Devolutions.CIEM

0.1.0

modules/Devolutions.CIEM.Checks/Private/ConvertFromCIEMStoredResource.ps1

function ConvertFromCIEMStoredResource {
    <#
    .SYNOPSIS
        Rehydrates a stored Azure resource row into a PSCustomObject whose shape
        matches the original API response.

    .DESCRIPTION
        Discovery writes each resource to the database as a Properties JSON blob
        plus a handful of indexed columns (Id, DisplayName, Name, Type, ParentId,
        SubscriptionId, ResourceGroup). At scan time we need to reverse that
        back into a single object whose top-level shape matches what the Graph
        or Resource Graph APIs originally returned: indexed columns at the top
        level (id, displayName, name, type, parentId, subscriptionId,
        resourceGroup), and the parsed JSON exposed under `.properties` so check
        functions can use the natural Azure-API access pattern `$obj.properties.X`.
    #>
    [CmdletBinding()]
    param(
        [Parameter(Mandatory)]
        [object]$Resource
    )

    $ErrorActionPreference = 'Stop'

    $properties = if ($Resource.Properties) {
        $Resource.Properties | ConvertFrom-Json -ErrorAction Stop
    }
    else {
        [pscustomobject]@{}
    }

    $envelope = [pscustomobject]@{}

    foreach ($pair in @(
        @{ Name = 'id'; Value = $Resource.Id },
        @{ Name = 'displayName'; Value = $Resource.DisplayName },
        @{ Name = 'name'; Value = $Resource.Name },
        @{ Name = 'type'; Value = $Resource.Type },
        @{ Name = 'parentId'; Value = $Resource.ParentId },
        @{ Name = 'subscriptionId'; Value = $Resource.SubscriptionId },
        @{ Name = 'resourceGroup'; Value = $Resource.ResourceGroup }
    )) {
        if ($pair.Value) {
            $envelope | Add-Member -NotePropertyName $pair.Name -NotePropertyValue $pair.Value
        }
    }

    $envelope | Add-Member -NotePropertyName 'properties' -NotePropertyValue $properties

    $envelope
}