{"resources":{"azure":{"id":"azure","name":"azure","fields":{"subscription":{"name":"subscription","type":"\u001bazure.subscription","title":"Azure subscription","desc":" Examine an Azure subscription — the billing, identity, and policy container that owns every Azure resource accessible to the provider. Surfaces the subscription ID, tenant ID, display name, state, authorization source, applied tags, the managing tenants, and the `subscriptionsPolicies` block. Iterate `resourceGroups()` for the resource-group containers and `resources()` for every resource in the subscription. Service-specific entry points hang off the subscription as accessor methods — `compute()`, `network()`, `storage()`, `web()`, `sql()`, `mySql()`, `postgreSql()`, `cosmosDb()`, `keyVault()`, `iam()` (Authorization), `monitor()`, `cloudDefender()`, `aks()`, `advisor()`, `policy`, `iot()`, `cache()`, `dataFactory()`, `synapse()`, `containerRegistry()`, `recoveryServices()`, `functions()`, `serviceBus()`, `eventHub()`, `dns()`, `frontDoor()`, `containerApp()`, `containerInstance()`, `logic()`, `batch()`, and `databricks()` — letting you traverse from a subscription into every modeled Azure service.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"title":"Microsoft Azure","desc":" Use the Azure root namespace as the entry point for the Azure provider. The active subscription is exposed as `azure.subscription`, and every Azure service-specific accessor (Compute, Storage, Network, Key Vault, Cosmos DB, Monitor, Defender for Cloud, AKS, and so on) is reached through that subscription.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription":{"id":"azure.subscription","name":"azure.subscription","fields":{"advisor":{"name":"advisor","type":"\u001bazure.subscription.advisorService","title":"Advisor resources in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"advisorService":{"name":"advisorService","type":"\u001bazure.subscription.advisorService","title":"Azure Advisor","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"aks":{"name":"aks","type":"\u001bazure.subscription.aksService","title":"AKS resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"aksService":{"name":"aksService","type":"\u001bazure.subscription.aksService","title":"Azure Kubernetes Service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"apiManagement":{"name":"apiManagement","type":"\u001bazure.subscription.apiManagementService","title":"API Management resources in the subscription","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"apiManagementService":{"name":"apiManagementService","type":"\u001bazure.subscription.apiManagementService","title":"Azure API Management","desc":" Use this namespace to enumerate the API Management gateway instances configured in the subscription via `services()`. The returned `azure.subscription.apiManagementService.service` resources expose SKU, virtual-network integration mode, public network access, gateway TLS / cipher policy, identity, endpoints, and private endpoint connection state.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"authorizationService":{"name":"authorizationService","type":"\u001bazure.subscription.authorizationService","title":"Azure IAM service","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"authorizationSource":{"name":"authorizationSource","type":"\u0007","is_mandatory":true,"title":"Subscription authorization source","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"batch":{"name":"batch","type":"\u001bazure.subscription.batchService","title":"Batch resources in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"batchService":{"name":"batchService","type":"\u001bazure.subscription.batchService","title":"Azure Batch","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"cache":{"name":"cache","type":"\u001bazure.subscription.cacheService","title":"Cache resources in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cacheService":{"name":"cacheService","type":"\u001bazure.subscription.cacheService","title":"Azure Cache for Redis","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"cloudDefender":{"name":"cloudDefender","type":"\u001bazure.subscription.cloudDefenderService","title":"Cloud defender resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cloudDefenderService":{"name":"cloudDefenderService","type":"\u001bazure.subscription.cloudDefenderService","title":"Microsoft Defender for Cloud","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"compute":{"name":"compute","type":"\u001bazure.subscription.computeService","title":"Compute resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"computeService":{"name":"computeService","type":"\u001bazure.subscription.computeService","title":"Azure Compute","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containerApp":{"name":"containerApp","type":"\u001bazure.subscription.containerAppService","title":"Azure Container Apps resources in the subscription","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"containerAppService":{"name":"containerAppService","type":"\u001bazure.subscription.containerAppService","title":"Azure Container Apps","desc":" Examine Azure Container Apps managed environments, the Container Apps running in them, and Container Apps jobs. Use this resource to audit ingress posture, image pinning, identity-vs-secret registry auth, Easy Auth configuration, and revision history.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containerInstance":{"name":"containerInstance","type":"\u001bazure.subscription.containerInstanceService","title":"Azure Container Instances resources in the subscription","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"containerInstanceService":{"name":"containerInstanceService","type":"\u001bazure.subscription.containerInstanceService","title":"Azure Container Instances","desc":" Examine Azure Container Instances container groups and the containers within them. Use this resource to audit OS type, restart policy, image pinning, registry auth, VNET delegation, security context (privileged, runAsUser), and confidential-ACI usage.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containerRegistry":{"name":"containerRegistry","type":"\u001bazure.subscription.containerRegistryService","title":"Container Registry resources in the subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"containerRegistryService":{"name":"containerRegistryService","type":"\u001bazure.subscription.containerRegistryService","title":"Azure Container Registry service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"cosmosDb":{"name":"cosmosDb","type":"\u001bazure.subscription.cosmosDbService","title":"Cosmos DB resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cosmosDbService":{"name":"cosmosDbService","type":"\u001bazure.subscription.cosmosDbService","title":"Azure Cosmos DB","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"dataFactory":{"name":"dataFactory","type":"\u001bazure.subscription.dataFactoryService","title":"Data Factory resources in the subscription","min_provider_version":"13.3.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataFactoryService":{"name":"dataFactoryService","type":"\u001bazure.subscription.dataFactoryService","title":"Azure Data Factory service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"databricks":{"name":"databricks","type":"\u001bazure.subscription.databricksService","title":"Databricks resources in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"databricksService":{"name":"databricksService","type":"\u001bazure.subscription.databricksService","title":"Azure Databricks","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"dns":{"name":"dns","type":"\u001bazure.subscription.dnsService","title":"DNS resources in the subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dnsService":{"name":"dnsService","type":"\u001bazure.subscription.dnsService","title":"Azure DNS service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"eventGrid":{"name":"eventGrid","type":"\u001bazure.subscription.eventGridService","title":"Event Grid resources in the subscription","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"eventGridService":{"name":"eventGridService","type":"\u001bazure.subscription.eventGridService","title":"Azure Event Grid service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"eventHub":{"name":"eventHub","type":"\u001bazure.subscription.eventHubService","title":"Event Hubs resources in the subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"eventHubService":{"name":"eventHubService","type":"\u001bazure.subscription.eventHubService","title":"Azure Event Hubs service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"frontDoor":{"name":"frontDoor","type":"\u001bazure.subscription.frontDoorService","title":"Front Door and CDN resources in the subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"frontDoorService":{"name":"frontDoorService","type":"\u001bazure.subscription.frontDoorService","title":"Azure Front Door and CDN service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"functions":{"name":"functions","type":"\u001bazure.subscription.functionsService","title":"Azure Functions resources in the subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"functionsService":{"name":"functionsService","type":"\u001bazure.subscription.functionsService","title":"Azure Functions service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"iam":{"name":"iam","type":"\u001bazure.subscription.authorizationService","title":"Authorization resources in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Full resource identifier of the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"iot":{"name":"iot","type":"\u001bazure.subscription.iotService","title":"IoT resources in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"iotService":{"name":"iotService","type":"\u001bazure.subscription.iotService","title":"Azure IoT Hub Service","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"keyVault":{"name":"keyVault","type":"\u001bazure.subscription.keyVaultService","title":"Azure Key Vault resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyVaultService":{"name":"keyVaultService","type":"\u001bazure.subscription.keyVaultService","title":"Azure Key Vault","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"logic":{"name":"logic","type":"\u001bazure.subscription.logicService","title":"Logic Apps resources in the subscription","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"logicService":{"name":"logicService","type":"\u001bazure.subscription.logicService","title":"Azure Logic Apps","desc":" Examine Azure Logic Apps Consumption-tier workflows in the subscription. Use this resource to audit workflow state, access-control policies, secret-typed parameters, and the trigger and action set defined in each workflow's JSON definition.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"managedByTenants":{"name":"managedByTenants","type":"\u0019\u0007","is_mandatory":true,"title":"List of tenants that manage the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedIdentity":{"name":"managedIdentity","type":"\u001bazure.subscription.managedIdentity","title":"Azure managed identity","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"monitor":{"name":"monitor","type":"\u001bazure.subscription.monitorService","title":"Monitor resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"monitorService":{"name":"monitorService","type":"\u001bazure.subscription.monitorService","title":"Azure Monitor","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"mySql":{"name":"mySql","type":"\u001bazure.subscription.mySqlService","title":"MySQL resources inside the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"mySqlService":{"name":"mySqlService","type":"\u001bazure.subscription.mySqlService","title":"Azure Database for MySQL","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"network":{"name":"network","type":"\u001bazure.subscription.networkService","title":"Network resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkService":{"name":"networkService","type":"\u001bazure.subscription.networkService","title":"Azure network","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"policy":{"name":"policy","type":"\u001bazure.subscription.policy","is_mandatory":true,"title":"Policy service in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"postgreSql":{"name":"postgreSql","type":"\u001bazure.subscription.postgreSqlService","title":"PostgreSQL resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"postgreSqlService":{"name":"postgreSqlService","type":"\u001bazure.subscription.postgreSqlService","title":"Azure Database for PostgreSQL","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateEndpointConnection":{"name":"privateEndpointConnection","type":"\u001bazure.subscription.privateEndpointConnection","title":"Azure private endpoint connection","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"recoveryServices":{"name":"recoveryServices","type":"\u001bazure.subscription.recoveryServicesService","title":"Recovery Services resources in the subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recoveryServicesService":{"name":"recoveryServicesService","type":"\u001bazure.subscription.recoveryServicesService","title":"Azure Recovery Services","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"resource":{"name":"resource","type":"\u001bazure.subscription.resource","title":"Azure resource","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"resourceGroups":{"name":"resourceGroups","type":"\u0019\u001bazure.subscription.resourcegroup","title":"Resource groups in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcegroup":{"name":"resourcegroup","type":"\u001bazure.subscription.resourcegroup","title":"Azure resource group","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"resources":{"name":"resources","type":"\u0019\u001bazure.subscription.resource","title":"All resources in a subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceBus":{"name":"serviceBus","type":"\u001bazure.subscription.serviceBusService","title":"Service Bus resources in the subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceBusService":{"name":"serviceBusService","type":"\u001bazure.subscription.serviceBusService","title":"Azure Service Bus service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"sql":{"name":"sql","type":"\u001bazure.subscription.sqlService","title":"SQL resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sqlService":{"name":"sqlService","type":"\u001bazure.subscription.sqlService","title":"Azure SQL","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Subscription state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storage":{"name":"storage","type":"\u001bazure.subscription.storageService","title":"Storage resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageService":{"name":"storageService","type":"\u001bazure.subscription.storageService","title":"Azure Storage","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionsPolicies":{"name":"subscriptionsPolicies","type":"\n","is_mandatory":true,"title":"Subscription policies","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"synapse":{"name":"synapse","type":"\u001bazure.subscription.synapseService","title":"Synapse Analytics resources in the subscription","min_provider_version":"13.3.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"synapseService":{"name":"synapseService","type":"\u001bazure.subscription.synapseService","title":"Azure Synapse Analytics service","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Subscription tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tenantId":{"name":"tenantId","type":"\u0007","is_mandatory":true,"title":"Subscription tenant identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"web":{"name":"web","type":"\u001bazure.subscription.webService","title":"Web resources in the subscription","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"webService":{"name":"webService","type":"\u001bazure.subscription.webService","title":"Azure Web","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"title":"Azure subscription","desc":" Examine an Azure subscription — the billing, identity, and policy container that owns every Azure resource accessible to the provider. Surfaces the subscription ID, tenant ID, display name, state, authorization source, applied tags, the managing tenants, and the `subscriptionsPolicies` block. Iterate `resourceGroups()` for the resource-group containers and `resources()` for every resource in the subscription. Service-specific entry points hang off the subscription as accessor methods — `compute()`, `network()`, `storage()`, `web()`, `sql()`, `mySql()`, `postgreSql()`, `cosmosDb()`, `keyVault()`, `iam()` (Authorization), `monitor()`, `cloudDefender()`, `aks()`, `advisor()`, `policy`, `iot()`, `cache()`, `dataFactory()`, `synapse()`, `containerRegistry()`, `recoveryServices()`, `functions()`, `serviceBus()`, `eventHub()`, `dns()`, `frontDoor()`, `containerApp()`, `containerInstance()`, `logic()`, `batch()`, and `databricks()` — letting you traverse from a subscription into every modeled Azure service.","min_provider_version":"11.4.28","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.advisorService":{"id":"azure.subscription.advisorService","name":"azure.subscription.advisorService","fields":{"averageScore":{"name":"averageScore","type":"\u0006","title":"Average advisory score","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recommendation":{"name":"recommendation","type":"\u001bazure.subscription.advisorService.recommendation","title":"Azure Advisor recommendation","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"recommendations":{"name":"recommendations","type":"\u0019\u001bazure.subscription.advisorService.recommendation","title":"List of all recommendations by the advisor","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"score":{"name":"score","type":"\u001bazure.subscription.advisorService.score","title":"Azure Advisor score","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"scores":{"name":"scores","type":"\u0019\u001bazure.subscription.advisorService.score","title":"List of scores by categories","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityScore":{"name":"securityScore","type":"\u001bazure.subscription.advisorService.securityScore","title":"Azure Advisor security score","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeSeries":{"name":"timeSeries","type":"\u001bazure.subscription.advisorService.timeSeries","title":"Azure Advisor time series","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"title":"Azure Advisor","private":true,"min_provider_version":"9.0.13","defaults":"averageScore recommendations.length scores.length","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.advisorService.recommendation":{"id":"azure.subscription.advisorService.recommendation","name":"azure.subscription.advisorService.recommendation","fields":{"category":{"name":"category","type":"\u0007","is_mandatory":true,"title":"Recommendation category","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Recommendation description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Recommendation ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"impact":{"name":"impact","type":"\u0007","is_mandatory":true,"title":"Recommendation impact","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"impactedResource":{"name":"impactedResource","type":"\u0007","is_mandatory":true,"title":"The impacted resource","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"impactedResourceType":{"name":"impactedResourceType","type":"\u0007","is_mandatory":true,"title":"The impacted resource category type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Recommendation name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Recommendation properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"remediation":{"name":"remediation","type":"\u0007","is_mandatory":true,"title":"Recommendation remediation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"risk":{"name":"risk","type":"\u0007","is_mandatory":true,"title":"Recommendation risk","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Recommendation resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Advisor recommendation","private":true,"min_provider_version":"9.0.13","defaults":"name category impact description impactedResource","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.advisorService.score":{"id":"azure.subscription.advisorService.score","name":"azure.subscription.advisorService.score","fields":{"currentScore":{"name":"currentScore","type":"\u001bazure.subscription.advisorService.securityScore","is_mandatory":true,"title":"Current score for the advisor category","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Score identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Score name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeSeries":{"name":"timeSeries","type":"\u0019\u001bazure.subscription.advisorService.timeSeries","is_mandatory":true,"title":"List of time series, containing previous scores for the category","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Score type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Advisor score","private":true,"min_provider_version":"9.0.13","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.advisorService.securityScore":{"id":"azure.subscription.advisorService.securityScore","name":"azure.subscription.advisorService.securityScore","fields":{"categoryCount":{"name":"categoryCount","type":"\u0005","is_mandatory":true,"title":"The count of impacted categories","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"consumptionUnits":{"name":"consumptionUnits","type":"\u0006","is_mandatory":true,"title":"The consumption units for the score","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"date":{"name":"date","type":"\t","is_mandatory":true,"title":"The date the score was calculated","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Security score identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"impactedResourcesCount":{"name":"impactedResourcesCount","type":"\u0005","is_mandatory":true,"title":"The number of impacted resources","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"potentialScoreIncrease":{"name":"potentialScoreIncrease","type":"\u0006","is_mandatory":true,"title":"The potential percentage increase in overall score at subscription level after all recommendations are implemented","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"score":{"name":"score","type":"\u0006","is_mandatory":true,"title":"Security score score","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Advisor security score","private":true,"min_provider_version":"9.0.13","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.advisorService.timeSeries":{"id":"azure.subscription.advisorService.timeSeries","name":"azure.subscription.advisorService.timeSeries","fields":{"aggregationLevel":{"name":"aggregationLevel","type":"\u0007","is_mandatory":true,"title":"The aggregation level for the time series","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Advisor time series identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scores":{"name":"scores","type":"\u0019\u001bazure.subscription.advisorService.securityScore","is_mandatory":true,"title":"The scores in the time series","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Advisor time series","private":true,"min_provider_version":"9.0.13","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.aksService":{"id":"azure.subscription.aksService","name":"azure.subscription.aksService","fields":{"cluster":{"name":"cluster","type":"\u001bazure.subscription.aksService.cluster","title":"Azure Kubernetes Service (AKS) cluster","desc":" Examine an AKS cluster's control-plane and managed-platform configuration. Surfaces the Kubernetes version, DNS prefix, FQDN, API server access profile (private cluster, authorized IP ranges), network profile (network plugin, service/pod CIDR, load-balancer SKU), identity (system-assigned or user-assigned, kubeletIdentity), RBAC and Azure AD integration, OIDC issuer URL for workload identity, the agent pool profiles, addon profiles (monitoring, policy, ingress-app-routing), Azure Policy and Defender for Cloud integration, image cleaner, cluster auto-upgrade channel, and the security profile (workload identity, image integrity, defender, node restriction, KMS encryption).","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"clusters":{"name":"clusters","type":"\u0019\u001bazure.subscription.aksService.cluster","title":"List all the AKS clusters inside the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Kubernetes Service","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.aksService.cluster":{"id":"azure.subscription.aksService.cluster","name":"azure.subscription.aksService.cluster","fields":{"aadProfile":{"name":"aadProfile","type":"\u001bazure.subscription.aksService.cluster.aadProfile","title":"Azure Active Directory configuration for the cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"addonProfiles":{"name":"addonProfiles","type":"\u0019\n","is_mandatory":true,"title":"The add-on profiles of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"advancedNetworking":{"name":"advancedNetworking","type":"\u001bazure.subscription.aksService.cluster.advancedNetworking","is_mandatory":true,"title":"Advanced networking configuration for the cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"agentPoolProfiles":{"name":"agentPoolProfiles","type":"\u0019\n","is_mandatory":true,"title":"DEPRECATED: use nodePools() instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"apiServerAccessProfile":{"name":"apiServerAccessProfile","type":"\n","is_mandatory":true,"title":"The API server access profile","min_provider_version":"11.0.22","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"apiServerAuthorizedIPRanges":{"name":"apiServerAuthorizedIPRanges","type":"\u0019\u0007","is_mandatory":true,"title":"CIDR ranges authorized to access the AKS API server","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"autoUpgradeProfile":{"name":"autoUpgradeProfile","type":"\u001bazure.subscription.aksService.cluster.autoUpgradeProfile","title":"Auto-upgrade configuration for the cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azureKeyVaultKmsEnabled":{"name":"azureKeyVaultKmsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Azure Key Vault KMS encryption is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azureKeyVaultKmsKey":{"name":"azureKeyVaultKmsKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for Azure Key Vault KMS encryption (null if not enabled)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azureKeyVaultKmsNetworkAccess":{"name":"azureKeyVaultKmsNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Network access mode for Azure Key Vault KMS (\"Public\" or \"Private\")","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the AKS cluster was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defenderEnabled":{"name":"defenderEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Microsoft Defender security monitoring is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableLocalAccounts":{"name":"disableLocalAccounts","type":"\u0004","is_mandatory":true,"title":"Whether local accounts are disabled (forces AAD-only auth)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableRunCommand":{"name":"disableRunCommand","type":"\u0004","is_mandatory":true,"title":"Whether run command is disabled on the AKS cluster","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dnsPrefix":{"name":"dnsPrefix","type":"\u0007","is_mandatory":true,"title":"The DNS prefix of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablePrivateCluster":{"name":"enablePrivateCluster","type":"\u0004","is_mandatory":true,"title":"Whether the AKS cluster API server is a private cluster","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablePrivateClusterPublicFQDN":{"name":"enablePrivateClusterPublicFQDN","type":"\u0004","is_mandatory":true,"title":"Whether the private cluster has a public FQDN","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fqdn":{"name":"fqdn","type":"\u0007","is_mandatory":true,"title":"The fully qualified domain name of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fqdnSubdomain":{"name":"fqdnSubdomain","type":"\u0007","is_mandatory":true,"title":"FQDN subdomain for private DNS zone clusters","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"httpProxyConfig":{"name":"httpProxyConfig","type":"\n","is_mandatory":true,"title":"The HTTP proxy config of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"imageCleanerEnabled":{"name":"imageCleanerEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Image Cleaner is enabled on the cluster","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"imageCleanerIntervalHours":{"name":"imageCleanerIntervalHours","type":"\u0005","is_mandatory":true,"title":"Image Cleaner scanning interval in hours","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kubernetesVersion":{"name":"kubernetesVersion","type":"\u0007","is_mandatory":true,"title":"The Kubernetes version of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Location of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkPlugin":{"name":"networkPlugin","type":"\u0007","is_mandatory":true,"title":"Network plugin used for building the Kubernetes network (\"azure\", \"kubenet\", \"none\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkPolicy":{"name":"networkPolicy","type":"\u0007","is_mandatory":true,"title":"Network policy used for building the Kubernetes network (\"calico\", \"azure\", \"cilium\", \"none\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkProfile":{"name":"networkProfile","type":"\n","is_mandatory":true,"title":"The network profile of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodePool":{"name":"nodePool","type":"\u001bazure.subscription.aksService.cluster.nodePool","title":"Azure Kubernetes Service cluster node pool (agent pool)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"nodePools":{"name":"nodePools","type":"\u0019\u001bazure.subscription.aksService.cluster.nodePool","title":"Node pools (agent pools) attached to the cluster","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodeResourceGroup":{"name":"nodeResourceGroup","type":"\u0007","is_mandatory":true,"title":"The node resource group of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodeResourceGroupRestrictionLevel":{"name":"nodeResourceGroupRestrictionLevel","type":"\u0007","is_mandatory":true,"title":"Restriction level for the node resource group (\"Unrestricted\" or \"ReadOnly\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"oidcIssuerEnabled":{"name":"oidcIssuerEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the OIDC issuer is enabled for workload identity federation","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"podIdentityProfile":{"name":"podIdentityProfile","type":"\n","is_mandatory":true,"title":"The pod identity profile of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"powerState":{"name":"powerState","type":"\u0007","is_mandatory":true,"title":"The power state of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateDnsZone":{"name":"privateDnsZone","type":"\u0007","is_mandatory":true,"title":"Private DNS zone mode for the AKS cluster","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateFqdn":{"name":"privateFqdn","type":"\u0007","is_mandatory":true,"title":"Private FQDN of the AKS cluster (only set for private clusters)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"The provisioning state of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled for the cluster (\"Enabled\" or \"Disabled\")","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rbacEnabled":{"name":"rbacEnabled","type":"\u0004","is_mandatory":true,"title":"Whether RBAC is enabled for the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityProfile":{"name":"securityProfile","type":"\n","is_mandatory":true,"title":"The security profile of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceMeshMode":{"name":"serviceMeshMode","type":"\u0007","is_mandatory":true,"title":"Service mesh mode (\"Disabled\" or \"Istio\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuTier":{"name":"skuTier","type":"\u0007","is_mandatory":true,"title":"SKU tier for the AKS cluster (\"Free\", \"Standard\", or \"Premium\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageProfile":{"name":"storageProfile","type":"\n","is_mandatory":true,"title":"The storage profile of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"supportPlan":{"name":"supportPlan","type":"\u0007","is_mandatory":true,"title":"Kubernetes support plan (\"KubernetesOfficial\" or \"AKSLongTermSupport\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"The tags of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workloadAutoScalerProfile":{"name":"workloadAutoScalerProfile","type":"\n","is_mandatory":true,"title":"The workload autoscaler profile of the AKS cluster","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workloadIdentityEnabled":{"name":"workloadIdentityEnabled","type":"\u0004","is_mandatory":true,"title":"Whether workload identity federation is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Kubernetes Service (AKS) cluster","desc":" Examine an AKS cluster's control-plane and managed-platform configuration. Surfaces the Kubernetes version, DNS prefix, FQDN, API server access profile (private cluster, authorized IP ranges), network profile (network plugin, service/pod CIDR, load-balancer SKU), identity (system-assigned or user-assigned, kubeletIdentity), RBAC and Azure AD integration, OIDC issuer URL for workload identity, the agent pool profiles, addon profiles (monitoring, policy, ingress-app-routing), Azure Policy and Defender for Cloud integration, image cleaner, cluster auto-upgrade channel, and the security profile (workload identity, image integrity, defender, node restriction, KMS encryption).","min_provider_version":"9.0.1","defaults":"name location kubernetesVersion","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.aksService.cluster.aadProfile":{"id":"azure.subscription.aksService.cluster.aadProfile","name":"azure.subscription.aksService.cluster.aadProfile","fields":{"adminGroupObjectIDs":{"name":"adminGroupObjectIDs","type":"\u0019\u0007","is_mandatory":true,"title":"AAD group object IDs with cluster admin role","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableAzureRBAC":{"name":"enableAzureRBAC","type":"\u0004","is_mandatory":true,"title":"Whether Azure RBAC for Kubernetes authorization is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"AAD profile ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managed":{"name":"managed","type":"\u0004","is_mandatory":true,"title":"Whether managed AAD integration is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Kubernetes Service cluster AAD profile","private":true,"min_provider_version":"11.4.28","defaults":"managed enableAzureRBAC","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.aksService.cluster.advancedNetworking":{"id":"azure.subscription.aksService.cluster.advancedNetworking","name":"azure.subscription.aksService.cluster.advancedNetworking","fields":{"accelerationMode":{"name":"accelerationMode","type":"\u0007","is_mandatory":true,"title":"Network acceleration mode: \"BpfVeth\" or \"None\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether advanced networking is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Advanced networking ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityEnabled":{"name":"securityEnabled","type":"\u0004","is_mandatory":true,"title":"Whether advanced network security (FQDN-based policies) is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"transitEncryptionType":{"name":"transitEncryptionType","type":"\u0007","is_mandatory":true,"title":"Transit encryption type for pod-to-pod encryption: \"None\" or \"WireGuard\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Kubernetes Service cluster advanced networking configuration","private":true,"min_provider_version":"13.1.8","defaults":"transitEncryptionType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.aksService.cluster.autoUpgradeProfile":{"id":"azure.subscription.aksService.cluster.autoUpgradeProfile","name":"azure.subscription.aksService.cluster.autoUpgradeProfile","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Auto-upgrade profile ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodeOSUpgradeChannel":{"name":"nodeOSUpgradeChannel","type":"\u0007","is_mandatory":true,"title":"Node OS upgrade channel (\"None\", \"NodeImage\", \"SecurityPatch\", \"Unmanaged\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"upgradeChannel":{"name":"upgradeChannel","type":"\u0007","is_mandatory":true,"title":"Auto-upgrade channel (\"none\", \"patch\", \"stable\", \"rapid\", \"node-image\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Kubernetes Service cluster auto-upgrade profile","private":true,"min_provider_version":"11.4.28","defaults":"upgradeChannel nodeOSUpgradeChannel","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.aksService.cluster.nodePool":{"id":"azure.subscription.aksService.cluster.nodePool","name":"azure.subscription.aksService.cluster.nodePool","fields":{"availabilityZones":{"name":"availabilityZones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones the pool is spread across","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"count":{"name":"count","type":"\u0005","is_mandatory":true,"title":"Number of nodes currently in the pool","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"currentOrchestratorVersion":{"name":"currentOrchestratorVersion","type":"\u0007","is_mandatory":true,"title":"Resolved Kubernetes version currently running on the nodes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableAutoScaling":{"name":"enableAutoScaling","type":"\u0004","is_mandatory":true,"title":"Whether the cluster autoscaler manages this pool","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableEncryptionAtHost":{"name":"enableEncryptionAtHost","type":"\u0004","is_mandatory":true,"title":"Whether host-based encryption is enabled on nodes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableFIPS":{"name":"enableFIPS","type":"\u0004","is_mandatory":true,"title":"Whether nodes use a FIPS-enabled OS image","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableNodePublicIP":{"name":"enableNodePublicIP","type":"\u0004","is_mandatory":true,"title":"Whether each node receives its own public IP","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableSecureBoot":{"name":"enableSecureBoot","type":"\u0004","is_mandatory":true,"title":"Whether Secure Boot is enabled on nodes (Trusted Launch)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableUltraSSD":{"name":"enableUltraSSD","type":"\u0004","is_mandatory":true,"title":"Whether ultra-SSD support is enabled on the pool","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableVTPM":{"name":"enableVTPM","type":"\u0004","is_mandatory":true,"title":"Whether vTPM is enabled on nodes (Trusted Launch)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostGroupId":{"name":"hostGroupId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the dedicated host group (empty when not configured)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Node pool resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxCount":{"name":"maxCount","type":"\u0005","is_mandatory":true,"title":"Maximum node count when autoscaling is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxPods":{"name":"maxPods","type":"\u0005","is_mandatory":true,"title":"Maximum number of pods that can run on a node","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minCount":{"name":"minCount","type":"\u0005","is_mandatory":true,"title":"Minimum node count when autoscaling is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Pool mode (\"System\" for kube-system pods, \"User\" for workloads, \"Gateway\" for static-egress gateway pools)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Node pool name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodeImageVersion":{"name":"nodeImageVersion","type":"\u0007","is_mandatory":true,"title":"Image version the nodes are currently running","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodeLabels":{"name":"nodeLabels","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Node labels applied to every node in the pool","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodePublicIPPrefixId":{"name":"nodePublicIPPrefixId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the public IP prefix used for node IPs (empty when not configured)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodeTaints":{"name":"nodeTaints","type":"\u0019\u0007","is_mandatory":true,"title":"Node taints applied to every node in the pool (e.g. \"key=value:NoSchedule\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"orchestratorVersion":{"name":"orchestratorVersion","type":"\u0007","is_mandatory":true,"title":"Kubernetes version requested for the pool (may be major.minor or major.minor.patch)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osDiskSizeGB":{"name":"osDiskSizeGB","type":"\u0005","is_mandatory":true,"title":"OS disk size in GB","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osDiskType":{"name":"osDiskType","type":"\u0007","is_mandatory":true,"title":"OS disk type (\"Ephemeral\" or \"Managed\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osSku":{"name":"osSku","type":"\u0007","is_mandatory":true,"title":"OS SKU (\"Ubuntu\", \"AzureLinux\", \"Mariner\", \"Windows2019\", \"Windows2022\", etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osType":{"name":"osType","type":"\u0007","is_mandatory":true,"title":"OS type (\"Linux\" or \"Windows\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"podSubnetId":{"name":"podSubnetId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the subnet pods are placed in when using delegated pod subnets (empty otherwise)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"powerState":{"name":"powerState","type":"\u0007","is_mandatory":true,"title":"Power state of the pool (\"Running\" or \"Stopped\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the pool","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"proximityPlacementGroupId":{"name":"proximityPlacementGroupId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the proximity placement group (empty when not configured)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scaleSetEvictionPolicy":{"name":"scaleSetEvictionPolicy","type":"\u0007","is_mandatory":true,"title":"Spot eviction policy (\"Delete\" or \"Deallocate\"; only when scaleSetPriority is \"Spot\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scaleSetPriority":{"name":"scaleSetPriority","type":"\u0007","is_mandatory":true,"title":"Scale set priority (\"Regular\" or \"Spot\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"spotMaxPrice":{"name":"spotMaxPrice","type":"\u0006","is_mandatory":true,"title":"Maximum price billed for spot nodes (-1 indicates \"any on-demand price\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sshAccess":{"name":"sshAccess","type":"\u0007","is_mandatory":true,"title":"SSH access mode for the pool (\"LocalUser\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Tags on the pool's underlying scale set","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"upgradeDrainTimeoutInMinutes":{"name":"upgradeDrainTimeoutInMinutes","type":"\u0005","is_mandatory":true,"title":"Drain timeout in minutes during pool upgrades","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"upgradeMaxSurge":{"name":"upgradeMaxSurge","type":"\u0007","is_mandatory":true,"title":"Maximum surge during pool upgrades (e.g. \"10%\" or \"1\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"upgradeMaxUnavailable":{"name":"upgradeMaxUnavailable","type":"\u0007","is_mandatory":true,"title":"Maximum unavailable nodes during pool upgrades (e.g. \"5%\" or \"1\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"upgradeNodeSoakDurationInMinutes":{"name":"upgradeNodeSoakDurationInMinutes","type":"\u0005","is_mandatory":true,"title":"Soak duration in minutes between draining a node and reimaging it during upgrades","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vmSize":{"name":"vmSize","type":"\u0007","is_mandatory":true,"title":"Size of the node VMs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vmType":{"name":"vmType","type":"\u0007","is_mandatory":true,"title":"Pool VM type (\"VirtualMachineScaleSets\" or \"AvailabilitySet\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vnetSubnetId":{"name":"vnetSubnetId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the subnet the pool nodes are joined to (empty when AKS auto-creates the VNet)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workloadRuntime":{"name":"workloadRuntime","type":"\u0007","is_mandatory":true,"title":"Workload runtime (\"OCIContainer\", \"WasmWasi\", or \"KataMshvVmIsolation\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Kubernetes Service cluster node pool (agent pool)","private":true,"min_provider_version":"13.10.2","defaults":"name mode vmSize count","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.apiManagementService":{"id":"azure.subscription.apiManagementService","name":"azure.subscription.apiManagementService","fields":{"service":{"name":"service","type":"\u001bazure.subscription.apiManagementService.service","title":"Azure API Management service instance","desc":" Examine an API Management gateway service — the multi-tenant API gateway that fronts backend APIs with auth, rate limiting, transforms, and a developer portal. Surfaces the SKU and capacity, virtual-network integration mode (None / External / Internal), public network access state, the NAT gateway toggle, gateway / management / portal / developer-portal / SCM endpoint URLs, the `disableGateway` flag, the `enableClientCertificate` flag for Consumption SKU mTLS, status of the developer and legacy portals, platform version, the custom properties map that encodes the gateway TLS / cipher policy (`Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Protocols.Tls10` etc.), publisher email and name, identity, public / private / outbound IP addresses, the count of private endpoint connections, and the availability zones.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"services":{"name":"services","type":"\u0019\u001bazure.subscription.apiManagementService.service","title":"API Management service instances","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure API Management","desc":" Use this namespace to enumerate the API Management gateway instances configured in the subscription via `services()`. The returned `azure.subscription.apiManagementService.service` resources expose SKU, virtual-network integration mode, public network access, gateway TLS / cipher policy, identity, endpoints, and private endpoint connection state.","private":true,"min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.apiManagementService.service":{"id":"azure.subscription.apiManagementService.service","name":"azure.subscription.apiManagementService.service","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Service creation time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"customProperties":{"name":"customProperties","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Custom properties controlling gateway TLS protocol / cipher policy. Keys like `Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Protocols.Tls10` map to \"True\"/\"False\" string values.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"developerPortalStatus":{"name":"developerPortalStatus","type":"\u0007","is_mandatory":true,"title":"Developer portal status (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"developerPortalUrl":{"name":"developerPortalUrl","type":"\u0007","is_mandatory":true,"title":"Developer portal endpoint URL","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableGateway":{"name":"disableGateway","type":"\u0004","is_mandatory":true,"title":"Whether the gateway is disabled in the master region (multi-region deployments only)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableClientCertificate":{"name":"enableClientCertificate","type":"\u0004","is_mandatory":true,"title":"Whether clients are required to present a TLS certificate on every request (Consumption SKU only)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gatewayRegionalUrl":{"name":"gatewayRegionalUrl","type":"\u0007","is_mandatory":true,"title":"Gateway URL in the default region (set on multi-region deployments)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gatewayUrl":{"name":"gatewayUrl","type":"\u0007","is_mandatory":true,"title":"Gateway URL clients use to call APIs hosted on the service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID of the API Management service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identityType":{"name":"identityType","type":"\u0007","is_mandatory":true,"title":"Identity type (\"None\", \"SystemAssigned\", \"UserAssigned\", \"SystemAssigned, UserAssigned\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"legacyPortalStatus":{"name":"legacyPortalStatus","type":"\u0007","is_mandatory":true,"title":"Legacy portal status (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managementApiUrl":{"name":"managementApiUrl","type":"\u0007","is_mandatory":true,"title":"Management API endpoint URL","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Service name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"natGatewayState":{"name":"natGatewayState","type":"\u0007","is_mandatory":true,"title":"NAT gateway state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notificationSenderEmail":{"name":"notificationSenderEmail","type":"\u0007","is_mandatory":true,"title":"Notification sender email address","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"outboundPublicIpAddresses":{"name":"outboundPublicIpAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Outbound public IPv4 prefixes associated with NAT Gateway-deployed services (Premium SKU on stv2)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"platformVersion":{"name":"platformVersion","type":"\u0007","is_mandatory":true,"title":"Compute platform version running the service (e.g. \"stv2\", \"stv1\", \"mtv1\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"portalUrl":{"name":"portalUrl","type":"\u0007","is_mandatory":true,"title":"Publisher portal endpoint URL (legacy portal)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnectionCount":{"name":"privateEndpointConnectionCount","type":"\u0005","is_mandatory":true,"title":"Number of private endpoint connections to the service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateIpAddresses":{"name":"privateIpAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Private load-balanced IPv4 addresses of the service in its primary region when deployed in an Internal VNet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state (\"Created\", \"Activating\", \"Succeeded\", \"Updating\", \"Failed\", \"Stopped\", \"Terminating\", \"TerminationFailed\", \"Deleted\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIpAddress":{"name":"publicIpAddress","type":"\u001bazure.subscription.networkService.ipAddress","title":"Public IP address attached to the service (null when not configured)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIpAddresses":{"name":"publicIpAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Public load-balanced IPv4 addresses of the service in its primary region (Basic / Standard / Premium / Isolated SKUs)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publisherEmail":{"name":"publisherEmail","type":"\u0007","is_mandatory":true,"title":"Publisher email address used as the From address for notifications","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publisherName":{"name":"publisherName","type":"\u0007","is_mandatory":true,"title":"Publisher display name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scmUrl":{"name":"scmUrl","type":"\u0007","is_mandatory":true,"title":"SCM (source-control management) endpoint URL","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuCapacity":{"name":"skuCapacity","type":"\u0005","is_mandatory":true,"title":"Number of deployed units of the SKU","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"SKU name (\"Developer\", \"Basic\", \"Standard\", \"Premium\", \"Consumption\", \"BasicV2\", \"StandardV2\", \"PremiumV2\", \"Isolated\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"targetProvisioningState":{"name":"targetProvisioningState","type":"\u0007","is_mandatory":true,"title":"Target provisioning state for any in-flight long-running operation (empty when none)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkType":{"name":"virtualNetworkType","type":"\u0007","is_mandatory":true,"title":"Virtual network integration mode (\"None\", \"External\", or \"Internal\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones the service is spread across","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure API Management service instance","desc":" Examine an API Management gateway service — the multi-tenant API gateway that fronts backend APIs with auth, rate limiting, transforms, and a developer portal. Surfaces the SKU and capacity, virtual-network integration mode (None / External / Internal), public network access state, the NAT gateway toggle, gateway / management / portal / developer-portal / SCM endpoint URLs, the `disableGateway` flag, the `enableClientCertificate` flag for Consumption SKU mTLS, status of the developer and legacy portals, platform version, the custom properties map that encodes the gateway TLS / cipher policy (`Microsoft.WindowsAzure.ApiManagement.Gateway.Security.Protocols.Tls10` etc.), publisher email and name, identity, public / private / outbound IP addresses, the count of private endpoint connections, and the availability zones.","min_provider_version":"13.10.2","defaults":"name location skuName provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.authorizationService":{"id":"azure.subscription.authorizationService","name":"azure.subscription.authorizationService","fields":{"classicAdministrator":{"name":"classicAdministrator","type":"\u001bazure.subscription.authorizationService.classicAdministrator","title":"Classic (ASM) administrator — legacy co-admin / service admin grants","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"classicAdministrators":{"name":"classicAdministrators","type":"\u0019\u001bazure.subscription.authorizationService.classicAdministrator","title":"Classic (ASM) co-administrators — legacy admin grants that should normally be zero","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"denyAssignment":{"name":"denyAssignment","type":"\u001bazure.subscription.authorizationService.denyAssignment","title":"Deny assignment in an Azure subscription","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"denyAssignments":{"name":"denyAssignments","type":"\u0019\u001bazure.subscription.authorizationService.denyAssignment","title":"Deny assignments — read-only deny rules that block actions even for owners (e.g., managed-app deny on resources)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedIdentities":{"name":"managedIdentities","type":"\u0019\u001bazure.subscription.managedIdentity","title":"Managed identities","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"roleAssignment":{"name":"roleAssignment","type":"\u001bazure.subscription.authorizationService.roleAssignment","title":"Azure role assignment","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"roleAssignments":{"name":"roleAssignments","type":"\u0019\u001bazure.subscription.authorizationService.roleAssignment","title":"Role assignments","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"roleDefinition":{"name":"roleDefinition","type":"\u001bazure.subscription.authorizationService.roleDefinition","title":"Azure role definition","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"roles":{"name":"roles","type":"\u0019\u001bazure.subscription.authorizationService.roleDefinition","title":"Role definitions for the Azure subscription","min_provider_version":"11.2.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure IAM service","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.authorizationService.classicAdministrator":{"id":"azure.subscription.authorizationService.classicAdministrator","name":"azure.subscription.authorizationService.classicAdministrator","fields":{"emailAddress":{"name":"emailAddress","type":"\u0007","is_mandatory":true,"title":"Email of the classic administrator","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Classic administrator ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name (typically the email)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Role granted (\"ServiceAdministrator\", \"CoAdministrator\", \"AccountAdministrator\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Classic (ASM) administrator — legacy co-admin / service admin grants","private":true,"min_provider_version":"13.5.1","defaults":"emailAddress role","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.authorizationService.denyAssignment":{"id":"azure.subscription.authorizationService.denyAssignment","name":"azure.subscription.authorizationService.denyAssignment","fields":{"denyAssignmentName":{"name":"denyAssignmentName","type":"\u0007","is_mandatory":true,"title":"Display name shown in the portal","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the deny assignment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"doNotApplyToChildScopes":{"name":"doNotApplyToChildScopes","type":"\u0004","is_mandatory":true,"title":"Whether the deny rule does not apply to child scopes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"excludePrincipals":{"name":"excludePrincipals","type":"\u0019\n","is_mandatory":true,"title":"Principals excluded from the deny ([{principalId, principalType}])","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Deny assignment ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isSystemProtected":{"name":"isSystemProtected","type":"\u0004","is_mandatory":true,"title":"Whether the deny rule is system-protected (cannot be removed by users)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Deny assignment name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"permissions":{"name":"permissions","type":"\u0019\n","is_mandatory":true,"title":"Permissions denied (each: { actions, dataActions, notActions, notDataActions, condition })","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"principals":{"name":"principals","type":"\u0019\n","is_mandatory":true,"title":"Principals subject to the deny ([{principalId, principalType}])","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Scope of the deny assignment (subscription/resource group/resource)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Deny assignment in an Azure subscription","private":true,"min_provider_version":"13.5.1","defaults":"name doNotApplyToChildScopes type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.authorizationService.roleAssignment":{"id":"azure.subscription.authorizationService.roleAssignment","name":"azure.subscription.authorizationService.roleAssignment","fields":{"condition":{"name":"condition","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"principalId":{"name":"principalId","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"role":{"name":"role","type":"\u001bazure.subscription.authorizationService.roleDefinition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"updatedAt":{"name":"updatedAt","type":"\t","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure role assignment","private":true,"min_provider_version":"11.2.1","defaults":"principalId type role.name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.authorizationService.roleDefinition":{"id":"azure.subscription.authorizationService.roleDefinition","name":"azure.subscription.authorizationService.roleDefinition","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the role definition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the role definition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the role definition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"permission":{"name":"permission","type":"\u001bazure.subscription.authorizationService.roleDefinition.permission","title":"Azure role definition permission","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"permissions":{"name":"permissions","type":"\u0019\u001bazure.subscription.authorizationService.roleDefinition.permission","title":"Permissions that are attached to the role definition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"Scopes for which the role definition applies","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Role type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure role definition","private":true,"min_provider_version":"11.4.28","defaults":"name type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.authorizationService.roleDefinition.permission":{"id":"azure.subscription.authorizationService.roleDefinition.permission","name":"azure.subscription.authorizationService.roleDefinition.permission","fields":{"allowedActions":{"name":"allowedActions","type":"\u0019\u0007","is_mandatory":true,"title":"List of allowed actions that are attached to the permission","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"allowedDataActions":{"name":"allowedDataActions","type":"\u0019\u0007","is_mandatory":true,"title":"List of allowed data actions that are attached to the permission","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"deniedActions":{"name":"deniedActions","type":"\u0019\u0007","is_mandatory":true,"title":"List of denied actions that are attached to the permission","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"deniedDataActions":{"name":"deniedDataActions","type":"\u0019\u0007","is_mandatory":true,"title":"List of denied data actions that are attached to the permission","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the permission","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure role definition permission","private":true,"min_provider_version":"11.4.28","defaults":"allowedActions deniedActions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.batchService":{"id":"azure.subscription.batchService","name":"azure.subscription.batchService","fields":{"account":{"name":"account","type":"\u001bazure.subscription.batchService.account","title":"Azure Batch account","desc":" Examine an Azure Batch account — the resource-pool and job-scheduling container for HPC and parallel workloads. Surfaces the account's public network access state, the linked auto-storage account, the poolAllocationMode (BatchService or UserSubscription), key vault reference, encryption settings, network profile, the configured node-communication mode, and the batch `pools()` deployed in the account.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"accounts":{"name":"accounts","type":"\u0019\u001bazure.subscription.batchService.account","title":"Batch accounts in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Batch","private":true,"min_provider_version":"11.4.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.batchService.account":{"id":"azure.subscription.batchService.account","name":"azure.subscription.batchService.account","fields":{"accountEndpoint":{"name":"accountEndpoint","type":"\u0007","is_mandatory":true,"title":"Batch account endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"activeJobAndJobScheduleQuota":{"name":"activeJobAndJobScheduleQuota","type":"\u0005","is_mandatory":true,"title":"Batch account active job and job schedule quota","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"allowedAuthenticationModes":{"name":"allowedAuthenticationModes","type":"\u0019\u0007","is_mandatory":true,"title":"Batch account allowed authentication modes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"autoStorage":{"name":"autoStorage","type":"\n","is_mandatory":true,"title":"Batch account auto storage settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dedicatedCoreQuota":{"name":"dedicatedCoreQuota","type":"\u0005","is_mandatory":true,"title":"Batch account dedicated core quota","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dedicatedCoreQuotaPerVmFamily":{"name":"dedicatedCoreQuotaPerVmFamily","type":"\u0019\n","is_mandatory":true,"title":"Batch account dedicated core quota per VM family","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dedicatedCoreQuotaPerVmFamilyEnforced":{"name":"dedicatedCoreQuotaPerVmFamilyEnforced","type":"\u0004","is_mandatory":true,"title":"Whether dedicated core quota per VM family is enforced","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diagnosticSettings":{"name":"diagnosticSettings","type":"\u0019\u001bazure.subscription.monitorService.diagnosticsetting","title":"Batch account diagnostic settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryption":{"name":"encryption","type":"\n","is_mandatory":true,"title":"Batch account encryption settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Batch account ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Batch account identity","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyVaultReference":{"name":"keyVaultReference","type":"\n","is_mandatory":true,"title":"Batch account key vault reference","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Batch account location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lowPriorityCoreQuota":{"name":"lowPriorityCoreQuota","type":"\u0005","is_mandatory":true,"title":"Batch account low priority core quota","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Batch account name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkProfile":{"name":"networkProfile","type":"\n","is_mandatory":true,"title":"Batch account network profile","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nodeManagementEndpoint":{"name":"nodeManagementEndpoint","type":"\u0007","is_mandatory":true,"title":"Batch account node management endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pool":{"name":"pool","type":"\u001bazure.subscription.batchService.account.pool","title":"Azure Batch pool","desc":" Examine a compute pool inside an Azure Batch account. Surfaces the VM size and image, the deployment configuration (cloud-services or VM-based), scale settings (fixed or auto), per-node start tasks, network configuration, allocation state, target dedicated and low-priority node counts, and the certificates and applications installed on pool nodes.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"poolAllocationMode":{"name":"poolAllocationMode","type":"\u0007","is_mandatory":true,"title":"Batch account pool allocation mode","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"poolQuota":{"name":"poolQuota","type":"\u0005","is_mandatory":true,"title":"Batch account pool quota","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pools":{"name":"pools","type":"\u0019\u001bazure.subscription.batchService.account.pool","title":"Batch account pools","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\n","is_mandatory":true,"title":"Batch account private endpoint connections","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Batch account properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Batch account provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Batch account public network access level","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Batch account tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Batch account type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Batch account","desc":" Examine an Azure Batch account — the resource-pool and job-scheduling container for HPC and parallel workloads. Surfaces the account's public network access state, the linked auto-storage account, the poolAllocationMode (BatchService or UserSubscription), key vault reference, encryption settings, network profile, the configured node-communication mode, and the batch `pools()` deployed in the account.","min_provider_version":"11.4.0","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.batchService.account.pool":{"id":"azure.subscription.batchService.account.pool","name":"azure.subscription.batchService.account.pool","fields":{"deploymentConfiguration":{"name":"deploymentConfiguration","type":"\n","is_mandatory":true,"title":"Pool deployment configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskCustomerManagedKeyEnabled":{"name":"diskCustomerManagedKeyEnabled","type":"\u0004","is_mandatory":true,"title":"Whether customer-managed keys are used for disk encryption","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskEncryptionTargets":{"name":"diskEncryptionTargets","type":"\u0019\u0007","is_mandatory":true,"title":"Disk encryption targets (\"OsDisk\", \"TemporaryDisk\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Pool etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostEndpointProtectionMode":{"name":"hostEndpointProtectionMode","type":"\u0007","is_mandatory":true,"title":"Host endpoint protection mode for IMDS: \"Audit\" or \"Enforce\"","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Pool resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Pool identity configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Pool name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Pool configuration settings including scale, network, and task scheduling options","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Pool provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"proxyAgentEnabled":{"name":"proxyAgentEnabled","type":"\u0004","is_mandatory":true,"title":"Whether proxy agent is enabled on pool VMs","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityEncryptionType":{"name":"securityEncryptionType","type":"\u0007","is_mandatory":true,"title":"Security encryption type for confidential computing (e.g., \"DiskWithVMGuestState\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Pool resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualMachineConfiguration":{"name":"virtualMachineConfiguration","type":"\n","is_mandatory":true,"title":"Pool virtual machine configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vmSize":{"name":"vmSize","type":"\u0007","is_mandatory":true,"title":"Pool virtual machine size","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Batch pool","desc":" Examine a compute pool inside an Azure Batch account. Surfaces the VM size and image, the deployment configuration (cloud-services or VM-based), scale settings (fixed or auto), per-node start tasks, network configuration, allocation state, target dedicated and low-priority node counts, and the certificates and applications installed on pool nodes.","min_provider_version":"11.4.0","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cacheService":{"id":"azure.subscription.cacheService","name":"azure.subscription.cacheService","fields":{"redis":{"name":"redis","type":"\u0019\u001bazure.subscription.cacheService.redisInstance","title":"List of redis caches","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"redisInstance":{"name":"redisInstance","type":"\u001bazure.subscription.cacheService.redisInstance","title":"Azure Cache for Redis instance","desc":" Examine an Azure Cache for Redis instance. Surfaces the SKU and tier (Basic, Standard, Premium, Enterprise), the Redis version, host name and ports (SSL and non-SSL), the `enableNonSslPort` flag, public network access, the configured `redisConfiguration` (maxmemory policy, eviction, AOF/RDB persistence), TLS minimum version, identity assignments, replicas per master, shard count for clustered Premium tiers, and the virtual-network or private-endpoint placement.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cache for Redis","private":true,"min_provider_version":"11.4.4","defaults":"subscriptionId","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cacheService.redisInstance":{"id":"azure.subscription.cacheService.redisInstance","name":"azure.subscription.cacheService.redisInstance","fields":{"enableNonSslPort":{"name":"enableNonSslPort","type":"\u0004","is_mandatory":true,"title":"Specifies whether the non-ssl Redis server port (6379) is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionKey":{"name":"encryptionKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for customer-managed encryption (null if platform-managed)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewallRule":{"name":"firewallRule","type":"\u001bazure.subscription.cacheService.redisInstance.firewallRule","title":"Azure Cache for Redis firewall rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"firewallRules":{"name":"firewallRules","type":"\u0019\u001bazure.subscription.cacheService.redisInstance.firewallRule","title":"Firewall rules for the Redis cache","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostName":{"name":"hostName","type":"\u0007","is_mandatory":true,"title":"Redis host name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the Redis cache","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Managed identity information","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Location of the Redis cache","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimumTlsVersion":{"name":"minimumTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version required by the Redis cache","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the Redis cache","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"patchSchedule":{"name":"patchSchedule","type":"\u001bazure.subscription.cacheService.redisInstance.patchSchedule","title":"Azure Cache for Redis patch schedule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"patchSchedules":{"name":"patchSchedules","type":"\u0019\u001bazure.subscription.cacheService.redisInstance.patchSchedule","title":"Patch schedules for the Redis cache","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Redis port (non-SSL)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnection":{"name":"privateEndpointConnection","type":"\u001bazure.subscription.cacheService.redisInstance.privateEndpointConnection","title":"Azure Cache for Redis private endpoint connection","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.cacheService.redisInstance.privateEndpointConnection","title":"Private endpoint connections for the Redis cache","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Properties of the Redis cache","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state with possible values Creating, Deleting, Failed, Succeeded, Updating","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"publicNetworkAccess possible values are \"Enabled\" and \"Disabled\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"redisConfiguration":{"name":"redisConfiguration","type":"\n","is_mandatory":true,"title":"Redis configuration settings (maxmemory-policy, persistence, auth, etc.)","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"redisVersion":{"name":"redisVersion","type":"\u0007","is_mandatory":true,"title":"Redis version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicasPerMaster":{"name":"replicasPerMaster","type":"\u0005","is_mandatory":true,"title":"Number of replicas per master","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicasPerPrimary":{"name":"replicasPerPrimary","type":"\u0005","is_mandatory":true,"title":"Number of replicas per primary","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"shardCount":{"name":"shardCount","type":"\u0005","is_mandatory":true,"title":"Number of shards (Premium Cluster Cache only)","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"SKU information for the Redis cache","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sslPort":{"name":"sslPort","type":"\u0005","is_mandatory":true,"title":"Redis SSL port","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"staticIp":{"name":"staticIp","type":"\u0007","is_mandatory":true,"title":"Static IP address (when deployed in a VNet)","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnetId":{"name":"subnetId","type":"\u0007","is_mandatory":true,"title":"Subnet ID for VNet-injected caches","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Tags of redis cache","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type of the Redis cache","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones for the cache","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cache for Redis instance","desc":" Examine an Azure Cache for Redis instance. Surfaces the SKU and tier (Basic, Standard, Premium, Enterprise), the Redis version, host name and ports (SSL and non-SSL), the `enableNonSslPort` flag, public network access, the configured `redisConfiguration` (maxmemory policy, eviction, AOF/RDB persistence), TLS minimum version, identity assignments, replicas per master, shard count for clustered Premium tiers, and the virtual-network or private-endpoint placement.","min_provider_version":"11.4.4","defaults":"id hostName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cacheService.redisInstance.firewallRule":{"id":"azure.subscription.cacheService.redisInstance.firewallRule","name":"azure.subscription.cacheService.redisInstance.firewallRule","fields":{"endIpAddress":{"name":"endIpAddress","type":"\u0007","is_mandatory":true,"title":"Highest IP address in the range","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"startIpAddress":{"name":"startIpAddress","type":"\u0007","is_mandatory":true,"title":"Lowest IP address in the range","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Firewall rule type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cache for Redis firewall rule","private":true,"min_provider_version":"11.4.32","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cacheService.redisInstance.patchSchedule":{"id":"azure.subscription.cacheService.redisInstance.patchSchedule","name":"azure.subscription.cacheService.redisInstance.patchSchedule","fields":{"entries":{"name":"entries","type":"\u0019\n","is_mandatory":true,"title":"List of schedule entries (dayOfWeek, startHourUtc, maintenanceWindow)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Patch schedule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Patch schedule location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Patch schedule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cache for Redis patch schedule","private":true,"min_provider_version":"11.4.32","defaults":"name entries","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cacheService.redisInstance.privateEndpointConnection":{"id":"azure.subscription.cacheService.redisInstance.privateEndpointConnection","name":"azure.subscription.cacheService.redisInstance.privateEndpointConnection","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Reason for approval/rejection of the connection","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Private endpoint connection ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Private endpoint connection name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpoint":{"name":"privateEndpoint","type":"\u001bazure.subscription.networkService.privateEndpoint","title":"Associated private endpoint","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointId":{"name":"privateEndpointId","type":"\u0007","is_mandatory":true,"title":"DEPRECATED: use privateEndpoint instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state. Possible values: \"Succeeded\", \"Creating\", \"Deleting\", \"Failed\", \"Updating\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Connection status (Approved, Pending, Rejected)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Private endpoint connection type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cache for Redis private endpoint connection","private":true,"min_provider_version":"11.4.32","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService":{"id":"azure.subscription.cloudDefenderService","name":"azure.subscription.cloudDefenderService","fields":{"defenderCSPM":{"name":"defenderCSPM","type":"\u001bazure.subscription.cloudDefenderService.defenderCSPM","title":"Microsoft Defender Cloud Security Posture Management (CSPM) configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defenderForApis":{"name":"defenderForApis","type":"\u001bazure.subscription.cloudDefenderService.defenderForApis","title":"Microsoft Defender for APIs configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defenderForAppServices":{"name":"defenderForAppServices","type":"\n","title":"DEPRECATED: use \"forAppServices\" instead. Microsoft Defender for App Service configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForContainers":{"name":"defenderForContainers","type":"\n","title":"DEPRECATED: use \"forContainers\" instead. Defender for Containers components configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForCosmosDb":{"name":"defenderForCosmosDb","type":"\n","title":"DEPRECATED: use \"forCosmosDb\" instead. Microsoft Defender for Azure Cosmos DB configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForKeyVaults":{"name":"defenderForKeyVaults","type":"\n","title":"DEPRECATED: use \"forKeyVaults\" instead. Microsoft Defender for Key Vault configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForOpenSourceDatabases":{"name":"defenderForOpenSourceDatabases","type":"\n","title":"DEPRECATED: use \"forOpenSourceDatabases\" instead. Microsoft Defender for open-source relational databases configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForResourceManager":{"name":"defenderForResourceManager","type":"\n","title":"DEPRECATED: use \"forResourceManager\" instead. Microsoft Defender for Resource Manager configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForServers":{"name":"defenderForServers","type":"\n","title":"DEPRECATED: use \"forServers\" instead. List of Defender for Servers components and whether they are enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForSqlDatabases":{"name":"defenderForSqlDatabases","type":"\n","title":"DEPRECATED: use \"forSqlDatabases\" instead. Microsoft Defender for Azure SQL Databases configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForSqlServersOnMachines":{"name":"defenderForSqlServersOnMachines","type":"\n","title":"DEPRECATED: use \"forSqlServersOnMachines\" instead. Microsoft Defender for SQL servers on machines configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"defenderForStorageAccounts":{"name":"defenderForStorageAccounts","type":"\n","title":"DEPRECATED: use \"forStorageAccounts\" instead. Microsoft Defender for Storage Accounts configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"forAppServices":{"name":"forAppServices","type":"\u001bazure.subscription.cloudDefenderService.defenderForAppServices","title":"Microsoft Defender for App Service configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forContainers":{"name":"forContainers","type":"\u001bazure.subscription.cloudDefenderService.defenderForContainers","title":"Defender for Containers components configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forCosmosDb":{"name":"forCosmosDb","type":"\u001bazure.subscription.cloudDefenderService.defenderForCosmosDb","title":"Microsoft Defender for Azure Cosmos DB configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forKeyVaults":{"name":"forKeyVaults","type":"\u001bazure.subscription.cloudDefenderService.defenderForKeyVaults","title":"Microsoft Defender for Key Vault configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forOpenSourceDatabases":{"name":"forOpenSourceDatabases","type":"\u001bazure.subscription.cloudDefenderService.defenderForOpenSourceDatabases","title":"Microsoft Defender for open-source relational databases configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forResourceManager":{"name":"forResourceManager","type":"\u001bazure.subscription.cloudDefenderService.defenderForResourceManager","title":"Microsoft Defender for Resource Manager configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forServers":{"name":"forServers","type":"\u001bazure.subscription.cloudDefenderService.defenderForServers","title":"List of Defender for Servers components and whether they are enabled","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forSqlDatabases":{"name":"forSqlDatabases","type":"\u001bazure.subscription.cloudDefenderService.defenderForSqlDatabases","title":"Microsoft Defender for Azure SQL Databases configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forSqlServersOnMachines":{"name":"forSqlServersOnMachines","type":"\u001bazure.subscription.cloudDefenderService.defenderForSqlServersOnMachines","title":"Microsoft Defender for SQL servers on machines configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forStorageAccounts":{"name":"forStorageAccounts","type":"\u001bazure.subscription.cloudDefenderService.defenderForStorageAccounts","title":"Microsoft Defender for Storage Accounts configuration","min_provider_version":"11.6.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"monitoringAgentAutoProvision":{"name":"monitoringAgentAutoProvision","type":"\u0004","title":"Whether the monitoring agent is automatically provisioned on new VMs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"regulatoryComplianceControl":{"name":"regulatoryComplianceControl","type":"\u001bazure.subscription.cloudDefenderService.regulatoryComplianceControl","title":"Microsoft Defender regulatory compliance control","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"regulatoryComplianceStandard":{"name":"regulatoryComplianceStandard","type":"\u001bazure.subscription.cloudDefenderService.regulatoryComplianceStandard","title":"Microsoft Defender regulatory compliance standard","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"regulatoryComplianceStandards":{"name":"regulatoryComplianceStandards","type":"\u0019\u001bazure.subscription.cloudDefenderService.regulatoryComplianceStandard","title":"Regulatory compliance standards","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secureScore":{"name":"secureScore","type":"\u001bazure.subscription.cloudDefenderService.secureScore","title":"Microsoft Defender secure score","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"secureScoreControl":{"name":"secureScoreControl","type":"\u001bazure.subscription.cloudDefenderService.secureScoreControl","title":"Microsoft Defender secure score control","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"secureScoreControls":{"name":"secureScoreControls","type":"\u0019\u001bazure.subscription.cloudDefenderService.secureScoreControl","title":"Secure score controls with details","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secureScores":{"name":"secureScores","type":"\u0019\u001bazure.subscription.cloudDefenderService.secureScore","title":"Secure scores for the subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityContact":{"name":"securityContact","type":"\u001bazure.subscription.cloudDefenderService.securityContact","title":"Microsoft Defender for Cloud security contact","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"securityContacts":{"name":"securityContacts","type":"\u0019\u001bazure.subscription.cloudDefenderService.securityContact","title":"List of configured security contacts","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"settings":{"name":"settings","type":"\u001bazure.subscription.cloudDefenderService.settings","title":"Microsoft Defender for Cloud security settings","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"settingsMCAS":{"name":"settingsMCAS","type":"\u001bazure.subscription.cloudDefenderService.settings","title":"Settings for MCAS","min_provider_version":"11.3.31","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"settingsSentinel":{"name":"settingsSentinel","type":"\u001bazure.subscription.cloudDefenderService.settings","title":"Settings for Sentinel","min_provider_version":"11.3.31","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"settingsWDATP":{"name":"settingsWDATP","type":"\u001bazure.subscription.cloudDefenderService.settings","title":"Settings for WDATP","min_provider_version":"11.3.31","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Cloud","private":true,"min_provider_version":"9.0.1","defaults":"defenderForServers.enabled defenderForContainers.enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderCSPM":{"id":"azure.subscription.cloudDefenderService.defenderCSPM","name":"azure.subscription.cloudDefenderService.defenderCSPM","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender CSPM is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"extension":{"name":"extension","type":"\u001bazure.subscription.cloudDefenderService.defenderCSPM.extension","title":"Microsoft Defender CSPM extension","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"extensions":{"name":"extensions","type":"\u0019\u001bazure.subscription.cloudDefenderService.defenderCSPM.extension","title":"Extensions configured for Defender CSPM","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender Cloud Security Posture Management (CSPM)","private":true,"min_provider_version":"11.4.21","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderCSPM.extension":{"id":"azure.subscription.cloudDefenderService.defenderCSPM.extension","name":"azure.subscription.cloudDefenderService.defenderCSPM.extension","fields":{"additionalProperties":{"name":"additionalProperties","type":"\n","is_mandatory":true,"title":"Additional extension properties","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the extension is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Extension name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"operationStatusCode":{"name":"operationStatusCode","type":"\u0007","is_mandatory":true,"title":"Status code of the enablement/disablement operation (Succeeded or Failed)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"operationStatusMessage":{"name":"operationStatusMessage","type":"\u0007","is_mandatory":true,"title":"Status message of the enablement/disablement operation","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender CSPM extension","private":true,"min_provider_version":"11.4.21","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForApis":{"id":"azure.subscription.cloudDefenderService.defenderForApis","name":"azure.subscription.cloudDefenderService.defenderForApis","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for APIs is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for APIs","private":true,"min_provider_version":"11.4.21","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForAppServices":{"id":"azure.subscription.cloudDefenderService.defenderForAppServices","name":"azure.subscription.cloudDefenderService.defenderForAppServices","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for App Service is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for App Service","private":true,"min_provider_version":"11.1.0","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForContainers":{"id":"azure.subscription.cloudDefenderService.defenderForContainers","name":"azure.subscription.cloudDefenderService.defenderForContainers","fields":{"azurePolicyForKubernetes":{"name":"azurePolicyForKubernetes","type":"\u0004","is_mandatory":true,"title":"Whether Azure Policy for Kubernetes is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defenderDaemonSet":{"name":"defenderDaemonSet","type":"\u0004","is_mandatory":true,"title":"Whether the Defender DaemonSet is deployed","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for Containers is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"extension":{"name":"extension","type":"\u001bazure.subscription.cloudDefenderService.defenderForContainers.extension","title":"Microsoft Defender for Containers extension","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"extensions":{"name":"extensions","type":"\u0019\u001bazure.subscription.cloudDefenderService.defenderForContainers.extension","title":"Extensions configured for Defender for Containers","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Containers","private":true,"min_provider_version":"9.0.1","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForContainers.extension":{"id":"azure.subscription.cloudDefenderService.defenderForContainers.extension","name":"azure.subscription.cloudDefenderService.defenderForContainers.extension","fields":{"additionalProperties":{"name":"additionalProperties","type":"\n","is_mandatory":true,"title":"Additional extension properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the extension is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Extension name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"operationStatusCode":{"name":"operationStatusCode","type":"\u0007","is_mandatory":true,"title":"Status code of the enablement/disablement operation (Succeeded or Failed)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"operationStatusMessage":{"name":"operationStatusMessage","type":"\u0007","is_mandatory":true,"title":"Status message of the enablement/disablement operation","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Containers extension","private":true,"min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForCosmosDb":{"id":"azure.subscription.cloudDefenderService.defenderForCosmosDb","name":"azure.subscription.cloudDefenderService.defenderForCosmosDb","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for Azure Cosmos DB is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Azure Cosmos DB","private":true,"min_provider_version":"11.1.0","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForKeyVaults":{"id":"azure.subscription.cloudDefenderService.defenderForKeyVaults","name":"azure.subscription.cloudDefenderService.defenderForKeyVaults","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for Key Vault is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Key Vault","private":true,"min_provider_version":"11.1.0","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForOpenSourceDatabases":{"id":"azure.subscription.cloudDefenderService.defenderForOpenSourceDatabases","name":"azure.subscription.cloudDefenderService.defenderForOpenSourceDatabases","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for open-source relational databases is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for open-source relational databases","private":true,"min_provider_version":"11.1.0","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForResourceManager":{"id":"azure.subscription.cloudDefenderService.defenderForResourceManager","name":"azure.subscription.cloudDefenderService.defenderForResourceManager","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for Resource Manager is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Resource Manager","private":true,"min_provider_version":"11.1.0","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForServers":{"id":"azure.subscription.cloudDefenderService.defenderForServers","name":"azure.subscription.cloudDefenderService.defenderForServers","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for Servers is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vulnerabilityManagementToolName":{"name":"vulnerabilityManagementToolName","type":"\u0007","is_mandatory":true,"title":"Name of the vulnerability management tool in use","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Servers","private":true,"min_provider_version":"9.0.1","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForSqlDatabases":{"id":"azure.subscription.cloudDefenderService.defenderForSqlDatabases","name":"azure.subscription.cloudDefenderService.defenderForSqlDatabases","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for Azure SQL Databases is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Azure SQL Databases","private":true,"min_provider_version":"11.1.0","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForSqlServersOnMachines":{"id":"azure.subscription.cloudDefenderService.defenderForSqlServersOnMachines","name":"azure.subscription.cloudDefenderService.defenderForSqlServersOnMachines","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for SQL servers on machines is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for SQL servers on machines","private":true,"min_provider_version":"11.1.0","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.defenderForStorageAccounts":{"id":"azure.subscription.cloudDefenderService.defenderForStorageAccounts","name":"azure.subscription.cloudDefenderService.defenderForStorageAccounts","fields":{"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the pricing plan is deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Defender for Storage Accounts is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablementTime":{"name":"enablementTime","type":"\t","is_mandatory":true,"title":"When the pricing tier was last set to Standard","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforce":{"name":"enforce","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is enforced on child scopes","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"freeTrialRemainingTime":{"name":"freeTrialRemainingTime","type":"\u0007","is_mandatory":true,"title":"ISO 8601 duration of the free trial remaining","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inherited":{"name":"inherited","type":"\u0004","is_mandatory":true,"title":"Whether the pricing configuration is inherited from a parent scope","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inheritedFrom":{"name":"inheritedFrom","type":"\u0007","is_mandatory":true,"title":"ID of the parent scope from which the configuration is inherited","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"pricingTier":{"name":"pricingTier","type":"\u0007","is_mandatory":true,"title":"Pricing tier (Free or Standard)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacedBy":{"name":"replacedBy","type":"\u0019\u0007","is_mandatory":true,"title":"List of plan IDs that replace this plan if deprecated","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourcesCoverageStatus":{"name":"resourcesCoverageStatus","type":"\u0007","is_mandatory":true,"title":"Coverage status of resources under this plan (FullyCovered, NotCovered, PartiallyCovered)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subPlan":{"name":"subPlan","type":"\u0007","is_mandatory":true,"title":"Sub-plan selected for the pricing tier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Storage Accounts","private":true,"min_provider_version":"11.1.0","defaults":"enabled pricingTier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.regulatoryComplianceControl":{"id":"azure.subscription.cloudDefenderService.regulatoryComplianceControl","name":"azure.subscription.cloudDefenderService.regulatoryComplianceControl","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Control description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"failedAssessments":{"name":"failedAssessments","type":"\u0005","is_mandatory":true,"title":"Number of failed assessments","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Regulatory compliance control ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Control name/ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"passedAssessments":{"name":"passedAssessments","type":"\u0005","is_mandatory":true,"title":"Number of passed assessments","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skippedAssessments":{"name":"skippedAssessments","type":"\u0005","is_mandatory":true,"title":"Number of skipped assessments","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Aggregative state (Passed, Failed, Skipped, Unsupported)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender regulatory compliance control","private":true,"min_provider_version":"13.3.3","defaults":"name state passedAssessments failedAssessments","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.regulatoryComplianceStandard":{"id":"azure.subscription.cloudDefenderService.regulatoryComplianceStandard","name":"azure.subscription.cloudDefenderService.regulatoryComplianceStandard","fields":{"controls":{"name":"controls","type":"\u0019\u001bazure.subscription.cloudDefenderService.regulatoryComplianceControl","title":"Controls within this standard","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"failedControls":{"name":"failedControls","type":"\u0005","is_mandatory":true,"title":"Number of failed controls","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Regulatory compliance standard ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Standard name (e.g. \"CIS Microsoft Azure Foundations Benchmark 1.4.0\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"passedControls":{"name":"passedControls","type":"\u0005","is_mandatory":true,"title":"Number of passed controls","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skippedControls":{"name":"skippedControls","type":"\u0005","is_mandatory":true,"title":"Number of skipped controls","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Aggregative state (Passed, Failed, Skipped, Unsupported)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender regulatory compliance standard","private":true,"min_provider_version":"13.3.3","defaults":"name state passedControls failedControls","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.secureScore":{"id":"azure.subscription.cloudDefenderService.secureScore","name":"azure.subscription.cloudDefenderService.secureScore","fields":{"currentScore":{"name":"currentScore","type":"\u0006","is_mandatory":true,"title":"Current score","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name of the secure score","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Secure score ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxScore":{"name":"maxScore","type":"\u0005","is_mandatory":true,"title":"Maximum possible score","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Secure score name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"percentage":{"name":"percentage","type":"\u0006","is_mandatory":true,"title":"Score as a percentage (0.0-1.0)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"weight":{"name":"weight","type":"\u0005","is_mandatory":true,"title":"Weight of the score","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender secure score","private":true,"min_provider_version":"13.3.3","defaults":"displayName currentScore maxScore percentage","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.secureScoreControl":{"id":"azure.subscription.cloudDefenderService.secureScoreControl","name":"azure.subscription.cloudDefenderService.secureScoreControl","fields":{"currentScore":{"name":"currentScore","type":"\u0006","is_mandatory":true,"title":"Current score for this control","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Control description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Control display name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"healthyResourceCount":{"name":"healthyResourceCount","type":"\u0005","is_mandatory":true,"title":"Number of healthy resources","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Secure score control ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxScore":{"name":"maxScore","type":"\u0005","is_mandatory":true,"title":"Maximum possible score for this control","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Secure score control name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notApplicableResourceCount":{"name":"notApplicableResourceCount","type":"\u0005","is_mandatory":true,"title":"Number of not-applicable resources","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"percentage":{"name":"percentage","type":"\u0006","is_mandatory":true,"title":"Score as a percentage (0.0-1.0)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"unhealthyResourceCount":{"name":"unhealthyResourceCount","type":"\u0005","is_mandatory":true,"title":"Number of unhealthy resources","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"weight":{"name":"weight","type":"\u0005","is_mandatory":true,"title":"Weight of the control","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender secure score control","private":true,"min_provider_version":"13.3.3","defaults":"displayName currentScore maxScore","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.securityContact":{"id":"azure.subscription.cloudDefenderService.securityContact","name":"azure.subscription.cloudDefenderService.securityContact","fields":{"emails":{"name":"emails","type":"\u0019\u0007","is_mandatory":true,"title":"Emails that receive security alerts","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the security contact","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isEnabled":{"name":"isEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the security contact is enabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the security contact","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notificationSources":{"name":"notificationSources","type":"\n","is_mandatory":true,"title":"A collection of sources which evaluate the email notification","min_provider_version":"11.3.31","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notificationsByRole":{"name":"notificationsByRole","type":"\n","is_mandatory":true,"title":"Notifications by role settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"phone":{"name":"phone","type":"\u0007","is_mandatory":true,"title":"Phone number of the security contact","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Cloud security contact","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cloudDefenderService.settings":{"id":"azure.subscription.cloudDefenderService.settings","name":"azure.subscription.cloudDefenderService.settings","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"The settings kind (data export, alert sync, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The settings name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"The properties dict (enabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"The settings type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Microsoft Defender for Cloud security settings","private":true,"min_provider_version":"11.3.31","defaults":"name kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService":{"id":"azure.subscription.computeService","name":"azure.subscription.computeService","fields":{"dedicatedHost":{"name":"dedicatedHost","type":"\u001bazure.subscription.computeService.dedicatedHost","title":"Azure Dedicated Host","desc":" Examine a physical server reserved for a single tenant inside an Azure Dedicated Host Group. Surfaces the SKU, fault domain, license type, host's auto-replace-on-failure setting, the VMs currently placed on the host, the `instanceView` reporting allocation status and capacity, and the platform-fault-domain assignment.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"dedicatedHostGroup":{"name":"dedicatedHostGroup","type":"\u001bazure.subscription.computeService.dedicatedHostGroup","title":"Azure Dedicated Host Group","desc":" Examine a single-tenant placement scope for Azure Dedicated Hosts. Surfaces the platform-fault-domain count, the supported availability zones, the `supportAutomaticPlacement` flag, and any ultraSSD support exposed by the group. Use the `hosts()` collection for the individual physical servers reserved through this group.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"dedicatedHostGroups":{"name":"dedicatedHostGroups","type":"\u0019\u001bazure.subscription.computeService.dedicatedHostGroup","title":"All dedicated host groups under a subscription","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disk":{"name":"disk","type":"\u001bazure.subscription.computeService.disk","title":"Azure managed disk","desc":" Examine an Azure managed disk attached to a VM, scale set, or available for attachment. Surfaces the disk SKU and tier, OS type, disk size and IOPS, the disk state (Unattached, Attached, Reserved, ActiveSAS, ReadyToUpload, ActiveUpload), encryption settings (platform-managed, customer-managed via diskEncryptionSet, or double-encryption), network access policy, public network access, the source from which the disk was created, and any attached VM.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"diskAccess":{"name":"diskAccess","type":"\u001bazure.subscription.computeService.diskAccess","title":"Azure disk access resource","desc":" Examine a private-endpoint configuration that managed disks and snapshots can be exported and imported through. Surfaces the `provisioningState`, the `extendedLocation` if the resource lives in an Azure Edge Zone, and the time the access was created and last modified. Disks reference a disk-access by ARM ID through their `networkAccessPolicy` to keep export/import traffic off the public internet.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"diskAccesses":{"name":"diskAccesses","type":"\u0019\u001bazure.subscription.computeService.diskAccess","title":"All disk access resources under a subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskEncryptionSet":{"name":"diskEncryptionSet","type":"\u001bazure.subscription.computeService.diskEncryptionSet","title":"Azure disk encryption set","desc":" Examine a customer-managed key configuration that managed disks and snapshots reference for envelope encryption. Surfaces the `encryptionType` (EncryptionAtRestWithCustomerKey, EncryptionAtRestWithPlatformAndCustomerKeys, or ConfidentialVmEncryptedWithCustomerKey), the active and rotation-to Key Vault key URLs, the system or user-assigned identity used to access the vault, the auto-key-rotation flag, and the federated client ID when one is configured.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"diskEncryptionSets":{"name":"diskEncryptionSets","type":"\u0019\u001bazure.subscription.computeService.diskEncryptionSet","title":"All disk encryption sets under a subscription","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disks":{"name":"disks","type":"\u0019\u001bazure.subscription.computeService.disk","title":"All the disks under a subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"galleries":{"name":"galleries","type":"\u0019\u001bazure.subscription.computeService.gallery","title":"All Compute Galleries (Shared Image Galleries) under a subscription","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gallery":{"name":"gallery","type":"\u001bazure.subscription.computeService.gallery","title":"Azure Compute Gallery","desc":" Examine a Compute Gallery (formerly Shared Image Gallery) — the versioned image-distribution scope inside a subscription. Surfaces the gallery description, identifier, the `sharingProfile` (private, community, or groups), the soft-delete state, and the `images()` defined in the gallery so audits can traverse from gallery to image definition to image version.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"hybridMachine":{"name":"hybridMachine","type":"\u001bazure.subscription.computeService.hybridMachine","title":"Azure Arc-enabled server","desc":" Examine an Azure Arc-enabled server (Microsoft.HybridCompute/machines) — an on-premises or other-cloud machine projected into Azure for management. Surfaces the agent status (Connected, Disconnected, Expired), agent version, OS name and version, last status check, machine identity, attached extensions, private link scope, and the `cloudMetadata` describing the underlying environment when the machine is hosted on AWS, GCP, VMware, or another cloud.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"hybridMachines":{"name":"hybridMachines","type":"\u0019\u001bazure.subscription.computeService.hybridMachine","title":"All Azure Arc-enabled servers (Microsoft.HybridCompute/machines) under a subscription","min_provider_version":"13.10.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"image":{"name":"image","type":"\u001bazure.subscription.computeService.image","title":"Azure managed image","desc":" Examine a custom VM image stored as a single Azure resource. Surfaces the storage profile (OS disk and data disks), the `hyperVGeneration` (V1 or V2), the source virtual machine the image was generalized from, and the provisioning state. Compute Galleries (`gallery()`) are the preferred mechanism for versioned image distribution; managed images remain useful for single-resource captures.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"images":{"name":"images","type":"\u0019\u001bazure.subscription.computeService.image","title":"All managed images under a subscription","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"proximityPlacementGroup":{"name":"proximityPlacementGroup","type":"\u001bazure.subscription.computeService.proximityPlacementGroup","title":"Azure Proximity Placement Group","desc":" Examine a co-location scope for Azure compute resources. Surfaces the placement-group type (Standard or Ultra), the supported availability zones, the colocation status, and the lists of VMs, virtual-machine scale sets, and availability sets currently bound to the group so they share low-latency network locality.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"proximityPlacementGroups":{"name":"proximityPlacementGroups","type":"\u0019\u001bazure.subscription.computeService.proximityPlacementGroup","title":"All proximity placement groups under a subscription","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"snapshot":{"name":"snapshot","type":"\u001bazure.subscription.computeService.snapshot","title":"Azure managed disk snapshot","desc":" Examine a point-in-time snapshot of an Azure managed disk. Surfaces the snapshot SKU and tier, OS type, allocated and used size, the `diskState`, the source resource the snapshot was created from, the `incremental` flag (incremental vs full), encryption settings (platform-managed, customer-managed via diskEncryptionSet, or confidential-VM encryption), the network access policy, public network access, and any active SAS export for downloading the underlying VHD.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"snapshots":{"name":"snapshots","type":"\u0019\u001bazure.subscription.computeService.snapshot","title":"All managed disk snapshots under a subscription","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vm":{"name":"vm","type":"\u001bazure.subscription.computeService.vm","title":"Azure virtual machine","desc":" Examine an Azure Compute Engine VM and the security-relevant configuration around it. Surfaces the VM size, OS profile, storage profile (OS and data disks), network profile and attached `interfaces()`, identity assignments, applied tags, the availability/zone/proximity-placement-group placement, the boot diagnostics and security profile (TrustedLaunch / ConfidentialVM, SecureBoot, vTPM), the `extensions()` installed on the VM, OS patching state, and the deployed extensions for ASC, Defender, and guest configuration.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"vmScaleSet":{"name":"vmScaleSet","type":"\u001bazure.subscription.computeService.vmScaleSet","title":"Azure Virtual Machine Scale Set","desc":" Examine a Virtual Machine Scale Set — the abstraction Azure uses to deploy and manage a group of identical VMs. Surfaces the `orchestrationMode` (Uniform or Flexible), the SKU and capacity, the network and OS profiles applied to instances, upgrade policy (Manual, Automatic, Rolling), automatic-OS-upgrade and rolling upgrade policy, the spot priority and eviction settings, identity assignments, the VM-extension profile, the platform-fault-domain count, and the per-instance `instances()` currently provisioned.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"vmScaleSets":{"name":"vmScaleSets","type":"\u0019\u001bazure.subscription.computeService.vmScaleSet","title":"All Virtual Machine Scale Sets under a subscription","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vms":{"name":"vms","type":"\u0019\u001bazure.subscription.computeService.vm","title":"All compute instances under a subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Compute","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.dedicatedHost":{"id":"azure.subscription.computeService.dedicatedHost","name":"azure.subscription.computeService.dedicatedHost","fields":{"autoReplaceOnFailure":{"name":"autoReplaceOnFailure","type":"\u0004","is_mandatory":true,"title":"Whether Azure should replace the host on failure","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostId":{"name":"hostId","type":"\u0007","is_mandatory":true,"title":"Unique ID generated by Azure for the host","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Dedicated host ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"instanceView":{"name":"instanceView","type":"\n","is_mandatory":true,"title":"Instance view (host availability + assets)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"licenseType":{"name":"licenseType","type":"\u0007","is_mandatory":true,"title":"License type (None, WindowsServerHybrid, WindowsServerPerpetual)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Dedicated host location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Dedicated host name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"platformFaultDomain":{"name":"platformFaultDomain","type":"\u0005","is_mandatory":true,"title":"The fault domain of the host within its group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningTime":{"name":"provisioningTime","type":"\t","is_mandatory":true,"title":"When the host was first provisioned","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"Dedicated host SKU (name, tier, family)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Dedicated host tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"When the host was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Dedicated host resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Dedicated Host","desc":" Examine a physical server reserved for a single tenant inside an Azure Dedicated Host Group. Surfaces the SKU, fault domain, license type, host's auto-replace-on-failure setting, the VMs currently placed on the host, the `instanceView` reporting allocation status and capacity, and the platform-fault-domain assignment.","min_provider_version":"13.7.1","defaults":"name sku.name provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.dedicatedHostGroup":{"id":"azure.subscription.computeService.dedicatedHostGroup","name":"azure.subscription.computeService.dedicatedHostGroup","fields":{"additionalCapabilities":{"name":"additionalCapabilities","type":"\n","is_mandatory":true,"title":"Additional capabilities (e.g. UltraSSDEnabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hosts":{"name":"hosts","type":"\u0019\u001bazure.subscription.computeService.dedicatedHost","title":"Dedicated hosts in this group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Dedicated host group ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"instanceView":{"name":"instanceView","type":"\n","is_mandatory":true,"title":"Instance view (status of hosts in the group)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Dedicated host group location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Dedicated host group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"platformFaultDomainCount":{"name":"platformFaultDomainCount","type":"\u0005","is_mandatory":true,"title":"Number of fault domains used by the host group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"supportAutomaticPlacement":{"name":"supportAutomaticPlacement","type":"\u0004","is_mandatory":true,"title":"Whether the group supports automatic placement of VMs and scale set instances","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Dedicated host group tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Dedicated host group resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones for the dedicated host group (single zone supported)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Dedicated Host Group","desc":" Examine a single-tenant placement scope for Azure Dedicated Hosts. Surfaces the platform-fault-domain count, the supported availability zones, the `supportAutomaticPlacement` flag, and any ultraSSD support exposed by the group. Use the `hosts()` collection for the individual physical servers reserved through this group.","min_provider_version":"13.7.1","defaults":"name location platformFaultDomainCount","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.disk":{"id":"azure.subscription.computeService.disk","name":"azure.subscription.computeService.disk","fields":{"availabilityPolicy":{"name":"availabilityPolicy","type":"\n","is_mandatory":true,"title":"Behavior when the disk experiences slow I/O (AutomaticReattach)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"burstingEnabled":{"name":"burstingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether on-demand bursting is enabled for the disk","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataAccessAuthMode":{"name":"dataAccessAuthMode","type":"\u0007","is_mandatory":true,"title":"Data access authentication mode (AzureActiveDirectory, None)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskAccessId":{"name":"diskAccessId","type":"\u0007","is_mandatory":true,"title":"ARM ID of the DiskAccess resource for private endpoint access","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskEncryptionSet":{"name":"diskEncryptionSet","type":"\u001bazure.subscription.computeService.diskEncryptionSet","title":"Disk encryption set used for customer-managed key encryption","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskEncryptionSetId":{"name":"diskEncryptionSetId","type":"\u0007","is_mandatory":true,"title":"ID of the disk encryption set used for customer-managed key encryption","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskIopsReadOnly":{"name":"diskIopsReadOnly","type":"\u0005","is_mandatory":true,"title":"Number of IOPS allowed for read-only operations on shared disks","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskIopsReadWrite":{"name":"diskIopsReadWrite","type":"\u0005","is_mandatory":true,"title":"Number of IOPS allowed for read/write operations","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskMbpsReadOnly":{"name":"diskMbpsReadOnly","type":"\u0005","is_mandatory":true,"title":"Bandwidth in MB/s allowed for read-only operations on shared disks","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskMbpsReadWrite":{"name":"diskMbpsReadWrite","type":"\u0005","is_mandatory":true,"title":"Bandwidth in MB/s allowed for read/write operations","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskSizeBytes":{"name":"diskSizeBytes","type":"\u0005","is_mandatory":true,"title":"Exact size of the disk in bytes","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskState":{"name":"diskState","type":"\u0007","is_mandatory":true,"title":"Current state of the disk (Unattached, Attached, Reserved, ActiveSAS, ReadyToUpload, ActiveUpload, ActiveSASFrozen)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionType":{"name":"encryptionType","type":"\u0007","is_mandatory":true,"title":"Disk encryption type (EncryptionAtRestWithPlatformKey, EncryptionAtRestWithCustomerKey, EncryptionAtRestWithPlatformAndCustomerKeys)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hyperVGeneration":{"name":"hyperVGeneration","type":"\u0007","is_mandatory":true,"title":"Hyper-V generation of the disk (V1, V2)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Disk resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Disk resource location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedBy":{"name":"managedBy","type":"\u0007","is_mandatory":true,"title":"A relative URI containing the ID of the VM that has the disk attached","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedByExtended":{"name":"managedByExtended","type":"\u0019\u0007","is_mandatory":true,"title":"List of relative URIs containing the IDs of the VMs that have the disk attached","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxShares":{"name":"maxShares","type":"\u0005","is_mandatory":true,"title":"Maximum number of VMs that can attach to the disk concurrently","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Disk resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkAccessPolicy":{"name":"networkAccessPolicy","type":"\u0007","is_mandatory":true,"title":"Disk network access policy (AllowAll, AllowPrivate, DenyAll)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Disk resource properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the disk","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled for the disk","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"The disk SKU name and tier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"supportsHibernation":{"name":"supportsHibernation","type":"\u0004","is_mandatory":true,"title":"Whether the disk supports hibernation","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"systemData":{"name":"systemData","type":"\n","is_mandatory":true,"title":"Azure Resource Manager system metadata (createdBy, createdAt, lastModifiedBy)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Disk resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tier":{"name":"tier","type":"\u0007","is_mandatory":true,"title":"Performance tier of the disk (P4, P6, P10, P15, P20, P30, P40, P50, P60, P70, P80)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"When the disk was created","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Disk resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"uniqueId":{"name":"uniqueId","type":"\u0007","is_mandatory":true,"title":"Unique identifier of the disk (128-bit GUID)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"The logical zone list for disk","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure managed disk","desc":" Examine an Azure managed disk attached to a VM, scale set, or available for attachment. Surfaces the disk SKU and tier, OS type, disk size and IOPS, the disk state (Unattached, Attached, Reserved, ActiveSAS, ReadyToUpload, ActiveUpload), encryption settings (platform-managed, customer-managed via diskEncryptionSet, or double-encryption), network access policy, public network access, the source from which the disk was created, and any attached VM.","min_provider_version":"9.0.1","defaults":"name location properties.osType properties.diskSizeGB properties.diskState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.diskAccess":{"id":"azure.subscription.computeService.diskAccess","name":"azure.subscription.computeService.diskAccess","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Disk access ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Disk access location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Disk access name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private endpoint connections","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Disk access tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"When the disk access was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Disk access type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure disk access resource","desc":" Examine a private-endpoint configuration that managed disks and snapshots can be exported and imported through. Surfaces the `provisioningState`, the `extendedLocation` if the resource lives in an Azure Edge Zone, and the time the access was created and last modified. Disks reference a disk-access by ARM ID through their `networkAccessPolicy` to keep export/import traffic off the public internet.","min_provider_version":"13.3.3","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.diskEncryptionSet":{"id":"azure.subscription.computeService.diskEncryptionSet","name":"azure.subscription.computeService.diskEncryptionSet","fields":{"activeKeySourceVaultId":{"name":"activeKeySourceVaultId","type":"\u0007","is_mandatory":true,"title":"Active key source vault ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"activeKeyUrl":{"name":"activeKeyUrl","type":"\u0007","is_mandatory":true,"title":"Active key vault key URL","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionType":{"name":"encryptionType","type":"\u0007","is_mandatory":true,"title":"Encryption type (EncryptionAtRestWithCustomerKey, EncryptionAtRestWithPlatformAndCustomerKeys, ConfidentialVmEncryptedWithCustomerKey)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Disk encryption set ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastKeyRotationTimestamp":{"name":"lastKeyRotationTimestamp","type":"\t","is_mandatory":true,"title":"Last key rotation timestamp","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Disk encryption set location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Disk encryption set name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rotationToLatestKeyVersionEnabled":{"name":"rotationToLatestKeyVersionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether auto key rotation to latest key version is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Disk encryption set tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Disk encryption set type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure disk encryption set","desc":" Examine a customer-managed key configuration that managed disks and snapshots reference for envelope encryption. Surfaces the `encryptionType` (EncryptionAtRestWithCustomerKey, EncryptionAtRestWithPlatformAndCustomerKeys, or ConfidentialVmEncryptedWithCustomerKey), the active and rotation-to Key Vault key URLs, the system or user-assigned identity used to access the vault, the auto-key-rotation flag, and the federated client ID when one is configured.","min_provider_version":"13.3.3","defaults":"name location encryptionType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.gallery":{"id":"azure.subscription.computeService.gallery","name":"azure.subscription.computeService.gallery","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Gallery description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Gallery ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"image":{"name":"image","type":"\u001bazure.subscription.computeService.gallery.image","title":"Azure Compute Gallery image definition","desc":" Examine a versioned VM image definition inside a Compute Gallery. Surfaces the OS type (Linux or Windows), OS state (Generalized vs Specialized), `hyperVGeneration` (V1 or V2), architecture, supported VM features, the publisher/offer/SKU identifiers, end-of-life date, recommended VM configuration, and the `versions()` published under the definition.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"images":{"name":"images","type":"\u0019\u001bazure.subscription.computeService.gallery.image","title":"Image definitions in this gallery","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Gallery location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Gallery name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sharingProfile":{"name":"sharingProfile","type":"\n","is_mandatory":true,"title":"Sharing profile — Private, Groups, or Community","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sharingStatus":{"name":"sharingStatus","type":"\n","is_mandatory":true,"title":"Sharing status (replication state across regions)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"softDeletePolicy":{"name":"softDeletePolicy","type":"\n","is_mandatory":true,"title":"Soft-delete policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Gallery tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Gallery resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"uniqueName":{"name":"uniqueName","type":"\u0007","is_mandatory":true,"title":"Unique gallery name (used in URLs)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Compute Gallery","desc":" Examine a Compute Gallery (formerly Shared Image Gallery) — the versioned image-distribution scope inside a subscription. Surfaces the gallery description, identifier, the `sharingProfile` (private, community, or groups), the soft-delete state, and the `images()` defined in the gallery so audits can traverse from gallery to image definition to image version.","min_provider_version":"13.7.1","defaults":"name location description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.gallery.image":{"id":"azure.subscription.computeService.gallery.image","name":"azure.subscription.computeService.gallery.image","fields":{"architecture":{"name":"architecture","type":"\u0007","is_mandatory":true,"title":"Architecture (x64, Arm64)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the image definition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disallowed":{"name":"disallowed","type":"\n","is_mandatory":true,"title":"Disallowed properties (disk types)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"endOfLifeDate":{"name":"endOfLifeDate","type":"\t","is_mandatory":true,"title":"End-of-life date for this image definition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"eula":{"name":"eula","type":"\u0007","is_mandatory":true,"title":"EULA","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"features":{"name":"features","type":"\u0019\n","is_mandatory":true,"title":"Image features (e.g. TrustedLaunch)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hyperVGeneration":{"name":"hyperVGeneration","type":"\u0007","is_mandatory":true,"title":"Hyper-V generation (V1, V2)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Image definition ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identifier":{"name":"identifier","type":"\n","is_mandatory":true,"title":"Image identifier — publisher, offer, sku","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Image definition location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Image definition name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osState":{"name":"osState","type":"\u0007","is_mandatory":true,"title":"OS state (Generalized, Specialized)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osType":{"name":"osType","type":"\u0007","is_mandatory":true,"title":"OS type (Linux, Windows)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privacyStatementUri":{"name":"privacyStatementUri","type":"\u0007","is_mandatory":true,"title":"Privacy statement URI","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"purchasePlan":{"name":"purchasePlan","type":"\n","is_mandatory":true,"title":"Marketplace plan info","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recommended":{"name":"recommended","type":"\n","is_mandatory":true,"title":"Recommended hardware (vCPUs, memory)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"releaseNoteUri":{"name":"releaseNoteUri","type":"\u0007","is_mandatory":true,"title":"Release notes URI","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Image definition tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Image definition resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u001bazure.subscription.computeService.gallery.image.version","title":"Azure Compute Gallery image version","desc":" Examine a concrete versioned image inside a Compute Gallery image definition. Surfaces the storage profile (OS disk image, data disk images, and the source the version was created from), the publishing-profile target regions and replication options, the safety profile, end-of-life date, and the version's replication status.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"versions":{"name":"versions","type":"\u0019\u001bazure.subscription.computeService.gallery.image.version","title":"Image versions in this image definition","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Compute Gallery image definition","desc":" Examine a versioned VM image definition inside a Compute Gallery. Surfaces the OS type (Linux or Windows), OS state (Generalized vs Specialized), `hyperVGeneration` (V1 or V2), architecture, supported VM features, the publisher/offer/SKU identifiers, end-of-life date, recommended VM configuration, and the `versions()` published under the definition.","min_provider_version":"13.7.1","defaults":"name osType osState hyperVGeneration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.gallery.image.version":{"id":"azure.subscription.computeService.gallery.image.version","name":"azure.subscription.computeService.gallery.image.version","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Image version ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Image version location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Image version name (semver, e.g. 1.0.0)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publishingProfile":{"name":"publishingProfile","type":"\n","is_mandatory":true,"title":"Publishing profile (replication, target regions, end-of-life)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicationStatus":{"name":"replicationStatus","type":"\n","is_mandatory":true,"title":"Replication status across regions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"safetyProfile":{"name":"safetyProfile","type":"\n","is_mandatory":true,"title":"Safety profile (allowDeletion, blockDeletion, reportedForPolicyViolation)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityProfile":{"name":"securityProfile","type":"\n","is_mandatory":true,"title":"Security profile (UEFI settings)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageProfile":{"name":"storageProfile","type":"\n","is_mandatory":true,"title":"Storage profile (source, OS disk image, data disk images)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Image version tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Image version resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Compute Gallery image version","desc":" Examine a concrete versioned image inside a Compute Gallery image definition. Surfaces the storage profile (OS disk image, data disk images, and the source the version was created from), the publishing-profile target regions and replication options, the safety profile, end-of-life date, and the version's replication status.","min_provider_version":"13.7.1","defaults":"name location provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.hybridMachine":{"id":"azure.subscription.computeService.hybridMachine","name":"azure.subscription.computeService.hybridMachine","fields":{"adFqdn":{"name":"adFqdn","type":"\u0007","is_mandatory":true,"title":"AD fully qualified display name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"agentVersion":{"name":"agentVersion","type":"\u0007","is_mandatory":true,"title":"Connected Machine agent version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cloudMetadata":{"name":"cloudMetadata","type":"\n","is_mandatory":true,"title":"Detected cloud environment metadata (Azure/GCP/AWS/OCI provider, account, region) when applicable","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"detectedProperties":{"name":"detectedProperties","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Detected agent-reported properties (azureResourceId, manufacturer, model, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Azure-side display name for the machine","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dnsFqdn":{"name":"dnsFqdn","type":"\u0007","is_mandatory":true,"title":"DNS-resolvable FQDN","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"domainName":{"name":"domainName","type":"\u0007","is_mandatory":true,"title":"AD domain the machine is joined to (Windows only)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"extension":{"name":"extension","type":"\u001bazure.subscription.computeService.hybridMachine.extension","title":"Extension installed on an Azure Arc-enabled server (Microsoft.HybridCompute/machines/extensions)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"extensions":{"name":"extensions","type":"\u0019\u001bazure.subscription.computeService.hybridMachine.extension","title":"Installed Arc machine extensions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastStatusChange":{"name":"lastStatusChange","type":"\t","is_mandatory":true,"title":"Last time the Arc agent reported in","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"licenseProfile":{"name":"licenseProfile","type":"\n","is_mandatory":true,"title":"Windows license / ESU attestation profile","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"machineFqdn":{"name":"machineFqdn","type":"\u0007","is_mandatory":true,"title":"Hybrid machine FQDN","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Machine name (Azure resource name)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osEdition":{"name":"osEdition","type":"\u0007","is_mandatory":true,"title":"OS edition (e.g. \"Datacenter\", \"Standard\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osName":{"name":"osName","type":"\u0007","is_mandatory":true,"title":"OS name reported by the agent (e.g. \"windows\", \"linux\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osSku":{"name":"osSku","type":"\u0007","is_mandatory":true,"title":"OS product SKU (e.g. \"Windows Server 2019 Datacenter\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osType":{"name":"osType","type":"\u0007","is_mandatory":true,"title":"OS type as Azure classifies it (\"Windows\" / \"Linux\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osVersion":{"name":"osVersion","type":"\u0007","is_mandatory":true,"title":"OS version reported by the agent","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"parentClusterResourceId":{"name":"parentClusterResourceId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the parent Azure HCI cluster, if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateLinkScopeResourceId":{"name":"privateLinkScopeResourceId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the private link scope this machine is assigned to, if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Raw HybridCompute machine properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the ARM resource","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Connection status of the Arc agent. Possible values: \"Connected\", \"Disconnected\", \"Error\", \"Expired\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"systemData":{"name":"systemData","type":"\n","is_mandatory":true,"title":"Azure Resource Manager system metadata (createdBy, createdAt, lastModifiedBy)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"ARM resource type (Microsoft.HybridCompute/machines)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vmId":{"name":"vmId","type":"\u0007","is_mandatory":true,"title":"Hybrid machine unique ID (Arc-assigned)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vmUuid":{"name":"vmUuid","type":"\u0007","is_mandatory":true,"title":"Arc Machine's unique SMBIOS UUID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Arc-enabled server","desc":" Examine an Azure Arc-enabled server (Microsoft.HybridCompute/machines) — an on-premises or other-cloud machine projected into Azure for management. Surfaces the agent status (Connected, Disconnected, Expired), agent version, OS name and version, last status check, machine identity, attached extensions, private link scope, and the `cloudMetadata` describing the underlying environment when the machine is hosted on AWS, GCP, VMware, or another cloud.","min_provider_version":"13.10.0","defaults":"name location osName osVersion status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.hybridMachine.extension":{"id":"azure.subscription.computeService.hybridMachine.extension","name":"azure.subscription.computeService.hybridMachine.extension","fields":{"autoUpgradeMinorVersion":{"name":"autoUpgradeMinorVersion","type":"\u0004","is_mandatory":true,"title":"Whether the extension uses a newer minor version if one is available at deployment time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableAutomaticUpgrade":{"name":"enableAutomaticUpgrade","type":"\u0004","is_mandatory":true,"title":"Whether the platform automatically upgrades the extension to a newer version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"extensionType":{"name":"extensionType","type":"\u0007","is_mandatory":true,"title":"Extension type (e.g. \"AzureMonitorLinuxAgent\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forceUpdateTag":{"name":"forceUpdateTag","type":"\u0007","is_mandatory":true,"title":"Tag used to trigger a re-run of the extension handler even when settings are unchanged","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"instanceView":{"name":"instanceView","type":"\n","is_mandatory":true,"title":"Latest extension instance view reported by the handler (status code, level, display status, message)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Geo-location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Extension name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the extension","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publisher":{"name":"publisher","type":"\u0007","is_mandatory":true,"title":"Extension handler publisher (e.g. \"Microsoft.Azure.Monitor\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"settings":{"name":"settings","type":"\n","is_mandatory":true,"title":"Public JSON settings passed to the extension handler","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"systemData":{"name":"systemData","type":"\n","is_mandatory":true,"title":"Azure Resource Manager system metadata (createdBy, createdAt, lastModifiedBy)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"ARM resource type (Microsoft.HybridCompute/machines/extensions)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"typeHandlerVersion":{"name":"typeHandlerVersion","type":"\u0007","is_mandatory":true,"title":"Version of the extension handler","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Extension installed on an Azure Arc-enabled server (Microsoft.HybridCompute/machines/extensions)","private":true,"min_provider_version":"13.10.1","defaults":"name extensionType publisher provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.image":{"id":"azure.subscription.computeService.image","name":"azure.subscription.computeService.image","fields":{"hyperVGeneration":{"name":"hyperVGeneration","type":"\u0007","is_mandatory":true,"title":"Hyper-V generation (V1, V2)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Image ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Image location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Image name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceVirtualMachineId":{"name":"sourceVirtualMachineId","type":"\u0007","is_mandatory":true,"title":"Source VM ARM ID this image was captured from","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageProfile":{"name":"storageProfile","type":"\n","is_mandatory":true,"title":"Storage profile (OS disk + data disks)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Image tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Image resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure managed image","desc":" Examine a custom VM image stored as a single Azure resource. Surfaces the storage profile (OS disk and data disks), the `hyperVGeneration` (V1 or V2), the source virtual machine the image was generalized from, and the provisioning state. Compute Galleries (`gallery()`) are the preferred mechanism for versioned image distribution; managed images remain useful for single-resource captures.","min_provider_version":"13.7.1","defaults":"name location hyperVGeneration provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.proximityPlacementGroup":{"id":"azure.subscription.computeService.proximityPlacementGroup","name":"azure.subscription.computeService.proximityPlacementGroup","fields":{"availabilitySetIds":{"name":"availabilitySetIds","type":"\u0019\u0007","is_mandatory":true,"title":"ARM IDs of availability sets in this group (references)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Proximity placement group ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"intent":{"name":"intent","type":"\n","is_mandatory":true,"title":"Intent (e.g. supported VM sizes)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Proximity placement group location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Proximity placement group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"proximityPlacementGroupType":{"name":"proximityPlacementGroupType","type":"\u0007","is_mandatory":true,"title":"Group type: Standard (latency-sensitive) or Ultra (lowest-latency)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Proximity placement group tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Proximity placement group resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualMachineIds":{"name":"virtualMachineIds","type":"\u0019\u0007","is_mandatory":true,"title":"ARM IDs of VMs in this group (references)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualMachineScaleSetIds":{"name":"virtualMachineScaleSetIds","type":"\u0019\u0007","is_mandatory":true,"title":"ARM IDs of VMSS in this group (references)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones (Ultra type only — Standard does not support zones)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Proximity Placement Group","desc":" Examine a co-location scope for Azure compute resources. Surfaces the placement-group type (Standard or Ultra), the supported availability zones, the colocation status, and the lists of VMs, virtual-machine scale sets, and availability sets currently bound to the group so they share low-latency network locality.","min_provider_version":"13.7.1","defaults":"name location proximityPlacementGroupType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.snapshot":{"id":"azure.subscription.computeService.snapshot","name":"azure.subscription.computeService.snapshot","fields":{"creationData":{"name":"creationData","type":"\n","is_mandatory":true,"title":"Disk creation source information (createOption, sourceResourceId, sourceUri, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataAccessAuthMode":{"name":"dataAccessAuthMode","type":"\u0007","is_mandatory":true,"title":"Data access authentication mode (AzureActiveDirectory, None)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskAccessId":{"name":"diskAccessId","type":"\u0007","is_mandatory":true,"title":"ARM ID of the DiskAccess resource for private endpoint access","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskEncryptionSet":{"name":"diskEncryptionSet","type":"\u001bazure.subscription.computeService.diskEncryptionSet","title":"Disk encryption set used for customer-managed key encryption","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskSizeBytes":{"name":"diskSizeBytes","type":"\u0005","is_mandatory":true,"title":"Exact size of the snapshot in bytes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskState":{"name":"diskState","type":"\u0007","is_mandatory":true,"title":"Current state of the snapshot (Unattached, Attached, Reserved, ActiveSAS, ReadyToUpload, ActiveUpload, ActiveSASFrozen)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionType":{"name":"encryptionType","type":"\u0007","is_mandatory":true,"title":"Snapshot encryption type (EncryptionAtRestWithPlatformKey, EncryptionAtRestWithCustomerKey, EncryptionAtRestWithPlatformAndCustomerKeys)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hyperVGeneration":{"name":"hyperVGeneration","type":"\u0007","is_mandatory":true,"title":"Hyper-V generation of the snapshot (V1, V2)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Snapshot ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"incremental":{"name":"incremental","type":"\u0004","is_mandatory":true,"title":"Whether this is an incremental snapshot","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"incrementalSnapshotFamilyId":{"name":"incrementalSnapshotFamilyId","type":"\u0007","is_mandatory":true,"title":"Family ID shared by incremental snapshots of the same disk","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"instantAccessDurationMinutes":{"name":"instantAccessDurationMinutes","type":"\u0005","is_mandatory":true,"title":"For snapshots of Premium SSD v2 or Ultra disks, time in minutes the snapshot is retained for instant access","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Snapshot location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Snapshot name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkAccessPolicy":{"name":"networkAccessPolicy","type":"\u0007","is_mandatory":true,"title":"Network access policy (AllowAll, AllowPrivate, DenyAll)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osType":{"name":"osType","type":"\u0007","is_mandatory":true,"title":"Operating system type of the source disk (Windows, Linux)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Snapshot resource properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the snapshot","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled (Enabled, Disabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"The snapshot SKU name and tier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"snapshotAccessState":{"name":"snapshotAccessState","type":"\u0007","is_mandatory":true,"title":"Snapshot access state determining availability (Unknown, Pending, Available)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceDisk":{"name":"sourceDisk","type":"\u001bazure.subscription.computeService.disk","title":"Source disk for this snapshot (resolved from creationData.sourceResourceId when it points to a managed disk)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"supportsHibernation":{"name":"supportsHibernation","type":"\u0004","is_mandatory":true,"title":"Whether the source disk supports hibernation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"systemData":{"name":"systemData","type":"\n","is_mandatory":true,"title":"Azure Resource Manager system metadata (createdBy, createdAt, lastModifiedBy)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Snapshot tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"When the snapshot was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Snapshot type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"uniqueId":{"name":"uniqueId","type":"\u0007","is_mandatory":true,"title":"Unique identifier of the snapshot (128-bit GUID)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure managed disk snapshot","desc":" Examine a point-in-time snapshot of an Azure managed disk. Surfaces the snapshot SKU and tier, OS type, allocated and used size, the `diskState`, the source resource the snapshot was created from, the `incremental` flag (incremental vs full), encryption settings (platform-managed, customer-managed via diskEncryptionSet, or confidential-VM encryption), the network access policy, public network access, and any active SAS export for downloading the underlying VHD.","min_provider_version":"13.7.1","defaults":"name location diskSizeBytes diskState incremental","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.vm":{"id":"azure.subscription.computeService.vm","name":"azure.subscription.computeService.vm","fields":{"adminUsername":{"name":"adminUsername","type":"\u0007","is_mandatory":true,"title":"VM admin username","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"computerName":{"name":"computerName","type":"\u0007","is_mandatory":true,"title":"VM computer name (OS hostname)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataDisks":{"name":"dataDisks","type":"\u0019\u001bazure.subscription.computeService.disk","title":"VM compute data disk","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disablePasswordAuthentication":{"name":"disablePasswordAuthentication","type":"\u0004","is_mandatory":true,"title":"Whether password authentication is disabled for SSH on the Linux VM","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableAutomaticUpdates":{"name":"enableAutomaticUpdates","type":"\u0004","is_mandatory":true,"title":"Whether automatic OS upgrades by the platform are enabled (WindowsConfiguration.EnableAutomaticUpdates)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionAtHost":{"name":"encryptionAtHost","type":"\u0004","is_mandatory":true,"title":"Whether encryption at host is enabled for all VM disks","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"extensions":{"name":"extensions","type":"\u0019\n","title":"VM extension","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fipsEncryptionEnabled":{"name":"fipsEncryptionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether FIPS 140-3 compliant cryptography is enabled for extension protectedSettings","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VM ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isRunning":{"name":"isRunning","type":"\u0004","title":"Whether the VM is running","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"licenseType":{"name":"licenseType","type":"\u0007","is_mandatory":true,"title":"Azure Hybrid Benefit license type. Null if using standard Azure licensing. Possible values: \"Windows_Client\", \"Windows_Server\", \"RHEL_BYOS\", \"SLES_BYOS\"","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"VM location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedBy":{"name":"managedBy","type":"\u0007","is_mandatory":true,"title":"ID of the resource that manages this VM (e.g. VMSS ARM resource ID)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VM name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkInterfaces":{"name":"networkInterfaces","type":"\u0019\u001bazure.subscription.networkService.interface","title":"VM network interfaces (NICs) attached via the VM's networkProfile","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osDisk":{"name":"osDisk","type":"\u001bazure.subscription.computeService.disk","title":"VM compute disk","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"patchMode":{"name":"patchMode","type":"\u0007","is_mandatory":true,"title":"Patch mode for the OS (\"Manual\", \"AutomaticByOS\", \"AutomaticByPlatform\", \"ImageDefault\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"VM properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisionVMAgent":{"name":"provisionVMAgent","type":"\u0004","is_mandatory":true,"title":"Whether the VM agent is provisioned (Linux/Windows)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the VM (e.g. Succeeded, Failed, Creating, Updating, Deleting)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"proxyAgentAddExtension":{"name":"proxyAgentAddExtension","type":"\u0004","is_mandatory":true,"title":"Whether to implicitly install the ProxyAgent extension (Linux only)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"proxyAgentEnabled":{"name":"proxyAgentEnabled","type":"\u0004","is_mandatory":true,"title":"Whether ProxyAgent is enabled on the VM","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"proxyAgentMode":{"name":"proxyAgentMode","type":"\u0007","is_mandatory":true,"title":"ProxyAgent execution mode (\"Audit\", \"Enforce\")","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIpAddresses":{"name":"publicIpAddresses","type":"\u0019\u001bazure.subscription.networkService.ipAddress","title":"VM public IP addresses","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resiliencyProfile":{"name":"resiliencyProfile","type":"\n","is_mandatory":true,"title":"Resiliency profile (zone movement configuration)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scheduledEventsPolicy":{"name":"scheduledEventsPolicy","type":"\n","is_mandatory":true,"title":"Scheduled-events policy (UserInitiatedReboot, UserInitiatedRedeploy, additional publishing targets)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secureBootEnabled":{"name":"secureBootEnabled","type":"\u0004","is_mandatory":true,"title":"Whether UEFI Secure Boot is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityType":{"name":"securityType","type":"\u0007","is_mandatory":true,"title":"Security type of the VM (\"ConfidentialVM\" or \"TrustedLaunch\")","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sshPublicKeys":{"name":"sshPublicKeys","type":"\u0019\n","is_mandatory":true,"title":"SSH public keys configured on the Linux VM (key path + key data); empty for Windows or password-auth VMs","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","title":"VM state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"systemData":{"name":"systemData","type":"\n","is_mandatory":true,"title":"Azure Resource Manager system metadata (createdBy, createdAt, lastModifiedBy)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"VM tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"When the VM was created","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"VM type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vmId":{"name":"vmId","type":"\u0007","is_mandatory":true,"title":"Unique 128-bit VM identifier","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vmScaleSet":{"name":"vmScaleSet","type":"\u001bazure.subscription.computeService.vmScaleSet","title":"Virtual Machine Scale Set that manages this VM, if any (resolved from managedBy)","min_provider_version":"13.7.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vtpmEnabled":{"name":"vtpmEnabled","type":"\u0004","is_mandatory":true,"title":"Whether virtual Trusted Platform Module (vTPM) is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"VM zones","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure virtual machine","desc":" Examine an Azure Compute Engine VM and the security-relevant configuration around it. Surfaces the VM size, OS profile, storage profile (OS and data disks), network profile and attached `interfaces()`, identity assignments, applied tags, the availability/zone/proximity-placement-group placement, the boot diagnostics and security profile (TrustedLaunch / ConfidentialVM, SecureBoot, vTPM), the `extensions()` installed on the VM, OS patching state, and the deployed extensions for ASC, Defender, and guest configuration.","min_provider_version":"9.0.1","defaults":"name location properties.hardwareProfile.vmSize properties.storageProfile.osDisk.osType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.vmScaleSet":{"id":"azure.subscription.computeService.vmScaleSet","name":"azure.subscription.computeService.vmScaleSet","fields":{"automaticRepairsPolicy":{"name":"automaticRepairsPolicy","type":"\n","is_mandatory":true,"title":"Automatic repairs policy for the scale set","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"extensions":{"name":"extensions","type":"\u0019\n","title":"Extensions installed on the scale set (each dict describes one extension)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VMSS ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"instance":{"name":"instance","type":"\u001bazure.subscription.computeService.vmScaleSet.instance","title":"Azure scale set VM instance","desc":" Examine a single VM instance inside a Virtual Machine Scale Set. Surfaces the per-instance ARM resource ID, the scale-set `instanceId`, applied availability zones, the `latestModelApplied` flag (whether the instance is on the current scale-set model), the `modelDefinitionApplied` (whether the model is the scale set's or customized), the Azure VM unique ID, instance SKU, and the raw instance properties for fields not yet promoted to typed accessors.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"instances":{"name":"instances","type":"\u0019\u001bazure.subscription.computeService.vmScaleSet.instance","title":"VMs that belong to this scale set","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"VMSS location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VMSS name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"orchestrationMode":{"name":"orchestrationMode","type":"\u0007","is_mandatory":true,"title":"Orchestration mode (\"Uniform\" or \"Flexible\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"overprovision":{"name":"overprovision","type":"\u0004","is_mandatory":true,"title":"Whether the scale set should be overprovisioned","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"platformFaultDomainCount":{"name":"platformFaultDomainCount","type":"\u0005","is_mandatory":true,"title":"Fault Domain count for each placement group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"priorityMixPolicy":{"name":"priorityMixPolicy","type":"\n","is_mandatory":true,"title":"Spot/Regular priority mix policy for Flex VMSS","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"VMSS resource properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resiliencyPolicy":{"name":"resiliencyPolicy","type":"\n","is_mandatory":true,"title":"Resiliency policy (operation recovery, zone allocation, automatic zone rebalancing, resilient VM creation/deletion)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scheduledEventsPolicy":{"name":"scheduledEventsPolicy","type":"\n","is_mandatory":true,"title":"Scheduled-events policy (UserInitiatedReboot, UserInitiatedRedeploy, additional publishing targets)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityPostureReference":{"name":"securityPostureReference","type":"\n","is_mandatory":true,"title":"Security posture reference applied to the scale set (community gallery security posture)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"singlePlacementGroup":{"name":"singlePlacementGroup","type":"\u0004","is_mandatory":true,"title":"Whether the scale set is limited to a single placement group of max 100 VMs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"VMSS SKU (name, tier, capacity)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuProfile":{"name":"skuProfile","type":"\n","is_mandatory":true,"title":"SKU profile listing the candidate VM sizes and allocation strategy","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"spotRestorePolicy":{"name":"spotRestorePolicy","type":"\n","is_mandatory":true,"title":"Spot-Try-Restore policy (whether evicted Spot instances are restored opportunistically)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"systemData":{"name":"systemData","type":"\n","is_mandatory":true,"title":"Azure Resource Manager system metadata (createdBy, createdAt, lastModifiedBy)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"VMSS tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"When the scale set was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"VMSS resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"uniqueId":{"name":"uniqueId","type":"\u0007","is_mandatory":true,"title":"Unique identifier of the scale set","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"upgradePolicy":{"name":"upgradePolicy","type":"\n","is_mandatory":true,"title":"Upgrade policy for the scale set","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zonalPlatformFaultDomainAlignMode":{"name":"zonalPlatformFaultDomainAlignMode","type":"\u0007","is_mandatory":true,"title":"Align mode between VMSS compute and storage Fault Domain count","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones for the VMSS","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Virtual Machine Scale Set","desc":" Examine a Virtual Machine Scale Set — the abstraction Azure uses to deploy and manage a group of identical VMs. Surfaces the `orchestrationMode` (Uniform or Flexible), the SKU and capacity, the network and OS profiles applied to instances, upgrade policy (Manual, Automatic, Rolling), automatic-OS-upgrade and rolling upgrade policy, the spot priority and eviction settings, identity assignments, the VM-extension profile, the platform-fault-domain count, and the per-instance `instances()` currently provisioned.","min_provider_version":"13.7.1","defaults":"name location orchestrationMode sku","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.computeService.vmScaleSet.instance":{"id":"azure.subscription.computeService.vmScaleSet.instance","name":"azure.subscription.computeService.vmScaleSet.instance","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Instance ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"instanceId":{"name":"instanceId","type":"\u0007","is_mandatory":true,"title":"Instance ID within the scale set (e.g. \"0\", \"1\", ...)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"latestModelApplied":{"name":"latestModelApplied","type":"\u0004","is_mandatory":true,"title":"Whether the latest model has been applied to this instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Instance location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"modelDefinitionApplied":{"name":"modelDefinitionApplied","type":"\u0007","is_mandatory":true,"title":"Whether the model applied to the VM is the scale set's model or a customized model","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Instance name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Instance properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"Instance SKU (name, tier, capacity)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Instance tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"When the instance was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vmId":{"name":"vmId","type":"\u0007","is_mandatory":true,"title":"Azure VM unique 128-bit identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure scale set VM instance","desc":" Examine a single VM instance inside a Virtual Machine Scale Set. Surfaces the per-instance ARM resource ID, the scale-set `instanceId`, applied availability zones, the `latestModelApplied` flag (whether the instance is on the current scale-set model), the `modelDefinitionApplied` (whether the model is the scale set's or customized), the Azure VM unique ID, instance SKU, and the raw instance properties for fields not yet promoted to typed accessors.","min_provider_version":"13.7.1","defaults":"name instanceId provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService":{"id":"azure.subscription.containerAppService","name":"azure.subscription.containerAppService","fields":{"containerApp":{"name":"containerApp","type":"\u001bazure.subscription.containerAppService.containerApp","title":"Azure Container App","desc":" Examine a single Container App workload. The resource exposes ingress posture (external vs internal, transport, allowed origins, IP rules, client-cert mode), revision strategy, scale bounds, secrets/registry auth, and the per-container image and resource definitions.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containerApps":{"name":"containerApps","type":"\u0019\u001bazure.subscription.containerAppService.containerApp","title":"All Container Apps in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"job":{"name":"job","type":"\u001bazure.subscription.containerAppService.job","title":"Azure Container Apps Job","desc":" Examine a Container Apps Job — the run-to-completion sibling of Azure Container Apps. Surfaces the `triggerType` (Manual, Schedule, or Event), the configuration block (replica timeout, retry limit, parallelism, replica completion count, registries, secrets, identity), the per-trigger schedule or event-trigger configuration, the template (containers, init containers, volumes), the linked managed environment, and the workload profile the job runs on.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"jobs":{"name":"jobs","type":"\u0019\u001bazure.subscription.containerAppService.job","title":"Container Apps jobs (run-to-completion workloads)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedEnvironment":{"name":"managedEnvironment","type":"\u001bazure.subscription.containerAppService.managedEnvironment","title":"Azure Container Apps managed environment","desc":" Examine the network, logging, and TLS boundary that hosts a set of Container Apps. Selectable by ARM id; fields cover VNET delegation, public-network access, peer-traffic mTLS, zone redundancy, and the linked Log Analytics workspace.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"managedEnvironments":{"name":"managedEnvironments","type":"\u0019\u001bazure.subscription.containerAppService.managedEnvironment","title":"Managed environments (network/log boundary for Container Apps)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Container Apps","desc":" Examine Azure Container Apps managed environments, the Container Apps running in them, and Container Apps jobs. Use this resource to audit ingress posture, image pinning, identity-vs-secret registry auth, Easy Auth configuration, and revision history.","private":true,"min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService.containerApp":{"id":"azure.subscription.containerAppService.containerApp","name":"azure.subscription.containerAppService.containerApp","fields":{"authConfig":{"name":"authConfig","type":"\u001bazure.subscription.containerAppService.containerApp.authConfig","title":"Container App Easy Auth (authConfig) configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"authConfigs":{"name":"authConfigs","type":"\u0019\u001bazure.subscription.containerAppService.containerApp.authConfig","title":"Easy Auth (authConfigs) children","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"clientCertificateMode":{"name":"clientCertificateMode","type":"\u0007","is_mandatory":true,"title":"Client-certificate mode (\"ignore\", \"accept\", \"require\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"container":{"name":"container","type":"\u001bazure.subscription.containerAppService.containerApp.container","title":"Container definition inside a Container App","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containers":{"name":"containers","type":"\u0019\u001bazure.subscription.containerAppService.containerApp.container","title":"Containers running in each replica","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"corsAllowedOrigins":{"name":"corsAllowedOrigins","type":"\u0019\u0007","is_mandatory":true,"title":"CORS allowed origins on ingress","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"httpsOnly":{"name":"httpsOnly","type":"\u0004","is_mandatory":true,"title":"Whether HTTPS-only is enforced (insecureAllowed == false)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity block (system + user-assigned principal IDs)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ingressEnabled":{"name":"ingressEnabled","type":"\u0004","is_mandatory":true,"title":"Whether ingress is enabled at all","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ingressExternal":{"name":"ingressExternal","type":"\u0004","is_mandatory":true,"title":"External ingress (true) vs internal-only (false). Only meaningful when","desc":"`ingressEnabled == true` — defaults to false when ingress is disabled.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"initContainers":{"name":"initContainers","type":"\u0019\u001bazure.subscription.containerAppService.containerApp.container","title":"Init containers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipSecurityRestrictions":{"name":"ipSecurityRestrictions","type":"\u0019\n","is_mandatory":true,"title":"IP security restrictions on ingress","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"latestRevisionFqdn":{"name":"latestRevisionFqdn","type":"\u0007","is_mandatory":true,"title":"Latest revision FQDN (where ingress lands)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"latestRevisionName":{"name":"latestRevisionName","type":"\u0007","is_mandatory":true,"title":"Latest revision name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Azure region","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedEnvironmentId":{"name":"managedEnvironmentId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the parent managed environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxReplicas":{"name":"maxReplicas","type":"\u0005","is_mandatory":true,"title":"Max replica count","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minReplicas":{"name":"minReplicas","type":"\u0005","is_mandatory":true,"title":"Min replica count","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Container App name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state (\"Succeeded\", \"Failed\", \"Canceled\", \"InProgress\", \"Deleting\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"registries":{"name":"registries","type":"\u0019\n","is_mandatory":true,"title":"Container registry references (server, identity, passwordSecretRef)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"registryAuthUsesIdentity":{"name":"registryAuthUsesIdentity","type":"\u0004","is_mandatory":true,"title":"Whether any registry credential uses managed identity","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"revision":{"name":"revision","type":"\u001bazure.subscription.containerAppService.containerApp.revision","title":"Container App revision","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"revisionMode":{"name":"revisionMode","type":"\u0007","is_mandatory":true,"title":"Active revision mode (\"Single\" or \"Multiple\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"revisions":{"name":"revisions","type":"\u0019\u001bazure.subscription.containerAppService.containerApp.revision","title":"Revision history","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scaleRules":{"name":"scaleRules","type":"\u0019\n","is_mandatory":true,"title":"Scale rules. Each entry has `name` plus exactly one of `http`, `tcp`,","desc":"`azureQueue`, or `custom` (KEDA), and an optional `auth []` of `{triggerParameter, secretRef}` entries pointing at names in `secretNames`. http:       {metadata: {concurrentRequests}} tcp:        {metadata: {concurrentConnections}} azureQueue: {queueName, queueLength} custom:     {type, metadata, identity}","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secretNames":{"name":"secretNames","type":"\u0019\u0007","is_mandatory":true,"title":"Names of declared secrets (values are not returned by ARM on read)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"stickySessions":{"name":"stickySessions","type":"\u0007","is_mandatory":true,"title":"Sticky sessions affinity (\"none\" or \"sticky\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"targetPort":{"name":"targetPort","type":"\u0005","is_mandatory":true,"title":"Target port for ingress","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"transport":{"name":"transport","type":"\u0007","is_mandatory":true,"title":"Allowed transport (\"Auto\", \"Http\", \"Http2\", \"Tcp\" — Azure SDK casing)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"volumes":{"name":"volumes","type":"\u0019\n","is_mandatory":true,"title":"Volumes referenced by containers (azureFile / emptyDir / secret)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workloadProfileName":{"name":"workloadProfileName","type":"\u0007","is_mandatory":true,"title":"Workload profile name in the parent environment (\"Consumption\" by default)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Container App","desc":" Examine a single Container App workload. The resource exposes ingress posture (external vs internal, transport, allowed origins, IP rules, client-cert mode), revision strategy, scale bounds, secrets/registry auth, and the per-container image and resource definitions.","min_provider_version":"13.10.2","defaults":"name location provisioningState ingressExternal httpsOnly","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService.containerApp.authConfig":{"id":"azure.subscription.containerAppService.containerApp.authConfig","name":"azure.subscription.containerAppService.containerApp.authConfig","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether Easy Auth is enabled at all (Platform.Enabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"httpSettings":{"name":"httpSettings","type":"\n","is_mandatory":true,"title":"HTTP settings (requireHttps, route configuration, forward proxy)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identityProviders":{"name":"identityProviders","type":"\u0019\u0007","is_mandatory":true,"title":"Configured providers (e.g., \"azureActiveDirectory\", \"github\", \"google\", \"facebook\", \"twitter\", \"apple\", \"customOpenIdConnect\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"login":{"name":"login","type":"\n","is_mandatory":true,"title":"Login config (token store enabled, token refresh extension hours, allowed external redirect URLs)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"AuthConfig name (always \"current\" for the active config)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"unauthenticatedClientAction":{"name":"unauthenticatedClientAction","type":"\u0007","is_mandatory":true,"title":"Action when an unauthenticated request arrives (\"RedirectToLoginPage\", \"AllowAnonymous\", \"Return401\", \"Return403\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Container App Easy Auth (authConfig) configuration","private":true,"min_provider_version":"13.10.2","defaults":"name unauthenticatedClientAction","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService.containerApp.container":{"id":"azure.subscription.containerAppService.containerApp.container","name":"azure.subscription.containerAppService.containerApp.container","fields":{"args":{"name":"args","type":"\u0019\u0007","is_mandatory":true,"title":"Container start args","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"command":{"name":"command","type":"\u0019\u0007","is_mandatory":true,"title":"Container start command","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cpuCores":{"name":"cpuCores","type":"\u0006","is_mandatory":true,"title":"CPU cores (e.g., 0.25, 0.5, 1.0)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"env":{"name":"env","type":"\u0019\n","is_mandatory":true,"title":"Environment variables — each entry has {name, value, secretRef}","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Composite id: \u003ccontainerAppId\u003e/containers/\u003cname\u003e","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"image":{"name":"image","type":"\u0007","is_mandatory":true,"title":"Image reference (e.g., \"myacr.azurecr.io/api:1.2.3\" or \"...@sha256:...\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"imagePinned":{"name":"imagePinned","type":"\u0004","is_mandatory":true,"title":"Whether the image reference is digest-pinned (contains \"@sha256:\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"memory":{"name":"memory","type":"\u0007","is_mandatory":true,"title":"Memory string as returned by ARM (e.g., \"0.5Gi\", \"1Gi\", \"2Gi\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Container name (within the app)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"probes":{"name":"probes","type":"\u0019\n","is_mandatory":true,"title":"Liveness/readiness/startup probes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"volumeMounts":{"name":"volumeMounts","type":"\u0019\n","is_mandatory":true,"title":"Volume mounts (volumeName, mountPath, subPath)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Container definition inside a Container App","private":true,"min_provider_version":"13.10.2","defaults":"name image imagePinned","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService.containerApp.revision":{"id":"azure.subscription.containerAppService.containerApp.revision","name":"azure.subscription.containerAppService.containerApp.revision","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether this is currently active","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"createdTime":{"name":"createdTime","type":"\t","is_mandatory":true,"title":"Creation time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"healthState":{"name":"healthState","type":"\u0007","is_mandatory":true,"title":"Health state (\"Healthy\", \"Unhealthy\", \"None\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastActiveTime":{"name":"lastActiveTime","type":"\t","is_mandatory":true,"title":"Last active time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Revision name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicas":{"name":"replicas","type":"\u0005","is_mandatory":true,"title":"Replicas currently running","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"trafficWeight":{"name":"trafficWeight","type":"\u0005","is_mandatory":true,"title":"Traffic weight (% routed in Multiple-revision mode)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Container App revision","private":true,"min_provider_version":"13.10.2","defaults":"name active trafficWeight provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService.job":{"id":"azure.subscription.containerAppService.job","name":"azure.subscription.containerAppService.job","fields":{"containers":{"name":"containers","type":"\u0019\n","is_mandatory":true,"title":"Container definitions (image, env, resources, probes); flattened","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cronExpression":{"name":"cronExpression","type":"\u0007","is_mandatory":true,"title":"Cron expression (when triggerType == \"Schedule\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"eventTriggerConfig":{"name":"eventTriggerConfig","type":"\n","is_mandatory":true,"title":"Event-driven scaling rules (KEDA-based) when triggerType == \"Event\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity (system + user-assigned)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Azure region","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedEnvironmentId":{"name":"managedEnvironmentId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the parent managed environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Job name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"registries":{"name":"registries","type":"\u0019\n","is_mandatory":true,"title":"Container registry references","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"registryAuthUsesIdentity":{"name":"registryAuthUsesIdentity","type":"\u0004","is_mandatory":true,"title":"Whether any registry credential uses managed identity","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicaRetryLimit":{"name":"replicaRetryLimit","type":"\u0005","is_mandatory":true,"title":"Replica retry limit","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicaTimeoutSeconds":{"name":"replicaTimeoutSeconds","type":"\u0005","is_mandatory":true,"title":"Replica timeout (seconds)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secretNames":{"name":"secretNames","type":"\u0019\u0007","is_mandatory":true,"title":"Names of declared secrets (values are not returned by ARM on read)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"triggerType":{"name":"triggerType","type":"\u0007","is_mandatory":true,"title":"Trigger type (\"Manual\", \"Schedule\", \"Event\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workloadProfileName":{"name":"workloadProfileName","type":"\u0007","is_mandatory":true,"title":"Workload profile name in the parent environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Container Apps Job","desc":" Examine a Container Apps Job — the run-to-completion sibling of Azure Container Apps. Surfaces the `triggerType` (Manual, Schedule, or Event), the configuration block (replica timeout, retry limit, parallelism, replica completion count, registries, secrets, identity), the per-trigger schedule or event-trigger configuration, the template (containers, init containers, volumes), the linked managed environment, and the workload profile the job runs on.","min_provider_version":"13.10.2","defaults":"name location triggerType provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService.managedEnvironment":{"id":"azure.subscription.containerAppService.managedEnvironment","name":"azure.subscription.containerAppService.managedEnvironment","fields":{"certificate":{"name":"certificate","type":"\u001bazure.subscription.containerAppService.managedEnvironment.certificate","title":"Certificate uploaded to a Container Apps managed environment","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"certificates":{"name":"certificates","type":"\u0019\u001bazure.subscription.containerAppService.managedEnvironment.certificate","title":"Certificates uploaded to the environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"customDomainConfiguration":{"name":"customDomainConfiguration","type":"\n","is_mandatory":true,"title":"Custom domain configuration (dnsSuffix + cert thumbprint)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"daprComponent":{"name":"daprComponent","type":"\u001bazure.subscription.containerAppService.managedEnvironment.daprComponent","title":"Dapr component configured at the managed environment scope","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"daprComponents":{"name":"daprComponents","type":"\u0019\u001bazure.subscription.containerAppService.managedEnvironment.daprComponent","title":"Dapr components configured at the environment scope","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultDomain":{"name":"defaultDomain","type":"\u0007","is_mandatory":true,"title":"Default DNS suffix for apps in this environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"internalLoadBalancerEnabled":{"name":"internalLoadBalancerEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the env's load balancer is internal-only (no public DNS)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Kind (e.g., \"serverless\", null for standard)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Azure region","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"logAnalyticsCustomerId":{"name":"logAnalyticsCustomerId","type":"\u0007","is_mandatory":true,"title":"Log Analytics workspace customer ID, when destination is \"log-analytics\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"logAnalyticsDestination":{"name":"logAnalyticsDestination","type":"\u0007","is_mandatory":true,"title":"App-logs destination (\"log-analytics\", \"azure-monitor\", \"none\", or null)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Environment name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"peerAuthentication":{"name":"peerAuthentication","type":"\n","is_mandatory":true,"title":"Peer authentication (mTLS) configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"peerTrafficConfiguration":{"name":"peerTrafficConfiguration","type":"\n","is_mandatory":true,"title":"Peer traffic configuration (cluster-internal encryption)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state (\"Succeeded\", \"Failed\", \"Canceled\", \"InProgress\", \"Waiting\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"staticIp":{"name":"staticIp","type":"\u0007","is_mandatory":true,"title":"Static outbound IP for the environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vnetConfiguration":{"name":"vnetConfiguration","type":"\n","is_mandatory":true,"title":"VNET configuration: infrastructureSubnetId, dockerBridgeCidr, platformReservedCidr, platformReservedDnsIP, internal","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workloadProfiles":{"name":"workloadProfiles","type":"\u0019\n","is_mandatory":true,"title":"Workload profiles (Consumption + Dedicated D4/D8/E4/...)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundant":{"name":"zoneRedundant","type":"\u0004","is_mandatory":true,"title":"Whether zone redundancy is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Container Apps managed environment","desc":" Examine the network, logging, and TLS boundary that hosts a set of Container Apps. Selectable by ARM id; fields cover VNET delegation, public-network access, peer-traffic mTLS, zone redundancy, and the linked Log Analytics workspace.","min_provider_version":"13.10.2","defaults":"name location provisioningState internalLoadBalancerEnabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService.managedEnvironment.certificate":{"id":"azure.subscription.containerAppService.managedEnvironment.certificate","name":"azure.subscription.containerAppService.managedEnvironment.certificate","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"issueDate":{"name":"issueDate","type":"\t","is_mandatory":true,"title":"Issue time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Certificate name within the environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notAfter":{"name":"notAfter","type":"\t","is_mandatory":true,"title":"Expiration time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subjectName":{"name":"subjectName","type":"\u0007","is_mandatory":true,"title":"Subject name on the cert","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"thumbprint":{"name":"thumbprint","type":"\u0007","is_mandatory":true,"title":"SHA-1 thumbprint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"valid":{"name":"valid","type":"\u0004","is_mandatory":true,"title":"Whether the cert is currently valid (according to ARM)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Certificate uploaded to a Container Apps managed environment","private":true,"min_provider_version":"13.10.2","defaults":"name notAfter valid","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerAppService.managedEnvironment.daprComponent":{"id":"azure.subscription.containerAppService.managedEnvironment.daprComponent","name":"azure.subscription.containerAppService.managedEnvironment.daprComponent","fields":{"componentType":{"name":"componentType","type":"\u0007","is_mandatory":true,"title":"Component type (e.g., \"state.azure.cosmosdb\", \"secretstores.azure.keyvault\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ignoreErrors":{"name":"ignoreErrors","type":"\u0004","is_mandatory":true,"title":"Whether component init failure is silently ignored","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Component name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"Container Apps allowed to use this component","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secretNames":{"name":"secretNames","type":"\u0019\u0007","is_mandatory":true,"title":"Names of declared secrets (values are not returned by ARM on read)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secretsConfigured":{"name":"secretsConfigured","type":"\u0004","is_mandatory":true,"title":"Whether secret values are referenced (vs inline)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Component version (e.g., \"v1\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Dapr component configured at the managed environment scope","private":true,"min_provider_version":"13.10.2","defaults":"name componentType version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerInstanceService":{"id":"azure.subscription.containerInstanceService","name":"azure.subscription.containerInstanceService","fields":{"containerGroup":{"name":"containerGroup","type":"\u001bazure.subscription.containerInstanceService.containerGroup","title":"Azure Container Instances container group","desc":" Examine a container group — the unit of deployment in ACI, holding one or more containers that share lifecycle, network, and storage. Selectable by ARM id.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containerGroups":{"name":"containerGroups","type":"\u0019\u001bazure.subscription.containerInstanceService.containerGroup","title":"All container groups in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Container Instances","desc":" Examine Azure Container Instances container groups and the containers within them. Use this resource to audit OS type, restart policy, image pinning, registry auth, VNET delegation, security context (privileged, runAsUser), and confidential-ACI usage.","private":true,"min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerInstanceService.containerGroup":{"id":"azure.subscription.containerInstanceService.containerGroup","name":"azure.subscription.containerInstanceService.containerGroup","fields":{"ccePolicyHash":{"name":"ccePolicyHash","type":"\u0007","is_mandatory":true,"title":"SHA-256 hash of the CCE policy (Confidential ACI only)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"confidential":{"name":"confidential","type":"\u0004","is_mandatory":true,"title":"Convenience: sku == \"Confidential\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"container":{"name":"container","type":"\u001bazure.subscription.containerInstanceService.containerGroup.container","title":"Single container inside a container group","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containers":{"name":"containers","type":"\u0019\u001bazure.subscription.containerInstanceService.containerGroup.container","title":"Containers in the group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dnsConfig":{"name":"dnsConfig","type":"\n","is_mandatory":true,"title":"DNS configuration (nameServers, searchDomains, options)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dnsNameLabelReusePolicy":{"name":"dnsNameLabelReusePolicy","type":"\u0007","is_mandatory":true,"title":"Auto-generated domain name label scope (\"Unsecure\", \"TenantReuse\", \"SubscriptionReuse\", \"ResourceGroupReuse\", \"Noreuse\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryption":{"name":"encryption","type":"\n","is_mandatory":true,"title":"CMK encryption properties (vaultBaseUrl, keyName, keyVersion, identity)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"exposedPorts":{"name":"exposedPorts","type":"\u0019\n","is_mandatory":true,"title":"Exposed ports at the group level — each entry has {port, protocol}","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fqdn":{"name":"fqdn","type":"\u0007","is_mandatory":true,"title":"FQDN, if a DNS name label was set","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasSecretVolume":{"name":"hasSecretVolume","type":"\u0004","is_mandatory":true,"title":"Convenience: any volume of type \"secret\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity block (system + user-assigned principal IDs)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"imageRegistryCredentials":{"name":"imageRegistryCredentials","type":"\u0019\n","is_mandatory":true,"title":"Image registry credentials — each entry has {server, username?, identity?, identityUrl?}","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"initContainers":{"name":"initContainers","type":"\u0019\u001bazure.subscription.containerInstanceService.containerGroup.container","title":"Init containers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipAddressType":{"name":"ipAddressType","type":"\u0007","is_mandatory":true,"title":"IP address type (\"Public\", \"Private\", or null)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Azure region","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"logAnalyticsWorkspaceId":{"name":"logAnalyticsWorkspaceId","type":"\u0007","is_mandatory":true,"title":"Diagnostics: log analytics workspace ID linked to this group, if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Container group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"osType":{"name":"osType","type":"\u0007","is_mandatory":true,"title":"OS type (\"Linux\" or \"Windows\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"priority":{"name":"priority","type":"\u0007","is_mandatory":true,"title":"Priority (\"Regular\" or \"Spot\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state (\"Succeeded\", \"Pending\", \"Failed\", \"Canceled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIp":{"name":"publicIp","type":"\u0007","is_mandatory":true,"title":"Public IP address, if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"registryAuthUsesIdentity":{"name":"registryAuthUsesIdentity","type":"\u0004","is_mandatory":true,"title":"Whether any registry credential uses managed identity (vs username/password)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"restartPolicy":{"name":"restartPolicy","type":"\u0007","is_mandatory":true,"title":"Restart policy (\"Always\", \"OnFailure\", \"Never\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\u0007","is_mandatory":true,"title":"SKU (\"Standard\", \"Dedicated\", \"Confidential\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnetIds":{"name":"subnetIds","type":"\u0019\u0007","is_mandatory":true,"title":"Subnet ARM resource IDs the group is delegated into (Private only)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"volumes":{"name":"volumes","type":"\u0019\n","is_mandatory":true,"title":"Volumes mounted into containers — entries are azureFile / emptyDir / secret / gitRepo","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones the group is pinned to","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Container Instances container group","desc":" Examine a container group — the unit of deployment in ACI, holding one or more containers that share lifecycle, network, and storage. Selectable by ARM id.","min_provider_version":"13.10.2","defaults":"name location osType sku ipAddressType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerInstanceService.containerGroup.container":{"id":"azure.subscription.containerInstanceService.containerGroup.container","name":"azure.subscription.containerInstanceService.containerGroup.container","fields":{"command":{"name":"command","type":"\u0019\u0007","is_mandatory":true,"title":"Container start command","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cpuCores":{"name":"cpuCores","type":"\u0006","is_mandatory":true,"title":"CPU cores requested","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"currentState":{"name":"currentState","type":"\n","is_mandatory":true,"title":"Current state (state, startTime, exitCode, finishTime, detailStatus)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"env":{"name":"env","type":"\u0019\n","is_mandatory":true,"title":"Environment variables — each entry has {name, value, secureValue}","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gpuCount":{"name":"gpuCount","type":"\u0005","is_mandatory":true,"title":"GPU count (zero when no GPU)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gpuSku":{"name":"gpuSku","type":"\u0007","is_mandatory":true,"title":"GPU SKU (\"K80\", \"P100\", \"V100\"), or null","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Composite id: \u003ccontainerGroupId\u003e/containers/\u003cname\u003e","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"image":{"name":"image","type":"\u0007","is_mandatory":true,"title":"Image reference","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"imagePinned":{"name":"imagePinned","type":"\u0004","is_mandatory":true,"title":"Whether the image reference is digest-pinned (contains \"@sha256:\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"livenessProbe":{"name":"livenessProbe","type":"\n","is_mandatory":true,"title":"Liveness probe","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"memoryGB":{"name":"memoryGB","type":"\u0006","is_mandatory":true,"title":"Memory in GB requested","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Container name (within the group)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ports":{"name":"ports","type":"\u0019\n","is_mandatory":true,"title":"Ports exposed by this container — each entry has {port, protocol}","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"readinessProbe":{"name":"readinessProbe","type":"\n","is_mandatory":true,"title":"Readiness probe","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"restartCount":{"name":"restartCount","type":"\u0005","is_mandatory":true,"title":"Restart count","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityContext":{"name":"securityContext","type":"\n","is_mandatory":true,"title":"Security context (privileged, runAsUser, runAsGroup, allowPrivilegeEscalation, capabilities, seccompProfile)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"volumeMounts":{"name":"volumeMounts","type":"\u0019\n","is_mandatory":true,"title":"Volume mounts (volumeName, mountPath, readOnly)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Single container inside a container group","private":true,"min_provider_version":"13.10.2","defaults":"name image imagePinned","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService":{"id":"azure.subscription.containerRegistryService","name":"azure.subscription.containerRegistryService","fields":{"registries":{"name":"registries","type":"\u0019\u001bazure.subscription.containerRegistryService.registry","title":"List of container registries","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"registry":{"name":"registry","type":"\u001bazure.subscription.containerRegistryService.registry","title":"Azure Container Registry","desc":" Examine an Azure Container Registry — the managed Docker registry service. Surfaces the SKU and tier (Basic, Standard, Premium), the admin user state, public network access, the network rule set (default action, IP rules, virtual-network rules), zone redundancy, the encryption configuration and KMS reference, anonymous pull access, data endpoint enabled state, the policies block (quarantine, retention, trust, soft delete, export), and the configured `webhooks()`, `replications()`, and `tasks()`.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Container Registry service","private":true,"min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry":{"id":"azure.subscription.containerRegistryService.registry","name":"azure.subscription.containerRegistryService.registry","fields":{"adminUserEnabled":{"name":"adminUserEnabled","type":"\u0004","is_mandatory":true,"title":"Whether admin user is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"anonymousPullEnabled":{"name":"anonymousPullEnabled","type":"\u0004","is_mandatory":true,"title":"Whether registry-wide pull from unauthenticated clients is enabled","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cacheRule":{"name":"cacheRule","type":"\u001bazure.subscription.containerRegistryService.registry.cacheRule","title":"Pull-through cache rule for an Azure Container Registry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"cacheRules":{"name":"cacheRules","type":"\u0019\u001bazure.subscription.containerRegistryService.registry.cacheRule","title":"Pull-through cache rules from upstream registries","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectedRegistries":{"name":"connectedRegistries","type":"\u0019\u001bazure.subscription.containerRegistryService.registry.connectedRegistry","title":"Connected (edge/on-prem) registries that mirror this registry","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectedRegistry":{"name":"connectedRegistry","type":"\u001bazure.subscription.containerRegistryService.registry.connectedRegistry","title":"Connected (edge/on-prem) registry that mirrors an Azure Container Registry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"creationDate":{"name":"creationDate","type":"\t","is_mandatory":true,"title":"Registry creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"credentialSet":{"name":"credentialSet","type":"\u001bazure.subscription.containerRegistryService.registry.credentialSet","title":"Credential set referenced by cache rules in an Azure Container Registry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"credentialSets":{"name":"credentialSets","type":"\u0019\u001bazure.subscription.containerRegistryService.registry.credentialSet","title":"Credential sets referenced by cache rules (Key Vault-backed upstream credentials)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataEndpointEnabled":{"name":"dataEndpointEnabled","type":"\u0004","is_mandatory":true,"title":"Whether data endpoint is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryption":{"name":"encryption","type":"\u001bazure.subscription.containerRegistryService.registry.encryption","title":"Encryption configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Registry resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Registry location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"loginServer":{"name":"loginServer","type":"\u0007","is_mandatory":true,"title":"Login server URL","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Registry name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleBypassAllowedForTasks":{"name":"networkRuleBypassAllowedForTasks","type":"\u0004","is_mandatory":true,"title":"Whether ACR Tasks are allowed to bypass the network rules (\"True\"/\"False\" semantics surfaced as a bool)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleBypassOptions":{"name":"networkRuleBypassOptions","type":"\u0007","is_mandatory":true,"title":"Network rule bypass options (\"AzureServices\" or \"None\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleSet":{"name":"networkRuleSet","type":"\u001bazure.subscription.containerRegistryService.registry.networkRuleSet","title":"Network rule set configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"policies":{"name":"policies","type":"\u001bazure.subscription.containerRegistryService.registry.policies","title":"Registry policies (trust, retention, quarantine, export)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private endpoint connections","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access setting (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replication":{"name":"replication","type":"\u001bazure.subscription.containerRegistryService.registry.replication","title":"Geo-replication for an Azure Container Registry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"replications":{"name":"replications","type":"\u0019\u001bazure.subscription.containerRegistryService.registry.replication","title":"Geo-replications","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"roleAssignmentMode":{"name":"roleAssignmentMode","type":"\u0007","is_mandatory":true,"title":"Registry role assignment mode (\"AbacRepositoryPermissions\" or \"LegacyRegistryPermissions\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scopeMap":{"name":"scopeMap","type":"\u001bazure.subscription.containerRegistryService.registry.scopeMap","title":"Scope map for token-based access in an Azure Container Registry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"scopeMaps":{"name":"scopeMaps","type":"\u0019\u001bazure.subscription.containerRegistryService.registry.scopeMap","title":"Scope maps for token-based access","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"SKU name (\"Basic\", \"Standard\", or \"Premium\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Registry tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"token":{"name":"token","type":"\u001bazure.subscription.containerRegistryService.registry.token","title":"Repository-scoped access token for an Azure Container Registry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"tokens":{"name":"tokens","type":"\u0019\u001bazure.subscription.containerRegistryService.registry.token","title":"Repository-scoped access tokens","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"webhook":{"name":"webhook","type":"\u001bazure.subscription.containerRegistryService.registry.webhook","title":"Webhook for an Azure Container Registry","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"webhooks":{"name":"webhooks","type":"\u0019\u001bazure.subscription.containerRegistryService.registry.webhook","title":"Webhooks configured on the registry","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundancy":{"name":"zoneRedundancy","type":"\u0007","is_mandatory":true,"title":"Zone redundancy setting (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Container Registry","desc":" Examine an Azure Container Registry — the managed Docker registry service. Surfaces the SKU and tier (Basic, Standard, Premium), the admin user state, public network access, the network rule set (default action, IP rules, virtual-network rules), zone redundancy, the encryption configuration and KMS reference, anonymous pull access, data endpoint enabled state, the policies block (quarantine, retention, trust, soft delete, export), and the configured `webhooks()`, `replications()`, and `tasks()`.","min_provider_version":"13.3.3","defaults":"id name location skuName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.cacheRule":{"id":"azure.subscription.containerRegistryService.registry.cacheRule","name":"azure.subscription.containerRegistryService.registry.cacheRule","fields":{"creationDate":{"name":"creationDate","type":"\t","is_mandatory":true,"title":"Cache rule creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"credentialSet":{"name":"credentialSet","type":"\u001bazure.subscription.containerRegistryService.registry.credentialSet","title":"Typed reference to the credential set used by this cache rule","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"credentialSetResourceId":{"name":"credentialSetResourceId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the credential set associated with the cache rule","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Cache rule resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cache rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceRepository":{"name":"sourceRepository","type":"\u0007","is_mandatory":true,"title":"Source repository pulled from upstream","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"targetRepository":{"name":"targetRepository","type":"\u0007","is_mandatory":true,"title":"Target repository in this registry","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Pull-through cache rule for an Azure Container Registry","private":true,"min_provider_version":"13.5.1","defaults":"id name sourceRepository targetRepository","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.connectedRegistry":{"id":"azure.subscription.containerRegistryService.registry.connectedRegistry","name":"azure.subscription.containerRegistryService.registry.connectedRegistry","fields":{"activationStatus":{"name":"activationStatus","type":"\u0007","is_mandatory":true,"title":"Activation status (\"Active\" or \"Inactive\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"auditLogStatus":{"name":"auditLogStatus","type":"\u0007","is_mandatory":true,"title":"Audit log status (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"clientTokenIds":{"name":"clientTokenIds","type":"\u0019\u0007","is_mandatory":true,"title":"ACR token resource IDs used to authenticate clients connecting to this registry","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionState":{"name":"connectionState","type":"\u0007","is_mandatory":true,"title":"Current connection state (\"Online\", \"Offline\", \"Syncing\", or \"Unhealthy\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"garbageCollectionEnabled":{"name":"garbageCollectionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether garbage collection is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"garbageCollectionSchedule":{"name":"garbageCollectionSchedule","type":"\u0007","is_mandatory":true,"title":"Cron schedule for garbage collection","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Connected registry resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastActivityTime":{"name":"lastActivityTime","type":"\t","is_mandatory":true,"title":"Last activity time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"logLevel":{"name":"logLevel","type":"\u0007","is_mandatory":true,"title":"Verbosity of logs persisted on the connected registry (\"Debug\", \"Information\", \"Warning\", \"Error\", or \"None\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"loginServerHost":{"name":"loginServerHost","type":"\u0007","is_mandatory":true,"title":"Login server hostname (FQDN or IP) for the connected registry","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Permission mode of the connected registry (\"Mirror\", \"ReadOnly\", \"ReadWrite\", or \"Registry\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Connected registry name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notificationsList":{"name":"notificationsList","type":"\u0019\u0007","is_mandatory":true,"title":"Notification subscriptions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"parentId":{"name":"parentId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the parent registry/connected-registry","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"syncLastSyncTime":{"name":"syncLastSyncTime","type":"\t","is_mandatory":true,"title":"Last successful sync time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"syncMessageTtl":{"name":"syncMessageTtl","type":"\u0007","is_mandatory":true,"title":"Sync message TTL (ISO 8601 duration)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"syncSchedule":{"name":"syncSchedule","type":"\u0007","is_mandatory":true,"title":"Cron schedule for parent sync","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"syncTokenId":{"name":"syncTokenId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the ACR token used to authenticate sync to the parent","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"syncWindow":{"name":"syncWindow","type":"\u0007","is_mandatory":true,"title":"Sync window duration (ISO 8601, e.g. \"PT3H\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tlsStatus":{"name":"tlsStatus","type":"\u0007","is_mandatory":true,"title":"Login server TLS status (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"ACR runtime version on the connected registry","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Connected (edge/on-prem) registry that mirrors an Azure Container Registry","private":true,"min_provider_version":"13.5.1","defaults":"id name mode connectionState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.credentialSet":{"id":"azure.subscription.containerRegistryService.registry.credentialSet","name":"azure.subscription.containerRegistryService.registry.credentialSet","fields":{"authCredentials":{"name":"authCredentials","type":"\u0019\n","is_mandatory":true,"title":"Authentication credentials (Key Vault secret URIs for username/password)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"creationDate":{"name":"creationDate","type":"\t","is_mandatory":true,"title":"Credential set creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Credential set resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity used to access the Key Vault holding the secrets","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"loginServer":{"name":"loginServer","type":"\u0007","is_mandatory":true,"title":"The upstream login server the credentials apply to (e.g. \"docker.io\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Credential set name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Credential set referenced by cache rules in an Azure Container Registry","private":true,"min_provider_version":"13.5.1","defaults":"id name loginServer","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.encryption":{"id":"azure.subscription.containerRegistryService.registry.encryption","name":"azure.subscription.containerRegistryService.registry.encryption","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Encryption identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"key":{"name":"key","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for encryption","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyRotationEnabled":{"name":"keyRotationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether automatic key rotation is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyVaultKeyIdentifier":{"name":"keyVaultKeyIdentifier","type":"\u0007","is_mandatory":true,"title":"Key Vault key identifier URI","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastKeyRotationTimestamp":{"name":"lastKeyRotationTimestamp","type":"\t","is_mandatory":true,"title":"Timestamp of last key rotation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Encryption status (\"enabled\" or \"disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Encryption configuration for an Azure Container Registry","private":true,"min_provider_version":"13.3.3","defaults":"status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.networkRuleSet":{"id":"azure.subscription.containerRegistryService.registry.networkRuleSet","name":"azure.subscription.containerRegistryService.registry.networkRuleSet","fields":{"defaultAction":{"name":"defaultAction","type":"\u0007","is_mandatory":true,"title":"Default action (\"Allow\" or \"Deny\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Network rule set identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipRule":{"name":"ipRule","type":"\u001bazure.subscription.containerRegistryService.registry.networkRuleSet.ipRule","title":"IP rule in a container registry network rule set","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"ipRules":{"name":"ipRules","type":"\u0019\u001bazure.subscription.containerRegistryService.registry.networkRuleSet.ipRule","title":"IP rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Network rule set for an Azure Container Registry","private":true,"min_provider_version":"13.3.3","defaults":"defaultAction","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.networkRuleSet.ipRule":{"id":"azure.subscription.containerRegistryService.registry.networkRuleSet.ipRule","name":"azure.subscription.containerRegistryService.registry.networkRuleSet.ipRule","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action (\"Allow\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"IP rule identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipAddressOrRange":{"name":"ipAddressOrRange","type":"\u0007","is_mandatory":true,"title":"IP address or CIDR range","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"IP rule in a container registry network rule set","private":true,"min_provider_version":"13.3.3","defaults":"ipAddressOrRange action","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.policies":{"id":"azure.subscription.containerRegistryService.registry.policies","name":"azure.subscription.containerRegistryService.registry.policies","fields":{"azureADAuthenticationAsArmPolicyEnabled":{"name":"azureADAuthenticationAsArmPolicyEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the AAD-as-ARM authentication policy is enabled (rejects ACR-audience tokens; requires ARM-audience tokens)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"exportPolicyEnabled":{"name":"exportPolicyEnabled","type":"\u0004","is_mandatory":true,"title":"Whether export policy is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policies identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"quarantinePolicyEnabled":{"name":"quarantinePolicyEnabled","type":"\u0004","is_mandatory":true,"title":"Whether quarantine policy is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionPolicyDays":{"name":"retentionPolicyDays","type":"\u0005","is_mandatory":true,"title":"Number of days to retain untagged manifests","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionPolicyEnabled":{"name":"retentionPolicyEnabled","type":"\u0004","is_mandatory":true,"title":"Whether untagged manifest retention is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"trustPolicyEnabled":{"name":"trustPolicyEnabled","type":"\u0004","is_mandatory":true,"title":"Whether content trust (Notary) is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"trustPolicyType":{"name":"trustPolicyType","type":"\u0007","is_mandatory":true,"title":"Trust policy type (\"Notary\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Policies for an Azure Container Registry","private":true,"min_provider_version":"13.3.3","defaults":"trustPolicyEnabled retentionPolicyEnabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.replication":{"id":"azure.subscription.containerRegistryService.registry.replication","name":"azure.subscription.containerRegistryService.registry.replication","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Replication resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Replication location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Replication name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"regionEndpointEnabled":{"name":"regionEndpointEnabled","type":"\u0004","is_mandatory":true,"title":"Whether regional endpoint is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Replication tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundancy":{"name":"zoneRedundancy","type":"\u0007","is_mandatory":true,"title":"Zone redundancy setting (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Geo-replication for an Azure Container Registry","private":true,"min_provider_version":"13.3.3","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.scopeMap":{"id":"azure.subscription.containerRegistryService.registry.scopeMap","name":"azure.subscription.containerRegistryService.registry.scopeMap","fields":{"actions":{"name":"actions","type":"\u0019\u0007","is_mandatory":true,"title":"List of allowed actions (e.g., \"repositories/repo/content/read\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"creationDate":{"name":"creationDate","type":"\t","is_mandatory":true,"title":"Scope map creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the scope map","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Scope map resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Scope map name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Scope map for token-based access in an Azure Container Registry","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.token":{"id":"azure.subscription.containerRegistryService.registry.token","name":"azure.subscription.containerRegistryService.registry.token","fields":{"certificates":{"name":"certificates","type":"\u0019\n","is_mandatory":true,"title":"Token certificates","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"creationDate":{"name":"creationDate","type":"\t","is_mandatory":true,"title":"Token creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Token resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Token name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scopeMap":{"name":"scopeMap","type":"\u001bazure.subscription.containerRegistryService.registry.scopeMap","title":"Scope map that defines token permissions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Token status (\"enabled\" or \"disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Repository-scoped access token for an Azure Container Registry","private":true,"min_provider_version":"13.3.3","defaults":"id name status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.containerRegistryService.registry.webhook":{"id":"azure.subscription.containerRegistryService.registry.webhook","name":"azure.subscription.containerRegistryService.registry.webhook","fields":{"actions":{"name":"actions","type":"\u0019\u0007","is_mandatory":true,"title":"Actions that trigger the webhook (e.g., \"push\", \"delete\", \"quarantine\", \"chart_push\", \"chart_delete\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Webhook resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Webhook location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Webhook name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Repository scope filter","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Webhook status (\"enabled\" or \"disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Webhook tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Webhook for an Azure Container Registry","private":true,"min_provider_version":"13.3.3","defaults":"id name status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cosmosDbService":{"id":"azure.subscription.cosmosDbService","name":"azure.subscription.cosmosDbService","fields":{"account":{"name":"account","type":"\u001bazure.subscription.cosmosDbService.account","title":"Azure Cosmos DB account","desc":" Examine a Cosmos DB account — the multi-model NoSQL service's top-level resource. Surfaces the account `kind` (GlobalDocumentDB, MongoDB, Parse), the API offering, default consistency policy, configured locations and failover priorities, public network access, network ACL bypass for Azure services, IP rules, virtual-network rules, the encryption settings (key URI, identity used to access Key Vault), local authentication state, the `disableLocalAuth` flag, the `analyticalStorageConfiguration`, backup policy, capabilities, and the `sqlDatabases()` exposed by the account.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"accounts":{"name":"accounts","type":"\u0019\u001bazure.subscription.cosmosDbService.account","title":"List of Cosmos DB accounts","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cosmos DB","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cosmosDbService.account":{"id":"azure.subscription.cosmosDbService.account","name":"azure.subscription.cosmosDbService.account","fields":{"backupIntervalInMinutes":{"name":"backupIntervalInMinutes","type":"\u0005","is_mandatory":true,"title":"Backup interval in minutes (for Periodic backup policy)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backupRetentionIntervalInHours":{"name":"backupRetentionIntervalInHours","type":"\u0005","is_mandatory":true,"title":"Backup retention in hours (for Periodic backup policy)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backupStorageRedundancy":{"name":"backupStorageRedundancy","type":"\u0007","is_mandatory":true,"title":"Backup storage redundancy (for Periodic backup policy: \"Geo\", \"Local\", \"Zone\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backupType":{"name":"backupType","type":"\u0007","is_mandatory":true,"title":"Backup policy type (\"Periodic\" or \"Continuous\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultIdentity":{"name":"defaultIdentity","type":"\u0007","is_mandatory":true,"title":"Default identity used for accessing customer-managed encryption key","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diagnosticSettings":{"name":"diagnosticSettings","type":"\u0019\u001bazure.subscription.monitorService.diagnosticsetting","title":"Diagnostic settings configured on the Cosmos DB account","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableKeyBasedMetadataWriteAccess":{"name":"disableKeyBasedMetadataWriteAccess","type":"\u0004","is_mandatory":true,"title":"Whether key-based metadata write access is disabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableLocalAuth":{"name":"disableLocalAuth","type":"\u0004","is_mandatory":true,"title":"Whether local authentication is disabled (requires Entra ID)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableAutomaticFailover":{"name":"enableAutomaticFailover","type":"\u0004","is_mandatory":true,"title":"Whether automatic failover is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableMultipleWriteLocations":{"name":"enableMultipleWriteLocations","type":"\u0004","is_mandatory":true,"title":"Whether multi-region write is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionKey":{"name":"encryptionKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for customer-managed encryption (null if platform-managed)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Cosmos DB account ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipRangeFilter":{"name":"ipRangeFilter","type":"\u0019\u0007","is_mandatory":true,"title":"IP address or CIDR ranges allowed by IP firewall rules","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isVirtualNetworkFilterEnabled":{"name":"isVirtualNetworkFilterEnabled","type":"\u0004","is_mandatory":true,"title":"Whether virtual network filtering is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Cosmos DB account kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Cosmos DB account location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimalTlsVersion":{"name":"minimalTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum allowed TLS version for the Cosmos DB account","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cosmos DB account name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private endpoint connections for the Cosmos DB account","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Cosmos DB account properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled for the Cosmos DB account","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sqlDatabase":{"name":"sqlDatabase","type":"\u001bazure.subscription.cosmosDbService.account.sqlDatabase","title":"Azure Cosmos DB SQL API database","desc":" Examine a SQL-API (Core) database hosted on a Cosmos DB account. Selectable by ARM id; surfaces the database-level throughput posture (manual provisioned vs autoscale ceiling, with `throughputPerContainer` distinguishing the case where throughput is configured per-container rather than at the database level) and exposes the contained containers as a typed sub-resource. Throughput fields are lazy and share a single GetSQLDatabaseThroughput call.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"sqlDatabases":{"name":"sqlDatabases","type":"\u0019\u001bazure.subscription.cosmosDbService.account.sqlDatabase","title":"SQL API databases hosted on the account (Core SQL API)","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sqlRoleAssignment":{"name":"sqlRoleAssignment","type":"\u001bazure.subscription.cosmosDbService.account.sqlRoleAssignment","title":"Azure Cosmos DB SQL data-plane role assignment","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"sqlRoleAssignments":{"name":"sqlRoleAssignments","type":"\u0019\u001bazure.subscription.cosmosDbService.account.sqlRoleAssignment","title":"Cosmos DB SQL data-plane role assignments","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sqlRoleDefinition":{"name":"sqlRoleDefinition","type":"\u001bazure.subscription.cosmosDbService.account.sqlRoleDefinition","title":"Azure Cosmos DB SQL data-plane role definition (data-plane RBAC, separate from Azure ARM roles)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"sqlRoleDefinitions":{"name":"sqlRoleDefinitions","type":"\u0019\u001bazure.subscription.cosmosDbService.account.sqlRoleDefinition","title":"Cosmos DB SQL data-plane role definitions (built-in and custom)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Cosmos DB account tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Cosmos DB account type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkRule":{"name":"virtualNetworkRule","type":"\u001bazure.subscription.cosmosDbService.account.virtualNetworkRule","title":"Azure Cosmos DB account virtual network rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"virtualNetworkRules":{"name":"virtualNetworkRules","type":"\u0019\u001bazure.subscription.cosmosDbService.account.virtualNetworkRule","is_mandatory":true,"title":"Virtual network rules for the Cosmos DB account","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cosmos DB account","desc":" Examine a Cosmos DB account — the multi-model NoSQL service's top-level resource. Surfaces the account `kind` (GlobalDocumentDB, MongoDB, Parse), the API offering, default consistency policy, configured locations and failover priorities, public network access, network ACL bypass for Azure services, IP rules, virtual-network rules, the encryption settings (key URI, identity used to access Key Vault), local authentication state, the `disableLocalAuth` flag, the `analyticalStorageConfiguration`, backup policy, capabilities, and the `sqlDatabases()` exposed by the account.","min_provider_version":"9.0.1","defaults":"name kind location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cosmosDbService.account.sqlDatabase":{"id":"azure.subscription.cosmosDbService.account.sqlDatabase","name":"azure.subscription.cosmosDbService.account.sqlDatabase","fields":{"autoscaleEnabled":{"name":"autoscaleEnabled","type":"\u0004","title":"Whether autoscale is enabled at the database level","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"autoscaleMaxThroughput":{"name":"autoscaleMaxThroughput","type":"\u0005","title":"Autoscale max throughput in RU/s at the database level","desc":"Zero when not autoscale or when configured per-container.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"container":{"name":"container","type":"\u001bazure.subscription.cosmosDbService.account.sqlDatabase.container","title":"Azure Cosmos DB SQL API container","desc":" Examine a SQL-API container within a Cosmos DB database. Selectable by ARM id; surfaces the partition key, default TTL, indexing policy mode, conflict resolution policy, unique-key constraints, and the throughput posture (manual / autoscale / inherited from the parent database). Throughput fields are lazy and share a single GetSQLContainerThroughput call.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containers":{"name":"containers","type":"\u0019\u001bazure.subscription.cosmosDbService.account.sqlDatabase.container","title":"Containers within the database","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"manualThroughput":{"name":"manualThroughput","type":"\u0005","title":"Manual provisioned throughput in RU/s at the database level","desc":"Zero when configured per-container or when autoscale is enabled.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Database name (Cosmos DB resource id; same as ARM child segment)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"throughputPerContainer":{"name":"throughputPerContainer","type":"\u0004","title":"Whether throughput is configured per-container instead of at the database level","desc":"True means each container manages its own throughput, equivalent to there being no database-scope throughput offer.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cosmos DB SQL API database","desc":" Examine a SQL-API (Core) database hosted on a Cosmos DB account. Selectable by ARM id; surfaces the database-level throughput posture (manual provisioned vs autoscale ceiling, with `throughputPerContainer` distinguishing the case where throughput is configured per-container rather than at the database level) and exposes the contained containers as a typed sub-resource. Throughput fields are lazy and share a single GetSQLDatabaseThroughput call.","private":true,"min_provider_version":"13.10.2","defaults":"name throughputPerContainer autoscaleEnabled manualThroughput","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cosmosDbService.account.sqlDatabase.container":{"id":"azure.subscription.cosmosDbService.account.sqlDatabase.container","name":"azure.subscription.cosmosDbService.account.sqlDatabase.container","fields":{"analyticalStorageTtl":{"name":"analyticalStorageTtl","type":"\u0005","is_mandatory":true,"title":"Analytical store TTL in seconds; zero when analytical store is disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"automaticIndexing":{"name":"automaticIndexing","type":"\u0004","is_mandatory":true,"title":"Whether automatic indexing is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"autoscaleEnabled":{"name":"autoscaleEnabled","type":"\u0004","title":"Whether autoscale is enabled at the container level","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"autoscaleMaxThroughput":{"name":"autoscaleMaxThroughput","type":"\u0005","title":"Autoscale max throughput in RU/s at the container level","desc":"Zero when not autoscale or when inherited from the parent database.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"conflictResolutionMode":{"name":"conflictResolutionMode","type":"\u0007","is_mandatory":true,"title":"Conflict resolution mode (\"LastWriterWins\", \"Custom\"); empty when default","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"conflictResolutionPath":{"name":"conflictResolutionPath","type":"\u0007","is_mandatory":true,"title":"Conflict resolution path (when mode == \"LastWriterWins\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultTtl":{"name":"defaultTtl","type":"\u0005","is_mandatory":true,"title":"Default time-to-live for items in seconds.","desc":"0  — TTL is disabled on the container (the API returned nil; we surface that as 0). -1 — TTL is enabled on the container but items have no default expiration; per-item TTLs still apply. \u003e0 — default TTL value in seconds applied to items in the container.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"indexingMode":{"name":"indexingMode","type":"\u0007","is_mandatory":true,"title":"Indexing policy mode (\"Consistent\", \"Lazy\", \"None\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"manualThroughput":{"name":"manualThroughput","type":"\u0005","title":"Manual provisioned throughput in RU/s at the container level","desc":"Zero when inherited or when autoscale is configured.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Container name (Cosmos DB resource id; same as ARM child segment)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partitionKeyKind":{"name":"partitionKeyKind","type":"\u0007","is_mandatory":true,"title":"Partition key kind (\"Hash\", \"Range\", \"MultiHash\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partitionKeyPaths":{"name":"partitionKeyPaths","type":"\u0019\u0007","is_mandatory":true,"title":"Partition key paths (e.g., [\"/userId\"])","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"throughputInherited":{"name":"throughputInherited","type":"\u0004","title":"Whether throughput is inherited from the parent database","desc":"True means there is no container-level offer and the database scope provides the offer for this container.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"uniqueKeys":{"name":"uniqueKeys","type":"\u0019\n","is_mandatory":true,"title":"Unique key constraints. Each entry has shape {paths: []string}.","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cosmos DB SQL API container","desc":" Examine a SQL-API container within a Cosmos DB database. Selectable by ARM id; surfaces the partition key, default TTL, indexing policy mode, conflict resolution policy, unique-key constraints, and the throughput posture (manual / autoscale / inherited from the parent database). Throughput fields are lazy and share a single GetSQLContainerThroughput call.","private":true,"min_provider_version":"13.10.2","defaults":"name partitionKeyPaths defaultTtl","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cosmosDbService.account.sqlRoleAssignment":{"id":"azure.subscription.cosmosDbService.account.sqlRoleAssignment","name":"azure.subscription.cosmosDbService.account.sqlRoleAssignment","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Cosmos role assignment resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cosmos role assignment resource name (a GUID)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"principalId":{"name":"principalId","type":"\u0007","is_mandatory":true,"title":"AAD principal granted access by this assignment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"roleDefinitionId":{"name":"roleDefinitionId","type":"\u0007","is_mandatory":true,"title":"Cosmos role definition ID this assignment binds","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Data-plane scope this assignment applies to (account, database, or container)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Cosmos role assignment resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cosmos DB SQL data-plane role assignment","private":true,"min_provider_version":"13.8.2","defaults":"name principalId scope","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cosmosDbService.account.sqlRoleDefinition":{"id":"azure.subscription.cosmosDbService.account.sqlRoleDefinition","name":"azure.subscription.cosmosDbService.account.sqlRoleDefinition","fields":{"assignableScopes":{"name":"assignableScopes","type":"\u0019\u0007","is_mandatory":true,"title":"Scopes at or below which assignments using this definition may be created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Cosmos role definition resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cosmos role definition resource name (a GUID)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"permissions":{"name":"permissions","type":"\u0019\n","is_mandatory":true,"title":"Permission set granted by this role (Cosmos permission JSON: dataActions, notDataActions)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"roleName":{"name":"roleName","type":"\u0007","is_mandatory":true,"title":"User-friendly role name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"roleType":{"name":"roleType","type":"\u0007","is_mandatory":true,"title":"\"BuiltInRole\" or \"CustomRole\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Cosmos role definition resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cosmos DB SQL data-plane role definition (data-plane RBAC, separate from Azure ARM roles)","private":true,"min_provider_version":"13.8.2","defaults":"name roleName roleType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.cosmosDbService.account.virtualNetworkRule":{"id":"azure.subscription.cosmosDbService.account.virtualNetworkRule","name":"azure.subscription.cosmosDbService.account.virtualNetworkRule","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Rule ID (account ID + subnet ID hash)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ignoreMissingVNetServiceEndpoint":{"name":"ignoreMissingVNetServiceEndpoint","type":"\u0004","is_mandatory":true,"title":"Whether to allow requests from the subnet even if the service endpoint is not configured","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnetId":{"name":"subnetId","type":"\u0007","is_mandatory":true,"title":"Virtual network subnet resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Cosmos DB account virtual network rule","private":true,"min_provider_version":"13.1.8","defaults":"subnetId ignoreMissingVNetServiceEndpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dataFactoryService":{"id":"azure.subscription.dataFactoryService","name":"azure.subscription.dataFactoryService","fields":{"factories":{"name":"factories","type":"\u0019\u001bazure.subscription.dataFactoryService.factory","title":"List of Data Factory instances","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"factory":{"name":"factory","type":"\u001bazure.subscription.dataFactoryService.factory","title":"Azure Data Factory","desc":" Examine an Azure Data Factory — the managed ETL/ELT and data integration service. Surfaces the factory's identity assignments, the linked Git repository configuration (Azure DevOps or GitHub account, project, root folder, collaboration branch), public network access, the `purviewConfiguration` for data-catalog integration, encryption settings (customer-managed key reference), global parameters, and the resource version.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Data Factory service","private":true,"min_provider_version":"13.3.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dataFactoryService.factory":{"id":"azure.subscription.dataFactoryService.factory","name":"azure.subscription.dataFactoryService.factory","fields":{"created":{"name":"created","type":"\t","is_mandatory":true,"title":"Time the factory was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryption":{"name":"encryption","type":"\n","is_mandatory":true,"title":"Encryption configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Full resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"integrationRuntime":{"name":"integrationRuntime","type":"\u001bazure.subscription.dataFactoryService.factory.integrationRuntime","title":"Azure Data Factory integration runtime","desc":" Examine a compute resource attached to the factory — either a fully-managed Azure runtime (Azure Integration Runtime / Azure-SSIS) or a Self-hosted runtime that runs on customer infrastructure. Selectable by ARM id; fields cover the runtime type and the raw type-specific properties (Managed exposes computeProperties / ssisProperties; SelfHosted exposes nodes and version info).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"integrationRuntimes":{"name":"integrationRuntimes","type":"\u0019\u001bazure.subscription.dataFactoryService.factory.integrationRuntime","title":"Integration runtimes that execute pipeline activities","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"linkedService":{"name":"linkedService","type":"\u001bazure.subscription.dataFactoryService.factory.linkedService","title":"Azure Data Factory linked service","desc":" Examine a single linked service — the configured connection from the factory to an external system (Azure SQL, Storage, REST API, ...). Selectable by ARM id; fields cover the linked-service type, the integration runtime executing it, declared parameter names, and a `usesKeyVaultReference` rollup that flags whether any credential field in `typeProperties` resolves through Azure Key Vault.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"linkedServices":{"name":"linkedServices","type":"\u0019\u001bazure.subscription.dataFactoryService.factory.linkedService","title":"Linked services configured on the factory (connection info for external systems)","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Location of the factory","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedPrivateEndpoint":{"name":"managedPrivateEndpoint","type":"\u001bazure.subscription.dataFactoryService.factory.managedPrivateEndpoint","title":"Azure Data Factory managed private endpoint","desc":" Examine a managed private endpoint inside a factory's managed virtual network — used to route factory traffic to a target Azure resource via Private Link. Selectable by ARM id; fields expose the target resource, the connection-approval state, and FQDNs assigned to the endpoint.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"managedVirtualNetwork":{"name":"managedVirtualNetwork","type":"\u001bazure.subscription.dataFactoryService.factory.managedVirtualNetwork","title":"Managed virtual network for the factory, if one exists","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the factory","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"repoConfiguration":{"name":"repoConfiguration","type":"\n","is_mandatory":true,"title":"Repository configuration for source control","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Tags for the factory","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version of the factory","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Data Factory","desc":" Examine an Azure Data Factory — the managed ETL/ELT and data integration service. Surfaces the factory's identity assignments, the linked Git repository configuration (Azure DevOps or GitHub account, project, root folder, collaboration branch), public network access, the `purviewConfiguration` for data-catalog integration, encryption settings (customer-managed key reference), global parameters, and the resource version.","min_provider_version":"13.3.0","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dataFactoryService.factory.integrationRuntime":{"id":"azure.subscription.dataFactoryService.factory.integrationRuntime","name":"azure.subscription.dataFactoryService.factory.integrationRuntime","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Integration runtime name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"runtimeType":{"name":"runtimeType","type":"\u0007","is_mandatory":true,"title":"Runtime type (\"Managed\", \"SelfHosted\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"typeProperties":{"name":"typeProperties","type":"\n","is_mandatory":true,"title":"Type-specific properties returned by the SDK (shape varies by runtimeType)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Data Factory integration runtime","desc":" Examine a compute resource attached to the factory — either a fully-managed Azure runtime (Azure Integration Runtime / Azure-SSIS) or a Self-hosted runtime that runs on customer infrastructure. Selectable by ARM id; fields cover the runtime type and the raw type-specific properties (Managed exposes computeProperties / ssisProperties; SelfHosted exposes nodes and version info).","private":true,"min_provider_version":"13.10.2","defaults":"name runtimeType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dataFactoryService.factory.linkedService":{"id":"azure.subscription.dataFactoryService.factory.linkedService","name":"azure.subscription.dataFactoryService.factory.linkedService","fields":{"annotations":{"name":"annotations","type":"\u0019\n","is_mandatory":true,"title":"Annotations declared on the linked service (free-form list of any)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Linked-service description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"integrationRuntimeName":{"name":"integrationRuntimeName","type":"\u0007","is_mandatory":true,"title":"Name of the referenced integration runtime; empty when the factory's default is used","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Linked service name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"parameterNames":{"name":"parameterNames","type":"\u0019\u0007","is_mandatory":true,"title":"Names of declared parameters","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceType":{"name":"serviceType","type":"\u0007","is_mandatory":true,"title":"Linked-service type (e.g., \"AzureBlobStorage\", \"AzureSqlDatabase\", \"RestService\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type (always \"Microsoft.DataFactory/factories/linkedservices\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"typeProperties":{"name":"typeProperties","type":"\n","is_mandatory":true,"title":"Raw type-specific properties returned by the SDK (shape varies by serviceType)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"usesKeyVaultReference":{"name":"usesKeyVaultReference","type":"\u0004","is_mandatory":true,"title":"Whether any credential or secret field resolves via Azure Key Vault (i.e., a nested","desc":"`{type: \"AzureKeyVaultSecret\", store: {...}, secretName: ...}` reference exists in typeProperties)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Linked-service version","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Data Factory linked service","desc":" Examine a single linked service — the configured connection from the factory to an external system (Azure SQL, Storage, REST API, ...). Selectable by ARM id; fields cover the linked-service type, the integration runtime executing it, declared parameter names, and a `usesKeyVaultReference` rollup that flags whether any credential field in `typeProperties` resolves through Azure Key Vault.","private":true,"min_provider_version":"13.10.2","defaults":"name serviceType integrationRuntimeName usesKeyVaultReference","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dataFactoryService.factory.managedPrivateEndpoint":{"id":"azure.subscription.dataFactoryService.factory.managedPrivateEndpoint","name":"azure.subscription.dataFactoryService.factory.managedPrivateEndpoint","fields":{"actionsRequired":{"name":"actionsRequired","type":"\u0007","is_mandatory":true,"title":"Action required by the consumer (\"None\" or a description string)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionStatus":{"name":"connectionStatus","type":"\u0007","is_mandatory":true,"title":"Connection status (\"Approved\", \"Pending\", \"Rejected\", \"Disconnected\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description / reason text on the connection state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fqdns":{"name":"fqdns","type":"\u0019\u0007","is_mandatory":true,"title":"Fully qualified domain names assigned to the endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"groupId":{"name":"groupId","type":"\u0007","is_mandatory":true,"title":"Sub-resource group ID on the target (e.g., \"blob\", \"sqlServer\", \"vault\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Endpoint name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateLinkResourceId":{"name":"privateLinkResourceId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the target Private Link resource","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"reserved":{"name":"reserved","type":"\u0004","is_mandatory":true,"title":"Whether the endpoint is reserved","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Data Factory managed private endpoint","desc":" Examine a managed private endpoint inside a factory's managed virtual network — used to route factory traffic to a target Azure resource via Private Link. Selectable by ARM id; fields expose the target resource, the connection-approval state, and FQDNs assigned to the endpoint.","private":true,"min_provider_version":"13.10.2","defaults":"name groupId connectionStatus","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dataFactoryService.factory.managedVirtualNetwork":{"id":"azure.subscription.dataFactoryService.factory.managedVirtualNetwork","name":"azure.subscription.dataFactoryService.factory.managedVirtualNetwork","fields":{"alias":{"name":"alias","type":"\u0007","is_mandatory":true,"title":"Managed Virtual Network alias","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Managed virtual network name (always \"default\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpoints":{"name":"privateEndpoints","type":"\u0019\u001bazure.subscription.dataFactoryService.factory.managedPrivateEndpoint","title":"Managed private endpoints attached to this managed virtual network","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vnetId":{"name":"vnetId","type":"\u0007","is_mandatory":true,"title":"Underlying virtual network ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Data Factory managed virtual network","desc":" Examine the (singleton) managed virtual network on a factory. Selectable by ARM id; fields expose the alias and the underlying virtual-network id, plus the managed private endpoints that route factory-side traffic privately to other Azure resources.","private":true,"min_provider_version":"13.10.2","defaults":"name alias","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.databricksService":{"id":"azure.subscription.databricksService","name":"azure.subscription.databricksService","fields":{"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workspace":{"name":"workspace","type":"\u001bazure.subscription.databricksService.workspace","title":"Azure Databricks workspace","desc":" Examine an Azure Databricks workspace — the analytics platform's per-environment control plane. Surfaces the workspace SKU (Standard, Premium, Trial), public network access state, the managed resource group ID, the linked virtual network when VNet injection is configured, the encryption settings (managed services key and managed disks key), authorization settings, and the `requiredNsgRules` posture used by the data plane.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"workspaces":{"name":"workspaces","type":"\u0019\u001bazure.subscription.databricksService.workspace","title":"Databricks workspaces in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Databricks","private":true,"min_provider_version":"11.4.25","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.databricksService.workspace":{"id":"azure.subscription.databricksService.workspace","name":"azure.subscription.databricksService.workspace","fields":{"customVirtualNetworkId":{"name":"customVirtualNetworkId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the custom VNet the workspace is injected into (empty if using a managed VNet)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diskEncryptionSetId":{"name":"diskEncryptionSetId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the managed disk encryption set used for managed disks","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableNoPublicIp":{"name":"enableNoPublicIp","type":"\u0004","is_mandatory":true,"title":"Whether public IPs are disabled on cluster nodes (Secure Cluster Connectivity / VNet injection)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Workspace ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Workspace location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedDiskKeyName":{"name":"managedDiskKeyName","type":"\u0007","is_mandatory":true,"title":"Managed-disk CMK key name","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedDiskKeySource":{"name":"managedDiskKeySource","type":"\u0007","is_mandatory":true,"title":"CMK key source for managed disks (\"Default\" or \"Microsoft.Keyvault\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedDiskKeyVaultUri":{"name":"managedDiskKeyVaultUri","type":"\u0007","is_mandatory":true,"title":"Key Vault URI for the managed-disk CMK (empty if platform-managed)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedDiskKeyVersion":{"name":"managedDiskKeyVersion","type":"\u0007","is_mandatory":true,"title":"Managed-disk CMK key version","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedResourceGroupId":{"name":"managedResourceGroupId","type":"\u0007","is_mandatory":true,"title":"Managed resource group ARM resource ID","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedServicesKeyName":{"name":"managedServicesKeyName","type":"\u0007","is_mandatory":true,"title":"Managed-services CMK key name","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedServicesKeySource":{"name":"managedServicesKeySource","type":"\u0007","is_mandatory":true,"title":"CMK key source for managed services (\"Default\" or \"Microsoft.Keyvault\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedServicesKeyVaultUri":{"name":"managedServicesKeyVaultUri","type":"\u0007","is_mandatory":true,"title":"Key Vault URI for the managed-services CMK (empty if platform-managed)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedServicesKeyVersion":{"name":"managedServicesKeyVersion","type":"\u0007","is_mandatory":true,"title":"Managed-services CMK key version","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Workspace name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Workspace properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access setting (\"Enabled\" or \"Disabled\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requireInfrastructureEncryption":{"name":"requireInfrastructureEncryption","type":"\u0004","is_mandatory":true,"title":"Whether double encryption (platform-managed key on top of CMK) is enabled for the DBFS root","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requiredNsgRules":{"name":"requiredNsgRules","type":"\u0007","is_mandatory":true,"title":"Required NSG rules mode (\"AllRules\", \"NoAzureDatabricksRules\", or \"NoAzureServiceRules\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"Workspace SKU","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Workspace tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Workspace type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workspaceId":{"name":"workspaceId","type":"\u0007","is_mandatory":true,"title":"Databricks control-plane workspace identifier","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Databricks workspace","desc":" Examine an Azure Databricks workspace — the analytics platform's per-environment control plane. Surfaces the workspace SKU (Standard, Premium, Trial), public network access state, the managed resource group ID, the linked virtual network when VNet injection is configured, the encryption settings (managed services key and managed disks key), authorization settings, and the `requiredNsgRules` posture used by the data plane.","min_provider_version":"11.4.25","defaults":"id name location publicNetworkAccess","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dnsService":{"id":"azure.subscription.dnsService","name":"azure.subscription.dnsService","fields":{"privateZone":{"name":"privateZone","type":"\u001bazure.subscription.dnsService.privateZone","title":"Azure Private DNS zone","desc":" Examine an Azure Private DNS zone — a DNS zone resolved only from linked virtual networks. Surfaces the `numberOfRecordSets` and the `numberOfVirtualNetworkLinks` (with auto-registration counts), the `provisioningState`, the maximum allowed record-set and virtual-network-link counts, and the `recordSets()` hosted in the zone.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateZones":{"name":"privateZones","type":"\u0019\u001bazure.subscription.dnsService.privateZone","title":"List of private DNS zones","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zone":{"name":"zone","type":"\u001bazure.subscription.dnsService.zone","title":"Azure public DNS zone","desc":" Examine an Azure DNS public zone. Surfaces the zone's `numberOfRecordSets` and `maxNumberOfRecordSets` cap, the assigned authoritative name servers, the registration virtual networks (when the zone is private DNS in another product), and the `recordSets()` hosted in the zone. Use `azure.subscription.dnsService.privateZone` for Azure Private DNS zones.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"zones":{"name":"zones","type":"\u0019\u001bazure.subscription.dnsService.zone","title":"List of public DNS zones","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure DNS service","private":true,"min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dnsService.privateZone":{"id":"azure.subscription.dnsService.privateZone","name":"azure.subscription.dnsService.privateZone","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Private DNS zone resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Private DNS zone location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxNumberOfRecordSets":{"name":"maxNumberOfRecordSets","type":"\u0005","is_mandatory":true,"title":"Maximum number of record sets allowed","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Private DNS zone name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"numberOfRecordSets":{"name":"numberOfRecordSets","type":"\u0005","is_mandatory":true,"title":"Number of record sets in the zone","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"numberOfVirtualNetworkLinks":{"name":"numberOfVirtualNetworkLinks","type":"\u0005","is_mandatory":true,"title":"Number of virtual network links","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Private DNS zone tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkLink":{"name":"virtualNetworkLink","type":"\u001bazure.subscription.dnsService.privateZone.virtualNetworkLink","title":"Azure private DNS zone virtual network link","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"virtualNetworkLinks":{"name":"virtualNetworkLinks","type":"\u0019\u001bazure.subscription.dnsService.privateZone.virtualNetworkLink","title":"Virtual network links for this private zone","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Private DNS zone","desc":" Examine an Azure Private DNS zone — a DNS zone resolved only from linked virtual networks. Surfaces the `numberOfRecordSets` and the `numberOfVirtualNetworkLinks` (with auto-registration counts), the `provisioningState`, the maximum allowed record-set and virtual-network-link counts, and the `recordSets()` hosted in the zone.","min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dnsService.privateZone.virtualNetworkLink":{"id":"azure.subscription.dnsService.privateZone.virtualNetworkLink","name":"azure.subscription.dnsService.privateZone.virtualNetworkLink","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Virtual network link resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Virtual network link location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Virtual network link name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"registrationEnabled":{"name":"registrationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether auto-registration of VM records is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Virtual network link tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure private DNS zone virtual network link","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dnsService.zone":{"id":"azure.subscription.dnsService.zone","name":"azure.subscription.dnsService.zone","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"DNS zone resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"DNS zone location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxNumberOfRecordSets":{"name":"maxNumberOfRecordSets","type":"\u0005","is_mandatory":true,"title":"Maximum number of record sets allowed","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"DNS zone name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nameServers":{"name":"nameServers","type":"\u0019\u0007","is_mandatory":true,"title":"Name servers for the zone","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"numberOfRecordSets":{"name":"numberOfRecordSets","type":"\u0005","is_mandatory":true,"title":"Number of record sets in the zone","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recordSet":{"name":"recordSet","type":"\u001bazure.subscription.dnsService.zone.recordSet","title":"Azure DNS record set","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"recordSets":{"name":"recordSets","type":"\u0019\u001bazure.subscription.dnsService.zone.recordSet","title":"Record sets in the zone","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"DNS zone tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure public DNS zone","desc":" Examine an Azure DNS public zone. Surfaces the zone's `numberOfRecordSets` and `maxNumberOfRecordSets` cap, the assigned authoritative name servers, the registration virtual networks (when the zone is private DNS in another product), and the `recordSets()` hosted in the zone. Use `azure.subscription.dnsService.privateZone` for Azure Private DNS zones.","min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.dnsService.zone.recordSet":{"id":"azure.subscription.dnsService.zone.recordSet","name":"azure.subscription.dnsService.zone.recordSet","fields":{"fqdn":{"name":"fqdn","type":"\u0007","is_mandatory":true,"title":"Fully qualified domain name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Record set resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Record set name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Record set properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ttl":{"name":"ttl","type":"\u0005","is_mandatory":true,"title":"Time-to-live in seconds","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Record type (A, AAAA, CNAME, MX, NS, PTR, SOA, SRV, TXT, CAA)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure DNS record set","private":true,"min_provider_version":"13.3.3","defaults":"id name type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.eventGridService":{"id":"azure.subscription.eventGridService","name":"azure.subscription.eventGridService","fields":{"domain":{"name":"domain","type":"\u001bazure.subscription.eventGridService.domain","title":"Azure Event Grid domain","desc":" Examine an Event Grid domain — a multi-tenant topic container that scopes thousands of topics under a single endpoint. Surfaces the input schema, the `disableLocalAuth` toggle, public network access state, inbound IP rules, the minimum TLS version enforced on publishers, the auto-create / auto-delete domain-topic toggles, the data residency boundary, the publishing endpoint, identity assignments, the metric resource ID, and the count of private endpoint connections.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"domains":{"name":"domains","type":"\u0019\u001bazure.subscription.eventGridService.domain","title":"Event Grid domains in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"systemTopic":{"name":"systemTopic","type":"\u001bazure.subscription.eventGridService.systemTopic","title":"Azure Event Grid system topic","desc":" Examine an Event Grid system topic — auto-generated topics used by Azure resources (storage accounts, key vaults, container registries, etc.) to publish events. Surfaces the source resource, the topic type, provisioning state, identity assignments, and the metric resource ID. Use the `source` field as the typed pointer back to the originating Azure resource.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"systemTopics":{"name":"systemTopics","type":"\u0019\u001bazure.subscription.eventGridService.systemTopic","title":"Event Grid system topics in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"topic":{"name":"topic","type":"\u001bazure.subscription.eventGridService.topic","title":"Azure Event Grid custom topic","desc":" Examine an Event Grid custom topic — a user-created event ingestion endpoint clients publish to. Surfaces the input schema, the `disableLocalAuth` toggle, public network access state, inbound IP rules, the minimum TLS version enforced on publishers, the data residency boundary, the publishing endpoint, identity assignments, the metric resource ID, and the count of private endpoint connections.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"topics":{"name":"topics","type":"\u0019\u001bazure.subscription.eventGridService.topic","title":"Event Grid custom topics in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Event Grid service","private":true,"min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.eventGridService.domain":{"id":"azure.subscription.eventGridService.domain","name":"azure.subscription.eventGridService.domain","fields":{"autoCreateTopicWithFirstSubscription":{"name":"autoCreateTopicWithFirstSubscription","type":"\u0004","is_mandatory":true,"title":"Whether domain topics are auto-created when the first subscription is created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"autoDeleteTopicWithLastSubscription":{"name":"autoDeleteTopicWithLastSubscription","type":"\u0004","is_mandatory":true,"title":"Whether domain topics are auto-deleted when the last subscription is deleted","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataResidencyBoundary":{"name":"dataResidencyBoundary","type":"\u0007","is_mandatory":true,"title":"Data residency boundary (\"WithinGeopair\" or \"WithinRegion\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableLocalAuth":{"name":"disableLocalAuth","type":"\u0004","is_mandatory":true,"title":"Whether local (key) authentication is disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"endpoint":{"name":"endpoint","type":"\u0007","is_mandatory":true,"title":"Endpoint URL clients publish events to","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Domain resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identityType":{"name":"identityType","type":"\u0007","is_mandatory":true,"title":"Identity type (\"None\", \"SystemAssigned\", \"UserAssigned\", \"SystemAssigned, UserAssigned\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inboundIpRules":{"name":"inboundIpRules","type":"\u0019\n","is_mandatory":true,"title":"Inbound IP rules; each entry has ipMask and action (\"Allow\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inputSchema":{"name":"inputSchema","type":"\u0007","is_mandatory":true,"title":"Input schema for events (\"EventGridSchema\", \"CustomEventSchema\", \"CloudEventSchemaV1_0\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Domain location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metricResourceId":{"name":"metricResourceId","type":"\u0007","is_mandatory":true,"title":"Metric resource ID for the domain","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimumTlsVersionAllowed":{"name":"minimumTlsVersionAllowed","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version enforced on publishers (\"1.0\", \"1.1\", \"1.2\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Domain name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnectionCount":{"name":"privateEndpointConnectionCount","type":"\u0005","is_mandatory":true,"title":"Number of private endpoint connections to the domain","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access setting (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Domain tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Event Grid domain","desc":" Examine an Event Grid domain — a multi-tenant topic container that scopes thousands of topics under a single endpoint. Surfaces the input schema, the `disableLocalAuth` toggle, public network access state, inbound IP rules, the minimum TLS version enforced on publishers, the auto-create / auto-delete domain-topic toggles, the data residency boundary, the publishing endpoint, identity assignments, the metric resource ID, and the count of private endpoint connections.","min_provider_version":"13.10.2","defaults":"name location publicNetworkAccess provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.eventGridService.systemTopic":{"id":"azure.subscription.eventGridService.systemTopic","name":"azure.subscription.eventGridService.systemTopic","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"System topic resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identityType":{"name":"identityType","type":"\u0007","is_mandatory":true,"title":"Identity type (\"None\", \"SystemAssigned\", \"UserAssigned\", \"SystemAssigned, UserAssigned\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"System topic location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metricResourceId":{"name":"metricResourceId","type":"\u0007","is_mandatory":true,"title":"Metric resource ID for the system topic","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"System topic name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Source resource ID (the Azure resource that publishes events through this system topic)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"System topic tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"topicType":{"name":"topicType","type":"\u0007","is_mandatory":true,"title":"Topic type (e.g. \"Microsoft.Storage.StorageAccounts\", \"Microsoft.KeyVault.vaults\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Event Grid system topic","desc":" Examine an Event Grid system topic — auto-generated topics used by Azure resources (storage accounts, key vaults, container registries, etc.) to publish events. Surfaces the source resource, the topic type, provisioning state, identity assignments, and the metric resource ID. Use the `source` field as the typed pointer back to the originating Azure resource.","min_provider_version":"13.10.2","defaults":"name location topicType source provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.eventGridService.topic":{"id":"azure.subscription.eventGridService.topic","name":"azure.subscription.eventGridService.topic","fields":{"dataResidencyBoundary":{"name":"dataResidencyBoundary","type":"\u0007","is_mandatory":true,"title":"Data residency boundary (\"WithinGeopair\" or \"WithinRegion\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableLocalAuth":{"name":"disableLocalAuth","type":"\u0004","is_mandatory":true,"title":"Whether local (key) authentication is disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"endpoint":{"name":"endpoint","type":"\u0007","is_mandatory":true,"title":"Endpoint URL clients publish events to","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Topic resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identityType":{"name":"identityType","type":"\u0007","is_mandatory":true,"title":"Identity type (\"None\", \"SystemAssigned\", \"UserAssigned\", \"SystemAssigned, UserAssigned\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inboundIpRules":{"name":"inboundIpRules","type":"\u0019\n","is_mandatory":true,"title":"Inbound IP rules; each entry has ipMask and action (\"Allow\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inputSchema":{"name":"inputSchema","type":"\u0007","is_mandatory":true,"title":"Input schema for events (\"EventGridSchema\", \"CustomEventSchema\", \"CloudEventSchemaV1_0\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Topic location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metricResourceId":{"name":"metricResourceId","type":"\u0007","is_mandatory":true,"title":"Metric resource ID for the topic","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimumTlsVersionAllowed":{"name":"minimumTlsVersionAllowed","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version enforced on publishers (\"1.0\", \"1.1\", \"1.2\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Topic name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnectionCount":{"name":"privateEndpointConnectionCount","type":"\u0005","is_mandatory":true,"title":"Number of private endpoint connections to the topic","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state (\"Succeeded\", \"Canceled\", \"Creating\", \"Deleting\", \"Failed\", \"Updating\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access setting (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Topic tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Event Grid custom topic","desc":" Examine an Event Grid custom topic — a user-created event ingestion endpoint clients publish to. Surfaces the input schema, the `disableLocalAuth` toggle, public network access state, inbound IP rules, the minimum TLS version enforced on publishers, the data residency boundary, the publishing endpoint, identity assignments, the metric resource ID, and the count of private endpoint connections.","min_provider_version":"13.10.2","defaults":"name location publicNetworkAccess provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.eventHubService":{"id":"azure.subscription.eventHubService","name":"azure.subscription.eventHubService","fields":{"namespace":{"name":"namespace","type":"\u001bazure.subscription.eventHubService.namespace","title":"Azure Event Hubs namespace","desc":" Examine an Event Hubs namespace — the streaming-ingestion entity scope that owns Event Hubs and consumer groups. Surfaces the SKU and tier (Basic, Standard, Premium, Dedicated), the throughput units configured, auto-inflate state, Kafka-enabled flag, the `disableLocalAuth` toggle, minimum TLS version, public network access, network rule sets, identity assignments, customer-managed-key encryption settings, and the `eventhubs()` defined inside the namespace.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"namespaces":{"name":"namespaces","type":"\u0019\u001bazure.subscription.eventHubService.namespace","title":"List of Event Hub namespaces","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Event Hubs service","private":true,"min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.eventHubService.namespace":{"id":"azure.subscription.eventHubService.namespace","name":"azure.subscription.eventHubService.namespace","fields":{"cmkKeySource":{"name":"cmkKeySource","type":"\u0007","is_mandatory":true,"title":"CMK key source (\"Microsoft.KeyVault\" when CMK is configured; empty for platform-managed)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cmkKeys":{"name":"cmkKeys","type":"\u0019\n","is_mandatory":true,"title":"Customer-managed encryption keys (Key Vault references) configured for this namespace","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableLocalAuth":{"name":"disableLocalAuth","type":"\u0004","is_mandatory":true,"title":"Whether local (SAS key) authentication is disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"eventHub":{"name":"eventHub","type":"\u001bazure.subscription.eventHubService.namespace.eventHub","title":"Azure Event Hub","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"eventHubs":{"name":"eventHubs","type":"\u0019\u001bazure.subscription.eventHubService.namespace.eventHub","title":"Event Hubs in this namespace","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Namespace resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isAutoInflateEnabled":{"name":"isAutoInflateEnabled","type":"\u0004","is_mandatory":true,"title":"Whether auto-inflate is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kafkaEnabled":{"name":"kafkaEnabled","type":"\u0004","is_mandatory":true,"title":"Whether Kafka is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Namespace location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maximumThroughputUnits":{"name":"maximumThroughputUnits","type":"\u0005","is_mandatory":true,"title":"Maximum throughput units when auto-inflate is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimumTlsVersion":{"name":"minimumTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version (e.g., \"1.0\", \"1.1\", \"1.2\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Namespace name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleSet":{"name":"networkRuleSet","type":"\n","title":"Network rule set: default action (\"Allow\"/\"Deny\"), public network access, IP/VNet rules, trusted-service access","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled (\"Enabled\", \"Disabled\", or \"SecuredByPerimeter\")","min_provider_version":"13.4.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requireInfrastructureEncryption":{"name":"requireInfrastructureEncryption","type":"\u0004","is_mandatory":true,"title":"Whether double encryption (infrastructure layer + CMK) is enabled","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"SKU details","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Namespace status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Namespace tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundant":{"name":"zoneRedundant","type":"\u0004","is_mandatory":true,"title":"Whether the namespace is zone-redundant","min_provider_version":"13.4.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Event Hubs namespace","desc":" Examine an Event Hubs namespace — the streaming-ingestion entity scope that owns Event Hubs and consumer groups. Surfaces the SKU and tier (Basic, Standard, Premium, Dedicated), the throughput units configured, auto-inflate state, Kafka-enabled flag, the `disableLocalAuth` toggle, minimum TLS version, public network access, network rule sets, identity assignments, customer-managed-key encryption settings, and the `eventhubs()` defined inside the namespace.","min_provider_version":"13.3.3","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.eventHubService.namespace.eventHub":{"id":"azure.subscription.eventHubService.namespace.eventHub","name":"azure.subscription.eventHubService.namespace.eventHub","fields":{"consumerGroup":{"name":"consumerGroup","type":"\u001bazure.subscription.eventHubService.namespace.eventHub.consumerGroup","title":"Azure Event Hub consumer group","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"consumerGroups":{"name":"consumerGroups","type":"\u0019\u001bazure.subscription.eventHubService.namespace.eventHub.consumerGroup","title":"Consumer groups for this Event Hub","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Event Hub resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"messageRetentionInDays":{"name":"messageRetentionInDays","type":"\u0005","is_mandatory":true,"title":"Message retention period in days","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Event Hub name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partitionCount":{"name":"partitionCount","type":"\u0005","is_mandatory":true,"title":"Number of partitions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partitionIds":{"name":"partitionIds","type":"\u0019\u0007","is_mandatory":true,"title":"List of partition IDs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Event Hub status (Active, Disabled, SendDisabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Event Hub","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.eventHubService.namespace.eventHub.consumerGroup":{"id":"azure.subscription.eventHubService.namespace.eventHub.consumerGroup","name":"azure.subscription.eventHubService.namespace.eventHub.consumerGroup","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Consumer group resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Consumer group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"userMetadata":{"name":"userMetadata","type":"\u0007","is_mandatory":true,"title":"User-defined metadata","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Event Hub consumer group","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.frontDoorService":{"id":"azure.subscription.frontDoorService","name":"azure.subscription.frontDoorService","fields":{"profile":{"name":"profile","type":"\u001bazure.subscription.frontDoorService.profile","title":"Azure Front Door / CDN profile","desc":" Examine an Azure Front Door (Standard / Premium) or classic CDN profile. Surfaces the SKU and tier (Standard_AzureFrontDoor, Premium_AzureFrontDoor, Standard_Microsoft, Standard_Verizon, Premium_Verizon, Standard_Akamai, Standard_ChinaCdn), the resource state, identity assignments, the `originResponseTimeoutSeconds`, the `logScrubbing` configuration, and the `endpoints()`, `originGroups()`, `customDomains()`, `secrets()`, `rulesets()`, `routes()`, `securityPolicies()`, and `firewallPolicies()` defined inside the profile.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"profiles":{"name":"profiles","type":"\u0019\u001bazure.subscription.frontDoorService.profile","title":"List of Front Door and CDN profiles","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Front Door and CDN service","private":true,"min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.frontDoorService.profile":{"id":"azure.subscription.frontDoorService.profile","name":"azure.subscription.frontDoorService.profile","fields":{"customDomain":{"name":"customDomain","type":"\u001bazure.subscription.frontDoorService.profile.customDomain","title":"Azure Front Door / CDN custom domain","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"customDomains":{"name":"customDomains","type":"\u0019\u001bazure.subscription.frontDoorService.profile.customDomain","title":"Custom domains in this profile","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"endpoint":{"name":"endpoint","type":"\u001bazure.subscription.frontDoorService.profile.endpoint","title":"Azure Front Door / CDN endpoint","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"endpoints":{"name":"endpoints","type":"\u0019\u001bazure.subscription.frontDoorService.profile.endpoint","title":"Endpoints in this profile","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"frontDoorId":{"name":"frontDoorId","type":"\u0007","is_mandatory":true,"title":"Front Door ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Profile resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Profile kind (frontdoor, cdn)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Profile location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Profile name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"originGroup":{"name":"originGroup","type":"\u001bazure.subscription.frontDoorService.profile.originGroup","title":"Azure Front Door / CDN origin group","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"originGroups":{"name":"originGroups","type":"\u0019\u001bazure.subscription.frontDoorService.profile.originGroup","title":"Origin groups in this profile","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourceState":{"name":"resourceState","type":"\u0007","is_mandatory":true,"title":"Resource state (Active, Disabled, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"SKU details","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Profile tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Front Door / CDN profile","desc":" Examine an Azure Front Door (Standard / Premium) or classic CDN profile. Surfaces the SKU and tier (Standard_AzureFrontDoor, Premium_AzureFrontDoor, Standard_Microsoft, Standard_Verizon, Premium_Verizon, Standard_Akamai, Standard_ChinaCdn), the resource state, identity assignments, the `originResponseTimeoutSeconds`, the `logScrubbing` configuration, and the `endpoints()`, `originGroups()`, `customDomains()`, `secrets()`, `rulesets()`, `routes()`, `securityPolicies()`, and `firewallPolicies()` defined inside the profile.","min_provider_version":"13.3.3","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.frontDoorService.profile.customDomain":{"id":"azure.subscription.frontDoorService.profile.customDomain","name":"azure.subscription.frontDoorService.profile.customDomain","fields":{"hostName":{"name":"hostName","type":"\u0007","is_mandatory":true,"title":"Custom domain hostname","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Custom domain resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Custom domain name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tlsCertificateType":{"name":"tlsCertificateType","type":"\u0007","is_mandatory":true,"title":"Certificate source (\"CustomerCertificate\", \"ManagedCertificate\", or \"AzureFirstPartyManagedCertificate\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tlsMinimumVersion":{"name":"tlsMinimumVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version configured for HTTPS on this domain (\"TLS10\", \"TLS12\", or empty if not set)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"validationState":{"name":"validationState","type":"\u0007","is_mandatory":true,"title":"Domain validation state (Approved, Pending, Rejected, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Front Door / CDN custom domain","private":true,"min_provider_version":"13.3.3","defaults":"id name hostName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.frontDoorService.profile.endpoint":{"id":"azure.subscription.frontDoorService.profile.endpoint","name":"azure.subscription.frontDoorService.profile.endpoint","fields":{"enabledState":{"name":"enabledState","type":"\u0007","is_mandatory":true,"title":"Enabled state (Enabled, Disabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostName":{"name":"hostName","type":"\u0007","is_mandatory":true,"title":"Endpoint hostname","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Endpoint resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Endpoint location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Endpoint name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"route":{"name":"route","type":"\u001bazure.subscription.frontDoorService.profile.endpoint.route","title":"Azure Front Door / CDN route attached to an endpoint","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"routes":{"name":"routes","type":"\u0019\u001bazure.subscription.frontDoorService.profile.endpoint.route","title":"Routes attached to this endpoint","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Front Door / CDN endpoint","private":true,"min_provider_version":"13.3.3","defaults":"id name hostName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.frontDoorService.profile.endpoint.route":{"id":"azure.subscription.frontDoorService.profile.endpoint.route","name":"azure.subscription.frontDoorService.profile.endpoint.route","fields":{"enabledState":{"name":"enabledState","type":"\u0007","is_mandatory":true,"title":"Route enabled state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forwardingProtocol":{"name":"forwardingProtocol","type":"\u0007","is_mandatory":true,"title":"Forwarding protocol to origin (\"HttpOnly\", \"HttpsOnly\", or \"MatchRequest\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"httpsRedirect":{"name":"httpsRedirect","type":"\u0007","is_mandatory":true,"title":"Whether HTTP traffic is automatically redirected to HTTPS (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Route resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"linkToDefaultDomain":{"name":"linkToDefaultDomain","type":"\u0007","is_mandatory":true,"title":"Whether the route is linked to the default endpoint domain (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Route name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"originGroupId":{"name":"originGroupId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the origin group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"originPath":{"name":"originPath","type":"\u0007","is_mandatory":true,"title":"Origin path on the backend","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"patternsToMatch":{"name":"patternsToMatch","type":"\u0019\u0007","is_mandatory":true,"title":"URL patterns matched by the route","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"supportedProtocols":{"name":"supportedProtocols","type":"\u0019\u0007","is_mandatory":true,"title":"Protocols accepted by the route (\"Http\", \"Https\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Front Door / CDN route attached to an endpoint","private":true,"min_provider_version":"13.5.1","defaults":"id name httpsRedirect supportedProtocols","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.frontDoorService.profile.originGroup":{"id":"azure.subscription.frontDoorService.profile.originGroup","name":"azure.subscription.frontDoorService.profile.originGroup","fields":{"healthProbeSettings":{"name":"healthProbeSettings","type":"\n","is_mandatory":true,"title":"Health probe settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Origin group resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"loadBalancingSettings":{"name":"loadBalancingSettings","type":"\n","is_mandatory":true,"title":"Load balancing settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Origin group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"origin":{"name":"origin","type":"\u001bazure.subscription.frontDoorService.profile.originGroup.origin","title":"Azure Front Door / CDN origin","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"origins":{"name":"origins","type":"\u0019\u001bazure.subscription.frontDoorService.profile.originGroup.origin","title":"Origins in this origin group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Front Door / CDN origin group","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.frontDoorService.profile.originGroup.origin":{"id":"azure.subscription.frontDoorService.profile.originGroup.origin","name":"azure.subscription.frontDoorService.profile.originGroup.origin","fields":{"enabledState":{"name":"enabledState","type":"\u0007","is_mandatory":true,"title":"Enabled state (Enabled, Disabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostName":{"name":"hostName","type":"\u0007","is_mandatory":true,"title":"Origin hostname","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"httpPort":{"name":"httpPort","type":"\u0005","is_mandatory":true,"title":"HTTP port","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"httpsPort":{"name":"httpsPort","type":"\u0005","is_mandatory":true,"title":"HTTPS port","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Origin resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Origin name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"originHostHeader":{"name":"originHostHeader","type":"\u0007","is_mandatory":true,"title":"Origin host header","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Origin priority (1-5)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"weight":{"name":"weight","type":"\u0005","is_mandatory":true,"title":"Origin weight (1-1000)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Front Door / CDN origin","private":true,"min_provider_version":"13.3.3","defaults":"id name hostName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.functionsService":{"id":"azure.subscription.functionsService","name":"azure.subscription.functionsService","fields":{"functionApp":{"name":"functionApp","type":"\u001bazure.subscription.functionsService.functionApp","title":"Azure Function App","desc":" Examine a Function App — the Azure-Functions-flavored App Service site that runs serverless functions. Surfaces the runtime stack, SKU, App Service Plan binding, the `siteConfig` (TLS minimum version, FTPS state, IP restrictions, CORS, always-on, HTTPS-only), HTTPS-only flag, identity assignments, public network access, the configured custom hostnames and SSL bindings, the `appSettings()` (with the runtime version, AzureWebJobsStorage, FUNCTIONS_WORKER_RUNTIME, etc.), `connectionStrings()`, deployment slots, and per-function metadata.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"functionApps":{"name":"functionApps","type":"\u0019\u001bazure.subscription.functionsService.functionApp","title":"List of function apps","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Functions service","private":true,"min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.functionsService.functionApp":{"id":"azure.subscription.functionsService.functionApp","name":"azure.subscription.functionsService.functionApp","fields":{"appSetting":{"name":"appSetting","type":"\u001bazure.subscription.functionsService.functionApp.appSetting","title":"Azure Function App application setting","desc":" Examine a single application setting on a function app. Selectable by composite id; surfaces whether the value resolves through Azure Key Vault, whether the setting is sticky on slot swaps, and a heuristic flag (`isLikelySecret`) for setting names that suggest secret content — useful for \"any plaintext secret-like setting that is not a Key Vault reference\" audits.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"appSettings":{"name":"appSettings","type":"\u0019\u001bazure.subscription.functionsService.functionApp.appSetting","title":"Application settings configured on the function app. Values are not","desc":"returned — each entry exposes name, slot-stickiness, Key-Vault-reference detection, and a heuristic flag for secret-bearing names.","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"clientCertEnabled":{"name":"clientCertEnabled","type":"\u0004","is_mandatory":true,"title":"Whether client certificates are enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"clientCertMode":{"name":"clientCertMode","type":"\u0007","is_mandatory":true,"title":"Client certificate mode (Required, Optional, OptionalInteractiveUser)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionStrings":{"name":"connectionStrings","type":"\u0019\n","title":"Connection strings configured on the function app. Each entry has shape","desc":"{name, type, hasKeyVaultReference, slotSetting}. Connection-string values are not returned.","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultHostName":{"name":"defaultHostName","type":"\u0007","is_mandatory":true,"title":"Default hostname of the function app","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"function":{"name":"function","type":"\u001bazure.subscription.functionsService.functionApp.function","title":"Azure Function within a Function App","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"functions":{"name":"functions","type":"\u0019\u001bazure.subscription.functionsService.functionApp.function","title":"Functions in this function app","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"httpsOnly":{"name":"httpsOnly","type":"\u0004","is_mandatory":true,"title":"Whether the function app only accepts HTTPS traffic","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Function App resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Function App kind (e.g., \"functionapp\", \"functionapp,linux\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Function App location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedServiceIdentityId":{"name":"managedServiceIdentityId","type":"\u0007","is_mandatory":true,"title":"Managed service identity ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Function App name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Function App properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Function App state (e.g., \"Running\", \"Stopped\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Function App tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Function App","desc":" Examine a Function App — the Azure-Functions-flavored App Service site that runs serverless functions. Surfaces the runtime stack, SKU, App Service Plan binding, the `siteConfig` (TLS minimum version, FTPS state, IP restrictions, CORS, always-on, HTTPS-only), HTTPS-only flag, identity assignments, public network access, the configured custom hostnames and SSL bindings, the `appSettings()` (with the runtime version, AzureWebJobsStorage, FUNCTIONS_WORKER_RUNTIME, etc.), `connectionStrings()`, deployment slots, and per-function metadata.","min_provider_version":"13.3.3","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.functionsService.functionApp.appSetting":{"id":"azure.subscription.functionsService.functionApp.appSetting","name":"azure.subscription.functionsService.functionApp.appSetting","fields":{"hasKeyVaultReference":{"name":"hasKeyVaultReference","type":"\u0004","is_mandatory":true,"title":"Whether the setting's value is a Key Vault reference","desc":"(i.e., starts with `@Microsoft.KeyVault(...)`)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasValue":{"name":"hasValue","type":"\u0004","is_mandatory":true,"title":"Whether the setting has a non-empty value (the value itself is not exposed)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Composite ID: \u003cfunctionAppId\u003e/config/appsettings/\u003cname\u003e","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isLikelySecret":{"name":"isLikelySecret","type":"\u0004","is_mandatory":true,"title":"Whether the setting name suggests it carries a secret. True when the","desc":"name (case-insensitively) contains \"key\", \"password\", \"secret\", \"token\", or a connection-string identifier ending in `str`.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Setting name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"slotSetting":{"name":"slotSetting","type":"\u0004","is_mandatory":true,"title":"Whether the setting is \"sticky\" on slot swaps (configured via the","desc":"app's slot-config-names list)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Function App application setting","desc":" Examine a single application setting on a function app. Selectable by composite id; surfaces whether the value resolves through Azure Key Vault, whether the setting is sticky on slot swaps, and a heuristic flag (`isLikelySecret`) for setting names that suggest secret content — useful for \"any plaintext secret-like setting that is not a Key Vault reference\" audits.","private":true,"min_provider_version":"13.10.2","defaults":"name hasKeyVaultReference isLikelySecret slotSetting","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.functionsService.functionApp.function":{"id":"azure.subscription.functionsService.functionApp.function","name":"azure.subscription.functionsService.functionApp.function","fields":{"config":{"name":"config","type":"\n","is_mandatory":true,"title":"Function configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Function resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isDisabled":{"name":"isDisabled","type":"\u0004","is_mandatory":true,"title":"Whether the function is disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"language":{"name":"language","type":"\u0007","is_mandatory":true,"title":"Function language","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Function name","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Function within a Function App","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.iotService":{"id":"azure.subscription.iotService","name":"azure.subscription.iotService","fields":{"hubs":{"name":"hubs","type":"\u0019\n","title":"DEPRECATED: prefer `iotHubs()` for typed field access. Retained for backward compatibility.","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"iotHub":{"name":"iotHub","type":"\u001bazure.subscription.iotService.iotHub","title":"Azure IoT hub","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"iotHubs":{"name":"iotHubs","type":"\u0019\u001bazure.subscription.iotService.iotHub","title":"Typed IoT hubs in the subscription","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure IoT Hub Service","private":true,"min_provider_version":"11.3.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.iotService.iotHub":{"id":"azure.subscription.iotService.iotHub","name":"azure.subscription.iotService.iotHub","fields":{"allowedFqdnList":{"name":"allowedFqdnList","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed FQDNs for egress when restrictOutboundNetworkAccess is true","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableDeviceSAS":{"name":"disableDeviceSAS","type":"\u0004","is_mandatory":true,"title":"Whether device-scoped SAS keys are disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableLocalAuth":{"name":"disableLocalAuth","type":"\u0004","is_mandatory":true,"title":"Whether SAS-based local authentication is disabled (Hub-scoped SAS keys cannot authenticate)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableModuleSAS":{"name":"disableModuleSAS","type":"\u0004","is_mandatory":true,"title":"Whether module-scoped SAS keys are disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableDataResidency":{"name":"enableDataResidency","type":"\u0004","is_mandatory":true,"title":"Whether data residency is enabled (disables disaster recovery)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostName":{"name":"hostName","type":"\u0007","is_mandatory":true,"title":"Hostname (FQDN)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"IoT hub resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Azure region the IoT hub is deployed in","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minTlsVersion":{"name":"minTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version (e.g. \"1.2\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"IoT hub name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleSet":{"name":"networkRuleSet","type":"\n","is_mandatory":true,"title":"Network rule set: defaultAction, applyToBuiltInEventHubEndpoint, ipRules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"restrictOutboundNetworkAccess":{"name":"restrictOutboundNetworkAccess","type":"\u0004","is_mandatory":true,"title":"Whether egress is restricted to AllowedFqdnList","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"SKU details","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Hub state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Tags applied to the IoT hub","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure IoT hub","private":true,"min_provider_version":"13.5.1","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService":{"id":"azure.subscription.keyVaultService","name":"azure.subscription.keyVaultService","fields":{"certificate":{"name":"certificate","type":"\u001bazure.subscription.keyVaultService.certificate","title":"Azure Key Vault certificate","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"key":{"name":"key","type":"\u001bazure.subscription.keyVaultService.key","title":"Azure Key Vault key","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"managedHsm":{"name":"managedHsm","type":"\u001bazure.subscription.keyVaultService.managedHsm","title":"Azure Managed HSM pool","desc":" Examine a Managed HSM pool — the FIPS 140-2 Level 3 hardware security module offering separate from regular Key Vaults. Surfaces the pool SKU, `tenantId`, the `initialAdminObjectIds` granted local HSM admin, the deployment status and provisioning state, public network access, network ACLs, soft-delete and purge-protection settings, and the public/private endpoint connection list.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"managedHsms":{"name":"managedHsms","type":"\u0019\u001bazure.subscription.keyVaultService.managedHsm","title":"List of Azure Managed HSM pools","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secret":{"name":"secret","type":"\u001bazure.subscription.keyVaultService.secret","title":"Azure Key Vault secret","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vault":{"name":"vault","type":"\u001bazure.subscription.keyVaultService.vault","title":"Azure Key Vault vault","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"vaults":{"name":"vaults","type":"\u0019\u001bazure.subscription.keyVaultService.vault","title":"List of Azure key vaults","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.certificate":{"id":"azure.subscription.keyVaultService.certificate","name":"azure.subscription.keyVaultService.certificate","fields":{"certName":{"name":"certName","type":"\u0007","title":"Certificate name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"created":{"name":"created","type":"\t","is_mandatory":true,"title":"Certificate creation time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the certificate is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"expires":{"name":"expires","type":"\t","is_mandatory":true,"title":"Certificate expiration date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Certificate ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notBefore":{"name":"notBefore","type":"\t","is_mandatory":true,"title":"Certificate not before date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"policy":{"name":"policy","type":"\u001bazure.subscription.keyVaultService.certificate.policy","title":"Certificate policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recoveryLevel":{"name":"recoveryLevel","type":"\u0007","is_mandatory":true,"title":"Certificate recovery level","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Certificate tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"updated":{"name":"updated","type":"\t","is_mandatory":true,"title":"Certificate last update time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","title":"Certificate version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"versions":{"name":"versions","type":"\u0019\u001bazure.subscription.keyVaultService.certificate","title":"List of certificate versions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"x5t":{"name":"x5t","type":"\u0007","is_mandatory":true,"title":"Certificate x5t","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault certificate","private":true,"min_provider_version":"9.0.1","defaults":"id certName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.certificate.policy":{"id":"azure.subscription.keyVaultService.certificate.policy","name":"azure.subscription.keyVaultService.certificate.policy","fields":{"issuerParameters":{"name":"issuerParameters","type":"\u001bazure.subscription.keyVaultService.certificate.policy.issuerParameters","title":"Issuer parameters (name, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyProperties":{"name":"keyProperties","type":"\u001bazure.subscription.keyVaultService.certificate.policy.keyProperties","title":"Key properties (keyType, keySize, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"x509CertificateProperties":{"name":"x509CertificateProperties","type":"\u001bazure.subscription.keyVaultService.certificate.policy.x509CertificateProperties","title":"X.509 certificate properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault certificate policy","private":true,"min_provider_version":"11.4.26","defaults":"x509CertificateProperties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.certificate.policy.issuerParameters":{"id":"azure.subscription.keyVaultService.certificate.policy.issuerParameters","name":"azure.subscription.keyVaultService.certificate.policy.issuerParameters","fields":{"certificateTransparency":{"name":"certificateTransparency","type":"\u0004","is_mandatory":true,"title":"Whether certificates should be published to certificate transparency logs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"certificateType":{"name":"certificateType","type":"\u0007","is_mandatory":true,"title":"Certificate type as supported by the provider (e.g., OV-SSL, EV-SSL)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the referenced issuer object or reserved names (e.g., Self, Unknown)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault certificate policy issuer parameters","private":true,"min_provider_version":"11.4.26","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.certificate.policy.keyProperties":{"id":"azure.subscription.keyVaultService.certificate.policy.keyProperties","name":"azure.subscription.keyVaultService.certificate.policy.keyProperties","fields":{"curve":{"name":"curve","type":"\u0007","is_mandatory":true,"title":"Elliptic curve name (for EC keys)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"exportable":{"name":"exportable","type":"\u0004","is_mandatory":true,"title":"Whether the private key can be exported","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keySize":{"name":"keySize","type":"\u0005","is_mandatory":true,"title":"The key size in bits (e.g., 2048, 3072, 4096 for RSA)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyType":{"name":"keyType","type":"\u0007","is_mandatory":true,"title":"The type of key pair (e.g., RSA, EC)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"reuseKey":{"name":"reuseKey","type":"\u0004","is_mandatory":true,"title":"Whether the same key pair will be used on certificate renewal","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault certificate policy key properties","private":true,"min_provider_version":"11.4.26","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.certificate.policy.x509CertificateProperties":{"id":"azure.subscription.keyVaultService.certificate.policy.x509CertificateProperties","name":"azure.subscription.keyVaultService.certificate.policy.x509CertificateProperties","fields":{"ekus":{"name":"ekus","type":"\u0019\u0007","is_mandatory":true,"title":"Extended key usage OIDs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyUsage":{"name":"keyUsage","type":"\u0019\u0007","is_mandatory":true,"title":"Key usage types (e.g., digitalSignature, keyEncipherment)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subject":{"name":"subject","type":"\u0007","is_mandatory":true,"title":"Certificate subject (e.g., CN=example.com)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"validityInMonths":{"name":"validityInMonths","type":"\u0005","is_mandatory":true,"title":"Certificate validity period in months","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault certificate policy X.509 properties","private":true,"min_provider_version":"11.4.26","defaults":"subject validityInMonths","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.key":{"id":"azure.subscription.keyVaultService.key","name":"azure.subscription.keyVaultService.key","fields":{"autorotation":{"name":"autorotation","type":"\u001bazure.subscription.keyVaultService.key.autorotation","title":"Azure Key Vault key auto-rotation","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"created":{"name":"created","type":"\t","is_mandatory":true,"title":"Key creation time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"curveName":{"name":"curveName","type":"\u0007","title":"Elliptic curve name for EC keys (P-256, P-256K, P-384, P-521)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the key is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"expires":{"name":"expires","type":"\t","is_mandatory":true,"title":"Date the key expires","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyName":{"name":"keyName","type":"\u0007","title":"Key name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyOps":{"name":"keyOps","type":"\u0019\u0007","title":"Permitted key operations (sign, verify, encrypt, decrypt, wrapKey, unwrapKey)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keySize":{"name":"keySize","type":"\u0005","title":"Key size in bits (e.g. 2048, 3072, 4096 for RSA)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyType":{"name":"keyType","type":"\u0007","title":"Key type (RSA, EC, oct, RSA-HSM, EC-HSM, oct-HSM)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kid":{"name":"kid","type":"\u0007","is_mandatory":true,"title":"Key ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managed":{"name":"managed","type":"\u0004","is_mandatory":true,"title":"Whether the key is managed","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notBefore":{"name":"notBefore","type":"\t","is_mandatory":true,"title":"Date the key begins to be usable","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recoveryLevel":{"name":"recoveryLevel","type":"\u0007","is_mandatory":true,"title":"Key recovery level","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rotationPolicy":{"name":"rotationPolicy","type":"\u001bazure.subscription.keyVaultService.key.rotationPolicyObject","title":"Key rotation policy","min_provider_version":"11.4.23","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rotationPolicyObject":{"name":"rotationPolicyObject","type":"\u001bazure.subscription.keyVaultService.key.rotationPolicyObject","title":"Azure Key Vault key rotation policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Key tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"updated":{"name":"updated","type":"\t","is_mandatory":true,"title":"Key last update time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","title":"Key version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"versions":{"name":"versions","type":"\u0019\u001bazure.subscription.keyVaultService.key","title":"List of key versions","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault key","private":true,"min_provider_version":"9.0.1","defaults":"kid keyName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.key.autorotation":{"id":"azure.subscription.keyVaultService.key.autorotation","name":"azure.subscription.keyVaultService.key.autorotation","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Auto-rotation enabled status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kid":{"name":"kid","type":"\u0007","is_mandatory":true,"title":"Key ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault key auto-rotation","private":true,"min_provider_version":"11.3.1","defaults":"enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.key.rotationPolicyObject":{"id":"azure.subscription.keyVaultService.key.rotationPolicyObject","name":"azure.subscription.keyVaultService.key.rotationPolicyObject","fields":{"attributes":{"name":"attributes","type":"\n","is_mandatory":true,"title":"Attributes of the rotation policy (e.g., expiryTime)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether automatic key rotation is enabled (true if rotationPolicy exists with Rotate action)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lifetimeActions":{"name":"lifetimeActions","type":"\u0019\n","is_mandatory":true,"title":"Lifetime actions for the rotation policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault key rotation policy","private":true,"min_provider_version":"11.4.23","defaults":"enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.managedHsm":{"id":"azure.subscription.keyVaultService.managedHsm","name":"azure.subscription.keyVaultService.managedHsm","fields":{"enablePurgeProtection":{"name":"enablePurgeProtection","type":"\u0004","is_mandatory":true,"title":"Whether purge protection is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableSoftDelete":{"name":"enableSoftDelete","type":"\u0004","is_mandatory":true,"title":"Whether soft delete is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hsmUri":{"name":"hsmUri","type":"\u0007","is_mandatory":true,"title":"HSM URI","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Managed HSM ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"initialAdminObjectIds":{"name":"initialAdminObjectIds","type":"\u0019\u0007","is_mandatory":true,"title":"Initial admin object IDs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Managed HSM location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Managed HSM name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkAcls":{"name":"networkAcls","type":"\n","is_mandatory":true,"title":"Network ACLs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private endpoint connections","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access setting","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"regions":{"name":"regions","type":"\u0019\n","is_mandatory":true,"title":"Geo-replicated regions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scheduledPurgeDate":{"name":"scheduledPurgeDate","type":"\t","is_mandatory":true,"title":"Scheduled purge date (if soft-deleted)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"SKU name (Standard_B1, Custom_B32, Custom_B6)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"softDeleteRetentionInDays":{"name":"softDeleteRetentionInDays","type":"\u0005","is_mandatory":true,"title":"Soft delete retention in days (7-90)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Managed HSM tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tenantId":{"name":"tenantId","type":"\u0007","is_mandatory":true,"title":"Tenant ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Managed HSM type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Managed HSM pool","desc":" Examine a Managed HSM pool — the FIPS 140-2 Level 3 hardware security module offering separate from regular Key Vaults. Surfaces the pool SKU, `tenantId`, the `initialAdminObjectIds` granted local HSM admin, the deployment status and provisioning state, public network access, network ACLs, soft-delete and purge-protection settings, and the public/private endpoint connection list.","min_provider_version":"13.3.3","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.secret":{"id":"azure.subscription.keyVaultService.secret","name":"azure.subscription.keyVaultService.secret","fields":{"contentType":{"name":"contentType","type":"\u0007","is_mandatory":true,"title":"Secret content type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"created":{"name":"created","type":"\t","is_mandatory":true,"title":"Secret creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the secret is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"expires":{"name":"expires","type":"\t","is_mandatory":true,"title":"Secret expiration date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Secret ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managed":{"name":"managed","type":"\u0004","is_mandatory":true,"title":"Whether the secret is managed","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"notBefore":{"name":"notBefore","type":"\t","is_mandatory":true,"title":"Date the secret begins to be usable","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secretName":{"name":"secretName","type":"\u0007","title":"Secret name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Secret tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"updated":{"name":"updated","type":"\t","is_mandatory":true,"title":"Secret last updated date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","title":"Secret version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"versions":{"name":"versions","type":"\u0019\u001bazure.subscription.keyVaultService.secret","title":"List of secret versions","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault secret","private":true,"min_provider_version":"9.0.1","defaults":"id secretName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.vault":{"id":"azure.subscription.keyVaultService.vault","name":"azure.subscription.keyVaultService.vault","fields":{"accessPolicies":{"name":"accessPolicies","type":"\u0019\u001bazure.subscription.keyVaultService.vault.accessPolicy","title":"Vault access policies","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"accessPolicy":{"name":"accessPolicy","type":"\u001bazure.subscription.keyVaultService.vault.accessPolicy","title":"Azure Key Vault vault access policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"autorotation":{"name":"autorotation","type":"\u0019\u001bazure.subscription.keyVaultService.key.autorotation","title":"Auto-rotation enabled status for all keys","min_provider_version":"11.3.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"certificates":{"name":"certificates","type":"\u0019\u001bazure.subscription.keyVaultService.certificate","title":"Vault certificates","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diagnosticSettings":{"name":"diagnosticSettings","type":"\u0019\u001bazure.subscription.monitorService.diagnosticsetting","title":"Vault diagnostic settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablePurgeProtection":{"name":"enablePurgeProtection","type":"\u0004","title":"Whether purge protection is enabled for the vault","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableSoftDelete":{"name":"enableSoftDelete","type":"\u0004","title":"Whether soft delete is enabled for the vault","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabledForDeployment":{"name":"enabledForDeployment","type":"\u0004","title":"Whether the vault can be used for Azure Resource Manager deployment","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabledForDiskEncryption":{"name":"enabledForDiskEncryption","type":"\u0004","title":"Whether the vault can be used for Azure Disk Encryption","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabledForTemplateDeployment":{"name":"enabledForTemplateDeployment","type":"\u0004","title":"Whether the vault can be used for Azure Resource Manager template deployment","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Vault ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keys":{"name":"keys","type":"\u0019\u001bazure.subscription.keyVaultService.key","title":"Vault keys","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Vault location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkAcls":{"name":"networkAcls","type":"\u001bazure.subscription.keyVaultService.vault.networkAcls","title":"Vault network ACL rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private endpoint connections for the vault","min_provider_version":"11.4.24","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","title":"Vault properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","title":"Whether the vault is accessible from public networks","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rbacAuthorizationEnabled":{"name":"rbacAuthorizationEnabled","type":"\u0004","title":"Whether RBAC access to the vault is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secrets":{"name":"secrets","type":"\u0019\u001bazure.subscription.keyVaultService.secret","title":"Vault secrets","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","title":"Vault SKU name (\"standard\" or \"premium\"; premium supports HSM-backed keys)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"softDeleteRetentionInDays":{"name":"softDeleteRetentionInDays","type":"\u0005","title":"Number of days that deleted vaults and vault objects are retained","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Vault tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Vault type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vaultName":{"name":"vaultName","type":"\u0007","is_mandatory":true,"title":"Vault name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vaultUri":{"name":"vaultUri","type":"\u0007","title":"Vault URL","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault vault","private":true,"min_provider_version":"9.0.1","defaults":"vaultName type vaultUri location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.vault.accessPolicy":{"id":"azure.subscription.keyVaultService.vault.accessPolicy","name":"azure.subscription.keyVaultService.vault.accessPolicy","fields":{"applicationId":{"name":"applicationId","type":"\u0007","is_mandatory":true,"title":"Application ID of the client making request on behalf of a principal","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"certificatePermissions":{"name":"certificatePermissions","type":"\u0019\u0007","is_mandatory":true,"title":"Permissions to certificates","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Access policy ID (vault ID + object ID)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyPermissions":{"name":"keyPermissions","type":"\u0019\u0007","is_mandatory":true,"title":"Permissions to keys","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"objectId":{"name":"objectId","type":"\u0007","is_mandatory":true,"title":"Azure Active Directory object ID of the principal","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secretPermissions":{"name":"secretPermissions","type":"\u0019\u0007","is_mandatory":true,"title":"Permissions to secrets","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storagePermissions":{"name":"storagePermissions","type":"\u0019\u0007","is_mandatory":true,"title":"Permissions to storage accounts","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tenantId":{"name":"tenantId","type":"\u0007","is_mandatory":true,"title":"Azure Active Directory tenant ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault vault access policy","private":true,"min_provider_version":"11.4.28","defaults":"objectId","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.keyVaultService.vault.networkAcls":{"id":"azure.subscription.keyVaultService.vault.networkAcls","name":"azure.subscription.keyVaultService.vault.networkAcls","fields":{"bypass":{"name":"bypass","type":"\u0007","is_mandatory":true,"title":"Whether traffic can bypass network rules (\"AzureServices\" or \"None\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultAction":{"name":"defaultAction","type":"\u0007","is_mandatory":true,"title":"Default action when no rule matches (\"Allow\" or \"Deny\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Network ACLs ID (vault ID + /networkAcls)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipRules":{"name":"ipRules","type":"\u0019\u0007","is_mandatory":true,"title":"List of allowed IP address ranges (CIDR notation)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkSubnetIds":{"name":"virtualNetworkSubnetIds","type":"\u0019\u0007","is_mandatory":true,"title":"List of virtual network subnet resource IDs","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Key Vault vault network ACL rules","private":true,"min_provider_version":"11.4.28","defaults":"defaultAction bypass","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.logicService":{"id":"azure.subscription.logicService","name":"azure.subscription.logicService","fields":{"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workflow":{"name":"workflow","type":"\u001bazure.subscription.logicService.workflow","title":"Azure Logic Apps Consumption workflow","desc":" Examine a single Consumption-tier Logic App. Selectable by ARM id; fields cover lifecycle state, SKU, integration-account binding, access-control policies (per-policy IP allow lists and OAuth authentication policies), parameters (with secure-string detection), and the trigger and action lists parsed from the workflow definition.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"workflows":{"name":"workflows","type":"\u0019\u001bazure.subscription.logicService.workflow","title":"Consumption-tier workflows","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Logic Apps","desc":" Examine Azure Logic Apps Consumption-tier workflows in the subscription. Use this resource to audit workflow state, access-control policies, secret-typed parameters, and the trigger and action set defined in each workflow's JSON definition.","private":true,"min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.logicService.workflow":{"id":"azure.subscription.logicService.workflow","name":"azure.subscription.logicService.workflow","fields":{"accessControlActions":{"name":"accessControlActions","type":"\n","is_mandatory":true,"title":"Access-control policy for invoking workflow actions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"accessControlContents":{"name":"accessControlContents","type":"\n","is_mandatory":true,"title":"Access-control policy for reading workflow run contents","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"accessControlTriggers":{"name":"accessControlTriggers","type":"\n","is_mandatory":true,"title":"Access-control policy for inbound triggers — `allowedCallerIpAddresses []` and `openAuthenticationPolicies {}`.","desc":"Empty IP list means no IP restriction.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"accessControlWorkflowManagement":{"name":"accessControlWorkflowManagement","type":"\n","is_mandatory":true,"title":"Access-control policy for workflow management operations","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"accessEndpoint":{"name":"accessEndpoint","type":"\u0007","is_mandatory":true,"title":"Public access endpoint, when ingress is exposed","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"actions":{"name":"actions","type":"\u0019\n","is_mandatory":true,"title":"Actions parsed from the workflow definition. Each entry has {name, type}.","desc":"`type` examples: \"Http\", \"ApiConnection\", \"Compose\", \"Workflow\", \"If\", \"Foreach\", \"Until\".","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"changedTime":{"name":"changedTime","type":"\t","is_mandatory":true,"title":"Last changed time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionNames":{"name":"connectionNames","type":"\u0019\u0007","is_mandatory":true,"title":"Names of API connections referenced by triggers and actions (i.e., `parameters.$connections` keys)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"createdTime":{"name":"createdTime","type":"\t","is_mandatory":true,"title":"Created time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"endpointsConfiguration":{"name":"endpointsConfiguration","type":"\n","is_mandatory":true,"title":"Outgoing connector / workflow / access-endpoint IPs reported for the workflow","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasIpRestrictions":{"name":"hasIpRestrictions","type":"\u0004","is_mandatory":true,"title":"Whether at least one access-control policy has an IP allow list configured","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity (system + user-assigned)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"integrationAccountId":{"name":"integrationAccountId","type":"\u0007","is_mandatory":true,"title":"ARM id of the linked integration account, if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"integrationServiceEnvironmentId":{"name":"integrationServiceEnvironmentId","type":"\u0007","is_mandatory":true,"title":"ARM id of the linked integration service environment (ISE), if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Azure region","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Workflow name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"parameters":{"name":"parameters","type":"\u0019\n","is_mandatory":true,"title":"Workflow parameters. Each entry has {name, type, hasDefaultValue, isSecure}.","desc":"`isSecure` is true when type is `SecureString` or `SecureObject`.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state (\"Succeeded\", \"Failed\", \"Canceled\", ...)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secureParameterNames":{"name":"secureParameterNames","type":"\u0019\u0007","is_mandatory":true,"title":"Names of parameters whose type is `SecureString` or `SecureObject`","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"SKU name (\"Free\", \"Shared\", \"Basic\", \"Standard\", \"Premium\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Workflow state (\"Enabled\", \"Disabled\", \"Suspended\", \"Completed\", \"Deleted\", \"NotSpecified\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"triggers":{"name":"triggers","type":"\u0019\n","is_mandatory":true,"title":"Triggers parsed from the workflow definition. Each entry has {name, type, kind?}.","desc":"`type` examples: \"Request\" (HTTP), \"Recurrence\", \"ApiConnection\", \"ApiConnectionWebhook\".","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Workflow version (changes when the definition changes)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Logic Apps Consumption workflow","desc":" Examine a single Consumption-tier Logic App. Selectable by ARM id; fields cover lifecycle state, SKU, integration-account binding, access-control policies (per-policy IP allow lists and OAuth authentication policies), parameters (with secure-string detection), and the trigger and action lists parsed from the workflow definition.","min_provider_version":"13.10.2","defaults":"name location state provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.managedIdentity":{"id":"azure.subscription.managedIdentity","name":"azure.subscription.managedIdentity","fields":{"clientId":{"name":"clientId","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"principalId":{"name":"principalId","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"},"roleAssignments":{"name":"roleAssignments","type":"\u0019\u001bazure.subscription.authorizationService.roleAssignment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tenantId":{"name":"tenantId","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure managed identity","private":true,"min_provider_version":"11.2.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService":{"id":"azure.subscription.monitorService","name":"azure.subscription.monitorService","fields":{"activityLog":{"name":"activityLog","type":"\u001bazure.subscription.monitorService.activityLog","title":"Monitor activity log","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"applicationInsight":{"name":"applicationInsight","type":"\u001bazure.subscription.monitorService.applicationInsight","title":"Azure Monitor application insights","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"applicationInsights":{"name":"applicationInsights","type":"\u0019\u001bazure.subscription.monitorService.applicationInsight","title":"Application insights for the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diagnosticSettings":{"name":"diagnosticSettings","type":"\u0019\u001bazure.subscription.monitorService.diagnosticsetting","title":"List of diagnostic settings for the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diagnosticsetting":{"name":"diagnosticsetting","type":"\u001bazure.subscription.monitorService.diagnosticsetting","title":"Azure Monitor diagnostic setting","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"logProfiles":{"name":"logProfiles","type":"\u0019\u001bazure.subscription.monitorService.logprofile","title":"List of log profiles","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"logprofile":{"name":"logprofile","type":"\u001bazure.subscription.monitorService.logprofile","title":"Azure Monitor log profile","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"queryPack":{"name":"queryPack","type":"\u001bazure.subscription.monitorService.queryPack","title":"Log Analytics QueryPack","desc":" Examine a Log Analytics query pack — the share-and-version unit for curated KQL queries. Surfaces the query-pack `queryPackId`, the `provisioningState`, time created and modified, and the resource tags applied. The queries inside the pack are accessed through the per-pack collection accessor on the parent monitor service.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"queryPacks":{"name":"queryPacks","type":"\u0019\u001bazure.subscription.monitorService.queryPack","title":"Log Analytics QueryPacks (saved KQL query collections)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workspace":{"name":"workspace","type":"\u001bazure.subscription.monitorService.workspace","title":"Azure Log Analytics workspace","desc":" Examine a Log Analytics workspace — the underlying log/data store for Azure Monitor, Microsoft Sentinel, and Defender for Cloud. Surfaces the workspace SKU (PerGB2018, CapacityReservation, Free, Standalone, etc.), retention period, daily-quota cap and reset time, the public network access state for ingestion and query, the linked Application Insights workspaces, the customer-managed-key reference, identity assignments, and the `created`/`modified` timestamps tying the workspace's lifecycle to its tenant.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"workspaces":{"name":"workspaces","type":"\u0019\u001bazure.subscription.monitorService.workspace","title":"Log Analytics workspaces","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Monitor","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.activityLog":{"id":"azure.subscription.monitorService.activityLog","name":"azure.subscription.monitorService.activityLog","fields":{"alert":{"name":"alert","type":"\u001bazure.subscription.monitorService.activityLog.alert","title":"Azure Monitor activity log alert","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"alerts":{"name":"alerts","type":"\u0019\u001bazure.subscription.monitorService.activityLog.alert","title":"List of activity log alerts","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Monitor activity log","private":true,"min_provider_version":"9.0.1","defaults":"alerts","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.activityLog.alert":{"id":"azure.subscription.monitorService.activityLog.alert","name":"azure.subscription.monitorService.activityLog.alert","fields":{"actions":{"name":"actions","type":"\u0019\n","is_mandatory":true,"title":"Actions that activate when the conditions are met","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"conditions":{"name":"conditions","type":"\u0019\n","is_mandatory":true,"title":"Conditions for the activity log alert, all of which must be met","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the activity log alert","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the activity log alert","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Location of the alert","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the activity log alert","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scopes":{"name":"scopes","type":"\u0019\u0007","is_mandatory":true,"title":"List of resource IDs that must be present to trigger the alert","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Tags of the alert","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type of the activity log alert","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Monitor activity log alert","private":true,"min_provider_version":"9.0.1","defaults":"name type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.applicationInsight":{"id":"azure.subscription.monitorService.applicationInsight","name":"azure.subscription.monitorService.applicationInsight","fields":{"disableIpMasking":{"name":"disableIpMasking","type":"\u0004","is_mandatory":true,"title":"Whether IP masking is disabled","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Application insight ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Application insight kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Application insight location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Application insight name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Application insight properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccessForIngestion":{"name":"publicNetworkAccessForIngestion","type":"\u0007","is_mandatory":true,"title":"Public network access for ingestion (Enabled, Disabled)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccessForQuery":{"name":"publicNetworkAccessForQuery","type":"\u0007","is_mandatory":true,"title":"Public network access for query (Enabled, Disabled)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionInDays":{"name":"retentionInDays","type":"\u0005","is_mandatory":true,"title":"Data retention period in days","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Application insight tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Application insight type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workspace":{"name":"workspace","type":"\u001bazure.subscription.monitorService.workspace","title":"Log Analytics workspace where the diagnostic data is sent","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workspaceResourceId":{"name":"workspaceResourceId","type":"\u0007","is_mandatory":true,"title":"Log Analytics workspace resource ID","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Monitor application insights","private":true,"min_provider_version":"9.0.1","defaults":"name location type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.diagnosticsetting":{"id":"azure.subscription.monitorService.diagnosticsetting","name":"azure.subscription.monitorService.diagnosticsetting","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Diagnostic setting ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Diagnostic setting name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Diagnostic setting properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccount":{"name":"storageAccount","type":"\u001bazure.subscription.storageService.account","title":"Diagnostic setting storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccountId":{"name":"storageAccountId","type":"\u0007","is_mandatory":true,"title":"ID of the diagnostic setting storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Diagnostic setting type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Monitor diagnostic setting","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.logprofile":{"id":"azure.subscription.monitorService.logprofile","name":"azure.subscription.monitorService.logprofile","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Log profile ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Log profile location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Log profile name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Log profile properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccount":{"name":"storageAccount","type":"\u001bazure.subscription.storageService.account","title":"Log profile storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccountId":{"name":"storageAccountId","type":"\u0007","is_mandatory":true,"title":"ID of the log profile storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Log profile tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Log profile type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Monitor log profile","private":true,"min_provider_version":"9.0.1","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.queryPack":{"id":"azure.subscription.monitorService.queryPack","name":"azure.subscription.monitorService.queryPack","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"QueryPack resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"QueryPack location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"QueryPack name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"queries":{"name":"queries","type":"\u0019\u001bazure.subscription.monitorService.queryPack.query","title":"Saved KQL queries in this QueryPack","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"query":{"name":"query","type":"\u001bazure.subscription.monitorService.queryPack.query","title":"Saved KQL query in a Log Analytics QueryPack","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"queryPackId":{"name":"queryPackId","type":"\u0007","is_mandatory":true,"title":"Unique ID of the QueryPack (immutable)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"QueryPack tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"QueryPack creation time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeModified":{"name":"timeModified","type":"\t","is_mandatory":true,"title":"QueryPack last modified time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Log Analytics QueryPack","desc":" Examine a Log Analytics query pack — the share-and-version unit for curated KQL queries. Surfaces the query-pack `queryPackId`, the `provisioningState`, time created and modified, and the resource tags applied. The queries inside the pack are accessed through the per-pack collection accessor on the parent monitor service.","min_provider_version":"13.5.1","defaults":"id name location queryPackId","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.queryPack.query":{"id":"azure.subscription.monitorService.queryPack.query","name":"azure.subscription.monitorService.queryPack.query","fields":{"author":{"name":"author","type":"\u0007","is_mandatory":true,"title":"Object ID of the query author","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"body":{"name":"body","type":"\u0007","is_mandatory":true,"title":"Query body (KQL)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the query","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Display name shown in the QueryPack","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Query resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Query name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\n","is_mandatory":true,"title":"Tags associated with the query","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeCreated":{"name":"timeCreated","type":"\t","is_mandatory":true,"title":"Query creation time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timeModified":{"name":"timeModified","type":"\t","is_mandatory":true,"title":"Query last modified time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Saved KQL query in a Log Analytics QueryPack","private":true,"min_provider_version":"13.5.1","defaults":"id name displayName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace":{"id":"azure.subscription.monitorService.workspace","name":"azure.subscription.monitorService.workspace","fields":{"capping":{"name":"capping","type":"\u001bazure.subscription.monitorService.workspace.capping","title":"Daily data volume capping","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"createdDate":{"name":"createdDate","type":"\t","is_mandatory":true,"title":"Workspace creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"customerId":{"name":"customerId","type":"\u0007","is_mandatory":true,"title":"Workspace GUID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataExport":{"name":"dataExport","type":"\u001bazure.subscription.monitorService.workspace.dataExport","title":"Data export rule for a Log Analytics workspace","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"dataExports":{"name":"dataExports","type":"\u0019\u001bazure.subscription.monitorService.workspace.dataExport","title":"Data export rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultDataCollectionRuleResourceId":{"name":"defaultDataCollectionRuleResourceId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the default Data Collection Rule for this workspace","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"failover":{"name":"failover","type":"\u001bazure.subscription.monitorService.workspace.failover","title":"Workspace failover state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"features":{"name":"features","type":"\u001bazure.subscription.monitorService.workspace.features","title":"Workspace feature flags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"forceCmkForQuery":{"name":"forceCmkForQuery","type":"\u0004","is_mandatory":true,"title":"Whether customer-managed key is required for query","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Workspace resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Managed identity configuration (type, principalId, tenantId, userAssignedIdentities)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"linkedService":{"name":"linkedService","type":"\u001bazure.subscription.monitorService.workspace.linkedService","title":"Linked service for a Log Analytics workspace","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"linkedServices":{"name":"linkedServices","type":"\u0019\u001bazure.subscription.monitorService.workspace.linkedService","title":"Linked services","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Workspace location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"modifiedDate":{"name":"modifiedDate","type":"\t","is_mandatory":true,"title":"Workspace last modified date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Workspace name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkSecurityPerimeterConfigurations":{"name":"networkSecurityPerimeterConfigurations","type":"\u0019\u001bazure.subscription.monitorService.workspace.nspConfiguration","title":"Network Security Perimeter configurations","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nspConfiguration":{"name":"nspConfiguration","type":"\u001bazure.subscription.monitorService.workspace.nspConfiguration","title":"Network Security Perimeter configuration for a Log Analytics workspace","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateLinkScopedResources":{"name":"privateLinkScopedResources","type":"\u0019\n","title":"Private link scoped resources","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccessForIngestion":{"name":"publicNetworkAccessForIngestion","type":"\u0007","is_mandatory":true,"title":"Public network access for ingestion (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccessForQuery":{"name":"publicNetworkAccessForQuery","type":"\u0007","is_mandatory":true,"title":"Public network access for query (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replication":{"name":"replication","type":"\u001bazure.subscription.monitorService.workspace.replication","title":"Workspace replication configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionInDays":{"name":"retentionInDays","type":"\u0005","is_mandatory":true,"title":"Data retention period in days","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuCapacityReservationLevel":{"name":"skuCapacityReservationLevel","type":"\u0005","is_mandatory":true,"title":"Capacity reservation level in GB/day (for CapacityReservation SKU)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"SKU name (\"Free\", \"Standard\", \"Premium\", \"PerNode\", \"PerGB2018\", \"Standalone\", \"CapacityReservation\", \"LACluster\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"table":{"name":"table","type":"\u001bazure.subscription.monitorService.workspace.table","title":"Table within a Log Analytics workspace","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"tables":{"name":"tables","type":"\u0019\u001bazure.subscription.monitorService.workspace.table","title":"Workspace tables (per-table plan/retention)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Workspace tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Log Analytics workspace","desc":" Examine a Log Analytics workspace — the underlying log/data store for Azure Monitor, Microsoft Sentinel, and Defender for Cloud. Surfaces the workspace SKU (PerGB2018, CapacityReservation, Free, Standalone, etc.), retention period, daily-quota cap and reset time, the public network access state for ingestion and query, the linked Application Insights workspaces, the customer-managed-key reference, identity assignments, and the `created`/`modified` timestamps tying the workspace's lifecycle to its tenant.","min_provider_version":"13.3.3","defaults":"id name location skuName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace.capping":{"id":"azure.subscription.monitorService.workspace.capping","name":"azure.subscription.monitorService.workspace.capping","fields":{"dailyQuotaGb":{"name":"dailyQuotaGb","type":"\u0006","is_mandatory":true,"title":"Daily quota in GB (-1 means unlimited)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataIngestionStatus":{"name":"dataIngestionStatus","type":"\u0007","is_mandatory":true,"title":"Data ingestion status (\"RespectQuota\", \"ForceOn\", \"ForceOff\", etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Capping identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"quotaNextResetTime":{"name":"quotaNextResetTime","type":"\u0007","is_mandatory":true,"title":"Next quota reset time","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Daily data volume capping for a Log Analytics workspace","private":true,"min_provider_version":"13.3.3","defaults":"dailyQuotaGb","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace.dataExport":{"id":"azure.subscription.monitorService.workspace.dataExport","name":"azure.subscription.monitorService.workspace.dataExport","fields":{"createdDate":{"name":"createdDate","type":"\t","is_mandatory":true,"title":"Creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"destinationResourceId":{"name":"destinationResourceId","type":"\u0007","is_mandatory":true,"title":"Destination resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the export rule is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Data export resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastModifiedDate":{"name":"lastModifiedDate","type":"\t","is_mandatory":true,"title":"Last modified date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Data export name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tableNames":{"name":"tableNames","type":"\u0019\u0007","is_mandatory":true,"title":"Table names to export","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Data export rule for a Log Analytics workspace","private":true,"min_provider_version":"13.3.3","defaults":"id name enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace.failover":{"id":"azure.subscription.monitorService.workspace.failover","name":"azure.subscription.monitorService.workspace.failover","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Failover identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastModifiedDate":{"name":"lastModifiedDate","type":"\t","is_mandatory":true,"title":"Last time the failover state was updated","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Failover state (\"Active\", \"Inactive\", \"Activating\", \"Deactivating\", \"Failed\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Failover state for a Log Analytics workspace","private":true,"min_provider_version":"13.5.1","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace.features":{"id":"azure.subscription.monitorService.workspace.features","name":"azure.subscription.monitorService.workspace.features","fields":{"associations":{"name":"associations","type":"\u0019\u0007","is_mandatory":true,"title":"List of associations indicating Microsoft Defender for Cloud, Sentinel, etc. attachments","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"clusterResourceId":{"name":"clusterResourceId","type":"\u0007","is_mandatory":true,"title":"Dedicated cluster resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableLocalAuth":{"name":"disableLocalAuth","type":"\u0004","is_mandatory":true,"title":"Whether local authentication is disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableDataExport":{"name":"enableDataExport","type":"\u0004","is_mandatory":true,"title":"Whether data export is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableLogAccessUsingOnlyResourcePermissions":{"name":"enableLogAccessUsingOnlyResourcePermissions","type":"\u0004","is_mandatory":true,"title":"Whether log access uses only resource permissions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Features identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immediatePurgeDataOn30Days":{"name":"immediatePurgeDataOn30Days","type":"\u0004","is_mandatory":true,"title":"Whether data is immediately purged after 30 days","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"unifiedSentinelBillingOnly":{"name":"unifiedSentinelBillingOnly","type":"\u0004","is_mandatory":true,"title":"Whether the workspace is restricted to Sentinel's unified billing model","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Feature flags for a Log Analytics workspace","private":true,"min_provider_version":"13.3.3","defaults":"disableLocalAuth enableDataExport","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace.linkedService":{"id":"azure.subscription.monitorService.workspace.linkedService","name":"azure.subscription.monitorService.workspace.linkedService","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Linked service resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Linked service name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourceId":{"name":"resourceId","type":"\u0007","is_mandatory":true,"title":"Linked resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"writeAccessResourceId":{"name":"writeAccessResourceId","type":"\u0007","is_mandatory":true,"title":"Write access resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Linked service for a Log Analytics workspace","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace.nspConfiguration":{"id":"azure.subscription.monitorService.workspace.nspConfiguration","name":"azure.subscription.monitorService.workspace.nspConfiguration","fields":{"accessRules":{"name":"accessRules","type":"\u0019\n","is_mandatory":true,"title":"Access rules attached to the profile (inbound/outbound, address prefixes, FQDNs, subscriptions)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"accessRulesVersion":{"name":"accessRulesVersion","type":"\u0005","is_mandatory":true,"title":"Current access rules version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"associationAccessMode":{"name":"associationAccessMode","type":"\u0007","is_mandatory":true,"title":"Resource association access mode (\"Audit\", \"Enforced\", or \"Learning\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"associationName":{"name":"associationName","type":"\u0007","is_mandatory":true,"title":"Resource association name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diagnosticSettingsVersion":{"name":"diagnosticSettingsVersion","type":"\u0005","is_mandatory":true,"title":"Current diagnostic settings version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabledLogCategories":{"name":"enabledLogCategories","type":"\u0019\u0007","is_mandatory":true,"title":"Log categories enabled on the profile","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"NSP configuration resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"NSP configuration name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"perimeterGuid":{"name":"perimeterGuid","type":"\u0007","is_mandatory":true,"title":"Universal unique ID of the network security perimeter","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"perimeterId":{"name":"perimeterId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the network security perimeter","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"perimeterLocation":{"name":"perimeterLocation","type":"\u0007","is_mandatory":true,"title":"Location of the network security perimeter","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"profileName":{"name":"profileName","type":"\u0007","is_mandatory":true,"title":"Profile name on the perimeter","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningIssues":{"name":"provisioningIssues","type":"\u0019\n","is_mandatory":true,"title":"Provisioning issues, if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the NSP configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Network Security Perimeter configuration for a Log Analytics workspace","private":true,"min_provider_version":"13.5.1","defaults":"id name provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace.replication":{"id":"azure.subscription.monitorService.workspace.replication","name":"azure.subscription.monitorService.workspace.replication","fields":{"createdDate":{"name":"createdDate","type":"\t","is_mandatory":true,"title":"Last time replication was enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether replication is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Replication identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastModifiedDate":{"name":"lastModifiedDate","type":"\t","is_mandatory":true,"title":"Last time replication configuration was updated","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Location of the replica","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Replication provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Replication configuration for a Log Analytics workspace","private":true,"min_provider_version":"13.5.1","defaults":"enabled location provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.monitorService.workspace.table":{"id":"azure.subscription.monitorService.workspace.table","name":"azure.subscription.monitorService.workspace.table","fields":{"archiveRetentionInDays":{"name":"archiveRetentionInDays","type":"\u0005","is_mandatory":true,"title":"Long-term archive retention in days (totalRetentionInDays - retentionInDays)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Table resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastPlanModifiedDate":{"name":"lastPlanModifiedDate","type":"\u0007","is_mandatory":true,"title":"Timestamp when the table plan was last modified","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Table name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"plan":{"name":"plan","type":"\u0007","is_mandatory":true,"title":"Ingestion/billing plan (\"Analytics\", \"Basic\", or \"Auxiliary\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"restoredLogs":{"name":"restoredLogs","type":"\n","is_mandatory":true,"title":"Restored logs configuration if the table was created via restore","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resultStatistics":{"name":"resultStatistics","type":"\n","is_mandatory":true,"title":"Search job execution statistics","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionInDays":{"name":"retentionInDays","type":"\u0005","is_mandatory":true,"title":"Active retention in days (-1 means \"use workspace default\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionInDaysAsDefault":{"name":"retentionInDaysAsDefault","type":"\u0004","is_mandatory":true,"title":"Whether retentionInDays is inherited from the workspace default","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"schema":{"name":"schema","type":"\n","is_mandatory":true,"title":"Table schema (columns, description, source, categories)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"searchResults":{"name":"searchResults","type":"\n","is_mandatory":true,"title":"Search results configuration if the table was created from a search job","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"totalRetentionInDays":{"name":"totalRetentionInDays","type":"\u0005","is_mandatory":true,"title":"Total retention in days including archive (-1 means \"default to retentionInDays\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"totalRetentionInDaysAsDefault":{"name":"totalRetentionInDaysAsDefault","type":"\u0004","is_mandatory":true,"title":"Whether totalRetentionInDays is inherited from the workspace default","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Table within a Log Analytics workspace","private":true,"min_provider_version":"13.5.1","defaults":"name plan retentionInDays totalRetentionInDays","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.mySqlService":{"id":"azure.subscription.mySqlService","name":"azure.subscription.mySqlService","fields":{"database":{"name":"database","type":"\u001bazure.subscription.mySqlService.database","title":"Azure Database for MySQL database","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"flexibleServer":{"name":"flexibleServer","type":"\u001bazure.subscription.mySqlService.flexibleServer","title":"Azure Database for MySQL flexible server","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"flexibleServers":{"name":"flexibleServers","type":"\u0019\u001bazure.subscription.mySqlService.flexibleServer","title":"List of Flexible MySQL servers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"server":{"name":"server","type":"\u001bazure.subscription.mySqlService.server","title":"Azure Database for MySQL server","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"servers":{"name":"servers","type":"\u0019\u001bazure.subscription.mySqlService.server","title":"List of MySQL servers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Database for MySQL","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.mySqlService.database":{"id":"azure.subscription.mySqlService.database","name":"azure.subscription.mySqlService.database","fields":{"charset":{"name":"charset","type":"\u0007","is_mandatory":true,"title":"MySQL database character set","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"collation":{"name":"collation","type":"\u0007","is_mandatory":true,"title":"MySQL database collation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"MySQL database ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"MySQL database name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"MySQL database type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Database for MySQL database","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.mySqlService.flexibleServer":{"id":"azure.subscription.mySqlService.flexibleServer","name":"azure.subscription.mySqlService.flexibleServer","fields":{"backupRetentionDays":{"name":"backupRetentionDays","type":"\u0005","is_mandatory":true,"title":"Backup retention period in days","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"configuration":{"name":"configuration","type":"\u0019\u001bazure.subscription.sqlService.configuration","title":"MySQL flexible server configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataEncryptionKey":{"name":"dataEncryptionKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for data encryption (null if system-managed)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataEncryptionType":{"name":"dataEncryptionType","type":"\u0007","is_mandatory":true,"title":"Data encryption type (\"SystemManaged\" or \"AzureKeyVault\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"databases":{"name":"databases","type":"\u0019\u001bazure.subscription.mySqlService.database","title":"MySQL flexible server databases","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewallRules":{"name":"firewallRules","type":"\u0019\u001bazure.subscription.sqlService.firewallrule","title":"MySQL flexible server firewall rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoBackupEncryptionKey":{"name":"geoBackupEncryptionKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for geo-backup encryption (null if system-managed or single-region)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoRedundantBackup":{"name":"geoRedundantBackup","type":"\u0007","is_mandatory":true,"title":"Whether geo-redundant backup is enabled (\"Enabled\" or \"Disabled\")","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"highAvailabilityMode":{"name":"highAvailabilityMode","type":"\u0007","is_mandatory":true,"title":"High availability mode (\"Disabled\", \"ZoneRedundant\", or \"SameZone\")","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"highAvailabilityState":{"name":"highAvailabilityState","type":"\u0007","is_mandatory":true,"title":"High availability state (\"NotEnabled\", \"CreatingStandby\", \"ReplicatingData\", \"FailingOver\", \"Healthy\", or \"RemovingStandby\")","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"MySQL flexible server ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"MySQL flexible server location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"MySQL flexible server name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"MySQL flexible server properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is allowed","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sslEnforcement":{"name":"sslEnforcement","type":"\u0004","title":"Whether SSL enforcement is enabled (queries the require_secure_transport server parameter)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"MySQL flexible server tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"MySQL flexible server type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"MySQL flexible server engine version","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Database for MySQL flexible server","private":true,"min_provider_version":"9.0.1","defaults":"name location properties.version properties.state properties.fullyQualifiedDomainName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.mySqlService.server":{"id":"azure.subscription.mySqlService.server","name":"azure.subscription.mySqlService.server","fields":{"backupRetentionDays":{"name":"backupRetentionDays","type":"\u0005","is_mandatory":true,"title":"Backup retention period in days","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"configuration":{"name":"configuration","type":"\u0019\u001bazure.subscription.sqlService.configuration","title":"MySQL server configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"databases":{"name":"databases","type":"\u0019\u001bazure.subscription.mySqlService.database","title":"MySQL server databases","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewallRules":{"name":"firewallRules","type":"\u0019\u001bazure.subscription.sqlService.firewallrule","title":"MySQL server firewall rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoRedundantBackup":{"name":"geoRedundantBackup","type":"\u0007","is_mandatory":true,"title":"Whether geo-redundant backup is enabled (\"Enabled\" or \"Disabled\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"MySQL server ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"infrastructureEncryption":{"name":"infrastructureEncryption","type":"\u0004","is_mandatory":true,"title":"Whether infrastructure encryption is enabled (double encryption)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"MySQL server location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimalTlsVersion":{"name":"minimalTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version enforced on the server","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"MySQL server name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"MySQL server properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled for the server","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sslEnforcement":{"name":"sslEnforcement","type":"\u0004","is_mandatory":true,"title":"Whether SSL enforcement is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"MySQL server tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"MySQL server type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"MySQL server engine version","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Database for MySQL server","private":true,"min_provider_version":"9.0.1","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService":{"id":"azure.subscription.networkService","name":"azure.subscription.networkService","fields":{"appSecurityGroup":{"name":"appSecurityGroup","type":"\u001bazure.subscription.networkService.appSecurityGroup","title":"Azure application security group","desc":" Examine an application security group (ASG) — the logical grouping used inside Network Security Group rules so traffic can be allowed or denied based on application identity rather than IP. Surfaces the resource GUID and the provisioning state of the group.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"applicationFirewallPolicies":{"name":"applicationFirewallPolicies","type":"\u0019\u001bazure.subscription.networkService.applicationFirewallPolicy","title":"List of application firewall policies","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"applicationFirewallPolicy":{"name":"applicationFirewallPolicy","type":"\u001bazure.subscription.networkService.applicationFirewallPolicy","title":"Azure Web Application Firewall (WAF) policy","desc":" Examine a reusable WAF policy that Application Gateway, Front Door, or other PaaS endpoints reference for L7 protection. Surfaces the `policySettings` (mode, request body limits, file upload limits, state, log scrubbing), the `customRules` list, the `managedRules` configuration (rule sets and per-rule overrides), and the resources the policy is currently bound to.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"applicationGateway":{"name":"applicationGateway","type":"\u001bazure.subscription.networkService.applicationGateway","title":"Azure Application Gateway","desc":" Examine an Azure Application Gateway — the regional L7 load balancer that fronts web workloads. Surfaces the SKU and tier (Standard_v2, WAF_v2), TLS settings (frontend/backend TLS, certificates, root certs), HTTP listeners, request-routing rules, URL path maps, redirect configurations, backend address pools and HTTP settings, autoscale configuration, the WAF mode and rule set when the gateway is WAF-enabled, and the linked `firewallPolicy()`.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"applicationGateways":{"name":"applicationGateways","type":"\u0019\u001bazure.subscription.networkService.applicationGateway","title":"List of application gateways","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"applicationSecurityGroups":{"name":"applicationSecurityGroups","type":"\u0019\u001bazure.subscription.networkService.appSecurityGroup","title":"List of application security groups","min_provider_version":"9.0.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backendAddressPool":{"name":"backendAddressPool","type":"\u001bazure.subscription.networkService.backendAddressPool","title":"Azure network backend address pool","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"bastionHost":{"name":"bastionHost","type":"\u001bazure.subscription.networkService.bastionHost","title":"Azure Network Bastion host","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"bastionHosts":{"name":"bastionHosts","type":"\u0019\u001bazure.subscription.networkService.bastionHost","title":"List of Bastion hosts","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"bgpSettings":{"name":"bgpSettings","type":"\u001bazure.subscription.networkService.bgpSettings","title":"Azure network BGP settings","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"ddosProtectionPlan":{"name":"ddosProtectionPlan","type":"\u001bazure.subscription.networkService.ddosProtectionPlan","title":"Azure DDoS protection plan","desc":" Examine a DDoS Network Protection plan that virtual networks bind to for enhanced volumetric and protocol DDoS mitigation. Surfaces the plan resource GUID, the public IP addresses currently protected by the plan, and the linked virtual networks subscribing to its mitigation policies.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"ddosProtectionPlans":{"name":"ddosProtectionPlans","type":"\u0019\u001bazure.subscription.networkService.ddosProtectionPlan","title":"List of DDoS protection plans","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewall":{"name":"firewall","type":"\u001bazure.subscription.networkService.firewall","title":"Azure Firewall","desc":" Examine an Azure Firewall instance — the L4/L7 stateful service firewall deployed at the network edge. Surfaces the firewall SKU (Standard, Premium, or Basic), threat-intel mode, attached firewall policy, IP configurations and management IP, application/network/NAT rule collections, hub IP addresses for Secure Virtual Hub deployments, the public IP and virtual hub linkage, and the `additionalProperties` exposing autoscale and DNS settings.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"firewallPolicies":{"name":"firewallPolicies","type":"\u0019\u001bazure.subscription.networkService.firewallPolicy","title":"List of firewall policies","min_provider_version":"9.0.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewallPolicy":{"name":"firewallPolicy","type":"\u001bazure.subscription.networkService.firewallPolicy","title":"Azure Firewall policy","desc":" Examine a reusable Azure Firewall policy — the rule-set parent that firewall instances reference. Surfaces the policy SKU, threat-intel mode and allow-list, DNS settings, intrusion detection settings, TLS inspection certificate, the explicit-proxy configuration, the child policy chain (`basePolicy`), and the rule collection groups that hold the actual application/network/NAT rules.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"firewalls":{"name":"firewalls","type":"\u0019\u001bazure.subscription.networkService.firewall","title":"List of network firewalls","min_provider_version":"9.0.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"frontendIpConfig":{"name":"frontendIpConfig","type":"\u001bazure.subscription.networkService.frontendIpConfig","title":"Azure network frontend IP configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"inboundNatPool":{"name":"inboundNatPool","type":"\u001bazure.subscription.networkService.inboundNatPool","title":"Azure network inbound NAT pool","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"inboundNatRule":{"name":"inboundNatRule","type":"\u001bazure.subscription.networkService.inboundNatRule","title":"Azure network inbound NAT rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"interface":{"name":"interface","type":"\u001bazure.subscription.networkService.interface","title":"Azure network interface","desc":" Examine an Azure network interface (NIC) attached to a VM, scale set, or private endpoint. Surfaces the IP configurations (private IP allocation, public IP, subnet binding), MAC address, the associated network security group, accelerated-networking and IP-forwarding flags, DNS settings, the NIC type (Standard, Elastic), the migration phase, and the auxiliary mode/SKU when the NIC is in an accelerated-connection configuration.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"interfaces":{"name":"interfaces","type":"\u0019\u001bazure.subscription.networkService.interface","title":"List of network interfaces","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipAddress":{"name":"ipAddress","type":"\u001bazure.subscription.networkService.ipAddress","title":"Azure network IP address","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"loadBalancer":{"name":"loadBalancer","type":"\u001bazure.subscription.networkService.loadBalancer","title":"Azure Load Balancer","desc":" Examine an Azure Load Balancer and the front-end / back-end configuration that determines how traffic is distributed. Surfaces the SKU (Basic, Standard, Gateway), tier (Regional or Global), the `frontendIPConfigurations`, `backendAddressPools`, `loadBalancingRules`, `inboundNatRules`, `inboundNatPools`, `outboundRules`, and `probes`. The `extendedLocation`, attached `virtualNetwork` for Standard private LBs, and the resource GUID help correlate the LB to its surrounding network.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"loadBalancerRule":{"name":"loadBalancerRule","type":"\u001bazure.subscription.networkService.loadBalancerRule","title":"Azure Load Balancer rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"loadBalancers":{"name":"loadBalancers","type":"\u0019\u001bazure.subscription.networkService.loadBalancer","title":"List of load balancers","min_provider_version":"9.0.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"localNetworkGateway":{"name":"localNetworkGateway","type":"\u001bazure.subscription.networkService.localNetworkGateway","title":"Azure local network gateway","desc":" Examine a local network gateway — the Azure resource that represents an on-premises network endpoint paired with a virtual network gateway to form a site-to-site VPN. Surfaces the on-premises device IP (`gatewayIpAddress`) or `fqdn`, the address prefixes that describe the on-premises network (`localNetworkAddressSpacePrefixes`), and any configured BGP settings (`bgpSettings`) used to exchange routes with Azure. Use alongside `azure.subscription.networkService.virtualNetworkGateway` and `virtualNetworkGateway.connections` to audit the full site-to-site VPN topology.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"localNetworkGateways":{"name":"localNetworkGateways","type":"\u0019\u001bazure.subscription.networkService.localNetworkGateway","title":"List of local network gateways","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"natGateway":{"name":"natGateway","type":"\u001bazure.subscription.networkService.natGateway","title":"Azure NAT gateway","desc":" Examine a NAT gateway that provides outbound SNAT for resources in one or more subnets. Surfaces the SKU and zone placement, the configured idle-timeout, the public IP addresses and prefixes allocated for outbound translation, the subnets currently consuming the gateway, and the resource GUID.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"natGateways":{"name":"natGateways","type":"\u0019\u001bazure.subscription.networkService.natGateway","title":"List of NAT gateways","min_provider_version":"9.0.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"outboundRule":{"name":"outboundRule","type":"\u001bazure.subscription.networkService.outboundRule","title":"Azure network outbound rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateEndpoint":{"name":"privateEndpoint","type":"\u001bazure.subscription.networkService.privateEndpoint","title":"Azure network private endpoint","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateEndpoints":{"name":"privateEndpoints","type":"\u0019\u001bazure.subscription.networkService.privateEndpoint","title":"List of private endpoints","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateLinkService":{"name":"privateLinkService","type":"\u001bazure.subscription.networkService.privateLinkService","title":"Azure Private Link service (provider-side resource that exposes a service via Private Link)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateLinkServices":{"name":"privateLinkServices","type":"\u0019\u001bazure.subscription.networkService.privateLinkService","title":"List of Private Link services (provider-side resources exposing services through Private Link)","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"probe":{"name":"probe","type":"\u001bazure.subscription.networkService.probe","title":"Azure network probe","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"publicIpAddresses":{"name":"publicIpAddresses","type":"\u0019\u001bazure.subscription.networkService.ipAddress","title":"List of public IP addresses","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"route":{"name":"route","type":"\u001bazure.subscription.networkService.route","title":"Azure network route","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"routeTable":{"name":"routeTable","type":"\u001bazure.subscription.networkService.routeTable","title":"Azure network route table","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"routeTables":{"name":"routeTables","type":"\u0019\u001bazure.subscription.networkService.routeTable","title":"List of route tables","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityGroup":{"name":"securityGroup","type":"\u001bazure.subscription.networkService.securityGroup","title":"Azure network security group","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"securityGroups":{"name":"securityGroups","type":"\u0019\u001bazure.subscription.networkService.securityGroup","title":"List of network security groups","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityrule":{"name":"securityrule","type":"\u001bazure.subscription.networkService.securityrule","title":"Azure network security rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"serviceEndpointPolicies":{"name":"serviceEndpointPolicies","type":"\u0019\u001bazure.subscription.networkService.serviceEndpointPolicy","title":"List of service endpoint policies","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceEndpointPolicy":{"name":"serviceEndpointPolicy","type":"\u001bazure.subscription.networkService.serviceEndpointPolicy","title":"Azure service endpoint policy","desc":" Examine a service-endpoint policy that restricts which Azure service resources can be reached from a subnet using service endpoints. Surfaces the policy's service-endpoint-policy definitions (the allowed Azure resource IDs), the contextual service alias, the subnets the policy is applied to, and the resource GUID.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subnet":{"name":"subnet","type":"\u001bazure.subscription.networkService.subnet","title":"Azure VNet subnet","desc":" Examine a subnet inside an Azure Virtual Network. Surfaces the IPv4 and IPv6 address prefixes, the attached network security group and route table, NAT gateway, service endpoints and service-endpoint policies, delegations to PaaS services, the `privateEndpointNetworkPolicies` and `privateLinkServiceNetworkPolicies` flags, and the IP allocation method.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetwork":{"name":"virtualNetwork","type":"\u001bazure.subscription.networkService.virtualNetwork","title":"Azure Virtual Network (VNet)","desc":" Examine an Azure Virtual Network and its connectivity surface. Surfaces the IPv4 and IPv6 address spaces, configured DNS servers, the linked DDoS protection plan, encryption settings, BGP communities, the `enableVmProtection` and `enableDdosProtection` flags, the `subnets()` defined inside the VNet, and the `peerings()` to other virtual networks.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"virtualNetworkGateway":{"name":"virtualNetworkGateway","type":"\u001bazure.subscription.networkService.virtualNetworkGateway","title":"Azure VPN/ExpressRoute gateway","desc":" Examine a virtual network gateway used for VPN, ExpressRoute, or LocalGateway connectivity. Surfaces the gateway type, VPN type (RouteBased or PolicyBased), generation, SKU, IP configuration, BGP settings (ASN, peering address), VPN client configuration (address pool, root and revoked certificates, RADIUS server), the active-active flag, and any associated VPN connections and disaster-recovery settings.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"virtualNetworkGateways":{"name":"virtualNetworkGateways","type":"\u0019\u001bazure.subscription.networkService.virtualNetworkGateway","title":"List of virtual network gateways","min_provider_version":"9.0.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworks":{"name":"virtualNetworks","type":"\u0019\u001bazure.subscription.networkService.virtualNetwork","title":"List of virtual networks","min_provider_version":"9.0.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"wafConfig":{"name":"wafConfig","type":"\u001bazure.subscription.networkService.wafConfig","title":"Azure Application Gateway WAF config","desc":" Examine the legacy WAF configuration attached directly to an Application Gateway (used by older v1 SKUs). Surfaces the WAF `mode` (Detection / Prevention), the rule set type and version, firewall mode flags, the `enabled` state, request-body limits, and disabled rule groups. Newer deployments use a typed `applicationFirewallPolicy` resource instead.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"watcher":{"name":"watcher","type":"\u001bazure.subscription.networkService.watcher","title":"Azure Network Watcher","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"watchers":{"name":"watchers","type":"\u0019\u001bazure.subscription.networkService.watcher","title":"List of network watchers","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.appSecurityGroup":{"id":"azure.subscription.networkService.appSecurityGroup","name":"azure.subscription.networkService.appSecurityGroup","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Application security group etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Application security group ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Application security group location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Application security group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Application security group properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Application security group tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Application security group type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure application security group","desc":" Examine an application security group (ASG) — the logical grouping used inside Network Security Group rules so traffic can be allowed or denied based on application identity rather than IP. Surfaces the resource GUID and the provisioning state of the group.","min_provider_version":"9.0.8","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.applicationFirewallPolicy":{"id":"azure.subscription.networkService.applicationFirewallPolicy","name":"azure.subscription.networkService.applicationFirewallPolicy","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Application firewall policy etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gateways":{"name":"gateways","type":"\u0019\u001bazure.subscription.networkService.applicationGateway","title":"List of associated application gateways","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Application firewall policy ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Application firewall policy location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Application firewall policy name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Application firewall policy properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Application firewall policy tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Application firewall policy resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Web Application Firewall (WAF) policy","desc":" Examine a reusable WAF policy that Application Gateway, Front Door, or other PaaS endpoints reference for L7 protection. Surfaces the `policySettings` (mode, request body limits, file upload limits, state, log scrubbing), the `customRules` list, the `managedRules` configuration (rule sets and per-rule overrides), and the resources the policy is currently bound to.","min_provider_version":"9.0.13","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.applicationGateway":{"id":"azure.subscription.networkService.applicationGateway","name":"azure.subscription.networkService.applicationGateway","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Application Gateway etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Application Gateway ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Application Gateway location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Application Gateway name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"policy":{"name":"policy","type":"\u001bazure.subscription.networkService.applicationFirewallPolicy","title":"Gets the attached application firewall policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Application Gateway properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sslCipherSuites":{"name":"sslCipherSuites","type":"\u0019\u0007","is_mandatory":true,"title":"SSL cipher suites enabled on the application gateway","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sslMinProtocolVersion":{"name":"sslMinProtocolVersion","type":"\u0007","is_mandatory":true,"title":"Minimum SSL/TLS protocol version (\"TLSv1_0\", \"TLSv1_1\", \"TLSv1_2\", \"TLSv1_3\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sslPolicyType":{"name":"sslPolicyType","type":"\u0007","is_mandatory":true,"title":"SSL policy type (\"Predefined\", \"Custom\", \"CustomV2\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Application Gateway tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Application Gateway resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"wafConfiguration":{"name":"wafConfiguration","type":"\u0019\u001bazure.subscription.networkService.wafConfig","title":"WAF configurations","min_provider_version":"11.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Application Gateway","desc":" Examine an Azure Application Gateway — the regional L7 load balancer that fronts web workloads. Surfaces the SKU and tier (Standard_v2, WAF_v2), TLS settings (frontend/backend TLS, certificates, root certs), HTTP listeners, request-routing rules, URL path maps, redirect configurations, backend address pools and HTTP settings, autoscale configuration, the WAF mode and rule set when the gateway is WAF-enabled, and the linked `firewallPolicy()`.","min_provider_version":"9.0.13","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.backendAddressPool":{"id":"azure.subscription.networkService.backendAddressPool","name":"azure.subscription.networkService.backendAddressPool","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Backend Address Pool etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Backend Address Pool ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Backend Address Pool name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Backend Address Pool properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Backend Address Pool type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network backend address pool","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.bastionHost":{"id":"azure.subscription.networkService.bastionHost","name":"azure.subscription.networkService.bastionHost","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Bastion Host ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Bastion Host location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Bastion Host name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Bastion host properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"Bastion host SKU","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Bastion Host tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Bastion Host type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Network Bastion host","private":true,"min_provider_version":"9.0.1","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.bgpSettings":{"id":"azure.subscription.networkService.bgpSettings","name":"azure.subscription.networkService.bgpSettings","fields":{"asn":{"name":"asn","type":"\u0005","is_mandatory":true,"title":"BGP Settings speaker ASN","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"bgpPeeringAddress":{"name":"bgpPeeringAddress","type":"\u0007","is_mandatory":true,"title":"The BGP peering address and BGP identifier of this BGP speaker","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"bgpPeeringAddressesConfig":{"name":"bgpPeeringAddressesConfig","type":"\u0019\u001bazure.subscription.networkService.bgpSettings.ipConfigurationBgpPeeringAddress","is_mandatory":true,"title":"The BGP peering addresses with IP configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"BGP Settings ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipConfigurationBgpPeeringAddress":{"name":"ipConfigurationBgpPeeringAddress","type":"\u001bazure.subscription.networkService.bgpSettings.ipConfigurationBgpPeeringAddress","title":"Azure BGP settings IP configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"peerWeight":{"name":"peerWeight","type":"\u0005","is_mandatory":true,"title":"The weight added to routes learned from this BGP speaker","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network BGP settings","private":true,"min_provider_version":"9.0.8","defaults":"asn bgpPeeringAddress","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.bgpSettings.ipConfigurationBgpPeeringAddress":{"id":"azure.subscription.networkService.bgpSettings.ipConfigurationBgpPeeringAddress","name":"azure.subscription.networkService.bgpSettings.ipConfigurationBgpPeeringAddress","fields":{"customBgpIpAddresses":{"name":"customBgpIpAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"BGP Settings IP Configuration custom BGP IP addresses","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultBgpIpAddresses":{"name":"defaultBgpIpAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"BGP Settings IP Configuration default BGP IP addresses","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"BGP Settings IP Configuration ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipConfigurationId":{"name":"ipConfigurationId","type":"\u0007","is_mandatory":true,"title":"BGP Settings IP Configuration ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tunnelIpAddresses":{"name":"tunnelIpAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"BGP Settings IP Configuration tunnel public BGP IP addresses","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure BGP settings IP configuration","private":true,"min_provider_version":"9.0.8","defaults":"defaultBgpIpAddresses","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.ddosProtectionPlan":{"id":"azure.subscription.networkService.ddosProtectionPlan","name":"azure.subscription.networkService.ddosProtectionPlan","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"DDoS protection plan etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"DDoS protection plan ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"DDoS protection plan location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"DDoS protection plan name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIpAddresses":{"name":"publicIpAddresses","type":"\u0019\u001bazure.subscription.networkService.ipAddress","title":"Associated public IP addresses","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"DDoS protection plan tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"DDoS protection plan type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworks":{"name":"virtualNetworks","type":"\u0019\u001bazure.subscription.networkService.virtualNetwork","title":"Associated virtual networks protected by this plan","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure DDoS protection plan","desc":" Examine a DDoS Network Protection plan that virtual networks bind to for enhanced volumetric and protocol DDoS mitigation. Surfaces the plan resource GUID, the public IP addresses currently protected by the plan, and the linked virtual networks subscribing to its mitigation policies.","min_provider_version":"13.3.3","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.firewall":{"id":"azure.subscription.networkService.firewall","name":"azure.subscription.networkService.firewall","fields":{"applicationRule":{"name":"applicationRule","type":"\u001bazure.subscription.networkService.firewall.applicationRule","title":"Azure network firewall application rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"applicationRules":{"name":"applicationRules","type":"\u0019\u001bazure.subscription.networkService.firewall.applicationRule","title":"List of application rules for the firewall","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Firewall etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipConfig":{"name":"ipConfig","type":"\u001bazure.subscription.networkService.firewall.ipConfig","title":"Azure network firewall IP configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"ipConfigurations":{"name":"ipConfigurations","type":"\u0019\u001bazure.subscription.networkService.firewall.ipConfig","title":"List of IP configurations for the firewall","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Firewall location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managementIpConfiguration":{"name":"managementIpConfiguration","type":"\u001bazure.subscription.networkService.firewall.ipConfig","title":"The IP configuration used for management traffic","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"natRule":{"name":"natRule","type":"\u001bazure.subscription.networkService.firewall.natRule","title":"Azure network firewall NAT rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"natRules":{"name":"natRules","type":"\u0019\u001bazure.subscription.networkService.firewall.natRule","title":"List of NAT rules for the firewall","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRule":{"name":"networkRule","type":"\u001bazure.subscription.networkService.firewall.networkRule","title":"Azure network firewall network rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"networkRules":{"name":"networkRules","type":"\u0019\u001bazure.subscription.networkService.firewall.networkRule","title":"List of network rules for the firewall","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"policy":{"name":"policy","type":"\u001bazure.subscription.networkService.firewallPolicy","title":"Policy associated with this firewall","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Firewall properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Firewall provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"Firewall SKU name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuTier":{"name":"skuTier","type":"\u0007","is_mandatory":true,"title":"Firewall SKU tier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Firewall tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"threatIntelMode":{"name":"threatIntelMode","type":"\u0007","is_mandatory":true,"title":"Firewall threat intel mode","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Firewall type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Firewall","desc":" Examine an Azure Firewall instance — the L4/L7 stateful service firewall deployed at the network edge. Surfaces the firewall SKU (Standard, Premium, or Basic), threat-intel mode, attached firewall policy, IP configurations and management IP, application/network/NAT rule collections, hub IP addresses for Secure Virtual Hub deployments, the public IP and virtual hub linkage, and the `additionalProperties` exposing autoscale and DNS settings.","min_provider_version":"9.0.8","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.firewall.applicationRule":{"id":"azure.subscription.networkService.firewall.applicationRule","name":"azure.subscription.networkService.firewall.applicationRule","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Firewall application rule etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall application rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall application rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Firewall application rule properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network firewall application rule","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.firewall.ipConfig":{"id":"azure.subscription.networkService.firewall.ipConfig","name":"azure.subscription.networkService.firewall.ipConfig","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Firewall IP configuration etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall IP configuration ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall IP configuration name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateIpAddress":{"name":"privateIpAddress","type":"\u0007","is_mandatory":true,"title":"Firewall IP configuration private IP address","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Firewall IP configuration properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIpAddress":{"name":"publicIpAddress","type":"\u001bazure.subscription.networkService.ipAddress","title":"Public IP address associated with this IP configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnet":{"name":"subnet","type":"\u001bazure.subscription.networkService.subnet","title":"Subnet associated with this IP configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network firewall IP configuration","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.firewall.natRule":{"id":"azure.subscription.networkService.firewall.natRule","name":"azure.subscription.networkService.firewall.natRule","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Firewall NAT rule etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall NAT rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall NAT rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Firewall NAT rule properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network firewall NAT rule","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.firewall.networkRule":{"id":"azure.subscription.networkService.firewall.networkRule","name":"azure.subscription.networkService.firewall.networkRule","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Firewall network rule etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall network rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall network rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Firewall network rule properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network firewall network rule","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.firewallPolicy":{"id":"azure.subscription.networkService.firewallPolicy","name":"azure.subscription.networkService.firewallPolicy","fields":{"basePolicy":{"name":"basePolicy","type":"\u001bazure.subscription.networkService.firewallPolicy","title":"The parent firewall policy from which rules are inherited","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"childPolicies":{"name":"childPolicies","type":"\u0019\u001bazure.subscription.networkService.firewallPolicy","title":"List of child policies this policy is associated with","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Firewall policy etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewalls":{"name":"firewalls","type":"\u0019\u001bazure.subscription.networkService.firewall","title":"List of firewalls the policy is associated with","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Firewall policy ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"idpsBypassRule":{"name":"idpsBypassRule","type":"\u001bazure.subscription.networkService.firewallPolicy.idpsBypassRule","title":"Azure Firewall Policy IDPS bypass traffic rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"intrusionDetectionBypassRules":{"name":"intrusionDetectionBypassRules","type":"\u0019\u001bazure.subscription.networkService.firewallPolicy.idpsBypassRule","title":"IDPS bypass traffic rules","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"intrusionDetectionMode":{"name":"intrusionDetectionMode","type":"\u0007","title":"Intrusion detection mode (Off, Alert, Deny)","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"intrusionDetectionProfile":{"name":"intrusionDetectionProfile","type":"\u0007","title":"Intrusion detection profile (Basic, Standard, Advanced)","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"intrusionDetectionSignatureOverrides":{"name":"intrusionDetectionSignatureOverrides","type":"\u0019\n","title":"IDPS signature overrides (signatures with non-default modes)","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Firewall policy location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Firewall policy name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Firewall policy properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Firewall policy provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Firewall policy tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Firewall policy type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Firewall policy","desc":" Examine a reusable Azure Firewall policy — the rule-set parent that firewall instances reference. Surfaces the policy SKU, threat-intel mode and allow-list, DNS settings, intrusion detection settings, TLS inspection certificate, the explicit-proxy configuration, the child policy chain (`basePolicy`), and the rule collection groups that hold the actual application/network/NAT rules.","min_provider_version":"9.0.8","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.firewallPolicy.idpsBypassRule":{"id":"azure.subscription.networkService.firewallPolicy.idpsBypassRule","name":"azure.subscription.networkService.firewallPolicy.idpsBypassRule","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the bypass rule","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"destinationAddresses":{"name":"destinationAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Destination IP addresses or ranges","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"destinationIpGroups":{"name":"destinationIpGroups","type":"\u0019\u0007","is_mandatory":true,"title":"Destination IP groups","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"destinationPorts":{"name":"destinationPorts","type":"\u0019\u0007","is_mandatory":true,"title":"Destination ports or ranges","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Unique ID (firewallPolicyId + rule name)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol (TCP, UDP, ICMP, ANY)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceAddresses":{"name":"sourceAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Source IP addresses or ranges","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceIpGroups":{"name":"sourceIpGroups","type":"\u0019\u0007","is_mandatory":true,"title":"Source IP groups","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Firewall Policy IDPS bypass traffic rule","private":true,"min_provider_version":"13.3.3","defaults":"name protocol","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.frontendIpConfig":{"id":"azure.subscription.networkService.frontendIpConfig","name":"azure.subscription.networkService.frontendIpConfig","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Frontend IP Configuration etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Frontend IP Configuration ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isPublic":{"name":"isPublic","type":"\u0004","is_mandatory":true,"title":"Whether this frontend IP configuration uses a public IP address","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Frontend IP Configuration name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateIpAddress":{"name":"privateIpAddress","type":"\u0007","is_mandatory":true,"title":"Private IP address (empty if public)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Frontend IP Configuration properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIpAddressId":{"name":"publicIpAddressId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the associated public IP address (empty if private)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Frontend IP Configuration type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Frontend IP Configuration zones","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network frontend IP configuration","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.inboundNatPool":{"id":"azure.subscription.networkService.inboundNatPool","name":"azure.subscription.networkService.inboundNatPool","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Inbound NAT Pool etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Inbound NAT Pool ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Inbound NAT Pool name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Inbound NAT Pool properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Inbound NAT Pool type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network inbound NAT pool","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.inboundNatRule":{"id":"azure.subscription.networkService.inboundNatRule","name":"azure.subscription.networkService.inboundNatRule","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Inbound NAT Rule etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Inbound NAT Rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Inbound NAT Rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Inbound NAT Rule properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Inbound NAT Rule type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network inbound NAT rule","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.interface":{"id":"azure.subscription.networkService.interface","name":"azure.subscription.networkService.interface","fields":{"effectiveSecurityRules":{"name":"effectiveSecurityRules","type":"\u0019\n","title":"Effective NSG rules merged across NSG-on-NIC, ASGs, and NSG-on-subnet (computed via BeginGetEffectiveNetworkSecurityGroup)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableAcceleratedNetworking":{"name":"enableAcceleratedNetworking","type":"\u0004","is_mandatory":true,"title":"Whether accelerated networking is enabled on the network interface","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableIPForwarding":{"name":"enableIPForwarding","type":"\u0004","is_mandatory":true,"title":"Whether IP forwarding is enabled on the network interface","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Network interface etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Network interface ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipConfigurations":{"name":"ipConfigurations","type":"\u0019\n","is_mandatory":true,"title":"IP configurations for the network interface","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Network interface name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Network interface name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkSecurityGroupId":{"name":"networkSecurityGroupId","type":"\u0007","is_mandatory":true,"title":"Network security group associated with this interface","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"primary":{"name":"primary","type":"\u0004","is_mandatory":true,"title":"Whether this is a primary network interface on a VM","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Network interface properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Network interface tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Network interface type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vm":{"name":"vm","type":"\u001bazure.subscription.computeService.vm","title":"Network interface compute vm","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network interface","desc":" Examine an Azure network interface (NIC) attached to a VM, scale set, or private endpoint. Surfaces the IP configurations (private IP allocation, public IP, subnet binding), MAC address, the associated network security group, accelerated-networking and IP-forwarding flags, DNS settings, the NIC type (Standard, Elastic), the migration phase, and the auxiliary mode/SKU when the NIC is in an accelerated-connection configuration.","min_provider_version":"9.0.1","defaults":"name location properties.macAddress properties.nicType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.ipAddress":{"id":"azure.subscription.networkService.ipAddress","name":"azure.subscription.networkService.ipAddress","fields":{"ddosProtectionMode":{"name":"ddosProtectionMode","type":"\u0007","is_mandatory":true,"title":"DDoS protection mode (\"VirtualNetworkInherited\", \"Enabled\", \"Disabled\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"IP address ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipAddress":{"name":"ipAddress","type":"\u0007","is_mandatory":true,"title":"IP address","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipAllocationMethod":{"name":"ipAllocationMethod","type":"\u0007","is_mandatory":true,"title":"IP address allocation method (Static, Dynamic)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipVersion":{"name":"ipVersion","type":"\u0007","is_mandatory":true,"title":"IP address version (IPv4, IPv6)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"IP address location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"IP address name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"IP address tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"IP address type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"Availability zones for the public IP address","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network IP address","private":true,"min_provider_version":"9.0.1","defaults":"name location ipAddress","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.loadBalancer":{"id":"azure.subscription.networkService.loadBalancer","name":"azure.subscription.networkService.loadBalancer","fields":{"backendPools":{"name":"backendPools","type":"\u0019\u001bazure.subscription.networkService.backendAddressPool","title":"List of Load Balancer backend address pools","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Load Balancer etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"frontendIpConfigs":{"name":"frontendIpConfigs","type":"\u0019\u001bazure.subscription.networkService.frontendIpConfig","title":"List of Load Balancer frontend IP configurations","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Load Balancer ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inboundNatPools":{"name":"inboundNatPools","type":"\u0019\u001bazure.subscription.networkService.inboundNatPool","title":"List of Load Balancer inbound NAT pools","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inboundNatRules":{"name":"inboundNatRules","type":"\u0019\u001bazure.subscription.networkService.inboundNatRule","title":"List of Load Balancer inbound NAT rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"loadBalancerRules":{"name":"loadBalancerRules","type":"\u0019\u001bazure.subscription.networkService.loadBalancerRule","title":"List of Load Balancer rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Load Balancer location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Load Balancer name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"outboundRules":{"name":"outboundRules","type":"\u0019\u001bazure.subscription.networkService.outboundRule","title":"List of Load Balancer outbound rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"probes":{"name":"probes","type":"\u0019\u001bazure.subscription.networkService.probe","title":"List of Load Balancer probes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Load Balancer properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\u0007","is_mandatory":true,"title":"Load Balancer SKU name (\"Basic\", \"Gateway\", \"Standard\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuTier":{"name":"skuTier","type":"\u0007","is_mandatory":true,"title":"Load Balancer SKU tier (\"Global\" or \"Regional\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Load Balancer tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Load Balancer type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Load Balancer","desc":" Examine an Azure Load Balancer and the front-end / back-end configuration that determines how traffic is distributed. Surfaces the SKU (Basic, Standard, Gateway), tier (Regional or Global), the `frontendIPConfigurations`, `backendAddressPools`, `loadBalancingRules`, `inboundNatRules`, `inboundNatPools`, `outboundRules`, and `probes`. The `extendedLocation`, attached `virtualNetwork` for Standard private LBs, and the resource GUID help correlate the LB to its surrounding network.","min_provider_version":"9.0.8","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.loadBalancerRule":{"id":"azure.subscription.networkService.loadBalancerRule","name":"azure.subscription.networkService.loadBalancerRule","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Load Balancer rule etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Load Balancer rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Load Balancer rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Load Balancer rule properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Load Balancer rule type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Load Balancer rule","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.localNetworkGateway":{"id":"azure.subscription.networkService.localNetworkGateway","name":"azure.subscription.networkService.localNetworkGateway","fields":{"bgpSettings":{"name":"bgpSettings","type":"\u001bazure.subscription.networkService.bgpSettings","title":"BGP settings advertised by the on-premises VPN device, if BGP is configured","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Local network gateway etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fqdn":{"name":"fqdn","type":"\u0007","is_mandatory":true,"title":"FQDN of the on-premises VPN device (alternative to `gatewayIpAddress`)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gatewayIpAddress":{"name":"gatewayIpAddress","type":"\u0007","is_mandatory":true,"title":"IP address of the on-premises VPN device","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Local network gateway ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"localNetworkAddressSpacePrefixes":{"name":"localNetworkAddressSpacePrefixes","type":"\u0019\u0007","is_mandatory":true,"title":"Address prefixes (CIDR notation) describing the on-premises network reachable through this gateway","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Local network gateway location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Local network gateway name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the local network gateway","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourceGuid":{"name":"resourceGuid","type":"\u0007","is_mandatory":true,"title":"Resource GUID assigned to the local network gateway","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Local network gateway tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Local network gateway resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure local network gateway","desc":" Examine a local network gateway — the Azure resource that represents an on-premises network endpoint paired with a virtual network gateway to form a site-to-site VPN. Surfaces the on-premises device IP (`gatewayIpAddress`) or `fqdn`, the address prefixes that describe the on-premises network (`localNetworkAddressSpacePrefixes`), and any configured BGP settings (`bgpSettings`) used to exchange routes with Azure. Use alongside `azure.subscription.networkService.virtualNetworkGateway` and `virtualNetworkGateway.connections` to audit the full site-to-site VPN topology.","min_provider_version":"13.10.2","defaults":"id name location gatewayIpAddress","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.natGateway":{"id":"azure.subscription.networkService.natGateway","name":"azure.subscription.networkService.natGateway","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"NAT Gateway etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"NAT Gateway ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"NAT Gateway location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"NAT Gateway name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"NAT Gateway properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIpAddresses":{"name":"publicIpAddresses","type":"\u0019\u001bazure.subscription.networkService.ipAddress","title":"List of public IP addresses the NAT Gateway is associated with","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnets":{"name":"subnets","type":"\u0019\u001bazure.subscription.networkService.subnet","title":"List of subnets the NAT Gateway is associated with","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"NAT Gateway tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"NAT Gateway type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zones":{"name":"zones","type":"\u0019\u0007","is_mandatory":true,"title":"NAT Gateway availability zones","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure NAT gateway","desc":" Examine a NAT gateway that provides outbound SNAT for resources in one or more subnets. Surfaces the SKU and zone placement, the configured idle-timeout, the public IP addresses and prefixes allocated for outbound translation, the subnets currently consuming the gateway, and the resource GUID.","min_provider_version":"9.0.8","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.outboundRule":{"id":"azure.subscription.networkService.outboundRule","name":"azure.subscription.networkService.outboundRule","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Outbound rule etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Outbound rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Outbound rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Outbound rule properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Outbound rule type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network outbound rule","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.privateEndpoint":{"id":"azure.subscription.networkService.privateEndpoint","name":"azure.subscription.networkService.privateEndpoint","fields":{"customNetworkInterfaceName":{"name":"customNetworkInterfaceName","type":"\u0007","is_mandatory":true,"title":"Custom name of the network interface attached to the private endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Private endpoint ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Private endpoint location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"manualPrivateLinkServiceConnections":{"name":"manualPrivateLinkServiceConnections","type":"\u0019\u001bazure.subscription.networkService.privateEndpoint.serviceconnection","is_mandatory":true,"title":"Manually approved private link service connections","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Private endpoint name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateDnsZoneGroups":{"name":"privateDnsZoneGroups","type":"\u0019\n","title":"Private DNS zone groups attached to this PE (each entry: { name, privateDnsZoneIds, recordSets })","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateLinkServiceConnections":{"name":"privateLinkServiceConnections","type":"\u0019\u001bazure.subscription.networkService.privateEndpoint.serviceconnection","is_mandatory":true,"title":"Private link service connections","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the private endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceconnection":{"name":"serviceconnection","type":"\u001bazure.subscription.networkService.privateEndpoint.serviceconnection","title":"Azure network private endpoint service connection","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subnetId":{"name":"subnetId","type":"\u0007","is_mandatory":true,"title":"Subnet ID from which the private IP is allocated","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Private endpoint tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Private endpoint type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network private endpoint","private":true,"min_provider_version":"11.4.28","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.privateEndpoint.serviceconnection":{"id":"azure.subscription.networkService.privateEndpoint.serviceconnection","name":"azure.subscription.networkService.privateEndpoint.serviceconnection","fields":{"connectionStatus":{"name":"connectionStatus","type":"\u0007","is_mandatory":true,"title":"Connection status (\"Approved\", \"Pending\", \"Rejected\", \"Disconnected\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"groupIds":{"name":"groupIds","type":"\u0019\u0007","is_mandatory":true,"title":"Group IDs obtained from the remote resource","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Connection ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Connection name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateLinkService":{"name":"privateLinkService","type":"\u001bazure.subscription.networkService.privateLinkService","title":"Private link service being connected to","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateLinkServiceId":{"name":"privateLinkServiceId","type":"\u0007","is_mandatory":true,"title":"DEPRECATED: use privateLinkService instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"requestMessage":{"name":"requestMessage","type":"\u0007","is_mandatory":true,"title":"Message passed to the service owner with this connection request","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network private endpoint service connection","private":true,"min_provider_version":"11.4.28","defaults":"name privateLinkServiceId","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.privateLinkService":{"id":"azure.subscription.networkService.privateLinkService","name":"azure.subscription.networkService.privateLinkService","fields":{"accessMode":{"name":"accessMode","type":"\u0007","is_mandatory":true,"title":"Access mode (\"Default\" allows any subscription to connect; \"Restricted\" limits to the visibility list)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"alias":{"name":"alias","type":"\u0007","is_mandatory":true,"title":"Globally unique alias used by consumers in other tenants to reference this service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"autoApprovalSubscriptions":{"name":"autoApprovalSubscriptions","type":"\u0019\u0007","is_mandatory":true,"title":"Subscription IDs whose connection requests are auto-approved","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"destinationIPAddress":{"name":"destinationIPAddress","type":"\u0007","is_mandatory":true,"title":"Destination IP address for traffic exiting the service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableProxyProtocol":{"name":"enableProxyProtocol","type":"\u0004","is_mandatory":true,"title":"Whether proxy protocol is enabled (forwards consumer source IP to the service)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Private Link service etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fqdns":{"name":"fqdns","type":"\u0019\u0007","is_mandatory":true,"title":"FQDNs the Private Link service answers to","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Private Link service ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipConfigurations":{"name":"ipConfigurations","type":"\u0019\n","is_mandatory":true,"title":"IP configurations associated with the Private Link service (each entry: { id, name, primary, privateIPAddress, privateIPAddressVersion, privateIPAllocationMethod, subnetId, provisioningState })","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"loadBalancerFrontendIpConfigurationIds":{"name":"loadBalancerFrontendIpConfigurationIds","type":"\u0019\u0007","is_mandatory":true,"title":"Resource IDs of load balancer frontend IP configurations the service is fronted by","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Private Link service location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Private Link service name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkInterfaceIds":{"name":"networkInterfaceIds","type":"\u0019\u0007","is_mandatory":true,"title":"Resource IDs of network interfaces auto-created for this Private Link service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnection":{"name":"privateEndpointConnection","type":"\u001bazure.subscription.networkService.privateLinkService.privateEndpointConnection","title":"Endpoint connection to a Private Link service (provider's view of an incoming consumer request)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.networkService.privateLinkService.privateEndpointConnection","title":"Endpoint connections to this Private Link service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state (\"Succeeded\", \"Updating\", \"Deleting\", \"Failed\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Private Link service tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Private Link service resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"visibilitySubscriptions":{"name":"visibilitySubscriptions","type":"\u0019\u0007","is_mandatory":true,"title":"Subscription IDs allowed to see (and connect to) this service","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Private Link service (provider-side resource that exposes a service via Private Link)","private":true,"min_provider_version":"13.9.3","defaults":"id name location alias","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.privateLinkService.privateEndpointConnection":{"id":"azure.subscription.networkService.privateLinkService.privateEndpointConnection","name":"azure.subscription.networkService.privateLinkService.privateEndpointConnection","fields":{"actionsRequired":{"name":"actionsRequired","type":"\u0007","is_mandatory":true,"title":"Required actions on the consumer side","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionDescription":{"name":"connectionDescription","type":"\u0007","is_mandatory":true,"title":"Description of the connection state (reason for approval/rejection)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionStatus":{"name":"connectionStatus","type":"\u0007","is_mandatory":true,"title":"Connection status (\"Approved\", \"Pending\", \"Rejected\", \"Disconnected\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Connection etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Connection ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"linkIdentifier":{"name":"linkIdentifier","type":"\u0007","is_mandatory":true,"title":"Consumer link identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Connection name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpoint":{"name":"privateEndpoint","type":"\u001bazure.subscription.networkService.privateEndpoint","title":"Consumer's private endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointId":{"name":"privateEndpointId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the consumer's private endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointLocation":{"name":"privateEndpointLocation","type":"\u0007","is_mandatory":true,"title":"Location of the consumer private endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the endpoint connection (\"Succeeded\", \"Updating\", \"Deleting\", \"Failed\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Connection resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Endpoint connection to a Private Link service (provider's view of an incoming consumer request)","private":true,"min_provider_version":"13.9.3","defaults":"id name connectionStatus","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.probe":{"id":"azure.subscription.networkService.probe","name":"azure.subscription.networkService.probe","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Probe etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Probe ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Probe name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Probe properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Probe type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network probe","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.route":{"id":"azure.subscription.networkService.route","name":"azure.subscription.networkService.route","fields":{"addressPrefix":{"name":"addressPrefix","type":"\u0007","is_mandatory":true,"title":"Destination CIDR to which the route applies","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasBgpOverride":{"name":"hasBgpOverride","type":"\u0004","is_mandatory":true,"title":"Whether this route overrides overlapping BGP routes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Route ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Route name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nextHopIpAddress":{"name":"nextHopIpAddress","type":"\u0007","is_mandatory":true,"title":"IP address packets should be forwarded to (only for VirtualAppliance)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"nextHopType":{"name":"nextHopType","type":"\u0007","is_mandatory":true,"title":"Type of Azure hop (\"Internet\", \"None\", \"VirtualAppliance\", \"VirtualNetworkGateway\", \"VnetLocal\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the route","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network route","private":true,"min_provider_version":"11.4.28","defaults":"name addressPrefix nextHopType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.routeTable":{"id":"azure.subscription.networkService.routeTable","name":"azure.subscription.networkService.routeTable","fields":{"disableBgpRoutePropagation":{"name":"disableBgpRoutePropagation","type":"\u0004","is_mandatory":true,"title":"Whether to disable routes learned by BGP on this route table","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Route table etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Route table ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Route table location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Route table name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the route table","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"routes":{"name":"routes","type":"\u0019\u001bazure.subscription.networkService.route","is_mandatory":true,"title":"Routes contained in the route table","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Route table tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Route table type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network route table","private":true,"min_provider_version":"11.4.28","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.securityGroup":{"id":"azure.subscription.networkService.securityGroup","name":"azure.subscription.networkService.securityGroup","fields":{"defaultSecurityRules":{"name":"defaultSecurityRules","type":"\u0019\u001bazure.subscription.networkService.securityrule","title":"Security group default security rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Security group etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Security group ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"interfaces":{"name":"interfaces","type":"\u0019\u001bazure.subscription.networkService.interface","title":"Security group interfaces","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Security group location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Security group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Security group properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityRules":{"name":"securityRules","type":"\u0019\u001bazure.subscription.networkService.securityrule","title":"Security group rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Security group tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Security group type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network security group","private":true,"min_provider_version":"9.0.1","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.securityrule":{"id":"azure.subscription.networkService.securityrule","name":"azure.subscription.networkService.securityrule","fields":{"access":{"name":"access","type":"\u0007","is_mandatory":true,"title":"Security rule access (Allow or Deny)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Security rule description","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"destinationAddressPrefix":{"name":"destinationAddressPrefix","type":"\u0007","is_mandatory":true,"title":"Security rule destination address prefix (CIDR or *)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"destinationPortRange":{"name":"destinationPortRange","type":"\u0019\n","is_mandatory":true,"title":"Security rule destination port range","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"direction":{"name":"direction","type":"\u0007","is_mandatory":true,"title":"Security rule direction (outbound or inbound)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Security rule etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Security rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Security rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Security rule priority (100-4096, lower is higher priority)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Security rule properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Security rule protocol (Tcp, Udp, Icmp, Esp, Ah, or *)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceAddressPrefix":{"name":"sourceAddressPrefix","type":"\u0007","is_mandatory":true,"title":"Security rule source address prefix (CIDR or *)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourcePortRange":{"name":"sourcePortRange","type":"\u0007","is_mandatory":true,"title":"Security rule source port range","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure network security rule","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.serviceEndpointPolicy":{"id":"azure.subscription.networkService.serviceEndpointPolicy","name":"azure.subscription.networkService.serviceEndpointPolicy","fields":{"definition":{"name":"definition","type":"\u001bazure.subscription.networkService.serviceEndpointPolicy.definition","title":"Azure service endpoint policy definition","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"definitions":{"name":"definitions","type":"\u0019\u001bazure.subscription.networkService.serviceEndpointPolicy.definition","is_mandatory":true,"title":"Policy definitions restricting which resources are accessible","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceAlias":{"name":"serviceAlias","type":"\u0007","is_mandatory":true,"title":"Service alias the policy applies to","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnets":{"name":"subnets","type":"\u0019\u001bazure.subscription.networkService.subnet","title":"Subnets associated with the policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Service endpoint policy tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure service endpoint policy","desc":" Examine a service-endpoint policy that restricts which Azure service resources can be reached from a subnet using service endpoints. Surfaces the policy's service-endpoint-policy definitions (the allowed Azure resource IDs), the contextual service alias, the subnets the policy is applied to, and the resource GUID.","min_provider_version":"13.3.3","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.serviceEndpointPolicy.definition":{"id":"azure.subscription.networkService.serviceEndpointPolicy.definition","name":"azure.subscription.networkService.serviceEndpointPolicy.definition","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description (max 140 chars)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy definition etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy definition ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy definition name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"service":{"name":"service","type":"\u0007","is_mandatory":true,"title":"Service endpoint name (e.g. \"Microsoft.Storage\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceResources":{"name":"serviceResources","type":"\u0019\u0007","is_mandatory":true,"title":"List of service resources allowed by this definition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Service endpoint policy definition type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure service endpoint policy definition","private":true,"min_provider_version":"13.3.3","defaults":"name service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.subnet":{"id":"azure.subscription.networkService.subnet","name":"azure.subscription.networkService.subnet","fields":{"addressPrefix":{"name":"addressPrefix","type":"\u0007","is_mandatory":true,"title":"Subnet address prefix","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultOutboundAccess":{"name":"defaultOutboundAccess","type":"\u0004","is_mandatory":true,"title":"Whether default outbound access is enabled for VMs in the subnet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Subnet etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Subnet ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipConfigurations":{"name":"ipConfigurations","type":"\u0019\u001bazure.subscription.networkService.virtualNetworkGateway.ipConfig","title":"List of IP configurations for the subnet","min_provider_version":"9.0.10","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Subnet name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"natGateway":{"name":"natGateway","type":"\u001bazure.subscription.networkService.natGateway","title":"The NAT gateway this subnet is associated with, if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointNetworkPolicies":{"name":"privateEndpointNetworkPolicies","type":"\u0007","is_mandatory":true,"title":"Whether network policies are applied to private endpoints in the subnet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateLinkServiceNetworkPolicies":{"name":"privateLinkServiceNetworkPolicies","type":"\u0007","is_mandatory":true,"title":"Whether network policies are applied to private link services in the subnet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Subnet properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Subnet type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure VNet subnet","desc":" Examine a subnet inside an Azure Virtual Network. Surfaces the IPv4 and IPv6 address prefixes, the attached network security group and route table, NAT gateway, service endpoints and service-endpoint policies, delegations to PaaS services, the `privateEndpointNetworkPolicies` and `privateLinkServiceNetworkPolicies` flags, and the IP allocation method.","min_provider_version":"9.0.8","defaults":"id name addressPrefix","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.virtualNetwork":{"id":"azure.subscription.networkService.virtualNetwork","name":"azure.subscription.networkService.virtualNetwork","fields":{"addressPrefixes":{"name":"addressPrefixes","type":"\u0019\u0007","is_mandatory":true,"title":"Address space CIDR prefixes for the virtual network","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dhcpOptions":{"name":"dhcpOptions","type":"\u001bazure.subscription.networkService.virtualNetwork.dhcpOptions","is_mandatory":true,"title":"Virtual Network DHCP options","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableDdosProtection":{"name":"enableDdosProtection","type":"\u0004","is_mandatory":true,"title":"Whether DDoS protection is enabled for all the protected resources in the virtual network","min_provider_version":"9.0.10","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableVmProtection":{"name":"enableVmProtection","type":"\u0004","is_mandatory":true,"title":"Whether VM protection is enabled for all the subnets in the virtual network","min_provider_version":"9.0.10","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionEnabled":{"name":"encryptionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether encryption is enabled on the virtual network","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionEnforcement":{"name":"encryptionEnforcement","type":"\u0007","is_mandatory":true,"title":"Encryption enforcement policy: AllowUnencrypted, DropUnencrypted","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Virtual Network etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"flowTimeoutInMinutes":{"name":"flowTimeoutInMinutes","type":"\u0005","is_mandatory":true,"title":"FlowTimeout value in minutes for the virtual network","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Virtual Network ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Virtual Network location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Virtual Network name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"peering":{"name":"peering","type":"\u001bazure.subscription.networkService.virtualNetwork.peering","title":"Azure VNet peering","desc":" Examine a peering between two Azure Virtual Networks. Surfaces the peering state (Initiated, Connected, Disconnected), the remote virtual network reference, allow-virtual-network-access / allow-forwarded-traffic / allow-gateway-transit / use-remote-gateways flags, the remote address space, the peering sync level (FullyInSync vs LocalAndRemoteNotInSync), the `peeringSyncLevel`, and the `doNotVerifyRemoteGateways` setting.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"peerings":{"name":"peerings","type":"\u0019\u001bazure.subscription.networkService.virtualNetwork.peering","title":"List of virtual network peerings","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Virtual Network properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"The provisioning state of the virtual network: Succeeded, Updating, Deleting, Failed, Creating, Canceled","min_provider_version":"13.0.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnets":{"name":"subnets","type":"\u0019\u001bazure.subscription.networkService.subnet","is_mandatory":true,"title":"List of subnets within the virtual network","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Virtual Network tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Virtual Network type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Virtual Network (VNet)","desc":" Examine an Azure Virtual Network and its connectivity surface. Surfaces the IPv4 and IPv6 address spaces, configured DNS servers, the linked DDoS protection plan, encryption settings, BGP communities, the `enableVmProtection` and `enableDdosProtection` flags, the `subnets()` defined inside the VNet, and the `peerings()` to other virtual networks.","min_provider_version":"9.0.8","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.virtualNetwork.dhcpOptions":{"id":"azure.subscription.networkService.virtualNetwork.dhcpOptions","name":"azure.subscription.networkService.virtualNetwork.dhcpOptions","fields":{"dnsServers":{"name":"dnsServers","type":"\u0019\u0007","is_mandatory":true,"title":"The DNS servers, used by the virtual network","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"DHCP options ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Virtual Network (VNet) DHCP options","private":true,"min_provider_version":"9.0.10","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.virtualNetwork.peering":{"id":"azure.subscription.networkService.virtualNetwork.peering","name":"azure.subscription.networkService.virtualNetwork.peering","fields":{"allowForwardedTraffic":{"name":"allowForwardedTraffic","type":"\u0004","is_mandatory":true,"title":"Whether forwarded traffic from VMs in the local vnet is allowed in the remote vnet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"allowGatewayTransit":{"name":"allowGatewayTransit","type":"\u0004","is_mandatory":true,"title":"Whether gateway links can be used in remote virtual networking to link to this vnet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"allowVirtualNetworkAccess":{"name":"allowVirtualNetworkAccess","type":"\u0004","is_mandatory":true,"title":"Whether VMs in the local vnet can access VMs in the remote vnet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Peering resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Peering name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"peeringState":{"name":"peeringState","type":"\u0007","is_mandatory":true,"title":"The status of the virtual network peering: Connected, Disconnected, Initiated","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"peeringSyncLevel":{"name":"peeringSyncLevel","type":"\u0007","is_mandatory":true,"title":"The peering sync status: FullyInSync, LocalNotInSync, RemoteNotInSync, LocalAndRemoteNotInSync","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"The provisioning state: Succeeded, Updating, Deleting, Failed, Creating, Canceled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"remoteVirtualNetworkEncryptionEnabled":{"name":"remoteVirtualNetworkEncryptionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether traffic between the two VNets is encrypted (Azure global VNet peering encryption)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"remoteVirtualNetworkEncryptionEnforcement":{"name":"remoteVirtualNetworkEncryptionEnforcement","type":"\u0007","is_mandatory":true,"title":"Encryption enforcement for the remote VNet (\"AllowUnencrypted\" or \"DropUnencrypted\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"remoteVirtualNetworkId":{"name":"remoteVirtualNetworkId","type":"\u0007","is_mandatory":true,"title":"The remote virtual network reference ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"useRemoteGateways":{"name":"useRemoteGateways","type":"\u0004","is_mandatory":true,"title":"Whether remote gateways can be used on this virtual network","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure VNet peering","desc":" Examine a peering between two Azure Virtual Networks. Surfaces the peering state (Initiated, Connected, Disconnected), the remote virtual network reference, allow-virtual-network-access / allow-forwarded-traffic / allow-gateway-transit / use-remote-gateways flags, the remote address space, the peering sync level (FullyInSync vs LocalAndRemoteNotInSync), the `peeringSyncLevel`, and the `doNotVerifyRemoteGateways` setting.","min_provider_version":"13.0.2","defaults":"id name peeringState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.virtualNetworkGateway":{"id":"azure.subscription.networkService.virtualNetworkGateway","name":"azure.subscription.networkService.virtualNetworkGateway","fields":{"active":{"name":"active","type":"\u0004","is_mandatory":true,"title":"Whether the virtual network gateway is active","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"addressPrefixes":{"name":"addressPrefixes","type":"\u0019\u0007","is_mandatory":true,"title":"A list of address blocks reserved for this virtual network in CIDR notation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"bgpSettings":{"name":"bgpSettings","type":"\u001bazure.subscription.networkService.bgpSettings","title":"VNet gateway BGP settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connection":{"name":"connection","type":"\u001bazure.subscription.networkService.virtualNetworkGateway.connection","title":"Azure Virtual Network (VNet) gateway connection","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"connections":{"name":"connections","type":"\u0019\u001bazure.subscription.networkService.virtualNetworkGateway.connection","title":"Applicable connections for the gateway","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableIPSecReplayProtection":{"name":"disableIPSecReplayProtection","type":"\u0004","is_mandatory":true,"title":"Whether IP sec replay protection is disabled for this VNet gateway","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableBgp":{"name":"enableBgp","type":"\u0004","is_mandatory":true,"title":"Whether BGP is enabled for this virtual network gateway","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableBgpRouteTranslationForNat":{"name":"enableBgpRouteTranslationForNat","type":"\u0004","is_mandatory":true,"title":"Whether BGP route translation is enabled for this VNet gateway","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableDNSForwarding":{"name":"enableDNSForwarding","type":"\u0004","is_mandatory":true,"title":"Whether DNS forwarding is enabled for this VNet gateway","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablePrivateIPAddress":{"name":"enablePrivateIPAddress","type":"\u0004","is_mandatory":true,"title":"Whether private IP must be enabled for connections","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"VNet gateway etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gatewayDefaultSite":{"name":"gatewayDefaultSite","type":"\u001bazure.subscription.networkService.localNetworkGateway","title":"The local network gateway used as the default site for forced tunneling, if configured","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"gatewayType":{"name":"gatewayType","type":"\u0007","is_mandatory":true,"title":"VNet gateway type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VNet gateway ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"inboundDNSForwardingEndpoint":{"name":"inboundDNSForwardingEndpoint","type":"\u0007","is_mandatory":true,"title":"The IP address allocated by the gateway to which DNS requests can be sent","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipConfig":{"name":"ipConfig","type":"\u001bazure.subscription.networkService.virtualNetworkGateway.ipConfig","title":"Azure Virtual Network (VNet) gateway IP configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"ipConfigurations":{"name":"ipConfigurations","type":"\u0019\u001bazure.subscription.networkService.virtualNetworkGateway.ipConfig","title":"VNet gateway IP configurations","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"VNet gateway location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VNet gateway name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"natRules":{"name":"natRules","type":"\u0019\u001bazure.subscription.networkService.virtualNetworkGateway.natRule","title":"VNet gateway NAT rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"VNet gateway properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"VNet gateway provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuCapacity":{"name":"skuCapacity","type":"\u0005","is_mandatory":true,"title":"VNet gateway SKU capacity","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"VNet gateway SKU name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"VNet gateway tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"VNet gateway resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vpnClientConfiguration":{"name":"vpnClientConfiguration","type":"\n","is_mandatory":true,"title":"VPN client configuration (only set if P2S is configured for the gateway)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vpnGatewayGeneration":{"name":"vpnGatewayGeneration","type":"\u0007","is_mandatory":true,"title":"VNet gateway generation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vpnType":{"name":"vpnType","type":"\u0007","is_mandatory":true,"title":"VNet gateway VPN type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure VPN/ExpressRoute gateway","desc":" Examine a virtual network gateway used for VPN, ExpressRoute, or LocalGateway connectivity. Surfaces the gateway type, VPN type (RouteBased or PolicyBased), generation, SKU, IP configuration, BGP settings (ASN, peering address), VPN client configuration (address pool, root and revoked certificates, RADIUS server), the active-active flag, and any associated VPN connections and disaster-recovery settings.","min_provider_version":"9.0.8","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.virtualNetworkGateway.connection":{"id":"azure.subscription.networkService.virtualNetworkGateway.connection","name":"azure.subscription.networkService.virtualNetworkGateway.connection","fields":{"connectionMode":{"name":"connectionMode","type":"\u0007","is_mandatory":true,"title":"Connection mode (one of: \"Default\", \"InitiatorOnly\", \"ResponderOnly\")","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionProtocol":{"name":"connectionProtocol","type":"\u0007","is_mandatory":true,"title":"Connection protocol (one of: \"IKEv1\", \"IKEv2\")","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionStatus":{"name":"connectionStatus","type":"\u0007","is_mandatory":true,"title":"Current connection status (one of: \"Unknown\", \"Connecting\", \"Connected\", \"NotConnected\")","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionType":{"name":"connectionType","type":"\u0007","is_mandatory":true,"title":"Connection type (one of: \"IPsec\", \"Vnet2Vnet\", \"ExpressRoute\", \"VPNClient\")","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dpdTimeoutSeconds":{"name":"dpdTimeoutSeconds","type":"\u0005","is_mandatory":true,"title":"Dead-peer-detection timeout, in seconds","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"egressBytesTransferred":{"name":"egressBytesTransferred","type":"\u0005","is_mandatory":true,"title":"Total egress bytes transferred over this connection","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableBgp":{"name":"enableBgp","type":"\u0004","is_mandatory":true,"title":"Whether BGP is enabled for this connection","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"VNet gateway Connection etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VNet gateway connection ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ingressBytesTransferred":{"name":"ingressBytesTransferred","type":"\u0005","is_mandatory":true,"title":"Total ingress bytes transferred over this connection","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"localNetworkGateway2":{"name":"localNetworkGateway2","type":"\u001bazure.subscription.networkService.localNetworkGateway","title":"The local network gateway peered to the primary VNet gateway (only set for IPsec connections)","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"VNet gateway Connection location","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VNet gateway Connection name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"VNet gateway Connection properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the connection","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"routingWeight":{"name":"routingWeight","type":"\u0005","is_mandatory":true,"title":"Routing weight applied to this connection","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"VNet gateway Connection type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"useLocalAzureIpAddress":{"name":"useLocalAzureIpAddress","type":"\u0004","is_mandatory":true,"title":"Whether the connection uses a private local Azure IP","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"usePolicyBasedTrafficSelectors":{"name":"usePolicyBasedTrafficSelectors","type":"\u0004","is_mandatory":true,"title":"Whether policy-based traffic selectors are enabled","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkGateway2":{"name":"virtualNetworkGateway2","type":"\u001bazure.subscription.networkService.virtualNetworkGateway","title":"The peer virtual network gateway (only set for Vnet2Vnet connections)","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Virtual Network (VNet) gateway connection","private":true,"min_provider_version":"9.0.8","defaults":"id name connectionType connectionStatus","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.virtualNetworkGateway.ipConfig":{"id":"azure.subscription.networkService.virtualNetworkGateway.ipConfig","name":"azure.subscription.networkService.virtualNetworkGateway.ipConfig","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"VNet gateway IP Configuration etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VNet gateway IP Configuration ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VNet gateway IP Configuration name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateIpAddress":{"name":"privateIpAddress","type":"\u0007","is_mandatory":true,"title":"VNet gateway IP Configuration private IP address","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"VNet gateway IP Configuration properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicIpAddress":{"name":"publicIpAddress","type":"\u001bazure.subscription.networkService.ipAddress","title":"The public IP address, associated with this IP configuration","min_provider_version":"9.0.10","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Virtual Network (VNet) gateway IP configuration","private":true,"min_provider_version":"9.0.8","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.wafConfig":{"id":"azure.subscription.networkService.wafConfig","name":"azure.subscription.networkService.wafConfig","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the WAF configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Kind of WAF configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the WAF configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Properties for the WAF configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type of WAF configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Application Gateway WAF config","desc":" Examine the legacy WAF configuration attached directly to an Application Gateway (used by older v1 SKUs). Surfaces the WAF `mode` (Detection / Prevention), the rule set type and version, firewall mode flags, the `enabled` state, request-body limits, and disabled rule groups. Newer deployments use a typed `applicationFirewallPolicy` resource instead.","min_provider_version":"11.3.3","defaults":"id name type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.watcher":{"id":"azure.subscription.networkService.watcher","name":"azure.subscription.networkService.watcher","fields":{"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Network watcher etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"flowLogs":{"name":"flowLogs","type":"\u0019\u001bazure.subscription.networkService.watcher.flowlog","title":"Network watcher flow logs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"flowlog":{"name":"flowlog","type":"\u001bazure.subscription.networkService.watcher.flowlog","title":"Azure Network Watcher flow log","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Network watcher ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Network watcher location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Network watcher name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Network watcher properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Network watcher provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Network watcher tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Network watcher type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Network Watcher","private":true,"min_provider_version":"9.0.1","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.networkService.watcher.flowlog":{"id":"azure.subscription.networkService.watcher.flowlog","name":"azure.subscription.networkService.watcher.flowlog","fields":{"analytics":{"name":"analytics","type":"\n","is_mandatory":true,"title":"Network watcher flow log analytics","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the network watcher flow log is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"format":{"name":"format","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log format","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionPolicy":{"name":"retentionPolicy","type":"\n","is_mandatory":true,"title":"Network watcher flow log retention policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccountId":{"name":"storageAccountId","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log storage account identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Network watcher flow log tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"targetResourceGuid":{"name":"targetResourceGuid","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log target resource guid","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"targetResourceId":{"name":"targetResourceId","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log target resource identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Network watcher flow log type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"Network watcher flow log version","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Network Watcher flow log","private":true,"min_provider_version":"9.0.1","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.policy":{"id":"azure.subscription.policy","name":"azure.subscription.policy","fields":{"assignment":{"name":"assignment","type":"\u001bazure.subscription.policy.assignment","title":"Azure Policy assignment","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"assignments":{"name":"assignments","type":"\u0019\u001bazure.subscription.policy.assignment","title":"List of policy assignments in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Policy service","private":true,"min_provider_version":"11.2.0","defaults":"subscriptionId","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.policy.assignment":{"id":"azure.subscription.policy.assignment","name":"azure.subscription.policy.assignment","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Policy description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enforcementMode":{"name":"enforcementMode","type":"\u0007","is_mandatory":true,"title":"Policy enforcement Mode","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Policy definition ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Policy name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"parameters":{"name":"parameters","type":"\n","is_mandatory":true,"title":"Policy parameters","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scope":{"name":"scope","type":"\u0007","is_mandatory":true,"title":"Policy scope","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Policy assignment","private":true,"min_provider_version":"11.2.0","defaults":"name enforcementMode","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.postgreSqlService":{"id":"azure.subscription.postgreSqlService","name":"azure.subscription.postgreSqlService","fields":{"database":{"name":"database","type":"\u001bazure.subscription.postgreSqlService.database","title":"Azure Database for PostgreSQL database","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"flexibleServer":{"name":"flexibleServer","type":"\u001bazure.subscription.postgreSqlService.flexibleServer","title":"Azure Database for PostgreSQL flexible server","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"flexibleServers":{"name":"flexibleServers","type":"\u0019\u001bazure.subscription.postgreSqlService.flexibleServer","title":"List of PostgreSQL flexible servers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"server":{"name":"server","type":"\u001bazure.subscription.postgreSqlService.server","title":"Azure Database for PostgreSQL server","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"servers":{"name":"servers","type":"\u0019\u001bazure.subscription.postgreSqlService.server","title":"List of PostgreSQL servers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Database for PostgreSQL","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.postgreSqlService.database":{"id":"azure.subscription.postgreSqlService.database","name":"azure.subscription.postgreSqlService.database","fields":{"charset":{"name":"charset","type":"\u0007","is_mandatory":true,"title":"PostgreSQL database charset","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"collation":{"name":"collation","type":"\u0007","is_mandatory":true,"title":"PostgreSQL database collation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"PostgreSQL database ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"PostgreSQL database name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"PostgreSQL database type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Database for PostgreSQL database","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.postgreSqlService.flexibleServer":{"id":"azure.subscription.postgreSqlService.flexibleServer","name":"azure.subscription.postgreSqlService.flexibleServer","fields":{"activeDirectoryAuth":{"name":"activeDirectoryAuth","type":"\u0007","is_mandatory":true,"title":"Whether Microsoft Entra (Active Directory) authentication is enabled (\"Enabled\" or \"Disabled\")","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backupRetentionDays":{"name":"backupRetentionDays","type":"\u0005","is_mandatory":true,"title":"Backup retention period in days","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"configuration":{"name":"configuration","type":"\u0019\u001bazure.subscription.sqlService.configuration","title":"PostgreSQL server configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataEncryptionKey":{"name":"dataEncryptionKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for primary data encryption (null if system-managed)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataEncryptionType":{"name":"dataEncryptionType","type":"\u0007","is_mandatory":true,"title":"Data encryption type (\"SystemManaged\" or \"AzureKeyVault\")","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"databases":{"name":"databases","type":"\u0019\u001bazure.subscription.postgreSqlService.database","title":"PostgreSQL server databases","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewallRules":{"name":"firewallRules","type":"\u0019\u001bazure.subscription.sqlService.firewallrule","title":"PostgreSQL server firewall rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoBackupEncryptionKey":{"name":"geoBackupEncryptionKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for geo-backup encryption (null if system-managed)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoBackupEncryptionKeyStatus":{"name":"geoBackupEncryptionKeyStatus","type":"\u0007","is_mandatory":true,"title":"Status of the geo-backup encryption key","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoRedundantBackup":{"name":"geoRedundantBackup","type":"\u0007","is_mandatory":true,"title":"Whether geo-redundant backup is enabled","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"passwordAuth":{"name":"passwordAuth","type":"\u0007","is_mandatory":true,"title":"Whether password-based authentication is enabled (\"Enabled\" or \"Disabled\")","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"primaryEncryptionKeyStatus":{"name":"primaryEncryptionKeyStatus","type":"\u0007","is_mandatory":true,"title":"Status of the primary encryption key","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private endpoint connections for the PostgreSQL flexible server","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"PostgreSQL server properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled (\"Enabled\" or \"Disabled\")","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"PostgreSQL server tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"threatProtectionState":{"name":"threatProtectionState","type":"\u0007","title":"Microsoft Defender for Cloud advanced threat protection state (\"Enabled\", \"Disabled\", or \"New\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"PostgreSQL flexible server engine version","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Database for PostgreSQL flexible server","private":true,"min_provider_version":"11.0.9","defaults":"name location properties.version properties.state properties.fullyQualifiedDomainName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.postgreSqlService.server":{"id":"azure.subscription.postgreSqlService.server","name":"azure.subscription.postgreSqlService.server","fields":{"backupRetentionDays":{"name":"backupRetentionDays","type":"\u0005","is_mandatory":true,"title":"Backup retention period in days","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"configuration":{"name":"configuration","type":"\u0019\u001bazure.subscription.sqlService.configuration","title":"PostgreSQL server configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"databases":{"name":"databases","type":"\u0019\u001bazure.subscription.postgreSqlService.database","title":"PostgreSQL server databases","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewallRules":{"name":"firewallRules","type":"\u0019\u001bazure.subscription.sqlService.firewallrule","title":"PostgreSQL server firewall rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoRedundantBackup":{"name":"geoRedundantBackup","type":"\u0007","is_mandatory":true,"title":"Whether geo-redundant backup is enabled (\"Enabled\" or \"Disabled\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"infrastructureEncryption":{"name":"infrastructureEncryption","type":"\u0004","is_mandatory":true,"title":"Whether infrastructure encryption is enabled (double encryption)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimalTlsVersion":{"name":"minimalTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version enforced on the server","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"PostgreSQL server properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled for the server","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sslEnforcement":{"name":"sslEnforcement","type":"\u0004","is_mandatory":true,"title":"Whether SSL enforcement is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"PostgreSQL server tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"PostgreSQL server engine version","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Database for PostgreSQL server","private":true,"min_provider_version":"9.0.1","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.privateEndpointConnection":{"id":"azure.subscription.privateEndpointConnection","name":"azure.subscription.privateEndpointConnection","fields":{"connectionState":{"name":"connectionState","type":"\u001bazure.subscription.privateEndpointConnection.connectionState","title":"Connection state for a private endpoint connection","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Private endpoint connection ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipAddresses":{"name":"ipAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Private endpoint connection IP addresses","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Private endpoint connection name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpoint":{"name":"privateEndpoint","type":"\u001bazure.subscription.networkService.privateEndpoint","title":"Associated private endpoint","min_provider_version":"13.9.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointId":{"name":"privateEndpointId","type":"\u0007","is_mandatory":true,"title":"DEPRECATED: use privateEndpoint instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"privateLinkServiceConnectionState":{"name":"privateLinkServiceConnectionState","type":"\u001bazure.subscription.privateEndpointConnection.connectionState","is_mandatory":true,"title":"Private link service connection state details","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"privateEndpointConnection properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the private endpoint connection","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Private endpoint connection type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure private endpoint connection","private":true,"min_provider_version":"11.4.4","defaults":"id name type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.privateEndpointConnection.connectionState":{"id":"azure.subscription.privateEndpointConnection.connectionState","name":"azure.subscription.privateEndpointConnection.connectionState","fields":{"actionsRequired":{"name":"actionsRequired","type":"\u0007","is_mandatory":true,"title":"Required actions for the private link service connection","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Description of the private link service connection state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the private link service connection","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Connection state for a private endpoint connection","private":true,"min_provider_version":"11.4.4","defaults":"status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService":{"id":"azure.subscription.recoveryServicesService","name":"azure.subscription.recoveryServicesService","fields":{"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vault":{"name":"vault","type":"\u001bazure.subscription.recoveryServicesService.vault","title":"Azure Recovery Services vault","desc":" Examine a Recovery Services vault — the storage container for Azure Backup and Azure Site Recovery. Surfaces the vault SKU, the soft-delete and immutability state, public network access, identity assignments, the customer-managed-key encryption reference, cross-region restore configuration, the `monitoringSettings` for classic alerts and Azure Monitor alerts, the redundancy mode (LRS, GRS, ZRS, GZRS), and the `securitySettings` (multi-user authorization, soft delete).","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"vaults":{"name":"vaults","type":"\u0019\u001bazure.subscription.recoveryServicesService.vault","title":"List of recovery services vaults","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Recovery Services","private":true,"min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService.vault":{"id":"azure.subscription.recoveryServicesService.vault","name":"azure.subscription.recoveryServicesService.vault","fields":{"backupConfig":{"name":"backupConfig","type":"\u001bazure.subscription.recoveryServicesService.vault.backupConfig","title":"Backup vault configuration (from backup API)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backupPolicies":{"name":"backupPolicies","type":"\u0019\u001bazure.subscription.recoveryServicesService.vault.backupPolicy","title":"Backup policies","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backupPolicy":{"name":"backupPolicy","type":"\u001bazure.subscription.recoveryServicesService.vault.backupPolicy","title":"Backup policy in a Recovery Services vault","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"backupStorageVersion":{"name":"backupStorageVersion","type":"\u0007","is_mandatory":true,"title":"Backup storage version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryption":{"name":"encryption","type":"\u001bazure.subscription.recoveryServicesService.vault.encryption","title":"Encryption settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Vault resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Vault location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"monitoringSettings":{"name":"monitoringSettings","type":"\u001bazure.subscription.recoveryServicesService.vault.monitoringSettings","title":"Monitoring and alerting settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Vault name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private endpoint connections","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointStateForBackup":{"name":"privateEndpointStateForBackup","type":"\u0007","is_mandatory":true,"title":"Private endpoint state for backup (\"None\" or \"Enabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointStateForSiteRecovery":{"name":"privateEndpointStateForSiteRecovery","type":"\u0007","is_mandatory":true,"title":"Private endpoint state for site recovery (\"None\" or \"Enabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"protectedItem":{"name":"protectedItem","type":"\u001bazure.subscription.recoveryServicesService.vault.protectedItem","title":"Protected (backed-up) item in a Recovery Services vault","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"protectedItems":{"name":"protectedItems","type":"\u0019\u001bazure.subscription.recoveryServicesService.vault.protectedItem","title":"Protected (backed-up) items","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"redundancySettings":{"name":"redundancySettings","type":"\u001bazure.subscription.recoveryServicesService.vault.redundancySettings","title":"Storage redundancy settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secureScore":{"name":"secureScore","type":"\u0007","is_mandatory":true,"title":"Secure score (\"Healthy\" or \"Unhealthy\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securitySettings":{"name":"securitySettings","type":"\u001bazure.subscription.recoveryServicesService.vault.securitySettings","title":"Security settings (soft delete, immutability, enhanced security)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"SKU name (\"Standard\" or \"RS0\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Vault tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Recovery Services vault","desc":" Examine a Recovery Services vault — the storage container for Azure Backup and Azure Site Recovery. Surfaces the vault SKU, the soft-delete and immutability state, public network access, identity assignments, the customer-managed-key encryption reference, cross-region restore configuration, the `monitoringSettings` for classic alerts and Azure Monitor alerts, the redundancy mode (LRS, GRS, ZRS, GZRS), and the `securitySettings` (multi-user authorization, soft delete).","min_provider_version":"13.3.3","defaults":"id name location skuName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService.vault.backupConfig":{"id":"azure.subscription.recoveryServicesService.vault.backupConfig","name":"azure.subscription.recoveryServicesService.vault.backupConfig","fields":{"enhancedSecurityState":{"name":"enhancedSecurityState","type":"\u0007","is_mandatory":true,"title":"Enhanced security state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Backup config identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"softDeleteFeatureState":{"name":"softDeleteFeatureState","type":"\u0007","is_mandatory":true,"title":"Soft delete feature state (\"AlwaysON\", \"Enabled\", or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"softDeleteRetentionPeriodInDays":{"name":"softDeleteRetentionPeriodInDays","type":"\u0005","is_mandatory":true,"title":"Soft delete retention period in days","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageType":{"name":"storageType","type":"\u0007","is_mandatory":true,"title":"Storage type (\"GeoRedundant\", \"LocallyRedundant\", or \"ZoneRedundant\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageTypeState":{"name":"storageTypeState","type":"\u0007","is_mandatory":true,"title":"Storage type lock state (\"Locked\" or \"Unlocked\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Backup vault configuration (soft delete, storage type)","private":true,"min_provider_version":"13.3.3","defaults":"softDeleteFeatureState storageType","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService.vault.backupPolicy":{"id":"azure.subscription.recoveryServicesService.vault.backupPolicy","name":"azure.subscription.recoveryServicesService.vault.backupPolicy","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Backup policy resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Backup policy name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Policy properties (polymorphic: IaaS VM, SQL, FileShare, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Backup policy in a Recovery Services vault","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService.vault.encryption":{"id":"azure.subscription.recoveryServicesService.vault.encryption","name":"azure.subscription.recoveryServicesService.vault.encryption","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Encryption identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"infrastructureEncryption":{"name":"infrastructureEncryption","type":"\u0007","is_mandatory":true,"title":"Infrastructure encryption state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"key":{"name":"key","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for encryption","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyVaultKeyUri":{"name":"keyVaultKeyUri","type":"\u0007","is_mandatory":true,"title":"Key Vault key URI for CMK encryption","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Encryption settings for a Recovery Services vault","private":true,"min_provider_version":"13.3.3","defaults":"infrastructureEncryption","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService.vault.monitoringSettings":{"id":"azure.subscription.recoveryServicesService.vault.monitoringSettings","name":"azure.subscription.recoveryServicesService.vault.monitoringSettings","fields":{"alertsForAllFailoverIssues":{"name":"alertsForAllFailoverIssues","type":"\u0007","is_mandatory":true,"title":"Alerts for all failover issues (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"alertsForAllJobFailures":{"name":"alertsForAllJobFailures","type":"\u0007","is_mandatory":true,"title":"Alerts for all job failures (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"alertsForAllReplicationIssues":{"name":"alertsForAllReplicationIssues","type":"\u0007","is_mandatory":true,"title":"Alerts for all replication issues (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"alertsForCriticalOperations":{"name":"alertsForCriticalOperations","type":"\u0007","is_mandatory":true,"title":"Alerts for critical operations (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"emailNotificationsForSiteRecovery":{"name":"emailNotificationsForSiteRecovery","type":"\u0007","is_mandatory":true,"title":"Email notifications for site recovery (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Monitoring settings identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Monitoring and alerting settings for a Recovery Services vault","private":true,"min_provider_version":"13.3.3","defaults":"alertsForAllJobFailures","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService.vault.protectedItem":{"id":"azure.subscription.recoveryServicesService.vault.protectedItem","name":"azure.subscription.recoveryServicesService.vault.protectedItem","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Protected item resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Protected item name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Item properties (polymorphic: VM, SQL, FileShare, SAP HANA, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Protected (backed-up) item in a Recovery Services vault","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService.vault.redundancySettings":{"id":"azure.subscription.recoveryServicesService.vault.redundancySettings","name":"azure.subscription.recoveryServicesService.vault.redundancySettings","fields":{"crossRegionRestore":{"name":"crossRegionRestore","type":"\u0007","is_mandatory":true,"title":"Cross-region restore setting (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Redundancy settings identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageRedundancy":{"name":"storageRedundancy","type":"\u0007","is_mandatory":true,"title":"Standard tier storage redundancy (\"GeoRedundant\" or \"LocallyRedundant\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Storage redundancy settings for a Recovery Services vault","private":true,"min_provider_version":"13.3.3","defaults":"storageRedundancy crossRegionRestore","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.recoveryServicesService.vault.securitySettings":{"id":"azure.subscription.recoveryServicesService.vault.securitySettings","name":"azure.subscription.recoveryServicesService.vault.securitySettings","fields":{"enhancedSecurityState":{"name":"enhancedSecurityState","type":"\u0007","is_mandatory":true,"title":"Enhanced security state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Security settings identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutabilityState":{"name":"immutabilityState","type":"\u0007","is_mandatory":true,"title":"Immutability state (\"Locked\" or \"Unlocked\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"multiUserAuthorization":{"name":"multiUserAuthorization","type":"\u0007","is_mandatory":true,"title":"Multi-User Authorization state (\"Enabled\", \"Disabled\", or \"Invalid\"); Enabled requires a Resource Guard for destructive ops","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"softDeleteRetentionPeriodInDays":{"name":"softDeleteRetentionPeriodInDays","type":"\u0005","is_mandatory":true,"title":"Soft delete retention period in days","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"softDeleteState":{"name":"softDeleteState","type":"\u0007","is_mandatory":true,"title":"Soft delete state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceScanConfigurationState":{"name":"sourceScanConfigurationState","type":"\u0007","is_mandatory":true,"title":"Source-scan configuration state (\"Enabled\" or \"Disabled\") for backup item discovery","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Security settings for a Recovery Services vault","private":true,"min_provider_version":"13.3.3","defaults":"softDeleteState immutabilityState multiUserAuthorization","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.resource":{"id":"azure.subscription.resource","name":"azure.subscription.resource","fields":{"changedTime":{"name":"changedTime","type":"\t","is_mandatory":true,"title":"When the resource was last changed","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"createdTime":{"name":"createdTime","type":"\t","is_mandatory":true,"title":"When the resource was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Resource identity","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Resource kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedBy":{"name":"managedBy","type":"\u0007","is_mandatory":true,"title":"ID of the resource that manages this resource","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"plan":{"name":"plan","type":"\n","is_mandatory":true,"title":"Resource plan","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Resource provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"Resource SKU","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure resource","private":true,"min_provider_version":"9.0.0","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.resourcegroup":{"id":"azure.subscription.resourcegroup","name":"azure.subscription.resourcegroup","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource group ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource group location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedBy":{"name":"managedBy","type":"\u0007","is_mandatory":true,"title":"ID of the resource that manages this resource group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Resource group provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource group tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource group type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure resource group","private":true,"min_provider_version":"9.0.0","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.serviceBusService":{"id":"azure.subscription.serviceBusService","name":"azure.subscription.serviceBusService","fields":{"namespace":{"name":"namespace","type":"\u001bazure.subscription.serviceBusService.namespace","title":"Azure Service Bus namespace","desc":" Examine a Service Bus namespace — the messaging entity scope that owns queues, topics, and subscriptions. Surfaces the SKU and tier (Basic, Standard, Premium), the messaging unit count (Premium only), public network access, the `disableLocalAuth` flag, minimum TLS version, identity assignments, the encryption settings (customer-managed key reference), zone redundancy, and the `queues()`, `topics()`, and `authorizationRules()` defined inside the namespace.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"namespaces":{"name":"namespaces","type":"\u0019\u001bazure.subscription.serviceBusService.namespace","title":"List of Service Bus namespaces","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Service Bus service","private":true,"min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.serviceBusService.namespace":{"id":"azure.subscription.serviceBusService.namespace","name":"azure.subscription.serviceBusService.namespace","fields":{"cmkKeySource":{"name":"cmkKeySource","type":"\u0007","is_mandatory":true,"title":"CMK key source (\"Microsoft.KeyVault\" when CMK is configured; empty for platform-managed)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"cmkKeys":{"name":"cmkKeys","type":"\u0019\n","is_mandatory":true,"title":"Customer-managed encryption keys (Key Vault references) configured for this namespace","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disableLocalAuth":{"name":"disableLocalAuth","type":"\u0004","is_mandatory":true,"title":"Whether local (SAS key) authentication is disabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Namespace resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Namespace location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Namespace name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleSet":{"name":"networkRuleSet","type":"\n","title":"Network rule set: default action (\"Allow\"/\"Deny\"), public network access, IP/VNet rules, and trusted-service access","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"queue":{"name":"queue","type":"\u001bazure.subscription.serviceBusService.namespace.queue","title":"Azure Service Bus queue","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"queues":{"name":"queues","type":"\u0019\u001bazure.subscription.serviceBusService.namespace.queue","title":"Queues in this namespace","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requireInfrastructureEncryption":{"name":"requireInfrastructureEncryption","type":"\u0004","is_mandatory":true,"title":"Whether double encryption (infrastructure layer + CMK) is enabled","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceBusEndpoint":{"name":"serviceBusEndpoint","type":"\u0007","is_mandatory":true,"title":"Service Bus endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"SKU details","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Namespace status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Namespace tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"topic":{"name":"topic","type":"\u001bazure.subscription.serviceBusService.namespace.topic","title":"Azure Service Bus topic","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"topics":{"name":"topics","type":"\u0019\u001bazure.subscription.serviceBusService.namespace.topic","title":"Topics in this namespace","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundant":{"name":"zoneRedundant","type":"\u0004","is_mandatory":true,"title":"Whether the namespace is zone-redundant","min_provider_version":"13.4.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Service Bus namespace","desc":" Examine a Service Bus namespace — the messaging entity scope that owns queues, topics, and subscriptions. Surfaces the SKU and tier (Basic, Standard, Premium), the messaging unit count (Premium only), public network access, the `disableLocalAuth` flag, minimum TLS version, identity assignments, the encryption settings (customer-managed key reference), zone redundancy, and the `queues()`, `topics()`, and `authorizationRules()` defined inside the namespace.","min_provider_version":"13.3.3","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.serviceBusService.namespace.queue":{"id":"azure.subscription.serviceBusService.namespace.queue","name":"azure.subscription.serviceBusService.namespace.queue","fields":{"deadLetterMessageCount":{"name":"deadLetterMessageCount","type":"\u0005","is_mandatory":true,"title":"Number of messages in the dead-letter sub-queue","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultMessageTimeToLive":{"name":"defaultMessageTimeToLive","type":"\u0007","is_mandatory":true,"title":"Default time-to-live for messages (ISO 8601 duration)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablePartitioning":{"name":"enablePartitioning","type":"\u0004","is_mandatory":true,"title":"Whether partitioning is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Queue resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lockDuration":{"name":"lockDuration","type":"\u0007","is_mandatory":true,"title":"Lock duration (ISO 8601 duration)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxDeliveryCount":{"name":"maxDeliveryCount","type":"\u0005","is_mandatory":true,"title":"Maximum delivery count before dead-lettering","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxSizeInMegabytes":{"name":"maxSizeInMegabytes","type":"\u0005","is_mandatory":true,"title":"Maximum queue size in megabytes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"messageCount":{"name":"messageCount","type":"\u0005","is_mandatory":true,"title":"Number of messages in the queue","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Queue name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requiresDuplicateDetection":{"name":"requiresDuplicateDetection","type":"\u0004","is_mandatory":true,"title":"Whether duplicate detection is required","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requiresSession":{"name":"requiresSession","type":"\u0004","is_mandatory":true,"title":"Whether sessions are required","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Queue status (Active, Disabled, SendDisabled, ReceiveDisabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Service Bus queue","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.serviceBusService.namespace.topic":{"id":"azure.subscription.serviceBusService.namespace.topic","name":"azure.subscription.serviceBusService.namespace.topic","fields":{"defaultMessageTimeToLive":{"name":"defaultMessageTimeToLive","type":"\u0007","is_mandatory":true,"title":"Default time-to-live for messages (ISO 8601 duration)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enablePartitioning":{"name":"enablePartitioning","type":"\u0004","is_mandatory":true,"title":"Whether partitioning is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Topic resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxSizeInMegabytes":{"name":"maxSizeInMegabytes","type":"\u0005","is_mandatory":true,"title":"Maximum topic size in megabytes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Topic name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requiresDuplicateDetection":{"name":"requiresDuplicateDetection","type":"\u0004","is_mandatory":true,"title":"Whether duplicate detection is required","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Topic status (Active, Disabled, SendDisabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscription":{"name":"subscription","type":"\u001bazure.subscription.serviceBusService.namespace.topic.subscription","title":"Azure Service Bus topic subscription","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"subscriptionCount":{"name":"subscriptionCount","type":"\u0005","is_mandatory":true,"title":"Number of subscriptions on the topic","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptions":{"name":"subscriptions","type":"\u0019\u001bazure.subscription.serviceBusService.namespace.topic.subscription","title":"Subscriptions on this topic","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"supportOrdering":{"name":"supportOrdering","type":"\u0004","is_mandatory":true,"title":"Whether ordering is supported","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Service Bus topic","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.serviceBusService.namespace.topic.subscription":{"id":"azure.subscription.serviceBusService.namespace.topic.subscription","name":"azure.subscription.serviceBusService.namespace.topic.subscription","fields":{"deadLetterMessageCount":{"name":"deadLetterMessageCount","type":"\u0005","is_mandatory":true,"title":"Number of messages in the dead-letter sub-queue","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultMessageTimeToLive":{"name":"defaultMessageTimeToLive","type":"\u0007","is_mandatory":true,"title":"Default time-to-live for messages (ISO 8601 duration)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Subscription resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lockDuration":{"name":"lockDuration","type":"\u0007","is_mandatory":true,"title":"Lock duration (ISO 8601 duration)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maxDeliveryCount":{"name":"maxDeliveryCount","type":"\u0005","is_mandatory":true,"title":"Maximum delivery count before dead-lettering","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"messageCount":{"name":"messageCount","type":"\u0005","is_mandatory":true,"title":"Number of messages in the subscription","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Subscription name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requiresSession":{"name":"requiresSession","type":"\u0004","is_mandatory":true,"title":"Whether sessions are required","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Subscription status (Active, Disabled, ReceiveDisabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Service Bus topic subscription","private":true,"min_provider_version":"13.3.3","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService":{"id":"azure.subscription.sqlService","name":"azure.subscription.sqlService","fields":{"configuration":{"name":"configuration","type":"\u001bazure.subscription.sqlService.configuration","title":"Azure SQL configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"database":{"name":"database","type":"\u001bazure.subscription.sqlService.database","title":"Azure SQL Database service database","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"databaseusage":{"name":"databaseusage","type":"\u001bazure.subscription.sqlService.databaseusage","title":"Azure SQL Database service database usage","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"firewallrule":{"name":"firewallrule","type":"\u001bazure.subscription.sqlService.firewallrule","title":"Azure SQL firewall rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"managedInstance":{"name":"managedInstance","type":"\u001bazure.subscription.sqlService.managedInstance","title":"Azure SQL Managed Instance","desc":" Examine an Azure SQL Managed Instance — a fully-managed SQL Server deployed inside a virtual network. Surfaces the SKU and tier (GeneralPurpose, BusinessCritical), vCore count, storage size, license type, the subnet the instance is joined to, FQDN, the administrator login name, the minimum TLS version enforced, the proxy/connection override, whether the public data endpoint is enabled, zone redundancy, current vs requested backup storage redundancy, the identity and customer-managed-key configuration, the maintenance configuration, and the `databases()` hosted on the instance.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"managedInstances":{"name":"managedInstances","type":"\u0019\u001bazure.subscription.sqlService.managedInstance","title":"List of SQL managed instances","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"server":{"name":"server","type":"\u001bazure.subscription.sqlService.server","title":"Azure SQL Database server","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"servers":{"name":"servers","type":"\u0019\u001bazure.subscription.sqlService.server","title":"List of servers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkRule":{"name":"virtualNetworkRule","type":"\u001bazure.subscription.sqlService.virtualNetworkRule","title":"Azure SQL virtual network rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"vulnerabilityAssessmentScan":{"name":"vulnerabilityAssessmentScan","type":"\u001bazure.subscription.sqlService.vulnerabilityAssessmentScan","title":"Azure SQL Database vulnerability assessment scan record (shared between server and database scope)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"title":"Azure SQL","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.configuration":{"id":"azure.subscription.sqlService.configuration","name":"azure.subscription.sqlService.configuration","fields":{"allowedValues":{"name":"allowedValues","type":"\u0007","is_mandatory":true,"title":"SQL configuration allowed values","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataType":{"name":"dataType","type":"\u0007","is_mandatory":true,"title":"SQL configuration data type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultValue":{"name":"defaultValue","type":"\u0007","is_mandatory":true,"title":"SQL configuration default value","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"SQL configuration description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"SQL configuration ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"SQL configuration name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"SQL configuration source","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"SQL configuration type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"value":{"name":"value","type":"\u0007","is_mandatory":true,"title":"SQL configuration value","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL configuration","private":true,"min_provider_version":"9.0.1","defaults":"name value","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database":{"id":"azure.subscription.sqlService.database","name":"azure.subscription.sqlService.database","fields":{"advancedThreatProtection":{"name":"advancedThreatProtection","type":"\u001bazure.subscription.sqlService.database.advancedthreatprotection","title":"SQL database advanced threat protection settings","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"advancedthreatprotection":{"name":"advancedthreatprotection","type":"\u001bazure.subscription.sqlService.database.advancedthreatprotection","title":"Azure SQL Database advanced threat protection settings","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"advisor":{"name":"advisor","type":"\u0019\n","title":"SQL database advisor","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"auditingPolicy":{"name":"auditingPolicy","type":"\n","title":"DEPRECATED: use blobAuditingPolicy() instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"backupShortTermRetentionPolicy":{"name":"backupShortTermRetentionPolicy","type":"\u001bazure.subscription.sqlService.database.backupshorttermretentionpolicy","title":"SQL database backup short-term retention policy","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backupshorttermretentionpolicy":{"name":"backupshorttermretentionpolicy","type":"\u001bazure.subscription.sqlService.database.backupshorttermretentionpolicy","title":"Azure SQL Database backup short-term retention policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"blobAuditingPolicy":{"name":"blobAuditingPolicy","type":"\u001bazure.subscription.sqlService.database.blobAuditingPolicy","title":"Database-level SQL Auditing (blob auditing) policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"collation":{"name":"collation","type":"\u0007","is_mandatory":true,"title":"SQL database collation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionPolicy":{"name":"connectionPolicy","type":"\n","title":"DEPRECATED: Azure SQL DB has no per-database connection policy; use server.connectionType instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"createMode":{"name":"createMode","type":"\u0007","is_mandatory":true,"title":"SQL database create mode","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"creationDate":{"name":"creationDate","type":"\t","is_mandatory":true,"title":"SQL database create date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataMaskingPolicy":{"name":"dataMaskingPolicy","type":"\u001bazure.subscription.sqlService.database.dataMaskingPolicy","title":"Database-level Dynamic Data Masking (DDM) policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataMaskingRule":{"name":"dataMaskingRule","type":"\u001bazure.subscription.sqlService.database.dataMaskingRule","title":"Azure SQL Database Dynamic Data Masking rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"databaseId":{"name":"databaseId","type":"\u0007","is_mandatory":true,"title":"Database ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultSecondaryLocation":{"name":"defaultSecondaryLocation","type":"\u0007","is_mandatory":true,"title":"SQL database default secondary location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"earliestRestoreDate":{"name":"earliestRestoreDate","type":"\t","is_mandatory":true,"title":"SQL database earliest restore date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"edition":{"name":"edition","type":"\u0007","is_mandatory":true,"title":"SQL database edition","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"elasticPoolName":{"name":"elasticPoolName","type":"\u0007","is_mandatory":true,"title":"SQL database elastic pool name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"failoverGroupId":{"name":"failoverGroupId","type":"\u0007","is_mandatory":true,"title":"SQL database failover group ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoBackupPolicy":{"name":"geoBackupPolicy","type":"\u001bazure.subscription.sqlService.database.geoBackupPolicy","title":"Database-level geo backup policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"SQL database ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ledgerDigestUpload":{"name":"ledgerDigestUpload","type":"\u001bazure.subscription.sqlService.database.ledgerDigestUpload","title":"Database-level immutable ledger digest upload configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"longTermRetentionPolicy":{"name":"longTermRetentionPolicy","type":"\u001bazure.subscription.sqlService.database.longtermretentionpolicy","title":"SQL database backup long-term retention policy","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"longtermretentionpolicy":{"name":"longtermretentionpolicy","type":"\u001bazure.subscription.sqlService.database.longtermretentionpolicy","title":"Azure SQL Database backup long-term retention policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"maxSizeBytes":{"name":"maxSizeBytes","type":"\u0005","is_mandatory":true,"title":"SQL database maximum byte size","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"SQL database name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"readScale":{"name":"readScale","type":"\u0007","is_mandatory":true,"title":"SQL database read scale","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recoveryServicesRecoveryPointResourceId":{"name":"recoveryServicesRecoveryPointResourceId","type":"\u0007","is_mandatory":true,"title":"SQL database recovery services recovery point ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requestedServiceObjectiveName":{"name":"requestedServiceObjectiveName","type":"\u0007","is_mandatory":true,"title":"SQL database requested objective name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"restorePointInTime":{"name":"restorePointInTime","type":"\t","is_mandatory":true,"title":"SQL database restore point in time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sampleName":{"name":"sampleName","type":"\u0007","is_mandatory":true,"title":"SQL database sample name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityAlertPolicy":{"name":"securityAlertPolicy","type":"\u001bazure.subscription.sqlService.database.securityAlertPolicy","title":"Database-level security alert (threat detection) policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serviceLevelObjective":{"name":"serviceLevelObjective","type":"\u0007","is_mandatory":true,"title":"SQL database service level objective","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceDatabaseDeletionDate":{"name":"sourceDatabaseDeletionDate","type":"\t","is_mandatory":true,"title":"SQL database deletion date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceDatabaseId":{"name":"sourceDatabaseId","type":"\u0007","is_mandatory":true,"title":"SQL database source database ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"SQL database status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"threatDetectionPolicy":{"name":"threatDetectionPolicy","type":"\n","title":"DEPRECATED: use securityAlertPolicy() instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"transparentDataEncryption":{"name":"transparentDataEncryption","type":"\n","title":"DEPRECATED: use transparentDataEncryptionEnabled instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"transparentDataEncryptionEnabled":{"name":"transparentDataEncryptionEnabled","type":"\u0004","title":"Whether Transparent Data Encryption is enabled for this database","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"SQL database type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"usage":{"name":"usage","type":"\u0019\u001bazure.subscription.sqlService.databaseusage","title":"SQL database usage","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vulnerabilityAssessment":{"name":"vulnerabilityAssessment","type":"\u001bazure.subscription.sqlService.database.vulnerabilityAssessment","title":"Database-level vulnerability assessment configuration and scans","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundant":{"name":"zoneRedundant","type":"\u0004","is_mandatory":true,"title":"Whether the database is zone redundant","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database service database","private":true,"min_provider_version":"9.0.1","defaults":"name edition zoneRedundant status creationDate maxSizeBytes earliestRestoreDate","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.advancedthreatprotection":{"id":"azure.subscription.sqlService.database.advancedthreatprotection","name":"azure.subscription.sqlService.database.advancedthreatprotection","fields":{"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"UTC creation time of the policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Threat protection state (\"Enabled\", \"Disabled\", or \"New\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database advanced threat protection settings","private":true,"min_provider_version":"11.4.28","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.backupshorttermretentionpolicy":{"id":"azure.subscription.sqlService.database.backupshorttermretentionpolicy","name":"azure.subscription.sqlService.database.backupshorttermretentionpolicy","fields":{"diffBackupIntervalInHours":{"name":"diffBackupIntervalInHours","type":"\u0005","is_mandatory":true,"title":"Differential backup interval in hours (12 or 24)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionDays":{"name":"retentionDays","type":"\u0005","is_mandatory":true,"title":"Backup retention period in days (Point-in-Time Restore window)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database backup short-term retention policy","private":true,"min_provider_version":"11.4.28","defaults":"retentionDays","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.blobAuditingPolicy":{"id":"azure.subscription.sqlService.database.blobAuditingPolicy","name":"azure.subscription.sqlService.database.blobAuditingPolicy","fields":{"auditActionsAndGroups":{"name":"auditActionsAndGroups","type":"\u0019\u0007","is_mandatory":true,"title":"SQL audit action groups and individual actions audited by the policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isAzureMonitorTargetEnabled":{"name":"isAzureMonitorTargetEnabled","type":"\u0004","is_mandatory":true,"title":"Whether audit events are sent to Azure Monitor","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isManagedIdentityInUse":{"name":"isManagedIdentityInUse","type":"\u0004","is_mandatory":true,"title":"Whether managed identity is used for the audit storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isStorageSecondaryKeyInUse":{"name":"isStorageSecondaryKeyInUse","type":"\u0004","is_mandatory":true,"title":"Whether the secondary storage account access key is in use","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"queueDelayMs":{"name":"queueDelayMs","type":"\u0005","is_mandatory":true,"title":"Audit log queue delay in milliseconds","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionDays":{"name":"retentionDays","type":"\u0005","is_mandatory":true,"title":"Number of days to retain audit logs in storage (0 = unlimited)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Auditing state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccountSubscriptionId":{"name":"storageAccountSubscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription ID of the audit storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageEndpoint":{"name":"storageEndpoint","type":"\u0007","is_mandatory":true,"title":"Audit log storage account blob endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database database-level blob auditing policy","private":true,"min_provider_version":"13.8.2","defaults":"state retentionDays","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.dataMaskingPolicy":{"id":"azure.subscription.sqlService.database.dataMaskingPolicy","name":"azure.subscription.sqlService.database.dataMaskingPolicy","fields":{"dataMaskingState":{"name":"dataMaskingState","type":"\u0007","is_mandatory":true,"title":"Data masking state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"exemptPrincipals":{"name":"exemptPrincipals","type":"\u0007","is_mandatory":true,"title":"Comma-separated list of SQL users excluded from data masking","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Resource kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maskingLevel":{"name":"maskingLevel","type":"\u0007","is_mandatory":true,"title":"Masking level","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rules":{"name":"rules","type":"\u0019\u001bazure.subscription.sqlService.database.dataMaskingRule","title":"Data masking rules defined on the database","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database Dynamic Data Masking (DDM) policy","private":true,"min_provider_version":"13.8.2","defaults":"dataMaskingState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.dataMaskingRule":{"id":"azure.subscription.sqlService.database.dataMaskingRule","name":"azure.subscription.sqlService.database.dataMaskingRule","fields":{"aliasName":{"name":"aliasName","type":"\u0007","is_mandatory":true,"title":"Alias name for the rule","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"columnName":{"name":"columnName","type":"\u0007","is_mandatory":true,"title":"Column being masked","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maskingFunction":{"name":"maskingFunction","type":"\u0007","is_mandatory":true,"title":"Masking function (\"Default\", \"CCN\", \"Email\", \"Number\", \"SSN\", \"Text\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"numberFrom":{"name":"numberFrom","type":"\u0007","is_mandatory":true,"title":"Lower bound of the random interval used by the Number masking function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"numberTo":{"name":"numberTo","type":"\u0007","is_mandatory":true,"title":"Upper bound of the random interval used by the Number masking function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"prefixSize":{"name":"prefixSize","type":"\u0007","is_mandatory":true,"title":"Number of leading characters preserved by the Text masking function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replacementString":{"name":"replacementString","type":"\u0007","is_mandatory":true,"title":"Replacement string used by the Text masking function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ruleId":{"name":"ruleId","type":"\u0007","is_mandatory":true,"title":"Rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ruleState":{"name":"ruleState","type":"\u0007","is_mandatory":true,"title":"Rule state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"schemaName":{"name":"schemaName","type":"\u0007","is_mandatory":true,"title":"Schema of the masked column","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"suffixSize":{"name":"suffixSize","type":"\u0007","is_mandatory":true,"title":"Number of trailing characters preserved by the Text masking function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tableName":{"name":"tableName","type":"\u0007","is_mandatory":true,"title":"Table of the masked column","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database Dynamic Data Masking rule","private":true,"min_provider_version":"13.8.2","defaults":"schemaName tableName columnName maskingFunction","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.geoBackupPolicy":{"id":"azure.subscription.sqlService.database.geoBackupPolicy","name":"azure.subscription.sqlService.database.geoBackupPolicy","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Geo backup state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageType":{"name":"storageType","type":"\u0007","is_mandatory":true,"title":"Storage type used for geo backups","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database geo backup policy","private":true,"min_provider_version":"13.8.2","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.ledgerDigestUpload":{"id":"azure.subscription.sqlService.database.ledgerDigestUpload","name":"azure.subscription.sqlService.database.ledgerDigestUpload","fields":{"digestStorageEndpoint":{"name":"digestStorageEndpoint","type":"\u0007","is_mandatory":true,"title":"Storage endpoint where ledger digests are uploaded","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Ledger digest upload state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database immutable ledger digest upload configuration","private":true,"min_provider_version":"13.8.2","defaults":"state digestStorageEndpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.longtermretentionpolicy":{"id":"azure.subscription.sqlService.database.longtermretentionpolicy","name":"azure.subscription.sqlService.database.longtermretentionpolicy","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"monthlyRetention":{"name":"monthlyRetention","type":"\u0007","is_mandatory":true,"title":"Monthly retention in ISO 8601 duration format (e.g. \"P1M\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"weekOfYear":{"name":"weekOfYear","type":"\u0005","is_mandatory":true,"title":"Week of year for the yearly backup (1-52)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"weeklyRetention":{"name":"weeklyRetention","type":"\u0007","is_mandatory":true,"title":"Weekly retention in ISO 8601 duration format (e.g. \"P1W\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"yearlyRetention":{"name":"yearlyRetention","type":"\u0007","is_mandatory":true,"title":"Yearly retention in ISO 8601 duration format (e.g. \"P1Y\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database backup long-term retention policy","private":true,"min_provider_version":"11.4.28","defaults":"weeklyRetention monthlyRetention","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.securityAlertPolicy":{"id":"azure.subscription.sqlService.database.securityAlertPolicy","name":"azure.subscription.sqlService.database.securityAlertPolicy","fields":{"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"UTC creation time of the policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disabledAlerts":{"name":"disabledAlerts","type":"\u0019\u0007","is_mandatory":true,"title":"List of alert types disabled for this policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"emailAccountAdmins":{"name":"emailAccountAdmins","type":"\u0004","is_mandatory":true,"title":"Whether subscription administrators and database owners receive alert email","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"emailAddresses":{"name":"emailAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Email addresses that receive alert notifications","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionDays":{"name":"retentionDays","type":"\u0005","is_mandatory":true,"title":"Number of days to retain threat detection logs in storage (0 = unlimited)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Alert policy state (\"Enabled\", \"Disabled\", or \"New\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageEndpoint":{"name":"storageEndpoint","type":"\u0007","is_mandatory":true,"title":"Storage account blob endpoint that receives audited events for threat detection","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database database-level security alert policy","private":true,"min_provider_version":"13.8.2","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.database.vulnerabilityAssessment":{"id":"azure.subscription.sqlService.database.vulnerabilityAssessment","name":"azure.subscription.sqlService.database.vulnerabilityAssessment","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"mailSubscriptionAdmins":{"name":"mailSubscriptionAdmins","type":"\u0004","is_mandatory":true,"title":"Whether subscription administrators are notified after a scan","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recurringScanEmails":{"name":"recurringScanEmails","type":"\u0019\u0007","is_mandatory":true,"title":"Email addresses notified after a scheduled scan completes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recurringScansEnabled":{"name":"recurringScansEnabled","type":"\u0004","is_mandatory":true,"title":"Whether recurring scans are enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scans":{"name":"scans","type":"\u0019\u001bazure.subscription.sqlService.vulnerabilityAssessmentScan","title":"Vulnerability assessment scan records for the database","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageContainerPath":{"name":"storageContainerPath","type":"\u0007","is_mandatory":true,"title":"Storage container path that holds VA scan results","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database database-level vulnerability assessment configuration","private":true,"min_provider_version":"13.8.2","defaults":"recurringScansEnabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.databaseusage":{"id":"azure.subscription.sqlService.databaseusage","name":"azure.subscription.sqlService.databaseusage","fields":{"currentValue":{"name":"currentValue","type":"\u0006","is_mandatory":true,"title":"Database usage current value","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"displayName":{"name":"displayName","type":"\u0007","is_mandatory":true,"title":"Database usage display name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Database usage ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"limit":{"name":"limit","type":"\u0006","is_mandatory":true,"title":"Database usage limit","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Database usage name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resourceName":{"name":"resourceName","type":"\u0007","is_mandatory":true,"title":"Database usage resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"unit":{"name":"unit","type":"\u0007","is_mandatory":true,"title":"Database usage unit","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database service database usage","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.firewallrule":{"id":"azure.subscription.sqlService.firewallrule","name":"azure.subscription.sqlService.firewallrule","fields":{"endIpAddress":{"name":"endIpAddress","type":"\u0007","is_mandatory":true,"title":"SQL firewall rule end IP address","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"SQL firewall rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"SQL firewall rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"startIpAddress":{"name":"startIpAddress","type":"\u0007","is_mandatory":true,"title":"SQL firewall rule start IP address","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"SQL firewall rule type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL firewall rule","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.managedInstance":{"id":"azure.subscription.sqlService.managedInstance","name":"azure.subscription.sqlService.managedInstance","fields":{"administratorLogin":{"name":"administratorLogin","type":"\u0007","is_mandatory":true,"title":"SQL administrator login name (the admin user, never the password)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"collation":{"name":"collation","type":"\u0007","is_mandatory":true,"title":"Database collation (default for managed databases on this instance)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"currentBackupStorageRedundancy":{"name":"currentBackupStorageRedundancy","type":"\u0007","is_mandatory":true,"title":"Backup storage redundancy currently in use (\"Local\", \"Zone\", \"Geo\", \"GeoZone\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"database":{"name":"database","type":"\u001bazure.subscription.sqlService.managedInstance.database","title":"Azure SQL Managed Instance database","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"databases":{"name":"databases","type":"\u0019\u001bazure.subscription.sqlService.managedInstance.database","title":"Managed databases hosted on this instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dnsZone":{"name":"dnsZone","type":"\u0007","is_mandatory":true,"title":"DNS zone (paired managed instances share the same DNS zone)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionKey":{"name":"encryptionKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for transparent data encryption (null when service-managed)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fullyQualifiedDomainName":{"name":"fullyQualifiedDomainName","type":"\u0007","is_mandatory":true,"title":"Fully qualified domain name used to connect to the instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID of the managed instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identityType":{"name":"identityType","type":"\u0007","is_mandatory":true,"title":"Identity type (\"None\", \"SystemAssigned\", \"UserAssigned\", or \"SystemAssigned,UserAssigned\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"instancePoolId":{"name":"instancePoolId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the parent instance pool (empty for standalone instances)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"licenseType":{"name":"licenseType","type":"\u0007","is_mandatory":true,"title":"License type (\"LicenseIncluded\" or \"BasePrice\" for AHB)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maintenanceConfigurationId":{"name":"maintenanceConfigurationId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the maintenance configuration applied to this instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimalTlsVersion":{"name":"minimalTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version enforced on the instance (\"None\", \"1.0\", \"1.1\", \"1.2\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Managed instance name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"primaryUserAssignedIdentity":{"name":"primaryUserAssignedIdentity","type":"\u001bazure.subscription.managedIdentity","title":"Primary user-assigned managed identity (null when not configured or only system-assigned)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnectionCount":{"name":"privateEndpointConnectionCount","type":"\u0005","is_mandatory":true,"title":"Number of private endpoint connections to the instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"proxyOverride":{"name":"proxyOverride","type":"\u0007","is_mandatory":true,"title":"Connection type to the instance (\"Proxy\", \"Redirect\", or \"Default\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicDataEndpointEnabled":{"name":"publicDataEndpointEnabled","type":"\u0004","is_mandatory":true,"title":"Whether the public data endpoint is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requestedBackupStorageRedundancy":{"name":"requestedBackupStorageRedundancy","type":"\u0007","is_mandatory":true,"title":"Backup storage redundancy requested in the latest configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuFamily":{"name":"skuFamily","type":"\u0007","is_mandatory":true,"title":"SKU family (\"Gen4\" or \"Gen5\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"SKU name (e.g. \"GP_Gen5\", \"BC_Gen5\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuTier":{"name":"skuTier","type":"\u0007","is_mandatory":true,"title":"SKU tier (\"GeneralPurpose\" or \"BusinessCritical\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Runtime state of the instance (\"Ready\", \"Stopped\", etc.)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageSizeInGB":{"name":"storageSizeInGB","type":"\u0005","is_mandatory":true,"title":"Storage size in GB","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnet":{"name":"subnet","type":"\u001bazure.subscription.networkService.subnet","title":"Subnet the managed instance is joined to","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"timezoneId":{"name":"timezoneId","type":"\u0007","is_mandatory":true,"title":"Time zone ID for the instance (Windows time zone identifier)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vCores":{"name":"vCores","type":"\u0005","is_mandatory":true,"title":"Number of vCores allocated to the instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundant":{"name":"zoneRedundant","type":"\u0004","is_mandatory":true,"title":"Whether multi-AZ (zone redundancy) is enabled for the instance","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Managed Instance","desc":" Examine an Azure SQL Managed Instance — a fully-managed SQL Server deployed inside a virtual network. Surfaces the SKU and tier (GeneralPurpose, BusinessCritical), vCore count, storage size, license type, the subnet the instance is joined to, FQDN, the administrator login name, the minimum TLS version enforced, the proxy/connection override, whether the public data endpoint is enabled, zone redundancy, current vs requested backup storage redundancy, the identity and customer-managed-key configuration, the maintenance configuration, and the `databases()` hosted on the instance.","min_provider_version":"13.10.2","defaults":"name location state vCores skuName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.managedInstance.database":{"id":"azure.subscription.sqlService.managedInstance.database","name":"azure.subscription.sqlService.managedInstance.database","fields":{"catalogCollation":{"name":"catalogCollation","type":"\u0007","is_mandatory":true,"title":"Catalog (metadata) collation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"collation":{"name":"collation","type":"\u0007","is_mandatory":true,"title":"Database collation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"createMode":{"name":"createMode","type":"\u0007","is_mandatory":true,"title":"Database create mode (\"Default\", \"PointInTimeRestore\", \"RestoreExternalBackup\", \"Recovery\", \"RestoreLongTermRetentionBackup\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"creationDate":{"name":"creationDate","type":"\t","is_mandatory":true,"title":"Database creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultSecondaryLocation":{"name":"defaultSecondaryLocation","type":"\u0007","is_mandatory":true,"title":"Default secondary location for geo-paired backups","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"earliestRestorePoint":{"name":"earliestRestorePoint","type":"\t","is_mandatory":true,"title":"Earliest restore point in time available for point-in-time restore","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"failoverGroupId":{"name":"failoverGroupId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the failover group the database belongs to (empty when not in a group)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID of the managed database","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Database name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Database status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Managed Instance database","private":true,"min_provider_version":"13.10.2","defaults":"name status collation","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server":{"id":"azure.subscription.sqlService.server","name":"azure.subscription.sqlService.server","fields":{"administrator":{"name":"administrator","type":"\u001bazure.subscription.sqlService.server.administrator","title":"Azure SQL Database server administrator","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"administratorLogin":{"name":"administratorLogin","type":"\u0007","is_mandatory":true,"title":"SQL Database server administrator login","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"advancedThreatProtectionSetting":{"name":"advancedThreatProtectionSetting","type":"\u001bazure.subscription.sqlService.server.advancedThreatProtectionSetting","title":"Server-level Microsoft Defender for SQL advanced threat protection setting","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"auditingPolicy":{"name":"auditingPolicy","type":"\n","title":"DEPRECATED: use blobAuditingPolicy() instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"azureAdAdministrators":{"name":"azureAdAdministrators","type":"\u0019\u001bazure.subscription.sqlService.server.administrator","title":"SQL Database server Entra ID administrators","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azureAdOnlyAuthentication":{"name":"azureAdOnlyAuthentication","type":"\u0004","title":"Whether Azure AD-only authentication is enabled (SQL authentication disabled)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"blobAuditingPolicy":{"name":"blobAuditingPolicy","type":"\u001bazure.subscription.sqlService.server.blobAuditingPolicy","title":"Server-level SQL Auditing (blob auditing) policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionPolicy":{"name":"connectionPolicy","type":"\n","title":"DEPRECATED: use connectionType instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"connectionType":{"name":"connectionType","type":"\u0007","title":"Server-wide connection type (\"Default\", \"Proxy\", or \"Redirect\")","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"databases":{"name":"databases","type":"\u0019\u001bazure.subscription.sqlService.database","title":"SQL Database server databases","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"devOpsAuditingSetting":{"name":"devOpsAuditingSetting","type":"\u001bazure.subscription.sqlService.server.devOpsAuditingSetting","title":"Server-level Microsoft Entra ID (Azure AD) DevOps audit setting","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionProtector":{"name":"encryptionProtector","type":"\n","title":"DEPRECATED: use encryptionProtectorConfig() instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"encryptionProtectorConfig":{"name":"encryptionProtectorConfig","type":"\u001bazure.subscription.sqlService.server.encryptionProtectorConfig","title":"Server-level Transparent Data Encryption (TDE) protector configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionProtectorKey":{"name":"encryptionProtectorKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used by the encryption protector (null if service-managed)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionProtectorServerKeyType":{"name":"encryptionProtectorServerKeyType","type":"\u0007","title":"Server key type for the encryption protector (\"AzureKeyVault\" or \"ServiceManaged\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"failoverGroup":{"name":"failoverGroup","type":"\u001bazure.subscription.sqlService.server.failoverGroup","title":"Azure SQL Database auto-failover group","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"failoverGroups":{"name":"failoverGroups","type":"\u0019\u001bazure.subscription.sqlService.server.failoverGroup","title":"Auto-failover groups configured on the server","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"firewallRules":{"name":"firewallRules","type":"\u0019\u001bazure.subscription.sqlService.firewallrule","title":"SQL Database server firewall rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fullyQualifiedDomainName":{"name":"fullyQualifiedDomainName","type":"\u0007","is_mandatory":true,"title":"SQL server fully qualified domain name","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"SQL Database server ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"key":{"name":"key","type":"\u001bazure.subscription.sqlService.server.key","title":"Azure SQL Database server customer-managed (BYOK) encryption key","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"keys":{"name":"keys","type":"\u0019\u001bazure.subscription.sqlService.server.key","title":"Customer-managed encryption keys (BYOK) registered on the server","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"SQL Database server location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimalTlsVersion":{"name":"minimalTlsVersion","type":"\u0007","is_mandatory":true,"title":"SQL Database server minimum TLS version","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"SQL Database server name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"outboundFirewallRule":{"name":"outboundFirewallRule","type":"\u001bazure.subscription.sqlService.server.outboundFirewallRule","title":"Azure SQL Database server outbound firewall rule (allowed FQDN for outbound traffic)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"outboundFirewallRules":{"name":"outboundFirewallRules","type":"\u0019\u001bazure.subscription.sqlService.server.outboundFirewallRule","title":"Outbound firewall rules (allowed FQDNs for data egress)","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private Link endpoint connections to the server","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"SQL Database server properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled for the SQL server","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicationLink":{"name":"replicationLink","type":"\u001bazure.subscription.sqlService.server.replicationLink","title":"Azure SQL Database geo-replication link","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"replicationLinks":{"name":"replicationLinks","type":"\u0019\u001bazure.subscription.sqlService.server.replicationLink","title":"Geo-replication links from databases on this server to partners","min_provider_version":"13.8.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"restrictOutboundNetworkAccess":{"name":"restrictOutboundNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether outbound network access is restricted","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"securityAlertPolicy":{"name":"securityAlertPolicy","type":"\n","title":"DEPRECATED: use securityAlertPolicyConfig() instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"securityAlertPolicyConfig":{"name":"securityAlertPolicyConfig","type":"\u001bazure.subscription.sqlService.server.securityAlertPolicyConfig","title":"Server-level security alert (threat detection) policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"SQL server state","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"SQL Database server tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"threatDetectionPolicy":{"name":"threatDetectionPolicy","type":"\n","title":"DEPRECATED: legacy preview API; use securityAlertPolicyConfig() and advancedThreatProtectionSetting() instead","provider":"go.mondoo.com/cnquery/v9/providers/azure","maturity":"deprecated"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"SQL Database server type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"SQL server version","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkRules":{"name":"virtualNetworkRules","type":"\u0019\u001bazure.subscription.sqlService.virtualNetworkRule","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vulnerabilityAssessmentSettings":{"name":"vulnerabilityAssessmentSettings","type":"\u001bazure.subscription.sqlService.server.vulnerabilityassessmentsettings","title":"SQL Database server vulnerability assessment settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vulnerabilityassessmentsettings":{"name":"vulnerabilityassessmentsettings","type":"\u001bazure.subscription.sqlService.server.vulnerabilityassessmentsettings","title":"Azure SQL Database server vulnerability assessment settings","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"title":"Azure SQL Database server","private":true,"min_provider_version":"9.0.1","defaults":"name location properties.version properties.state properties.fullyQualifiedDomainName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.administrator":{"id":"azure.subscription.sqlService.server.administrator","name":"azure.subscription.sqlService.server.administrator","fields":{"administratorType":{"name":"administratorType","type":"\u0007","is_mandatory":true,"title":"SQL administrator type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"SQL administrator ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"login":{"name":"login","type":"\u0007","is_mandatory":true,"title":"SQL administrator login","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"SQL administrator name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sid":{"name":"sid","type":"\u0007","is_mandatory":true,"title":"SQL administrator subscription ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tenantId":{"name":"tenantId","type":"\u0007","is_mandatory":true,"title":"SQL administrator tenant ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"SQL administrator type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server administrator","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.advancedThreatProtectionSetting":{"id":"azure.subscription.sqlService.server.advancedThreatProtectionSetting","name":"azure.subscription.sqlService.server.advancedThreatProtectionSetting","fields":{"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"UTC creation time of the setting","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"ATP state (\"Enabled\", \"Disabled\", or \"New\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server-scoped Microsoft Defender for SQL advanced threat protection setting","private":true,"min_provider_version":"13.8.2","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.blobAuditingPolicy":{"id":"azure.subscription.sqlService.server.blobAuditingPolicy","name":"azure.subscription.sqlService.server.blobAuditingPolicy","fields":{"auditActionsAndGroups":{"name":"auditActionsAndGroups","type":"\u0019\u0007","is_mandatory":true,"title":"SQL audit action groups and individual actions audited by the policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isAzureMonitorTargetEnabled":{"name":"isAzureMonitorTargetEnabled","type":"\u0004","is_mandatory":true,"title":"Whether audit events are sent to Azure Monitor (Log Analytics / Event Hub)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isManagedIdentityInUse":{"name":"isManagedIdentityInUse","type":"\u0004","is_mandatory":true,"title":"Whether managed identity is used for authentication to the audit storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isStorageSecondaryKeyInUse":{"name":"isStorageSecondaryKeyInUse","type":"\u0004","is_mandatory":true,"title":"Whether the secondary storage account access key is in use","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"queueDelayMs":{"name":"queueDelayMs","type":"\u0005","is_mandatory":true,"title":"Audit log queue delay in milliseconds","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionDays":{"name":"retentionDays","type":"\u0005","is_mandatory":true,"title":"Number of days to retain audit logs in storage (0 = unlimited)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Auditing state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccountSubscriptionId":{"name":"storageAccountSubscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription ID of the audit storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageEndpoint":{"name":"storageEndpoint","type":"\u0007","is_mandatory":true,"title":"Audit log storage account blob endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server blob auditing policy (server-level SQL Auditing)","private":true,"min_provider_version":"13.8.2","defaults":"state retentionDays","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.devOpsAuditingSetting":{"id":"azure.subscription.sqlService.server.devOpsAuditingSetting","name":"azure.subscription.sqlService.server.devOpsAuditingSetting","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isAzureMonitorTargetEnabled":{"name":"isAzureMonitorTargetEnabled","type":"\u0004","is_mandatory":true,"title":"Whether audit events are sent to Azure Monitor (Log Analytics / Event Hub)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"DevOps audit state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccountSubscriptionId":{"name":"storageAccountSubscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription ID of the audit storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageEndpoint":{"name":"storageEndpoint","type":"\u0007","is_mandatory":true,"title":"Audit log storage account blob endpoint","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server Microsoft Entra (Azure AD) DevOps audit setting","private":true,"min_provider_version":"13.8.2","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.encryptionProtectorConfig":{"id":"azure.subscription.sqlService.server.encryptionProtectorConfig","name":"azure.subscription.sqlService.server.encryptionProtectorConfig","fields":{"autoRotationEnabled":{"name":"autoRotationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether automatic key rotation is enabled for the protector","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"key":{"name":"key","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key referenced by the protector (null if service-managed)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serverKeyName":{"name":"serverKeyName","type":"\u0007","is_mandatory":true,"title":"Name of the server key referenced by the protector","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serverKeyType":{"name":"serverKeyType","type":"\u0007","is_mandatory":true,"title":"Server key type (\"AzureKeyVault\" or \"ServiceManaged\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subregion":{"name":"subregion","type":"\u0007","is_mandatory":true,"title":"Subregion of the encryption protector","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"thumbprint":{"name":"thumbprint","type":"\u0007","is_mandatory":true,"title":"Key thumbprint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"uri":{"name":"uri","type":"\u0007","is_mandatory":true,"title":"Key Vault key URI (null if service-managed)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server Transparent Data Encryption (TDE) protector configuration","private":true,"min_provider_version":"13.8.2","defaults":"serverKeyType serverKeyName","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.failoverGroup":{"id":"azure.subscription.sqlService.server.failoverGroup","name":"azure.subscription.sqlService.server.failoverGroup","fields":{"databases":{"name":"databases","type":"\u0019\u001bazure.subscription.sqlService.database","title":"Databases included in the failover group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Failover group name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partnerServers":{"name":"partnerServers","type":"\u0019\n","is_mandatory":true,"title":"Partner server descriptors ({id, location, replicationRole})","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"readOnlyEndpoint":{"name":"readOnlyEndpoint","type":"\n","is_mandatory":true,"title":"Read-only endpoint configuration ({failoverPolicy, targetServer})","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"readWriteEndpoint":{"name":"readWriteEndpoint","type":"\n","is_mandatory":true,"title":"Read/write endpoint configuration ({failoverPolicy, failoverWithDataLossGracePeriodMinutes})","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicationRole":{"name":"replicationRole","type":"\u0007","is_mandatory":true,"title":"Replication role of this server in the failover group (\"Primary\" or \"Secondary\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicationState":{"name":"replicationState","type":"\u0007","is_mandatory":true,"title":"Replication state of the failover group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database auto-failover group","private":true,"min_provider_version":"13.8.2","defaults":"name replicationRole replicationState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.key":{"id":"azure.subscription.sqlService.server.key","name":"azure.subscription.sqlService.server.key","fields":{"autoRotationEnabled":{"name":"autoRotationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether automatic key rotation is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"creationDate":{"name":"creationDate","type":"\t","is_mandatory":true,"title":"Key creation date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Resource kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Key resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"serverKeyType":{"name":"serverKeyType","type":"\u0007","is_mandatory":true,"title":"Server key type (\"AzureKeyVault\" or \"ServiceManaged\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subregion":{"name":"subregion","type":"\u0007","is_mandatory":true,"title":"Subregion of the key","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"thumbprint":{"name":"thumbprint","type":"\u0007","is_mandatory":true,"title":"Key thumbprint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"uri":{"name":"uri","type":"\u0007","is_mandatory":true,"title":"Key Vault key URI (null for service-managed keys)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server customer-managed (BYOK) encryption key","private":true,"min_provider_version":"13.8.2","defaults":"name serverKeyType autoRotationEnabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.outboundFirewallRule":{"id":"azure.subscription.sqlService.server.outboundFirewallRule","name":"azure.subscription.sqlService.server.outboundFirewallRule","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Allowed FQDN (the rule name is the FQDN)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the rule","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server outbound firewall rule (allowed FQDN for outbound traffic)","private":true,"min_provider_version":"13.8.2","defaults":"name provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.replicationLink":{"id":"azure.subscription.sqlService.server.replicationLink","name":"azure.subscription.sqlService.server.replicationLink","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isTerminationAllowed":{"name":"isTerminationAllowed","type":"\u0004","is_mandatory":true,"title":"Whether termination of the replication link is allowed","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"linkType":{"name":"linkType","type":"\u0007","is_mandatory":true,"title":"Replication link type (e.g. \"GEO\", \"NAMED\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Replication link name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partnerDatabase":{"name":"partnerDatabase","type":"\u0007","is_mandatory":true,"title":"Partner database name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partnerLocation":{"name":"partnerLocation","type":"\u0007","is_mandatory":true,"title":"Partner server location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partnerRole":{"name":"partnerRole","type":"\u0007","is_mandatory":true,"title":"Partner replication role","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"partnerServer":{"name":"partnerServer","type":"\u0007","is_mandatory":true,"title":"Partner server name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"percentComplete":{"name":"percentComplete","type":"\u0005","is_mandatory":true,"title":"Seeding/catch-up percent complete (0-100)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicationMode":{"name":"replicationMode","type":"\u0007","is_mandatory":true,"title":"Replication mode (e.g. \"Async\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"replicationState":{"name":"replicationState","type":"\u0007","is_mandatory":true,"title":"Replication state (\"PENDING\", \"SEEDING\", \"CATCH_UP\", \"SUSPENDED\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Local replication role (\"Primary\" or \"Secondary\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"startTime":{"name":"startTime","type":"\t","is_mandatory":true,"title":"Replication start time","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database geo-replication link","private":true,"min_provider_version":"13.8.2","defaults":"name partnerServer replicationState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.securityAlertPolicyConfig":{"id":"azure.subscription.sqlService.server.securityAlertPolicyConfig","name":"azure.subscription.sqlService.server.securityAlertPolicyConfig","fields":{"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"UTC creation time of the policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"disabledAlerts":{"name":"disabledAlerts","type":"\u0019\u0007","is_mandatory":true,"title":"List of alert types disabled for this policy (e.g. \"Sql_Injection\", \"Access_Anomaly\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"emailAccountAdmins":{"name":"emailAccountAdmins","type":"\u0004","is_mandatory":true,"title":"Whether subscription administrators and database owners receive alert email","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"emailAddresses":{"name":"emailAddresses","type":"\u0019\u0007","is_mandatory":true,"title":"Email addresses that receive alert notifications","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionDays":{"name":"retentionDays","type":"\u0005","is_mandatory":true,"title":"Number of days to retain threat detection logs in storage (0 = unlimited)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Alert policy state (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageEndpoint":{"name":"storageEndpoint","type":"\u0007","is_mandatory":true,"title":"Storage account blob endpoint that receives audited events for threat detection","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server security alert (threat detection) policy","private":true,"min_provider_version":"13.8.2","defaults":"state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.server.vulnerabilityassessmentsettings":{"id":"azure.subscription.sqlService.server.vulnerabilityassessmentsettings","name":"azure.subscription.sqlService.server.vulnerabilityassessmentsettings","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the vulnerability assessment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"mailSubscriptionAdmins":{"name":"mailSubscriptionAdmins","type":"\u0004","is_mandatory":true,"title":"Whether the schedule scan notification is also sent to the subscription administrators","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the vulnerability assessment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recurringScanEmails":{"name":"recurringScanEmails","type":"\u0019\u0007","is_mandatory":true,"title":"Array of email addresses to which the scan notification is sent","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"recurringScanEnabled":{"name":"recurringScanEnabled","type":"\u0004","is_mandatory":true,"title":"Whether recurring scan is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccountAccessKey":{"name":"storageAccountAccessKey","type":"\u0007","is_mandatory":true,"title":"Identifier key of the storage account for vulnerability assessment scan results","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageContainerPath":{"name":"storageContainerPath","type":"\u0007","is_mandatory":true,"title":"Blob storage container path to hold the scan results","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageContainerSasKey":{"name":"storageContainerSasKey","type":"\u0007","is_mandatory":true,"title":"Shared access signature key that has write access to the blob container specified in 'storageContainerPath'","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type of the vulnerability assessment","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database server vulnerability assessment settings","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.virtualNetworkRule":{"id":"azure.subscription.sqlService.virtualNetworkRule","name":"azure.subscription.sqlService.virtualNetworkRule","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Virtual network rule ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Virtual network rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Virtual network rule properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Virtual network rule type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkSubnetId":{"name":"virtualNetworkSubnetId","type":"\u0007","is_mandatory":true,"title":"Virtual network rule Subnet ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL virtual network rule","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.sqlService.vulnerabilityAssessmentScan":{"id":"azure.subscription.sqlService.vulnerabilityAssessmentScan","name":"azure.subscription.sqlService.vulnerabilityAssessmentScan","fields":{"endTime":{"name":"endTime","type":"\t","is_mandatory":true,"title":"Scan end time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"errors":{"name":"errors","type":"\u0019\n","is_mandatory":true,"title":"List of scan errors ({code, message})","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Scan record name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"numberOfFailedSecurityChecks":{"name":"numberOfFailedSecurityChecks","type":"\u0005","is_mandatory":true,"title":"Number of failed security checks in the scan","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scanId":{"name":"scanId","type":"\u0007","is_mandatory":true,"title":"Scan ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"startTime":{"name":"startTime","type":"\t","is_mandatory":true,"title":"Scan start time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Scan state (\"Passed\", \"Failed\", \"FailedToRun\", or \"InProgress\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageContainerPath":{"name":"storageContainerPath","type":"\u0007","is_mandatory":true,"title":"Storage container path holding the scan results","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"triggerType":{"name":"triggerType","type":"\u0007","is_mandatory":true,"title":"Trigger type (\"OnDemand\" or \"Recurring\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure SQL Database vulnerability assessment scan record (shared between server and database scope)","private":true,"min_provider_version":"13.8.2","defaults":"scanId state numberOfFailedSecurityChecks","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService":{"id":"azure.subscription.storageService","name":"azure.subscription.storageService","fields":{"account":{"name":"account","type":"\u001bazure.subscription.storageService.account","title":"Azure Storage account","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"accounts":{"name":"accounts","type":"\u0019\u001bazure.subscription.storageService.account","title":"List of storage accounts","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account":{"id":"azure.subscription.storageService.account","name":"azure.subscription.storageService.account","fields":{"accessTier":{"name":"accessTier","type":"\u0007","is_mandatory":true,"title":"Access tier of the storage account (Hot, Cool, Cold, Premium)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"allowBlobPublicAccess":{"name":"allowBlobPublicAccess","type":"\u0004","is_mandatory":true,"title":"Whether blob containers in the account can be configured for public access","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"allowCrossTenantReplication":{"name":"allowCrossTenantReplication","type":"\u0004","is_mandatory":true,"title":"Whether cross-tenant replication is allowed","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"allowSharedKeyAccess":{"name":"allowSharedKeyAccess","type":"\u0004","is_mandatory":true,"title":"Whether shared key access is allowed for the storage account","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"allowedCopyScope":{"name":"allowedCopyScope","type":"\u0007","is_mandatory":true,"title":"Allowed copy scope for the storage account (\"PrivateLink\", \"AAD\", or empty for unrestricted)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"blobInventoryPolicy":{"name":"blobInventoryPolicy","type":"\u001bazure.subscription.storageService.account.blobInventoryPolicy","title":"Blob inventory policy configured on the storage account, if any","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"blobProperties":{"name":"blobProperties","type":"\u001bazure.subscription.storageService.account.service.blobProperties","title":"Storage account blob properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"container":{"name":"container","type":"\u001bazure.subscription.storageService.account.container","title":"Azure Storage container","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"containers":{"name":"containers","type":"\u0019\u001bazure.subscription.storageService.account.container","title":"Storage account containers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"When the storage account was created","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dataProtection":{"name":"dataProtection","type":"\u001bazure.subscription.storageService.account.dataProtection","title":"Storage account data protection","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultToOAuthAuthentication":{"name":"defaultToOAuthAuthentication","type":"\u0004","is_mandatory":true,"title":"Whether the storage account defaults to OAuth authentication","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableHttpsTrafficOnly":{"name":"enableHttpsTrafficOnly","type":"\u0004","is_mandatory":true,"title":"Whether only HTTPS traffic is allowed to storage service","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enableNfsV3":{"name":"enableNfsV3","type":"\u0004","is_mandatory":true,"title":"Whether NFS v3 protocol is enabled","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionKey":{"name":"encryptionKey","type":"\u001bazure.subscription.keyVaultService.key","title":"Key Vault key used for customer-managed encryption (null if platform-managed)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionKeySource":{"name":"encryptionKeySource","type":"\u0007","title":"Encryption key source for the storage account (\"Microsoft.Storage\" or \"Microsoft.KeyVault\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryptionScope":{"name":"encryptionScope","type":"\u001bazure.subscription.storageService.account.encryptionScope","title":"Azure Storage encryption scope","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"encryptionScopes":{"name":"encryptionScopes","type":"\u0019\u001bazure.subscription.storageService.account.encryptionScope","title":"Storage account encryption scopes","min_provider_version":"13.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"fileProperties":{"name":"fileProperties","type":"\u001bazure.subscription.storageService.account.filePropertiesConfig","title":"Storage account file properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"filePropertiesConfig":{"name":"filePropertiesConfig","type":"\u001bazure.subscription.storageService.account.filePropertiesConfig","title":"Azure Storage account file properties","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"fileShare":{"name":"fileShare","type":"\u001bazure.subscription.storageService.account.fileShare","title":"Azure Storage file share","desc":" Examine a single Azure Files share hosted on a storage account. Selectable by ARM id; fields cover the share protocol (SMB or NFS), access tier, provisioned quota, and the presence of stored access policies (signed identifiers).","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"fileShares":{"name":"fileShares","type":"\u0019\u001bazure.subscription.storageService.account.fileShare","title":"File shares hosted on the account (Azure Files)","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Storage account ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Storage account identity","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutableStorageEnabled":{"name":"immutableStorageEnabled","type":"\u0004","is_mandatory":true,"title":"Whether account-level immutability with versioning is enabled","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutableStoragePolicyAllowProtectedAppendWrites":{"name":"immutableStoragePolicyAllowProtectedAppendWrites","type":"\u0004","is_mandatory":true,"title":"Whether protected append-blob writes are permitted under the default account policy","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutableStoragePolicyPeriodDays":{"name":"immutableStoragePolicyPeriodDays","type":"\u0005","is_mandatory":true,"title":"Default account-level immutability period (days). Zero when no default policy is set.","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutableStoragePolicyState":{"name":"immutableStoragePolicyState","type":"\u0007","is_mandatory":true,"title":"Default account-level immutability policy state (\"Locked\" / \"Unlocked\"); empty when unset","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isHnsEnabled":{"name":"isHnsEnabled","type":"\u0004","is_mandatory":true,"title":"Whether hierarchical namespace (Data Lake Storage) is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isLocalUserEnabled":{"name":"isLocalUserEnabled","type":"\u0004","is_mandatory":true,"title":"Whether local user accounts are enabled for SFTP/SSH","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isSftpEnabled":{"name":"isSftpEnabled","type":"\u0004","is_mandatory":true,"title":"Whether SFTP is enabled on the storage account","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyExpirationPeriodInDays":{"name":"keyExpirationPeriodInDays","type":"\u0005","is_mandatory":true,"title":"Account access-key expiration period (days)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Storage account kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"largeFileSharesState":{"name":"largeFileSharesState","type":"\u0007","is_mandatory":true,"title":"Whether large file shares are enabled (Enabled, Disabled)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastGeoFailoverTime":{"name":"lastGeoFailoverTime","type":"\t","is_mandatory":true,"title":"When the last geo-failover occurred","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"localUser":{"name":"localUser","type":"\u001bazure.subscription.storageService.account.localUser","title":"Local user configured on a storage account for SFTP/SSH access","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"localUsers":{"name":"localUsers","type":"\u0019\u001bazure.subscription.storageService.account.localUser","title":"Local users (SFTP/SSH) configured on the storage account","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Storage account location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managementPolicy":{"name":"managementPolicy","type":"\u001bazure.subscription.storageService.account.managementPolicy","title":"Storage account lifecycle management policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minimumTlsVersion":{"name":"minimumTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version enforced on the storage account","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Storage account name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleBypass":{"name":"networkRuleBypass","type":"\u0007","is_mandatory":true,"title":"Services that bypass the network rules (e.g. AzureServices, Logging, Metrics)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleDefaultAction":{"name":"networkRuleDefaultAction","type":"\u0007","is_mandatory":true,"title":"Default action for network rule set (Allow or Deny)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleIpRanges":{"name":"networkRuleIpRanges","type":"\u0019\u0007","is_mandatory":true,"title":"IP address or CIDR ranges allowed by network rules","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"networkRuleVirtualNetworkSubnetIds":{"name":"networkRuleVirtualNetworkSubnetIds","type":"\u0019\u0007","is_mandatory":true,"title":"Virtual network subnet resource IDs allowed by network rules","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"objectReplicationPolicies":{"name":"objectReplicationPolicies","type":"\u0019\u001bazure.subscription.storageService.account.objectReplicationPolicy","title":"Object replication policies configured on the storage account","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"objectReplicationPolicy":{"name":"objectReplicationPolicy","type":"\u001bazure.subscription.storageService.account.objectReplicationPolicy","title":"Azure Storage object replication policy","desc":" Examine an object replication policy linking a source storage account to a destination account. Selectable by ARM id; fields expose the source/destination pair, when replication was enabled, and the container-to-container rules with optional prefix and creation-time filters.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"primaryLocation":{"name":"primaryLocation","type":"\u0007","is_mandatory":true,"title":"Primary location of the storage account","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnection":{"name":"privateEndpointConnection","type":"\u001bazure.subscription.storageService.account.privateEndpointConnection","title":"Azure Storage private endpoint connection","desc":" Examine a private endpoint connection on a storage account. Selectable by ARM id; fields expose the consumer-side endpoint reference and the approval status governing traffic between consumer and storage.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.storageService.account.privateEndpointConnection","title":"Private endpoint connections to the storage account","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Storage account properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the storage account","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is allowed for the storage account","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publishInternetEndpoints":{"name":"publishInternetEndpoints","type":"\u0004","is_mandatory":true,"title":"Whether internet-routing storage endpoints are published","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publishMicrosoftEndpoints":{"name":"publishMicrosoftEndpoints","type":"\u0004","is_mandatory":true,"title":"Whether Microsoft-routing storage endpoints are published","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"queue":{"name":"queue","type":"\u001bazure.subscription.storageService.account.queue","title":"Azure Storage account queue","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"queueProperties":{"name":"queueProperties","type":"\u001bazure.subscription.storageService.account.service.properties","title":"Storage account queue properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"queues":{"name":"queues","type":"\u0019\u001bazure.subscription.storageService.account.queue","title":"Storage account queues","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requireInfrastructureEncryption":{"name":"requireInfrastructureEncryption","type":"\u0004","is_mandatory":true,"title":"Whether infrastructure (double) encryption is required at rest","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"routingChoice":{"name":"routingChoice","type":"\u0007","is_mandatory":true,"title":"Routing choice for outbound traffic (\"MicrosoftRouting\" or \"InternetRouting\")","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sasExpirationAction":{"name":"sasExpirationAction","type":"\u0007","is_mandatory":true,"title":"SAS expiration policy action (\"Log\" or \"Block\"); empty if no policy is set","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sasExpirationPeriod":{"name":"sasExpirationPeriod","type":"\u0007","is_mandatory":true,"title":"SAS expiration policy: max validity period (days.HH:MM:SS)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"secondaryLocation":{"name":"secondaryLocation","type":"\u0007","is_mandatory":true,"title":"Secondary location of the storage account (for geo-redundant accounts)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"service":{"name":"service","type":"\u001bazure.subscription.storageService.account.service","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"serviceKeyTypes":{"name":"serviceKeyTypes","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Per-service encryption KeyType ({\"blob\",\"file\",\"queue\",\"table\"}; values \"Account\" or \"Service\")","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"Storage account SKU","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"statusOfPrimary":{"name":"statusOfPrimary","type":"\u0007","is_mandatory":true,"title":"Status of the primary location (Available, Unavailable)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"statusOfSecondary":{"name":"statusOfSecondary","type":"\u0007","is_mandatory":true,"title":"Status of the secondary location (Available, Unavailable)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"table":{"name":"table","type":"\u001bazure.subscription.storageService.account.table","title":"Azure Storage account table","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"tableProperties":{"name":"tableProperties","type":"\u001bazure.subscription.storageService.account.service.properties","title":"Storage account table properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tables":{"name":"tables","type":"\u0019\u001bazure.subscription.storageService.account.table","title":"Storage account tables","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Storage account tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Storage account type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account","private":true,"min_provider_version":"9.0.1","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.blobInventoryPolicy":{"id":"azure.subscription.storageService.account.blobInventoryPolicy","name":"azure.subscription.storageService.account.blobInventoryPolicy","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the inventory policy is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastModifiedTime":{"name":"lastModifiedTime","type":"\t","is_mandatory":true,"title":"Last modification time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Policy name (always \"default\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rules":{"name":"rules","type":"\u0019\n","is_mandatory":true,"title":"Inventory rules. Each entry has {name, enabled, destination, definition: {format, schedule, objectType, schemaFields, filters}}.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage blob inventory policy","desc":" Examine the (singleton) blob inventory policy on a storage account. Used to audit whether the account has cataloging enabled and what inventory rules are defined (destination container, schema, schedule, per-rule filters).","private":true,"min_provider_version":"13.10.2","defaults":"enabled lastModifiedTime","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.container":{"id":"azure.subscription.storageService.account.container","name":"azure.subscription.storageService.account.container","fields":{"defaultEncryptionScope":{"name":"defaultEncryptionScope","type":"\u0007","is_mandatory":true,"title":"Default encryption scope for the container","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"deleted":{"name":"deleted","type":"\u0004","is_mandatory":true,"title":"Whether the container has been soft-deleted","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"deletedTime":{"name":"deletedTime","type":"\t","is_mandatory":true,"title":"When the container was deleted","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"denyEncryptionScopeOverride":{"name":"denyEncryptionScopeOverride","type":"\u0004","is_mandatory":true,"title":"Whether encryption scope override is denied","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"etag":{"name":"etag","type":"\u0007","is_mandatory":true,"title":"Storage container etag","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasImmutabilityPolicy":{"name":"hasImmutabilityPolicy","type":"\u0004","is_mandatory":true,"title":"Whether the container has an immutability policy","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasLegalHold":{"name":"hasLegalHold","type":"\u0004","is_mandatory":true,"title":"Whether the container has a legal hold","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Storage container ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutabilityPeriodInDays":{"name":"immutabilityPeriodInDays","type":"\u0005","is_mandatory":true,"title":"Time-based retention period (days) configured on the immutability policy","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutabilityPolicyAllowProtectedAppendWrites":{"name":"immutabilityPolicyAllowProtectedAppendWrites","type":"\u0004","is_mandatory":true,"title":"Whether append-blob writes are permitted while immutability is enforced","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutabilityPolicyAllowProtectedAppendWritesAll":{"name":"immutabilityPolicyAllowProtectedAppendWritesAll","type":"\u0004","is_mandatory":true,"title":"Whether append/block-blob writes are permitted while immutability is enforced","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"immutabilityPolicyState":{"name":"immutabilityPolicyState","type":"\u0007","is_mandatory":true,"title":"ImmutabilityPolicy state (\"Locked\" or \"Unlocked\"); empty if no policy","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastModifiedTime":{"name":"lastModifiedTime","type":"\t","is_mandatory":true,"title":"When the container was last modified","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"leaseState":{"name":"leaseState","type":"\u0007","is_mandatory":true,"title":"Lease state of the container (Available, Leased, Expired, Breaking, Broken)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"leaseStatus":{"name":"leaseStatus","type":"\u0007","is_mandatory":true,"title":"Lease status of the container (Locked, Unlocked)","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"legalHoldTags":{"name":"legalHoldTags","type":"\u0019\n","is_mandatory":true,"title":"Legal-hold tags currently set on the container ({tag, objectIdentifier, tenantId, upn, timestamp})","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metadata":{"name":"metadata","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Container metadata","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Storage container name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"objectLevelImmutabilityEnabled":{"name":"objectLevelImmutabilityEnabled","type":"\u0004","is_mandatory":true,"title":"Whether object-level (per-blob) immutability with versioning is enabled","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Storage container properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicAccess":{"name":"publicAccess","type":"\u0007","is_mandatory":true,"title":"Public access level for the container (None, Blob, Container)","min_provider_version":"11.6.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"remainingRetentionDays":{"name":"remainingRetentionDays","type":"\u0005","is_mandatory":true,"title":"Number of remaining days in the soft delete retention period","min_provider_version":"11.6.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Storage container type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage container","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.dataProtection":{"id":"azure.subscription.storageService.account.dataProtection","name":"azure.subscription.storageService.account.dataProtection","fields":{"blobRetentionDays":{"name":"blobRetentionDays","type":"\u0005","is_mandatory":true,"title":"Retention period in days for deleted blobs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"blobSoftDeletionEnabled":{"name":"blobSoftDeletionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether soft deletion of blobs is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"containerRetentionDays":{"name":"containerRetentionDays","type":"\u0005","is_mandatory":true,"title":"Retention period in days for deleted containers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"containerSoftDeletionEnabled":{"name":"containerSoftDeletionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether soft deletion of containers is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"storageAccountId":{"name":"storageAccountId","type":"\u0007","is_mandatory":true,"title":"ID of the storage account","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account data protection","private":true,"min_provider_version":"9.0.1","defaults":"blobSoftDeletionEnabled blobRetentionDays","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.encryptionScope":{"id":"azure.subscription.storageService.account.encryptionScope","name":"azure.subscription.storageService.account.encryptionScope","fields":{"creationTime":{"name":"creationTime","type":"\t","is_mandatory":true,"title":"When the encryption scope was created","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"currentVersionedKeyIdentifier":{"name":"currentVersionedKeyIdentifier","type":"\u0007","is_mandatory":true,"title":"Current versioned key identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Encryption scope ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyVaultKeyUri":{"name":"keyVaultKeyUri","type":"\u0007","is_mandatory":true,"title":"Key Vault key URI (if source is Microsoft.KeyVault)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastKeyRotationTimestamp":{"name":"lastKeyRotationTimestamp","type":"\t","is_mandatory":true,"title":"When the key was last rotated","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastModifiedTime":{"name":"lastModifiedTime","type":"\t","is_mandatory":true,"title":"When the encryption scope was last modified","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Encryption scope name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"requireInfrastructureEncryption":{"name":"requireInfrastructureEncryption","type":"\u0004","is_mandatory":true,"title":"Whether infrastructure encryption is required","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Encryption source (\"Microsoft.Storage\" or \"Microsoft.KeyVault\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"State of the encryption scope (Enabled or Disabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Encryption scope type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage encryption scope","private":true,"min_provider_version":"13.3.3","defaults":"name source state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.fileProperties":{"id":"azure.subscription.storageService.account.fileProperties","fields":{"protocolSettings":{"name":"protocolSettings","type":"\u001bazure.subscription.storageService.account.fileProperties.protocolSettings","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"protocolSettingsConfig":{"name":"protocolSettingsConfig","type":"\u001bazure.subscription.storageService.account.fileProperties.protocolSettingsConfig","title":"Azure Storage account file properties protocol settings","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"shareDeleteRetentionPolicyConfig":{"name":"shareDeleteRetentionPolicyConfig","type":"\u001bazure.subscription.storageService.account.fileProperties.shareDeleteRetentionPolicyConfig","title":"Azure Storage account file properties share delete retention policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"is_extension":true,"min_provider_version":"11.4.24"},"azure.subscription.storageService.account.fileProperties.protocolSettings":{"id":"azure.subscription.storageService.account.fileProperties.protocolSettings","fields":{"smbConfig":{"name":"smbConfig","type":"\u001bazure.subscription.storageService.account.fileProperties.protocolSettings.smbConfig","title":"Azure Storage account file properties protocol settings SMB","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"is_extension":true},"azure.subscription.storageService.account.fileProperties.protocolSettings.smbConfig":{"id":"azure.subscription.storageService.account.fileProperties.protocolSettings.smbConfig","name":"azure.subscription.storageService.account.fileProperties.protocolSettings.smbConfig","fields":{"authenticationMethods":{"name":"authenticationMethods","type":"\u0007","is_mandatory":true,"title":"Supported authentication methods (e.g., \"NTLMv2;Kerberos\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"channelEncryption":{"name":"channelEncryption","type":"\u0007","is_mandatory":true,"title":"Supported channel encryption methods (e.g., \"AES-128-CCM;AES-128-GCM;AES-256-GCM\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kerberosTicketEncryption":{"name":"kerberosTicketEncryption","type":"\u0007","is_mandatory":true,"title":"Supported Kerberos ticket encryption methods (e.g., \"RC4-HMAC;AES-256\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"versions":{"name":"versions","type":"\u0007","is_mandatory":true,"title":"Supported SMB versions (e.g., \"SMB3.0;SMB3.1.1\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account file properties protocol settings SMB","private":true,"min_provider_version":"11.4.24","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.fileProperties.protocolSettingsConfig":{"id":"azure.subscription.storageService.account.fileProperties.protocolSettingsConfig","name":"azure.subscription.storageService.account.fileProperties.protocolSettingsConfig","fields":{"smb":{"name":"smb","type":"\u001bazure.subscription.storageService.account.fileProperties.protocolSettings.smbConfig","is_mandatory":true,"title":"SMB protocol settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account file properties protocol settings","private":true,"min_provider_version":"11.4.24","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.fileProperties.shareDeleteRetentionPolicyConfig":{"id":"azure.subscription.storageService.account.fileProperties.shareDeleteRetentionPolicyConfig","name":"azure.subscription.storageService.account.fileProperties.shareDeleteRetentionPolicyConfig","fields":{"days":{"name":"days","type":"\u0005","is_mandatory":true,"title":"Retention period in days for deleted file shares","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether share delete retention is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account file properties share delete retention policy","private":true,"min_provider_version":"11.4.24","defaults":"enabled days","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.filePropertiesConfig":{"id":"azure.subscription.storageService.account.filePropertiesConfig","name":"azure.subscription.storageService.account.filePropertiesConfig","fields":{"protocolSettings":{"name":"protocolSettings","type":"\u001bazure.subscription.storageService.account.fileProperties.protocolSettingsConfig","is_mandatory":true,"title":"Protocol settings for file service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"shareDeleteRetentionPolicy":{"name":"shareDeleteRetentionPolicy","type":"\u001bazure.subscription.storageService.account.fileProperties.shareDeleteRetentionPolicyConfig","is_mandatory":true,"title":"File share delete retention policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account file properties","private":true,"min_provider_version":"11.4.24","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.fileShare":{"id":"azure.subscription.storageService.account.fileShare","name":"azure.subscription.storageService.account.fileShare","fields":{"accessTier":{"name":"accessTier","type":"\u0007","is_mandatory":true,"title":"Access tier (\"TransactionOptimized\", \"Hot\", \"Cool\", \"Premium\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"accessTierChangeTime":{"name":"accessTierChangeTime","type":"\t","is_mandatory":true,"title":"Time the access tier was last changed","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"accessTierStatus":{"name":"accessTierStatus","type":"\u0007","is_mandatory":true,"title":"Status of any pending access-tier transition; empty when none","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"deleted":{"name":"deleted","type":"\u0004","is_mandatory":true,"title":"Whether the share is in the soft-deleted state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"deletedTime":{"name":"deletedTime","type":"\t","is_mandatory":true,"title":"When the share was soft-deleted, if applicable","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabledProtocols":{"name":"enabledProtocols","type":"\u0007","is_mandatory":true,"title":"Protocols enabled on the share (\"SMB\" or \"NFS\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastModifiedTime":{"name":"lastModifiedTime","type":"\t","is_mandatory":true,"title":"Last modification time","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"leaseDuration":{"name":"leaseDuration","type":"\u0007","is_mandatory":true,"title":"Lease duration (\"Infinite\", \"Fixed\"); empty when unleased","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"leaseState":{"name":"leaseState","type":"\u0007","is_mandatory":true,"title":"Lease state (\"available\", \"leased\", \"expired\", \"breaking\", \"broken\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"leaseStatus":{"name":"leaseStatus","type":"\u0007","is_mandatory":true,"title":"Lease status (\"locked\", \"unlocked\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metadata":{"name":"metadata","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"User-defined metadata","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Share name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisionedBandwidthMibps":{"name":"provisionedBandwidthMibps","type":"\u0005","is_mandatory":true,"title":"Provisioned bandwidth in MiB/s (Files Provisioned v2 only); zero otherwise","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisionedIops":{"name":"provisionedIops","type":"\u0005","is_mandatory":true,"title":"Provisioned IOPS (Files Provisioned v2 only); zero otherwise","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rootSquash":{"name":"rootSquash","type":"\u0007","is_mandatory":true,"title":"NFS root squash policy (\"NoRootSquash\", \"RootSquash\", \"AllSquash\"); empty for SMB","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"shareQuotaGiB":{"name":"shareQuotaGiB","type":"\u0005","is_mandatory":true,"title":"Provisioned share quota in GiB","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"signedIdentifierCount":{"name":"signedIdentifierCount","type":"\u0005","is_mandatory":true,"title":"Number of stored access policies (signed identifiers) on the share","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"snapshotTime":{"name":"snapshotTime","type":"\t","is_mandatory":true,"title":"Snapshot timestamp; empty when this is the live share","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage file share","desc":" Examine a single Azure Files share hosted on a storage account. Selectable by ARM id; fields cover the share protocol (SMB or NFS), access tier, provisioned quota, and the presence of stored access policies (signed identifiers).","private":true,"min_provider_version":"13.10.2","defaults":"name enabledProtocols accessTier shareQuotaGiB","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.localUser":{"id":"azure.subscription.storageService.account.localUser","name":"azure.subscription.storageService.account.localUser","fields":{"allowAclAuthorization":{"name":"allowAclAuthorization","type":"\u0004","is_mandatory":true,"title":"Whether ACL authorization is allowed for this user","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"groupId":{"name":"groupId","type":"\u0005","is_mandatory":true,"title":"Numeric POSIX group ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasSharedKey":{"name":"hasSharedKey","type":"\u0004","is_mandatory":true,"title":"Whether shared-key access exists","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasSshKey":{"name":"hasSshKey","type":"\u0004","is_mandatory":true,"title":"Whether SSH key authentication exists","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasSshPassword":{"name":"hasSshPassword","type":"\u0004","is_mandatory":true,"title":"Whether SSH password authentication exists","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"homeDirectory":{"name":"homeDirectory","type":"\u0007","is_mandatory":true,"title":"Optional home directory (constrains the file system path the user sees)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Local user resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isNFSv3Enabled":{"name":"isNFSv3Enabled","type":"\u0004","is_mandatory":true,"title":"Whether the user is enabled for NFSv3 access","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Local user name (used as SFTP username)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"permissionScopes":{"name":"permissionScopes","type":"\u0019\n","is_mandatory":true,"title":"Permission scopes (each: { permissions, service, resourceName })","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"userId":{"name":"userId","type":"\u0005","is_mandatory":true,"title":"Numeric POSIX user ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Local user configured on a storage account for SFTP/SSH access","private":true,"min_provider_version":"13.5.1","defaults":"id name hasSshPassword hasSshKey hasSharedKey","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.managementPolicy":{"id":"azure.subscription.storageService.account.managementPolicy","name":"azure.subscription.storageService.account.managementPolicy","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Management policy ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"lastModifiedTime":{"name":"lastModifiedTime","type":"\t","is_mandatory":true,"title":"When the policy was last modified","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Management policy name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rule":{"name":"rule","type":"\u001bazure.subscription.storageService.account.managementPolicy.rule","title":"Azure Storage lifecycle management policy rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"rules":{"name":"rules","type":"\u0019\u001bazure.subscription.storageService.account.managementPolicy.rule","is_mandatory":true,"title":"Lifecycle management rules","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Management policy type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage lifecycle management policy","private":true,"min_provider_version":"13.3.3","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.managementPolicy.rule":{"id":"azure.subscription.storageService.account.managementPolicy.rule","name":"azure.subscription.storageService.account.managementPolicy.rule","fields":{"baseBlobActions":{"name":"baseBlobActions","type":"\n","is_mandatory":true,"title":"Base blob actions (tiering and deletion thresholds)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the rule is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"filterBlobTypes":{"name":"filterBlobTypes","type":"\u0019\u0007","is_mandatory":true,"title":"Blob types the rule applies to (blockBlob, appendBlob)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"filterPrefixMatch":{"name":"filterPrefixMatch","type":"\u0019\u0007","is_mandatory":true,"title":"Prefix patterns for matching","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Unique ID (policyId + rule name)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Rule name (case-sensitive, unique within policy)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"snapshotActions":{"name":"snapshotActions","type":"\n","is_mandatory":true,"title":"Snapshot actions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Rule type (always \"Lifecycle\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"versionActions":{"name":"versionActions","type":"\n","is_mandatory":true,"title":"Version actions","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage lifecycle management policy rule","private":true,"min_provider_version":"13.3.3","defaults":"name enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.objectReplicationPolicy":{"id":"azure.subscription.storageService.account.objectReplicationPolicy","name":"azure.subscription.storageService.account.objectReplicationPolicy","fields":{"destinationAccount":{"name":"destinationAccount","type":"\u0007","is_mandatory":true,"title":"Destination account name or full resource id","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabledTime":{"name":"enabledTime","type":"\t","is_mandatory":true,"title":"When the policy was enabled on the source account","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Policy name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"policyId":{"name":"policyId","type":"\u0007","is_mandatory":true,"title":"Auto-generated unique policy id","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"rules":{"name":"rules","type":"\u0019\n","is_mandatory":true,"title":"Replication rules. Each entry has {ruleId, sourceContainer, destinationContainer, prefixMatch, minCreationTime}.","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sourceAccount":{"name":"sourceAccount","type":"\u0007","is_mandatory":true,"title":"Source account name or full resource id","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage object replication policy","desc":" Examine an object replication policy linking a source storage account to a destination account. Selectable by ARM id; fields expose the source/destination pair, when replication was enabled, and the container-to-container rules with optional prefix and creation-time filters.","private":true,"min_provider_version":"13.10.2","defaults":"name sourceAccount destinationAccount enabledTime","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.privateEndpointConnection":{"id":"azure.subscription.storageService.account.privateEndpointConnection","name":"azure.subscription.storageService.account.privateEndpointConnection","fields":{"actionsRequired":{"name":"actionsRequired","type":"\u0007","is_mandatory":true,"title":"Action required by the consumer to maintain the connection (\"None\" / a description string)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Reason for the current status","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ARM resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Connection name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointId":{"name":"privateEndpointId","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the consumer-side private endpoint, when present","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the connection","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Connection status (\"Approved\", \"Pending\", \"Rejected\", \"Disconnected\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage private endpoint connection","desc":" Examine a private endpoint connection on a storage account. Selectable by ARM id; fields expose the consumer-side endpoint reference and the approval status governing traffic between consumer and storage.","private":true,"min_provider_version":"13.10.2","defaults":"name status provisioningState","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.queue":{"id":"azure.subscription.storageService.account.queue","name":"azure.subscription.storageService.account.queue","fields":{"approximateMessageCount":{"name":"approximateMessageCount","type":"\u0005","title":"Approximate number of messages in the queue (fetched on demand via Get)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Queue resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metadata":{"name":"metadata","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Application-defined name/value pairs stored on the queue","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Queue name","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account queue","private":true,"min_provider_version":"13.10.2","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.service":{"id":"azure.subscription.storageService.account.service","fields":{"blobProperties":{"name":"blobProperties","type":"\u001bazure.subscription.storageService.account.service.blobProperties","title":"Azure Storage account blob service properties","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"properties":{"name":"properties","type":"\u001bazure.subscription.storageService.account.service.properties","title":"Azure Storage account service properties","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"is_extension":true},"azure.subscription.storageService.account.service.blobProperties":{"id":"azure.subscription.storageService.account.service.blobProperties","name":"azure.subscription.storageService.account.service.blobProperties","fields":{"hourMetrics":{"name":"hourMetrics","type":"\u001bazure.subscription.storageService.account.service.properties.metrics","is_mandatory":true,"title":"Hourly metrics collection settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isVersioningEnabled":{"name":"isVersioningEnabled","type":"\u0004","is_mandatory":true,"title":"Whether versioning is enabled for blobs","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"logging":{"name":"logging","type":"\u001bazure.subscription.storageService.account.service.properties.logging","is_mandatory":true,"title":"Storage analytics logging configuration (read, write, delete operations)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minuteMetrics":{"name":"minuteMetrics","type":"\u001bazure.subscription.storageService.account.service.properties.metrics","is_mandatory":true,"title":"Minute metrics collection settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account blob service properties","private":true,"min_provider_version":"11.4.23","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.service.properties":{"id":"azure.subscription.storageService.account.service.properties","name":"azure.subscription.storageService.account.service.properties","fields":{"hourMetrics":{"name":"hourMetrics","type":"\u001bazure.subscription.storageService.account.service.properties.metrics","is_mandatory":true,"title":"Hourly metrics collection settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the service","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"logging":{"name":"logging","type":"\u001bazure.subscription.storageService.account.service.properties.logging","is_mandatory":true,"title":"Storage analytics logging configuration (read, write, delete operations)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metrics":{"name":"metrics","type":"\u001bazure.subscription.storageService.account.service.properties.metrics","title":"Azure Storage account service properties metrics","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"minuteMetrics":{"name":"minuteMetrics","type":"\u001bazure.subscription.storageService.account.service.properties.metrics","is_mandatory":true,"title":"Minute metrics collection settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionPolicy":{"name":"retentionPolicy","type":"\u001bazure.subscription.storageService.account.service.properties.retentionPolicy","title":"Azure Storage account service properties retention policy","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true}},"title":"Azure Storage account service properties","private":true,"min_provider_version":"9.0.1","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.service.properties.logging":{"id":"azure.subscription.storageService.account.service.properties.logging","name":"azure.subscription.storageService.account.service.properties.logging","fields":{"delete":{"name":"delete","type":"\u0004","is_mandatory":true,"title":"Whether delete requests are logged","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the logging configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"read":{"name":"read","type":"\u0004","is_mandatory":true,"title":"Whether read requests are logged","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionPolicy":{"name":"retentionPolicy","type":"\u001bazure.subscription.storageService.account.service.properties.retentionPolicy","is_mandatory":true,"title":"Retention policy for the logging metrics","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Logging version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"write":{"name":"write","type":"\u0004","is_mandatory":true,"title":"Whether write requests are logged","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account service properties logging","private":true,"min_provider_version":"9.0.1","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.service.properties.metrics":{"id":"azure.subscription.storageService.account.service.properties.metrics","name":"azure.subscription.storageService.account.service.properties.metrics","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the metrics are enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the metrics","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"includeAPIs":{"name":"includeAPIs","type":"\u0004","is_mandatory":true,"title":"Whether metrics generate summary statistics for called API operations","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionPolicy":{"name":"retentionPolicy","type":"\u001bazure.subscription.storageService.account.service.properties.retentionPolicy","is_mandatory":true,"title":"Retention policy for the metrics","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Version of the metrics","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account service properties metrics","private":true,"min_provider_version":"9.0.1","defaults":"id includeAPIs enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.service.properties.retentionPolicy":{"id":"azure.subscription.storageService.account.service.properties.retentionPolicy","name":"azure.subscription.storageService.account.service.properties.retentionPolicy","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether a retention policy is enabled for the Azure Storage","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the retention policy","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"retentionDays":{"name":"retentionDays","type":"\u0005","is_mandatory":true,"title":"Number of days that metrics or logging data is retained","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account service properties retention policy","private":true,"min_provider_version":"9.0.1","defaults":"id","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.storageService.account.table":{"id":"azure.subscription.storageService.account.table","name":"azure.subscription.storageService.account.table","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Table resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Table name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"signedIdentifiers":{"name":"signedIdentifiers","type":"\u0019\n","is_mandatory":true,"title":"Stored access policies (SAS) on the table; each entry has id, permission, startTime, expiryTime","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Storage account table","private":true,"min_provider_version":"13.10.2","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.synapseService":{"id":"azure.subscription.synapseService","name":"azure.subscription.synapseService","fields":{"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"workspace":{"name":"workspace","type":"\u001bazure.subscription.synapseService.workspace","title":"Azure Synapse Analytics workspace","desc":" Examine an Azure Synapse Analytics workspace. Surfaces the workspace's default Data Lake Storage account, the SQL administrator login, the managed virtual network configuration, the public network access setting, customer-managed-key encryption settings, identity assignments, the `azureADOnlyAuthentication` flag, the workspace repository for Git integration, and the configured trusted-service bypass list.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"workspaces":{"name":"workspaces","type":"\u0019\u001bazure.subscription.synapseService.workspace","title":"List of Synapse workspaces","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Synapse Analytics service","private":true,"min_provider_version":"13.3.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.synapseService.workspace":{"id":"azure.subscription.synapseService.workspace","name":"azure.subscription.synapseService.workspace","fields":{"azureADOnlyAuthentication":{"name":"azureADOnlyAuthentication","type":"\u0004","is_mandatory":true,"title":"Whether Azure AD-only authentication is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"encryption":{"name":"encryption","type":"\n","is_mandatory":true,"title":"Encryption configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Full resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"Identity configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Location of the workspace","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedResourceGroupName":{"name":"managedResourceGroupName","type":"\u0007","is_mandatory":true,"title":"Name of the managed resource group","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"managedVirtualNetwork":{"name":"managedVirtualNetwork","type":"\u0007","is_mandatory":true,"title":"Whether managed virtual network is enabled (set to \"default\" when enabled)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the workspace","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Unmodeled resource properties returned by the Azure API","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access setting (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sqlAdministratorLogin":{"name":"sqlAdministratorLogin","type":"\u0007","is_mandatory":true,"title":"SQL administrator login","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Tags for the workspace","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"trustedServiceBypassEnabled":{"name":"trustedServiceBypassEnabled","type":"\u0004","is_mandatory":true,"title":"Whether trusted service bypass is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Synapse Analytics workspace","desc":" Examine an Azure Synapse Analytics workspace. Surfaces the workspace's default Data Lake Storage account, the SQL administrator login, the managed virtual network configuration, the public network access setting, customer-managed-key encryption settings, identity assignments, the `azureADOnlyAuthentication` flag, the workspace repository for Git integration, and the configured trusted-service bypass list.","min_provider_version":"13.3.0","defaults":"name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService":{"id":"azure.subscription.webService","name":"azure.subscription.webService","fields":{"appRuntimeStack":{"name":"appRuntimeStack","type":"\u001bazure.subscription.webService.appRuntimeStack","title":"Azure Web App runtime stack","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"appServicePlan":{"name":"appServicePlan","type":"\u001bazure.subscription.webService.appServicePlan","title":"Azure App Service Plan","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"appServicePlans":{"name":"appServicePlans","type":"\u0019\u001bazure.subscription.webService.appServicePlan","title":"List of App Service plans","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"apps":{"name":"apps","type":"\u0019\u001bazure.subscription.webService.appsite","title":"List of web apps","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"appsite":{"name":"appsite","type":"\u001bazure.subscription.webService.appsite","title":"Azure App Service site","desc":" Examine an App Service / Function App / Web App site. Surfaces the app's runtime stack, SKU and App Service Plan binding, the `siteConfig` (always-on, HTTP/2, TLS minimum version, FTPS/HTTP-only state, IP restrictions, CORS), HTTPS-only flag, client-cert and client-affinity settings, the configured custom hostnames and SSL bindings, identity assignments, the deployed `slots()`, app settings and connection strings, the linked storage accounts, and the `webDiagnostics` (Application Insights / log streaming) configuration.","provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"appsiteauthsettings":{"name":"appsiteauthsettings","type":"\u001bazure.subscription.webService.appsiteauthsettings","title":"Azure AppSite authentication settings","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"appsiteconfig":{"name":"appsiteconfig","type":"\u001bazure.subscription.webService.appsiteconfig","title":"Azure AppSite config","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"appslot":{"name":"appslot","type":"\u001bazure.subscription.webService.appslot","title":"Azure Web app deployment slot","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"availableRuntimes":{"name":"availableRuntimes","type":"\u0019\u001bazure.subscription.webService.appRuntimeStack","title":"Available runtimes","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"certificate":{"name":"certificate","type":"\u001bazure.subscription.webService.certificate","title":"Azure App Service Certificate","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"certificates":{"name":"certificates","type":"\u0019\u001bazure.subscription.webService.certificate","title":"List of certificates","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"function":{"name":"function","type":"\u001bazure.subscription.webService.function","title":"Azure function","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"hostingEnvironment":{"name":"hostingEnvironment","type":"\u001bazure.subscription.webService.hostingEnvironment","title":"Azure App Service Hosting Environment","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"hostingEnvironments":{"name":"hostingEnvironments","type":"\u0019\u001bazure.subscription.webService.hostingEnvironment","title":"List of hosting environments","min_provider_version":"11.4.4","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"staticSite":{"name":"staticSite","type":"\u001bazure.subscription.webService.staticSite","title":"Azure Static Web App","desc":" Examine an Azure Static Web App — a managed service that hosts static content (HTML/CSS/JS), serverless API routes, and global content distribution from a source repository (typically GitHub or Azure DevOps). Surfaces the SKU and tier (Free, Standard, Dedicated), the default and custom hostnames, the source repository URL and branch, the publishing provider, the public network access toggle, the `allowConfigFileUpdates` flag, the staging-environment policy (preview deployments per pull request), the enterprise-grade CDN status, the identity assignment used for Key Vault references, and counts for private endpoint connections, user-provided function apps, linked backends, and database connections.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"staticSites":{"name":"staticSites","type":"\u0019\u001bazure.subscription.webService.staticSite","title":"List of static web apps","min_provider_version":"13.10.2","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subscriptionId":{"name":"subscriptionId","type":"\u0007","is_mandatory":true,"title":"Subscription identifier","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Web","private":true,"min_provider_version":"9.0.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appRuntimeStack":{"id":"azure.subscription.webService.appRuntimeStack","name":"azure.subscription.webService.appRuntimeStack","fields":{"autoUpdate":{"name":"autoUpdate","type":"\u0004","is_mandatory":true,"title":"Whether the stack version is auto-updated","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"deprecated":{"name":"deprecated","type":"\u0004","is_mandatory":true,"title":"Whether the stack is deprecated","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"endOfLifeDate":{"name":"endOfLifeDate","type":"\t","is_mandatory":true,"title":"End-of-life date for the minor version","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hidden":{"name":"hidden","type":"\u0004","is_mandatory":true,"title":"Whether the stack is hidden","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"majorVersion":{"name":"majorVersion","type":"\u0007","is_mandatory":true,"title":"Web App stack major version name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minorVersion":{"name":"minorVersion","type":"\u0007","is_mandatory":true,"title":"Web App stack minor version name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Web App stack name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"preferredOs":{"name":"preferredOs","type":"\u0007","is_mandatory":true,"title":"Web App stack preferred OS","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"runtimeVersion":{"name":"runtimeVersion","type":"\u0007","is_mandatory":true,"title":"Web App runtime version","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Web App runtime stack","private":true,"min_provider_version":"11.3.52","defaults":"preferredOs runtimeVersion","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appServicePlan":{"id":"azure.subscription.webService.appServicePlan","name":"azure.subscription.webService.appServicePlan","fields":{"elasticScaleEnabled":{"name":"elasticScaleEnabled","type":"\u0004","is_mandatory":true,"title":"Whether elastic scale is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"geoRegion":{"name":"geoRegion","type":"\u0007","is_mandatory":true,"title":"Geographic region of the plan","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"App Service plan ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"App Service plan kind (e.g., \"linux\", \"app\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"App Service plan location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maximumNumberOfWorkers":{"name":"maximumNumberOfWorkers","type":"\u0005","is_mandatory":true,"title":"Maximum number of workers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"App Service plan name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"numberOfSites":{"name":"numberOfSites","type":"\u0005","is_mandatory":true,"title":"Number of web apps assigned to this plan","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"perSiteScaling":{"name":"perSiteScaling","type":"\u0004","is_mandatory":true,"title":"Whether per-site scaling is enabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"App Service plan properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"reserved":{"name":"reserved","type":"\u0004","is_mandatory":true,"title":"Whether the plan is for Linux apps","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sku":{"name":"sku","type":"\n","is_mandatory":true,"title":"SKU description (name, tier, size, family, capacity)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Current status of the plan. Possible values: \"Ready\", \"Pending\", \"Creating\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"App Service plan tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundant":{"name":"zoneRedundant","type":"\u0004","is_mandatory":true,"title":"Whether the plan is zone-redundant","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure App Service Plan","private":true,"min_provider_version":"11.4.32","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appsite":{"id":"azure.subscription.webService.appsite","name":"azure.subscription.webService.appsite","fields":{"applicationSettings":{"name":"applicationSettings","type":"\n","title":"App site application settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"authenticationSettings":{"name":"authenticationSettings","type":"\u001bazure.subscription.webService.appsiteauthsettings","title":"App site authentication settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"basicPublishingCredentialsPolicies":{"name":"basicPublishingCredentialsPolicies","type":"\u001bazure.subscription.webService.appsite.basicPublishingCredentialsPolicies","title":"Azure AppSite basic publishing credentials policies","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"clientCertEnabled":{"name":"clientCertEnabled","type":"\u0004","is_mandatory":true,"title":"Whether client certificate authentication is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"clientCertMode":{"name":"clientCertMode","type":"\u0007","is_mandatory":true,"title":"Client certificate mode (Required, Optional, OptionalInteractiveUser)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"configuration":{"name":"configuration","type":"\u001bazure.subscription.webService.appsiteconfig","title":"App site configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionSettings":{"name":"connectionSettings","type":"\n","title":"App site connection settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultHostName":{"name":"defaultHostName","type":"\u0007","is_mandatory":true,"title":"Default hostname assigned to the app (e.g., \"my-app.azurewebsites.net\")","min_provider_version":"13.4.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diagnosticSettings":{"name":"diagnosticSettings","type":"\u0019\u001bazure.subscription.monitorService.diagnosticsetting","title":"Diagnostic settings for the web app site","min_provider_version":"11.3.0","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the app is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enabledHostNames":{"name":"enabledHostNames","type":"\u0019\u0007","is_mandatory":true,"title":"All enabled hostnames for the app, including custom domains","min_provider_version":"13.4.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"endToEndEncryptionEnabled":{"name":"endToEndEncryptionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether end-to-end encryption is enabled between FrontEnd and Worker","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ftp":{"name":"ftp","type":"\u001bazure.subscription.webService.appsite.basicPublishingCredentialsPolicies","title":"FTP publishing method policies","min_provider_version":"11.3.31","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"functions":{"name":"functions","type":"\u0019\u001bazure.subscription.webService.function","title":"List of functions for the web app site","min_provider_version":"11.3.3","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostNameBinding":{"name":"hostNameBinding","type":"\u001bazure.subscription.webService.appsite.hostNameBinding","title":"Azure App Service Hostname Binding","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"hostNameBindings":{"name":"hostNameBindings","type":"\u0019\u001bazure.subscription.webService.appsite.hostNameBinding","title":"Hostname bindings for the web app site","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"httpsOnly":{"name":"httpsOnly","type":"\u0004","is_mandatory":true,"title":"Whether the app requires HTTPS only","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"App site ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"App site identity","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identityType":{"name":"identityType","type":"\u0007","is_mandatory":true,"title":"Managed identity type (\"None\", \"SystemAssigned\", \"UserAssigned\", \"SystemAssigned,UserAssigned\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipMode":{"name":"ipMode","type":"\u0007","is_mandatory":true,"title":"IP address mode for the app (\"IPv4\", \"IPv4AndIPv6\", \"IPv6\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyVaultReferenceIdentity":{"name":"keyVaultReferenceIdentity","type":"\u0007","is_mandatory":true,"title":"ARM resource ID of the user-assigned identity used to fetch Key Vault references in app settings (empty when system-assigned identity is used)","min_provider_version":"13.5.1","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"App site kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"App site location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metadata":{"name":"metadata","type":"\n","title":"App site metadata","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"App site name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"outboundVnetRouting":{"name":"outboundVnetRouting","type":"\u001bazure.subscription.webService.appsite.outboundVnetRouting","is_mandatory":true,"title":"Outbound VNet routing configuration for the app","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnections":{"name":"privateEndpointConnections","type":"\u0019\u001bazure.subscription.privateEndpointConnection","title":"Private endpoint connections for the web app site","min_provider_version":"11.4.4","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"App site properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Whether public network access is enabled (\"Enabled\" or \"Disabled\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"redundancyMode":{"name":"redundancyMode","type":"\u0007","is_mandatory":true,"title":"Redundancy mode for the app (\"None\", \"Manual\", \"Failover\", \"ActiveActive\", \"GeoRedundant\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scm":{"name":"scm","type":"\u001bazure.subscription.webService.appsite.basicPublishingCredentialsPolicies","title":"SCM publishing method policies","min_provider_version":"11.3.31","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"slots":{"name":"slots","type":"\u0019\u001bazure.subscription.webService.appslot","title":"Deployment slots for the web app site","min_provider_version":"11.3.85","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sshEnabled":{"name":"sshEnabled","type":"\u0004","is_mandatory":true,"title":"Whether SSH access is enabled on the app","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"stack":{"name":"stack","type":"\n","title":"App site stack","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Current state of the app","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"App site tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"App site type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetworkConnection":{"name":"virtualNetworkConnection","type":"\u001bazure.subscription.webService.appsite.virtualNetworkConnection","title":"Azure App Service Virtual Network Connection","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"virtualNetworkConnections":{"name":"virtualNetworkConnections","type":"\u0019\u001bazure.subscription.webService.appsite.virtualNetworkConnection","title":"Virtual network connections for the web app site","min_provider_version":"11.4.32","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure App Service site","desc":" Examine an App Service / Function App / Web App site. Surfaces the app's runtime stack, SKU and App Service Plan binding, the `siteConfig` (always-on, HTTP/2, TLS minimum version, FTPS/HTTP-only state, IP restrictions, CORS), HTTPS-only flag, client-cert and client-affinity settings, the configured custom hostnames and SSL bindings, identity assignments, the deployed `slots()`, app settings and connection strings, the linked storage accounts, and the `webDiagnostics` (Application Insights / log streaming) configuration.","min_provider_version":"9.0.1","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appsite.basicPublishingCredentialsPolicies":{"id":"azure.subscription.webService.appsite.basicPublishingCredentialsPolicies","name":"azure.subscription.webService.appsite.basicPublishingCredentialsPolicies","fields":{"allow":{"name":"allow","type":"\u0004","is_mandatory":true,"title":"Whether to allow access to a publishing method","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Resource name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure AppSite basic publishing credentials policies","private":true,"min_provider_version":"11.3.31","defaults":"id allow","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appsite.hostNameBinding":{"id":"azure.subscription.webService.appsite.hostNameBinding","name":"azure.subscription.webService.appsite.hostNameBinding","fields":{"hostNameType":{"name":"hostNameType","type":"\u0007","is_mandatory":true,"title":"Hostname type. Possible values: \"Verified\", \"Managed\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Hostname binding ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Hostname binding name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"sslState":{"name":"sslState","type":"\u0007","is_mandatory":true,"title":"SSL state. Possible values: \"Disabled\", \"SniEnabled\", \"IpBasedEnabled\"","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"thumbprint":{"name":"thumbprint","type":"\u0007","is_mandatory":true,"title":"SSL certificate thumbprint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualIP":{"name":"virtualIP","type":"\u0007","is_mandatory":true,"title":"Virtual IP address assigned to the hostname","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure App Service Hostname Binding","private":true,"min_provider_version":"11.4.32","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appsite.outboundVnetRouting":{"id":"azure.subscription.webService.appsite.outboundVnetRouting","name":"azure.subscription.webService.appsite.outboundVnetRouting","fields":{"allTrafficEnabled":{"name":"allTrafficEnabled","type":"\u0004","is_mandatory":true,"title":"Whether all outbound traffic is routed through VNet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"applicationTrafficEnabled":{"name":"applicationTrafficEnabled","type":"\u0004","is_mandatory":true,"title":"Whether application traffic is routed through VNet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"backupRestoreTrafficEnabled":{"name":"backupRestoreTrafficEnabled","type":"\u0004","is_mandatory":true,"title":"Whether backup/restore traffic is routed through VNet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"contentShareTrafficEnabled":{"name":"contentShareTrafficEnabled","type":"\u0004","is_mandatory":true,"title":"Whether content share traffic is routed through VNet","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Outbound VNet routing ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"imagePullTrafficEnabled":{"name":"imagePullTrafficEnabled","type":"\u0004","is_mandatory":true,"title":"Whether container image pull traffic is routed through VNet","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Web app site outbound VNet routing configuration","private":true,"min_provider_version":"13.1.8","defaults":"allTrafficEnabled","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appsite.virtualNetworkConnection":{"id":"azure.subscription.webService.appsite.virtualNetworkConnection","name":"azure.subscription.webService.appsite.virtualNetworkConnection","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VNet connection ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"isSwift":{"name":"isSwift","type":"\u0004","is_mandatory":true,"title":"Whether this is a Swift connection","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VNet connection name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"resyncRequired":{"name":"resyncRequired","type":"\u0004","is_mandatory":true,"title":"Whether a resync is required","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vnetResourceId":{"name":"vnetResourceId","type":"\u0007","is_mandatory":true,"title":"Resource ID of the connected VNet","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure App Service Virtual Network Connection","private":true,"min_provider_version":"11.4.32","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appsiteauthsettings":{"id":"azure.subscription.webService.appsiteauthsettings","name":"azure.subscription.webService.appsiteauthsettings","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Auth settings ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Auth settings kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Auth settings name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Auth settings properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Auth settings type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure AppSite authentication settings","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appsiteconfig":{"id":"azure.subscription.webService.appsiteconfig","name":"azure.subscription.webService.appsiteconfig","fields":{"alwaysOn":{"name":"alwaysOn","type":"\u0004","is_mandatory":true,"title":"Whether the app should always be loaded","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ftpsState":{"name":"ftpsState","type":"\u0007","is_mandatory":true,"title":"FTP state for the site (AllAllowed, FtpsOnly, Disabled)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"http20Enabled":{"name":"http20Enabled","type":"\u0004","is_mandatory":true,"title":"Whether HTTP 2.0 is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Appsite config ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipSecurityRestriction":{"name":"ipSecurityRestriction","type":"\u001bazure.subscription.webService.appsiteconfig.ipSecurityRestriction","title":"Azure AppSite config IP security restriction rule","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/azure","is_implicit_resource":true},"ipSecurityRestrictions":{"name":"ipSecurityRestrictions","type":"\u0019\u001bazure.subscription.webService.appsiteconfig.ipSecurityRestriction","title":"IP security restrictions for the main site","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipSecurityRestrictionsDefaultAction":{"name":"ipSecurityRestrictionsDefaultAction","type":"\u0007","title":"Default action for IP security restrictions when no rule matches (\"Allow\" or \"Deny\")","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Appsite config kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minTlsCipherSuite":{"name":"minTlsCipherSuite","type":"\u0007","is_mandatory":true,"title":"Minimum strength TLS cipher suite allowed for the application","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"minTlsVersion":{"name":"minTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version for the site (1.0, 1.1, 1.2, 1.3)","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Appsite config name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Appsite config properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"remoteDebuggingEnabled":{"name":"remoteDebuggingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether remote debugging is enabled","min_provider_version":"11.4.28","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scmIpSecurityRestrictions":{"name":"scmIpSecurityRestrictions","type":"\u0019\u001bazure.subscription.webService.appsiteconfig.ipSecurityRestriction","title":"IP security restrictions for the SCM/Kudu site","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scmMinTlsVersion":{"name":"scmMinTlsVersion","type":"\u0007","is_mandatory":true,"title":"Minimum TLS version for the SCM/Kudu site (1.0, 1.1, 1.2, 1.3)","min_provider_version":"13.1.8","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Appsite config type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure AppSite config","private":true,"min_provider_version":"9.0.1","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appsiteconfig.ipSecurityRestriction":{"id":"azure.subscription.webService.appsiteconfig.ipSecurityRestriction","name":"azure.subscription.webService.appsiteconfig.ipSecurityRestriction","fields":{"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action for the restriction rule (\"Allow\" or \"Deny\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Restriction rule description","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"headers":{"name":"headers","type":"\n","is_mandatory":true,"title":"HTTP headers for header-based restrictions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Restriction rule ID (config ID + index)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipAddress":{"name":"ipAddress","type":"\u0007","is_mandatory":true,"title":"IP address or CIDR range for the restriction","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Restriction rule name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Priority of the restriction rule (lower number = higher priority)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnetMask":{"name":"subnetMask","type":"\u0007","is_mandatory":true,"title":"Service tag for service tag-based restrictions","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tag":{"name":"tag","type":"\u0007","is_mandatory":true,"title":"Tag for the restriction rule (\"Default\", \"XffProxy\", \"ServiceTag\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"vnetSubnetResourceId":{"name":"vnetSubnetResourceId","type":"\u0007","is_mandatory":true,"title":"Virtual network subnet resource ID for VNet-based restrictions","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure AppSite config IP security restriction rule","private":true,"min_provider_version":"13.1.8","defaults":"name action ipAddress priority","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.appslot":{"id":"azure.subscription.webService.appslot","name":"azure.subscription.webService.appslot","fields":{"applicationSettings":{"name":"applicationSettings","type":"\n","title":"App slot application settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"authenticationSettings":{"name":"authenticationSettings","type":"\u001bazure.subscription.webService.appsiteauthsettings","title":"App slot authentication settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"configuration":{"name":"configuration","type":"\u001bazure.subscription.webService.appsiteconfig","title":"App slot configuration","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"connectionSettings":{"name":"connectionSettings","type":"\n","title":"App slot connection settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"diagnosticSettings":{"name":"diagnosticSettings","type":"\u0019\u001bazure.subscription.monitorService.diagnosticsetting","title":"App slot diagnostic settings","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ftp":{"name":"ftp","type":"\u001bazure.subscription.webService.appsite.basicPublishingCredentialsPolicies","title":"FTP publishing method policies for the slot","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"functions":{"name":"functions","type":"\u0019\u001bazure.subscription.webService.function","title":"List of functions for the app slot","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"App slot ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identity":{"name":"identity","type":"\n","is_mandatory":true,"title":"App slot identity","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"App slot kind","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"App slot location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"metadata":{"name":"metadata","type":"\n","title":"App slot metadata","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"App slot name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"parent":{"name":"parent","type":"\u001bazure.subscription.webService.appsite","title":"Parent web app site for this slot","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"App slot properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"scm":{"name":"scm","type":"\u001bazure.subscription.webService.appsite.basicPublishingCredentialsPolicies","title":"SCM publishing method policies for the slot","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"stack":{"name":"stack","type":"\n","title":"App slot stack","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"App slot tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"App slot type","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Web app deployment slot","private":true,"min_provider_version":"11.3.85","defaults":"id name location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.certificate":{"id":"azure.subscription.webService.certificate","name":"azure.subscription.webService.certificate","fields":{"expirationDate":{"name":"expirationDate","type":"\t","is_mandatory":true,"title":"Certificate expiration date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hostNames":{"name":"hostNames","type":"\u0019\u0007","is_mandatory":true,"title":"Hostnames the certificate applies to","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Certificate ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"issueDate":{"name":"issueDate","type":"\t","is_mandatory":true,"title":"Certificate issue date","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"issuer":{"name":"issuer","type":"\u0007","is_mandatory":true,"title":"Certificate issuer","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Certificate location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Certificate name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Certificate properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subjectName":{"name":"subjectName","type":"\u0007","is_mandatory":true,"title":"Certificate subject name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Certificate tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"thumbprint":{"name":"thumbprint","type":"\u0007","is_mandatory":true,"title":"Certificate thumbprint","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"valid":{"name":"valid","type":"\u0004","is_mandatory":true,"title":"Whether the certificate is valid","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure App Service Certificate","private":true,"min_provider_version":"11.4.32","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.function":{"id":"azure.subscription.webService.function","name":"azure.subscription.webService.function","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"ID of the function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Kind of function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Properties for the function","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Type of function","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure function","private":true,"min_provider_version":"11.3.3","defaults":"name type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.hostingEnvironment":{"id":"azure.subscription.webService.hostingEnvironment","name":"azure.subscription.webService.hostingEnvironment","fields":{"clusterSettings":{"name":"clusterSettings","type":"\u0019\n","is_mandatory":true,"title":"Custom settings for changing the behavior of the App Service Environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dedicatedHostCount":{"name":"dedicatedHostCount","type":"\u0005","is_mandatory":true,"title":"Dedicated Host Count","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"dnsSuffix":{"name":"dnsSuffix","type":"\u0007","is_mandatory":true,"title":"DNS suffix of the environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"frontEndScaleFactor":{"name":"frontEndScaleFactor","type":"\u0005","is_mandatory":true,"title":"Scale factor for front-ends","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"hasLinuxWorkers":{"name":"hasLinuxWorkers","type":"\u0004","is_mandatory":true,"title":"Whether the App Service Environment has Linux workers","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Environment ID","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"internalLoadBalancingMode":{"name":"internalLoadBalancingMode","type":"\u0007","is_mandatory":true,"title":"Specifies which endpoints to serve internally in the Virtual Network","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"ipsslAddressCount":{"name":"ipsslAddressCount","type":"\u0005","is_mandatory":true,"title":"Number of IP SSL addresses reserved for the App Service Environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Kind of resource (e.g., \"app,linux,container\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Environment location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"maximumNumberOfMachines":{"name":"maximumNumberOfMachines","type":"\u0005","is_mandatory":true,"title":"Maximum number of VMs in the environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"multiRoleCount":{"name":"multiRoleCount","type":"\u0005","is_mandatory":true,"title":"Number of front-end instances","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"multiSize":{"name":"multiSize","type":"\u0007","is_mandatory":true,"title":"Front-end VM size (e.g., \"Standard_D2d_v4\", \"Medium\", \"Large\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Environment name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"properties":{"name":"properties","type":"\n","is_mandatory":true,"title":"Environment properties","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provisioningState":{"name":"provisioningState","type":"\u0007","is_mandatory":true,"title":"Provisioning state of the environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of the environment","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"suspended":{"name":"suspended","type":"\u0004","is_mandatory":true,"title":"Whether the environment is suspended","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Environment tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Environment type","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"userWhitelistedIpRanges":{"name":"userWhitelistedIpRanges","type":"\u0019\u0007","is_mandatory":true,"title":"User added IP ranges to allow","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"virtualNetwork":{"name":"virtualNetwork","type":"\u001bazure.subscription.webService.hostingEnvironment.virtualNetwork","is_mandatory":true,"title":"Description of the Virtual Network","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"zoneRedundant":{"name":"zoneRedundant","type":"\u0004","is_mandatory":true,"title":"Whether the App Service Environment is zone-redundant","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure App Service Hosting Environment","private":true,"min_provider_version":"11.4.4","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.hostingEnvironment.virtualNetwork":{"id":"azure.subscription.webService.hostingEnvironment.virtualNetwork","name":"azure.subscription.webService.hostingEnvironment.virtualNetwork","fields":{"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID of the Virtual Network","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the Virtual Network","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"subnet":{"name":"subnet","type":"\u0007","is_mandatory":true,"title":"Subnet within the Virtual Network","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"Resource type of the Virtual Network","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Virtual network configuration for an App Service Environment","private":true,"min_provider_version":"11.4.4","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"azure.subscription.webService.staticSite":{"id":"azure.subscription.webService.staticSite","name":"azure.subscription.webService.staticSite","fields":{"allowConfigFileUpdates":{"name":"allowConfigFileUpdates","type":"\u0004","is_mandatory":true,"title":"Whether the staticwebapp.config.json file in the repo can update the runtime config","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"branch":{"name":"branch","type":"\u0007","is_mandatory":true,"title":"Target branch in the repository","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"contentDistributionEndpoint":{"name":"contentDistributionEndpoint","type":"\u0007","is_mandatory":true,"title":"Content distribution endpoint for the static site","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"customDomains":{"name":"customDomains","type":"\u0019\u0007","is_mandatory":true,"title":"Custom domains bound to the static site","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"databaseConnectionCount":{"name":"databaseConnectionCount","type":"\u0005","is_mandatory":true,"title":"Number of database connections bound to the static site","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"defaultHostname":{"name":"defaultHostname","type":"\u0007","is_mandatory":true,"title":"Default autogenerated hostname for the static site (e.g. \"happy-flower-12345.azurestaticapps.net\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"enterpriseGradeCdnStatus":{"name":"enterpriseGradeCdnStatus","type":"\u0007","is_mandatory":true,"title":"Enterprise-grade CDN status (\"Disabled\", \"Enabling\", \"Enabled\", \"Disabling\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Resource ID of the static web app","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"identityType":{"name":"identityType","type":"\u0007","is_mandatory":true,"title":"Identity type (\"None\", \"SystemAssigned\", \"UserAssigned\", or \"SystemAssigned, UserAssigned\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"keyVaultReferenceIdentity":{"name":"keyVaultReferenceIdentity","type":"\u0007","is_mandatory":true,"title":"User-assigned managed identity used for Key Vault reference authentication (empty when not configured)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"kind":{"name":"kind","type":"\u0007","is_mandatory":true,"title":"Resource kind (e.g. \"app\", \"functionapp\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"linkedBackendCount":{"name":"linkedBackendCount","type":"\u0005","is_mandatory":true,"title":"Number of linked backends bound to the static site","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"location":{"name":"location","type":"\u0007","is_mandatory":true,"title":"Resource location","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Static web app name","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"privateEndpointConnectionCount":{"name":"privateEndpointConnectionCount","type":"\u0005","is_mandatory":true,"title":"Number of private endpoint connections to the static site","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"provider":{"name":"provider","type":"\u0007","is_mandatory":true,"title":"Provider that submitted the last deployment (\"GitHub\", \"DevOps\", \"VisualStudio\", \"Custom\", \"None\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"publicNetworkAccess":{"name":"publicNetworkAccess","type":"\u0007","is_mandatory":true,"title":"Public network access setting (\"Enabled\", \"Disabled\", or empty)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"repositoryUrl":{"name":"repositoryUrl","type":"\u0007","is_mandatory":true,"title":"Source repository URL (GitHub or Azure DevOps)","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuName":{"name":"skuName","type":"\u0007","is_mandatory":true,"title":"SKU name (e.g. \"Free\", \"Standard\", \"Dedicated\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"skuTier":{"name":"skuTier","type":"\u0007","is_mandatory":true,"title":"SKU tier","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"stagingEnvironmentPolicy":{"name":"stagingEnvironmentPolicy","type":"\u0007","is_mandatory":true,"title":"Staging environment policy for preview deployments (\"Enabled\" or \"Disabled\")","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"tags":{"name":"tags","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Resource tags","provider":"go.mondoo.com/cnquery/v9/providers/azure"},"userProvidedFunctionAppCount":{"name":"userProvidedFunctionAppCount","type":"\u0005","is_mandatory":true,"title":"Number of user-provided function apps registered with the static site (BYO Functions)","provider":"go.mondoo.com/cnquery/v9/providers/azure"}},"title":"Azure Static Web App","desc":" Examine an Azure Static Web App — a managed service that hosts static content (HTML/CSS/JS), serverless API routes, and global content distribution from a source repository (typically GitHub or Azure DevOps). Surfaces the SKU and tier (Free, Standard, Dedicated), the default and custom hostnames, the source repository URL and branch, the publishing provider, the public network access toggle, the `allowConfigFileUpdates` flag, the staging-environment policy (preview deployments per pull request), the enterprise-grade CDN status, the identity assignment used for Key Vault references, and counts for private endpoint connections, user-provided function apps, linked backends, and database connections.","private":true,"min_provider_version":"13.10.2","defaults":"name defaultHostname","provider":"go.mondoo.com/cnquery/v9/providers/azure"}}}