Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5vcGVyYXRpb25hbGluc2lnaHRzL3dvcmtzcGFjZXMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5zZWN1cml0eWluc2lnaHRzL2RhdGFjb25uZWN0b3Jz/2022-06-01-preview.xml

<?xml version='1.0' encoding='utf-8'?> <CodeGen plane="mgmt-plane"> <resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/dataconnectors" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvZGF0YUNvbm5lY3RvcnM=/V/MjAyMi0wNi0wMS1wcmV2aWV3"/> <commandGroup name="sentinel data-connector"> <command name="list" version="2022-06-01-preview"> <resource id="/subscriptions/{}/resourcegroups/{}/providers/microsoft.operationalinsights/workspaces/{}/providers/microsoft.securityinsights/dataconnectors" version="2022-06-01-preview" swagger="mgmt-plane/securityinsights/ResourceProviders/Microsoft.SecurityInsights/Paths/L3N1YnNjcmlwdGlvbnMve3N1YnNjcmlwdGlvbklkfS9yZXNvdXJjZUdyb3Vwcy97cmVzb3VyY2VHcm91cE5hbWV9L3Byb3ZpZGVycy9NaWNyb3NvZnQuT3BlcmF0aW9uYWxJbnNpZ2h0cy93b3Jrc3BhY2VzL3t3b3Jrc3BhY2VOYW1lfS9wcm92aWRlcnMvTWljcm9zb2Z0LlNlY3VyaXR5SW5zaWdodHMvZGF0YUNvbm5lY3RvcnM=/V/MjAyMi0wNi0wMS1wcmV2aWV3"/> <argGroup name=""> <arg type="ResourceGroupName" var="$Path.resourceGroupName" options="resource-group g" required="True"/> <arg type="SubscriptionId" var="$Path.subscriptionId" options="subscription" required="True"/> <arg type="string" var="$Path.workspaceName" options="workspace-name w" required="True" stage="Experimental"> <help short="The name of the workspace."/> <format maxLength="90" minLength="1"/> </arg> </argGroup> <operation operationId="DataConnectors_List"> <http path="/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/dataConnectors"> <request method="get"> <path> <param type="string" name="resourceGroupName" arg="$Path.resourceGroupName" required="True"> <format maxLength="90" minLength="1"/> </param> <param type="string" name="subscriptionId" arg="$Path.subscriptionId" required="True"> <format minLength="1"/> </param> <param type="string" name="workspaceName" arg="$Path.workspaceName" required="True"> <format maxLength="90" minLength="1"/> </param> </path> <query> <const readOnly="True" const="True" type="string" name="api-version" required="True"> <default value=""2022-06-01-preview""/> <format minLength="1"/> </const> </query> </request> <response statusCode="200"> <body> <json var="$Instance"> <schema type="object"> <prop readOnly="True" type="string" name="nextLink"/> <prop type="array<object>" name="value" required="True"> <item type="object"> <prop type="string" name="etag"/> <prop readOnly="True" type="ResourceId" name="id"> <format template="/subscriptions/{}/resourceGroups/{}/providers/Microsoft.OperationalInsights/workspaces/{}/providers/Microsoft.SecurityInsights/dataConnectors/{}"/> </prop> <prop type="string" name="kind" required="True"> <enum> <item value=""APIPolling""/> <item value=""AmazonWebServicesCloudTrail""/> <item value=""AmazonWebServicesS3""/> <item value=""AzureActiveDirectory""/> <item value=""AzureAdvancedThreatProtection""/> <item value=""AzureSecurityCenter""/> <item value=""Dynamics365""/> <item value=""GenericUI""/> <item value=""IOT""/> <item value=""MicrosoftCloudAppSecurity""/> <item value=""MicrosoftDefenderAdvancedThreatProtection""/> <item value=""MicrosoftThreatIntelligence""/> <item value=""MicrosoftThreatProtection""/> <item value=""Office365""/> <item value=""Office365Project""/> <item value=""OfficeATP""/> <item value=""OfficeIRM""/> <item value=""OfficePowerBI""/> <item value=""ThreatIntelligence""/> <item value=""ThreatIntelligenceTaxii""/> </enum> </prop> <prop readOnly="True" type="string" name="name"/> <prop readOnly="True" type="object" name="systemData"> <prop readOnly="True" type="dateTime" name="createdAt"/> <prop readOnly="True" type="string" name="createdBy"/> <prop readOnly="True" type="string" name="createdByType"> <enum> <item value=""Application""/> <item value=""Key""/> <item value=""ManagedIdentity""/> <item value=""User""/> </enum> </prop> <prop readOnly="True" type="dateTime" name="lastModifiedAt"/> <prop readOnly="True" type="string" name="lastModifiedBy"/> <prop readOnly="True" type="string" name="lastModifiedByType"> <enum> <item value=""Application""/> <item value=""Key""/> <item value=""ManagedIdentity""/> <item value=""User""/> </enum> </prop> </prop> <prop readOnly="True" type="string" name="type"/> <discriminator property="kind" value="APIPolling"> <prop type="object" name="properties" clientFlatten="True"> <prop type="@CodelessUiConnectorConfigProperties_read" name="connectorUiConfig"/> <prop type="object" name="pollingConfig"> <prop type="object" name="auth" required="True"> <prop type="string" name="apiKeyIdentifier"/> <prop type="string" name="apiKeyName"/> <prop type="string" name="authType" required="True"/> <prop type="string" name="authorizationEndpoint"/> <prop type="string" name="flowName"/> <prop type="string" name="isApiKeyInPostPayload"/> <prop type="boolean" name="isClientSecretInHeader"/> <prop type="string" name="redirectionEndpoint"/> <prop type="string" name="scope"/> <prop type="string" name="tokenEndpoint"/> </prop> <prop type="boolean" name="isActive"/> <prop type="object" name="paging"> <prop type="string" name="nextPageParaName"/> <prop type="string" name="nextPageTokenJsonPath"/> <prop type="string" name="pageCountAttributePath"/> <prop type="integer32" name="pageSize"/> <prop type="string" name="pageSizeParaName"/> <prop type="string" name="pageTimeStampAttributePath"/> <prop type="string" name="pageTotalCountAttributePath"/> <prop type="string" name="pagingType" required="True"/> <prop type="string" name="searchTheLatestTimeStampFromEventsList"/> </prop> <prop type="object" name="request" required="True"> <prop type="string" name="apiEndpoint" required="True"/> <prop type="string" name="endTimeAttributeName"/> <prop type="string" name="httpMethod" required="True"/> <prop type="string" name="queryParametersTemplate"/> <prop type="string" name="queryTimeFormat" required="True"/> <prop type="integer32" name="queryWindowInMin" required="True"/> <prop type="integer32" name="rateLimitQps"/> <prop type="integer32" name="retryCount"/> <prop type="string" name="startTimeAttributeName"/> <prop type="integer32" name="timeoutInSeconds"/> </prop> <prop type="object" name="response"> <prop type="array<string>" name="eventsJsonPaths" required="True"> <item type="string"/> </prop> <prop type="boolean" name="isGzipCompressed"/> <prop type="string" name="successStatusJsonPath"/> <prop type="string" name="successStatusValue"/> </prop> </prop> </prop> </discriminator> <discriminator property="kind" value="AmazonWebServicesCloudTrail"> <prop type="object" name="properties" clientFlatten="True"> <prop type="string" name="awsRoleArn"/> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="logs" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> </prop> </discriminator> <discriminator property="kind" value="AmazonWebServicesS3"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="logs" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="destinationTable" required="True"/> <prop type="string" name="roleArn" required="True"/> <prop type="array<string>" name="sqsUrls" required="True"> <item type="string"/> </prop> </prop> </discriminator> <discriminator property="kind" value="AzureActiveDirectory"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" cls="AlertsDataTypeOfDataConnector_read"> <prop type="object" name="alerts" required="True" cls="DataConnectorDataTypeCommon_read"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="AzureAdvancedThreatProtection"> <prop type="object" name="properties" clientFlatten="True"> <prop type="@AlertsDataTypeOfDataConnector_read" name="dataTypes"/> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="AzureSecurityCenter"> <prop type="object" name="properties" clientFlatten="True"> <prop type="@AlertsDataTypeOfDataConnector_read" name="dataTypes"/> <prop type="string" name="subscriptionId"/> </prop> </discriminator> <discriminator property="kind" value="Dynamics365"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="dynamics365CdsActivities" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="GenericUI"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="connectorUiConfig" cls="CodelessUiConnectorConfigProperties_read"> <prop type="object" name="availability" required="True"> <prop type="boolean" name="isPreview"/> <prop type="integer32" name="status"> <enum> <item value="1"/> </enum> </prop> </prop> <prop type="array<object>" name="connectivityCriteria" required="True"> <item type="object"> <prop type="string" name="type"> <enum> <item value=""IsConnectedQuery""/> </enum> </prop> <prop type="array<string>" name="value"> <item type="string"/> </prop> </item> </prop> <prop type="string" name="customImage"/> <prop type="array<object>" name="dataTypes" required="True"> <item type="object"> <prop type="string" name="lastDataReceivedQuery"/> <prop type="string" name="name"/> </item> </prop> <prop type="string" name="descriptionMarkdown" required="True"/> <prop type="array<object>" name="graphQueries" required="True"> <item type="object"> <prop type="string" name="baseQuery"/> <prop type="string" name="legend"/> <prop type="string" name="metricName"/> </item> </prop> <prop type="string" name="graphQueriesTableName" required="True"/> <prop type="array<object>" name="instructionSteps" required="True"> <item type="object"> <prop type="string" name="description"/> <prop type="array<object>" name="instructions"> <item type="object"> <prop type="string" name="type" required="True"> <enum> <item value=""CopyableLabel""/> <item value=""InfoMessage""/> <item value=""InstructionStepsGroup""/> </enum> </prop> </item> </prop> <prop type="string" name="title"/> </item> </prop> <prop type="object" name="permissions" required="True"> <prop type="array<object>" name="customs"> <item type="object"> <prop type="string" name="description"/> <prop type="string" name="name"/> </item> </prop> <prop type="array<object>" name="resourceProvider"> <item type="object"> <prop type="string" name="permissionsDisplayText"/> <prop type="string" name="provider"> <enum> <item value=""Microsoft.Authorization/policyAssignments""/> <item value=""Microsoft.OperationalInsights/solutions""/> <item value=""Microsoft.OperationalInsights/workspaces""/> <item value=""Microsoft.OperationalInsights/workspaces/datasources""/> <item value=""Microsoft.OperationalInsights/workspaces/sharedKeys""/> <item value=""microsoft.aadiam/diagnosticSettings""/> </enum> </prop> <prop type="string" name="providerDisplayName"/> <prop type="object" name="requiredPermissions"> <prop type="boolean" name="action"/> <prop type="boolean" name="delete"/> <prop type="boolean" name="read"/> <prop type="boolean" name="write"/> </prop> <prop type="string" name="scope"> <enum> <item value=""ResourceGroup""/> <item value=""Subscription""/> <item value=""Workspace""/> </enum> </prop> </item> </prop> </prop> <prop type="string" name="publisher" required="True"/> <prop type="array<object>" name="sampleQueries" required="True"> <item type="object"> <prop type="string" name="description"/> <prop type="string" name="query"/> </item> </prop> <prop type="string" name="title" required="True"/> </prop> </prop> </discriminator> <discriminator property="kind" value="IOT"> <prop type="object" name="properties" clientFlatten="True"> <prop type="@AlertsDataTypeOfDataConnector_read" name="dataTypes"/> <prop type="string" name="subscriptionId"/> </prop> </discriminator> <discriminator property="kind" value="MicrosoftCloudAppSecurity"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="@DataConnectorDataTypeCommon_read" name="alerts" required="True"/> <prop type="@DataConnectorDataTypeCommon_read" name="discoveryLogs"/> </prop> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="MicrosoftDefenderAdvancedThreatProtection"> <prop type="object" name="properties" clientFlatten="True"> <prop type="@AlertsDataTypeOfDataConnector_read" name="dataTypes"/> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="MicrosoftThreatIntelligence"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="bingSafetyPhishingURL" required="True"> <prop type="string" name="lookbackPeriod" required="True"/> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> <prop type="object" name="microsoftEmergingThreatFeed" required="True"> <prop type="string" name="lookbackPeriod" required="True"/> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="MicrosoftThreatProtection"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="incidents" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="Office365"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="exchange" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> <prop type="object" name="sharePoint" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> <prop type="object" name="teams" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="Office365Project"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="logs" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="OfficeATP"> <prop type="object" name="properties" clientFlatten="True"> <prop type="@AlertsDataTypeOfDataConnector_read" name="dataTypes"/> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="OfficeIRM"> <prop type="object" name="properties" clientFlatten="True"> <prop type="@AlertsDataTypeOfDataConnector_read" name="dataTypes"/> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="OfficePowerBI"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="logs" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="tenantId" required="True"/> </prop> </discriminator> <discriminator property="kind" value="ThreatIntelligence"> <prop type="object" name="properties" clientFlatten="True"> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="indicators" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="tenantId" required="True"/> <prop nullable="True" type="dateTime" name="tipLookbackPeriod"/> </prop> </discriminator> <discriminator property="kind" value="ThreatIntelligenceTaxii"> <prop type="object" name="properties" clientFlatten="True"> <prop type="string" name="collectionId"/> <prop type="object" name="dataTypes" required="True"> <prop type="object" name="taxiiClient" required="True"> <prop type="string" name="state" required="True"> <enum> <item value=""Disabled""/> <item value=""Enabled""/> </enum> </prop> </prop> </prop> <prop type="string" name="friendlyName"/> <prop type="string" name="password"/> <prop nullable="True" type="string" name="pollingFrequency" required="True"> <enum> <item value=""OnceADay""/> <item value=""OnceAMinute""/> <item value=""OnceAnHour""/> </enum> </prop> <prop nullable="True" type="dateTime" name="taxiiLookbackPeriod"/> <prop type="string" name="taxiiServer"/> <prop type="string" name="tenantId" required="True"/> <prop type="string" name="userName"/> <prop type="string" name="workspaceId"/> </prop> </discriminator> </item> </prop> </schema> </json> </body> </response> <response isError="True"> <body> <json> <schema type="@ODataV4Format"/> </json> </body> </response> </http> </operation> <output type="array" ref="$Instance.value" clientFlatten="True" nextLink="$Instance.nextLink"/> </command> </commandGroup> </CodeGen>

Resources/mgmt-plane/L3N1YnNjcmlwdGlvbnMve30vcmVzb3VyY2Vncm91cHMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5vcGVyYXRpb25hbGluc2lnaHRzL3dvcmtzcGFjZXMve30vcHJvdmlkZXJzL21pY3Jvc29mdC5zZWN1cml0eWluc2lnaHRzL2RhdGFjb25uZWN0b3Jz/2022-06-01-preview.xml (523 lines of code) (raw):