Share via

AIP Scanner pulling results via graph

Anton Krutov 6 Reputation points
2021-07-09T01:33:59.59+00:00

Hello,

Is there an endpoint to pull scan results (reports) from AIP? So, I'm looking to get things like repository, file names etc. of what the AIP Scanner has found.

I can see a whole lot of things has been found by the scanner, but now I would like to pull that information via REST call.

Thank you in advance

Azure Information Protection
Azure Information Protection
An Azure service that is used to control and help secure email, documents, and sensitive data that are shared outside the company.
520 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anton Krutov 6 Reputation points
    2021-07-13T16:34:34.59+00:00

    Hi @JamesTran-MSFT

    I was able to find what I'm looking by using Log Analytics API, which is the same API that is being called when you visit the analytics pane on the AIP. So, I adjusted the permissions and was able to retrieve the data I'm looking for. Is that API not something we should be using to retrieve such data?

    Thank you,

    Anton

    1 person found this answer helpful.
    0 comments
  2. JamesTran-MSFT 36,461 Reputation points Microsoft Employee
    2021-07-12T23:14:28.177+00:00

    @Anton Krutov
    Thank you for your post and I apologize for the delayed response!

    When it comes to the Azure Information Protection REST APIs, as of right now, you can only access alerts by using the Microsoft Graph Security API, or you can stream alerts to SIEM solutions, such as Splunk and IBM Qradar, by using Azure Monitor. Please keep in mind that support for Microsoft Graph Security is currently in preview.

    For more information about the Microsoft Graph Security API, see Microsoft Graph Security API overview.

    Additional Links:
    Microsoft Information Protection SDK - API concepts
    AzureInformationProtection PowerShell

    If you'd like the AIP scanner to be integrated into REST APIs, I'd recommend leveraging the Azure Information Protection feature request form, and submitting a request so our engineering team can look into implementing this. For more info.

    If you have any other questions, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments