From 42f90f9f5d3c8eb09cfbbdca5b7daf911ca80a05 Mon Sep 17 00:00:00 2001 From: Sean Rathier Date: Mon, 8 Sep 2025 17:18:50 -0400 Subject: [PATCH 1/8] added cloud connectors to azure --- packages/cloud_asset_inventory/changelog.yml | 5 +++++ .../data_stream/asset_inventory/manifest.yml | 12 ++++++++++++ packages/cloud_asset_inventory/manifest.yml | 2 +- 3 files changed, 18 insertions(+), 1 deletion(-) diff --git a/packages/cloud_asset_inventory/changelog.yml b/packages/cloud_asset_inventory/changelog.yml index 91b3365ddea..55c3f6e29a6 100644 --- a/packages/cloud_asset_inventory/changelog.yml +++ b/packages/cloud_asset_inventory/changelog.yml @@ -3,6 +3,11 @@ # 1.1.x - 9.2.x # 1.0.x - 9.1.x # 0.1.x - 8.15.x +- version: "1.1.1-preview02" + changes: + - description: Add support for Azure Cloud Connectors credentials + type: enhancement + link: https://github.com/elastic/integrations/pull/15237 - version: "1.1.1-preview01" changes: - description: Add support for Azure Cloud Connectors diff --git a/packages/cloud_asset_inventory/data_stream/asset_inventory/manifest.yml b/packages/cloud_asset_inventory/data_stream/asset_inventory/manifest.yml index bdd47526dd9..592764e4509 100644 --- a/packages/cloud_asset_inventory/data_stream/asset_inventory/manifest.yml +++ b/packages/cloud_asset_inventory/data_stream/asset_inventory/manifest.yml @@ -213,6 +213,11 @@ streams: - name: azure.credentials.client_certificate_path - name: azure.credentials.tenant_id - name: azure.credentials.client_certificate_password + cloud_connectors: + - name: azure.credentials.client_id + - name: azure.credentials.tenant_id + - name: azure.credentials.type + value: cloud_connectors vars: - name: azure.account_type title: Account type @@ -280,6 +285,13 @@ streams: show_user: true secret: true description: Required when using Service Principal with Client Certificate + - name: azure.supports_cloud_connectors + type: bool + title: Supports Cloud Connectors + multi: false + required: false + show_user: false + secret: false - input: cloudbeat/asset_inventory_gcp title: GCP Asset Discovery description: Asset Discovery Discovery for GCP diff --git a/packages/cloud_asset_inventory/manifest.yml b/packages/cloud_asset_inventory/manifest.yml index 896b2147dbe..08b20ed6b62 100644 --- a/packages/cloud_asset_inventory/manifest.yml +++ b/packages/cloud_asset_inventory/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.3.2 name: cloud_asset_inventory title: "Cloud Asset Discovery" -version: "1.1.1-preview01" +version: "1.1.1-preview02" source: license: "Elastic-2.0" description: "Discover and Create Cloud Assets Discovery" From 56b9e6049df5c2c77c4e372a7dc28950f1b43fcb Mon Sep 17 00:00:00 2001 From: Sean Rathier Date: Tue, 9 Sep 2025 16:48:57 -0400 Subject: [PATCH 2/8] aligning Azure cloud-connector credential with AWS --- packages/cloud_asset_inventory/changelog.yml | 2 +- .../data_stream/asset_inventory/manifest.yml | 7 ++---- packages/cloud_asset_inventory/manifest.yml | 2 +- .../data_stream/findings/manifest.yml | 23 +++++++++++++++++++ 4 files changed, 27 insertions(+), 7 deletions(-) diff --git a/packages/cloud_asset_inventory/changelog.yml b/packages/cloud_asset_inventory/changelog.yml index 55c3f6e29a6..76a84d7fec0 100644 --- a/packages/cloud_asset_inventory/changelog.yml +++ b/packages/cloud_asset_inventory/changelog.yml @@ -3,7 +3,7 @@ # 1.1.x - 9.2.x # 1.0.x - 9.1.x # 0.1.x - 8.15.x -- version: "1.1.1-preview02" +- version: "1.1.2" changes: - description: Add support for Azure Cloud Connectors credentials type: enhancement diff --git a/packages/cloud_asset_inventory/data_stream/asset_inventory/manifest.yml b/packages/cloud_asset_inventory/data_stream/asset_inventory/manifest.yml index 592764e4509..2c238f2b352 100644 --- a/packages/cloud_asset_inventory/data_stream/asset_inventory/manifest.yml +++ b/packages/cloud_asset_inventory/data_stream/asset_inventory/manifest.yml @@ -213,11 +213,6 @@ streams: - name: azure.credentials.client_certificate_path - name: azure.credentials.tenant_id - name: azure.credentials.client_certificate_password - cloud_connectors: - - name: azure.credentials.client_id - - name: azure.credentials.tenant_id - - name: azure.credentials.type - value: cloud_connectors vars: - name: azure.account_type title: Account type @@ -250,6 +245,7 @@ streams: value: cloud_connectors - name: azure.credentials.client_id type: text + secret: true title: Client ID multi: false required: false @@ -257,6 +253,7 @@ streams: description: Required when using either of Service Principal options - name: azure.credentials.tenant_id type: text + secret: true title: Tenant ID multi: false required: false diff --git a/packages/cloud_asset_inventory/manifest.yml b/packages/cloud_asset_inventory/manifest.yml index 08b20ed6b62..e4693576feb 100644 --- a/packages/cloud_asset_inventory/manifest.yml +++ b/packages/cloud_asset_inventory/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.3.2 name: cloud_asset_inventory title: "Cloud Asset Discovery" -version: "1.1.1-preview02" +version: "1.1.2" source: license: "Elastic-2.0" description: "Discover and Create Cloud Assets Discovery" diff --git a/packages/cloud_security_posture/data_stream/findings/manifest.yml b/packages/cloud_security_posture/data_stream/findings/manifest.yml index d9420eaa760..00776a15bb2 100644 --- a/packages/cloud_security_posture/data_stream/findings/manifest.yml +++ b/packages/cloud_security_posture/data_stream/findings/manifest.yml @@ -357,6 +357,20 @@ streams: - name: azure.credentials.client_certificate_path - name: azure.credentials.tenant_id - name: azure.credentials.client_certificate_password + cloud_connectors_single_account: + - name: azure.account_type + value: single-account + - name: azure.credentials.client_id + - name: azure.credentials.tenant_id + - name: azure.credentials.type + value: cloud_connectors + cloud_connectors_organization_account: + - name: azure.account_type + value: organization-account + - name: azure.credentials.client_id + - name: azure.credentials.tenant_id + - name: azure.credentials.type + value: cloud_connectors vars: - name: condition title: Condition @@ -380,12 +394,14 @@ streams: show_user: false - name: azure.credentials.client_id type: text + secret: true title: Client ID multi: false required: false show_user: true - name: azure.credentials.tenant_id type: text + secret: true title: Tenant ID multi: false required: false @@ -410,3 +426,10 @@ streams: required: false show_user: true secret: true + - name: azure.supports_cloud_connectors + type: bool + title: Supports Cloud Connectors + multi: false + required: false + show_user: false + secret: false From 9e37ecd4dddcc6244bde5f91e77b9493e3b04289 Mon Sep 17 00:00:00 2001 From: Sean Rathier Date: Tue, 9 Sep 2025 17:10:06 -0400 Subject: [PATCH 3/8] changlog --- packages/cloud_security_posture/changelog.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cloud_security_posture/changelog.yml b/packages/cloud_security_posture/changelog.yml index 31f48ccdc9a..74580c9c95c 100644 --- a/packages/cloud_security_posture/changelog.yml +++ b/packages/cloud_security_posture/changelog.yml @@ -16,7 +16,7 @@ # 1.4.x - 8.9.x # 1.3.x - 8.8.x # 1.2.x - 8.7.x -- version: "3.1.0-preview01" +- version: "3.0.1-preview01" changes: - description: Add Cloud Connectors variables for Azure CSPM input type: enhancement From 3ab934321e438ecb985c7f4592aabe1db79b6a22 Mon Sep 17 00:00:00 2001 From: Sean Rathier Date: Tue, 9 Sep 2025 17:39:54 -0400 Subject: [PATCH 4/8] changlog --- packages/cloud_security_posture/changelog.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cloud_security_posture/changelog.yml b/packages/cloud_security_posture/changelog.yml index 74580c9c95c..6d92eb4d9f3 100644 --- a/packages/cloud_security_posture/changelog.yml +++ b/packages/cloud_security_posture/changelog.yml @@ -16,7 +16,7 @@ # 1.4.x - 8.9.x # 1.3.x - 8.8.x # 1.2.x - 8.7.x -- version: "3.0.1-preview01" +- version: "3.0.2-preview01" changes: - description: Add Cloud Connectors variables for Azure CSPM input type: enhancement From 5848c9336a25aee787873a5d74e119e9f8e13eaa Mon Sep 17 00:00:00 2001 From: Sean Rathier Date: Wed, 10 Sep 2025 09:31:34 -0400 Subject: [PATCH 5/8] bumed version --- packages/cloud_asset_inventory/changelog.yml | 2 +- packages/cloud_asset_inventory/manifest.yml | 2 +- packages/cloud_security_posture/changelog.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/packages/cloud_asset_inventory/changelog.yml b/packages/cloud_asset_inventory/changelog.yml index 76a84d7fec0..1cc5f7cd348 100644 --- a/packages/cloud_asset_inventory/changelog.yml +++ b/packages/cloud_asset_inventory/changelog.yml @@ -3,7 +3,7 @@ # 1.1.x - 9.2.x # 1.0.x - 9.1.x # 0.1.x - 8.15.x -- version: "1.1.2" +- version: "1.1.3" changes: - description: Add support for Azure Cloud Connectors credentials type: enhancement diff --git a/packages/cloud_asset_inventory/manifest.yml b/packages/cloud_asset_inventory/manifest.yml index e4693576feb..97fcc6ac06c 100644 --- a/packages/cloud_asset_inventory/manifest.yml +++ b/packages/cloud_asset_inventory/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.3.2 name: cloud_asset_inventory title: "Cloud Asset Discovery" -version: "1.1.2" +version: "1.1.3" source: license: "Elastic-2.0" description: "Discover and Create Cloud Assets Discovery" diff --git a/packages/cloud_security_posture/changelog.yml b/packages/cloud_security_posture/changelog.yml index 6d92eb4d9f3..968604734e2 100644 --- a/packages/cloud_security_posture/changelog.yml +++ b/packages/cloud_security_posture/changelog.yml @@ -16,7 +16,7 @@ # 1.4.x - 8.9.x # 1.3.x - 8.8.x # 1.2.x - 8.7.x -- version: "3.0.2-preview01" +- version: "3.1.0-preview02" changes: - description: Add Cloud Connectors variables for Azure CSPM input type: enhancement From 2725fbfd6a42a121e0cf2b32a2cc715d47f10da9 Mon Sep 17 00:00:00 2001 From: Sean Rathier Date: Wed, 10 Sep 2025 09:49:58 -0400 Subject: [PATCH 6/8] bumed version --- packages/cloud_security_posture/changelog.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/packages/cloud_security_posture/changelog.yml b/packages/cloud_security_posture/changelog.yml index 968604734e2..c2c35ceede9 100644 --- a/packages/cloud_security_posture/changelog.yml +++ b/packages/cloud_security_posture/changelog.yml @@ -17,6 +17,11 @@ # 1.3.x - 8.8.x # 1.2.x - 8.7.x - version: "3.1.0-preview02" + changes: + - description: Add azure supports cloud connectors and secrets + type: enhancement + link: https://github.com/elastic/integrations/pull/15255 +- version: "3.1.0-preview01" changes: - description: Add Cloud Connectors variables for Azure CSPM input type: enhancement From 392ba7a86d18abc0bc604c32c52705b946116017 Mon Sep 17 00:00:00 2001 From: Sean Rathier Date: Wed, 10 Sep 2025 09:51:09 -0400 Subject: [PATCH 7/8] bumed version --- packages/cloud_security_posture/manifest.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cloud_security_posture/manifest.yml b/packages/cloud_security_posture/manifest.yml index 819af068712..1b894a709ee 100644 --- a/packages/cloud_security_posture/manifest.yml +++ b/packages/cloud_security_posture/manifest.yml @@ -1,7 +1,7 @@ format_version: 3.3.2 name: cloud_security_posture title: "Security Posture Management" -version: "3.1.0-preview01" +version: "3.1.0-preview02" source: license: "Elastic-2.0" description: "Identify & remediate configuration risks in your Cloud infrastructure" From 3d1d5b8a3f8a696ab38b0383074ed54971ff214e Mon Sep 17 00:00:00 2001 From: Sean Rathier Date: Wed, 10 Sep 2025 09:53:20 -0400 Subject: [PATCH 8/8] edited req vars --- .../data_stream/findings/manifest.yml | 21 +++++++------------ 1 file changed, 7 insertions(+), 14 deletions(-) diff --git a/packages/cloud_security_posture/data_stream/findings/manifest.yml b/packages/cloud_security_posture/data_stream/findings/manifest.yml index 00776a15bb2..345909b2233 100644 --- a/packages/cloud_security_posture/data_stream/findings/manifest.yml +++ b/packages/cloud_security_posture/data_stream/findings/manifest.yml @@ -330,6 +330,13 @@ streams: value: cloud_connectors - name: azure.credentials.client_id - name: azure.credentials.tenant_id + organization_account_cloud_connectors: + - name: azure.account_type + value: organization-account + - name: azure.credentials.type + value: cloud_connectors + - name: azure.credentials.client_id + - name: azure.credentials.tenant_id single_account_arm_template: - name: azure.account_type value: single-account @@ -357,20 +364,6 @@ streams: - name: azure.credentials.client_certificate_path - name: azure.credentials.tenant_id - name: azure.credentials.client_certificate_password - cloud_connectors_single_account: - - name: azure.account_type - value: single-account - - name: azure.credentials.client_id - - name: azure.credentials.tenant_id - - name: azure.credentials.type - value: cloud_connectors - cloud_connectors_organization_account: - - name: azure.account_type - value: organization-account - - name: azure.credentials.client_id - - name: azure.credentials.tenant_id - - name: azure.credentials.type - value: cloud_connectors vars: - name: condition title: Condition