Support Azure Public IPs and Service Tags

[jtschichold]

Check the JSON file here: https://www.microsoft.com/EN-US/DOWNLOAD/confirmation.aspx?id=41653

[igrant99]

Microsoft publish two files:

https://www.microsoft.com/EN-US/DOWNLOAD/confirmation.aspx?id=41653

• this provides a list of all Azure IPs by region only, and is in .xml format.

https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519

• this one is in .json format, and contains a list of all Azure IPs by region, but also adds a breakdown by PaaS service as well.

[codyrat]

I am very supportive of this feature development on file id=56519. I had some difficulty determining whether jmespath could support the parsing of addressPrefixes with parent objects.

[jtschichold]

Support for id=56519 will ship in the next release. Thanks @igrant99 and @codyrat !

[alanold]

hi @jtschichold

Can you advise if support for id=56519 has been released?

I'm using minemeld in autofocus and not able to see it. The only proto i can see is azure.cloudIps which references the xml at id=41653, this link is due to deprecate in the coming year

Many thanks

[alanold]

I posted a comment yesterday against this github issue. However I just found the following code change that says it implements solution for #311

https://github.com/PaloAltoNetworks/minemeld-node-prototypes/blob/master/prototypes/azure.yml

however the URL it references is the deprecating xml, rather than the newer json format with service granularity. The new URL is https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519

Is there any development to ingest https://www.microsoft.com/en-us/download/confirmation.aspx?id=56519 to address the fact that https://www.microsoft.com/EN-US/DOWNLOAD/confirmation.aspx?id=41653 will be deprecated in June 2020 and also enable the ability to create EDLs for specific service and regions?

This will be a significant feature improvement to be able to create an EDL that only has the ip ranges for AzureContainerRegistry in EastUS2 for example