Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

New Incidents stable version #14000

Merged
merged 31 commits into from
Jun 7, 2021
Merged

New Incidents stable version #14000

merged 31 commits into from
Jun 7, 2021

Conversation

roherzbe
Copy link
Contributor

@roherzbe roherzbe commented Apr 18, 2021

MSFT employees can try out our new experience at OpenAPI Hub - one location for using our validation tools and finding your workflow.

Changelog

Please ensure to add changelog with this PR by answering the following questions.

  1. What's the purpose of the update?
    • new service onboarding
    • new API version
    • update existing version for new feature
    • update existing version to fix swagger quality issue in s360
    • Other, please clarify
  2. When you are targeting to deploy new service/feature to public regions? Please provide date, or month to public if date is not available yet.
  3. When you expect to publish swagger? Please provide date, or month to public if date is not available yet.
  4. If it's an update to existing version, please select SDKs of specific language and CLIs that require refresh after swagger is published.
    • SDK of .NET (need service team to ensure code readiness)
    • SDK of Python
    • SDK of Java
    • SDK of Js
    • SDK of Go
    • PowerShell
    • CLI
    • Terraform
    • No, no need to refresh for updates in this PR

Contribution checklist:

If any further question about AME onboarding or validation tools, please view the FAQ.

ARM API Review Checklist

  • Ensure to check this box if one of the following scenarios meet updates in the PR, so that label “WaitForARMFeedback” will be added automatically to involve ARM API Review. Failure to comply may result in delays for manifest application. Note this does not apply to data plane APIs, all “removals” and “adding a new property” no more require ARM API review.

    • Adding new API(s)
    • Adding a new API version
    • Ensure to copy the existing version into new directory structure for first commit (including refactoring) and then push new changes including version updates in separate commits. This is required to review the changes efficiently.
    • Adding a new service
  • Please ensure you've reviewed following guidelines including ARM resource provider contract and REST guidelines. Estimated time (4 hours). This is required before you can request review from ARM API Review board.

  • If you are blocked on ARM review and want to get the PR merged with urgency, please get the ARM oncall for reviews (RP Manifest Approvers team under Azure Resource Manager service) from IcM and reach out to them.

Breaking Change Review Checklist

If there are following updates in the PR, ensure to request an approval from Breaking Change Review Board as defined in the Breaking Change Policy.

  • Removing API(s) in stable version
  • Removing properties in stable version
  • Removing API version(s) in stable version
  • Updating API in stable or public preview version with Breaking Change Validation errors
  • Updating API(s) in public preview over 1 year (refer to Retirement of Previews)

Action: to initiate an evaluation of the breaking change, create a new intake using the template for breaking changes. Addition details on the process and office hours are on the Breaking change Wiki.

Please follow the link to find more details on PR review process.

@openapi-workflow-bot
Copy link

Hi, @roherzbe Thanks for your PR. I am workflow bot for review process. Here are some small tips.

  • Please ensure to do self-check against checklists in first PR comment.
  • PR assignee is the person auto-assigned and responsible for your current PR reviewing and merging.
  • For specs comparison cross API versions, Use API Specs Comparison Report Generator
  • If there is CI failure(s), to fix CI error(s) is mandatory for PR merging; or you need to provide justification in PR comment for explanation. How to fix?

  • Any feedback about review process or workflow bot, pls contact swagger and tools team. vsswagger@microsoft.com

    @openapi-workflow-bot
    Copy link

    [Call for Action] To better understand Azure service dev/test scenario, and support Azure service developer better on Swagger and REST API related tests in early phase, please help to fill in with this survey https://aka.ms/SurveyForEarlyPhase. It will take 5 to 10 minutes. If you already complete survey, please neglect this comment. Thanks.

    @openapi-pipeline-app
    Copy link

    openapi-pipeline-app bot commented Apr 18, 2021

    Swagger Validation Report

    ️⚠️BreakingChange: 1 Warnings warning [Detail]
    Rule Message
    ⚠️ 1032 - DifferentAllOf The new version has a different 'allOf' property than the previous one.
    New: resource-manager/common/1.0/types.json#L38:5
    Old: resource-manager/common/1.0/types.json#L38:5
    ️⚠️LintDiff: 11 Warnings warning [Detail]
    The following errors/warnings are introduced by current PR:

    Only 10 items are listed, please refer to log for more details.

    Rule Message
    ⚠️ R3010 - TrackedResourceListByImmediateParent The child tracked resource, 'comments' with immediate parent 'Incident', must have a list by immediate parent operation.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L69
    ⚠️ R3010 - TrackedResourceListByImmediateParent The child tracked resource, 'relations' with immediate parent 'Incident', must have a list by immediate parent operation.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L69
    ⚠️ R3017 - GuidUsage Guid used in model definition 'AccountEntityProperties' for property 'objectGuid'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L851
    ⚠️ R3017 - GuidUsage Guid used in model definition 'IoTDeviceEntityProperties' for property 'iotSecurityAgentId'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L2213
    ⚠️ R3017 - GuidUsage Guid used in model definition 'MailboxEntityProperties' for property 'externalDirectoryObjectId'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L2382
    ⚠️ R3017 - GuidUsage Guid used in model definition 'MailMessageEntityProperties' for property 'networkMessageId'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L2603
    ⚠️ R3017 - GuidUsage Guid used in model definition 'SecurityGroupEntityProperties' for property 'objectGuid'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L3569
    ⚠️ R3017 - GuidUsage Guid used in model definition 'SubmissionMailEntityProperties' for property 'networkMessageId'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L3608
    ⚠️ R3018 - EnumInsteadOfBoolean Booleans are not descriptive and make them hard to use. Consider using string enums with allowed set of values defined. Property: isDomainJoined
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L841
    ⚠️ R3018 - EnumInsteadOfBoolean Booleans are not descriptive and make them hard to use. Consider using string enums with allowed set of values defined. Property: isDomainJoined
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L1491


    The following errors/warnings exist before current PR submission:

    Rule Message
    R4017 - TopLevelResourcesListBySubscription The top-level resource 'Incident' does not have list by subscription operation, please add it.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L1641
    R4018 - OperationsApiResponseSchema The response schema of operations API '/providers/Microsoft.SecurityInsights/operations' does not match the ARM specification. Please standardize the schema.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L37
    ⚠️ R3017 - GuidUsage Guid used in model definition 'ClientInfo' for property 'objectId'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L983
    ⚠️ R3017 - GuidUsage Guid used in model definition 'IncidentOwnerInfo' for property 'objectId'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L1955
    ⚠️ R3017 - GuidUsage Guid used in model definition 'UserInfo' for property 'objectId'. Usage of Guid is not recommanded. If GUIDs are absolutely required in your service, please get sign off from the Azure API review board.
    Location: Microsoft.SecurityInsights/stable/2021-04-01/Incidents.json#L3748
    ️️✔️Avocado succeeded [Detail] [Expand]
    Validation passes for Avocado.
    ️️✔️ModelValidation succeeded [Detail] [Expand]
    Validation passes for ModelValidation.
    ️️✔️SemanticValidation succeeded [Detail] [Expand]
    Validation passes for SemanticValidation.
    ️❌Cross-Version Breaking Changes: 5 Errors, 1 Warnings failed [Detail]
    The following breaking changes are detected by comparison with latest preview version:
    Rule Message
    1007 - RemovedClientParameter The new version is missing a client parameter that was found in the old version. Was 'ApiVersion' removed or renamed?
    New: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L136:3
    Old: Microsoft.SecurityInsights/preview/2021-03-01-preview/operations.json#L126:3
    1026 - TypeChanged The new version has a different type '' than the previous one 'object'.
    New: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L58:13
    Old: Microsoft.SecurityInsights/preview/2021-03-01-preview/operations.json#L58:13
    1026 - TypeChanged The new version has a different type '' than the previous one 'object'.
    New: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L73:9
    Old: resource-manager/common/1.0/types.json#L12:9
    1026 - TypeChanged The new version has a different type '' than the previous one 'object'.
    New: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L70:5
    Old: resource-manager/common/1.0/types.json#L9:5
    1037 - ConstraintIsWeaker The new version has a less constraining 'enum' value than the previous one.
    New: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L41:9
    Old: Microsoft.SecurityInsights/preview/2021-03-01-preview/operations.json#L41:9
    ⚠️ 1016 - ConstantStatusHasChanged The 'constant' status changed from the old version to the new.
    New: Microsoft.SecurityInsights/stable/2021-04-01/operations.json#L41:9
    Old: Microsoft.SecurityInsights/preview/2021-03-01-preview/operations.json#L41:9
    ️️✔️CredScan succeeded [Detail] [Expand]
    There is no credential detected.
    ️️✔️[Staging] SDK Track2 Validation succeeded [Detail] [Expand]
    Validation passes for SDKTrack2Validation

    The following errors/warnings are introduced by current PR:

    |:speech_balloon: AutorestCore/Exception|"readme":"securityinsights/resource-manager/readme.md",
    "tag":"package-2021-03-preview-only",
    "details":"> Installing AutoRest extension '@microsoft.azure/openapi-validator' (1.8.0)"|
    |:speech_balloon: AutorestCore/Exception|"readme":"securityinsights/resource-manager/readme.md",
    "tag":"package-2021-03-preview-only",
    "details":"> Installed AutoRest extension '@microsoft.azure/openapi-validator' (1.8.0->1.8.0)"|
    |:speech_balloon: AutorestCore/Exception|"readme":"securityinsights/resource-manager/readme.md",
    "tag":"package-2021-04-01-only",
    "details":"> Loading AutoRest extension '@microsoft.azure/openapi-validator' (1.8.0->1.8.0)"|
    |:speech_balloon: AutorestCore/Exception|"readme":"securityinsights/resource-manager/readme.md",
    "tag":"package-2021-04-01-only",
    "details":"> Loading AutoRest extension '@autorest/modelerfour' (4.15.456->4.15.456)"|


    The following errors/warnings exist before current PR submission:

    |:speech_balloon: AutorestCore/Exception|"readme":"securityinsights/resource-manager/readme.md",
    "tag":"package-2021-03-preview-only",
    "details":"> Loading AutoRest extension '@autorest/modelerfour' (4.15.456->4.15.456)"|

    ️️✔️[Staging] PrettierCheck succeeded [Detail] [Expand]
    Validation passes for PrettierCheck.
    ️️✔️[Staging] SpellCheck succeeded [Detail] [Expand]
    Validation passes for SpellCheck.
    ️️✔️[Staging] Lint(RPaaS) succeeded [Detail] [Expand]
    Validation passes for Lint(RPaaS).
    Posted by Swagger Pipeline | How to fix these errors?

    @openapi-pipeline-app
    Copy link

    openapi-pipeline-app bot commented Apr 18, 2021

    Swagger Generation Artifacts

    ️️✔️[Staging] ApiDocPreview succeeded [Detail] [Expand]
     Please click here to preview with your @microsoft account. 
    ️❌[Staging] SDK Breaking Change Tracking failed [Detail]

    Breaking Changes Tracking

    azure-sdk-for-go - securityinsight/mgmt/v1.0/securityinsight - v55.0.0
    +	Package was removed
    ️✔️azure-sdk-for-go - securityinsight/mgmt/2020-01-01/securityinsight - v55.0.0
    -	Const `AlertRuleKindFusion` has been removed
    -	Const `AlertRuleKindMicrosoftSecurityIncidentCreation` has been removed
    -	Const `AlertRuleKindScheduled` has been removed
    -	Const `AlertSeverityHigh` has been removed
    -	Const `AlertSeverityInformational` has been removed
    -	Const `AlertSeverityLow` has been removed
    -	Const `AlertSeverityMedium` has been removed
    -	Const `AttackTacticCollection` has been removed
    -	Const `AttackTacticCommandAndControl` has been removed
    -	Const `AttackTacticCredentialAccess` has been removed
    -	Const `AttackTacticDefenseEvasion` has been removed
    -	Const `AttackTacticDiscovery` has been removed
    -	Const `AttackTacticExecution` has been removed
    -	Const `AttackTacticExfiltration` has been removed
    -	Const `AttackTacticImpact` has been removed
    -	Const `AttackTacticInitialAccess` has been removed
    -	Const `AttackTacticLateralMovement` has been removed
    -	Const `AttackTacticPersistence` has been removed
    -	Const `AttackTacticPrivilegeEscalation` has been removed
    -	Const `DataTypeStateDisabled` has been removed
    -	Const `DataTypeStateEnabled` has been removed
    -	Const `IncidentClassificationBenignPositive` has been removed
    -	Const `IncidentClassificationFalsePositive` has been removed
    -	Const `IncidentClassificationReasonInaccurateData` has been removed
    -	Const `IncidentClassificationReasonIncorrectAlertLogic` has been removed
    -	Const `IncidentClassificationReasonSuspiciousActivity` has been removed
    -	Const `IncidentClassificationReasonSuspiciousButExpected` has been removed
    -	Const `IncidentClassificationTruePositive` has been removed
    -	Const `IncidentClassificationUndetermined` has been removed
    -	Const `IncidentLabelTypeSystem` has been removed
    -	Const `IncidentLabelTypeUser` has been removed
    -	Const `KindBasicDataConnectorKindAmazonWebServicesCloudTrail` has been removed
    -	Const `KindBasicDataConnectorKindAzureActiveDirectory` has been removed
    -	Const `KindBasicDataConnectorKindAzureAdvancedThreatProtection` has been removed
    -	Const `KindBasicDataConnectorKindAzureSecurityCenter` has been removed
    -	Const `KindBasicDataConnectorKindDataConnector` has been removed
    -	Const `KindBasicDataConnectorKindMicrosoftCloudAppSecurity` has been removed
    -	Const `KindBasicDataConnectorKindMicrosoftDefenderAdvancedThreatProtection` has been removed
    -	Const `KindBasicDataConnectorKindOffice365` has been removed
    -	Const `KindBasicDataConnectorKindThreatIntelligence` has been removed
    -	Const `KindBasicSettingsKindSettings` has been removed
    -	Const `KindBasicSettingsKindToggleSettings` has been removed
    -	Const `KindBasicSettingsKindUebaSettings` has been removed
    -	Const `MicrosoftSecurityProductNameAzureActiveDirectoryIdentityProtection` has been removed
    -	Const `MicrosoftSecurityProductNameAzureAdvancedThreatProtection` has been removed
    -	Const `MicrosoftSecurityProductNameAzureSecurityCenter` has been removed
    -	Const `MicrosoftSecurityProductNameAzureSecurityCenterforIoT` has been removed
    -	Const `MicrosoftSecurityProductNameMicrosoftCloudAppSecurity` has been removed
    -	Const `TemplateStatusAvailable` has been removed
    -	Const `TemplateStatusInstalled` has been removed
    -	Const `TemplateStatusNotAvailable` has been removed
    -	Const `TriggerOperatorEqual` has been removed
    -	Const `TriggerOperatorGreaterThan` has been removed
    -	Const `TriggerOperatorLessThan` has been removed
    -	Const `TriggerOperatorNotEqual` has been removed
    ️✔️azure-sdk-for-go - preview/securityinsight/mgmt/2019-01-01-preview/securityinsight - v55.0.0
    -	Const `AlertSeverityHigh` has been removed
    -	Const `AlertSeverityInformational` has been removed
    -	Const `AlertSeverityLow` has been removed
    -	Const `AlertSeverityMedium` has been removed
    -	Const `AntispamMailDirectionInbound` has been removed
    -	Const `AntispamMailDirectionIntraorg` has been removed
    -	Const `AntispamMailDirectionOutbound` has been removed
    -	Const `AntispamMailDirectionUnknown` has been removed
    -	Const `AttackTacticCollection` has been removed
    -	Const `AttackTacticCommandAndControl` has been removed
    -	Const `AttackTacticCredentialAccess` has been removed
    -	Const `AttackTacticDefenseEvasion` has been removed
    -	Const `AttackTacticDiscovery` has been removed
    -	Const `AttackTacticExecution` has been removed
    -	Const `AttackTacticExfiltration` has been removed
    -	Const `AttackTacticImpact` has been removed
    -	Const `AttackTacticInitialAccess` has been removed
    -	Const `AttackTacticLateralMovement` has been removed
    -	Const `AttackTacticPersistence` has been removed
    -	Const `AttackTacticPreAttack` has been removed
    -	Const `AttackTacticPrivilegeEscalation` has been removed
    -	Const `AutomationRulePropertyConditionSupportedOperatorContains` has been removed
    -	Const `AutomationRulePropertyConditionSupportedOperatorEndsWith` has been removed
    -	Const `AutomationRulePropertyConditionSupportedOperatorEquals` has been removed
    -	Const `AutomationRulePropertyConditionSupportedOperatorNotContains` has been removed
    -	Const `AutomationRulePropertyConditionSupportedOperatorNotEndsWith` has been removed
    -	Const `AutomationRulePropertyConditionSupportedOperatorNotEquals` has been removed
    -	Const `AutomationRulePropertyConditionSupportedOperatorNotStartsWith` has been removed
    -	Const `AutomationRulePropertyConditionSupportedOperatorStartsWith` has been removed
    -	Const `CloseReasonDismissed` has been removed
    -	Const `CloseReasonFalsePositive` has been removed
    -	Const `CloseReasonOther` has been removed
    -	Const `CloseReasonResolved` has been removed
    -	Const `CloseReasonTruePositive` has been removed
    -	Const `ConfidenceScoreStatusFinal` has been removed
    -	Const `ConfidenceScoreStatusInProcess` has been removed
    -	Const `ConfidenceScoreStatusNotApplicable` has been removed
    -	Const `ConfidenceScoreStatusNotFinal` has been removed
    -	Const `DataConnectorAuthorizationStateInvalid` has been removed
    -	Const `DataConnectorAuthorizationStateValid` has been removed
    -	Const `DataTypeStateDisabled` has been removed
    -	Const `DataTypeStateEnabled` has been removed
    -	Const `ElevationTokenDefault` has been removed
    -	Const `ElevationTokenFull` has been removed
    -	Const `ElevationTokenLimited` has been removed
    -	Const `EntitiesMatchingMethodAll` has been removed
    -	Const `EntitiesMatchingMethodCustom` has been removed
    -	Const `EntitiesMatchingMethodNone` has been removed
    -	Const `EntityQueryKindExpansion` has been removed
    -	Const `EntityQueryKindInsight` has been removed
    -	Const `EventGroupingAggregationKindAlertPerResult` has been removed
    -	Const `EventGroupingAggregationKindSingleAlert` has been removed
    -	Const `GroupingEntityTypeAccount` has been removed
    -	Const `GroupingEntityTypeFileHash` has been removed
    -	Const `GroupingEntityTypeHost` has been removed
    -	Const `GroupingEntityTypeIP` has been removed
    -	Const `GroupingEntityTypeURL` has been removed
    -	Const `IncidentClassificationReasonInaccurateData` has been removed
    -	Const `IncidentClassificationReasonIncorrectAlertLogic` has been removed
    -	Const `IncidentClassificationReasonSuspiciousActivity` has been removed
    -	Const `IncidentClassificationReasonSuspiciousButExpected` has been removed
    -	Const `IncidentLabelTypeSystem` has been removed
    -	Const `IncidentLabelTypeUser` has been removed
    -	Const `KindBasicAlertRuleKindAlertRule` has been removed
    -	Const `KindBasicAlertRuleKindFusion` has been removed
    -	Const `KindBasicAlertRuleKindMLBehaviorAnalytics` has been removed
    -	Const `KindBasicAlertRuleKindMicrosoftSecurityIncidentCreation` has been removed
    -	Const `KindBasicAlertRuleKindScheduled` has been removed
    -	Const `KindBasicAlertRuleKindThreatIntelligence` has been removed
    -	Const `KindBasicEntityKindAccount` has been removed
    -	Const `KindBasicEntityKindAzureResource` has been removed
    -	Const `KindBasicEntityKindBookmark` has been removed
    -	Const `KindBasicEntityKindCloudApplication` has been removed
    -	Const `KindBasicEntityKindDNSResolution` has been removed
    -	Const `KindBasicEntityKindEntity` has been removed
    -	Const `KindBasicEntityKindFileHash` has been removed
    -	Const `KindBasicEntityKindFile` has been removed
    -	Const `KindBasicEntityKindHost` has been removed
    -	Const `KindBasicEntityKindIP` has been removed
    -	Const `KindBasicEntityKindIoTDevice` has been removed
    -	Const `KindBasicEntityKindMailCluster` has been removed
    -	Const `KindBasicEntityKindMailMessage` has been removed
    -	Const `KindBasicEntityKindMailbox` has been removed
    -	Const `KindBasicEntityKindMalware` has been removed
    -	Const `KindBasicEntityKindProcess` has been removed
    -	Const `KindBasicEntityKindRegistryKey` has been removed
    -	Const `KindBasicEntityKindRegistryValue` has been removed
    -	Const `KindBasicEntityKindSecurityAlert` has been removed
    -	Const `KindBasicEntityKindSecurityGroup` has been removed
    -	Const `KindBasicEntityKindSubmissionMail` has been removed
    -	Const `KindBasicEntityKindURL` has been removed
    -	Const `KindBasicEntityQueryKindEntityQuery` has been removed
    -	Const `KindBasicEntityQueryKindExpansion` has been removed
    -	Const `KindBasicSettingsKindEntityAnalytics` has been removed
    -	Const `KindBasicSettingsKindEyesOn` has been removed
    -	Const `KindBasicSettingsKindIPSyncer` has been removed
    -	Const `KindBasicSettingsKindSettings` has been removed
    -	Const `KindBasicSettingsKindUeba` has been removed
    -	Const `KindBasicThreatIntelligenceInformationKindIndicator` has been removed
    -	Const `KindBasicThreatIntelligenceInformationKindThreatIntelligenceInformation` has been removed
    -	Const `MicrosoftSecurityProductNameAzureActiveDirectoryIdentityProtection` has been removed
    -	Const `MicrosoftSecurityProductNameAzureAdvancedThreatProtection` has been removed
    -	Const `MicrosoftSecurityProductNameAzureSecurityCenter` has been removed
    -	Const `MicrosoftSecurityProductNameAzureSecurityCenterforIoT` has been removed
    -	Const `MicrosoftSecurityProductNameMicrosoftCloudAppSecurity` has been removed
    -	Const `MicrosoftSecurityProductNameMicrosoftDefenderAdvancedThreatProtection` has been removed
    -	Const `MicrosoftSecurityProductNameOffice365AdvancedThreatProtection` has been removed
    -	Const `PollingFrequencyOnceADay` has been removed
    -	Const `PollingFrequencyOnceAMinute` has been removed
    -	Const `PollingFrequencyOnceAnHour` has been removed
    -	Const `RegistryHiveHKEYA` has been removed
    -	Const `RegistryHiveHKEYCLASSESROOT` has been removed
    -	Const `RegistryHiveHKEYCURRENTCONFIG` has been removed
    -	Const `RegistryHiveHKEYCURRENTUSERLOCALSETTINGS` has been removed
    -	Const `RegistryHiveHKEYCURRENTUSER` has been removed
    -	Const `RegistryHiveHKEYLOCALMACHINE` has been removed
    -	Const `RegistryHiveHKEYPERFORMANCEDATA` has been removed
    -	Const `RegistryHiveHKEYPERFORMANCENLSTEXT` has been removed
    -	Const `RegistryHiveHKEYPERFORMANCETEXT` has been removed
    -	Const `RegistryHiveHKEYUSERS` has been removed
    -	Const `RelationTypesCasesToBookmarks` has been removed
    -	Const `SourceLocalfile` has been removed
    -	Const `SourceRemotestorage` has been removed
    -	Const `TemplateStatusAvailable` has been removed
    -	Const `TemplateStatusInstalled` has been removed
    -	Const `TemplateStatusNotAvailable` has been removed
    -	Const `ThreatIntelligenceResourceKindIndicator` has been removed
    -	Const `ThreatIntelligenceSortingCriteriaAscending` has been removed
    -	Const `ThreatIntelligenceSortingCriteriaDescending` has been removed
    -	Const `ThreatIntelligenceSortingCriteriaUnsorted` has been removed
    -	Const `TriggerOperatorEqual` has been removed
    -	Const `TriggerOperatorGreaterThan` has been removed
    -	Const `TriggerOperatorLessThan` has been removed
    -	Const `TriggerOperatorNotEqual` has been removed
    -	Const `UebaDataSourcesAuditLogs` has been removed
    -	Const `UebaDataSourcesAzureActivity` has been removed
    -	Const `UebaDataSourcesSecurityEvent` has been removed
    -	Const `UebaDataSourcesSigninLogs` has been removed
    ️️✔️ azure-sdk-for-net succeeded [Detail] [Expand]
    • ️✔️Succeeded [Logs]Release - Generate from 48bdeb7. SDK Automation 14.0.0
      warn	Skip initScript due to not configured
      command	sudo apt-get install -y dotnet-sdk-5.0
      command	autorest --version=V2 --csharp --reflect-api-versions --license-header=MICROSOFT_MIT_NO_VERSION --use=@microsoft.azure/autorest.csharp@2.3.82 --csharp-sdks-folder=/home/vsts/work/1/s/azure-sdk-for-net/sdk ../azure-rest-api-specs/specification/securityinsights/resource-manager/readme.md
      cmderr	[Autorest] realpath(): Permission denied
      cmderr	[Autorest] realpath(): Permission denied
      cmderr	[Autorest] realpath(): Permission denied
      cmderr	[Autorest] realpath(): Permission denied
      cmderr	[Autorest] realpath(): Permission denied
      cmderr	[Autorest] realpath(): Permission denied
    • ️✔️Microsoft.Azure.Management.SecurityInsights [View full logs]  [Release SDK Changes]
    ️❌ azure-sdk-for-go failed [Detail]
    • Failed [Logs]Release - Generate from 48bdeb7. SDK Automation 14.0.0
      command	sh ./initScript.sh ../../../../../azure-sdk-for-go_tmp/initInput.json ../../../../../azure-sdk-for-go_tmp/initOutput.json
      error	Script return with result [failed] code [1] signal [null] cwd [azure-sdk-for-go/src/github.com/Azure/azure-sdk-for-go]: sh ./initScript.sh
      warn	File azure-sdk-for-go_tmp/initOutput.json not found to read
      command	go run ./tools/generator/main.go automation ../../../../../azure-sdk-for-go_tmp/generateInput.json ../../../../../azure-sdk-for-go_tmp/generateOutput.json
      error	Script return with result [failed] code [1] signal [null] cwd [azure-sdk-for-go/src/github.com/Azure/azure-sdk-for-go]: go run ./tools/generator/main.go automation
      warn	Skip package processing as generation is failed
    ️⚠️ azure-sdk-for-python-track2 warning [Detail]
    • ⚠️Warning [Logs]Release - Generate from 48bdeb7. SDK Automation 14.0.0
      command	sh scripts/automation_init.sh ../azure-sdk-for-python_tmp/initInput.json ../azure-sdk-for-python_tmp/initOutput.json
      cmderr	[automation_init.sh] WARNING: Skipping azure-nspkg as it is not installed.
      command	sh scripts/automation_generate.sh ../azure-sdk-for-python_tmp/generateInput.json ../azure-sdk-for-python_tmp/generateOutput.json
    • ️✔️track2_azure-mgmt-securityinsight [View full logs]  [Release SDK Changes]
      error	breakingChangeTracking is enabled, but version or changelogItem is not found in output.
    ️️✔️ azure-sdk-for-js succeeded [Detail] [Expand]
    • ️✔️Succeeded [Logs]Release - Generate from 48bdeb7. SDK Automation 14.0.0
      warn	Skip initScript due to not configured
      command	autorest --version=V2 --typescript --license-header=MICROSOFT_MIT_NO_VERSION --use=@microsoft.azure/autorest.typescript@4.6.0 --typescript-sdks-folder=/home/vsts/work/1/s/azure-sdk-for-js/azure-sdk-for-js ../../azure-rest-api-specs/specification/securityinsights/resource-manager/readme.md
    • ️✔️@azure/arm-securityinsight [View full logs]  [Release SDK Changes]
      cmderr	[npmPack] loaded rollup.config.js with warnings
      cmderr	[npmPack] (!) Unused external imports
      cmderr	[npmPack] default imported from external module 'rollup' but never used
      cmderr	[npmPack] ./esm/securityInsights.js → ./dist/arm-securityinsight.js...
      cmderr	[npmPack] created ./dist/arm-securityinsight.js in 424ms
    ️️✔️ azure-cli-extensions succeeded [Detail] [Expand]
    • ️✔️Succeeded [Logs]Release - Generate from 48bdeb7. Azure CLI Automation 14.0.0
      warn	Skip initScript due to not configured
      command	npx n 12
      command	python3 -m venv venv
      command	pip install --upgrade setuptools wheel pip
      command	pip install pathlib jinja2 msrestazure
      command	autorest --az --use=@autorest/az@latest --version=3.0.6271 --clear-output-folder=true --azure-cli-extension-folder=/home/vsts/work/1/s/azure-cli-extensions ../azure-rest-api-specs/specification/securityinsights/resource-manager/readme.md
      cmdout	[Autorest] WARNING (PreCheck/AllOfWhenYouMeantRef): Schema 'AwsCloudTrailDataConnectorDataTypes-logs' is using an 'allOf' instead of a $ref. This creates a wasteful anonymous type when generating code.
      cmdout	[Autorest] WARNING (PreCheck/AllOfWhenYouMeantRef): Schema 'OfficeDataConnectorDataTypes-exchange' is using an 'allOf' instead of a $ref. This creates a wasteful anonymous type when generating code.
      cmdout	[Autorest] WARNING (PreCheck/AllOfWhenYouMeantRef): Schema 'OfficeDataConnectorDataTypes-sharePoint' is using an 'allOf' instead of a $ref. This creates a wasteful anonymous type when generating code.
      cmdout	[Autorest] WARNING (PreCheck/AllOfWhenYouMeantRef): Schema 'OfficeDataConnectorDataTypes-teams' is using an 'allOf' instead of a $ref. This creates a wasteful anonymous type when generating code.
      cmdout	[Autorest] WARNING (PreCheck/AllOfWhenYouMeantRef): Schema 'TIDataConnectorDataTypes-indicators' is using an 'allOf' instead of a $ref. This creates a wasteful anonymous type when generating code.
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'ActionsList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'AlertRuleTemplatesList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'AlertRulesList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'BookmarkList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'CloudError' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'DataConnectorList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'IncidentCommentList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'IncidentList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'OfficeConsentList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'Operation' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'OperationsList' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'Resource' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'ResourceWithEtag' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'ErrorResponse' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/SchemaMissingType): The schema 'ErrorAdditionalInfo' with an undefined type and decalared properties is a bit ambigious. This has been auto-corrected to 'type:object'
      cmdout	[Autorest] WARNING (PreCheck/CheckDuplicateSchemas): Checking for duplicate schemas, this could take a (long) while.  Run with --verbose for more detail.
      cmdout	[Autorest] WARNING (PreCheck/PropertyRedeclarationWarning): Schema 'MCASDataConnectorDataTypes' has a property 'alerts' that is already declared the parent schema 'AlertsDataTypeOfDataConnector' but isn't significantly different. The property has been removed from MCASDataConnectorDataTypes
      cmdout	[Autorest] WARNING (): cli.auto-parameter-hidden is not true, skip visibility cleaner
      cmderr	[Autorest] BELOW TEST SCENARIO SECTION CAN BE USED IN readme.cli.md
      cmderr	[Autorest] --------------------------------------------------------
      cmderr	[Autorest]   test-scenario:
      cmderr	[Autorest]     - name: /Actions/put/Creates or updates an action of alert rule.
      cmderr	[Autorest]     - name: /Actions/get/Get all actions of alert rule.
      cmderr	[Autorest]     - name: /Actions/get/Get an action of alert rule.
      cmderr	[Autorest]     - name: /Actions/delete/Delete an action of alert rule.
      cmderr	[Autorest]     - name: /AlertRules/put/Creates or updates a Fusion alert rule.
      cmderr	[Autorest]     - name: /AlertRules/put/Creates or updates a MicrosoftSecurityIncidentCreation rule.
      cmderr	[Autorest]     - name: /AlertRules/put/Creates or updates a Scheduled alert rule.
      cmderr	[Autorest]     - name: /AlertRules/get/Get a Fusion alert rule.
      cmderr	[Autorest]     - name: /AlertRules/get/Get a MicrosoftSecurityIncidentCreation rule.
      cmderr	[Autorest]     - name: /AlertRules/get/Get a Scheduled alert rule.
      cmderr	[Autorest]     - name: /AlertRules/get/Get all alert rules.
      cmderr	[Autorest]     - name: /AlertRules/delete/Delete an alert rule.
      cmderr	[Autorest]     - name: /AlertRuleTemplates/get/Get alert rule template by Id.
      cmderr	[Autorest]     - name: /AlertRuleTemplates/get/Get all alert rule templates.
      cmderr	[Autorest]     - name: /Bookmarks/put/Creates or updates a bookmark.
      cmderr	[Autorest]     - name: /Bookmarks/get/Get a bookmark.
      cmderr	[Autorest]     - name: /Bookmarks/get/Get all bookmarks.
      cmderr	[Autorest]     - name: /Bookmarks/delete/Delete a bookmark.
      cmderr	[Autorest]     - name: /DataConnectors/put/Creates or updates an Office365 data connector.
      cmderr	[Autorest]     - name: /DataConnectors/put/Creates or updates an Threat Intelligence Platform data connector.
      cmderr	[Autorest]     - name: /DataConnectors/get/Get a ASC data connector.
      cmderr	[Autorest]     - name: /DataConnectors/get/Get a MCAS data connector.
      cmderr	[Autorest]     - name: /DataConnectors/get/Get a MDATP data connector
      cmderr	[Autorest]     - name: /DataConnectors/get/Get a TI data connector.
      cmderr	[Autorest]     - name: /DataConnectors/get/Get all data connectors.
      cmderr	[Autorest]     - name: /DataConnectors/get/Get an AAD data connector.
      cmderr	[Autorest]     - name: /DataConnectors/get/Get an AATP data connector.
      cmderr	[Autorest]     - name: /DataConnectors/get/Get an AwsCloudTrail data connector.
      cmderr	[Autorest]     - name: /DataConnectors/get/Get an Office365 data connector.
      cmderr	[Autorest]     - name: /DataConnectors/delete/Delete an Office365 data connector.
      cmderr	[Autorest]     - name: /IncidentComments/put/Creates an incident comment.
      cmderr	[Autorest]     - name: /IncidentComments/get/Get all incident comments.
      cmderr	[Autorest]     - name: /IncidentComments/get/Get an incident comment.
      cmderr	[Autorest]     - name: /Incidents/put/Creates or updates an incident.
      cmderr	[Autorest]     - name: /Incidents/get/Get all incidents.
      cmderr	[Autorest]     - name: /Incidents/get/Get an incident.
      cmderr	[Autorest]     - name: /Incidents/delete/Delete an incident.
      cmderr	[Autorest] --------------------------------------------------------
    • ️✔️securityinsight [View full logs]  [Release Azure CLI Changes]
    ️️✔️ azure-resource-manager-schemas succeeded [Detail] [Expand]
    • ️✔️Succeeded [Logs]Release - Generate from 48bdeb7. Schema Automation 14.0.0
      command	.sdkauto/initScript.sh ../azure-resource-manager-schemas_tmp/initInput.json ../azure-resource-manager-schemas_tmp/initOutput.json
      warn	File azure-resource-manager-schemas_tmp/initOutput.json not found to read
      command	.sdkauto/generateScript.sh ../azure-resource-manager-schemas_tmp/generateInput.json ../azure-resource-manager-schemas_tmp/generateOutput.json
    • ️✔️securityinsights [View full logs]  [Release Schema Changes]
    Posted by Swagger Pipeline | How to fix these errors?

    @openapi-workflow-bot
    Copy link

    Hi @roherzbe, Your PR has some issues. Please fix the CI sequentially by following the order of Avocado, semantic validation, model validation, breaking change, lintDiff.

    TaskHow to fixPrioritySupport (Microsoft alias)
    AvocadoFix-AvocadoHighruowan
    Semantic validationFix-SemanticValidation-ErrorHighraychen, jianyxi
    Model validationFix-ModelValidation-ErrorHighraychen,jianyxi
    LintDiffFix-LintDiffhighjianyxi, ruoxuan
    If you need further help, please feedback via swagger feedback."

    @openapi-workflow-bot
    Copy link

    Hi @roherzbe, one or multiple breaking change(s) is detected in your PR. Please check out the breaking change(s), and provide business justification in the PR comment and @ PR assignee why you must have these change(s), and how external customer impact can be mitigated. Please ensure to follow breaking change policy to request breaking change review and approval before proceeding swagger PR review.
    Action: To initiate an evaluation of the breaking change, create a new intake using the template for breaking changes. Addition details on the process and office hours are on the Breaking change Wiki.
    If you want to know the production traffic statistic, please see ARM Traffic statistic.
    If you think it is false positive breaking change, please provide the reasons in the PR comment, report to Swagger Tooling Team via https://aka.ms/swaggerfeedback.

    @@ -53,10 +67,6 @@
    "readOnly": true,
    "type": "string"
    },
    Copy link
    Member

    @mentat9 mentat9 May 7, 2021

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    }

    Removing etag from the top-level is a breaking change. It looks like this is intentional, so you will need a breaking change review. After that's been sorted, ARM review can continue. #Resolved

    Copy link
    Contributor Author

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Hi @mentat9 ,
    I didn't remove an etag, it seems like this because of the way it is shown in the changed files.
    Notice that I added a definition named Resource that doesn't contain an etag.
    I hope this is clear, let me know if you have any other concerns.

    Copy link
    Member

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Quite right: sorry about that.

    Copy link
    Contributor

    @laithhisham laithhisham left a comment

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    :shipit:

    Copy link
    Contributor Author

    @roherzbe roherzbe left a comment

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Hi @mentat9 ,
    I didn't remove an etag, it seems like this because of the way it is shown in the changed files.
    Notice that I added a definition named Resource that doesn't contain an etag.
    I hope this is clear, let me know if you have any other concerns.

    @@ -53,10 +67,6 @@
    "readOnly": true,
    "type": "string"
    },
    Copy link
    Contributor Author

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    Hi @mentat9 ,
    I didn't remove an etag, it seems like this because of the way it is shown in the changed files.
    Notice that I added a definition named Resource that doesn't contain an etag.
    I hope this is clear, let me know if you have any other concerns.

    @mentat9 mentat9 added ARMSignedOff <valid label in PR review process>add this label when ARM approve updates after review and removed ARMChangesRequested <valid label in PR review process>add this label when require changes after ARM review BreakingChangeReviewRequired labels May 10, 2021
    @ghost
    Copy link

    ghost commented May 30, 2021

    Hi, @roherzbe. Your PR has no update for 14 days and it is marked as stale PR. If no further update for over 14 days, the bot will close the PR. If you want to refresh the PR, please remove no-recent-activity label.

    @PhoenixHe-NV
    Copy link
    Contributor

    /azp run

    @azure-pipelines
    Copy link

    Azure Pipelines successfully started running 1 pipeline(s).

    @roherzbe
    Copy link
    Contributor Author

    roherzbe commented Jun 1, 2021

    Hi @PhoenixHe-msft
    Can you please remove the "DoNotMerge" label and help with the review process?
    Sorry it took so long, we are looking forward to finishing this :)
    Thanks!

    @leniatgh leniatgh removed the DoNotMerge <valid label in PR review process> use to hold merge after approval label Jun 3, 2021
    @leniatgh
    Copy link
    Contributor

    leniatgh commented Jun 3, 2021

    @roherzbe is the new apiVersion deployed in prod?

    @roherzbe
    Copy link
    Contributor Author

    roherzbe commented Jun 6, 2021

    @leni-msft yes, the new apiVersion is deployed to prod.
    All that is left is to merge the PR :)
    Is there anything missing?

    @PhoenixHe-NV PhoenixHe-NV merged commit 48bdeb7 into Azure:master Jun 7, 2021
    mkarmark pushed a commit to mkarmark/azure-rest-api-specs that referenced this pull request Jul 21, 2021
    * New stable version
    
    * revert ApiVersion change
    
    * add operation
    
    * Add operations to README
    
    * Add missing definition
    
    * Fix ApiVersion
    
    * Change ApiVersion
    
    * Add update & delete incident comments
    
    * extracting to common file
    
    * Revert "extracting to common file"
    
    * Add new API calls
    
    * add parameters
    
    * new parameters
    
    * fix conflict
    
    * fix conflict 2
    
    * Add integer format
    
    * fix readme
    
    * fix Duplicate Schema
    
    * fix ApiVersion
    
    * ApiVersionParameter
    
    * resolve conflict
    
    * fix APIVersion
    
    * Add Incident Relations
    
    * Add missing parameters
    
    * fix typo
    
    * Add API version to common
    
    * modelAsString
    
    * revert last 2 changes
    
    * Text changes in some descriptions
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    ARMSignedOff <valid label in PR review process>add this label when ARM approve updates after review CI-BreakingChange-Go
    Projects
    None yet
    Development

    Successfully merging this pull request may close these issues.

    6 participants