[Cloud Security] Rules Combo Box filters Custom component

x-pack/plugins/cloud_security_posture/common/types/index.ts

@@ -9,6 +9,7 @@ export * as rulesV1 from './rules/v1';
 export * as rulesV2 from './rules/v2';
 export * as rulesV3 from './rules/v3';
 export * as rulesV4 from './rules/v4';
+export * as rulesV5 from './rules/v5';
 
 export * as benchmarkV1 from './benchmarks/v1';
 export * as benchmarkV2 from './benchmarks/v2';

x-pack/plugins/cloud_security_posture/common/types/latest.ts

@@ -5,5 +5,5 @@
  * 2.0.
  */
 
-export * from './rules/v4';
+export * from './rules/v5';
 export * from './benchmarks/v2';

x-pack/plugins/cloud_security_posture/common/types/rules/v4.ts

@@ -95,8 +95,8 @@ export const findCspBenchmarkRuleRequestSchema = schema.object({
   /**
    * rule section
    */
-  section: schema.maybe(schema.string()),
-  ruleNumber: schema.maybe(schema.string()),
+  section: schema.maybe(schema.arrayOf(schema.string())),
+  ruleNumber: schema.maybe(schema.arrayOf(schema.string())),
 });
 
 export type FindCspBenchmarkRuleRequest = TypeOf<typeof findCspBenchmarkRuleRequestSchema>;

x-pack/plugins/cloud_security_posture/common/types/rules/v5.ts

@@ -0,0 +1,121 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+import { schema, TypeOf } from '@kbn/config-schema';
+
+export type {
+  cspBenchmarkRuleMetadataSchema,
+  CspBenchmarkRuleMetadata,
+  cspBenchmarkRuleSchema,
+  CspBenchmarkRule,
+  FindCspBenchmarkRuleResponse,
+} from './v3';
+export type {
+  PageUrlParams,
+  rulesToUpdate,
+  CspBenchmarkRulesBulkActionRequestSchema,
+  CspBenchmarkRulesBulkActionResponse,
+  RuleStateAttributes,
+  CspBenchmarkRulesStates,
+  cspSettingsSchema,
+  CspSettings,
+  BulkActionBenchmarkRulesResponse,
+} from './v4';
+
+const DEFAULT_BENCHMARK_RULES_PER_PAGE = 25;
+
+export const findCspBenchmarkRuleRequestSchema = schema.object({
+  /**
+   * An Elasticsearch simple_query_string
+   */
+  search: schema.maybe(schema.string()),
+
+  /**
+   * The page of objects to return
+   */
+  page: schema.number({ defaultValue: 1, min: 1 }),
+
+  /**
+   * The number of objects to include in each page
+   */
+  perPage: schema.number({ defaultValue: DEFAULT_BENCHMARK_RULES_PER_PAGE, min: 0 }),
+
+  /**
+   *  Fields to retrieve from CspBenchmarkRule saved object
+   */
+  fields: schema.maybe(schema.arrayOf(schema.string())),
+
+  /**
+   *  The fields to perform the parsed query against.
+   * Valid fields are fields which mapped to 'text' in cspBenchmarkRuleSavedObjectMapping
+   */
+  searchFields: schema.arrayOf(
+    schema.oneOf([schema.literal('metadata.name.text'), schema.literal('metadata.section.text')]),
+    { defaultValue: ['metadata.name.text'] }
+  ),
+
+  /**
+   *  Sort Field
+   */
+  sortField: schema.oneOf(
+    [
+      schema.literal('metadata.name'),
+      schema.literal('metadata.section'),
+      schema.literal('metadata.id'),
+      schema.literal('metadata.version'),
+      schema.literal('metadata.benchmark.id'),
+      schema.literal('metadata.benchmark.name'),
+      schema.literal('metadata.benchmark.posture_type'),
+      schema.literal('metadata.benchmark.version'),
+      schema.literal('metadata.benchmark.rule_number'),
+    ],
+    {
+      defaultValue: 'metadata.benchmark.rule_number',
+    }
+  ),
+
+  /**
+   * The order to sort by
+   */
+  sortOrder: schema.oneOf([schema.literal('asc'), schema.literal('desc')], {
+    defaultValue: 'asc',
+  }),
+
+  /**
+   * benchmark id
+   */
+  benchmarkId: schema.maybe(
+    schema.oneOf([
+      schema.literal('cis_k8s'),
+      schema.literal('cis_eks'),
+      schema.literal('cis_aws'),
+      schema.literal('cis_azure'),
+      schema.literal('cis_gcp'),
+    ])
+  ),
+
+  /**
+   * benchmark version
+   */
+  benchmarkVersion: schema.maybe(schema.string()),
+
+  /**
+   * rule section
+   */
+  section: schema.maybe(
+    schema.oneOf([schema.string(), schema.arrayOf(schema.string(), { minSize: 1 })])
+  ),
+  ruleNumber: schema.maybe(
+    schema.oneOf([schema.string(), schema.arrayOf(schema.string(), { minSize: 1 })])
+  ),
+});
+
+export type FindCspBenchmarkRuleRequest = TypeOf<typeof findCspBenchmarkRuleRequestSchema>;
+
+export interface BenchmarkRuleSelectParams {
+  section?: string[];
+  ruleNumber?: string[];
+}

x-pack/plugins/cloud_security_posture/common/utils/helpers.test.ts

@@ -6,7 +6,12 @@
  */
 
 import { createPackagePolicyMock } from '@kbn/fleet-plugin/common/mocks';
-import { getBenchmarkFromPackagePolicy, getBenchmarkFilter, cleanupCredentials } from './helpers';
+import {
+  getBenchmarkFromPackagePolicy,
+  getBenchmarkFilter,
+  cleanupCredentials,
+  getBenchmarkFilterQueryV2,
+} from './helpers';
 
 describe('test helper methods', () => {
   it('get default integration type from inputs with multiple enabled types', () => {
@@ -70,6 +75,44 @@ describe('test helper methods', () => {
     );
   });
 
+  it('get benchmark filter query based on a benchmark Id, version', () => {
+    const typeFilter = getBenchmarkFilterQueryV2('cis_eks', '1.0.1');
+    expect(typeFilter).toMatch(
+      'csp-rule-template.attributes.metadata.benchmark.id:cis_eks AND csp-rule-template.attributes.metadata.benchmark.version:"v1.0.1"'
+    );
+  });
+
+  it('get benchmark filter query based on a benchmark Id, version and multiple sections and rule numbers', () => {
+    const mockSelectParams = {
+      section: ['section_1', 'section_2'],
+      ruleNumber: ['1a', '2b', '3c'],
+    };
+    const typeFilter = getBenchmarkFilterQueryV2('cis_eks', '1.0.1', mockSelectParams);
+    expect(typeFilter).toMatch(
+      'csp-rule-template.attributes.metadata.benchmark.id:cis_eks AND csp-rule-template.attributes.metadata.benchmark.version:"v1.0.1" AND (csp-rule-template.attributes.metadata.section: "section_1" OR csp-rule-template.attributes.metadata.section: "section_2") AND (csp-rule-template.attributes.metadata.benchmark.rule_number: "1a" OR csp-rule-template.attributes.metadata.benchmark.rule_number: "2b" OR csp-rule-template.attributes.metadata.benchmark.rule_number: "3c")'
+    );
+  });
+
+  it('get benchmark filter query based on a benchmark Id, version and just sections', () => {
+    const mockSelectParams = {
+      section: ['section_1', 'section_2'],
+    };
+    const typeFilter = getBenchmarkFilterQueryV2('cis_eks', '1.0.1', mockSelectParams);
+    expect(typeFilter).toMatch(
+      'csp-rule-template.attributes.metadata.benchmark.id:cis_eks AND csp-rule-template.attributes.metadata.benchmark.version:"v1.0.1" AND (csp-rule-template.attributes.metadata.section: "section_1" OR csp-rule-template.attributes.metadata.section: "section_2")'
+    );
+  });
+
+  it('get benchmark filter query based on a benchmark Id, version and just rule numbers', () => {
+    const mockSelectParams = {
+      ruleNumber: ['1a', '2b', '3c'],
+    };
+    const typeFilter = getBenchmarkFilterQueryV2('cis_eks', '1.0.1', mockSelectParams);
+    expect(typeFilter).toMatch(
+      'csp-rule-template.attributes.metadata.benchmark.id:cis_eks AND csp-rule-template.attributes.metadata.benchmark.version:"v1.0.1" AND (csp-rule-template.attributes.metadata.benchmark.rule_number: "1a" OR csp-rule-template.attributes.metadata.benchmark.rule_number: "2b" OR csp-rule-template.attributes.metadata.benchmark.rule_number: "3c")'
+    );
+  });
+
   describe('cleanupCredentials', () => {
     it('cleans unused aws credential methods, except role_arn when using assume_role', () => {
       const mockPackagePolicy = createPackagePolicyMock();

x-pack/plugins/cloud_security_posture/common/utils/helpers.ts

@@ -218,3 +218,29 @@ export const getBenchmarkFilterQuery = (
     : '';
   return baseQuery + sectionQuery + ruleNumberQuery;
 };
+
+export const getBenchmarkFilterQueryV2 = (
+  id: BenchmarkId,
+  version?: string,
+  selectParams?: BenchmarkRuleSelectParams
+): string => {
+  const baseQuery = `${CSP_BENCHMARK_RULE_SAVED_OBJECT_TYPE}.attributes.metadata.benchmark.id:${id} AND ${CSP_BENCHMARK_RULE_SAVED_OBJECT_TYPE}.attributes.metadata.benchmark.version:"v${version}"`;
+
+  let sectionQuery = '';
+  let ruleNumberQuery = '';
+  if (selectParams?.section) {
+    const sectionParamsArr = selectParams.section?.map(
+      (params) => `${CSP_BENCHMARK_RULE_SAVED_OBJECT_TYPE}.attributes.metadata.section: "${params}"`
+    );
+    sectionQuery = ' AND (' + sectionParamsArr.join(' OR ') + ')';
+  }
+  if (selectParams?.ruleNumber) {
+    const ruleNumbersParamsArr = selectParams.ruleNumber?.map(
+      (params) =>
+        `${CSP_BENCHMARK_RULE_SAVED_OBJECT_TYPE}.attributes.metadata.benchmark.rule_number: "${params}"`
+    );
+    ruleNumberQuery = ' AND (' + ruleNumbersParamsArr.join(' OR ') + ')';
+  }
+
+  return baseQuery + sectionQuery + ruleNumberQuery;
+};