cartography icon indicating copy to clipboard operation
cartography copied to clipboard

feat(azure): Add shared tag support to Network, Security Center, Reso…

Open janithashri opened this issue 1 month ago • 0 comments

Summary

This pull request continues the expansion of the shared Azure Tag ingestion pattern, adding support for four key services: Network, Security Center, Resource Groups, and SQL.

It also standardizes error handling in these modules (fail loudly on auth errors, handle transient errors gracefully) and removes sensitive logging.

  • New Relationships:
    • (AzureVirtualNetwork)-[:TAGGED]->(AzureTag)
    • (AzureNetworkSecurityGroup)-[:TAGGED]->(AzureTag)
    • (AzureSecurityAssessment)-[:TAGGED]->(AzureTag)
    • (AzureResourceGroup)-[:TAGGED]->(AzureTag)
    • (AzureSQLServer)-[:TAGGED]->(AzureTag)

Description

  1. Network: Updated network.py to ingest tags for Virtual Networks and Network Security Groups.
  2. Security Center: Updated security_center.py to ingest tags for Security Assessments.
  3. Resource Groups: Updated resource_groups.py to ingest tags for Resource Groups.
  4. SQL: Updated sql.py to ingest tags for SQL Servers.
  5. Testing: Added integration tests and updated mock data for all four services to verify tag ingestion and relationship creation.

Related issues or links

  • Addresses part of #1736

Checklist

  • [x] Update/add unit or integration tests.
  • [ ] Include a screenshot showing what the graph looked like before and after your changes.
  • [ ] Include console log trace showing what happened before and after your changes.
  • [x] Update the schema and readme.
  • [x] Use the NodeSchema data model.
  • [x] Confirm that the linter actually passes.

janithashri avatar Nov 26 '25 10:11 janithashri