Add suppression tags

content/en/api/v2/security-monitoring/request.CreateSecurityMonitoringSuppression.json

@@ -7,7 +7,11 @@
       "expiration_date": 1638443471000,
       "name": "Example-Security-Monitoring",
       "rule_query": "type:log_detection source:cloudtrail",
-      "suppression_query": "env:staging status:low"
+      "suppression_query": "env:staging status:low",
+      "tags": [
+        "technique:T1110-brute-force",
+        "source:cloudtrail"
+      ]
     },
     "type": "suppressions"
   }

data/api/v2/full_spec.yaml

@@ -47415,6 +47415,14 @@ components:
             the queries to search signals in the signal explorer.
           example: env:staging status:low
           type: string
+        tags:
+          description: List of tags associated with the suppression rule.
+          example:
+          - technique:T1110-brute-force
+          - source:cloudtrail
+          items:
+            type: string
+          type: array
         update_date:
           description: A Unix millisecond timestamp given the update date of the suppression
             rule.
@@ -47476,6 +47484,14 @@ components:
             same syntax as the queries to search signals in the Signals Explorer.
           example: env:staging status:low
           type: string
+        tags:
+          description: List of tags associated with the suppression rule.
+          example:
+          - technique:T1110-brute-force
+          - source:cloudtrail
+          items:
+            type: string
+          type: array
       required:
       - name
       - enabled
@@ -47571,6 +47587,14 @@ components:
             the queries to search signals in the signal explorer.
           example: env:staging status:low
           type: string
+        tags:
+          description: List of tags associated with the suppression rule.
+          example:
+          - technique:T1110-brute-force
+          - source:cloudtrail
+          items:
+            type: string
+          type: array
         version:
           description: The current version of the suppression. This is optional, but
             it can help prevent concurrent modifications.