Azure-Sentinel/Solutions/CiscoMeraki/linkedtemplate.json

286 строки
11 KiB
JSON

{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"metadata": {
"title": "Logic Apps Custom Connectors and Playbook Templates - Cisco Meraki",
"description": "This is a linked json file for deploying Cisco Meraki custom connector + 5 playbooks.",
"prerequisites": [
"1. Cisco Meraki API Key should be known to establish a connection with Cisco Meraki Custom Connector.",
"2. Cisco Meraki Dashboard API service endpoint should be known.",
"3. Organization name should be known.",
"4. Network name should be known.",
"5. Network Group Policy name should be known."
],
"lastUpdateTime": "2021-08-03T00:00:00.000Z",
"entities": [ "URL", "IP", "Host" ],
"tags": [ "Enrichment", "Remediation" ],
"support": {
"tier": "community"
},
"author": {
"name": "Accenture"
}
},
"parameters": {
"linkedTemplateCiscoMerakiCustomConnectorURI": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for Cisco Meraki custom connector"
}
},
"linkedTemplatePlaybookBlockDeviceClientURI": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for Block Device Client playbook"
}
},
"linkedTemplatePlaybookBlockIPAddressURI": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for Block IP Address playbook"
}
},
"linkedTemplatePlaybookBlockURLURI": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for Block URL playbook"
}
},
"linkedTemplatePlaybookEnrichmentIPAddressURI": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for IP Address Enrichment playbook"
}
},
"linkedTemplatePlaybookEnrichmentURLURI": {
"type": "string",
"metadata": {
"description": "The Uri of the linked template for URL Enrichment playbook"
}
},
"BlockDeviceClientPlaybookName": {
"type": "String",
"defaultValue": "Block-Device-Client-Meraki",
"metadata": {
"description": "Enter name for Block Device Client playbook without spaces"
}
},
"BlockIPAddressPlaybookName": {
"type": "String",
"defaultValue": "Block-IP-Address-Meraki",
"metadata": {
"description": "Enter name for Block IP Address playbook without spaces"
}
},
"BlockURLPlaybookName": {
"type": "String",
"defaultValue": "Block-URL-Meraki",
"metadata": {
"description": "Enter name for Block URL playbook without spaces"
}
},
"EnrichmentIPAddressPlaybookName": {
"type": "String",
"defaultValue": "IP-Address-Enrichment-Meraki",
"metadata": {
"description": "Enter name for IP Address Enrichment playbook without spaces"
}
},
"EnrichmentURLPlaybookName": {
"type": "String",
"defaultValue": "URL-Enrichment-Meraki",
"metadata": {
"description": "Enter name for URL Enrichment playbook without spaces"
}
},
"OrganizationName": {
"type": "string",
"metadata": {
"description": "Enter organization name"
}
},
"NetworkName": {
"type": "string",
"metadata": {
"description": "Enter network name"
}
},
"GroupPolicy": {
"type": "string",
"metadata": {
"description": "Enter group policy name"
}
},
"CiscoMerakiConnectorName": {
"type": "string",
"metadata": {
"description": "Enter name of Cisco Meraki Connector without spaces"
}
},
"ServiceEndPoint": {
"type": "String",
"metadata": {
"description": "Enter the Cisco Meraki Dashboard API Service EndPoint as 'https://{CiscoMerakiDomain}/api/{VersionNumber}'"
}
}
},
"variables": {},
"resources": [
{
"name": "linkedTemplateCiscoMerakiCustomConnectorURI",
"type": "Microsoft.Resources/deployments",
"apiVersion": "2018-05-01",
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplateCiscoMerakiCustomConnectorURI')]"
},
"parameters": {
"CiscoMerakiConnectorName": {
"value": "[parameters('CiscoMerakiConnectorName')]"
},
"ServiceEndPoint": {
"value": "[parameters('ServiceEndPoint')]"
}
}
}
},
{
"name": "linkedTemplatePlaybookBlockHostURI",
"type": "Microsoft.Resources/deployments",
"apiVersion": "2018-05-01",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplateCiscoMerakiCustomConnectorURI')]"
],
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplatePlaybookBlockDeviceClientURI')]"
},
"parameters": {
"PlaybookName": {
"value": "[parameters('BlockDeviceClientPlaybookName')]"
},
"CiscoMerakiConnectorName": {
"value": "[parameters('CiscoMerakiConnectorName')]"
},
"OrganizationName": {
"value": "[parameters('OrganizationName')]"
},
"NetworkName": {
"value": "[parameters('NetworkName')]"
},
"GroupPolicy": {
"value": "[parameters('GroupPolicy')]"
}
}
}
},
{
"name": "linkedTemplatePlaybookBlockIPURI",
"type": "Microsoft.Resources/deployments",
"apiVersion": "2018-05-01",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplateCiscoMerakiCustomConnectorURI')]"
],
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplatePlaybookBlockIPAddressURI')]"
},
"parameters": {
"PlaybookName": {
"value": "[parameters('BlockIPAddressPlaybookName')]"
},
"CiscoMerakiConnectorName": {
"value": "[parameters('CiscoMerakiConnectorName')]"
},
"OrganizationName": {
"value": "[parameters('OrganizationName')]"
},
"NetworkName": {
"value": "[parameters('NetworkName')]"
}
}
}
},
{
"name": "linkedTemplatePlaybookBlockURLURI",
"type": "Microsoft.Resources/deployments",
"apiVersion": "2018-05-01",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplateCiscoMerakiCustomConnectorURI')]"
],
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplatePlaybookBlockURLURI')]"
},
"parameters": {
"PlaybookName": {
"value": "[parameters('BlockURLPlaybookName')]"
},
"CiscoMerakiConnectorName": {
"value": "[parameters('CiscoMerakiConnectorName')]"
},
"OrganizationName": {
"value": "[parameters('OrganizationName')]"
},
"NetworkName": {
"value": "[parameters('NetworkName')]"
}
}
}
},
{
"name": "linkedTemplatePlaybookEnrichmentIPURI",
"type": "Microsoft.Resources/deployments",
"apiVersion": "2018-05-01",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplateCiscoMerakiCustomConnectorURI')]"
],
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplatePlaybookEnrichmentIPAddressURI')]"
},
"parameters": {
"PlaybookName": {
"value": "[parameters('EnrichmentIPAddressPlaybookName')]"
},
"CiscoMerakiConnectorName": {
"value": "[parameters('CiscoMerakiConnectorName')]"
},
"OrganizationName": {
"value": "[parameters('OrganizationName')]"
}
}
}
},
{
"name": "linkedTemplatePlaybookEnrichmentURLURI",
"type": "Microsoft.Resources/deployments",
"apiVersion": "2018-05-01",
"dependsOn": [
"[resourceId('Microsoft.Resources/deployments', 'linkedTemplateCiscoMerakiCustomConnectorURI')]"
],
"properties": {
"mode": "Incremental",
"templateLink": {
"uri": "[parameters('linkedTemplatePlaybookEnrichmentURLURI')]"
},
"parameters": {
"PlaybookName": {
"value": "[parameters('EnrichmentURLPlaybookName')]"
},
"CiscoMerakiConnectorName": {
"value": "[parameters('CiscoMerakiConnectorName')]"
},
"OrganizationName": {
"value": "[parameters('OrganizationName')]"
}
}
}
}
]
}