import * as pulumi from "@pulumi/pulumi"; /** * Provides a Datadog Security Monitoring Critical Asset resource. It can be used to create and manage critical assets which modify the severity of a signal. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as datadog from "@pulumi/datadog"; * * const myCriticalAsset = new datadog.SecurityMonitoringCriticalAsset("my_critical_asset", { * enabled: true, * query: "source:runtime-security-agent", * ruleQuery: "type:(log_detection OR signal_correlation OR workload_security OR application_security) ruleId:007-d1a-1f3", * severity: "increase", * tags: [ * "env:production", * "team:security", * ], * }); * ``` * * ## Import * * The `pulumi import` command can be used, for example: * * ```sh * $ pulumi import datadog:index/securityMonitoringCriticalAsset:SecurityMonitoringCriticalAsset my_critical_asset "1dab677c-5eb4-4ac8-b1d3-444bf0117e19" * ``` */ export declare class SecurityMonitoringCriticalAsset extends pulumi.CustomResource { /** * Get an existing SecurityMonitoringCriticalAsset resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: SecurityMonitoringCriticalAssetState, opts?: pulumi.CustomResourceOptions): SecurityMonitoringCriticalAsset; /** * Returns true if the given object is an instance of SecurityMonitoringCriticalAsset. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is SecurityMonitoringCriticalAsset; /** * Whether the critical asset is enabled. Defaults to `true`. */ readonly enabled: pulumi.Output; /** * The query used to match a critical asset and the associated signals. Uses the same syntax as the search bar in the Security Signals Explorer. */ readonly query: pulumi.Output; /** * The rule query to filter which detection rules this critical asset applies to. Uses the same syntax as the search bar for detection rules. */ readonly ruleQuery: pulumi.Output; /** * The severity change applied to signals matching this critical asset. Valid values are `critical`, `high`, `medium`, `low`, `info`, `no-op`, `increase`, `decrease`. */ readonly severity: pulumi.Output; /** * A list of tags associated with the critical asset. */ readonly tags: pulumi.Output; /** * Create a SecurityMonitoringCriticalAsset resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: SecurityMonitoringCriticalAssetArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering SecurityMonitoringCriticalAsset resources. */ export interface SecurityMonitoringCriticalAssetState { /** * Whether the critical asset is enabled. Defaults to `true`. */ enabled?: pulumi.Input; /** * The query used to match a critical asset and the associated signals. Uses the same syntax as the search bar in the Security Signals Explorer. */ query?: pulumi.Input; /** * The rule query to filter which detection rules this critical asset applies to. Uses the same syntax as the search bar for detection rules. */ ruleQuery?: pulumi.Input; /** * The severity change applied to signals matching this critical asset. Valid values are `critical`, `high`, `medium`, `low`, `info`, `no-op`, `increase`, `decrease`. */ severity?: pulumi.Input; /** * A list of tags associated with the critical asset. */ tags?: pulumi.Input[]>; } /** * The set of arguments for constructing a SecurityMonitoringCriticalAsset resource. */ export interface SecurityMonitoringCriticalAssetArgs { /** * Whether the critical asset is enabled. Defaults to `true`. */ enabled?: pulumi.Input; /** * The query used to match a critical asset and the associated signals. Uses the same syntax as the search bar in the Security Signals Explorer. */ query: pulumi.Input; /** * The rule query to filter which detection rules this critical asset applies to. Uses the same syntax as the search bar for detection rules. */ ruleQuery: pulumi.Input; /** * The severity change applied to signals matching this critical asset. Valid values are `critical`, `high`, `medium`, `low`, `info`, `no-op`, `increase`, `decrease`. */ severity: pulumi.Input; /** * A list of tags associated with the critical asset. */ tags?: pulumi.Input[]>; }