTP protocol) is not in allowed range.

Number of device to cloud messages (HTTP protocol) is not in allowed range.

Settings for hybrid compute management

Identity for the resource.

Custom user-defined information type

The information protection for AWS offering

The native cloud connection configuration

The information type keyword.

Interface representing a InformationProtectionPolicies.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Information protection policy.

Information protection policies response.

The information type.

Security Solution Aggregated Alert information

List of IoT Security solution aggregated alert data.

IoT Security solution recommendation information.

List of IoT Security solution aggregated recommendations.

Statistical information about the number of alerts per device during last set number of days.

Statistical information about the number of alerts per alert type during last set number of days

Statistical information about the number of recommendations per device, per recommendation type.

Security analytics of your IoT Security solution

List of Security analytics of your IoT Security solution

IoT Security solution configuration and resource information.

List of IoT Security solutions.

IoT Security solution analytics severity metrics.

Interface representing a IotSecuritySolution.

Interface representing a IotSecuritySolutionAnalytics.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a IotSecuritySolutionsAnalyticsAggregatedAlert.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a IotSecuritySolutionsAnalyticsRecommendation.

Optional parameters.

Optional parameters.

Optional parameters.

The issue that caused the resource to by unhealthy

Interface representing a JitNetworkAccessPolicies.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Describes an Azure resource.

Describes an Azure resource with kind

Microsoft information protection sensitivity label

A List custom alert rule.

Login by a local user that isn't allowed. Allow list consists of login names to allow.

Describes an Azure resource with location

Interface representing a Locations.

Optional parameters.

Optional parameters.

Optional parameters.

Represents a Log Analytics workspace scope identifier.

The resource of the configuration or data needed to onboard the machine to MDE

List of all MDE onboarding data resources

Interface representing a MdeOnboardings.

Optional parameters.

Optional parameters.

Number of cloud to device messages (MQTT protocol) is not in allowed range.

Number of rejected cloud to device messages (MQTT protocol) is not in allowed range.

Number of device to cloud messages (MQTT protocol) is not in allowed range.

A valid notification source type

Alert notification source

Attack path notification source

Details of the On Premise resource that was assessed

Details of the On Premise Sql resource that was assessed

Possible operation in the REST API of Microsoft.Security

Security operation display

List of possible operations for Microsoft.Security resource provider

Long run operation status of governance rule over a given scope

A status describing the success/failure of the enablement/disablement operation.

A status describing the success/failure of the extension's enablement/disablement operation.

The current status of an async operation.

Interface representing a Operations.

Optional parameters.

Optional parameters.

Represents a path that is recommended to be allowed and its properties

Microsoft Defender for Cloud is provided in two pricing tiers: free and standard. The standard tier offers advanced security capabilities, while the free tier offers basic security features.

List of pricing configurations response.

Interface representing a Pricings.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Execution of a process that isn't allowed. Allow list consists of process names to allow.

The protection mode of the collection/file types. Exe/Msi/Script are used for Windows, Executable is used for Linux.

The resource model definition for a Azure Resource Manager proxy resource. It will not have tags and a location

For a non-Azure machine that is not connected directly to the internet, specify a proxy server that the non-Azure machine can use.

Represents the publisher information of a process/rule

The rule query details.

Number of device queue purges is not in allowed range.

The type of IoT Security recommendation.

Regulatory compliance assessment details and state

List of regulatory compliance assessment response

Interface representing a RegulatoryComplianceAssessments.

Optional parameters.

Optional parameters.

Optional parameters.

Regulatory compliance control details and state

List of regulatory compliance controls response

Interface representing a RegulatoryComplianceControls.

Optional parameters.

Optional parameters.

Optional parameters.

Regulatory compliance standard details and state

List of regulatory compliance standards response

Interface representing a RegulatoryComplianceStandards.

Optional parameters.

Optional parameters.

Optional parameters.

Remediation details.

The ETA (estimated time of arrival) for remediation

Describes an Azure resource.

Common fields that are returned in the response for all Azure Resource Manager resources

Common fields that are returned in the response for all Azure Resource Manager resources

Details of the resource that was assessed

The resource details of the health report

A resource identifier for an alert which can be used to direct the alert to the right product exposure group (tenant, workspace, subscription etc.).

Describes remote addresses that is recommended to communicate with the Azure resource on some (Protocol, Port, Direction). All other remote addresses are recommended to be blocked

Rule results.

Rule results input.

Rule results properties.

A list of rules results.

Rules results input.

A vulnerability assessment scan record.

A vulnerability assessment scan record properties.

A vulnerability assessment scan result for a single rule.

A vulnerability assessment scan result properties for a single rule.

A list of vulnerability assessment scan results.

A list of vulnerability assessment scan records.

A more specific scope used to identify the alerts to suppress.

Information about the security control.

List of security controls definition

The type of the security control (For example, BuiltIn)

Interface representing a SecureScoreControlDefinitions.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Details of the security control, its score, and the health status of the relevant resources.

List of security controls

Calculation result data

Interface representing a SecureScoreControls.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Secure score item data model

Interface representing a SecureScores.

Optional parameters.

List of secure scores

Optional parameters.

Optional parameters.

Security assessment on a resource

Page of a security assessments list

Security assessment metadata

Describes the partner that created the assessment

Describes properties of an assessment metadata.

Describes properties of an assessment metadata response.

Security assessment metadata response

List of security assessment metadata

Data regarding 3rd party partner integration

Describes properties of an assessment.

Describes properties of an assessment.

Describes properties of an assessment.

Security assessment on a resource - response format

Optional parameters.

The security connector resource.

Interface representing a SecurityConnectorApplication.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a SecurityConnectorApplications.

Optional parameters.

Optional parameters.

Interface representing a SecurityConnectors.

Optional parameters.

Optional parameters.

Optional parameters.

List of security connectors response.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Contact details and configurations for notifications coming from Microsoft Defender for Cloud.

List of security contacts response

Defines whether to send email notifications from Microsoft Defender for Cloud to persons with specific RBAC roles on the subscription.

Interface representing a SecurityContacts.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Security operator under a given subscription and pricing

List of SecurityOperator response.

Interface representing a SecurityOperators.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Describes an Azure resource.

Interface representing a SecuritySolutions.

Optional parameters.

Optional parameters.

Optional parameters.

Describes an Azure resource.

Optional parameters.

Optional parameters.

Interface representing a SecuritySolutionsReferenceDataOperations.

Security sub-assessment on a resource

List of security sub-assessments

Security task that we recommend to do in order to strengthen security

List of security task recommendations

Changing set of properties, depending on the task type that is derived from the name field

The sensitivity label.

Interface representing a SensitivitySettings.

Optional parameters.

Describes the server vulnerability assessment details on a resource

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a ServerVulnerabilityAssessmentOperations.

List of server vulnerability assessments

A base vulnerability assessments setting on servers in the defined scope.

Interface representing a ServerVulnerabilityAssessmentsSettings.

Optional parameters.

Optional parameters.

Optional parameters.

A page of a server vulnerability assessments settings list

Optional parameters.

Optional parameters.

Additional context fields for server vulnerability assessment

Details of the service principal.

The kind of the security setting

Interface representing a Settings.

Optional parameters.

Subscription settings list.

Optional parameters.

Optional parameters.

Optional parameters.

Represents a software data

Interface representing a SoftwareInventories.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Represents the software inventory of the virtual machine.

Details of the resource that was assessed

Interface representing a SqlVulnerabilityAssessmentBaselineRules.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Interface representing a SqlVulnerabilityAssessmentScanResults.

Optional parameters.

Optional parameters.

Interface representing a SqlVulnerabilityAssessmentScans.

Optional parameters.

Optional parameters.

The status of the health report

Status of the sub-assessment

Interface representing a SubAssessments.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Metadata pertaining to creation and last modification of the resource.

A list of key value pairs that describe the resource.

A container holding only the Tags for a resource, allowing the user to update the tags.

Repository branch configuration for PR Annotations.

Interface representing a Tasks.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

A custom alert rule that checks if a value (depends on the custom alert type) is within the given range.

A custom alert rule that checks if the number of activities (depends on the custom alert type) in a time window is within the given range.

Interface representing a Topology.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Describes an Azure resource.

Describes an Azure tracked resource.

Number of twin updates is not in allowed range.

Number of unauthorized operations is not in allowed range.

A container holding only the Tags for a resource, allowing the user to update the tags.

Optional parameters.

Request to update data sensitivity settings for sensitive data discovery

Properties of the IoT Security solution's user defined resources.

Represents a user that is recommended to be allowed for a certain rule

vulnerability assessment rule metadata details.

Vendor reference

Represents a machine that is part of a machine group

Configures where to store the OMS agent data for workspaces under a scope

List of workspace settings response

Interface representing a WorkspaceSettings.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Optional parameters.

Contains response data for the getByAzureApiManagementService operation.

Contains response data for the listByAzureApiManagementServiceNext operation.

Contains response data for the listByAzureApiManagementService operation.

Contains response data for the listByResourceGroupNext operation.

Contains response data for the listByResourceGroup operation.

Contains response data for the listBySubscriptionNext operation.

Contains response data for the listBySubscription operation.

Contains response data for the onboardAzureApiManagementApi operation.

Defines values for AadConnectivityState.
KnownAadConnectivityState can be used interchangeably with AadConnectivityState, this enum contains the known values that the service supports.

Known values supported by the service

Discovered
NotLicensed
Connected

Defines values for ActionType.
KnownActionType can be used interchangeably with ActionType, this enum contains the known values that the service supports.

Known values supported by the service

LogicApp
EventHub
Workspace

Defines values for ActionableRemediationState.
KnownActionableRemediationState can be used interchangeably with ActionableRemediationState, this enum contains the known values that the service supports.

Known values supported by the service

None
Disabled
Enabled

Defines values for AdaptiveApplicationControlIssue.
KnownAdaptiveApplicationControlIssue can be used interchangeably with AdaptiveApplicationControlIssue, this enum contains the known values that the service supports.

Known values supported by the service

ViolationsAudited
ViolationsBlocked
MsiAndScriptViolationsAudited
MsiAndScriptViolationsBlocked
ExecutableViolationsAudited
RulesViolatedManually

Contains response data for the get operation.

Contains response data for the list operation.

Contains response data for the put operation.

Contains response data for the get operation.

Contains response data for the listByExtendedResourceNext operation.

Contains response data for the listByExtendedResource operation.

Defines values for AdditionalWorkspaceDataType.
KnownAdditionalWorkspaceDataType can be used interchangeably with AdditionalWorkspaceDataType, this enum contains the known values that the service supports.

Known values supported by the service

Alerts
RawEvents

Defines values for AdditionalWorkspaceType.
KnownAdditionalWorkspaceType can be used interchangeably with AdditionalWorkspaceType, this enum contains the known values that the service supports.

Known values supported by the service

Sentinel

Contains response data for the create operation.

Contains response data for the get operation.

Defines values for AlertSeverity.
KnownAlertSeverity can be used interchangeably with AlertSeverity, this enum contains the known values that the service supports.

Known values supported by the service

Informational: Informational
Low: Low
Medium: Medium
High: High

Defines values for AlertStatus.
KnownAlertStatus can be used interchangeably with AlertStatus, this enum contains the known values that the service supports.

Known values supported by the service

Active: An alert which doesn't specify a value is assigned the status 'Active'
InProgress: An alert which is in handling state
Resolved: Alert closed after handling
Dismissed: Alert dismissed as false positive

Contains response data for the getResourceGroupLevel operation.

Contains response data for the getSubscriptionLevel operation.

Contains response data for the listByResourceGroupNext operation.

Contains response data for the listByResourceGroup operation.

Contains response data for the listNext operation.

Contains response data for the listResourceGroupLevelByRegionNext operation.

Contains response data for the listResourceGroupLevelByRegion operation.

Contains response data for the list operation.

Contains response data for the listSubscriptionLevelByRegionNext operation.

Contains response data for the listSubscriptionLevelByRegion operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the update operation.

Contains response data for the get operation.

Contains response data for the listByHomeRegionNext operation.

Contains response data for the listByHomeRegion operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for AnnotateDefaultBranchState.
KnownAnnotateDefaultBranchState can be used interchangeably with AnnotateDefaultBranchState, this enum contains the known values that the service supports.

Known values supported by the service

Disabled
Enabled

Defines values for ApplicationConditionOperator.
KnownApplicationConditionOperator can be used interchangeably with ApplicationConditionOperator, this enum contains the known values that the service supports.

Known values supported by the service

Contains: Checks that the string value of the data defined in Property contains the given value
Equals: Checks that the string value of the data defined in Property equals the given value
In: Checks that the string value of the data defined in Property equals any of the given values (exact fit)

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Defines values for ApplicationSourceResourceType.
KnownApplicationSourceResourceType can be used interchangeably with ApplicationSourceResourceType, this enum contains the known values that the service supports.

Known values supported by the service

Assessments: The source of the application is assessments

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for AssessedResourceType.
KnownAssessedResourceType can be used interchangeably with AssessedResourceType, this enum contains the known values that the service supports.

Known values supported by the service

SqlServerVulnerability
ContainerRegistryVulnerability
ServerVulnerability

Defines values for AssessmentStatusCode.
KnownAssessmentStatusCode can be used interchangeably with AssessmentStatusCode, this enum contains the known values that the service supports.

Known values supported by the service

Healthy: The resource is healthy
Unhealthy: The resource has a security issue that needs to be addressed
NotApplicable: Assessment for this resource did not happen

Defines values for AssessmentType.
KnownAssessmentType can be used interchangeably with AssessmentType, this enum contains the known values that the service supports.

Known values supported by the service

BuiltIn: Microsoft Defender for Cloud managed assessments
CustomPolicy: User defined policies that are automatically ingested from Azure Policy to Microsoft Defender for Cloud
CustomerManaged: User assessments pushed directly by the user or other third party to Microsoft Defender for Cloud
VerifiedPartner: An assessment that was created by a verified 3rd party if the user connected it to ASC

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the createInSubscription operation.

Contains response data for the getInSubscription operation.

Contains response data for the get operation.

Contains response data for the listBySubscriptionNext operation.

Contains response data for the listBySubscription operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for AuthenticationProvisioningState.
KnownAuthenticationProvisioningState can be used interchangeably with AuthenticationProvisioningState, this enum contains the known values that the service supports.

Known values supported by the service

Valid: Valid connector
Invalid: Invalid connector
Expired: the connection has expired
IncorrectPolicy: Incorrect policy of the connector

Defines values for AuthenticationType.
KnownAuthenticationType can be used interchangeably with AuthenticationType, this enum contains the known values that the service supports.

Known values supported by the service

awsCreds: AWS cloud account connector user credentials authentication
awsAssumeRole: AWS account connector assume role authentication
gcpCredentials: GCP account connector service to service authentication

Defines values for AutoDiscovery.
KnownAutoDiscovery can be used interchangeably with AutoDiscovery, this enum contains the known values that the service supports.

Known values supported by the service

Disabled
Enabled
NotApplicable

Defines values for AutoProvision.
KnownAutoProvision can be used interchangeably with AutoProvision, this enum contains the known values that the service supports.

Known values supported by the service

On: Install missing security agent on VMs automatically
Off: Do not install security agent on the VMs automatically

Contains response data for the create operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listByResourceGroupNext operation.

Contains response data for the listByResourceGroup operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the update operation.

Contains response data for the validate operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listAvailable operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the update operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the update operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the update operation.

Defines values for BundleType.
KnownBundleType can be used interchangeably with BundleType, this enum contains the known values that the service supports.

Known values supported by the service

AppServices
DNS
KeyVaults
KubernetesService
ResourceManager
SqlServers
StorageAccounts
VirtualMachines
CosmosDbs

Defines values for Categories.
KnownCategories can be used interchangeably with Categories, this enum contains the known values that the service supports.

Known values supported by the service

Compute
Networking
Data
IdentityAndAccess
IoT

Defines values for CloudName.
KnownCloudName can be used interchangeably with CloudName, this enum contains the known values that the service supports.

Known values supported by the service

Azure
AWS
GCP
Github
AzureDevOps
GitLab

Defines values for Code.
KnownCode can be used interchangeably with Code, this enum contains the known values that the service supports.

Known values supported by the service

Succeeded: Extension was created/updated successfully.
Failed: Extension was not created/updated successfully. See operation status message for more details.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for ConfigurationStatus.
KnownConfigurationStatus can be used interchangeably with ConfigurationStatus, this enum contains the known values that the service supports.

Known values supported by the service

Configured
NotConfigured
InProgress
Failed
NoStatus

Defines values for ConnectionType.
KnownConnectionType can be used interchangeably with ConnectionType, this enum contains the known values that the service supports.

Known values supported by the service

Internal
External

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for ControlType.
KnownControlType can be used interchangeably with ControlType, this enum contains the known values that the service supports.

Known values supported by the service

BuiltIn: Microsoft Defender for Cloud managed assessments
Custom: Non Microsoft Defender for Cloud managed assessments

Defines values for CreatedByType.
KnownCreatedByType can be used interchangeably with CreatedByType, this enum contains the known values that the service supports.

Known values supported by the service

User
Application
ManagedIdentity
Key

Contains response data for the create operation.

Contains response data for the get operation.

Contains response data for the listByResourceGroupNext operation.

Contains response data for the listByResourceGroup operation.

Contains response data for the listBySubscriptionNext operation.

Contains response data for the listBySubscription operation.

Contains response data for the create operation.

Contains response data for the get operation.

Contains response data for the listByResourceGroupNext operation.

Contains response data for the listByResourceGroup operation.

Contains response data for the listBySubscriptionNext operation.

Contains response data for the listBySubscription operation.

Defines values for DataSource.
KnownDataSource can be used interchangeably with DataSource, this enum contains the known values that the service supports.

Known values supported by the service

TwinData: Devices twin data

Contains response data for the create operation.

Contains response data for the get operation.

Defines values for DesiredOnboardingState.
KnownDesiredOnboardingState can be used interchangeably with DesiredOnboardingState, this enum contains the known values that the service supports.

Known values supported by the service

Disabled
Enabled

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the update operation.

Contains response data for the get operation.

Defines values for DevOpsProvisioningState.
KnownDevOpsProvisioningState can be used interchangeably with DevOpsProvisioningState, this enum contains the known values that the service supports.

Known values supported by the service

Succeeded
Failed
Canceled
Pending
PendingDeletion
DeletionSuccess
DeletionFailure

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for Direction.
KnownDirection can be used interchangeably with Direction, this enum contains the known values that the service supports.

Known values supported by the service

Inbound
Outbound

Contains response data for the get operation.

Contains response data for the listByHomeRegionNext operation.

Contains response data for the listByHomeRegion operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for EndOfSupportStatus.
KnownEndOfSupportStatus can be used interchangeably with EndOfSupportStatus, this enum contains the known values that the service supports.

Known values supported by the service

None
noLongerSupported
versionNoLongerSupported
upcomingNoLongerSupported
upcomingVersionNoLongerSupported

Defines values for Enforce.
KnownEnforce can be used interchangeably with Enforce, this enum contains the known values that the service supports.

Known values supported by the service

False: Allows the descendants of this scope to override the pricing configuration set on this scope (allows setting inherited="False")
True: Prevents overrides and forces the current scope's pricing configuration to all descendants

Defines values for EnforcementMode.
KnownEnforcementMode can be used interchangeably with EnforcementMode, this enum contains the known values that the service supports.

Known values supported by the service

Audit
Enforce
None

Defines values for EnforcementSupport.
KnownEnforcementSupport can be used interchangeably with EnforcementSupport, this enum contains the known values that the service supports.

Known values supported by the service

Supported
NotSupported
Unknown

Defines values for EnvironmentType.
KnownEnvironmentType can be used interchangeably with EnvironmentType, this enum contains the known values that the service supports.

Known values supported by the service

AwsAccount
GcpProject
GithubScope
AzureDevOpsScope
GitlabScope

Defines values for EventSource.
KnownEventSource can be used interchangeably with EventSource, this enum contains the known values that the service supports.

Known values supported by the service

Assessments
AssessmentsSnapshot
SubAssessments
SubAssessmentsSnapshot
Alerts
SecureScores
SecureScoresSnapshot
SecureScoreControls
SecureScoreControlsSnapshot
RegulatoryComplianceAssessment
RegulatoryComplianceAssessmentSnapshot
AttackPaths
AttackPathsSnapshot

Defines values for ExpandControlsEnum.
KnownExpandControlsEnum can be used interchangeably with ExpandControlsEnum, this enum contains the known values that the service supports.

Known values supported by the service

definition: Add definition object for each control

Defines values for ExpandEnum.
KnownExpandEnum can be used interchangeably with ExpandEnum, this enum contains the known values that the service supports.

Known values supported by the service

links: All links associated with an assessment
metadata: Assessment metadata

Defines values for ExportData.
KnownExportData can be used interchangeably with ExportData, this enum contains the known values that the service supports.

Known values supported by the service

RawEvents: Agent raw events

Defines values for ExternalSecuritySolutionKind.
KnownExternalSecuritySolutionKind can be used interchangeably with ExternalSecuritySolutionKind, this enum contains the known values that the service supports.

Known values supported by the service

CEF
ATA
AAD

Contains response data for the get operation.

Contains response data for the listByHomeRegionNext operation.

Contains response data for the listByHomeRegion operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for FileType.
KnownFileType can be used interchangeably with FileType, this enum contains the known values that the service supports.

Known values supported by the service

Exe
Dll
Msi
Script
Executable
Unknown

Contains response data for the getSensitivitySettings operation.

Contains response data for the get operation.

Contains response data for the listAvailable operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the listAvailable operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the list operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for GovernanceRuleConditionOperator.
KnownGovernanceRuleConditionOperator can be used interchangeably with GovernanceRuleConditionOperator, this enum contains the known values that the service supports.

Known values supported by the service

Equals: Checks that the string value of the data defined in Property equals the given value - exact fit
In: Checks that the string value of the data defined in Property equals any of the given values (exact fit)

Defines values for GovernanceRuleOwnerSourceType.
KnownGovernanceRuleOwnerSourceType can be used interchangeably with GovernanceRuleOwnerSourceType, this enum contains the known values that the service supports.

Known values supported by the service

ByTag: The rule source type defined using resource tag
Manually: The rule source type defined manually

Defines values for GovernanceRuleSourceResourceType.
KnownGovernanceRuleSourceResourceType can be used interchangeably with GovernanceRuleSourceResourceType, this enum contains the known values that the service supports.

Known values supported by the service

Assessments: The source of the governance rule is assessments

Defines values for GovernanceRuleType.
KnownGovernanceRuleType can be used interchangeably with GovernanceRuleType, this enum contains the known values that the service supports.

Known values supported by the service

Integrated: The source of the rule type definition is integrated
ServiceNow: The source of the rule type definition is ServiceNow

Contains response data for the createOrUpdate operation.

Contains response data for the execute operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the operationResults operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for HybridComputeProvisioningState.
KnownHybridComputeProvisioningState can be used interchangeably with HybridComputeProvisioningState, this enum contains the known values that the service supports.

Known values supported by the service

Valid: Valid service principal details.
Invalid: Invalid service principal details.
Expired: the service principal details are expired

Defines values for ImplementationEffort.
KnownImplementationEffort can be used interchangeably with ImplementationEffort, this enum contains the known values that the service supports.

Known values supported by the service

Low
Moderate
High

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for InformationProtectionPolicyName.
KnownInformationProtectionPolicyName can be used interchangeably with InformationProtectionPolicyName, this enum contains the known values that the service supports.

Known values supported by the service

effective
custom

Defines values for InheritFromParentState.
KnownInheritFromParentState can be used interchangeably with InheritFromParentState, this enum contains the known values that the service supports.

Known values supported by the service

Disabled
Enabled

Defines values for Inherited.
KnownInherited can be used interchangeably with Inherited, this enum contains the known values that the service supports.

Known values supported by the service

True: Indicates that the current scope is inheriting its pricing configuration from its parent
False: Indicates that the current scope sets its own pricing configuration and does not inherit it from its parent

Defines values for Intent.
KnownIntent can be used interchangeably with Intent, this enum contains the known values that the service supports.

Known values supported by the service

Unknown: Unknown
PreAttack: PreAttack could be either an attempt to access a certain resource regardless of a malicious intent, or a failed attempt to gain access to a target system to gather information prior to exploitation. This step is usually detected as an attempt, originating from outside the network, to scan the target system and find a way in. Further details on the PreAttack stage can be read in MITRE Pre-Att&ck matrix.
InitialAccess: InitialAccess is the stage where an attacker manages to get foothold on the attacked resource.
Persistence: Persistence is any access, action, or configuration change to a system that gives a threat actor a persistent presence on that system.
PrivilegeEscalation: Privilege escalation is the result of actions that allow an adversary to obtain a higher level of permissions on a system or network.
DefenseEvasion: Defense evasion consists of techniques an adversary may use to evade detection or avoid other defenses.
CredentialAccess: Credential access represents techniques resulting in access to or control over system, domain, or service credentials that are used within an enterprise environment.
Discovery: Discovery consists of techniques that allow the adversary to gain knowledge about the system and internal network.
LateralMovement: Lateral movement consists of techniques that enable an adversary to access and control remote systems on a network and could, but does not necessarily, include execution of tools on remote systems.
Execution: The execution tactic represents techniques that result in execution of adversary-controlled code on a local or remote system.
Collection: Collection consists of techniques used to identify and gather information, such as sensitive files, from a target network prior to exfiltration.
Exfiltration: Exfiltration refers to techniques and attributes that result or aid in the adversary removing files and information from a target network.
CommandAndControl: The command and control tactic represents how adversaries communicate with systems under their control within a target network.
Impact: Impact events primarily try to directly reduce the availability or integrity of a system, service, or network; including manipulation of data to impact a business or operational process.
Probing: Probing could be either an attempt to access a certain resource regardless of a malicious intent, or a failed attempt to gain access to a target system to gather information prior to exploitation.
Exploitation: Exploitation is the stage where an attacker manages to get a foothold on the attacked resource. This stage is relevant for compute hosts and resources such as user accounts, certificates etc.

Contains response data for the get operation.

Contains response data for the list operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listByResourceGroupNext operation.

Contains response data for the listByResourceGroup operation.

Contains response data for the listBySubscriptionNext operation.

Contains response data for the listBySubscription operation.

Contains response data for the update operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for IsEnabled.
KnownIsEnabled can be used interchangeably with IsEnabled, this enum contains the known values that the service supports.

Known values supported by the service

True: Indicates the extension is enabled
False: Indicates the extension is disabled

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the initiate operation.

Contains response data for the listByRegionNext operation.

Contains response data for the listByRegion operation.

Contains response data for the listByResourceGroupAndRegionNext operation.

Contains response data for the listByResourceGroupAndRegion operation.

Contains response data for the listByResourceGroupNext operation.

Contains response data for the listByResourceGroup operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for Kind.
KnownKind can be used interchangeably with Kind, this enum contains the known values that the service supports.

Known values supported by the service

Bundles: Simulate alerts according to bundles

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the list operation.

Defines values for MinimalRiskLevel.
KnownMinimalRiskLevel can be used interchangeably with MinimalRiskLevel, this enum contains the known values that the service supports.

Known values supported by the service

Critical: Get notifications on new attack paths with Critical risk level
High: Get notifications on new attack paths with High or Critical risk level
Medium: Get notifications on new attach paths with Medium, High or Critical risk level
Low: Get notifications on new attach paths with Low, Medium, High or Critical risk level

Defines values for MinimalSeverity.
KnownMinimalSeverity can be used interchangeably with MinimalSeverity, this enum contains the known values that the service supports.

Known values supported by the service

High: Get notifications on new alerts with High severity
Medium: Get notifications on new alerts with Medium or High severity
Low: Get notifications on new alerts with Low, Medium or High severity

Defines values for MipIntegrationStatus.
KnownMipIntegrationStatus can be used interchangeably with MipIntegrationStatus, this enum contains the known values that the service supports.

Known values supported by the service

Ok
noConsent
noAutoLabelingRules
noMipLabels

Defines values for OfferingType.
KnownOfferingType can be used interchangeably with OfferingType, this enum contains the known values that the service supports.

Known values supported by the service

CspmMonitorAws
DefenderForContainersAws
DefenderForServersAws
DefenderForDatabasesAws
InformationProtectionAws
CspmMonitorGcp
CspmMonitorGithub
CspmMonitorAzureDevOps
DefenderForServersGcp
DefenderForContainersGcp
DefenderForDatabasesGcp
DefenderCspmAws
DefenderCspmGcp
DefenderForDevOpsGithub
DefenderForDevOpsAzureDevOps
CspmMonitorGitLab
DefenderForDevOpsGitLab

Defines values for OnboardingState.
KnownOnboardingState can be used interchangeably with OnboardingState, this enum contains the known values that the service supports.

Known values supported by the service

NotApplicable
OnboardedByOtherConnector
Onboarded
NotOnboarded

Defines values for OperationResult.
KnownOperationResult can be used interchangeably with OperationResult, this enum contains the known values that the service supports.

Known values supported by the service

Succeeded: The operation succeeded
Failed: The operation failed
Canceled: The operation canceled

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for Operator.
KnownOperator can be used interchangeably with Operator, this enum contains the known values that the service supports.

Known values supported by the service

Equals: Applies for decimal and non-decimal operands
GreaterThan: Applies only for decimal operands
GreaterThanOrEqualTo: Applies only for decimal operands
LesserThan: Applies only for decimal operands
LesserThanOrEqualTo: Applies only for decimal operands
NotEquals: Applies for decimal and non-decimal operands
Contains: Applies only for non-decimal operands
StartsWith: Applies only for non-decimal operands
EndsWith: Applies only for non-decimal operands

Defines values for OrganizationMembershipType.
KnownOrganizationMembershipType can be used interchangeably with OrganizationMembershipType, this enum contains the known values that the service supports.

Known values supported by the service

Member
Organization

Defines values for PermissionProperty.
KnownPermissionProperty can be used interchangeably with PermissionProperty, this enum contains the known values that the service supports.

Known values supported by the service

AWS::AWSSecurityHubReadOnlyAccess: This permission provides read only access to AWS Security Hub resources.
AWS::SecurityAudit: This permission grants access to read security configuration metadata.
AWS::AmazonSSMAutomationRole: The permission provides for EC2 Automation service to execute activities defined within Automation documents.
GCP::Security Center Admin Viewer: This permission provides read only access to GCP Security Command Center.

Defines values for PricingTier.
KnownPricingTier can be used interchangeably with PricingTier, this enum contains the known values that the service supports.

Known values supported by the service

Free: Get free Microsoft Defender for Cloud experience with basic security features
Standard: Get the standard Microsoft Defender for Cloud experience with advanced security features

Contains response data for the get operation.

Contains response data for the list operation.

Contains response data for the update operation.

Defines values for PropertyType.
KnownPropertyType can be used interchangeably with PropertyType, this enum contains the known values that the service supports.

Known values supported by the service

String
Integer
Number
Boolean

Defines values for Protocol.
KnownProtocol can be used interchangeably with Protocol, this enum contains the known values that the service supports.

Known values supported by the service

TCP
UDP \

Defines values for ProvisioningState.
KnownProvisioningState can be used interchangeably with ProvisioningState, this enum contains the known values that the service supports.

Known values supported by the service

Succeeded
Failed
Updating

Defines values for Rank.

Defines values for RecommendationAction.
KnownRecommendationAction can be used interchangeably with RecommendationAction, this enum contains the known values that the service supports.

Known values supported by the service

Recommended
Add
Remove

Defines values for RecommendationConfigStatus.
KnownRecommendationConfigStatus can be used interchangeably with RecommendationConfigStatus, this enum contains the known values that the service supports.

Known values supported by the service

Disabled
Enabled

Defines values for RecommendationStatus.
KnownRecommendationStatus can be used interchangeably with RecommendationStatus, this enum contains the known values that the service supports.

Known values supported by the service

Recommended
NotRecommended
NotAvailable
NoStatus

Defines values for RecommendationType.
KnownRecommendationType can be used interchangeably with RecommendationType, this enum contains the known values that the service supports.

Known values supported by the service

IoT_ACRAuthentication: Authentication schema used for pull an edge module from an ACR repository does not use Service Principal Authentication.
IoT_AgentSendsUnutilizedMessages: IoT agent message size capacity is currently underutilized, causing an increase in the number of sent messages. Adjust message intervals for better utilization.
IoT_Baseline: Identified security related system configuration issues.
IoT_EdgeHubMemOptimize: You can optimize Edge Hub memory usage by turning off protocol heads for any protocols not used by Edge modules in your solution.
IoT_EdgeLoggingOptions: Logging is disabled for this edge module.
IoT_InconsistentModuleSettings: A minority within a device security group has inconsistent Edge Module settings with the rest of their group.
IoT_InstallAgent: Install the Azure Security of Things Agent.
IoT_IPFilter_DenyAll: IP Filter Configuration should have rules defined for allowed traffic and should deny all other traffic by default.
IoT_IPFilter_PermissiveRule: An Allow IP Filter rules source IP range is too large. Overly permissive rules might expose your IoT hub to malicious intenders.
IoT_OpenPorts: A listening endpoint was found on the device.
IoT_PermissiveFirewallPolicy: An Allowed firewall policy was found (INPUT/OUTPUT). The policy should Deny all traffic by default and define rules to allow necessary communication to/from the device.
IoT_PermissiveInputFirewallRules: A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports.
IoT_PermissiveOutputFirewallRules: A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports.
IoT_PrivilegedDockerOptions: Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send/receive data to host machine).
IoT_SharedCredentials: Same authentication credentials to the IoT Hub used by multiple devices. This could indicate an illegitimate device impersonating a legitimate device. It also exposes the risk of device impersonation by an attacker.
IoT_VulnerableTLSCipherSuite: Insecure TLS configurations detected. Immediate upgrade recommended.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for ReportedSeverity.
KnownReportedSeverity can be used interchangeably with ReportedSeverity, this enum contains the known values that the service supports.

Known values supported by the service

Informational
Low
Medium
High

Defines values for ResourceIdentifierType.
KnownResourceIdentifierType can be used interchangeably with ResourceIdentifierType, this enum contains the known values that the service supports.

Known values supported by the service

AzureResource
LogAnalytics

Defines values for ResourceStatus.
KnownResourceStatus can be used interchangeably with ResourceStatus, this enum contains the known values that the service supports.

Known values supported by the service

Healthy: This assessment on the resource is healthy
NotApplicable: This assessment is not applicable to this resource
OffByPolicy: This assessment is turned off by policy on this subscription
NotHealthy: This assessment on the resource is not healthy

Defines values for ResourcesCoverageStatus.
KnownResourcesCoverageStatus can be used interchangeably with ResourcesCoverageStatus, this enum contains the known values that the service supports.

Known values supported by the service

FullyCovered: This value indicates that all resources associated with the subscription have the Defender plan enabled.
PartiallyCovered: This value indicates that some resources under the subscription have the Defender plan enabled, while others have it disabled. There is a mixed coverage status among resources.
NotCovered: This value indicates that the Defender plan is disabled for all resources under the subscription. None of the resources are protected by the Defender plan.

Defines values for RuleCategory.
KnownRuleCategory can be used interchangeably with RuleCategory, this enum contains the known values that the service supports.

Known values supported by the service

Code
Artifacts
Dependencies
Secrets
IaC
Containers

Defines values for RuleSeverity.
KnownRuleSeverity can be used interchangeably with RuleSeverity, this enum contains the known values that the service supports.

Known values supported by the service

High: High
Medium: Medium
Low: Low
Informational: Informational
Obsolete: Obsolete

Defines values for RuleState.

Defines values for RuleStatus.
KnownRuleStatus can be used interchangeably with RuleStatus, this enum contains the known values that the service supports.

Known values supported by the service

NonFinding: NonFinding
Finding: Finding
InternalError: InternalError

Defines values for RuleType.
KnownRuleType can be used interchangeably with RuleType, this enum contains the known values that the service supports.

Known values supported by the service

Binary: Binary
BaselineExpected: BaselineExpected
PositiveList: PositiveList
NegativeList: NegativeList

Defines values for ScanState.
KnownScanState can be used interchangeably with ScanState, this enum contains the known values that the service supports.

Known values supported by the service

Failed: Failed
FailedToRun: FailedToRun
InProgress: InProgress
Passed: Passed

Defines values for ScanTriggerType.
KnownScanTriggerType can be used interchangeably with ScanTriggerType, this enum contains the known values that the service supports.

Known values supported by the service

OnDemand: OnDemand
Recurring: Recurring

Defines values for ScanningMode.
KnownScanningMode can be used interchangeably with ScanningMode, this enum contains the known values that the service supports.

Known values supported by the service

Default

Contains response data for the listBySubscriptionNext operation.

Contains response data for the listBySubscription operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the listBySecureScoreNext operation.

Contains response data for the listBySecureScore operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listByResourceGroupNext operation.

Contains response data for the listByResourceGroup operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the update operation.

Defines values for SecurityContactName.
KnownSecurityContactName can be used interchangeably with SecurityContactName, this enum contains the known values that the service supports.

Known values supported by the service

default: The single applicable name of the security contact object

Defines values for SecurityContactRole.
KnownSecurityContactRole can be used interchangeably with SecurityContactRole, this enum contains the known values that the service supports.

Known values supported by the service

AccountAdmin: If enabled, send notification on new alerts to the account admins
ServiceAdmin: If enabled, send notification on new alerts to the service admins
Owner: If enabled, send notification on new alerts to the subscription owners
Contributor: If enabled, send notification on new alerts to the subscription contributors

Contains response data for the create operation.

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Defines values for SecurityFamily.
KnownSecurityFamily can be used interchangeably with SecurityFamily, this enum contains the known values that the service supports.

Known values supported by the service

Waf
Ngfw
SaasWaf
Va

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the list operation.

Defines values for SecuritySolutionStatus.
KnownSecuritySolutionStatus can be used interchangeably with SecuritySolutionStatus, this enum contains the known values that the service supports.

Known values supported by the service

Enabled
Disabled

Contains response data for the get operation.

Contains response data for the listNext operation.

Contains response data for the list operation.

Contains response data for the listByHomeRegion operation.

Contains response data for the list operation.

Contains response data for the list operation.

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listByExtendedResource operation.

Defines values for ServerVulnerabilityAssessmentPropertiesProvisioningState.
KnownServerVulnerabilityAssessmentPropertiesProvisioningState can be used interchangeably with ServerVulnerabilityAssessmentPropertiesProvisioningState, this enum contains the known values that the service supports.

Known values supported by the service

Succeeded
Failed
Canceled
Provisioning
Deprovisioning

Defines values for ServerVulnerabilityAssessmentsAzureSettingSelectedProvider.
KnownServerVulnerabilityAssessmentsAzureSettingSelectedProvider can be used interchangeably with ServerVulnerabilityAssessmentsAzureSettingSelectedProvider, this enum contains the known values that the service supports.

Known values supported by the service

MdeTvm: Microsoft Defender for Endpoints threat and vulnerability management.

Defines values for ServerVulnerabilityAssessmentsSettingKind.
KnownServerVulnerabilityAssessmentsSettingKind can be used interchangeably with ServerVulnerabilityAssessmentsSettingKind, this enum contains the known values that the service supports.

Known values supported by the service

AzureServersSetting

Defines values for ServerVulnerabilityAssessmentsSettingKindName.
KnownServerVulnerabilityAssessmentsSettingKindName can be used interchangeably with ServerVulnerabilityAssessmentsSettingKindName, this enum contains the known values that the service supports.

Known values supported by the service

azureServersSetting

Contains response data for the createOrUpdate operation.

Contains response data for the get operation.

Contains response data for the listBySubscriptionNext operation.

Contains response data for the listBySubscription operation.

Defines values for SettingKind.
KnownSettingKind can be used interchangeably with SettingKind, this enum contains the known values that the service supports.

Known values supported by the service

DataExportSettings
AlertSuppressionSetting
AlertSyncSettings

Defines values for SettingName.
KnownSettingName can be used interchangeably with SettingName, this enum contains the known values that the service supports.

Known values supported by the service

current: Name of the Defender for Storage Settings name.