You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/defender-for-cloud/subassessment-rest-api.md
+8-7Lines changed: 8 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -15,16 +15,17 @@ Get security subassessments on all your scanned resources inside a scope.
15
15
## Overview
16
16
17
17
Use Azure Resource Graph (ARG) to access vulnerability assessment results pragmatically for both registry and runtime recommendations.
18
-
Learn more about [ARG references and query examples](/azure/governance/resource-graph/overview)
19
-
*[Overview of Azure Resource Graph - Azure Resource Graph | Microsoft Learn
18
+
Learn more about [ARG references and query examples](/azure/governance/resource-graph/overview).
20
19
21
-
Azure container registry vulnerabilities sub assessments are published to ARG as part of the security resources. For more information see: [Security Resources ARG Query Samples](https://learn.microsoft.com/azure/governance/resource-graph/samples/samples-by-table?tabs=azure-cli#securityresources).
22
-
*[Generic Security Sub Assessment Query Azure container registry vulnerabilities sub assessments are published to ARG as part of the security resources. For more information see: [Security Resources ARG Query Samples](/azure/governance/resource-graph/samples/samples-by-table?tabs=azure-cli#securityresources).
As can be seen in the Generic Security Sub Assessment Query example, in order to pull specific sub assessments, you need the assessment key, for MDVM powered sub-assessments (AKA AzureContainerRegistryVulnerability) the key is **“c0b7cfc6-3172-465a-b378-53c7ff2cc0d5”**.
27
-
Below is a basic query to ARG which can be used as a reference to more elaborate queries. In this query we pull the first sub assessment generated today.
27
+
As can be seen in the Generic Security Sub Assessment Query example, in order to pull specific sub assessments, you need the assessment key. For MDVM powered sub-assessments (AKA AzureContainerRegistryVulnerability) the key is **“c0b7cfc6-3172-465a-b378-53c7ff2cc0d5”**.
28
+
Below is a basic query to ARG which can be used as a reference to more elaborate queries. In this query we pull the first sub assessment generated in the last hour.
28
29
```kql
29
30
securityresources
30
31
| where type =~ "microsoft.security/assessments/subassessments" and properties.additionalData.assessedResourceType == "AzureContainerRegistryVulnerability"
0 commit comments