ConvertToPolicy using Shell

This tool converts an Azure Resource Graph query into a policy rule.

You can do the following :

Pass the effect to take in the policy.
Create a policy by passing a policy name to the script.

To run this tool, you'll need to setup your environment

Download SetupGraphToPolicy.sh into cloud shell environment or your shell environement.
Run "source ./SetupGraphToPolicy.sh"
This will set up an alias and also install armclient in your shell.

Usage

You can run commands using graph2policy or ./GraphToPolicy script.

Examples

Generate the policy rule from Graph query with a "deny" action.

graph2policy -q "where type contains 'compute'" -e "deny"

Create a policy for a given graph query.

graph2policy -q "where type =~ 'microsoft.compute/virtualmachines' and isempty(aliases['Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id'])|summarize count()" --effect "audit" --create "AuditNonManagedDiskPolicy"

ConvertToPolicy using Powershell

This tool converts a Azure Resource Graph query into a policy rule.

You can do the following :

Pass what action to take in the policy
Create a policy by passing a policy name to the script.

To run this tool, you'll need to setup the environment

Download GraphToPolicy.ps1 into cloud powershell environment or your powershell environement.
Set up your environment as requested here https://docs.microsoft.com/en-us/azure/governance/resource-graph/first-query-powershell

Usage

go to your user folder. cd /home/username You can run commands using ./GraphToPolicy.ps1 script.

Examples

Generate the policy rule from Graph query with a "deny" action.

./GraphToPolicy.ps1 -q "where type contains 'compute'" -e "deny"

Create a policy for a given graph query

./GraphToPolicy.ps1 -q "where type =~ 'microsoft.compute/virtualmachines' and isempty(aliases['Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id'])|summarize count()" -effect "audit" -create "AuditNonManagedDiskPolicy"

slapointe/ConvertToPolicy

ErrorLooks like something went wrong!

About

Resources

Uh oh!

Stars

Watchers

Forks

Releases

Packages 0

Languages

Error
Looks like something went wrong!

Packages