Skip to content

Commit

Permalink
Merge pull request #15 from ndergal1/ndergal/fix/update-readme
Browse files Browse the repository at this point in the history
Fix README.md and replaces CSPM with FCS
  • Loading branch information
ndergal1 authored Jan 13, 2025
2 parents 30daaa8 + 2cf3183 commit 994fe15
Show file tree
Hide file tree
Showing 12 changed files with 136 additions and 168 deletions.
245 changes: 109 additions & 136 deletions README.md

Large diffs are not rendered by default.

6 changes: 3 additions & 3 deletions SECURITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,8 @@ We have multiple avenues to receive security-related vulnerability reports.

Please report suspected security vulnerabilities by:

+ Submitting a [bug](https://github.com/CrowdStrike/azure-cspm-registration-bicep/issues/new/)
+ Submitting a [pull request](https://github.com/CrowdStrike/azure-cspm-registration-bicep/pulls) to potentially resolve the issue
+ Submitting a [bug](https://github.com/CrowdStrike/fcs-azure-bicep/issues/new/)
+ Submitting a [pull request](https://github.com/CrowdStrike/fcs-azure-bicep/pulls) to potentially resolve the issue
+ Sending an email to __[email protected]__

## Disclosure and mitigation process
Expand All @@ -30,7 +30,7 @@ process, involving the following steps:

## Comments

If you have suggestions on how this process could be improved, please let us know by [summarizing your thoughts in an issue](https://github.com/CrowdStrike/azure-cspm-registration-bicep/issues/new/).
If you have suggestions on how this process could be improved, please let us know by [summarizing your thoughts in an issue](https://github.com/CrowdStrike/fcs-azure-bicep/issues/new/).

<BR/><BR/>

Expand Down
4 changes: 2 additions & 2 deletions SUPPORT.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,11 @@

# Support

This is a community-driven, open source project designed to register Falcon CSPM with Azure using Bicep. While not a formal CrowdStrike product, This project is maintained by CrowdStrike and supported in partnership with the open source developer community.
This is a community-driven, open source project designed to register Falcon Cloud Security with Azure using Bicep. While not a formal CrowdStrike product, This project is maintained by CrowdStrike and supported in partnership with the open source developer community.

## Issue Reporting and Questions

Issues may be reported [here](https://github.com/CrowdStrike/azure-cspm-registration-bicep/issues/new/choose) and are used to track bugs, documentation and link updates, enhancement requests and security concerns.
Issues may be reported [here](https://github.com/CrowdStrike/fcs-azure-bicep/issues/new/choose) and are used to track bugs, documentation and link updates, enhancement requests and security concerns.

## Support Escalation

Expand Down
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
targetScope = 'managementGroup'

/*
This Bicep template deploys CrowdStrike CSPM integration for
This Bicep template deploys CrowdStrike Falcon Cloud Security integration for
Indicator of Misconfiguration (IOM) and Indicator of Attack (IOA) assessment.
Copyright (c) 2024 CrowdStrike, Inc.
*/

/* Parameters */
@description('Targetscope of the CSPM integration.')
@description('Targetscope of the Falcon Cloud Security integration.')
@allowed([
'ManagementGroup'
'Subscription'
Expand All @@ -19,7 +19,7 @@ param targetScope string = 'ManagementGroup'
param defaultSubscriptionId string

@description('The prefix to be added to the deployment name.')
param deploymentNamePrefix string = 'cs-cspm'
param deploymentNamePrefix string = 'cs-fcs'

@description('The suffix to be added to the deployment name.')
param deploymentNameSuffix string = utcNow()
Expand Down Expand Up @@ -74,7 +74,6 @@ param location string = deployment().location
param tags object = {
'cstag-vendor': 'crowdstrike'
'cstag-product': 'fcs'
'cstag-purpose': 'cspm'
}

/* IOM-specific parameter */
Expand Down Expand Up @@ -131,7 +130,7 @@ module iomAzureManagementGroup 'modules/iom/azureManagementGroupRoleAssignment.b
}
}

module ioaAzureSubscription 'modules/cs-cspm-ioa-deployment.bicep' = if (deployIOA && targetScope == 'ManagementGroup') {
module ioaAzureSubscription 'modules/cs-fcs-ioa-deployment.bicep' = if (deployIOA && targetScope == 'ManagementGroup') {
name: '${deploymentNamePrefix}-ioa-azureSubscription-${deploymentNameSuffix}'
scope: subscription(defaultSubscriptionId) // DO NOT CHANGE
params:{
Expand Down
Original file line number Diff line number Diff line change
@@ -1,22 +1,22 @@
targetScope = 'subscription'

/*
This Bicep template deploys CrowdStrike CSPM integration for
This Bicep template deploys CrowdStrike Falcon Cloud Security integration for
Indicator of Misconfiguration (IOM) and Indicator of Attack (IOA) assessment.
Copyright (c) 2024 CrowdStrike, Inc.
*/

/* Parameters */
@description('Targetscope of the CSPM integration.')
@description('Targetscope of the Falcon Cloud Security integration.')
@allowed([
'ManagementGroup'
'Subscription'
])
param targetScope string = 'Subscription'

@description('The prefix to be added to the deployment name.')
param deploymentNamePrefix string = 'cs-cspm'
param deploymentNamePrefix string = 'cs-fcs'

@description('The suffix to be added to the deployment name.')
param deploymentNameSuffix string = utcNow()
Expand Down Expand Up @@ -74,7 +74,6 @@ param location string = deployment().location
param tags object = {
'cstag-vendor': 'crowdstrike'
'cstag-product': 'fcs'
'cstag-purpose': 'cspm'
}

/* IOM-specific parameter */
Expand Down Expand Up @@ -120,7 +119,7 @@ module iomAzureSubscription 'modules/iom/azureSubscription.bicep' = if (deployIO
}
}

module ioaAzureSubscription 'modules/cs-cspm-ioa-deployment.bicep' = if (deployIOA && targetScope == 'Subscription') {
module ioaAzureSubscription 'modules/cs-fcs-ioa-deployment.bicep' = if (deployIOA && targetScope == 'Subscription') {
name: '${deploymentNamePrefix}-ioa-azureSubscription-${deploymentNameSuffix}'
scope: subscription(defaultSubscriptionId)
params:{
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ targetScope = 'subscription'
param location string = deployment().location

@description('The prefix to be added to the deployment name.')
param deploymentNamePrefix string = 'cs-cspm-ioa'
param deploymentNamePrefix string = 'cs-fcs-ioa'

@description('The suffix to be added to the deployment name.')
param deploymentNameSuffix string = utcNow()
Expand All @@ -24,7 +24,6 @@ param resourceGroupName string = 'cs-ioa-group' // DO NOT CHANGE - used for regi
param tags object = {
'cstag-vendor': 'crowdstrike'
'cstag-product': 'fcs'
'cstag-purpose': 'cspm'
}

@description('The CID for the Falcon API.')
Expand Down Expand Up @@ -357,7 +356,7 @@ module entraDiagnosticSetttings 'ioa/entraLog.bicep' = if (deployEntraLogDiagnos
}
}

/* Set CrowdStrike CSPM Default Azure Subscription */
/* Set CrowdStrike Falcon Cloud Security Default Azure Subscription */
module setAzureDefaultSubscription 'ioa/defaultSubscription.bicep' = {
scope: scope
name: '${deploymentNamePrefix}-defaultSubscription-${deploymentNameSuffix}'
Expand Down
2 changes: 1 addition & 1 deletion modules/ioa/defaultSubscription.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ resource setAzureDefaultSubscription 'Microsoft.Resources/deploymentScripts@2023
}
]
arguments: '-AzureTenantId ${tenant().tenantId} -AzureSubscriptionId ${subscription().subscriptionId}'
scriptContent: loadTextContent('../../scripts/Set-FalconCspmAzureDefaultSubscription.ps1')
scriptContent: loadTextContent('../../scripts/Set-FcsAzureDefaultSubscription.ps1')
retentionInterval: 'PT1H'
cleanupPreference: 'OnSuccess'
}
Expand Down
13 changes: 6 additions & 7 deletions modules/iom/azureAccount.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
*/

/* Parameters */
@description('Targetscope of the CSPM integration.')
@description('Targetscope of the Falcon Cloud Security integration.')
@allowed([
'ManagementGroup'
'Subscription'
Expand Down Expand Up @@ -50,13 +50,12 @@ param location string = resourceGroup().location
param tags object = {
'cstag-vendor': 'crowdstrike'
'cstag-product': 'fcs'
'cstag-purpose': 'cspm'
}

/* Resources */
/* Register Azure account(s) in Falcon CSPM */
resource falconCspmAzureAccount 'Microsoft.Resources/deploymentScripts@2023-08-01' = {
name: 'cs-cspm-iom-${subscription().subscriptionId}'
/* Register Azure account(s) in Falcon Falcon Cloud Security */
resource fcsAzureAccount 'Microsoft.Resources/deploymentScripts@2023-08-01' = {
name: 'cs-fcs-iom-${subscription().subscriptionId}'
location: location
tags: tags
kind: 'AzurePowerShell'
Expand Down Expand Up @@ -85,11 +84,11 @@ resource falconCspmAzureAccount 'Microsoft.Resources/deploymentScripts@2023-08-0
}
]
arguments: '-AzureAccountType ${azureAccountType} -AzureTenantId ${tenant().tenantId} -AzureSubscriptionId ${subscription().subscriptionId} -TargetScope ${targetScope} -UseExistingAppRegistration ${useExistingAppRegistration}'
scriptContent: loadTextContent('../../scripts/New-FalconCspmAzureAccount.ps1')
scriptContent: loadTextContent('../../scripts/New-FcsAzureAccount.ps1')
retentionInterval: 'PT1H'
cleanupPreference: 'OnSuccess'
}
}

/* Outputs */
output azurePublicCertificate string = falconCspmAzureAccount.properties.outputs.public_certificate
output azurePublicCertificate string = fcsAzureAccount.properties.outputs.public_certificate
4 changes: 2 additions & 2 deletions modules/iom/azureAppRegistration.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ extension microsoftGraphV1

/* Parameters */
@description('Name of the Application Registration.')
param applicationName string = 'CrowdStrikeCSPM-${uniqueString(tenant().tenantId)}'
param applicationName string = 'CrowdStrikeFCS-${uniqueString(tenant().tenantId)}'

@secure()
@description('Public certificate data.')
Expand All @@ -21,7 +21,7 @@ param publicCertificate string = ''
param grantAdminConsent bool = true

/* Variables */
var applicationDescription = 'CrowdStrike Falcon CSPM'
var applicationDescription = 'CrowdStrike Falcon Cloud Security'
var redirectUris = ['https://falcon.crowdstrike.com/cloud-security/registration/app/cspm/cspm_accounts']

var applicationPermissions = [
Expand Down
3 changes: 1 addition & 2 deletions modules/iom/azureSubscription.bicep
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ extension microsoftGraphV1
param targetScope string

@description('The prefix to be added to the deployment name.')
param deploymentNamePrefix string = 'cs-cspm-iom'
param deploymentNamePrefix string = 'cs-fcs-iom'

@description('The suffix to be added to the deployment name.')
param deploymentNameSuffix string = utcNow()
Expand Down Expand Up @@ -71,7 +71,6 @@ param location string = deployment().location
param tags object = {
'cstag-vendor': 'crowdstrike'
'cstag-product': 'fcs'
'cstag-purpose': 'cspm'
}

/* Create Azure Resource Group for IOM resources */
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -87,10 +87,10 @@ try {
# Request Falcon API access token
Request-FalconToken -ClientId $Env:FALCON_CLIENT_ID -ClientSecret $Env:FALCON_CLIENT_SECRET -Cloud $($Env:FALCON_CLOUD_REGION.ToLower())

# Register Azure account in Falcon CSPM
# Register Azure account in Falcon Cloud Security
New-FalconCloudAzureAccount -TenantId $AzureTenantId -SubscriptionId $AzureSubscriptionId -ClientId $Env:AZURE_CLIENT_ID -AccountType $AzureAccountType -YearsValid $AzureYearsValid

# Register Azure Management Group in Falcon CSPM
# Register Azure Management Group in Falcon Cloud Security
if ($TargetScope -eq 'ManagementGroup') {
New-FalconCloudAzureGroup -TenantId $AzureTenantId -DefaultSubscriptionId $AzureSubscriptionId
}
Expand Down
File renamed without changes.

0 comments on commit 994fe15

Please sign in to comment.