azure.mgmt.security.models module

class azure.mgmt.security.models.Resource(**kwargs)[source]

Bases: msrest.serialization.Model

Describes an Azure resource.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
class azure.mgmt.security.models.Kind(*, kind: str = None, **kwargs)[source]

Bases: msrest.serialization.Model

Describes an Azure resource with kind.

Parameters:kind (str) – Kind of the resource
class azure.mgmt.security.models.SecurityContact(*, email: str, phone: str, alert_notifications, alerts_to_admins, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

Contact details for security issues.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
Parameters:
  • email (str) – Required. The email of this security contact
  • phone (str) – Required. The phone number of this security contact
  • alert_notifications (str or AlertNotifications) – Required. Whether to send security alerts notifications to the security contact. Possible values include: ‘On’, ‘Off’
  • alerts_to_admins (str or AlertsToAdmins) – Required. Whether to send security alerts notifications to subscription admins. Possible values include: ‘On’, ‘Off’
class azure.mgmt.security.models.Pricing(*, pricing_tier, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

Pricing tier will be applied for the scope based on the resource ID.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
Parameters:

pricing_tier (str or PricingTier) – Required. Pricing tier type. Possible values include: ‘Free’, ‘Standard’

class azure.mgmt.security.models.WorkspaceSetting(*, workspace_id: str, scope: str, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

Configures where to store the OMS agent data for workspaces under a scope.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
Parameters:
  • workspace_id (str) – Required. The full Azure ID of the workspace to save the data in
  • scope (str) – Required. All the VMs in this scope will send their security data to the mentioned workspace unless overridden by a setting with more specific scope
class azure.mgmt.security.models.AutoProvisioningSetting(*, auto_provision, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

Auto provisioning setting.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
Parameters:

auto_provision (str or AutoProvision) – Required. Describes what kind of security agent provisioning action to take. Possible values include: ‘On’, ‘Off’

class azure.mgmt.security.models.ComplianceSegment(**kwargs)[source]

Bases: msrest.serialization.Model

A segment of a compliance assessment.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • segment_type (str) – The segment type, e.g. compliant, non-compliance, insufficient coverage, N/A, etc.
  • percentage (float) – The size (%) of the segment.
class azure.mgmt.security.models.Compliance(**kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

Compliance of a scope.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • assessment_timestamp_utc_date (datetime) – The timestamp when the Compliance calculation was conducted.
  • resource_count (int) – The resource count of the given subscription for which the Compliance calculation was conducted (needed for Management Group Compliance calculation).
  • assessment_result (list[ComplianceSegment]) – An array of segment, which is the actually the compliance assessment.
class azure.mgmt.security.models.AdvancedThreatProtectionSetting(*, is_enabled: bool = None, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

The Advanced Threat Protection resource.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
Parameters:

is_enabled (bool) – Indicates whether Advanced Threat Protection is enabled.

class azure.mgmt.security.models.Setting(**kwargs)[source]

Bases: msrest.serialization.Model

Represents a security setting in Azure Security Center.

You probably want to use the sub-classes and not this class directly. Known sub-classes are: DataExportSetting

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
Parameters:

kind (str) – Required. Constant filled by server.

class azure.mgmt.security.models.DataExportSetting(*, enabled: bool, **kwargs)[source]

Bases: azure.mgmt.security.models.setting_py3.Setting

Represents a data export setting.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
Parameters:
  • kind (str) – Required. Constant filled by server.
  • enabled (bool) – Required. Is the data export setting is enabled
class azure.mgmt.security.models.SettingKind1(*, kind=None, **kwargs)[source]

Bases: msrest.serialization.Model

The kind of the security setting.

Parameters:kind (str or SettingKind) – the kind of the settings string. Possible values include: ‘DataExportSetting’
class azure.mgmt.security.models.SensitivityLabel(*, display_name: str = None, order: float = None, enabled: bool = None, **kwargs)[source]

Bases: msrest.serialization.Model

The sensitivity label.

Parameters:
  • display_name (str) – The name of the sensitivity label.
  • order (float) – The order of the sensitivity label.
  • enabled (bool) – Indicates whether the label is enabled or not.
class azure.mgmt.security.models.InformationProtectionKeyword(*, pattern: str = None, custom: bool = None, can_be_numeric: bool = None, excluded: bool = None, **kwargs)[source]

Bases: msrest.serialization.Model

The information type keyword.

Parameters:
  • pattern (str) – The keyword pattern.
  • custom (bool) – Indicates whether the keyword is custom or not.
  • can_be_numeric (bool) – Indicates whether the keyword can be applied on numeric types or not.
  • excluded (bool) – Indicates whether the keyword is excluded or not.
class azure.mgmt.security.models.InformationType(*, display_name: str = None, order: float = None, recommended_label_id: str = None, enabled: bool = None, custom: bool = None, keywords=None, **kwargs)[source]

Bases: msrest.serialization.Model

The information type.

Parameters:
  • display_name (str) – The name of the information type.
  • order (float) – The order of the information type.
  • recommended_label_id (str) – The recommended label id to be associated with this information type.
  • enabled (bool) – Indicates whether the information type is enabled or not.
  • custom (bool) – Indicates whether the information type is custom or not.
  • keywords (list[InformationProtectionKeyword]) – The information type keywords.
class azure.mgmt.security.models.InformationProtectionPolicy(*, labels=None, information_types=None, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

Information protection policy.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • last_modified_utc (datetime) – Describes the last UTC time the policy was modified.
Parameters:
  • labels (dict[str, SensitivityLabel]) – Dictionary of sensitivity labels.
  • information_types (dict[str, InformationType]) – The sensitivity information types.
class azure.mgmt.security.models.Location(**kwargs)[source]

Bases: msrest.serialization.Model

Describes an Azure resource with location.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:location (str) – Location where the resource is stored
class azure.mgmt.security.models.OperationDisplay(**kwargs)[source]

Bases: msrest.serialization.Model

Security operation display.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • provider (str) – The resource provider for the operation.
  • resource (str) – The display name of the resource the operation applies to.
  • operation (str) – The display name of the security operation.
  • description (str) – The description of the operation.
class azure.mgmt.security.models.Operation(*, display=None, **kwargs)[source]

Bases: msrest.serialization.Model

Possible operation in the REST API of Microsoft.Security.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • name (str) – Name of the operation
  • origin (str) – Where the operation is originated
Parameters:

display (OperationDisplay) –

class azure.mgmt.security.models.SecurityTaskParameters(*, additional_properties=None, **kwargs)[source]

Bases: msrest.serialization.Model

Changing set of properties, depending on the task type that is derived from the name field.

Variables are only populated by the server, and will be ignored when sending a request.

Parameters:additional_properties (dict[str, object]) – Unmatched properties from the message are deserialized this collection
Variables:name (str) – Name of the task type
class azure.mgmt.security.models.SecurityTask(*, security_task_parameters=None, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

Security task that we recommend to do in order to strengthen security.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • state (str) – State of the task (Active, Resolved etc.)
  • creation_time_utc (datetime) – The time this task was discovered in UTC
  • last_state_change_time_utc (datetime) – The time this task’s details were last changed in UTC
  • sub_state (str) – Additional data on the state of the task
Parameters:

security_task_parameters (SecurityTaskParameters) –

class azure.mgmt.security.models.AscLocation(*, properties=None, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

The ASC location of the subscription is in the “name” field.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
Parameters:

properties (object) –

class azure.mgmt.security.models.AlertEntity(*, additional_properties=None, **kwargs)[source]

Bases: msrest.serialization.Model

Changing set of properties depending on the entity type.

Variables are only populated by the server, and will be ignored when sending a request.

Parameters:additional_properties (dict[str, object]) – Unmatched properties from the message are deserialized this collection
Variables:type (str) – Type of entity
class azure.mgmt.security.models.AlertConfidenceReason(**kwargs)[source]

Bases: msrest.serialization.Model

Factors that increase our confidence that the alert is a true positive.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • type (str) – Type of confidence factor
  • reason (str) – description of the confidence reason
class azure.mgmt.security.models.Alert(*, extended_properties=None, entities=None, confidence_reasons=None, **kwargs)[source]

Bases: azure.mgmt.security.models.resource_py3.Resource

Security alert.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • state (str) – State of the alert (Active, Dismissed etc.)
  • reported_time_utc (datetime) – The time the incident was reported to Microsoft.Security in UTC
  • vendor_name (str) – Name of the vendor that discovered the incident
  • alert_name (str) – Name of the alert type
  • alert_display_name (str) – Display name of the alert type
  • detected_time_utc (datetime) – The time the incident was detected by the vendor
  • description (str) – Description of the incident and what it means
  • remediation_steps (str) – Recommended steps to reradiate the incident
  • action_taken (str) – The action that was taken as a response to the alert (Active, Blocked etc.)
  • reported_severity (str) – Estimated severity of this alert
  • compromised_entity (str) – The entity that the incident happened on
  • associated_resource (str) – Azure resource ID of the associated resource
  • system_source (str) – The type of the alerted resource (Azure, Non-Azure)
  • can_be_investigated (bool) – Whether this alert can be investigated with Azure Security Center
  • confidence_score (float) – level of confidence we have on the alert
  • subscription_id (str) – Azure subscription ID of the resource that had the security alert or the subscription ID of the workspace that this resource reports to
  • instance_id (str) – Instance ID of the alert.
  • workspace_arm_id (str) – Azure resource ID of the workspace that the alert was reported to.
Parameters:
  • extended_properties (dict[str, object]) –
  • entities (list[AlertEntity]) – objects that are related to this alerts
  • confidence_reasons (list[AlertConfidenceReason]) – reasons the alert got the confidenceScore value
class azure.mgmt.security.models.DiscoveredSecuritySolution(*, security_family, offer: str, publisher: str, sku: str, **kwargs)[source]

Bases: msrest.serialization.Model

DiscoveredSecuritySolution.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • location (str) – Location where the resource is stored
Parameters:
  • security_family (str or SecurityFamily) – Required. The security family of the discovered solution. Possible values include: ‘Waf’, ‘Ngfw’, ‘SaasWaf’, ‘Va’
  • offer (str) – Required. The security solutions’ image offer
  • publisher (str) – Required. The security solutions’ image publisher
  • sku (str) – Required. The security solutions’ image sku
class azure.mgmt.security.models.TopologySingleResourceParent(**kwargs)[source]

Bases: msrest.serialization.Model

TopologySingleResourceParent.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:resource_id (str) – Azure resource id which serves as parent resource in topology view
class azure.mgmt.security.models.TopologySingleResourceChild(**kwargs)[source]

Bases: msrest.serialization.Model

TopologySingleResourceChild.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:resource_id (str) – Azure resource id which serves as child resource in topology view
class azure.mgmt.security.models.TopologySingleResource(**kwargs)[source]

Bases: msrest.serialization.Model

TopologySingleResource.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • resource_id (str) – Azure resource id
  • severity (str) – The security severity of the resource
  • recommendations_exist (bool) – Indicates if the resource has security recommendations
  • network_zones (str) – Indicates the resource connectivity level to the Internet (InternetFacing, Internal ,etc.)
  • topology_score (int) – Score of the resource based on its security severity
  • location (str) – The location of this resource
  • parents (list[TopologySingleResourceParent]) – Azure resources connected to this resource which are in higher level in the topology view
  • children (list[TopologySingleResourceChild]) – Azure resources connected to this resource which are in lower level in the topology view
class azure.mgmt.security.models.TopologyResource(**kwargs)[source]

Bases: msrest.serialization.Model

TopologyResource.

Variables are only populated by the server, and will be ignored when sending a request.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • location (str) – Location where the resource is stored
  • calculated_date_time (datetime) – The UTC time on which the topology was calculated
  • topology_resources (list[TopologySingleResource]) – Azure resources which are part of this topology resource
class azure.mgmt.security.models.JitNetworkAccessPortRule(*, number: int, protocol, max_request_access_duration: str, allowed_source_address_prefix: str = None, allowed_source_address_prefixes=None, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessPortRule.

All required parameters must be populated in order to send to Azure.

Parameters:
  • number (int) – Required.
  • protocol (str or Protocol) – Required. Possible values include: ‘TCP’, ‘UDP’, ‘All’
  • allowed_source_address_prefix (str) – Mutually exclusive with the “allowedSourceAddressPrefixes” parameter. Should be an IP address or CIDR, for example “192.168.0.3” or “192.168.0.0/16”.
  • allowed_source_address_prefixes (list[str]) – Mutually exclusive with the “allowedSourceAddressPrefix” parameter.
  • max_request_access_duration (str) – Required. Maximum duration requests can be made for. In ISO 8601 duration format. Minimum 5 minutes, maximum 1 day
class azure.mgmt.security.models.JitNetworkAccessPolicyVirtualMachine(*, id: str, ports, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessPolicyVirtualMachine.

All required parameters must be populated in order to send to Azure.

Parameters:
  • id (str) – Required. Resource ID of the virtual machine that is linked to this policy
  • ports (list[JitNetworkAccessPortRule]) – Required. Port configurations for the virtual machine
class azure.mgmt.security.models.JitNetworkAccessRequestPort(*, number: int, end_time_utc, status, status_reason, allowed_source_address_prefix: str = None, allowed_source_address_prefixes=None, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessRequestPort.

All required parameters must be populated in order to send to Azure.

Parameters:
  • number (int) – Required.
  • allowed_source_address_prefix (str) – Mutually exclusive with the “allowedSourceAddressPrefixes” parameter. Should be an IP address or CIDR, for example “192.168.0.3” or “192.168.0.0/16”.
  • allowed_source_address_prefixes (list[str]) – Mutually exclusive with the “allowedSourceAddressPrefix” parameter.
  • end_time_utc (datetime) – Required. The date & time at which the request ends in UTC
  • status (str or Status) – Required. The status of the port. Possible values include: ‘Revoked’, ‘Initiated’
  • status_reason (str or StatusReason) – Required. A description of why the status has its value. Possible values include: ‘Expired’, ‘UserRequested’, ‘NewerRequestInitiated’
class azure.mgmt.security.models.JitNetworkAccessRequestVirtualMachine(*, id: str, ports, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessRequestVirtualMachine.

All required parameters must be populated in order to send to Azure.

Parameters:
  • id (str) – Required. Resource ID of the virtual machine that is linked to this policy
  • ports (list[JitNetworkAccessRequestPort]) – Required. The ports that were opened for the virtual machine
class azure.mgmt.security.models.JitNetworkAccessRequest(*, virtual_machines, start_time_utc, requestor: str, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessRequest.

All required parameters must be populated in order to send to Azure.

Parameters:
  • virtual_machines (list[JitNetworkAccessRequestVirtualMachine]) – Required.
  • start_time_utc (datetime) – Required. The start time of the request in UTC
  • requestor (str) – Required. The identity of the person who made the request
class azure.mgmt.security.models.JitNetworkAccessPolicy(*, virtual_machines, kind: str = None, requests=None, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessPolicy.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • location (str) – Location where the resource is stored
  • provisioning_state (str) – Gets the provisioning state of the Just-in-Time policy.
Parameters:
class azure.mgmt.security.models.JitNetworkAccessPolicyInitiatePort(*, number: int, end_time_utc, allowed_source_address_prefix: str = None, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessPolicyInitiatePort.

All required parameters must be populated in order to send to Azure.

Parameters:
  • number (int) – Required.
  • allowed_source_address_prefix (str) – Source of the allowed traffic. If omitted, the request will be for the source IP address of the initiate request.
  • end_time_utc (datetime) – Required. The time to close the request in UTC
class azure.mgmt.security.models.JitNetworkAccessPolicyInitiateVirtualMachine(*, id: str, ports, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessPolicyInitiateVirtualMachine.

All required parameters must be populated in order to send to Azure.

Parameters:
  • id (str) – Required. Resource ID of the virtual machine that is linked to this policy
  • ports (list[JitNetworkAccessPolicyInitiatePort]) – Required. The ports to open for the resource with the id
class azure.mgmt.security.models.JitNetworkAccessPolicyInitiateRequest(*, virtual_machines, **kwargs)[source]

Bases: msrest.serialization.Model

JitNetworkAccessPolicyInitiateRequest.

All required parameters must be populated in order to send to Azure.

Parameters:virtual_machines (list[JitNetworkAccessPolicyInitiateVirtualMachine]) – Required. A list of virtual machines & ports to open access for
class azure.mgmt.security.models.ExternalSecuritySolution(**kwargs)[source]

Bases: msrest.serialization.Model

Represents a security solution external to Azure Security Center which sends information to an OMS workspace and whos data is displayed by Azure Security Center.

You probably want to use the sub-classes and not this class directly. Known sub-classes are: CefExternalSecuritySolution, AtaExternalSecuritySolution, AadExternalSecuritySolution

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • location (str) – Location where the resource is stored
Parameters:

kind (str) – Required. Constant filled by server.

class azure.mgmt.security.models.CefSolutionProperties(*, additional_properties=None, device_vendor: str = None, device_type: str = None, workspace=None, hostname: str = None, agent: str = None, last_event_received: str = None, **kwargs)[source]

Bases: azure.mgmt.security.models.external_security_solution_properties_py3.ExternalSecuritySolutionProperties

The external security solution properties for CEF solutions.

Parameters:
  • additional_properties (dict[str, object]) – Unmatched properties from the message are deserialized this collection
  • device_vendor (str) –
  • device_type (str) –
  • workspace (ConnectedWorkspace) –
  • hostname (str) –
  • agent (str) –
  • last_event_received (str) –
class azure.mgmt.security.models.CefExternalSecuritySolution(*, properties=None, **kwargs)[source]

Bases: azure.mgmt.security.models.external_security_solution_py3.ExternalSecuritySolution

Represents a security solution which sends CEF logs to an OMS workspace.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • location (str) – Location where the resource is stored
Parameters:
class azure.mgmt.security.models.AtaSolutionProperties(*, additional_properties=None, device_vendor: str = None, device_type: str = None, workspace=None, last_event_received: str = None, **kwargs)[source]

Bases: azure.mgmt.security.models.external_security_solution_properties_py3.ExternalSecuritySolutionProperties

The external security solution properties for ATA solutions.

Parameters:
  • additional_properties (dict[str, object]) – Unmatched properties from the message are deserialized this collection
  • device_vendor (str) –
  • device_type (str) –
  • workspace (ConnectedWorkspace) –
  • last_event_received (str) –
class azure.mgmt.security.models.AtaExternalSecuritySolution(*, properties=None, **kwargs)[source]

Bases: azure.mgmt.security.models.external_security_solution_py3.ExternalSecuritySolution

Represents an ATA security solution which sends logs to an OMS workspace.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • location (str) – Location where the resource is stored
Parameters:
class azure.mgmt.security.models.ConnectedWorkspace(*, id: str = None, **kwargs)[source]

Bases: msrest.serialization.Model

Represents an OMS workspace to which the solution is connected.

Parameters:id (str) – Azure resource ID of the connected OMS workspace
class azure.mgmt.security.models.AadSolutionProperties(*, device_vendor: str = None, device_type: str = None, workspace=None, connectivity_state=None, **kwargs)[source]

Bases: msrest.serialization.Model

The external security solution properties for AAD solutions.

Parameters:
  • device_vendor (str) –
  • device_type (str) –
  • workspace (ConnectedWorkspace) –
  • connectivity_state (str or AadConnectivityState) – The connectivity state of the external AAD solution . Possible values include: ‘Discovered’, ‘NotLicensed’, ‘Connected’
class azure.mgmt.security.models.AadExternalSecuritySolution(*, properties=None, **kwargs)[source]

Bases: azure.mgmt.security.models.external_security_solution_py3.ExternalSecuritySolution

Represents an AAD identity protection solution which sends logs to an OMS workspace.

Variables are only populated by the server, and will be ignored when sending a request.

All required parameters must be populated in order to send to Azure.

Variables:
  • id (str) – Resource Id
  • name (str) – Resource name
  • type (str) – Resource type
  • location (str) – Location where the resource is stored
Parameters:
class azure.mgmt.security.models.ExternalSecuritySolutionKind1(*, kind=None, **kwargs)[source]

Bases: msrest.serialization.Model

Describes an Azure resource with kind.

Parameters:kind (str or ExternalSecuritySolutionKind) – The kind of the external solution. Possible values include: ‘CEF’, ‘ATA’, ‘AAD’
class azure.mgmt.security.models.ExternalSecuritySolutionProperties(*, additional_properties=None, device_vendor: str = None, device_type: str = None, workspace=None, **kwargs)[source]

Bases: msrest.serialization.Model

The solution properties (correspond to the solution kind).

Parameters:
  • additional_properties (dict[str, object]) – Unmatched properties from the message are deserialized this collection
  • device_vendor (str) –
  • device_type (str) –
  • workspace (ConnectedWorkspace) –
class azure.mgmt.security.models.AadConnectivityState1(*, connectivity_state=None, **kwargs)[source]

Bases: msrest.serialization.Model

Describes an Azure resource with kind.

Parameters:connectivity_state (str or AadConnectivityState) – The connectivity state of the external AAD solution . Possible values include: ‘Discovered’, ‘NotLicensed’, ‘Connected’
class azure.mgmt.security.models.PricingPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of Pricing object

class azure.mgmt.security.models.SecurityContactPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of SecurityContact object

class azure.mgmt.security.models.WorkspaceSettingPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of WorkspaceSetting object

class azure.mgmt.security.models.AutoProvisioningSettingPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of AutoProvisioningSetting object

class azure.mgmt.security.models.CompliancePaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of Compliance object

class azure.mgmt.security.models.SettingPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of Setting object

class azure.mgmt.security.models.InformationProtectionPolicyPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of InformationProtectionPolicy object

class azure.mgmt.security.models.OperationPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of Operation object

class azure.mgmt.security.models.AscLocationPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of AscLocation object

class azure.mgmt.security.models.SecurityTaskPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of SecurityTask object

class azure.mgmt.security.models.AlertPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of Alert object

class azure.mgmt.security.models.DiscoveredSecuritySolutionPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of DiscoveredSecuritySolution object

class azure.mgmt.security.models.JitNetworkAccessPolicyPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of JitNetworkAccessPolicy object

class azure.mgmt.security.models.ExternalSecuritySolutionPaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of ExternalSecuritySolution object

class azure.mgmt.security.models.TopologyResourcePaged(*args, **kwargs)[source]

Bases: msrest.paging.Paged

A paging container for iterating over a list of TopologyResource object

class azure.mgmt.security.models.AlertNotifications[source]

Bases: str, enum.Enum

An enumeration.

off = 'Off'

Don’t get notifications on new alerts

on = 'On'

Get notifications on new alerts

class azure.mgmt.security.models.AlertsToAdmins[source]

Bases: str, enum.Enum

An enumeration.

off = 'Off'

Don’t send notification on new alerts to the subscription’s admins

on = 'On'

Send notification on new alerts to the subscription’s admins

class azure.mgmt.security.models.PricingTier[source]

Bases: str, enum.Enum

An enumeration.

free = 'Free'

Get free Azure security center experience with basic security features

standard = 'Standard'

Get the standard Azure security center experience with advanced security features

class azure.mgmt.security.models.AutoProvision[source]

Bases: str, enum.Enum

An enumeration.

off = 'Off'

Do not install security agent on the VMs automatically

on = 'On'

Install missing security agent on VMs automatically

class azure.mgmt.security.models.SettingKind[source]

Bases: str, enum.Enum

An enumeration.

data_export_setting = 'DataExportSetting'
class azure.mgmt.security.models.SecurityFamily[source]

Bases: str, enum.Enum

An enumeration.

ngfw = 'Ngfw'
saas_waf = 'SaasWaf'
va = 'Va'
waf = 'Waf'
class azure.mgmt.security.models.Protocol[source]

Bases: str, enum.Enum

An enumeration.

all = '*'
tcp = 'TCP'
udp = 'UDP'
class azure.mgmt.security.models.Status[source]

Bases: str, enum.Enum

An enumeration.

initiated = 'Initiated'
revoked = 'Revoked'
class azure.mgmt.security.models.StatusReason[source]

Bases: str, enum.Enum

An enumeration.

expired = 'Expired'
newer_request_initiated = 'NewerRequestInitiated'
user_requested = 'UserRequested'
class azure.mgmt.security.models.AadConnectivityState[source]

Bases: str, enum.Enum

An enumeration.

connected = 'Connected'
discovered = 'Discovered'
not_licensed = 'NotLicensed'
class azure.mgmt.security.models.ExternalSecuritySolutionKind[source]

Bases: str, enum.Enum

An enumeration.

aad = 'AAD'
ata = 'ATA'
cef = 'CEF'