{
  "type": "Microsoft.SecurityInsights/dataConnectorDefinitions",
  "apiVersion": "2024-09-01",
  "name": "BV-ClaudeCompliance",
  "location": "{{location}}",
  "kind": "Customizable",
  "properties": {
    "connectorUiConfig": {
      "id": "BV-ClaudeCompliance",
      "title": "BV-ClaudeCompliance (via Codeless Connector Framework)",
      "publisher": "BlueVoyant",
      "descriptionMarkdown": "## BV-ClaudeCompliance (via Codeless Connector Framework)\r\n\r\nThis connector ingests **ClaudeCompliance** API data into Microsoft Sentinel using RestApiPoller.\r\n\r\n### Data Collection\r\n- Base API URL: `https://api.anthropic.com/`\r\n- Authentication: `APIKey`\r\n- Endpoint count: `1`\r\n\r\n### Tables\r\n- `ComplianceActivities` -> `BV_ClaudeCompliance_ComplianceActivities_CL`\r\n\r\n### Sample Query\r\n```kusto\r\nBV_ClaudeCompliance_ComplianceActivities_CL\r\n| take 10\r\n```",
      "graphQueriesTableName": "BV_ClaudeCompliance_ComplianceActivities_CL",
      "graphQueries": [
        {
          "metricName": "Total data received",
          "legend": "BV_ClaudeCompliance_ComplianceActivities_CL",
          "baseQuery": "{{graphQueriesTableName}}"
        }
      ],
      "sampleQueries": [
        {
          "description": "All BV_ClaudeCompliance_ComplianceActivities_CL events",
          "query": "{{graphQueriesTableName}}\n| sort by TimeGenerated\n| take 10"
        }
      ],
      "dataTypes": [
        {
          "name": "{{graphQueriesTableName}}",
          "lastDataReceivedQuery": "{{graphQueriesTableName}}\n| summarize Time = max(TimeGenerated)\n| where isnotempty(Time)"
        }
      ],
      "connectivityCriteria": [
        {
          "type": "HasDataConnectors"
        }
      ],
      "availability": {
        "isPreview": false
      },
      "permissions": {
        "resourceProvider": [
          {
            "provider": "Microsoft.OperationalInsights/workspaces",
            "permissionsDisplayText": "Read and Write permissions are required.",
            "providerDisplayName": "Workspace",
            "scope": "Workspace",
            "requiredPermissions": {
              "write": true,
              "read": true,
              "delete": false
            }
          }
        ]
      },
      "instructionSteps": [
        {
          "title": "Connect BV-ClaudeCompliance (via Codeless Connector Framework) to Microsoft Sentinel",
          "description": "To obtain a Claude Compliance API key, follow the instructions found here: [Access the Compliance API](https://support.claude.com/en/articles/13015708-access-the-compliance-api).\r\n\r\nThe API key created must include the **`read:compliance_activities`** scope for proper data ingestion.\r\n\r\nPaste the key below and select **Connect**.",
          "instructions": [
            {
              "type": "Textbox",
              "parameters": {
                "label": "API Key",
                "placeholder": "Enter API key",
                "type": "password",
                "name": "apiKey",
                "validations": {
                  "required": true
                }
              }
            },
            {
              "type": "ConnectionToggleButton",
              "parameters": {
                "connectLabel": "Connect",
                "disconnectLabel": "Disconnect",
                "name": "toggle"
              }
            }
          ]
        }
      ],
      "isConnectivityCriteriasMatchSome": false
    }
  }
}