Standard Assignments - Create

Serviço:: Defender for Cloud

Versão da API:: 2024-08-01

Esta operação cria ou atualiza uma atribuição padrão com o escopo e o nome fornecidos. As atribuições padrão aplicam-se a todos os recursos contidos em seu escopo. Por exemplo, quando você atribui uma política no escopo do grupo de recursos, essa política se aplica a todos os recursos do grupo.

PUT https://management.azure.com/{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}?api-version=2024-08-01

Parâmetros do URI

Name	Em	Necessário	Tipo	Description
resourceId	path	True	string	O identificador totalmente qualificado do Azure Resource Manager do recurso.
standardAssignmentName	path	True	string pattern: [{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$	A chave de atribuição de atribuições padrão - chave exclusiva para a atribuição padrão
api-version	query	True	string minLength: 1	A versão da API a ser usada para esta operação.

Corpo do Pedido

Name	Tipo	Description
properties.assignedStandard	Common.AssignedStandardItem	Item padrão com chave aplicada a esta atribuição padrão sobre o escopo dado
properties.attestationData	StandardAssignmentPropertiesAttestationData	Dados adicionais sobre a atribuição que tem efeito Attest
properties.description	string	Descrição do padrãoAssignment
properties.displayName	string	Nome para exibição do standardAssignment
properties.effect	Effect	Efeito esperado desta atribuição (Auditoria/Isentação/Atestar)
properties.excludedScopes	string[]	Escopos excluídos, filtre os descendentes do escopo (em escopos de gerenciamento)
properties.exemptionData	StandardAssignmentPropertiesExemptionData	Dados adicionais sobre a atribuição que tem efeito de isenção
properties.expiresOn	string (date-time)	Data de expiração desta atribuição como uma data ISO completa
properties.metadata	StandardAssignmentMetadata	Os metadados de atribuição padrão.

Respostas

Name	Tipo	Description
200 OK	StandardAssignment	Operação de atualização do recurso 'StandardAssignment' bem-sucedida
201 Created	StandardAssignment	Recurso 'StandardAssignment' criar operação bem-sucedida
Other Status Codes	ErrorResponse	Uma resposta de erro inesperada.

Segurança

azure_auth

Azure Active Directory OAuth2 Flow.

Tipo: oauth2
Fluxo: implicit
URL de Autorização: https://login.microsoftonline.com/common/oauth2/authorize

Âmbitos

Name	Description
user_impersonation	personificar a sua conta de utilizador

Exemplos

Put an audit standard assignment

Put exemption standard assignment

Put an audit standard assignment

Pedido de amostra

PUT https://management.azure.com/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8?api-version=2024-08-01

{
  "properties": {
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "ASC Default",
    "effect": "Audit",
    "excludedScopes": []
  }
}

package armsecurity_test

import (
	"context"
	"log"

	"github.com/Azure/azure-sdk-for-go/sdk/azcore/to"
	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity"
)

// Generated from example definition: 2024-08-01/StandardAssignments/PutStandardAssignment.json
func ExampleStandardAssignmentsClient_Create_putAnAuditStandardAssignment() {
	cred, err := azidentity.NewDefaultAzureCredential(nil)
	if err != nil {
		log.Fatalf("failed to obtain a credential: %v", err)
	}
	ctx := context.Background()
	clientFactory, err := armsecurity.NewClientFactory("<subscriptionID>", cred, nil)
	if err != nil {
		log.Fatalf("failed to create client: %v", err)
	}
	res, err := clientFactory.NewStandardAssignmentsClient().Create(ctx, "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23", "1f3afdf9-d0c9-4c3d-847f-89da613e70a8", armsecurity.StandardAssignment{
		Properties: &armsecurity.StandardAssignmentProperties{
			Description: to.Ptr("Set of policies monitored by Azure Security Center for cross cloud"),
			AssignedStandard: &armsecurity.AssignedStandardItem{
				ID: to.Ptr("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			},
			DisplayName:    to.Ptr("ASC Default"),
			Effect:         to.Ptr(armsecurity.EffectAudit),
			ExcludedScopes: []*string{},
		},
	}, nil)
	if err != nil {
		log.Fatalf("failed to finish the request: %v", err)
	}
	// You could use response here. We use blank identifier for just demo purposes.
	_ = res
	// If the HTTP response code is 200 as defined in example definition, your response structure would look as follows. Please pay attention that all the values in the output are fake values for just demo purposes.
	// res = armsecurity.StandardAssignmentsClientCreateResponse{
	// 	StandardAssignment: armsecurity.StandardAssignment{
	// 		Name: to.Ptr("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 		Type: to.Ptr("Microsoft.Security/standardAssignments"),
	// 		ID: to.Ptr("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 		Properties: &armsecurity.StandardAssignmentProperties{
	// 			Description: to.Ptr("Set of policies monitored by Azure Security Center for cross cloud"),
	// 			AssignedStandard: &armsecurity.AssignedStandardItem{
	// 				ID: to.Ptr("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 			},
	// 			DisplayName: to.Ptr("ASC Default"),
	// 			Effect: to.Ptr(armsecurity.EffectAudit),
	// 			ExcludedScopes: []*string{
	// 			},
	// 			Metadata: &armsecurity.StandardAssignmentMetadata{
	// 				CreatedBy: to.Ptr("c23b5354-ff0a-4b2a-9f92-6f144effd936"),
	// 				CreatedOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-11-10T08:31:26.7993124Z"); return t}()),
	// 				LastUpdatedBy: to.Ptr("c23b5354-ff0a-4b2a-9f92-6f144effd936"),
	// 				LastUpdatedOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-11-10T08:31:26.7993124Z"); return t}()),
	// 			},
	// 		},
	// 	},
	// }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

const { SecurityCenter } = require("@azure/arm-security");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to this operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
 *
 * @summary this operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
 * x-ms-original-file: 2024-08-01/StandardAssignments/PutStandardAssignment.json
 */
async function putAnAuditStandardAssignment() {
  const credential = new DefaultAzureCredential();
  const client = new SecurityCenter(credential);
  const result = await client.standardAssignments.create(
    "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
    "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    {
      description: "Set of policies monitored by Azure Security Center for cross cloud",
      assignedStandard: {
        id: "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
      },
      displayName: "ASC Default",
      effect: "Audit",
      excludedScopes: [],
    },
  );
  console.log(result);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Resposta da amostra

Código de estado:: 200

{
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "properties": {
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "ASC Default",
    "effect": "Audit",
    "excludedScopes": [],
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

Código de estado:: 201

{
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "properties": {
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "ASC Default",
    "effect": "Audit",
    "excludedScopes": [],
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

Put exemption standard assignment

Pedido de amostra

PUT https://management.azure.com/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8?api-version=2024-08-01

{
  "properties": {
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "Test exemption",
    "effect": "Exempt",
    "exemptionData": {
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      },
      "exemptionCategory": "waiver"
    },
    "expiresOn": "2022-05-01T19:50:47.083633Z"
  }
}

package armsecurity_test

import (
	"context"
	"log"
	"time"

	"github.com/Azure/azure-sdk-for-go/sdk/azcore/to"
	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity"
)

// Generated from example definition: 2024-08-01/StandardAssignments/PutExemptionStandardAssignment.json
func ExampleStandardAssignmentsClient_Create_putExemptionStandardAssignment() {
	cred, err := azidentity.NewDefaultAzureCredential(nil)
	if err != nil {
		log.Fatalf("failed to obtain a credential: %v", err)
	}
	ctx := context.Background()
	clientFactory, err := armsecurity.NewClientFactory("<subscriptionID>", cred, nil)
	if err != nil {
		log.Fatalf("failed to create client: %v", err)
	}
	res, err := clientFactory.NewStandardAssignmentsClient().Create(ctx, "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA", "1f3afdf9-d0c9-4c3d-847f-89da613e70a8", armsecurity.StandardAssignment{
		Properties: &armsecurity.StandardAssignmentProperties{
			Description: to.Ptr("Exemption description"),
			AssignedStandard: &armsecurity.AssignedStandardItem{
				ID: to.Ptr("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
			},
			DisplayName: to.Ptr("Test exemption"),
			Effect:      to.Ptr(armsecurity.EffectExempt),
			ExemptionData: &armsecurity.StandardAssignmentPropertiesExemptionData{
				AssignedAssessment: &armsecurity.AssignedAssessmentItem{
					AssessmentKey: to.Ptr("1195afff-c881-495e-9bc5-1486211ae03f"),
				},
				ExemptionCategory: to.Ptr(armsecurity.ExemptionCategoryWaiver),
			},
			ExpiresOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-05-01T19:50:47.083633Z"); return t }()),
		},
	}, nil)
	if err != nil {
		log.Fatalf("failed to finish the request: %v", err)
	}
	// You could use response here. We use blank identifier for just demo purposes.
	_ = res
	// If the HTTP response code is 200 as defined in example definition, your response structure would look as follows. Please pay attention that all the values in the output are fake values for just demo purposes.
	// res = armsecurity.StandardAssignmentsClientCreateResponse{
	// 	StandardAssignment: armsecurity.StandardAssignment{
	// 		Name: to.Ptr("1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 		Type: to.Ptr("Microsoft.Security/standardAssignments"),
	// 		ID: to.Ptr("/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 		Properties: &armsecurity.StandardAssignmentProperties{
	// 			Description: to.Ptr("Exemption description"),
	// 			AssignedStandard: &armsecurity.AssignedStandardItem{
	// 				ID: to.Ptr("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"),
	// 			},
	// 			DisplayName: to.Ptr("Test exemption"),
	// 			Effect: to.Ptr(armsecurity.EffectExempt),
	// 			ExemptionData: &armsecurity.StandardAssignmentPropertiesExemptionData{
	// 				AssignedAssessment: &armsecurity.AssignedAssessmentItem{
	// 					AssessmentKey: to.Ptr("1195afff-c881-495e-9bc5-1486211ae03f"),
	// 				},
	// 				ExemptionCategory: to.Ptr(armsecurity.ExemptionCategoryWaiver),
	// 			},
	// 			ExpiresOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-05-01T19:50:47.083633Z"); return t}()),
	// 			Metadata: &armsecurity.StandardAssignmentMetadata{
	// 				CreatedBy: to.Ptr("c23b5354-ff0a-4b2a-9f92-6f144effd936"),
	// 				CreatedOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-11-10T08:31:26.7993124Z"); return t}()),
	// 				LastUpdatedBy: to.Ptr("c23b5354-ff0a-4b2a-9f92-6f144effd936"),
	// 				LastUpdatedOn: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-11-10T08:31:26.7993124Z"); return t}()),
	// 			},
	// 		},
	// 	},
	// }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

const { SecurityCenter } = require("@azure/arm-security");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to this operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
 *
 * @summary this operation creates or updates a standard assignment with the given scope and name. standard assignments apply to all resources contained within their scope. For example, when you assign a policy at resource group scope, that policy applies to all resources in the group.
 * x-ms-original-file: 2024-08-01/StandardAssignments/PutExemptionStandardAssignment.json
 */
async function putExemptionStandardAssignment() {
  const credential = new DefaultAzureCredential();
  const client = new SecurityCenter(credential);
  const result = await client.standardAssignments.create(
    "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
    "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
    {
      description: "Exemption description",
      assignedStandard: {
        id: "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
      },
      displayName: "Test exemption",
      effect: "Exempt",
      exemptionData: {
        assignedAssessment: { assessmentKey: "1195afff-c881-495e-9bc5-1486211ae03f" },
        exemptionCategory: "waiver",
      },
      expiresOn: new Date("2022-05-01T19:50:47.083633Z"),
    },
  );
  console.log(result);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Resposta da amostra

Código de estado:: 200

{
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "id": "/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "properties": {
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "Test exemption",
    "effect": "Exempt",
    "exemptionData": {
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      },
      "exemptionCategory": "waiver"
    },
    "expiresOn": "2022-05-01T19:50:47.083633Z",
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

Código de estado:: 201

{
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "id": "/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "properties": {
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "displayName": "Test exemption",
    "effect": "Exempt",
    "exemptionData": {
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      },
      "exemptionCategory": "waiver"
    },
    "expiresOn": "2022-05-01T19:50:47.083633Z",
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

Definições

Name	Description
AssignedAssessmentItem	Descrever as propriedades de uma referência de objeto de avaliação de segurança (por chave)
attestationComplianceState	Atestar categoria deste trabalho
AttestationEvidence	Descrever as propriedades de um atestado de atribuição
Common.AssignedStandardItem	Descrever as propriedades de uma referência de objeto de atribuições padrão
createdByType	O tipo de identidade que criou o recurso.
Effect	Efeito esperado desta atribuição (Auditoria/Isentação/Atestar)
ErrorAdditionalInfo	O erro de gerenciamento de recursos informações adicionais.
ErrorDetail	O detalhe do erro.
ErrorResponse	Resposta de erro
ExemptionCategory	Categoria de isenção desta atribuição
StandardAssignment	Atribuição de segurança em um grupo de recursos em um determinado escopo
StandardAssignmentMetadata	Os metadados de atribuição padrão
StandardAssignmentPropertiesAttestationData	Dados adicionais sobre a atribuição que tem efeito Attest
StandardAssignmentPropertiesExemptionData	Dados adicionais sobre a atribuição que tem efeito de isenção
systemData	Metadados referentes à criação e última modificação do recurso.

AssignedAssessmentItem

Object

Descrever as propriedades de uma referência de objeto de avaliação de segurança (por chave)

Name	Tipo	Description
assessmentKey	string	Chave exclusiva para um objeto de avaliação de segurança

attestationComplianceState

Enumeração

Atestar categoria deste trabalho

Valor	Description
unknown	desconhecido
compliant	compatível
nonCompliant	Não Conforme

AttestationEvidence

Object

Descrever as propriedades de um atestado de atribuição

Name	Tipo	Description
description	string	Descrição dos elementos de prova
sourceUrl	string	O url de origem da evidência

Common.AssignedStandardItem

Object

Descrever as propriedades de uma referência de objeto de atribuições padrão

Name	Tipo	Description
id	string	Full resourceId do objeto Microsoft.Security/standard

createdByType

Enumeração

O tipo de identidade que criou o recurso.

Valor	Description
User
Application
ManagedIdentity
Key

Effect

Enumeração

Efeito esperado desta atribuição (Auditoria/Isentação/Atestar)

Valor	Description
Audit	Auditoria
Exempt	Com Isenção
Attest	Atesta

ErrorAdditionalInfo

Object

O erro de gerenciamento de recursos informações adicionais.

Name	Tipo	Description
info	object	As informações adicionais.
type	string	O tipo de informação adicional.

ErrorDetail

Object

O detalhe do erro.

Name	Tipo	Description
additionalInfo	ErrorAdditionalInfo[]	O erro informações adicionais.
code	string	O código de erro.
details	ErrorDetail[]	Os detalhes do erro.
message	string	A mensagem de erro.
target	string	O destino do erro.

ErrorResponse

Object

Resposta de erro

Name	Tipo	Description
error	ErrorDetail	O objeto de erro.

ExemptionCategory

Enumeração

Categoria de isenção desta atribuição

Valor	Description
waiver	Renúncia
mitigated	Mitigado