azure-native.securityinsights.Metadata
Explore with Pulumi AI
Metadata resource definition. Azure REST API version: 2023-02-01. Prior API version in Azure Native 1.x: 2021-03-01-preview.
Other available API versions: 2021-03-01-preview, 2023-02-01-preview, 2023-06-01-preview, 2023-07-01-preview, 2023-08-01-preview, 2023-09-01-preview, 2023-10-01-preview, 2023-11-01, 2023-12-01-preview, 2024-01-01-preview, 2024-03-01, 2024-04-01-preview, 2024-09-01, 2024-10-01-preview, 2025-01-01-preview.
Example Usage
Create/update minimal metadata.
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AzureNative = Pulumi.AzureNative;
return await Deployment.RunAsync(() => 
{
    var metadata = new AzureNative.SecurityInsights.Metadata("metadata", new()
    {
        ContentId = "c00ee137-7475-47c8-9cce-ec6f0f1bedd0",
        Kind = "AnalyticsRule",
        MetadataName = "metadataName",
        ParentId = "/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName",
        ResourceGroupName = "myRg",
        WorkspaceName = "myWorkspace",
    });
});
package main
import (
	securityinsights "github.com/pulumi/pulumi-azure-native-sdk/securityinsights/v2"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securityinsights.NewMetadata(ctx, "metadata", &securityinsights.MetadataArgs{
			ContentId:         pulumi.String("c00ee137-7475-47c8-9cce-ec6f0f1bedd0"),
			Kind:              pulumi.String("AnalyticsRule"),
			MetadataName:      pulumi.String("metadataName"),
			ParentId:          pulumi.String("/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName"),
			ResourceGroupName: pulumi.String("myRg"),
			WorkspaceName:     pulumi.String("myWorkspace"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.azurenative.securityinsights.Metadata;
import com.pulumi.azurenative.securityinsights.MetadataArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var metadata = new Metadata("metadata", MetadataArgs.builder()
            .contentId("c00ee137-7475-47c8-9cce-ec6f0f1bedd0")
            .kind("AnalyticsRule")
            .metadataName("metadataName")
            .parentId("/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName")
            .resourceGroupName("myRg")
            .workspaceName("myWorkspace")
            .build());
    }
}
import * as pulumi from "@pulumi/pulumi";
import * as azure_native from "@pulumi/azure-native";
const metadata = new azure_native.securityinsights.Metadata("metadata", {
    contentId: "c00ee137-7475-47c8-9cce-ec6f0f1bedd0",
    kind: "AnalyticsRule",
    metadataName: "metadataName",
    parentId: "/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName",
    resourceGroupName: "myRg",
    workspaceName: "myWorkspace",
});
import pulumi
import pulumi_azure_native as azure_native
metadata = azure_native.securityinsights.Metadata("metadata",
    content_id="c00ee137-7475-47c8-9cce-ec6f0f1bedd0",
    kind="AnalyticsRule",
    metadata_name="metadataName",
    parent_id="/subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName",
    resource_group_name="myRg",
    workspace_name="myWorkspace")
resources:
  metadata:
    type: azure-native:securityinsights:Metadata
    properties:
      contentId: c00ee137-7475-47c8-9cce-ec6f0f1bedd0
      kind: AnalyticsRule
      metadataName: metadataName
      parentId: /subscriptions/2e1dc338-d04d-4443-b721-037eff4fdcac/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace/providers/Microsoft.SecurityInsights/alertRules/ruleName
      resourceGroupName: myRg
      workspaceName: myWorkspace
Create Metadata Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new Metadata(name: string, args: MetadataArgs, opts?: CustomResourceOptions);@overload
def Metadata(resource_name: str,
             args: MetadataArgs,
             opts: Optional[ResourceOptions] = None)
@overload
def Metadata(resource_name: str,
             opts: Optional[ResourceOptions] = None,
             kind: Optional[str] = None,
             workspace_name: Optional[str] = None,
             resource_group_name: Optional[str] = None,
             parent_id: Optional[str] = None,
             dependencies: Optional[MetadataDependenciesArgs] = None,
             preview_images_dark: Optional[Sequence[str]] = None,
             first_publish_date: Optional[str] = None,
             icon: Optional[str] = None,
             custom_version: Optional[str] = None,
             last_publish_date: Optional[str] = None,
             metadata_name: Optional[str] = None,
             content_schema_version: Optional[str] = None,
             preview_images: Optional[Sequence[str]] = None,
             author: Optional[MetadataAuthorArgs] = None,
             providers: Optional[Sequence[str]] = None,
             content_id: Optional[str] = None,
             source: Optional[MetadataSourceArgs] = None,
             support: Optional[MetadataSupportArgs] = None,
             threat_analysis_tactics: Optional[Sequence[str]] = None,
             threat_analysis_techniques: Optional[Sequence[str]] = None,
             version: Optional[str] = None,
             categories: Optional[MetadataCategoriesArgs] = None)func NewMetadata(ctx *Context, name string, args MetadataArgs, opts ...ResourceOption) (*Metadata, error)public Metadata(string name, MetadataArgs args, CustomResourceOptions? opts = null)
public Metadata(String name, MetadataArgs args)
public Metadata(String name, MetadataArgs args, CustomResourceOptions options)
type: azure-native:securityinsights:Metadata
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args MetadataArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args MetadataArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args MetadataArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args MetadataArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args MetadataArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var metadataResource = new AzureNative.SecurityInsights.Metadata("metadataResource", new()
{
    Kind = "string",
    WorkspaceName = "string",
    ResourceGroupName = "string",
    ParentId = "string",
    Dependencies = new AzureNative.SecurityInsights.Inputs.MetadataDependenciesArgs
    {
        ContentId = "string",
        Criteria = new[]
        {
            metadataDependencies,
        },
        Kind = "string",
        Name = "string",
        Operator = "string",
        Version = "string",
    },
    PreviewImagesDark = new[]
    {
        "string",
    },
    FirstPublishDate = "string",
    Icon = "string",
    CustomVersion = "string",
    LastPublishDate = "string",
    MetadataName = "string",
    ContentSchemaVersion = "string",
    PreviewImages = new[]
    {
        "string",
    },
    Author = new AzureNative.SecurityInsights.Inputs.MetadataAuthorArgs
    {
        Email = "string",
        Link = "string",
        Name = "string",
    },
    Providers = new[]
    {
        "string",
    },
    ContentId = "string",
    Source = new AzureNative.SecurityInsights.Inputs.MetadataSourceArgs
    {
        Kind = "string",
        Name = "string",
        SourceId = "string",
    },
    Support = new AzureNative.SecurityInsights.Inputs.MetadataSupportArgs
    {
        Tier = "string",
        Email = "string",
        Link = "string",
        Name = "string",
    },
    ThreatAnalysisTactics = new[]
    {
        "string",
    },
    ThreatAnalysisTechniques = new[]
    {
        "string",
    },
    Version = "string",
    Categories = new AzureNative.SecurityInsights.Inputs.MetadataCategoriesArgs
    {
        Domains = new[]
        {
            "string",
        },
        Verticals = new[]
        {
            "string",
        },
    },
});
example, err := securityinsights.NewMetadata(ctx, "metadataResource", &securityinsights.MetadataArgs{
	Kind:              pulumi.String("string"),
	WorkspaceName:     pulumi.String("string"),
	ResourceGroupName: pulumi.String("string"),
	ParentId:          pulumi.String("string"),
	Dependencies: &securityinsights.MetadataDependenciesArgs{
		ContentId: pulumi.String("string"),
		Criteria: securityinsights.MetadataDependenciesArray{
			metadataDependencies,
		},
		Kind:     pulumi.String("string"),
		Name:     pulumi.String("string"),
		Operator: pulumi.String("string"),
		Version:  pulumi.String("string"),
	},
	PreviewImagesDark: pulumi.StringArray{
		pulumi.String("string"),
	},
	FirstPublishDate:     pulumi.String("string"),
	Icon:                 pulumi.String("string"),
	CustomVersion:        pulumi.String("string"),
	LastPublishDate:      pulumi.String("string"),
	MetadataName:         pulumi.String("string"),
	ContentSchemaVersion: pulumi.String("string"),
	PreviewImages: pulumi.StringArray{
		pulumi.String("string"),
	},
	Author: &securityinsights.MetadataAuthorArgs{
		Email: pulumi.String("string"),
		Link:  pulumi.String("string"),
		Name:  pulumi.String("string"),
	},
	Providers: pulumi.StringArray{
		pulumi.String("string"),
	},
	ContentId: pulumi.String("string"),
	Source: &securityinsights.MetadataSourceArgs{
		Kind:     pulumi.String("string"),
		Name:     pulumi.String("string"),
		SourceId: pulumi.String("string"),
	},
	Support: &securityinsights.MetadataSupportArgs{
		Tier:  pulumi.String("string"),
		Email: pulumi.String("string"),
		Link:  pulumi.String("string"),
		Name:  pulumi.String("string"),
	},
	ThreatAnalysisTactics: pulumi.StringArray{
		pulumi.String("string"),
	},
	ThreatAnalysisTechniques: pulumi.StringArray{
		pulumi.String("string"),
	},
	Version: pulumi.String("string"),
	Categories: &securityinsights.MetadataCategoriesArgs{
		Domains: pulumi.StringArray{
			pulumi.String("string"),
		},
		Verticals: pulumi.StringArray{
			pulumi.String("string"),
		},
	},
})
var metadataResource = new Metadata("metadataResource", MetadataArgs.builder()
    .kind("string")
    .workspaceName("string")
    .resourceGroupName("string")
    .parentId("string")
    .dependencies(MetadataDependenciesArgs.builder()
        .contentId("string")
        .criteria(metadataDependencies)
        .kind("string")
        .name("string")
        .operator("string")
        .version("string")
        .build())
    .previewImagesDark("string")
    .firstPublishDate("string")
    .icon("string")
    .customVersion("string")
    .lastPublishDate("string")
    .metadataName("string")
    .contentSchemaVersion("string")
    .previewImages("string")
    .author(MetadataAuthorArgs.builder()
        .email("string")
        .link("string")
        .name("string")
        .build())
    .providers("string")
    .contentId("string")
    .source(MetadataSourceArgs.builder()
        .kind("string")
        .name("string")
        .sourceId("string")
        .build())
    .support(MetadataSupportArgs.builder()
        .tier("string")
        .email("string")
        .link("string")
        .name("string")
        .build())
    .threatAnalysisTactics("string")
    .threatAnalysisTechniques("string")
    .version("string")
    .categories(MetadataCategoriesArgs.builder()
        .domains("string")
        .verticals("string")
        .build())
    .build());
metadata_resource = azure_native.securityinsights.Metadata("metadataResource",
    kind="string",
    workspace_name="string",
    resource_group_name="string",
    parent_id="string",
    dependencies={
        "content_id": "string",
        "criteria": [metadata_dependencies],
        "kind": "string",
        "name": "string",
        "operator": "string",
        "version": "string",
    },
    preview_images_dark=["string"],
    first_publish_date="string",
    icon="string",
    custom_version="string",
    last_publish_date="string",
    metadata_name="string",
    content_schema_version="string",
    preview_images=["string"],
    author={
        "email": "string",
        "link": "string",
        "name": "string",
    },
    providers=["string"],
    content_id="string",
    source={
        "kind": "string",
        "name": "string",
        "source_id": "string",
    },
    support={
        "tier": "string",
        "email": "string",
        "link": "string",
        "name": "string",
    },
    threat_analysis_tactics=["string"],
    threat_analysis_techniques=["string"],
    version="string",
    categories={
        "domains": ["string"],
        "verticals": ["string"],
    })
const metadataResource = new azure_native.securityinsights.Metadata("metadataResource", {
    kind: "string",
    workspaceName: "string",
    resourceGroupName: "string",
    parentId: "string",
    dependencies: {
        contentId: "string",
        criteria: [metadataDependencies],
        kind: "string",
        name: "string",
        operator: "string",
        version: "string",
    },
    previewImagesDark: ["string"],
    firstPublishDate: "string",
    icon: "string",
    customVersion: "string",
    lastPublishDate: "string",
    metadataName: "string",
    contentSchemaVersion: "string",
    previewImages: ["string"],
    author: {
        email: "string",
        link: "string",
        name: "string",
    },
    providers: ["string"],
    contentId: "string",
    source: {
        kind: "string",
        name: "string",
        sourceId: "string",
    },
    support: {
        tier: "string",
        email: "string",
        link: "string",
        name: "string",
    },
    threatAnalysisTactics: ["string"],
    threatAnalysisTechniques: ["string"],
    version: "string",
    categories: {
        domains: ["string"],
        verticals: ["string"],
    },
});
type: azure-native:securityinsights:Metadata
properties:
    author:
        email: string
        link: string
        name: string
    categories:
        domains:
            - string
        verticals:
            - string
    contentId: string
    contentSchemaVersion: string
    customVersion: string
    dependencies:
        contentId: string
        criteria:
            - ${metadataDependencies}
        kind: string
        name: string
        operator: string
        version: string
    firstPublishDate: string
    icon: string
    kind: string
    lastPublishDate: string
    metadataName: string
    parentId: string
    previewImages:
        - string
    previewImagesDark:
        - string
    providers:
        - string
    resourceGroupName: string
    source:
        kind: string
        name: string
        sourceId: string
    support:
        email: string
        link: string
        name: string
        tier: string
    threatAnalysisTactics:
        - string
    threatAnalysisTechniques:
        - string
    version: string
    workspaceName: string
Metadata Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The Metadata resource accepts the following input properties:
- Kind string
- The kind of content the metadata is for.
- ParentId string
- Full parent resource ID of the content item the metadata is for. This is the full resource ID including the scope (subscription and resource group)
- ResourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- WorkspaceName string
- The name of the workspace.
- 
Pulumi.Azure Native. Security Insights. Inputs. Metadata Author 
- The creator of the content item.
- Categories
Pulumi.Azure Native. Security Insights. Inputs. Metadata Categories 
- Categories for the solution content item
- ContentId string
- Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name
- ContentSchema stringVersion 
- Schema version of the content. Can be used to distinguish between different flow based on the schema version
- CustomVersion string
- The custom version of the content. A optional free text
- Dependencies
Pulumi.Azure Native. Security Insights. Inputs. Metadata Dependencies 
- Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats.
- FirstPublish stringDate 
- first publish date solution content item
- Icon string
- the icon identifier. this id can later be fetched from the solution template
- LastPublish stringDate 
- last publish date for the solution content item
- MetadataName string
- The Metadata name.
- PreviewImages List<string>
- preview image file names. These will be taken from the solution artifacts
- PreviewImages List<string>Dark 
- preview image file names. These will be taken from the solution artifacts. used for dark theme support
- Providers List<string>
- Providers for the solution content item
- Source
Pulumi.Azure Native. Security Insights. Inputs. Metadata Source 
- Source of the content. This is where/how it was created.
- Support
Pulumi.Azure Native. Security Insights. Inputs. Metadata Support 
- Support information for the metadata - type, name, contact information
- ThreatAnalysis List<string>Tactics 
- the tactics the resource covers
- ThreatAnalysis List<string>Techniques 
- the techniques the resource covers, these have to be aligned with the tactics being used
- Version string
- Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks
- Kind string
- The kind of content the metadata is for.
- ParentId string
- Full parent resource ID of the content item the metadata is for. This is the full resource ID including the scope (subscription and resource group)
- ResourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- WorkspaceName string
- The name of the workspace.
- 
MetadataAuthor Args 
- The creator of the content item.
- Categories
MetadataCategories Args 
- Categories for the solution content item
- ContentId string
- Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name
- ContentSchema stringVersion 
- Schema version of the content. Can be used to distinguish between different flow based on the schema version
- CustomVersion string
- The custom version of the content. A optional free text
- Dependencies
MetadataDependencies Args 
- Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats.
- FirstPublish stringDate 
- first publish date solution content item
- Icon string
- the icon identifier. this id can later be fetched from the solution template
- LastPublish stringDate 
- last publish date for the solution content item
- MetadataName string
- The Metadata name.
- PreviewImages []string
- preview image file names. These will be taken from the solution artifacts
- PreviewImages []stringDark 
- preview image file names. These will be taken from the solution artifacts. used for dark theme support
- Providers []string
- Providers for the solution content item
- Source
MetadataSource Args 
- Source of the content. This is where/how it was created.
- Support
MetadataSupport Args 
- Support information for the metadata - type, name, contact information
- ThreatAnalysis []stringTactics 
- the tactics the resource covers
- ThreatAnalysis []stringTechniques 
- the techniques the resource covers, these have to be aligned with the tactics being used
- Version string
- Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks
- kind String
- The kind of content the metadata is for.
- parentId String
- Full parent resource ID of the content item the metadata is for. This is the full resource ID including the scope (subscription and resource group)
- resourceGroup StringName 
- The name of the resource group. The name is case insensitive.
- workspaceName String
- The name of the workspace.
- 
MetadataAuthor 
- The creator of the content item.
- categories
MetadataCategories 
- Categories for the solution content item
- contentId String
- Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name
- contentSchema StringVersion 
- Schema version of the content. Can be used to distinguish between different flow based on the schema version
- customVersion String
- The custom version of the content. A optional free text
- dependencies
MetadataDependencies 
- Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats.
- firstPublish StringDate 
- first publish date solution content item
- icon String
- the icon identifier. this id can later be fetched from the solution template
- lastPublish StringDate 
- last publish date for the solution content item
- metadataName String
- The Metadata name.
- previewImages List<String>
- preview image file names. These will be taken from the solution artifacts
- previewImages List<String>Dark 
- preview image file names. These will be taken from the solution artifacts. used for dark theme support
- providers List<String>
- Providers for the solution content item
- source
MetadataSource 
- Source of the content. This is where/how it was created.
- support
MetadataSupport 
- Support information for the metadata - type, name, contact information
- threatAnalysis List<String>Tactics 
- the tactics the resource covers
- threatAnalysis List<String>Techniques 
- the techniques the resource covers, these have to be aligned with the tactics being used
- version String
- Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks
- kind string
- The kind of content the metadata is for.
- parentId string
- Full parent resource ID of the content item the metadata is for. This is the full resource ID including the scope (subscription and resource group)
- resourceGroup stringName 
- The name of the resource group. The name is case insensitive.
- workspaceName string
- The name of the workspace.
- 
MetadataAuthor 
- The creator of the content item.
- categories
MetadataCategories 
- Categories for the solution content item
- contentId string
- Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name
- contentSchema stringVersion 
- Schema version of the content. Can be used to distinguish between different flow based on the schema version
- customVersion string
- The custom version of the content. A optional free text
- dependencies
MetadataDependencies 
- Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats.
- firstPublish stringDate 
- first publish date solution content item
- icon string
- the icon identifier. this id can later be fetched from the solution template
- lastPublish stringDate 
- last publish date for the solution content item
- metadataName string
- The Metadata name.
- previewImages string[]
- preview image file names. These will be taken from the solution artifacts
- previewImages string[]Dark 
- preview image file names. These will be taken from the solution artifacts. used for dark theme support
- providers string[]
- Providers for the solution content item
- source
MetadataSource 
- Source of the content. This is where/how it was created.
- support
MetadataSupport 
- Support information for the metadata - type, name, contact information
- threatAnalysis string[]Tactics 
- the tactics the resource covers
- threatAnalysis string[]Techniques 
- the techniques the resource covers, these have to be aligned with the tactics being used
- version string
- Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks
- kind str
- The kind of content the metadata is for.
- parent_id str
- Full parent resource ID of the content item the metadata is for. This is the full resource ID including the scope (subscription and resource group)
- resource_group_ strname 
- The name of the resource group. The name is case insensitive.
- workspace_name str
- The name of the workspace.
- 
MetadataAuthor Args 
- The creator of the content item.
- categories
MetadataCategories Args 
- Categories for the solution content item
- content_id str
- Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name
- content_schema_ strversion 
- Schema version of the content. Can be used to distinguish between different flow based on the schema version
- custom_version str
- The custom version of the content. A optional free text
- dependencies
MetadataDependencies Args 
- Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats.
- first_publish_ strdate 
- first publish date solution content item
- icon str
- the icon identifier. this id can later be fetched from the solution template
- last_publish_ strdate 
- last publish date for the solution content item
- metadata_name str
- The Metadata name.
- preview_images Sequence[str]
- preview image file names. These will be taken from the solution artifacts
- preview_images_ Sequence[str]dark 
- preview image file names. These will be taken from the solution artifacts. used for dark theme support
- providers Sequence[str]
- Providers for the solution content item
- source
MetadataSource Args 
- Source of the content. This is where/how it was created.
- support
MetadataSupport Args 
- Support information for the metadata - type, name, contact information
- threat_analysis_ Sequence[str]tactics 
- the tactics the resource covers
- threat_analysis_ Sequence[str]techniques 
- the techniques the resource covers, these have to be aligned with the tactics being used
- version str
- Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks
- kind String
- The kind of content the metadata is for.
- parentId String
- Full parent resource ID of the content item the metadata is for. This is the full resource ID including the scope (subscription and resource group)
- resourceGroup StringName 
- The name of the resource group. The name is case insensitive.
- workspaceName String
- The name of the workspace.
- Property Map
- The creator of the content item.
- categories Property Map
- Categories for the solution content item
- contentId String
- Static ID for the content. Used to identify dependencies and content from solutions or community. Hard-coded/static for out of the box content and solutions. Dynamic for user-created. This is the resource name
- contentSchema StringVersion 
- Schema version of the content. Can be used to distinguish between different flow based on the schema version
- customVersion String
- The custom version of the content. A optional free text
- dependencies Property Map
- Dependencies for the content item, what other content items it requires to work. Can describe more complex dependencies using a recursive/nested structure. For a single dependency an id/kind/version can be supplied or operator/criteria for complex formats.
- firstPublish StringDate 
- first publish date solution content item
- icon String
- the icon identifier. this id can later be fetched from the solution template
- lastPublish StringDate 
- last publish date for the solution content item
- metadataName String
- The Metadata name.
- previewImages List<String>
- preview image file names. These will be taken from the solution artifacts
- previewImages List<String>Dark 
- preview image file names. These will be taken from the solution artifacts. used for dark theme support
- providers List<String>
- Providers for the solution content item
- source Property Map
- Source of the content. This is where/how it was created.
- support Property Map
- Support information for the metadata - type, name, contact information
- threatAnalysis List<String>Tactics 
- the tactics the resource covers
- threatAnalysis List<String>Techniques 
- the techniques the resource covers, these have to be aligned with the tactics being used
- version String
- Version of the content. Default and recommended format is numeric (e.g. 1, 1.0, 1.0.0, 1.0.0.0), following ARM template best practices. Can also be any string, but then we cannot guarantee any version checks
Outputs
All input properties are implicitly available as output properties. Additionally, the Metadata resource produces the following output properties:
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- The name of the resource
- SystemData Pulumi.Azure Native. Security Insights. Outputs. System Data Response 
- Azure Resource Manager metadata containing createdBy and modifiedBy information.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- Etag string
- Etag of the azure resource
- Id string
- The provider-assigned unique ID for this managed resource.
- Name string
- The name of the resource
- SystemData SystemData Response 
- Azure Resource Manager metadata containing createdBy and modifiedBy information.
- Type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- Etag string
- Etag of the azure resource
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- The name of the resource
- systemData SystemData Response 
- Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- etag String
- Etag of the azure resource
- id string
- The provider-assigned unique ID for this managed resource.
- name string
- The name of the resource
- systemData SystemData Response 
- Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type string
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- etag string
- Etag of the azure resource
- id str
- The provider-assigned unique ID for this managed resource.
- name str
- The name of the resource
- system_data SystemData Response 
- Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type str
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- etag str
- Etag of the azure resource
- id String
- The provider-assigned unique ID for this managed resource.
- name String
- The name of the resource
- systemData Property Map
- Azure Resource Manager metadata containing createdBy and modifiedBy information.
- type String
- The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"
- etag String
- Etag of the azure resource
Supporting Types
Kind, KindArgs  
- DataConnector 
- DataConnector
- DataType 
- DataType
- Workbook
- Workbook
- WorkbookTemplate 
- WorkbookTemplate
- Playbook
- Playbook
- PlaybookTemplate 
- PlaybookTemplate
- AnalyticsRule Template 
- AnalyticsRuleTemplate
- AnalyticsRule 
- AnalyticsRule
- HuntingQuery 
- HuntingQuery
- InvestigationQuery 
- InvestigationQuery
- Parser
- Parser
- Watchlist
- Watchlist
- WatchlistTemplate 
- WatchlistTemplate
- Solution
- Solution
- AzureFunction 
- AzureFunction
- LogicApps Custom Connector 
- LogicAppsCustomConnector
- AutomationRule 
- AutomationRule
- KindData Connector 
- DataConnector
- KindData Type 
- DataType
- KindWorkbook 
- Workbook
- KindWorkbook Template 
- WorkbookTemplate
- KindPlaybook 
- Playbook
- KindPlaybook Template 
- PlaybookTemplate
- KindAnalytics Rule Template 
- AnalyticsRuleTemplate
- KindAnalytics Rule 
- AnalyticsRule
- KindHunting Query 
- HuntingQuery
- KindInvestigation Query 
- InvestigationQuery
- KindParser 
- Parser
- KindWatchlist 
- Watchlist
- KindWatchlist Template 
- WatchlistTemplate
- KindSolution 
- Solution
- KindAzure Function 
- AzureFunction
- KindLogic Apps Custom Connector 
- LogicAppsCustomConnector
- KindAutomation Rule 
- AutomationRule
- DataConnector 
- DataConnector
- DataType 
- DataType
- Workbook
- Workbook
- WorkbookTemplate 
- WorkbookTemplate
- Playbook
- Playbook
- PlaybookTemplate 
- PlaybookTemplate
- AnalyticsRule Template 
- AnalyticsRuleTemplate
- AnalyticsRule 
- AnalyticsRule
- HuntingQuery 
- HuntingQuery
- InvestigationQuery 
- InvestigationQuery
- Parser
- Parser
- Watchlist
- Watchlist
- WatchlistTemplate 
- WatchlistTemplate
- Solution
- Solution
- AzureFunction 
- AzureFunction
- LogicApps Custom Connector 
- LogicAppsCustomConnector
- AutomationRule 
- AutomationRule
- DataConnector 
- DataConnector
- DataType 
- DataType
- Workbook
- Workbook
- WorkbookTemplate 
- WorkbookTemplate
- Playbook
- Playbook
- PlaybookTemplate 
- PlaybookTemplate
- AnalyticsRule Template 
- AnalyticsRuleTemplate
- AnalyticsRule 
- AnalyticsRule
- HuntingQuery 
- HuntingQuery
- InvestigationQuery 
- InvestigationQuery
- Parser
- Parser
- Watchlist
- Watchlist
- WatchlistTemplate 
- WatchlistTemplate
- Solution
- Solution
- AzureFunction 
- AzureFunction
- LogicApps Custom Connector 
- LogicAppsCustomConnector
- AutomationRule 
- AutomationRule
- DATA_CONNECTOR
- DataConnector
- DATA_TYPE
- DataType
- WORKBOOK
- Workbook
- WORKBOOK_TEMPLATE
- WorkbookTemplate
- PLAYBOOK
- Playbook
- PLAYBOOK_TEMPLATE
- PlaybookTemplate
- ANALYTICS_RULE_TEMPLATE
- AnalyticsRuleTemplate
- ANALYTICS_RULE
- AnalyticsRule
- HUNTING_QUERY
- HuntingQuery
- INVESTIGATION_QUERY
- InvestigationQuery
- PARSER
- Parser
- WATCHLIST
- Watchlist
- WATCHLIST_TEMPLATE
- WatchlistTemplate
- SOLUTION
- Solution
- AZURE_FUNCTION
- AzureFunction
- LOGIC_APPS_CUSTOM_CONNECTOR
- LogicAppsCustomConnector
- AUTOMATION_RULE
- AutomationRule
- "DataConnector" 
- DataConnector
- "DataType" 
- DataType
- "Workbook"
- Workbook
- "WorkbookTemplate" 
- WorkbookTemplate
- "Playbook"
- Playbook
- "PlaybookTemplate" 
- PlaybookTemplate
- "AnalyticsRule Template" 
- AnalyticsRuleTemplate
- "AnalyticsRule" 
- AnalyticsRule
- "HuntingQuery" 
- HuntingQuery
- "InvestigationQuery" 
- InvestigationQuery
- "Parser"
- Parser
- "Watchlist"
- Watchlist
- "WatchlistTemplate" 
- WatchlistTemplate
- "Solution"
- Solution
- "AzureFunction" 
- AzureFunction
- "LogicApps Custom Connector" 
- LogicAppsCustomConnector
- "AutomationRule" 
- AutomationRule
MetadataAuthor, MetadataAuthorArgs    
MetadataAuthorResponse, MetadataAuthorResponseArgs      
MetadataCategories, MetadataCategoriesArgs    
MetadataCategoriesResponse, MetadataCategoriesResponseArgs      
MetadataDependencies, MetadataDependenciesArgs    
- ContentId string
- Id of the content item we depend on
- Criteria
List<Pulumi.Azure Native. Security Insights. Inputs. Metadata Dependencies> 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- Kind
string | Pulumi.Azure Native. Security Insights. Kind 
- Type of the content item we depend on
- Name string
- Name of the content item
- Operator
string | Pulumi.Azure Native. Security Insights. Operator 
- Operator used for list of dependencies in criteria array.
- Version string
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- ContentId string
- Id of the content item we depend on
- Criteria
[]MetadataDependencies 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- Kind string | Kind
- Type of the content item we depend on
- Name string
- Name of the content item
- Operator string | Operator
- Operator used for list of dependencies in criteria array.
- Version string
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- contentId String
- Id of the content item we depend on
- criteria
List<MetadataDependencies> 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- kind String | Kind
- Type of the content item we depend on
- name String
- Name of the content item
- operator String | Operator
- Operator used for list of dependencies in criteria array.
- version String
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- contentId string
- Id of the content item we depend on
- criteria
MetadataDependencies[] 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- kind string | Kind
- Type of the content item we depend on
- name string
- Name of the content item
- operator string | Operator
- Operator used for list of dependencies in criteria array.
- version string
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- content_id str
- Id of the content item we depend on
- criteria
Sequence[MetadataDependencies] 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- kind str | Kind
- Type of the content item we depend on
- name str
- Name of the content item
- operator str | Operator
- Operator used for list of dependencies in criteria array.
- version str
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- contentId String
- Id of the content item we depend on
- criteria List<Property Map>
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- kind
String | "DataConnector" | "Data Type" | "Workbook" | "Workbook Template" | "Playbook" | "Playbook Template" | "Analytics Rule Template" | "Analytics Rule" | "Hunting Query" | "Investigation Query" | "Parser" | "Watchlist" | "Watchlist Template" | "Solution" | "Azure Function" | "Logic Apps Custom Connector" | "Automation Rule" 
- Type of the content item we depend on
- name String
- Name of the content item
- operator String | "AND" | "OR"
- Operator used for list of dependencies in criteria array.
- version String
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
MetadataDependenciesResponse, MetadataDependenciesResponseArgs      
- ContentId string
- Id of the content item we depend on
- Criteria
List<Pulumi.Azure Native. Security Insights. Inputs. Metadata Dependencies Response> 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- Kind string
- Type of the content item we depend on
- Name string
- Name of the content item
- Operator string
- Operator used for list of dependencies in criteria array.
- Version string
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- ContentId string
- Id of the content item we depend on
- Criteria
[]MetadataDependencies Response 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- Kind string
- Type of the content item we depend on
- Name string
- Name of the content item
- Operator string
- Operator used for list of dependencies in criteria array.
- Version string
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- contentId String
- Id of the content item we depend on
- criteria
List<MetadataDependencies Response> 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- kind String
- Type of the content item we depend on
- name String
- Name of the content item
- operator String
- Operator used for list of dependencies in criteria array.
- version String
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- contentId string
- Id of the content item we depend on
- criteria
MetadataDependencies Response[] 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- kind string
- Type of the content item we depend on
- name string
- Name of the content item
- operator string
- Operator used for list of dependencies in criteria array.
- version string
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- content_id str
- Id of the content item we depend on
- criteria
Sequence[MetadataDependencies Response] 
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- kind str
- Type of the content item we depend on
- name str
- Name of the content item
- operator str
- Operator used for list of dependencies in criteria array.
- version str
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
- contentId String
- Id of the content item we depend on
- criteria List<Property Map>
- This is the list of dependencies we must fulfill, according to the AND/OR operator
- kind String
- Type of the content item we depend on
- name String
- Name of the content item
- operator String
- Operator used for list of dependencies in criteria array.
- version String
- Version of the the content item we depend on. Can be blank, * or missing to indicate any version fulfills the dependency. If version does not match our defined numeric format then an exact match is required.
MetadataSource, MetadataSourceArgs    
- Kind
string | Pulumi.Azure Native. Security Insights. Source Kind 
- Source type of the content
- Name string
- Name of the content source. The repo name, solution name, LA workspace name etc.
- SourceId string
- ID of the content source. The solution ID, workspace ID, etc
- Kind
string | SourceKind 
- Source type of the content
- Name string
- Name of the content source. The repo name, solution name, LA workspace name etc.
- SourceId string
- ID of the content source. The solution ID, workspace ID, etc
- kind
String | SourceKind 
- Source type of the content
- name String
- Name of the content source. The repo name, solution name, LA workspace name etc.
- sourceId String
- ID of the content source. The solution ID, workspace ID, etc
- kind
string | SourceKind 
- Source type of the content
- name string
- Name of the content source. The repo name, solution name, LA workspace name etc.
- sourceId string
- ID of the content source. The solution ID, workspace ID, etc
- kind
str | SourceKind 
- Source type of the content
- name str
- Name of the content source. The repo name, solution name, LA workspace name etc.
- source_id str
- ID of the content source. The solution ID, workspace ID, etc
- kind
String | "LocalWorkspace" | "Community" | "Solution" | "Source Repository" 
- Source type of the content
- name String
- Name of the content source. The repo name, solution name, LA workspace name etc.
- sourceId String
- ID of the content source. The solution ID, workspace ID, etc
MetadataSourceResponse, MetadataSourceResponseArgs      
MetadataSupport, MetadataSupportArgs    
- Tier
string | Pulumi.Azure Native. Security Insights. Support Tier 
- Type of support for content item
- Email string
- Email of support contact
- Link string
- Link for support help, like to support page to open a ticket etc.
- Name string
- Name of the support contact. Company or person.
- Tier
string | SupportTier 
- Type of support for content item
- Email string
- Email of support contact
- Link string
- Link for support help, like to support page to open a ticket etc.
- Name string
- Name of the support contact. Company or person.
- tier
String | SupportTier 
- Type of support for content item
- email String
- Email of support contact
- link String
- Link for support help, like to support page to open a ticket etc.
- name String
- Name of the support contact. Company or person.
- tier
string | SupportTier 
- Type of support for content item
- email string
- Email of support contact
- link string
- Link for support help, like to support page to open a ticket etc.
- name string
- Name of the support contact. Company or person.
- tier
str | SupportTier 
- Type of support for content item
- email str
- Email of support contact
- link str
- Link for support help, like to support page to open a ticket etc.
- name str
- Name of the support contact. Company or person.
- tier String | "Microsoft" | "Partner" | "Community"
- Type of support for content item
- email String
- Email of support contact
- link String
- Link for support help, like to support page to open a ticket etc.
- name String
- Name of the support contact. Company or person.
MetadataSupportResponse, MetadataSupportResponseArgs      
Operator, OperatorArgs  
- AND
- AND
- OR
- OR
- OperatorAND 
- AND
- OperatorOR 
- OR
- AND
- AND
- OR
- OR
- AND
- AND
- OR
- OR
- AND_
- AND
- OR_
- OR
- "AND"
- AND
- "OR"
- OR
SourceKind, SourceKindArgs    
- LocalWorkspace 
- LocalWorkspace
- Community
- Community
- Solution
- Solution
- SourceRepository 
- SourceRepository
- SourceKind Local Workspace 
- LocalWorkspace
- SourceKind Community 
- Community
- SourceKind Solution 
- Solution
- SourceKind Source Repository 
- SourceRepository
- LocalWorkspace 
- LocalWorkspace
- Community
- Community
- Solution
- Solution
- SourceRepository 
- SourceRepository
- LocalWorkspace 
- LocalWorkspace
- Community
- Community
- Solution
- Solution
- SourceRepository 
- SourceRepository
- LOCAL_WORKSPACE
- LocalWorkspace
- COMMUNITY
- Community
- SOLUTION
- Solution
- SOURCE_REPOSITORY
- SourceRepository
- "LocalWorkspace" 
- LocalWorkspace
- "Community"
- Community
- "Solution"
- Solution
- "SourceRepository" 
- SourceRepository
SupportTier, SupportTierArgs    
- Microsoft
- Microsoft
- Partner
- Partner
- Community
- Community
- SupportTier Microsoft 
- Microsoft
- SupportTier Partner 
- Partner
- SupportTier Community 
- Community
- Microsoft
- Microsoft
- Partner
- Partner
- Community
- Community
- Microsoft
- Microsoft
- Partner
- Partner
- Community
- Community
- MICROSOFT
- Microsoft
- PARTNER
- Partner
- COMMUNITY
- Community
- "Microsoft"
- Microsoft
- "Partner"
- Partner
- "Community"
- Community
SystemDataResponse, SystemDataResponseArgs      
- CreatedAt string
- The timestamp of resource creation (UTC).
- CreatedBy string
- The identity that created the resource.
- CreatedBy stringType 
- The type of identity that created the resource.
- LastModified stringAt 
- The timestamp of resource last modification (UTC)
- LastModified stringBy 
- The identity that last modified the resource.
- LastModified stringBy Type 
- The type of identity that last modified the resource.
- CreatedAt string
- The timestamp of resource creation (UTC).
- CreatedBy string
- The identity that created the resource.
- CreatedBy stringType 
- The type of identity that created the resource.
- LastModified stringAt 
- The timestamp of resource last modification (UTC)
- LastModified stringBy 
- The identity that last modified the resource.
- LastModified stringBy Type 
- The type of identity that last modified the resource.
- createdAt String
- The timestamp of resource creation (UTC).
- createdBy String
- The identity that created the resource.
- createdBy StringType 
- The type of identity that created the resource.
- lastModified StringAt 
- The timestamp of resource last modification (UTC)
- lastModified StringBy 
- The identity that last modified the resource.
- lastModified StringBy Type 
- The type of identity that last modified the resource.
- createdAt string
- The timestamp of resource creation (UTC).
- createdBy string
- The identity that created the resource.
- createdBy stringType 
- The type of identity that created the resource.
- lastModified stringAt 
- The timestamp of resource last modification (UTC)
- lastModified stringBy 
- The identity that last modified the resource.
- lastModified stringBy Type 
- The type of identity that last modified the resource.
- created_at str
- The timestamp of resource creation (UTC).
- created_by str
- The identity that created the resource.
- created_by_ strtype 
- The type of identity that created the resource.
- last_modified_ strat 
- The timestamp of resource last modification (UTC)
- last_modified_ strby 
- The identity that last modified the resource.
- last_modified_ strby_ type 
- The type of identity that last modified the resource.
- createdAt String
- The timestamp of resource creation (UTC).
- createdBy String
- The identity that created the resource.
- createdBy StringType 
- The type of identity that created the resource.
- lastModified StringAt 
- The timestamp of resource last modification (UTC)
- lastModified StringBy 
- The identity that last modified the resource.
- lastModified StringBy Type 
- The type of identity that last modified the resource.
Import
An existing resource can be imported using its type token, name, and identifier, e.g.
$ pulumi import azure-native:securityinsights:Metadata metadataName /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.OperationalInsights/workspaces/{workspaceName}/providers/Microsoft.SecurityInsights/metadata/{metadataName} 
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- Azure Native pulumi/pulumi-azure-native
- License
- Apache-2.0