Skip to content
This repository has been archived by the owner on Sep 3, 2024. It is now read-only.

Latest commit

 

History

History
2480 lines (1520 loc) · 78.9 KB

CHANGELOG.md

File metadata and controls

2480 lines (1520 loc) · 78.9 KB
Raw

v7.9.5 (Mon Sep 02 2024)

🐛 Bug Fix

Authors: 1

v7.9.4 (Wed Aug 28 2024)

🐛 Bug Fix

Authors: 1

v7.9.3 (Wed Aug 28 2024)

🐛 Bug Fix

Authors: 1

v7.9.2 (Tue Aug 27 2024)

🐛 Bug Fix

Authors: 1

v7.9.1 (Tue Aug 27 2024)

🐛 Bug Fix

Authors: 1

v7.9.0 (Fri Aug 23 2024)

🚀 Enhancement

Authors: 1

v7.8.1 (Wed Aug 14 2024)

🐛 Bug Fix

Authors: 2

v7.8.0 (Tue Aug 13 2024)

🚀 Enhancement

Authors: 2

v7.7.1 (Mon Aug 12 2024)

🐛 Bug Fix

Authors: 1

v7.7.0 (Tue Aug 06 2024)

🚀 Enhancement

Authors: 1

v7.6.0 (Tue Aug 06 2024)

🚀 Enhancement

Authors: 2

v7.4.0 (Mon Aug 05 2024)

🚀 Enhancement

Authors: 1

v7.3.3 (Mon Aug 05 2024)

🐛 Bug Fix

Authors: 1

v7.3.2 (Mon Jul 29 2024)

🐛 Bug Fix

Authors: 1

v7.3.1 (Mon Jul 22 2024)

🐛 Bug Fix

Authors: 1

v7.3.0 (Thu Jul 18 2024)

🚀 Enhancement

Authors: 3

v7.2.0 (Tue Jul 09 2024)

🚀 Enhancement

Authors: 2

v7.1.3 (Wed Jun 05 2024)

🐛 Bug Fix

Authors: 1

v7.1.2 (Tue May 28 2024)

🐛 Bug Fix

Authors: 1

v7.1.1 (Tue May 28 2024)

🐛 Bug Fix

Authors: 1

v7.1.0 (Tue May 28 2024)

🚀 Enhancement

🐛 Bug Fix

Authors: 3

v7.0.2 (Thu May 23 2024)

🐛 Bug Fix

Authors: 2

v7.0.1 (Thu May 16 2024)

🐛 Bug Fix

Authors: 1

v7.0.0 (Mon May 13 2024)

💥 Breaking Change

🐛 Bug Fix

Authors: 4

v7.0.0 (Thu May 13 2024)

Added

  • Support for ingesting the following new resources

  • New entities

    • azure_event_hub
    • azure_event_hub_cluster
    • azure_event_hub_key
    • azure_event_hub_namespace
    • azure_event_hub_consumer_group
    • azure_synapse
    • azure_synapse_masking_policy
    • azure_synapse_masking_rule
    • azure_synapse_sql_pool
    • azure_synapse_workspace
    • azure_synapse_key
    • azure_ddos_protection_plan
    • azure_application_security_group
    • azure_kube_maintenance_configuration
    • azure_kubernetes_cluster
    • azure_kube_service
    • azure_kube_trusted_access_role
    • azure_expressroute_circuit
    • azure_peer_expressroute_circut_connection
    • azure_expressroute_circut_connection
    • azure_expressroute
    • azure_bgp_service_communities
    • azure_application_gateway

  • New relationships

  • azure_event_hub HAS azure_location

  • azure_event_hub_cluster ASSIGNED azure_event_hub_namespace

  • azure_event_hub_consumer_group HAS azure_event_hub

  • azure_event_hub_key USES azure_keyvault_service

  • azure_event_hub_namespace HAS azure_event_hub

  • azure_event_hub_namespace HAS azure_event_hub_key

  • azure_resource_group HAS azure_event_hub

  • azure_subscription HAS azure_event_hub

  • azure_synapse HAS azure_synapse_key

  • azure_synapse HAS azure_synapse_sql_pool

  • azure_synapse HAS azure_synapse_workspace

  • azure_synapse_sql_pool ASSIGNED azure_synapse_masking_policy

  • azure_synapse_sql_pool HAS azure_synapse_masking_rule

  • azure_synapse_workspace HAS azure_synapse_key

  • azure_synapse_workspace HAS azure_synapse_sql_pool

  • azure_subscription HAS azure_synapse

  • azure_keyvault_service HAS azure_synapse_key

  • azure_resource_group HAS azure_kubernetes_cluster

  • azure_kube_service CONTAINS azure_kube_trusted_access_role

  • azure_kube_trusted_access_role HAS kube_cluster_role

  • azure_kubernetes_cluster HAS azure_kube_maintenance_configuration

  • azure_subscription HAS azure_kube_service

  • azure_resource_group HAS azure_ddos_protection_plan

  • azure_subscription HAS azure_ddos_protection_plan

  • azure_ddos_protection_plan ASSIGNED azure_public_ip

  • azure_ddos_protection_plan ASSIGNED azure_vnet

  • azure_bgp_service_communities HAS azure_expressroute

  • azure_expressroute HAS azure_application_gateway

  • azure_expressroute HAS azure_expressroute

  • azure_expressroute HAS azure_expressroute_circuit_connection

  • azure_expressroute HAS azure_peer_expressroute_circut_connection

  • azure_expressroute_circuit HAS azure_expressroute_circuit_connection

  • azure_expressroute_circuit HAS azure_peer_expressroute_circut_connection

  • azure_subscription HAS azure_expressroute

  • azure_subscription HAS azure_bgp_service_communities

v6.4.2 (Tue May 07 2024)

🐛 Bug Fix

Authors: 1

v6.4.1 (Mon May 06 2024)

🐛 Bug Fix

Authors: 1

v6.4.0 (Mon Apr 29 2024)

🚀 Enhancement

Authors: 1

v6.3.0 (Thu Apr 11 2024)

🚀 Enhancement

Authors: 1

v6.2.0 (Fri Apr 05 2024)

🚀 Enhancement

Authors: 1

v6.1.5 (Wed Apr 03 2024)

🐛 Bug Fix

Authors: 1

v6.1.4 (Tue Apr 02 2024)

🐛 Bug Fix

Authors: 1

v6.1.3 (Thu Feb 15 2024)

🐛 Bug Fix

Authors: 1

v6.1.2 (Wed Feb 14 2024)

🐛 Bug Fix

Authors: 1

v6.1.1 (Tue Feb 06 2024)

🐛 Bug Fix

Authors: 1

v6.1.0 (Tue Feb 06 2024)

🚀 Enhancement

Authors: 1

v6.0.2 (Mon Feb 05 2024)

🐛 Bug Fix

Authors: 1

v6.0.1 (Fri Feb 02 2024)

🐛 Bug Fix

Authors: 1

v6.0.0 (Fri Feb 02 2024)

💥 Breaking Change

🐛 Bug Fix

Authors: 1

v5.54.8 (Wed Jan 03 2024)

🐛 Bug Fix

⚠️ Pushed to main

  • Apply remove-codeql with multi-gitter [ci skip] (@electricgull)

Authors: 2

v5.54.7 (Fri Dec 15 2023)

🐛 Bug Fix

  • [NOTICKET] Adjust log levels of erroneous messages #614 (@ImDevinC)

Authors: 1

v5.54.6 (Wed Dec 06 2023)

🐛 Bug Fix

⚠️ Pushed to main

  • Fix x-cortex-service-groups where tier-4 was set incorrectly (@jablonnc)

Authors: 2

v5.54.5 (Tue Dec 05 2023)

🐛 Bug Fix

Authors: 1

v5.54.4 (Mon Dec 04 2023)

🐛 Bug Fix

Authors: 1

v5.54.3 (Fri Dec 01 2023)

🐛 Bug Fix

Authors: 1

v5.54.2 (Fri Dec 01 2023)

🐛 Bug Fix

Authors: 1

v5.54.1 (Wed Nov 29 2023)

🐛 Bug Fix

Authors: 2

v5.54.0 (Wed Nov 29 2023)

🚀 Enhancement

Authors: 1

v5.53.3 (Fri Nov 17 2023)

🐛 Bug Fix

Authors: 1

v5.53.2 (Thu Oct 19 2023)

🐛 Bug Fix

Authors: 1

v5.53.1 (Thu Oct 19 2023)

🐛 Bug Fix

Authors: 1

v5.53.0 (Wed Oct 18 2023)

🚀 Enhancement

⚠️ Pushed to main

  • Populate CODEOWENRS, baseline package.json and baseline cortex.yaml (@jablonnc)

Authors: 2

v5.52.11 (Mon Oct 16 2023)

🐛 Bug Fix

Authors: 1

v5.52.10 (Wed Oct 11 2023)

🐛 Bug Fix

  • DEVICE-253 - Add lastSeenOn property for devices #596 (@jzolo22)

Authors: 1

v5.52.9 (Tue Oct 10 2023)

🐛 Bug Fix

Authors: 1

v5.52.8 (Mon Oct 09 2023)

🐛 Bug Fix

Authors: 1

v5.52.7 (Mon Oct 09 2023)

🐛 Bug Fix

Authors: 1

v5.52.6 (Fri Oct 06 2023)

🐛 Bug Fix

Authors: 1

v5.52.5 (Fri Oct 06 2023)

🐛 Bug Fix

Authors: 1

v5.52.4 (Wed Oct 04 2023)

🐛 Bug Fix

Authors: 1

v5.52.3 (Tue Oct 03 2023)

🐛 Bug Fix

Authors: 1

v5.52.2 (Wed Sep 13 2023)

🐛 Bug Fix

Authors: 1

v5.52.1 (Wed Sep 06 2023)

🐛 Bug Fix

Authors: 1

v5.52.0 (Fri Sep 01 2023)

🚀 Enhancement

Authors: 1

v5.51.0 (Tue Aug 29 2023)

🚀 Enhancement

  • INT-8979 - ingest Firewall->ALLOWS->Internet mapped relationships; ingest firewall policies #589 ([email protected])

Authors: 1

v5.50.0 (Tue Aug 29 2023)

🚀 Enhancement

Authors: 1

v5.49.2 (Mon Aug 21 2023)

🐛 Bug Fix

Authors: 1

v5.49.1 (Thu Aug 17 2023)

🐛 Bug Fix

Authors: 1

v5.49.0 (Mon Jul 31 2023)

🚀 Enhancement

Authors: 1

v5.48.0 (Thu Jul 27 2023)

🚀 Enhancement

Authors: 1

v5.47.0 (Mon Jul 24 2023)

🚀 Enhancement

Authors: 2

v5.46.0 (Thu Jul 13 2023)

🚀 Enhancement

Authors: 1

v5.45.1 (Thu Jun 22 2023)

🐛 Bug Fix

Authors: 1

v5.45.0 (Mon May 08 2023)

🚀 Enhancement

🐛 Bug Fix

Authors: 1

v5.44.0 (Fri Apr 28 2023)

🚀 Enhancement

🐛 Bug Fix

Authors: 2

v5.43.3 (Mon Apr 24 2023)

🐛 Bug Fix

Authors: 1

v5.43.2 (Wed Apr 19 2023)

🐛 Bug Fix

Authors: 1

v5.43.1 (Wed Apr 19 2023)

🐛 Bug Fix

Authors: 1

v5.43.0 (Mon Apr 17 2023)

🚀 Enhancement

  • Consolidating Job Event Names to SDK supported values #568 (@VDubber)

Authors: 1

v5.42.1 (Fri Apr 14 2023)

🐛 Bug Fix

  • Add allowSharedKeyAccess and listKeys permission questions #567 (@a-u-h-g)

Authors: 1

v5.42.0 (Thu Apr 13 2023)

🚀 Enhancement

  • Bump @azure/arm-storage@^15.3.0 to get allowSharedKeyAccess property #566 (@ndowmon)

Authors: 1

v5.41.0 (Wed Apr 12 2023)

🚀 Enhancement

🐛 Bug Fix

Authors: 1

v5.40.9 (Wed Mar 22 2023)

🐛 Bug Fix

Authors: 1

v5.40.8 (Mon Feb 27 2023)

🐛 Bug Fix

Authors: 2

v5.40.7 (Thu Jan 19 2023)

🐛 Bug Fix

Authors: 1

v5.40.6 (Thu Jan 19 2023)

🐛 Bug Fix

Authors: 1

v5.40.5 (Tue Jan 17 2023)

🐛 Bug Fix

Authors: 1

v5.40.4 (Wed Dec 14 2022)

🐛 Bug Fix

Authors: 4

v5.40.3 (Tue Sep 27 2022)

🐛 Bug Fix

  • Fix azure_kubernetes_service -> azure_resource_group relationship #543 (@ndowmon)

Authors: 1

v5.40.2 (Mon Sep 26 2022)

🐛 Bug Fix

Authors: 2

v5.40.1 (Wed Sep 07 2022)

🐛 Bug Fix

Authors: 2

[5.40.0] - 2022-08-11

Changed

  • Add tags to azure_storage_container entities
  • Set API response log level from info -> debug
  • Stopped printing UNREGISTERED_PROVIDER messages in DNS Zone steps

[5.39.1] - 2022-06-28

  • Fix managed question issue
  • Update integration SDK packages
  • Update @lifeomic/attempt

[5.39.0] - 2022-06-15

Added

  • Added azure_frontdoor_backend_pool entities
  • Added azure_frontdoor_frontend_endpoint entities
  • Added azure_frontdoor_routing_rule entities
  • Added azure_frontdoor_rules_engine entities

[5.38.0] - 2022-06-14

Added

  • Added azure_frontdoor entities

[5.37.1] - 2022-06-10

Fixed

  • Fixed DUPLICATE_KEY_DETECTED in rm-compute-network-relationships step
  • Fixed DUPLICATE_KEY_DETECTED in rm-keyvault-principal-relationships step

[5.37.0] - 2022-03-28

Changed

  • Modified rm-subscription-locations and rm-network-location-watcher-relationships steps to not create azure_location entities explicitely but to create mapped relationships with skipTargetCreation: false.

[5.36.2] - 2022-03-09

Fixed

  • Fixed a problem related to subnet and virtual machine relationships that was causing the same subnet to be used more than once resulting in duplicate key error.

[5.36.1] - 2022-03-02

Removed

  • Removed check to verify whether the access token has a property called roles in its access token and the Directory.Read.All role in its array

[5.36.0] - 2022-02-07

Added

  • Added a new field called state that reflects the virtual machine's state (running or stopped).

Changed

  • Previously called state field is now called provisioningState as it reflects the virtual machine's provision state.

  • The boolean field active now also reflects the virtual machine's state. It's values can be: true (when state is running), false (when state is stopped) and undefined if the state isn't known.

[5.35.3] - 2022-01-26

Changed

  • Update sdk-* packages to 8.2.1. This is a major version change requiring to conform to _key being required on entities. In addition, the user entity now has the active property as required by the v8 update.

[5.35.2] - 2021-11-08

Fixed

  • Stopped using the callback version of the ContainerServiceClient.managedClusters.list(callback) API

[5.35.1] - 2021-11-08

Fixed

  • Stopped creating azure_kubernetes_cluster entities that have no id property

[5.35.0] - 2021-11-04

Added

  • Added support for ingesting the following new resources:

    Service Resource / Entity
    Azure Kubernetes Cluster azure_kubernetes_cluster
    Resource Lock azure_resource_lock

  • Added support for ingesting the following new relationships:

    Source _class Target
    azure_resource_group HAS azure_kubernetes_cluster
    azure_resource_lock HAS ANY_SCOPE

  • New properties added to resources:

    Entity Properties
    azure_keyvault_service enableSoftDelete, enablePurgeProtection

Changed

  • Refactored the rm-compute-network-relationships step to ensure relationships are created between azure_vm, azure_nic, azure_subnet and azure_public_ip

[5.34.0] - 2021-11-01

Added

  • Added support for ingesting the following new resources:

    Service Resource / Entity
    Key Vault Key azure_keyvault_key
    Key Vault Secret azure_keyvault_secret

  • With the following properties:

    Entity Properties
    azure_keyvault_key name, recoveryLevel, vaultUrl, version, enabled, notBefore, createdOn, updatedOn, expiresOn
    azure_keyvault_secret name, recoveryLevel, vaultUrl, version, contentType, certificateKeyId, managed, enabled, notBefore, createdOn, updatedOn, expiresOn

  • New properties added to resources:

    Entity Properties
    azure_storage_account tableAnalyticsLoggingReadEnabled, tableAnalyticsLoggingWriteEnabled, tableAnalyticsLoggingDeleteEnabled

Fixed

  • Suppressed FeatureNotSupportedForAccount and AccountIsDisabled errors when attempting to list tables, queues, blobs, and file shares for storage accounts
  • Add errorCode and errorName to blob & queue service properties calls
  • Fixed a bug that occurs when paginating Microsoft.Compute/galleries/${galleryId}/images/${imageId}/versions

[5.33.0] - 2021-10-15

Added

  • New properties added to resources:

    Entity Properties
    azure_web_app, azure_function_app authEnabled, httpsOnly, minTlsVersion, clientCertEnabled, principalId, phpVersion, pythonVersion, javaVersion, nodeVersion, http20Enabled, ftpsState
    azure_sql_server vaRecurringScansEnabled, vaStoragePath, vaEmailSubscriptionAdmins, vaEmails

    Note: fetching settings for azure_web_app and azure_function_app requires additional permission to be added to the custom role: Microsoft.Web/sites/config/list/Action

[5.32.0] - 2021-10-04

Added

  • Open-sourced Azure managed questions

[5.31.7] - 2021-10-04

Changed

  • Bumped @jupiterone/integration-sdk-*@6.22.1. This included new functionality to the IntegrationError classes that better segregates errors coming from different steps

[5.31.6] - 2021-10-01

Fixed

  • Stop throwing Provider API failed at storage.*: AccountIsDisabled The specified account is disabled. on storage blob/queue/table/file steps

[5.31.5] - 2021-10-01

Fixed

  • Stop throwing Provider API failed at storage.*: AccountIsDisabled The specified account is disabled. on storage blob/queue/table/file steps

[5.31.5] - 2021-10-01

Fixed

  • Stop throwing Provider API failed at storage.*: AccountIsDisabled The specified account is disabled. on storage blob/queue/table/file steps
  • Stop throwing Provider API failed at *.*: DisallowedOperation The current subscription type is not permitted to perform operations on any provider namespace. Please use a different subscription. on steps

[5.31.4] - 2021-10-01

Fixed

  • Stop throwing Provider API failed at monitor.diagnosticSetting: SubscriptionNotRegistered The subscription '<SUBSCRIPTION-ID>' is not registered to use microsoft.insights. on security center settings step
  • Stop throwing Provider API failed at security.settings: Subscription Not Registered Please register to Microsoft.Security in order to view your security status on security center settings step

[5.31.3] - 2021-09-07

Changed

  • Restored GraphClient retry parameters:
    • retries: 5 -> 3
    • delay: 500 -> 200

Fixed

  • Added token refresh logic to GraphClient

[5.31.2] - 2021-09-02

Changed

  • Increased GraphClient retries from 3 to 5
  • Added 500ms delay between GraphClient retries
  • Used expect().toTargetEntities() matcher from SDK, and removed local implementations of .toTargetEntities() and .toCreateValidRelationshipsToEntities()

5.31.1 - 2021-08-04

Changed

  • Changed validateInvocation() to try directly invoking subscriptionClient.getSubscription(id) when provided a subscriptionId parameter. Directly pass errors through to the user, such as:
    • The provided subscription identifier '{{SUBSCRIPTION_ID}}' is malformed or invalid.
    • The subscription '{{SUBSCRIPTION_ID}}' could not be found.
    • The client '{{CLIENT_ID}}' with object id '{{CLIENT_ID}}' does not have authorization to perform action 'Microsoft.Resources/subscriptions/read' over scope '/subscriptions/{{SUBSCRIPTION_ID}}' or the scope is invalid.

5.31.0 - 2021-07-22

Changed

  • Throw IntegrationProviderAuthorizationError on 403 response in GraphClient
  • Changed azure_group_has_member relationships from mapped to direct, because group members always exist in the same directory as the group.
  • Bumped @jupiterone/integration-sdk-*@6.10.0. This included some new required properties for entities of _class Service and User. Added the function property to the following entites:
    • azure_batch_account
    • azure_storage_account
    • azure_cdn_profile
    • azure_event_grid_domain
    • azure_service_bus_namespace

Fixed

  • Identify policy definition source (subscription, management group, or built-in) using a case-insensitive switch statement, since Azure resource IDs do not use consistent casing.
  • Fixed an issue where DNS Zones and Private DNS Zones threw an error if a subscription had not registered the Microsoft.Network provider

5.30.0 - 2021-06-09

Added

  • Added support for ingesting the following new relationships:

    Source _class Target
    azure_vm GENERATED azure_shared_image_version
    azure_keyvault_service ALLOWS ANY_PRINCIPAL

Changed

  • Lowercase the azure_vm._key property to allow for mapped relationships across different J1 subscriptions.

5.29.0 - 2021-06-07

Added

  • New properties added to resources:

    Entity Properties
    azure_shared_image_version publishedDate, createdOn

5.28.1 - 2021-06-07

Fixed

  • Moved @microsoft/microsft-graph-types from dev to direct dependency, which was previously causing types to fail on dependent projects after exporting clients.GraphClient in v5.27.1.

5.28.0 - 2021-06-07

Added

  • Added support for ingesting the following new resources:

    Service Resource / Entity
    Gallery Image Version azure_shared_image_version

  • Added support for ingesting the following new relationships:

    Source _class Target
    azure_shared_image HAS azure_shared_image_version
    azure_vm USES azure_shared_image_version

  • New properties added to resources:

    Entity Properties
    azure_policy_definition Automatically convert metadata to J1 tags
    azure_policy_definition accountEnabled

Changed

  • Fixed a bug where the compute galleries execution handler was not invoked, and instead the VM images execution handler was invoked twice. This caused DuplicateKeyErrors in either the compute galleries step or the VM images step.
  • Changed the type azure_shared_image to azure_shared_image_definition, because shared images have both a definition, representing top-level metadata, and a number of versions, representing discrete images.
  • Changed the _class of azure_gallery from DataStore to Repository.

5.27.1 - 2021-06-02

Changed

  • Exported clients.GraphClient from project index.

5.27.0 - 2021-06-01

Added

  • New properties added to resources:

    Entity Properties
    azure_role_assignment actions, dataActions, notActions, notDataActions

5.26.1 - 2021-06-01

Fixed

  • Fixed a bug introduced in 5.25.1 where the rm-authorization-classic-administrators step no longer had a dependency on the ad-account step, causing ACCOUNT_ENTITY_NOT_FOUND errors.

5.26.0 - 2021-06-01

Added

  • Added support for ingesting the following new relationships:

    Source _class Target
    azure_vm USES azure_service_principal

5.25.1 - 2021-05-27

Changed

  • Changed the policy definition _key suffix to :latest instead of :${timestamp} to reduce policy state churn during integration invocations.

  • Previously, JupiterOne created direct relationships between active directory entities and role assignments when active directory entities were ingested in the same integration as subscription entities. In an effort to ensure consistent relationships are built given any integration configuration, this integration now defaults to creating mapped relationships between role assignments and active directory entities.

5.25.0 - 2021-05-24

Added

  • Added ingestion of Azure Management Groups when the configureSubscriptionInstances configuration field is true. This ingestion requires users to assign the Management Group Reader role to the service principal used in the given integration configuration to the Tenant Root Group management group.

  • Added support for ingesting the following new resources:

    Service Resource / Entity
    Gallery azure_gallery
    Gallery Image azure_shared_image
    Management Groups azure_management_group

  • Added support for ingesting the following new relationships:

    Source _class Target
    azure_resource_group HAS azure_gallery
    azure_gallery CONTAINS azure_shared_image
    azure_vm HAS azure_shared_image
    azure_vm HAS azure_image
    azure_management_group CONTAINS azure_management_group
    azure_account HAS azure_management_group

  • New properties added to resources:

    Entity Properties
    azure_vm_extension settings, extType, publisher
    azure_user isMfaRegistered

5.24.0 - 2021-05-11

Added

  • Added support for ingesting the following new resources:

    Service Resource / Entity
    Network azure_private_endpoint
    App Service azure_web_app
    App Service azure_function_app
    App Service azure_app_service_plan
    Policy Insights azure_policy_state

  • Added support for ingesting the following new relationships:

    Source _class Target
    azure_resource_group HAS azure_private_endpoint
    azure_subnet HAS azure_private_endpoint
    azure_private_endpoint USES azure_nic
    azure_private_endpoint CONNECTS ANY_RESOURCE
    azure_resource_group HAS azure_web_app
    azure_resource_group HAS azure_function_app
    azure_resource_group HAS azure_app_service_plan
    azure_web_app USES azure_app_service_plan
    azure_function_app USES azure_app_service_plan
    azure_policy_assignment HAS azure_policy_state
    azure_policy_definition DEFINES azure_policy_state
    ANY_RESOURCE HAS azure_policy_state

  • Added the following property to azure_storage_account:

    • networkRuleSet.allowedIpAddresses

Changed

  • Changed the following property values on azure_storage_account:

    Previous property name New property name
    networkRuleSetDefaultAction networkRuleSet.defaultAction
    networkRuleSetBypass networkRuleSet.bypass

Fixed

  • Renamed type azure_network_azure_firewall to azure_network_firewall

5.23.6 - 2021-04-28

Added

  • Added logic to handle policyDefinition IDs that are sourced from management groups.

5.23.5 - 2021-04-26

Added

  • Added logger.warn statement when getPolicyDefinition API call fails.

5.23.4 - 2021-04-22

Changed

  • Upgraded @jupiterone/integration-sdk-*@6.0.0
  • Added try/catch logic to AzurePolicyClient methods for policy definitions & policy set definitions so step does not fail from 404s.

5.23.3 - 2021-04-21

Changed

  • Changed logic for fetching tables/queues/fileShares of Premium tier storageV1/storageV2 azure_storage_accounts, because only Standard tier storage accounts support tables/queues/fileShares.

5.23.2 - 2021-04-20

Changed

  • Changed _key property for azure_policy_set_definition|contains|azure_policy_definition relationship to use policyDefinitionReference.policyDefinitionReferenceId instead of policyDefinitionReference.policyDefinitionId. The same azure_policy_definition can be referenced more than once in an azure_policy_set_definition using different parameter properties.

    Previously, the relationship _key used the policyDefinitionId, which threw DuplicateKeyErrors Example:

    {
  "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
  "parameters": {
    "operationName": {
      "value": "Microsoft.Network/networkSecurityGroups/delete"
    }
  },
  "policyDefinitionReferenceId": "CISv110x5x2x3",
  "groupNames": [
    "CIS_Azure_1.1.0_5.2.3"
  ]
},
{
  "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
  "parameters": {
    "operationName": {
      "value": "Microsoft.Network/networkSecurityGroups/securityRules/write"
    }
  },
  "policyDefinitionReferenceId": "CISv110x5x2x4",
  "groupNames": [
    "CIS_Azure_1.1.0_5.2.4"
  ]
},

5.23.1 - 2021-04-13

Added

  • Added the enabled property to azure_security_center_setting entities.

5.23.0 - 2021-04-12

Added

  • Added support for ingesting the following new resources:

    Service Resource / Entity
    Security Center azure_security_center_setting
    Security Center azure_security_center_auto_provisioning_setting
    Policy azure_policy_definition
    Policy azure_policy_set_definition

5.22.0 - 2021-04-06

Changed

  • Only ingest an entity for the subscription identified by the subscriptionId config field. Previously, the integration would create an entity for every subscription, though none of the resources would be ingested. This new behavior limits the scope to the subscription defined by subscriptionId.
  • Subscriptions to subscription where relevant.
  • fetchSubscriptions to now return tag data. This will be used for deciding which subscriptions should be created.

Added

  • An IntegrationError to fetchSubscription if the subscription could not be found.

Removed

  • SubscriptionId check when creating an authenticated service client.

5.21.1 - 2021-04-06

Changed

  • Upgraded @jupiterone/integration-sdk-*@5.11.2
  • Added checks to ensure storage account Kind supports file and blobs before attempting to fetch file and blob resources.
  • Improved error messaging when Directory.Read.All permission is not present and config.ingestActiveDirectory=true.
  • Handle errors thrown from getBlobServiceProperties() instead of allowing storage account step to fail.
  • Changed _key property on azure_vm_uses_storage_account to fix DuplicateKeyErrors when multiple data disks point to the same storage account.

5.21.0 - 2021-04-02

Added

  • Added azure_subscription_contains_role_definition relationships

Changed

  • Changed azure_advisor_recommendation.name to use shortDescription.solution instead of name, because name returned from the Azure API is a UUID.

5.20.0 - 2021-03-30

Added

  • Added azure_monitor_activity_log_alert_monitors_scope relationships
  • Added azure_monitor_activity_log_alert entities

5.19.0 - 2021-03-30

Added

  • Added secureTransport property to the following entities:
    • azure_sql_server
    • azure_mariadb_server
    • azure_mysql_server
    • azure_postgresql_server
  • Added the following log categories to azure_diagnostic_settings for azure_subscription entities:
    • log.Administrative
    • log.Alert
    • log.Policy
    • log.Security
  • Added the following log categories to azure_diagnostic_settings for azure_keyvault_service entities:
    • log.AuditEvent
  • Added ./tools/cli/j1-azure-integration document-diagnostic-settings command to automatcially document which Azure resources currently ingest diagnostic settings.

Changed

  • Changed the way that Diagnostic Settings are ingested. Previously, each log and metric enumerated within a Diagnostic Settings Resource was created as its own entity. This change creates a single azure_diagnostic_setting entity, which contains all logs and metrics in raw data. Special logs and metrics can be exposed as properties on the azure_diagnostic_setting entity.

5.18.0 - 2021-03-26

Added

  • Added the following properties to azure_sql_server:
    • encryptionProtector.serverKeyName
    • encryptionProtector.serverKeyType
  • Added azure_sql_server_active_directory_admin entities.

5.17.0 - 2021-03-25

Added

  • Added azure_postgresql_server_firewall_rule entities.
  • Added the following properties to azure_postgresql_server:
    • configuration.logCheckpoints
    • configuration.logConnections
    • configuration.logDisconnections
    • configuration.logRetentionDays
    • configuration.connectionThrottling
  • Added azure_security_center_subscription_pricing entities.
  • Added azure_vm|USES|azure_storage_account relationships.
  • Added azure_vm_extension entities.

5.16.0 - 2021-03-23

Changed

  • Added azure_location|HAS|azure_network_watcher relationships.
  • Upgraded @jupiterone/integration-sdk-*@5.11.0.

5.15.0 - 2021-03-22

Added

  • Added azure_managed_disk.encryption property.
  • Added azure_vm.usesManagedDisks property.
  • Added azure_location entities.
  • Added azure_network_watcher entities.
  • Added azure_security_group_flow_logs entities.
  • Added azure_sql_server_firewall_rule entities.

Fixed

  • Fixed broken relationships between VM and disk entities. Previously, some relationships between VM and disk did not match case-sensitive, and created unresolvable relationships. Relationships will now be created based on case-insensitive matching of VM and disk IDs.

5.14.2 - 2021-03-16

Added

  • Added queueAnalyticsLoggingReadEnabled, queueAnalyticsLoggingWriteEnabled, and queueAnalyticsLoggingDeleteEnabled to azure_storage_account.
  • Added blobAnalyticsLoggingReadEnabled, blobAnalyticsLoggingWriteEnabled, and blobAnalyticsLoggingDeleteEnabled to azure_storage_account.

5.14.1 - 2021-03-10

Added

  • Added blobSoftDeleteEnabled and blobSoftDeleteRetentionDays to azure_storage_account
  • Added networkRuleSetDefaultAction and networkRuleSetBypass properties to azure_storage_account.

Changed

  • #230 - Change job log name from missing_optional_permissions to auth.

5.14.0 - 2021-03-05

Added

  • Added securityDefaultsEnabled property to azure_account entities.

5.13.0 - 2021-03-01

Added

  • Collected Diagnostic Settings entities and relationships for Azure MariaDB Servers, Azure MySQL Servers, Azure PostgreSQL Servers, and Azure SQL Servers
  • Added getMatchRequestsBy() to match azure recordings for any integration configuration.
  • Added userType property to azure_user entities.

Fixed

  • The Network Security Groups step creates a map between security groups and subnets which is used later in the Virtual Networks step. In the event that Network Security Groups fails, the Virtual Networks step will fail with Cannot read property '/subscriptions/subscription-id/resourceGroups/resource-group-id/providers/Microsoft.Network/virtualNetworks/vnet-name/subnets/subnet-name' of undefined. Default to returning an empty object if undefined, so that key lookups do not cause the integration to fail.

5.12.0 - 2021-02-15

Fixed

  • Fixed hasSubscriptionId() when subscriptionId=null.

Added

  • Collected Diagnostic Settings entities and relationships for Azure Network Load Balancers
  • Collected Diagnostic Settings entities and relationships for Azure Network Public IP Addresses
  • Collected Diagnostic Settings entities and relationships for Azure Network Virtual Networks
  • Added azure_network_azure_firewall entities
  • Added azure_resource_group|has|azure_network_azure_firewall relationships
  • Collected Diagnostic Setting entities and relationships for Azure Network Azure Firewalls
  • Refactored the terraform creation for Diagnostic Settings for Azure Batch Accounts, Azure CDN Endpoints, Azure CDN Profiles, Azure Key Vaults, Azure Network Load Balancers, Azure Network Security Groups, Azure Network Public IP Addresses, Azure Network Virtual Networks, Azure Event Grid Domains, and Azure Event Grid Topics. This was because Azure was creating default Diagnostic Settings for categories not specified in the terraform. This was producing inconsistent test results. See hashicorp/terraform-provider-azurerm#7235 (comment) for more details.

5.11.2 - 2021-02-05

Added

  • Added additional logging in the DirectoryGraphClient.

5.11.1 - 2021-02-04

Added

  • Added debug-level logs to ad-groups step.

5.11.0 - 2021-02-02

Added

  • Diagnostic Settings entities and relationships for Azure Container Registry
  • Diagnostic Settings entities and relationships for Azure API Management Services
  • Diagnostic Settings entities and relationships for Azure CDN
  • Diagnostic Settings entities and relationships for Azure Event Grid Domain and Azure Event Grid Topics
  • Diagnostic Settings entities and relationships for Azure Batch Account

5.10.1 - 2021-01-15

Fixed

  • Started retrying all request errors that are not handled by the Azure API client. Continue retrying 429 errors thrown by the Azure API client.
  • Started retrying API errors in Azure Graph API (Azure Active Directory endpoints.)

5.10.0 - 2021-01-13

Added

  • Diagnostic Settings entities and relationships for Network Security Groups
  • Diagnostic Settings entities and relationships for Activity Logs (Azure Subscription)

Fixed

  • Fixed the way IntegrationProviderAPIError exposes error code/message of node-fetch errors, such as ECONNRESET.

5.9.0 - 2020-12-17

Added

  • Added azure_diagnostic_log_setting entities
  • Added azure_resource|has|azure_diagnostic_log_setting relationships
  • Added azure_diagnostic_log_setting|uses|azure_storage_account relationships
  • Added azure_diagnostic_metric_setting entities
  • Added azure_resource|has|azure_diagnostic_metric_setting relationships
  • Added azure_diagnostic_metric_setting|uses|azure_storage_account relationships

5.8.1 - 2020-12-02

  • Upgrade @jupiterone/integration-sdk-*@5.0.0

5.8.0 - 2020-12-01

Added

  • Added azure_monitor_log_profile entities
  • Added azure_subscription|has|azure_monitor_log_profile relationships
  • Added azure_monitor_log_profile|uses|azure_storage_account relationships
  • Added encryption.keySource and encryption.keyVaultProperties to the azure_storage_account entity
  • Added allowBlobPublicAccess to the azure_storage_account entity
  • Added azure_storage_account|uses|azure_keyvault_service relationship

5.7.0 - 2020-11-05

Added

  • Added azure_security_center_contact entities
  • Added azure_subscription|has|azure_security_center_contact relationships

5.6.0 - 2020-11-02

Added

  • Added azure_policy_assignment entities
  • Added ANY_SCOPE|has|azure_policy_assignment relationships. These can target any scoped entity within Azure.

5.5.2 - 2020-10-29

Changed

  • Upgrade sdk to v4

5.5.1 - 2020-10-22

Fixed

  • #187 - Throw IntegrationValidationError when invalid client secret is provided.
  • #185 - Handle OperationNotAllowedOnKind errors when storage accounts do not allow storage queues or storage tables
  • Added loggingEnabled property on database entities
  • #182 - Disallow objects in azure_storage_account.endpoints array property

5.5.0 - 2020-10-19

Added

  • Added info-level logs when iterating Queues & Tables in storage accounts.
  • Added the ability to execute specific steps in an integration last.
  • Added a transformer so that findEntity uses case-insensitive matching.
  • Added azure_advisor_recommendation entities
  • Added ANY_SCOPE|has|azure_advisor_recommendation relationships. These can target any scoped entity within Azure.
  • Added azure_security_assessment entities
  • Added azure_security_assessment|identified|azure_advisor_recommendation relationships
  • Added azure_subscription|performed|azure_security_assessment relationships

5.4.1 - 2020-10-13

Fixed

  • Don't throw if createResourceGroupResourceRelationship doesn't find the target resource group.
  • Stop casting client resourceEndpoint arg to ListResourcesEndpoint

5.4.0 - 2020-10-07

Added

  • Added azure_event_grid_domain entities
  • Added azure_resource_group|has|azure_event_grid_domain relationships
  • Added azure_event_grid_domain_topic entities
  • Added azure_event_grid_domain|has|azure_event_grid_domain_topic relationships
  • Added azure_event_grid_topic entities
  • Added azure_resource_group|has|azure_event_grid_topic relationships
  • Added azure_event_grid_topic_subscription entities
  • Added azure_event_grid_topic|has|azure_event_grid_topic_subscription relationship
  • Added azure_event_grid_domain_topic|has|azure_event_grid_topic_subscription relationship
  • Added azure_batch_account entities
  • Added azure_resource_group|has|azure_batch_account relationships
  • Added azure_batch_pool entities
  • Added azure_batch_account|has|azure_batch_pool relationships
  • Added azure_batch_application entities
  • Added azure_batch_account|has|azure_batch_application relationships
  • Added azure_batch_certificate entities
  • Added azure_batch_account|has|azure_batch_certificate relationships
  • Added azure_redis_cache entities
  • Added azure_resource_group|has|azure_redis_cache relationships
  • Added azure_redis_firewall_rule entities
  • Added azure_redis_cache|has|azure_redis_firewall_rule relationships
  • Added azure_redis_cache|connects|azure_redis_cache relationships
  • Added azure_container_group entities
  • Added azure_resource_group|has|azure_container_group relationships
  • Added azure_container entities
  • Added azure_container_group|has|azure_container relationships
  • Added azure_container_volume entities
  • Added azure_container_group|has|azure_container_volume relationships
  • Added azure_container|uses|azure_container_volume relationships
  • Added azure_container_volume|uses|azure_storage_file_share relationships

Changed

  • Upgraded SDK to v3.5.1

5.3.1 - 2020-09-21

Fixed

  • Removed ingestResourceManager which caused previously-configured integrations to stop ingesting resource manager steps

5.3.0 - 2020-09-21

  • Added azure_service_bus_namespace entities
  • Added azure_resource_group|has|azure_service_bus_namespace relationships
  • Added azure_service_bus_queue entities
  • Added azure_service_bus_namespace|has|azure_service_bus_queue relationships
  • Added azure_service_bus_topic entities
  • Added azure_service_bus_namespace|has|azure_service_bus_topic relationships
  • Added azure_service_bus_subscription entities
  • Added azure_service_bus_topic|has|azure_service_bus_subscription relationships
  • Added azure_cdn_profile entities
  • Added azure_resource_group|has|azure_cdn_profile relationships
  • Added azure_cdn_endpoint entities
  • Added azure_cdn_profile|has|azure_cdn_endpoint relationships

5.2.0 - 2020-09-20

Added

  • Added ingestResourceManager flag so that Resource Manager steps can be disabled
  • Added azure_dns_zone entities
  • Added azure_resource_group|has|azure_dns_zone relationships
  • Added azure_dns_record_set entities
  • Added azure_dns_zone|has|azure_dns_record_set relationships
  • Added azure_private_dns_zone entities
  • Added azure_resource_group|has|azure_private_dns_zone relationships
  • Added azure_private_dns_record_set entities
  • Added azure_private_dns_zone|has|azure_private_dns_record_set relationships
  • Added azure_container_registry entities
  • Added azure_resource_group|has|azure_container_registry relationships
  • Added azure_container_registry_webhook entities
  • Added azure_container_registry|has|azure_container_registry_webhook relationships

5.1.0 - 2020-09-09

Added

  • Added azure_api_management_service entities
  • Added azure_resource_group|has|azure_api_management_service relationships
  • Added azure_api_management_api entities
  • Added azure_api_management_service|has|azure_api_management_api relationships

5.0.0 - 2020-09-04

Added

  • Added azure_storage_table entities
  • Added azure_storage_account|has|azure_storage_table relationships
  • Added azure_storage_queue entities
  • Added azure_storage_account|has|azure_storage_queue relationships

Removed

  • Removed mapped role_assignment|allows|<scope> relationships to avoid creating azure_unknown_resource_type entities

Changed

  • Created azure_storage_account entities to replace azure_storage_blob_service and azure_storage_file_service. NOTE: This change requires any existing queries using the azure_storage_blob_service or azure_storage_file_service _type to use azure_storage_account.
  • Upgraded SDK to v3.2.0, ordered entity/relationship docs

4.4.1 - 2020-09-02

Fixed

  • Fixed a bug where resourceGroupId needed to be case-insensitive

4.4.0 - 2020-09-01

Fixed

  • Fixed messaging for validateInvocation errors

4.3.0 - 2020-09-01

Added

  • Added azure_role_assignment|allows|<scope> relationships
  • Added azure_resource_group entities
  • Added azure_resource_group|has|<resource> relationships
  • Added azure_subscription entities
  • Added azure_subscription|has|azure_resource_group relationships

Changed

  • Upgraded to SDK version 3

4.2.1 - 2020-08-25

Changed

  • Updated classes on azure_role_assignment-->azure_role_definition relationship

4.2.0 - 2020-08-25

Added

  • Added azure_role_assignment entities; removed relationships
  • Added azure_role_assignment|assigned|<principal> relationships
  • Added azure_role_assignment|has|azure_role_definition relationships

Changed

  • Changed generateEntityKey() from <_type>_<id> to simply <id>

4.1.1 - 2020-08-18

Changed

  • Removed sourceEntityType bug from mapped relationships

4.1.0 - 2020-08-04

Added

  • Added azure_role_definition entities
  • Added azure_role_definition|assigned|<type> relationships
  • Added azure_classic_admin_group singleton entity
  • Added azure_classic_admin_group|has|azure_user relationships
  • Added azure_service_principal entities

Fixed

  • Security group rules step had wrong step function assigned, duplicated load balancer ingestion.
  • Prefix globally unique terraform resources using developer_id environment variable.

4.0.1 - 2020-07-14

Changed

  • Added User.username for AD users, having the value of userPrincipalName, to satisfy the data model User schema requirement.

Fixed

  • Duplicate subnet -> vm relationships would cause the step to crash.
  • Duplicate load balancer -> nic relationships would cause the step to crash.
  • Illegal property _integrationInstanceId caused persister to reject uploads.
  • Fix missing name on User and UserGroup entities.

4.0.0 - 2020-06-30

This release is a complete restructuring of the program to move to the new JupiterOne integration SDK. Benefits are numerous, including:

  • Use the latest patterns and allow for much easier advancement of the integration in all the ways intended by the new SDK
  • Break work into more atomic steps, particularly helpful for database ingestion
  • Allow for ingesting as much data as possible even when some data cannot be retrieved (partial sets)
  • Significantly better error reporting, and statistics are collected
  • Designed to run as a single process, dramatically simplifying deployments

3.16.3 - 2020-05-18

Changed

  • Filter out empty string in array list returned by Azure API on SQL Server auditing and alerting settings.

3.16.2 - 2020-05-18

Changed

  • Changed SQL server alertAll property to alertOnAllThreats.

3.16.1 - 2020-05-18

Changed

  • Set SQL server alertAll: alertingEnabled && !hasDisabledAlerts.

3.16.0 - 2020-05-18

Added

  • SQL Server and Database auditing status and properties.
  • SQL Server alerting status and properties.

3.15.7 - 2020-05-17

Added

  • attached boolean and state property on azure_managed_disk entities.

3.15.6 - 2020-05-17

Fixed

  • Incorrect parsing the targetPortRanges (fromPort and toPort) of an Azure Security Group rule.

3.15.5 - 2020-05-06

Changed

  • Upgrade @jupiterone/integration-sdk to version 33.7.5.

3.15.4 - 2020-05-06

Added

  • Logging in DB synchronization code, since there is so much going on in one step, cannot see how far it gets before failing.

3.15.3 - 2020-05-04

Fixed

  • SDK bug in IntegrationCache.putEntries that would duplicate keys and continually expand the keyspace, leading to infinite looping.

3.15.2 - 2020-05-04

Added

  • Log more details during group member fetching, group iteration.

3.15.1 - 2020-05-04

Fixed

  • NPM package for 3.15.0 has no dist directory, cannot import code.

3.15.0 - 2020-04-24

Fixed

  • Users are not related to groups of which they are a member.

Added

  • encrypted property on storage services (azure_storage_*_service).

3.14.0 - 2020-04-17

Added

  • Set azure_managed_disk.encrypted based on presence of encryption.type

  • Key Vault resources: azure_keyvault_service (not yet loading keys, certs)

Fixed

  • Virtual networks listing sometimes produces a 502 server response. This would crash Compute synchronization. Virtual network sync is skipped in this case so other synchronization carries on.

  • _type for images and disks was incorrect so that ingestion may have been unstable.

3.13.0 - 2020-04-17

Added

  • Additional properties on azure_storage_*_service entities: kind, enableHttpsTrafficOnly.

Fixed

  • azure_storage_file_service.encrypted property was reflecting the blob service encryption setting.

3.12.0 - 2020-04-16

Added

  • Storage resources: azure_storage_file_service, azure_storage_share

3.11.0 - 2020-04-15

Added

  • Cosmos DB resources: azure_cosmosdb_account, azure_cosmosdb_sql_database