core/api/azure/resourcemanagement/helpers/subscription/Get-MonkeyAzSubscriptionPolicyAssignment.ps1
|
# Monkey365 - the PowerShell Cloud Security Tool for Azure and Microsoft 365 (copyright 2022) by Juan Garrido # # Licensed under the Apache License, Version 2.0 (the "License"); # you may not use this file except in compliance with the License. # You may obtain a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # See the License for the specific language governing permissions and # limitations under the License. Function Get-MonkeyAzSubscriptionPolicyAssignment { <# .SYNOPSIS Get subscription policy from Azure .DESCRIPTION Get subscription policy from Azure .INPUTS .OUTPUTS .EXAMPLE .NOTES Author : Juan Garrido Twitter : @tr1ana File Name : Get-MonkeyAzSubscriptionPolicyAssignment Version : 1.0 .LINK https://github.com/silverhack/monkey365 #> [CmdletBinding(DefaultParameterSetName = 'All')] Param ( [parameter(Mandatory=$false, ParameterSetName = 'PolicyDefinitionId', ValueFromPipeline = $True)] [String]$PolicyDefinitionId, [parameter(Mandatory=$false, ParameterSetName = 'PolicySetDefinitionId', ValueFromPipeline = $True)] [String]$PolicySetDefinitionId ) Begin{ #Get resource management Auth $rmAuth = $O365Object.auth_tokens.ResourceManager #Get API version $apiDetails = $O365Object.internal_config.resourceManager | Where-Object {$_.Name -eq 'azureAuthorization'} | Select-Object -ExpandProperty resource -ErrorAction Ignore if($null -eq $apiDetails){ $msg = @{ MessageData = ($message.MonkeyInternalConfigError); callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = 'verbose'; InformationAction = $O365Object.InformationAction; Tags = @('Monkey365ConfigError'); } Write-Verbose @msg break } #set var $policy = $null } Process{ if($PSCmdlet.ParameterSetName -eq 'PolicyDefinitionId'){ $msg = @{ MessageData = ($message.AzureSbsPolicyAssignment -f $PolicyDefinitionId); callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = 'info'; InformationAction = $O365Object.InformationAction; Tags = @('AzureSubscriptionInfo'); } Write-Information @msg $filter = ("policyDefinitionId eq '/providers/Microsoft.Authorization/policyDefinitions/{0}'" -f $PolicyDefinitionId) #Set params $p = @{ Authentication = $rmAuth; Environment = $O365Object.Environment; Provider = $apiDetails.provider; ObjectType = "policyAssignments"; Filter = $filter; APIVersion= '2019-09-01'; InformationAction = $O365Object.InformationAction; Verbose = $O365Object.verbose; Debug = $O365Object.debug; } $policy = Get-MonkeyRMObject @p #return policy return $policy } elseif($PSCmdlet.ParameterSetName -eq 'PolicySetDefinitionId'){ $msg = @{ MessageData = ($message.AzureSbsPolicyAssignment -f $PolicySetDefinitionId); callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = 'info'; InformationAction = $O365Object.InformationAction; Tags = @('AzureSubscriptionInfo'); } Write-Information @msg $filter = ("policyDefinitionId eq '/providers/Microsoft.Authorization/policySetDefinitions/{0}'" -f $PolicyDefinitionId) #Set params $p = @{ Authentication = $rmAuth; Environment = $O365Object.Environment; Provider = $apiDetails.provider; ObjectType = "policyAssignments"; Filter = $filter; APIVersion= '2019-09-01'; InformationAction = $O365Object.InformationAction; Verbose = $O365Object.verbose; Debug = $O365Object.debug; } $policy = Get-MonkeyRMObject @p #return policy return $policy } else{ $msg = @{ MessageData = $message.AzureSbsPolicyAssignmentAll; callStack = (Get-PSCallStack | Select-Object -First 1); logLevel = 'info'; InformationAction = $O365Object.InformationAction; Tags = @('AzureSubscriptionInfo'); } Write-Information @msg #Set params $p = @{ Authentication = $rmAuth; Environment = $O365Object.Environment; Provider = $apiDetails.provider; ObjectType = "policyAssignments"; APIVersion= '2019-09-01'; InformationAction = $O365Object.InformationAction; Verbose = $O365Object.verbose; Debug = $O365Object.debug; } $policy = Get-MonkeyRMObject @p #return policy return $policy } } End{ #nothing to do here } } |