Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
JupiterOne 2021.68 Release - AskJ1 Community
<main> <article class="userContent"> <p>2021-04-06</p> <h2 data-id="new-features-and-improvements">New Features and Improvements</h2> <ul><li><p>Error reporting is now more accurate to help us be aware of when customers run into issues and where those issues are located</p></li> <li><p>Cursors/Pagination are now used with query results and the graph viewer to improve load times</p></li> <li><p>Compliance evidence uploads now allow you to rename & remove files from the evidence prior to uploading them</p></li> <li><p>Added additional guidance and information to the prompt a user gets when completing the "Fast Track" for an integration</p></li> <li><p>Improved the visuals of the "Account Usage" screen where there is now a higher contrast between the lines + labels and the background</p></li> <li><p>Added an "X" for exiting the modals more easily when mapping policies & controls, editing a question, or initializing the policies app</p></li> </ul><h2 data-id="integrations">Integrations</h2> <h3 data-id="aws">AWS</h3> <ul><li><p>Added support for S3 Event Notifciations:</p> <ul><li>Added <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">notificationEnabled</code> boolean property to <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">aws_s3_bucket</code></li> <li><p>Added <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">aws_s3_event_notification</code> relationships:</p></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">aws_s3_bucket</code> <strong>NOTIFIES</strong> <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">aws_lambda_fuction</code></p></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">aws_s3_bucket</code> <strong>NOTIFIES</strong> <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">aws_sqs_queue</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">aws_s3_bucket</code> <strong>NOTIFIES</strong> <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">aws_sns_topic</code></li> </ul></li> </ul><h3 data-id="azure">Azure</h3> <ul><li><p>Added support for ingesting the following <strong>new</strong> resources:</p> <ul><li><p>Entities</p></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_monitor_activity_log_alert</code></p></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server_firewall_rule</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_security_center_subscription_pricing</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_sql_server_active_directory_admin</code></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_vm_extension</code></p></li> <li><p>Relationships</p></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_subscription_contains_role_definition</code></p></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_monitor_activity_log_alert_monitors_scope</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_vm|USES|azure_storage_account</code></li> </ul></li> <li><p>Added additional properties to <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">secureTransport</code>:</p> <ul><li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_sql_server</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_mariadb_server</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_mysql_server</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server</code></li> </ul></li> <li><p>Added additional properties to <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_sql_server</code>:</p> <ul><li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">encryptionProtector.serverKeyName</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">encryptionProtector.serverKeyType</code></li> </ul></li> <li><p>Added additional properties to <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server</code>:</p> <ul><li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">configuration.logCheckpoints</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">configuration.logConnections</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">configuration.logDisconnections</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">configuration.logRetentionDays</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">configuration.connectionThrottling</code></li> </ul></li> <li><p>Added log categories to <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_diagnostic_settings</code> for these entities:</p> <ul><li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></p></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">log.Administrative</code></p></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">log.Alert</code></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">log.Policy</code></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">log.Security</code></p></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_keyvault_service</code></p></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">log.AuditEvent</code></p></li> </ul></li> <li><p>Changed <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_advisor_recommendation.name</code> to use <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">shortDescription.solution</code><br> instead of <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">name</code> because <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">name</code> returned from the Azure API is a UUID.</p></li> <li><p>Changed the way that Diagnostic Settings are ingested. Previously, each <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">log</code><br> and <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">metric</code> enumerated within a Diagnostic Settings Resource was created as<br> its own entity. This change creates a single <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_diagnostic_setting</code><br> entity, which contains all <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">log</code>s and <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">metric</code>s in raw data. Special <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">log</code>s<br> and <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">metric</code>s can be exposed as properties on the <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">azure_diagnostic_setting</code><br> entity.</p></li> </ul><h3 data-id="bitbucket">Bitbucket</h3> <ul><li>Moved from deprecated teams APIs to workspaces APIs. This was necessary to<br> support new BB accounts that do not have the ability to enable teams APIs in<br> OAuth Consumers. The ingested data has been changed:</li> </ul><table><thead><tr><th>Old type</th> <th>New type</th> </tr></thead><tbody><tr><td>bitbucket_team</td> <td>bitbucket_workspace</td> </tr><tr><td>bitbucket_team_has_user</td> <td>bitbucket_workspace_has_user</td> </tr><tr><td>bitbucket_team_owns_repo</td> <td>bitbucket_workspace_owns_repo</td> </tr><tr><td>bitbucket_team_owns_project</td> <td>bitbucket_workspace_owns_project</td> </tr></tbody></table><p>Please note that this is implemented as the creation of the new<br><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">bitbucket_workspace</code> entity and relationships and the deletion of the old<br><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">bitbucket_team</code> entity and relationships. Queries that depended on those type<br> values must be updated.</p> <h3 data-id="google-cloud">Google Cloud</h3> <ul><li>Added support for ingesting the following <strong>new</strong> resources</li> </ul><table><thead><tr><th>Service</th> <th>Resource / Entity</th> </tr></thead><tbody><tr><td>Redis</td> <td><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">google_redis_instance</code></td> </tr><tr><td>Memcache</td> <td><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">google_memcache_instance</code></td> </tr><tr><td></td> <td><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">google_memcache_instance_node</code></td> </tr></tbody></table><h3 data-id="google-workspaces">Google Workspaces</h3> <ul><li><p>Support for ingesting the following <strong>new</strong> resources</p> <ul><li><p>Groups</p></li> <li><p><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">google_group_settings</code></p></li> <li><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">google_group</code> <strong>HAS</strong> <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">google_group_settings</code></li> </ul><p>A Google Workspace administrator must authorize domain wide delegation to the<br> JupiterOne Service Account for the scope<br><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">https://www.googleapis.com/auth/apps.groups.settings</code>. Please see the updated<br><a rel="nofollow" href="https://jupiterone.vanillacommunities.com/kb/articles/1145-google-integration-with-jupiterone">integration setup guide</a> for details.</p></li> </ul><h3 data-id="qualys">Qualys</h3> <ul><li>The value of the Qualys <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">HostAsset.fqdn</code> is now normalized with<br><code class="code codeInline code codeInline" spellcheck="false" tabindex="0">toLowerCase()</code>. The value is stored in <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Finding.targets</code> and as <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">Host.fqdn</code>.<br> This supports mapping rules that work by finding matching values.</li> </ul><h2 data-id="bug-fixes">Bug Fixes</h2> <ul><li>Resolved an issue where the landing app would fetch query results from the cache as opposed to the server</li> <li>Modified the account creation flow so it will provide a more useful error when an account with a given name already exists</li> <li>Resolved an issue where a user's token would occasionally not refresh correctly</li> <li>Fixed an issue where the graph viewer was unable to be loaded from with a compliance requirement/control's evidence viewer</li> <li>Resolved an issue where RBAC settings were not available</li> <li>Resolved an issue where clicking the "Add query to insights" was not operating as expected</li> <li>Downloading a query result as JSON now opens the results in a new tab as opposed to using the current tab</li> <li>Resolved an issue where newline characters were allowed in a requirement/control's <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">ref</code> and ended up causing some problems with the app</li> <li>Custom properties in the edit page for an entity now show up as expected</li> <li>Resolved an issue where hubspot leads were sent with the First/Last name flipped</li> <li>Fixed an issue where the integrations page would have a double scroll bar in certain scenarios</li> <li>Boolean values will now show up in the label for a pie chart's sections</li> <li>Query names now correctly appear in hover tooltips on insights charts as opposed to the default <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">query 1</code>, <code class="code codeInline code codeInline" spellcheck="false" tabindex="0">query 2</code> etc.</li> <li>Resolved an issue where trailing whitespace would cause the policies + procedures app to be unable to load a given item</li> </ul> </article> </main>
.png)