forked from Azure/azure-rest-api-specs
-
Notifications
You must be signed in to change notification settings - Fork 2
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Assessment metadata API (Azure Security Center) (Azure#7622)
* create assessmentMetadata.json * prettier fix * review fixes * add userImpact, implementationEffort, threat fields to assessmentMetadata * cleanup readme.md * Fix property name * prettier fixes * Property casing fix
- Loading branch information
1 parent
b659c55
commit af839f8
Showing
8 changed files
with
841 additions
and
41 deletions.
There are no files selected for viewing
530 changes: 530 additions & 0 deletions
530
...ty/resource-manager/Microsoft.Security/preview/2019-01-01-preview/assessmentMetadata.json
Large diffs are not rendered by default.
Oops, something went wrong.
53 changes: 53 additions & 0 deletions
53
...-preview/examples/AssessmentsMetadata/CreateAssessmentsMetadata_subscription_example.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,53 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2019-01-01-preview", | ||
| "subscriptionId": "0980887d-03d6-408c-9566-532f3456804e", | ||
| "assessmentMetadataName": "ca039e75-a276-4175-aebc-bcd41e4b14b7", | ||
| "assessmentMetadata": { | ||
| "properties": { | ||
| "displayName": "Install endpoint protection solution on virtual machine scale sets", | ||
| "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de", | ||
| "description": "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.", | ||
| "remediationDescription": "To install an endpoint protection solution: 1. <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>", | ||
| "category": [ | ||
| "Compute" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "Low", | ||
| "implementationEffort": "Low", | ||
| "threats": [ | ||
| "dataExfiltration", | ||
| "dataSpillage", | ||
| "maliciousInsider" | ||
| ], | ||
| "assessmentType": "CustomerManaged" | ||
| } | ||
| } | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/providers/Microsoft.Security/assessmentMetadata/ca039e75-a276-4175-aebc-bcd41e4b14b7", | ||
| "name": "ca039e75-a276-4175-aebc-bcd41e4b14b7", | ||
| "type": "Microsoft.Security/assessmentMetadata", | ||
| "properties": { | ||
| "displayName": "My organization security assessment", | ||
| "description": "Assessment that my organization created to view our security assessment in Azure Security Center", | ||
| "remediationDescription": "Fix it with these remediation instructions", | ||
| "category": [ | ||
| "Compute" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "Low", | ||
| "implementationEffort": "Low", | ||
| "threats": [ | ||
| "dataExfiltration", | ||
| "dataSpillage", | ||
| "maliciousInsider" | ||
| ], | ||
| "assessmentType": "CustomerManaged" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
10 changes: 10 additions & 0 deletions
10
...-preview/examples/AssessmentsMetadata/DeleteAssessmentsMetadata_subscription_example.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,10 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2019-01-01-preview", | ||
| "subscriptionId": "0980887d-03d6-408c-9566-532f3456804e", | ||
| "assessmentMetadataName": "ca039e75-a276-4175-aebc-bcd41e4b14b7" | ||
| }, | ||
| "responses": { | ||
| "200": {} | ||
| } | ||
| } |
33 changes: 33 additions & 0 deletions
33
...eview/2019-01-01-preview/examples/AssessmentsMetadata/GetAssessmentsMetadata_example.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,33 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2019-01-01-preview", | ||
| "assessmentMetadataName": "21300918-b2e3-0346-785f-c77ff57d243b" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/providers/Microsoft.Security/assessmentMetadata/21300918-b2e3-0346-785f-c77ff57d243b", | ||
| "name": "21300918-b2e3-0346-785f-c77ff57d243b", | ||
| "type": "Microsoft.Security/assessmentMetadata", | ||
| "properties": { | ||
| "displayName": "Install endpoint protection solution on virtual machine scale sets", | ||
| "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de", | ||
| "description": "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.", | ||
| "remediationDescription": "To install an endpoint protection solution: 1. <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>", | ||
| "category": [ | ||
| "Compute" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "Low", | ||
| "implementationEffort": "Low", | ||
| "threats": [ | ||
| "dataExfiltration", | ||
| "dataSpillage", | ||
| "maliciousInsider" | ||
| ], | ||
| "assessmentType": "BuiltIn" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
34 changes: 34 additions & 0 deletions
34
...-01-preview/examples/AssessmentsMetadata/GetAssessmentsMetadata_subscription_example.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,34 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2019-01-01-preview", | ||
| "subscriptionId": "0980887d-03d6-408c-9566-532f3456804e", | ||
| "assessmentMetadataName": "21300918-b2e3-0346-785f-c77ff57d243b" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "id": "/providers/Microsoft.Security/assessmentMetadata/21300918-b2e3-0346-785f-c77ff57d243b", | ||
| "name": "21300918-b2e3-0346-785f-c77ff57d243b", | ||
| "type": "Microsoft.Security/assessmentMetadata", | ||
| "properties": { | ||
| "displayName": "Install endpoint protection solution on virtual machine scale sets", | ||
| "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de", | ||
| "description": "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.", | ||
| "remediationDescription": "To install an endpoint protection solution: 1. <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>", | ||
| "category": [ | ||
| "Compute" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "Low", | ||
| "implementationEffort": "Low", | ||
| "threats": [ | ||
| "dataExfiltration", | ||
| "dataSpillage", | ||
| "maliciousInsider" | ||
| ], | ||
| "assessmentType": "BuiltIn" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } |
78 changes: 78 additions & 0 deletions
78
...view/2019-01-01-preview/examples/AssessmentsMetadata/ListAssessmentsMetadata_example.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,78 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2019-01-01-preview" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "value": [ | ||
| { | ||
| "id": "/providers/Microsoft.Security/assessmentMetadata/21300918-b2e3-0346-785f-c77ff57d243b", | ||
| "name": "21300918-b2e3-0346-785f-c77ff57d243b", | ||
| "type": "Microsoft.Security/assessmentMetadata", | ||
| "properties": { | ||
| "displayName": "Install endpoint protection solution on virtual machine scale sets", | ||
| "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de", | ||
| "description": "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.", | ||
| "remediationDescription": "To install an endpoint protection solution: 1. <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>", | ||
| "category": [ | ||
| "Compute" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "Low", | ||
| "implementationEffort": "Low", | ||
| "threats": [ | ||
| "dataExfiltration", | ||
| "dataSpillage", | ||
| "maliciousInsider" | ||
| ], | ||
| "assessmentType": "BuiltIn" | ||
| } | ||
| }, | ||
| { | ||
| "id": "/providers/Microsoft.Security/assessmentMetadata/bc303248-3d14-44c2-96a0-55f5c326b5fe", | ||
| "name": "bc303248-3d14-44c2-96a0-55f5c326b5fe", | ||
| "type": "Microsoft.Security/assessmentMetadata", | ||
| "properties": { | ||
| "displayName": "Close management ports on your virtual machines", | ||
| "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917", | ||
| "description": "Open remote management ports expose your VM to a high level of risk from internet-based attacks that attempt to brute force credentials to gain admin access to the machine.", | ||
| "remediationDescription": "We recommend that you edit the inbound rules of the below virtual machines to restrict access to specific source ranges.<br>To restrict the access to your virtual machines: 1. Click on a VM from the list below 2. At the 'Networking' blade, click on each of the rules that allow management ports (e.g. RDP-3389, WINRM-5985, SSH-22) 3. Change the 'Action' property to 'Deny' 4. Click 'Save'", | ||
| "category": [ | ||
| "Networking" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "High", | ||
| "implementationEffort": "Low", | ||
| "threats": [ | ||
| "dataExfiltration", | ||
| "dataSpillage", | ||
| "maliciousInsider" | ||
| ], | ||
| "preview": true, | ||
| "assessmentType": "CustomPolicy" | ||
| } | ||
| }, | ||
| { | ||
| "id": "/providers/Microsoft.Security/assessmentMetadata/ca039e75-a276-4175-aebc-bcd41e4b14b7", | ||
| "name": "ca039e75-a276-4175-aebc-bcd41e4b14b7", | ||
| "type": "Microsoft.Security/assessmentMetadata", | ||
| "properties": { | ||
| "displayName": "My organization security assessment", | ||
| "description": "Assessment that my organization created to view our security assessment in Azure Security Center", | ||
| "remediationDescription": "Fix it with these remediation instructions", | ||
| "category": [ | ||
| "Compute" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "Low", | ||
| "implementationEffort": "Low", | ||
| "threats": [], | ||
| "assessmentType": "CustomerManaged" | ||
| } | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } | ||
| } |
61 changes: 61 additions & 0 deletions
61
...01-preview/examples/AssessmentsMetadata/ListAssessmentsMetadata_subscription_example.json
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,61 @@ | ||
| { | ||
| "parameters": { | ||
| "api-version": "2019-01-01-preview", | ||
| "subscriptionId": "0980887d-03d6-408c-9566-532f3456804e" | ||
| }, | ||
| "responses": { | ||
| "200": { | ||
| "body": { | ||
| "value": [ | ||
| { | ||
| "id": "/providers/Microsoft.Security/assessmentMetadata/21300918-b2e3-0346-785f-c77ff57d243b", | ||
| "name": "21300918-b2e3-0346-785f-c77ff57d243b", | ||
| "type": "Microsoft.Security/assessmentMetadata", | ||
| "properties": { | ||
| "displayName": "Install endpoint protection solution on virtual machine scale sets", | ||
| "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/26a828e1-e88f-464e-bbb3-c134a282b9de", | ||
| "description": "Install an endpoint protection solution on your virtual machines scale sets, to protect them from threats and vulnerabilities.", | ||
| "remediationDescription": "To install an endpoint protection solution: 1. <a href=\"https://docs.microsoft.com/azure/virtual-machine-scale-sets/virtual-machine-scale-sets-faq#how-do-i-turn-on-antimalware-in-my-virtual-machine-scale-set\">Follow the instructions in How do I turn on antimalware in my virtual machine scale set</a>", | ||
| "category": [ | ||
| "Compute" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "Low", | ||
| "implementationEffort": "Low", | ||
| "threats": [ | ||
| "dataExfiltration", | ||
| "dataSpillage", | ||
| "maliciousInsider" | ||
| ], | ||
| "assessmentType": "BuiltIn" | ||
| } | ||
| }, | ||
| { | ||
| "id": "/providers/Microsoft.Security/assessmentMetadata/bc303248-3d14-44c2-96a0-55f5c326b5fe", | ||
| "name": "bc303248-3d14-44c2-96a0-55f5c326b5fe", | ||
| "type": "Microsoft.Security/assessmentMetadata", | ||
| "properties": { | ||
| "displayName": "Close management ports on your virtual machines", | ||
| "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/22730e10-96f6-4aac-ad84-9383d35b5917", | ||
| "description": "Open remote management ports expose your VM to a high level of risk from internet-based attacks that attempt to brute force credentials to gain admin access to the machine.", | ||
| "remediationDescription": "We recommend that you edit the inbound rules of the below virtual machines to restrict access to specific source ranges.<br>To restrict the access to your virtual machines: 1. Click on a VM from the list below 2. At the 'Networking' blade, click on each of the rules that allow management ports (e.g. RDP-3389, WINRM-5985, SSH-22) 3. Change the 'Action' property to 'Deny' 4. Click 'Save'", | ||
| "category": [ | ||
| "Networking" | ||
| ], | ||
| "severity": "Medium", | ||
| "userImpact": "High", | ||
| "implementationEffort": "Low", | ||
| "threats": [ | ||
| "dataExfiltration", | ||
| "dataSpillage", | ||
| "maliciousInsider" | ||
| ], | ||
| "preview": true, | ||
| "assessmentType": "CustomPolicy" | ||
| } | ||
| } | ||
| ] | ||
| } | ||
| } | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters