Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
Azure - AskJ1 Community
<main> <article class="userContent"> <h2 data-id="azure-jupiterone-integration-benefits">Azure + JupiterOne Integration Benefits</h2> <ul><li>Visualize Azure cloud resources in the JupiterOne graph.</li> <li>Map Azure users to employees in your JupiterOne account.</li> <li><p>Monitor visibility and governance of your Azure cloud environment by<br> leveraging hundreds of out-of-the box queries.</p></li> <li><p>Monitor compliance against the Azure CIS Benchmarks framework and other<br> security benchmarks using J1 Compliance.</p></li> <li><p>Monitor Azure vulnerabilities and findings from multiple services within the<br> J1 Alerts.</p></li> <li><p>Monitor changes to your Azure cloud resources using multiple J1 Alerts<br> rule packs specific to Azure.</p></li> </ul><h2 data-id="how-it-works">How it Works</h2> <ul><li><p>JupiterOne periodically fetches users and cloud resources from Azure to update<br> the graph.</p></li> <li><p>Write JupiterOne queries to review and monitor updates to the graph, or<br> leverage existing queries.</p></li> <li><p>Configure alerts to take action when the JupiterOne graph changes, or leverage<br> existing alerts.</p></li> </ul><h2 data-id="requirements">Requirements</h2> <ul><li><p>JupiterOne requires the API credentials for the Azure endpoint, specifically<br> the Directory (tenant) ID, the Application (client) ID, and the Application<br> (client) secret key with the correct permissions assigned.</p></li> <li><p>You must have permission in JupiterOne to install new integrations.</p></li> </ul><h2 data-id="support">Support</h2> <p>If you need help with this integration, please contact<br><a rel="nofollow" href="https://support.jupiterone.io">JupiterOne Support</a>. Also, see the <a rel="nofollow" href="#troubleshooting">Troubleshooting section</a> <br> in this article.</p> <h2 data-id="integration-walkthrough">Integration Walkthrough</h2> <p>Customers authorize access by creating a Service Principal (App Registration)<br> and providing the credentials to JupiterOne.</p> <p>The integration is triggered by an event containing the information for a<br> specific integration instance. Users configure the integration by providing API<br> credentials obtained through the Azure portal.</p> <p>Azure Active Directory is authenticated and accessed through the <a rel="nofollow" href="https://docs.microsoft.com/en-us/graph/auth-v2-service">Microsoft<br> Graph API</a>. Azure Resource Manager is authenticated and accessed through<br><a rel="nofollow" href="https://docs.microsoft.com/en-us/azure/azure-resource-manager/resource-manager-api-authentication">Resource Manager APIs</a>.</p> <h3 data-id="in-azure">In Azure</h3> <p>To create the App Registration:</p> <ol><li>In the Azure portal, click <strong>Azure Active Directory</strong>.</li> <li><p>Select <strong>App registrations</strong>.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/9SL16BS0WUJC/azure-app-registration.png" alt="" class="embedImage-img importedEmbed-img"></img></p></li> <li><p>Click <strong>New registration</strong>.</p></li> <li><p>Create a new App registration, using the <strong>Name</strong> "JupiterOne", selecting<br><strong>Accounts in this organizational directory only</strong>, with <strong>no</strong> "Redirect<br> URI".</p> <p><img src="https://us.v-cdn.net/6035534/uploads/HKUEACQ9TFZT/azure-new-registration.png" alt="" class="embedImage-img importedEmbed-img"></img></p></li> <li><p>Click <strong>Register</strong>.</p></li> </ol><h4 data-id="application-client-id">Application (Client) ID</h4> <p>After registering a new application, you can find the application (client) ID and directory (tenant) ID from the Overview menu option. Note the values for later use.</p> <ol><li><p>Navigate to the Overview page of the new app.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/5N7UWV78HWG4/azure-app-id.png" alt="" class="embedImage-img importedEmbed-img"></img></p></li> <li><p>Copy the Application (client) ID.</p></li> <li>Copy the Directory (tenant) ID.</li> <li>Navigate to the Certificates & secrets section.</li> <li>Create a new client secret.</li> <li>Copy the generated secret Value (you only get one chance to do this).</li> </ol><h4 data-id="api-permissions-azure-active-directory">API Permissions (Azure Active Directory)</h4> <p>The following steps are required for the DICOM service, but optional for the FHIR service. In addition, user access permissions or role assignments for the Azure Health Data Services are managed through RBAC. For more details, go to <a rel="nofollow" href="https://learn.microsoft.com/en-us/azure/healthcare-apis/configure-azure-rbac">Configure Azure RBAC for Azure Health Data Services</a>.</p> <ol><li><p>Go to the <strong>API permissions</strong> menu option for the new app.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/G91VTVN5NDI0/azure-add-permission.png" alt="" class="embedImage-img importedEmbed-img"></img></p></li> <li><p>Click <strong>Add a permission</strong>.</p></li> <li>Click <strong>Add permissions</strong> and grant the following permissions to the app:</li> </ol><ul><li><code class="code codeInline" spellcheck="false" tabindex="0">Directory.Read.All</code></li> <li><code class="code codeInline" spellcheck="false" tabindex="0">Policy.Read.All</code></li> <li><code class="code codeInline" spellcheck="false" tabindex="0">Reports.Read.All</code></li> </ul><ol start="4"><li>Grant admin consent for this directory for the permissions above.</li> </ol><h4 data-id="iam-roles-azure-management-groups-subscriptions">IAM Roles (Azure Management Groups /Subscriptions)</h4> <p>Grant the <code class="code codeInline" spellcheck="false" tabindex="0">Reader</code> RBAC subscription role to read Azure Resource Manager<br> information:</p> <ol><li>Go to <strong>All services</strong> > <strong>Management + governance</strong>.</li> </ol><ul><li><p>If configuring all subscriptions for a tenant: navigate to <br><strong>Management Groups > <a rel="nofollow" href="https://docs.microsoft.com/en-us/azure/governance/management-groups/overview#root-management-group-for-each-directory">Tenant Root Group</a></strong>.</p></li> <li><p>If configuring a single Azure Subscription: navigate to<br><strong>Subscriptions</strong> and choose the subscription from which you want to ingest resources.</p></li> </ul><ol start="2"><li>Click <strong>Management Groups</strong>.</li> <li><p>Click <strong>+ Add management group</strong>.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/3FTM43T2RBG2/azure-add-management-group.png" alt="" class="embedImage-img importedEmbed-img"></img></p></li> <li><p>Create the custom role "JupiterOne Reader".</p></li> </ol><ul><li>Navigate to <strong>Access control (IAM)</strong> -> <strong>Add</strong> -> <strong>Add custom role</strong></li> <li><p>Create a custom role called "JupiterOne Reader" with the following<br> permissions:</p> <ul><li><code class="code codeInline" spellcheck="false" tabindex="0">Microsoft.PolicyInsights/policyStates/queryResults/action</code></li> <li><code class="code codeInline" spellcheck="false" tabindex="0">Microsoft.Web/sites/config/list/Action</code> <ol start="5"><li>Assign roles to the "JupiterOne" App.</li> </ol></li> </ul></li> <li><p>Navigate to <strong>Access control (IAM)</strong> -> <strong>Add</strong> -> <strong>Add role assignment</strong></p></li> <li>Assign each of the three roles to the "JupiterOne" member: <ul><li>JupiterOne Reader</li> <li>Reader</li> <li>Key Vault Reader</li> <li>Management Group Reader (If using <code class="code codeInline" spellcheck="false" tabindex="0">Configure Subscription Instances</code><br> flag in JupiterOne)</li> </ul></li> </ul><h3 data-id="key-vault-access-policy">Key Vault Access Policy</h3> <p>Listing key vault keys and secrets (<code class="code codeInline" spellcheck="false" tabindex="0">rm-keyvault-keys</code> and <code class="code codeInline" spellcheck="false" tabindex="0">rm-keyvault-secrets</code> steps) require you to grant the following permissions to the J1 security principal for each key vault in your account. See the Azure documentation for more information on <a rel="nofollow" href="https://go.microsoft.com/fwlink/?linkid=2125287">assigning a key vault access policy</a>.</p> <ol><li><p>Click Access policies, and then click <strong>+Create</strong>.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/154G3ZMM9JFB/azure-access-policies.png" alt="" class="embedImage-img importedEmbed-img"></img></p></li> <li><p>Under Key permissions, Secret permissions, and Certificate permissions, select the permissions you want.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/EDCNSEQPZKGM/azure-create-policy.png" alt="" class="embedImage-img importedEmbed-img"></img></p></li> </ol><ul><li><p>Key Permissions</p> <ul><li>Key Management Operations</li> <li>List</li> </ul></li> <li><p>Secret Permissions</p> <ul><li>Secret Management Operations</li> <li>List</li> </ul></li> </ul><h3 data-id="in-jupiterone">In JupiterOne</h3> <ol><li><p>From the top navigation of the J1 Search homepage, select <strong>Integrations</strong>.</p></li> <li><p>Scroll to the <strong>Azure</strong> integration tile and click it.</p></li> <li><p>Click <strong>Add Configuration</strong>.</p></li> <li><p>Enter the <strong>Account Name</strong> by which you want to identify this Azure<br> account in J1. Ingested entities have this value stored in<br><code class="code codeInline" spellcheck="false" tabindex="0">tag.AccountName</code> when <strong>Tag with Account Name</strong> is selected.</p></li> <li><p>Enter a <strong>Description</strong> that assists your team when<br> identifying the integration instance.</p></li> <li><p>Select a <strong>Polling Interval</strong> that is sufficient for your<br> monitoring needs. You may leave this as <code class="code codeInline" spellcheck="false" tabindex="0">DISABLED</code> and manually execute<br> the integration.</p></li> <li><p>Enter the <strong>Directory (tenant) ID</strong> of the Active Directory to target in<br> Azure API requests.</p></li> <li><p>Enter the <strong>Application (client) ID</strong> created for JupiterOne, used to<br> authenticate with Azure.</p></li> <li><p>Enter the <strong>Application (client) Secret</strong> associated with the<br> application ID, used to authenticate with Azure.</p></li> <li><p>Select the option <strong>Ingest Active Directory</strong> to ingest Directory<br> information. This should only be enabled in one integration instance per<br> Directory.</p></li> <li><p>Configure the correct scope for your integration:</p> <ul><li><p>If configuring all subscriptions for a tenant: Select the <br> Configure Subscription Instances option to automatically<br> provision new J1 integration instances for each Azure<br> subscription in this tenant. This configuration step is recommended.</p> <p><strong>Note</strong>: The Configure Subscription Instances flag also enables the<br> ingestion of <code class="code codeInline" spellcheck="false" tabindex="0">azure_management_group</code> entities.</p></li> <li><p>If configuring a single Azure Subscription: Enter the subscription<br> ID for the subscription from which you want to ingest data.</p> <p><strong>Note</strong>: The Ingest Active Directory flag enables the ingestion of<br><code class="code codeInline" spellcheck="false" tabindex="0">azure_user</code>, <code class="code codeInline" spellcheck="false" tabindex="0">azure_user_group</code>, and <code class="code codeInline" spellcheck="false" tabindex="0">azure_service_principal</code><br> entities.</p></li> </ul></li> <li><p>Click <strong>Create Configuration</strong> after you have provided all the values.</p></li> </ol><h2 data-id="troubleshooting">Troubleshooting</h2> <h4 data-id="authentication">Authentication</h4> <p>If the Azure integration does not complete, and you encounter a message like<br><code class="code codeInline" spellcheck="false" tabindex="0">[validation_failure] Error occurred while validating integration configuration</code><br> in your job log, check the following common configuration errors:</p> <ul><li><p><strong>Verify the Application (client) ID and Application (client) Secret:</strong> Make<br> sure that you've verified the proper value for client ID and client secret.<br> The client secret has both a <strong>Value</strong> property and a <strong>Secret ID</strong> property.<br> The <strong>Secret ID</strong> is unused - make sure you haven't accidentally used the<br><strong>Secret ID</strong> as the <strong>Client ID</strong>.</p></li> <li><p><strong>Verify that you've enabled the proper API permissions:</strong> Make sure the<br> required API permissions (described above) are enabled for the application.</p></li> <li><p><strong>Verify that the API permissions have been granted as "Application" and not<br> "Delegated":</strong> The integration requires API Permissions of type<br><strong>Application</strong>. Permissions of type <strong>Delegated</strong> will cause issues in your<br> integration.</p></li> <li><p><strong>Verify that your permissions have been "Grant(ed) admin consent for<br> Directory":</strong> If you have added API Permissions to the application, but have<br> not granted Admin Consent, the permissions are not yet active.</p></li> </ul><p><br></p> <h2 data-id="data-model">Data Model</h2> <h3 data-id="entities">Entities</h3> <p>The following entities are created:</p> <table><thead><tr><th>Resources</th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Entity <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> </tr></thead><tbody><tr><td>FrontDoor</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>FrontDoor Backend Pool</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor_backend_pool</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>FrontDoor Frontend Endpoint</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor_frontend_endpoint</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>FrontDoor Routing Rule</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor_routing_rule</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Rule</code></td> </tr><tr><td>FrontDoor Rules Engine</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor_rules_engine</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Ruleset</code></td> </tr><tr><td>[AD] Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Account</code></td> </tr><tr><td>[AD] Group</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">UserGroup</code></td> </tr><tr><td>[AD] Group Member</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_group_member</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">User</code></td> </tr><tr><td>[AD] Service Principal</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_principal</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>[AD] User</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">User</code></td> </tr><tr><td>[RM] API Management API</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_api_management_api</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ApplicationEndpoint</code></td> </tr><tr><td>[RM] API Management Service</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_api_management_service</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>[RM] Advisor Recommendation</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_advisor_recommendation</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Finding</code></td> </tr><tr><td>[RM] App Service Plan</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_app_service_plan</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>[RM] Azure Kubernetes Cluster</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_kubernetes_cluster</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>[RM] Azure Managed Disk</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_managed_disk</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Disk</code></td> </tr><tr><td>[RM] Batch Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>[RM] Batch Application</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_application</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Process</code></td> </tr><tr><td>[RM] Batch Certificate</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_certificate</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Certificate</code></td> </tr><tr><td>[RM] Batch Pool</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_pool</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>[RM] CDN Endpoint</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cdn_endpoint</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>[RM] CDN Profile</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cdn_profile</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>[RM] Classic Admin</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_classic_admin_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">UserGroup</code></td> </tr><tr><td>[RM] Container</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Container</code></td> </tr><tr><td>[RM] Container Group</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Group</code></td> </tr><tr><td>[RM] Container Registry</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_registry</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>[RM] Container Registry Webhook</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_registry_webhook</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ApplicationEndpoint</code></td> </tr><tr><td>[RM] Container Volume</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_volume</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Disk</code></td> </tr><tr><td>[RM] Cosmos DB Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cosmosdb_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Account</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>[RM] Cosmos DB Database</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cosmosdb_sql_database</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>[RM] DNS Record Set</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_dns_record_set</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DomainRecord</code></td> </tr><tr><td>[RM] DNS Zone</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_dns_zone</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DomainZone</code></td> </tr><tr><td>[RM] Event Grid Domain</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_domain</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>[RM] Event Grid Domain Topic</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_domain_topic</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Queue</code></td> </tr><tr><td>[RM] Event Grid Topic</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_topic</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Queue</code></td> </tr><tr><td>[RM] Event Grid Topic Subscription</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_topic_subscription</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Subscription</code></td> </tr><tr><td>[RM] Function App</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_function_app</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Function</code></td> </tr><tr><td>[RM] Gallery</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_gallery</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Repository</code></td> </tr><tr><td>[RM] Image</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_image</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Image</code></td> </tr><tr><td>[RM] Key Vault</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_service</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>[RM] Key Vault Key</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_key</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Key</code></td> </tr><tr><td>[RM] Key Vault Secret</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_secret</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Secret</code></td> </tr><tr><td>[RM] Load Balancer</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_lb</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Gateway</code></td> </tr><tr><td>[RM] Location</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_location</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Site</code></td> </tr><tr><td>[RM] Management Group</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_management_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Group</code></td> </tr><tr><td>[RM] MariaDB Database</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mariadb_database</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>[RM] MariaDB Server</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mariadb_server</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>[RM] Monitor Activity Log Alert</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_monitor_activity_log_alert</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Rule</code></td> </tr><tr><td>[RM] Monitor Diagnostic Settings Resource</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_diagnostic_setting</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>[RM] Monitor Log Profile</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_monitor_log_profile</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>[RM] MySQL Database</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mysql_database</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>[RM] MySQL Server</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mysql_server</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>[RM] Network Firewall</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_network_firewall</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Firewall</code></td> </tr><tr><td>[RM] Network Interface</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_nic</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">NetworkInterface</code></td> </tr><tr><td>[RM] Network Watcher</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_network_watcher</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Resource</code></td> </tr><tr><td>[RM] Policy Assignment</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_assignment</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ControlPolicy</code></td> </tr><tr><td>[RM] Policy Definition</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_definition</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Rule</code></td> </tr><tr><td>[RM] Policy Set Definition</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_set_definition</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Ruleset</code></td> </tr><tr><td>[RM] Policy State</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_state</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Review</code></td> </tr><tr><td>[RM] PostgreSQL Database</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_postgresql_database</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>[RM] PostgreSQL Server</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>[RM] PostgreSQL Server Firewall Rule</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server_firewall_rule</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Firewall</code></td> </tr><tr><td>[RM] Private DNS Record Set</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_dns_record_set</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DomainRecord</code></td> </tr><tr><td>[RM] Private DNS Zone</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_dns_zone</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DomainZone</code></td> </tr><tr><td>[RM] Private Endpoint</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">NetworkEndpoint</code></td> </tr><tr><td>[RM] Public IP Address</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_public_ip</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">IpAddress</code></td> </tr><tr><td>[RM] Redis Cache</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_redis_cache</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Cluster</code></td> </tr><tr><td>[RM] Redis Firewall Rule</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_firewall_rule</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Firewall</code></td> </tr><tr><td>[RM] Resource Group</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Group</code></td> </tr><tr><td>[RM] Resource Lock</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_lock</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Rule</code></td> </tr><tr><td>[RM] Role Assignment</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessPolicy</code></td> </tr><tr><td>[RM] Role Definition</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_definition</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessRole</code></td> </tr><tr><td>[RM] SQL Database</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_database</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>[RM] SQL Server</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Database</code>, <code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>[RM] SQL Server Active Directory Admin</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server_active_directory_admin</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">AccessRole</code></td> </tr><tr><td>[RM] SQL Server Firewall Rule</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server_firewall_rule</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Firewall</code></td> </tr><tr><td>[RM] Security Assessment</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_assessment</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Assessment</code></td> </tr><tr><td>[RM] Security Center Auto Provisioning Setting</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_center_auto_provisioning_setting</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>[RM] Security Center Setting</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_center_setting</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>[RM] Security Center Subscription Pricing</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_center_subscription_pricing</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Configuration</code></td> </tr><tr><td>[RM] Security Contact</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_center_contact</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Resource</code></td> </tr><tr><td>[RM] Security Group</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Firewall</code></td> </tr><tr><td>[RM] Security Group Flow Logs</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group_flow_logs</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Logs</code></td> </tr><tr><td>[RM] Service Bus Namespace</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_namespace</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>[RM] Service Bus Queue</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_queue</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Queue</code></td> </tr><tr><td>[RM] Service Bus Subscription</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_subscription</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Subscription</code></td> </tr><tr><td>[RM] Service Bus Topic</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_topic</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Queue</code></td> </tr><tr><td>[RM] Shared Image</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_shared_image</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Image</code></td> </tr><tr><td>[RM] Shared Image Version</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_shared_image_version</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Image</code></td> </tr><tr><td>[RM] Storage Account</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Service</code></td> </tr><tr><td>[RM] Storage Container</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_container</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>[RM] Storage File Share</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_file_share</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code></td> </tr><tr><td>[RM] Storage Queue</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_queue</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Queue</code></td> </tr><tr><td>[RM] Storage Table</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_table</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">DataStore</code>, <code class="code codeInline" spellcheck="false" tabindex="0">Database</code></td> </tr><tr><td>[RM] Subnet</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subnet</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Network</code></td> </tr><tr><td>[RM] Subscription</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Account</code></td> </tr><tr><td>[RM] Virtual Machine</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Host</code></td> </tr><tr><td>[RM] Virtual Machine Extension</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm_extension</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Application</code></td> </tr><tr><td>[RM] Virtual Network</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vnet</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Network</code></td> </tr><tr><td>[RM] Web App</td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_web_app</code></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">Application</code></td> </tr></tbody></table><h3 data-id="relationships">Relationships</h3> <p>The following relationships are created:</p> <table><thead><tr><th>Source Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Relationship <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> <th>Target Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_management_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_api_management_service</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_api_management_api</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_assessment</code></td> <td><strong>IDENTIFIED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_advisor_recommendation</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_application</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_certificate</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_pool</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cdn_profile</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cdn_endpoint</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_classic_admin_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_volume</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_registry</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_registry_webhook</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_volume</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_volume</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_file_share</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cosmosdb_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cosmosdb_sql_database</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_diagnostic_setting</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_dns_zone</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_dns_record_set</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_domain</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_domain_topic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_domain_topic</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_topic_subscription</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_topic</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_topic_subscription</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor_backend_pool</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor_frontend_endpoint</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor_routing_rule</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor_rules_engine</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_function_app</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_app_service_plan</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_gallery</code></td> <td><strong>CONTAINS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_shared_image</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_group_member</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_service</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_PRINCIPAL</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_service</code></td> <td><strong>CONTAINS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_key</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_service</code></td> <td><strong>CONTAINS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_secret</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_lb</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_nic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_management_group</code></td> <td><strong>CONTAINS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_management_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mariadb_server</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mariadb_database</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_monitor_activity_log_alert</code></td> <td><strong>MONITORS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_SCOPE</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_monitor_log_profile</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mysql_server</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mysql_database</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_network_watcher</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group_flow_logs</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_assignment</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_state</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_assignment</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_definition</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_assignment</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_set_definition</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_definition</code></td> <td><strong>DEFINES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_state</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_set_definition</code></td> <td><strong>CONTAINS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_definition</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_postgresql_database</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server_firewall_rule</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_dns_zone</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_dns_record_set</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_RESOURCE</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_nic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_redis_cache</code></td> <td><strong>CONNECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_redis_cache</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_redis_cache</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_firewall_rule</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_api_management_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_app_service_plan</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_batch_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cdn_profile</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_container_registry</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_cosmosdb_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_dns_zone</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_domain</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_event_grid_topic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_frontdoor</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_function_app</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_gallery</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_image</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_kubernetes_cluster</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_lb</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_managed_disk</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mariadb_server</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_monitor_activity_log_alert</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_mysql_server</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_network_firewall</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_network_watcher</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_nic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_postgresql_server</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_dns_zone</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_public_ip</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_redis_cache</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_namespace</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vnet</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_web_app</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_SCOPE</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_diagnostic_setting</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_SCOPE</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_advisor_recommendation</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_SCOPE</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_assignment</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_RESOURCE</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_policy_state</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_lock</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_SCOPE</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">ANY_SCOPE</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_application</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_directory</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_directory_role_template</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_everyone</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_foreign_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_msi</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_principal</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_unknown</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_unknown_principal_type</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>ASSIGNED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_user_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_assignment</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_definition</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group_flow_logs</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group_flow_logs</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group</code></td> <td><strong>PROTECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_nic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group</code></td> <td><strong>PROTECTS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subnet</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_group</code></td> <td><strong>ALLOWS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subnet</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_namespace</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_queue</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_namespace</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_topic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_topic</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_bus_subscription</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_shared_image</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_shared_image_version</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server_active_directory_admin</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_database</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_sql_server_firewall_rule</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_container</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_file_share</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_queue</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_table</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_keyvault_service</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subnet</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_private_endpoint</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subnet</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>CONTAINS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_role_definition</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_monitor_log_profile</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_resource_group</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_center_auto_provisioning_setting</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_center_contact</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_center_setting</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_center_subscription_pricing</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>PERFORMED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_security_assessment</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>GENERATED</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_shared_image_version</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_image</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_managed_disk</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_service_principal</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_nic</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_public_ip</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_shared_image</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_shared_image_version</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vm</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_storage_account</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_vnet</code></td> <td><strong>CONTAINS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subnet</code></td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_web_app</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">azure_app_service_plan</code></td> </tr></tbody></table><h3 data-id="mapped-relationships">Mapped Relationships</h3> <p>The following mapped relationships are created:</p> <table><thead><tr><th>Source Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Relationship <code class="code codeInline" spellcheck="false" tabindex="0">_class</code></th> <th>Target Entity <code class="code codeInline" spellcheck="false" tabindex="0">_type</code></th> <th>Direction</th> </tr></thead><tbody><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_network_watcher</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">*azure_location*</code></td> <td>REVERSE</td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_management_group</code></td> <td><strong>HAS</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">*azure_subscription*</code></td> <td>FORWARD</td> </tr><tr><td><code class="code codeInline" spellcheck="false" tabindex="0">azure_subscription</code></td> <td><strong>USES</strong></td> <td><code class="code codeInline" spellcheck="false" tabindex="0">*azure_location*</code></td> <td>FORWARD</td> </tr></tbody></table><p><br></p> <p><br></p> <h2 data-id="diagnostic-settings">Diagnostic Settings</h2> <p>Azure Diagnostic Settings are supported on many Azure resources. A list of<br> supported services / metrics can be found in<br><a rel="nofollow" href="https://docs.microsoft.com/en-us/azure/azure-monitor/essentials/metrics-supported">Azure documentation</a>.</p> <p>The JupiterOne graph-azure project currently ingests diagnostic settings for the<br> following entities:</p> <ul><li>azure_api_management_service</li> <li>azure_batch_account</li> <li>azure_cdn_endpoint</li> <li>azure_cdn_profile</li> <li>azure_container_registry</li> <li>azure_event_grid_domain</li> <li>azure_event_grid_topic</li> <li><p>azure_keyvault_service</p> <ul><li>Log Categories:</li> <li>AuditEvent</li> </ul></li> <li><p>azure_lb</p></li> <li>azure_mariadb_server</li> <li>azure_mysql_server</li> <li>azure_network_firewall</li> <li>azure_postgresql_server</li> <li>azure_public_ip</li> <li>azure_security_group</li> <li>azure_sql_server</li> <li><p>azure_subscription</p> <ul><li>Log Categories:</li> <li>Administrative</li> <li>Alert</li> <li>Policy</li> <li>Security</li> </ul></li> <li><p>azure_vnet</p></li> </ul><p><br></p> </article> </main>
.png)