import * as pulumi from "@pulumi/pulumi"; /** * Provides a Datadog Security Monitoring Rule JSON resource. This can be used to create and manage Datadog security monitoring rules using raw JSON. * * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as datadog from "@pulumi/datadog"; * * // Example Security Monitoring Rule JSON * const securityRuleJson = new datadog.SecurityMonitoringRuleJson("security_rule_json", {rule: `{ * "name": "High error rate security monitoring", * "isEnabled": true, * "type": "log_detection", * "message": "High error rate detected in logs", * "tags": ["env:prod", "security"], * "cases": [ * { * "name": "high case", * "status": "high", * "condition": "errors > 100 && warnings > 1000", * "notifications": ["@security-team"] * } * ], * "queries": [ * { * "name": "errors", * "query": "status:error", * "aggregation": "count", * "dataSource": "logs", * "groupByFields": ["service", "env"] * }, * { * "name": "warnings", * "query": "status:warning", * "aggregation": "count", * "dataSource": "logs", * "groupByFields": ["service", "env"] * } * ], * "options": { * "evaluationWindow": 300, * "keepAlive": 600, * "maxSignalDuration": 900, * "detectionMethod": "threshold" * } * } * `}); * ``` * * ## Import * * The `pulumi import` command can be used, for example: * * ```sh * $ pulumi import datadog:index/securityMonitoringRuleJson:SecurityMonitoringRuleJson security_rule_json aaa-yyy-vvv * ``` */ export declare class SecurityMonitoringRuleJson extends pulumi.CustomResource { /** * Get an existing SecurityMonitoringRuleJson resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: SecurityMonitoringRuleJsonState, opts?: pulumi.CustomResourceOptions): SecurityMonitoringRuleJson; /** * Returns true if the given object is an instance of SecurityMonitoringRuleJson. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is SecurityMonitoringRuleJson; /** * The JSON definition of the Security Monitoring Rule. */ readonly json: pulumi.Output; /** * Create a SecurityMonitoringRuleJson resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: SecurityMonitoringRuleJsonArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering SecurityMonitoringRuleJson resources. */ export interface SecurityMonitoringRuleJsonState { /** * The JSON definition of the Security Monitoring Rule. */ json?: pulumi.Input; } /** * The set of arguments for constructing a SecurityMonitoringRuleJson resource. */ export interface SecurityMonitoringRuleJsonArgs { /** * The JSON definition of the Security Monitoring Rule. */ json: pulumi.Input; }