Flag IP case action (DataDog#30528)

Co-authored-by: ci.datadog-api-spec <packages@datadoghq.com>

Author: api-clients-generation-pipeline[bot]

.apigentools-info

@@ -4,13 +4,13 @@
  "spec_versions": {
  "v1": {
  "apigentools_version": "1.6.6",
- "regenerated": "2025-07-21 13:56:36.540795",
- "spec_repo_commit": "06ccc326"
+ "regenerated": "2025-07-22 07:16:13.613054",
+ "spec_repo_commit": "8ca2883c"
  },
  "v2": {
  "apigentools_version": "1.6.6",
- "regenerated": "2025-07-21 13:56:45.594812",
- "spec_repo_commit": "06ccc326"
+ "regenerated": "2025-07-22 07:16:22.952520",
+ "spec_repo_commit": "8ca2883c"
  }
  }
 }

content/en/api/v2/security-monitoring/examples.json

@@ -31,6 +31,12 @@
  "options": {
  "userBehaviorName": "behavior"
  }
+ },
+ {
+ "type": "flag_ip",
+ "options": {
+ "flaggedIPType": "FLAGGED"
+ }
  }
  ]
  }

content/en/api/v2/security-monitoring/request.CreateSecurityMonitoringRule_1965169892.json

@@ -34969,9 +34969,22 @@ components:
  format: int64
  minimum: 0
  type: integer
+ flaggedIPType:
+ $ref: '#/components/schemas/SecurityMonitoringRuleCaseActionOptionsFlaggedIPType'
  userBehaviorName:
  $ref: '#/components/schemas/SecurityMonitoringRuleCaseActionOptionsUserBehaviorName'
  type: object
+ SecurityMonitoringRuleCaseActionOptionsFlaggedIPType:
+ description: Used with the case action of type 'flag_ip'. The value specified
+ in this field is applied as a flag to the IP addresses.
+ enum:
+ - SUSPICIOUS
+ - FLAGGED
+ example: FLAGGED
+ type: string
+ x-enum-varnames:
+ - SUSPICIOUS
+ - FLAGGED
  SecurityMonitoringRuleCaseActionOptionsUserBehaviorName:
  description: Used with the case action of type 'user_behavior'. The value specified
  in this field is applied as a risk tag to all users affected by the rule.
@@ -34982,11 +34995,13 @@ components:
  - block_ip
  - block_user
  - user_behavior
+ - flag_ip
  type: string
  x-enum-varnames:
  - BLOCK_IP
  - BLOCK_USER
  - USER_BEHAVIOR
+ - FLAG_IP
  SecurityMonitoringRuleCaseCreate:
  description: Case when signal is generated.
  properties: