Azure Security Alerts

Connector for the azure-security-alerts API, generated deterministically from its OpenAPI spec (endpoints, auth, and methods match the spec exactly — nothing is invented).

• Base URL: https://management.azure.com
• Auth: OAuth 2.0 (user-delegated) — attach an InTouch oauth credential. Mint one with itcli.py /oauth <provider> (device-code) or /google-auth (Google); the server auto-refreshes the access token before each run, so the connector never handles or stores tokens.

Operations

• alerts_list — GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/alerts — List all the alerts that are associated with the subscription
• alerts_listsubscriptionlevelalertsbyregion — GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/alerts — List all the alerts that are associated with the subscription that are stored in
• alerts_getsubscriptionlevelalert — GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/locations/{ascLocation}/alerts/{alertName} — Get an alert that is associated with a subscription
• alerts_listbyresourcegroup — GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/alerts — List all the alerts that are associated with the resource group
• alerts_listresourcegrouplevelalertsbyregion — GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/locations/{ascLocation}/alerts — List all the alerts that are associated with the resource group that are stored
• alerts_getresourcegrouplevelalerts — GET /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Security/locations/{ascLocation}/alerts/{alertName} — Get an alert that is associated a resource group or a resource in a resource gro

Inputs

• a linked oauth credential (no key inputs) — the server injects a fresh Authorization: Bearer from it
• operation — one of the operations above
• path parameters when an operation's path contains {...}
• query — optional JSON object of query params
• body — JSON object for create/update ops

Example

operation: alerts_list
# (attach an 'oauth' credential to the task — no inline secrets)