-
Notifications
You must be signed in to change notification settings - Fork 11
/
CreateBookmark.go
71 lines (67 loc) · 2.28 KB
/
CreateBookmark.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
package armsecurityinsights_test
import (
"context"
"log"
"time"
"github.com/Azure/azure-sdk-for-go/sdk/azcore/to"
"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/securityinsights/armsecurityinsights"
)
// Generated from example definition: https://github.com/Azure/azure-rest-api-specs/tree/main/specification/securityinsights/resource-manager/Microsoft.SecurityInsights/preview/2022-04-01-preview/examples/bookmarks/CreateBookmark.json
func ExampleBookmarksClient_CreateOrUpdate() {
cred, err := azidentity.NewDefaultAzureCredential(nil)
if err != nil {
log.Fatalf("failed to obtain a credential: %v", err)
return
}
ctx := context.Background()
client, err := armsecurityinsights.NewBookmarksClient("<subscription-id>", cred, nil)
if err != nil {
log.Fatalf("failed to create client: %v", err)
return
}
res, err := client.CreateOrUpdate(ctx,
"<resource-group-name>",
"<workspace-name>",
"<bookmark-id>",
armsecurityinsights.Bookmark{
Etag: to.Ptr("<etag>"),
Properties: &armsecurityinsights.BookmarkProperties{
Created: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2021-09-01T13:15:30Z"); return t }()),
CreatedBy: &armsecurityinsights.UserInfo{
ObjectID: to.Ptr("<object-id>"),
},
DisplayName: to.Ptr("<display-name>"),
EntityMappings: []*armsecurityinsights.BookmarkEntityMappings{
{
EntityType: to.Ptr("<entity-type>"),
FieldMappings: []*armsecurityinsights.EntityFieldMapping{
{
Identifier: to.Ptr("<identifier>"),
Value: to.Ptr("<value>"),
}},
}},
Labels: []*string{
to.Ptr("Tag1"),
to.Ptr("Tag2")},
Notes: to.Ptr("<notes>"),
Query: to.Ptr("<query>"),
QueryResult: to.Ptr("<query-result>"),
Tactics: []*armsecurityinsights.AttackTactic{
to.Ptr(armsecurityinsights.AttackTacticExecution)},
Techniques: []*string{
to.Ptr("T1609")},
Updated: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2021-09-01T13:15:30Z"); return t }()),
UpdatedBy: &armsecurityinsights.UserInfo{
ObjectID: to.Ptr("<object-id>"),
},
},
},
nil)
if err != nil {
log.Fatalf("failed to finish the request: %v", err)
return
}
// TODO: use response item
_ = res
}