internal(policies) fix policies test: switch out rule in managed policy (#492)

* switch rule within policy test

* fix rules in managed policy test in more places

Author: kmvachhani

sysdig/resource_sysdig_secure_managed_policy_test.go

@@ -56,7 +56,7 @@ resource "sysdig_secure_managed_policy" "sample" {
 	name = "Sysdig Runtime Threat Detection"
 	enabled = true
 	scope = "container.id != \"\""
-	disabled_rules = ["Suspicious Cron Modification"]
+	disabled_rules = ["Dump memory for credentials"]
 	runbook = "https://sysdig.com"
 
 	actions {
@@ -80,7 +80,7 @@ resource "sysdig_secure_managed_policy" "sample" {
 	name = "Sysdig Runtime Threat Detection"
 	enabled = true
 	scope = "container.id != \"\""
-	disabled_rules = ["Suspicious Cron Modification"]
+	disabled_rules = ["Dump memory for credentials"]
 	runbook = "https://sysdig.com"
 
 	actions {}
@@ -96,7 +96,7 @@ resource "sysdig_secure_managed_policy" "sample" {
 	name = "Sysdig Runtime Threat Detection"
 	enabled = true
 	scope = "container.id != \"\""
-	disabled_rules = ["Suspicious Cron Modification"]
+	disabled_rules = ["Dump memory for credentials"]
 	runbook = "https://sysdig.com"
 
 	actions {
@@ -123,7 +123,7 @@ func managedPolicyWithKillAction() string {
 	name = "Sysdig Runtime Threat Detection"
 	enabled = true
 	scope = "container.id != \"\""
-	disabled_rules = ["Suspicious Cron Modification"]
+	disabled_rules = ["Dump memory for credentials"]
 	runbook = "https://sysdig.com"
 
 	actions {

sysdig/resource_sysdig_secure_managed_ruleset_test.go

@@ -66,7 +66,7 @@ resource "sysdig_secure_managed_ruleset" "sample" {
 	}
 	enabled = true
 	scope = "container.id != \"\""
-	disabled_rules = ["Suspicious Cron Modification"]
+	disabled_rules = ["Dump memory for credentials"]
 	runbook = "https://sysdig.com"
 
 	actions {
@@ -95,7 +95,7 @@ resource "sysdig_secure_managed_ruleset" "sample" {
 	}
 	enabled = true
 	scope = "container.id != \"\""
-	disabled_rules = ["Suspicious Cron Modification"]
+	disabled_rules = ["Dump memory for credentials"]
 	runbook = "https://sysdig.com"
 
 	actions {}
@@ -116,7 +116,7 @@ resource "sysdig_secure_managed_ruleset" "sample" {
 	}
 	enabled = true
 	scope = "container.id != \"\""
-	disabled_rules = ["Suspicious Cron Modification"]
+	disabled_rules = ["Dump memory for credentials"]
 	runbook = "https://sysdig.com"
 
 	actions {
@@ -154,7 +154,7 @@ resource "sysdig_secure_managed_ruleset" "sample" {
 	}
 	enabled = true
 	scope = "container.id != \"\""
-	disabled_rules = ["Suspicious Cron Modification"]
+	disabled_rules = ["Dump memory for credentials"]
 	runbook = "https://sysdig.com"
 
 	actions {

website/docs/r/secure_managed_policy.md

@@ -32,7 +32,7 @@ resource "sysdig_secure_managed_policy" "sysdig_runtime_threat_detection" {
   scope = "container.id != \"\""
 
   // Disabling rules
-  disabled_rules = ["Suspicious Cron Modification"]
+  disabled_rules = ["Dump memory for credentials"]
 
   actions {
     container = "stop"

website/docs/r/secure_managed_ruleset.md

@@ -34,7 +34,7 @@ resource "sysdig_secure_managed_ruleset" "sysdig_runtime_threat_detection_manage
     scope = "container.id != \"\""
 
     // Disabling rules
-    disabled_rules = ["Suspicious Cron Modification"]
+    disabled_rules = ["Dump memory for credentials"]
 
     actions {
         container = "stop"