Kunaal Sikka

*Ingest Entra users Department and Manager* *Description*: In the Entra module, the Department field is not ingested in the current implementation. It appears to be [here](https://github.com/cartography-cncf/cartography/blob/a66f98acf9ddd8b22078962b7a3e3848f6309cca/cartography/intel/entra/users.py#L84), but the MSFT graph...

Anonymous access vs Internet exposure

2

*Anonymous access (IAM/Resource policy access) vs Internet exposure (network level access)* *Description*: I fear that anonymous access may be conflated with internet access in unintuitive ways. While reviewing #1446 I...

Support additional AWS resource types from CloudGoat scenarios

10

**Description**: Cartography is missing a number of AWS resource types that are required to fully ingest and visualize CloudGoat scenarios. Adding these will enable users to run through CloudGoat tutorials...

## Summary - mark ECS tasks internet exposed when their host EC2 instance is exposed - run new analysis job automatically - document `exposed_internet` for ECSTask ## Testing - `make...

Use GH Apps instead of a Member with a PAT

2

*Move to GH Apps*: *Use GH apps instead of a member with a PAT* *Description*: To auth to GitHub today Cartography uses a GH member with a PAT as a...

docs(azure): add RBAC schema documentation

1

## Summary - Add documentation for Azure RBAC nodes introduced in PR #1950 - Update mermaid diagram to include RBAC relationships - Document `AzureRoleAssignment`, `AzureRoleDefinition`, and `AzurePermissions` nodes - Include...

### Summary Add support for Azure Network Interfaces and Public IP Addresses to enable discovery of VMs with public IPs. **New nodes:** - `AzureNetworkInterface` - Network interface cards attached to...

# Feature Request: AWS CloudFront Support ## Description Add support for ingesting AWS CloudFront distributions and their related resources into the cartography graph. CloudFront is AWS's content delivery network (CDN)...

## Summary Closes #2121 Adds support for GitHub Actions entities to Cartography: - **GitHubWorkflow** nodes - Workflows defined in repositories - **GitHubEnvironment** nodes - Deployment environments for repositories - **GitHubActionsSecret**...

## Summary Add support for ingesting AWS SageMaker resources into Cartography. Amazon SageMaker is AWS's fully managed machine learning platform for building, training, and deploying ML models. This feature would...