category: Cloud Services provider: Microsoft sectionorder: - Connect - Collect commonfields: id: Azure version: -1 configuration: - display: Application ID name: app_id type: 0 section: Connect - display: Default Subscription ID name: subscription_id type: 0 section: Connect required: true required:platform: false additionalinfo: You can set the value either in the configuration or directly within the commands. If you set it in both places, the value in the command will override the configuration setting. - display: Default Resource Group Name name: resource_group_name type: 0 section: Connect additionalinfo: You can set the value either in the configuration or directly within the commands. If you set it in both places, the value in the command will override the configuration setting. - defaultvalue: https://login.microsoftonline.com display: Azure AD endpoint name: azure_ad_endpoint options: - https://login.microsoftonline.com - https://login.microsoftonline.us - https://login.microsoftonline.de - https://login.chinacloudapi.cn type: 15 additionalinfo: Azure AD endpoint associated with a national cloud. section: Connect advanced: true required: false - name: auth_type display: Authentication Type defaultvalue: Client Credentials type: 15 additionalinfo: The type of authentication. Can be Client Credentials (default authentication type), Device Code, Authorization Code, or Azure Managed Identities. options: - Client Credentials - Device Code - Authorization Code - Azure Managed Identities section: Connect required: false - display: Trust any certificate (not secure) name: insecure type: 8 section: Connect advanced: true required: false - display: Use system proxy settings name: proxy type: 8 section: Connect advanced: true required: false - name: tenant_id display: Tenant ID defaultvalue: type: 0 additionalinfo: The tenant ID of the Azure app registration. section: Connect required: false - name: credentials display: Client Secret defaultvalue: type: 9 additionalinfo: The client secret of the Azure app registration. Required when using the Client Credentials flow. displaypassword: Client Secret hiddenusername: true section: Connect required: false - name: redirect_uri display: Application redirect URI defaultvalue: type: 0 additionalinfo: The application redirect URI for the Authorization Code flow. section: Connect advanced: true required: false - name: auth_code display: Authorization code defaultvalue: type: 9 additionalinfo: The authorization code for the Authorization Code flow, received from the authorization step. See the Detailed Instructions (?) Help section. displaypassword: Authorization code hiddenusername: true section: Connect advanced: true required: false - name: managed_identities_client_id display: Azure Managed Identities Client ID defaultvalue: type: 9 additionalinfo: The managed identities client ID for authentication. Relevant only when the integration is running on an Azure VM. displaypassword: Azure Managed Identities Client ID hiddenusername: true section: Connect advanced: true required: false description: Cloud integrations are installed from the **Data Sources** page. To configure a cloud integration, go to Settings > Data Sources and click "Add Data Source", select Azure, then in Advanced Settings > Security Capabilities, enable "Automation". display: Azure name: Azure script: commands: - name: azure-auth-start description: Starts the authorization process for the Device Code / Authorization Code flows. Follow the instructions in the command results. hidden: - platform - name: azure-auth-complete description: Completes the authorization process for the Device Code flow. Should be used after running the azure-auth-start command. hidden: - platform - name: azure-auth-test description: Tests the connectivity to Azure. Relevant for the Device Code and Authorization Code authentication flows (used instead of the Test button for these interactive flows). hidden: - platform - name: azure-auth-reset description: Resets the authentication process. Relevant for the Device Code and Authorization Code authentication flows. hidden: - platform - name: azure-generate-login-url description: Generates the login URL used for authorization. Relevant only for the Authorization Code authentication flow. hidden: - platform - arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: The name of the resource group. name: resource_group_name type: String required: true - description: The name of the security group. name: security_group_name required: true - description: The name of the rule to be updated. name: security_rule_name required: true - auto: PREDEFINED description: 'The direction of the rule. Possible values are: "Inbound" and "Outbound".' name: direction predefined: - Inbound - Outbound - description: Whether to allow the traffic. Possible values are "Allow" and "Deny". name: action auto: PREDEFINED predefined: - Allow - Deny - description: 'The protocol on which to apply the rule. Possible values are: "Any", "TCP", "UDP", and "ICMP".' name: protocol auto: PREDEFINED predefined: - Any - TCP - UDP - ICMP - description: The source IP address range from which incoming traffic will be allowed or denied by this rule. Possible values are "Any", an IP address range, an application security group, or a default tag. Default is "Any". name: source - description: The priority by which the rules will be processed. The lower the number, the higher the priority. We recommend leaving gaps between rules - 100, 200, 300, etc. - so that it is easier to add new rules without having to edit existing rules. Default is "4096". name: priority - description: The source ports from which traffic is allowed or denied by this rule. Provide a single port, such as 80; a port range, such as 1024-65535; or a comma-separated list of single ports and/or port ranges, such as 80,1024-65535. Use an asterisk (*) to allow traffic on any port. Default is "*". name: source_ports - description: The destination IP address range for outgoing traffic that is allowed or denied by this rule. The destination filter can be "Any", an IP address range, an application security group, or a default tag. name: destination - description: The destination ports from which traffic is allowed or denied by this rule. Provide a single port, such as 80; a port range, such as 1024-65535; or a comma-separated list of single ports and/or port ranges, such as 80,1024-65535. Use an asterisk (*) to allow traffic on any port. name: destination_ports - description: A description to add to the rule. name: description - auto: PREDEFINED description: The network traffic is allowed or denied. name: access predefined: - Allow - Deny description: "Updates a security rule or creates one if it does not exist. Deprecated. Use the azure-vn-security-rule-update command instead. Required permissions: Microsoft.Network/networkSecurityGroups/securityRules/read, Microsoft.Network/networkSecurityGroups/securityRules/write." name: azure-nsg-security-rule-update deprecated: true outputs: - contextPath: Azure.NSGRule.name description: The rule's name. type: String - contextPath: Azure.NSGRule.id description: The rule's ID. type: String - contextPath: Azure.NSGRule.etag description: The rule's ETag. type: String - contextPath: Azure.NSGRule.type description: The rule's type. type: String - contextPath: Azure.NSGRule.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.NSGRule.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.NSGRule.sourcePortRange description: For a single port, the source port or a range of ports. type: String - contextPath: Azure.NSGRule.sourcePortRanges description: For multiple ports, a list of these ports. type: String - contextPath: Azure.NSGRule.destinationPortRange description: For a single port, the destination port or range of ports. type: String - contextPath: Azure.NSGRule.destinationPortRanges description: For multiple ports, a list of destination ports. type: String - contextPath: Azure.NSGRule.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.NSGRule.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.NSGRule.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.NSGRule.priority description: The rule's priority. Can be from 100 to 4096. type: Number - contextPath: Azure.NSGRule.direction description: The rule's direction. Can be "Inbound" or "Outbound". type: String - name: azure-vn-security-rule-update description: "Update a security rule. If one does not exist, it will be created. Required permissions: Microsoft.Network/networkSecurityGroups/securityRules/read, Microsoft.Network/networkSecurityGroups/securityRules/write." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: The name of the resource group. name: resource_group_name type: String required: true - description: The name of the security group. name: security_group_name required: true - description: The name of the rule to be updated. name: security_rule_name required: true - auto: PREDEFINED description: The direction of the rule. name: direction predefined: - Inbound - Outbound - description: The protocol on which to apply the rule. name: protocol auto: PREDEFINED predefined: - Any - TCP - UDP - ICMP - description: The source IP address range from which incoming traffic will be allowed or denied by this rule. Possible values are "Any", an IP address range, an application security group, or a default tag. name: source - description: The priority by which the rules will be processed. The lower the number, the higher the priority. We recommend leaving gaps between rules - 100, 200, 300, etc. - so that it is easier to add new rules without having to edit existing rules. name: priority - description: The source ports from which traffic is allowed or denied by this rule. Provide a single port, such as 80; a port range, such as 1024-65535; or a comma-separated list of single ports and/or port ranges, such as 80,1024-65535. Use an asterisk (*) to allow traffic on any port. name: source_ports - description: The destination IP address range for outgoing traffic that is allowed or denied by this rule. The destination filter can be "Any", an IP address range, an application security group, or a default tag. name: destination - description: The destination ports from which traffic is allowed or denied by this rule. Provide a single port, such as 80; a port range, such as 1024-65535; or a comma-separated list of single ports and/or port ranges, such as 80,1024-65535. Use an asterisk (*) to allow traffic on any port. name: destination_ports - description: A description to add to the rule. name: description - auto: PREDEFINED description: The network traffic is allowed or denied. name: access predefined: - Allow - Deny outputs: - contextPath: Azure.VirtualNetworks.SecurityRules.name description: The rule's name. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.id description: The rule's ID. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.etag description: The rule's ETag. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.type description: The rule's type. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourcePortRange description: For a single port, the source port or a range of ports. For multiple ports, sourcePortRanges is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourcePortRanges description: For multiple ports, a list of ports. For a single port, sourcePortRange is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationPortRange description: For a single port, the destination port or range of ports. For multiple ports, destinationPortRanges is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationPortRanges description: For multiple ports, a list of destination ports. For a single port, destinationPortRange is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.priority description: The rule’s priority, ranging from 100 to 4096. type: Number - contextPath: Azure.VirtualNetworks.SecurityRules.properties.direction description: The rule's direction, which can be "Inbound" or "Outbound". type: String - arguments: - description: The resource group name. name: resource_group_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The name of the storage account. name: account_name required: true - auto: PREDEFINED description: Gets or sets the SKU name, Required for account creation; optional for update. name: sku predefined: - Premium_LRS - Premium_ZRS - Standard_GRS - Standard_GZRS - Standard_LRS - Standard_RAGRS - Standard_RAGZRS - Standard_ZRS - description: Indicates the type of storage account, Required for account creation; optional for update. name: kind auto: PREDEFINED predefined: - Storage - StorageV2 - BlobStorage - FileStorage - BlockBlobStorage - description: Gets or sets the location of the resource. The geo region of a resource cannot be changed once it is created, but if an identical geo region is specified on update, the request will succeed. Required for account creation; optional for update. name: location auto: PREDEFINED predefined: - eastus - eastus2 - westus - westeurope - eastasia - southeastasia - japaneast - japanwest - northcentralus - southcentralus - centralus - northeurope - brazilsouth - australiaeast - australiasoutheast - southindia - centralindia - westindia - canadaeast - canadacentral - westus2 - westcentralus - uksouth - ukwest - koreacentral - koreasouth - francecentral - australiacentral - southafricanorth - uaenorth - switzerlandnorth - germanywestcentral - norwayeast - description: Gets or sets a list of tags that describe the resource. name: tags isArray: true - description: Gets or sets the custom domain name assigned to the storage account. name: custom_domain_name - auto: PREDEFINED description: Indicates whether indirect CName validation is enabled. name: use_sub_domain_name predefined: - 'true' - 'false' - description: The encryption keySource. name: enc_key_source auto: PREDEFINED predefined: - Microsoft.Storage - Microsoft.Keyvault - description: Indicates whether the service applies a secondary layer of encryption with platform managed keys for data at rest. name: enc_requireInfrastructureEncryption auto: PREDEFINED predefined: - 'true' - 'false' - description: The name of KeyVault key. name: enc_keyvault_key_name - description: The version of KeyVault key. name: enc_keyvault_key_version - description: The Uri of KeyVault. name: enc_keyvault_uri - auto: PREDEFINED description: The access tier for the account. Required where kind = BlobStorage. name: access_tier predefined: - 'Hot' - 'Cool' - auto: PREDEFINED description: Allows https traffic only to storage service if sets to true. name: supports_https_traffic_only predefined: - 'true' - 'false' - auto: PREDEFINED description: Account HierarchicalNamespace enabled if sets to true. name: is_hns_enabled predefined: - 'true' - 'false' - auto: PREDEFINED description: If set to Enabled, allows large file shares. name: large_file_shares_state predefined: - Disabled - Enabled - auto: PREDEFINED description: If set to true, allows public access to all blobs or containers in the storage account. name: allow_blob_public_access predefined: - 'true' - 'false' - description: Sets the minimum TLS version to be permitted on requests to storage. name: minimum_tls_version auto: PREDEFINED predefined: - TLS1_0 - TLS1_1 - TLS1_2 - description: Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. name: network_ruleset_bypass auto: PREDEFINED isArray: true predefined: - AzureServices - Logging - Metrics - None - auto: PREDEFINED description: Specifies the default action of allow or deny when no other rules match. name: network_ruleset_default_action predefined: - Allow - Deny - description: Sets the IP ACL rules. name: network_ruleset_ipRules - description: Sets the virtual network rules. name: virtual_network_rules - auto: PREDEFINED description: Allow or disallow cross AAD tenant object replication. name: allow_cross_tenant_replication predefined: - 'true' - 'false' description: "Updates a specific account storage. Required permissions: Microsoft.Storage/storageAccounts/read, Microsoft.Storage/storageAccounts/write." name: azure-storage-account-update outputs: - contextPath: Azure.Storage.StorageAccounts.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.Storage.StorageAccounts.kind description: The kind of storage account. type: String - contextPath: Azure.Storage.StorageAccounts.location description: The geo-location where the resource lives. type: String - contextPath: Azure.Storage.StorageAccounts.name description: The name of the resource. type: String - contextPath: Azure.Storage.StorageAccounts.properties.isHnsEnabled description: Account HierarchicalNamespace enabled if sets to true. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.allowBlobPublicAccess description: If set to true (default), allows public access to all blobs or containers in the storage account. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.minimumTlsVersion description: The minimum TLS version to be permitted on requests to storage. Default is TLS 1.0. type: String - contextPath: Azure.Storage.StorageAccounts.properties.allowSharedKeyAccess description: Whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests (including shared access signatures) must be authorized with Azure Active Directory (Azure AD). type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.creationTime description: The creation date and time of the storage account in UTC. type: Date - contextPath: Azure.Storage.StorageAccounts.properties.primaryEndpoints description: The URLs that are used to retrieve a public blob, queue, or table object. type: String - contextPath: Azure.Storage.StorageAccounts.properties.primaryLocation description: The storage account primary data center location. type: String - contextPath: Azure.Storage.StorageAccounts.properties.provisioningState description: The status of the storage account at the time the operation was called. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.routingChoice description: The kind of network routing the user chose. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishMicrosoftEndpoints description: Whether Microsoft routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishInternetEndpoints description: Whether internet routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.encryption description: Encryption settings to be used for server-side encryption for the storage account. type: String - contextPath: Azure.Storage.StorageAccounts.properties.secondaryLocation description: The geo-replicated secondary location for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfPrimary description: Whether the storage account primary location is available or unavailable. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfSecondary description: Whether the storage account secondary location is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.supportsHttpsTrafficOnly description: If set to true, allows https traffic only to storage service. type: Boolean - contextPath: Azure.Storage.StorageAccounts.sku.name description: The SKU name. Required for account creation; optional for update. type: String - contextPath: Azure.Storage.StorageAccounts.sku.tier description: The SKU tier. This is based on the SKU name. type: String - contextPath: Azure.Storage.StorageAccounts.tags description: Resource tags. - contextPath: Azure.Storage.StorageAccounts.type description: The storage account type. type: String - arguments: - description: The resource group name. name: resource_group_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The name of the storage account. name: account_name required: true - auto: PREDEFINED description: Whether DeleteRetentionPolicy is enabled. name: delete_rentention_policy_enabled predefined: - 'true' - 'false' type: bool - description: The number of days the deleted item should be retained. name: delete_rentention_policy_days description: "Sets properties for the blob service in a specific account storage. The command is deprecated, please use azure-storage-blob-service-property-set.Required permissions: Microsoft.Storage/storageAccounts/blobServices/read, Microsoft.Storage/storageAccounts/blobServices/write." name: azure-storage-blob-service-properties-set deprecated: true outputs: - contextPath: Azure.StorageAccountBlobServiceProperties.id description: The resource ID. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.name description: The name of the resource. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.type description: The type of the resource. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.properties.cors description: Specifies CORS rules for the Blob service. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.properties.defaultServiceVersion description: The default version for requests to the Blob service if an incoming request's version is not specified. Possible values include version 2008-10-27 and all more recent versions. type: Date - contextPath: Azure.StorageAccountBlobServiceProperties.properties.deleteRetentionPolicy description: The service properties for soft delete. - contextPath: Azure.StorageAccountBlobServiceProperties.properties.isVersioningEnabled description: If set to true, enables versioning. type: Boolean - contextPath: Azure.StorageAccountBlobServiceProperties.properties.changeFeed description: The blob service properties for change feed events. - contextPath: Azure.StorageAccountBlobServiceProperties.sku.name description: The SKU name. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.sku.tier description: The SKU tier. type: String - name: azure-storage-blob-service-property-set description: "Sets properties for the blob service in a specific account storage. Required permissions: Microsoft.Storage/storageAccounts/blobServices/read, Microsoft.Storage/storageAccounts/blobServices/write." arguments: - description: The resource group name. name: resource_group_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The name of the storage account. name: account_name required: true - auto: PREDEFINED description: Whether DeleteRetentionPolicy is enabled. name: delete_retention_policy_enabled predefined: - 'true' - 'false' type: bool - description: The number of days the deleted item should be retained. name: delete_retention_policy_days outputs: - contextPath: Azure.Storage.BlobServices.id description: The resource ID. type: String - contextPath: Azure.Storage.BlobServices.name description: The name of the resource. type: String - contextPath: Azure.Storage.BlobServices.type description: The type of the resource. type: String - contextPath: Azure.Storage.BlobServices.properties.cors description: The CORS rules for the Blob service. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.defaultServiceVersion description: The default version to use for requests to the Blob service if an incoming request’s version is not specified. Possible values include version 2008-10-27 and all more recent versions. type: String - contextPath: Azure.Storage.BlobServices.properties.deleteRetentionPolicy description: The service properties for soft delete. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.isVersioningEnabled description: Whether versioning is enabled. type: Boolean - contextPath: Azure.Storage.BlobServices.properties.changeFeed description: The blob service properties for change feed events. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.containerDeleteRetentionPolicy description: The blob service properties for container soft delete. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.lastAccessTimeTrackingPolicy description: The blob service property to configure last access time based tracking policy. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.restorePolicy description: The blob service properties for blob restore policy. type: Unknown - contextPath: Azure.Storage.BlobServices.sku.name description: The SKU name. type: String - contextPath: Azure.Storage.BlobServices.sku.tier description: The SKU tier. type: String - description: Run this command to get the blob service properties of a specific account storage. The command is deprecated, please use azure-storage-blob-service-property-get. name: azure-storage-blob-service-properties-get deprecated: true outputs: - contextPath: Azure.StorageBlobServiceProperties.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.StorageBlobServiceProperties.name description: The name of the resource. type: String - contextPath: Azure.StorageBlobServiceProperties.type description: The resource type. type: String - contextPath: Azure.StorageBlobServiceProperties.properties.lastAccessTimeTrackingPolicy.enable description: When set to true, last access time–based tracking is enabled. type: Boolean - contextPath: Azure.StorageBlobServiceProperties.properties.lastAccessTimeTrackingPolicy.name description: Name of the policy. The valid value is AccessTimeTracking. type: String - contextPath: Azure.StorageBlobServiceProperties.properties.lastAccessTimeTrackingPolicy.trackingGranularityInDays description: Specifies the blob object tracking granularity in days, indicating how often the blob should be tracked. type: Number - contextPath: Azure.StorageBlobServiceProperties.properties.lastAccessTimeTrackingPolicy.blobType description: An array of predefined, supported blob types. The only supported value is BlockBlob. type: String arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The resource group name. name: resource_group_name required: true - description: The storage account name. name: account_name required: true - name: azure-storage-blob-service-property-get description: "Run this command to get the blob service properties of a specific account storage. Required permissions: Microsoft.Storage/storageAccounts/blobServices/read." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The resource group name. name: resource_group_name required: true - description: The storage account name. name: account_name required: true outputs: - contextPath: Azure.Storage.BlobServices.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.Storage.BlobServices.name description: The name of the resource. type: String - contextPath: Azure.Storage.BlobServices.type description: The resource type. type: String - contextPath: Azure.Storage.BlobServices.properties.lastAccessTimeTrackingPolicy description: The blob service property to configure last access time based tracking policy. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.changeFeed description: The blob service properties for change feed events. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.containerDeleteRetentionPolicy description: The blob service properties for container soft delete. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.cors description: The CORS rules for the Blob service. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.defaultServiceVersion description: The default version to use for requests to the Blob service if an incoming request’s version is not specified. Possible values include version 2008-10-27 and all more recent versions. type: String - contextPath: Azure.Storage.BlobServices.properties.deleteRetentionPolicy description: The blob service properties for blob soft delete. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.isVersioningEnabled description: Whether versioning is enabled. type: Boolean - contextPath: Azure.Storage.BlobServices.properties.restorePolicy description: The blob service properties for blob restore policy. type: Unknown - contextPath: Azure.Storage.BlobServices.sku.name description: The SKU name. type: String - contextPath: Azure.Storage.BlobServices.sku.tier description: The SKU tier. type: String - description: Run this command to update a specific blob container. The command is deprecated, please use azure-storage-blob-container-update. name: azure-storage-blob-containers-update deprecated: true outputs: - contextPath: Azure.StorageBlobContainer.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.StorageBlobContainer.name description: The name of the resource. type: String - contextPath: Azure.StorageBlobContainer.type description: The resource type. type: String - contextPath: Azure.StorageBlobContainer.properties.metadata.metadata description: A metadata entry for the container, in name–value format. type: String - contextPath: Azure.StorageBlobContainer.properties.publicAccess description: Specifies whether data in the container may be accessed publicly and the access level. type: String - contextPath: Azure.StorageBlobContainer.properties.hasImmutabilityPolicy description: The hasImmutabilityPolicy property is set to true by SRP if an ImmutabilityPolicy exists for this container, and false if it does not. type: Boolean - contextPath: Azure.StorageBlobContainer.properties.hasLegalHold description: The hasLegalHold property is set to true by SRP if at least one legal hold tag exists, and false if all tags are cleared. type: Boolean arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true - description: The container name. name: container_name required: true - description: Uses the specified encryption scope by default for all writes to the container. name: default_encryption_scope - auto: PREDEFINED description: "Blocks overriding the container’s default encryption scope. Possible values: true, false." name: deny_encryption_scope_override predefined: - 'true' - 'false' - auto: PREDEFINED description: "Specifies the access level. Possible values: Blob, Container, None." name: public_access predefined: - Blob - Container - None - name: azure-storage-blob-container-update description: "Updates container properties as specified in request body. Properties not mentioned in the request will be unchanged. Update fails if the specified container doesn't already exist. Required permissions: Microsoft.Storage/storageAccounts/blobServices/containers/write." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The resource group name. name: resource_group_name required: true - description: The storage account name. name: account_name required: true - description: The container name. name: container_name required: true - description: Uses the specified encryption scope by default for all writes to the container. name: default_encryption_scope - auto: PREDEFINED description: Blocks overriding the container’s default encryption scope. name: deny_encryption_scope_override predefined: - 'true' - 'false' - auto: PREDEFINED description: Specifies the access level. name: public_access predefined: - Blob - Container - None outputs: - contextPath: Azure.Storage.BlobContainers.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.Storage.BlobContainers.name description: The name of the resource. type: String - contextPath: Azure.Storage.BlobContainers.type description: The resource type. type: String - contextPath: Azure.Storage.BlobContainers.properties.metadata description: A name-value pair to associate with the container as metadata. type: String - contextPath: Azure.Storage.BlobContainers.properties.publicAccess description: Specifies whether data in the container may be accessed publicly and the access level. type: String - contextPath: Azure.Storage.BlobContainers.properties.hasImmutabilityPolicy description: The hasImmutabilityPolicy property is set to true by SRP if an ImmutabilityPolicy exists for this container, and false if it does not. type: Boolean - contextPath: Azure.Storage.BlobContainers.properties.hasLegalHold description: The hasLegalHold property is set to true by SRP if at least one legal hold tag exists, and false if all tags are cleared. type: Boolean - arguments: - description: The name of the Container. name: container_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true description: "Retrieves properties for a specific Container. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/read." name: azure-storage-container-property-get outputs: - contextPath: Azure.Storage.Container.Property.Last-Modified description: Last modified time of the container. type: Date - contextPath: Azure.Storage.Container.Property.Etag description: The entity tag for the container. type: String - contextPath: Azure.Storage.Container.Property.X-Ms-Lease-Status description: The lease status of the container. type: String - contextPath: Azure.Storage.Container.Property.X-Ms-Lease-State description: The lease state of the container. type: String - contextPath: Azure.Storage.Container.Property.X-Ms-Has-Immutability-Policy description: Indicates whether the container has an immutability policy set on it. type: String - contextPath: Azure.Storage.Container.Property.X-Ms-Has-Legal-Hold description: Indicates whether the container has a legal hold. type: String - contextPath: Azure.Storage.Container.ContainerName description: Container name. type: String - arguments: - description: | The name of the Container to create. Rules for naming containers can be found here: https://docs.microsoft.com/en-us/rest/api/storageservices/naming-and-referencing-containers--blobs--and-metadata name: container_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true description: "Creates a new Container under the specified account. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/write." name: azure-storage-container-create - arguments: - description: The name of the Container to delete. name: container_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true description: "Marks a specific Container for deletion. The Container and any Blobs contained within it will be deleted during garbage collection. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/delete." execution: true name: azure-storage-container-delete - arguments: - description: The name of the Blob Container. name: container_name required: true - description: The entry ID of the file to upload as a new blob. Available from the war room while the context data contains file output. name: file_entry_id required: true - description: The name of the Blob to create. Default is the file name. name: blob_name - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true description: "Creates a new Blob under the specified Container. Deprecated. Use the azure-storage-blob-create command instead. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write." deprecated: true name: azure-storage-container-blob-create - name: azure-storage-blob-create description: "Create a new Blob under the specified Container. Required permissions: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true - description: The name of the Blob Container. name: container_name required: true - description: The entry ID of the file to upload as a new blob. Available from the war room while the context data contains file output. name: file_entry_id required: true - description: The name of the Blob to create. Default is the file name. name: blob_name - arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the Blob to retrieve. name: blob_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true description: "Retrieves a Blob from a Container. Deprecated. Use the azure-storage-blob-get command instead. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read." name: azure-storage-container-blob-get deprecated: true outputs: - contextPath: File.Size description: The size of the file. type: String - contextPath: File.SHA1 description: The SHA1 hash of the file. type: String - contextPath: File.SHA256 description: The SHA256 hash of the file. type: String - contextPath: File.Name description: The name of the file. type: String - contextPath: File.SSDeep description: The SSDeep hash of the file. type: String - contextPath: File.EntryID description: The entry ID of the file. type: String - contextPath: File.Info description: File information. type: String - contextPath: File.Type description: The file type. type: String - contextPath: File.MD5 description: The MD5 hash of the file. type: Unknown - contextPath: File.Extension description: The file extension. type: String - name: azure-storage-blob-get description: "Retrieve a Blob from a Container. Required permissions: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true - description: The name of the Blob Container. name: container_name required: true - description: The name of the Blob to retrieve. name: blob_name required: true outputs: - contextPath: File.Size description: The size of the file. type: String - contextPath: File.SHA1 description: The SHA1 hash of the file. type: String - contextPath: File.SHA256 description: The SHA256 hash of the file. type: String - contextPath: File.Name description: The name of the file. type: String - contextPath: File.SSDeep description: The SSDeep hash of the file. type: String - contextPath: File.EntryID description: The entry ID of the file. type: String - contextPath: File.Info description: File information. type: String - contextPath: File.Type description: The file type. type: String - contextPath: File.MD5 description: The MD5 hash of the file. type: String - contextPath: File.Extension description: The file extension. type: String - arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the blob. name: blob_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true description: "Retrieves the tags of a specific Blob. Deprecated. Use the azure-storage-blob-tag-get command instead. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read." name: azure-storage-container-blob-tag-get deprecated: true outputs: - contextPath: Azure.StorageContainer.Container.Blob.Tag.Key description: Tag key. type: String - contextPath: Azure.StorageContainer.Container.Blob.Tag.Value description: Tag value. type: String - contextPath: Azure.StorageContainer.Container.Blob.name description: Blob name. type: String - contextPath: Azure.StorageContainer.Container.name description: Container name. type: String - name: azure-storage-blob-tag-get description: "Retrieve the tags of the specified Blob. Required Permissions: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read." arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the blob. name: blob_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true outputs: - contextPath: Azure.Storage.Blob.Tag.Key description: Tag key. type: String - contextPath: Azure.Storage.Blob.Tag.Value description: Tag value. type: String - contextPath: Azure.Storage.Blob.name description: Blob name. type: String - contextPath: Azure.Storage.Blob.ContainerName description: Container name. type: String - arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the blob. name: blob_name required: true - description: 'Tags fields in JSON format: {"tag-name-1": "tag-value-1", "tag-name-2": "tag-value-2"}. The tags fields may contain at most 10 tags.' name: tags required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true - auto: PREDEFINED description: Wether to append tags to the existing tags or not. Default is false. name: append defaultValue: False predefined: - 'true' - 'false' description: "Updates the tags for a specific Blob. Replaces all existing tags or removes them if none are provided. Deprecated. Use the azure-storage-blob-tag-set command instead. Required permissions: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/read, Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/write." name: azure-storage-container-blob-tag-set deprecated: true - name: azure-storage-blob-tag-set description: "Updates the tags for the specified Blob. The command can replace the entire tags of the Blob and can be used to remove tags. Required permissions: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/tags/write." arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the blob. name: blob_name required: true - description: 'Tags fields in JSON format: {"tag-name-1": "tag-value-1", "tag-name-2": "tag-value-2"}. The tags fields may contain at most 10 tags.' name: tags required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true - auto: PREDEFINED description: Whether to append tags to the existing tags or not. name: append defaultValue: 'false' predefined: - 'true' - 'false' - arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the blob. name: blob_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true description: "Retrieves Blob properties. Deprecated. Use the azure-storage-blob-property-get command instead. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read." name: azure-storage-container-blob-property-get deprecated: true outputs: - contextPath: Azure.StorageContainer.Container.Blob.Property.last_modified description: Last modified time of the blob. type: Date - contextPath: Azure.StorageContainer.Container.Blob.Property.etag description: The entity tag for the blob. type: String - contextPath: Azure.StorageContainer.Container.Blob.Property.lease_status description: The lease status of the blob. type: String - contextPath: Azure.StorageContainer.Container.Blob.Property.lease_state description: The lease state of the blob. type: String - contextPath: Azure.StorageContainer.Container.Blob.Property.blob_type description: The blob type. type: String - contextPath: Azure.StorageContainer.Container.Blob.Property.content_length description: The size of the blob in bytes. type: Number - contextPath: Azure.StorageContainer.Container.Blob.Property.content_type description: The content type specified for the blob. If no content type was specified, the default content type is application/octet-stream. type: String - contextPath: Azure.StorageContainer.Container.Blob.Property.content-md5 description: The MD5 hash of the blob content. type: String - contextPath: Azure.StorageContainer.Container.Blob.Property.creation_time description: The date at which the blob was created. type: Date - contextPath: Azure.StorageContainer.Container.Blob.name description: Blob name. type: String - name: azure-storage-blob-property-get description: "Retrieve Blob properties. Required Permissions: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read." arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the blob. name: blob_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true outputs: - contextPath: Azure.Storage.Blob.Property.Last-Modified description: Last modified time of the blob. type: Date - contextPath: Azure.Storage.Blob.Property.Etag description: The entity tag for the blob. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Lease-Status description: The lease status of the blob. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Lease-State description: The lease state of the blob. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Blob-Type description: The blob type. type: String - contextPath: Azure.Storage.Blob.Property.Content-Type description: The content type specified for the blob. If no content type was specified, the default content type is application/octet-stream. type: String - contextPath: Azure.Storage.Blob.Property.Content-Md5 description: The MD5 hash of the blob content. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Creation-Time description: The date at which the blob was created. type: String - contextPath: Azure.Storage.Blob.Property.Server description: The server used to process the request. type: String - contextPath: Azure.Storage.Blob.Property.Accept-Ranges description: Indicates that the service supports requests for partial blob content. type: String - contextPath: Azure.Storage.Blob.Property.Connection description: The connection status of the response. type: String - contextPath: Azure.Storage.Blob.Property.Date description: A UTC date/time value generated by the service that indicates the time when the response was initiated. type: String - contextPath: Azure.Storage.Blob.Property.Transfer-Encoding description: The form of encoding used to safely transfer the payload to the user. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Access-Tier description: The tier of page blob on a Premium Storage account or tier of a block blob in a Blob Storage or general purpose v2 account. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Access-Tier-Inferred description: For page blobs on a Premium Storage account only. If the access tier isn't explicitly set on the blob, the tier is inferred based on its content length, and this header is returned with a value of true. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Request-Id description: This header uniquely identifies the request that was made. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Server-Encrypted description: The value of this header is set to true if the blob data and application metadata are completely encrypted using the specified algorithm. type: String - contextPath: Azure.Storage.Blob.Property.X-Ms-Version description: Specifies the version of the operation to use for this request. type: String - contextPath: Azure.Storage.Blob.name description: Blob name. type: String - contextPath: Azure.Storage.Blob.ContainerName description: Container name. type: String - arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the blob. name: blob_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true - description: Blob content type. Indicates the media type of the blob. name: content_type - description: Blob MD5 hash value. Can be used by the client to check for content integrity. name: content_md5 - auto: PREDEFINED description: Blob content encoding. Used to specify the compression algorithm of the blob content. name: content_encoding predefined: - identity - gzip - deflate - br - compress - zstd - aes128gcm - dcb - dcz - exi - pack200-gzip - x-compress - x-gzip - description: Blob content language. Describes the human languages of the blob content. name: content_language - description: Blob content disposition. Conveys additional information about how to process the response payload, and also can be used to attach additional metadata. name: content_disposition - description: Modifies the cache control string for the blob. Indicates directives for caching in both requests and responses. name: cache_control - description: Request ID generated by the client and recorded in the analytics logs when storage analytics logging is enabled. name: request_id - description: Required if the blob has an active lease. name: lease_id description: "Sets Blob properties. Deprecated. Use the azure-storage-blob-property-set command instead. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write." name: azure-storage-container-blob-property-set deprecated: true - name: azure-storage-blob-property-set description: "Set Blob properties. Required permissions: Microsoft.Storage/storageAccounts/blobServices/containers/blobs/write." arguments: - description: The name of the Blob Container. name: container_name required: true - description: The name of the blob. name: blob_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true - description: Blob content type. Indicates the media type of the blob. name: content_type - description: Blob MD5 hash value. Can be used by the client to check for content integrity. name: content_md5 - auto: PREDEFINED description: Blob content encoding. Used to specify the compression algorithm of the blob content. name: content_encoding predefined: - identity - gzip - deflate - br - compress - zstd - aes128gcm - dcb - dcz - exi - pack200-gzip - x-compress - x-gzip - description: Blob content language. Describes the human languages of the blob content. name: content_language - description: Blob content disposition. Conveys additional information about how to process the response payload, and also can be used to attach additional metadata. name: content_disposition - description: Modifies the cache control string for the blob. Indicates directives for caching in both requests and responses. name: cache_control - description: Request ID generated by the client and recorded in the analytics logs when storage analytics logging is enabled. name: request_id - description: Required if the blob has an active lease. name: lease_id - arguments: - description: Name of a container. name: container_name required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: "The resource group name." name: resource_group_name required: true - description: The storage account name. name: account_name required: true description: "Blocks public access to a container. Required permission: Microsoft.Storage/storageAccounts/blobServices/containers/setAcl/action." name: azure-storage-container-public-access-block - arguments: - name: name required: true description: Name of the policy assignment. - name: subscription_id required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: scope type: string description: The scope of the policy assignment. required: true - name: policy_definition_id required: false type: string description: The ID of the policy definition or policy set definition being assigned. - name: display_name type: string description: The assignment display name. - name: parameters description: The JSON object for policy properties parameters and their values. - name: description type: string description: This message will be part of the response in case of policy violation. name: azure-policy-assignment-create description: "Creates a policy assignment. Required permission: Microsoft.Authorization/policyAssignments/read, Microsoft.Authorization/policyAssignments/write." outputs: - contextPath: Azure.Policy.PolicyAssignments.ID description: The resource ID of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Name description: The name of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Type description: The type of the resource (e.g., 'Microsoft.Authorization/policyAssignments'). type: string - contextPath: Azure.Policy.PolicyAssignments.Location description: The location of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Identity description: The managed identity associated with the policy assignment. - contextPath: Azure.Policy.PolicyAssignments.Properties.DisplayName description: The display name of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.Description description: The description of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.PolicyDefinitionId description: The ID of the policy definition or policy set definition being assigned. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.Scope description: The scope of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.NotScopes description: The list of scopes that are excluded from the policy assignment. - contextPath: Azure.Policy.PolicyAssignments.Properties.Parameters description: The parameter values for the assigned policy rule. - contextPath: Azure.Policy.PolicyAssignments.Properties.Metadata description: The metadata associated with the policy assignment. - contextPath: Azure.Policy.PolicyAssignments.Properties.EnforcementMode description: The policy assignment enforcement mode (e.g., 'Default' or 'DoNotEnforce'). type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.latestDefinitionVersion description: The latest version of the policy definition available. This is only present if requested via the $expand query parameter. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.NonComplianceMessages description: The messages that describe why a resource is non-compliant with the policy. - contextPath: Azure.Policy.PolicyAssignments.Properties.DefinitionVersion description: The version of the policy definition to use. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.Overrides description: The policy property value overrides. - contextPath: Azure.Policy.PolicyAssignments.Properties.ResourceSelectors description: The resource selectors to filter policies by resource properties. - contextPath: Azure.Policy.PolicyAssignments.SystemData description: The system metadata relating to this resource. - arguments: - name: resource_group_name type: string description: The resource group name. required: true - name: server_name type: string required: true description: Name of the PostgreSQL server. - name: configuration_name type: string required: true description: The configuration setting name. - name: subscription_id required: false required:platform: true type: string description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: source type: string description: Source of the configuration. - name: value type: string description: Value of the configuration. name: azure-postgres-config-set description: "Updates a server configuration. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/configurations/read, Microsoft.DBforPostgreSQL/servers/configurations/write." outputs: [] # have no outputs for these command by response deprecated: true - arguments: - name: resource_group_name type: string required: true description: The resource group name. - name: subscription_id type: string required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: name type: string required: true description: Name of the Web App. - auto: PREDEFINED name: http20_enabled type: bool required: false description: Configures a web site to allow clients to connect over http2.0. predefined: - 'true' - 'false' - auto: PREDEFINED name: remote_debugging_enabled type: bool required: false description: True if remote debugging is enabled; otherwise, false. predefined: - 'true' - 'false' - name: min_tls_version type: str auto: PREDEFINED required: false description: Configures the minimum version of TLS required for SSL requests. predefined: - '1.0' - '1.1' - '1.2' - '1.3' name: azure-webapp-config-set description: "Updates the configuration settings of an existing Azure Web App. Deprecated. Use the azure-appservice-webapp-config-update command instead. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." deprecated: true outputs: - contextPath: Azure.WebAppConfig.id description: Resource ID. type: String - contextPath: Azure.WebAppConfig.name description: Resource name. type: String - contextPath: Azure.WebAppConfig.type description: Resource type. type: String - contextPath: Azure.WebAppConfig.location description: Resource location. type: String - contextPath: Azure.WebAppConfig.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.WebAppConfig.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.WebAppConfig.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.WebAppConfig.properties.phpVersion description: PHP version. type: String - contextPath: Azure.WebAppConfig.properties.pythonVersion description: Python version. type: String - contextPath: Azure.WebAppConfig.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.WebAppConfig.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.WebAppConfig.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.WebAppConfig.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.WebAppConfig.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebAppConfig.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebAppConfig.properties.ftpsState description: State of FTP / FTPS service. type: String - contextPath: Azure.WebAppConfig.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.WebAppConfig.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.WebAppConfig.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.allowedOrigins description: CORS allowed origins. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.supportCredentials description: Indicates whether CORS supports credentials. type: Boolean - contextPath: Azure.WebAppConfig.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.WebAppConfig.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - name: azure-appservice-webapp-config-update description: "Updates the configuration settings of an existing Azure Web App. Required permissions: Microsoft.Web/sites/config/write, Microsoft.Web/sites/config/read." arguments: - name: resource_group_name type: string required: true description: The resource group name. - name: subscription_id type: string required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: name type: string required: true description: Name of the Web App. - auto: PREDEFINED name: http20_enabled type: bool required: false description: Configures a web site to allow clients to connect over http2.0. predefined: - 'true' - 'false' - auto: PREDEFINED name: remote_debugging_enabled type: bool required: false description: True if remote debugging is enabled; otherwise, false. predefined: - 'true' - 'false' - name: min_tls_version auto: PREDEFINED required: false description: Configures the minimum version of TLS required for SSL requests. predefined: - '1.0' - '1.1' - '1.2' - '1.3' outputs: - contextPath: Azure.AppService.WebAppConfiguration.id description: Resource ID. type: String - contextPath: Azure.AppService.WebAppConfiguration.name description: Resource name. type: String - contextPath: Azure.AppService.WebAppConfiguration.type description: Resource type. type: String - contextPath: Azure.AppService.WebAppConfiguration.location description: Resource location. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.AppService.WebAppConfiguration.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.phpVersion description: PHP version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.pythonVersion description: Python version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.ftpsState description: State of FTP / FTPS service. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.cors description: Cross-Origin Resource Sharing (CORS) settings. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - arguments: - name: resource_group_name type: string required: true description: The resource group name. - name: subscription_id type: string required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: name type: string required: true description: Name of the Web App. - auto: PREDEFINED name: enabled type: bool required: false description: True if the Authentication / Authorization feature is enabled for the current app; otherwise, false. predefined: - 'true' - 'false' name: azure-webapp-auth-update description: "Updates the authentication and authorization settings of an existing Azure Web App. Deprecated. Use the azure-appservice-webapp-auth-settings-update command instead. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." deprecated: true outputs: - contextPath: Azure.WebAppAuth.id description: Resource ID. type: String - contextPath: Azure.WebAppAuth.name description: Resource Name. type: String - contextPath: Azure.WebAppAuth.type description: Resource type. type: String - contextPath: Azure.WebAppAuth.properties.enabled description: Indicates whether Authentication/Authorization is enabled for the app. type: Boolean - contextPath: Azure.WebAppAuth.properties.runtimeVersion description: The RuntimeVersion of the Authentication/Authorization feature. type: String - contextPath: Azure.WebAppAuth.properties.unauthenticatedClientAction description: The action to take when an unauthenticated client attempts to access the app. type: String - contextPath: Azure.WebAppAuth.properties.tokenStoreEnabled description: Indicates whether the Azure App Service Authentication platform’s token store is enabled. type: Boolean - contextPath: Azure.WebAppAuth.properties.allowedExternalRedirectUrls description: External URLs that are allowed to be redirected to as part of logging in or logging out of the app. type: Unknown - contextPath: Azure.WebAppAuth.properties.defaultProvider description: The default authentication provider to use when multiple providers are configured. type: String - contextPath: Azure.WebAppAuth.properties.clientId description: The Client ID of the app used for AAD login. type: String - contextPath: Azure.WebAppAuth.properties.clientSecret description: The client secret associated with the AAD app. type: String - contextPath: Azure.WebAppAuth.properties.clientSecretSettingName description: The app setting that contains the client secret. type: String - contextPath: Azure.WebAppAuth.properties.issuer description: The OpenID Connect Issuer URI that represents the entity that issues access tokens. type: String - contextPath: Azure.WebAppAuth.properties.allowedAudiences description: The list of audiences that can receive the authentication tokens. type: Unknown - contextPath: Azure.WebAppAuth.properties.additionalLoginParams description: Additional parameters to send to the authentication provider. type: Unknown - contextPath: Azure.WebAppAuth.properties.isAadAutoProvisioned description: True if AAD is auto-provisioned; otherwise false. type: Boolean - contextPath: Azure.WebAppAuth.properties.googleClientId description: The Client ID of the app used for Google login. type: String - contextPath: Azure.WebAppAuth.properties.googleClientSecret description: The client secret associated with the Google app. type: String - contextPath: Azure.WebAppAuth.properties.googleClientSecretSettingName description: The app setting that contains the client secret. type: String - contextPath: Azure.WebAppAuth.properties.facebookAppId description: The App ID of the Facebook app used for login. type: String - contextPath: Azure.WebAppAuth.properties.facebookAppSecret description: The app secret associated with the Facebook app. type: String - contextPath: Azure.WebAppAuth.properties.facebookAppSecretSettingName description: The app setting that contains the Facebook app secret. type: String - contextPath: Azure.WebAppAuth.properties.twitterConsumerKey description: The OAuth 1.0a consumer key of the Twitter application used for login. type: String - contextPath: Azure.WebAppAuth.properties.twitterConsumerSecret description: The consumer secret associated with the Twitter application. type: String - contextPath: Azure.WebAppAuth.properties.twitterConsumerSecretSettingName description: The app setting that contains the Twitter consumer secret. type: String - contextPath: Azure.WebAppAuth.properties.microsoftAccountClientId description: The OAuth 2.0 client ID for the Microsoft account provider. type: String - contextPath: Azure.WebAppAuth.properties.microsoftAccountClientSecret description: The client secret for the Microsoft account provider. type: String - contextPath: Azure.WebAppAuth.properties.microsoftAccountClientSecretSettingName description: The app setting that contains the Microsoft account client secret. type: String - contextPath: Azure.WebAppAuth.properties.appleClientId description: The client ID for the Apple provider. type: String - contextPath: Azure.WebAppAuth.properties.appleClientSecret description: The client secret for the Apple provider. type: String - contextPath: Azure.WebAppAuth.properties.appleClientSecretSettingName description: The app setting that contains the Apple provider client secret. type: String - contextPath: Azure.WebAppAuth.properties.authFilePath description: The path to the authentication configuration file. type: String - name: azure-appservice-webapp-auth-settings-update description: "Updates the authentication and authorization settings of an existing Azure Web App. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." arguments: - name: resource_group_name type: string required: true description: The resource group name. - name: subscription_id type: string required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: name type: string required: true description: Name of the Web App. - auto: PREDEFINED name: enabled type: bool required: false description: True if the Authentication / Authorization feature is enabled for the current app; otherwise, false. predefined: - 'true' - 'false' outputs: - contextPath: Azure.AppService.WebAppAuthSettings.id description: Resource ID. type: String - contextPath: Azure.AppService.WebAppAuthSettings.name description: Resource Name. type: String - contextPath: Azure.AppService.WebAppAuthSettings.type description: Resource type. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.enabled description: Indicates whether Authentication/Authorization is enabled for the app. type: Boolean - contextPath: Azure.AppService.WebAppAuthSettings.properties.runtimeVersion description: The RuntimeVersion of the Authentication/Authorization feature. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.unauthenticatedClientAction description: The action to take when an unauthenticated client attempts to access the app. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.tokenStoreEnabled description: Indicates whether the Azure App Service Authentication platform’s token store is enabled. type: Boolean - contextPath: Azure.AppService.WebAppAuthSettings.properties.allowedExternalRedirectUrls description: External URLs that are allowed to be redirected to as part of logging in or logging out of the app. type: Unknown - contextPath: Azure.AppService.WebAppAuthSettings.properties.defaultProvider description: The default authentication provider to use when multiple providers are configured. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.clientId description: The Client ID of the app used for AAD login. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.clientSecret description: The client secret associated with the AAD app. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.clientSecretSettingName description: The app setting that contains the client secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.issuer description: The OpenID Connect Issuer URI that represents the entity that issues access tokens. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.allowedAudiences description: The list of audiences that can receive the authentication tokens. type: Unknown - contextPath: Azure.AppService.WebAppAuthSettings.properties.additionalLoginParams description: Additional parameters to send to the authentication provider. type: Unknown - contextPath: Azure.AppService.WebAppAuthSettings.properties.isAadAutoProvisioned description: True if AAD is auto-provisioned; otherwise false. type: Boolean - contextPath: Azure.AppService.WebAppAuthSettings.properties.googleClientId description: The Client ID of the app used for Google login. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.googleClientSecret description: The client secret associated with the Google app. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.googleClientSecretSettingName description: The app setting that contains the client secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.facebookAppId description: The App ID of the Facebook app used for login. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.facebookAppSecret description: The app secret associated with the Facebook app. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.facebookAppSecretSettingName description: The app setting that contains the Facebook app secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.twitterConsumerKey description: The OAuth 1.0a consumer key of the Twitter application used for login. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.twitterConsumerSecret description: The consumer secret associated with the Twitter application. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.twitterConsumerSecretSettingName description: The app setting that contains the Twitter consumer secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.microsoftAccountClientId description: The OAuth 2.0 client ID for the Microsoft account provider. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.microsoftAccountClientSecret description: The client secret for the Microsoft account provider. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.microsoftAccountClientSecretSettingName description: The app setting that contains the Microsoft account client secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.appleClientId description: The client ID for the Apple provider. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.appleClientSecret description: The client secret for the Apple provider. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.appleClientSecretSettingName description: The app setting that contains the Apple provider client secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.authFilePath description: The path to the authentication configuration file. type: String - arguments: - name: resource_group_name type: string required: true description: The resource group name. - name: subscription_id type: string required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: server_name type: string required: true description: Name of the MySQL flexible server. - name: configuration_name type: string required: true description: The name of the server configuration. - name: source type: string required: false description: Source of the configuration. - name: value type: string required: false description: Value of the configuration. name: azure-mysql-flexible-server-param-set description: "Updates a server configuration. Required permissions: Microsoft.DBforMySQL/flexibleServers/configurations/read, Microsoft.DBforMySQL/flexibleServers/configurations/write." outputs: [] # No outputs are returned in response - arguments: - name: log_profile_name description: The name of the log profile to update. required: true type: String - name: subscription_id type: string required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: location description: Resource location. - name: retention_policy_days description: Number of days to retain logs. type: Number - auto: PREDEFINED name: retention_policy_enabled description: Whether to enable the retention policy. type: bool predefined: - 'true' - 'false' name: azure-monitor-log-profile-update description: "Updates a log profile in Azure Monitoring REST API. Required permissions: Microsoft.Insights/logprofiles/read, Microsoft.Insights/logprofiles/write." outputs: - contextPath: Azure.Monitor.LogProfiles.id type: String description: The fully qualified Azure resource ID for the log profile. - contextPath: Azure.Monitor.LogProfiles.name type: String description: The name of the log profile. - contextPath: Azure.Monitor.LogProfiles.type type: String description: The type of the resource (Microsoft.Insights/logProfiles). - contextPath: Azure.Monitor.LogProfiles.location type: String description: The location of the log profile. - contextPath: Azure.Monitor.LogProfiles.tags type: Object description: Resource tags. - contextPath: Azure.Monitor.LogProfiles.properties.storageAccountId type: String description: The resource ID of the storage account to which diagnostic logs are delivered. - contextPath: Azure.Monitor.LogProfiles.properties.serviceBusRuleId type: String description: The service bus rule ID to which diagnostic logs are sent. - contextPath: Azure.Monitor.LogProfiles.properties.locations type: Array description: A list of regions for which events are collected. - contextPath: Azure.Monitor.LogProfiles.properties.categories type: Array description: A list of categories of logs that are collected. - contextPath: Azure.Monitor.LogProfiles.properties.retentionPolicy.enabled type: Boolean description: Specifies whether the retention policy is enabled. - contextPath: Azure.Monitor.LogProfiles.properties.retentionPolicy.days type: Number description: The number of days for the retention policy. - arguments: - name: resource_group_name type: string required: true description: The resource group name. - name: subscription_id type: string required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: disk_name type: string required: true description: The name of the managed disk that is being created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters. - name: public_network_access type: string required: false auto: PREDEFINED predefined: - Disabled - Enabled description: Policy for controlling export on the disk. - name: network_access_policy type: string required: false auto: PREDEFINED predefined: - AllowAll - AllowPrivate - DenyAll description: Policy for accessing the disk via network. - name: data_access_auth_mode type: string required: false auto: PREDEFINED predefined: - AzureActiveDirectory description: Additional authentication requirements when exporting or uploading to a disk or snapshot. name: azure-disk-update description: "Updates a disk. Deprecated. Use the azure-compute-disk-update command instead. Required permissions: Microsoft.Compute/disks/read, Microsoft.Compute/disks/write." deprecated: true outputs: - contextPath: Azure.Disk.id description: Resource ID of the disk. type: String - contextPath: Azure.Disk.name description: Name of the disk. type: String - contextPath: Azure.Disk.type description: Type of the resource. type: String - contextPath: Azure.Disk.location description: Location of the disk. type: String - contextPath: Azure.Disk.tags description: Resource tags. - contextPath: Azure.Disk.managedBy description: ARM ID of the resource that manages the disk. type: String - contextPath: Azure.Disk.sku description: The disk SKU name. - contextPath: Azure.Disk.zones description: A list of availability zones. - contextPath: Azure.Disk.properties.timeCreated description: The time when the disk was created. type: String - contextPath: Azure.Disk.properties.diskSizeGB description: Size of the disk in GB. type: Number - contextPath: Azure.Disk.properties.diskIopsReadWrite description: The number of IOPS allowed for this disk. type: Number - contextPath: Azure.Disk.properties.diskMBpsReadWrite description: The bandwidth allowed for this disk in MBps. type: Number - contextPath: Azure.Disk.properties.diskIOPSReadOnly description: The number of read-only IOPS for this disk. type: Number - contextPath: Azure.Disk.properties.diskMBpsReadOnly description: The read-only bandwidth for this disk in MBps. type: Number - contextPath: Azure.Disk.properties.diskSizeBytes description: The size of the disk in bytes. type: Number - contextPath: Azure.Disk.properties.networkAccessPolicy description: Policy for accessing the disk via network. type: String - contextPath: Azure.Disk.properties.publicNetworkAccess description: Policy for export on the disk. type: String - contextPath: Azure.Disk.properties.burstingEnabled description: Whether bursting is enabled on the disk. type: Boolean - contextPath: Azure.Disk.properties.optimization description: The disk optimization setting. type: String - contextPath: Azure.Disk.properties.diskState description: The current state of the disk. type: String - contextPath: Azure.Disk.properties.supportedCapabilities description: Supported capabilities of the disk. - contextPath: Azure.Disk.properties.supportedPerformanceTiers description: Supported performance tiers of the disk. - contextPath: Azure.Disk.properties.supportedDiskTypes description: Supported disk types for the disk. - contextPath: Azure.Disk.properties.provisioningState description: The provisioning state of the disk. - contextPath: Azure.Disk.properties.timeModified description: The time when the disk was last modified. - contextPath: Azure.Disk.properties.diskAccessId description: The ARM ID of the DiskAccess resource. type: String - contextPath: Azure.Disk.properties.networkProfile description: The network profile of the disk. - contextPath: Azure.Disk.properties.creationData description: Disk creation data. - contextPath: Azure.Disk.properties.encryption description: Encryption settings for the disk. - contextPath: Azure.Disk.properties.encryptionSettingsCollection description: A collection of encryption settings. - contextPath: Azure.Disk.properties.encryptionType description: The type of key used to encrypt the data on the disk. type: String - contextPath: Azure.Disk.properties.securityProfile description: Security profile for the disk. - contextPath: Azure.Disk.properties.tieringProfile description: Tiering profile for the disk. - contextPath: Azure.Disk.properties.supportedTierList description: List of supported tiers for the disk. - contextPath: Azure.Disk.properties.availabilityZone description: Availability zone of the disk. type: String - contextPath: Azure.Disk.properties.dataAccessAuthMode description: Additional authentication requirements when exporting or uploading to a disk. type: String - contextPath: Azure.Disk.properties.osType description: The operating system type. type: String - contextPath: Azure.Disk.properties.hyperVGeneration description: The HyperVGenerationType of the virtual machine. type: String - contextPath: Azure.Disk.properties.lastOwnershipUpdateTime description: The last time ownership of the disk was updated. type: String - name: azure-compute-disk-update description: "Updates a disk. Required permissions: Microsoft.Compute/disks/read, Microsoft.Compute/disks/write." arguments: - name: resource_group_name type: string required: true description: The resource group name. - name: subscription_id type: string required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: disk_name type: string required: true description: The name of the managed disk that is being created. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters. - name: public_network_access type: string required: false auto: PREDEFINED predefined: - Disabled - Enabled description: Policy for controlling export on the disk. - name: network_access_policy type: string required: false auto: PREDEFINED predefined: - AllowAll - AllowPrivate - DenyAll description: Policy for accessing the disk via network. - name: data_access_auth_mode type: string required: false auto: PREDEFINED predefined: - AzureActiveDirectory description: Additional authentication requirements when exporting or uploading to a disk or snapshot. outputs: - contextPath: Azure.Compute.Disks.id description: Resource ID of the disk. type: String - contextPath: Azure.Compute.Disks.name description: Name of the disk. type: String - contextPath: Azure.Compute.Disks.type description: Type of the resource. type: String - contextPath: Azure.Compute.Disks.location description: Location of the disk. type: String - contextPath: Azure.Compute.Disks.tags description: Resource tags. type: Unknown - contextPath: Azure.Compute.Disks.managedBy description: ARM ID of the resource that manages the disk. type: String - contextPath: Azure.Compute.Disks.sku description: The disk SKU name. - contextPath: Azure.Compute.Disks.zones description: A list of availability zones. - contextPath: Azure.Compute.Disks.properties.timeCreated description: The time when the disk was created. type: String - contextPath: Azure.Compute.Disks.properties.diskSizeGB description: Size of the disk in GB. type: Number - contextPath: Azure.Compute.Disks.properties.diskIopsReadWrite description: The number of IOPS allowed for this disk. type: Number - contextPath: Azure.Compute.Disks.properties.diskMBpsReadWrite description: The bandwidth allowed for this disk in MBps. type: Number - contextPath: Azure.Compute.Disks.properties.diskIOPSReadOnly description: The number of read-only IOPS for this disk. type: Number - contextPath: Azure.Compute.Disks.properties.diskMBpsReadOnly description: The read-only bandwidth for this disk in MBps. type: Number - contextPath: Azure.Compute.Disks.properties.diskSizeBytes description: The size of the disk in bytes. type: Number - contextPath: Azure.Compute.Disks.properties.networkAccessPolicy description: Policy for accessing the disk via network. type: String - contextPath: Azure.Compute.Disks.properties.publicNetworkAccess description: Policy for export on the disk. type: String - contextPath: Azure.Compute.Disks.properties.burstingEnabled description: Whether bursting is enabled on the disk. type: Boolean - contextPath: Azure.Compute.Disks.properties.optimization description: The disk optimization setting. type: String - contextPath: Azure.Compute.Disks.properties.diskState description: The current state of the disk. type: String - contextPath: Azure.Compute.Disks.properties.supportedCapabilities description: Supported capabilities of the disk. - contextPath: Azure.Compute.Disks.properties.supportedPerformanceTiers description: Supported performance tiers of the disk. - contextPath: Azure.Compute.Disks.properties.supportedDiskTypes description: Supported disk types for the disk. - contextPath: Azure.Compute.Disks.properties.provisioningState description: The provisioning state of the disk. - contextPath: Azure.Compute.Disks.properties.timeModified description: The time when the disk was last modified. - contextPath: Azure.Compute.Disks.properties.diskAccessId description: The ARM ID of the DiskAccess resource. type: String - contextPath: Azure.Compute.Disks.properties.networkProfile description: The network profile of the disk. - contextPath: Azure.Compute.Disks.properties.creationData description: Disk creation data. - contextPath: Azure.Compute.Disks.properties.encryption description: Encryption settings for the disk. - contextPath: Azure.Compute.Disks.properties.encryptionSettingsCollection description: A collection of encryption settings. - contextPath: Azure.Compute.Disks.properties.encryptionType description: The type of key used to encrypt the data on the disk. type: String - contextPath: Azure.Compute.Disks.properties.securityProfile description: Security profile for the disk. - contextPath: Azure.Compute.Disks.properties.tieringProfile description: Tiering profile for the disk. - contextPath: Azure.Compute.Disks.properties.supportedTierList description: List of supported tiers for the disk. - contextPath: Azure.Compute.Disks.properties.availabilityZone description: Availability zone of the disk. type: String - contextPath: Azure.Compute.Disks.properties.dataAccessAuthMode description: Additional authentication requirements when exporting or uploading to a disk. type: String - contextPath: Azure.Compute.Disks.properties.osType description: The operating system type. type: String - contextPath: Azure.Compute.Disks.properties.hyperVGeneration description: The HyperVGenerationType of the virtual machine. type: String - contextPath: Azure.Compute.Disks.properties.lastOwnershipUpdateTime description: The last time ownership of the disk was updated. type: String - arguments: - name: resource_group_name type: String required: true description: The resource group name. - name: subscription_id type: String required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: name type: String required: true description: Name of the Web App. - name: identity_type type: String required: false auto: PREDEFINED predefined: - None - SystemAssigned description: Managed service identity type. - name: https_only description: Configures the web site to accept only https requests. type: bool predefined: - 'true' - 'false' - name: client_cert_enabled description: Whether client certificates are enabled. type: bool predefined: - 'true' - 'false' name: azure-webapp-update description: "Updates an Azure Web App. Deprecated. Use the azure-appservice-webapp-update command instead. Required permissions: Microsoft.Web/sites/read, Microsoft.Web/sites/write." deprecated: true outputs: - contextPath: Azure.WebApp.id description: Fully qualified resource ID for the web app. type: String - contextPath: Azure.WebApp.name description: The name of the web app. type: String - contextPath: Azure.WebApp.type description: The resource type, e.g., Microsoft.Web/sites. type: String - contextPath: Azure.WebApp.location description: Geographic location of the web app. type: String - contextPath: Azure.WebApp.kind description: The kind of the app, e.g., app, functionapp, etc. type: String - contextPath: Azure.WebApp.tags description: Resource tags as key-value pairs. - contextPath: Azure.WebApp.identity.type description: The type of managed identity (SystemAssigned, UserAssigned, etc.). type: String - contextPath: Azure.WebApp.identity.principalId description: The principal ID of the system-assigned identity. type: String - contextPath: Azure.WebApp.identity.tenantId description: The tenant ID of the system-assigned identity. type: String - contextPath: Azure.WebApp.identity.userAssignedIdentities description: The list of user-assigned identities associated with the web app. - contextPath: Azure.WebApp.properties.state description: Current state of the web app (Running, Stopped, etc.). type: String - contextPath: Azure.WebApp.properties.enabled description: Whether the web app is enabled. type: Boolean - contextPath: Azure.WebApp.properties.defaultHostName description: Default host name of the web app. type: String - contextPath: Azure.WebApp.properties.hostNames description: List of host names associated with the web app. - contextPath: Azure.WebApp.properties.repositorySiteName description: Name of the repository site. type: String - contextPath: Azure.WebApp.properties.clientAffinityEnabled description: Whether client affinity is enabled. type: Boolean - contextPath: Azure.WebApp.properties.clientCertEnabled description: Whether client certificates are enabled. type: Boolean - contextPath: Azure.WebApp.properties.clientCertExclusionPaths description: Paths to exclude from client certificate authentication. type: String - contextPath: Azure.WebApp.properties.hostingEnvironment description: App Service Environment to use for the web app. type: String - contextPath: Azure.WebApp.properties.serverFarmId description: Resource ID of the associated App Service plan. type: String - contextPath: Azure.WebApp.properties.reserved description: Whether the web app is on a Linux plan. type: Boolean - contextPath: Azure.WebApp.properties.isXenon description: Whether the web app is hosted in Xenon. type: Boolean - contextPath: Azure.WebApp.properties.hyperV description: Whether Hyper-V is enabled for the web app. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.appSettings description: List of app settings. - contextPath: Azure.WebApp.properties.siteConfig.metadata description: List of metadata settings. - contextPath: Azure.WebApp.properties.siteConfig.connectionStrings description: List of connection strings. - contextPath: Azure.WebApp.properties.siteConfig.localMySqlEnabled description: Whether local MySQL is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.alwaysOn description: Whether Always On is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.http20Enabled description: Whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebApp.properties.siteConfig.ftpsState description: FTPS state (Disabled, AllAllowed, etc.). type: String - contextPath: Azure.WebApp.properties.siteConfig.linuxFxVersion description: Runtime stack for Linux apps. type: String - contextPath: Azure.WebApp.properties.siteConfig.windowsFxVersion description: Runtime stack for Windows apps. type: String - contextPath: Azure.WebApp.properties.siteConfig.numberOfWorkers description: Number of workers allocated. type: Number - contextPath: Azure.WebApp.properties.siteConfig.webSocketsEnabled description: Whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.preWarmedInstanceCount description: Number of pre-warmed instances. type: Number - contextPath: Azure.WebApp.properties.siteConfig.acrUseManagedIdentityCreds description: Whether ACR uses managed identity credentials. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.acrUserManagedIdentityID description: User-assigned identity ID for ACR. type: String - contextPath: Azure.WebApp.properties.siteConfig.scmType description: Source control management type. type: String - contextPath: Azure.WebApp.properties.siteConfig.use32BitWorkerProcess description: Whether to use 32-bit worker process. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealEnabled description: Whether auto-heal is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealRules description: Auto-heal rules configuration. - contextPath: Azure.WebApp.properties.siteConfig.tracingOptions description: Tracing options. type: String - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.detailedErrorLoggingEnabled description: Whether detailed error logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.httpLoggingEnabled description: Whether HTTP logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingEnabled description: Whether request tracing is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingExpirationTime description: Request tracing expiration time. type: DateTime - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.defaultDocuments description: List of default documents. - contextPath: Azure.WebApp.properties.siteConfig.virtualApplications description: List of virtual applications. - contextPath: Azure.WebApp.properties.siteConfig.loadBalancing description: Load balancing settings. type: String - contextPath: Azure.WebApp.properties.siteConfig.experiments description: Experiments configuration. - contextPath: Azure.WebApp.properties.siteConfig.limits description: Site limits configuration. - contextPath: Azure.WebApp.properties.siteConfig.autoSwapSlotName description: Auto-swap slot name. type: String - contextPath: Azure.WebApp.properties.siteConfig.localMySqlEnabled description: Whether local MySQL is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.ipSecurityRestrictions description: IP security restrictions. - contextPath: Azure.WebApp.properties.siteConfig.scmIpSecurityRestrictions description: SCM IP security restrictions. - contextPath: Azure.WebApp.properties.siteConfig.scmIpSecurityRestrictionsUseMain description: Whether SCM IP restrictions use main settings. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.cors description: CORS settings. - contextPath: Azure.WebApp.properties.siteConfig.push description: Push settings. - contextPath: Azure.WebApp.properties.siteConfig.apiDefinition description: API definition settings. - contextPath: Azure.WebApp.properties.siteConfig.apiManagementConfig description: API management configuration. - contextPath: Azure.WebApp.properties.siteConfig.autoHealEnabled description: Whether auto-heal is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealRules description: Auto-heal rules configuration. - contextPath: Azure.WebApp.properties.siteConfig.tracingOptions description: Tracing options. type: String - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.detailedErrorLoggingEnabled description: Whether detailed error logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.httpLoggingEnabled description: Whether HTTP logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingEnabled description: Whether request tracing is enabled. type: Boolean - name: azure-appservice-webapp-update description: "Updates an Azure Web App. The required permissions are: Microsoft.Web/sites/read, Microsoft.Web/sites/write." arguments: - name: resource_group_name required: true description: The resource group name. - name: subscription_id required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: name required: true description: Name of the Web App. - name: identity_type required: false auto: PREDEFINED predefined: - None - SystemAssigned description: Managed service identity type. - name: https_only description: Configures the web site to accept only https requests. auto: PREDEFINED predefined: - 'true' - 'false' - name: client_cert_enabled description: Whether client certificates are enabled. auto: PREDEFINED predefined: - 'true' - 'false' outputs: - contextPath: Azure.AppService.WebApp.id description: Fully qualified resource ID for the web app. type: String - contextPath: Azure.AppService.WebApp.name description: The name of the web app. type: String - contextPath: Azure.AppService.WebApp.type description: The resource type, e.g., Microsoft.Web/sites. type: String - contextPath: Azure.AppService.WebApp.location description: Geographic location of the web app. type: String - contextPath: Azure.AppService.WebApp.kind description: The kind of the app, e.g., app, functionapp, etc. type: String - contextPath: Azure.AppService.WebApp.tags description: Resource tags as key-value pairs. type: Unknown - contextPath: Azure.AppService.WebApp.identity.type description: The type of managed identity (SystemAssigned, UserAssigned, etc.). type: String - contextPath: Azure.AppService.WebApp.identity.principalId description: The principal ID of the system-assigned identity. type: String - contextPath: Azure.AppService.WebApp.identity.tenantId description: The tenant ID of the system-assigned identity. type: String - contextPath: Azure.AppService.WebApp.identity.userAssignedIdentities description: The list of user-assigned identities associated with the web app. type: Unknown - contextPath: Azure.AppService.WebApp.properties.state description: Current state of the web app (Running, Stopped, etc.). type: String - contextPath: Azure.AppService.WebApp.properties.enabled description: Whether the web app is enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.defaultHostName description: Default host name of the web app. type: String - contextPath: Azure.AppService.WebApp.properties.hostNames description: List of host names associated with the web app. type: String - contextPath: Azure.AppService.WebApp.properties.repositorySiteName description: Name of the repository site. type: String - contextPath: Azure.AppService.WebApp.properties.clientAffinityEnabled description: Whether client affinity is enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.clientCertEnabled description: Whether client certificates are enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.clientCertExclusionPaths description: Paths to exclude from client certificate authentication. type: String - contextPath: Azure.AppService.WebApp.properties.hostingEnvironment description: App Service Environment to use for the web app. type: String - contextPath: Azure.AppService.WebApp.properties.serverFarmId description: Resource ID of the associated App Service plan. type: String - contextPath: Azure.AppService.WebApp.properties.reserved description: Whether the web app is on a Linux plan. type: Boolean - contextPath: Azure.AppService.WebApp.properties.isXenon description: Whether the web app is hosted in Xenon. type: Boolean - contextPath: Azure.AppService.WebApp.properties.hyperV description: Whether Hyper-V is enabled for the web app. type: Boolean - contextPath: Azure.AppService.WebApp.properties.siteConfig description: Configuration of the app. type: Unknown - arguments: - name: resource_group_name type: String required: true description: The resource group name. - name: subscription_id type: String required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: registry_name type: String required: true description: The name of the container registry. - name: allow_exports description: Whether artifacts can be exported. auto: PREDEFINED predefined: - disabled - enabled - name: public_network_access type: String description: Whether public network access is allowed for the container registry. auto: PREDEFINED predefined: - disabled - enabled - name: anonymous_pull_enabled type: Boolean description: Whether to enable registry-wide pulls from unauthenticated clients. auto: PREDEFINED predefined: - 'true' - 'false' - name: authentication_as_arm_policy auto: PREDEFINED predefined: - disabled - enabled description: Whether the policy is enabled or not. name: azure-acr-update description: "Updates a container registry. Deprecated. Use the azure-cr-registry-update command instead. Required permissions: Microsoft.ContainerRegistry/registries/read, Microsoft.ContainerRegistry/registries/write." deprecated: true outputs: - contextPath: Azure.ACR.id description: The resource ID. type: String - contextPath: Azure.ACR.identity description: The identity of the container registry. type: Unknown - contextPath: Azure.ACR.location description: The location of the resource. type: String - contextPath: Azure.ACR.name description: The name of the resource. type: String - contextPath: Azure.ACR.properties.adminUserEnabled description: The value that indicates whether the admin user is enabled. type: Boolean - contextPath: Azure.ACR.properties.anonymousPullEnabled description: Enables registry-wide pull from unauthenticated clients. type: Boolean - contextPath: Azure.ACR.properties.creationDate description: The creation date of the container registry in ISO8601 format. type: String - contextPath: Azure.ACR.properties.dataEndpointEnabled description: Enable a single data endpoint per region for serving data. type: Boolean - contextPath: Azure.ACR.properties.dataEndpointHostNames description: List of host names that will serve data when dataEndpointEnabled is true. type: Unknown - contextPath: Azure.ACR.properties.encryption description: The encryption settings of container registry. type: Unknown - contextPath: Azure.ACR.properties.loginServer description: The URL that can be used to log into the container registry. type: String - contextPath: Azure.ACR.properties.networkRuleBypassOptions description: Whether to allow trusted Azure services to access a network restricted registry. type: String - contextPath: Azure.ACR.properties.networkRuleSet description: The network rule set for a container registry. type: Unknown - contextPath: Azure.ACR.properties.policies description: The policies for a container registry. type: Unknown - contextPath: Azure.ACR.properties.privateEndpointConnections description: List of private endpoint connections for a container registry. type: Unknown - contextPath: Azure.ACR.properties.provisioningState description: The provisioning state of the container registry at the time the operation was called. type: String - contextPath: Azure.ACR.properties.publicNetworkAccess description: Whether or not public network access is allowed for the container registry. type: String - contextPath: Azure.ACR.properties.status description: The status of the container registry at the time the operation was called. type: Unknown - contextPath: Azure.ACR.properties.zoneRedundancy description: Whether or not zone redundancy is enabled for this container registry. type: String - contextPath: Azure.ACR.sku description: The SKU of the container registry. type: Unknown - contextPath: Azure.ACR.systemData description: Metadata pertaining to creation and last modification of the resource. type: Unknown - contextPath: Azure.ACR.tags description: The tags of the resource. type: Unknown - contextPath: Azure.ACR.type description: The type of the resource. type: String - name: azure-cr-registry-update description: "Updates a container registry. Required permissions: Microsoft.ContainerRegistry/registries/read, Microsoft.ContainerRegistry/registries/write." arguments: - name: resource_group_name type: String required: true description: The resource group name. - name: subscription_id type: String required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: registry_name type: String required: true description: The name of the container registry. - name: allow_exports description: Whether artifacts can be exported. auto: PREDEFINED predefined: - disabled - enabled - name: public_network_access type: String description: Whether public network access is allowed for the container registry. auto: PREDEFINED predefined: - disabled - enabled - name: anonymous_pull_enabled type: Boolean description: Whether to enable registry-wide pulls from unauthenticated clients. auto: PREDEFINED predefined: - 'true' - 'false' - name: authentication_as_arm_policy auto: PREDEFINED predefined: - disabled - enabled description: Whether the policy is enabled or not. outputs: - contextPath: Azure.ContainerRegistry.Registries.id description: The resource ID. type: String - contextPath: Azure.ContainerRegistry.Registries.identity description: The identity of the container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.location description: The location of the resource. type: String - contextPath: Azure.ContainerRegistry.Registries.name description: The name of the resource. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.adminUserEnabled description: The value that indicates whether the admin user is enabled. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.anonymousPullEnabled description: Enables registry-wide pull from unauthenticated clients. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.creationDate description: The creation date of the container registry in ISO8601 format. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.dataEndpointEnabled description: Enable a single data endpoint per region for serving data. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.dataEndpointHostNames description: List of host names that will serve data when dataEndpointEnabled is true. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.encryption description: The encryption settings of container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.loginServer description: The URL that can be used to log into the container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.networkRuleBypassOptions description: Whether to allow trusted Azure services to access a network restricted registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.networkRuleSet description: The network rule set for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.policies description: The policies for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.privateEndpointConnections description: List of private endpoint connections for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.provisioningState description: The provisioning state of the container registry at the time the operation was called. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.publicNetworkAccess description: Whether or not public network access is allowed for the container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.status description: The status of the container registry at the time the operation was called. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.zoneRedundancy description: Whether or not zone redundancy is enabled for this container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.sku description: The SKU of the container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.systemData description: Metadata pertaining to creation and last modification of the resource. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.tags description: The tags of the resource. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.type description: The type of the resource. type: String - arguments: - name: resource_group_name type: String required: true description: The resource group name. - name: subscription_id type: String required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. - name: server_name type: String required: true description: Name of the PostgreSQL server. - name: ssl_enforcement type: String description: Whether to enable SSL authentication when connecting to the server. predefined: - Disabled - Enabled name: azure-postgres-server-update description: "Updates an existing server. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/read, Microsoft.DBforPostgreSQL/servers/write." outputs: [] # No outputs are returned in the response. deprecated: true - arguments: - description: Key Vault name. name: vault_name required: true - name: subscription_id required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. type: String - name: resource_group_name required: true description: The name of the resource group. type: String - name: enable_purge_protection description: Whether protection against purge is enabled for this vault. This functionality is always enabled, it cannot be disabled. type: bool auto: PREDEFINED predefined: - 'true' - name: enable_soft_delete description: Whether soft delete is enabled for this key vault. This functionality is always enabled, it cannot be disabled. type: bool auto: PREDEFINED predefined: - 'true' description: "Updates a key vault in a specific subscription. Deprecated. Use the azure-keyvault-vault-update command instead. Required permissions: Microsoft.KeyVault/vaults/read, Microsoft.KeyVault/vaults/write." name: azure-key-vault-update deprecated: true outputs: - contextPath: Azure.KeyVault.id description: Resource ID. type: String - contextPath: Azure.KeyVault.name description: Key Vault name. type: String - contextPath: Azure.KeyVault.type description: Resource type in Azure. type: String - contextPath: Azure.KeyVault.location description: Key Vault location. type: String - contextPath: Azure.KeyVault.tags description: Resource tags. - contextPath: Azure.KeyVault.properties.sku.family description: SKU family name. type: String - contextPath: Azure.KeyVault.properties.sku.name description: SKU name to specify whether the key vault is a standard vault or a premium vault. type: String - contextPath: Azure.KeyVault.properties.tenantId description: The Entra ID tenant ID that should be used for authenticating requests to the key vault. type: String - contextPath: Azure.KeyVault.properties.accessPolicies description: An array of 0 to 16 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. - contextPath: Azure.KeyVault.properties.accessPolicies.tenantId description: The Entra ID tenant ID that should be used for authenticating requests to the key vault. type: String - contextPath: Azure.KeyVault.properties.accessPolicies.objectId description: The object ID of a user, service principal or security group in the Entra ID tenant for the vault. The object ID must be unique for the list of access policies. type: String - contextPath: Azure.KeyVault.properties.accessPolicies.permissions description: Permissions the identity has for keys, secrets and certificates. - contextPath: Azure.KeyVault.properties.enabledForDeployment description: Whether Azure Virtual Machines are allowed to retrieve certificates stored as secrets from the key vault. type: Boolean - contextPath: Azure.KeyVault.properties.enabledForDiskEncryption description: Whether Azure Disk Encryption is allowed to retrieve secrets from the vault and unwrap keys. type: Boolean - contextPath: Azure.KeyVault.properties.enabledForTemplateDeployment description: Whether Azure Resource Manager is allowed to retrieve secrets from the key vault. type: Boolean - contextPath: Azure.KeyVault.properties.enableSoftDelete description: Whether soft delete is enabled for this key vault. type: Boolean - contextPath: Azure.KeyVault.properties.enablePurgeProtection description: Whether purge protection is enabled for this key vault. type: Boolean - contextPath: Azure.KeyVault.properties.enableRbacAuthorization description: Whether Azure Key Vault uses Role Based Access Control (RBAC) for authorization of data actions. type: Boolean - contextPath: Azure.KeyVault.properties.vaultUri description: The URI of the vault for performing operations on keys and secrets. type: String - contextPath: Azure.KeyVault.properties.provisioningState description: The current provisioning state. type: String - contextPath: Azure.KeyVault.properties.privateEndpointConnections description: List of private endpoint connections associated with the key vault. - contextPath: Azure.KeyVault.properties.networkAcls description: Rules governing the accessibility of the key vault from specific network locations. - contextPath: Azure.KeyVault.properties.networkAcls.bypass description: What traffic can bypass network rules. type: String - contextPath: Azure.KeyVault.properties.networkAcls.defaultAction description: The default action when no rules match from ipRules and virtualNetworkRules. type: String - contextPath: Azure.KeyVault.properties.networkAcls.ipRules description: The list of IP address rules. - contextPath: Azure.KeyVault.properties.networkAcls.virtualNetworkRules description: The list of virtual network rules. - name: azure-keyvault-vault-update description: "Updates a key vault in the specified subscription. The required permissions are: Microsoft.KeyVault/vaults/read, Microsoft.KeyVault/vaults/write." arguments: - description: Key Vault name. name: vault_name required: true - name: subscription_id required: false required:platform: true description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. type: String - name: resource_group_name required: true description: The name of the resource group. type: String - name: enable_purge_protection description: Whether protection against purge is enabled for this vault. This functionality is always enabled, it cannot be disabled. auto: PREDEFINED predefined: - 'true' - 'false' - name: enable_soft_delete description: Whether soft delete is enabled for this key vault. This functionality is always enabled, it cannot be disabled. auto: PREDEFINED predefined: - 'true' - 'false' outputs: - contextPath: Azure.KeyVault.Vault.id description: Resource ID. type: String - contextPath: Azure.KeyVault.Vault.name description: Key Vault name. type: String - contextPath: Azure.KeyVault.Vault.type description: Resource type in Azure. type: String - contextPath: Azure.KeyVault.Vault.location description: Key Vault location. type: String - contextPath: Azure.KeyVault.Vault.tags description: Resource tags. type: Unknown - contextPath: Azure.KeyVault.Vault.properties.sku description: SKU details. type: String - contextPath: Azure.KeyVault.Vault.properties.tenantId description: The Entra ID tenant ID that should be used for authenticating requests to the key vault. type: String - contextPath: Azure.KeyVault.Vault.properties.accessPolicies description: An array of 0 to 1024 identities that have access to the key vault. All identities in the array must use the same tenant ID as the key vault's tenant ID. type: Unknown - contextPath: Azure.KeyVault.Vault.properties.enabledForDeployment description: Whether Azure Virtual Machines are allowed to retrieve certificates stored as secrets from the key vault. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enabledForDiskEncryption description: Whether Azure Disk Encryption is allowed to retrieve secrets from the vault and unwrap keys. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enabledForTemplateDeployment description: Whether Azure Resource Manager is allowed to retrieve secrets from the key vault. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enableSoftDelete description: Whether soft delete is enabled for this key vault. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enablePurgeProtection description: Whether purge protection is enabled for this key vault. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enableRbacAuthorization description: Whether Azure Key Vault uses Role Based Access Control, RBAC, for authorization of data actions. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.vaultUri description: The URI of the vault for performing operations on keys and secrets. type: String - contextPath: Azure.KeyVault.Vault.properties.provisioningState description: The current provisioning state. type: String - contextPath: Azure.KeyVault.Vault.properties.privateEndpointConnections description: List of private endpoint connections associated with the key vault. type: Unknown - contextPath: Azure.KeyVault.Vault.properties.networkAcls description: Rules governing the accessibility of the key vault from specific network locations. type: Unknown - arguments: - description: Server name. name: server_name required: true - description: Database name. name: db_name required: true - auto: PREDEFINED description: 'Whether the alert is sent to the account administrators. Possible values: "true" and "false".' name: email_account_admins_enabled predefined: - 'true' - 'false' - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The name of the resource group. name: resource_group_name required: true description: "Updates the database's threat detection policy. Deprecated. Use the azure-sqldb-security-alert-policy-update command instead. Required permissions: Microsoft.Sql/servers/databases/securityAlertPolicies/read, Microsoft.Sql/servers/databases/securityAlertPolicies/write." name: azure-sql-db-threat-policy-update deprecated: true outputs: - contextPath: Azure.SqlDBThreatPolicy.kind description: Kind of threat policy. type: String - contextPath: Azure.SqlDBThreatPolicy.location description: Threat policy location. type: String - contextPath: Azure.SqlDBThreatPolicy.id description: Threat policy ID. type: String - contextPath: Azure.SqlDBThreatPolicy.name description: Threat policy name. type: String - contextPath: Azure.SqlDBThreatPolicy.type description: Threat policy type. type: String - contextPath: Azure.SqlDBThreatPolicy.state description: Threat policy state. type: String - contextPath: Azure.SqlDBThreatPolicy.creationTime description: Threat policy creation time. type: String - contextPath: Azure.SqlDBThreatPolicy.retentionDays description: Number of days to keep in the Threat Detection audit logs. type: Number - contextPath: Azure.SqlDBThreatPolicy.storageAccountAccessKey description: The identifier key of the Threat Detection audit storage account. type: String - contextPath: Azure.SqlDBThreatPolicy.storageEndpoint description: Threat Detection audit storage account. type: String - contextPath: Azure.SqlDBThreatPolicy.emailAccountAdmins description: Email accounts administrators who the alert is sent to. type: Boolean - contextPath: Azure.SqlDBThreatPolicy.emailAddresses description: List of email addresses to which the alert is sent. type: String - contextPath: Azure.SqlDBThreatPolicy.disabledAlerts description: List of alerts that are disabled, or an empty string if no alerts are disabled. type: String - contextPath: Azure.SqlDBThreatPolicy.useServerDefault description: Whether to use the default server policy. - contextPath: Azure.SqlDBThreatPolicy.databaseName description: The name of the database that the threat policy is related to. type: String - contextPath: Azure.SqlDBThreatPolicy.serverName description: The name of server that the threat policy is related to. type: String - name: azure-sqldb-security-alert-policy-update description: "Updates a database's security alert policy. The required permissions are: Microsoft.Sql/servers/databases/securityAlertPolicies/read, Microsoft.Sql/servers/databases/securityAlertPolicies/write." arguments: - description: Server name. name: server_name required: true - description: Database name. name: db_name required: true - auto: PREDEFINED description: Whether the alert is sent to the account administrators. name: email_account_admins_enabled predefined: - 'true' - 'false' - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The name of the resource group. name: resource_group_name required: true outputs: - contextPath: Azure.SqlDB.SecurityAlertPolicies.id description: Threat policy ID. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.name description: Threat policy name. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.properties.state description: Specifies the state of the policy, whether it is enabled or disabled or a policy has not been applied yet on the specific database. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.properties.creationTime description: Specifies the UTC creation time of the policy. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.properties.retentionDays description: Specifies the number of days to keep in the Threat Detection audit logs. type: Number - contextPath: Azure.SqlDB.SecurityAlertPolicies.properties.storageAccountAccessKey description: Specifies the identifier key of the Threat Detection audit storage account. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.properties.storageEndpoint description: Specifies the blob storage endpoint. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.properties.emailAccountAdmins description: Specifies that the alert is sent to the account administrators. type: Boolean - contextPath: Azure.SqlDB.SecurityAlertPolicies.properties.emailAddresses description: Specifies an array of e-mail addresses to which the alert is sent. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.properties.disabledAlerts description: Specifies an array of alerts that are disabled. type: Unknown - contextPath: Azure.SqlDB.SecurityAlertPolicies.systemData.createdAt description: The timestamp of resource creation (UTC). type: Unknown - contextPath: Azure.SqlDB.SecurityAlertPolicies.systemData.createdBy description: The identity that created the resource. type: Unknown - contextPath: Azure.SqlDB.SecurityAlertPolicies.systemData.createdByType description: The type of identity that created the resource. type: Unknown - contextPath: Azure.SqlDB.SecurityAlertPolicies.systemData.lastModifiedAt description: The timestamp of resource last modification (UTC). type: Unknown - contextPath: Azure.SqlDB.SecurityAlertPolicies.systemData.lastModifiedBy description: The identity that last modified the resource. type: Unknown - contextPath: Azure.SqlDB.SecurityAlertPolicies.systemData.lastModifiedByType description: The type of identity that last modified the resource. type: Unknown - arguments: - description: Server name. name: server_name required: true - description: Database name. name: db_name required: true - auto: PREDEFINED description: The state of the transparent data encryption. name: state predefined: - Disabled - Enabled required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The name of the resource group. name: resource_group_name required: true description: "Updates a logical database's transparent data encryption configuration. Required permissions: Microsoft.Sql/servers/databases/transparentDataEncryption/read, Microsoft.Sql/servers/databases/transparentDataEncryption/write." name: azure-sql-db-transparent-data-encryption-set outputs: [] # has no outputs for this command from response - arguments: - description: Cosmos DB database account name. name: account_name required: true - auto: PREDEFINED description: Whether to disable write operations on metadata resources via account keys. name: disable_key_based_metadata_write_access predefined: - 'true' - 'false' type: bool - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The name of the resource group. required: true name: resource_group_name description: "Updates the properties of an existing Azure Cosmos DB database account. Deprecated. Use the azure-cosmosdb-db-account-update command instead. Required permissions: Microsoft.DocumentDB/databaseAccounts/read, Microsoft.DocumentDB/databaseAccounts/write." name: azure-cosmos-db-update deprecated: true outputs: - contextPath: Azure.CosmosDB.id description: The unique resource identifier of the ARM resource. type: String - contextPath: Azure.CosmosDB.name description: The name of the ARM resource. type: String - contextPath: Azure.CosmosDB.location description: The location of the resource group to which the resource belongs. type: String - contextPath: Azure.CosmosDB.kind description: The database account type. type: String - contextPath: Azure.CosmosDB.identity.type description: The type of identity used for the resource. type: String - contextPath: Azure.CosmosDB.identity.userAssignedIdentities description: The list of user identities associated with the resource. type: Dictionary - contextPath: Azure.CosmosDB.properties.analyticalStorageConfiguration.schemaType description: The analytical storage schema types. type: String - contextPath: Azure.CosmosDB.properties.apiProperties description: API specific properties. type: Dictionary - contextPath: Azure.CosmosDB.properties.backupPolicy description: The policy for taking backups on an account. - contextPath: Azure.CosmosDB.properties.capabilities description: List of Cosmos DB capabilities for the account. type: List - contextPath: Azure.CosmosDB.properties.capacity description: Properties related to capacity enforcement on an account. type: Integer - contextPath: Azure.CosmosDB.properties.connectorOffer description: The Cassandra connector offer type for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.properties.consistencyPolicy description: The consistency policy for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.properties.cors description: The CORS policy for the Cosmos DB database account. type: List - contextPath: Azure.CosmosDB.properties.createMode description: The mode of account creation. type: String - contextPath: Azure.CosmosDB.properties.customerManagedKeyStatus description: Status of the Customer Managed Key feature on the account. type: String - contextPath: Azure.CosmosDB.properties.databaseAccountOfferType description: The offer type for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.properties.defaultIdentity description: The default identity for accessing key vault used in features like customer managed keys. type: String - contextPath: Azure.CosmosDB.properties.disableKeyBasedMetadataWriteAccess description: Whether write operations on metadata resources via account keys is disabled. type: Boolean - contextPath: Azure.CosmosDB.properties.disableLocalAuth description: Whether local authentication is disabled. type: Boolean - contextPath: Azure.CosmosDB.properties.documentEndpoint description: The connection endpoint for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.properties.enableAnalyticalStorage description: Whether storage analytics are enabled. type: Boolean - contextPath: Azure.CosmosDB.properties.enableAutomaticFailover description: Enables automatic failover of the write region. type: Boolean - contextPath: Azure.CosmosDB.properties.enableBurstCapacity description: Whether Burst Capacity is enabled. type: Boolean - contextPath: Azure.CosmosDB.properties.enableCassandraConnector description: Enables the Cassandra connector on the Cosmos DB account. type: Boolean - contextPath: Azure.CosmosDB.properties.enableFreeTier description: Whether Free Tier is enabled. type: Boolean - contextPath: Azure.CosmosDB.properties.enableMultipleWriteLocations description: Enables the account to write in multiple locations. type: Boolean - contextPath: Azure.CosmosDB.properties.enablePartitionMerge description: Whether Partition Merge is enabled. type: Boolean - contextPath: Azure.CosmosDB.properties.enablePerRegionPerPartitionAutoscale description: Whether PerRegionPerPartitionAutoscale is enabled. type: Boolean - contextPath: Azure.CosmosDB.properties.failoverPolicies description: An array that contains the regions ordered by their failover priorities. type: List - contextPath: Azure.CosmosDB.properties.instanceId description: A unique identifier assigned to the database account. type: String - contextPath: Azure.CosmosDB.properties.ipRules description: List of IP rules. type: List - contextPath: Azure.CosmosDB.properties.isVirtualNetworkFilterEnabled description: Whether the Virtual Network ACL rules are enabled. type: Boolean - contextPath: Azure.CosmosDB.properties.keyVaultKeyUri description: The URI of the key vault. type: String - contextPath: Azure.CosmosDB.properties.keysMetadata description: Metadata related to each access key for the given Cosmos DB database account. type: Dictionary - contextPath: Azure.CosmosDB.properties.locations description: An array that contains all of the locations enabled for the Cosmos DB account. type: List - contextPath: Azure.CosmosDB.properties.minimalTlsVersion description: The minimum allowed TLS version. type: String - contextPath: Azure.CosmosDB.properties.networkAclBypass description: Which services are allowed to bypass firewall checks. type: String - contextPath: Azure.CosmosDB.properties.networkAclBypassResourceIds description: List of resource IDs that are allowed to bypass firewall checks. type: List - contextPath: Azure.CosmosDB.properties.privateEndpointConnections description: List of private endpoint connections. type: List - contextPath: Azure.CosmosDB.properties.provisioningState description: The status of the Cosmos DB account at the time the operation was called. type: String - contextPath: Azure.CosmosDB.properties.readLocations description: An array that contains the read locations enabled for the Cosmos DB account. type: List - contextPath: Azure.CosmosDB.properties.virtualNetworkRules description: List of Virtual Network ACL rules. type: List - contextPath: Azure.CosmosDB.properties.writeLocations description: An array that contains the write locations enabled for the Cosmos DB account. type: List - name: azure-cosmosdb-db-account-update description: "Updates the properties of an existing Azure Cosmos DB database account. The required permissions are: Microsoft.DocumentDB/databaseAccounts/read, Microsoft.DocumentDB/databaseAccounts/write." arguments: - description: Cosmos DB database account name. name: account_name required: true - auto: PREDEFINED description: Whether to disable write operations on metadata resources via account keys. name: disable_key_based_metadata_write_access predefined: - 'true' - 'false' - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The name of the resource group. required: true name: resource_group_name outputs: - contextPath: Azure.CosmosDB.DBAccounts.id description: The unique resource identifier of the ARM resource. type: String - contextPath: Azure.CosmosDB.DBAccounts.name description: The name of the ARM resource. type: String - contextPath: Azure.CosmosDB.DBAccounts.location description: The location of the resource group to which the resource belongs. type: String - contextPath: Azure.CosmosDB.DBAccounts.kind description: The database account type. type: String - contextPath: Azure.CosmosDB.DBAccounts.identity.type description: The type of identity used for the resource. type: String - contextPath: Azure.CosmosDB.DBAccounts.identity.userAssignedIdentities description: The list of user identities associated with the resource. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.analyticalStorageConfiguration description: Analytical storage specific properties. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.apiProperties description: API specific properties. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.backupPolicy description: The policy for taking backups on an account. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.capabilities description: List of Cosmos DB capabilities for the account. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.capacity description: Properties related to capacity enforcement on an account. type: Number - contextPath: Azure.CosmosDB.DBAccounts.properties.connectorOffer description: The Cassandra connector offer type for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.consistencyPolicy description: The consistency policy for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.cors description: The CORS policy for the Cosmos DB database account. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.createMode description: The mode of account creation. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.customerManagedKeyStatus description: Status of the Customer Managed Key feature on the account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.databaseAccountOfferType description: The offer type for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.defaultIdentity description: The default identity for accessing key vault used in features like customer managed keys. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.disableKeyBasedMetadataWriteAccess description: Whether write operations on metadata resources via account keys is disabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.disableLocalAuth description: Whether local authentication is disabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.documentEndpoint description: The connection endpoint for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.enableAnalyticalStorage description: Whether storage analytics are enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableAutomaticFailover description: Enables automatic failover of the write region. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableBurstCapacity description: Whether Burst Capacity is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableCassandraConnector description: Enables the Cassandra connector on the Cosmos DB account. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableFreeTier description: Whether Free Tier is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableMultipleWriteLocations description: Enables the account to write in multiple locations. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enablePartitionMerge description: Whether Partition Merge is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enablePerRegionPerPartitionAutoscale description: Whether PerRegionPerPartitionAutoscale is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.failoverPolicies description: An array that contains the regions ordered by their failover priorities. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.instanceId description: A unique identifier assigned to the database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.ipRules description: List of IP rules. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.isVirtualNetworkFilterEnabled description: Whether the Virtual Network ACL rules are enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.keyVaultKeyUri description: The URI of the key vault. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.keysMetadata description: Metadata related to each access key for the given Cosmos DB database account. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.locations description: An array that contains all of the locations enabled for the Cosmos DB account. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.minimalTlsVersion description: The minimum allowed TLS version. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.networkAclBypass description: Which services are allowed to bypass firewall checks. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.networkAclBypassResourceIds description: List of resource IDs that are allowed to bypass firewall checks. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.privateEndpointConnections description: List of private endpoint connections. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.provisioningState description: The status of the Cosmos DB account at the time the operation was called. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.readLocations description: An array that contains the read locations enabled for the Cosmos DB account. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.virtualNetworkRules description: List of Virtual Network ACL rules. type: Unknown - contextPath: Azure.CosmosDB.DBAccounts.properties.writeLocations description: An array that contains the write locations enabled for the Cosmos DB account. type: Unknown - name: azure-nsg-security-groups-list description: "Lists all network security groups. Deprecated. Use the azure-vn-security-groups-list command instead. Required permission: Microsoft.Network/networkSecurityGroups/read." deprecated: true outputs: - contextPath: Azure.NSGSecurityGroup.name description: The security group's name. type: String - contextPath: Azure.NSGSecurityGroup.id description: The security group's ID. type: String - contextPath: Azure.NSGSecurityGroup.type description: The security group's type. type: String - contextPath: Azure.NSGSecurityGroup.location description: The security group's location. type: String - contextPath: Azure.NSGSecurityGroup.etag description: The security group's ETag. type: String - contextPath: Azure.NSGSecurityGroup.tags description: The security group's tags. type: String - contextPath: Azure.NSGSecurityGroup.properties.defaultSecurityRules description: The default security rules. type: List - contextPath: Azure.NSGSecurityGroup.properties.networkInterfaces description: The network interfaces. type: List - contextPath: Azure.NSGSecurityGroup.properties.provisioningState description: The provisioning state. type: String - contextPath: Azure.NSGSecurityGroup.properties.resourceGuid description: The resource GUID. type: String - contextPath: Azure.NSGSecurityGroup.properties.SecurityRules description: The security rules. type: List arguments: - name: subscription_id description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. type: String required: false required:platform: true - name: resource_group_name description: "The resource group name." type: String required: true - name: azure-vn-security-group-create description: "Creates a network security group. Required Permissions: Microsoft.Network/networkSecurityGroups/write." arguments: - name: subscription_id description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true - name: resource_group_name description: The resource group name. required: true - name: security_group_name description: The name of the network security group. required: true - name: location description: The location of the network security group. required: true auto: PREDEFINED predefined: - australiacentral - australiacentral2 - australiaeast - australiasoutheast - brazilsouth - brazilsoutheast - brazilus - canadacentral - canadaeast - centralindia - centralus - centraluseuap - eastasia - eastus - eastus2 - eastus2euap - francecentral - francesouth - germanynorth - germanywestcentral - israelcentral - italynorth - japaneast - japanwest - jioindiacentral - jioindiawest - koreacentral - koreasouth - malaysiasouth - mexicocentral - newzealandnorth - northcentralus - northeurope - norwayeast - norwaywest - polandcentral - qatarcentral - southafricanorth - southafricawest - southcentralus - southeastasia - southindia - spaincentral - swedencentral - swedensouth - switzerlandnorth - switzerlandwest - uaecentral - uaenorth - uksouth - ukwest - westcentralus - westeurope - westindia - westus - westus2 - westus3 - australiaeastfoundational - austriaeast - chilecentral - eastusslv - indonesiacentral - israelnorthwest - malaysiawest - southcentralus2 - southeastus - southeastus3 - southwestus - usgovarizona - usgovtexas - usgovvirginia outputs: - contextPath: Azure.VirtualNetworks.SecurityGroups.name description: The security group's name. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.id description: The security group's ID. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.etag description: The security group's ETag. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.type description: The resource type. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.location description: The resource location. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.provisioningState description: The provisioning state of the network security group resource. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.resourceGuid description: The resource GUID property of the network security group resource. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.flushConnection description: When enabled, flows created from Network Security Group connections will be re-evaluated when rules are updates. Initial enablement will trigger re-evaluation. type: Boolean - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.securityRules description: A collection of security rules of the network security group. type: Unknown - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.defaultSecurityRules description: A collection of the default security rules of the network security group. type: Unknown - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.flowLogs description: A collection of references to flow log resources. type: Unknown - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.networkInterfaces description: A collection of references to network interfaces. type: Unknown - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.subnets description: A collection of references to subnets. type: Unknown - name: azure-vn-security-groups-list description: "List all network security groups. Required permissions: Microsoft.Network/networkSecurityGroups/read." arguments: - name: subscription_id description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. type: String required: false required:platform: true - name: resource_group_name description: "The resource group name." type: String required: true outputs: - contextPath: Azure.VirtualNetworks.SecurityGroups.name description: The security group's name. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.id description: The security group's ID. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.type description: The security group's type. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.location description: The security group's location. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.etag description: The security group's ETag. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.tags description: The security group's tags. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.defaultSecurityRules description: The default security rules. type: List - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.networkInterfaces description: The network interfaces. type: List - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.provisioningState description: The provisioning state. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.resourceGuid description: The resource GUID. type: String - contextPath: Azure.VirtualNetworks.SecurityGroups.properties.SecurityRules description: The security rules. type: List - name: azure-nsg-security-rule-get description: "Retrieves a specific rule. Deprecated. Use the azure-vn-security-rule-get command instead. Required permission: Microsoft.Network/networkSecurityGroups/securityRules/read." deprecated: true outputs: - contextPath: Azure.NSGRule.name description: The rule's name. type: String - contextPath: Azure.NSGRule.id description: The rule's ID. type: String - contextPath: Azure.NSGRule.location description: The rule's location. type: String - contextPath: Azure.NSGRule.etag description: The rule's ETag. type: String - contextPath: Azure.NSGRule.type description: The rule's type. type: String - contextPath: Azure.NSGRule.properties.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.NSGRule.properties.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.NSGRule.properties.sourcePortRange description: For a single port, the source port or a range of ports. For multiple ports, `sourcePortRanges` is used instead. type: String - contextPath: Azure.NSGRule.properties.sourcePortRanges description: For multiple ports, a list of ports. For a single port, `sourcePortRange` is used instead. type: String - contextPath: Azure.NSGRule.properties.destinationPortRange description: For a single port, the destination port or range of ports. For multiple ports, `destinationPortRanges` is used instead. type: String - contextPath: Azure.NSGRule.properties.destinationPortRanges description: For multiple ports, a list of destination ports. For a single port, `destinationPortRange` is used instead. type: String - contextPath: Azure.NSGRule.properties.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.NSGRule.properties.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.NSGRule.properties.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.NSGRule.properties.priority description: The rule’s priority, ranging from 100 to 4096. type: Number - contextPath: Azure.NSGRule.properties.direction description: The rule's direction, which can be "Inbound" or "Outbound". type: String arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: Resource group name. name: resource_group_name type: String required: true - description: The name of the security group. name: security_group_name type: String required: true - description: The name of the rule to get. name: security_rule_name required: true - name: azure-vn-security-rule-get description: "Get a specific rule. Required permissions: Microsoft.Network/networkSecurityGroups/securityRules/read." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: Resource group name. name: resource_group_name type: String required: true - description: The name of the security group. name: security_group_name type: String required: true - description: The name of the rule to get. name: security_rule_name required: true outputs: - contextPath: Azure.VirtualNetworks.SecurityRules.name description: The rule's name. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.id description: The rule's ID. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.location description: The rule's location. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.etag description: The rule's ETag. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.type description: The rule's type. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourcePortRange description: For a single port, the source port or a range of ports. For multiple ports, sourcePortRanges is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourcePortRanges description: For multiple ports, a list of ports. For a single port, sourcePortRange is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationPortRange description: For a single port, the destination port or range of ports. For multiple ports, destinationPortRanges is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationPortRanges description: For multiple ports, a list of destination ports. For a single port, destinationPortRange is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.priority description: The rule’s priority, ranging from 100 to 4096. type: Number - contextPath: Azure.VirtualNetworks.SecurityRules.properties.direction description: The rule's direction, which can be "Inbound" or "Outbound". type: String - name: azure-nsg-security-rules-list description: "Retrieves all security rules in a network security group. Deprecated. Use the azure-vn-security-rules-list command instead. Required permission: Microsoft.Network/networkSecurityGroups/securityRules/read." deprecated: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: Resource group name. name: resource_group_name type: String required: true - description: The name of the network security group. name: network_security_group_name type: String required: true outputs: - contextPath: Azure.NSGRule.name description: The rule's name. type: String - contextPath: Azure.NSGRule.id description: The rule's ID. type: String - contextPath: Azure.NSGRule.properties.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.NSGRule.properties.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.NSGRule.properties.sourcePortRange description: For a single port, the source port or a range of ports. type: String - contextPath: Azure.NSGRule.properties.destinationPortRange description: For a single port, the destination port or range of ports. type: String - contextPath: Azure.NSGRule.properties.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.NSGRule.properties.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.NSGRule.properties.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.NSGRule.properties.priority description: The rule’s priority, ranging from 100 to 4096. type: Number - contextPath: Azure.NSGRule.properties.direction description: The rule's direction, which can be "Inbound" or "Outbound". type: String - name: azure-vn-security-rules-list description: "Gets all security rules in a network security group. Required permissions: Microsoft.Network/networkSecurityGroups/securityRules/read." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: Resource group name. name: resource_group_name type: String required: true - description: The name of the network security group. name: network_security_group_name type: String required: true outputs: - contextPath: Azure.VirtualNetworks.SecurityRules.name description: The rule's name. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.id description: The rule's ID. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourcePortRange description: For a single port, the source port or a range of ports. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationPortRange description: For a single port, the destination port or range of ports. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.priority description: The rule’s priority, ranging from 100 to 4096. type: Number - contextPath: Azure.VirtualNetworks.SecurityRules.properties.direction description: The rule's direction, which can be "Inbound" or "Outbound". type: String - name: azure-nsg-security-rule-create description: "Creates a security rule. Deprecated. Use the azure-vn-security-rule-create command instead. Required permissions: Microsoft.Network/networkSecurityGroups/securityRules/read, Microsoft.Network/networkSecurityGroups/securityRules/write." deprecated: true outputs: - contextPath: Azure.NSGRule.name description: The rule's name. type: String - contextPath: Azure.NSGRule.id description: The rule's ID. type: String - contextPath: Azure.NSGRule.etag description: The rule's ETag. type: String - contextPath: Azure.NSGRule.type description: The rule's type. type: String - contextPath: Azure.NSGRule.properties.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.NSGRule.properties.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.NSGRule.properties.sourcePortRange description: For a single port, the source port or a range of ports. For multiple ports, `sourcePortRanges` is used instead. type: String - contextPath: Azure.NSGRule.properties.sourcePortRanges description: For multiple ports, a list of ports. For a single port, `sourcePortRange` is used instead. type: String - contextPath: Azure.NSGRule.properties.destinationPortRange description: For a single port, the destination port or range of ports. For multiple ports, `destinationPortRanges` is used instead. type: String - contextPath: Azure.NSGRule.properties.destinationPortRanges description: For multiple ports, a list of destination ports. For a single port, `destinationPortRange` is used instead. type: String - contextPath: Azure.NSGRule.properties.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.NSGRule.properties.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.NSGRule.properties.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.NSGRule.properties.priority description: The rule’s priority, ranging from 100 to 4096. type: Number - contextPath: Azure.NSGRule.properties.direction description: The rule's direction, which can be "Inbound" or "Outbound". type: String arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: Resource group name. name: resource_group_name type: String required: true - description: The name of the security group. name: security_group_name required: true type: String - description: The name of the rule to create. name: security_rule_name required: true type: String - auto: PREDEFINED description: 'The direction of the rule. Possible values are: "Inbound" and "Outbound".' name: direction predefined: - Inbound - Outbound required: true - description: 'Whether to allow the traffic. Possible values are: "Allow" and "Deny".' name: action auto: PREDEFINED predefined: - Allow - Deny defaultValue: Allow type: String - description: 'The protocol on which to apply the rule. Possible values are: "Any", "TCP", "UDP" and "ICMP".' name: protocol auto: PREDEFINED predefined: - Any - TCP - UDP - ICMP defaultValue: Any type: String - description: The source IP address range from which incoming traffic is allowed or denied by this rule. Possible values are "Any", an IP address range, an application security group, or a default tag. Default is "Any". name: source defaultValue: Any type: String - description: The priority of the rule, with a value between 100 and 4096. Each rule in the collection must have a unique priority number. Lower numbers indicate higher priority. name: priority required: true type: Number - description: The source ports from which traffic is allowed or denied by this rule. Provide a single port, such as 80; a port range, such as 1024-65535; or a comma-separated list of single ports and/or port ranges, such as 80,1024-65535. Use an asterisk (*) to allow traffic on any port. Default is "*". name: source_ports defaultValue: '*' type: String - description: The destination IP address range for outgoing traffic that is allowed or denied by this rule. The destination filter can be "Any", an IP address range, an application security group, or a default tag. name: destination defaultValue: Any type: String - description: The destination ports from which traffic is allowed or denied by this rule. Provide a single port, such as 80; a port range, such as 1024-65535; or a comma-separated list of single ports and/or port ranges, such as 80,1024-65535. Use an asterisk (*) to allow traffic on any port. name: destination_ports defaultValue: '*' type: String - description: A description to add to the rule. name: description - name: azure-vn-security-rule-create description: "Create a security rule. Required permissions: Microsoft.Network/networkSecurityGroups/securityRules/read, Microsoft.Network/networkSecurityGroups/securityRules/write." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: Resource group name. name: resource_group_name type: String required: true - description: The name of the security group. name: security_group_name required: true type: String - description: The name of the rule to create. name: security_rule_name required: true type: String - auto: PREDEFINED description: The direction of the rule. name: direction predefined: - Inbound - Outbound required: true - description: Whether to allow the traffic. name: access auto: PREDEFINED predefined: - Allow - Deny defaultValue: Allow type: String - description: The protocol on which to apply the rule. name: protocol auto: PREDEFINED predefined: - Any - TCP - UDP - ICMP defaultValue: Any type: String - description: The source IP address range from which incoming traffic is allowed or denied by this rule. Possible values are "Any", an IP address range, an application security group, or a default tag. name: source defaultValue: Any type: String - description: The priority of the rule, with a value between 100 and 4096. Each rule in the collection must have a unique priority number. Lower numbers indicate higher priority. name: priority required: true type: Number - description: The source ports from which traffic is allowed or denied by this rule. Provide a single port, such as 80; a port range, such as 1024-65535; or a comma-separated list of single ports and/or port ranges, such as 80,1024-65535. Use an asterisk (*) to allow traffic on any port. name: source_ports defaultValue: '*' type: String - description: The destination IP address range for outgoing traffic that is allowed or denied by this rule. The destination filter can be "Any", an IP address range, an application security group, or a default tag. name: destination defaultValue: Any type: String - description: The destination ports from which traffic is allowed or denied by this rule. Provide a single port, such as 80; a port range, such as 1024-65535; or a comma-separated list of single ports and/or port ranges, such as 80,1024-65535. Use an asterisk (*) to allow traffic on any port. name: destination_ports defaultValue: '*' type: String - description: A description to add to the rule. name: description outputs: - contextPath: Azure.VirtualNetworks.SecurityRules.name description: The rule's name. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.id description: The rule's ID. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.etag description: The rule's ETag. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.type description: The rule's type. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourcePortRange description: For a single port, the source port or a range of ports. For multiple ports, sourcePortRanges is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourcePortRanges description: For multiple ports, a list of ports. For a single port, sourcePortRange is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationPortRange description: For a single port, the destination port or range of ports. For multiple ports, destinationPortRanges is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationPortRanges description: For multiple ports, a list of destination ports. For a single port, destinationPortRange is used instead. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.VirtualNetworks.SecurityRules.properties.priority description: The rule’s priority, ranging from 100 to 4096. type: Number - contextPath: Azure.VirtualNetworks.SecurityRules.properties.direction description: The rule's direction, which can be "Inbound" or "Outbound". type: String - description: Delete a security rule. The command is deprecated, please use azure-vn-security-rule-delete. name: azure-nsg-security-rule-delete deprecated: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: Resource group name. name: resource_group_name type: String required: true - description: The name of the security group. name: security_group_name required: true - description: The name of the rule to delete. name: security_rule_name required: true - description: "Delete a security rule. Required permissions: Microsoft.Network/networkSecurityGroups/securityRules/delete." name: azure-vn-security-rule-delete arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - description: Resource group name. name: resource_group_name type: String required: true - description: The name of the security group. name: security_group_name required: true - description: The name of the rule to delete. name: security_rule_name required: true - description: Gets all resource groups for a subscription. The command is deprecated, please use azure-rm-resource-groups-list. name: azure-nsg-resource-group-list deprecated: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - name: limit description: Limit on the number of resource groups to return. defaultValue: 50 type: Number - default: false name: tag description: A single tag in the form of `{"Tag Name":"Tag Value"}` to filter the list by. outputs: - contextPath: Azure.NSGResourceGroup.id description: 'The unique identifier of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.name description: 'The name of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.type description: 'The type of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.location description: 'The location of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.properties.provisioningState description: 'The provisioning state of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.tags.Owner description: 'The owner tag of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.tags description: 'The tags associated with the Azure Network Security Groups resource group.' type: Unknown - contextPath: Azure.NSGResourceGroup.tags.Name description: 'The name tag of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.managedBy description: 'The entity that manages the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.tags.aNSG-managed-cluster-name description: 'The ANSG managed cluster name tag associated with the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.tags.aNSG-managed-cluster-rg description: 'The ANSG managed cluster resource group tag associated with the Azure Network Security Groups resource group.' type: String - contextPath: Azure.NSGResourceGroup.tags.type description: 'The type tag associated with the Azure Network Security Groups resource group.' type: String - description: "Gets all resource groups for a subscription. Required Permissions: Microsoft.Resources/subscriptions/resourceGroups/read." name: azure-rm-resource-groups-list arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - name: limit description: Limit on the number of resource groups to return. defaultValue: 50 type: Number - name: tag description: A single tag in the form of `{"Tag Name":"Tag Value"}` to filter the list by. outputs: - contextPath: Azure.ResourceManagement.ResourceGroups.id description: 'The unique identifier of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.name description: 'The name of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.type description: 'The type of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.location description: 'The location of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.properties.provisioningState description: 'The provisioning state of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.tags.Owner description: 'The owner tag of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.tags description: 'The tags associated with the Azure Network Security Groups resource group.' type: Unknown - contextPath: Azure.ResourceManagement.ResourceGroups.tags.Name description: 'The name tag of the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.managedBy description: 'The entity that manages the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.tags.aNSG-managed-cluster-name description: 'The ANSG managed cluster name tag associated with the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.tags.aNSG-managed-cluster-rg description: 'The ANSG managed cluster resource group tag associated with the Azure Network Security Groups resource group.' type: String - contextPath: Azure.ResourceManagement.ResourceGroups.tags.type description: 'The type tag associated with the Azure Network Security Groups resource group.' type: String - description: Gets network interfaces in a resource group. The command is deprecated, please use azure-vn-network-interfaces-list. deprecated: true name: azure-nsg-network-interfaces-list outputs: - contextPath: Azure.NSGNetworkInterfaces.name description: The network interface's name. type: String - contextPath: Azure.NSGNetworkInterfaces.id description: The network interface's ID. type: String - contextPath: Azure.NSGNetworkInterfaces.kind description: The kind of the network interface. type: String - contextPath: Azure.NSGNetworkInterfaces.etag description: The ETag of the network interface. type: String - contextPath: Azure.NSGNetworkInterfaces.location description: The location of the network interface. type: String - contextPath: Azure.NSGNetworkInterfaces.managedBy description: The entity that manages the network interface. type: String - contextPath: Azure.NSGNetworkInterfaces.tags description: The tags associated with the network interface. type: String - contextPath: Azure.NSGNetworkInterfaces.properties.provisioningState description: The network interface's provisioning state. type: String - contextPath: Azure.NSGNetworkInterfaces.properties.ipConfigurations.name description: The name of the IP configuration resource that is unique within a resource group. type: List - contextPath: Azure.NSGNetworkInterfaces.properties.ipConfigurations.id description: The IP configuration resource ID. type: List - contextPath: Azure.NSGNetworkInterfaces.properties.ipConfigurations.etag description: The ETag of the IP configuration. type: List - contextPath: Azure.NSGNetworkInterfaces.properties.ipConfigurations.type description: The type of the IP configuration resource. type: List - contextPath: Azure.NSGNetworkInterfaces.properties.tapConfigurations description: List of tap configurations. type: List - contextPath: Azure.NSGNetworkInterfaces.properties.allowPort25Out description: Whether port 25 outbound traffic is allowed. type: Boolean - contextPath: Azure.NSGNetworkInterfaces.properties.nicType description: The network interface card type (Standard/Basic). type: String arguments: - description: "The resource group name." name: resource_group_name type: String required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - name: limit description: The maximum number of records to return. defaultValue: 50 type: Number - name: all_results description: Whether to retrieve all results by overriding the default limit. default: false auto: PREDEFINED predefined: - "false" - "true" - name: azure-vn-network-interfaces-list description: "Gets network interfaces in a resource group. Required permissions: Microsoft.Network/networkInterfaces/read." arguments: - description: The resource group name. name: resource_group_name type: String required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - name: limit description: The maximum number of records to return. defaultValue: 50 type: Number - name: all_results description: Whether to retrieve all results by overriding the default limit. defaultValue: 'false' auto: PREDEFINED predefined: - "false" - "true" outputs: - contextPath: Azure.VirtualNetworks.NetworkInterfaces.name description: The network interface's name. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.id description: The network interface's ID. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.kind description: The kind of the network interface. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.etag description: The ETag of the network interface. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.location description: The location of the network interface. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.managedBy description: The entity that manages the network interface. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.tags description: The tags associated with the network interface. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.provisioningState description: The network interface's provisioning state. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.ipConfigurations description: A list of IPConfigurations of the network interface. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.tapConfigurations description: List of tap configurations. type: List - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.allowPort25Out description: Whether port 25 outbound traffic is allowed. type: Boolean - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.nicType description: The network interface card type (Standard/Basic). type: String - description: Gets public IP addresses in a resource group. The command is deprecated, please use azure-vn-public-ip-addresses-list. name: azure-nsg-public-ip-addresses-list deprecated: true outputs: - contextPath: Azure.NSGPublicIPAddress.name description: The public IP address's name. type: String - contextPath: Azure.NSGPublicIPAddress.id description: The public IP address's ID. type: String - contextPath: Azure.NSGPublicIPAddress.location description: The location of the public IP address. type: String - contextPath: Azure.NSGPublicIPAddress.sku description: The public IP address's SKU. type: String - contextPath: Azure.NSGPublicIPAddress.type description: The type of the public IP address. type: String - contextPath: Azure.NSGPublicIPAddress.etag description: The public IP address's ETag. type: String - contextPath: Azure.NSGPublicIPAddress.properties.provisioningState description: The public IP address's provisioning state. type: String - contextPath: Azure.NSGPublicIPAddress.properties.publicIPAddressVersion description: The public IP address's version. type: String - contextPath: Azure.NSGPublicIPAddress.properties.ipAddress description: The public IP address's IP address. type: String - contextPath: Azure.NSGPublicIPAddress.properties.domainNameLabel description: The public IP address's domain name label. type: String - contextPath: Azure.NSGPublicIPAddress.properties.publicIPAllocationMethod description: The public IP address's allocation method. type: String - contextPath: Azure.NSGPublicIPAddress.properties.fqdn description: The public IP address's fully qualified domain name (FQDN). type: String - contextPath: Azure.NSGPublicIPAddress.properties.resourceGuid description: The public IP address's resource GUID. type: String - contextPath: Azure.NSGPublicIPAddress.sku.name description: The public IP address's SKU name. type: String - contextPath: Azure.NSGPublicIPAddress.sku.tier description: The public IP address's SKU tier. type: String arguments: - description: "The resource group name." name: resource_group_name type: String required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - name: limit description: The maximum number of records to return. defaultValue: 50 type: Number - name: all_results description: Whether to retrieve all results by overriding the default limit. defaultValue: "false" auto: PREDEFINED predefined: - "false" - "true" - name: azure-vn-public-ip-addresses-list description: "Gets public IP addresses in a resource group. Required permissions: Microsoft.Network/publicIPAddresses/read." arguments: - description: "The resource group name." name: resource_group_name type: String required: true - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id type: String required: false required:platform: true - name: limit description: The maximum number of records to return. defaultValue: 50 type: Number - name: all_results description: Whether to retrieve all results by overriding the default limit. defaultValue: "false" auto: PREDEFINED predefined: - "false" - "true" outputs: - contextPath: Azure.VirtualNetworks.PublicIPAddresses.name description: The public IP address's name. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.id description: The public IP address's ID. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.location description: The location of the public IP address. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.sku description: The public IP address's SKU. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.type description: The type of the public IP address. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.etag description: The public IP address's ETag. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.provisioningState description: The public IP address's provisioning state. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.publicIPAddressVersion description: The public IP address's version. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.ipAddress description: The public IP address's IP address. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.publicIPAllocationMethod description: The public IP address's allocation method. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.resourceGuid description: The public IP address's resource GUID. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.sku.name description: The public IP address's SKU name. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.sku.tier description: The public IP address's SKU tier. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.ipConfiguration description: The reference to another IP configuration associated with this resource. type: String - name: azure-vm-instance-start description: "Powers on a specific virtual machine. Deprecated. Use the azure-compute-vm-start command instead. Required permissions: Microsoft.Compute/virtualMachines/read, Microsoft.Compute/virtualMachines/start/action." execution: true deprecated: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: | Resource Group to which the virtual machine belongs. To see all the resource groups associated with your subscription, run the `azure-list-resource-groups` command. name: resource_group_name required: true - description: The name of the virtual machine to power on. To see all virtual machines and their associated names for a specific resource group, run the `azure-compute-vm-list` command. name: virtual_machine_name required: true outputs: - contextPath: Azure.Compute.name description: Name of the VM that was started. type: string - contextPath: Azure.Compute.resourceGroup description: Resource group the VM resides in. type: string - contextPath: Azure.Compute.powerState description: Whether the VM instance is powered on or off. type: string - name: azure-compute-vm-start description: "Powers on a given virtual machine. Required Permissions: Microsoft.Compute/virtualMachines/start/action." execution: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: Resource Group to which the virtual machine belongs. name: resource_group_name required: true - description: Name of the virtual machine to power on. To see all virtual machines and their associated names for a specific resource group, run the `azure-compute-vm-list` command. name: virtual_machine_name required: true outputs: - contextPath: Azure.Compute.VirtualMachines.name description: Name of the VM that was started. type: String - contextPath: Azure.Compute.VirtualMachines.resourceGroup description: Resource group the VM resides in. type: String - contextPath: Azure.Compute.VirtualMachines.powerState description: Whether the VM instance is powered on or off. type: String - name: azure-vm-instance-power-off description: "Powers off a specific virtual machine. Deprecated. Use the azure-compute-vm-power-off command instead. Required permissions: Microsoft.Compute/virtualMachines/read, Microsoft.Compute/virtualMachines/poweroff/action." execution: true deprecated: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: | The resource group to which the virtual machine belongs. To see all the resource groups associated with your subscription, run the `azure-list-resource-groups` command. name: resource_group_name required: true - description: The name of the virtual machine to power off. To see all virtual machines with their associated names for a specific resource group, run the `azure-compute-vm-list` command. name: virtual_machine_name required: true - auto: PREDEFINED defaultValue: 'false' description: Set to True to request non-graceful VM shutdown. Default value is False. name: skip_shutdown predefined: - 'true' - 'false' outputs: - contextPath: Azure.Compute.name description: The name of the virtual machine that was powered off. type: string - contextPath: Azure.Compute.resourceGroup description: The resource group in which the virtual machine resides. type: string - contextPath: Azure.Compute.powerState description: Whether the virtual machine instance is powered on or off. type: string - name: azure-compute-vm-power-off description: "Powers off a given virtual machine. Required Permissions: Microsoft.Compute/virtualMachines/poweroff/action." execution: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The resource group to which the virtual machine belongs. To see all the resource groups associated with your subscription, run the `azure-rm-resource-groups-list` command. name: resource_group_name required: true - description: The name of the virtual machine to power off. To see all virtual machines with their associated names for a specific resource group, run the `azure-compute-vm-list` command. name: virtual_machine_name required: true - auto: PREDEFINED defaultValue: 'false' description: Set to True to request non-graceful VM shutdown. name: skip_shutdown predefined: - 'true' - 'false' outputs: - contextPath: Azure.Compute.VirtualMachines.name description: The name of the virtual machine that was powered off. type: string - contextPath: Azure.Compute.VirtualMachines.resourceGroup description: The resource group in which the virtual machine resides. type: string - contextPath: Azure.Compute.VirtualMachines.powerState description: Whether the virtual machine instance is powered on or off. type: string - name: azure-vm-instance-details-get description: "Retrieves the properties of a specific virtual machine. Deprecated. Use the azure-compute-vm-get command instead. Required permission: Microsoft.Compute/virtualMachines/read." deprecated: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: | The resource group to which the virtual machine belongs. To see all the resource groups associated with your subscription, run the `azure-list-resource-groups` command. name: resource_group_name required: true - description: The name of the virtual machine for which you want to view details. To see all the virtual machines with their associated names for a specific resource group, run the `azure-compute-vm-list` command. name: virtual_machine_name required: true - auto: PREDEFINED defaultValue: instanceView description: The expand expression to apply on the operation. 'InstanceView' retrieves a snapshot of the runtime properties of the virtual machine that is managed by the platform and can change outside of control plane operations. 'UserData' retrieves the UserData property as part of the VM model view that was provided by the user during the VM Create/Update operation. name: expand predefined: - 'instanceView' - 'userData' - 'resiliencyView' outputs: - contextPath: Azure.Compute.name description: The name of the virtual machine you want to get details of. type: string - contextPath: Azure.Compute.id description: The ID of the virtual machine. type: string - contextPath: Azure.Compute.location description: The region in which the virtual machine is hosted. type: string - contextPath: Azure.Compute.Size description: The size of the deployed virtual machine (in gigabytes). type: number - contextPath: Azure.Compute.OS description: The OS running on the given virtual machine. type: string - contextPath: Azure.Compute.properties.provisioningState description: The provisioning state of the deployed virtual machine. type: string - contextPath: Azure.Compute.networkProfile.networkInterfaces description: The list of network interfaces attached to this virtual machine. type: string - contextPath: Azure.Compute.properties.hardwareProfile.vmSize description: The size or SKU of the virtual machine, defining CPU, memory, and storage capacity. type: string - contextPath: Azure.Compute.properties.provisioningState description: The current provisioning state of the virtual machine (e.g., Succeeded, Updating, Failed). type: string - contextPath: Azure.Compute.properties.osProfile description: The operating system configuration of the virtual machine, including admin credentials and hostname. type: string - contextPath: Azure.Compute.properties.storageProfile description: The storage settings for the virtual machine, including OS and data disks. type: string - contextPath: Azure.Compute.properties.vmId description: The unique identifier assigned to the virtual machine instance. type: string - contextPath: Azure.Compute.properties.instanceView description: Detailed runtime status information about the virtual machine, such as power state and extensions. type: string - contextPath: Azure.Compute.properties.timeCreated description: The timestamp when the virtual machine was created. type: string - contextPath: Azure.Compute.properties.networkProfile description: The network configuration of the virtual machine, including associated network interfaces and settings. type: string - contextPath: Azure.Compute.properties.diagnosticsProfile description: The configuration for boot diagnostics and monitoring of the virtual machine. type: string - name: azure-compute-vm-get description: "Gets the properties of a given virtual machine. Required Permissions: Microsoft.Compute/virtualMachines/read." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The resource group to which the virtual machine belongs. name: resource_group_name required: true - description: The name of the virtual machine you want to view the details of. To see all the virtual machines with their associated names for a specific resource group, run the `azure-compute-vm-list` command. name: virtual_machine_name required: true - auto: PREDEFINED defaultValue: instanceView description: The expand expression to apply on the operation. 'InstanceView' retrieves a snapshot of the runtime properties of the virtual machine that is managed by the platform and can change outside of control plane operations. 'UserData' retrieves the UserData property as part of the VM model view that was provided by the user during the VM Create/Update operation. name: expand predefined: - 'instanceView' - 'userData' - 'resiliencyView' outputs: - contextPath: Azure.Compute.VirtualMachines.name description: The name of the virtual machine you want to get details of. type: string - contextPath: Azure.Compute.VirtualMachines.id description: The ID of the virtual machine. type: string - contextPath: Azure.Compute.VirtualMachines.location description: The region in which the virtual machine is hosted. type: string - contextPath: Azure.Compute.VirtualMachines.properties.provisioningState description: The provisioning state of the deployed virtual machine. type: string - contextPath: Azure.Compute.VirtualMachines.networkProfile.networkInterfaces description: The list of network interfaces attached to this virtual machine. type: string - contextPath: Azure.Compute.VirtualMachines.properties.hardwareProfile description: Specifies the hardware settings for the virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.osProfile description: The operating system configuration of the virtual machine, including admin credentials and hostname. type: string - contextPath: Azure.Compute.VirtualMachines.properties.storageProfile description: The storage settings for the virtual machine, including OS and data disks. type: string - contextPath: Azure.Compute.VirtualMachines.properties.vmId description: The unique identifier assigned to the virtual machine instance. type: string - contextPath: Azure.Compute.VirtualMachines.properties.instanceView description: Detailed runtime status information about the virtual machine, such as power state and extensions. type: string - contextPath: Azure.Compute.VirtualMachines.properties.timeCreated description: The timestamp when the virtual machine was created. type: string - contextPath: Azure.Compute.VirtualMachines.properties.networkProfile description: The network configuration of the virtual machine, including associated network interfaces and settings. type: string - contextPath: Azure.Compute.VirtualMachines.properties.diagnosticsProfile description: The configuration for boot diagnostics and monitoring of the virtual machine. type: string - name: azure-vm-network-interface-details-get description: "Retrieves the properties of a specific network interface. Deprecated. Use the azure-vn-network-interface-get command instead. Required permission: Microsoft.Network/networkInterfaces/read." deprecated: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: | The resource group to which the network interface belongs. To see all the resource groups associated with your subscription, run the `azure-list-resource-groups` command. name: resource_group_name required: true - description: The name of the network interface you want to view the details of. name: network_interface_name required: true outputs: - contextPath: Azure.Network.Interfaces.properties.ipConfigurations description: The interface public IP address ID. type: Unknown - contextPath: Azure.Network.Interfaces.properties.macAddress description: The interface MAC address. type: String - contextPath: Azure.Network.Interfaces.name description: The interface name. type: String - contextPath: Azure.Network.Interfaces.location description: The interface location. type: String - contextPath: Azure.Network.Interfaces.id description: The interface ID. type: String - contextPath: Azure.Network.Interfaces.location description: The Azure region where the network interface is deployed. type: String - contextPath: Azure.Network.Interfaces.etag description: A unique read-only string that changes whenever the network interface resource is updated. type: String - contextPath: Azure.Network.Interfaces.kind description: The type of the network interface resource, used for Azure internal classification. type: String - contextPath: Azure.Network.Interfaces.properties.tapConfigurations description: The list of tap configurations attached to the network interface for traffic mirroring. type: String - contextPath: Azure.Network.Interfaces.properties.allowPort25Out description: Indicates whether outbound traffic on port 25 (SMTP) is allowed from this network interface. type: String - contextPath: Azure.Network.Interfaces.properties.nicType description: Specifies the type of network interface, such as Standard or Elastic. type: String - contextPath: Azure.Network.Interfaces.properties.provisioningState description: The current provisioning state of the network interface (e.g., Succeeded, Updating, Failed). type: String - contextPath: Azure.Network.Interfaces.properties.dnsSettings description: The DNS configuration of the network interface, including DNS servers and domain name. type: String - contextPath: Azure.Network.Interfaces.properties.enableIPForwarding description: Indicates whether IP forwarding is enabled for the network interface. type: String - name: azure-vn-network-interface-get description: "Gets the properties of a given network interface. Required permissions: Microsoft.Network/networkInterfaces/read." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The resource group to which the network interface belongs. name: resource_group_name required: true - description: The name of the network interface you want to view the details of. name: network_interface_name required: true outputs: - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.ipConfigurations description: The interface public IP address ID. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.macAddress description: The interface MAC address. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.name description: The interface name. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.location description: The interface location. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.id description: The interface ID. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.etag description: A unique read-only string that changes whenever the network interface resource is updated. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.kind description: The type of the network interface resource, used for Azure internal classification. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.tapConfigurations description: The list of tap configurations attached to the network interface for traffic mirroring. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.allowPort25Out description: Indicates whether outbound traffic on port 25 (SMTP) is allowed from this network interface. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.nicType description: Specifies the type of network interface, such as Standard or Elastic. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.provisioningState description: The current provisioning state of the network interface (e.g., Succeeded, Updating, Failed). type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.dnsSettings description: The DNS configuration of the network interface, including DNS servers and domain name. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.enableIPForwarding description: Indicates whether IP forwarding is enabled for the network interface. type: String - name: azure-vn-network-interface-update description: "Updates a network interface. Required Permissions: Microsoft.Network/networkInterfaces/read, Microsoft.Network/networkInterfaces/write, Microsoft.Network/virtualNetworks/subnets/join/action, Microsoft.Network/publicIPAddresses/join/action, Microsoft.Network/networkSecurityGroups/join/action, Microsoft.Network/loadBalancers/backendAddressPools/join/action." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true type: String - description: The resource group to which the network interface belongs. name: resource_group_name required: true type: String - description: The name of the network interface to update. name: network_interface_name required: true type: String - name: location description: The location of the network security group. required: false auto: PREDEFINED predefined: - australiacentral - australiacentral2 - australiaeast - australiasoutheast - brazilsouth - brazilsoutheast - brazilus - canadacentral - canadaeast - centralindia - centralus - centraluseuap - eastasia - eastus - eastus2 - eastus2euap - francecentral - francesouth - germanynorth - germanywestcentral - israelcentral - italynorth - japaneast - japanwest - jioindiacentral - jioindiawest - koreacentral - koreasouth - malaysiasouth - mexicocentral - newzealandnorth - northcentralus - northeurope - norwayeast - norwaywest - polandcentral - qatarcentral - southafricanorth - southafricawest - southcentralus - southeastasia - southindia - spaincentral - swedencentral - swedensouth - switzerlandnorth - switzerlandwest - uaecentral - uaenorth - uksouth - ukwest - westcentralus - westeurope - westindia - westus - westus2 - westus3 - australiaeastfoundational - austriaeast - chilecentral - eastusslv - indonesiacentral - israelnorthwest - malaysiawest - southcentralus2 - southeastus - southeastus3 - southwestus - usgovarizona - usgovtexas - usgovvirginia - description: Whether to enable IP forwarding for the network interface. name: enable_ip_forwarding auto: PREDEFINED predefined: - 'true' - 'false' type: String - description: Whether the network interface is configured for accelerated networking. name: enable_accelerate_networking auto: PREDEFINED predefined: - 'true' - 'false' type: String - description: The auxiliary mode of the Network Interface resource. name: auxiliary_mode auto: PREDEFINED predefined: - MaxConnections - Floating - AcceleratedConnections type: String - description: The auxiliary SKU of the Network Interface resource. name: auxiliary_sku auto: PREDEFINED predefined: - A1 - A2 - A4 - A8 type: String - description: A comma-separated list of DNS server IP addresses for the network interface. name: dns_servers isArray: true - description: The internal DNS name label for the network interface. name: internal_dns_name_label type: String - description: The name of the network security group. name: network_security_group_name type: String - description: Whether to remove the property networkSecurityGroup from the network interface. name: remove_network_security_group auto: PREDEFINED predefined: - yes - no defaultValue: no - description: The type of Network Interface resource. name: nic_type auto: PREDEFINED predefined: - Standard - Elastic outputs: - contextPath: Azure.VirtualNetworks.NetworkInterfaces.id description: The network interface ID. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.name description: The network interface name. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.location description: The Azure region where the network interface is deployed. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.etag description: A unique read-only string that changes whenever the network interface resource is updated. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.type description: The resource type. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.tags description: The resource tags. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.extendedLocation description: The extended location of the network interface. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.provisioningState description: The current provisioning state of the network interface (e.g., Succeeded, Updating, Failed). type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.ipConfigurations description: The list of IP configurations for the network interface. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.dnsSettings description: The DNS configuration of the network interface, including DNS servers and domain name. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.macAddress description: The MAC address of the network interface. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.enableIPForwarding description: Whether IP forwarding is enabled for the network interface. type: Boolean - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.enableAcceleratedNetworking description: Whether accelerated networking is enabled for the network interface. type: Boolean - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.networkSecurityGroup description: The network security group associated with the network interface. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.primary description: Whether this is a primary network interface on a virtual machine. type: Boolean - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.virtualMachine description: The reference to a virtual machine. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.nicType description: The type of network interface (Standard or Elastic). type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.auxiliaryMode description: The auxiliary mode of the Network Interface resource. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.auxiliarySku description: The auxiliary SKU of the Network Interface resource. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.defaultOutboundConnectivityEnabled description: Whether default outbound connectivity for nic was configured. type: Boolean - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.disableTcpStateTracking description: Whether to disable TCP state tracking. type: Boolean - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.dscpConfiguration description: A reference to the DSCP configuration to which the network interface is linked. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.hostedWorkloads description: A list of references to linked BareMetal resources. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.migrationPhase description: The migration phase of the Network Interface resource. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.privateEndpoint description: A reference to the private endpoint to which the network interface is linked. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.privateLinkService description: The privatelinkservice of the network interface resource. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.resourceGuid description: The resource GUID property of the network interface resource. type: String - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.tapConfigurations description: A list of TapConfigurations of the network interface. type: Unknown - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.vnetEncryptionSupported description: Whether the virtual machine this nic is attached to supports encryption. type: Boolean - contextPath: Azure.VirtualNetworks.NetworkInterfaces.properties.workloadType description: The workload type of the NetworkInterface for BareMetal resources. type: String - name: azure-vm-public-ip-details-get description: "Retrieves the properties of a specific public IP address. Deprecated. Use the azure-vn-public-ip-address-get command instead. Required permission: Microsoft.Network/publicIPAddresses/read." deprecated: true arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: | The resource group to which the IP address belongs. To see all the resource groups associated with your subscription, run the `azure-list-resource-groups` command. name: resource_group_name required: true - description: The IP address name. name: address_name required: true outputs: - contextPath: Azure.Network.IPConfigurations.location description: The Azure region where the IP configuration resource is located. type: String - contextPath: Azure.Network.IPConfigurations.id description: The unique resource ID of the IP configuration. type: String - contextPath: Azure.Network.IPConfigurations.name description: The name of the IP configuration. type: String - contextPath: Azure.Network.IPConfigurations.etag description: A unique read-only string that changes whenever the IP configuration resource is updated. type: String - contextPath: Azure.Network.IPConfigurations.properties.idleTimeoutInMinutes description: The idle timeout value in minutes for the associated public IP address. type: String - contextPath: Azure.Network.IPConfigurations.properties.ipAddress description: The private IP address assigned to the network interface or resource. type: String - contextPath: Azure.Network.IPConfigurations.properties.provisioningState description: The current provisioning state of the IP configuration (e.g., Succeeded, Updating, Failed). type: String - contextPath: Azure.Network.IPConfigurations.properties.ipConfiguration description: The reference to another IP configuration associated with this resource. type: String - contextPath: Azure.Network.IPConfigurations.properties.publicIPAddressVersion description: The version of the public IP address (IPv4 or IPv6). type: String - contextPath: Azure.Network.IPConfigurations.properties.publicIPAllocationMethod description: The method used to allocate the public IP address (Static or Dynamic). type: String - contextPath: Azure.Network.IPConfigurations.properties.resourceGuid description: The unique Azure resource GUID for the IP configuration. type: String - contextPath: Azure.Network.IPConfigurations.properties.sku description: The SKU of the public IP address associated with the configuration, defining its performance tier. type: String - name: azure-vn-public-ip-address-get description: "Gets the properties of a given public IP address. Permissions required: Microsoft.Network/publicIPAddresses/read." arguments: - description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. name: subscription_id required: false required:platform: true - description: The resource group to which the IP address belongs. name: resource_group_name required: true - description: The IP address name. name: address_name required: true outputs: - contextPath: Azure.VirtualNetworks.PublicIPAddresses.name description: The public IP address's name. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.id description: The public IP address's ID. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.location description: The location of the public IP address. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.sku description: The public IP address's SKU. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.type description: The type of the public IP address. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.etag description: The public IP address's ETag. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.provisioningState description: The public IP address's provisioning state. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.publicIPAddressVersion description: The public IP address's version. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.ipAddress description: The public IP address's IP address. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.publicIPAllocationMethod description: The public IP address's allocation method. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.resourceGuid description: The public IP address's resource GUID. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.sku.name description: The public IP address's SKU name. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.sku.tier description: The public IP address's SKU tier. type: String - contextPath: Azure.VirtualNetworks.PublicIPAddresses.properties.ipConfiguration description: The reference to another IP configuration associated with this resource. type: String - arguments: - description: The subscription ID. name: subscription_id type: String required: true defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} prettyname: Subscription ID - description: The name of the resource group. name: resource_group_name type: String required: true defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} prettyname: Resource Group - description: The name of the security group. name: security_group_name required: true defaultValue: Logic App Name prettyname: Logic App Name prettypredefined: Logic App Name: ${asset.xdm.asset.raw_fields.Platform Discovery.name} - description: The name of the rule to be deleted. name: security_rule_name required: true defaultValue: NSG Rule prettyname: NSG Rule prettypredefined: NSG Rule: ${asset.xdm.asset.raw_fields.Platform Discovery.properties.securityRules.name} description: "Deletes a network security group (NSG) rule. Required permission: Microsoft.Network/networkSecurityGroups/securityRules/delete." name: azure-nsg-security-rule-delete-quick-action prettyname: Delete NSG Rule hidden: true quickaction: true outputs: - contextPath: Azure.NSGRule.name description: The rule's name. type: String - contextPath: Azure.NSGRule.id description: The rule's ID. type: String - contextPath: Azure.NSGRule.etag description: The rule's ETag. type: String - contextPath: Azure.NSGRule.type description: The rule's type. type: String - contextPath: Azure.NSGRule.provisioningState description: The rule's provisioning state. type: String - contextPath: Azure.NSGRule.protocol description: The protocol, which can be "TCP", "UDP", "ICMP", or "*". type: String - contextPath: Azure.NSGRule.sourcePortRange description: For a single port, the source port or a range of ports. type: String - contextPath: Azure.NSGRule.sourcePortRanges description: For multiple ports, a list of these ports. type: String - contextPath: Azure.NSGRule.destinationPortRange description: For a single port, the destination port or range of ports. type: String - contextPath: Azure.NSGRule.destinationPortRanges description: For multiple ports, a list of destination ports. type: String - contextPath: Azure.NSGRule.sourceAddressPrefix description: The source address. type: String - contextPath: Azure.NSGRule.destinationAddressPrefix description: The destination address. type: String - contextPath: Azure.NSGRule.access description: The rule's access. Can be "Allow" or "Deny". type: String - contextPath: Azure.NSGRule.priority description: The rule's priority, ranging from 100 to 4096. type: Number - contextPath: Azure.NSGRule.direction description: The rule's direction. Can be "Inbound" or "Outbound". type: String - arguments: - description: The subscription ID. name: subscription_id type: String required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} defaultValue: Resource Group - name: name type: String required: true defaultValue: AZ Web App description: Name of the Web App. prettyname: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - name: identity_type type: String required: false defaultValue: SystemAssigned description: Managed service identity type. hidden: true description: "Assigns a system managed identity to the web app, enabling secure access to other Azure services without managing credentials. Deprecated. Use Assign Web App Managed Identity instead. Required permission: Microsoft.Web/sites/read, Microsoft.Web/sites/write." name: azure-webapp-assign-managed-identity-quick-action prettyname: Assign Managed Identity to Web App quickaction: true hidden: true deprecated: true outputs: - contextPath: Azure.WebApp.id description: Fully qualified resource ID for the web app. type: String - contextPath: Azure.WebApp.name description: The name of the web app. type: String - contextPath: Azure.WebApp.type description: The resource type, e.g., Microsoft.Web/sites. type: String - contextPath: Azure.WebApp.location description: Geographic location of the web app. type: String - contextPath: Azure.WebApp.kind description: The kind of the app, e.g., app, functionapp, etc. type: String - contextPath: Azure.WebApp.tags description: Resource tags as key-value pairs. - contextPath: Azure.WebApp.identity.type description: The type of managed identity (SystemAssigned, UserAssigned, etc.). type: String - contextPath: Azure.WebApp.identity.principalId description: The principal ID of the system-assigned identity. type: String - contextPath: Azure.WebApp.identity.tenantId description: The tenant ID of the system-assigned identity. type: String - contextPath: Azure.WebApp.identity.userAssignedIdentities description: The list of user-assigned identities associated with the web app. - contextPath: Azure.WebApp.properties.state description: Current state of the web app (Running, Stopped, etc.). type: String - contextPath: Azure.WebApp.properties.enabled description: Whether the web app is enabled. type: Boolean - contextPath: Azure.WebApp.properties.defaultHostName description: Default host name of the web app. type: String - contextPath: Azure.WebApp.properties.hostNames description: List of host names associated with the web app. - contextPath: Azure.WebApp.properties.repositorySiteName description: Name of the repository site. type: String - contextPath: Azure.WebApp.properties.clientAffinityEnabled description: Whether client affinity is enabled. type: Boolean - contextPath: Azure.WebApp.properties.clientCertEnabled description: Whether client certificates are enabled. type: Boolean - contextPath: Azure.WebApp.properties.clientCertExclusionPaths description: Paths to exclude from client certificate authentication. type: String - contextPath: Azure.WebApp.properties.hostingEnvironment description: App Service Environment to use for the web app. type: String - contextPath: Azure.WebApp.properties.serverFarmId description: Resource ID of the associated App Service plan. type: String - contextPath: Azure.WebApp.properties.reserved description: Whether the web app is on a Linux plan. type: Boolean - contextPath: Azure.WebApp.properties.isXenon description: Whether the web app is hosted in Xenon. type: Boolean - contextPath: Azure.WebApp.properties.hyperV description: Whether Hyper-V is enabled for the web app. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.appSettings description: List of app settings. - contextPath: Azure.WebApp.properties.siteConfig.metadata description: List of metadata settings. - contextPath: Azure.WebApp.properties.siteConfig.connectionStrings description: List of connection strings. - contextPath: Azure.WebApp.properties.siteConfig.localMySqlEnabled description: Whether local MySQL is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.alwaysOn description: Whether Always On is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.http20Enabled description: Whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebApp.properties.siteConfig.ftpsState description: FTPS state (Disabled, AllAllowed, etc.). type: String - contextPath: Azure.WebApp.properties.siteConfig.linuxFxVersion description: Runtime stack for Linux apps. type: String - contextPath: Azure.WebApp.properties.siteConfig.windowsFxVersion description: Runtime stack for Windows apps. type: String - contextPath: Azure.WebApp.properties.siteConfig.numberOfWorkers description: Number of workers allocated. type: Number - contextPath: Azure.WebApp.properties.siteConfig.webSocketsEnabled description: Whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.preWarmedInstanceCount description: Number of pre-warmed instances. type: Number - contextPath: Azure.WebApp.properties.siteConfig.acrUseManagedIdentityCreds description: Whether ACR uses managed identity credentials. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.acrUserManagedIdentityID description: User-assigned identity ID for ACR. type: String - contextPath: Azure.WebApp.properties.siteConfig.scmType description: Source control management type. type: String - contextPath: Azure.WebApp.properties.siteConfig.use32BitWorkerProcess description: Whether to use 32-bit worker process. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealEnabled description: Whether auto-heal is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealRules description: Auto-heal rules configuration. - contextPath: Azure.WebApp.properties.siteConfig.tracingOptions description: Tracing options. type: String - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.detailedErrorLoggingEnabled description: Whether detailed error logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.httpLoggingEnabled description: Whether HTTP logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingEnabled description: Whether request tracing is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingExpirationTime description: Request tracing expiration time. type: DateTime - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.defaultDocuments description: List of default documents. - contextPath: Azure.WebApp.properties.siteConfig.virtualApplications description: List of virtual applications. - contextPath: Azure.WebApp.properties.siteConfig.loadBalancing description: Load balancing settings. type: String - contextPath: Azure.WebApp.properties.siteConfig.experiments description: Experiments configuration. - contextPath: Azure.WebApp.properties.siteConfig.limits description: Site limits configuration. - contextPath: Azure.WebApp.properties.siteConfig.autoSwapSlotName description: Auto-swap slot name. type: String - contextPath: Azure.WebApp.properties.siteConfig.localMySqlEnabled description: Whether local MySQL is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.ipSecurityRestrictions description: IP security restrictions. - contextPath: Azure.WebApp.properties.siteConfig.scmIpSecurityRestrictions description: SCM IP security restrictions. - contextPath: Azure.WebApp.properties.siteConfig.scmIpSecurityRestrictionsUseMain description: Whether SCM IP restrictions use main settings. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.cors description: CORS settings. - contextPath: Azure.WebApp.properties.siteConfig.push description: Push settings. - contextPath: Azure.WebApp.properties.siteConfig.apiDefinition description: API definition settings. - contextPath: Azure.WebApp.properties.siteConfig.apiManagementConfig description: API management configuration. - contextPath: Azure.WebApp.properties.siteConfig.autoHealEnabled description: Whether auto-heal is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealRules description: Auto-heal rules configuration. - contextPath: Azure.WebApp.properties.siteConfig.tracingOptions description: Tracing options. type: String - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.detailedErrorLoggingEnabled description: Whether detailed error logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.httpLoggingEnabled description: Whether HTTP logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingEnabled description: Whether request tracing is enabled. type: Boolean - name: azure-appservice-webapp-update-quick-action description: "Assigns a system-assigned managed identity to the web app, enabling secure access to other Azure services without managing credentials. Required permissions: Microsoft.Web/sites/read, Microsoft.Web/sites/write." prettyname: Assign Web App Managed Identity quickaction: true hidden: true arguments: - description: The subscription ID. name: subscription_id type: String required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} defaultValue: Resource Group - name: name type: String required: true defaultValue: AZ Web App description: Name of the Web App. prettyname: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - name: identity_type type: String required: false defaultValue: SystemAssigned description: Managed service identity type. hidden: true outputs: - contextPath: Azure.AppService.WebApp.id description: Fully qualified resource ID for the web app. type: String - contextPath: Azure.AppService.WebApp.name description: The name of the web app. type: String - contextPath: Azure.AppService.WebApp.type description: The resource type, e.g., Microsoft.Web/sites. type: String - contextPath: Azure.AppService.WebApp.location description: Geographic location of the web app. type: String - contextPath: Azure.AppService.WebApp.kind description: The kind of the app, e.g., app, functionapp, etc. type: String - contextPath: Azure.AppService.WebApp.tags description: Resource tags as key-value pairs. type: Unknown - contextPath: Azure.AppService.WebApp.identity.type description: The type of managed identity (SystemAssigned, UserAssigned, etc.). type: String - contextPath: Azure.AppService.WebApp.identity.principalId description: The principal ID of the system-assigned identity. type: String - contextPath: Azure.AppService.WebApp.identity.tenantId description: The tenant ID of the system-assigned identity. type: String - contextPath: Azure.AppService.WebApp.identity.userAssignedIdentities description: The list of user-assigned identities associated with the web app. type: Unknown - contextPath: Azure.AppService.WebApp.properties.state description: Current state of the web app (Running, Stopped, etc.). type: String - contextPath: Azure.AppService.WebApp.properties.enabled description: Whether the web app is enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.defaultHostName description: Default host name of the web app. type: String - contextPath: Azure.AppService.WebApp.properties.hostNames description: List of host names associated with the web app. type: String - contextPath: Azure.AppService.WebApp.properties.repositorySiteName description: Name of the repository site. type: String - contextPath: Azure.AppService.WebApp.properties.clientAffinityEnabled description: Whether client affinity is enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.clientCertEnabled description: Whether client certificates are enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.clientCertExclusionPaths description: Paths to exclude from client certificate authentication. type: String - contextPath: Azure.AppService.WebApp.properties.hostingEnvironment description: App Service Environment to use for the web app. type: String - contextPath: Azure.AppService.WebApp.properties.serverFarmId description: Resource ID of the associated App Service plan. type: String - contextPath: Azure.AppService.WebApp.properties.reserved description: Whether the web app is on a Linux plan. type: Boolean - contextPath: Azure.AppService.WebApp.properties.isXenon description: Whether the web app is hosted in Xenon. type: Boolean - contextPath: Azure.AppService.WebApp.properties.hyperV description: Whether Hyper-V is enabled for the web app. type: Boolean - contextPath: Azure.AppService.WebApp.properties.siteConfig description: Configuration of the app. type: Unknown - arguments: - description: The subscription ID. name: subscription_id type: String required: true defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} prettyname: Subscription ID - description: The resource group name. name: resource_group_name required: true defaultValue: Resource Group prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - description: The name of the storage account. name: account_name required: true defaultValue: Storage Account prettyname: Storage Account prettypredefined: Storage Account: ${asset.xdm.asset.name} - description: Specifies whether traffic is bypassed for Logging/Metrics/AzureServices. name: network_ruleset_bypass auto: PREDEFINED isArray: true defaultValue: AzureServices description: "Configures the storage account's network rules to allow traffic from trusted Azure services. Required permissions: Microsoft.Storage/storageAccounts/read, Microsoft.Storage/storageAccounts/write." name: azure-storage-allow-access-quick-action prettyname: Allow Access by Trusted Services quickaction: true hidden: true outputs: - contextPath: Azure.Storage.StorageAccounts.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.Storage.StorageAccounts.kind description: The kind of storage account. type: String - contextPath: Azure.Storage.StorageAccounts.location description: The geo-location where the resource lives. type: String - contextPath: Azure.Storage.StorageAccounts.name description: The name of the resource. type: String - contextPath: Azure.Storage.StorageAccounts.properties.isHnsEnabled description: Account HierarchicalNamespace enabled if sets to true. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.allowBlobPublicAccess description: If set to true (default), allows public access to all blobs or containers in the storage account. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.minimumTlsVersion description: The minimum TLS version to be permitted on requests to storage. Default is TLS 1.0. type: String - contextPath: Azure.Storage.StorageAccounts.properties.allowSharedKeyAccess description: Whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests (including shared access signatures) must be authorized with Azure Active Directory (Azure AD). type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.creationTime description: The creation date and time of the storage account in UTC. type: Date - contextPath: Azure.Storage.StorageAccounts.properties.primaryEndpoints description: The URLs that are used to retrieve a public blob, queue, or table object. type: String - contextPath: Azure.Storage.StorageAccounts.properties.primaryLocation description: The storage account primary data center location. type: String - contextPath: Azure.Storage.StorageAccounts.properties.provisioningState description: The status of the storage account at the time the operation was called. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.routingChoice description: The kind of network routing the user chose. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishMicrosoftEndpoints description: Whether Microsoft routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishInternetEndpoints description: Whether internet routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.encryption description: Encryption settings to be used for server-side encryption for the storage account. type: String - contextPath: Azure.Storage.StorageAccounts.properties.secondaryLocation description: The geo-replicated secondary location for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfPrimary description: Whether the storage account primary location is available or unavailable. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfSecondary description: Whether the storage account secondary location is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.supportsHttpsTrafficOnly description: If set to true, allows https traffic only to storage service. type: Boolean - contextPath: Azure.Storage.StorageAccounts.sku.name description: The SKU name. Required for account creation; optional for update. type: String - contextPath: Azure.Storage.StorageAccounts.sku.tier description: The SKU tier. This is based on the SKU name. type: String - contextPath: Azure.Storage.StorageAccounts.tags description: Resource tags. - contextPath: Azure.Storage.StorageAccounts.type description: The storage account type. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} defaultValue: Resource Group - name: name type: string required: true defaultValue: AZ Web App description: Name of the Web App. prettyname: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - auto: PREDEFINED name: http20_enabled type: bool description: Enable clients to connect over HTTP/2. predefined: - 'true' - 'false' defaultValue: 'true' description: "Enables HTTP 2.0 for the web app. Deprecated. Use Set Web App HTTP Version to 2.0 instead. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." name: azure-webapp-set-http2-quick-action prettyname: Set Webapp HTTP Version to 2.0 quickaction: true hidden: true deprecated: true outputs: - contextPath: Azure.WebAppConfig.id description: Resource ID. type: String - contextPath: Azure.WebAppConfig.name description: Resource name. type: String - contextPath: Azure.WebAppConfig.type description: Resource type. type: String - contextPath: Azure.WebAppConfig.location description: Resource location. type: String - contextPath: Azure.WebAppConfig.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.WebAppConfig.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.WebAppConfig.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.WebAppConfig.properties.phpVersion description: PHP version. type: String - contextPath: Azure.WebAppConfig.properties.pythonVersion description: Python version. type: String - contextPath: Azure.WebAppConfig.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.WebAppConfig.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.WebAppConfig.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.WebAppConfig.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.WebAppConfig.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebAppConfig.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebAppConfig.properties.ftpsState description: State of FTP/ FTPS service. type: String - contextPath: Azure.WebAppConfig.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.WebAppConfig.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.WebAppConfig.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.allowedOrigins description: CORS allowed origins. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.supportCredentials description: Indicates whether CORS supports credentials. type: Boolean - contextPath: Azure.WebAppConfig.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.WebAppConfig.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - name: azure-appservice-webapp-config-update-http2-quick-action prettyname: Set Web App HTTP Version to 2.0 quickaction: true description: "Enables HTTP 2.0 for the web app. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." hidden: true arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} defaultValue: Resource Group - name: name type: string required: true defaultValue: AZ Web App description: Name of the Web App. prettyname: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - auto: PREDEFINED name: http20_enabled type: bool description: Enable clients to connect over HTTP/2. predefined: - 'true' - 'false' defaultValue: 'true' outputs: - contextPath: Azure.AppService.WebAppConfiguration.id description: Resource ID. type: String - contextPath: Azure.AppService.WebAppConfiguration.name description: Resource name. type: String - contextPath: Azure.AppService.WebAppConfiguration.type description: Resource type. type: String - contextPath: Azure.AppService.WebAppConfiguration.location description: Resource location. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.AppService.WebAppConfiguration.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.phpVersion description: PHP version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.pythonVersion description: Python version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.ftpsState description: State of FTP / FTPS service. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.cors description: Cross-Origin Resource Sharing (CORS) settings. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} defaultValue: Resource Group - name: name type: string required: true defaultValue: AZ Web App description: Name of the Web App. prettyname: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - auto: PREDEFINED name: enabled type: bool required: false description: Whether App Service Authentication/Authorization is enabled. defaultValue: 'true' description: "Enables App Service Authentication for the web app. Deprecated. Use Enable Azure App Service Authentication instead. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." deprecated: true name: azure-webapp-auth-update-quick-action prettyname: Enable Azure App Service Auth quickaction: true hidden: true outputs: - contextPath: Azure.WebAppAuth.id description: Resource ID. type: String - contextPath: Azure.WebAppAuth.name description: Resource Name. type: String - contextPath: Azure.WebAppAuth.type description: Resource type. type: String - contextPath: Azure.WebAppAuth.properties.enabled description: Indicates whether Authentication/Authorization is enabled for the app. type: Boolean - contextPath: Azure.WebAppAuth.properties.runtimeVersion description: The RuntimeVersion of the Authentication/Authorization feature. type: String - contextPath: Azure.WebAppAuth.properties.unauthenticatedClientAction description: The action to take when an unauthenticated client attempts to access the app. type: String - contextPath: Azure.WebAppAuth.properties.tokenStoreEnabled description: Indicates whether the Azure App Service Authentication platform’s token store is enabled. type: Boolean - contextPath: Azure.WebAppAuth.properties.allowedExternalRedirectUrls description: External URLs that are allowed to be redirected to as part of logging in or logging out of the app. type: Unknown - contextPath: Azure.WebAppAuth.properties.defaultProvider description: The default authentication provider to use when multiple providers are configured. type: String - contextPath: Azure.WebAppAuth.properties.clientId description: The Client ID of the app used for AAD login. type: String - contextPath: Azure.WebAppAuth.properties.clientSecret description: The client secret associated with the AAD app. type: String - contextPath: Azure.WebAppAuth.properties.clientSecretSettingName description: The app setting that contains the client secret. type: String - contextPath: Azure.WebAppAuth.properties.issuer description: The OpenID Connect Issuer URI that represents the entity that issues access tokens. type: String - contextPath: Azure.WebAppAuth.properties.allowedAudiences description: The list of audiences that can receive the authentication tokens. type: Unknown - contextPath: Azure.WebAppAuth.properties.additionalLoginParams description: Additional parameters to send to the authentication provider. type: Unknown - contextPath: Azure.WebAppAuth.properties.isAadAutoProvisioned description: True if AAD is auto-provisioned; otherwise false. type: Boolean - contextPath: Azure.WebAppAuth.properties.googleClientId description: The Client ID of the app used for Google login. type: String - contextPath: Azure.WebAppAuth.properties.googleClientSecret description: The client secret associated with the Google app. type: String - contextPath: Azure.WebAppAuth.properties.googleClientSecretSettingName description: The app setting that contains the client secret. type: String - contextPath: Azure.WebAppAuth.properties.facebookAppId description: The App ID of the Facebook app used for login. type: String - contextPath: Azure.WebAppAuth.properties.facebookAppSecret description: The app secret associated with the Facebook app. type: String - contextPath: Azure.WebAppAuth.properties.facebookAppSecretSettingName description: The app setting that contains the Facebook app secret. type: String - contextPath: Azure.WebAppAuth.properties.twitterConsumerKey description: The OAuth 1.0a consumer key of the Twitter application used for login. type: String - contextPath: Azure.WebAppAuth.properties.twitterConsumerSecret description: The consumer secret associated with the Twitter application. type: String - contextPath: Azure.WebAppAuth.properties.twitterConsumerSecretSettingName description: The app setting that contains the Twitter consumer secret. type: String - contextPath: Azure.WebAppAuth.properties.microsoftAccountClientId description: The OAuth 2.0 client ID for the Microsoft account provider. type: String - contextPath: Azure.WebAppAuth.properties.microsoftAccountClientSecret description: The client secret for the Microsoft account provider. type: String - contextPath: Azure.WebAppAuth.properties.microsoftAccountClientSecretSettingName description: The app setting that contains the Microsoft account client secret. type: String - contextPath: Azure.WebAppAuth.properties.appleClientId description: The client ID for the Apple provider. type: String - contextPath: Azure.WebAppAuth.properties.appleClientSecret description: The client secret for the Apple provider. type: String - contextPath: Azure.WebAppAuth.properties.appleClientSecretSettingName description: The app setting that contains the Apple provider client secret. type: String - contextPath: Azure.WebAppAuth.properties.authFilePath description: The path to the authentication configuration file. type: String - name: azure-appservice-webapp-auth-settings-update-quick-action prettyname: Enable Azure App Service Authentication quickaction: true hidden: true description: "Enables App Service Authentication for the web app. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} defaultValue: Resource Group - name: name type: string required: true defaultValue: AZ Web App description: Name of the Web App. prettyname: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - auto: PREDEFINED name: enabled type: bool required: false description: Whether App Service Authentication/Authorization is enabled. defaultValue: 'true' predefined: - 'true' - 'false' outputs: - contextPath: Azure.AppService.WebAppAuthSettings.id description: Resource ID. type: String - contextPath: Azure.AppService.WebAppAuthSettings.name description: Resource Name. type: String - contextPath: Azure.AppService.WebAppAuthSettings.type description: Resource type. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.enabled description: Indicates whether Authentication/Authorization is enabled for the app. type: Boolean - contextPath: Azure.AppService.WebAppAuthSettings.properties.runtimeVersion description: The RuntimeVersion of the Authentication/Authorization feature. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.unauthenticatedClientAction description: The action to take when an unauthenticated client attempts to access the app. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.tokenStoreEnabled description: Indicates whether the Azure App Service Authentication platform’s token store is enabled. type: Boolean - contextPath: Azure.AppService.WebAppAuthSettings.properties.allowedExternalRedirectUrls description: External URLs that are allowed to be redirected to as part of logging in or logging out of the app. type: Unknown - contextPath: Azure.AppService.WebAppAuthSettings.properties.defaultProvider description: The default authentication provider to use when multiple providers are configured. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.clientId description: The Client ID of the app used for AAD login. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.clientSecret description: The client secret associated with the AAD app. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.clientSecretSettingName description: The app setting that contains the client secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.issuer description: The OpenID Connect Issuer URI that represents the entity that issues access tokens. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.allowedAudiences description: The list of audiences that can receive the authentication tokens. type: Unknown - contextPath: Azure.AppService.WebAppAuthSettings.properties.additionalLoginParams description: Additional parameters to send to the authentication provider. type: Unknown - contextPath: Azure.AppService.WebAppAuthSettings.properties.isAadAutoProvisioned description: True if AAD is auto-provisioned; otherwise false. type: Boolean - contextPath: Azure.AppService.WebAppAuthSettings.properties.googleClientId description: The Client ID of the app used for Google login. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.googleClientSecret description: The client secret associated with the Google app. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.googleClientSecretSettingName description: The app setting that contains the client secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.facebookAppId description: The App ID of the Facebook app used for login. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.facebookAppSecret description: The app secret associated with the Facebook app. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.facebookAppSecretSettingName description: The app setting that contains the Facebook app secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.twitterConsumerKey description: The OAuth 1.0a consumer key of the Twitter application used for login. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.twitterConsumerSecret description: The consumer secret associated with the Twitter application. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.twitterConsumerSecretSettingName description: The app setting that contains the Twitter consumer secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.microsoftAccountClientId description: The OAuth 2.0 client ID for the Microsoft account provider. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.microsoftAccountClientSecret description: The client secret for the Microsoft account provider. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.microsoftAccountClientSecretSettingName description: The app setting that contains the Microsoft account client secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.appleClientId description: The client ID for the Apple provider. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.appleClientSecret description: The client secret for the Apple provider. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.appleClientSecretSettingName description: The app setting that contains the Apple provider client secret. type: String - contextPath: Azure.AppService.WebAppAuthSettings.properties.authFilePath description: The path to the authentication configuration file. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - description: The resource group name. name: resource_group_name required: true defaultValue: Resource Group prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - description: Name of the storage account. name: account_name required: true defaultValue: Storage Account prettyname: Storage Account prettypredefined: Storage Account: ${asset.xdm.asset.name} - auto: PREDEFINED description: Whether to allow AD cross-tenant object replication. name: allow_cross_tenant_replication defaultValue: 'false' description: "Disables cross-tenant object replication for the storage account, preventing data from being copied to other Azure AD tenants. Required permissions: Microsoft.Storage/storageAccounts/read, Microsoft.Storage/storageAccounts/write." name: azure-storage-disable-cross-tenant-replication-quick-action prettyname: Disable Storage Account Cross Tenant Replication quickaction: true hidden: true outputs: - contextPath: Azure.Storage.StorageAccounts.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.Storage.StorageAccounts.kind description: The kind of storage account. type: String - contextPath: Azure.Storage.StorageAccounts.location description: The geo-location where the resource lives. type: String - contextPath: Azure.Storage.StorageAccounts.name description: The name of the resource. type: String - contextPath: Azure.Storage.StorageAccounts.properties.isHnsEnabled description: Account HierarchicalNamespace enabled if sets to true. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.allowBlobPublicAccess description: If set to true (default), allows public access to all blobs or containers in the storage account. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.minimumTlsVersion description: The minimum TLS version to be permitted on requests to storage. Default is TLS 1.0. type: String - contextPath: Azure.Storage.StorageAccounts.properties.allowSharedKeyAccess description: Whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests (including shared access signatures) must be authorized with Azure Active Directory (Azure AD). type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.creationTime description: The creation date and time of the storage account in UTC. type: Date - contextPath: Azure.Storage.StorageAccounts.properties.primaryEndpoints description: The URLs that are used to retrieve a public blob, queue, or table object. type: String - contextPath: Azure.Storage.StorageAccounts.properties.primaryLocation description: The storage account primary data center location. type: String - contextPath: Azure.Storage.StorageAccounts.properties.provisioningState description: The status of the storage account at the time the operation was called. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.routingChoice description: The kind of network routing the user chose. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishMicrosoftEndpoints description: Whether Microsoft routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishInternetEndpoints description: Whether internet routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.encryption description: Encryption settings to be used for server-side encryption for the storage account. type: String - contextPath: Azure.Storage.StorageAccounts.properties.secondaryLocation description: The geo-replicated secondary location for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfPrimary description: Whether the storage account primary location is available or unavailable. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfSecondary description: Whether the storage account secondary location is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.supportsHttpsTrafficOnly description: If set to true, allows https traffic only to storage service. type: Boolean - contextPath: Azure.Storage.StorageAccounts.sku.name description: The SKU name. Required for account creation; optional for update. type: String - contextPath: Azure.Storage.StorageAccounts.sku.tier description: The SKU tier. This is based on the SKU name. type: String - contextPath: Azure.Storage.StorageAccounts.tags description: Resource tags. - contextPath: Azure.Storage.StorageAccounts.type description: The storage account type. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. defaultValue: Resource Group prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: name type: string required: true description: Name of the Function App. defaultValue: AZ Function Name prettyname: AZ Function Name prettypredefined: AZ Function Name: ${asset.xdm.asset.name} - auto: PREDEFINED name: http20_enabled type: bool required: false description: Whether to allow clients to connect over HTTP/2. predefined: - 'true' - 'false' defaultValue: 'true' name: azure-set-function-app-http-version2-0-quick-action prettyname: Set Function App HTTP Version to 2.0 description: "Enables HTTP 2.0 for the Function App. Deprecated. Use Set Web App HTTP Version to 2.0 instead. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." quickaction: true hidden: true deprecated: true outputs: - contextPath: Azure.WebAppConfig.id description: Resource ID. type: String - contextPath: Azure.WebAppConfig.name description: Resource name. type: String - contextPath: Azure.WebAppConfig.type description: Resource type. type: String - contextPath: Azure.WebAppConfig.location description: Resource location. type: String - contextPath: Azure.WebAppConfig.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.WebAppConfig.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.WebAppConfig.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.WebAppConfig.properties.phpVersion description: PHP version. type: String - contextPath: Azure.WebAppConfig.properties.pythonVersion description: Python version. type: String - contextPath: Azure.WebAppConfig.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.WebAppConfig.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.WebAppConfig.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.WebAppConfig.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.WebAppConfig.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebAppConfig.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebAppConfig.properties.ftpsState description: State of FTP/ FTPS service. type: String - contextPath: Azure.WebAppConfig.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.WebAppConfig.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.WebAppConfig.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.allowedOrigins description: CORS allowed origins. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.supportCredentials description: Indicates whether CORS supports credentials. type: Boolean - contextPath: Azure.WebAppConfig.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.WebAppConfig.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - description: The resource group name. name: resource_group_name required: true defaultValue: Resource Group prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - description: Name of the storage account. name: account_name required: true defaultValue: Storage Account prettyname: Storage Account prettypredefined: Storage Account: ${asset.xdm.asset.name} - auto: PREDEFINED description: If set to 'true', allows public access to all blobs or containers in the storage account. name: allow_blob_public_access defaultValue: 'false' name: azure-storage-disable-storage-account-public-access-quick-action description: "Disables public access to blobs for the storage account, blocking anonymous/public read access to containers and blobs. Required permissions: Microsoft.Storage/storageAccounts/read, Microsoft.Storage/storageAccounts/write." prettyname: Disable Storage Account Public Access hidden: true quickaction: true outputs: - contextPath: Azure.Storage.StorageAccounts.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.Storage.StorageAccounts.kind description: The kind of storage account. type: String - contextPath: Azure.Storage.StorageAccounts.location description: The geo-location where the resource lives. type: String - contextPath: Azure.Storage.StorageAccounts.name description: The name of the resource. type: String - contextPath: Azure.Storage.StorageAccounts.properties.isHnsEnabled description: Account HierarchicalNamespace enabled if sets to true. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.allowBlobPublicAccess description: If set to true (default), allows public access to all blobs or containers in the storage account. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.minimumTlsVersion description: The minimum TLS version to be permitted on requests to storage. Default is TLS 1.0. type: String - contextPath: Azure.Storage.StorageAccounts.properties.allowSharedKeyAccess description: Whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests (including shared access signatures) must be authorized with Azure Active Directory (Azure AD). type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.creationTime description: The creation date and time of the storage account in UTC. type: Date - contextPath: Azure.Storage.StorageAccounts.properties.primaryEndpoints description: The URLs that are used to retrieve a public blob, queue, or table object. type: String - contextPath: Azure.Storage.StorageAccounts.properties.primaryLocation description: The storage account primary data center location. type: String - contextPath: Azure.Storage.StorageAccounts.properties.provisioningState description: The status of the storage account at the time the operation was called. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.routingChoice description: The kind of network routing the user chose. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishMicrosoftEndpoints description: Whether Microsoft routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishInternetEndpoints description: Whether internet routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.encryption description: Encryption settings to be used for server-side encryption for the storage account. type: String - contextPath: Azure.Storage.StorageAccounts.properties.secondaryLocation description: The geo-replicated secondary location for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfPrimary description: Whether the storage account primary location is available or unavailable. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfSecondary description: Whether the storage account secondary location is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.supportsHttpsTrafficOnly description: If set to true, allows https traffic only to storage service. type: Boolean - contextPath: Azure.Storage.StorageAccounts.sku.name description: The SKU name. Required for account creation; optional for update. type: String - contextPath: Azure.Storage.StorageAccounts.sku.tier description: The SKU tier. This is based on the SKU name. type: String - contextPath: Azure.Storage.StorageAccounts.tags description: Resource tags. - contextPath: Azure.Storage.StorageAccounts.type description: The storage account type. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: name type: string required: true defaultValue: AZ Web App description: Name of the Web App. prettyname: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - auto: PREDEFINED name: remote_debugging_enabled type: bool required: false description: Whether remote debugging is enabled. defaultValue: 'false' description: "Disables remote debugging for the web app to reduce the risk of unauthorized code access. Deprecated. Use Disable Remote Debugging on Web App instead. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." name: azure-webapp-disable-remote-debugging-quick-action prettyname: Disable Remote Debugging on Azure App hidden: true deprecated: true quickaction: true outputs: - contextPath: Azure.WebAppConfig.id description: Resource ID. type: String - contextPath: Azure.WebAppConfig.name description: Resource name. type: String - contextPath: Azure.WebAppConfig.type description: Resource type. type: String - contextPath: Azure.WebAppConfig.location description: Resource location. type: String - contextPath: Azure.WebAppConfig.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.WebAppConfig.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.WebAppConfig.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.WebAppConfig.properties.phpVersion description: PHP version. type: String - contextPath: Azure.WebAppConfig.properties.pythonVersion description: Python version. type: String - contextPath: Azure.WebAppConfig.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.WebAppConfig.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.WebAppConfig.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.WebAppConfig.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.WebAppConfig.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebAppConfig.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebAppConfig.properties.ftpsState description: State of FTP/ FTPS service. type: String - contextPath: Azure.WebAppConfig.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.WebAppConfig.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.WebAppConfig.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.allowedOrigins description: CORS allowed origins. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.supportCredentials description: Indicates whether CORS supports credentials. type: Boolean - contextPath: Azure.WebAppConfig.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.WebAppConfig.properties.apiManagementConfig.id description: Azure API management integration ID. - name: azure-appservice-webapp-config-disable-remote-debugging-quick-action description: "Disables remote debugging for the web app to reduce the risk of unauthorized code access. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." prettyname: Disable Remote Debugging on Web App hidden: true quickaction: true arguments: - name: subscription_id type: string description: The subscription ID. required: true defaultValue: Subscription ID prettyname: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: name type: string required: true defaultValue: AZ Web App description: Name of the Web App. prettyname: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - auto: PREDEFINED name: remote_debugging_enabled type: bool required: false description: Whether remote debugging is enabled. defaultValue: 'false' predefined: - 'true' - 'false' outputs: - contextPath: Azure.AppService.WebAppConfiguration.id description: Resource ID. type: String - contextPath: Azure.AppService.WebAppConfiguration.name description: Resource name. type: String - contextPath: Azure.AppService.WebAppConfiguration.type description: Resource type. type: String - contextPath: Azure.AppService.WebAppConfiguration.location description: Resource location. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.AppService.WebAppConfiguration.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.phpVersion description: PHP version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.pythonVersion description: Python version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.ftpsState description: State of FTP / FTPS service. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.cors description: Cross-Origin Resource Sharing (CORS) settings. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - name: azure-billing-usage-list description: "Returns actual usage and cost details for a given time period, optionally filtered by service name. Required permission: Microsoft.Consumption/usageDetails/read." arguments: - name: subscription_id description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true - name: expand_result description: Whether to expand the result. Default - false. default: false auto: PREDEFINED predefined: - "false" - "true" required: false type: Boolean - name: filter description: Optional filter for the API. API argument - $filter. required: false - name: metric description: The metric to retrieve. API values [actualcost, amortizedcost, usage]. required: false auto: PREDEFINED predefined: - Actual Cost - Amortized Cost - Usage - name: max_results defaultValue: 50 description: Maximum results to return. Default - 50, Max - 1000. required: false type: Number - name: next_page_token description: Next page token for pagination. Use value from Azure.Billing.UsageNextToken. required: false outputs: - contextPath: Azure.Billing.Usage description: List of usage details from Azure Consumption API. - contextPath: Azure.Billing.Usage.id description: Fully qualified resource ID for the usage detail. type: String - contextPath: Azure.Billing.Usage.name description: Name of the usage detail resource. type: String - contextPath: Azure.Billing.Usage.type description: Resource type (Microsoft.Consumption/usageDetails). type: String - contextPath: Azure.Billing.Usage.kind description: Kind of usage detail (legacy, modern). type: String - contextPath: Azure.Billing.Usage.properties.billingAccountId description: Billing account identifier. type: String - contextPath: Azure.Billing.Usage.properties.billingAccountName description: Billing account name. type: String - contextPath: Azure.Billing.Usage.properties.billingPeriodStartDate description: Billing period start date. type: Date - contextPath: Azure.Billing.Usage.properties.billingPeriodEndDate description: Billing period end date. type: Date - contextPath: Azure.Billing.Usage.properties.billingProfileId description: Billing profile identifier. type: String - contextPath: Azure.Billing.Usage.properties.billingProfileName description: Billing profile name. type: String - contextPath: Azure.Billing.Usage.properties.accountOwnerId description: Account owner identifier. type: String - contextPath: Azure.Billing.Usage.properties.accountName description: Account name. type: String - contextPath: Azure.Billing.Usage.properties.subscriptionId description: Subscription identifier. type: String - contextPath: Azure.Billing.Usage.properties.subscriptionName description: Subscription name. type: String - contextPath: Azure.Billing.Usage.properties.date description: Usage date. type: Date - contextPath: Azure.Billing.Usage.properties.product description: Product name. type: String - contextPath: Azure.Billing.Usage.properties.partNumber description: Part number for the product. type: String - contextPath: Azure.Billing.Usage.properties.meterId description: Meter identifier. type: String - contextPath: Azure.Billing.Usage.properties.meterDetails description: Meter details object. - contextPath: Azure.Billing.Usage.properties.meterDetails.meterName description: Meter name. type: String - contextPath: Azure.Billing.Usage.properties.meterDetails.meterCategory description: Meter category. type: String - contextPath: Azure.Billing.Usage.properties.meterDetails.meterSubCategory description: Meter subcategory. type: String - contextPath: Azure.Billing.Usage.properties.meterDetails.unit description: Unit of measure. type: String - contextPath: Azure.Billing.Usage.properties.meterDetails.meterLocation description: Meter location. type: String - contextPath: Azure.Billing.Usage.properties.meterDetails.totalIncludedQuantity description: Total included quantity. type: Number - contextPath: Azure.Billing.Usage.properties.meterDetails.pretaxStandardRate description: Pretax standard rate. type: Number - contextPath: Azure.Billing.Usage.properties.quantity description: Usage quantity. type: Number - contextPath: Azure.Billing.Usage.properties.effectivePrice description: Effective price for the usage. type: Number - contextPath: Azure.Billing.Usage.properties.cost description: Cost amount. type: Number - contextPath: Azure.Billing.Usage.properties.unitPrice description: Unit price. type: Number - contextPath: Azure.Billing.Usage.properties.billingCurrency description: Billing currency. type: String - contextPath: Azure.Billing.Usage.properties.resourceLocation description: Resource location. type: String - contextPath: Azure.Billing.Usage.properties.consumedService description: Consumed service name. type: String - contextPath: Azure.Billing.Usage.properties.resourceId description: Resource identifier. type: String - contextPath: Azure.Billing.Usage.properties.resourceName description: Resource name. type: String - contextPath: Azure.Billing.Usage.properties.serviceInfo1 description: Service info 1. type: String - contextPath: Azure.Billing.Usage.properties.serviceInfo2 description: Service info 2. type: String - contextPath: Azure.Billing.Usage.properties.additionalInfo description: Additional information. type: String - contextPath: Azure.Billing.Usage.properties.invoiceSection description: Invoice section. type: String - contextPath: Azure.Billing.Usage.properties.costCenter description: Cost center. type: String - contextPath: Azure.Billing.Usage.properties.resourceGroup description: Resource group name. type: String - contextPath: Azure.Billing.Usage.properties.reservationId description: Reservation identifier. type: String - contextPath: Azure.Billing.Usage.properties.reservationName description: Reservation name. type: String - contextPath: Azure.Billing.Usage.properties.productOrderId description: Product order identifier. type: String - contextPath: Azure.Billing.Usage.properties.productOrderName description: Product order name. type: String - contextPath: Azure.Billing.Usage.properties.offerId description: Offer identifier. type: String - contextPath: Azure.Billing.Usage.properties.isAzureCreditEligible description: Whether usage is Azure credit eligible. type: Boolean - contextPath: Azure.Billing.Usage.properties.term description: Term. type: String - contextPath: Azure.Billing.Usage.properties.publisherName description: Publisher name. type: String - contextPath: Azure.Billing.Usage.properties.publisherType description: Publisher type. type: String - contextPath: Azure.Billing.Usage.properties.planName description: Plan name. type: String - contextPath: Azure.Billing.Usage.properties.chargeType description: Charge type. type: String - contextPath: Azure.Billing.Usage.properties.frequency description: Frequency. type: String - contextPath: Azure.Billing.Usage.properties.payGPrice description: Pay-as-you-go price. type: Number - contextPath: Azure.Billing.Usage.properties.pricingModel description: Pricing model. type: String - contextPath: Azure.Billing.UsageNextToken description: Next page token for pagination. type: String - name: azure-billing-forecast-list description: "Returns cost forecast for a subscription over a given time range. Required permission: Microsoft.CostManagement/forecast/read." arguments: - name: subscription_id description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true type: String - name: type description: Forecast type (required). required: true type: String auto: PREDEFINED predefined: - Usage - ActualCost - AmortizedCost - name: aggregation_function_name description: The name of the column to aggregate (required). required: true type: String auto: PREDEFINED predefined: - PreTaxCostUSD - Cost - CostUSD - PreTaxCost - name: aggregation_function_type description: The name of the aggregation function to use. required: false type: String defaultValue: Sum - name: granularity description: The granularity of the forecast. required: false type: String defaultValue: Daily - name: start_date description: Start date for the forecast. Default value current time (UTC). e.g. 2022-01-01T00:00:00Z. required: false type: String - name: end_date description: End date for the forecast. Default value 7 days from current time (UTC). e.g. 2022-01-01T00:00:00Z. required: false type: String - name: filter description: A URL parameter to filter forecasts by properties/usageDate (Utc time), properties/chargeType or properties/grain. The filter supports 'eq', 'lt', 'gt', 'le', 'ge', and 'and'. It does not currently support 'ne', 'or', or 'not'. required: false type: String - name: include_actual_cost description: Include actual cost data. defaultValue: 'false' auto: PREDEFINED predefined: - 'true' - 'false' required: false - name: include_fresh_partial_cost description: Include fresh partial cost data. auto: PREDEFINED predefined: - 'true' - 'false' required: false defaultValue: 'false' outputs: - contextPath: Azure.Billing.Forecast.Cost description: Cost amount. type: Number - contextPath: Azure.Billing.Forecast.CostUSD description: Cost in USD. type: Number - contextPath: Azure.Billing.Forecast.PreTaxCost description: Pre-tax cost amount. type: Number - contextPath: Azure.Billing.Forecast.UsageDate description: Usage date for the forecast (YYYY-MM-DD format). type: String - contextPath: Azure.Billing.Forecast.CostStatus description: Cost status (Forecast, Actual). type: String - contextPath: Azure.Billing.Forecast.Currency description: Currency code for the forecast. type: String - name: azure-billing-budgets-list description: "Lists configured budgets at the subscription or resource group level. Required permission: Microsoft.Consumption/budgets/read." arguments: - name: subscription_id description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true - name: budget_name description: Name of the budget. Optional; if provided, returns a specific budget. required: false outputs: - contextPath: Azure.Billing.Budget description: List of budget details from Azure Consumption API. - contextPath: Azure.Billing.Budget.id description: Fully qualified resource ID for the budget. type: String - contextPath: Azure.Billing.Budget.name description: Name of the budget resource. type: String - contextPath: Azure.Billing.Budget.type description: Resource type (Microsoft.Consumption/budgets). type: String - contextPath: Azure.Billing.Budget.eTag description: ETag for the budget resource. type: String - contextPath: Azure.Billing.Budget.properties.category description: Budget category (Cost, Usage). type: String - contextPath: Azure.Billing.Budget.properties.amount description: Budget amount limit. type: Number - contextPath: Azure.Billing.Budget.properties.timeGrain description: Time grain for the budget (Monthly, Quarterly, Annually). type: String - contextPath: Azure.Billing.Budget.properties.timePeriod description: Time period object for the budget. - contextPath: Azure.Billing.Budget.properties.timePeriod.startDate description: Start date of the budget period. type: Date - contextPath: Azure.Billing.Budget.properties.timePeriod.endDate description: End date of the budget period. type: Date - contextPath: Azure.Billing.Budget.properties.currentSpend description: Current spend object. - contextPath: Azure.Billing.Budget.properties.currentSpend.amount description: Current spend amount. type: Number - contextPath: Azure.Billing.Budget.properties.currentSpend.unit description: Currency unit for current spend. type: String - contextPath: Azure.Billing.Budget.properties.notifications description: Budget notifications configuration. - contextPath: Azure.Billing.Budget.properties.filter description: Budget filter configuration. - contextPath: Azure.Billing.Budget.properties.filter.and description: AND filter conditions. - contextPath: Azure.Billing.Budget.properties.filter.dimensions description: Dimension filters. - contextPath: Azure.Billing.Budget.properties.filter.dimensions.name description: Dimension name (ResourceGroup, ResourceType, etc.). type: String - contextPath: Azure.Billing.Budget.properties.filter.dimensions.operator description: Filter operator (In, Equal). type: String - contextPath: Azure.Billing.Budget.properties.filter.dimensions.values description: Filter values array. - contextPath: Azure.Billing.Budget.properties.filter.tags description: Tag filters. - contextPath: Azure.Billing.Budget.properties.filter.tags.name description: Tag name. type: String - contextPath: Azure.Billing.Budget.properties.filter.tags.operator description: Tag filter operator. type: String - contextPath: Azure.Billing.Budget.properties.filter.tags.values description: Tag filter values. - contextPath: Azure.Billing.Budget.properties.forecastSpend description: Forecasted spend object. - contextPath: Azure.Billing.Budget.properties.forecastSpend.amount description: Forecasted spend amount. type: Number - contextPath: Azure.Billing.Budget.properties.forecastSpend.unit description: Currency unit for forecasted spend. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} defaultValue: Resource Group - name: name type: string required: true description: Name of the Web App. prettyname: AZ Web App defaultValue: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - name: min_tls_version type: str auto: PREDEFINED description: Minimum TLS version required for SSL requests. predefined: - '1.0' - '1.1' - '1.2' - '1.3' defaultValue: '1.2' description: "Sets the web app's minimum accepted TLS version to 1.2 to enhance security. Deprecated. Use Set Web App Minimum TLS Version instead. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." name: azure-webapp-set-min-tls-version-quick-action prettyname: Set Web App Min TLS Version hidden: true quickaction: true deprecated: true outputs: - contextPath: Azure.WebAppConfig.id description: Resource ID. type: String - contextPath: Azure.WebAppConfig.name description: Resource name. type: String - contextPath: Azure.WebAppConfig.type description: Resource type. type: String - contextPath: Azure.WebAppConfig.location description: Resource location. type: String - contextPath: Azure.WebAppConfig.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.WebAppConfig.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.WebAppConfig.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.WebAppConfig.properties.phpVersion description: PHP version. type: String - contextPath: Azure.WebAppConfig.properties.pythonVersion description: Python version. type: String - contextPath: Azure.WebAppConfig.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.WebAppConfig.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.WebAppConfig.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.WebAppConfig.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.WebAppConfig.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebAppConfig.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebAppConfig.properties.ftpsState description: State of FTP/ FTPS service. type: String - contextPath: Azure.WebAppConfig.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.WebAppConfig.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.WebAppConfig.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.allowedOrigins description: CORS allowed origins. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.supportCredentials description: Indicates whether CORS supports credentials. type: Boolean - contextPath: Azure.WebAppConfig.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.WebAppConfig.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - name: azure-appservice-webapp-config-update-min-tls-version-quick-action description: "Sets the web app's minimum accepted TLS version to 1.2 to enhance security. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." prettyname: Set Web App Minimum TLS Version hidden: true quickaction: true arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} defaultValue: Resource Group - name: name type: string required: true description: Name of the Web App. prettyname: AZ Web App defaultValue: AZ Web App prettypredefined: AZ Web App: ${asset.xdm.asset.name} - name: min_tls_version auto: PREDEFINED description: Minimum TLS version required for SSL requests. predefined: - '1.0' - '1.1' - '1.2' - '1.3' defaultValue: '1.2' outputs: - contextPath: Azure.AppService.WebAppConfiguration.id description: Resource ID. type: String - contextPath: Azure.AppService.WebAppConfiguration.name description: Resource name. type: String - contextPath: Azure.AppService.WebAppConfiguration.type description: Resource type. type: String - contextPath: Azure.AppService.WebAppConfiguration.location description: Resource location. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.AppService.WebAppConfiguration.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.phpVersion description: PHP version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.pythonVersion description: Python version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.ftpsState description: State of FTP / FTPS service. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.AppService.WebAppConfiguration.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.cors description: Cross-Origin Resource Sharing (CORS) settings. type: Unknown - contextPath: Azure.AppService.WebAppConfiguration.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.AppService.WebAppConfiguration.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: name type: string required: true description: Name of the Web App. prettyname: AZ Function Name defaultValue: AZ Function Name prettypredefined: AZ Function Name: ${asset.xdm.asset.name} - name: min_tls_version type: str auto: PREDEFINED description: Minimum TLS version required for SSL requests. predefined: - '1.0' - '1.1' - '1.2' - '1.3' defaultValue: '1.2' description: "Sets the Function App's minimum accepted TLS version to 1.2 to enhance security. Deprecated. Use Set Web App Minimum TLS Version instead. Required permissions: Microsoft.Web/sites/config/read, Microsoft.Web/sites/config/write." name: azure-function-app-set-min-tls-version-quick-action prettyname: Set Function App Min TLS Version hidden: true deprecated: true quickaction: true outputs: - contextPath: Azure.WebAppConfig.id description: Resource ID. type: String - contextPath: Azure.WebAppConfig.name description: Resource name. type: String - contextPath: Azure.WebAppConfig.type description: Resource type. type: String - contextPath: Azure.WebAppConfig.location description: Resource location. type: String - contextPath: Azure.WebAppConfig.properties.numberOfWorkers description: Number of workers. type: Number - contextPath: Azure.WebAppConfig.properties.defaultDocuments description: List of default documents. type: Unknown - contextPath: Azure.WebAppConfig.properties.netFrameworkVersion description: .NET Framework version. type: String - contextPath: Azure.WebAppConfig.properties.phpVersion description: PHP version. type: String - contextPath: Azure.WebAppConfig.properties.pythonVersion description: Python version. type: String - contextPath: Azure.WebAppConfig.properties.nodeVersion description: Node.js version. type: String - contextPath: Azure.WebAppConfig.properties.powerShellVersion description: PowerShell version. type: String - contextPath: Azure.WebAppConfig.properties.linuxFxVersion description: Linux app framework and version. type: String - contextPath: Azure.WebAppConfig.properties.windowsFxVersion description: Windows container image name. type: String - contextPath: Azure.WebAppConfig.properties.requestTracingEnabled description: Indicates whether request tracing is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingEnabled description: Indicates whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebAppConfig.properties.http20Enabled description: Indicates whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebAppConfig.properties.ftpsState description: State of FTP/ FTPS service. type: String - contextPath: Azure.WebAppConfig.properties.webSocketsEnabled description: Indicates whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.alwaysOn description: Indicates whether Always On is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.managedPipelineMode description: Managed pipeline mode. type: String - contextPath: Azure.WebAppConfig.properties.loadBalancing description: Site load balancing mode. type: String - contextPath: Azure.WebAppConfig.properties.autoHealEnabled description: Indicates whether Auto Heal is enabled. type: Boolean - contextPath: Azure.WebAppConfig.properties.autoHealRules description: Auto Heal rules configuration. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.allowedOrigins description: CORS allowed origins. type: Unknown - contextPath: Azure.WebAppConfig.properties.cors.supportCredentials description: Indicates whether CORS supports credentials. type: Boolean - contextPath: Azure.WebAppConfig.properties.apiDefinition.url description: URL of the API definition. type: String - contextPath: Azure.WebAppConfig.properties.apiManagementConfig.id description: Azure API management integration ID. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: string required: true description: Name of the MySQL flexible server. prettyname: MySQL Server defaultValue: MySQL Server prettypredefined: MySQL Server: ${asset.xdm.asset.name} - name: configuration_name type: string description: Server configuration name. defaultValue: 'require_secure_transport' - name: value type: string description: Configuration value. defaultValue: 'on' description: "Enforces secure transport (SSL/TLS) for connections to the MySQL Flexible Server. Required permissions: Microsoft.DBforMySQL/flexibleServers/configurations/read, Microsoft.DBforMySQL/flexibleServers/configurations/write." name: azure-mysql-set-secure-transport-quick-action prettyname: Set Secure Transport for MySQL hidden: true quickaction: true outputs: [] # No outputs are returned in response - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - description: The resource group name. name: resource_group_name required: true prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - description: Name of the storage account. name: account_name required: true prettyname: Storage Account defaultValue: Storage Account prettypredefined: Storage Account: ${asset.xdm.asset.name} - auto: PREDEFINED description: Default action when no other network rule matches. name: network_ruleset_default_action defaultValue: Deny description: "Sets the storage account’s default network action to Deny. Only explicitly allowed IPs, subnets, or trusted Azure services will have access. Required permissions: Microsoft.Storage/storageAccounts/read, Microsoft.Storage/storageAccounts/write." name: azure-network-disable-storage-account-access-quick-action prettyname: Disable Network Access to Storage Account hidden: true quickaction: true outputs: - contextPath: Azure.Storage.StorageAccounts.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.Storage.StorageAccounts.kind description: The kind of storage account. type: String - contextPath: Azure.Storage.StorageAccounts.location description: The geo-location where the resource lives. type: String - contextPath: Azure.Storage.StorageAccounts.name description: The name of the resource. type: String - contextPath: Azure.Storage.StorageAccounts.properties.isHnsEnabled description: If set to true, the account's HierarchicalNamespace is enabled. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.allowBlobPublicAccess description: If set to true (default), allows public access to all blobs or containers in the storage account. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.minimumTlsVersion description: The minimum TLS version to be permitted on requests to storage. Default is TLS 1.0. type: String - contextPath: Azure.Storage.StorageAccounts.properties.allowSharedKeyAccess description: Whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests (including shared access signatures) must be authorized with Azure Active Directory (Azure AD). type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.creationTime description: The creation date and time of the storage account in UTC. type: Date - contextPath: Azure.Storage.StorageAccounts.properties.primaryEndpoints description: The URLs that are used to retrieve a public blob, queue, or table object. type: String - contextPath: Azure.Storage.StorageAccounts.properties.primaryLocation description: The storage account primary data center location. type: String - contextPath: Azure.Storage.StorageAccounts.properties.provisioningState description: The status of the storage account at the time the operation was called. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.routingChoice description: The kind of network routing the user chose. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishMicrosoftEndpoints description: Whether Microsoft routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishInternetEndpoints description: Whether internet routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.encryption description: Encryption settings to be used for server-side encryption for the storage account. type: String - contextPath: Azure.Storage.StorageAccounts.properties.secondaryLocation description: The geo-replicated secondary location for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfPrimary description: Whether the storage account primary location is available or unavailable. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfSecondary description: Whether the storage account secondary location is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.supportsHttpsTrafficOnly description: If set to true, allows only HTTPS traffic to the storage service. type: Boolean - contextPath: Azure.Storage.StorageAccounts.sku.name description: The SKU name. Required for account creation; optional for update. type: String - contextPath: Azure.Storage.StorageAccounts.sku.tier description: The SKU tier. This is based on the SKU name. type: String - contextPath: Azure.Storage.StorageAccounts.tags description: Resource tags. - contextPath: Azure.Storage.StorageAccounts.type description: The storage account type. type: String - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: log_profile_name description: Name of the log profile to update. required: true type: String prettyname: Log Profile defaultValue: Log Profile prettypredefined: Log Profile: ${asset.xdm.asset.name} - name: location description: Resource location. defaultValue: global - name: retention_policy_days description: Number of days to retain logs. type: Number defaultValue: 365 - auto: PREDEFINED name: retention_policy_enabled description: Whether to enable the retention policy. type: bool defaultValue: 'true' description: "Sets the log profile’s retention policy to 365 days and enables it across all supported locations. Required permissions: Microsoft.Insights/logprofiles/read, Microsoft.Insights/logprofiles/write." name: azure-monitor-log-retention-period-quick-action prettyname: Update Azure Monitor Log Retention Period hidden: true quickaction: true outputs: - contextPath: Azure.Monitor.LogProfiles.id type: String description: The fully qualified Azure resource ID for the log profile. - contextPath: Azure.Monitor.LogProfiles.name type: String description: The name of the log profile. - contextPath: Azure.Monitor.LogProfiles.type type: String description: The type of the resource (Microsoft.Insights/logProfiles). - contextPath: Azure.Monitor.LogProfiles.location type: String description: The location of the log profile. - contextPath: Azure.Monitor.LogProfiles.tags type: Object description: Resource tags. - contextPath: Azure.Monitor.LogProfiles.properties.storageAccountId type: String description: The resource ID of the storage account to which diagnostic logs are delivered. - contextPath: Azure.Monitor.LogProfiles.properties.serviceBusRuleId type: String description: The service bus rule ID to which diagnostic logs are sent. - contextPath: Azure.Monitor.LogProfiles.properties.locations type: Array description: A list of regions for which events are collected. - contextPath: Azure.Monitor.LogProfiles.properties.categories type: Array description: A list of categories of logs that are collected. - contextPath: Azure.Monitor.LogProfiles.properties.retentionPolicy.enabled type: Boolean description: Specifies whether the retention policy is enabled. - contextPath: Azure.Monitor.LogProfiles.properties.retentionPolicy.days type: Number description: The number of days for the retention policy. - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string description: The resource group name. required: true prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - description: Name of the storage account. name: account_name required: true prettyname: Storage Account defaultValue: Storage Account prettypredefined: Storage Account: ${asset.xdm.asset.name} - auto: PREDEFINED description: Whether to allow only HTTPS traffic to the storage account. name: supports_https_traffic_only defaultValue: 'true' description: "Enforces HTTPS-only traffic for the storage account, rejecting any requests made over HTTP. Required permissions: Microsoft.Storage/storageAccounts/read, Microsoft.Storage/storageAccounts/write." name: azure-set-storage-account-https-only-quick-action prettyname: Set Storage Account to HTTPS only hidden: true quickaction: true outputs: - contextPath: Azure.Storage.StorageAccounts.id description: Fully qualified resource ID for the resource. type: String - contextPath: Azure.Storage.StorageAccounts.kind description: The kind of storage account. type: String - contextPath: Azure.Storage.StorageAccounts.location description: The geo-location where the resource lives. type: String - contextPath: Azure.Storage.StorageAccounts.name description: The name of the resource. type: String - contextPath: Azure.Storage.StorageAccounts.properties.isHnsEnabled description: If set to true, the account's HierarchicalNamespace enabled. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.allowBlobPublicAccess description: If set to true (default), allows public access to all blobs or containers in the storage account. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.minimumTlsVersion description: The minimum TLS version to be permitted on requests to storage. Default is TLS 1.0. type: String - contextPath: Azure.Storage.StorageAccounts.properties.allowSharedKeyAccess description: Whether the storage account permits requests to be authorized with the account access key via Shared Key. If false, then all requests (including shared access signatures) must be authorized with Azure Active Directory (Azure AD). type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.creationTime description: The creation date and time of the storage account in UTC. type: Date - contextPath: Azure.Storage.StorageAccounts.properties.primaryEndpoints description: The URLs that are used to retrieve a public blob, queue, or table object. type: String - contextPath: Azure.Storage.StorageAccounts.properties.primaryLocation description: The storage account primary data center location. type: String - contextPath: Azure.Storage.StorageAccounts.properties.provisioningState description: The status of the storage account at the time the operation was called. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.routingChoice description: The kind of network routing the user chose. type: String - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishMicrosoftEndpoints description: Whether Microsoft routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.routingPreference.publishInternetEndpoints description: Whether internet routing storage endpoints are to be published. type: Boolean - contextPath: Azure.Storage.StorageAccounts.properties.encryption description: Encryption settings to be used for server-side encryption for the storage account. type: String - contextPath: Azure.Storage.StorageAccounts.properties.secondaryLocation description: The geo-replicated secondary location for the storage account. Only available if the accountType is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfPrimary description: Whether the storage account primary location is available or unavailable. type: String - contextPath: Azure.Storage.StorageAccounts.properties.statusOfSecondary description: Whether the storage account secondary location is available or unavailable. Only available if the SKU name is Standard_GRS or Standard_RAGRS. type: String - contextPath: Azure.Storage.StorageAccounts.properties.supportsHttpsTrafficOnly description: If set to true, allows only HTTPS traffic to the storage service. type: Boolean - contextPath: Azure.Storage.StorageAccounts.sku.name description: The SKU name. Required for account creation; optional for update. type: String - contextPath: Azure.Storage.StorageAccounts.sku.tier description: The SKU tier. This is based on the SKU name. type: String - contextPath: Azure.Storage.StorageAccounts.tags description: Resource tags. - contextPath: Azure.Storage.StorageAccounts.type description: The storage account type. type: String - arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: name type: String required: true description: Name of the Function App. prettyname: AZ Function Name defaultValue: AZ Function Name prettypredefined: AZ Function Name: ${asset.xdm.asset.name} - name: identity_type type: String description: The type of managed identity (SystemAssigned, UserAssigned, etc.). prettyname: Identity Type defaultValue: 'SystemAssigned' hidden: true description: "Assigns a system-managed identity to the identified Function App, enabling secure access to Azure services without manual credential management. Deprecated. Use Assign Web App Managed Identity instead. Required permissions: Microsoft.Web/sites/read, Microsoft.Web/sites/write." name: azure-webapp-update-assign-managed-identity-quick-action prettyname: Assign Managed Identity to Function App hidden: true deprecated: true quickaction: true outputs: - contextPath: Azure.WebApp.id description: Fully qualified resource ID for the web app. type: String - contextPath: Azure.WebApp.name description: The name of the web app. type: String - contextPath: Azure.WebApp.type description: The resource type, e.g., Microsoft.Web/sites. type: String - contextPath: Azure.WebApp.location description: Geographic location of the web app. type: String - contextPath: Azure.WebApp.kind description: The kind of the app, e.g., app, functionapp, etc. type: String - contextPath: Azure.WebApp.tags description: Resource tags as key-value pairs. - contextPath: Azure.WebApp.identity.type description: The type of managed identity (SystemAssigned, UserAssigned, etc.). type: String - contextPath: Azure.WebApp.identity.principalId description: The principal ID of the system-assigned identity. type: String - contextPath: Azure.WebApp.identity.tenantId description: The tenant ID of the system-assigned identity. type: String - contextPath: Azure.WebApp.identity.userAssignedIdentities description: The list of user-assigned identities associated with the web app. - contextPath: Azure.WebApp.properties.state description: Current state of the web app (Running, Stopped, etc.). type: String - contextPath: Azure.WebApp.properties.enabled description: Whether the web app is enabled. type: Boolean - contextPath: Azure.WebApp.properties.defaultHostName description: Default host name of the web app. type: String - contextPath: Azure.WebApp.properties.hostNames description: List of host names associated with the web app. - contextPath: Azure.WebApp.properties.repositorySiteName description: Name of the repository site. type: String - contextPath: Azure.WebApp.properties.clientAffinityEnabled description: Whether client affinity is enabled. type: Boolean - contextPath: Azure.WebApp.properties.clientCertEnabled description: Whether client certificates are enabled. type: Boolean - contextPath: Azure.WebApp.properties.clientCertExclusionPaths description: Paths to exclude from client certificate authentication. type: String - contextPath: Azure.WebApp.properties.hostingEnvironment description: App Service Environment to use for the web app. type: String - contextPath: Azure.WebApp.properties.serverFarmId description: Resource ID of the associated App Service plan. type: String - contextPath: Azure.WebApp.properties.reserved description: Whether the web app is on a Linux plan. type: Boolean - contextPath: Azure.WebApp.properties.isXenon description: Whether the web app is hosted in Xenon. type: Boolean - contextPath: Azure.WebApp.properties.hyperV description: Whether Hyper-V is enabled for the web app. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.appSettings description: List of app settings. - contextPath: Azure.WebApp.properties.siteConfig.metadata description: List of metadata settings. - contextPath: Azure.WebApp.properties.siteConfig.connectionStrings description: List of connection strings. - contextPath: Azure.WebApp.properties.siteConfig.localMySqlEnabled description: Whether local MySQL is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.alwaysOn description: Whether Always On is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.http20Enabled description: Whether HTTP/2 is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.minTlsVersion description: Minimum TLS version required. type: String - contextPath: Azure.WebApp.properties.siteConfig.ftpsState description: FTPS state (Disabled, AllAllowed, etc.). type: String - contextPath: Azure.WebApp.properties.siteConfig.linuxFxVersion description: Runtime stack for Linux apps. type: String - contextPath: Azure.WebApp.properties.siteConfig.windowsFxVersion description: Runtime stack for Windows apps. type: String - contextPath: Azure.WebApp.properties.siteConfig.numberOfWorkers description: Number of workers allocated. type: Number - contextPath: Azure.WebApp.properties.siteConfig.webSocketsEnabled description: Whether WebSockets are enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.preWarmedInstanceCount description: Number of pre-warmed instances. type: Number - contextPath: Azure.WebApp.properties.siteConfig.acrUseManagedIdentityCreds description: Whether ACR uses managed identity credentials. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.acrUserManagedIdentityID description: User-assigned identity ID for ACR. type: String - contextPath: Azure.WebApp.properties.siteConfig.scmType description: Source control management type. type: String - contextPath: Azure.WebApp.properties.siteConfig.use32BitWorkerProcess description: Whether to use 32-bit worker process. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealEnabled description: Whether auto-heal is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealRules description: Auto-heal rules configuration. - contextPath: Azure.WebApp.properties.siteConfig.tracingOptions description: Tracing options. type: String - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.detailedErrorLoggingEnabled description: Whether detailed error logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.httpLoggingEnabled description: Whether HTTP logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingEnabled description: Whether request tracing is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingExpirationTime description: Request tracing expiration time. type: DateTime - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.defaultDocuments description: List of default documents. - contextPath: Azure.WebApp.properties.siteConfig.virtualApplications description: List of virtual applications. - contextPath: Azure.WebApp.properties.siteConfig.loadBalancing description: Load balancing settings. type: String - contextPath: Azure.WebApp.properties.siteConfig.experiments description: Experiments configuration. - contextPath: Azure.WebApp.properties.siteConfig.limits description: Site limits configuration. - contextPath: Azure.WebApp.properties.siteConfig.autoSwapSlotName description: Auto-swap slot name. type: String - contextPath: Azure.WebApp.properties.siteConfig.localMySqlEnabled description: Whether local MySQL is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.ipSecurityRestrictions description: IP security restrictions. - contextPath: Azure.WebApp.properties.siteConfig.scmIpSecurityRestrictions description: SCM IP security restrictions. - contextPath: Azure.WebApp.properties.siteConfig.scmIpSecurityRestrictionsUseMain description: Whether SCM IP restrictions use main settings. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.cors description: CORS settings. - contextPath: Azure.WebApp.properties.siteConfig.push description: Push settings. - contextPath: Azure.WebApp.properties.siteConfig.apiDefinition description: API definition settings. - contextPath: Azure.WebApp.properties.siteConfig.apiManagementConfig description: API management configuration. - contextPath: Azure.WebApp.properties.siteConfig.autoHealEnabled description: Whether auto-heal is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.autoHealRules description: Auto-heal rules configuration. - contextPath: Azure.WebApp.properties.siteConfig.tracingOptions description: Tracing options. type: String - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingEnabled description: Whether remote debugging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.remoteDebuggingVersion description: Remote debugging version. type: String - contextPath: Azure.WebApp.properties.siteConfig.detailedErrorLoggingEnabled description: Whether detailed error logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.httpLoggingEnabled description: Whether HTTP logging is enabled. type: Boolean - contextPath: Azure.WebApp.properties.siteConfig.requestTracingEnabled description: Whether request tracing is enabled. type: Boolean - arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - description: The resource group name. name: resource_group_name required: true prettyname: Resource Group type: String defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - description: Name of the storage account. name: account_name required: true prettyname: Storage Account type: String defaultValue: Storage Account prettypredefined: Storage Account: ${asset.xdm.asset.name} - auto: PREDEFINED description: Whether DeleteRetentionPolicy is enabled. name: delete_rentention_policy_enabled type: bool defaultValue: 'true' hidden: true - description: Number of days to retain deleted items. name: delete_rentention_policy_days defaultValue: '30' type: number hidden: true description: "Enables blob soft delete for the storage account to retain deleted blobs for 30 days. The quick action is now deprecated, please use Enable Blob Soft Deletion. Required permissions: Microsoft.Storage/storageAccounts/blobServices/read, Microsoft.Storage/storageAccounts/blobServices/write." name: azure-storage-blob-enable-soft-delete-quick-action prettyname: Enable Soft Delete on Blob hidden: true quickaction: true deprecated: true outputs: - contextPath: Azure.StorageAccountBlobServiceProperties.id description: The resource ID. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.name description: The name of the resource. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.type description: The type of the resource. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.properties.cors description: Specifies CORS rules for the Blob service. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.properties.defaultServiceVersion description: The default version for requests to the blob service if an incoming request's version is not specified. Possible values include version 2008-10-27 and and all later versions. type: Date - contextPath: Azure.StorageAccountBlobServiceProperties.properties.deleteRetentionPolicy description: The service properties for soft delete. - contextPath: Azure.StorageAccountBlobServiceProperties.properties.isVersioningEnabled description: If set to true, enables versioning. type: Boolean - contextPath: Azure.StorageAccountBlobServiceProperties.properties.changeFeed description: The blob service properties for change feed events. - contextPath: Azure.StorageAccountBlobServiceProperties.sku.name description: The SKU name. type: String - contextPath: Azure.StorageAccountBlobServiceProperties.sku.tier description: The SKU tier. type: String - name: azure-storage-blob-soft-deletion-enable-quick-action prettyname: Enable Blob Soft Deletion description: "Enables blob soft delete for the storage account to retain deleted blobs for 30 days. Required permissions: Microsoft.Storage/storageAccounts/blobServices/read, Microsoft.Storage/storageAccounts/blobServices/write." hidden: true quickaction: true arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - description: The resource group name. name: resource_group_name required: true prettyname: Resource Group type: String defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - description: The name of the storage account. name: account_name required: true prettyname: Storage Account type: String defaultValue: Storage Account prettypredefined: Storage Account: ${asset.xdm.asset.name} - auto: PREDEFINED description: Whether DeleteRetentionPolicy is enabled. name: delete_retention_policy_enabled type: bool defaultValue: 'true' hidden: true - description: The number of days to retain deleted items. name: delete_retention_policy_days defaultValue: '30' type: number hidden: true outputs: - contextPath: Azure.Storage.BlobServices.id description: The resource ID. type: String - contextPath: Azure.Storage.BlobServices.name description: The name of the resource. type: String - contextPath: Azure.Storage.BlobServices.type description: The type of the resource. type: String - contextPath: Azure.Storage.BlobServices.properties.cors description: The CORS rules for the Blob service. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.defaultServiceVersion description: The default version to use for requests to the Blob service if an incoming request’s version is not specified. Possible values include version 2008-10-27 and all more recent versions. type: Date - contextPath: Azure.Storage.BlobServices.properties.deleteRetentionPolicy description: The service properties for soft delete. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.isVersioningEnabled description: Whether versioning is enabled. type: Boolean - contextPath: Azure.Storage.BlobServices.properties.changeFeed description: The blob service properties for change feed events. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.containerDeleteRetentionPolicy description: The blob service properties for container soft delete. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.lastAccessTimeTrackingPolicy description: The blob service property to configure last access time based tracking policy. type: Unknown - contextPath: Azure.Storage.BlobServices.properties.restorePolicy description: The blob service properties for blob restore policy. type: Unknown - contextPath: Azure.Storage.BlobServices.sku.name description: The SKU name. type: String - contextPath: Azure.Storage.BlobServices.sku.tier description: The SKU tier. type: String - arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: disk_name prettyname: VM Disk type: string required: true description: Name of the managed disk. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters. defaultValue: VM Disk prettypredefined: VM Disk: ${asset.xdm.asset.name} - name: public_network_access type: string description: Policy for controlling export on the disk. defaultValue: 'Disabled' hidden: true - name: network_access_policy type: string description: Policy for accessing the disk via network. defaultValue: 'DenyAll' hidden: true description: "Disables all public and private network access for a managed disk. Deprecated. Use Disable Public and Private Access to VM Disk instead. Required permissions: Microsoft.Compute/disks/read, Microsoft.Compute/disks/write." name: azure-disable-public-private-access-vm-disk-quick-action prettyname: Disable Public & Private Access to VM Disk hidden: true quickaction: true deprecated: true outputs: - contextPath: Azure.Disk.id description: Resource ID of the disk. type: String - contextPath: Azure.Disk.name description: Name of the disk. type: String - contextPath: Azure.Disk.type description: Type of the resource. type: String - contextPath: Azure.Disk.location description: Location of the disk. type: String - contextPath: Azure.Disk.tags description: Resource tags. - contextPath: Azure.Disk.managedBy description: ARM ID of the resource that manages the disk. type: String - contextPath: Azure.Disk.sku description: The name of the disk SKU. - contextPath: Azure.Disk.zones description: A list of availability zones. - contextPath: Azure.Disk.properties.timeCreated description: The time when the disk was created. type: String - contextPath: Azure.Disk.properties.diskSizeGB description: Size of the disk in GB. type: Number - contextPath: Azure.Disk.properties.diskIopsReadWrite description: The number of IOPS allowed for this disk. type: Number - contextPath: Azure.Disk.properties.diskMBpsReadWrite description: The bandwidth allowed for this disk in MBps. type: Number - contextPath: Azure.Disk.properties.diskIOPSReadOnly description: The number of read-only IOPS for this disk. type: Number - contextPath: Azure.Disk.properties.diskMBpsReadOnly description: The read-only bandwidth for this disk in MBps. type: Number - contextPath: Azure.Disk.properties.diskSizeBytes description: The size of the disk in bytes. type: Number - contextPath: Azure.Disk.properties.networkAccessPolicy description: Policy for accessing the disk via network. type: String - contextPath: Azure.Disk.properties.publicNetworkAccess description: Policy for export on the disk. type: String - contextPath: Azure.Disk.properties.burstingEnabled description: Whether bursting is enabled on the disk. type: Boolean - contextPath: Azure.Disk.properties.optimization description: The disk optimization setting. type: String - contextPath: Azure.Disk.properties.diskState description: The current state of the disk. type: String - contextPath: Azure.Disk.properties.supportedCapabilities description: Supported capabilities of the disk. - contextPath: Azure.Disk.properties.supportedPerformanceTiers description: Supported performance tiers of the disk. - contextPath: Azure.Disk.properties.supportedDiskTypes description: Supported disk types for the disk. - contextPath: Azure.Disk.properties.provisioningState description: The provisioning state of the disk. - contextPath: Azure.Disk.properties.timeModified description: The time when the disk was last modified. - contextPath: Azure.Disk.properties.diskAccessId description: The ARM ID of the DiskAccess resource. type: String - contextPath: Azure.Disk.properties.networkProfile description: The network profile of the disk. - contextPath: Azure.Disk.properties.creationData description: Disk creation data. - contextPath: Azure.Disk.properties.encryption description: Encryption settings for the disk. - contextPath: Azure.Disk.properties.encryptionSettingsCollection description: A collection of encryption settings. - contextPath: Azure.Disk.properties.encryptionType description: The type of key used to encrypt the data on the disk. type: String - contextPath: Azure.Disk.properties.securityProfile description: Security profile for the disk. - contextPath: Azure.Disk.properties.tieringProfile description: Tiering profile for the disk. - contextPath: Azure.Disk.properties.supportedTierList description: List of supported tiers for the disk. - contextPath: Azure.Disk.properties.availabilityZone description: Availability zone of the disk. type: String - contextPath: Azure.Disk.properties.dataAccessAuthMode description: Additional authentication requirements when exporting or uploading to a disk. type: String - contextPath: Azure.Disk.properties.osType description: The operating system type. type: String - contextPath: Azure.Disk.properties.hyperVGeneration description: The HyperVGenerationType of the virtual machine. type: String - contextPath: Azure.Disk.properties.lastOwnershipUpdateTime description: The last time ownership of the disk was updated. type: String - prettyname: Disable Public and Private Access to VM Disk description: "Disables all public and private network access for the managed disk. Required permissions: Microsoft.Compute/disks/read, Microsoft.Compute/disks/write." name: azure-disable-public-n-private-access-vm-disk-quick-action hidden: true quickaction: true arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: disk_name prettyname: VM Disk type: string required: true description: Name of the managed disk. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters. defaultValue: VM Disk prettypredefined: VM Disk: ${asset.xdm.asset.name} - name: public_network_access type: string description: Policy for controlling export on the disk. defaultValue: 'Disabled' hidden: true - name: network_access_policy type: string description: Policy for accessing the disk via network. defaultValue: 'DenyAll' hidden: true outputs: - contextPath: Azure.Compute.Disks.id description: Resource ID of the disk. type: String - contextPath: Azure.Compute.Disks.name description: Name of the disk. type: String - contextPath: Azure.Compute.Disks.type description: Type of the resource. type: String - contextPath: Azure.Compute.Disks.location description: Location of the disk. type: String - contextPath: Azure.Compute.Disks.tags description: Resource tags. type: Unknown - contextPath: Azure.Compute.Disks.managedBy description: ARM ID of the resource that manages the disk. type: String - contextPath: Azure.Compute.Disks.sku description: The disk SKU name. - contextPath: Azure.Compute.Disks.zones description: A list of availability zones. - contextPath: Azure.Compute.Disks.properties.timeCreated description: The time when the disk was created. type: String - contextPath: Azure.Compute.Disks.properties.diskSizeGB description: Size of the disk in GB. type: Number - contextPath: Azure.Compute.Disks.properties.diskIopsReadWrite description: The number of IOPS allowed for this disk. type: Number - contextPath: Azure.Compute.Disks.properties.diskMBpsReadWrite description: The bandwidth allowed for this disk in MBps. type: Number - contextPath: Azure.Compute.Disks.properties.diskIOPSReadOnly description: The number of read-only IOPS for this disk. type: Number - contextPath: Azure.Compute.Disks.properties.diskMBpsReadOnly description: The read-only bandwidth for this disk in MBps. type: Number - contextPath: Azure.Compute.Disks.properties.diskSizeBytes description: The size of the disk in bytes. type: Number - contextPath: Azure.Compute.Disks.properties.networkAccessPolicy description: Policy for accessing the disk via network. type: String - contextPath: Azure.Compute.Disks.properties.publicNetworkAccess description: Policy for export on the disk. type: String - contextPath: Azure.Compute.Disks.properties.burstingEnabled description: Whether bursting is enabled on the disk. type: Boolean - contextPath: Azure.Compute.Disks.properties.optimization description: The disk optimization setting. type: String - contextPath: Azure.Compute.Disks.properties.diskState description: The current state of the disk. type: String - contextPath: Azure.Compute.Disks.properties.supportedCapabilities description: Supported capabilities of the disk. - contextPath: Azure.Compute.Disks.properties.supportedPerformanceTiers description: Supported performance tiers of the disk. - contextPath: Azure.Compute.Disks.properties.supportedDiskTypes description: Supported disk types for the disk. - contextPath: Azure.Compute.Disks.properties.provisioningState description: The provisioning state of the disk. - contextPath: Azure.Compute.Disks.properties.timeModified description: The time when the disk was last modified. - contextPath: Azure.Compute.Disks.properties.diskAccessId description: The ARM ID of the DiskAccess resource. type: String - contextPath: Azure.Compute.Disks.properties.networkProfile description: The network profile of the disk. - contextPath: Azure.Compute.Disks.properties.creationData description: Disk creation data. - contextPath: Azure.Compute.Disks.properties.encryption description: Encryption settings for the disk. - contextPath: Azure.Compute.Disks.properties.encryptionSettingsCollection description: A collection of encryption settings. - contextPath: Azure.Compute.Disks.properties.encryptionType description: The type of key used to encrypt the data on the disk. type: String - contextPath: Azure.Compute.Disks.properties.securityProfile description: Security profile for the disk. - contextPath: Azure.Compute.Disks.properties.tieringProfile description: Tiering profile for the disk. - contextPath: Azure.Compute.Disks.properties.supportedTierList description: List of supported tiers for the disk. - contextPath: Azure.Compute.Disks.properties.availabilityZone description: Availability zone of the disk. type: String - contextPath: Azure.Compute.Disks.properties.dataAccessAuthMode description: Additional authentication requirements when exporting or uploading to a disk. type: String - contextPath: Azure.Compute.Disks.properties.osType description: The operating system type. type: String - contextPath: Azure.Compute.Disks.properties.hyperVGeneration description: The HyperVGenerationType of the virtual machine. type: String - contextPath: Azure.Compute.Disks.properties.lastOwnershipUpdateTime description: The last time ownership of the disk was updated. type: String - arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: disk_name prettyname: VM Disk type: string required: true description: Name of the managed disk. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters. defaultValue: VM Disk prettypredefined: VM Disk: ${asset.xdm.asset.name} - name: data_access_auth_mode type: string description: Additional authentication requirements when exporting or uploading to a disk or snapshot. defaultValue: AzureActiveDirectory hidden: true description: "Sets the data access authentication mode for the managed disk to Azure Active Directory. Deprecated. Use Set Disk Data Access to Azure AD instead. Required permissions: Microsoft.Compute/disks/read, Microsoft.Compute/disks/write." name: azure-disk-set-data-access-ad-quick-action prettyname: Set Disk Data Access to AD hidden: true deprecated: true quickaction: true outputs: - contextPath: Azure.Disk.id description: Resource ID of the disk. type: String - contextPath: Azure.Disk.name description: Name of the disk. type: String - contextPath: Azure.Disk.type description: Type of the resource. type: String - contextPath: Azure.Disk.location description: Location of the disk. type: String - contextPath: Azure.Disk.tags description: Resource tags. - contextPath: Azure.Disk.managedBy description: ARM ID of the resource that manages the disk. type: String - contextPath: Azure.Disk.sku description: The name of the disk SKU. - contextPath: Azure.Disk.zones description: A list of availability zones. - contextPath: Azure.Disk.properties.timeCreated description: The time when the disk was created. type: String - contextPath: Azure.Disk.properties.diskSizeGB description: Size of the disk in GB. type: Number - contextPath: Azure.Disk.properties.diskIopsReadWrite description: The number of IOPS allowed for this disk. type: Number - contextPath: Azure.Disk.properties.diskMBpsReadWrite description: The bandwidth allowed for this disk in MBps. type: Number - contextPath: Azure.Disk.properties.diskIOPSReadOnly description: The number of read-only IOPS for this disk. type: Number - contextPath: Azure.Disk.properties.diskMBpsReadOnly description: The read-only bandwidth for this disk in MBps. type: Number - contextPath: Azure.Disk.properties.diskSizeBytes description: The size of the disk in bytes. type: Number - contextPath: Azure.Disk.properties.networkAccessPolicy description: Policy for accessing the disk via network. type: String - contextPath: Azure.Disk.properties.publicNetworkAccess description: Policy for export on the disk. type: String - contextPath: Azure.Disk.properties.burstingEnabled description: Whether bursting is enabled on the disk. type: Boolean - contextPath: Azure.Disk.properties.optimization description: The disk optimization setting. type: String - contextPath: Azure.Disk.properties.diskState description: The current state of the disk. type: String - contextPath: Azure.Disk.properties.supportedCapabilities description: Supported capabilities of the disk. - contextPath: Azure.Disk.properties.supportedPerformanceTiers description: Supported performance tiers of the disk. - contextPath: Azure.Disk.properties.supportedDiskTypes description: Supported disk types for the disk. - contextPath: Azure.Disk.properties.provisioningState description: The provisioning state of the disk. - contextPath: Azure.Disk.properties.timeModified description: The time when the disk was last modified. - contextPath: Azure.Disk.properties.diskAccessId description: The ARM ID of the DiskAccess resource. type: String - contextPath: Azure.Disk.properties.networkProfile description: The network profile of the disk. - contextPath: Azure.Disk.properties.creationData description: Disk creation data. - contextPath: Azure.Disk.properties.encryption description: Encryption settings for the disk. - contextPath: Azure.Disk.properties.encryptionSettingsCollection description: A collection of encryption settings. - contextPath: Azure.Disk.properties.encryptionType description: The type of key used to encrypt the data on the disk. type: String - contextPath: Azure.Disk.properties.securityProfile description: Security profile for the disk. - contextPath: Azure.Disk.properties.tieringProfile description: Tiering profile for the disk. - contextPath: Azure.Disk.properties.supportedTierList description: List of supported tiers for the disk. - contextPath: Azure.Disk.properties.availabilityZone description: Availability zone of the disk. type: String - contextPath: Azure.Disk.properties.dataAccessAuthMode description: Additional authentication requirements for exporting or uploading to the disk. type: String - contextPath: Azure.Disk.properties.osType description: The operating system type. type: String - contextPath: Azure.Disk.properties.hyperVGeneration description: The HyperVGenerationType of the virtual machine. type: String - contextPath: Azure.Disk.properties.lastOwnershipUpdateTime description: The last time ownership of the disk was updated. type: String - prettyname: Set Disk Data Access to Azure AD description: "Sets the data access authentication mode for the managed disk to Azure Active Directory. Required permissions: Microsoft.Compute/disks/read, Microsoft.Compute/disks/write." name: azure-compute-disk-update-data-access-ad-quick-action hidden: true quickaction: true arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: disk_name prettyname: VM Disk type: string required: true description: Name of the managed disk. Supported characters for the name are a-z, A-Z, 0-9, _ and -. The maximum name length is 80 characters. defaultValue: VM Disk prettypredefined: VM Disk: ${asset.xdm.asset.name} - name: data_access_auth_mode type: string description: Additional authentication requirements when exporting or uploading to a disk or snapshot. defaultValue: AzureActiveDirectory hidden: true outputs: - contextPath: Azure.Compute.Disks.id description: Resource ID of the disk. type: String - contextPath: Azure.Compute.Disks.name description: Name of the disk. type: String - contextPath: Azure.Compute.Disks.type description: Type of the resource. type: String - contextPath: Azure.Compute.Disks.location description: Location of the disk. type: String - contextPath: Azure.Compute.Disks.tags description: Resource tags. - contextPath: Azure.Compute.Disks.managedBy description: ARM ID of the resource that manages the disk. type: String - contextPath: Azure.Compute.Disks.sku description: The disk SKU name. - contextPath: Azure.Compute.Disks.zones description: A list of availability zones. - contextPath: Azure.Compute.Disks.properties.timeCreated description: The time when the disk was created. type: String - contextPath: Azure.Compute.Disks.properties.diskSizeGB description: Size of the disk in GB. type: Number - contextPath: Azure.Compute.Disks.properties.diskIopsReadWrite description: The number of IOPS allowed for this disk. type: Number - contextPath: Azure.Compute.Disks.properties.diskMBpsReadWrite description: The bandwidth allowed for this disk in MBps. type: Number - contextPath: Azure.Compute.Disks.properties.diskIOPSReadOnly description: The number of read-only IOPS for this disk. type: Number - contextPath: Azure.Compute.Disks.properties.diskMBpsReadOnly description: The read-only bandwidth for this disk in MBps. type: Number - contextPath: Azure.Compute.Disks.properties.diskSizeBytes description: The size of the disk in bytes. type: Number - contextPath: Azure.Compute.Disks.properties.networkAccessPolicy description: Policy for accessing the disk via network. type: String - contextPath: Azure.Compute.Disks.properties.publicNetworkAccess description: Policy for export on the disk. type: String - contextPath: Azure.Compute.Disks.properties.burstingEnabled description: Whether bursting is enabled on the disk. type: Boolean - contextPath: Azure.Compute.Disks.properties.optimization description: The disk optimization setting. type: String - contextPath: Azure.Compute.Disks.properties.diskState description: The current state of the disk. type: String - contextPath: Azure.Compute.Disks.properties.supportedCapabilities description: Supported capabilities of the disk. - contextPath: Azure.Compute.Disks.properties.supportedPerformanceTiers description: Supported performance tiers of the disk. - contextPath: Azure.Compute.Disks.properties.supportedDiskTypes description: Supported disk types for the disk. - contextPath: Azure.Compute.Disks.properties.provisioningState description: The provisioning state of the disk. - contextPath: Azure.Compute.Disks.properties.timeModified description: The time when the disk was last modified. - contextPath: Azure.Compute.Disks.properties.diskAccessId description: The ARM ID of the DiskAccess resource. type: String - contextPath: Azure.Compute.Disks.properties.networkProfile description: The network profile of the disk. - contextPath: Azure.Compute.Disks.properties.creationData description: Disk creation data. - contextPath: Azure.Compute.Disks.properties.encryption description: Encryption settings for the disk. - contextPath: Azure.Compute.Disks.properties.encryptionSettingsCollection description: A collection of encryption settings. - contextPath: Azure.Compute.Disks.properties.encryptionType description: The type of key used to encrypt the data on the disk. type: String - contextPath: Azure.Compute.Disks.properties.securityProfile description: Security profile for the disk. - contextPath: Azure.Compute.Disks.properties.tieringProfile description: Tiering profile for the disk. - contextPath: Azure.Compute.Disks.properties.supportedTierList description: List of supported tiers for the disk. - contextPath: Azure.Compute.Disks.properties.availabilityZone description: Availability zone of the disk. type: String - contextPath: Azure.Compute.Disks.properties.dataAccessAuthMode description: Additional authentication requirements when exporting or uploading to a disk. type: String - contextPath: Azure.Compute.Disks.properties.osType description: The operating system type. type: String - contextPath: Azure.Compute.Disks.properties.hyperVGeneration description: The HyperVGenerationType of the virtual machine. type: String - contextPath: Azure.Compute.Disks.properties.lastOwnershipUpdateTime description: The last time ownership of the disk was updated. type: String - arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroupName} - name: registry_name type: String required: true description: Name of the container registry. prettyname: Azure Container Registry defaultValue: Azure Container Registry prettypredefined: Azure Container Registry: ${asset.xdm.asset.name} - name: allow_exports description: Whether artifacts can be exported. defaultValue: disabled hidden: true - name: public_network_access type: String description: Whether public network access is allowed for the container registry. defaultValue: Disabled hidden: true description: "Disables public network access and content exports for the Azure Container Registry (ACR) to enhance security. Deprecated. Use Disable Public Access & Exports on ACR instead. Required permissions: Microsoft.ContainerRegistry/registries/read, Microsoft.ContainerRegistry/registries/write." name: azure-acr-disable-public-private-access-quick-action prettyname: Disable Public Access and Exports on ACR hidden: true quickaction: true deprecated: true outputs: - contextPath: Azure.ACR.id description: The resource ID. type: String - contextPath: Azure.ACR.identity description: The identity of the container registry. type: Unknown - contextPath: Azure.ACR.location description: The location of the resource. type: String - contextPath: Azure.ACR.name description: The name of the resource. type: String - contextPath: Azure.ACR.properties.adminUserEnabled description: The value that indicates whether the admin user is enabled. type: Boolean - contextPath: Azure.ACR.properties.anonymousPullEnabled description: Enables registry-wide pull from unauthenticated clients. type: Boolean - contextPath: Azure.ACR.properties.creationDate description: The creation date of the container registry in ISO8601 format. type: String - contextPath: Azure.ACR.properties.dataEndpointEnabled description: Enable a single data endpoint per region for serving data. type: Boolean - contextPath: Azure.ACR.properties.dataEndpointHostNames description: List of host names that will serve data when dataEndpointEnabled is true. type: Unknown - contextPath: Azure.ACR.properties.encryption description: The encryption settings of container registry. type: Unknown - contextPath: Azure.ACR.properties.loginServer description: The URL that can be used to log into the container registry. type: String - contextPath: Azure.ACR.properties.networkRuleBypassOptions description: Whether to allow trusted Azure services to access a network restricted registry. type: String - contextPath: Azure.ACR.properties.networkRuleSet description: The network rule set for a container registry. type: Unknown - contextPath: Azure.ACR.properties.policies description: The policies for a container registry. type: Unknown - contextPath: Azure.ACR.properties.privateEndpointConnections description: List of private endpoint connections for a container registry. type: Unknown - contextPath: Azure.ACR.properties.provisioningState description: The provisioning state of the container registry when the operation was called. type: String - contextPath: Azure.ACR.properties.publicNetworkAccess description: Whether or not public network access is allowed for the container registry. type: String - contextPath: Azure.ACR.properties.status description: The status of the container registry at the time the operation was called. type: Unknown - contextPath: Azure.ACR.properties.zoneRedundancy description: Whether or not zone redundancy is enabled for this container registry. type: String - contextPath: Azure.ACR.sku description: The SKU of the container registry. type: Unknown - contextPath: Azure.ACR.systemData description: Metadata pertaining to creation and last modification of the resource. type: Unknown - contextPath: Azure.ACR.tags description: The tags of the resource. type: Unknown - contextPath: Azure.ACR.type description: The type of the resource. type: String - prettyname: Disable Public Access & Exports on ACR description: Disables public network access and content exports for the Azure Container Registry (ACR) to enhance security. name: azure-cr-disable-public-private-access-quick-action hidden: true quickaction: true arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroupName} - name: registry_name type: String required: true description: Name of the container registry. prettyname: Azure Container Registry defaultValue: Azure Container Registry prettypredefined: Azure Container Registry: ${asset.xdm.asset.name} - name: allow_exports description: Whether artifacts can be exported. defaultValue: disabled hidden: true - name: public_network_access type: String description: Whether public network access is allowed for the container registry. defaultValue: Disabled hidden: true outputs: - contextPath: Azure.ContainerRegistry.Registries.id description: The resource ID. type: String - contextPath: Azure.ContainerRegistry.Registries.identity description: The identity of the container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.location description: The location of the resource. type: String - contextPath: Azure.ContainerRegistry.Registries.name description: The name of the resource. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.adminUserEnabled description: The value that indicates whether the admin user is enabled. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.anonymousPullEnabled description: Enables registry-wide pull from unauthenticated clients. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.creationDate description: The creation date of the container registry in ISO8601 format. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.dataEndpointEnabled description: Enable a single data endpoint per region for serving data. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.dataEndpointHostNames description: List of host names that will serve data when dataEndpointEnabled is true. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.encryption description: The encryption settings of container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.loginServer description: The URL that can be used to log into the container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.networkRuleBypassOptions description: Whether to allow trusted Azure services to access a network restricted registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.networkRuleSet description: The network rule set for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.policies description: The policies for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.privateEndpointConnections description: List of private endpoint connections for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.provisioningState description: The provisioning state of the container registry at the time the operation was called. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.publicNetworkAccess description: Whether or not public network access is allowed for the container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.status description: The status of the container registry at the time the operation was called. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.zoneRedundancy description: Whether or not zone redundancy is enabled for this container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.sku description: The SKU of the container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.systemData description: Metadata pertaining to creation and last modification of the resource. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.tags description: The tags of the resource. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.type description: The type of the resource. type: String - arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroupName} - name: registry_name type: String required: true description: The name of the container registry. prettyname: Azure Container Registry defaultValue: Azure Container Registry prettypredefined: Azure Container Registry: ${asset.xdm.asset.name} - name: authentication_as_arm_policy description: Whether the policy is enabled or not. defaultValue: disabled hidden: true description: "Disables the legacy 'authentication as ARM' feature for the Azure Container Registry (ACR). Deprecated. Use Disable ACR ARM Authentication instead. Required permissions: Microsoft.ContainerRegistry/registries/read, Microsoft.ContainerRegistry/registries/write." name: azure-acr-disable-authentication-as-arm-quick-action prettyname: Disable ACR Authentication as ARM hidden: true quickaction: true deprecated: true outputs: - contextPath: Azure.ACR.id description: The resource ID. type: String - contextPath: Azure.ACR.identity description: The identity of the container registry. type: Unknown - contextPath: Azure.ACR.location description: The location of the resource. type: String - contextPath: Azure.ACR.name description: The name of the resource. type: String - contextPath: Azure.ACR.properties.adminUserEnabled description: The value that indicates whether the admin user is enabled. type: Boolean - contextPath: Azure.ACR.properties.anonymousPullEnabled description: Enables registry-wide pull from unauthenticated clients. type: Boolean - contextPath: Azure.ACR.properties.creationDate description: The creation date of the container registry in ISO8601 format. type: String - contextPath: Azure.ACR.properties.dataEndpointEnabled description: Enable a single data endpoint per region for serving data. type: Boolean - contextPath: Azure.ACR.properties.dataEndpointHostNames description: List of host names that will serve data when dataEndpointEnabled is true. type: Unknown - contextPath: Azure.ACR.properties.encryption description: The encryption settings of container registry. type: Unknown - contextPath: Azure.ACR.properties.loginServer description: The URL that can be used to log into the container registry. type: String - contextPath: Azure.ACR.properties.networkRuleBypassOptions description: Whether to allow trusted Azure services to access a network restricted registry. type: String - contextPath: Azure.ACR.properties.networkRuleSet description: The network rule set for a container registry. type: Unknown - contextPath: Azure.ACR.properties.policies description: The policies for a container registry. type: Unknown - contextPath: Azure.ACR.properties.privateEndpointConnections description: List of private endpoint connections for a container registry. type: Unknown - contextPath: Azure.ACR.properties.provisioningState description: The provisioning state of the container registry when the operation was called. type: String - contextPath: Azure.ACR.properties.publicNetworkAccess description: Whether or not public network access is allowed for the container registry. type: String - contextPath: Azure.ACR.properties.status description: The status of the container registry at the time the operation was called. type: Unknown - contextPath: Azure.ACR.properties.zoneRedundancy description: Whether or not zone redundancy is enabled for this container registry. type: String - contextPath: Azure.ACR.sku description: The SKU of the container registry. type: Unknown - contextPath: Azure.ACR.systemData description: Metadata pertaining to creation and last modification of the resource. type: Unknown - contextPath: Azure.ACR.tags description: The tags of the resource. type: Unknown - contextPath: Azure.ACR.type description: The type of the resource. type: String - prettyname: Disable ACR ARM Authentication description: "Disables the legacy 'authentication as ARM' feature for the Azure Container Registry (ACR). Required permissions: Microsoft.ContainerRegistry/registries/read, Microsoft.ContainerRegistry/registries/write." name: azure-cr-disable-authentication-as-arm-quick-action hidden: true quickaction: true arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroupName} - name: registry_name type: String required: true description: The name of the container registry. prettyname: Azure Container Registry defaultValue: Azure Container Registry prettypredefined: Azure Container Registry: ${asset.xdm.asset.name} - name: authentication_as_arm_policy description: Whether the policy is enabled or not. defaultValue: disabled hidden: true outputs: - contextPath: Azure.ContainerRegistry.Registries.id description: The resource ID. type: String - contextPath: Azure.ContainerRegistry.Registries.identity description: The identity of the container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.location description: The location of the resource. type: String - contextPath: Azure.ContainerRegistry.Registries.name description: The name of the resource. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.adminUserEnabled description: The value that indicates whether the admin user is enabled. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.anonymousPullEnabled description: Enables registry-wide pull from unauthenticated clients. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.creationDate description: The creation date of the container registry in ISO8601 format. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.dataEndpointEnabled description: Enable a single data endpoint per region for serving data. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.dataEndpointHostNames description: List of host names that will serve data when dataEndpointEnabled is true. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.encryption description: The encryption settings of container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.loginServer description: The URL that can be used to log into the container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.networkRuleBypassOptions description: Whether to allow trusted Azure services to access a network restricted registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.networkRuleSet description: The network rule set for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.policies description: The policies for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.privateEndpointConnections description: List of private endpoint connections for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.provisioningState description: The provisioning state of the container registry at the time the operation was called. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.publicNetworkAccess description: Whether or not public network access is allowed for the container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.status description: The status of the container registry at the time the operation was called. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.zoneRedundancy description: Whether or not zone redundancy is enabled for this container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.sku description: The SKU of the container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.systemData description: Metadata pertaining to creation and last modification of the resource. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.tags description: The tags of the resource. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.type description: The type of the resource. type: String - arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroupName} - name: registry_name type: String required: true description: The name of the container registry. prettyname: Azure Container Registry defaultValue: Azure Container Registry prettypredefined: Azure Container Registry: ${asset.xdm.asset.name} - name: anonymous_pull_enabled type: Boolean description: Whether to enable registry-wide pulls from unauthenticated clients. defaultValue: 'false' hidden: true description: "Disables anonymous pull access for the Azure Container Registry (ACR), requiring clients to authenticate before pulling images. Deprecated. Use Disable Anonymous Pull for ACR instead. Required permissions: Microsoft.ContainerRegistry/registries/read, Microsoft.ContainerRegistry/registries/write." name: azure-acr-disable-anonymous-pull-quick-action prettyname: Disable ACR Anonymous Pull hidden: true quickaction: true deprecated: true outputs: - contextPath: Azure.ACR.id description: The resource ID. type: String - contextPath: Azure.ACR.identity description: The identity of the container registry. type: Unknown - contextPath: Azure.ACR.location description: The location of the resource. type: String - contextPath: Azure.ACR.name description: The name of the resource. type: String - contextPath: Azure.ACR.properties.adminUserEnabled description: The value that indicates whether the admin user is enabled. type: Boolean - contextPath: Azure.ACR.properties.anonymousPullEnabled description: Enables registry-wide pull from unauthenticated clients. type: Boolean - contextPath: Azure.ACR.properties.creationDate description: The creation date of the container registry in ISO8601 format. type: String - contextPath: Azure.ACR.properties.dataEndpointEnabled description: Enable a single data endpoint per region for serving data. type: Boolean - contextPath: Azure.ACR.properties.dataEndpointHostNames description: List of host names that will serve data when dataEndpointEnabled is true. type: Unknown - contextPath: Azure.ACR.properties.encryption description: The encryption settings of container registry. type: Unknown - contextPath: Azure.ACR.properties.loginServer description: The URL that can be used to log into the container registry. type: String - contextPath: Azure.ACR.properties.networkRuleBypassOptions description: Whether to allow trusted Azure services to access a network restricted registry. type: String - contextPath: Azure.ACR.properties.networkRuleSet description: The network rule set for a container registry. type: Unknown - contextPath: Azure.ACR.properties.policies description: The policies for a container registry. type: Unknown - contextPath: Azure.ACR.properties.privateEndpointConnections description: List of private endpoint connections for a container registry. type: Unknown - contextPath: Azure.ACR.properties.provisioningState description: The provisioning state of the container registry when the operation was called. type: String - contextPath: Azure.ACR.properties.publicNetworkAccess description: Whether or not public network access is allowed for the container registry. type: String - contextPath: Azure.ACR.properties.status description: The status of the container registry when the operation was called. type: Unknown - contextPath: Azure.ACR.properties.zoneRedundancy description: Whether or not zone redundancy is enabled for this container registry. type: String - contextPath: Azure.ACR.sku description: The SKU of the container registry. type: Unknown - contextPath: Azure.ACR.systemData description: Metadata pertaining to creation and last modification of the resource. type: Unknown - contextPath: Azure.ACR.tags description: The tags of the resource. type: Unknown - contextPath: Azure.ACR.type description: The type of the resource. type: String - prettyname: Disable Anonymous Pull for ACR description: "Disables anonymous pull access for the Azure Container Registry (ACR), requiring clients to authenticate before pulling images. Required permissions: Microsoft.ContainerRegistry/registries/read, Microsoft.ContainerRegistry/registries/write." name: azure-cr-disable-anonymous-pull-quick-action hidden: true quickaction: true arguments: - name: subscription_id type: string required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroupName} - name: registry_name type: String required: true description: The name of the container registry. prettyname: Azure Container Registry defaultValue: Azure Container Registry prettypredefined: Azure Container Registry: ${asset.xdm.asset.name} - name: anonymous_pull_enabled type: Boolean description: Whether to enable registry-wide pulls from unauthenticated clients. defaultValue: 'false' hidden: true outputs: - contextPath: Azure.ContainerRegistry.Registries.id description: The resource ID. type: String - contextPath: Azure.ContainerRegistry.Registries.identity description: The identity of the container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.location description: The location of the resource. type: String - contextPath: Azure.ContainerRegistry.Registries.name description: The name of the resource. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.adminUserEnabled description: The value that indicates whether the admin user is enabled. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.anonymousPullEnabled description: Enables registry-wide pull from unauthenticated clients. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.creationDate description: The creation date of the container registry in ISO8601 format. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.dataEndpointEnabled description: Enable a single data endpoint per region for serving data. type: Boolean - contextPath: Azure.ContainerRegistry.Registries.properties.dataEndpointHostNames description: List of host names that will serve data when dataEndpointEnabled is true. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.encryption description: The encryption settings of container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.loginServer description: The URL that can be used to log into the container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.networkRuleBypassOptions description: Whether to allow trusted Azure services to access a network restricted registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.networkRuleSet description: The network rule set for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.policies description: The policies for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.privateEndpointConnections description: List of private endpoint connections for a container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.provisioningState description: The provisioning state of the container registry at the time the operation was called. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.publicNetworkAccess description: Whether or not public network access is allowed for the container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.properties.status description: The status of the container registry at the time the operation was called. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.properties.zoneRedundancy description: Whether or not zone redundancy is enabled for this container registry. type: String - contextPath: Azure.ContainerRegistry.Registries.sku description: The SKU of the container registry. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.systemData description: Metadata pertaining to creation and last modification of the resource. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.tags description: The tags of the resource. type: Unknown - contextPath: Azure.ContainerRegistry.Registries.type description: The type of the resource. type: String - arguments: - description: The subscription ID. name: subscription_id type: String required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: name description: Policy assignment name. defaultValue: SecurityCenterBuiltIn hidden: true - name: scope type: string description: Scope for the policy assignment. required: true prettyname: Scope defaultValue: Scope prettypredefined: Scope: ${asset.xdm.asset.raw_fields.Platform Discovery.properties.scope} - name: policy_definition_id type: string description: The ID of the policy definition or policy set definition being assigned. hidden: true defaultValue: 1f3afdf9-d0c9-4c3d-847f-89da613e70a8 - name: parameters description: JSON object of policy parameter values. defaultValue: | { "jitNetworkAccessMonitoringEffect": { "value": "AuditIfNotExists" }, "gcLinuxDiskEncryptionMonitoringEffect": { "value": "AuditIfNotExists" }, "gcWindowsDiskEncryptionMonitoringEffect": { "value": "AuditIfNotExists" }, "systemUpdatesV2MonitoringEffect": { "value": "AuditIfNotExists" } } hidden: true name: azure-policy-assignment-create-quick-action description: | Applies Microsoft Defender for Cloud built-in recommendations by creating a policy assignment for the SecurityCenterBuiltIn initiative. This sets the following policies to 'AuditIfNotExists': disk encryption monitoring (Windows and Linux), system updates monitoring, and JIT network access monitoring. Rules for adaptive application controls, endpoint protection, and security configuration are excluded. Required permissions: Microsoft.Authorization/policyAssignments/read, Microsoft.Authorization/policyAssignments/write. prettyname: Apply MS Defender Policy quickaction: true hidden: true outputs: - contextPath: Azure.Policy.PolicyAssignments.ID description: The resource ID of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Name description: The name of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Type description: The type of the resource (e.g., 'Microsoft.Authorization/policyAssignments'). type: string - contextPath: Azure.Policy.PolicyAssignments.Location description: The location of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Identity description: The managed identity associated with the policy assignment. - contextPath: Azure.Policy.PolicyAssignments.Properties.DisplayName description: The display name of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.Description description: The description of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.PolicyDefinitionId description: The ID of the policy definition or policy set definition being assigned. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.Scope description: The scope of the policy assignment. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.NotScopes description: The list of scopes that are excluded from the policy assignment. - contextPath: Azure.Policy.PolicyAssignments.Properties.Parameters description: The parameter values for the assigned policy rule. - contextPath: Azure.Policy.PolicyAssignments.Properties.Metadata description: The metadata associated with the policy assignment. - contextPath: Azure.Policy.PolicyAssignments.Properties.EnforcementMode description: The policy assignment enforcement mode (e.g., 'Default' or 'DoNotEnforce'). type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.latestDefinitionVersion description: The latest version of the policy definition available. This is only present if requested via the $expand query parameter. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.NonComplianceMessages description: The messages that describe why a resource is non-compliant with the policy. - contextPath: Azure.Policy.PolicyAssignments.Properties.DefinitionVersion description: The version of the policy definition to use. type: string - contextPath: Azure.Policy.PolicyAssignments.Properties.Overrides description: The policy property value overrides. - contextPath: Azure.Policy.PolicyAssignments.Properties.ResourceSelectors description: The resource selectors to filter policies by resource properties. - contextPath: Azure.Policy.PolicyAssignments.SystemData description: The system metadata relating to this resource. - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string description: The resource group name. required: true prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: string required: true description: Name of the PostgreSQL server. prettyname: Postgres Server Name defaultValue: Postgres Server Name prettypredefined: Postgres Server Name: ${asset.xdm.asset.name} - name: configuration_name type: string description: The configuration setting name. hidden: true defaultValue: log_disconnections - name: value type: string description: 'Value of the configuration.' hidden: true defaultValue: 'on' - name: source defaultValue: user-override description: Source of the configuration. hidden: true name: azure-postgres-config-set-disconnection-logging-quick-action prettyname: Enable Disconnection Logging on PostgreSQL hidden: true quickaction: true description: "Enables logging client disconnections on the PostgreSQL server. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/configurations/read, Microsoft.DBforPostgreSQL/servers/configurations/write." outputs: [] # have no outputs for these command by response deprecated: true - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string description: The resource group name. required: true prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: string required: true description: Name of the PostgreSQL server. prettyname: Postgres Server Name defaultValue: Postgres Server Name prettypredefined: Postgres Server Name: ${asset.xdm.asset.name} - name: configuration_name type: string description: The configuration setting name. hidden: true defaultValue: 'log_checkpoints' - name: value type: string description: Value of the configuration. hidden: true defaultValue: 'on' - name: source defaultValue: user-override description: Source of the configuration. hidden: true name: azure-postgres-config-set-checkpoint-logging-quick-action prettyname: Enable PostgreSQL Checkpoint Logging hidden: true quickaction: true description: "Enables checkpoint logging on the PostgreSQL server. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/configurations/read, Microsoft.DBforPostgreSQL/servers/configurations/write." outputs: [] # have no outputs for these command by response deprecated: true - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string description: The resource group name. required: true prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: string required: true description: Name of the PostgreSQL server. prettyname: Postgres Server Name defaultValue: Postgres Server Name prettypredefined: Postgres Server Name: ${asset.xdm.asset.name} - name: configuration_name type: string description: The configuration setting name. hidden: true defaultValue: 'connection_throttling' - name: value type: string description: Value of the configuration. hidden: true defaultValue: 'on' - name: source defaultValue: user-override description: Source of the configuration. hidden: true name: azure-postgres-config-set-connection-throttling-quick-action prettyname: Enable Connection Throttling on PostgreSQL hidden: true quickaction: true description: "Enables connection throttling on the PostgreSQL server to manage log verbosity for concurrent connection queries and errors. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/configurations/read, Microsoft.DBforPostgreSQL/servers/configurations/write." outputs: [] # have no outputs for these command by response deprecated: true - name: azure-sql-db-threat-policy-update-quick-action description: Enables email notifications to account administrators for SQL database threat detection alerts. prettyname: Update Threat Policy for SQL Database hidden: true quickaction: true arguments: - name: subscription_id type: String required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: db_name type: String required: true description: The database name. prettyname: DB Name defaultValue: DB Name prettypredefined: DB Name: ${asset.xdm.asset.raw_fields.Platform Discovery.sqlDatabase.name} - name: server_name type: String required: true description: The server name. prettyname: Server Name defaultValue: Server Name prettypredefined: Server Name: ${asset.xdm.asset.raw_fields.Platform Discovery.serverName} - name: email_account_admins_enabled type: Boolean required: false defaultValue: 'true' description: Send the alert to the account administrators. hidden: true outputs: - contextPath: Azure.SqlDB.SecurityAlertPolicies.kind description: The type of threat policy. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.location description: The location of the threat policy. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.id description: The threat policy ID. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.name description: The threat policy name. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.type description: The threat policy type. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.state description: The threat policy state. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.creationTime description: The threat policy creation time. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.retentionDays description: The number of days to keep the logs in the threat detection audit logs. type: Number - contextPath: Azure.SqlDB.SecurityAlertPolicies.storageAccountAccessKey description: The identifier key of the threat detection audit storage account. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.storageEndpoint description: The threat detection audit storage account. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.emailAccountAdmins description: A list of email account administrators the alert is sent to. type: Boolean - contextPath: Azure.SqlDB.SecurityAlertPolicies.emailAddresses description: A list of email addresses the alert is sent to. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.disabledAlerts description: A list of disabled alerts. If no alerts are disabled, an empty string is returned. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.useServerDefault description: Whether to use the default server policy. - contextPath: Azure.SqlDB.SecurityAlertPolicies.databaseName description: The name of the database that the threat policy is related to. type: String - contextPath: Azure.SqlDB.SecurityAlertPolicies.serverName description: The name of server that the threat policy is related to. type: String - name: azure-sql-db-transparent-data-encryption-enable-tde-quick-action description: Enables Transparent Data Encryption (TDE) for the SQL database to encrypt data at rest. prettyname: Enable TDE on SQL hidden: true quickaction: true arguments: - name: subscription_id type: String required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: String required: true description: The server name. prettyname: Server Name defaultValue: Server Name prettypredefined: Server Name: ${asset.xdm.asset.raw_fields.Platform Discovery.serverName} - name: db_name type: String required: true description: The database name. prettyname: DB Name defaultValue: DB Name prettypredefined: DB Name: ${asset.xdm.asset.raw_fields.Platform Discovery.sqlDatabase.name} - name: state type: String required: false defaultValue: Enabled description: Enables transparent data encryption. hidden: true outputs: [] - name: azure-key-vault-purge-and-soft-delete-enable-quick-action description: 'Enables soft delete and purge protection for the Key Vault to prevent the permanent loss of keys and secrets. Note: Once purge-protection and soft-delete is enabled for a key vault, the action is irreversible.' prettyname: Enable KeyVault Purge & Soft-delete features hidden: true quickaction: true arguments: - name: subscription_id type: String required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: vault_name type: String required: true description: The key vault name. prettyname: Key Vault Name defaultValue: Key Vault Name prettypredefined: Key Vault Name: ${asset.xdm.asset.name} - name: resource_group_name type: String required: true description: The name of the resource group. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: enable_purge_protection type: Boolean required: false defaultValue: 'true' description: Enabled protection against purge for this vault. hidden: true - name: enable_soft_delete type: Boolean required: false defaultValue: 'true' description: Enabled soft delete for this key vault. hidden: true outputs: - contextPath: Azure.KeyVault.Vault.id description: The resource ID. type: String - contextPath: Azure.KeyVault.Vault.name description: Key Vault name. type: String - contextPath: Azure.KeyVault.Vault.type description: The Azure resource type. type: String - contextPath: Azure.KeyVault.Vault.location description: Key Vault location. type: String - contextPath: Azure.KeyVault.Vault.tags description: The resource tags. - contextPath: Azure.KeyVault.Vault.properties.sku description: The SKU Object. type: String - contextPath: Azure.KeyVault.Vault.properties.tenantId description: The Entra ID tenant ID to use for authenticating requests to the key vault. type: String - contextPath: Azure.KeyVault.Vault.properties.accessPolicies description: A list of up to 16 identities that have access to the key vault. All identities must use the same tenant ID as the key vault. - contextPath: Azure.KeyVault.Vault.properties.accessPolicies.tenantId description: The Entra ID tenant ID to use for authenticating requests to the key vault. type: String - contextPath: Azure.KeyVault.Vault.properties.enabledForDeployment description: Whether Azure Virtual Machines are allowed to retrieve certificates stored as secrets from the key vault. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enabledForDiskEncryption description: Whether Azure Disk Encryption is allowed to retrieve secrets from the vault and unwrap keys. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enabledForTemplateDeployment description: Whether Azure Resource Manager is allowed to retrieve secrets from the key vault. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enableSoftDelete description: Whether soft delete is enabled for this key vault. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enablePurgeProtection description: Whether purge protection is enabled for this key vault. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.enableRbacAuthorization description: Whether Azure Key Vault uses Role Based Access Control (RBAC) for authorization of data actions. type: Boolean - contextPath: Azure.KeyVault.Vault.properties.vaultUri description: The URI of the vault for performing operations on keys and secrets. type: String - contextPath: Azure.KeyVault.Vault.properties.provisioningState description: The current provisioning state. type: String - contextPath: Azure.KeyVault.Vault.properties.privateEndpointConnections description: A list of private endpoint connections associated with the key vault. - contextPath: Azure.KeyVault.Vault.properties.networkAcls description: The rules governing the accessibility of the key vault from specific network locations. - contextPath: Azure.KeyVault.Vault.properties.networkAcls description: The network acls config object. type: String - name: azure-webapp-set-webapp-to-https-only-quick-action description: Enforces HTTPS-only traffic for the App Service. prettyname: Set Webapp to HTTPS only hidden: true quickaction: true arguments: - name: subscription_id type: String required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: name type: String required: true description: The name of the app. prettyname: AZ App defaultValue: AZ App prettypredefined: AZ App: ${asset.xdm.asset.name} - name: https_only type: Boolean required: false defaultValue: 'true' description: Configures the web site to accept only https requests. hidden: true outputs: - contextPath: Azure.AppService.WebApp.id description: The fully qualified resource ID for the web app. type: String - contextPath: Azure.AppService.WebApp.name description: The name of the web app. type: String - contextPath: Azure.AppService.WebApp.type description: The resource type, e.g., Microsoft.Web/sites. type: String - contextPath: Azure.AppService.WebApp.location description: The geographic location of the web app. type: String - contextPath: Azure.AppService.WebApp.kind description: The type of app, for example app or functionapp. type: String - contextPath: Azure.AppService.WebApp.tags description: The resource tags as key-value pairs. - contextPath: Azure.AppService.WebApp.identity.type description: The type of managed identity (SystemAssigned, UserAssigned, etc.). type: String - contextPath: Azure.AppService.WebApp.identity.principalId description: The principal ID of the system-assigned identity. type: String - contextPath: Azure.AppService.WebApp.identity.tenantId description: The tenant ID of the system-assigned identity. type: String - contextPath: Azure.AppService.WebApp.identity.userAssignedIdentities description: The list of user-assigned identities associated with the web app. - contextPath: Azure.AppService.WebApp.properties.state description: The current state of the web app (For example Running or Stopped). type: String - contextPath: Azure.AppService.WebApp.properties.enabled description: Whether the web app is enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.defaultHostName description: The default host name of the web app. type: String - contextPath: Azure.AppService.WebApp.properties.hostNames description: A list of host names associated with the web app. - contextPath: Azure.AppService.WebApp.properties.repositorySiteName description: The name of the repository site. type: String - contextPath: Azure.AppService.WebApp.properties.clientAffinityEnabled description: Whether client affinity is enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.clientCertEnabled description: Whether client certificates are enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.clientCertExclusionPaths description: A list of paths to exclude from client certificate authentication. type: String - contextPath: Azure.AppService.WebApp.properties.hostingEnvironment description: The App Service Environment to use for the web app. type: String - contextPath: Azure.AppService.WebApp.properties.serverFarmId description: The resource ID of the associated App Service plan. type: String - contextPath: Azure.AppService.WebApp.properties.reserved description: Whether the web app is on a Linux plan. type: Boolean - contextPath: Azure.AppService.WebApp.properties.isXenon description: Whether the web app is hosted in Xenon. type: Boolean - contextPath: Azure.AppService.WebApp.properties.hyperV description: Whether Hyper-V is enabled for the web app. type: Boolean - contextPath: Azure.AppService.WebApp.properties.siteConfig description: A site config object. - name: azure-cosmos-db-disable-key-quick-action description: Disables key-based write access for Cosmos DB metadata to enhance security. prettyname: Disable Key Based Metadata Write on CosmosDB hidden: true quickaction: true arguments: - name: subscription_id type: String required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: account_name type: String required: true description: The Cosmos DB database account name. prettyname: CosmosDB Name defaultValue: CosmosDB Name prettypredefined: CosmosDB Name: ${asset.xdm.asset.name} - name: disable_key_based_metadata_write_access type: Boolean required: false defaultValue: 'true' description: Whether to disable write operations on metadata resources via account keys. hidden: true outputs: - contextPath: Azure.CosmosDB.DBAccounts.id description: The unique resource identifier of the ARM resource. type: String - contextPath: Azure.CosmosDB.DBAccounts.name description: The name of the ARM resource. type: String - contextPath: Azure.CosmosDB.DBAccounts.location description: The location of the resource group to which the resource belongs. type: String - contextPath: Azure.CosmosDB.DBAccounts.kind description: The database account type. type: String - contextPath: Azure.CosmosDB.DBAccounts.identity.type description: The type of identity used for the resource. type: String - contextPath: Azure.CosmosDB.DBAccounts.identity.userAssignedIdentities description: The list of user identities associated with the resource. type: Dictionary - contextPath: Azure.CosmosDB.DBAccounts.properties.analyticalStorageConfiguration description: The analytical storage configuration. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.apiProperties description: The API specific properties. type: Dictionary - contextPath: Azure.CosmosDB.DBAccounts.properties.backupPolicy description: The policy for taking backups on an account. - contextPath: Azure.CosmosDB.DBAccounts.properties.capabilities description: A list of Cosmos DB capabilities for the account. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.capacity description: The properties related to capacity enforcement on an account. type: Integer - contextPath: Azure.CosmosDB.DBAccounts.properties.connectorOffer description: The Cassandra connector offer type for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.consistencyPolicy description: The consistency policy for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.cors description: The CORS policy for the Cosmos DB database account. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.createMode description: The mode of account creation. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.customerManagedKeyStatus description: The status of the Customer Managed Key feature on the account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.databaseAccountOfferType description: The offer type for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.defaultIdentity description: The default identity for accessing key vault used in features like customer managed keys. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.disableKeyBasedMetadataWriteAccess description: Whether write operations on metadata resources via account keys is disabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.disableLocalAuth description: Whether local authentication is disabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.documentEndpoint description: The connection endpoint for the Cosmos DB database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.enableAnalyticalStorage description: Whether storage analytics are enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableAutomaticFailover description: Whether automatic failover of the write region is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableBurstCapacity description: Whether Burst Capacity is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableCassandraConnector description: Whether the Cassandra connector on the Cosmos DB account is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableFreeTier description: Whether Free Tier is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enableMultipleWriteLocations description: Whether to enable the account to write in multiple locations. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enablePartitionMerge description: Whether Partition Merge is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.enablePerRegionPerPartitionAutoscale description: Whether PerRegionPerPartitionAutoscale is enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.failoverPolicies description: A list of regions ordered by their failover priorities. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.instanceId description: A unique identifier assigned to the database account. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.ipRules description: A list of IP rules. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.isVirtualNetworkFilterEnabled description: Whether the Virtual Network ACL rules are enabled. type: Boolean - contextPath: Azure.CosmosDB.DBAccounts.properties.keyVaultKeyUri description: The URI of the key vault. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.keysMetadata description: The metadata related to each access key for the given Cosmos DB database account. type: Dictionary - contextPath: Azure.CosmosDB.DBAccounts.properties.locations description: A list of all the locations enabled for the Cosmos DB account. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.minimalTlsVersion description: The minimum allowed TLS version. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.networkAclBypass description: Which services are allowed to bypass firewall checks. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.networkAclBypassResourceIds description: A list of resource IDs that are allowed to bypass firewall checks. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.privateEndpointConnections description: A list of private endpoint connections. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.provisioningState description: The status of the Cosmos DB account at the time the operation was called. type: String - contextPath: Azure.CosmosDB.DBAccounts.properties.readLocations description: A list of read locations enabled for the Cosmos DB account. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.virtualNetworkRules description: A list of Virtual Network ACL rules. type: List - contextPath: Azure.CosmosDB.DBAccounts.properties.writeLocations description: A list of write locations enabled for the Cosmos DB account. type: List - name: azure-webapp-enable-client-cert-quick-action description: Enables client certificate authentication for the App Service to secure incoming requests. Only clients that have a valid certificate will be able to reach the app. prettyname: Enable Client Certs on Azure App hidden: true quickaction: true arguments: - name: subscription_id type: String required: true description: The subscription ID. prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: name type: String required: true description: The name of the App. prettyname: AZ App defaultValue: AZ App prettypredefined: AZ App: ${asset.xdm.asset.name} - name: client_cert_enabled type: Boolean required: false defaultValue: 'true' description: Whether to enable client certificate authentication. hidden: true outputs: - contextPath: Azure.AppService.WebApp.id description: The fully qualified resource ID for the web app. type: String - contextPath: Azure.AppService.WebApp.name description: The name of the web app. type: String - contextPath: Azure.AppService.WebApp.type description: The resource type, e.g., Microsoft.Web/sites. type: String - contextPath: Azure.AppService.WebApp.location description: The geographic location of the web app. type: String - contextPath: Azure.AppService.WebApp.kind description: The type of app, for example app or functionapp. type: String - contextPath: Azure.AppService.WebApp.tags description: The resource tags as key-value pairs. - contextPath: Azure.AppService.WebApp.identity.type description: The type of managed identity (SystemAssigned, UserAssigned, etc.). type: String - contextPath: Azure.AppService.WebApp.identity.principalId description: The principal ID of the system-assigned identity. type: String - contextPath: Azure.AppService.WebApp.identity.tenantId description: The tenant ID of the system-assigned identity. type: String - contextPath: Azure.AppService.WebApp.identity.userAssignedIdentities description: The list of user-assigned identities associated with the web app. - contextPath: Azure.AppService.WebApp.properties.state description: The current state of the web app (For example Running or Stopped). type: String - contextPath: Azure.AppService.WebApp.properties.enabled description: Whether the web app is enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.defaultHostName description: The default host name of the web app. type: String - contextPath: Azure.AppService.WebApp.properties.hostNames description: A list of host names associated with the web app. - contextPath: Azure.AppService.WebApp.properties.repositorySiteName description: The name of the repository site. type: String - contextPath: Azure.AppService.WebApp.properties.clientAffinityEnabled description: Whether client affinity is enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.clientCertEnabled description: Whether client certificates are enabled. type: Boolean - contextPath: Azure.AppService.WebApp.properties.clientCertExclusionPaths description: A list of paths to exclude from client certificate authentication. type: String - contextPath: Azure.AppService.WebApp.properties.hostingEnvironment description: The App Service Environment to use for the web app. type: String - contextPath: Azure.AppService.WebApp.properties.serverFarmId description: The resource ID of the associated App Service plan. type: String - contextPath: Azure.AppService.WebApp.properties.reserved description: Whether the web app is on a Linux plan. type: Boolean - contextPath: Azure.AppService.WebApp.properties.isXenon description: Whether the web app is hosted in Xenon. type: Boolean - contextPath: Azure.AppService.WebApp.properties.hyperV description: Whether Hyper-V is enabled for the web app. type: Boolean - contextPath: Azure.AppService.WebApp.properties.siteConfig description: A site config object. - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string description: The resource group name. required: true prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: string required: true description: Name of the PostgreSQL server. prettyname: Postgres Server Name defaultValue: Postgres Server Name prettypredefined: Postgres Server Name: ${asset.xdm.asset.name} - name: configuration_name type: string description: The configuration setting name. hidden: true defaultValue: 'log_connections' - name: value type: string description: Value of the configuration. hidden: true defaultValue: 'on' - name: source defaultValue: user-override description: Source of the configuration. hidden: true name: azure-postgres-config-set-session-connection-logging-quick-action prettyname: Enable Session Connection Logging on PostgreSQL hidden: true quickaction: true description: "Enables logging client connections on the PostgreSQL. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/configurations/read, Microsoft.DBforPostgreSQL/servers/configurations/write." outputs: [] # have no outputs for these command by response deprecated: true - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string description: The resource group name. required: true prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: string required: true description: Name of the PostgreSQL server. prettyname: Postgres Server Name defaultValue: Postgres Server Name prettypredefined: Postgres Server Name: ${asset.xdm.asset.name} - name: configuration_name type: string description: The configuration setting name. hidden: true defaultValue: 'log_retention_days' - name: value type: string description: Value of the configuration. hidden: true defaultValue: '4' - name: source defaultValue: user-override description: Source of the configuration. hidden: true name: azure-postgres-config-set-log-retention-period-quick-action prettyname: Set Postgres Log Retention hidden: true quickaction: true description: 'Sets the log retention period for the PostgreSQL server to 4 days. NOTE: The recommended log retention period can be from 4 to 7 days. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/configurations/read, Microsoft.DBforPostgreSQL/servers/configurations/write.' outputs: [] # have no outputs for these command by response deprecated: true - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: string description: The resource group name. required: true prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: string required: true description: Name of the PostgreSQL server. prettyname: Postgres Server Name defaultValue: Postgres Server Name prettypredefined: Postgres Server Name: ${asset.xdm.asset.name} - name: configuration_name type: string description: The configuration setting name. hidden: true defaultValue: 'log_duration' - name: value type: string description: Value of the configuration. hidden: true defaultValue: 'on' - name: source defaultValue: user-override description: Source of the configuration. hidden: true name: azure-postgres-config-set-statement-logging-quick-action prettyname: Enable Postgres Statement Logging hidden: true quickaction: true description: "Enables logging statement execution duration on the PostgreSQL server to help with performance analysis. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/configurations/read, Microsoft.DBforPostgreSQL/servers/configurations/write." outputs: [] # have no outputs for these command by response deprecated: true - arguments: - name: subscription_id type: string description: The subscription ID. required: true prettyname: Subscription ID defaultValue: Subscription ID prettypredefined: Subscription ID: ${asset.xdm.asset.realm} - name: resource_group_name type: String required: true description: The resource group name. prettyname: Resource Group defaultValue: Resource Group prettypredefined: Resource Group: ${asset.xdm.asset.raw_fields.Platform Discovery.resourceGroup} - name: server_name type: String required: true description: Name of the PostgreSQL server. prettyname: Postgres Server Name defaultValue: Postgres Server Name prettypredefined: Postgres Server Name: ${asset.xdm.asset.name} - name: ssl_enforcement type: String description: Whether to enable SSL authentication when connecting to the server. defaultValue: Enabled hidden: true name: azure-postgres-server-update-ssl-enforcement-quick-action description: "Enforces SSL/TLS connections for the PostgreSQL server to reject unencrypted traffic. Deprecated due to the retirement of Azure PostgreSQL Single Server. Required permissions: Microsoft.DBforPostgreSQL/servers/read, Microsoft.DBforPostgreSQL/servers/write." outputs: [] # No outputs are returned in the response. hidden: true quickaction: true prettyname: Enable SSL on Postgres Server deprecated: true - name: azure-compute-vm-list description: "Lists all the virtual machines in the specified subscription. Use the next_token argument to view the next page of results. Required Permissions: Microsoft.Compute/virtualMachines/read." arguments: - name: subscription_id description: The Azure subscription ID. Required for Cortex Platform (which includes Cortex XSIAM version >=3.0 and Cortex Cloud). Optional for Cortex XSOAR and Cortex XSIAM version < 3.0, where it can be retrieved from the integration configuration. required: false required:platform: true - name: resource_group_name description: "The name of the resource group." required: true - name: next_token description: "The URI to fetch the next page of results." outputs: - contextPath: Azure.Compute.VirtualMachines.type description: The type of the resource. type: String - contextPath: Azure.Compute.VirtualMachines.location description: The location of the resource. type: String - contextPath: Azure.Compute.VirtualMachines.tags description: The tags of the resource. type: Unknown - contextPath: Azure.Compute.VirtualMachines.id description: The ID of the resource. type: String - contextPath: Azure.Compute.VirtualMachines.name description: The name of the resource. type: String - contextPath: Azure.Compute.VirtualMachines.etag description: The ETag of the virtual machine, used to prevent overwriting concurrent updates. type: String - contextPath: Azure.Compute.VirtualMachines.extendedLocation description: The extended location of the Virtual Machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.identity description: The identity of the virtual machine, if configured. type: Unknown - contextPath: Azure.Compute.VirtualMachines.managedBy description: MThe ARM resource ID of the Virtual Machine Scale Set (VMSS) that manages the virtual machine, if applicable. Used for internal resource group delete optimization. type: Unknown - contextPath: Azure.Compute.VirtualMachines.placement description: 'The user-defined constraints for virtual machine hardware placement. This property cannot be changed once the VM is provisioned. Minimum api-version: 2024-11-01.' type: Unknown - contextPath: Azure.Compute.VirtualMachines.plan description: Information about the marketplace image used to create the virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.systemData description: Azure Resource Manager metadata containing createdBy and modifiedBy information. type: Unknown - contextPath: Azure.Compute.VirtualMachines.zones description: The availability zones. type: Unknown. - contextPath: Azure.Compute.VirtualMachines.properties.vmId description: The unique ID of the virtual machine. type: String - contextPath: Azure.Compute.VirtualMachines.properties.availabilitySet description: The availability set that the virtual machine is in. type: String - contextPath: Azure.Compute.VirtualMachines.properties.hardwareProfile description: The hardware settings for the virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.storageProfile description: The storage settings for the virtual machine disks. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.osProfile description: The operating system settings for the virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.networkProfile description: The network interfaces of the virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.provisioningState description: The provisioning state, which only appears in the response. type: String - contextPath: Azure.Compute.VirtualMachines.properties.additionalCapabilities description: Additional capabilities enabled or disabled on the virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.securityProfile description: The security settings for the virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.diagnosticsProfile description: The boot diagnostic settings state. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.virtualMachineScaleSet description: The virtual machine scale set that the virtual machine is in. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.proximityPlacementGroup description: The proximity placement group that the virtual machine is in. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.scheduledEventsPolicy description: The Redeploy, Reboot, and ScheduledEventsAdditionalPublishingTargets Scheduled Event related configurations for the virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.priority description: The priority for the virtual machine. type: String - contextPath: Azure.Compute.VirtualMachines.properties.evictionPolicy description: The eviction policy for the virtual machine. type: String - contextPath: Azure.Compute.VirtualMachines.properties.billingProfile description: The billing related details of a Azure Spot virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.host description: The host that the virtual machine is in. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.hostGroup description: The host group that the virtual machine is in. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.licenseType description: The license type for bringing your own license scenario. type: String - contextPath: Azure.Compute.VirtualMachines.properties.extensionsTimeBudget description: The time alloted for all extensions to start. type: String - contextPath: Azure.Compute.VirtualMachines.properties.platformFaultDomain description: The fault domain that the virtual machine is in. type: Number - contextPath: Azure.Compute.VirtualMachines.properties.scheduledEventsProfile description: The scheduled event related configurations. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.userData description: The user data for the VM, which must be base-64 encoded. type: String - contextPath: Azure.Compute.VirtualMachines.properties.capacityReservation description: The capacity reservation related details of a virtual machine. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.applicationProfile description: The gallery applications that should be made available to the VM/VMSS. type: Unknown - contextPath: Azure.Compute.VirtualMachines.properties.timeCreated description: The time when the virtual machine was created. type: Date - contextPath: Azure.Compute.VirtualMachines.plan.name description: The plan name. type: String - contextPath: Azure.Compute.VirtualMachines.plan.publisher description: The publisher of the plan. type: String - contextPath: Azure.Compute.VirtualMachines.plan.product description: The product of the plan. type: String - contextPath: Azure.Compute.VirtualMachines.plan.promotionCode description: The promotion code of the plan. type: String - contextPath: Azure.Compute.VirtualMachines.resources.properties description: The properties of the resource. type: Unknown - contextPath: Azure.Compute.VirtualMachines.resources.id description: The ID of the resource. type: String - contextPath: Azure.Compute.VirtualMachines.resources.name description: The name of the resource. type: String - contextPath: Azure.Compute.VirtualMachines.resources.type description: The type of the resource. type: String - contextPath: Azure.Compute.VirtualMachines.resources.location description: The location of the resource. type: String - contextPath: Azure.Compute.VirtualMachines.resources.tags description: The tags of the resource. type: Unknown - contextPath: Azure.Compute.VirtualMachines.identity.principalId description: The principal ID of the identity. type: String - contextPath: Azure.Compute.VirtualMachines.identity.tenantId description: The tenant ID of the identity. type: String - contextPath: Azure.Compute.VirtualMachines.identity.type description: The type of the identity. type: String - contextPath: Azure.Compute.VirtualMachines.identity.userAssignedIdentities description: The list of user assigned identities associated with the virtual machine. type: String - contextPath: Azure.Compute.VirtualMachines.zones description: The zones of the virtual machine. type: String - contextPath: Azure.Compute.VirtualMachines.extendedLocation.name description: The name of the extended location. type: String - contextPath: Azure.Compute.VirtualMachines.extendedLocation.type description: The type of the extended location. type: String - contextPath: Azure.Compute.VirtualMachines.properties.instanceView description: The virtual machine instance view. type: Unknown - contextPath: Azure.Compute.VirtualMachinesNextToken description: The URI to fetch the next page of VMs. Run the same command with the next_token argument to get the next page of VMs. type: String isfetch: false runonce: false script: '-' type: python subtype: python3 dockerimage: demisto/crypto:1.0.0.10120494 source: 'cooc' fromversion: 8.11.0 supportsquickactions: true isCloudProviderIntegration: true tests: - No tests (auto formatted) internal: true