Valutazioni di Microsoft.Security

Definizione della risorsa Bicep

Il tipo di risorsa di valutazione può essere distribuito con operazioni destinate a:

• Tenant - Vedi comandi di deployment tenant Gruppi* di gestione - Vedi comandi* deployment gruppo di gestioneAbbonamento - Vedi comandi* deployment in abbonamentoGruppi di risorse - Vedi comandi deployment gruppo risorse

Per un elenco delle proprietà modificate in ogni versione dell'API, vedere log delle modifiche.

Esempi di utilizzo

Esempi di Bicep

Un esempio base di implementazione di Security Center Assessment per Centro sicurezza di Azure.

targetScope = 'subscription'

param resourceName string = 'acctest0001'
param location string = 'westus'
@secure()
@description('The administrator password for the virtual machine scale set')
param adminPassword string

resource resourceGroup 'Microsoft.Resources/resourceGroups@2020-06-01' = {
  name: resourceName
  location: location
}

resource assessmentMetadata 'Microsoft.Security/assessmentMetadata@2021-06-01' = {
  name: 'fdaaa62c-1d42-45ab-be2f-2af194dd1700'
  properties: {
    assessmentType: 'CustomerManaged'
    description: 'Test Description'
    displayName: 'Test Display Name'
    severity: 'Medium'
  }
}

resource pricing 'Microsoft.Security/pricings@2023-01-01' = {
  name: 'VirtualMachines'
  properties: {
    extensions: []
    pricingTier: 'Standard'
    subPlan: 'P2'
  }
}

module module1 'main-rg-module.bicep' = {
  name: 'deploy-rg-resources'
  scope: resourceGroup
  params: {
    resourceName: resourceName
    adminPassword: adminPassword
    location: location
  }
}

Un esempio base di implementazione di Security Center Assessment per Centro sicurezza di Azure.

param resourceName string = 'acctest0001'
param location string = 'westus'
@secure()
@description('The administrator password for the virtual machine scale set')
param adminPassword string

resource virtualMachineScaleSet 'Microsoft.Compute/virtualMachineScaleSets@2024-11-01' = {
  name: '${resourceName}-vmss'
  location: location
  sku: {
    capacity: 1
    name: 'Standard_B1s'
  }
  properties: {
    additionalCapabilities: {}
    doNotRunExtensionsOnOverprovisionedVMs: false
    orchestrationMode: 'Uniform'
    overprovision: true
    singlePlacementGroup: true
    upgradePolicy: {
      mode: 'Manual'
    }
    virtualMachineProfile: {
      diagnosticsProfile: {
        bootDiagnostics: {
          enabled: false
          storageUri: ''
        }
      }
      extensionProfile: {
        extensionsTimeBudget: 'PT1H30M'
      }
      networkProfile: {
        networkInterfaceConfigurations: [
          {
            name: 'example'
            properties: {
              dnsSettings: {
                dnsServers: []
              }
              enableAcceleratedNetworking: false
              enableIPForwarding: false
              ipConfigurations: [
                {
                  name: 'internal'
                  properties: {
                    applicationGatewayBackendAddressPools: []
                    applicationSecurityGroups: []
                    loadBalancerBackendAddressPools: []
                    loadBalancerInboundNatPools: []
                    primary: true
                    privateIPAddressVersion: 'IPv4'
                    subnet: {
                      id: subnet.id
                    }
                  }
                }
              ]
              primary: true
            }
          }
        ]
      }
      osProfile: {
        adminPassword: adminPassword
        adminUsername: 'adminuser'
        allowExtensionOperations: true
        computerNamePrefix: '${resourceName}-vmss'
        linuxConfiguration: {
          disablePasswordAuthentication: false
          provisionVMAgent: true
          ssh: {
            publicKeys: []
          }
        }
        secrets: []
      }
      priority: 'Regular'
      storageProfile: {
        dataDisks: []
        imageReference: {
          offer: '0001-com-ubuntu-server-jammy'
          publisher: 'Canonical'
          sku: '22_04-lts'
          version: 'latest'
        }
        osDisk: {
          caching: 'ReadWrite'
          createOption: 'FromImage'
          managedDisk: {
            storageAccountType: 'Standard_LRS'
          }
          osType: 'Linux'
          writeAcceleratorEnabled: false
        }
      }
    }
  }
}

resource assessment 'Microsoft.Security/assessments@2020-01-01' = {
  name: 'fdaaa62c-1d42-45ab-be2f-2af194dd1700'
  scope: virtualMachineScaleSet
  properties: {
    additionalData: {}
    resourceDetails: {
      source: 'Azure'
    }
    status: {
      cause: ''
      code: 'Healthy'
      description: ''
    }
  }
}

resource virtualNetwork 'Microsoft.Network/virtualNetworks@2024-05-01' = {
  name: '${resourceName}-vnet'
  location: location
  properties: {
    addressSpace: {
      addressPrefixes: [
        '10.0.0.0/16'
      ]
    }
    dhcpOptions: {
      dnsServers: []
    }
    privateEndpointVNetPolicies: 'Disabled'
  }
}

resource subnet 'Microsoft.Network/virtualNetworks/subnets@2024-05-01' = {
  name: 'internal'
  parent: virtualNetwork
  properties: {
    addressPrefix: '10.0.2.0/24'
    defaultOutboundAccess: true
    delegations: []
    privateEndpointNetworkPolicies: 'Disabled'
    privateLinkServiceNetworkPolicies: 'Enabled'
    serviceEndpointPolicies: []
    serviceEndpoints: []
  }
}

Formato risorsa

Per creare una risorsa Microsoft.Security/assessments, aggiungi il seguente Bicep al tuo template.

resource symbolicname 'Microsoft.Security/assessments@2025-05-04' = {
  scope: resourceSymbolicName or scope
  name: 'string'
  properties: {
    additionalData: {
      {customized property}: 'string'
    }
    metadata: {
      assessmentType: 'string'
      categories: [
        'string'
      ]
      description: 'string'
      displayName: 'string'
      implementationEffort: 'string'
      partnerData: {
        partnerName: 'string'
        productName: 'string'
        secret: 'string'
      }
      preview: bool
      remediationDescription: 'string'
      severity: 'string'
      threats: [
        'string'
      ]
      userImpact: 'string'
    }
    partnersData: {
      partnerName: 'string'
      secret: 'string'
    }
    resourceDetails: {
      source: 'string'
      // For remaining properties, see CommonResourceDetails objects
    }
    risk: {
      attackPathsReferences: [
        'string'
      ]
      isContextualRisk: bool
      level: 'string'
      paths: [
        {
          edges: [
            {
              id: 'string'
              sourceId: 'string'
              targetId: 'string'
            }
          ]
          id: 'string'
          nodes: [
            {
              id: 'string'
              nodePropertiesLabel: [
                'string'
              ]
            }
          ]
        }
      ]
      riskFactors: [
        'string'
      ]
    }
    status: {
      cause: 'string'
      code: 'string'
      description: 'string'
    }
  }
}

Oggetti CommonResourceDetails

Impostare la proprietà di origine per specificare il tipo di oggetto.

Per Azure, usa:

{
  source: 'Azure'
}

Per OnPremiseSql, usare:

{
  databaseName: 'string'
  machineName: 'string'
  serverName: 'string'
  source: 'OnPremiseSql'
  sourceComputerId: 'string'
  vmuuid: 'string'
  workspaceId: 'string'
}

Valori delle proprietà

Microsoft.Security/assessments

ValutazioneStatoOrValutazioneStatoRisposta

AzureResourceDetails

CommonResourceDetails

OnPremiseSqlResourceDetails

SicurezzaValutazioneMetadatiPartnerDati

SecurityAssessmentMetadataProperties

SicurezzaValutazionePartnerData

SecurityAssessmentPropertiesBaseAdditionalData

SecurityAssessmentPropertiesBaseRisk

SecurityAssessmentPropertiesBaseRiskPathsItem

SecurityAssessmentPropertiesBaseRiskPathsItemEdgeItem

SecurityAssessmentPropertiesBaseRiskPathsItemNodesItem

SecurityAssessmentPropertiesOrSecurityAssessmentPropertiesResponse

Definizione di risorsa del modello di Resource Manager

Il tipo di risorsa di valutazione può essere distribuito con operazioni destinate a:

• Tenant - Vedi comandi di deployment tenant Gruppi* di gestione - Vedi comandi* di deployment gruppo digestione Abbonamento - Vedi comandi* deployment in abbonamentoGruppi di risorse - Vedi comandi deployment del gruppo risorse Per un elenco delle proprietà modificate in ciascuna versione dell'API, vedi registro modifiche.

Esempi di utilizzo

Formato risorsa

Per creare una risorsa Microsoft.Security/assessments, aggiungere il codice JSON seguente al modello.

{
  "type": "Microsoft.Security/assessments",
  "apiVersion": "2025-05-04",
  "name": "string",
  "properties": {
    "additionalData": {
      "{customized property}": "string"
    },
    "metadata": {
      "assessmentType": "string",
      "categories": [ "string" ],
      "description": "string",
      "displayName": "string",
      "implementationEffort": "string",
      "partnerData": {
        "partnerName": "string",
        "productName": "string",
        "secret": "string"
      },
      "preview": "bool",
      "remediationDescription": "string",
      "severity": "string",
      "threats": [ "string" ],
      "userImpact": "string"
    },
    "partnersData": {
      "partnerName": "string",
      "secret": "string"
    },
    "resourceDetails": {
      "source": "string"
      // For remaining properties, see CommonResourceDetails objects
    },
    "risk": {
      "attackPathsReferences": [ "string" ],
      "isContextualRisk": "bool",
      "level": "string",
      "paths": [
        {
          "edges": [
            {
              "id": "string",
              "sourceId": "string",
              "targetId": "string"
            }
          ],
          "id": "string",
          "nodes": [
            {
              "id": "string",
              "nodePropertiesLabel": [ "string" ]
            }
          ]
        }
      ],
      "riskFactors": [ "string" ]
    },
    "status": {
      "cause": "string",
      "code": "string",
      "description": "string"
    }
  }
}

Oggetti CommonResourceDetails

Impostare la proprietà di origine per specificare il tipo di oggetto.

Per Azure, usa:

{
  "source": "Azure"
}

Per OnPremiseSql, usare:

{
  "databaseName": "string",
  "machineName": "string",
  "serverName": "string",
  "source": "OnPremiseSql",
  "sourceComputerId": "string",
  "vmuuid": "string",
  "workspaceId": "string"
}

Valori delle proprietà

Microsoft.Security/assessments

ValutazioneStatoOrValutazioneStatoRisposta

AzureResourceDetails

CommonResourceDetails

OnPremiseSqlResourceDetails

SicurezzaValutazioneMetadatiPartnerDati

SecurityAssessmentMetadataProperties

SicurezzaValutazionePartnerData

SecurityAssessmentPropertiesBaseAdditionalData

SecurityAssessmentPropertiesBaseRisk

SecurityAssessmentPropertiesBaseRiskPathsItem

SecurityAssessmentPropertiesBaseRiskPathsItemEdgeItem

SecurityAssessmentPropertiesBaseRiskPathsItemNodesItem

SecurityAssessmentPropertiesOrSecurityAssessmentPropertiesResponse

Definizione di risorsa Terraform (provider AzAPI)

Il tipo di risorsa di valutazione può essere distribuito con operazioni destinate a:

• Inquilino* Gruppi * Abbonamento* Gruppi di risorse Per un elenco delle proprietà modificate in ogni versione dell'API, vedi il registro modifiche.

Esempi di utilizzo

Esempi di Terraform

Un esempio base di implementazione di Security Center Assessment per Centro sicurezza di Azure.

terraform {
  required_providers {
    azapi = {
      source = "Azure/azapi"
    }
  }
}

provider "azapi" {
  skip_provider_registration = false
}

data "azapi_client_config" "current" {}

variable "resource_name" {
  type    = string
  default = "acctest0001"
}

variable "location" {
  type    = string
  default = "westus"
}

variable "admin_password" {
  type        = string
  sensitive   = true
  description = "The administrator password for the virtual machine scale set"
}

resource "azapi_resource" "resourceGroup" {
  type     = "Microsoft.Resources/resourceGroups@2020-06-01"
  name     = var.resource_name
  location = var.location
}

resource "azapi_resource" "assessmentMetadata" {
  type      = "Microsoft.Security/assessmentMetadata@2021-06-01"
  parent_id = "/subscriptions/${data.azapi_client_config.current.subscription_id}"
  name      = "fdaaa62c-1d42-45ab-be2f-2af194dd1700"
  body = {
    properties = {
      assessmentType = "CustomerManaged"
      description    = "Test Description"
      displayName    = "Test Display Name"
      severity       = "Medium"
    }
  }
}

resource "azapi_resource" "pricing" {
  type      = "Microsoft.Security/pricings@2023-01-01"
  parent_id = "/subscriptions/${data.azapi_client_config.current.subscription_id}"
  name      = "VirtualMachines"
  body = {
    properties = {
      extensions  = []
      pricingTier = "Standard"
      subPlan     = "P2"
    }
  }
}

resource "azapi_resource" "virtualNetwork" {
  type      = "Microsoft.Network/virtualNetworks@2024-05-01"
  parent_id = azapi_resource.resourceGroup.id
  name      = "${var.resource_name}-vnet"
  location  = var.location
  body = {
    properties = {
      addressSpace = {
        addressPrefixes = ["10.0.0.0/16"]
      }
      dhcpOptions = {
        dnsServers = []
      }
      privateEndpointVNetPolicies = "Disabled"
    }
  }
}

resource "azapi_resource" "subnet" {
  type      = "Microsoft.Network/virtualNetworks/subnets@2024-05-01"
  parent_id = azapi_resource.virtualNetwork.id
  name      = "internal"
  body = {
    properties = {
      addressPrefix                     = "10.0.2.0/24"
      defaultOutboundAccess             = true
      delegations                       = []
      privateEndpointNetworkPolicies    = "Disabled"
      privateLinkServiceNetworkPolicies = "Enabled"
      serviceEndpointPolicies           = []
      serviceEndpoints                  = []
    }
  }
}

resource "azapi_resource" "virtualMachineScaleSet" {
  type      = "Microsoft.Compute/virtualMachineScaleSets@2024-11-01"
  parent_id = azapi_resource.resourceGroup.id
  name      = "${var.resource_name}-vmss"
  location  = var.location
  body = {
    properties = {
      additionalCapabilities                 = {}
      doNotRunExtensionsOnOverprovisionedVMs = false
      orchestrationMode                      = "Uniform"
      overprovision                          = true
      singlePlacementGroup                   = true
      upgradePolicy = {
        mode = "Manual"
      }
      virtualMachineProfile = {
        diagnosticsProfile = {
          bootDiagnostics = {
            enabled    = false
            storageUri = ""
          }
        }
        extensionProfile = {
          extensionsTimeBudget = "PT1H30M"
        }
        networkProfile = {
          networkInterfaceConfigurations = [{
            name = "example"
            properties = {
              dnsSettings = {
                dnsServers = []
              }
              enableAcceleratedNetworking = false
              enableIPForwarding          = false
              ipConfigurations = [{
                name = "internal"
                properties = {
                  applicationGatewayBackendAddressPools = []
                  applicationSecurityGroups             = []
                  loadBalancerBackendAddressPools       = []
                  loadBalancerInboundNatPools           = []
                  primary                               = true
                  privateIPAddressVersion               = "IPv4"
                  subnet = {
                    id = azapi_resource.subnet.id
                  }
                }
              }]
              primary = true
            }
          }]
        }
        osProfile = {
          adminPassword            = var.admin_password
          adminUsername            = "adminuser"
          allowExtensionOperations = true
          computerNamePrefix       = "${var.resource_name}-vmss"
          linuxConfiguration = {
            disablePasswordAuthentication = false
            provisionVMAgent              = true
            ssh = {
              publicKeys = []
            }
          }
          secrets = []
        }
        priority = "Regular"
        storageProfile = {
          dataDisks = []
          imageReference = {
            offer     = "0001-com-ubuntu-server-jammy"
            publisher = "Canonical"
            sku       = "22_04-lts"
            version   = "latest"
          }
          osDisk = {
            caching      = "ReadWrite"
            createOption = "FromImage"
            managedDisk = {
              storageAccountType = "Standard_LRS"
            }
            osType                  = "Linux"
            writeAcceleratorEnabled = false
          }
        }
      }
    }
    sku = {
      capacity = 1
      name     = "Standard_B1s"
    }
  }
}

resource "azapi_resource" "assessment" {
  type      = "Microsoft.Security/assessments@2020-01-01"
  parent_id = azapi_resource.virtualMachineScaleSet.id
  name      = "fdaaa62c-1d42-45ab-be2f-2af194dd1700"
  body = {
    properties = {
      additionalData = {}
      resourceDetails = {
        source = "Azure"
      }
      status = {
        cause       = ""
        code        = "Healthy"
        description = ""
      }
    }
  }
}

Formato risorsa

Per creare una risorsa Microsoft.Security/assessments, aggiungere il modello Terraform seguente.

resource "azapi_resource" "symbolicname" {
  type = "Microsoft.Security/assessments@2025-05-04"
  name = "string"
  parent_id = "string"
  body = {
    properties = {
      additionalData = {
        {customized property} = "string"
      }
      metadata = {
        assessmentType = "string"
        categories = [
          "string"
        ]
        description = "string"
        displayName = "string"
        implementationEffort = "string"
        partnerData = {
          partnerName = "string"
          productName = "string"
          secret = "string"
        }
        preview = bool
        remediationDescription = "string"
        severity = "string"
        threats = [
          "string"
        ]
        userImpact = "string"
      }
      partnersData = {
        partnerName = "string"
        secret = "string"
      }
      resourceDetails = {
        source = "string"
        // For remaining properties, see CommonResourceDetails objects
      }
      risk = {
        attackPathsReferences = [
          "string"
        ]
        isContextualRisk = bool
        level = "string"
        paths = [
          {
            edges = [
              {
                id = "string"
                sourceId = "string"
                targetId = "string"
              }
            ]
            id = "string"
            nodes = [
              {
                id = "string"
                nodePropertiesLabel = [
                  "string"
                ]
              }
            ]
          }
        ]
        riskFactors = [
          "string"
        ]
      }
      status = {
        cause = "string"
        code = "string"
        description = "string"
      }
    }
  }
}

Oggetti CommonResourceDetails

Impostare la proprietà di origine per specificare il tipo di oggetto.

Per Azure, usa:

{
  source = "Azure"
}

Per OnPremiseSql, usare:

{
  databaseName = "string"
  machineName = "string"
  serverName = "string"
  source = "OnPremiseSql"
  sourceComputerId = "string"
  vmuuid = "string"
  workspaceId = "string"
}

Valori delle proprietà

Microsoft.Security/assessments

ValutazioneStatoOrValutazioneStatoRisposta

AzureResourceDetails

CommonResourceDetails

OnPremiseSqlResourceDetails

SicurezzaValutazioneMetadatiPartnerDati

SecurityAssessmentMetadataProperties

SicurezzaValutazionePartnerData

SecurityAssessmentPropertiesBaseAdditionalData

SecurityAssessmentPropertiesBaseRisk

SecurityAssessmentPropertiesBaseRiskPathsItem

SecurityAssessmentPropertiesBaseRiskPathsItemEdgeItem

SecurityAssessmentPropertiesBaseRiskPathsItemNodesItem

SecurityAssessmentPropertiesOrSecurityAssessmentPropertiesResponse