Iot Security Solution - List By Subscription

Service:

Defender for Cloud

API Version:

2019-08-01

Använd den här metoden för att hämta listan över IoT-säkerhetslösningar per prenumeration.

GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Security/iotSecuritySolutions?api-version=2019-08-01

With optional parameters:

GET https://management.azure.com/subscriptions/{subscriptionId}/providers/Microsoft.Security/iotSecuritySolutions?api-version=2019-08-01&$filter={$filter}

URI-parametrar

Name	I	Obligatorisk	Typ	Description
subscriptionId	path	True	string	Azure-prenumerations-ID Regex pattern: ^[0-9A-Fa-f]{8}-([0-9A-Fa-f]{4}-){3}[0-9A-Fa-f]{12}$
api-version	query	True	string	API-version för åtgärden
$filter	query		string	Filtrera IoT-säkerhetslösningen med OData-syntax. Stöder filtrering av iotHubs.

Svar

Name	Typ	Description
200 OK	IoTSecuritySolutionsList	OK
Other Status Codes	CloudError	Felsvar som beskriver varför åtgärden misslyckades.

Säkerhet

azure_auth

Azure Active Directory OAuth2 Flow

Type: oauth2
Flow: implicit
Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize

Scopes

Name	Description
user_impersonation	personifiera ditt användarkonto

Exempel

List IoT Security solutions by IoT Hub

List IoT Security solutions by subscription

List IoT Security solutions by IoT Hub

Sample Request

HTTP

GET https://management.azure.com/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/iotSecuritySolutions?api-version=2019-08-01&$filter=properties.iotHubs/any(i eq "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub")

Java

/** Samples for IotSecuritySolution List. */
public final class Main {
    /*
     * x-ms-original-file: specification/security/resource-manager/Microsoft.Security/stable/2019-08-01/examples/IoTSecuritySolutions/GetIoTSecuritySolutionsListByIotHub.json
     */
    /**
     * Sample code: List IoT Security solutions by IoT Hub.
     *
     * @param manager Entry point to SecurityManager.
     */
    public static void listIoTSecuritySolutionsByIoTHub(com.azure.resourcemanager.security.SecurityManager manager) {
        manager
            .iotSecuritySolutions()
            .list(
                "properties.iotHubs/any(i eq"
                    + " \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub\")",
                com.azure.core.util.Context.NONE);
    }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Go

package armsecurity_test

import (
	"context"
	"log"

	"github.com/Azure/azure-sdk-for-go/sdk/azcore/to"
	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity"
)

// Generated from example definition: https://github.com/Azure/azure-rest-api-specs/blob/e716082ac474f182e2220e4f38f1d6191e7636cf/specification/security/resource-manager/Microsoft.Security/stable/2019-08-01/examples/IoTSecuritySolutions/GetIoTSecuritySolutionsListByIotHub.json
func ExampleIotSecuritySolutionClient_NewListBySubscriptionPager_listIoTSecuritySolutionsByIoTHub() {
	cred, err := azidentity.NewDefaultAzureCredential(nil)
	if err != nil {
		log.Fatalf("failed to obtain a credential: %v", err)
	}
	ctx := context.Background()
	clientFactory, err := armsecurity.NewClientFactory("<subscription-id>", cred, nil)
	if err != nil {
		log.Fatalf("failed to create client: %v", err)
	}
	pager := clientFactory.NewIotSecuritySolutionClient().NewListBySubscriptionPager(&armsecurity.IotSecuritySolutionClientListBySubscriptionOptions{Filter: to.Ptr("properties.iotHubs/any(i eq \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub\")")})
	for pager.More() {
		page, err := pager.NextPage(ctx)
		if err != nil {
			log.Fatalf("failed to advance page: %v", err)
		}
		for _, v := range page.Value {
			// You could use page here. We use blank identifier for just demo purposes.
			_ = v
		}
		// If the HTTP response code is 200 as defined in example definition, your page structure would look as follows. Please pay attention that all the values in the output are fake values for just demo purposes.
		// page.IoTSecuritySolutionsList = armsecurity.IoTSecuritySolutionsList{
		// 	Value: []*armsecurity.IoTSecuritySolutionModel{
		// 		{
		// 			Name: to.Ptr("default"),
		// 			Type: to.Ptr("Microsoft.Security/IoTSecuritySolutions"),
		// 			ID: to.Ptr("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default"),
		// 			Tags: map[string]*string{
		// 			},
		// 			Location: to.Ptr("East Us"),
		// 			Properties: &armsecurity.IoTSecuritySolutionProperties{
		// 				AutoDiscoveredResources: []*string{
		// 					to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735"),
		// 					to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub")},
		// 					DisabledDataSources: []*armsecurity.DataSource{
		// 					},
		// 					DisplayName: to.Ptr("Solution Default"),
		// 					Export: []*armsecurity.ExportData{
		// 						to.Ptr(armsecurity.ExportDataRawEvents)},
		// 						IotHubs: []*string{
		// 							to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub")},
		// 							RecommendationsConfiguration: []*armsecurity.RecommendationConfigurationProperties{
		// 								{
		// 									Name: to.Ptr("Service Principal Not Used with ACR"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTAcrauthentication),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Agent sending underutilized messages"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTAgentSendsUnutilizedMessages),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatus("TurnedOn")),
		// 								},
		// 								{
		// 									Name: to.Ptr("Operating system (OS) baseline validation failure"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTBaseline),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Edge Hub memory can be optimized"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTEdgeHubMemOptimize),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("No Logging Configured for Edge Module"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTEdgeLoggingOptions),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Module Settings Inconsistent in SecurityGroup"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTInconsistentModuleSettings),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Install the Azure Security of Things Agent"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTInstallAgent),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Default IP Filter Policy should be Deny"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTIpfilterDenyAll),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("IP Filter rule includes large IP range"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTIpfilterPermissiveRule),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Open Ports On Device"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTOpenPorts),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusDisabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Permissive firewall policy in one of the chains was found"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveFirewallPolicy),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Permissive firewall rule in the input chain was found"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveInputFirewallRules),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Permissive firewall rule in the output chain was found"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveOutputFirewallRules),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("High level permissions configured in Edge model twin for Edge module"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPrivilegedDockerOptions),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("Same Authentication Credentials used by multiple devices"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTSharedCredentials),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusDisabled),
		// 								},
		// 								{
		// 									Name: to.Ptr("TLS cipher suite upgrade"),
		// 									RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTVulnerableTLSCipherSuite),
		// 									Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							}},
		// 							Status: to.Ptr(armsecurity.SecuritySolutionStatusEnabled),
		// 							UnmaskedIPLoggingStatus: to.Ptr(armsecurity.UnmaskedIPLoggingStatusEnabled),
		// 							UserDefinedResources: &armsecurity.UserDefinedResourcesProperties{
		// 								Query: to.Ptr("where type != \"microsoft.devices/iothubs\" | where name contains \"iot\""),
		// 								QuerySubscriptions: []*string{
		// 									to.Ptr("075423e9-7d33-4166-8bdf-3920b04e3735")},
		// 								},
		// 								Workspace: to.Ptr("/subscriptions/c4930e90-cd72-4aa5-93e9-2d081d129569/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace1"),
		// 							},
		// 							SystemData: &armsecurity.SystemData{
		// 								CreatedAt: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2020-04-27T21:53:29.092Z"); return t}()),
		// 								CreatedBy: to.Ptr("string"),
		// 								CreatedByType: to.Ptr(armsecurity.CreatedByTypeUser),
		// 								LastModifiedAt: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2020-04-27T21:53:29.092Z"); return t}()),
		// 								LastModifiedBy: to.Ptr("string"),
		// 								LastModifiedByType: to.Ptr(armsecurity.CreatedByTypeUser),
		// 							},
		// 					}},
		// 				}
	}
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

JavaScript

const { SecurityCenter } = require("@azure/arm-security");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to Use this method to get the list of IoT Security solutions by subscription.
 *
 * @summary Use this method to get the list of IoT Security solutions by subscription.
 * x-ms-original-file: specification/security/resource-manager/Microsoft.Security/stable/2019-08-01/examples/IoTSecuritySolutions/GetIoTSecuritySolutionsListByIotHub.json
 */
async function listIoTSecuritySolutionsByIoTHub() {
  const subscriptionId =
    process.env["SECURITY_SUBSCRIPTION_ID"] || "20ff7fc3-e762-44dd-bd96-b71116dcdc23";
  const filter =
    'properties.iotHubs/any(i eq "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub")';
  const options = {
    filter,
  };
  const credential = new DefaultAzureCredential();
  const client = new SecurityCenter(credential, subscriptionId);
  const resArray = new Array();
  for await (let item of client.iotSecuritySolution.listBySubscription(options)) {
    resArray.push(item);
  }
  console.log(resArray);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

dotnet

using System;
using System.Threading.Tasks;
using Azure;
using Azure.Core;
using Azure.Identity;
using Azure.ResourceManager;
using Azure.ResourceManager.Resources;
using Azure.ResourceManager.SecurityCenter;
using Azure.ResourceManager.SecurityCenter.Models;

// Generated from example definition: specification/security/resource-manager/Microsoft.Security/stable/2019-08-01/examples/IoTSecuritySolutions/GetIoTSecuritySolutionsListByIotHub.json
// this example is just showing the usage of "IotSecuritySolution_ListBySubscription" operation, for the dependent resources, they will have to be created separately.

// get your azure access token, for more details of how Azure SDK get your access token, please refer to https://learn.microsoft.com/en-us/dotnet/azure/sdk/authentication?tabs=command-line
TokenCredential cred = new DefaultAzureCredential();
// authenticate your client
ArmClient client = new ArmClient(cred);

// this example assumes you already have this SubscriptionResource created on azure
// for more information of creating SubscriptionResource, please refer to the document of SubscriptionResource
string subscriptionId = "20ff7fc3-e762-44dd-bd96-b71116dcdc23";
ResourceIdentifier subscriptionResourceId = SubscriptionResource.CreateResourceIdentifier(subscriptionId);
SubscriptionResource subscriptionResource = client.GetSubscriptionResource(subscriptionResourceId);

// invoke the operation and iterate over the result
string filter = "properties.iotHubs/any(i eq \"/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub\")";
await foreach (IotSecuritySolutionResource item in subscriptionResource.GetIotSecuritySolutionsAsync(filter: filter))
{
    // the variable item is a resource, you could call other operations on this instance as well
    // but just for demo, we get its data from this resource instance
    IotSecuritySolutionData resourceData = item.Data;
    // for demo we just print out the id
    Console.WriteLine($"Succeeded on id: {resourceData.Id}");
}

Console.WriteLine($"Succeeded");

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Sample Response

Status code:

200

{
  "value": [
    {
      "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default",
      "name": "default",
      "type": "Microsoft.Security/IoTSecuritySolutions",
      "location": "East Us",
      "tags": {},
      "properties": {
        "workspace": "/subscriptions/c4930e90-cd72-4aa5-93e9-2d081d129569/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace1",
        "status": "Enabled",
        "export": [
          "RawEvents"
        ],
        "disabledDataSources": [],
        "displayName": "Solution Default",
        "iotHubs": [
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub"
        ],
        "userDefinedResources": {
          "query": "where type != \"microsoft.devices/iothubs\" | where name contains \"iot\"",
          "querySubscriptions": [
            "075423e9-7d33-4166-8bdf-3920b04e3735"
          ]
        },
        "autoDiscoveredResources": [
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735",
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub"
        ],
        "recommendationsConfiguration": [
          {
            "recommendationType": "IoT_ACRAuthentication",
            "name": "Service Principal Not Used with ACR",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_AgentSendsUnutilizedMessages",
            "name": "Agent sending underutilized messages",
            "status": "TurnedOn"
          },
          {
            "recommendationType": "IoT_Baseline",
            "name": "Operating system (OS) baseline validation failure",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_EdgeHubMemOptimize",
            "name": "Edge Hub memory can be optimized",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_EdgeLoggingOptions",
            "name": "No Logging Configured for Edge Module",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_InconsistentModuleSettings",
            "name": "Module Settings Inconsistent in SecurityGroup",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_InstallAgent",
            "name": "Install the Azure Security of Things Agent",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_IPFilter_DenyAll",
            "name": "Default IP Filter Policy should be Deny",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_IPFilter_PermissiveRule",
            "name": "IP Filter rule includes large IP range",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_OpenPorts",
            "name": "Open Ports On Device",
            "status": "Disabled"
          },
          {
            "recommendationType": "IoT_PermissiveFirewallPolicy",
            "name": "Permissive firewall policy in one of the chains was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PermissiveInputFirewallRules",
            "name": "Permissive firewall rule in the input chain was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PermissiveOutputFirewallRules",
            "name": "Permissive firewall rule in the output chain was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PrivilegedDockerOptions",
            "name": "High level permissions configured in Edge model twin for Edge module",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_SharedCredentials",
            "name": "Same Authentication Credentials used by multiple devices",
            "status": "Disabled"
          },
          {
            "recommendationType": "IoT_VulnerableTLSCipherSuite",
            "name": "TLS cipher suite upgrade",
            "status": "Enabled"
          }
        ],
        "unmaskedIpLoggingStatus": "Enabled"
      },
      "systemData": {
        "createdBy": "string",
        "createdByType": "User",
        "createdAt": "2020-04-27T21:53:29.0928001Z",
        "lastModifiedBy": "string",
        "lastModifiedByType": "User",
        "lastModifiedAt": "2020-04-27T21:53:29.0928001Z"
      }
    }
  ]
}

List IoT Security solutions by subscription

Sample Request

HTTP

GET https://management.azure.com/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/iotSecuritySolutions?api-version=2019-08-01

Java

/** Samples for IotSecuritySolution List. */
public final class Main {
    /*
     * x-ms-original-file: specification/security/resource-manager/Microsoft.Security/stable/2019-08-01/examples/IoTSecuritySolutions/GetIoTSecuritySolutionsList.json
     */
    /**
     * Sample code: List IoT Security solutions by subscription.
     *
     * @param manager Entry point to SecurityManager.
     */
    public static void listIoTSecuritySolutionsBySubscription(
        com.azure.resourcemanager.security.SecurityManager manager) {
        manager.iotSecuritySolutions().list(null, com.azure.core.util.Context.NONE);
    }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Go

package armsecurity_test

import (
	"context"
	"log"

	"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
	"github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/security/armsecurity"
)

// Generated from example definition: https://github.com/Azure/azure-rest-api-specs/blob/e716082ac474f182e2220e4f38f1d6191e7636cf/specification/security/resource-manager/Microsoft.Security/stable/2019-08-01/examples/IoTSecuritySolutions/GetIoTSecuritySolutionsList.json
func ExampleIotSecuritySolutionClient_NewListBySubscriptionPager_listIoTSecuritySolutionsBySubscription() {
	cred, err := azidentity.NewDefaultAzureCredential(nil)
	if err != nil {
		log.Fatalf("failed to obtain a credential: %v", err)
	}
	ctx := context.Background()
	clientFactory, err := armsecurity.NewClientFactory("<subscription-id>", cred, nil)
	if err != nil {
		log.Fatalf("failed to create client: %v", err)
	}
	pager := clientFactory.NewIotSecuritySolutionClient().NewListBySubscriptionPager(&armsecurity.IotSecuritySolutionClientListBySubscriptionOptions{Filter: nil})
	for pager.More() {
		page, err := pager.NextPage(ctx)
		if err != nil {
			log.Fatalf("failed to advance page: %v", err)
		}
		for _, v := range page.Value {
			// You could use page here. We use blank identifier for just demo purposes.
			_ = v
		}
		// If the HTTP response code is 200 as defined in example definition, your page structure would look as follows. Please pay attention that all the values in the output are fake values for just demo purposes.
		// page.IoTSecuritySolutionsList = armsecurity.IoTSecuritySolutionsList{
		// 	Value: []*armsecurity.IoTSecuritySolutionModel{
		// 		{
		// 			Name: to.Ptr("default"),
		// 			Type: to.Ptr("Microsoft.Security/IoTSecuritySolutions"),
		// 			ID: to.Ptr("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default"),
		// 			Tags: map[string]*string{
		// 			},
		// 			Location: to.Ptr("East Us"),
		// 			Properties: &armsecurity.IoTSecuritySolutionProperties{
		// 				AutoDiscoveredResources: []*string{
		// 					to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735"),
		// 					to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub")},
		// 					DisabledDataSources: []*armsecurity.DataSource{
		// 					},
		// 					DisplayName: to.Ptr("Solution Default"),
		// 					Export: []*armsecurity.ExportData{
		// 					},
		// 					IotHubs: []*string{
		// 						to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub")},
		// 						RecommendationsConfiguration: []*armsecurity.RecommendationConfigurationProperties{
		// 							{
		// 								Name: to.Ptr("Service Principal Not Used with ACR"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTAcrauthentication),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Agent sending underutilized messages"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTAgentSendsUnutilizedMessages),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatus("TurnedOn")),
		// 							},
		// 							{
		// 								Name: to.Ptr("Operating system (OS) baseline validation failure"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTBaseline),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Edge Hub memory can be optimized"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTEdgeHubMemOptimize),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("No Logging Configured for Edge Module"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTEdgeLoggingOptions),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Module Settings Inconsistent in SecurityGroup"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTInconsistentModuleSettings),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Install the Azure Security of Things Agent"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTInstallAgent),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Default IP Filter Policy should be Deny"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTIpfilterDenyAll),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("IP Filter rule includes large IP range"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTIpfilterPermissiveRule),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Open Ports On Device"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTOpenPorts),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusDisabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Permissive firewall policy in one of the chains was found"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveFirewallPolicy),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Permissive firewall rule in the input chain was found"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveInputFirewallRules),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Permissive firewall rule in the output chain was found"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveOutputFirewallRules),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("High level permissions configured in Edge model twin for Edge module"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPrivilegedDockerOptions),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("Same Authentication Credentials used by multiple devices"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTSharedCredentials),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusDisabled),
		// 							},
		// 							{
		// 								Name: to.Ptr("TLS cipher suite upgrade"),
		// 								RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTVulnerableTLSCipherSuite),
		// 								Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 						}},
		// 						Status: to.Ptr(armsecurity.SecuritySolutionStatusEnabled),
		// 						UnmaskedIPLoggingStatus: to.Ptr(armsecurity.UnmaskedIPLoggingStatusEnabled),
		// 						UserDefinedResources: &armsecurity.UserDefinedResourcesProperties{
		// 							Query: to.Ptr("where type != \"microsoft.devices/iothubs\" | where name contains \"iot\""),
		// 							QuerySubscriptions: []*string{
		// 								to.Ptr("075423e9-7d33-4166-8bdf-3920b04e3735")},
		// 							},
		// 							Workspace: to.Ptr("/subscriptions/c4930e90-cd72-4aa5-93e9-2d081d129569/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace1"),
		// 						},
		// 						SystemData: &armsecurity.SystemData{
		// 							CreatedAt: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2020-04-27T21:53:29.092Z"); return t}()),
		// 							CreatedBy: to.Ptr("string"),
		// 							CreatedByType: to.Ptr(armsecurity.CreatedByTypeUser),
		// 							LastModifiedAt: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2020-04-27T21:53:29.092Z"); return t}()),
		// 							LastModifiedBy: to.Ptr("string"),
		// 							LastModifiedByType: to.Ptr(armsecurity.CreatedByTypeUser),
		// 						},
		// 					},
		// 					{
		// 						Name: to.Ptr("sec-solution"),
		// 						Type: to.Ptr("Microsoft.Security/IoTSecuritySolutions"),
		// 						ID: to.Ptr("/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SecondGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/sec-solution"),
		// 						Tags: map[string]*string{
		// 						},
		// 						Location: to.Ptr("East Us"),
		// 						Properties: &armsecurity.IoTSecuritySolutionProperties{
		// 							AutoDiscoveredResources: []*string{
		// 								to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735"),
		// 								to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/IotHubSecond")},
		// 								DisabledDataSources: []*armsecurity.DataSource{
		// 								},
		// 								DisplayName: to.Ptr("Second Solution"),
		// 								Export: []*armsecurity.ExportData{
		// 									to.Ptr(armsecurity.ExportDataRawEvents)},
		// 									IotHubs: []*string{
		// 										to.Ptr("/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/IotHubSecond")},
		// 										RecommendationsConfiguration: []*armsecurity.RecommendationConfigurationProperties{
		// 											{
		// 												Name: to.Ptr("Service Principal Not Used with ACR"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTAcrauthentication),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Agent sending underutilized messages"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTAgentSendsUnutilizedMessages),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatus("TurnedOn")),
		// 											},
		// 											{
		// 												Name: to.Ptr("Operating system (OS) baseline validation failure"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTBaseline),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Edge Hub memory can be optimized"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTEdgeHubMemOptimize),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("No Logging Configured for Edge Module"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTEdgeLoggingOptions),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Module Settings Inconsistent in SecurityGroup"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTInconsistentModuleSettings),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Install the Azure Security of Things Agent"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTInstallAgent),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Default IP Filter Policy should be Deny"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTIpfilterDenyAll),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("IP Filter rule includes large IP range"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTIpfilterPermissiveRule),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Open Ports On Device"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTOpenPorts),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusDisabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Permissive firewall policy in one of the chains was found"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveFirewallPolicy),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Permissive firewall rule in the input chain was found"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveInputFirewallRules),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Permissive firewall rule in the output chain was found"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPermissiveOutputFirewallRules),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("High level permissions configured in Edge model twin for Edge module"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTPrivilegedDockerOptions),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("Same Authentication Credentials used by multiple devices"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTSharedCredentials),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusDisabled),
		// 											},
		// 											{
		// 												Name: to.Ptr("TLS cipher suite upgrade"),
		// 												RecommendationType: to.Ptr(armsecurity.RecommendationTypeIoTVulnerableTLSCipherSuite),
		// 												Status: to.Ptr(armsecurity.RecommendationConfigStatusEnabled),
		// 										}},
		// 										Status: to.Ptr(armsecurity.SecuritySolutionStatusEnabled),
		// 										UnmaskedIPLoggingStatus: to.Ptr(armsecurity.UnmaskedIPLoggingStatusEnabled),
		// 										UserDefinedResources: &armsecurity.UserDefinedResourcesProperties{
		// 											Query: to.Ptr("where type != \"microsoft.devices/iothubs\" | where name contains \"iot\""),
		// 											QuerySubscriptions: []*string{
		// 												to.Ptr("075423e9-7d33-4166-8bdf-3920b04e3735")},
		// 											},
		// 											Workspace: to.Ptr("/subscriptions/c4930e90-cd72-4aa5-93e9-2d081d129569/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace1"),
		// 										},
		// 										SystemData: &armsecurity.SystemData{
		// 											CreatedAt: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2020-04-27T21:53:29.092Z"); return t}()),
		// 											CreatedBy: to.Ptr("string"),
		// 											CreatedByType: to.Ptr(armsecurity.CreatedByTypeUser),
		// 											LastModifiedAt: to.Ptr(func() time.Time { t, _ := time.Parse(time.RFC3339Nano, "2020-04-27T21:53:29.092Z"); return t}()),
		// 											LastModifiedBy: to.Ptr("string"),
		// 											LastModifiedByType: to.Ptr(armsecurity.CreatedByTypeUser),
		// 										},
		// 								}},
		// 							}
	}
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

JavaScript

const { SecurityCenter } = require("@azure/arm-security");
const { DefaultAzureCredential } = require("@azure/identity");

/**
 * This sample demonstrates how to Use this method to get the list of IoT Security solutions by subscription.
 *
 * @summary Use this method to get the list of IoT Security solutions by subscription.
 * x-ms-original-file: specification/security/resource-manager/Microsoft.Security/stable/2019-08-01/examples/IoTSecuritySolutions/GetIoTSecuritySolutionsList.json
 */
async function listIoTSecuritySolutionsBySubscription() {
  const subscriptionId =
    process.env["SECURITY_SUBSCRIPTION_ID"] || "20ff7fc3-e762-44dd-bd96-b71116dcdc23";
  const credential = new DefaultAzureCredential();
  const client = new SecurityCenter(credential, subscriptionId);
  const resArray = new Array();
  for await (let item of client.iotSecuritySolution.listBySubscription()) {
    resArray.push(item);
  }
  console.log(resArray);
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

dotnet

using System;
using System.Threading.Tasks;
using Azure;
using Azure.Core;
using Azure.Identity;
using Azure.ResourceManager;
using Azure.ResourceManager.Resources;
using Azure.ResourceManager.SecurityCenter;
using Azure.ResourceManager.SecurityCenter.Models;

// Generated from example definition: specification/security/resource-manager/Microsoft.Security/stable/2019-08-01/examples/IoTSecuritySolutions/GetIoTSecuritySolutionsList.json
// this example is just showing the usage of "IotSecuritySolution_ListBySubscription" operation, for the dependent resources, they will have to be created separately.

// get your azure access token, for more details of how Azure SDK get your access token, please refer to https://learn.microsoft.com/en-us/dotnet/azure/sdk/authentication?tabs=command-line
TokenCredential cred = new DefaultAzureCredential();
// authenticate your client
ArmClient client = new ArmClient(cred);

// this example assumes you already have this SubscriptionResource created on azure
// for more information of creating SubscriptionResource, please refer to the document of SubscriptionResource
string subscriptionId = "20ff7fc3-e762-44dd-bd96-b71116dcdc23";
ResourceIdentifier subscriptionResourceId = SubscriptionResource.CreateResourceIdentifier(subscriptionId);
SubscriptionResource subscriptionResource = client.GetSubscriptionResource(subscriptionResourceId);

// invoke the operation and iterate over the result
await foreach (IotSecuritySolutionResource item in subscriptionResource.GetIotSecuritySolutionsAsync())
{
    // the variable item is a resource, you could call other operations on this instance as well
    // but just for demo, we get its data from this resource instance
    IotSecuritySolutionData resourceData = item.Data;
    // for demo we just print out the id
    Console.WriteLine($"Succeeded on id: {resourceData.Id}");
}

Console.WriteLine($"Succeeded");

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

Sample Response

Status code:

200

{
  "value": [
    {
      "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/MyGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/default",
      "name": "default",
      "location": "East Us",
      "type": "Microsoft.Security/IoTSecuritySolutions",
      "tags": {},
      "properties": {
        "workspace": "/subscriptions/c4930e90-cd72-4aa5-93e9-2d081d129569/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace1",
        "status": "Enabled",
        "export": [],
        "disabledDataSources": [],
        "displayName": "Solution Default",
        "iotHubs": [
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub"
        ],
        "userDefinedResources": {
          "query": "where type != \"microsoft.devices/iothubs\" | where name contains \"iot\"",
          "querySubscriptions": [
            "075423e9-7d33-4166-8bdf-3920b04e3735"
          ]
        },
        "autoDiscoveredResources": [
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735",
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/FirstIotHub"
        ],
        "recommendationsConfiguration": [
          {
            "recommendationType": "IoT_ACRAuthentication",
            "name": "Service Principal Not Used with ACR",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_AgentSendsUnutilizedMessages",
            "name": "Agent sending underutilized messages",
            "status": "TurnedOn"
          },
          {
            "recommendationType": "IoT_Baseline",
            "name": "Operating system (OS) baseline validation failure",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_EdgeHubMemOptimize",
            "name": "Edge Hub memory can be optimized",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_EdgeLoggingOptions",
            "name": "No Logging Configured for Edge Module",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_InconsistentModuleSettings",
            "name": "Module Settings Inconsistent in SecurityGroup",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_InstallAgent",
            "name": "Install the Azure Security of Things Agent",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_IPFilter_DenyAll",
            "name": "Default IP Filter Policy should be Deny",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_IPFilter_PermissiveRule",
            "name": "IP Filter rule includes large IP range",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_OpenPorts",
            "name": "Open Ports On Device",
            "status": "Disabled"
          },
          {
            "recommendationType": "IoT_PermissiveFirewallPolicy",
            "name": "Permissive firewall policy in one of the chains was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PermissiveInputFirewallRules",
            "name": "Permissive firewall rule in the input chain was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PermissiveOutputFirewallRules",
            "name": "Permissive firewall rule in the output chain was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PrivilegedDockerOptions",
            "name": "High level permissions configured in Edge model twin for Edge module",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_SharedCredentials",
            "name": "Same Authentication Credentials used by multiple devices",
            "status": "Disabled"
          },
          {
            "recommendationType": "IoT_VulnerableTLSCipherSuite",
            "name": "TLS cipher suite upgrade",
            "status": "Enabled"
          }
        ],
        "unmaskedIpLoggingStatus": "Enabled"
      },
      "systemData": {
        "createdBy": "string",
        "createdByType": "User",
        "createdAt": "2020-04-27T21:53:29.0928001Z",
        "lastModifiedBy": "string",
        "lastModifiedByType": "User",
        "lastModifiedAt": "2020-04-27T21:53:29.0928001Z"
      }
    },
    {
      "id": "/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/resourceGroups/SecondGroup/providers/Microsoft.Security/IoTSecuritySolutions/Locations/eastus/sec-solution",
      "name": "sec-solution",
      "location": "East Us",
      "type": "Microsoft.Security/IoTSecuritySolutions",
      "tags": {},
      "properties": {
        "workspace": "/subscriptions/c4930e90-cd72-4aa5-93e9-2d081d129569/resourceGroups/myRg/providers/Microsoft.OperationalInsights/workspaces/myWorkspace1",
        "status": "Enabled",
        "export": [
          "RawEvents"
        ],
        "disabledDataSources": [],
        "displayName": "Second Solution",
        "iotHubs": [
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/IotHubSecond"
        ],
        "userDefinedResources": {
          "query": "where type != \"microsoft.devices/iothubs\" | where name contains \"iot\"",
          "querySubscriptions": [
            "075423e9-7d33-4166-8bdf-3920b04e3735"
          ]
        },
        "autoDiscoveredResources": [
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735",
          "/subscriptions/075423e9-7d33-4166-8bdf-3920b04e3735/resourceGroups/myRg/providers/Microsoft.Devices/IotHubs/IotHubSecond"
        ],
        "recommendationsConfiguration": [
          {
            "recommendationType": "IoT_ACRAuthentication",
            "name": "Service Principal Not Used with ACR",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_AgentSendsUnutilizedMessages",
            "name": "Agent sending underutilized messages",
            "status": "TurnedOn"
          },
          {
            "recommendationType": "IoT_Baseline",
            "name": "Operating system (OS) baseline validation failure",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_EdgeHubMemOptimize",
            "name": "Edge Hub memory can be optimized",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_EdgeLoggingOptions",
            "name": "No Logging Configured for Edge Module",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_InconsistentModuleSettings",
            "name": "Module Settings Inconsistent in SecurityGroup",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_InstallAgent",
            "name": "Install the Azure Security of Things Agent",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_IPFilter_DenyAll",
            "name": "Default IP Filter Policy should be Deny",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_IPFilter_PermissiveRule",
            "name": "IP Filter rule includes large IP range",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_OpenPorts",
            "name": "Open Ports On Device",
            "status": "Disabled"
          },
          {
            "recommendationType": "IoT_PermissiveFirewallPolicy",
            "name": "Permissive firewall policy in one of the chains was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PermissiveInputFirewallRules",
            "name": "Permissive firewall rule in the input chain was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PermissiveOutputFirewallRules",
            "name": "Permissive firewall rule in the output chain was found",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_PrivilegedDockerOptions",
            "name": "High level permissions configured in Edge model twin for Edge module",
            "status": "Enabled"
          },
          {
            "recommendationType": "IoT_SharedCredentials",
            "name": "Same Authentication Credentials used by multiple devices",
            "status": "Disabled"
          },
          {
            "recommendationType": "IoT_VulnerableTLSCipherSuite",
            "name": "TLS cipher suite upgrade",
            "status": "Enabled"
          }
        ],
        "unmaskedIpLoggingStatus": "Enabled"
      },
      "systemData": {
        "createdBy": "string",
        "createdByType": "User",
        "createdAt": "2020-04-27T21:53:29.0928001Z",
        "lastModifiedBy": "string",
        "lastModifiedByType": "User",
        "lastModifiedAt": "2020-04-27T21:53:29.0928001Z"
      }
    }
  ]
}

Definitioner

Name	Description
AdditionalWorkspaceDataType	Lista över datatyper som skickas till arbetsytan
AdditionalWorkspacesProperties	Egenskaper för de ytterligare arbetsytorna.
AdditionalWorkspaceType	Typ av arbetsyta.
CloudError	Vanliga felsvar för alla Azure Resource Manager API:er för att returnera felinformation för misslyckade åtgärder. (Detta följer även OData-felsvarsformatet.).
CloudErrorBody	Felinformationen.
createdByType	Den typ av identitet som skapade resursen.
DataSource	Inaktiverade datakällor. Om du inaktiverar dessa datakällor komprometteras systemet.
ErrorAdditionalInfo	Ytterligare information om resurshanteringsfelet.
ExportData	Lista över ytterligare alternativ för att exportera till arbetsytedata.
IoTSecuritySolutionModel	Konfiguration av IoT-säkerhetslösning och resursinformation.
IoTSecuritySolutionsList	Lista över IoT-säkerhetslösningar.
RecommendationConfigStatus	Rekommendationsstatus. När rekommendationsstatusen är inaktiverad genereras inte rekommendationer.
RecommendationConfigurationProperties	Typ av IoT-säkerhetsrekommendering.
RecommendationType	Typ av IoT-säkerhetsrekommendering.
SecuritySolutionStatus	Status för IoT-säkerhetslösningen.
systemData	Metadata som rör skapande och senaste ändring av resursen.
UnmaskedIpLoggingStatus	Status för omaskerad IP-adressloggning
UserDefinedResourcesProperties	Egenskaper för IoT Security-lösningens användardefinierade resurser.

AdditionalWorkspaceDataType

Lista över datatyper som skickas till arbetsytan

Name	Typ	Description
Alerts	string
RawEvents	string

AdditionalWorkspacesProperties

Egenskaper för de ytterligare arbetsytorna.

Name	Typ	Standardvärde	Description
dataTypes	AdditionalWorkspaceDataType[]		Lista över datatyper som skickas till arbetsytan
type	AdditionalWorkspaceType	Sentinel	Typ av arbetsyta.
workspace	string		Resurs-ID för arbetsyta

AdditionalWorkspaceType

Typ av arbetsyta.

Name	Typ	Description
Sentinel	string

CloudError

Vanliga felsvar för alla Azure Resource Manager API:er för att returnera felinformation för misslyckade åtgärder. (Detta följer även OData-felsvarsformatet.).

Name	Typ	Description
error.additionalInfo	ErrorAdditionalInfo[]	Ytterligare information om felet.
error.code	string	Felkoden.
error.details	CloudErrorBody[]	Felinformationen.
error.message	string	Felmeddelandet.
error.target	string	Felmålet.

CloudErrorBody

Felinformationen.

Name	Typ	Description
additionalInfo	ErrorAdditionalInfo[]	Ytterligare information om felet.
code	string	Felkoden.
details	CloudErrorBody[]	Felinformationen.
message	string	Felmeddelandet.
target	string	Felmålet.

createdByType

Den typ av identitet som skapade resursen.

Name	Typ	Description
Application	string
Key	string
ManagedIdentity	string
User	string

DataSource

Inaktiverade datakällor. Om du inaktiverar dessa datakällor komprometteras systemet.

Name	Typ	Description
TwinData	string	Enhetstvillingdata

ErrorAdditionalInfo

Ytterligare information om resurshanteringsfelet.

Name	Typ	Description
info	object	Ytterligare information.
type	string	Den ytterligare informationstypen.

ExportData

Lista över ytterligare alternativ för att exportera till arbetsytedata.

Name	Typ	Description
RawEvents	string	Råhändelser för agent

IoTSecuritySolutionModel

Konfiguration av IoT-säkerhetslösning och resursinformation.

Name	Typ	Standardvärde	Description
id	string		Resurs-ID
location	string		Resursplatsen.
name	string		Resursnamn
properties.additionalWorkspaces	AdditionalWorkspacesProperties[]		Lista över ytterligare arbetsytor
properties.autoDiscoveredResources	string[]		Lista över resurser som automatiskt identifierades som relevanta för säkerhetslösningen.
properties.disabledDataSources	DataSource[]		Inaktiverade datakällor. Om du inaktiverar dessa datakällor komprometteras systemet.
properties.displayName	string		Resursens visningsnamn.
properties.export	ExportData[]		Lista över ytterligare alternativ för att exportera till arbetsytedata.
properties.iotHubs	string[]		IoT Hub resurs-ID:t
properties.recommendationsConfiguration	RecommendationConfigurationProperties[]		Lista över konfigurationsstatus för varje rekommendationstyp.
properties.status	SecuritySolutionStatus	Enabled	Status för IoT-säkerhetslösningen.
properties.unmaskedIpLoggingStatus	UnmaskedIpLoggingStatus	Disabled	Status för omaskerad IP-adressloggning
properties.userDefinedResources	UserDefinedResourcesProperties		Egenskaper för IoT Security-lösningens användardefinierade resurser.
properties.workspace	string		Resurs-ID för arbetsyta
systemData	systemData		Azure Resource Manager metadata som innehåller createdBy och modifiedBy information.
tags	object		Resurstaggar
type	string		Resurstyp

IoTSecuritySolutionsList

Lista över IoT-säkerhetslösningar.

Name	Typ	Description
nextLink	string	URI:n för att hämta nästa sida.
value	IoTSecuritySolutionModel[]	Lista över IoT-säkerhetslösningar

RecommendationConfigStatus

Rekommendationsstatus. När rekommendationsstatusen är inaktiverad genereras inte rekommendationer.

Name	Typ	Description
Disabled	string
Enabled	string

RecommendationConfigurationProperties

Typ av IoT-säkerhetsrekommendering.

Name	Typ	Standardvärde	Description
name	string
recommendationType	RecommendationType		Typ av IoT-säkerhetsrekommendering.
status	RecommendationConfigStatus	Enabled	Rekommendationsstatus. När rekommendationsstatusen är inaktiverad genereras inte rekommendationer.

RecommendationType

Typ av IoT-säkerhetsrekommendering.

Name	Typ	Description
IoT_ACRAuthentication	string	Autentiseringsschema som används för att hämta en edge-modul från en ACR-lagringsplats använder inte autentisering med tjänstens huvudnamn.
IoT_AgentSendsUnutilizedMessages	string	IoT-agentens meddelandestorlekskapacitet är för närvarande underutnyttad, vilket orsakar en ökning av antalet skickade meddelanden. Justera meddelandeintervallen för bättre användning.
IoT_Baseline	string	Identifierade problem med säkerhetsrelaterad systemkonfiguration.
IoT_EdgeHubMemOptimize	string	Du kan optimera edge hub-minnesanvändningen genom att stänga av protokollhuvuden för protokoll som inte används av Edge-moduler i din lösning.
IoT_EdgeLoggingOptions	string	Loggning är inaktiverat för den här edge-modulen.
IoT_IPFilter_DenyAll	string	IP-filterkonfigurationen bör ha regler som definierats för tillåten trafik och bör neka all annan trafik som standard.
IoT_IPFilter_PermissiveRule	string	Ip-adressintervallet Tillåt IP-filterregler är för stort. Alltför tillåtande regler kan göra din IoT-hubb tillgänglig för illvilliga användare.
IoT_InconsistentModuleSettings	string	En minoritet i en enhetssäkerhetsgrupp har inkonsekventa Edge-modulinställningar med resten av gruppen.
IoT_InstallAgent	string	Installera Azure Security of Things Agent.
IoT_OpenPorts	string	En lyssnande slutpunkt hittades på enheten.
IoT_PermissiveFirewallPolicy	string	En tillåten brandväggsprincip hittades (INPUT/OUTPUT). Principen bör neka all trafik som standard och definiera regler för att tillåta nödvändig kommunikation till/från enheten.
IoT_PermissiveInputFirewallRules	string	En regel i brandväggen har hittats som innehåller ett tillåtande mönster för ett brett spektrum av IP-adresser eller portar.
IoT_PermissiveOutputFirewallRules	string	En regel i brandväggen har hittats som innehåller ett tillåtande mönster för ett brett spektrum av IP-adresser eller portar.
IoT_PrivilegedDockerOptions	string	Edge-modulen är konfigurerad för att köras i privilegierat läge, med omfattande Linux-funktioner eller med nätverksåtkomst på värdnivå (skicka/ta emot data till värddatorn).
IoT_SharedCredentials	string	Samma autentiseringsuppgifter för IoT Hub som används av flera enheter. Detta kan tyda på att en illegitima enhet utger sig för att vara en legitim enhet. Det visar också risken för enhetspersonifiering av en angripare.
IoT_VulnerableTLSCipherSuite	string	Osäkra TLS-konfigurationer har identifierats. Omedelbar uppgradering rekommenderas.

SecuritySolutionStatus

Status för IoT-säkerhetslösningen.

Name	Typ	Description
Disabled	string
Enabled	string

systemData

Metadata som rör skapande och senaste ändring av resursen.

Name	Typ	Description
createdAt	string	Tidsstämpeln för resursskapande (UTC).
createdBy	string	Identiteten som skapade resursen.
createdByType	createdByType	Den typ av identitet som skapade resursen.
lastModifiedAt	string	Tidsstämpeln för resursens senaste ändring (UTC)
lastModifiedBy	string	Identiteten som senast ändrade resursen.
lastModifiedByType	createdByType	Den typ av identitet som senast ändrade resursen.

UnmaskedIpLoggingStatus

Status för omaskerad IP-adressloggning

Name	Typ	Description
Disabled	string	Omaskerad IP-loggning är inaktiverad
Enabled	string	Omaskerad IP-loggning är aktiverad

UserDefinedResourcesProperties

Egenskaper för IoT Security-lösningens användardefinierade resurser.

Name	Typ	Description
query	string	Azure Resource Graph fråga som representerar säkerhetslösningens användardefinierade resurser. Krävs för att börja med "where type != "Microsoft.Devices/IotHubs""
querySubscriptions	string[]	Lista över Azure-prenumerations-ID:t där den användardefinierade resursfrågan ska köras.