ConvertToPolicy

KO | EN

gitlite — search

#python #hacktoberfest #react #golang #machine-learning #rust #deep-learning #linux #windows #awesome #cli #kubernetes #security #ios

ConvertToPolicy

(★ 17)

Convert Azure resource graph queries into policies.

ConvertToPolicy Latest Version Download

Download Latest Version (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# ConvertToPolicy using Shell
This tool converts an Azure Resource Graph query into a policy rule.

You can do the following :

- Pass the effect to take in the policy.
- Create a policy by passing a policy name to the script.

To run this tool, you'll need to setup your environment
1. Download SetupGraphToPolicy.sh into cloud shell environment or your shell environement.
2. Run "source ./SetupGraphToPolicy.sh"
3. This will set up an alias and also install armclient in your shell.

## Usage
You can run commands using *graph2policy* or *./GraphToPolicy* script.

## Examples
1. Generate the policy rule from Graph query with a "deny" action.

*graph2policy -q "where type contains 'compute'" -e "deny"*

2. Create a policy for a given graph query.

*graph2policy -q "where type =~ 'microsoft.compute/virtualmachines' and isempty(aliases['Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id'])|summarize count()" --effect "audit" --create "AuditNonManagedDiskPolicy"*

# ConvertToPolicy using Powershell
This tool converts a Azure Resource Graph query into a policy rule.

You can do the following :

- Pass what action to take in the policy
- Create a policy by passing a policy name to the script.

To run this tool, you'll need to setup the environment
1. Download GraphToPolicy.ps1 into cloud powershell environment or your powershell environement.
2. Set up your environment as requested here https://docs.microsoft.com/en-us/azure/governance/resource-graph/first-query-powershell

## Usage
go to your user folder. *cd /home/username*
You can run commands using *./GraphToPolicy.ps1* script.

## Examples
1. Generate the policy rule from Graph query with a "deny" action.

*./GraphToPolicy.ps1 -q "where type contains 'compute'" -e "deny"*

2. Create a policy for a given graph query

*./GraphToPolicy.ps1 -q "where type =~ 'microsoft.compute/virtualmachines' and isempty(aliases['Microsoft.Compute/virtualMachines/storageProfile.osDisk.managedDisk.id'])|summarize count()" -effect "audit" -create "AuditNonManagedDiskPolicy"*

ConvertToPolicy

ConvertToPolicy Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

ConvertToPolicy

ConvertToPolicy Latest Version Download

Today's picks

Was this content helpful?

Recent Feedback

Download README