Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Exception List creation and updates #835

Open
adrianchen-es opened this issue Oct 8, 2024 · 0 comments
Open

[Feature] Exception List creation and updates #835

adrianchen-es opened this issue Oct 8, 2024 · 0 comments
Labels
enhancement New feature or request

Comments

@adrianchen-es
Copy link

Describe the resource you would like to have implemented.
I'd like to manage the Exception Lists using the provider:

A resource to allow creation/updates

create exception container: https://www.elastic.co/guide/en/security/current/exceptions-api-create-container.html
create exception item: https://www.elastic.co/guide/en/security/current/exceptions-api-create-exception-item.html
create a shared exception list: https://www.elastic.co/guide/en/security/current/exceptions-api-create-shared-exception-list.html
update: https://www.elastic.co/guide/en/security/current/exceptions-api-update-container.html
update: https://www.elastic.co/guide/en/security/current/exceptions-api-update-item.html
delete: https://www.elastic.co/guide/en/security/current/exceptions-api-delete-container.html
delete: https://www.elastic.co/guide/en/security/current/exceptions-api-delete-item.html

Data
https://www.elastic.co/guide/en/security/current/exceptions-api-get-container.html
https://www.elastic.co/guide/en/security/current/exceptions-api-create-shared-exception-list.html
https://www.elastic.co/guide/en/security/current/exceptions-api-get-item.html

Describe the solution you'd like
The provider can be used to create Security rules with the siem.* type. It would be a holistic solution for users of the Elasticstack provider if exception lists can also be created and updated in the Provider without requiring another solution - e.g. DaC

Describe alternatives you've considered

  • Using the API directly via custom scripts
  • The DaC work

Additional context
Add any other context or screenshots about the feature request here.

@adrianchen-es adrianchen-es added the enhancement New feature or request label Oct 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant