New-AzSecurityAutomationActionObject

Reference

Module:: Az.Security

Creates new security automation action object

Syntax

New-AzSecurityAutomationActionObject
   -LogicAppResourceId <String>
   -Uri <String>
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

New-AzSecurityAutomationActionObject
   -EventHubResourceId <String>
   -ConnectionString <String>
   [-SasPolicyName <String>]
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

New-AzSecurityAutomationActionObject
   -WorkspaceResourceId <String>
   [-DefaultProfile <IAzureContextContainer>]
   [<CommonParameters>]

Description

Creates new security automation action object

Examples

Example 1

New-AzSecurityAutomationActionObject -WorkspaceResourceId '/subscriptions/64ac75e7-15ff-4963-8c07-a16016505e0f/resourceGroups/sampleResourceGroup/providers/Microsoft.OperationalInsights/workspaces/surashed-test'

Creates new security automation action with workspace type

Example 2

New-AzSecurityAutomationActionObject -LogicAppResourceId '/subscriptions/03b601f1-7eca-4496-8f8d-355219eee254/resourceGroups/sampleResourceGroup/providers/Microsoft.Logic/workflows/LA' -Uri 'https://dummy.com/'

Creates new security automation action with logicApp type

Example 3

New-AzSecurityAutomationActionObject -EventHubResourceId 'subscriptions/03b601f1-7eca-4496-8f8d-355219eee254/resourceGroups/sampleResourceGroup/providers/Microsoft.EventHub/namespaces/cus-wsp-fake-assessment/eventhubs/cus-wsp-fake-assessment' -ConnectionString 'Endpoint=sb://dummy/;SharedAccessKeyName=dummy;SharedAccessKey=dummy;EntityPath=dummy'

Creates new security automation action with even-hub type

Parameters

-ConnectionString

The target Event Hub connection string

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-DefaultProfile

The credentials, account, tenant, and subscription used for communication with Azure.

Type:	IAzureContextContainer
Aliases:	AzContext, AzureRmContext, AzureCredential
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-EventHubResourceId

The target Event Hub Azure Resource ID

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-LogicAppResourceId

The triggered Logic App Azure Resource ID. This can also reside on other subscriptions, given that you have permissions to trigger the Logic App

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-SasPolicyName

The target Event Hub SAS policy name

Type:	String
Position:	Named
Default value:	None
Required:	False
Accept pipeline input:	False
Accept wildcard characters:	False

-Uri

The Logic App trigger URI endpoint (it will not be included in any response)

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

-WorkspaceResourceId

The fully qualified Log Analytics Workspace Azure Resource ID

Type:	String
Position:	Named
Default value:	None
Required:	True
Accept pipeline input:	False
Accept wildcard characters:	False

Inputs

None

Outputs

PSSecurityAutomationAction