Skip to main content

secure_score_controls

Creates, updates, deletes, gets or lists a secure_score_controls resource.

Overview

Namesecure_score_controls
TypeResource
Idazure.security.secure_score_controls

Fields

The following fields are returned by SELECT queries:

NameDatatypeDescription
idstringFully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
namestringThe name of the resource.
definitionobjectInformation about the security control.
displayNamestringUser friendly display name of the control.
healthyResourceCountintegerNumber of healthy resources in the control.
notApplicableResourceCountintegerNumber of not applicable resources in the control.
scoreobjectActual score object for the control.
systemDataobjectAzure Resource Manager metadata containing createdBy and modifiedBy information.
typestringThe type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".
unhealthyResourceCountintegerNumber of unhealthy resources in the control.
weightintegerThe relative weight for this specific control in each of your subscriptions. Used when calculating an aggregated score for this control across all of your subscriptions.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
list_by_secure_scoreselectsecure_score_name, subscription_id$expandGet all security controls for a specific initiative within a scope.
listselectsubscription_id$expandGet all security controls within a scope.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
secure_score_namestringThe initiative name. For the ASC Default initiative, use 'ascScore' as in the sample request below. Required.
subscription_idstring
$expandstringOData expand. Optional. "definition" Default value is None.

SELECT examples

Get all security controls for a specific initiative within a scope.

SELECT
id,
name,
definition,
displayName,
healthyResourceCount,
notApplicableResourceCount,
score,
systemData,
type,
unhealthyResourceCount,
weight
FROM azure.security.secure_score_controls
WHERE secure_score_name = '{{ secure_score_name }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
AND $expand = '{{ $expand }}'
;