CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[5.36.2] - 2022-03-09

Fixed

• Fixed a problem related to subnet and virtual machine relationships that was causing the same subnet to be used more than once resulting in duplicate key error.

[5.36.1] - 2022-03-02

Removed

• Removed check to verify whether the access token has a property called roles in its access token and the Directory.Read.All role in its array

[5.36.0] - 2022-02-07

Added

• Added a new field called state that reflects the virtual machine's state (running or stopped).

Changed

• Previously called state field is now called provisioningState as it reflects the virtual machine's provision state.

• The boolean field active now also reflects the virtual machine's state. It's values can be: true (when state is running), false (when state is stopped) and undefined if the state isn't known.

[5.35.3] - 2022-01-26

Changed

• Update sdk-* packages to 8.2.1. This is a major version change requiring to conform to _key being required on entities. In addition, the user entity now has the active property as required by the v8 update.

[5.35.2] - 2021-11-08

Fixed

• Stopped using the callback version of the ContainerServiceClient.managedClusters.list(callback) API

[5.35.1] - 2021-11-08

Fixed

• Stopped creating azure_kubernetes_cluster entities that have no id property

[5.35.0] - 2021-11-04

Added

• Added support for ingesting the following new resources:

  Service	Resource / Entity
  Azure Kubernetes Cluster	azure_kubernetes_cluster
  Resource Lock	azure_resource_lock

• Added support for ingesting the following new relationships:

  Source	_class	Target
  azure_resource_group	HAS	azure_kubernetes_cluster
  azure_resource_lock	HAS	ANY_SCOPE

• New properties added to resources:

  Entity	Properties
  azure_keyvault_service	enableSoftDelete, enablePurgeProtection

Changed

• Refactored the rm-compute-network-relationships step to ensure relationships are created between azure_vm, azure_nic, azure_subnet and azure_public_ip

[5.34.0] - 2021-11-01

Added

• Added support for ingesting the following new resources:

  Service	Resource / Entity
  Key Vault Key	azure_keyvault_key
  Key Vault Secret	azure_keyvault_secret

• With the following properties:

  Entity	Properties
  azure_keyvault_key	name, recoveryLevel, vaultUrl, version, enabled, notBefore, createdOn, updatedOn, expiresOn
  azure_keyvault_secret	name, recoveryLevel, vaultUrl, version, contentType, certificateKeyId, managed, enabled, notBefore, createdOn, updatedOn, expiresOn

• New properties added to resources:

  Entity	Properties
  azure_storage_account	tableAnalyticsLoggingReadEnabled, tableAnalyticsLoggingWriteEnabled, tableAnalyticsLoggingDeleteEnabled

Fixed

• Suppressed FeatureNotSupportedForAccount and AccountIsDisabled errors when attempting to list tables, queues, blobs, and file shares for storage accounts
• Add errorCode and errorName to blob & queue service properties calls
• Fixed a bug that occurs when paginating Microsoft.Compute/galleries/${galleryId}/images/${imageId}/versions

[5.33.0] - 2021-10-15

Added

• New properties added to resources:

  Entity	Properties
  azure_web_app, azure_function_app	authEnabled, httpsOnly, minTlsVersion, clientCertEnabled, principalId, phpVersion, pythonVersion, javaVersion, nodeVersion, http20Enabled, ftpsState
  azure_sql_server	vaRecurringScansEnabled, vaStoragePath, vaEmailSubscriptionAdmins, vaEmails

  Note: fetching settings for azure_web_app and azure_function_app requires additional permission to be added to the custom role: Microsoft.Web/sites/config/list/Action

[5.32.0] - 2021-10-04

Added

• Open-sourced Azure managed questions

[5.31.7] - 2021-10-04

Changed

• Bumped @jupiterone/integration-sdk-*@6.22.1. This included new functionality to the IntegrationError classes that better segregates errors coming from different steps

[5.31.6] - 2021-10-01

Fixed

• Stop throwing Provider API failed at storage.*: AccountIsDisabled The specified account is disabled. on storage blob/queue/table/file steps

[5.31.5] - 2021-10-01

Fixed

• Stop throwing Provider API failed at storage.*: AccountIsDisabled The specified account is disabled. on storage blob/queue/table/file steps

[5.31.5] - 2021-10-01

Fixed

• Stop throwing Provider API failed at storage.*: AccountIsDisabled The specified account is disabled. on storage blob/queue/table/file steps
• Stop throwing Provider API failed at *.*: DisallowedOperation The current subscription type is not permitted to perform operations on any provider namespace. Please use a different subscription. on steps

[5.31.4] - 2021-10-01

Fixed

• Stop throwing Provider API failed at monitor.diagnosticSetting: SubscriptionNotRegistered The subscription '<SUBSCRIPTION-ID>' is not registered to use microsoft.insights. on security center settings step
• Stop throwing Provider API failed at security.settings: Subscription Not Registered Please register to Microsoft.Security in order to view your security status on security center settings step

[5.31.3] - 2021-09-07

Changed

• Restored GraphClient retry parameters:
  • retries: 5 -> 3
  • delay: 500 -> 200

Fixed

• Added token refresh logic to GraphClient

[5.31.2] - 2021-09-02

Changed

• Increased GraphClient retries from 3 to 5
• Added 500ms delay between GraphClient retries
• Used expect().toTargetEntities() matcher from SDK, and removed local implementations of .toTargetEntities() and .toCreateValidRelationshipsToEntities()

5.31.1 - 2021-08-04

Changed

• Changed validateInvocation() to try directly invoking subscriptionClient.getSubscription(id) when provided a subscriptionId parameter. Directly pass errors through to the user, such as:
  • The provided subscription identifier '{{SUBSCRIPTION_ID}}' is malformed or invalid.
  • The subscription '{{SUBSCRIPTION_ID}}' could not be found.
  • The client '{{CLIENT_ID}}' with object id '{{CLIENT_ID}}' does not have authorization to perform action 'Microsoft.Resources/subscriptions/read' over scope '/subscriptions/{{SUBSCRIPTION_ID}}' or the scope is invalid.

5.31.0 - 2021-07-22

Changed

• Throw IntegrationProviderAuthorizationError on 403 response in GraphClient
• Changed azure_group_has_member relationships from mapped to direct, because group members always exist in the same directory as the group.
• Bumped @jupiterone/integration-sdk-*@6.10.0. This included some new required properties for entities of _class Service and User. Added the function property to the following entites:
  • azure_batch_account
  • azure_storage_account
  • azure_cdn_profile
  • azure_event_grid_domain
  • azure_service_bus_namespace

Fixed

• Identify policy definition source (subscription, management group, or built-in) using a case-insensitive switch statement, since Azure resource IDs do not use consistent casing.
• Fixed an issue where DNS Zones and Private DNS Zones threw an error if a subscription had not registered the Microsoft.Network provider

5.30.0 - 2021-06-09

Added

• Added support for ingesting the following new relationships:

  Source	_class	Target
  azure_vm	GENERATED	azure_shared_image_version
  azure_keyvault_service	ALLOWS	ANY_PRINCIPAL

Changed

• Lowercase the azure_vm._key property to allow for mapped relationships across different J1 subscriptions.

5.29.0 - 2021-06-07

Added

• New properties added to resources:

  Entity	Properties
  azure_shared_image_version	publishedDate, createdOn

5.28.1 - 2021-06-07

Fixed

• Moved @microsoft/microsft-graph-types from dev to direct dependency, which was previously causing types to fail on dependent projects after exporting clients.GraphClient in v5.27.1.

5.28.0 - 2021-06-07

Added

• Added support for ingesting the following new resources:

  Service	Resource / Entity
  Gallery Image Version	azure_shared_image_version

• Added support for ingesting the following new relationships:

  Source	_class	Target
  azure_shared_image	HAS	azure_shared_image_version
  azure_vm	USES	azure_shared_image_version

• New properties added to resources:

  Entity	Properties
  azure_policy_definition	Automatically convert metadata to J1 tags
  azure_policy_definition	accountEnabled

Changed

• Fixed a bug where the compute galleries execution handler was not invoked, and instead the VM images execution handler was invoked twice. This caused DuplicateKeyErrors in either the compute galleries step or the VM images step.
• Changed the type azure_shared_image to azure_shared_image_definition, because shared images have both a definition, representing top-level metadata, and a number of versions, representing discrete images.
• Changed the _class of azure_gallery from DataStore to Repository.

5.27.1 - 2021-06-02

Changed

• Exported clients.GraphClient from project index.

5.27.0 - 2021-06-01

Added

• New properties added to resources:

  Entity	Properties
  azure_role_assignment	actions, dataActions, notActions, notDataActions

5.26.1 - 2021-06-01

Fixed

• Fixed a bug introduced in 5.25.1 where the rm-authorization-classic-administrators step no longer had a dependency on the ad-account step, causing ACCOUNT_ENTITY_NOT_FOUND errors.

5.26.0 - 2021-06-01

Added

• Added support for ingesting the following new relationships:

  Source	_class	Target
  azure_vm	USES	azure_service_principal

5.25.1 - 2021-05-27

Changed

• Changed the policy definition _key suffix to :latest instead of :${timestamp} to reduce policy state churn during integration invocations.

• Previously, JupiterOne created direct relationships between active directory entities and role assignments when active directory entities were ingested in the same integration as subscription entities. In an effort to ensure consistent relationships are built given any integration configuration, this integration now defaults to creating mapped relationships between role assignments and active directory entities.

5.25.0 - 2021-05-24

Added

• Added ingestion of Azure Management Groups when the configureSubscriptionInstances configuration field is true. This ingestion requires users to assign the Management Group Reader role to the service principal used in the given integration configuration to the Tenant Root Group management group.

• Added support for ingesting the following new resources:

  Service	Resource / Entity
  Gallery	azure_gallery
  Gallery Image	azure_shared_image
  Management Groups	azure_management_group

• Added support for ingesting the following new relationships:

  Source	_class	Target
  azure_resource_group	HAS	azure_gallery
  azure_gallery	CONTAINS	azure_shared_image
  azure_vm	HAS	azure_shared_image
  azure_vm	HAS	azure_image
  azure_management_group	CONTAINS	azure_management_group
  azure_account	HAS	azure_management_group

• New properties added to resources:

  Entity	Properties
  azure_vm_extension	settings, extType, publisher
  azure_user	isMfaRegistered

5.24.0 - 2021-05-11

Added

• Added support for ingesting the following new resources:

  Service	Resource / Entity
  Network	azure_private_endpoint
  App Service	azure_web_app
  App Service	azure_function_app
  App Service	azure_app_service_plan
  Policy Insights	azure_policy_state

• Added support for ingesting the following new relationships:

  Source	_class	Target
  azure_resource_group	HAS	azure_private_endpoint
  azure_subnet	HAS	azure_private_endpoint
  azure_private_endpoint	USES	azure_nic
  azure_private_endpoint	CONNECTS	ANY_RESOURCE
  azure_resource_group	HAS	azure_web_app
  azure_resource_group	HAS	azure_function_app
  azure_resource_group	HAS	azure_app_service_plan
  azure_web_app	USES	azure_app_service_plan
  azure_function_app	USES	azure_app_service_plan
  azure_policy_assignment	HAS	azure_policy_state
  azure_policy_definition	DEFINES	azure_policy_state
  ANY_RESOURCE	HAS	azure_policy_state

• Added the following property to azure_storage_account:

  • networkRuleSet.allowedIpAddresses

Changed

• Changed the following property values on azure_storage_account:

  Previous property name	New property name
  networkRuleSetDefaultAction	networkRuleSet.defaultAction
  networkRuleSetBypass	networkRuleSet.bypass

Fixed

• Renamed type azure_network_azure_firewall to azure_network_firewall

5.23.6 - 2021-04-28

Added

• Added logic to handle policyDefinition IDs that are sourced from management groups.

5.23.5 - 2021-04-26

Added

• Added logger.warn statement when getPolicyDefinition API call fails.

5.23.4 - 2021-04-22

Changed

• Upgraded @jupiterone/integration-sdk-*@6.0.0
• Added try/catch logic to AzurePolicyClient methods for policy definitions & policy set definitions so step does not fail from 404s.

5.23.3 - 2021-04-21

Changed

• Changed logic for fetching tables/queues/fileShares of Premium tier storageV1/storageV2 azure_storage_accounts, because only Standard tier storage accounts support tables/queues/fileShares.

5.23.2 - 2021-04-20

Changed

• Changed _key property for azure_policy_set_definition|contains|azure_policy_definition relationship to use policyDefinitionReference.policyDefinitionReferenceId instead of policyDefinitionReference.policyDefinitionId. The same azure_policy_definition can be referenced more than once in an azure_policy_set_definition using different parameter properties.

  Previously, the relationship _key used the policyDefinitionId, which threw DuplicateKeyErrors Example:

  {
    "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
    "parameters": {
      "operationName": {
        "value": "Microsoft.Network/networkSecurityGroups/delete"
      }
    },
    "policyDefinitionReferenceId": "CISv110x5x2x3",
    "groupNames": [
      "CIS_Azure_1.1.0_5.2.3"
    ]
  },
  {
    "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/b954148f-4c11-4c38-8221-be76711e194a",
    "parameters": {
      "operationName": {
        "value": "Microsoft.Network/networkSecurityGroups/securityRules/write"
      }
    },
    "policyDefinitionReferenceId": "CISv110x5x2x4",
    "groupNames": [
      "CIS_Azure_1.1.0_5.2.4"
    ]
  },

5.23.1 - 2021-04-13

Added

• Added the enabled property to azure_security_center_setting entities.

5.23.0 - 2021-04-12

Added

• Added support for ingesting the following new resources:

  Service	Resource / Entity
  Security Center	azure_security_center_setting
  Security Center	azure_security_center_auto_provisioning_setting
  Policy	azure_policy_definition
  Policy	azure_policy_set_definition

5.22.0 - 2021-04-06

Changed

• Only ingest an entity for the subscription identified by the subscriptionId config field. Previously, the integration would create an entity for every subscription, though none of the resources would be ingested. This new behavior limits the scope to the subscription defined by subscriptionId.
• Subscriptions to subscription where relevant.
• fetchSubscriptions to now return tag data. This will be used for deciding which subscriptions should be created.

Added

• An IntegrationError to fetchSubscription if the subscription could not be found.

Removed

• SubscriptionId check when creating an authenticated service client.

5.21.1 - 2021-04-06

Changed

• Upgraded @jupiterone/integration-sdk-*@5.11.2
• Added checks to ensure storage account Kind supports file and blobs before attempting to fetch file and blob resources.
• Improved error messaging when Directory.Read.All permission is not present and config.ingestActiveDirectory=true.
• Handle errors thrown from getBlobServiceProperties() instead of allowing storage account step to fail.
• Changed _key property on azure_vm_uses_storage_account to fix DuplicateKeyErrors when multiple data disks point to the same storage account.

5.21.0 - 2021-04-02

Added

• Added azure_subscription_contains_role_definition relationships

Changed

• Changed azure_advisor_recommendation.name to use shortDescription.solution instead of name, because name returned from the Azure API is a UUID.

5.20.0 - 2021-03-30

Added

• Added azure_monitor_activity_log_alert_monitors_scope relationships
• Added azure_monitor_activity_log_alert entities

5.19.0 - 2021-03-30

Added

• Added secureTransport property to the following entities:
  • azure_sql_server
  • azure_mariadb_server
  • azure_mysql_server
  • azure_postgresql_server
• Added the following log categories to azure_diagnostic_settings for azure_subscription entities:
  • log.Administrative
  • log.Alert
  • log.Policy
  • log.Security
• Added the following log categories to azure_diagnostic_settings for azure_keyvault_service entities:
  • log.AuditEvent
• Added ./tools/cli/j1-azure-integration document-diagnostic-settings command to automatcially document which Azure resources currently ingest diagnostic settings.

Changed

• Changed the way that Diagnostic Settings are ingested. Previously, each log and metric enumerated within a Diagnostic Settings Resource was created as its own entity. This change creates a single azure_diagnostic_setting entity, which contains all logs and metrics in raw data. Special logs and metrics can be exposed as properties on the azure_diagnostic_setting entity.

5.18.0 - 2021-03-26

Added

• Added the following properties to azure_sql_server:
  • encryptionProtector.serverKeyName
  • encryptionProtector.serverKeyType
• Added azure_sql_server_active_directory_admin entities.

5.17.0 - 2021-03-25

Added

• Added azure_postgresql_server_firewall_rule entities.
• Added the following properties to azure_postgresql_server:
  • configuration.logCheckpoints
  • configuration.logConnections
  • configuration.logDisconnections
  • configuration.logRetentionDays
  • configuration.connectionThrottling
• Added azure_security_center_subscription_pricing entities.
• Added azure_vm|USES|azure_storage_account relationships.
• Added azure_vm_extension entities.

5.16.0 - 2021-03-23

Changed

• Added azure_location|HAS|azure_network_watcher relationships.
• Upgraded @jupiterone/integration-sdk-*@5.11.0.

5.15.0 - 2021-03-22

Added

• Added azure_managed_disk.encryption property.
• Added azure_vm.usesManagedDisks property.
• Added azure_location entities.
• Added azure_network_watcher entities.
• Added azure_security_group_flow_logs entities.
• Added azure_sql_server_firewall_rule entities.

Fixed

• Fixed broken relationships between VM and disk entities. Previously, some relationships between VM and disk did not match case-sensitive, and created unresolvable relationships. Relationships will now be created based on case-insensitive matching of VM and disk IDs.

5.14.2 - 2021-03-16

Added

• Added queueAnalyticsLoggingReadEnabled, queueAnalyticsLoggingWriteEnabled, and queueAnalyticsLoggingDeleteEnabled to azure_storage_account.
• Added blobAnalyticsLoggingReadEnabled, blobAnalyticsLoggingWriteEnabled, and blobAnalyticsLoggingDeleteEnabled to azure_storage_account.

5.14.1 - 2021-03-10

Added

• Added blobSoftDeleteEnabled and blobSoftDeleteRetentionDays to azure_storage_account
• Added networkRuleSetDefaultAction and networkRuleSetBypass properties to azure_storage_account.

Changed

• #230 - Change job log name from missing_optional_permissions to auth.

5.14.0 - 2021-03-05

Added

• Added securityDefaultsEnabled property to azure_account entities.

5.13.0 - 2021-03-01

Added

• Collected Diagnostic Settings entities and relationships for Azure MariaDB Servers, Azure MySQL Servers, Azure PostgreSQL Servers, and Azure SQL Servers
• Added getMatchRequestsBy() to match azure recordings for any integration configuration.
• Added userType property to azure_user entities.

Fixed

• The Network Security Groups step creates a map between security groups and subnets which is used later in the Virtual Networks step. In the event that Network Security Groups fails, the Virtual Networks step will fail with Cannot read property '/subscriptions/subscription-id/resourceGroups/resource-group-id/providers/Microsoft.Network/virtualNetworks/vnet-name/subnets/subnet-name' of undefined. Default to returning an empty object if undefined, so that key lookups do not cause the integration to fail.

5.12.0 - 2021-02-15

Fixed

• Fixed hasSubscriptionId() when subscriptionId=null.

Added

• Collected Diagnostic Settings entities and relationships for Azure Network Load Balancers
• Collected Diagnostic Settings entities and relationships for Azure Network Public IP Addresses
• Collected Diagnostic Settings entities and relationships for Azure Network Virtual Networks
• Added azure_network_azure_firewall entities
• Added azure_resource_group|has|azure_network_azure_firewall relationships
• Collected Diagnostic Setting entities and relationships for Azure Network Azure Firewalls
• Refactored the terraform creation for Diagnostic Settings for Azure Batch Accounts, Azure CDN Endpoints, Azure CDN Profiles, Azure Key Vaults, Azure Network Load Balancers, Azure Network Security Groups, Azure Network Public IP Addresses, Azure Network Virtual Networks, Azure Event Grid Domains, and Azure Event Grid Topics. This was because Azure was creating default Diagnostic Settings for categories not specified in the terraform. This was producing inconsistent test results. See hashicorp/terraform-provider-azurerm#7235 (comment) for more details.

5.11.2 - 2021-02-05

Added

• Added additional logging in the DirectoryGraphClient.

5.11.1 - 2021-02-04

Added

• Added debug-level logs to ad-groups step.

5.11.0 - 2021-02-02

Added

• Diagnostic Settings entities and relationships for Azure Container Registry
• Diagnostic Settings entities and relationships for Azure API Management Services
• Diagnostic Settings entities and relationships for Azure CDN
• Diagnostic Settings entities and relationships for Azure Event Grid Domain and Azure Event Grid Topics
• Diagnostic Settings entities and relationships for Azure Batch Account

5.10.1 - 2021-01-15

Fixed

• Started retrying all request errors that are not handled by the Azure API client. Continue retrying 429 errors thrown by the Azure API client.
• Started retrying API errors in Azure Graph API (Azure Active Directory endpoints.)

5.10.0 - 2021-01-13

Added

• Diagnostic Settings entities and relationships for Network Security Groups
• Diagnostic Settings entities and relationships for Activity Logs (Azure Subscription)

Fixed

• Fixed the way IntegrationProviderAPIError exposes error code/message of node-fetch errors, such as ECONNRESET.

5.9.0 - 2020-12-17

Added

• Added azure_diagnostic_log_setting entities
• Added azure_resource|has|azure_diagnostic_log_setting relationships
• Added azure_diagnostic_log_setting|uses|azure_storage_account relationships
• Added azure_diagnostic_metric_setting entities
• Added azure_resource|has|azure_diagnostic_metric_setting relationships
• Added azure_diagnostic_metric_setting|uses|azure_storage_account relationships

5.8.1 - 2020-12-02

• Upgrade @jupiterone/integration-sdk-*@5.0.0

5.8.0 - 2020-12-01

Added

• Added azure_monitor_log_profile entities
• Added azure_subscription|has|azure_monitor_log_profile relationships
• Added azure_monitor_log_profile|uses|azure_storage_account relationships
• Added encryption.keySource and encryption.keyVaultProperties to the azure_storage_account entity
• Added allowBlobPublicAccess to the azure_storage_account entity
• Added azure_storage_account|uses|azure_keyvault_service relationship

5.7.0 - 2020-11-05

Added

• Added azure_security_center_contact entities
• Added azure_subscription|has|azure_security_center_contact relationships

5.6.0 - 2020-11-02

Added

• Added azure_policy_assignment entities
• Added ANY_SCOPE|has|azure_policy_assignment relationships. These can target any scoped entity within Azure.

5.5.2 - 2020-10-29

Changed

• Upgrade sdk to v4

5.5.1 - 2020-10-22

Fixed

• #187 - Throw IntegrationValidationError when invalid client secret is provided.
• #185 - Handle OperationNotAllowedOnKind errors when storage accounts do not allow storage queues or storage tables
• Added loggingEnabled property on database entities
• #182 - Disallow objects in azure_storage_account.endpoints array property

5.5.0 - 2020-10-19

Added

• Added info-level logs when iterating Queues & Tables in storage accounts.
• Added the ability to execute specific steps in an integration last.
• Added a transformer so that findEntity uses case-insensitive matching.
• Added azure_advisor_recommendation entities
• Added ANY_SCOPE|has|azure_advisor_recommendation relationships. These can target any scoped entity within Azure.
• Added azure_security_assessment entities
• Added azure_security_assessment|identified|azure_advisor_recommendation relationships
• Added azure_subscription|performed|azure_security_assessment relationships

5.4.1 - 2020-10-13

Fixed

• Don't throw if createResourceGroupResourceRelationship doesn't find the target resource group.
• Stop casting client resourceEndpoint arg to ListResourcesEndpoint

5.4.0 - 2020-10-07

Added

• Added azure_event_grid_domain entities
• Added azure_resource_group|has|azure_event_grid_domain relationships
• Added azure_event_grid_domain_topic entities
• Added azure_event_grid_domain|has|azure_event_grid_domain_topic relationships
• Added azure_event_grid_topic entities
• Added azure_resource_group|has|azure_event_grid_topic relationships
• Added azure_event_grid_topic_subscription entities
• Added azure_event_grid_topic|has|azure_event_grid_topic_subscription relationship
• Added azure_event_grid_domain_topic|has|azure_event_grid_topic_subscription relationship
• Added azure_batch_account entities
• Added azure_resource_group|has|azure_batch_account relationships
• Added azure_batch_pool entities
• Added azure_batch_account|has|azure_batch_pool relationships
• Added azure_batch_application entities
• Added azure_batch_account|has|azure_batch_application relationships
• Added azure_batch_certificate entities
• Added azure_batch_account|has|azure_batch_certificate relationships
• Added azure_redis_cache entities
• Added azure_resource_group|has|azure_redis_cache relationships
• Added azure_redis_firewall_rule entities
• Added azure_redis_cache|has|azure_redis_firewall_rule relationships
• Added azure_redis_cache|connects|azure_redis_cache relationships
• Added azure_container_group entities
• Added azure_resource_group|has|azure_container_group relationships
• Added azure_container entities
• Added azure_container_group|has|azure_container relationships
• Added azure_container_volume entities
• Added azure_container_group|has|azure_container_volume relationships
• Added azure_container|uses|azure_container_volume relationships
• Added azure_container_volume|uses|azure_storage_file_share relationships

Changed

• Upgraded SDK to v3.5.1

5.3.1 - 2020-09-21

Fixed

• Removed ingestResourceManager which caused previously-configured integrations to stop ingesting resource manager steps

5.3.0 - 2020-09-21

• Added azure_service_bus_namespace entities
• Added azure_resource_group|has|azure_service_bus_namespace relationships
• Added azure_service_bus_queue entities
• Added azure_service_bus_namespace|has|azure_service_bus_queue relationships
• Added azure_service_bus_topic entities
• Added azure_service_bus_namespace|has|azure_service_bus_topic relationships
• Added azure_service_bus_subscription entities
• Added azure_service_bus_topic|has|azure_service_bus_subscription relationships
• Added azure_cdn_profile entities
• Added azure_resource_group|has|azure_cdn_profile relationships
• Added azure_cdn_endpoint entities
• Added azure_cdn_profile|has|azure_cdn_endpoint relationships

5.2.0 - 2020-09-20

Added

• Added ingestResourceManager flag so that Resource Manager steps can be disabled
• Added azure_dns_zone entities
• Added azure_resource_group|has|azure_dns_zone relationships
• Added azure_dns_record_set entities
• Added azure_dns_zone|has|azure_dns_record_set relationships
• Added azure_private_dns_zone entities
• Added azure_resource_group|has|azure_private_dns_zone relationships
• Added azure_private_dns_record_set entities
• Added azure_private_dns_zone|has|azure_private_dns_record_set relationships
• Added azure_container_registry entities
• Added azure_resource_group|has|azure_container_registry relationships
• Added azure_container_registry_webhook entities
• Added azure_container_registry|has|azure_container_registry_webhook relationships

5.1.0 - 2020-09-09

Added

• Added azure_api_management_service entities
• Added azure_resource_group|has|azure_api_management_service relationships
• Added azure_api_management_api entities
• Added azure_api_management_service|has|azure_api_management_api relationships

5.0.0 - 2020-09-04

Added

• Added azure_storage_table entities
• Added azure_storage_account|has|azure_storage_table relationships
• Added azure_storage_queue entities
• Added azure_storage_account|has|azure_storage_queue relationships

Removed

• Removed mapped role_assignment|allows|<scope> relationships to avoid creating azure_unknown_resource_type entities

Changed

• Created azure_storage_account entities to replace azure_storage_blob_service and azure_storage_file_service. NOTE: This change requires any existing queries using the azure_storage_blob_service or azure_storage_file_service _type to use azure_storage_account.
• Upgraded SDK to v3.2.0, ordered entity/relationship docs

4.4.1 - 2020-09-02

Fixed

• Fixed a bug where resourceGroupId needed to be case-insensitive

4.4.0 - 2020-09-01

Fixed

• Fixed messaging for validateInvocation errors

4.3.0 - 2020-09-01

Added

• Added azure_role_assignment|allows|<scope> relationships
• Added azure_resource_group entities
• Added azure_resource_group|has|<resource> relationships
• Added azure_subscription entities
• Added azure_subscription|has|azure_resource_group relationships

Changed

• Upgraded to SDK version 3

4.2.1 - 2020-08-25

Changed

• Updated classes on azure_role_assignment-->azure_role_definition relationship

4.2.0 - 2020-08-25

Added

• Added azure_role_assignment entities; removed relationships
• Added azure_role_assignment|assigned|<principal> relationships
• Added azure_role_assignment|has|azure_role_definition relationships

Changed

• Changed generateEntityKey() from <_type>_<id> to simply <id>

4.1.1 - 2020-08-18

Changed

• Removed sourceEntityType bug from mapped relationships

4.1.0 - 2020-08-04

Added

• Added azure_role_definition entities
• Added azure_role_definition|assigned|<type> relationships
• Added azure_classic_admin_group singleton entity
• Added azure_classic_admin_group|has|azure_user relationships
• Added azure_service_principal entities

Fixed

• Security group rules step had wrong step function assigned, duplicated load balancer ingestion.
• Prefix globally unique terraform resources using developer_id environment variable.

4.0.1 - 2020-07-14

Changed

• Added User.username for AD users, having the value of userPrincipalName, to satisfy the data model User schema requirement.

Fixed

• Duplicate subnet -> vm relationships would cause the step to crash.
• Duplicate load balancer -> nic relationships would cause the step to crash.
• Illegal property _integrationInstanceId caused persister to reject uploads.
• Fix missing name on User and UserGroup entities.

4.0.0 - 2020-06-30

This release is a complete restructuring of the program to move to the new JupiterOne integration SDK. Benefits are numerous, including:

• Use the latest patterns and allow for much easier advancement of the integration in all the ways intended by the new SDK
• Break work into more atomic steps, particularly helpful for database ingestion
• Allow for ingesting as much data as possible even when some data cannot be retrieved (partial sets)
• Significantly better error reporting, and statistics are collected
• Designed to run as a single process, dramatically simplifying deployments

3.16.3 - 2020-05-18

Changed

• Filter out empty string in array list returned by Azure API on SQL Server auditing and alerting settings.

3.16.2 - 2020-05-18

Changed

• Changed SQL server alertAll property to alertOnAllThreats.

3.16.1 - 2020-05-18

Changed

• Set SQL server alertAll: alertingEnabled && !hasDisabledAlerts.

3.16.0 - 2020-05-18

Added

• SQL Server and Database auditing status and properties.
• SQL Server alerting status and properties.

3.15.7 - 2020-05-17

Added

• attached boolean and state property on azure_managed_disk entities.

3.15.6 - 2020-05-17

Fixed

• Incorrect parsing the targetPortRanges (fromPort and toPort) of an Azure Security Group rule.

3.15.5 - 2020-05-06

Changed

• Upgrade @jupiterone/integration-sdk to version 33.7.5.

3.15.4 - 2020-05-06

Added

• Logging in DB synchronization code, since there is so much going on in one step, cannot see how far it gets before failing.

3.15.3 - 2020-05-04

Fixed

• SDK bug in IntegrationCache.putEntries that would duplicate keys and continually expand the keyspace, leading to infinite looping.

3.15.2 - 2020-05-04

Added

• Log more details during group member fetching, group iteration.

3.15.1 - 2020-05-04

Fixed

• NPM package for 3.15.0 has no dist directory, cannot import code.

3.15.0 - 2020-04-24

Fixed

• Users are not related to groups of which they are a member.

Added

• encrypted property on storage services (azure_storage_*_service).

3.14.0 - 2020-04-17

Added

• Set azure_managed_disk.encrypted based on presence of encryption.type

• Key Vault resources: azure_keyvault_service (not yet loading keys, certs)

Fixed

• Virtual networks listing sometimes produces a 502 server response. This would crash Compute synchronization. Virtual network sync is skipped in this case so other synchronization carries on.

• _type for images and disks was incorrect so that ingestion may have been unstable.

3.13.0 - 2020-04-17

Added

• Additional properties on azure_storage_*_service entities: kind, enableHttpsTrafficOnly.

Fixed

• azure_storage_file_service.encrypted property was reflecting the blob service encryption setting.

3.12.0 - 2020-04-16

Added

• Storage resources: azure_storage_file_service, azure_storage_share

3.11.0 - 2020-04-15

Added

• Cosmos DB resources: azure_cosmosdb_account, azure_cosmosdb_sql_database