✨ Add azure.cloudDefender module.

Signed-off-by: Preslav <[email protected]>
mondoohq · Jan 5, 2023 · 6c07cce · 6c07cce
1 parent 61e570a
commit 6c07cce
Show file tree

Hide file tree

Showing 8 changed files with 643 additions and 2 deletions.
diff --git a/go.mod b/go.mod
@@ -27,6 +27,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/postgresql/armpostgresql v1.0.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.0.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions v1.0.0
+	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity v0.9.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.0.0
 	github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.1.0
 	github.com/BurntSushi/toml v1.2.0

diff --git a/go.sum b/go.sum
@@ -110,6 +110,8 @@ github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources v1.0.0/go.mod h1:s1tW/At+xHqjNFvWU4G0c0Qv33KOhvbGNj0RCTQDV8s=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions v1.0.0 h1:xXmHA6JxGDHOY2anNQhpgIibZOiEaOvPLZOiAs07/4k=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions v1.0.0/go.mod h1:qkZjuhvy20x2Ckq4BzopZ8UjZLhib6nRJbRQiC6EFXY=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity v0.9.0 h1:leZbYXt1X1+IXOhinVq/eyCu4J/fR/RcgdF6lWeaa5o=
+github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity v0.9.0/go.mod h1:iwDIDV5jIo+eXQf6RA7PwyJnycTQxX4s4MGKSy+m1LA=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.0.0 h1:rycGPpUtVFwM9uLUL2ux8EL8kGfl3qF1u76aEHvB4Qw=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/sql/armsql v1.0.0/go.mod h1:lirt6L2DmxromyM4w5Vd2QPz4PrWRV38Izy43xgkBVI=
 github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage v1.1.0 h1:fsVypuWj+j1xqp8S7t5SyibKxVt5OyjVUHO5rlLkZnw=

diff --git a/resources/packs/azure/azure.lr b/resources/packs/azure/azure.lr
@@ -874,4 +874,26 @@ private azure.monitor.diagnosticsetting @defaults("id name") {
   properties dict
   // Diagnostic setting storage account
   storageAccount azure.storage.account
+}
+
+// Azure Microsoft Cloud Defender
+azure.cloudDefender {
+  // indicates if the monitoring agent will be automatically provisioned on new VMs
+  monitoringAgentAutoProvision() bool
+  // the list of configured security contacts
+  securityContacts() []azure.cloudDefender.securityContact
+}
+
+// Azure Microsoft Cloud Defender Security Contact 
+private azure.cloudDefender.securityContact {
+  // the identifier of the security contact
+  id string
+  // the name of the security contact
+  name string
+  // the emails that will receive security alerts
+  emails []string
+  // the alerts notification settings
+  alertNotifications dict
+  // the notifications by role settings
+  notificationsByRole dict
 }