Creating custom lists and adding items

Creating a custom list and adding items in the console

Follow these steps to create a custom list in the console:

1. In the CIS console, navigate to the Account page.

2. Select the Lists tab and then click Create.

3. Enter a name for your list and then select the Type of list.

4. Optionally, enter a description to clarify the purpose of the list.

5. Click Create custom list.

6. Select one of the following options:

   • To add items to the list by using a CSV file:

     1. Click Upload CSV.

        The CSV file size is limited to 50 MB.

     2. Browse to the location of your CSV file, select the file, and then click Upload. The items displayed on the page include the items loaded from the CSV file.

        The exact CSV file format depends on the list type.

     3. Click Add item to add items to the list.

   • To add items to the list manually:

     1. Enter the values, depending on the list type.
     2. Optionally, enter a description and then click Add item.

7. Click Create list items.

Creating a custom list from the CLI

To create a custom list for your instance, enter the following command:

ibmcloud cis custom-lists list-create (--kind KIND) (--name NAME) [--description DESCRIPTION] [-i, --instance INSTANCE]

You can also accept JSON input (from a file or directly as a string):

ibmcloud cis custom-lists list-create (--json @JSON_FILE | JSON_STRING) [-i, --instance INSTANCE]

ibmcloud cis custom-lists list-create --kind ip --name iplistone -i crn:v1:staging:public:internet-svcs-ci:global:a/c987fg3e4h278745690dp435683568rp:eg7kb437-4893-56yl-4wn9-c595j8t78gr9::

ibmcloud cis custom-lists list-create —-json @example.json -i crn:v1:staging:public:internet-svcs-ci:global:a/c987fg3e4h278745690dp435683568rp:eg7kb437-4893-56yl-4wn9-c595j8t78gr9::

Adding items to a custom list from the CLI

To create a new item in a custom list from the CLI, run the following command:

ibmcloud cis custom-lists item-create LIST_ID (--asn ASN | --ip IP | --hostname HOSTNAME) [--comment COMMENT] [-i, --instance INSTANCE]

You can also accept JSON input (from a file or directly as a string):

ibmcloud cis custom-lists item-create LIST_ID (--json @JSON_FILE | JSON_STRING) [-i, --instance INSTANCE]

ibmcloud cis custom-lists item-create f93d11a87c4945a0a6bd12820776a66d --ip 192.0.0.3  -i crn:v1:staging:public:internet-svcs-ci:global:a/c987fg3e4h278745690dp435683568rp:eg7kb437-4893-56yl-4wn9-c595j8t78gr9::

ibmcloud cis custom-lists item-create f93d11a87c4945a0a6bd12820776a66d --json @example.json -i crn:v1:staging:public:internet-svcs-ci:global:a/c987fg3e4h278745690dp435683568rp:eg7kb437-4893-56yl-4wn9-c595j8t78gr9::

Creating a custom list with the API

Follow these steps to create a custom list with the API:

1. Set up your API environment with the correct variables.

2. Store the following values in variables to be used in the API command:

   CRN: The full URL-encoded CRN of the service instance.

3. When all variables are initiated, create the custom list:

   curl -X POST "https://api.cis.cloud.ibm.com/v1/$CRN/rules/lists" \
   --header "X-Auth-User-Token: Bearer <API_TOKEN>" \
   --header "Content-Type: application/json" \
   --data '{
     "kind": "ip",
     "name": "malicious_ips",
     "description": "IPs associated with known bad actors"
   }'
   

Adding items to a custom list with the API

Follow these steps to add items to a custom list with the API:

1. Set up your API environment with the correct variables.

2. Store the following values in variables to be used in the API command:

   CRN: The full URL-encoded CRN of the service instance.

   LIST_ID: The custom list ID.

3. When all variables are initiated, create the custom list items:

   curl -X POST "https://api.cis.cloud.ibm.com/v1/$CRN/rules/lists/$LIST_ID/items" \
   --header "X-Auth-User-Token: Bearer <API_TOKEN>" \
   --header "Content-Type: application/json" \
   --data '[
     {"ip":"23.87.13.199"},
     {"ip":"45.20.84.39"},
     {"ip":"72.48.188.49"},
     {"ip":"76.35.97.136"}
   ]'
   

Creating a custom list with Terraform

The following example creates a custom list:

resource ibm_cis_custom_list custom_list {
    cis_id    = "crn:v1:staging:public:internet-svcs-ci:global:a/01652b251c3ae2787110a995d8db0135:1a9174b6-0106-417a-844b-c8eb43a72f63::"
    kind = "ip"
    name = "testip"
    description = "custom list"
}

Adding items to a custom list with Terraform

The following example adds items to a custom list:

resource ibm_cis_custom_list_items items1 {
    cis_id    = "crn:v1:staging:public:internet-svcs-ci:global:a/01652b251c3ae2787110a995d8db0135:1a9174b6-0106-417a-844b-c8eb43a72f63::"
    list_id = "ibm_cis_custom_list.custom_list.list_id"
    items {
        ip = "1.2.3.6"
    }
    items {
        ip = "2.3.4.5"
    items {
        ip = "192.168.0.1"
    }
}