How to install Content Hub solutions via Bicep?

Matthew Jensen 20 Reputation points
2024-07-23T23:13:25.9533333+00:00

We are trying to deploy Sentinel as IaC and we'd like to install various different content hub solutions via Bicep, we are getting no errors, and inside Content Hub we can see the Solution is installed - but no connector is showing.

Below is Bicep I am using, it runs after Sentinel is deployed.

resource install_asc_connector 'Microsoft.SecurityInsights/contentPackages@2024-03-01' = {
  name: 'azuresentinel.azure-sentinel-solution-microsoftdefenderforcloud'  
  scope: sentinel_workspace
  properties:{
    contentKind: 'Solution'
    contentProductId: 'azuresentinel.azure-sentinel-solution-microsoftdef-sl-zwq4lkliu76fq'
    version: '3.0.0'
    contentId: 'azuresentinel.azure-sentinel-solution-microsoftdefenderforcloud'
  }
  dependsOn: [onboarding_state]
}
Microsoft Sentinel
Microsoft Sentinel
A scalable, cloud-native solution for security information event management and security orchestration automated response. Previously known as Azure Sentinel.
1,135 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Iheanacho Chukwu 995 Reputation points
    2024-07-24T17:34:01.4966667+00:00

    Hello Matthew,

    My understanding is that you're deploying Sentinel using Bicep and facing an issue where the solution is installed, but the connector is not showing up.

    The resource type Microsoft.SecurityInsights/contentPackages is not listed in the official documentation for ARM templates or Bicep, which suggest it is not currently available for use.

    However, I see connector (data connector) is available as Microsoft.SecurityInsights/dataConnectors. For more details do refer to the documentation.

    Please share your full bicep code for a chance to look through its details, if possible.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.