UNPKG

@crowdstrike/pulumi

Version:

A Pulumi package for creating and managing CrowdStrike resources. Based on terraform-provider-crowdstrike: version v0.0.4

1,008 lines (1,007 loc) 25.7 kB
import * as outputs from "../types/output"; export interface CloudAwsAccountAssetInventory { /** * Enable asset inventory */ enabled: boolean; /** * Custom AWS IAM role name */ roleName?: string; } export interface CloudAwsAccountDspm { /** * Enable Data Security Posture Management */ enabled: boolean; /** * Custom AWS IAM role name for Data Security Posture Management */ roleName?: string; } export interface CloudAwsAccountIdp { /** * Enable Identity Protection */ enabled: boolean; /** * Current status of the Identity Protection integration */ status: string; } export interface CloudAwsAccountRealtimeVisibility { /** * The AWS region of the CloudTrail bucket */ cloudtrailRegion: string; /** * Enable real-time visibility and detection */ enabled: boolean; /** * Set to true if a CloudTrail already exists */ useExistingCloudtrail: boolean; } export interface CloudAwsAccountSensorManagement { /** * Enable 1-click sensor deployment */ enabled: boolean; } export interface DefaultPreventionPolicyLinuxCloudAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyLinuxSensorAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyMacCloudAdwareAndPup { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyMacCloudAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyMacSensorAdwareAndPup { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyMacSensorAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyWindowsAdwareAndPup { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyWindowsCloudAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyWindowsCloudAntiMalwareUserInitiated { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyWindowsExtendedUserModeData { /** * Machine learning level for detection. */ detection: string; } export interface DefaultPreventionPolicyWindowsSensorAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultPreventionPolicyWindowsSensorAntiMalwareUserInitiated { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface DefaultSensorUpdatePolicySchedule { /** * Enable the scheduler for sensor update policy. */ enabled: boolean; /** * The time block to prevent sensor updates. Only set when enabled is true. */ timeBlocks?: outputs.DefaultSensorUpdatePolicyScheduleTimeBlock[]; /** * The time zones that will be used for the time blocks. Only set when enabled is true. */ timezone?: string; } export interface DefaultSensorUpdatePolicyScheduleTimeBlock { /** * The days of the week the time block should be active. */ days: string[]; /** * The end time for the time block in 24HR format. Must be atleast 1 hour more than start_time. */ endTime: string; /** * The start time for the time block in 24HR format. Must be atleast 1 hour before end_time. */ startTime: string; } export interface FilevantagePolicyScheduledExclusion { /** * Description of the scheduled exclusion. */ description: string; /** * The end date of the scheduled exclusion. Format: YYYY-MM-DD */ endDate: string; /** * The end time of the scheduled exclusion in 24 hour format. Format: HH:MM */ endTime: string; /** * Identifier for the scheduled exclusion. */ id: string; /** * Name of the scheduled exclusion. */ name: string; /** * A comma separated list of processes to exclude changes from. Example: **/run*me.sh excludes changes made by run*me.sh in any location */ processes: string; /** * Repeated scheduled exclusion */ repeated?: outputs.FilevantagePolicyScheduledExclusionRepeated; /** * The start date of the scheduled exclusion. Format: YYYY-MM-DD */ startDate: string; /** * The start time of the scheduled exclusion in 24 hour format. Format: HH:MM */ startTime: string; /** * The timezone to use for the time fields. See https://en.wikipedia.org/wiki/List*of*tz*database*time_zones. */ timezone: string; /** * A comma separated list of users to exclude changes from. Example: user1,user2,admin* excludes changes made by user1, user2, and any user starting with admin */ users: string; } export interface FilevantagePolicyScheduledExclusionRepeated { /** * If the exclusion is all day. */ allDay: boolean; /** * The days of the month to allow the exclusion. Required if frequency is set to monthly and monthlyOccurrence is set to days. Options: 1-31 */ daysOfMonths: number[]; /** * The days of the week to allow the exclusion. Required if frequency is set to weekly or set to monthly and monthlyOccurrence is set to a week. Options: Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, Saturday */ daysOfWeeks: string[]; /** * The end time to end the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false */ endTime: string; /** * The frequency of the exclusion. Options: daily, weekly, monthly */ frequency: string; /** * The monthly occurrence of the exclusion. Either specify a week (first, second, third, fourth) or set to days to specify days of the month. Options: first, second, third, fourth, days. Required if frequency is set to monthly */ monthlyOccurrence: string; /** * The start time to allow the scheduled exclusion in 24 hour format. Format: HH:MM required if allDay is false */ startTime: string; } export interface FilevantageRuleGroupRule { /** * Depth below the base path to monitor. */ depth: string; /** * Description of the filevantage rule. */ description: string; /** * Enable content capture for the rule. Requires watch*file*write*changes or watch*key*value*set_changes to be enabled. */ enableContentCapture: boolean; /** * Represents the files, directories, registry keys, or registry values that will be excluded from monitoring. */ exclude: string; /** * Represents the changes performed by specific processes that will be excluded from monitoring. */ excludeProcesses: string; /** * Represents the changes performed by specific users that will be excluded from monitoring. */ excludeUsers: string; /** * List of file names whose content will be monitored. Listed files must match the file include pattern and not match the file exclude pattern. */ fileNames: string[]; /** * Identifier for the filevantage rule. */ id: string; /** * Represents the files, directories, registry keys, or registry values that will be monitored. Defaults to all (*) */ include: string; /** * Represents the changes performed by specific processes that will be monitored. */ includeProcesses: string; /** * Represents the changes performed by specific users that will be monitored. */ includeUsers: string; /** * Representing the file system or registry path to monitor. All paths must end with the path separator, e.g. c:\windows\ for windows and /usr/bin/ for linux/mac. */ path: string; /** * Precedence of the rule in the rule group. */ precedence: number; /** * List of registry values whose content will be monitored. Listed registry values must match the registry include pattern and not match the registry exclude pattern. */ registryValues: string[]; /** * Severity to categorize change events produced by this rule. */ severity: string; /** * Monitor directory attribute change events. */ watchDirectoryAttributeChanges: boolean; /** * Monitor directory creation events. */ watchDirectoryCreateChanges: boolean; /** * Monitor directory deletion events. */ watchDirectoryDeleteChanges: boolean; /** * Monitor directory permission change events. */ watchDirectoryPermissionChanges: boolean; /** * Monitor directory rename events. */ watchDirectoryRenameChanges: boolean; /** * Monitor file attribute change events. */ watchFileAttributeChanges: boolean; /** * Monitor file creation events. */ watchFileCreateChanges: boolean; /** * Monitor file deletion events. */ watchFileDeleteChanges: boolean; /** * Monitor file permission change events. */ watchFilePermissionChanges: boolean; /** * Monitor file rename events. */ watchFileRenameChanges: boolean; /** * Monitor file write events. */ watchFileWriteChanges: boolean; /** * Monitor registry key creation events. */ watchKeyCreateChanges: boolean; /** * Monitor registry key deletion events. */ watchKeyDeleteChanges: boolean; /** * Monitor registry key permission change events. */ watchKeyPermissionsChanges: boolean; /** * Monitor registry key rename events. */ watchKeyRenameChanges: boolean; /** * Monitor registry value deletion events. */ watchKeyValueDeleteChanges: boolean; /** * Monitor registry value set events. */ watchKeyValueSetChanges: boolean; } export interface GetCloudAwsAccountAccount { /** * The AWS Account ID */ accountId: string; /** * The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type */ accountType: string; /** * Whether asset inventory is enabled */ assetInventoryEnabled: boolean; /** * The name of the CloudTrail S3 bucket used for real-time visibility */ cloudtrailBucketName: string; /** * The AWS region of the CloudTrail bucket */ cloudtrailRegion: string; /** * Whether Data Security Posture Management is enabled */ dspmEnabled: boolean; /** * The ARN of the IAM role to be used by CrowdStrike DSPM */ dspmRoleArn: string; /** * The name of the IAM role to be used by CrowdStrike DSPM */ dspmRoleName: string; /** * The ARN of the Amazon EventBridge used by CrowdStrike to forward messages */ eventbusArn: string; /** * The name of the Amazon EventBridge used by CrowdStrike to forward messages */ eventbusName: string; /** * The external ID used to assume the AWS IAM role */ externalId: string; /** * The ARN of the AWS IAM role used to access this AWS account */ iamRoleArn: string; /** * The name of the AWS IAM role used to access this AWS account */ iamRoleName: string; /** * Whether Identity Protection is enabled */ idpEnabled: boolean; /** * The ARN of the intermediate role used to assume the AWS IAM role */ intermediateRoleArn: string; /** * Indicates whether this is the management account (formerly known as the root account) of an AWS Organization */ isOrganizationManagementAccount: boolean; /** * The AWS Organization ID */ organizationId: string; /** * Whether real-time visibility is enabled */ realtimeVisibilityEnabled: boolean; /** * Whether 1-click sensor deployment is enabled */ sensorManagementEnabled: boolean; /** * The list of AWS Organizational Units (OUs) targeted for this account */ targetOuses: string[]; } export interface GetSensorUpdatePolicyBuildsLinux { /** * All sensor builds for the specific platform. */ alls: outputs.GetSensorUpdatePolicyBuildsLinuxAll[]; /** * The latest sensor build. */ latest: outputs.GetSensorUpdatePolicyBuildsLinuxLatest; /** * The n-1 sensor build. */ n1: outputs.GetSensorUpdatePolicyBuildsLinuxN1; /** * The n-2 sensor build. */ n2: outputs.GetSensorUpdatePolicyBuildsLinuxN2; } export interface GetSensorUpdatePolicyBuildsLinuxAll { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsLinuxArm64 { /** * All sensor builds for the specific platform. */ alls: outputs.GetSensorUpdatePolicyBuildsLinuxArm64All[]; /** * The latest sensor build. */ latest: outputs.GetSensorUpdatePolicyBuildsLinuxArm64Latest; /** * The n-1 sensor build. */ n1: outputs.GetSensorUpdatePolicyBuildsLinuxArm64N1; /** * The n-2 sensor build. */ n2: outputs.GetSensorUpdatePolicyBuildsLinuxArm64N2; } export interface GetSensorUpdatePolicyBuildsLinuxArm64All { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsLinuxArm64Latest { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsLinuxArm64N1 { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsLinuxArm64N2 { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsLinuxLatest { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsLinuxN1 { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsLinuxN2 { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsMac { /** * All sensor builds for the specific platform. */ alls: outputs.GetSensorUpdatePolicyBuildsMacAll[]; /** * The latest sensor build. */ latest: outputs.GetSensorUpdatePolicyBuildsMacLatest; /** * The n-1 sensor build. */ n1: outputs.GetSensorUpdatePolicyBuildsMacN1; /** * The n-2 sensor build. */ n2: outputs.GetSensorUpdatePolicyBuildsMacN2; } export interface GetSensorUpdatePolicyBuildsMacAll { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsMacLatest { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsMacN1 { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsMacN2 { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsWindows { /** * All sensor builds for the specific platform. */ alls: outputs.GetSensorUpdatePolicyBuildsWindowsAll[]; /** * The latest sensor build. */ latest: outputs.GetSensorUpdatePolicyBuildsWindowsLatest; /** * The n-1 sensor build. */ n1: outputs.GetSensorUpdatePolicyBuildsWindowsN1; /** * The n-2 sensor build. */ n2: outputs.GetSensorUpdatePolicyBuildsWindowsN2; } export interface GetSensorUpdatePolicyBuildsWindowsAll { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsWindowsLatest { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsWindowsN1 { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface GetSensorUpdatePolicyBuildsWindowsN2 { /** * The build number for a specific sensor version. */ build: string; /** * The target platform for a the build. */ platform: string; /** * CrowdStrike Falcon Sensor version. */ sensorVersion: string; /** * The stage for the build. */ stage: string; } export interface PreventionPolicyLinuxCloudAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyLinuxSensorAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyMacCloudAdwareAndPup { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyMacCloudAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyMacSensorAdwareAndPup { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyMacSensorAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyWindowsAdwareAndPup { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyWindowsCloudAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyWindowsCloudAntiMalwareMicrosoftOfficeFiles { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyWindowsCloudAntiMalwareUserInitiated { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyWindowsExtendedUserModeData { /** * Machine learning level for detection. */ detection: string; } export interface PreventionPolicyWindowsSensorAntiMalware { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface PreventionPolicyWindowsSensorAntiMalwareUserInitiated { /** * Machine learning level for detection. */ detection: string; /** * Machine learning level for prevention. */ prevention: string; } export interface SensorUpdatePolicySchedule { /** * Enable the scheduler for sensor update policy. */ enabled: boolean; /** * The time block to prevent sensor updates. Only set when enabled is true. */ timeBlocks?: outputs.SensorUpdatePolicyScheduleTimeBlock[]; /** * The time zones that will be used for the time blocks. Only set when enabled is true. */ timezone?: string; } export interface SensorUpdatePolicyScheduleTimeBlock { /** * The days of the week the time block should be active. */ days: string[]; /** * The end time for the time block in 24HR format. Must be atleast 1 hour more than start_time. */ endTime: string; /** * The start time for the time block in 24HR format. Must be atleast 1 hour before end_time. */ startTime: string; }