Skip to content

Commit

Permalink
review fixes
Browse files Browse the repository at this point in the history
  • Loading branch information
Aboli-msft committed Jun 14, 2023
1 parent 68b337e commit bb6a5f4
Show file tree
Hide file tree
Showing 11 changed files with 29 additions and 22 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
Please follow the below mentioned steps to add new controls based on Microsoft Defender for Cloud (MDC) Assessment/Recommendation:

**Step 0:** Following prerequisites are required to add new control.
1. This feature is not enabled by default. If you have not enabled this feature in your AzTS setup yet, please follow steps mentioned [here](Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet).
1. By default, CMET(Control metadata editor tool) feature is not turned on. If you haven't enabled it in your AzTS setup yet, please follow the steps provided [here](Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet) to enable it.

2. CMET (Control metadata editor tool) is only accessible to privileged users based on AzTS API configurations. Please follow the steps mentioned [here](Prerequisites.md#access-to-cmet-control-metadata-editor-tool) to add yourself as privileged user (This is only required once per user).

Expand Down
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
## Add new control based on custom Azure policy
Please follow the below mentioned steps to add new controls based on custom Azure Policy:

**Step 0:** Following prerequisites are required to add new control.
1. This feature is not enabled by default. If you have not enabled this feature in your AzTS setup yet, please follow steps mentioned [here](Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet).
**Step 0:** Following prerequisites are required to add a new control.
1. By default, CMET(Control metadata editor tool) feature is not turned on. If you haven't enabled it in your AzTS setup yet, please follow the steps provided [here](Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet) to enable it.

2. CMET (Control metadata editor tool) is only accessible to privileged users based on AzTS API configurations. Please follow the steps mentioned [here](Prerequisites.md#access-to-cmet-control-metadata-editor-tool) to add yourself as privileged user (This is only required once per user).

Expand Down Expand Up @@ -46,12 +46,12 @@ Please follow the below mentioned steps to add new controls based on custom Azur

![Open new control window](../../Images/06_ExtendingAzTS_Add_New_Control.png)

**Step 6:** Select the **Service/Feature** for which you want to add new control.
**Step 6:** Select the **Service/Feature** for which you want to add a new control.
> **Note:** Currently addition of new controls is only supported for existing services evaluated by AzTS.
![Select Feature Name](../../Images/06_ExtendingAzTS_NewControl_Feature.png)

**Step 7:** Select either one of the existing **Security Domain** for the control or if you want to add new Security Domain, type required domain in text field.
**Step 7:** Select either one of the existing **Security Domain** for the control or if you want to add a new Security Domain, type required domain in text field.

![Select Security Domain](../../Images/06_ExtendingAzTS_NewControl_Security_Domain.png)

Expand Down
21 changes: 13 additions & 8 deletions 06-Customizing AzTS for your org/Extending AzTS/FeaturesInCMET.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
## Features in CMET
- ### Bulk Edit

With Bulk Edit feature, custom tags can be added to more than 1 controls at a time.
The Bulk Edit feature allows you to add custom tags to multiple controls simultaneously.

### **Enabling Bulk Edit feature in CMET**

Expand All @@ -27,7 +27,7 @@ Please follow below steps to add these settings.
Once Bulk Edit Feature is enabled, follow below steps to add custom tag(s) for set of controls.

1. Open AzTS UI in new browser window.
2. Open CMET editor (for this user will require editor permission over CMET, if you dont have permission, please follow steps mentioned [here](../Extending%20AzTS/Prerequisites.md#access-to-cmet-control-metadata-editor-tool)).
2. Open CMET editor (To open the CMET editor, you need to have editor permissions. If you don't have the required permission, please follow the steps mentioned [here](../Extending%20AzTS/Prerequisites.md#access-to-cmet-control-metadata-editor-tool)).

![Resources](../../Images/06_BulkEdit_OpenCMET.png)

Expand All @@ -48,11 +48,11 @@ Once Bulk Edit Feature is enabled, follow below steps to add custom tag(s) for s
![Resources](../../Images/06_BulkEdit_Update.png)

7. Close the edit popup after bulk updates success message is displayed.
7. After the success message for bulk updates is displayed, please close the edit popup.

![Resources](../../Images/06_BulkEdit_UpdateSuccess.png)

8. Currently after adding the tags to required controls, Baseline control inventory needs to be triggered from Metadata Aggregator function list.
8. Currently, after adding the tags to the necessary controls, you need to trigger the Baseline control inventory from the Metadata Aggregator function list.

- Go to AzTS Metadata Aggregator function app (AzSK-AzTS-MetadataAggregator-xxxxx) and update app settings 'WebJobConfigurations__ForceFetch' with value as true. Click 'OK'.
![Resources](../../Images/06_BulkEdit_MAUpdate_1.png)
Expand All @@ -76,16 +76,21 @@ Once Bulk Edit Feature is enabled, follow below steps to add custom tag(s) for s


### **Validating custom tags added using Bulk Edit:**
Once custom tag has been added for set of controls, follow below validation steps:
To search controls by a newly added tag value, such as 'LearningBaselineTest' in this example, follow these steps:

1. Refresh CMET editor view.
1. Open the CMET editor in new browser window (it might take approx 5 min to reflect newly added tag)

![Resources](../../Images/06_BulkEdit_Refresh.png)
2. Look for the search textbox within the editor.

2. Search controls by newly added tag value (like ‘LearningBaselineTest in example), this will list all the controls which have this tag.
3. Enter the tag value 'LearningBaselineTest' in the search field.

4. The CMET editor will display a list of controls that have the specified tag value, allowing you to view and manage them accordingly.
![Resources](../../Images/06_BulkEdit_FilterControls.png)

By following these steps, you can easily search for controls based on a specific tag value like 'LearningBaselineTest'.






Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
## Prerequisite AzTS configurations to enable Control Metadata Editor tool(CMET)


Few application settings need to be configured for AzTS Function Apps/WebApps to enable Control Metadata Editor tool(CMET).These can be configured either from Azure portal or using the helper script. After these application settings are configured, please add users to Privileged editor roles using steps mentioned [here](#access-to-cmet-control-metadata-editor-tool).
To enable the Control Metadata Editor tool (CMET), you need to configure a few application settings in for AzTS Function Apps/WebApps. This can be done either through the Azure portal or by using the helper script. Once these application settings are configured, please follow the steps mentioned [here](#access-to-cmet-control-metadata-editor-tool) to add users to Privileged editor roles.

- Using Azure Portal
1. Open the [Azure portal](https://portal.azure.com/).
Expand Down Expand Up @@ -63,7 +63,7 @@ Below mentioned appsettings are required for enabling CMET:

## Access to CMET (Control metadata editor tool)

Only the privileged users can access CMET to update control metadata or to add new control. To elevate any user to privileged role kindly follow the steps mentioned below:
Only privileged users have access to CMET for updating control metadata or adding new controls. To elevate a user to a privileged role, please follow the steps outlined below:

- Open the [Azure portal](https://portal.azure.com/).
- Navigate to AzTS host subscription -> AzTS host resource group.
Expand Down
7 changes: 4 additions & 3 deletions 06-Customizing AzTS for your org/Extending AzTS/Readme.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,9 @@
## Customizing AzTS for your org

### Control Metadata Editor tool
CMET (Control Metadata Editor Tool) is a tool that can be used by privileged users (mostly by admins maintaining AzTS setup for organization)to customize AzTS for organization. It provides capabilities to update control metadata (Tags, Display Name, control settings(if applicable)), enable or disable control, etc.
This feature is disabled by default. To enable this feature for your AzTS setup, please follow steps mentioned [here](../Extending%20AzTS/Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet).
CMET (Control Metadata Editor Tool) is a tool designed for privileged users, typically administrators responsible for maintaining the AzTS setup for an organization. It allows customization of AzTS by providing features such as updating control metadata (tags, display name, control settings if applicable), enabling or disabling controls, and more.

Please note that this feature is disabled by default. To enable CMET for your AzTS setup, kindly follow the steps mentioned [here](../Extending%20AzTS/Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet) to enable it.

CMET (Control metadata editor tool) is only accessible to privileged users based on AzTS API configurations. Please follow the steps mentioned [here](../06-Customizing%20AzTS%20for%20your%20org/Extending%20AzTS/Prerequisites.md#access-to-cmet-control-metadata-editor-tool) to add yourself as privileged user.(This is only required once per user).

Expand All @@ -17,7 +18,7 @@ Once CMET is enabled, you can use below features:
- [Add new control based on MDC Assessment](/06-Customizing%20AzTS%20for%20your%20org/Extending%20AzTS/AddControlForAssessment.md)
- [Update control metadata for existing control](../06-Customizing%20AzTS%20for%20your%20org/Extending%20AzTS/UpdateControlMetadata.md)

If you are looking for updating multiple controls at once, please follow steps mentioned [here](../06-Customizing%20AzTS%20for%20your%20org/Extending%20AzTS/FeaturesInCMET.md#bulk-edit)
If you need to update multiple controls at once, please follow the steps outlined [here](../06-Customizing%20AzTS%20for%20your%20org/Extending%20AzTS/FeaturesInCMET.md#bulk-edit).



Expand Down
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
## Update existing control metadata
Control metadata like Display Name, Category, Tags, Description, Recommendations can be updated using Control Metadata Editor Tool(CMET). Please follow the below mentioned steps to update control metadata:
To update control metadata, including fields like Display Name, Category, Tags, Description, and Recommendations, you can utilize the Control Metadata Editor Tool (CMET). Follow the steps below to update control metadata:

**Step 0:** Following prerequisites are required:
1. CMET(Control metadata editor tool) is not enabled in AzTS setup by default. To enable this feature, please follow steps mentioned [here](Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet).
1. By default, CMET(Control metadata editor tool) feature is not turned on. If you haven't enabled it in your AzTS setup yet, please follow the steps provided [here](Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet) to enable it.

2. CMET is only accessible to privileged users based on AzTS API configurations. Please follow the steps mentioned [here](Prerequisites.md#access-to-cmet-control-metadata-editor-tool) to add yourself as privileged user (This is only required once per user).

Expand Down
5 changes: 3 additions & 2 deletions 06-Customizing AzTS for your org/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,9 @@
## Customizing AzTS for your org

### Control Metadata Editor tool
CMET (Control Metadata Editor Tool) is a tool that can be used by privileged users (mostly by admins maintaining AzTS setup for organization)to customize AzTS for organization. It provides capabilities to update control metadata (Tags, Display Name, control settings(if applicable)), enable or disable control, etc.
This feature is disabled by default. To enable this feature for your AzTS setup, please follow steps mentioned [here](../06-Customizing%20AzTS%20for%20your%20org/Extending%20AzTS/Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet).
CMET (Control Metadata Editor Tool) is a tool designed for privileged users, typically administrators responsible for maintaining the AzTS setup for an organization. It allows customization of AzTS by providing features such as updating control metadata (tags, display name, control settings if applicable), enabling or disabling controls, and more.

Please note that this feature is disabled by default. To enable CMET for your AzTS setup, kindly follow the steps mentioned [here](../06-Customizing%20AzTS%20for%20your%20org/Extending%20AzTS/Prerequisites.md#prerequisite-azts-configurations-to-enable-control-metadata-editor-toolcmet)to enable it.

CMET (Control metadata editor tool) is only accessible to privileged users based on AzTS API configurations. Please follow the steps mentioned [here](../06-Customizing%20AzTS%20for%20your%20org/Extending%20AzTS/Prerequisites.md#access-to-cmet-control-metadata-editor-tool) to add yourself as privileged user.(This is only required once per user).

Expand Down
Binary file modified Images/06_BulkEdit_MAUpdate_2.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified Images/06_BulkEdit_MAUpdate_3.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified Images/06_BulkEdit_MAUpdate_4.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified Images/06_BulkEdit_MAUpdate_6.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

0 comments on commit bb6a5f4

Please sign in to comment.