core/api/azure/resourcemanagement/helpers/subscription/Get-MonkeyAzSubscriptionPolicy.ps1
|
# Monkey365 - the PowerShell Cloud Security Tool for Azure and Microsoft 365 (copyright 2022) by Juan Garrido # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. Function Get-MonkeyAzSubscriptionPolicy { <# .SYNOPSIS Get subscription policy from Azure .DESCRIPTION Get subscription policy from Azure .INPUTS .OUTPUTS .EXAMPLE .NOTES Author : Juan Garrido Twitter : @tr1ana File Name : Get-MonkeyAzSubscriptionPolicy Version : 1.0 .LINK https://github.com/silverhack/monkey365 #> [CmdletBinding(DefaultParameterSetName = 'All')] Param ( [parameter(Mandatory=$false, ParameterSetName = 'PolicyName', ValueFromPipeline = $True)] [String]$PolicyName ) Begin{ #Get resource management Auth $rmAuth = $O365Object.auth_tokens.ResourceManager #Get API version $apiDetails = $O365Object.internal_config.resourceManager | Where-Object {$_.Name -eq 'Microsoft.Subscription'} | Select-Object -ExpandProperty resource -ErrorAction Ignore if($null -eq $apiDetails){ $msg = @{ MessageData = ($message.MonkeyInternalConfigError); callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = 'verbose'; InformationAction = $O365Object.InformationAction; Tags = @('Monkey365ConfigError'); } Write-Verbose @msg break } #set var $policy = $null } Process{ if($PSCmdlet.ParameterSetName -eq 'PolicyName'){ $msg = @{ MessageData = $message.AzureSubscriptionPolicy; callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = 'info'; InformationAction = $O365Object.InformationAction; Tags = @('AzureSubscriptionInfo'); } Write-Information @msg $Server = ("{0}" -f $O365Object.Environment.ResourceManager.Replace('https://','')) $uri = ("{0}/providers/{1}/policies/{2}?api-version={3}" -f $Server,$apiDetails.provider, $PSBoundParameters['PolicyName'], $apiDetails.api_version) $final_uri = [regex]::Replace($uri,"/+","/") $final_uri = ("https://{0}" -f $final_uri.ToString()) #Set params $p = @{ Authentication = $rmAuth; OwnQuery = $final_uri; InformationAction = $O365Object.InformationAction; Verbose = $O365Object.verbose; Debug = $O365Object.debug; } $policy = Get-MonkeyRMObject @p #return policy return $policy } else{ $msg = @{ MessageData = $message.AzureSubscriptionPolicy; callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = 'info'; InformationAction = $O365Object.InformationAction; Tags = @('AzureSubscriptionInfo'); } Write-Information @msg $Server = ("{0}" -f $O365Object.Environment.ResourceManager.Replace('https://','')) $uri = ("{0}/providers/{1}/policies?api-version={2}" -f $Server,$apiDetails.provider, $apiDetails.api_version) $final_uri = [regex]::Replace($uri,"/+","/") $final_uri = ("https://{0}" -f $final_uri.ToString()) #Set params $p = @{ Authentication = $rmAuth; OwnQuery = $final_uri; InformationAction = $O365Object.InformationAction; Verbose = $O365Object.verbose; Debug = $O365Object.debug; } $policy = Get-MonkeyRMObject @p #return policy return $policy } } End{ #nothing to do here } } |