|
1490 | 1490 | "allOf": [ |
1491 | 1491 | { |
1492 | 1492 | "$ref": "#/definitions/ResourceWithEtag" |
1493 | | - }, |
1494 | | - { |
1495 | | - "$ref": "#/definitions/AlertRuleKind" |
1496 | 1493 | } |
1497 | 1494 | ], |
1498 | 1495 | "description": "Alert rule.", |
1499 | 1496 | "discriminator": "kind", |
1500 | 1497 | "required": [ |
1501 | 1498 | "kind" |
1502 | 1499 | ], |
| 1500 | + "properties": { |
| 1501 | + "$ref": "#/definitions/AlertRuleKind", |
| 1502 | + "description": "The Kind of the alert rule" |
| 1503 | + }, |
1503 | 1504 | "type": "object" |
1504 | 1505 | }, |
1505 | 1506 | "AlertRuleKind": { |
|
1539 | 1540 | "allOf": [ |
1540 | 1541 | { |
1541 | 1542 | "$ref": "#/definitions/Resource" |
1542 | | - }, |
1543 | | - { |
1544 | | - "$ref": "#/definitions/AlertRuleKind" |
1545 | 1543 | } |
1546 | 1544 | ], |
1547 | 1545 | "description": "Alert rule template.", |
1548 | 1546 | "discriminator": "kind", |
1549 | 1547 | "required": [ |
1550 | 1548 | "kind" |
1551 | 1549 | ], |
| 1550 | + "properties": { |
| 1551 | + "$ref": "#/definitions/AlertRuleKind", |
| 1552 | + "description": "The Kind of the alert rule" |
| 1553 | + }, |
1552 | 1554 | "type": "object" |
1553 | 1555 | }, |
1554 | 1556 | "AlertRuleTemplateDataSource": { |
|
1913 | 1915 | "type": "object" |
1914 | 1916 | }, |
1915 | 1917 | "CloudError": { |
1916 | | - "description": "Error response structure.", |
| 1918 | + "x-ms-external": true, |
1917 | 1919 | "properties": { |
1918 | 1920 | "error": { |
1919 | | - "$ref": "#/definitions/CloudErrorBody", |
1920 | | - "description": "Error data", |
1921 | | - "x-ms-client-flatten": true |
1922 | | - } |
1923 | | - }, |
1924 | | - "type": "object", |
1925 | | - "x-ms-external": true |
1926 | | - }, |
1927 | | - "CloudErrorBody": { |
1928 | | - "description": "Error details.", |
1929 | | - "properties": { |
1930 | | - "code": { |
1931 | | - "description": "An identifier for the error. Codes are invariant and are intended to be consumed programmatically.", |
1932 | | - "readOnly": true, |
1933 | | - "type": "string" |
1934 | | - }, |
1935 | | - "message": { |
1936 | | - "description": "A message describing the error, intended to be suitable for display in a user interface.", |
1937 | | - "readOnly": true, |
1938 | | - "type": "string" |
| 1921 | + "$ref": "../../../../../common-types/resource-management/v1/types.json#/definitions/ErrorResponse" |
1939 | 1922 | } |
1940 | 1923 | }, |
1941 | | - "type": "object", |
1942 | | - "x-ms-external": true |
| 1924 | + "description": "An error response for a resource management request." |
1943 | 1925 | }, |
1944 | 1926 | "DataConnector": { |
1945 | 1927 | "allOf": [ |
|
2138 | 2120 | "description": "Represents Fusion alert rule template.", |
2139 | 2121 | "properties": { |
2140 | 2122 | "properties": { |
2141 | | - "allOf": [ |
2142 | | - { |
2143 | | - "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
2144 | | - } |
2145 | | - ], |
| 2123 | + "$ref": "#/definitions/FusionAlertRuleTemplateProperties", |
2146 | 2124 | "description": "Fusion alert rule template properties", |
2147 | | - "properties": { |
2148 | | - "severity": { |
2149 | | - "$ref": "#/definitions/AlertSeverity", |
2150 | | - "description": "The severity for alerts created by this alert rule." |
2151 | | - }, |
2152 | | - "tactics": { |
2153 | | - "description": "The tactics of the alert rule template", |
2154 | | - "items": { |
2155 | | - "$ref": "#/definitions/AttackTactic" |
2156 | | - }, |
2157 | | - "type": "array" |
2158 | | - } |
2159 | | - }, |
2160 | 2125 | "required": [ |
2161 | 2126 | "displayName", |
2162 | 2127 | "description", |
|
2170 | 2135 | "type": "object", |
2171 | 2136 | "x-ms-discriminator-value": "Fusion" |
2172 | 2137 | }, |
| 2138 | + "FusionAlertRuleTemplateProperties": { |
| 2139 | + "allOf": [ |
| 2140 | + { |
| 2141 | + "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
| 2142 | + } |
| 2143 | + ], |
| 2144 | + "properties": { |
| 2145 | + "severity": { |
| 2146 | + "$ref": "#/definitions/AlertSeverity", |
| 2147 | + "description": "The severity for alerts created by this alert rule." |
| 2148 | + }, |
| 2149 | + "tactics": { |
| 2150 | + "description": "The tactics of the alert rule template", |
| 2151 | + "items": { |
| 2152 | + "$ref": "#/definitions/AttackTactic" |
| 2153 | + }, |
| 2154 | + "type": "array" |
| 2155 | + } |
| 2156 | + }, |
| 2157 | + }, |
2173 | 2158 | "Incident": { |
2174 | 2159 | "allOf": [ |
2175 | 2160 | { |
|
2763 | 2748 | "description": "Represents MicrosoftSecurityIncidentCreation rule template.", |
2764 | 2749 | "properties": { |
2765 | 2750 | "properties": { |
2766 | | - "allOf": [ |
2767 | | - { |
2768 | | - "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
2769 | | - }, |
2770 | | - { |
2771 | | - "$ref": "#/definitions/MicrosoftSecurityIncidentCreationAlertRuleCommonProperties" |
2772 | | - } |
2773 | | - ], |
| 2751 | + "$ref": "#/definitions/MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties", |
2774 | 2752 | "description": "MicrosoftSecurityIncidentCreation rule template properties", |
2775 | 2753 | "required": [ |
2776 | 2754 | "displayName", |
|
2786 | 2764 | "type": "object", |
2787 | 2765 | "x-ms-discriminator-value": "MicrosoftSecurityIncidentCreation" |
2788 | 2766 | }, |
| 2767 | + "MicrosoftSecurityIncidentCreationAlertRuleTemplateProperties": { |
| 2768 | + "allOf": [ |
| 2769 | + { |
| 2770 | + "$ref": "#/definitions/AlertRuleTemplatePropertiesBase" |
| 2771 | + } |
| 2772 | + ], |
| 2773 | + "properties": { |
| 2774 | + "$ref": "#/definitions/MicrosoftSecurityIncidentCreationAlertRuleCommonProperties", |
| 2775 | + "description": "MicrosoftSecurityIncidentCreation rule template common properties" |
| 2776 | + }, |
| 2777 | + "description": "MicrosoftSecurityIncidentCreation rule template properties" |
| 2778 | + } |
2789 | 2779 | "OfficeConsent": { |
2790 | 2780 | "allOf": [ |
2791 | 2781 | { |
|
0 commit comments