hashicorp / terraform-provider-azurerm

Terraform provider for Azure Resource Manager
https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs
Mozilla Public License 2.0
4.54k stars 4.61k forks source link

Support for Defender for Cloud alerts suppression rules #16996

Open DmitriSmirnovCTL opened 2 years ago

DmitriSmirnovCTL commented 2 years ago

Is there an existing issue for this?

Community Note

Description

Will appreciate an ability to manage alerts suppression rules for Microsoft Defender for Cloud using terraform resource (in addition to portal, API and CLI).

New or Affected Resource(s)/Data Source(s)

azurerm_security_center_alert_rule_suppression

Potential Terraform Configuration

resource "azurerm_security_center_alert_rule_suppression" "suppression" {
  name              = "${var.environment}-suppression"
  subscription_id   = data.azurerm_subscription.current.id
  alert-type        = "SQL.DW_GeoAnomaly"
  end_date_utc      = "2030-10-30"

  scope {
    field         = "entities.ip.address"
    any-of        = "10.0.0.0/16;192.168.0.0/16"
  }

}

References

https://docs.microsoft.com/en-us/cli/azure/security/alerts-suppression-rule?view=azure-cli-latest#az-security-alerts-suppression-rule-update

sidanaabhi commented 6 months ago

Any update on when this feature will be implemented?