azure

Documentation

Index

• Constants
• Variables
• func LoadBalancerPorts(lb *armnetwork.LoadBalancer) (loadBalancerPorts []uint16)
• func NewAuthorizer() (*azidentity.DefaultAzureCredential, error)
• func NewAzureComputeDiscovery(opts ...DiscoveryOption) discovery.Discoverer
• func NewAzureNetworkDiscovery(opts ...DiscoveryOption) discovery.Discoverer
• func NewAzureResourceGroupDiscovery(opts ...DiscoveryOption) discovery.Discoverer
• func NewAzureStorageDiscovery(opts ...DiscoveryOption) discovery.Discoverer
• type ClientCreateFunc
• type DiscoveryOption
  • func WithAuthorizer(authorizer azcore.TokenCredential) DiscoveryOption
  • func WithCloudServiceID(csID string) DiscoveryOption
  • func WithResourceGroup(rg string) DiscoveryOption
  • func WithSender(sender policy.Transporter) DiscoveryOption

Constants

const (
	StorageComponent = "storage"
	ComputeComponent = "compute"
	NetworkComponent = "network"

	DefenderStorageType        = "StorageAccounts"
	DefenderVirtualMachineType = "VirtualMachines"

	DataSourceTypeDisc                 = "Microsoft.Compute/disks"
	DataSourceTypeStorageAccountObject = "Microsoft.Storage/storageAccounts/blobServices"

	Duration30Days = time.Duration(30 * time.Hour * 24)
	Duration7Days  = time.Duration(7 * time.Hour * 24)

	AES256 = "AES256"

	RetentionPeriod90Days = 90
)

Variables

var (
	ErrCouldNotAuthenticate     = errors.New("could not authenticate to Azure")
	ErrCouldNotGetSubscriptions = errors.New("could not get azure subscription")
	ErrNoCredentialsConfigured  = errors.New("no credentials were configured")
	ErrGettingNextPage          = errors.New("error getting next page")
	ErrVaultInstanceIsEmpty     = errors.New("vault and/or instance is nil")
)

var (
	ErrEmptyStorageAccount        = errors.New("storage account is empty")
	ErrMissingDiskEncryptionSetID = errors.New("no disk encryption set ID was specified")
	ErrBackupStorageNotAvailable  = errors.New("backup storages not available")
)

var (
	ErrEmptyVirtualMachine = errors.New("virtual machine is empty")
)

Functions

func LoadBalancerPorts

func LoadBalancerPorts(lb *armnetwork.LoadBalancer) (loadBalancerPorts []uint16)

func NewAuthorizer

func NewAuthorizer() (*azidentity.DefaultAzureCredential, error)

NewAuthorizer returns the Azure credential using one of the following authentication types (in the following order):

EnvironmentCredential
ManagedIdentityCredential
AzureCLICredential

func NewAzureComputeDiscovery

func NewAzureComputeDiscovery(opts ...DiscoveryOption) discovery.Discoverer

func NewAzureNetworkDiscovery

func NewAzureNetworkDiscovery(opts ...DiscoveryOption) discovery.Discoverer

func NewAzureResourceGroupDiscovery

func NewAzureResourceGroupDiscovery(opts ...DiscoveryOption) discovery.Discoverer

func NewAzureStorageDiscovery

func NewAzureStorageDiscovery(opts ...DiscoveryOption) discovery.Discoverer

Types

type ClientCreateFunc

type ClientCreateFunc[T any] func(subscriptionID string, credential azcore.TokenCredential, options *arm.ClientOptions) (*T, error)

ClientCreateFunc is a type that describes a function to create a new Azure SDK client.

type DiscoveryOption

type DiscoveryOption func(a *azureDiscovery)

func WithAuthorizer

func WithAuthorizer(authorizer azcore.TokenCredential) DiscoveryOption

func WithCloudServiceID

func WithCloudServiceID(csID string) DiscoveryOption

func WithResourceGroup

func WithResourceGroup(rg string) DiscoveryOption

WithResourceGroup is a DiscoveryOption that scopes the discovery to a specific resource group.

func WithSender

func WithSender(sender policy.Transporter) DiscoveryOption