diff --git a/.changelog/3234.txt b/.changelog/3234.txt
new file mode 100644
index 00000000000..93d0ecd5de4
--- /dev/null
+++ b/.changelog/3234.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+device_posture_rule: support operational_state for sentinelone_s2s posture rule
+```
diff --git a/device_posture_rule.go b/device_posture_rule.go
index 0c24fd9a825..066dadcb12b 100644
--- a/device_posture_rule.go
+++ b/device_posture_rule.go
@@ -196,6 +196,7 @@ type DevicePostureRuleInput struct {
 	NetworkStatus    string               `json:"network_status,omitempty"`
 	Infected         *bool                `json:"infected,omitempty"`
 	IsActive         *bool                `json:"is_active,omitempty"`
+	OperationalState *string              `json:"operational_state,omitempty"`
 	EidLastSeen      string               `json:"eid_last_seen,omitempty"`
 	RiskLevel        string               `json:"risk_level,omitempty"`
 	State            string               `json:"state,omitempty"`