prancer-io / cloud-validation-framework

prancer platform is an IaC Security engine + Continuous Compliance for your cloud (Azure, AWS, GCP) and Kubernetes environment
https://www.prancer.io
Mozilla Public License 2.0
122 stars 29 forks source link

Crawl identitySecurityDefaultsEnforcementPolicy from MS Graph API #687

Closed rezoan closed 1 year ago

rezoan commented 1 year ago

Cawl below graph API endpoint to get AAD identitySecurityDefaultsEnforcementPolicy:

https://learn.microsoft.com/en-us/graph/api/identitysecuritydefaultsenforcementpolicy-get?view=graph-rest-1.0&tabs=http

Note: Normalize the resource snapshot by adding a typeasmicrosoft.graph.identitySecurityDefaultsEnforcementPolicy and move all other properties under a propertiesblock.

Also see the permissions section for necessary permission to crawl this resource type from AAD.

master-snapshot:

                {
                    "masterSnapshotId": "AZRSNP_527",
                    "type": "microsoft.graph.identitySecurityDefaultsEnforcementPolicy",
                    "collection": "microsoft.graph",
                    "version": "1.0"
                }