Document CNM API authorization requirements

.generator/schemas/v2/openapi.yaml

@@ -114930,6 +114930,7 @@ components:
             monitors_downtime: Set downtimes to suppress alerts from any monitor in an organization. Mute and unmute monitors. The ability to write monitors is not required to set downtimes.
             monitors_read: View monitors.
             monitors_write: Edit, delete, and resolve individual monitors.
+            network_connections_read: Read cloud network connections.
             org_connections_read: Read cross organization connections.
             org_connections_write: Create, edit, and delete cross organization connections.
             org_management: Edit org configurations, including authentication and certain security preferences such as configuring SAML, renaming an org, configuring allowed login methods, creating child orgs, subscribing & unsubscribing from apps in the marketplace, and enabling & disabling Remote Configuration for the entire organization.
@@ -163397,11 +163398,22 @@ paths:
           description: OK
         "400":
           $ref: "#/components/responses/BadRequestResponse"
+        "403":
+          $ref: "#/components/responses/ForbiddenResponse"
         "429":
           $ref: "#/components/responses/TooManyRequestsResponse"
+      security:
+        - apiKeyAuth: []
+          appKeyAuth: []
+        - AuthZ:
+            - network_connections_read
       summary: Get all aggregated connections
       tags:
         - Cloud Network Monitoring
+      "x-permission":
+        operator: OR
+        permissions:
+          - network_connections_read
   /api/v2/network/dns/aggregate:
     get:
       description: Get all aggregated DNS traffic.
@@ -163468,11 +163480,22 @@ paths:
           description: OK
         "400":
           $ref: "#/components/responses/BadRequestResponse"
+        "403":
+          $ref: "#/components/responses/ForbiddenResponse"
         "429":
           $ref: "#/components/responses/TooManyRequestsResponse"
+      security:
+        - apiKeyAuth: []
+          appKeyAuth: []
+        - AuthZ:
+            - network_connections_read
       summary: Get all aggregated DNS traffic
       tags:
         - Cloud Network Monitoring
+      "x-permission":
+        operator: OR
+        permissions:
+          - network_connections_read
   /api/v2/oauth2/.well-known/sites:
     get:
       description: Retrieve the list of public OAuth2 sites available for the current environment. This endpoint is used for OAuth2 discovery and returns sites where users can authenticate.

lib/datadog_api_client/v2/api/cloud_network_monitoring_api.rb

@@ -81,7 +81,7 @@ def get_aggregated_connections_with_http_info(opts = {})
       return_type = opts[:debug_return_type] || 'SingleAggregatedConnectionResponseArray'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :get_aggregated_connections,
@@ -159,7 +159,7 @@ def get_aggregated_dns_with_http_info(opts = {})
       return_type = opts[:debug_return_type] || 'SingleAggregatedDnsResponseArray'
 
       # auth_names
-      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth]
+      auth_names = opts[:debug_auth_names] || [:apiKeyAuth, :appKeyAuth, :AuthZ]
 
       new_options = opts.merge(
         :operation => :get_aggregated_dns,