Skip to content

Commit 8f5f6da

Browse files
incorporate Ofer updates and remove table
1 parent 3de9273 commit 8f5f6da

File tree

4 files changed

+19
-15
lines changed

4 files changed

+19
-15
lines changed

articles/sentinel/ci-cd-custom-content.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -38,14 +38,14 @@ If you find content in a public repository where you aren't a contributor, first
3838

3939
## Plan your repository content
4040

41-
Repository content must be stored as [Bicep files](../azure-resource-manager/bicep/file.md) or [Azure Resource Manager (ARM) templates](../azure-resource-manager/templates/overview.md). Bicep is more intuitive and makes it easier to describe Azure resources and Microsoft Sentinel content. Deploy Bicep files alongside or instead of ARM JSON templates.
41+
Repository content must be stored as [Bicep files](../azure-resource-manager/bicep/file.md) or [Azure Resource Manager (ARM) templates](../azure-resource-manager/templates/overview.md). However, Bicep is more intuitive and makes it easier to describe Azure resources and Microsoft Sentinel content.
4242

43-
| Repository | supported formats |
44-
|---|---|
45-
| GitHub | [Bicep files](../azure-resource-manager/bicep/file.md)<br>[ARM templates](../azure-resource-manager/templates/overview.md) |
46-
| Azure DevOps | [Bicep files](../azure-resource-manager/bicep/file.md)<br>[ARM templates](../azure-resource-manager/templates/overview.md) |
43+
Deploy Bicep file templates alongside or instead of ARM JSON templates. If you're considering infrastructure as code options, we recommend looking at Bicep. For more information, see [What is Bicep?](../azure-resource-manager/bicep/overview.md).
4744

48-
Even if your original content is an ARM template, consider converting to Bicep to make the review and update processes less complex. For more information on converting ARM templates, see [Decompiling ARM template JSON to Bicep](../azure-resource-manager/bicep/decompile.md).
45+
> [!IMPORTANT]
46+
> In order to use Bicep templates, your repositories connection needs to be updated if your connection was created before November 1st, 2024. Repositories connections must be [removed](ci-cd.md#remove-a-repository-connection) and recreated in order to update.
47+
48+
Even if your original content is an ARM template, consider converting to Bicep to make the review and update processes less complex. Bicep is closely related to ARM because during a deployment, each Bicep file is converted to an ARM template. For more information on converting ARM templates, see [Decompiling ARM template JSON to Bicep](../azure-resource-manager/bicep/decompile.md).
4949

5050
> [!NOTE]
5151
> Known Bicep limitations:
@@ -68,7 +68,7 @@ The following Microsoft Sentinel content types can be deployed through a reposit
6868
6969
The repositories deployment doesn't validate the content except to confirm it's in the correct JSON or Bicep format. The first step to validate your content is to test it within Microsoft Sentinel. Another option is to apply the [Microsoft Sentinel GitHub validation process](https://github.com/Azure/Azure-Sentinel/wiki#test-your-contribution) and tools to complement your validation process.
7070

71-
A sample repository is available with ARM templates for each of the content types listed above. The repo also demonstrates how to use advanced features of repository connections. For more information, see [Sentinel CICD repositories sample](https://github.com/SentinelCICD/RepositoriesSampleContent).
71+
A sample repository is available with templates for each of the content types listed above. The repo also demonstrates how to use advanced features of repository connections. For more information, see [Sentinel CICD repositories sample](https://github.com/SentinelCICD/RepositoriesSampleContent).
7272

7373

7474
:::image type="content" source="media/ci-cd-custom-content/repositories-connection-success.png" alt-text="Screenshot of a successful repository connection. The RepositoriesSampleContent is shown. This screenshot is after the sample was imported from the SentinelCICD repo to a private GitHub repo in the FourthCoffee organization." lightbox="media/ci-cd-custom-content/repositories-connection-success.png":::
@@ -77,7 +77,7 @@ A sample repository is available with ARM templates for each of the content type
7777
### Maximum connections and deployments
7878

7979
- Each Microsoft Sentinel workspace is currently limited to **five repository connections**.
80-
- Each Azure resource group is limited to **800 deployments** in its deployment history. If you have a high volume of ARM template deployments in your resource group(s), you may see the `Deployment QuotaExceeded` error. For more information, see [DeploymentQuotaExceeded](/azure/azure-resource-manager/templates/deployment-quota-exceeded) in the Azure Resource Manager templates documentation.
80+
- Each Azure resource group is limited to **800 deployments** in its deployment history. If you have a high volume of template deployments in your resource group(s), you may see the `Deployment QuotaExceeded` error. For more information, see [DeploymentQuotaExceeded](/azure/azure-resource-manager/templates/deployment-quota-exceeded) in the Azure Resource Manager templates documentation.
8181

8282

8383
## Improve performance with smart deployments

articles/sentinel/ci-cd-custom-deploy.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -240,3 +240,4 @@ A sample repository is available demonstrating the deployment config file and al
240240
- [Understand the structure and syntax of Bicep files](../azure-resource-manager/bicep/file.md)
241241
- [Create Resource Manager parameter file](../azure-resource-manager/templates/parameter-files.md)
242242
- [Parameters in ARM templates](../azure-resource-manager/templates/parameters.md)
243+
- [Parameters in Bicep](../azure-resource-manager/bicep/parameters.md)

articles/sentinel/ci-cd.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -132,7 +132,7 @@ Deleting content from your repository doesn't delete it from your Microsoft Sent
132132

133133
## Remove a repository connection
134134

135-
This procedure describes how to remove the connection to a source control repository from Microsoft Sentinel.
135+
This procedure describes how to remove the connection to a source control repository from Microsoft Sentinel. In order to use Bicep templates, your repository connection must be newer than November 1st, 2024. Use this procedure to remove the connection and recreate it in order to update the connection.
136136

137137
**To remove your connection**:
138138

articles/sentinel/whats-new.md

Lines changed: 9 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,21 +22,24 @@ Get notified when this page is updated by copying and pasting the following URL
2222

2323
[!INCLUDE [reference-to-feature-availability](includes/reference-to-feature-availability.md)]
2424

25-
## December 2024
25+
## January 2025
2626

2727
- [Bicep template support for repositories (Preview)](#bicep-template-support-for-repositories-preview)
28+
29+
### Bicep template support for repositories (Preview)
30+
Use Bicep templates alongside or as a replacement of ARM JSON templates in Microsoft Sentinel repositories. Bicep provides an intuitive way to create templates of Azure resources and Microsoft Sentinel content items. Not only is it easier to develop new content items, Bicep makes reviewing and updating content easier for anyone that's a part of the continuous integration and delivery of your Microsoft Sentinel content.
31+
32+
For more information, see [Plan your repository content](ci-cd-custom-content.md#plan-your-repository-content).
33+
34+
## December 2024
35+
2836
- [New SOC optimization recommendation based on similar organizations (Preview)](#new-soc-optimization-recommendation-based-on-similar-organizations-preview)
2937
- [Agentless deployment for SAP applications (Limited preview)](#agentless-deployment-for-sap-applications-limited-preview)
3038
- [Microsoft Sentinel workbooks now available to view directly in the Microsoft Defender portal](#microsoft-sentinel-workbooks-now-available-to-view-directly-in-the-microsoft-defender-portal)
3139
- [Unified Microsoft Sentinel solution for Microsoft Business Apps](#unified-microsoft-sentinel-solution-for-microsoft-business-apps)
3240
- [New documentation library for Microsoft's unified security operations platform](#new-documentation-library-for-microsofts-unified-security-operations-platform)
3341
- [New S3-based data connector for Amazon Web Services WAF logs (Preview)](#new-s3-based-data-connector-for-amazon-web-services-waf-logs-preview)
3442

35-
### Bicep template support for repositories (Preview)
36-
Use Bicep templates alongside or as a replacement of ARM JSON templates in Microsoft Sentinel repositories. Bicep provides an intuitive way to create templates of Azure resources and Microsoft Sentinel content items. Not only is it easier to develop new content items, Bicep makes reviewing and updating content easier for anyone that's a part of the continuous integration and delivery of your Microsoft Sentinel content.
37-
38-
For more information, see [Plan your repository content](ci-cd-custom-content.md#plan-your-repository-content).
39-
4043
### New SOC optimization recommendation based on similar organizations (Preview)
4144

4245
SOC optimization now includes new recommendations for adding data sources to your workspace based on the security posture of other customers in similar industries and sectors as you, and with similar data ingestion patterns. Add the recommended data sources to improve security coverage for your organization.

0 commit comments

Comments
 (0)