Document Cloud SIEM Growth and Content owned endpoints

examples/v2/security-monitoring/BulkCreateSampleLogGenerationSubscriptions.py

@@ -0,0 +1,39 @@
+"""
+Bulk subscribe to sample log generation returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.sample_log_generation_bulk_subscription_attributes import (
+    SampleLogGenerationBulkSubscriptionAttributes,
+)
+from datadog_api_client.v2.model.sample_log_generation_bulk_subscription_data import (
+    SampleLogGenerationBulkSubscriptionData,
+)
+from datadog_api_client.v2.model.sample_log_generation_bulk_subscription_request import (
+    SampleLogGenerationBulkSubscriptionRequest,
+)
+from datadog_api_client.v2.model.sample_log_generation_bulk_subscription_request_type import (
+    SampleLogGenerationBulkSubscriptionRequestType,
+)
+from datadog_api_client.v2.model.sample_log_generation_duration import SampleLogGenerationDuration
+
+body = SampleLogGenerationBulkSubscriptionRequest(
+    data=SampleLogGenerationBulkSubscriptionData(
+        attributes=SampleLogGenerationBulkSubscriptionAttributes(
+            content_pack_ids=[
+                "aws-cloudtrail",
+            ],
+            duration=SampleLogGenerationDuration.THREE_DAYS,
+        ),
+        type=SampleLogGenerationBulkSubscriptionRequestType.BULK_SUBSCRIPTION_REQUESTS,
+    ),
+)
+
+configuration = Configuration()
+configuration.unstable_operations["bulk_create_sample_log_generation_subscriptions"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.bulk_create_sample_log_generation_subscriptions(body=body)
+
+    print(response)

examples/v2/security-monitoring/CreateSampleLogGenerationSubscription.py

@@ -0,0 +1,37 @@
+"""
+Subscribe to sample log generation returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.sample_log_generation_duration import SampleLogGenerationDuration
+from datadog_api_client.v2.model.sample_log_generation_subscription_create_attributes import (
+    SampleLogGenerationSubscriptionCreateAttributes,
+)
+from datadog_api_client.v2.model.sample_log_generation_subscription_create_data import (
+    SampleLogGenerationSubscriptionCreateData,
+)
+from datadog_api_client.v2.model.sample_log_generation_subscription_create_request import (
+    SampleLogGenerationSubscriptionCreateRequest,
+)
+from datadog_api_client.v2.model.sample_log_generation_subscription_request_type import (
+    SampleLogGenerationSubscriptionRequestType,
+)
+
+body = SampleLogGenerationSubscriptionCreateRequest(
+    data=SampleLogGenerationSubscriptionCreateData(
+        attributes=SampleLogGenerationSubscriptionCreateAttributes(
+            content_pack_id="aws-cloudtrail",
+            duration=SampleLogGenerationDuration.THREE_DAYS,
+        ),
+        type=SampleLogGenerationSubscriptionRequestType.SUBSCRIPTION_REQUESTS,
+    ),
+)
+
+configuration = Configuration()
+configuration.unstable_operations["create_sample_log_generation_subscription"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.create_sample_log_generation_subscription(body=body)
+
+    print(response)

examples/v2/security-monitoring/CreateSecurityMonitoringIntegrationConfig.py

@@ -0,0 +1,46 @@
+"""
+Create an entity context sync configuration returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_integration_config_create_attributes import (
+    SecurityMonitoringIntegrationConfigCreateAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_create_data import (
+    SecurityMonitoringIntegrationConfigCreateData,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_create_request import (
+    SecurityMonitoringIntegrationConfigCreateRequest,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_resource_type import (
+    SecurityMonitoringIntegrationConfigResourceType,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_secrets import (
+    SecurityMonitoringIntegrationConfigSecrets,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_settings import (
+    SecurityMonitoringIntegrationConfigSettings,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_type import SecurityMonitoringIntegrationType
+
+body = SecurityMonitoringIntegrationConfigCreateRequest(
+    data=SecurityMonitoringIntegrationConfigCreateData(
+        attributes=SecurityMonitoringIntegrationConfigCreateAttributes(
+            domain="siem-test.com",
+            integration_type=SecurityMonitoringIntegrationType.GOOGLE_WORKSPACE,
+            name="My GWS Integration",
+            secrets=SecurityMonitoringIntegrationConfigSecrets([("admin_email", "test@example.com")]),
+            settings=SecurityMonitoringIntegrationConfigSettings([("setting1", "value1")]),
+        ),
+        type=SecurityMonitoringIntegrationConfigResourceType.INTEGRATION_CONFIG,
+    ),
+)
+
+configuration = Configuration()
+configuration.unstable_operations["create_security_monitoring_integration_config"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.create_security_monitoring_integration_config(body=body)
+
+    print(response)

examples/v2/security-monitoring/DeleteSampleLogGenerationSubscription.py

@@ -0,0 +1,16 @@
+"""
+Unsubscribe from sample log generation returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["delete_sample_log_generation_subscription"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.delete_sample_log_generation_subscription(
+        content_pack_id="content_pack_id",
+    )
+
+    print(response)

examples/v2/security-monitoring/DeleteSecurityMonitoringIntegrationConfig.py

@@ -0,0 +1,14 @@
+"""
+Delete an entity context sync configuration returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["delete_security_monitoring_integration_config"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    api_instance.delete_security_monitoring_integration_config(
+        integration_config_id="integration_config_id",
+    )

examples/v2/security-monitoring/GetEntityContext.py

@@ -0,0 +1,14 @@
+"""
+Get entity context returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["get_entity_context"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.get_entity_context()
+
+    print(response)

examples/v2/security-monitoring/GetSecurityMonitoringIntegrationConfig.py

@@ -0,0 +1,16 @@
+"""
+Get an entity context sync configuration returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["get_security_monitoring_integration_config"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.get_security_monitoring_integration_config(
+        integration_config_id="integration_config_id",
+    )
+
+    print(response)

examples/v2/security-monitoring/GetSignalEntities.py

@@ -0,0 +1,16 @@
+"""
+Get entities related to a signal returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["get_signal_entities"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.get_signal_entities(
+        signal_id="signal_id",
+    )
+
+    print(response)

examples/v2/security-monitoring/ListSampleLogGenerationSubscriptions.py

@@ -0,0 +1,14 @@
+"""
+Get sample log generation subscriptions returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["list_sample_log_generation_subscriptions"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.list_sample_log_generation_subscriptions()
+
+    print(response)

examples/v2/security-monitoring/ListSecurityFilterVersions.py

@@ -0,0 +1,13 @@
+"""
+Get the version history of security filters returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.list_security_filter_versions()
+
+    print(response)

examples/v2/security-monitoring/ListSecurityMonitoringIntegrationConfigs.py

@@ -0,0 +1,14 @@
+"""
+List entity context sync configurations returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["list_security_monitoring_integration_configs"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.list_security_monitoring_integration_configs()
+
+    print(response)

examples/v2/security-monitoring/UpdateSecurityMonitoringIntegrationConfig.py

@@ -0,0 +1,49 @@
+"""
+Update an entity context sync configuration returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_integration_config_resource_type import (
+    SecurityMonitoringIntegrationConfigResourceType,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_secrets import (
+    SecurityMonitoringIntegrationConfigSecrets,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_settings import (
+    SecurityMonitoringIntegrationConfigSettings,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_update_attributes import (
+    SecurityMonitoringIntegrationConfigUpdateAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_update_data import (
+    SecurityMonitoringIntegrationConfigUpdateData,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_update_request import (
+    SecurityMonitoringIntegrationConfigUpdateRequest,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_type import SecurityMonitoringIntegrationType
+
+body = SecurityMonitoringIntegrationConfigUpdateRequest(
+    data=SecurityMonitoringIntegrationConfigUpdateData(
+        attributes=SecurityMonitoringIntegrationConfigUpdateAttributes(
+            domain="siem-test.com",
+            enabled=True,
+            integration_type=SecurityMonitoringIntegrationType.GOOGLE_WORKSPACE,
+            name="My GWS Integration (renamed)",
+            secrets=SecurityMonitoringIntegrationConfigSecrets([("admin_email", "test@example.com")]),
+            settings=SecurityMonitoringIntegrationConfigSettings([("setting1", "value1")]),
+        ),
+        type=SecurityMonitoringIntegrationConfigResourceType.INTEGRATION_CONFIG,
+    ),
+)
+
+configuration = Configuration()
+configuration.unstable_operations["update_security_monitoring_integration_config"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    response = api_instance.update_security_monitoring_integration_config(
+        integration_config_id="integration_config_id", body=body
+    )
+
+    print(response)

examples/v2/security-monitoring/ValidateSecurityMonitoringIntegrationConfig.py

@@ -0,0 +1,14 @@
+"""
+Validate an entity context sync configuration returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+
+configuration = Configuration()
+configuration.unstable_operations["validate_security_monitoring_integration_config"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    api_instance.validate_security_monitoring_integration_config(
+        integration_config_id="integration_config_id",
+    )

examples/v2/security-monitoring/ValidateSecurityMonitoringIntegrationCredentials.py

@@ -0,0 +1,39 @@
+"""
+Validate entity context sync credentials returns "OK" response
+"""
+
+from datadog_api_client import ApiClient, Configuration
+from datadog_api_client.v2.api.security_monitoring_api import SecurityMonitoringApi
+from datadog_api_client.v2.model.security_monitoring_integration_config_resource_type import (
+    SecurityMonitoringIntegrationConfigResourceType,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_config_secrets import (
+    SecurityMonitoringIntegrationConfigSecrets,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_credentials_validate_attributes import (
+    SecurityMonitoringIntegrationCredentialsValidateAttributes,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_credentials_validate_data import (
+    SecurityMonitoringIntegrationCredentialsValidateData,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_credentials_validate_request import (
+    SecurityMonitoringIntegrationCredentialsValidateRequest,
+)
+from datadog_api_client.v2.model.security_monitoring_integration_type import SecurityMonitoringIntegrationType
+
+body = SecurityMonitoringIntegrationCredentialsValidateRequest(
+    data=SecurityMonitoringIntegrationCredentialsValidateData(
+        attributes=SecurityMonitoringIntegrationCredentialsValidateAttributes(
+            domain="siem-test.com",
+            integration_type=SecurityMonitoringIntegrationType.GOOGLE_WORKSPACE,
+            secrets=SecurityMonitoringIntegrationConfigSecrets([("admin_email", "test@example.com")]),
+        ),
+        type=SecurityMonitoringIntegrationConfigResourceType.INTEGRATION_CONFIG,
+    ),
+)
+
+configuration = Configuration()
+configuration.unstable_operations["validate_security_monitoring_integration_credentials"] = True
+with ApiClient(configuration) as api_client:
+    api_instance = SecurityMonitoringApi(api_client)
+    api_instance.validate_security_monitoring_integration_credentials(body=body)