azure-native.securityinsights.CustomizableConnectorDefinition

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;

return await Deployment.RunAsync(() => 
{
    var customizableConnectorDefinition = new AzureNative.SecurityInsights.CustomizableConnectorDefinition("customizableConnectorDefinition", new()
    {
        ConnectorUiConfig = new AzureNative.SecurityInsights.Inputs.CustomizableConnectorUiConfigArgs
        {
            Availability = new AzureNative.SecurityInsights.Inputs.ConnectorDefinitionsAvailabilityArgs
            {
                IsPreview = false,
                Status = 1,
            },
            ConnectivityCriteria = new[]
            {
                new AzureNative.SecurityInsights.Inputs.ConnectivityCriterionArgs
                {
                    Type = "IsConnectedQuery",
                    Value = new[]
                    {
                        @"GitHubAuditLogPolling_CL 
 | summarize LastLogReceived = max(TimeGenerated)
 | project IsConnected = LastLogReceived > ago(30d)",
                    },
                },
            },
            DataTypes = new[]
            {
                new AzureNative.SecurityInsights.Inputs.ConnectorDataTypeArgs
                {
                    LastDataReceivedQuery = @"GitHubAuditLogPolling_CL 
            | summarize Time = max(TimeGenerated)
            | where isnotempty(Time)",
                    Name = "GitHubAuditLogPolling_CL",
                },
            },
            DescriptionMarkdown = "The GitHub audit log connector provides the capability to ingest GitHub logs into Azure Sentinel. By connecting GitHub audit logs into Azure Sentinel, you can view this data in workbooks, use it to create custom alerts, and improve your investigation process.",
            GraphQueries = new[]
            {
                new AzureNative.SecurityInsights.Inputs.GraphQueryArgs
                {
                    BaseQuery = "GitHubAuditLogPolling_CL",
                    Legend = "GitHub audit log events",
                    MetricName = "Total events received",
                },
            },
            InstructionSteps = new[]
            {
                new AzureNative.SecurityInsights.Inputs.InstructionStepArgs
                {
                    Description = @"Enable GitHub audit Logs. 
 Follow [this](https://docs.github.com/en/github/authenticating-to-github/keeping-your-account-and-data-secure/creating-a-personal-access-token) to create or find your personal key",
                    Instructions = new[]
                    {
                        new AzureNative.SecurityInsights.Inputs.InstructionStepDetailsArgs
                        {
                            Parameters = new Dictionary<string, object?>
                            {
                                ["clientIdLabel"] = "Client ID",
                                ["clientSecretLabel"] = "Client Secret",
                                ["connectButtonLabel"] = "Connect",
                                ["disconnectButtonLabel"] = "Disconnect",
                            },
                            Type = "OAuthForm",
                        },
                    },
                    Title = "Connect GitHub Enterprise Audit Log to Azure Sentinel",
                },
            },
            Permissions = new AzureNative.SecurityInsights.Inputs.ConnectorDefinitionsPermissionsArgs
            {
                Customs = new[]
                {
                    new AzureNative.SecurityInsights.Inputs.CustomPermissionDetailsArgs
                    {
                        Description = "You need access to GitHub personal token, the key should have 'admin:org' scope",
                        Name = "GitHub API personal token Key",
                    },
                },
                ResourceProvider = new[]
                {
                    new AzureNative.SecurityInsights.Inputs.ConnectorDefinitionsResourceProviderArgs
                    {
                        PermissionsDisplayText = "read and write permissions are required.",
                        Provider = "Microsoft.OperationalInsights/workspaces",
                        ProviderDisplayName = "Workspace",
                        RequiredPermissions = new AzureNative.SecurityInsights.Inputs.ResourceProviderRequiredPermissionsArgs
                        {
                            Action = false,
                            Delete = false,
                            Read = false,
                            Write = true,
                        },
                        Scope = AzureNative.SecurityInsights.ProviderPermissionsScope.Workspace,
                    },
                },
            },
            Publisher = "GitHub",
            SampleQueries = new[]
            {
                new AzureNative.SecurityInsights.Inputs.SampleQueryArgs
                {
                    Description = "All logs",
                    Query = @"GitHubAuditLogPolling_CL 
 | take 10",
                },
            },
            Title = "GitHub Enterprise Audit Log",
        },
        DataConnectorDefinitionName = "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
        Kind = "Customizable",
        ResourceGroupName = "myRg",
        WorkspaceName = "myWorkspace",
    });

});

package main

import (
	"github.com/pulumi/pulumi-azure-native-sdk/securityinsights/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
pulumi.Run(func(ctx *pulumi.Context) error {
_, err := securityinsights.NewCustomizableConnectorDefinition(ctx, "customizableConnectorDefinition", &securityinsights.CustomizableConnectorDefinitionArgs{
ConnectorUiConfig: &securityinsights.CustomizableConnectorUiConfigArgs{
Availability: &securityinsights.ConnectorDefinitionsAvailabilityArgs{
IsPreview: pulumi.Bool(false),
Status: pulumi.Int(1),
},
ConnectivityCriteria: securityinsights.ConnectivityCriterionArray{
&securityinsights.ConnectivityCriterionArgs{
Type: pulumi.String("IsConnectedQuery"),
Value: pulumi.StringArray{
pulumi.String("GitHubAuditLogPolling_CL \n | summarize LastLogReceived = max(TimeGenerated)\n | project IsConnected = LastLogReceived > ago(30d)"),
},
},
},
DataTypes: securityinsights.ConnectorDataTypeArray{
&securityinsights.ConnectorDataTypeArgs{
LastDataReceivedQuery: pulumi.String("GitHubAuditLogPolling_CL \n            | summarize Time = max(TimeGenerated)\n            | where isnotempty(Time)"),
Name: pulumi.String("GitHubAuditLogPolling_CL"),
},
},
DescriptionMarkdown: pulumi.String("The GitHub audit log connector provides the capability to ingest GitHub logs into Azure Sentinel. By connecting GitHub audit logs into Azure Sentinel, you can view this data in workbooks, use it to create custom alerts, and improve your investigation process."),
GraphQueries: securityinsights.GraphQueryArray{
&securityinsights.GraphQueryArgs{
BaseQuery: pulumi.String("GitHubAuditLogPolling_CL"),
Legend: pulumi.String("GitHub audit log events"),
MetricName: pulumi.String("Total events received"),
},
},
InstructionSteps: []securityinsights.InstructionStepArgs{
{
Description: pulumi.String("Enable GitHub audit Logs. \n Follow [this](https://docs.github.com/en/github/authenticating-to-github/keeping-your-account-and-data-secure/creating-a-personal-access-token) to create or find your personal key"),
Instructions: securityinsights.InstructionStepDetailsArray{
{
Parameters: pulumi.Any({
"clientIdLabel": "Client ID",
"clientSecretLabel": "Client Secret",
"connectButtonLabel": "Connect",
"disconnectButtonLabel": "Disconnect",
}),
Type: pulumi.String("OAuthForm"),
},
},
Title: pulumi.String("Connect GitHub Enterprise Audit Log to Azure Sentinel"),
},
},
Permissions: &securityinsights.ConnectorDefinitionsPermissionsArgs{
Customs: securityinsights.CustomPermissionDetailsArray{
&securityinsights.CustomPermissionDetailsArgs{
Description: pulumi.String("You need access to GitHub personal token, the key should have 'admin:org' scope"),
Name: pulumi.String("GitHub API personal token Key"),
},
},
ResourceProvider: securityinsights.ConnectorDefinitionsResourceProviderArray{
&securityinsights.ConnectorDefinitionsResourceProviderArgs{
PermissionsDisplayText: pulumi.String("read and write permissions are required."),
Provider: pulumi.String("Microsoft.OperationalInsights/workspaces"),
ProviderDisplayName: pulumi.String("Workspace"),
RequiredPermissions: &securityinsights.ResourceProviderRequiredPermissionsArgs{
Action: pulumi.Bool(false),
Delete: pulumi.Bool(false),
Read: pulumi.Bool(false),
Write: pulumi.Bool(true),
},
Scope: pulumi.String(securityinsights.ProviderPermissionsScopeWorkspace),
},
},
},
Publisher: pulumi.String("GitHub"),
SampleQueries: securityinsights.SampleQueryArray{
&securityinsights.SampleQueryArgs{
Description: pulumi.String("All logs"),
Query: pulumi.String("GitHubAuditLogPolling_CL \n | take 10"),
},
},
Title: pulumi.String("GitHub Enterprise Audit Log"),
},
DataConnectorDefinitionName: pulumi.String("73e01a99-5cd7-4139-a149-9f2736ff2ab5"),
Kind: pulumi.String("Customizable"),
ResourceGroupName: pulumi.String("myRg"),
WorkspaceName: pulumi.String("myWorkspace"),
})
if err != nil {
return err
}
return nil
})
}

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.CustomizableConnectorDefinition;
import com.pulumi.azurenative.securityinsights.CustomizableConnectorDefinitionArgs;
import com.pulumi.azurenative.securityinsights.inputs.CustomizableConnectorUiConfigArgs;
import com.pulumi.azurenative.securityinsights.inputs.ConnectorDefinitionsAvailabilityArgs;
import com.pulumi.azurenative.securityinsights.inputs.ConnectorDefinitionsPermissionsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var customizableConnectorDefinition = new CustomizableConnectorDefinition("customizableConnectorDefinition", CustomizableConnectorDefinitionArgs.builder()        
            .connectorUiConfig(CustomizableConnectorUiConfigArgs.builder()
                .availability(ConnectorDefinitionsAvailabilityArgs.builder()
                    .isPreview(false)
                    .status(1)
                    .build())
                .connectivityCriteria(ConnectivityCriterionArgs.builder()
                    .type("IsConnectedQuery")
                    .value("""
GitHubAuditLogPolling_CL 
 | summarize LastLogReceived = max(TimeGenerated)
 | project IsConnected = LastLogReceived > ago(30d)                    """)
                    .build())
                .dataTypes(ConnectorDataTypeArgs.builder()
                    .lastDataReceivedQuery("""
GitHubAuditLogPolling_CL 
            | summarize Time = max(TimeGenerated)
            | where isnotempty(Time)                    """)
                    .name("GitHubAuditLogPolling_CL")
                    .build())
                .descriptionMarkdown("The GitHub audit log connector provides the capability to ingest GitHub logs into Azure Sentinel. By connecting GitHub audit logs into Azure Sentinel, you can view this data in workbooks, use it to create custom alerts, and improve your investigation process.")
                .graphQueries(GraphQueryArgs.builder()
                    .baseQuery("GitHubAuditLogPolling_CL")
                    .legend("GitHub audit log events")
                    .metricName("Total events received")
                    .build())
                .instructionSteps(InstructionStepArgs.builder()
                    .description("""
Enable GitHub audit Logs. 
 Follow [this](https://docs.github.com/en/github/authenticating-to-github/keeping-your-account-and-data-secure/creating-a-personal-access-token) to create or find your personal key                    """)
                    .instructions(InstructionStepDetailsArgs.builder()
                        .parameters(Map.ofEntries(
                            Map.entry("clientIdLabel", "Client ID"),
                            Map.entry("clientSecretLabel", "Client Secret"),
                            Map.entry("connectButtonLabel", "Connect"),
                            Map.entry("disconnectButtonLabel", "Disconnect")
                        ))
                        .type("OAuthForm")
                        .build())
                    .title("Connect GitHub Enterprise Audit Log to Azure Sentinel")
                    .build())
                .permissions(ConnectorDefinitionsPermissionsArgs.builder()
                    .customs(CustomPermissionDetailsArgs.builder()
                        .description("You need access to GitHub personal token, the key should have 'admin:org' scope")
                        .name("GitHub API personal token Key")
                        .build())
                    .resourceProvider(ConnectorDefinitionsResourceProviderArgs.builder()
                        .permissionsDisplayText("read and write permissions are required.")
                        .provider("Microsoft.OperationalInsights/workspaces")
                        .providerDisplayName("Workspace")
                        .requiredPermissions(ResourceProviderRequiredPermissionsArgs.builder()
                            .action(false)
                            .delete(false)
                            .read(false)
                            .write(true)
                            .build())
                        .scope("Workspace")
                        .build())
                    .build())
                .publisher("GitHub")
                .sampleQueries(SampleQueryArgs.builder()
                    .description("All logs")
                    .query("""
GitHubAuditLogPolling_CL 
 | take 10                    """)
                    .build())
                .title("GitHub Enterprise Audit Log")
                .build())
            .dataConnectorDefinitionName("73e01a99-5cd7-4139-a149-9f2736ff2ab5")
            .kind("Customizable")
            .resourceGroupName("myRg")
            .workspaceName("myWorkspace")
            .build());

    }
}

import pulumi
import pulumi_azure_native as azure_native

customizable_connector_definition = azure_native.securityinsights.CustomizableConnectorDefinition("customizableConnectorDefinition",
    connector_ui_config=azure_native.securityinsights.CustomizableConnectorUiConfigArgs(
        availability=azure_native.securityinsights.ConnectorDefinitionsAvailabilityArgs(
            is_preview=False,
            status=1,
        ),
        connectivity_criteria=[azure_native.securityinsights.ConnectivityCriterionArgs(
            type="IsConnectedQuery",
            value=["""GitHubAuditLogPolling_CL 
 | summarize LastLogReceived = max(TimeGenerated)
 | project IsConnected = LastLogReceived > ago(30d)"""],
        )],
        data_types=[azure_native.securityinsights.ConnectorDataTypeArgs(
            last_data_received_query="""GitHubAuditLogPolling_CL 
            | summarize Time = max(TimeGenerated)
            | where isnotempty(Time)""",
            name="GitHubAuditLogPolling_CL",
        )],
        description_markdown="The GitHub audit log connector provides the capability to ingest GitHub logs into Azure Sentinel. By connecting GitHub audit logs into Azure Sentinel, you can view this data in workbooks, use it to create custom alerts, and improve your investigation process.",
        graph_queries=[azure_native.securityinsights.GraphQueryArgs(
            base_query="GitHubAuditLogPolling_CL",
            legend="GitHub audit log events",
            metric_name="Total events received",
        )],
        instruction_steps=[azure_native.securityinsights.InstructionStepArgs(
            description="""Enable GitHub audit Logs. 
 Follow [this](https://docs.github.com/en/github/authenticating-to-github/keeping-your-account-and-data-secure/creating-a-personal-access-token) to create or find your personal key""",
            instructions=[azure_native.securityinsights.InstructionStepDetailsArgs(
                parameters={
                    "clientIdLabel": "Client ID",
                    "clientSecretLabel": "Client Secret",
                    "connectButtonLabel": "Connect",
                    "disconnectButtonLabel": "Disconnect",
                },
                type="OAuthForm",
            )],
            title="Connect GitHub Enterprise Audit Log to Azure Sentinel",
        )],
        permissions=azure_native.securityinsights.ConnectorDefinitionsPermissionsArgs(
            customs=[azure_native.securityinsights.CustomPermissionDetailsArgs(
                description="You need access to GitHub personal token, the key should have 'admin:org' scope",
                name="GitHub API personal token Key",
            )],
            resource_provider=[azure_native.securityinsights.ConnectorDefinitionsResourceProviderArgs(
                permissions_display_text="read and write permissions are required.",
                provider="Microsoft.OperationalInsights/workspaces",
                provider_display_name="Workspace",
                required_permissions=azure_native.securityinsights.ResourceProviderRequiredPermissionsArgs(
                    action=False,
                    delete=False,
                    read=False,
                    write=True,
                ),
                scope=azure_native.securityinsights.ProviderPermissionsScope.WORKSPACE,
            )],
        ),
        publisher="GitHub",
        sample_queries=[azure_native.securityinsights.SampleQueryArgs(
            description="All logs",
            query="""GitHubAuditLogPolling_CL 
 | take 10""",
        )],
        title="GitHub Enterprise Audit Log",
    ),
    data_connector_definition_name="73e01a99-5cd7-4139-a149-9f2736ff2ab5",
    kind="Customizable",
    resource_group_name="myRg",
    workspace_name="myWorkspace")

import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";

const customizableConnectorDefinition = new azure_native.securityinsights.CustomizableConnectorDefinition("customizableConnectorDefinition", {
    connectorUiConfig: {
        availability: {
            isPreview: false,
            status: 1,
        },
        connectivityCriteria: [{
            type: "IsConnectedQuery",
            value: [`GitHubAuditLogPolling_CL 
 | summarize LastLogReceived = max(TimeGenerated)
 | project IsConnected = LastLogReceived > ago(30d)`],
        }],
        dataTypes: [{
            lastDataReceivedQuery: `GitHubAuditLogPolling_CL 
            | summarize Time = max(TimeGenerated)
            | where isnotempty(Time)`,
            name: "GitHubAuditLogPolling_CL",
        }],
        descriptionMarkdown: "The GitHub audit log connector provides the capability to ingest GitHub logs into Azure Sentinel. By connecting GitHub audit logs into Azure Sentinel, you can view this data in workbooks, use it to create custom alerts, and improve your investigation process.",
        graphQueries: [{
            baseQuery: "GitHubAuditLogPolling_CL",
            legend: "GitHub audit log events",
            metricName: "Total events received",
        }],
        instructionSteps: [{
            description: `Enable GitHub audit Logs. 
 Follow [this](https://docs.github.com/en/github/authenticating-to-github/keeping-your-account-and-data-secure/creating-a-personal-access-token) to create or find your personal key`,
            instructions: [{
                parameters: {
                    clientIdLabel: "Client ID",
                    clientSecretLabel: "Client Secret",
                    connectButtonLabel: "Connect",
                    disconnectButtonLabel: "Disconnect",
                },
                type: "OAuthForm",
            }],
            title: "Connect GitHub Enterprise Audit Log to Azure Sentinel",
        }],
        permissions: {
            customs: [{
                description: "You need access to GitHub personal token, the key should have 'admin:org' scope",
                name: "GitHub API personal token Key",
            }],
            resourceProvider: [{
                permissionsDisplayText: "read and write permissions are required.",
                provider: "Microsoft.OperationalInsights/workspaces",
                providerDisplayName: "Workspace",
                requiredPermissions: {
                    action: false,
                    "delete": false,
                    read: false,
                    write: true,
                },
                scope: azure_native.securityinsights.ProviderPermissionsScope.Workspace,
            }],
        },
        publisher: "GitHub",
        sampleQueries: [{
            description: "All logs",
            query: `GitHubAuditLogPolling_CL 
 | take 10`,
        }],
        title: "GitHub Enterprise Audit Log",
    },
    dataConnectorDefinitionName: "73e01a99-5cd7-4139-a149-9f2736ff2ab5",
    kind: "Customizable",
    resourceGroupName: "myRg",
    workspaceName: "myWorkspace",
});

resources:
  customizableConnectorDefinition:
    type: azure-native:securityinsights:CustomizableConnectorDefinition
    properties:
      connectorUiConfig:
        availability:
          isPreview: false
          status: 1
        connectivityCriteria:
          - type: IsConnectedQuery
            value:
              - "GitHubAuditLogPolling_CL \n | summarize LastLogReceived = max(TimeGenerated)\n | project IsConnected = LastLogReceived > ago(30d)"
        dataTypes:
          - lastDataReceivedQuery: "GitHubAuditLogPolling_CL \n            | summarize Time = max(TimeGenerated)\n            | where isnotempty(Time)"
            name: GitHubAuditLogPolling_CL
        descriptionMarkdown: The GitHub audit log connector provides the capability to ingest GitHub logs into Azure Sentinel. By connecting GitHub audit logs into Azure Sentinel, you can view this data in workbooks, use it to create custom alerts, and improve your investigation process.
        graphQueries:
          - baseQuery: GitHubAuditLogPolling_CL
            legend: GitHub audit log events
            metricName: Total events received
        instructionSteps:
          - description: "Enable GitHub audit Logs. \n Follow [this](https://docs.github.com/en/github/authenticating-to-github/keeping-your-account-and-data-secure/creating-a-personal-access-token) to create or find your personal key"
            instructions:
              - parameters:
                  clientIdLabel: Client ID
                  clientSecretLabel: Client Secret
                  connectButtonLabel: Connect
                  disconnectButtonLabel: Disconnect
                type: OAuthForm
            title: Connect GitHub Enterprise Audit Log to Azure Sentinel
        permissions:
          customs:
            - description: You need access to GitHub personal token, the key should have 'admin:org' scope
              name: GitHub API personal token Key
          resourceProvider:
            - permissionsDisplayText: read and write permissions are required.
              provider: Microsoft.OperationalInsights/workspaces
              providerDisplayName: Workspace
              requiredPermissions:
                action: false
                delete: false
                read: false
                write: true
              scope: Workspace
        publisher: GitHub
        sampleQueries:
          - description: All logs
            query: "GitHubAuditLogPolling_CL \n | take 10"
        title: GitHub Enterprise Audit Log
      dataConnectorDefinitionName: 73e01a99-5cd7-4139-a149-9f2736ff2ab5
      kind: Customizable
      resourceGroupName: myRg
      workspaceName: myWorkspace