Merge pull request #10824 from Azure/v-rusraut/multicloudreleasenotei…

…ssue Repackage Multicloud
Azure · Jul 16, 2024 · 3b853e4 · 3b853e4
2 parents 409f9b3 + f7241b9
commit 3b853e4
Show file tree

Hide file tree

Showing 3 changed files with 14 additions and 6 deletions.
diff --git a/Solutions/Multi Cloud Attack Coverage Essentials - Resource Abuse/Package/3.0.3.zip b/Solutions/Multi Cloud Attack Coverage Essentials - Resource Abuse/Package/3.0.3.zip
diff --git a/Solutions/Multi Cloud Attack Coverage Essentials - Resource Abuse/Package/mainTemplate.json b/Solutions/Multi Cloud Attack Coverage Essentials - Resource Abuse/Package/mainTemplate.json
@@ -99,7 +99,15 @@
       "analyticRuleTemplateSpecName9": "[concat(parameters('workspace'),'/Microsoft.SecurityInsights/',concat(parameters('workspace'),'-ar-',uniquestring('f4a28082-2808-4783-9736-33c1ae117475')))]",
       "_analyticRulecontentProductId9": "[concat(take(variables('_solutionId'),50),'-','ar','-', uniqueString(concat(variables('_solutionId'),'-','AnalyticsRule','-','f4a28082-2808-4783-9736-33c1ae117475','-', '1.0.1')))]"
     },
-    "_solutioncontentProductId": "[concat(take(variables('_solutionId'),50),'-','sl','-', uniqueString(concat(variables('_solutionId'),'-','Solution','-',variables('_solutionId'),'-', variables('_solutionVersion'))))]"
+    "_solutioncontentProductId": "[concat(take(variables('_solutionId'),50),'-','sl','-', uniqueString(concat(variables('_solutionId'),'-','Solution','-',variables('_solutionId'),'-', variables('_solutionVersion'))))]",
+    "ProjectId": "ProjectId",
+    "_ProjectId": "[variables('ProjectId')]",
+    "SystemAlertId": "SystemAlertId",
+    "_SystemAlertId": "[variables('SystemAlertId')]",
+    "RDSInstanceId": "RDSInstanceId",
+    "_RDSInstanceId": "[variables('RDSInstanceId')]",
+    "GCPProjctId": "GCPProjctId",
+    "_GCPProjctId": "[variables('GCPProjctId')]"
   },
   "resources": [
     {
@@ -353,7 +361,7 @@
                   "GCPUserAgent": "GCPUserUA",
                   "CorrelationWith": "GCPAuditLogs",
                   "AWSArn": "Arn",
-                  "GCPProjectId": "ProjectId"
+                  "GCPProjectId": "[variables('_ProjectId')]"
                 },
                 "alertDetailsOverride": {
                   "alertSeverityColumnName": "Severity",
@@ -537,11 +545,11 @@
                   "FirstAlert": "FirstAlert",
                   "AlertUserUPN": "AlertUserUPN",
                   "ServiceName": "ServiceName",
-                  "GCPProjctId": "GCPProjctId",
+                  "GCPProjctId": "[variables('_GCPProjctId')]",
                   "AlertName": "AlertName",
                   "CorrelationWith": "GCPAuditLogs",
                   "Request": "Request",
-                  "SystemAlertId": "SystemAlertId",
+                  "SystemAlertId": "[variables('_SystemAlertId')]",
                   "TimeDiff": "TimeDiff",
                   "GCPCallerUA": "GCPCallerUA",
                   "Tactics": "Tactics"
@@ -715,7 +723,7 @@
                   "AzureUserAgent": "UserAgent",
                   "AWSresourceType": "AWSresourceType",
                   "AWSAlertUserName": "RDSUser",
-                  "AWSInstanceId": "RDSInstanceId",
+                  "AWSInstanceId":"[variables('_RDSInstanceId')]",
                   "AzureUser": "UserPrincipalName",
                   "AzureOperationName": "OperationName"
                 },

diff --git a/Solutions/Multi Cloud Attack Coverage Essentials - Resource Abuse/ReleaseNotes.md b/Solutions/Multi Cloud Attack Coverage Essentials - Resource Abuse/ReleaseNotes.md
@@ -1,5 +1,5 @@
 | **Version** | **Date Modified (DD-MM-YYYY)** | **Change History**                                                 |
-|-------------|--------------------------------|--------------------------------------------------------------------|                             |
+|-------------|--------------------------------|--------------------------------------------------------------------|
 | 3.0.3       | 07-06-2024                     | Analytical Rule description updated                                |
 | 3.0.2       | 08-04-2024                     | Added Account and FullName in entity mapping                       |
 | 3.0.1       | 23-02-2024                     | Tagged for dependent solutions for deployment                      |