Public/Deploy/Security/security-centre/Set-CmAzSecurityCentre.ps1
|
function Set-CmAzSecurityCentre { <# .Synopsis Deploys Security Centre settings for the current subscription. .Description Completes the following: * Sets security centre to standard pricing for the current subscription. * Adds uk and nhs official policies. * Turns on auto provisioning and sends logging to a specified workspace. * Turns on threat detection integrations MCAS and WDATP. * Sets email addresses and phone numbers to be notified for when compromised resources are detected. .Parameter SettingsFile Settings file path for which to into a setting object. .Parameter SettingsObject Settings object .Component Security .Example Set-CmAzSecurityCentre -SettingsFile "c:/directory/settingsFile.yml" .Example Set-CmAzSecurityCentre -SettingsObject $settings #> [CmdletBinding(SupportsShouldProcess, ConfirmImpact = "Medium")] param( [parameter(Mandatory = $true, ParameterSetName = "Settings File")] [string]$SettingsFile, [parameter(Mandatory = $true, ParameterSetName = "Settings Object")] [object]$SettingsObject ) $ErrorActionPreference = "Stop" try { Write-CommandStatus -CommandName $MyInvocation.MyCommand.Name $SettingsObject = Get-Settings -SettingsFile $SettingsFile -SettingsObject $SettingsObject -CmdletName (Get-CurrentCmdletName -ScriptRoot $PSCommandPath) if ($PSCmdlet.ShouldProcess((Get-CmAzSubscriptionName), "Deploy Security Centre")) { if (!$SettingsObject.EnableUkNHS -eq $null) { $SettingsObject.EnableUkNHS = $false } $workspace = Get-CmAzService -Service $SettingsObject.service.dependencies.workspace -ThrowIfUnavailable -ThrowIfMultiple Write-Verbose "Resetting previous contact settings..." Get-AzSecurityContact | Remove-AzSecurityContact Write-Verbose "Deploying security centre settings..." $deploymentName = Get-CmAzResourceName -Resource "Deployment" -Location $SettingsObject.Location -Architecture "SaaS" -Name "Set-CmAzSecurityCentre" New-AzDeployment ` -Name $deploymentName ` -Location $SettingsObject.Location ` -TemplateFile "$PSScriptRoot/Set-CmAzSecurityCentre.json" ` -TemplateParameterObject @{ AssignUkNhs = $SettingsObject.EnableUkNhs InitiativeLocation = $SettingsObject.Location SecurityContacts = $SettingsObject.SecurityContacts Workspace = $workspace } Write-CommandStatus -CommandName $MyInvocation.MyCommand.Name -Start $false } } catch { $PSCmdlet.ThrowTerminatingError($PSItem); } } |