Azure-Sentinel/Playbooks/HaveIBeenPwned/azuredeploylinkedtemplate.json

214 строки
6.9 KiB
JSON

{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"metadata": {
"title": "Logic Apps Custom Connector and Playbook templates - HaveIBeenPwned",
"description": "This is a linked json file for deploying Have I Been Pwned custom connector + 4 playbooks.",
"prerequisites": [
"1. Generate an API key. Refer this link [ how to generate the API Key](https://haveibeenpwned.com/API/Key)",
"2. HaveIBeenPwned service end point should be known. (e.g. https://{haveibeenpwned.com })"
],
"lastUpdateTime": "2021-07-23T00:00:00.000Z",
"entities": [ "Accounts", "Url's" ],
"tags": [ "Enrichment", "SendEmail", "ResponseonTeams" ],
"support": {
"tier": "community"
},
"author": {
"name": "Accenture"
}
},
"parameters": {
"linkedTemplate_HIBP_Customconnector_Uri": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for HaveIBeenPwned custom connector"
}
},
"linkedTemplate_Playbook_HIBP_Enrich_AccountBreaches_Uri": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for playbook HaveIBeenPwned_Enrichment_GetAccountBreaches"
}
},
"linkedTemplate_Playbook_HIBP_Enrich_SiteBreaches_Uri": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for Playbook HaveIBeenPwned_Enrichment_GetSiteBreaches"
}
},
"linkedTemplate_Playbook_HIBP_ResponseonTeams_Uri": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for Playbook HaveIBeenPwned_ResponseonTeams"
}
},
"linkedTemplate_Playbook_HIBP_SendEmail_Uri": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for Playbook HaveIBeenPwned_SendEmail"
}
},
"HaveIBeenPwnedConnectorName": {
"defaultValue": "HaveIBeenPwnedConnector",
"type": "String",
"metadata": {
"description": "Name of the Customconnector without spaces"
}
},
"ServiceEndPoint": {
"defaultValue": "https://haveibeenpwned.com",
"type": "String",
"metadata": {
"description": "Enter the HaveIBeenPwned endpoint "
}
},
"HaveIBeenPwned_Enrichment_GetAccountBreaches_Playbook_Name": {
"defaultValue": "HaveIBeenPwned_Enrichment_GetAccountBreaches",
"type": "String",
"metadata": {
"description": "Name of the Logic App/Playbook without spaces"
}
},
"HaveIBeenPwned_Enrichment_GetSiteBreaches_Playbook_Name": {
"defaultValue": "HaveIBeenPwned_Enrichment_GetSiteBreaches",
"type": "String",
"metadata": {
"description": "Name of the Logic App/Playbook without spaces"
}
},
"HaveIBeenPwned_ResponseonTeams_Playbook_Name": {
"defaultValue": "HaveIBeenPwned_ResponseonTeams",
"type": "String",
"metadata": {
"description": "Name of the Logic App/Playbook without spaces"
}
},
"HaveIBeenPwned_SendEMail_Playbook_Name": {
"defaultValue": "HaveIBeenPwned_SendEmail",
"type": "String",
"metadata": {
"description": "Name of the Logic App/Playbook without spaces"
}
}
},
"variables": {},
"resources": [
{
"name": "linkedTemplate_HIBP_Customconnector_Uri",
"type": "Microsoft.Resources/deployments",
"apiVersion": "2017-05-10",
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplate_HIBP_Customconnector_Uri')]"
},
"parameters": {
"HaveIBeenPwnedConnectorName": {
"value": "[parameters('HaveIBeenPwnedConnectorName')]"
},
"ServiceEndPoint": {
"value": "[parameters('ServiceEndPoint')]"
}
}
}
},
{
"name": "linkedTemplate_Playbook_HIBP_Enrich_AccountBreaches_Uri",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplate_HIBP_Customconnector_Uri')]"
],
"type": "Microsoft.Resources/deployments",
"apiVersion": "2017-05-10",
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplate_Playbook_HIBP_Enrich_AccountBreaches_Uri')]"
},
"parameters": {
"PlaybookName": {
"Value": "[parameters('HaveIBeenPwned_Enrichment_GetAccountBreaches_Playbook_Name')]"
},
"HaveIBeenPwnedConnectorName": {
"Value": "[parameters('HaveIBeenPwnedConnectorName')]"
}
}
}
},
{
"name": "linkedTemplate_Playbook_HIBP_Enrich_SiteBreaches_Uri",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplate_HIBP_Customconnector_Uri')]"
],
"type": "Microsoft.Resources/deployments",
"apiVersion": "2017-05-10",
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplate_Playbook_HIBP_Enrich_SiteBreaches_Uri')]"
},
"parameters": {
"PlaybookName": {
"Value": "[parameters('HaveIBeenPwned_Enrichment_GetSiteBreaches_Playbook_Name')]"
},
"HaveIBeenPwnedConnectorName": {
"Value": "[parameters('HaveIBeenPwnedConnectorName')]"
}
}
}
},
{
"name": "linkedTemplate_Playbook_HIBP_ResponseonTeams_Uri",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplate_HIBP_Customconnector_Uri')]"
],
"type": "Microsoft.Resources/deployments",
"apiVersion": "2017-05-10",
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplate_Playbook_HIBP_ResponseonTeams_Uri')]"
},
"parameters": {
"PlaybookName": {
"Value": "[parameters('HaveIBeenPwned_ResponseonTeams_Playbook_Name')]"
},
"HaveIBeenPwnedConnectorName": {
"Value": "[parameters('HaveIBeenPwnedConnectorName')]"
}
}
}
},
{
"name": "linkedTemplate_Playbook_HIBP_SendEmail_Uri",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplate_HIBP_Customconnector_Uri')]"
],
"type": "Microsoft.Resources/deployments",
"apiVersion": "2017-05-10",
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplate_Playbook_HIBP_SendEmail_Uri')]"
},
"parameters": {
"PlaybookName": {
"Value": "[parameters('HaveIBeenPwned_SendEMail_Playbook_Name')]"
},
"HaveIBeenPwnedConnectorName": {
"Value": "[parameters('HaveIBeenPwnedConnectorName')]"
}
}
}
}
]
}