cloud__create_suppression_rule

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 5 props · 2 required

{
  "type": "object",
  "required": [
    "rule_name",
    "conditions"
  ],
  "properties": {
    "enabled": {
      "type": "boolean",
      "default": true
    },
    "rule_name": {
      "type": "string",
      "maxLength": 100
    },
    "conditions": {
      "type": "object",
      "required": [],
      "properties": {
        "regions": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "severity": {
          "type": "array",
          "items": {
            "enum": [
              "critical",
              "high",
              "medium",
              "low"
            ],
            "type": "string"
          }
        },
        "account_ids": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "finding_type": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "resource_tags": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          }
        }
      }
    },
    "description": {
      "type": "string",
      "maxLength": 500
    },
    "expiration_date": {
      "type": "string",
      "format": "date"
    }
  }
}

registry name changes propagate to the decoy surface on the next drain