{"files":{"SKILL.md":"---\nname: microsoft-defender-for-cloud\ndescription: \"Microsoft Defender for Cloud API skill. Use when working with Microsoft Defender for Cloud for providers, subscriptions. Covers 6 endpoints.\"\nversion: 1.0.0\ngenerator: lapsh\n---\n\n# Microsoft Defender for Cloud\nAPI version: 2020-01-01\n\n## Auth\nOAuth2\n\n## Base URL\nhttps://management.azure.com\n\n## Setup\n1. Configure auth: OAuth2\n2. GET /providers/Microsoft.Security/assessmentMetadata -- get metadata information on all assessment types\n3. Explore available endpoints below\n\n## Endpoints\n6 endpoints across 2 groups. See references/api-spec.lap for full details.\n\n### Providers\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /providers/Microsoft.Security/assessmentMetadata | Get metadata information on all assessment types |\n| GET | /providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName} | Get metadata information on an assessment type |\n\n### Subscriptions\n| Method | Path | Description |\n|--------|------|-------------|\n| GET | /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata | Get metadata information on all assessment types in a specific subscription |\n| GET | /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName} | Get metadata information on an assessment type in a specific subscription |\n| PUT | /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName} | Create metadata information on an assessment type in a specific subscription |\n| DELETE | /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName} | Delete metadata information on an assessment type in a specific subscription, will cause the deletion of all the assessments of that type in that subscription |\n\n## Common Questions\nMatch user requests to endpoints in references/api-spec.lap. Key patterns:\n- \"List all assessmentMetadata?\" -> GET /providers/Microsoft.Security/assessmentMetadata\n- \"Get assessmentMetadata details?\" -> GET /providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName}\n- \"Update a assessmentMetadata?\" -> PUT /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName}\n- \"Delete a assessmentMetadata?\" -> DELETE /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName}\n- \"How to authenticate?\" -> See Auth section above\n\n## Response Tips\n- Check response schemas in references/api-spec.lap for field details\n- Create/update endpoints return the modified resource on success\n\n## References\n- Full spec: See references/api-spec.lap for complete endpoint details, parameter tables, and response schemas\n\n> Generated from the official API spec by [LAP](https://lap.sh)\n","references/api-spec.lap":"@lap v0.3\n# Machine-readable API spec. Each @endpoint block is one API call.\n@api Microsoft Defender for Cloud\n@base https://management.azure.com\n@version 2020-01-01\n@auth OAuth2\n@endpoints 6\n@toc providers(2), subscriptions(4)\n\n@group providers\n@endpoint GET /providers/Microsoft.Security/assessmentMetadata\n@desc Get metadata information on all assessment types\n@returns(200) OK\n\n@endpoint GET /providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName}\n@desc Get metadata information on an assessment type\n@required {assessmentMetadataName: any # The Assessment Key - Unique key for the assessment type}\n@returns(200) OK\n\n@endgroup\n\n@group subscriptions\n@endpoint GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata\n@desc Get metadata information on all assessment types in a specific subscription\n@returns(200) OK\n\n@endpoint GET /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName}\n@desc Get metadata information on an assessment type in a specific subscription\n@required {assessmentMetadataName: any # The Assessment Key - Unique key for the assessment type}\n@returns(200) OK\n\n@endpoint PUT /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName}\n@desc Create metadata information on an assessment type in a specific subscription\n@required {assessmentMetadataName: any # The Assessment Key - Unique key for the assessment type, assessmentMetadata: map # AssessmentMetadata object}\n@returns(200) OK\n\n@endpoint DELETE /subscriptions/{subscriptionId}/providers/Microsoft.Security/assessmentMetadata/{assessmentMetadataName}\n@desc Delete metadata information on an assessment type in a specific subscription, will cause the deletion of all the assessments of that type in that subscription\n@required {assessmentMetadataName: any # The Assessment Key - Unique key for the assessment type}\n@returns(200) OK\n\n@endgroup\n\n@end\n"}}