azurerm_sentinel_alert_rule_ms_security_incident.md

azurerm_sentinel_alert_rule_ms_security_incident

back

Index

• Example Usage
• Variables
• Resource
• Outputs

Terraform

terraform {
  required_providers {
    azurerm = ">= 2.54.0"
  }
}

top

Example Usage

module "azurerm_sentinel_alert_rule_ms_security_incident" {
  source = "./modules/azurerm/r/azurerm_sentinel_alert_rule_ms_security_incident"

  # alert_rule_template_guid - (optional) is a type of string
  alert_rule_template_guid = null
  # description - (optional) is a type of string
  description = null
  # display_name - (required) is a type of string
  display_name = null
  # display_name_exclude_filter - (optional) is a type of set of string
  display_name_exclude_filter = []
  # display_name_filter - (optional) is a type of set of string
  display_name_filter = []
  # enabled - (optional) is a type of bool
  enabled = null
  # log_analytics_workspace_id - (required) is a type of string
  log_analytics_workspace_id = null
  # name - (required) is a type of string
  name = null
  # product_filter - (required) is a type of string
  product_filter = null
  # severity_filter - (required) is a type of set of string
  severity_filter = []
  # text_whitelist - (optional) is a type of set of string
  text_whitelist = []

  timeouts = [{
    create = null
    delete = null
    read   = null
    update = null
  }]
}

top

Variables

variable "alert_rule_template_guid" {
  description = "(optional)"
  type        = string
  default     = null
}

variable "description" {
  description = "(optional)"
  type        = string
  default     = null
}

variable "display_name" {
  description = "(required)"
  type        = string
}

variable "display_name_exclude_filter" {
  description = "(optional)"
  type        = set(string)
  default     = null
}

variable "display_name_filter" {
  description = "(optional)"
  type        = set(string)
  default     = null
}

variable "enabled" {
  description = "(optional)"
  type        = bool
  default     = null
}

variable "log_analytics_workspace_id" {
  description = "(required)"
  type        = string
}

variable "name" {
  description = "(required)"
  type        = string
}

variable "product_filter" {
  description = "(required)"
  type        = string
}

variable "severity_filter" {
  description = "(required)"
  type        = set(string)
}

variable "text_whitelist" {
  description = "(optional)"
  type        = set(string)
  default     = null
}

variable "timeouts" {
  description = "nested block: NestingSingle, min items: 0, max items: 0"
  type = set(object(
    {
      create = string
      delete = string
      read   = string
      update = string
    }
  ))
  default = []
}

top

Resource

resource "azurerm_sentinel_alert_rule_ms_security_incident" "this" {
  # alert_rule_template_guid - (optional) is a type of string
  alert_rule_template_guid = var.alert_rule_template_guid
  # description - (optional) is a type of string
  description = var.description
  # display_name - (required) is a type of string
  display_name = var.display_name
  # display_name_exclude_filter - (optional) is a type of set of string
  display_name_exclude_filter = var.display_name_exclude_filter
  # display_name_filter - (optional) is a type of set of string
  display_name_filter = var.display_name_filter
  # enabled - (optional) is a type of bool
  enabled = var.enabled
  # log_analytics_workspace_id - (required) is a type of string
  log_analytics_workspace_id = var.log_analytics_workspace_id
  # name - (required) is a type of string
  name = var.name
  # product_filter - (required) is a type of string
  product_filter = var.product_filter
  # severity_filter - (required) is a type of set of string
  severity_filter = var.severity_filter
  # text_whitelist - (optional) is a type of set of string
  text_whitelist = var.text_whitelist

  dynamic "timeouts" {
    for_each = var.timeouts
    content {
      # create - (optional) is a type of string
      create = timeouts.value["create"]
      # delete - (optional) is a type of string
      delete = timeouts.value["delete"]
      # read - (optional) is a type of string
      read = timeouts.value["read"]
      # update - (optional) is a type of string
      update = timeouts.value["update"]
    }
  }

}

top

Outputs

output "display_name_filter" {
  description = "returns a set of string"
  value       = azurerm_sentinel_alert_rule_ms_security_incident.this.display_name_filter
}

output "id" {
  description = "returns a string"
  value       = azurerm_sentinel_alert_rule_ms_security_incident.this.id
}

output "text_whitelist" {
  description = "returns a set of string"
  value       = azurerm_sentinel_alert_rule_ms_security_incident.this.text_whitelist
}

output "this" {
  value = azurerm_sentinel_alert_rule_ms_security_incident.this
}

top