你当前正在访问 Microsoft Azure Global Edition 技术文档网站。如果需要访问由世纪互联运营的 Microsoft Azure 中国技术文档网站，请访问 https://docs.azure.cn。

Standard Assignments - Create

服务:: Defender for Cloud

API 版本:: 2024-08-01

此操作使用给定的范围和名称创建或更新标准分配。标准分配适用于其范围内包含的所有资源。例如，在资源组范围内分配策略时，该策略将应用于该组中的所有资源。

PUT https://management.azure.com/{resourceId}/providers/Microsoft.Security/standardAssignments/{standardAssignmentName}?api-version=2024-08-01

URI 参数

名称	在	必需	类型	说明
resourceId	path	True	string	资源的标识符。
standardAssignmentName	path	True	string pattern: [{]?[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?$	标准分配分配键 - 标准分配的唯一键
api-version	query	True	string minLength: 1	用于此操作的 API 版本。

请求正文

名称	类型	说明
properties.assignedStandard	AssignedStandardItem	在给定范围内应用于此标准分配的标准项
properties.attestationData	AttestationData	有关具有证明效果的分配的其他数据
properties.description	string	standardAssignment 的说明
properties.displayName	string	standardAssignment 的显示名称
properties.effect	effect	此分配的预期效果（审核/豁免/证明）
properties.excludedScopes	string[]	排除的范围，筛选掉作用域的后代（管理范围）
properties.exemptionData	ExemptionData	有关具有豁免效果的分配的其他数据
properties.expiresOn	string (date-time)	此分配的到期日期为完整 ISO 日期
properties.metadata	StandardAssignmentMetadata	标准分配元数据。

响应

名称	类型	说明
200 OK	StandardAssignment	确定 - 已成功更新标准分配
201 Created	StandardAssignment	创建 - 返回有关新标准分配的信息。
Other Status Codes	ErrorResponse	描述操作失败的原因的错误响应。

安全性

azure_auth

Azure Active Directory OAuth2 流

类型: oauth2
流向: implicit
授权 URL: https://login.microsoftonline.com/common/oauth2/authorize

作用域

名称	说明
user_impersonation	模拟用户帐户

示例

Put an audit standard assignment

Put exemption standard assignment

Put an audit standard assignment

示例请求

PUT https://management.azure.com/subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8?api-version=2024-08-01

{
  "properties": {
    "displayName": "ASC Default",
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "effect": "Audit",
    "excludedScopes": []
  }
}


import com.azure.resourcemanager.security.models.AssignedStandardItem;
import com.azure.resourcemanager.security.models.Effect;
import java.util.Arrays;

/**
 * Samples for StandardAssignments Create.
 */
public final class Main {
    /*
     * x-ms-original-file:
     * specification/security/resource-manager/Microsoft.Security/stable/2024-08-01/examples/StandardAssignments/
     * PutStandardAssignment.json
     */
    /**
     * Sample code: Put an audit standard assignment.
     * 
     * @param manager Entry point to SecurityManager.
     */
    public static void putAnAuditStandardAssignment(com.azure.resourcemanager.security.SecurityManager manager) {
        manager.standardAssignments().define("1f3afdf9-d0c9-4c3d-847f-89da613e70a8")
            .withExistingResourceId("subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23").withDisplayName("ASC Default")
            .withDescription("Set of policies monitored by Azure Security Center for cross cloud")
            .withAssignedStandard(new AssignedStandardItem()
                .withId("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"))
            .withEffect(Effect.AUDIT).withExcludedScopes(Arrays.asList()).create();
    }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

from azure.identity import DefaultAzureCredential

from azure.mgmt.security import SecurityCenter

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-security
# USAGE
    python put_standard_assignment.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = SecurityCenter(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.standard_assignments.create(
        resource_id="subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23",
        standard_assignment_name="1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
        standard_assignment={
            "properties": {
                "assignedStandard": {
                    "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
                },
                "description": "Set of policies monitored by Azure Security Center for cross cloud",
                "displayName": "ASC Default",
                "effect": "Audit",
                "excludedScopes": [],
            }
        },
    )
    print(response)


# x-ms-original-file: specification/security/resource-manager/Microsoft.Security/stable/2024-08-01/examples/StandardAssignments/PutStandardAssignment.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

示例响应

状态代码:: 200

{
  "id": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "properties": {
    "displayName": "ASC Default",
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "effect": "Audit",
    "excludedScopes": [],
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

状态代码:: 201

{
  "id": "subscriptions/20ff7fc3-e762-44dd-bd96-b71116dcdc23/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "properties": {
    "displayName": "ASC Default",
    "description": "Set of policies monitored by Azure Security Center for cross cloud",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "effect": "Audit",
    "excludedScopes": [],
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

Put exemption standard assignment

示例请求

PUT https://management.azure.com/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/providers/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8?api-version=2024-08-01

{
  "properties": {
    "displayName": "Test exemption",
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "effect": "Exempt",
    "expiresOn": "2022-05-01T19:50:47.083633Z",
    "exemptionData": {
      "exemptionCategory": "waiver",
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      }
    }
  }
}


import com.azure.resourcemanager.security.models.AssignedAssessmentItem;
import com.azure.resourcemanager.security.models.AssignedStandardItem;
import com.azure.resourcemanager.security.models.Effect;
import com.azure.resourcemanager.security.models.ExemptionCategory;
import com.azure.resourcemanager.security.models.StandardAssignmentPropertiesExemptionData;
import java.time.OffsetDateTime;

/**
 * Samples for StandardAssignments Create.
 */
public final class Main {
    /*
     * x-ms-original-file:
     * specification/security/resource-manager/Microsoft.Security/stable/2024-08-01/examples/StandardAssignments/
     * PutExemptionStandardAssignment.json
     */
    /**
     * Sample code: Put exemption standard assignment.
     * 
     * @param manager Entry point to SecurityManager.
     */
    public static void putExemptionStandardAssignment(com.azure.resourcemanager.security.SecurityManager manager) {
        manager.standardAssignments().define("1f3afdf9-d0c9-4c3d-847f-89da613e70a8").withExistingResourceId(
            "subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA")
            .withDisplayName("Test exemption").withDescription("Exemption description")
            .withAssignedStandard(new AssignedStandardItem()
                .withId("/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"))
            .withEffect(Effect.EXEMPT).withExpiresOn(OffsetDateTime.parse("2022-05-01T19:50:47.083633Z"))
            .withExemptionData(
                new StandardAssignmentPropertiesExemptionData().withExemptionCategory(ExemptionCategory.WAIVER)
                    .withAssignedAssessment(new AssignedAssessmentItem().withAssessmentKey("fakeTokenPlaceholder")))
            .create();
    }
}

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

from azure.identity import DefaultAzureCredential

from azure.mgmt.security import SecurityCenter

"""
# PREREQUISITES
    pip install azure-identity
    pip install azure-mgmt-security
# USAGE
    python put_exemption_standard_assignment.py

    Before run the sample, please set the values of the client ID, tenant ID and client secret
    of the AAD application as environment variables: AZURE_CLIENT_ID, AZURE_TENANT_ID,
    AZURE_CLIENT_SECRET. For more info about how to get the value, please see:
    https://docs.microsoft.com/azure/active-directory/develop/howto-create-service-principal-portal
"""


def main():
    client = SecurityCenter(
        credential=DefaultAzureCredential(),
        subscription_id="SUBSCRIPTION_ID",
    )

    response = client.standard_assignments.create(
        resource_id="subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA",
        standard_assignment_name="1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
        standard_assignment={
            "properties": {
                "assignedStandard": {
                    "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
                },
                "description": "Exemption description",
                "displayName": "Test exemption",
                "effect": "Exempt",
                "exemptionData": {
                    "assignedAssessment": {"assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"},
                    "exemptionCategory": "waiver",
                },
                "expiresOn": "2022-05-01T19:50:47.083633Z",
            }
        },
    )
    print(response)


# x-ms-original-file: specification/security/resource-manager/Microsoft.Security/stable/2024-08-01/examples/StandardAssignments/PutExemptionStandardAssignment.json
if __name__ == "__main__":
    main()

To use the Azure SDK library in your project, see this documentation. To provide feedback on this code sample, open a GitHub issue

示例响应

状态代码:: 200

{
  "id": "/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "properties": {
    "displayName": "Test exemption",
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "effect": "Exempt",
    "expiresOn": "2022-05-01T19:50:47.083633Z",
    "exemptionData": {
      "exemptionCategory": "waiver",
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      }
    },
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

状态代码:: 201

{
  "id": "/subscriptions/212f9889-769e-45ae-ab43-6da33674bd26/resourceGroups/ANAT_TEST_RG/providers/Microsoft.Compute/virtualMachines/anatTestE2LA/Microsoft.Security/standardAssignments/1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "name": "1f3afdf9-d0c9-4c3d-847f-89da613e70a8",
  "type": "Microsoft.Security/standardAssignments",
  "properties": {
    "displayName": "Test exemption",
    "description": "Exemption description",
    "assignedStandard": {
      "id": "/providers/Microsoft.Security/securityStandards/1f3afdf9-d0c9-4c3d-847f-89da613e70a8"
    },
    "effect": "Exempt",
    "expiresOn": "2022-05-01T19:50:47.083633Z",
    "exemptionData": {
      "exemptionCategory": "waiver",
      "assignedAssessment": {
        "assessmentKey": "1195afff-c881-495e-9bc5-1486211ae03f"
      }
    },
    "metadata": {
      "createdBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "createdOn": "2022-11-10T08:31:26.7993124Z",
      "lastUpdatedBy": "c23b5354-ff0a-4b2a-9f92-6f144effd936",
      "lastUpdatedOn": "2022-11-10T08:31:26.7993124Z"
    }
  }
}

定义

名称	说明
AssignedAssessmentItem	描述安全评估对象引用的属性（按密钥）
AssignedStandardItem	描述标准赋值对象引用的属性
attestationComplianceState	此分配的证明类别
AttestationData	有关具有证明效果的分配的其他数据
AttestationEvidence	描述工作分配证明的属性
effect	此分配的预期效果（审核/豁免/证明）
ErrorAdditionalInfo	资源管理错误附加信息。
ErrorDetail	错误详细信息。
ErrorResponse	错误响应
exemptionCategory	此分配的豁免类别
ExemptionData	有关具有豁免效果的分配的其他数据
StandardAssignment	在给定范围内对资源组进行安全分配
StandardAssignmentMetadata	标准分配元数据

AssignedAssessmentItem

Object

描述安全评估对象引用的属性（按密钥）

名称	类型	说明
assessmentKey	string	安全评估对象的唯一密钥

AssignedStandardItem

Object

描述标准赋值对象引用的属性

名称	类型	说明
id	string	Microsoft.Security/standard 对象的完整 resourceId

attestationComplianceState

枚举

此分配的证明类别

值	说明
unknown
compliant
nonCompliant

AttestationData

Object

有关具有证明效果的分配的其他数据

名称	类型	说明
assignedAssessment	AssignedAssessmentItem	在给定范围内应用于此标准分配的键的组件项
complianceDate	string (date-time)	证明符合性日期
complianceState	attestationComplianceState	此分配的证明类别
evidence	AttestationEvidence[]	证明证据的链接数组

AttestationEvidence

Object

描述工作分配证明的属性

名称	类型	说明
description	string	证据的说明
sourceUrl	string	证据的源 URL

effect

枚举

此分配的预期效果（审核/豁免/证明）

值	说明
Audit
Exempt
Attest

ErrorAdditionalInfo

Object

资源管理错误附加信息。

名称	类型	说明
info	object	其他信息。
type	string	其他信息类型。

ErrorDetail

Object

错误详细信息。

名称	类型	说明
additionalInfo	ErrorAdditionalInfo[]	错误附加信息。
code	string	错误代码。
details	ErrorDetail[]	错误详细信息。
message	string	错误消息。
target	string	错误目标。

ErrorResponse

Object

错误响应

名称	类型	说明
error	ErrorDetail	错误对象。

exemptionCategory

枚举

此分配的豁免类别

值	说明
waiver
mitigated

ExemptionData

Object

有关具有豁免效果的分配的其他数据

名称	类型	说明
assignedAssessment	AssignedAssessmentItem	在给定范围内应用于此标准分配的键的组件项
exemptionCategory	exemptionCategory	此分配的豁免类别