report
Creates, updates, deletes, gets or lists a report resource.
Overview
| Name | report |
| Type | Resource |
| Id | azure_extras.app_compliance_automation.report |
Fields
The following fields are returned by SELECT queries:
- get
- list
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. # pylint: disable=line-too-long |
name | string | The name of the resource. |
certRecords | array | List of synchronized certification records. |
complianceStatus | object | Report compliance status. |
errors | array | List of report error codes. |
lastTriggerTime | string (date-time) | Report last collection trigger time. |
nextTriggerTime | string (date-time) | Report next collection trigger time. |
offerGuid | string | A list of comma-separated offerGuids indicates a series of offerGuids that map to the report. For example, "00000000-0000-0000-0000-000000000001,00000000-0000-0000-0000-000000000002" and "00000000-0000-0000-0000-000000000003". |
provisioningState | string | Azure lifecycle management. Known values are: "Succeeded", "Failed", "Canceled", "Creating", "Deleting", "Fixing", "Verifying", and "Updating". |
resources | array | List of resource data. Required. |
status | string | Report status. Known values are: "Active", "Failed", "Reviewing", and "Disabled". |
storageInfo | object | The information of 'bring your own storage' account binding to the report. |
subscriptions | array | List of subscription Ids. |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
tenantId | string | Report's tenant id. |
timeZone | string | Report collection trigger time's time zone, the available list can be obtained by executing "Get-TimeZone -ListAvailable" in PowerShell. An example of valid timezone id is "Pacific Standard Time". Required. |
triggerTime | string (date-time) | Report collection trigger time. Required. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
| Name | Datatype | Description |
|---|---|---|
id | string | Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}. # pylint: disable=line-too-long |
name | string | The name of the resource. |
certRecords | array | List of synchronized certification records. |
complianceStatus | object | Report compliance status. |
errors | array | List of report error codes. |
lastTriggerTime | string (date-time) | Report last collection trigger time. |
nextTriggerTime | string (date-time) | Report next collection trigger time. |
offerGuid | string | A list of comma-separated offerGuids indicates a series of offerGuids that map to the report. For example, "00000000-0000-0000-0000-000000000001,00000000-0000-0000-0000-000000000002" and "00000000-0000-0000-0000-000000000003". |
provisioningState | string | Azure lifecycle management. Known values are: "Succeeded", "Failed", "Canceled", "Creating", "Deleting", "Fixing", "Verifying", and "Updating". |
resources | array | List of resource data. Required. |
status | string | Report status. Known values are: "Active", "Failed", "Reviewing", and "Disabled". |
storageInfo | object | The information of 'bring your own storage' account binding to the report. |
subscriptions | array | List of subscription Ids. |
systemData | object | Azure Resource Manager metadata containing createdBy and modifiedBy information. |
tenantId | string | Report's tenant id. |
timeZone | string | Report collection trigger time's time zone, the available list can be obtained by executing "Get-TimeZone -ListAvailable" in PowerShell. An example of valid timezone id is "Pacific Standard Time". Required. |
triggerTime | string (date-time) | Report collection trigger time. Required. |
type | string | The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts". |
Methods
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get | select | report_name | Get the AppComplianceAutomation report and its properties. | |
list | select | $skipToken, $top, $select, $filter, $orderby, offerGuid, reportCreatorTenantId | Get the AppComplianceAutomation report list for the tenant. | |
create_or_update | insert | report_name, properties | Create a new AppComplianceAutomation report or update an exiting AppComplianceAutomation report. | |
update | update | report_name | Update an exiting AppComplianceAutomation report. | |
create_or_update | replace | report_name, properties | Create a new AppComplianceAutomation report or update an exiting AppComplianceAutomation report. | |
delete | delete | report_name | Delete an AppComplianceAutomation report. | |
get_scoping_questions | exec | report_name | Fix the AppComplianceAutomation report error. e.g: App Compliance Automation Tool service unregistered, automation removed. | |
nested_resource_check_name_availability | exec | report_name | Checks the report's nested resource name availability, e.g: Webhooks, Evidences, Snapshots. | |
fix | exec | report_name | Fix the AppComplianceAutomation report error. e.g: App Compliance Automation Tool service unregistered, automation removed. | |
sync_cert_record | exec | report_name, certRecord | Synchronize attestation record from app compliance. | |
verify | exec | report_name | Verify the AppComplianceAutomation report health status. |
Parameters
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
report_name | string | Report Name. Required. |
$filter | string | The filter to apply on the operation. Default value is None. |
$orderby | string | OData order by query option. Default value is None. |
$select | string | OData Select statement. Limits the properties on each entry to just those requested, e.g. ?$select=reportName,id. Default value is None. |
$skipToken | string | Skip over when retrieving results. Default value is None. |
$top | integer | Number of elements to return when retrieving results. Default value is None. |
offerGuid | string | The offerGuid which mapping to the reports. Default value is None. |
reportCreatorTenantId | string | The tenant id of the report creator. Default value is None. |
SELECT examples
- get
- list
Get the AppComplianceAutomation report and its properties.
SELECT
id,
name,
certRecords,
complianceStatus,
errors,
lastTriggerTime,
nextTriggerTime,
offerGuid,
provisioningState,
resources,
status,
storageInfo,
subscriptions,
systemData,
tenantId,
timeZone,
triggerTime,
type
FROM azure_extras.app_compliance_automation.report
WHERE report_name = '{{ report_name }}' -- required
;
Get the AppComplianceAutomation report list for the tenant.
SELECT
id,
name,
certRecords,
complianceStatus,
errors,
lastTriggerTime,
nextTriggerTime,
offerGuid,
provisioningState,
resources,
status,
storageInfo,
subscriptions,
systemData,
tenantId,
timeZone,
triggerTime,
type
FROM azure_extras.app_compliance_automation.report
WHERE $skipToken = '{{ $skipToken }}'
AND $top = '{{ $top }}'
AND $select = '{{ $select }}'
AND $filter = '{{ $filter }}'
AND $orderby = '{{ $orderby }}'
AND offerGuid = '{{ offerGuid }}'
AND reportCreatorTenantId = '{{ reportCreatorTenantId }}'
;
INSERT examples
- create_or_update
- Manifest
Create a new AppComplianceAutomation report or update an exiting AppComplianceAutomation report.
INSERT INTO azure_extras.app_compliance_automation.report (
properties,
report_name
)
SELECT
'{{ properties }}' /* required */,
'{{ report_name }}'
RETURNING
id,
name,
properties,
systemData,
type
;
# Description fields are for documentation purposes
- name: report
props:
- name: report_name
value: "{{ report_name }}"
description: Required parameter for the report resource.
- name: properties
description: |
Report property. Required.
value:
triggerTime: "{{ triggerTime }}"
timeZone: "{{ timeZone }}"
resources:
- resourceId: "{{ resourceId }}"
resourceType: "{{ resourceType }}"
resourceKind: "{{ resourceKind }}"
resourceOrigin: "{{ resourceOrigin }}"
accountId: "{{ accountId }}"
status: "{{ status }}"
errors:
- "{{ errors }}"
tenantId: "{{ tenantId }}"
offerGuid: "{{ offerGuid }}"
nextTriggerTime: "{{ nextTriggerTime }}"
lastTriggerTime: "{{ lastTriggerTime }}"
subscriptions:
- "{{ subscriptions }}"
complianceStatus:
m365:
passedCount: {{ passedCount }}
failedCount: {{ failedCount }}
manualCount: {{ manualCount }}
notApplicableCount: {{ notApplicableCount }}
pendingCount: {{ pendingCount }}
storageInfo:
subscriptionId: "{{ subscriptionId }}"
resourceGroup: "{{ resourceGroup }}"
accountName: "{{ accountName }}"
location: "{{ location }}"
certRecords:
- offerGuid: "{{ offerGuid }}"
certificationStatus: "{{ certificationStatus }}"
ingestionStatus: "{{ ingestionStatus }}"
controls: "{{ controls }}"
provisioningState: "{{ provisioningState }}"
UPDATE examples
- update
Update an exiting AppComplianceAutomation report.
UPDATE azure_extras.app_compliance_automation.report
SET
properties = '{{ properties }}'
WHERE
report_name = '{{ report_name }}' --required
RETURNING
id,
name,
properties,
systemData,
type;
REPLACE examples
- create_or_update
Create a new AppComplianceAutomation report or update an exiting AppComplianceAutomation report.
REPLACE azure_extras.app_compliance_automation.report
SET
properties = '{{ properties }}'
WHERE
report_name = '{{ report_name }}' --required
AND properties = '{{ properties }}' --required
RETURNING
id,
name,
properties,
systemData,
type;
DELETE examples
- delete
Delete an AppComplianceAutomation report.
DELETE FROM azure_extras.app_compliance_automation.report
WHERE report_name = '{{ report_name }}' --required
;
Lifecycle Methods
- get_scoping_questions
- nested_resource_check_name_availability
- fix
- sync_cert_record
- verify
Fix the AppComplianceAutomation report error. e.g: App Compliance Automation Tool service unregistered, automation removed.
EXEC azure_extras.app_compliance_automation.report.get_scoping_questions
@report_name='{{ report_name }}' --required
;
Checks the report's nested resource name availability, e.g: Webhooks, Evidences, Snapshots.
EXEC azure_extras.app_compliance_automation.report.nested_resource_check_name_availability
@report_name='{{ report_name }}' --required
@@json=
'{
"name": "{{ name }}",
"type": "{{ type }}"
}'
;
Fix the AppComplianceAutomation report error. e.g: App Compliance Automation Tool service unregistered, automation removed.
EXEC azure_extras.app_compliance_automation.report.fix
@report_name='{{ report_name }}' --required
;
Synchronize attestation record from app compliance.
EXEC azure_extras.app_compliance_automation.report.sync_cert_record
@report_name='{{ report_name }}' --required
@@json=
'{
"certRecord": "{{ certRecord }}"
}'
;
Verify the AppComplianceAutomation report health status.
EXEC azure_extras.app_compliance_automation.report.verify
@report_name='{{ report_name }}' --required
;