Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[SMD-491] - Introduce the detections methods and the new value rules options #1116

Merged
merged 9 commits into from
Jun 29, 2021

Conversation

adussarps
Copy link
Contributor

@adussarps adussarps commented Jun 21, 2021

This PR extend the current datadog provider for security rules.

It add support for the detection method "new_value"; as for the detection method fields.

It will be followed by other PRs making the provider up to date with the current state of the API.

@adussarps adussarps force-pushed the antoine.dussarps/sec_mon_provider_new_value_rules branch from be85de7 to 9f1facf Compare June 21, 2021 12:44
@adussarps adussarps force-pushed the antoine.dussarps/sec_mon_provider_new_value_rules branch from 9f1facf to c4441a1 Compare June 21, 2021 14:19
@adussarps adussarps force-pushed the antoine.dussarps/sec_mon_provider_new_value_rules branch from fd21ae7 to aa2246b Compare June 25, 2021 07:42
@adussarps adussarps force-pushed the antoine.dussarps/sec_mon_provider_new_value_rules branch from 22b3d8b to 7e54075 Compare June 25, 2021 10:13
@adussarps adussarps changed the title Introduce the detections methods and the new value rules options [SMD-491] - Introduce the detections methods and the new value rules options Jun 25, 2021
@adussarps adussarps marked this pull request as ready for review June 25, 2021 12:23
@adussarps adussarps requested a review from a team as a code owner June 25, 2021 12:23
@adussarps adussarps force-pushed the antoine.dussarps/sec_mon_provider_new_value_rules branch 2 times, most recently from d59d285 to ded55de Compare June 25, 2021 12:41
@adussarps adussarps force-pushed the antoine.dussarps/sec_mon_provider_new_value_rules branch from ded55de to ae4a752 Compare June 25, 2021 12:53
Copy link
Contributor

@greentruff greentruff left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@@ -108,6 +116,30 @@ func datadogSecurityMonitoringRuleSchema() map[string]*schema.Schema {
Required: true,
Description: "A signal will “close” regardless of the query being matched once the time exceeds the maximum duration. This time is calculated from the first seen timestamp.",
},

"new_value_options": {
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

new_value would make more sense imo since this is already inside of options

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hmm; agreed; but it's the same "string" in the json api; so like this we have a direct mapping; I think it will help avoiding confusions.

@adussarps adussarps requested a review from greentruff June 28, 2021 07:55
@zippolyte
Copy link
Contributor

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 1 pipeline(s).

@zippolyte zippolyte merged commit 239e47c into master Jun 29, 2021
@zippolyte zippolyte deleted the antoine.dussarps/sec_mon_provider_new_value_rules branch June 29, 2021 14:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants