[Security Solution] Create missing OpenAPI specs for Detections API

[maximpn]

Epic: https://github.com/elastic/security-team/issues/9398

Deadline: Jul 29, 2024 (see milestones in https://github.com/elastic/security-team/issues/9400)

Summary

As part of the Serverless project, we need to create OpenAPI specs for all public Detections API endpoints, because we want all of them documented before Serverless GA. Please look for more context in the epic.

During a Security Solution public API research we discovered that some public Detections API endpoints have missing OpenAPI specs. We need to add them.

API endpoints

The following public API endpoints are available in both Serverless and ESS, and don't have any OpenAPI specs:

• POST /api/detection_engine/rules/{id}/exceptions
• POST /api/detection_engine/rules/preview
• POST /api/detection_engine/signals/status
• POST /api/detection_engine/signals/tags
• POST /api/detection_engine/signals/search
• GET /api/detection_engine/privileges

The following public API endpoints are available in ESS only, and don't have any OpenAPI specs:

• POST /api/detection_engine/index
• GET /api/detection_engine/index
• DELETE /api/detection_engine/index
• POST /api/detection_engine/signals/migration_status
• POST /api/detection_engine/signals/migration
• POST /api/detection_engine/signals/finalize_migration
• DELETE /api/detection_engine/signals/migration
• POST /api/detection_engine/rules/_bulk_delete

To do

• Create OpenAPI specs for the endpoints listed above.
• Check if there are any other public endpoints that you own that don't have OpenAPI specs.
• Make sure the specs you add are valid OpenAPI documents.
• Make sure the specs you add match the actual API contract defined in the code.
• Mark the endpoints as available in ESS, or Serverless, or in both offerings (depends on: https://github.com/elastic/security-team/issues/9516).

[elasticmachine]

Pinging @elastic/security-solution (Team: SecuritySolution)

[elasticmachine]

Pinging @elastic/security-detection-rule-management (Team:Detection Rule Management)

[elasticmachine]

Pinging @elastic/security-detections-response (Team:Detections and Resp)

[elasticmachine]

Pinging @elastic/security-detection-engine (Team:Detection Engine)