Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
JupiterOne 2021.71 Release - AskJ1 Community
<main> <article class="userContent"> <p>2021-05-19</p> <h2 data-id="new-features-and-improvements">New Features and Improvements</h2> <ul><li><p>Added <strong>full text search to Policies</strong> - you can now easily search all<br> policies and procedures for specific keywords.</p></li> <li><p>Added support to <strong>export a single policy in PDF</strong>.</p></li> <li><p>All existing SOC 2 frameworks have been updated so they can now be managed<br> from the UI rather than requiring users to edit the JSON file, leveraging the<br> new controls editing feature.</p></li> <li><p>Added a new <strong>"Status" widget</strong> to the Insights app - this allows you to<br> create a summarized "status" of a given class of entities (such as Person or<br> Host) and certain properties (properties are shown with appropriate indicator<br> icons).</p> <p><img src="https://us.v-cdn.net/6035534/uploads/KUT4OJIIQN2R/insights-status-chart-info.png" alt="insights-status-chart-info" class="embedImage-img importedEmbed-img"></img></p></li> <li><p>Revamped products / in-app purchase page.</p></li> <li><p>In Alerts -> Vulnerability Findings view, <strong>normalized "Severity"</strong> and other<br> fields when filtering findings (users no longer need to select "Low", "LOW",<br> and "low" in order to search for all findings with a low severity, instead<br> there is just now a single "Low" to select).</p></li> <li><p>Navigating to <code class="code codeInline" spellcheck="false" tabindex="0">/inventory</code> will now also take you to the asset inventory page<br> (previously only <code class="code codeInline" spellcheck="false" tabindex="0">/assets</code> would)</p></li> <li><p>Added a logout button to the onboarding flow so users can still switch<br> user accounts if needed</p></li> <li><p>Fully redesigned <a rel="nofollow" href="https://community.askj1.com">documentation</a> site - much<br> more developer friendly 🎉</p> <p><img src="https://us.v-cdn.net/6035534/uploads/POWEC6FZTEDU/docs-platform-api.png" alt="new-docs" class="embedImage-img importedEmbed-img"></img></p></li> </ul><h2 data-id="integrations">Integrations</h2> <h3 data-id="aws">AWS</h3> <ul><li><p>Handle authorization and Not Found responses in <code class="code codeInline" spellcheck="false" tabindex="0">cloudhsmv2.listTags</code>,<br><code class="code codeInline" spellcheck="false" tabindex="0">cloudhsmv2.describeClusters</code>, and <code class="code codeInline" spellcheck="false" tabindex="0">cloudhsmv2.describeBackups</code> to avoid<br> step failures.</p></li> <li><p>Fix Macie step failure when the service is not enabled.</p></li> <li><p>Fix failure to use role chaining when <code class="code codeInline" spellcheck="false" tabindex="0">useRoleChaining</code> is set up in an<br> integration instance.</p></li> <li><p>Continued rollout of AWS <code class="code codeInline" spellcheck="false" tabindex="0">accountId</code> property on entities.</p></li> <li><p>Added support for VPC Endpoints -- <code class="code codeInline" spellcheck="false" tabindex="0">aws_vpc_endpoint</code> entities -- as well as<br> parsing of the VPC Endpoint policies to create corresponding permissions<br> relationships.</p></li> </ul><h3 data-id="azure">Azure</h3> <ul><li>Added support for ingesting the following <strong>new</strong> resources:</li> </ul><table><thead><tr><th>Service</th> <th>Resource / Entity</th> </tr></thead><tbody><tr><td>Network</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> </tr><tr><td>App Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_web_app</code></td> </tr><tr><td>App Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_function_app</code></td> </tr><tr><td>App Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_app_service_plan</code></td> </tr><tr><td>Policy Insights</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_state</code></td> </tr></tbody></table><ul><li>Added support for ingesting the following <strong>new</strong> relationships:</li> </ul><table><thead><tr><th>Source</th> <th>_class</th> <th>Target</th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">HAS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subnet</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">HAS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">USES</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_nic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">CONNECTS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_RESOURCE</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">HAS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_web_app</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">HAS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_function_app</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">HAS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_app_service_plan</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_web_app</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">USES</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_app_service_plan</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_function_app</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">USES</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_app_service_plan</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_assignment</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">HAS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_state</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_definition</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DEFINES</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_state</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_RESOURCE</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">HAS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_state</code></td> </tr></tbody></table><ul><li><p>Added the following property to <code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code>:</p> <ul><li><code class="code codeInline" spellcheck="false" tabindex="0">networkRuleSet.allowedIpAddresses</code></li> </ul></li> <li><p>Changed the following property values on <code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code>:</p></li> </ul><table><thead><tr><th>Previous property name</th> <th>New property name</th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">networkRuleSetDefaultAction</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">networkRuleSet.defaultAction</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">networkRuleSetBypass</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">networkRuleSet.bypass</code></td> </tr></tbody></table><ul><li>Renamed type <code class="code codeInline" spellcheck="false" tabindex="0">azure_network_azure_firewall</code> to <code class="code codeInline" spellcheck="false" tabindex="0">azure_network_firewall</code></li> </ul><h3 data-id="github">GitHub</h3> <ul><li>Fix GitHub App installation flow failure.</li> </ul><h3 data-id="google-cloud">Google Cloud</h3> <ul><li><p><a rel="nofollow" href="https://github.com/JupiterOne/graph-google-cloud/issues/152">#152</a> - Publish<br> job log message when <code class="code codeInline" spellcheck="false" tabindex="0">compute.images.get</code> permission is missing</p></li> <li><p><a rel="nofollow" href="https://github.com/JupiterOne/graph-google-cloud/issues/153">#153</a> - Handle<br> disks that do not have an image assigned (blank disks)</p></li> <li><p><a rel="nofollow" href="https://github.com/JupiterOne/graph-google-cloud/issues/140">#140</a> - Map more<br> IAM permissions to service APIs, which will generate additional<br><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code> <strong>HAS</strong> <code class="code codeInline" spellcheck="false" tabindex="0">google_iam_role</code> relationships</p></li> <li><p>New properties added to resources:</p></li> </ul><table><thead><tr><th>Entity</th> <th>Properties</th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_instance</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">webLink</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_disk</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">webLink</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">hasIamPermissions</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_role</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">readonly</code>, <code class="code codeInline" spellcheck="false" tabindex="0">permissions</code></td> </tr></tbody></table><ul><li>Added support for ingesting the following <strong>new</strong> resources:</li> </ul><table><thead><tr><th>Service</th> <th>Resource / Entity</th> </tr></thead><tbody><tr><td>Compute</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_compute_image</code></td> </tr></tbody></table><ul><li>Added support for ingesting the following <strong>new</strong> relationships:</li> </ul><table><thead><tr><th>Source</th> <th>_class</th> <th>Target</th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ASSIGNED</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_role</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">google_cloud_api_service</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">HAS</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">google_iam_role</code></td> </tr></tbody></table><ul><li><code class="code codeInline" spellcheck="false" tabindex="0">google_user</code> is now created as a target entity through a mapped relationship<br> to avoid duplicating information ingested by the Google Workspace integration.</li> </ul><h3 data-id="hackerone">HackerOne</h3> <ul><li>Improved description and help text for the configuration unique program ID.</li> </ul><h3 data-id="jira">Jira</h3> <ul><li><p>Validate <code class="code codeInline" spellcheck="false" tabindex="0">projects</code> configuration value to help users resolve errors.</p></li> <li><p>Add support for ingesting all Jira custom field types.</p></li> </ul><h3 data-id="onelogin">OneLogin</h3> <ul><li>Added <code class="code codeInline" spellcheck="false" tabindex="0">onelogin_user.custom_attributes.*</code> to ingest any/all defined custom<br> attributes for onelogin users.</li> </ul><h3 data-id="slack">Slack</h3> <ul><li>Fix configuration editing flow to prevent unnecessarily re-authorizing the<br> Slack App when changing configuration properties that do not require<br> re-authorization.</li> </ul><h3 data-id="sonarqube">SonarQube</h3> <ul><li>Initial release of SonarQube integration (beta)! 🎉 Check out the<br><a rel="nofollow" href="https://github.com/JupiterOne/graph-sonarqube/blob/master/docs/jupiterone.md">docs</a><br> for details on what's currently supported.</li> </ul><h3 data-id="tenable-cloud">Tenable Cloud</h3> <ul><li><p>Handle <code class="code codeInline" spellcheck="false" tabindex="0">500</code> response fetching asset vulnerability details from Tenable<br> (vulnerabilities for the asset are not ingested).</p></li> <li><p>Handle <code class="code codeInline" spellcheck="false" tabindex="0">404</code> response fetching host details for archived scans.</p></li> <li><p>Tenable client now correctly resets the <code class="code codeInline" spellcheck="false" tabindex="0">retryDelay</code> so that other status codes<br> don't end up using the calculated retry delay from a <code class="code codeInline" spellcheck="false" tabindex="0">429</code> status code.</p></li> <li><p>Migrate to Tenable bulk export API endpoints for vulnerabilities and assets.</p></li> </ul><h2 data-id="bug-fixes">Bug Fixes</h2> <ul><li><p>Resolved an issue where the Finding Details viewer would not have a max height<br> and would cause large amounts of scrolling to be required</p></li> <li><p>Resolved some issues regarding importing rule packs after configuring your<br> first integration</p></li> </ul> </article> </main>
.png)