Merge pull request #959 from Azure/create-pull-request/patch

Automatic translation of checklists/azure_arc_checklist.en.json
Azure · Oct 23, 2024 · 88a3097 · 88a3097
2 parents 3c3e529 + c725699
commit 88a3097
Show file tree

Hide file tree

Showing 36 changed files with 6,655 additions and 4,661 deletions.
diff --git a/checklists-ext/fullwaf_checklist.en.json b/checklists-ext/fullwaf_checklist.en.json
@@ -11596,6 +11596,7 @@
         {
             "arm-service": "Microsoft.ApiManagement/service",
             "checklist": "Azure API Management Review",
+            "graph": "resources | where type == 'microsoft.apimanagement/service' | extend compliant = ( sku.name == 'Premium' and  isnotnull(properties.additionalLocations)) | distinct id, compliant",
             "guid": "beae759e-4ddb-4326-bf26-47f87d3454b6",
             "link": "https://learn.microsoft.com/azure/api-management/api-management-howto-deploy-multi-region",
             "service": "APIM",
@@ -11606,6 +11607,7 @@
         {
             "arm-service": "Microsoft.ApiManagement/service",
             "checklist": "Azure API Management Review",
+            "graph": "resources | where type == 'microsoft.apimanagement/service' | extend compliant = ( sku.name == 'Premium' and  isnotnull(zones) and sku.capacity >= 2 ) | distinct id, compliant",
             "guid": "9c8d1664-dd9a-49d4-bd83-950af0af4044",
             "link": "https://learn.microsoft.com/azure/api-management/high-availability",
             "service": "APIM",
@@ -11657,6 +11659,7 @@
         {
             "arm-service": "Microsoft.ApiManagement/service",
             "checklist": "Azure API Management Review",
+            "graph": "resources | where type == 'microsoft.apimanagement/service' | join kind = leftouter (resources | where type == 'microsoft.insights/autoscalesettings' | extend targetResourceUri = tostring(properties.targetResourceUri)) on $left.id == $right.targetResourceUri | extend compliant = (sku.name == 'Premium' and isnotempty(targetResourceUri) and properties1.enabled == true) | distinct id, compliant",
             "guid": "bb5f356b-3daf-47a2-a9ee-867a8100bbd5",
             "link": "https://learn.microsoft.com/azure/api-management/api-management-howto-autoscale",
             "service": "APIM",
@@ -11738,6 +11741,7 @@
         {
             "arm-service": "Microsoft.ApiManagement/service",
             "checklist": "Azure API Management Review",
+            "graph": "resources | where type == 'microsoft.apimanagement/service' | extend compliant = (isnotnull(properties.virtualNetworkConfiguration)) | distinct id, compliant",
             "guid": "cd45c90e-7690-4753-930b-bf290c69c074",
             "link": "https://learn.microsoft.com/security/benchmark/azure/baselines/api-management-security-baseline?toc=%2Fazure%2Fapi-management%2F&bc=%2Fazure%2Fapi-management%2Fbreadcrumb%2Ftoc.json#virtual-network-integration",
             "service": "APIM",
@@ -11758,6 +11762,7 @@
         {
             "arm-service": "Microsoft.ApiManagement/service",
             "checklist": "Azure API Management Review",
+            "graph": "resources | where type == 'microsoft.apimanagement/service' | extend compliant = (properties.virtualNetworkType == 'None' and isnotnull(properties.privateEndpointConnections)) | distinct id, compliant",
             "guid": "67437a28-2721-4a2c-becd-caa54c8237a5",
             "link": "https://learn.microsoft.com/security/benchmark/azure/baselines/api-management-security-baseline?toc=%2Fazure%2Fapi-management%2F&bc=%2Fazure%2Fapi-management%2Fbreadcrumb%2Ftoc.json#azure-private-link",
             "service": "APIM",
@@ -11768,6 +11773,7 @@
         {
             "arm-service": "Microsoft.ApiManagement/service",
             "checklist": "Azure API Management Review",
+            "graph": "resources | where type == 'microsoft.apimanagement/service' | extend compliant = (properties.virtualNetworkType == 'Internal') | distinct id, compliant",
             "guid": "d698adbd-3288-44cb-b10a-9b572da395ae",
             "link": "https://learn.microsoft.com/security/benchmark/azure/baselines/api-management-security-baseline?toc=%2Fazure%2Fapi-management%2F&bc=%2Fazure%2Fapi-management%2Fbreadcrumb%2Ftoc.json#disable-public-network-access",
             "service": "APIM",
@@ -11878,6 +11884,7 @@
         {
             "arm-service": "Microsoft.ApiManagement/service",
             "checklist": "Azure API Management Review",
+            "graph": "resources | where type == 'microsoft.apimanagement/service' | extend compliant = (isnotnull(identity)) | distinct id, compliant",
             "guid": "791abd8b-7706-4e31-9569-afefde724be3",
             "link": "https://learn.microsoft.com/security/benchmark/azure/baselines/api-management-security-baseline?toc=%2Fazure%2Fapi-management%2F&bc=%2Fazure%2Fapi-management%2Fbreadcrumb%2Ftoc.json#managed-identities",
             "service": "APIM",

diff --git a/checklists/azure_arc_checklist.en.json b/checklists/azure_arc_checklist.en.json
@@ -525,6 +525,6 @@
     "metadata": {
         "name": "Azure Arc Review",
         "state": "Preview",
-        "timestamp": "April 05, 2023"
+        "timestamp": "October 23, 2024"
     }
-}
+}