@@ -376,21 +376,21 @@ Feature: Security Monitoring
376376 @generated @skip @team:DataDog/k9-cloud-security-platform
377377 Scenario : Create a suppression rule returns "Bad Request" response
378378 Given new "CreateSecurityMonitoringSuppression" request
379- And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" }, "type" : "suppressions" }}
379+ And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" , "tags" : [ "technique:T1110-brute-force" , "source:cloudtrail" ] }, "type" : "suppressions" }}
380380 When the request is sent
381381 Then the response status is 400 Bad Request
382382
383383 @generated @skip @team:DataDog/k9-cloud-security-platform
384384 Scenario : Create a suppression rule returns "Conflict" response
385385 Given new "CreateSecurityMonitoringSuppression" request
386- And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" }, "type" : "suppressions" }}
386+ And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" , "tags" : [ "technique:T1110-brute-force" , "source:cloudtrail" ] }, "type" : "suppressions" }}
387387 When the request is sent
388388 Then the response status is 409 Conflict
389389
390390 @skip-validation @team:DataDog/k9-cloud-security-platform
391391 Scenario : Create a suppression rule returns "OK" response
392392 Given new "CreateSecurityMonitoringSuppression" request
393- And body with value {"data" : {"attributes" : {"description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "start_date" : {{ timestamp('now + 10d' ) }}000, "expiration_date" : {{ timestamp('now + 21d' ) }}000, "name" : "{{ unique }}" , "rule_query" : "type:log_detection source:cloudtrail" , "suppression_query" : "env:staging status:low" }, "type" : "suppressions" }}
393+ And body with value {"data" : {"attributes" : {"description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "start_date" : {{ timestamp('now + 10d' ) }}000, "expiration_date" : {{ timestamp('now + 21d' ) }}000, "name" : "{{ unique }}" , "rule_query" : "type:log_detection source:cloudtrail" , "suppression_query" : "env:staging status:low" , "tags" : [ "technique:T1110-brute-force" , "source:cloudtrail" ] }, "type" : "suppressions" }}
394394 When the request is sent
395395 Then the response status is 200 OK
396396 And the response "data.type" is equal to "suppressions"
@@ -1474,23 +1474,23 @@ Feature: Security Monitoring
14741474 Scenario : Update a suppression rule returns "Bad Request" response
14751475 Given new "UpdateSecurityMonitoringSuppression" request
14761476 And request contains "suppression_id" parameter from "REPLACE.ME"
1477- And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" }, "type" : "suppressions" }}
1477+ And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" , "tags" : [ "technique:T1110-brute-force" , "source:cloudtrail" ] }, "type" : "suppressions" }}
14781478 When the request is sent
14791479 Then the response status is 400 Bad Request
14801480
14811481 @generated @skip @team:DataDog/k9-cloud-security-platform
14821482 Scenario : Update a suppression rule returns "Concurrent Modification" response
14831483 Given new "UpdateSecurityMonitoringSuppression" request
14841484 And request contains "suppression_id" parameter from "REPLACE.ME"
1485- And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" }, "type" : "suppressions" }}
1485+ And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" , "tags" : [ "technique:T1110-brute-force" , "source:cloudtrail" ] }, "type" : "suppressions" }}
14861486 When the request is sent
14871487 Then the response status is 409 Concurrent Modification
14881488
14891489 @generated @skip @team:DataDog/k9-cloud-security-platform
14901490 Scenario : Update a suppression rule returns "Not Found" response
14911491 Given new "UpdateSecurityMonitoringSuppression" request
14921492 And request contains "suppression_id" parameter from "REPLACE.ME"
1493- And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" }, "type" : "suppressions" }}
1493+ And body with value {"data" : {"attributes" : {"data_exclusion_query" : "source:cloudtrail account_id:12345" , "description" : "This rule suppresses low-severity signals in staging environments." , "enabled" : true, "expiration_date" : 1703187336000, "name" : "Custom suppression" , "rule_query" : "type:log_detection source:cloudtrail" , "start_date" : 1703187336000, "suppression_query" : "env:staging status:low" , "tags" : [ "technique:T1110-brute-force" , "source:cloudtrail" ] }, "type" : "suppressions" }}
14941494 When the request is sent
14951495 Then the response status is 404 Not Found
14961496
0 commit comments