product_package

Creates, updates, deletes, gets or lists a product_package resource.

Overview

Name	product_package
Type	Resource
Id	azure.security_insight.product_package

Fields

The following fields are returned by SELECT queries:

get

Name	Datatype	Description
id	string	Fully qualified resource ID for the resource. Ex - /subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/{resourceProviderNamespace}/{resourceType}/{resourceName}.
name	string	The name of the resource.
author	object	The author of the package.
categories	object	The categories of the package.
contentId	string	The content id of the package.
contentKind	string	The package kind. Known values are: "Solution" and "Standalone". (Solution, Standalone)
contentProductId	string	Unique ID for the content. It should be generated based on the contentId, contentKind and the contentVersion of the package.
contentSchemaVersion	string	The version of the content schema.
dependencies	object	The support tier of the package.
description	string	The description of the package.
displayName	string	The display name of the package.
etag	string	Etag of the azure resource.
firstPublishDate	string (date)	first publish date package item.
icon	string	the icon identifier. this id can later be fetched from the content metadata.
installedVersion	string	The version of the installed package, null or absent means not installed.
isDeprecated	string	Flag indicates if this template is deprecated. Known values are: "true" and "false". (true, false)
isFeatured	string	Flag indicates if this package is among the featured list. Known values are: "true" and "false". (true, false)
isNew	string	Flag indicates if this is a newly published package. Known values are: "true" and "false". (true, false)
isPreview	string	Flag indicates if this package is in preview. Known values are: "true" and "false". (true, false)
lastPublishDate	string (date)	last publish date for the package item.
metadataResourceId	string	The metadata resource id.
packagedContent	object	The json of the ARM template to deploy. Expandable.
providers	array	Providers for the package item.
publisherDisplayName	string	The publisher display name of the package.
source	object	The source of the package.
support	object	The support tier of the package.
systemData	object	Azure Resource Manager metadata containing createdBy and modifiedBy information.
threatAnalysisTactics	array	the tactics the resource covers.
threatAnalysisTechniques	array	the techniques the resource covers, these have to be aligned with the tactics being used.
type	string	The type of the resource. E.g. "Microsoft.Compute/virtualMachines" or "Microsoft.Storage/storageAccounts".
version	string	the latest version number of the package.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	resource_group_name, workspace_name, package_id, subscription_id		Gets a package by its identifier from the catalog.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
package_id	string	package Id. Required.
resource_group_name	string	The name of the resource group. The name is case insensitive. Required.
subscription_id	string
workspace_name	string	The name of the monitor workspace. Required.

SELECT examples

get

Gets a package by its identifier from the catalog.

SELECT
id,
name,
author,
categories,
contentId,
contentKind,
contentProductId,
contentSchemaVersion,
dependencies,
description,
displayName,
etag,
firstPublishDate,
icon,
installedVersion,
isDeprecated,
isFeatured,
isNew,
isPreview,
lastPublishDate,
metadataResourceId,
packagedContent,
providers,
publisherDisplayName,
source,
support,
systemData,
threatAnalysisTactics,
threatAnalysisTechniques,
type,
version
FROM azure.security_insight.product_package
WHERE resource_group_name = '{{ resource_group_name }}' -- required
AND workspace_name = '{{ workspace_name }}' -- required
AND package_id = '{{ package_id }}' -- required
AND subscription_id = '{{ subscription_id }}' -- required
;