{ "opencollection": "1.0.0", "info": { "name": "Microsoft Defender for Cloud REST Alerts API", "version": "2022-01-01" }, "request": { "auth": { "type": "oauth2", "flow": "implicit", "authorizationUrl": "https://login.microsoftonline.com/common/oauth2/authorize", "credentials": { "clientId": "{{clientId}}" } } }, "items": [ { "info": { "name": "Alerts", "type": "folder" }, "items": [ { "info": { "name": "List all alerts for the subscription", "type": "http" }, "http": { "method": "GET", "url": "https://management.azure.com/subscriptions/:subscriptionId/providers/Microsoft.Security/alerts", "params": [ { "name": "subscriptionId", "value": "", "type": "path" }, { "name": "api-version", "value": "", "type": "query" } ] }, "docs": "List all alerts for the subscription" }, { "info": { "name": "List alerts for a resource group", "type": "http" }, "http": { "method": "GET", "url": "https://management.azure.com/subscriptions/:subscriptionId/resourceGroups/:resourceGroupName/providers/Microsoft.Security/alerts", "params": [ { "name": "subscriptionId", "value": "", "type": "path" }, { "name": "resourceGroupName", "value": "", "type": "path" }, { "name": "api-version", "value": "", "type": "query" } ] }, "docs": "List alerts for a resource group" }, { "info": { "name": "List subscription-level alerts in a specific region", "type": "http" }, "http": { "method": "GET", "url": "https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts", "params": [ { "name": "subscriptionId", "value": "", "type": "path" }, { "name": "ascLocation", "value": "", "type": "path", "description": "Defender for Cloud location/region" }, { "name": "api-version", "value": "", "type": "query" } ] }, "docs": "List subscription-level alerts in a specific region" }, { "info": { "name": "Get a subscription-level alert", "type": "http" }, "http": { "method": "GET", "url": "https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/:alertName", "params": [ { "name": "subscriptionId", "value": "", "type": "path" }, { "name": "ascLocation", "value": "", "type": "path", "description": "Defender for Cloud location/region" }, { "name": "alertName", "value": "", "type": "path" }, { "name": "api-version", "value": "", "type": "query" } ] }, "docs": "Get a subscription-level alert" }, { "info": { "name": "Dismiss a subscription-level alert", "type": "http" }, "http": { "method": "POST", "url": "https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/:alertName/dismiss", "params": [ { "name": "subscriptionId", "value": "", "type": "path" }, { "name": "ascLocation", "value": "", "type": "path", "description": "Defender for Cloud location/region" }, { "name": "alertName", "value": "", "type": "path" }, { "name": "api-version", "value": "", "type": "query" } ] }, "docs": "Dismiss a subscription-level alert" }, { "info": { "name": "Resolve a subscription-level alert", "type": "http" }, "http": { "method": "POST", "url": "https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/:alertName/resolve", "params": [ { "name": "subscriptionId", "value": "", "type": "path" }, { "name": "ascLocation", "value": "", "type": "path", "description": "Defender for Cloud location/region" }, { "name": "alertName", "value": "", "type": "path" }, { "name": "api-version", "value": "", "type": "query" } ] }, "docs": "Resolve a subscription-level alert" }, { "info": { "name": "Activate a subscription-level alert", "type": "http" }, "http": { "method": "POST", "url": "https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/:alertName/activate", "params": [ { "name": "subscriptionId", "value": "", "type": "path" }, { "name": "ascLocation", "value": "", "type": "path", "description": "Defender for Cloud location/region" }, { "name": "alertName", "value": "", "type": "path" }, { "name": "api-version", "value": "", "type": "query" } ] }, "docs": "Activate a subscription-level alert" }, { "info": { "name": "Simulate security alerts", "type": "http" }, "http": { "method": "POST", "url": "https://management.azure.com/subscriptions/:subscriptionId/locations/:ascLocation/alerts/default/simulate", "params": [ { "name": "subscriptionId", "value": "", "type": "path" }, { "name": "ascLocation", "value": "", "type": "path", "description": "Defender for Cloud location/region" }, { "name": "api-version", "value": "", "type": "query" } ], "body": { "type": "json", "data": "{}" } }, "docs": "Simulate security alerts" } ] } ], "bundled": true }