Standard Assignments - Create

サービス:: Defender for Cloud

API バージョン:: 2024-08-01

この操作では、指定されたスコープと名前を使用して標準割り当てを作成または更新します。標準割り当ては、スコープ内に含まれるすべてのリソースに適用されます。たとえば、リソースグループスコープでポリシーを割り当てると、そのポリシーはグループ内のすべてのリソースに適用されます。

PUT https://management.azure.com/{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}?api-version=2024-08-01

URI パラメーター

名前	/	必須	型	説明
resourceId	path	True	string	リソースの完全資格を持つAzureリソースマネージャー識別子。
standardAssignmentName	path	True	string pattern: [{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$	標準割当割当キー - 標準割当の一意キー
api-version	query	True	string minLength: 1	この操作に使用する API バージョン。

要求本文

名前	型	説明
properties.assignedStandard	Common.AssignedStandardItem	指定されたスコープに対するこの標準割り当てに適用されるキーを持つ標準項目
properties.attestationData	StandardAssignmentPropertiesAttestationData	構成証明効果を持つ割り当てに関する追加データ
properties.description	string	standardAssignment の説明
properties.displayName	string	standardAssignment の表示名
properties.effect	Effect	この割り当ての予想される効果 (監査/除外/構成証明)
properties.excludedScopes	string[]	除外されたスコープ、スコープの子孫を除外する (管理スコープの場合)
properties.exemptionData	StandardAssignmentPropertiesExemptionData	除外効果がある割り当てに関する追加データ
properties.expiresOn	string (date-time)	完全な ISO 日付としてのこの割り当ての有効期限
properties.metadata	StandardAssignmentMetadata	標準の割り当てメタデータ。

応答

名前	型	説明
200 OK	StandardAssignment	リソース「StandardAssignment」更新操作が成功しました
201 Created	StandardAssignment	リソース「StandardAssignment」作成操作が成功しました
Other Status Codes	ErrorResponse	予期しないエラー応答。

セキュリティ

azure_auth

Azure Active Directory OAuth2 フロー。

型: oauth2
フロー: implicit
Authorization URL (承認 URL): https://login.microsoftonline.com/common/oauth2/authorize

スコープ

名前	説明
user_impersonation	ユーザーアカウントを偽装する

例

Put an audit standard assignment

Put exemption standard assignment

Put an audit standard assignment

要求のサンプル

PUT https://management.azure.com/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8?api-version=2024-08-01

{
  "properties": {
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "ASC Default",
    "effect": "Audit",
    "excludedScopes": []
  }
}

package armsecurity_test

import (
	"context"
	"log"

	"github.com/Azure/azure-sdk-for-go/sdk/azcore/to"
	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity"
)

// Generated from example definition: 2024-08-01/StandardAssignments/PutStandardAssignment.json
func ExampleStandardAssignmentsClient_Create_putAnAuditStandardAssignment() {
	cred, err := azidentity.NewDefaultAzureCredential(nil)
	if err != nil {
		log.Fatalf("failed to obtain a credential: %v", err)
	}
	ctx := context.Background()
	clientFactory, err := armsecurity.NewClientFactory("<subscriptionID>", cred, nil)
	if err != nil {
		log.Fatalf("failed to create client: %v", err)
	}
	res, err := clientFactory.NewStandardAssignmentsClient().Create(ctx, "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23", "1f3afdf9-d0c9-4c3d-847f-89da613e70a8", armsecurity.StandardAssignment{
		Properties: &armsecurity.StandardAssignmentProperties{
			Description: to.Ptr("Set of policies monitored by Azure Security Center for cross cloud"),
			AssignedStandard: &armsecurity.AssignedStandardItem{
				ID: to.Ptr("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			},
			DisplayName:    to.Ptr("ASC Default"),
			Effect:         to.Ptr(armsecurity.EffectAudit),
			ExcludedScopes: []*string{},
		},
	}, nil)
	if err != nil {
		log.Fatalf("failed to finish the request: %v", err)
	}
	// You could use response here. We use blank identifier for just demo purposes.
	_ = res
	// If the HTTP response code is 200 as defined in example definition, your response structure would look as follows. Please pay attention that all the values in the output are fake values for just demo purposes.
	// res = armsecurity.StandardAssignmentsClientCreateResponse{
	// 	StandardAssignment: armsecurity.StandardAssignment{
	// 		Name: to.Ptr("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 		Type: to.Ptr("Microsoft.Security/standardAssignments"),
	// 		ID: to.Ptr("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 		Properties: &armsecurity.StandardAssignmentProperties{
	// 			Description: to.Ptr("Set of policies monitored by Azure Security Center for cross cloud"),
	// 			AssignedStandard: &armsecurity.AssignedStandardItem{
	// 				ID: to.Ptr("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 			},
	// 			DisplayName: to.Ptr("ASC Default"),
	// 			Effect: to.Ptr(armsecurity.EffectAudit),
	// 			ExcludedScopes: []*string{
	// 			},
	// 			Metadata: &armsecurity.StandardAssignmentMetadata{
	// 				CreatedBy: to.Ptr("c23b5354-ff0a-4b2a-9f92-6f144effd936"),
	// 				CreatedOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-11-10T08:31:26.7993124Z"); return t}()),
	// 				LastUpdatedBy: to.Ptr("c23b5354-ff0a-4b2a-9f92-6f144effd936"),
	// 				LastUpdatedOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-11-10T08:31:26.7993124Z"); return t}()),
	// 			},
	// 		},
	// 	},
	// }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

const { SecurityCenter } = require("@azure/arm-security");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to this operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
 *
 * @summary this operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
 * x-ms-original-file: 2024-08-01/StandardAssignments/PutStandardAssignment.json
 */
async function putAnAuditStandardAssignment() {
  const credential = new DefaultAzureCredential();
  const client = new SecurityCenter(credential);
  const result = await client.standardAssignments.create(
    "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
    "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    {
      description: "Set of policies monitored by Azure Security Center for cross cloud",
      assignedStandard: {
        id: "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
      },
      displayName: "ASC Default",
      effect: "Audit",
      excludedScopes: [],
    },
  );
  console.log(result);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

応答のサンプル

状態コード:: 200

{
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "properties": {
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "ASC Default",
    "effect": "Audit",
    "excludedScopes": [],
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

状態コード:: 201

{
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "properties": {
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "ASC Default",
    "effect": "Audit",
    "excludedScopes": [],
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

Put exemption standard assignment

要求のサンプル

PUT https://management.azure.com/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8?api-version=2024-08-01

{
  "properties": {
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "Test exemption",
    "effect": "Exempt",
    "exemptionData": {
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      },
      "exemptionCategory": "waiver"
    },
    "expiresOn": "2022-05-01T19:50:47.083633Z"
  }
}

package armsecurity_test

import (
	"context"
	"log"
	"time"

	"github.com/Azure/azure-sdk-for-go/sdk/azcore/to"
	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity"
)

// Generated from example definition: 2024-08-01/StandardAssignments/PutExemptionStandardAssignment.json
func ExampleStandardAssignmentsClient_Create_putExemptionStandardAssignment() {
	cred, err := azidentity.NewDefaultAzureCredential(nil)
	if err != nil {
		log.Fatalf("failed to obtain a credential: %v", err)
	}
	ctx := context.Background()
	clientFactory, err := armsecurity.NewClientFactory("<subscriptionID>", cred, nil)
	if err != nil {
		log.Fatalf("failed to create client: %v", err)
	}
	res, err := clientFactory.NewStandardAssignmentsClient().Create(ctx, "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA", "1f3afdf9-d0c9-4c3d-847f-89da613e70a8", armsecurity.StandardAssignment{
		Properties: &armsecurity.StandardAssignmentProperties{
			Description: to.Ptr("Exemption description"),
			AssignedStandard: &armsecurity.AssignedStandardItem{
				ID: to.Ptr("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			},
			DisplayName: to.Ptr("Test exemption"),
			Effect:      to.Ptr(armsecurity.EffectExempt),
			ExemptionData: &armsecurity.StandardAssignmentPropertiesExemptionData{
				AssignedAssessment: &armsecurity.AssignedAssessmentItem{
					AssessmentKey: to.Ptr("1195afff-c881-495e-9bc5-1486211ae03f"),
				},
				ExemptionCategory: to.Ptr(armsecurity.ExemptionCategoryWaiver),
			},
			ExpiresOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-05-01T19:50:47.083633Z"); return t }()),
		},
	}, nil)
	if err != nil {
		log.Fatalf("failed to finish the request: %v", err)
	}
	// You could use response here. We use blank identifier for just demo purposes.
	_ = res
	// If the HTTP response code is 200 as defined in example definition, your response structure would look as follows. Please pay attention that all the values in the output are fake values for just demo purposes.
	// res = armsecurity.StandardAssignmentsClientCreateResponse{
	// 	StandardAssignment: armsecurity.StandardAssignment{
	// 		Name: to.Ptr("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 		Type: to.Ptr("Microsoft.Security/standardAssignments"),
	// 		ID: to.Ptr("/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 		Properties: &armsecurity.StandardAssignmentProperties{
	// 			Description: to.Ptr("Exemption description"),
	// 			AssignedStandard: &armsecurity.AssignedStandardItem{
	// 				ID: to.Ptr("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 			},
	// 			DisplayName: to.Ptr("Test exemption"),
	// 			Effect: to.Ptr(armsecurity.EffectExempt),
	// 			ExemptionData: &armsecurity.StandardAssignmentPropertiesExemptionData{
	// 				AssignedAssessment: &armsecurity.AssignedAssessmentItem{
	// 					AssessmentKey: to.Ptr("1195afff-c881-495e-9bc5-1486211ae03f"),
	// 				},
	// 				ExemptionCategory: to.Ptr(armsecurity.ExemptionCategoryWaiver),
	// 			},
	// 			ExpiresOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-05-01T19:50:47.083633Z"); return t}()),
	// 			Metadata: &armsecurity.StandardAssignmentMetadata{
	// 				CreatedBy: to.Ptr("c23b5354-ff0a-4b2a-9f92-6f144effd936"),
	// 				CreatedOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-11-10T08:31:26.7993124Z"); return t}()),
	// 				LastUpdatedBy: to.Ptr("c23b5354-ff0a-4b2a-9f92-6f144effd936"),
	// 				LastUpdatedOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-11-10T08:31:26.7993124Z"); return t}()),
	// 			},
	// 		},
	// 	},
	// }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

const { SecurityCenter } = require("@azure/arm-security");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to this operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
 *
 * @summary this operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
 * x-ms-original-file: 2024-08-01/StandardAssignments/PutExemptionStandardAssignment.json
 */
async function putExemptionStandardAssignment() {
  const credential = new DefaultAzureCredential();
  const client = new SecurityCenter(credential);
  const result = await client.standardAssignments.create(
    "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
    "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    {
      description: "Exemption description",
      assignedStandard: {
        id: "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
      },
      displayName: "Test exemption",
      effect: "Exempt",
      exemptionData: {
        assignedAssessment: { assessmentKey: "1195afff-c881-495e-9bc5-1486211ae03f" },
        exemptionCategory: "waiver",
      },
      expiresOn: new Date("2022-05-01T19:50:47.083633Z"),
    },
  );
  console.log(result);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

応答のサンプル

状態コード:: 200

{
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "id": "/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "properties": {
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "Test exemption",
    "effect": "Exempt",
    "exemptionData": {
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      },
      "exemptionCategory": "waiver"
    },
    "expiresOn": "2022-05-01T19:50:47.083633Z",
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

状態コード:: 201

{
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "id": "/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "properties": {
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "Test exemption",
    "effect": "Exempt",
    "exemptionData": {
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      },
      "exemptionCategory": "waiver"
    },
    "expiresOn": "2022-05-01T19:50:47.083633Z",
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

定義

名前	説明
AssignedAssessmentItem	セキュリティ評価オブジェクト参照のプロパティについて (キー別に) 説明する
attestationComplianceState	この割り当ての構成証明カテゴリ
AttestationEvidence	割り当て構成証明のプロパティについて説明する
Common.AssignedStandardItem	標準割り当てオブジェクト参照のプロパティについて説明する
createdByType	リソースを作成した ID の種類。
Effect	この割り当ての予想される効果 (監査/除外/構成証明)
ErrorAdditionalInfo	リソース管理エラーの追加情報。
ErrorDetail	エラーの詳細。
ErrorResponse	エラー応答
ExemptionCategory	この割り当ての除外カテゴリ
StandardAssignment	特定のスコープに対するリソースグループのセキュリティ割り当て
StandardAssignmentMetadata	標準の割り当てメタデータ
StandardAssignmentPropertiesAttestationData	構成証明効果を持つ割り当てに関する追加データ
StandardAssignmentPropertiesExemptionData	除外効果がある割り当てに関する追加データ
systemData	リソースの作成と最後の変更に関連するメタデータ。

AssignedAssessmentItem

Object

セキュリティ評価オブジェクト参照のプロパティについて (キー別に) 説明する

名前	型	説明
assessmentKey	string	セキュリティ評価オブジェクトの一意のキー

attestationComplianceState

列挙

この割り当ての構成証明カテゴリ

値	説明
unknown	不明
compliant	準拠している
nonCompliant	未対応

AttestationEvidence

Object

割り当て構成証明のプロパティについて説明する

名前	型	説明
description	string	証拠の説明
sourceUrl	string	証拠のソース URL

Common.AssignedStandardItem

Object

標準割り当てオブジェクト参照のプロパティについて説明する

名前	型	説明
id	string	Microsoft.Security/standard オブジェクトの完全な resourceId

createdByType

列挙

リソースを作成した ID の種類。

値	説明
User
Application
ManagedIdentity
Key

Effect

列挙

この割り当ての予想される効果 (監査/除外/構成証明)

値	説明
Audit	監査
Exempt	免税
Attest	証言

ErrorAdditionalInfo

Object

リソース管理エラーの追加情報。

名前	型	説明
info	object	追加情報。
type	string	追加情報の種類。

ErrorDetail

Object

エラーの詳細。

名前	型	説明
additionalInfo	ErrorAdditionalInfo[]	エラーの追加情報。
code	string	エラーコード。
details	ErrorDetail[]	エラーの詳細。
message	string	エラーメッセージ。
target	string	エラーターゲット。

ErrorResponse

Object

エラー応答

名前	型	説明
error	ErrorDetail	エラーオブジェクト。

ExemptionCategory

列挙

この割り当ての除外カテゴリ

値	説明
waiver	免責放棄
mitigated	軽減