Report - Update

Service:

App Compliance Automation

API Version:

2024-06-27

Update an exiting AppComplianceAutomation report.

PATCH https://management.azure.com/providers/Microsoft.AppComplianceAutomation/reports/{reportName}?api-version=2024-06-27

URI Parameters

Name	In	Required	Type	Description
reportName	path	True	string pattern: ^[-a-zA-Z0-9_]{1,50}$	Report Name.
api-version	query	True	string minLength: 1	The API version to use for this operation.

Request Body

Name	Type	Description
properties	ReportPatchProperties	Report property.

Responses

Name	Type	Description
200 OK	ReportResource	Azure operation completed successfully.
202 Accepted		Resource update request accepted. Headers Location: string Retry-After: integer
Other Status Codes	ErrorResponse	An unexpected error response.

Security

azure_auth

Azure Active Directory OAuth2 Flow.

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	impersonate your user account

Examples

Report_Update

Sample request

HTTP

PATCH https://management.azure.com/providers/Microsoft.AppComplianceAutomation/reports/testReportName?api-version=2024-06-27

{
  "properties": {
    "offerGuid": "00000000-0000-0000-0000-000000000001,00000000-0000-0000-0000-000000000002",
    "resources": [
      {
        "resourceId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/myResourceGroup/providers/Microsoft.SignalRService/SignalR/mySignalRService",
        "resourceOrigin": "Azure",
        "resourceType": "Microsoft.SignalRService/SignalR"
      },
      {
        "accountId": "000000000000",
        "resourceId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acat-aws/providers/microsoft.security/securityconnectors/acatawsconnector/securityentitydata/aws-iam-user-testuser",
        "resourceOrigin": "AWS",
        "resourceType": "iam.user"
      }
    ],
    "storageInfo": {
      "accountName": "testStorageAccount",
      "location": "East US",
      "resourceGroup": "testResourceGroup",
      "subscriptionId": "00000000-0000-0000-0000-000000000000"
    },
    "timeZone": "GMT Standard Time",
    "triggerTime": "2022-03-04T05:00:00.000Z"
  }
}

Go

package armappcomplianceautomation_test

import (
	"context"
	"log"

	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/appcomplianceautomation/armappcomplianceautomation"
)

// Generated from example definition: https://github.com/Azure/azure-rest-api-specs/blob/d88c94b22a8efdd47c0cadfe6d8d489107db2b23/specification/appcomplianceautomation/resource-manager/Microsoft.AppComplianceAutomation/stable/2024-06-27/examples/Report_Update.json
func ExampleReportClient_BeginUpdate() {
	cred, err := azidentity.NewDefaultAzureCredential(nil)
	if err != nil {
		log.Fatalf("failed to obtain a credential: %v", err)
	}
	ctx := context.Background()
	clientFactory, err := armappcomplianceautomation.NewClientFactory(cred, nil)
	if err != nil {
		log.Fatalf("failed to create client: %v", err)
	}
	poller, err := clientFactory.NewReportClient().BeginUpdate(ctx, "testReportName", armappcomplianceautomation.ReportResourcePatch{}, nil)
	if err != nil {
		log.Fatalf("failed to finish the request: %v", err)
	}
	res, err := poller.PollUntilDone(ctx, nil)
	if err != nil {
		log.Fatalf("failed to pull the result: %v", err)
	}
	// You could use response here. We use blank identifier for just demo purposes.
	_ = res
	// If the HTTP response code is 200 as defined in example definition, your response structure would look as follows. Please pay attention that all the values in the output are fake values for just demo purposes.
	// res.ReportResource = armappcomplianceautomation.ReportResource{
	// 	Name: to.Ptr("testReportName"),
	// 	Type: to.Ptr("Microsfot.AppComplianceAutomation/reports"),
	// 	ID: to.Ptr("/provider/Microsfot.AppComplianceAutomation/reports/testReportName"),
	// 	SystemData: &armappcomplianceautomation.SystemData{
	// 		CreatedAt: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2021-05-14T22:34:55.449Z"); return t}()),
	// 		CreatedBy: to.Ptr("00000000-0000-0000-0000-000000000000"),
	// 		CreatedByType: to.Ptr(armappcomplianceautomation.CreatedByTypeUser),
	// 		LastModifiedAt: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2021-05-14T22:34:55.449Z"); return t}()),
	// 		LastModifiedBy: to.Ptr("00000000-0000-0000-0000-000000000000"),
	// 		LastModifiedByType: to.Ptr(armappcomplianceautomation.CreatedByTypeUser),
	// 	},
	// 	Properties: &armappcomplianceautomation.ReportProperties{
	// 		CertRecords: []*armappcomplianceautomation.CertSyncRecord{
	// 			{
	// 				CertificationStatus: to.Ptr("CertIngestion"),
	// 				Controls: []*armappcomplianceautomation.ControlSyncRecord{
	// 					{
	// 						ControlID: to.Ptr("Operational_Security_10"),
	// 						ControlStatus: to.Ptr("Approved"),
	// 				}},
	// 				IngestionStatus: to.Ptr("EvidenceResubmitted"),
	// 				OfferGUID: to.Ptr("00000000-0000-0000-0000-000000000001"),
	// 		}},
	// 		ComplianceStatus: &armappcomplianceautomation.ReportComplianceStatus{
	// 			M365: &armappcomplianceautomation.OverviewStatus{
	// 				FailedCount: to.Ptr[int32](0),
	// 				ManualCount: to.Ptr[int32](0),
	// 				PassedCount: to.Ptr[int32](0),
	// 			},
	// 		},
	// 		LastTriggerTime: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-03-02T05:00:00.000Z"); return t}()),
	// 		NextTriggerTime: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-03-02T05:00:00.000Z"); return t}()),
	// 		OfferGUID: to.Ptr("00000000-0000-0000-0000-000000000001,00000000-0000-0000-0000-000000000002"),
	// 		ProvisioningState: to.Ptr(armappcomplianceautomation.ProvisioningStateSucceeded),
	// 		Resources: []*armappcomplianceautomation.ResourceMetadata{
	// 			{
	// 				ResourceID: to.Ptr("/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/myResourceGroup/providers/Microsoft.SignalRService/SignalR/mySignalRService"),
	// 				ResourceOrigin: to.Ptr(armappcomplianceautomation.ResourceOriginAzure),
	// 				ResourceType: to.Ptr("Microsoft.SignalRService/SignalR"),
	// 			},
	// 			{
	// 				AccountID: to.Ptr("000000000000"),
	// 				ResourceID: to.Ptr("/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acat-aws/providers/microsoft.security/securityconnectors/acatawsconnector/securityentitydata/aws-iam-user-testuser"),
	// 				ResourceOrigin: to.Ptr(armappcomplianceautomation.ResourceOriginAWS),
	// 				ResourceType: to.Ptr("iam.user"),
	// 		}},
	// 		Status: to.Ptr(armappcomplianceautomation.ReportStatusActive),
	// 		StorageInfo: &armappcomplianceautomation.StorageInfo{
	// 			AccountName: to.Ptr("testStorageAccount"),
	// 			Location: to.Ptr("East US"),
	// 			ResourceGroup: to.Ptr("testResourceGroup"),
	// 			SubscriptionID: to.Ptr("00000000-0000-0000-0000-000000000000"),
	// 		},
	// 		Subscriptions: []*string{
	// 			to.Ptr("00000000-0000-0000-0000-000000000000")},
	// 			TenantID: to.Ptr("00000000-0000-0000-0000-000000000000"),
	// 			TimeZone: to.Ptr("GMT Standard Time"),
	// 			TriggerTime: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2022-03-02T05:00:00.000Z"); return t}()),
	// 		},
	// 	}
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

JavaScript

const {
  AppComplianceAutomationToolForMicrosoft365,
} = require("@azure/arm-appcomplianceautomation");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to Update an exiting AppComplianceAutomation report.
 *
 * @summary Update an exiting AppComplianceAutomation report.
 * x-ms-original-file: specification/appcomplianceautomation/resource-manager/Microsoft.AppComplianceAutomation/stable/2024-06-27/examples/Report_Update.json
 */
async function reportUpdate() {
  const reportName = "testReportName";
  const credential = new DefaultAzureCredential();
  const client = new AppComplianceAutomationToolForMicrosoft365(credential);
  const result = await client.report.beginUpdateAndWait(reportName, {
    properties: {
      offerGuid: "00000000-0000-0000-0000-000000000001,00000000-0000-0000-0000-000000000002",
      resources: [
        {
          resourceId:
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/myResourceGroup/providers/Microsoft.SignalRService/SignalR/mySignalRService",
          resourceOrigin: "Azure",
          resourceType: "Microsoft.SignalRService/SignalR",
        },
        {
          accountId: "000000000000",
          resourceId:
            "/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acat-aws/providers/microsoft.security/securityconnectors/acatawsconnector/securityentitydata/aws-iam-user-testuser",
          resourceOrigin: "AWS",
          resourceType: "iam.user",
        },
      ],
      storageInfo: {
        accountName: "testStorageAccount",
        location: "East US",
        resourceGroup: "testResourceGroup",
        subscriptionId: "00000000-0000-0000-0000-000000000000",
      },
      timeZone: "GMT Standard Time",
      triggerTime: new Date("2022-03-04T05:00:00.000Z"),
    },
  });
  console.log(result);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

dotnet

using Azure;
using Azure.ResourceManager;
using System;
using System.Threading.Tasks;
using Azure.Core;
using Azure.Identity;
using Azure.ResourceManager.AppComplianceAutomation.Models;
using Azure.ResourceManager.AppComplianceAutomation;

// Generated from example definition: specification/appcomplianceautomation/resource-manager/Microsoft.AppComplianceAutomation/stable/2024-06-27/examples/Report_Update.json
// this example is just showing the usage of "Report_Update" operation, for the dependent resources, they will have to be created separately.

// get your azure access token, for more details of how Azure SDK get your access token, please refer to https://learn.microsoft.com/en-us/dotnet/azure/sdk/authentication?tabs=command-line
TokenCredential cred = new DefaultAzureCredential();
// authenticate your client
ArmClient client = new ArmClient(cred);

// this example assumes you already have this AppComplianceReportResource created on azure
// for more information of creating AppComplianceReportResource, please refer to the document of AppComplianceReportResource
string reportName = "testReportName";
ResourceIdentifier appComplianceReportResourceId = AppComplianceReportResource.CreateResourceIdentifier(reportName);
AppComplianceReportResource appComplianceReport = client.GetAppComplianceReportResource(appComplianceReportResourceId);

// invoke the operation
AppComplianceReportPatch patch = new AppComplianceReportPatch();
ArmOperation<AppComplianceReportResource> lro = await appComplianceReport.UpdateAsync(WaitUntil.Completed, patch);
AppComplianceReportResource result = lro.Value;

// the variable result is a resource, you could call other operations on this instance as well
// but just for demo, we get its data from this resource instance
AppComplianceReportData resourceData = result.Data;
// for demo we just print out the id
Console.WriteLine($"Succeeded on id: {resourceData.Id}");

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Sample response

Status code:

200

{
  "name": "testReportName",
  "type": "Microsfot.AppComplianceAutomation/reports",
  "id": "/provider/Microsfot.AppComplianceAutomation/reports/testReportName",
  "properties": {
    "certRecords": [
      {
        "certificationStatus": "CertIngestion",
        "controls": [
          {
            "controlId": "Operational_Security_10",
            "controlStatus": "Approved"
          }
        ],
        "ingestionStatus": "EvidenceResubmitted",
        "offerGuid": "00000000-0000-0000-0000-000000000001"
      }
    ],
    "complianceStatus": {
      "m365": {
        "failedCount": 0,
        "manualCount": 0,
        "passedCount": 0
      }
    },
    "lastTriggerTime": "2022-03-02T05:00:00.000Z",
    "nextTriggerTime": "2022-03-02T05:00:00.000Z",
    "offerGuid": "00000000-0000-0000-0000-000000000001,00000000-0000-0000-0000-000000000002",
    "provisioningState": "Succeeded",
    "resources": [
      {
        "resourceId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/myResourceGroup/providers/Microsoft.SignalRService/SignalR/mySignalRService",
        "resourceOrigin": "Azure",
        "resourceType": "Microsoft.SignalRService/SignalR"
      },
      {
        "accountId": "000000000000",
        "resourceId": "/subscriptions/00000000-0000-0000-0000-000000000000/resourcegroups/acat-aws/providers/microsoft.security/securityconnectors/acatawsconnector/securityentitydata/aws-iam-user-testuser",
        "resourceOrigin": "AWS",
        "resourceType": "iam.user"
      }
    ],
    "status": "Active",
    "storageInfo": {
      "accountName": "testStorageAccount",
      "location": "East US",
      "resourceGroup": "testResourceGroup",
      "subscriptionId": "00000000-0000-0000-0000-000000000000"
    },
    "subscriptions": [
      "00000000-0000-0000-0000-000000000000"
    ],
    "tenantId": "00000000-0000-0000-0000-000000000000",
    "timeZone": "GMT Standard Time",
    "triggerTime": "2022-03-02T05:00:00.000Z"
  },
  "systemData": {
    "createdAt": "2021-05-14T22:34:55.4499903Z",
    "createdBy": "00000000-0000-0000-0000-000000000000",
    "createdByType": "User",
    "lastModifiedAt": "2021-05-14T22:34:55.4499903Z",
    "lastModifiedBy": "00000000-0000-0000-0000-000000000000",
    "lastModifiedByType": "User"
  }
}

Status code:

202

Azure-AsyncOperation: https://management.azure.com/providers/Microsoft.AppComplianceAutomation/operationStatuses/{operationId}
Location: https://management.azure.com/providers/Microsoft.AppComplianceAutomation/operationResults/{operationId}

Definitions

Name	Description
CertSyncRecord	A class represent the certification record synchronized from app compliance.
ControlSyncRecord	A class represent the control record synchronized from app compliance.
createdByType	The type of identity that created the resource.
ErrorAdditionalInfo	The resource management error additional info.
ErrorDetail	The error detail.
ErrorResponse	Error response
OverviewStatus	The overview of the compliance result for one report.
ProvisioningState	Resource provisioning states.
ReportComplianceStatus	A list which includes all the compliance result for one report.
ReportPatchProperties	Patch Report's properties.
ReportResource	A class represent an AppComplianceAutomation report resource.
ReportResourcePatch	A class represent a AppComplianceAutomation report resource update properties.
ReportStatus	Report status.
ResourceMetadata	Single resource Id's metadata.
ResourceOrigin	Resource Origin.
StorageInfo	The information of 'bring your own storage' account binding to the report
systemData	Metadata pertaining to creation and last modification of the resource.

CertSyncRecord

Object

A class represent the certification record synchronized from app compliance.

Name	Type	Description
certificationStatus	string	Indicates the status of certification process.
controls	ControlSyncRecord[]	The control records list to be synchronized.
ingestionStatus	string	Indicates the status of compliance process.
offerGuid	string minLength: 1	The offerGuid which mapping to the reports.

ControlSyncRecord

Object

A class represent the control record synchronized from app compliance.

Name	Type	Description
controlId	string	The Id of the control. e.g. "Operational_Security_10"
controlStatus	string	Control status synchronized from app compliance.

createdByType

Enumeration

The type of identity that created the resource.

Value	Description
User
Application
ManagedIdentity
Key

ErrorAdditionalInfo

Object

The resource management error additional info.

Name	Type	Description
info	object	The additional info.
type	string	The additional info type.

ErrorDetail

Object

The error detail.

Name	Type	Description
additionalInfo	ErrorAdditionalInfo[]	The error additional info.
code	string	The error code.
details	ErrorDetail[]	The error details.
message	string	The error message.
target	string	The error target.

ErrorResponse

Object

Error response

Name	Type	Description
error	ErrorDetail	The error object.

OverviewStatus

Object

The overview of the compliance result for one report.

Name	Type	Description
failedCount	integer (int32)	The count of all failed control.
manualCount	integer (int32)	The count of all manual control.
notApplicableCount	integer (int32)	The count of all not applicable control.
passedCount	integer (int32)	The count of all passed control.
pendingCount	integer (int32)	The count of all pending for approval control.

ProvisioningState

Enumeration

Resource provisioning states.

Value	Description
Succeeded	The provision is succeeded.
Failed	The provision is failed.
Canceled	The provision is canceled.
Creating	The creation is in progress.
Deleting	The deletion is in progress.
Fixing	The fix of the resource in progress.
Verifying	The verification of the resource in progress.
Updating	The update of the resource in progress.

ReportComplianceStatus

Object

A list which includes all the compliance result for one report.

Name	Type	Description
m365	OverviewStatus	The Microsoft 365 certification name.

ReportPatchProperties

Object

Patch Report's properties.

Name	Type	Description
certRecords	CertSyncRecord[]	List of synchronized certification records.
complianceStatus	ReportComplianceStatus	Report compliance status.
errors	string[]	List of report error codes.
lastTriggerTime	string (date-time)	Report last collection trigger time.
nextTriggerTime	string (date-time)	Report next collection trigger time.
offerGuid	string	A list of comma-separated offerGuids indicates a series of offerGuids that map to the report. For example, "00000000-0000-0000-0000-000000000001,00000000-0000-0000-0000-000000000002" and "00000000-0000-0000-0000-000000000003".
provisioningState	ProvisioningState	Azure lifecycle management
resources	ResourceMetadata[]	List of resource data.
status	ReportStatus	Report status.
storageInfo	StorageInfo	The information of 'bring your own storage' binding to the report
subscriptions	string[]	List of subscription Ids.
tenantId	string	Report's tenant id.
timeZone	string	Report collection trigger time's time zone, the available list can be obtained by executing "Get-TimeZone -ListAvailable" in PowerShell. An example of valid timezone id is "Pacific Standard Time".
triggerTime	string (date-time)	Report collection trigger time.

ReportResource

Object

A class represent an AppComplianceAutomation report resource.

Name	Type	Description
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}
name	string	The name of the resource
properties.certRecords	CertSyncRecord[]	List of synchronized certification records.
properties.complianceStatus	ReportComplianceStatus	Report compliance status.
properties.errors	string[]	List of report error codes.
properties.lastTriggerTime	string (date-time)	Report last collection trigger time.
properties.nextTriggerTime	string (date-time)	Report next collection trigger time.
properties.offerGuid	string	A list of comma-separated offerGuids indicates a series of offerGuids that map to the report. For example, "00000000-0000-0000-0000-000000000001,00000000-0000-0000-0000-000000000002" and "00000000-0000-0000-0000-000000000003".
properties.provisioningState	ProvisioningState	Azure lifecycle management
properties.resources	ResourceMetadata[]	List of resource data.
properties.status	ReportStatus	Report status.
properties.storageInfo	StorageInfo	The information of 'bring your own storage' binding to the report
properties.subscriptions	string[]	List of subscription Ids.
properties.tenantId	string	Report's tenant id.
properties.timeZone	string	Report collection trigger time's time zone, the available list can be obtained by executing "Get-TimeZone -ListAvailable" in PowerShell. An example of valid timezone id is "Pacific Standard Time".
properties.triggerTime	string (date-time)	Report collection trigger time.
systemData	systemData	Azure Resource Manager metadata containing createdBy and modifiedBy information.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts"

ReportResourcePatch

Object

A class represent a AppComplianceAutomation report resource update properties.

Name	Type	Description
properties	ReportPatchProperties	Report property.

ReportStatus

Enumeration

Report status.

Value	Description
Active	The report is active.
Failed	The report is failed.
Reviewing	The report is under reviewing.
Disabled	The report is disabled.

ResourceMetadata

Object

Single resource Id's metadata.

Name	Type	Description
accountId	string	Account Id. For example - the AWS account id.
resourceId	string	Resource Id - e.g. "/subscriptions/00000000-0000-0000-0000-000000000000/resourceGroups/rg1/providers/Microsoft.Compute/virtualMachines/vm1".
resourceKind	string	Resource kind.
resourceOrigin	ResourceOrigin	Resource Origin.
resourceType	string	Resource type. e.g. "Microsoft.Compute/virtualMachines"

ResourceOrigin

Enumeration

Resource Origin.

Value	Description
Azure	The resource is from Azure.
AWS	The resource is from AWS.
GCP	The resource is from GCP.

StorageInfo

Object

The information of 'bring your own storage' account binding to the report

Name	Type	Description
accountName	string	'bring your own storage' account name
location	string	The region of 'bring your own storage' account
resourceGroup	string	The resourceGroup which 'bring your own storage' account belongs to
subscriptionId	string	The subscription id which 'bring your own storage' account belongs to

systemData

Object

Metadata pertaining to creation and last modification of the resource.

Name	Type	Description
createdAt	string (date-time)	The timestamp of resource creation (UTC).
createdBy	string	The identity that created the resource.
createdByType	createdByType	The type of identity that created the resource.
lastModifiedAt	string (date-time)	The timestamp of resource last modification (UTC)
lastModifiedBy	string	The identity that last modified the resource.
lastModifiedByType	createdByType	The type of identity that last modified the resource.