@@ -7318,6 +7318,8 @@ components:
7318
7318
CloudWorkloadSecurityAgentPolicyCreateAttributes:
7319
7319
description: Create a new Cloud Workload Security Agent policy
7320
7320
properties:
7321
+ actions:
7322
+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActions'
7321
7323
description:
7322
7324
description: The description of the policy
7323
7325
example: My agent policy
@@ -7399,6 +7401,8 @@ components:
7399
7401
CloudWorkloadSecurityAgentPolicyUpdateAttributes:
7400
7402
description: Update an existing Cloud Workload Security Agent policy
7401
7403
properties:
7404
+ actions:
7405
+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActions'
7402
7406
description:
7403
7407
description: The description of the policy
7404
7408
example: My agent policy
@@ -7469,6 +7473,50 @@ components:
7469
7473
type: string
7470
7474
kill:
7471
7475
$ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleKill'
7476
+ metadata:
7477
+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActionMetadata'
7478
+ set:
7479
+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActionSet'
7480
+ type: object
7481
+ CloudWorkloadSecurityAgentRuleActionMetadata:
7482
+ description: The metadata action applied on the scope matching the rule
7483
+ properties:
7484
+ image_tag:
7485
+ description: The image tag of the metadata action
7486
+ type: string
7487
+ service:
7488
+ description: The service of the metadata action
7489
+ type: string
7490
+ short_image:
7491
+ description: The short image of the metadata action
7492
+ type: string
7493
+ type: object
7494
+ CloudWorkloadSecurityAgentRuleActionSet:
7495
+ description: The set action applied on the scope matching the rule
7496
+ properties:
7497
+ append:
7498
+ description: Whether the value should be appended to the field
7499
+ type: boolean
7500
+ field:
7501
+ description: The field of the set action
7502
+ type: string
7503
+ name:
7504
+ description: The name of the set action
7505
+ type: string
7506
+ scope:
7507
+ description: The scope of the set action
7508
+ type: string
7509
+ size:
7510
+ description: The size of the set action
7511
+ format: int64
7512
+ type: integer
7513
+ ttl:
7514
+ description: The time to live of the set action
7515
+ format: int64
7516
+ type: integer
7517
+ value:
7518
+ description: The value of the set action
7519
+ type: string
7472
7520
type: object
7473
7521
CloudWorkloadSecurityAgentRuleActions:
7474
7522
description: The array of actions the rule can perform if triggered
@@ -7484,6 +7532,11 @@ components:
7484
7532
agentConstraint:
7485
7533
description: The version of the Agent
7486
7534
type: string
7535
+ blocking:
7536
+ description: The blocking policies that the rule belongs to
7537
+ items:
7538
+ type: string
7539
+ type: array
7487
7540
category:
7488
7541
description: The category of the Agent rule
7489
7542
example: Process Activity
@@ -7507,6 +7560,11 @@ components:
7507
7560
description: The description of the Agent rule
7508
7561
example: My Agent rule
7509
7562
type: string
7563
+ disabled:
7564
+ description: The disabled policies that the rule belongs to
7565
+ items:
7566
+ type: string
7567
+ type: array
7510
7568
enabled:
7511
7569
description: Whether the Agent rule is enabled
7512
7570
example: true
@@ -7520,6 +7578,11 @@ components:
7520
7578
items:
7521
7579
type: string
7522
7580
type: array
7581
+ monitoring:
7582
+ description: The monitoring policies that the rule belongs to
7583
+ items:
7584
+ type: string
7585
+ type: array
7523
7586
name:
7524
7587
description: The name of the Agent rule
7525
7588
example: my_agent_rule
@@ -7554,10 +7617,22 @@ components:
7554
7617
CloudWorkloadSecurityAgentRuleCreateAttributes:
7555
7618
description: Create a new Cloud Workload Security Agent rule.
7556
7619
properties:
7620
+ actions:
7621
+ $ref: '#/components/schemas/CloudWorkloadSecurityAgentRuleActions'
7622
+ blocking:
7623
+ description: The blocking policies that the rule belongs to
7624
+ items:
7625
+ type: string
7626
+ type: array
7557
7627
description:
7558
7628
description: The description of the Agent rule.
7559
7629
example: My Agent rule
7560
7630
type: string
7631
+ disabled:
7632
+ description: The disabled policies that the rule belongs to
7633
+ items:
7634
+ type: string
7635
+ type: array
7561
7636
enabled:
7562
7637
description: Whether the Agent rule is enabled
7563
7638
example: true
@@ -7571,6 +7646,11 @@ components:
7571
7646
items:
7572
7647
type: string
7573
7648
type: array
7649
+ monitoring:
7650
+ description: The monitoring policies that the rule belongs to
7651
+ items:
7652
+ type: string
7653
+ type: array
7574
7654
name:
7575
7655
description: The name of the Agent rule.
7576
7656
example: my_agent_rule
@@ -7661,10 +7741,20 @@ components:
7661
7741
CloudWorkloadSecurityAgentRuleUpdateAttributes:
7662
7742
description: Update an existing Cloud Workload Security Agent rule
7663
7743
properties:
7744
+ blocking:
7745
+ description: The blocking policies that the rule belongs to
7746
+ items:
7747
+ type: string
7748
+ type: array
7664
7749
description:
7665
7750
description: The description of the Agent rule
7666
7751
example: My Agent rule
7667
7752
type: string
7753
+ disabled:
7754
+ description: The disabled policies that the rule belongs to
7755
+ items:
7756
+ type: string
7757
+ type: array
7668
7758
enabled:
7669
7759
description: Whether the Agent rule is enabled
7670
7760
example: true
@@ -7673,6 +7763,11 @@ components:
7673
7763
description: The SECL expression of the Agent rule
7674
7764
example: exec.file.name == "sh"
7675
7765
type: string
7766
+ monitoring:
7767
+ description: The monitoring policies that the rule belongs to
7768
+ items:
7769
+ type: string
7770
+ type: array
7676
7771
policy_id:
7677
7772
description: The ID of the policy where the Agent rule is saved
7678
7773
example: a8c8e364-6556-434d-b798-a4c23de29c0b
0 commit comments