Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Subscription Not Found (HTTP - Get Azure VM) #852

Open
lok1946 opened this issue Mar 14, 2024 · 2 comments
Open

Subscription Not Found (HTTP - Get Azure VM) #852

lok1946 opened this issue Mar 14, 2024 · 2 comments

Comments

@lok1946
Copy link

lok1946 commented Mar 14, 2024

Bug
Having set up the logic app according to instructions and assigned appropriate permission roles, when a security alert from Microsoft Defender for Cloud triggers the logic app all steps are completed successfully but consistently fail at HTTP - Get Azure VM).

To Reproduce
You would need to monitor the process in our Azure Government environment.

Expected behavior
The expected behavior is for the logic app to complete its flow. As a part of the flow to add an IP address to the denied list in the NSG and to email me at the specified email address.

Additional context
Add any other context about the problem here.

@bbhorrigan
Copy link

Did you ever figure this out? I was down the path of figuring out if it had something to do with the .US domain, I had a similar issue I was trying to sort thru.

@lok1946
Copy link
Author

lok1946 commented Jun 5, 2024

No. Haven't found a resolution for this. I can change the HTTP_Get_VM to a non-managed request (no http) and it works as it should getting all the specifications of the VM. However other HTTP sections of the app are more difficult to resolve. If I can get rid of all the HTTP and still have the results I'm looking for, then I'll be happy with this app.
BTW: I got this app from a verifiable source on GitHub. Here is the URL if you'd like to take a look at it: https://github.com/Azure/Microsoft-Defender-for-Cloud/tree/main/Workflow%20automation/BlockBruteforceAttack

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants