Documentation Index
Fetch the complete documentation index at: /llms.txt
Use this file to discover all available pages before exploring further.
Detect and manage security anomalies
v0.4.1 includes client.Anomalies.GetResponsePolicy(ctx) and
SetResponsePolicy(ctx, "alert_only"). These are account-wide and require the
default-off server setting IRREGULARITY_RESPONSE_POLICY_ENABLED=true.
Earlier tags do not include these methods. Alert-only stops
automatic revocation by this detector, not independent controls.
Trigger anomaly detection and get results.
result, err := client.Anomalies.Detect(ctx)
fmt.Printf("Found %d anomalies\n", result.Total)
fmt.Printf("Mode %s, revoked %d grants\n", result.ResponseMode, result.AutoRevokedGrants)
for _, a := range result.Anomalies {
fmt.Printf("[%s] %s: %s\n", a.Severity, a.Type, a.Description)
}
// All anomalies
result, err := client.Anomalies.List(ctx, nil)
// Only unacknowledged
unack := true
result, err := client.Anomalies.List(ctx, &grantex.ListAnomaliesParams{
Unacknowledged: &unack,
})
anomaly, err := client.Anomalies.Acknowledge(ctx, "anomaly-id")
fmt.Printf("Acknowledged at: %s\n", *anomaly.AcknowledgedAt)
| Type | Description |
|---|---|
rate_spike | Unusual request rate |
high_failure_rate | High action failure rate |
new_principal | Activity from new user |
off_hours_activity | Activity outside business hours |
| Level | Description |
|---|---|
low | Informational |
medium | Requires attention |
high | Requires immediate action |